@autobe/agent 0.25.7 → 0.27.0

package/lib/orchestrate/interface/orchestrateInterfaceOperations.js

@@ -119,8 +119,8 @@ function process(ctx, props) {
         const pointer = {
             value: null,
         };
-        const { tokenUsage } = yield ctx.conversate({
-            source: "interfaceOperations",
+        const { metric, tokenUsage } = yield ctx.conversate({
+            source: "interfaceOperation",
             histories: (0, transformInterfaceOperationHistories_1.transformInterfaceOperationHistories)({
                 state: ctx.state(),
                 endpoints: props.endpoints.toJSON(),
@@ -128,31 +128,31 @@ function process(ctx, props) {
             }),
             controller: createController({
                 model: ctx.model,
-                roles: (_b = (_a = ctx.state().analyze) === null || _a === void 0 ? void 0 : _a.roles.map((it) => it.name)) !== null && _b !== void 0 ? _b : [],
+                actors: (_b = (_a = ctx.state().analyze) === null || _a === void 0 ? void 0 : _a.actors.map((it) => it.name)) !== null && _b !== void 0 ? _b : [],
                 build: (operations) => {
                     var _a;
                     (_a = pointer.value) !== null && _a !== void 0 ? _a : (pointer.value = []);
                     const matrix = operations.map((op) => {
-                        if (op.authorizationRoles.length === 0)
+                        if (op.authorizationActors.length === 0)
                             return [
                                 Object.assign(Object.assign({}, op), { path: "/" +
                                         [prefix, ...op.path.split("/")]
                                             .filter((it) => it !== "")
-                                            .join("/"), authorizationRole: null, authorizationType: null, prerequisites: [] }),
+                                            .join("/"), authorizationActor: null, authorizationType: null, prerequisites: [] }),
                             ];
-                        return op.authorizationRoles.map((role) => (Object.assign(Object.assign({}, op), { path: "/" +
-                                [prefix, role, ...op.path.split("/")]
+                        return op.authorizationActors.map((actor) => (Object.assign(Object.assign({}, op), { path: "/" +
+                                [prefix, actor, ...op.path.split("/")]
                                     .filter((it) => it !== "")
-                                    .join("/"), authorizationRole: role, authorizationType: null, prerequisites: [] })));
+                                    .join("/"), authorizationActor: actor, authorizationType: null, prerequisites: [] })));
                     });
                     pointer.value.push(...matrix.flat());
                     props.progress.completed += matrix.flat().length;
                     props.progress.total += operations
                         .map((op) => props.endpoints.has({ path: op.path, method: op.method })
-                        ? op.authorizationRoles.length === 0
+                        ? op.authorizationActors.length === 0
                             ? 0
-                            : op.authorizationRoles.length - 1
-                        : op.authorizationRoles.length)
+                            : op.authorizationActors.length - 1
+                        : op.authorizationActors.length)
                         .reduce((a, b) => a + b, 0);
                 },
             }),
@@ -162,14 +162,15 @@ function process(ctx, props) {
         });
         if (pointer.value === null)
             throw new Error("Failed to create operations."); // never be happened
-        ctx.dispatch(Object.assign(Object.assign({ type: "interfaceOperations", id: (0, uuid_1.v7)(), operations: pointer.value, tokenUsage }, props.progress), { step: (_d = (_c = ctx.state().analyze) === null || _c === void 0 ? void 0 : _c.step) !== null && _d !== void 0 ? _d : 0, created_at: new Date().toISOString() }));
+        ctx.dispatch(Object.assign(Object.assign({ type: "interfaceOperation", id: (0, uuid_1.v7)(), operations: pointer.value, metric,
+            tokenUsage }, props.progress), { step: (_d = (_c = ctx.state().analyze) === null || _c === void 0 ? void 0 : _c.step) !== null && _d !== void 0 ? _d : 0, created_at: new Date().toISOString() }));
         return pointer.value;
     });
 }
 function createController(props) {
     (0, assertSchemaModel_1.assertSchemaModel)(props.model);
     const validate = (next) => {
-        const result = (() => { const _io0 = input => Array.isArray(input.operations) && input.operations.every(elem => "object" === typeof elem && null !== elem && _io1(elem)); const _io1 = input => "string" === typeof input.specification && "string" === typeof input.description && "string" === typeof input.summary && (Array.isArray(input.parameters) && input.parameters.every(elem => "object" === typeof elem && null !== elem && _io2(elem))) && (null === input.requestBody || "object" === typeof input.requestBody && null !== input.requestBody && _io6(input.requestBody)) && (null === input.responseBody || "object" === typeof input.responseBody && null !== input.responseBody && _io7(input.responseBody)) && ("string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name)) && (Array.isArray(input.authorizationRoles) && input.authorizationRoles.every(elem => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) && 1 <= elem.length))) && ("string" === typeof input.path && RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path)) && ("get" === input.method || "post" === input.method || "put" === input.method || "delete" === input.method || "patch" === input.method); const _io2 = input => "string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name) && "string" === typeof input.description && ("object" === typeof input.schema && null !== input.schema && _iu0(input.schema)); const _io3 = input => (undefined === input.minimum || "number" === typeof input.minimum && (Math.floor(input.minimum) === input.minimum && -9223372036854776000 <= input.minimum && input.minimum <= 9223372036854776000)) && (undefined === input.maximum || "number" === typeof input.maximum && (Math.floor(input.maximum) === input.maximum && -9223372036854776000 <= input.maximum && input.maximum <= 9223372036854776000)) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && (Math.floor(input.multipleOf) === input.multipleOf && 0 <= input.multipleOf && input.multipleOf <= 18446744073709552000 && 0 < input.multipleOf)) && "integer" === input.type; const _io4 = input => (undefined === input.minimum || "number" === typeof input.minimum) && (undefined === input.maximum || "number" === typeof input.maximum) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && 0 < input.multipleOf) && "number" === input.type; const _io5 = input => (undefined === input.format || "string" === typeof input.format) && (undefined === input.pattern || "string" === typeof input.pattern) && (undefined === input.contentMediaType || "string" === typeof input.contentMediaType) && (undefined === input.minLength || "number" === typeof input.minLength && (Math.floor(input.minLength) === input.minLength && 0 <= input.minLength && input.minLength <= 18446744073709552000)) && (undefined === input.maxLength || "number" === typeof input.maxLength && (Math.floor(input.maxLength) === input.maxLength && 0 <= input.maxLength && input.maxLength <= 18446744073709552000)) && "string" === input.type; const _io6 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _io7 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _iu0 = input => (() => {
+        const result = (() => { const _iv4 = new Set(["date-time", "password", "regex", "uuid", "email", "hostname", "idn-email", "idn-hostname", "iri", "iri-reference", "ipv4", "ipv6", "uri", "uri-reference", "uri-template", "url", "date", "time", "duration", "json-pointer", "relative-json-pointer"]); const _vv8 = new Set(["date-time", "password", "regex", "uuid", "email", "hostname", "idn-email", "idn-hostname", "iri", "iri-reference", "ipv4", "ipv6", "uri", "uri-reference", "uri-template", "url", "date", "time", "duration", "json-pointer", "relative-json-pointer"]); const _io0 = input => Array.isArray(input.operations) && input.operations.every(elem => "object" === typeof elem && null !== elem && _io1(elem)); const _io1 = input => "string" === typeof input.specification && "string" === typeof input.description && "string" === typeof input.summary && (Array.isArray(input.parameters) && input.parameters.every(elem => "object" === typeof elem && null !== elem && _io2(elem))) && (null === input.requestBody || "object" === typeof input.requestBody && null !== input.requestBody && _io6(input.requestBody)) && (null === input.responseBody || "object" === typeof input.responseBody && null !== input.responseBody && _io7(input.responseBody)) && ("string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name)) && (Array.isArray(input.authorizationActors) && input.authorizationActors.every(elem => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) && 1 <= elem.length))) && ("string" === typeof input.path && RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path)) && ("get" === input.method || "post" === input.method || "put" === input.method || "delete" === input.method || "patch" === input.method); const _io2 = input => "string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name) && "string" === typeof input.description && ("object" === typeof input.schema && null !== input.schema && _iu0(input.schema)); const _io3 = input => (undefined === input.minimum || "number" === typeof input.minimum && (Math.floor(input.minimum) === input.minimum && -9223372036854776000 <= input.minimum && input.minimum <= 9223372036854776000)) && (undefined === input.maximum || "number" === typeof input.maximum && (Math.floor(input.maximum) === input.maximum && -9223372036854776000 <= input.maximum && input.maximum <= 9223372036854776000)) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && (Math.floor(input.multipleOf) === input.multipleOf && 0 <= input.multipleOf && input.multipleOf <= 18446744073709552000 && 0 < input.multipleOf)) && "integer" === input.type; const _io4 = input => (undefined === input.minimum || "number" === typeof input.minimum) && (undefined === input.maximum || "number" === typeof input.maximum) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && 0 < input.multipleOf) && "number" === input.type; const _io5 = input => (undefined === input.format || true === _iv4.has(input.format)) && (undefined === input.pattern || "string" === typeof input.pattern) && (undefined === input.contentMediaType || "string" === typeof input.contentMediaType) && (undefined === input.minLength || "number" === typeof input.minLength && (Math.floor(input.minLength) === input.minLength && 0 <= input.minLength && input.minLength <= 18446744073709552000)) && (undefined === input.maxLength || "number" === typeof input.maxLength && (Math.floor(input.maxLength) === input.maxLength && 0 <= input.maxLength && input.maxLength <= 18446744073709552000)) && "string" === input.type; const _io6 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _io7 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _iu0 = input => (() => {
             if ("number" === input.type)
                 return _io4(input);
             else if ("integer" === input.type)
@@ -182,12 +183,12 @@ function createController(props) {
                 path: _path + ".operations",
                 expected: "Array<IAutoBeInterfaceOperationApplication.IOperation>",
                 value: input.operations
-            })) && input.operations.map((elem, _index4) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
-                path: _path + ".operations[" + _index4 + "]",
+            })) && input.operations.map((elem, _index5) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
+                path: _path + ".operations[" + _index5 + "]",
                 expected: "IAutoBeInterfaceOperationApplication.IOperation",
                 value: elem
-            })) && _vo1(elem, _path + ".operations[" + _index4 + "]", true && _exceptionable) || _report(_exceptionable, {
-                path: _path + ".operations[" + _index4 + "]",
+            })) && _vo1(elem, _path + ".operations[" + _index5 + "]", true && _exceptionable) || _report(_exceptionable, {
+                path: _path + ".operations[" + _index5 + "]",
                 expected: "IAutoBeInterfaceOperationApplication.IOperation",
                 value: elem
             })).every(flag => flag) || _report(_exceptionable, {
@@ -210,12 +211,12 @@ function createController(props) {
                 path: _path + ".parameters",
                 expected: "Array<AutoBeOpenApi.IParameter>",
                 value: input.parameters
-            })) && input.parameters.map((elem, _index5) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
-                path: _path + ".parameters[" + _index5 + "]",
+            })) && input.parameters.map((elem, _index6) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
+                path: _path + ".parameters[" + _index6 + "]",
                 expected: "AutoBeOpenApi.IParameter",
                 value: elem
-            })) && _vo2(elem, _path + ".parameters[" + _index5 + "]", true && _exceptionable) || _report(_exceptionable, {
-                path: _path + ".parameters[" + _index5 + "]",
+            })) && _vo2(elem, _path + ".parameters[" + _index6 + "]", true && _exceptionable) || _report(_exceptionable, {
+                path: _path + ".parameters[" + _index6 + "]",
                 expected: "AutoBeOpenApi.IParameter",
                 value: elem
             })).every(flag => flag) || _report(_exceptionable, {
@@ -246,26 +247,26 @@ function createController(props) {
                 path: _path + ".name",
                 expected: "(string & CamelCasePattern)",
                 value: input.name
-            }), (Array.isArray(input.authorizationRoles) || _report(_exceptionable, {
-                path: _path + ".authorizationRoles",
+            }), (Array.isArray(input.authorizationActors) || _report(_exceptionable, {
+                path: _path + ".authorizationActors",
                 expected: "Array<string & CamelCasePattern & MinLength<1>>",
-                value: input.authorizationRoles
-            })) && input.authorizationRoles.map((elem, _index6) => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) || _report(_exceptionable, {
-                path: _path + ".authorizationRoles[" + _index6 + "]",
+                value: input.authorizationActors
+            })) && input.authorizationActors.map((elem, _index7) => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) || _report(_exceptionable, {
+                path: _path + ".authorizationActors[" + _index7 + "]",
                 expected: "string & CamelCasePattern",
                 value: elem
             })) && (1 <= elem.length || _report(_exceptionable, {
-                path: _path + ".authorizationRoles[" + _index6 + "]",
+                path: _path + ".authorizationActors[" + _index7 + "]",
                 expected: "string & MinLength<1>",
                 value: elem
             })) || _report(_exceptionable, {
-                path: _path + ".authorizationRoles[" + _index6 + "]",
+                path: _path + ".authorizationActors[" + _index7 + "]",
                 expected: "(string & CamelCasePattern & MinLength<1>)",
                 value: elem
             })).every(flag => flag) || _report(_exceptionable, {
-                path: _path + ".authorizationRoles",
+                path: _path + ".authorizationActors",
                 expected: "Array<string & CamelCasePattern & MinLength<1>>",
-                value: input.authorizationRoles
+                value: input.authorizationActors
             }), "string" === typeof input.path && (RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path) || _report(_exceptionable, {
                 path: _path + ".path",
                 expected: "string & Pattern<\"^\\\\/[a-zA-Z0-9\\\\/_{}.-]*$\">",
@@ -366,9 +367,9 @@ function createController(props) {
                 path: _path + ".type",
                 expected: "\"number\"",
                 value: input.type
-            })].every(flag => flag); const _vo5 = (input, _path, _exceptionable = true) => [undefined === input.format || "string" === typeof input.format || _report(_exceptionable, {
+            })].every(flag => flag); const _vo5 = (input, _path, _exceptionable = true) => [undefined === input.format || true === _vv8.has(input.format) || _report(_exceptionable, {
                 path: _path + ".format",
-                expected: "(string | undefined)",
+                expected: "(\"date\" | \"date-time\" | \"duration\" | \"email\" | \"hostname\" | \"idn-email\" | \"idn-hostname\" | \"ipv4\" | \"ipv6\" | \"iri\" | \"iri-reference\" | \"json-pointer\" | \"password\" | \"regex\" | \"relative-json-pointer\" | \"time\" | \"uri\" | \"uri-reference\" | \"uri-template\" | \"url\" | \"uuid\" | undefined)",
                 value: input.format
             }), undefined === input.pattern || "string" === typeof input.pattern || _report(_exceptionable, {
                 path: _path + ".pattern",
@@ -466,23 +467,23 @@ function createController(props) {
         });
         operations.forEach((op, i) => {
             // validate roles
-            if (props.roles.length === 0)
-                op.authorizationRoles = [];
-            else if (op.authorizationRoles.length !== 0 && props.roles.length !== 0)
-                op.authorizationRoles.forEach((role, j) => {
-                    if (props.roles.includes(role) === true)
+            if (props.actors.length === 0)
+                op.authorizationActors = [];
+            else if (op.authorizationActors.length !== 0 && props.actors.length !== 0)
+                op.authorizationActors.forEach((actor, j) => {
+                    if (props.actors.includes(actor) === true)
                         return;
                     errors.push({
-                        path: `$input.operations[${i}].authorizationRoles[${j}]`,
-                        expected: `null | ${props.roles.map((str) => JSON.stringify(str)).join(" | ")}`,
+                        path: `$input.operations[${i}].authorizationActors[${j}]`,
+                        expected: `null | ${props.actors.map((str) => JSON.stringify(str)).join(" | ")}`,
                         description: utils_1.StringUtil.trim `
-              Role "${role}" is not defined in the roles list.
+              Actor "${actor}" is not defined in the roles list.
 
               Please select one of them below, or do not define (\`null\`):  
 
-              ${props.roles.map((role) => `- ${role}`).join("\n")}
+              ${props.actors.map((role) => `- ${role}`).join("\n")}
             `,
-                        value: role,
+                        value: actor,
                     });
                 });
         });
@@ -584,8 +585,8 @@ const collection = {
                                         description: "Functional name of the API endpoint.\n\nThis is a semantic identifier that represents the primary function or\npurpose of the API endpoint. It serves as a canonical name that can be\nused for code generation, SDK method names, and internal references.\n\n## Reserved Word Restrictions\n\nCRITICAL: The name MUST NOT be a TypeScript/JavaScript reserved word, as\nit will be used as a class method name in generated code. Avoid names\nlike:\n\n- `delete`, `for`, `if`, `else`, `while`, `do`, `switch`, `case`, `break`\n- `continue`, `function`, `return`, `with`, `in`, `of`, `instanceof`\n- `typeof`, `void`, `var`, `let`, `const`, `class`, `extends`, `import`\n- `export`, `default`, `try`, `catch`, `finally`, `throw`, `new`\n- `super`, `this`, `null`, `true`, `false`, `async`, `await`\n- `yield`, `static`, `private`, `protected`, `public`, `implements`\n- `interface`, `package`, `enum`, `debugger`\n\nInstead, use alternative names for these operations:\n\n- Use `erase` instead of `delete`\n- Use `iterate` instead of `for`\n- Use `when` instead of `if`\n- Use `cls` instead of `class`\n\n## Standard Endpoint Names\n\nUse these conventional names based on the endpoint's primary function:\n\n- **`index`**: List/search operations that return multiple entities\n\n  - Typically used with PATCH method for complex queries\n  - Example: `PATCH /users` \u2192 `name: \"index\"`\n- **`at`**: Retrieve a specific entity by identifier\n\n  - Typically used with GET method on single resource\n  - Example: `GET /users/{userId}` \u2192 `name: \"at\"`\n- **`create`**: Create a new entity\n\n  - Typically used with POST method\n  - Example: `POST /users` \u2192 `name: \"create\"`\n- **`update`**: Update an existing entity\n\n  - Typically used with PUT method\n  - Example: `PUT /users/{userId}` \u2192 `name: \"update\"`\n- **`erase`**: Delete/remove an entity (NOT `delete` - reserved word!)\n\n  - Typically used with DELETE method\n  - Example: `DELETE /users/{userId}` \u2192 `name: \"erase\"`\n\n## Custom Endpoint Names\n\nFor specialized operations beyond basic CRUD, use descriptive verbs:\n\n- **`activate`**: Enable or turn on a feature/entity\n- **`deactivate`**: Disable or turn off a feature/entity\n- **`approve`**: Approve a request or entity\n- **`reject`**: Reject a request or entity\n- **`publish`**: Make content publicly available\n- **`archive`**: Move to archived state\n- **`restore`**: Restore from archived/deleted state\n- **`duplicate`**: Create a copy of an entity\n- **`transfer`**: Move ownership or change assignment\n- **`validate`**: Validate data or state\n- **`process`**: Execute a business process or workflow\n- **`export`**: Generate downloadable data\n- **`import`**: Process uploaded data\n\n## Naming Guidelines\n\n- MUST use camelCase naming convention\n- Use singular verb forms\n- Be concise but descriptive\n- Avoid abbreviations unless widely understood\n- Ensure the name clearly represents the endpoint's primary action\n- For nested resources, focus on the action rather than hierarchy\n- NEVER use JavaScript/TypeScript reserved words\n\nValid Examples:\n\n- `index`, `create`, `update`, `erase` (single word)\n- `updatePassword`, `cancelOrder`, `publishArticle` (camelCase)\n- `validateEmail`, `generateReport`, `exportData` (camelCase)\n\nInvalid Examples:\n\n- `update_password` (snake_case not allowed)\n- `UpdatePassword` (PascalCase not allowed)\n- `update-password` (kebab-case not allowed)\n\nPath to Name Examples:\n\n- `GET /shopping/orders/{orderId}/items` \u2192 `name: \"index\"` (lists items)\n- `POST /shopping/orders/{orderId}/cancel` \u2192 `name: \"cancel\"`\n- `PUT /users/{userId}/password` \u2192 `name: \"updatePassword\"`\n\n## Uniqueness Rule\n\nThe `name` must be unique within the API's accessor namespace. The\naccessor is formed by combining the path segments (excluding parameters)\nwith the operation name.\n\nAccessor formation:\n\n1. Extract non-parameter segments from the path (remove `{...}` parts)\n2. Join segments with dots\n3. Append the operation name\n\nExamples:\n\n- Path: `/shopping/sale/{saleId}/review/{reviewId}`, Name: `at` \u2192 Accessor:\n  `shopping.sale.review.at`\n- Path: `/users/{userId}/posts`, Name: `index` \u2192 Accessor:\n  `users.posts.index`\n- Path: `/auth/login`, Name: `signIn` \u2192 Accessor: `auth.login.signIn`\n\nEach accessor must be globally unique across the entire API. This ensures\noperations can be uniquely identified in generated SDKs and prevents\nnaming conflicts.\n\n\n@pattern ^[a-z][a-zA-Z0-9]*$",
                                         type: "string"
                                     },
-                                    authorizationRoles: {
-                                        description: "Authorization roles required to access this API operation.\n\nThis field specifies which user roles are allowed to access this\nendpoint. Multiple roles can be specified to allow different types of\nusers to access the same endpoint.\n\n## \u26A0\uFE0F CRITICAL: Role Multiplication Effect\n\n**EACH ROLE IN THIS ARRAY GENERATES A SEPARATE ENDPOINT**\n\n- If you specify `[\"admin\", \"moderator\", \"member\"]`, this creates 3\n  separate endpoints\n- Total generated endpoints = operations \u00D7 average roles.length\n- Example: 100 operations with 3 roles each = 300 actual endpoints\n\n## \uD83D\uDD34 AVOID OVER-GENERATION\n\n**DO NOT create role-specific endpoints when a public endpoint would\nsuffice:**\n\n- \u274C BAD: Separate GET endpoints for admin, member, moderator to view the\n  same public data\n- \u2705 GOOD: Single public endpoint `[]` with role-based filtering in business\n  logic\n\n**DO NOT enumerate all possible roles when the Prisma schema uses a\nsingle User table:**\n\n- If Prisma has a User table with role/permission fields, you likely only\n  need `[\"user\"]`\n- Avoid listing `[\"admin\", \"seller\", \"buyer\", \"moderator\", ...]`\n  unnecessarily\n- The actual role checking happens in business logic, not at the endpoint\n  level\n\n## Naming Convention\n\nDO: Use camelCase for all role names.\n\n## Important Guidelines\n\n- Set to empty array `[]` for public endpoints that require no\n  authentication\n- Set to array with role strings for role-restricted endpoints\n- **MINIMIZE the number of roles per endpoint to prevent explosion**\n- Consider if the endpoint can be public with role-based filtering instead\n- The role names match exactly with the user type/role defined in the\n  database\n- This will be used by the Realize Agent to generate appropriate decorator\n  and authorization logic in the provider functions\n- The controller will apply the corresponding authentication decorator\n  based on these roles\n\n## Examples\n\n- `[]` - Public endpoint, no authentication required (PREFERRED for read\n  operations)\n- `[\"user\"]` - Any authenticated user can access (PREFERRED for\n  user-specific operations)\n- `[\"admin\"]` - Only admin users can access (USE SPARINGLY)\n- `[\"admin\", \"moderator\"]` - Both admin and moderator users can access\n  (AVOID if possible)\n- `[\"seller\"]` - Only seller users can access (ONLY if Seller is a separate\n  table)\n\n## Best Practices\n\n1. **Start with public `[]` for all read operations** unless sensitive data\n   is involved\n2. **Use single role `[\"user\"]` for authenticated operations** and handle\n   permissions in business logic\n3. **Only use multiple roles when absolutely necessary** for different\n   business logic paths\n4. **Remember: Fewer roles = Fewer endpoints = Better performance and\n   maintainability**\n\nNote: The actual authentication/authorization implementation will be\nhandled by decorators at the controller level, and the provider function\nwill receive the authenticated user object with the appropriate type.",
+                                    authorizationActors: {
+                                        description: "Authorization actors required to access this API operation.\n\nThis field specifies which user actors are allowed to access this\nendpoint. Multiple actors can be specified to allow different types of\nusers to access the same endpoint.\n\n## \u26A0\uFE0F CRITICAL: Actor Multiplication Effect\n\n**EACH ACTOR IN THIS ARRAY GENERATES A SEPARATE ENDPOINT**\n\n- If you specify `[\"admin\", \"moderator\", \"member\"]`, this creates 3\n  separate endpoints\n- Total generated endpoints = operations \u00D7 average actors.length\n- Example: 100 operations with 3 actors each = 300 actual endpoints\n\n## \uD83D\uDD34 AVOID OVER-GENERATION\n\n**DO NOT create actor-specific endpoints when a public endpoint would\nsuffice:**\n\n- \u274C BAD: Separate GET endpoints for admin, member, moderator to view the\n  same public data\n- \u2705 GOOD: Single public endpoint `[]` with actor-based filtering in business\n  logic\n\n**DO NOT enumerate all possible actors when the Prisma schema uses a\nsingle User table:**\n\n- If Prisma has a User table with role/permission fields, you likely only\n  need `[\"user\"]`\n- Avoid listing `[\"admin\", \"seller\", \"buyer\", \"moderator\", ...]`\n  unnecessarily\n- The actual actor checking happens in business logic, not at the endpoint\n  level\n\n## Naming Convention\n\nDO: Use camelCase for all actor names.\n\n## Important Guidelines\n\n- Set to empty array `[]` for public endpoints that require no\n  authentication\n- Set to array with actor strings for actor-restricted endpoints\n- **MINIMIZE the number of actors per endpoint to prevent explosion**\n- Consider if the endpoint can be public with actor-based filtering instead\n- The actor names match exactly with the user type/actor defined in the\n  database\n- This will be used by the Realize Agent to generate appropriate decorator\n  and authorization logic in the provider functions\n- The controller will apply the corresponding authentication decorator\n  based on these actors\n\n## Examples\n\n- `[]` - Public endpoint, no authentication required (PREFERRED for read\n  operations)\n- `[\"user\"]` - Any authenticated user can access (PREFERRED for\n  user-specific operations)\n- `[\"admin\"]` - Only admin users can access (USE SPARINGLY)\n- `[\"admin\", \"moderator\"]` - Both admin and moderator users can access\n  (AVOID if possible)\n- `[\"seller\"]` - Only seller users can access (ONLY if Seller is a separate\n  table)\n\n## Best Practices\n\n1. **Start with public `[]` for all read operations** unless sensitive data\n   is involved\n2. **Use single actor `[\"user\"]` for authenticated operations** and handle\n   permissions in business logic\n3. **Only use multiple actors when absolutely necessary** for different\n   business logic paths\n4. **Remember: Fewer actors = Fewer endpoints = Better performance and\n   maintainability**\n\nNote: The actual authentication/authorization implementation will be\nhandled by decorators at the controller level, and the provider function\nwill receive the authenticated user object with the appropriate type.",
                                         type: "array",
                                         items: {
                                             description: "@minLength 1\n@pattern ^[a-z][a-zA-Z0-9]*$",
@@ -616,7 +617,7 @@ const collection = {
                                     "requestBody",
                                     "responseBody",
                                     "name",
-                                    "authorizationRoles",
+                                    "authorizationActors",
                                     "path",
                                     "method"
                                 ]
@@ -740,7 +741,30 @@ const collection = {
                                 properties: {
                                     format: {
                                         description: "Format restriction.",
-                                        type: "string"
+                                        type: "string",
+                                        "enum": [
+                                            "date-time",
+                                            "password",
+                                            "regex",
+                                            "uuid",
+                                            "email",
+                                            "hostname",
+                                            "idn-email",
+                                            "idn-hostname",
+                                            "iri",
+                                            "iri-reference",
+                                            "ipv4",
+                                            "ipv6",
+                                            "uri",
+                                            "uri-reference",
+                                            "uri-template",
+                                            "url",
+                                            "date",
+                                            "time",
+                                            "duration",
+                                            "json-pointer",
+                                            "relative-json-pointer"
+                                        ]
                                     },
                                     pattern: {
                                         description: "Pattern restriction.",
@@ -809,7 +833,7 @@ const collection = {
                         }
                     },
                     description: "Generate detailed API operations from path/method combinations.\n\nThis function creates complete API operations following REST principles and\nquality standards. Each generated operation includes specification, path,\nmethod, detailed multi-paragraph description, concise summary, parameters,\nand appropriate request/response bodies.\n\nThe function processes as many operations as possible in a single call,\nwith progress tracking to ensure iterative completion of all required\nendpoints.",
-                    validate: (() => { const _io0 = input => Array.isArray(input.operations) && input.operations.every(elem => "object" === typeof elem && null !== elem && _io1(elem)); const _io1 = input => "string" === typeof input.specification && "string" === typeof input.description && "string" === typeof input.summary && (Array.isArray(input.parameters) && input.parameters.every(elem => "object" === typeof elem && null !== elem && _io2(elem))) && (null === input.requestBody || "object" === typeof input.requestBody && null !== input.requestBody && _io6(input.requestBody)) && (null === input.responseBody || "object" === typeof input.responseBody && null !== input.responseBody && _io7(input.responseBody)) && ("string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name)) && (Array.isArray(input.authorizationRoles) && input.authorizationRoles.every(elem => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) && 1 <= elem.length))) && ("string" === typeof input.path && RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path)) && ("get" === input.method || "post" === input.method || "put" === input.method || "delete" === input.method || "patch" === input.method); const _io2 = input => "string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name) && "string" === typeof input.description && ("object" === typeof input.schema && null !== input.schema && _iu0(input.schema)); const _io3 = input => (undefined === input.minimum || "number" === typeof input.minimum && (Math.floor(input.minimum) === input.minimum && -9223372036854776000 <= input.minimum && input.minimum <= 9223372036854776000)) && (undefined === input.maximum || "number" === typeof input.maximum && (Math.floor(input.maximum) === input.maximum && -9223372036854776000 <= input.maximum && input.maximum <= 9223372036854776000)) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && (Math.floor(input.multipleOf) === input.multipleOf && 0 <= input.multipleOf && input.multipleOf <= 18446744073709552000 && 0 < input.multipleOf)) && "integer" === input.type; const _io4 = input => (undefined === input.minimum || "number" === typeof input.minimum) && (undefined === input.maximum || "number" === typeof input.maximum) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && 0 < input.multipleOf) && "number" === input.type; const _io5 = input => (undefined === input.format || "string" === typeof input.format) && (undefined === input.pattern || "string" === typeof input.pattern) && (undefined === input.contentMediaType || "string" === typeof input.contentMediaType) && (undefined === input.minLength || "number" === typeof input.minLength && (Math.floor(input.minLength) === input.minLength && 0 <= input.minLength && input.minLength <= 18446744073709552000)) && (undefined === input.maxLength || "number" === typeof input.maxLength && (Math.floor(input.maxLength) === input.maxLength && 0 <= input.maxLength && input.maxLength <= 18446744073709552000)) && "string" === input.type; const _io6 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _io7 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _iu0 = input => (() => {
+                    validate: (() => { const _iv4 = new Set(["date-time", "password", "regex", "uuid", "email", "hostname", "idn-email", "idn-hostname", "iri", "iri-reference", "ipv4", "ipv6", "uri", "uri-reference", "uri-template", "url", "date", "time", "duration", "json-pointer", "relative-json-pointer"]); const _vv8 = new Set(["date-time", "password", "regex", "uuid", "email", "hostname", "idn-email", "idn-hostname", "iri", "iri-reference", "ipv4", "ipv6", "uri", "uri-reference", "uri-template", "url", "date", "time", "duration", "json-pointer", "relative-json-pointer"]); const _io0 = input => Array.isArray(input.operations) && input.operations.every(elem => "object" === typeof elem && null !== elem && _io1(elem)); const _io1 = input => "string" === typeof input.specification && "string" === typeof input.description && "string" === typeof input.summary && (Array.isArray(input.parameters) && input.parameters.every(elem => "object" === typeof elem && null !== elem && _io2(elem))) && (null === input.requestBody || "object" === typeof input.requestBody && null !== input.requestBody && _io6(input.requestBody)) && (null === input.responseBody || "object" === typeof input.responseBody && null !== input.responseBody && _io7(input.responseBody)) && ("string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name)) && (Array.isArray(input.authorizationActors) && input.authorizationActors.every(elem => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) && 1 <= elem.length))) && ("string" === typeof input.path && RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path)) && ("get" === input.method || "post" === input.method || "put" === input.method || "delete" === input.method || "patch" === input.method); const _io2 = input => "string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name) && "string" === typeof input.description && ("object" === typeof input.schema && null !== input.schema && _iu0(input.schema)); const _io3 = input => (undefined === input.minimum || "number" === typeof input.minimum && (Math.floor(input.minimum) === input.minimum && -9223372036854776000 <= input.minimum && input.minimum <= 9223372036854776000)) && (undefined === input.maximum || "number" === typeof input.maximum && (Math.floor(input.maximum) === input.maximum && -9223372036854776000 <= input.maximum && input.maximum <= 9223372036854776000)) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && (Math.floor(input.multipleOf) === input.multipleOf && 0 <= input.multipleOf && input.multipleOf <= 18446744073709552000 && 0 < input.multipleOf)) && "integer" === input.type; const _io4 = input => (undefined === input.minimum || "number" === typeof input.minimum) && (undefined === input.maximum || "number" === typeof input.maximum) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && 0 < input.multipleOf) && "number" === input.type; const _io5 = input => (undefined === input.format || true === _iv4.has(input.format)) && (undefined === input.pattern || "string" === typeof input.pattern) && (undefined === input.contentMediaType || "string" === typeof input.contentMediaType) && (undefined === input.minLength || "number" === typeof input.minLength && (Math.floor(input.minLength) === input.minLength && 0 <= input.minLength && input.minLength <= 18446744073709552000)) && (undefined === input.maxLength || "number" === typeof input.maxLength && (Math.floor(input.maxLength) === input.maxLength && 0 <= input.maxLength && input.maxLength <= 18446744073709552000)) && "string" === input.type; const _io6 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _io7 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _iu0 = input => (() => {
                         if ("number" === input.type)
                             return _io4(input);
                         else if ("integer" === input.type)
@@ -822,12 +846,12 @@ const collection = {
                             path: _path + ".operations",
                             expected: "Array<IAutoBeInterfaceOperationApplication.IOperation>",
                             value: input.operations
-                        })) && input.operations.map((elem, _index4) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
-                            path: _path + ".operations[" + _index4 + "]",
+                        })) && input.operations.map((elem, _index5) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
+                            path: _path + ".operations[" + _index5 + "]",
                             expected: "IAutoBeInterfaceOperationApplication.IOperation",
                             value: elem
-                        })) && _vo1(elem, _path + ".operations[" + _index4 + "]", true && _exceptionable) || _report(_exceptionable, {
-                            path: _path + ".operations[" + _index4 + "]",
+                        })) && _vo1(elem, _path + ".operations[" + _index5 + "]", true && _exceptionable) || _report(_exceptionable, {
+                            path: _path + ".operations[" + _index5 + "]",
                             expected: "IAutoBeInterfaceOperationApplication.IOperation",
                             value: elem
                         })).every(flag => flag) || _report(_exceptionable, {
@@ -850,12 +874,12 @@ const collection = {
                             path: _path + ".parameters",
                             expected: "Array<AutoBeOpenApi.IParameter>",
                             value: input.parameters
-                        })) && input.parameters.map((elem, _index5) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
-                            path: _path + ".parameters[" + _index5 + "]",
+                        })) && input.parameters.map((elem, _index6) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
+                            path: _path + ".parameters[" + _index6 + "]",
                             expected: "AutoBeOpenApi.IParameter",
                             value: elem
-                        })) && _vo2(elem, _path + ".parameters[" + _index5 + "]", true && _exceptionable) || _report(_exceptionable, {
-                            path: _path + ".parameters[" + _index5 + "]",
+                        })) && _vo2(elem, _path + ".parameters[" + _index6 + "]", true && _exceptionable) || _report(_exceptionable, {
+                            path: _path + ".parameters[" + _index6 + "]",
                             expected: "AutoBeOpenApi.IParameter",
                             value: elem
                         })).every(flag => flag) || _report(_exceptionable, {
@@ -886,26 +910,26 @@ const collection = {
                             path: _path + ".name",
                             expected: "(string & CamelCasePattern)",
                             value: input.name
-                        }), (Array.isArray(input.authorizationRoles) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles",
+                        }), (Array.isArray(input.authorizationActors) || _report(_exceptionable, {
+                            path: _path + ".authorizationActors",
                             expected: "Array<string & CamelCasePattern & MinLength<1>>",
-                            value: input.authorizationRoles
-                        })) && input.authorizationRoles.map((elem, _index6) => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles[" + _index6 + "]",
+                            value: input.authorizationActors
+                        })) && input.authorizationActors.map((elem, _index7) => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) || _report(_exceptionable, {
+                            path: _path + ".authorizationActors[" + _index7 + "]",
                             expected: "string & CamelCasePattern",
                             value: elem
                         })) && (1 <= elem.length || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles[" + _index6 + "]",
+                            path: _path + ".authorizationActors[" + _index7 + "]",
                             expected: "string & MinLength<1>",
                             value: elem
                         })) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles[" + _index6 + "]",
+                            path: _path + ".authorizationActors[" + _index7 + "]",
                             expected: "(string & CamelCasePattern & MinLength<1>)",
                             value: elem
                         })).every(flag => flag) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles",
+                            path: _path + ".authorizationActors",
                             expected: "Array<string & CamelCasePattern & MinLength<1>>",
-                            value: input.authorizationRoles
+                            value: input.authorizationActors
                         }), "string" === typeof input.path && (RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path) || _report(_exceptionable, {
                             path: _path + ".path",
                             expected: "string & Pattern<\"^\\\\/[a-zA-Z0-9\\\\/_{}.-]*$\">",
@@ -1006,9 +1030,9 @@ const collection = {
                             path: _path + ".type",
                             expected: "\"number\"",
                             value: input.type
-                        })].every(flag => flag); const _vo5 = (input, _path, _exceptionable = true) => [undefined === input.format || "string" === typeof input.format || _report(_exceptionable, {
+                        })].every(flag => flag); const _vo5 = (input, _path, _exceptionable = true) => [undefined === input.format || true === _vv8.has(input.format) || _report(_exceptionable, {
                             path: _path + ".format",
-                            expected: "(string | undefined)",
+                            expected: "(\"date\" | \"date-time\" | \"duration\" | \"email\" | \"hostname\" | \"idn-email\" | \"idn-hostname\" | \"ipv4\" | \"ipv6\" | \"iri\" | \"iri-reference\" | \"json-pointer\" | \"password\" | \"regex\" | \"relative-json-pointer\" | \"time\" | \"uri\" | \"uri-reference\" | \"uri-template\" | \"url\" | \"uuid\" | undefined)",
                             value: input.format
                         }), undefined === input.pattern || "string" === typeof input.pattern || _report(_exceptionable, {
                             path: _path + ".pattern",
@@ -1182,8 +1206,8 @@ const collection = {
                                         type: "string",
                                         pattern: "^[a-z][a-zA-Z0-9]*$"
                                     },
-                                    authorizationRoles: {
-                                        description: "Authorization roles required to access this API operation.\n\nThis field specifies which user roles are allowed to access this\nendpoint. Multiple roles can be specified to allow different types of\nusers to access the same endpoint.\n\n## \u26A0\uFE0F CRITICAL: Role Multiplication Effect\n\n**EACH ROLE IN THIS ARRAY GENERATES A SEPARATE ENDPOINT**\n\n- If you specify `[\"admin\", \"moderator\", \"member\"]`, this creates 3\n  separate endpoints\n- Total generated endpoints = operations \u00D7 average roles.length\n- Example: 100 operations with 3 roles each = 300 actual endpoints\n\n## \uD83D\uDD34 AVOID OVER-GENERATION\n\n**DO NOT create role-specific endpoints when a public endpoint would\nsuffice:**\n\n- \u274C BAD: Separate GET endpoints for admin, member, moderator to view the\n  same public data\n- \u2705 GOOD: Single public endpoint `[]` with role-based filtering in business\n  logic\n\n**DO NOT enumerate all possible roles when the Prisma schema uses a\nsingle User table:**\n\n- If Prisma has a User table with role/permission fields, you likely only\n  need `[\"user\"]`\n- Avoid listing `[\"admin\", \"seller\", \"buyer\", \"moderator\", ...]`\n  unnecessarily\n- The actual role checking happens in business logic, not at the endpoint\n  level\n\n## Naming Convention\n\nDO: Use camelCase for all role names.\n\n## Important Guidelines\n\n- Set to empty array `[]` for public endpoints that require no\n  authentication\n- Set to array with role strings for role-restricted endpoints\n- **MINIMIZE the number of roles per endpoint to prevent explosion**\n- Consider if the endpoint can be public with role-based filtering instead\n- The role names match exactly with the user type/role defined in the\n  database\n- This will be used by the Realize Agent to generate appropriate decorator\n  and authorization logic in the provider functions\n- The controller will apply the corresponding authentication decorator\n  based on these roles\n\n## Examples\n\n- `[]` - Public endpoint, no authentication required (PREFERRED for read\n  operations)\n- `[\"user\"]` - Any authenticated user can access (PREFERRED for\n  user-specific operations)\n- `[\"admin\"]` - Only admin users can access (USE SPARINGLY)\n- `[\"admin\", \"moderator\"]` - Both admin and moderator users can access\n  (AVOID if possible)\n- `[\"seller\"]` - Only seller users can access (ONLY if Seller is a separate\n  table)\n\n## Best Practices\n\n1. **Start with public `[]` for all read operations** unless sensitive data\n   is involved\n2. **Use single role `[\"user\"]` for authenticated operations** and handle\n   permissions in business logic\n3. **Only use multiple roles when absolutely necessary** for different\n   business logic paths\n4. **Remember: Fewer roles = Fewer endpoints = Better performance and\n   maintainability**\n\nNote: The actual authentication/authorization implementation will be\nhandled by decorators at the controller level, and the provider function\nwill receive the authenticated user object with the appropriate type.",
+                                    authorizationActors: {
+                                        description: "Authorization actors required to access this API operation.\n\nThis field specifies which user actors are allowed to access this\nendpoint. Multiple actors can be specified to allow different types of\nusers to access the same endpoint.\n\n## \u26A0\uFE0F CRITICAL: Actor Multiplication Effect\n\n**EACH ACTOR IN THIS ARRAY GENERATES A SEPARATE ENDPOINT**\n\n- If you specify `[\"admin\", \"moderator\", \"member\"]`, this creates 3\n  separate endpoints\n- Total generated endpoints = operations \u00D7 average actors.length\n- Example: 100 operations with 3 actors each = 300 actual endpoints\n\n## \uD83D\uDD34 AVOID OVER-GENERATION\n\n**DO NOT create actor-specific endpoints when a public endpoint would\nsuffice:**\n\n- \u274C BAD: Separate GET endpoints for admin, member, moderator to view the\n  same public data\n- \u2705 GOOD: Single public endpoint `[]` with actor-based filtering in business\n  logic\n\n**DO NOT enumerate all possible actors when the Prisma schema uses a\nsingle User table:**\n\n- If Prisma has a User table with role/permission fields, you likely only\n  need `[\"user\"]`\n- Avoid listing `[\"admin\", \"seller\", \"buyer\", \"moderator\", ...]`\n  unnecessarily\n- The actual actor checking happens in business logic, not at the endpoint\n  level\n\n## Naming Convention\n\nDO: Use camelCase for all actor names.\n\n## Important Guidelines\n\n- Set to empty array `[]` for public endpoints that require no\n  authentication\n- Set to array with actor strings for actor-restricted endpoints\n- **MINIMIZE the number of actors per endpoint to prevent explosion**\n- Consider if the endpoint can be public with actor-based filtering instead\n- The actor names match exactly with the user type/actor defined in the\n  database\n- This will be used by the Realize Agent to generate appropriate decorator\n  and authorization logic in the provider functions\n- The controller will apply the corresponding authentication decorator\n  based on these actors\n\n## Examples\n\n- `[]` - Public endpoint, no authentication required (PREFERRED for read\n  operations)\n- `[\"user\"]` - Any authenticated user can access (PREFERRED for\n  user-specific operations)\n- `[\"admin\"]` - Only admin users can access (USE SPARINGLY)\n- `[\"admin\", \"moderator\"]` - Both admin and moderator users can access\n  (AVOID if possible)\n- `[\"seller\"]` - Only seller users can access (ONLY if Seller is a separate\n  table)\n\n## Best Practices\n\n1. **Start with public `[]` for all read operations** unless sensitive data\n   is involved\n2. **Use single actor `[\"user\"]` for authenticated operations** and handle\n   permissions in business logic\n3. **Only use multiple actors when absolutely necessary** for different\n   business logic paths\n4. **Remember: Fewer actors = Fewer endpoints = Better performance and\n   maintainability**\n\nNote: The actual authentication/authorization implementation will be\nhandled by decorators at the controller level, and the provider function\nwill receive the authenticated user object with the appropriate type.",
                                         type: "array",
                                         items: {
                                             type: "string",
@@ -1225,7 +1249,7 @@ const collection = {
                                     "requestBody",
                                     "responseBody",
                                     "name",
-                                    "authorizationRoles",
+                                    "authorizationActors",
                                     "path",
                                     "method"
                                 ]
@@ -1346,7 +1370,71 @@ const collection = {
                                 properties: {
                                     format: {
                                         description: "Format restriction.",
-                                        type: "string"
+                                        oneOf: [
+                                            {
+                                                "const": "date-time"
+                                            },
+                                            {
+                                                "const": "password"
+                                            },
+                                            {
+                                                "const": "regex"
+                                            },
+                                            {
+                                                "const": "uuid"
+                                            },
+                                            {
+                                                "const": "email"
+                                            },
+                                            {
+                                                "const": "hostname"
+                                            },
+                                            {
+                                                "const": "idn-email"
+                                            },
+                                            {
+                                                "const": "idn-hostname"
+                                            },
+                                            {
+                                                "const": "iri"
+                                            },
+                                            {
+                                                "const": "iri-reference"
+                                            },
+                                            {
+                                                "const": "ipv4"
+                                            },
+                                            {
+                                                "const": "ipv6"
+                                            },
+                                            {
+                                                "const": "uri"
+                                            },
+                                            {
+                                                "const": "uri-reference"
+                                            },
+                                            {
+                                                "const": "uri-template"
+                                            },
+                                            {
+                                                "const": "url"
+                                            },
+                                            {
+                                                "const": "date"
+                                            },
+                                            {
+                                                "const": "time"
+                                            },
+                                            {
+                                                "const": "duration"
+                                            },
+                                            {
+                                                "const": "json-pointer"
+                                            },
+                                            {
+                                                "const": "relative-json-pointer"
+                                            }
+                                        ]
                                     },
                                     pattern: {
                                         description: "Pattern restriction.",
@@ -1414,7 +1502,7 @@ const collection = {
                         }
                     },
                     description: "Generate detailed API operations from path/method combinations.\n\nThis function creates complete API operations following REST principles and\nquality standards. Each generated operation includes specification, path,\nmethod, detailed multi-paragraph description, concise summary, parameters,\nand appropriate request/response bodies.\n\nThe function processes as many operations as possible in a single call,\nwith progress tracking to ensure iterative completion of all required\nendpoints.",
-                    validate: (() => { const _io0 = input => Array.isArray(input.operations) && input.operations.every(elem => "object" === typeof elem && null !== elem && _io1(elem)); const _io1 = input => "string" === typeof input.specification && "string" === typeof input.description && "string" === typeof input.summary && (Array.isArray(input.parameters) && input.parameters.every(elem => "object" === typeof elem && null !== elem && _io2(elem))) && (null === input.requestBody || "object" === typeof input.requestBody && null !== input.requestBody && _io6(input.requestBody)) && (null === input.responseBody || "object" === typeof input.responseBody && null !== input.responseBody && _io7(input.responseBody)) && ("string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name)) && (Array.isArray(input.authorizationRoles) && input.authorizationRoles.every(elem => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) && 1 <= elem.length))) && ("string" === typeof input.path && RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path)) && ("get" === input.method || "post" === input.method || "put" === input.method || "delete" === input.method || "patch" === input.method); const _io2 = input => "string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name) && "string" === typeof input.description && ("object" === typeof input.schema && null !== input.schema && _iu0(input.schema)); const _io3 = input => (undefined === input.minimum || "number" === typeof input.minimum && (Math.floor(input.minimum) === input.minimum && -9223372036854776000 <= input.minimum && input.minimum <= 9223372036854776000)) && (undefined === input.maximum || "number" === typeof input.maximum && (Math.floor(input.maximum) === input.maximum && -9223372036854776000 <= input.maximum && input.maximum <= 9223372036854776000)) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && (Math.floor(input.multipleOf) === input.multipleOf && 0 <= input.multipleOf && input.multipleOf <= 18446744073709552000 && 0 < input.multipleOf)) && "integer" === input.type; const _io4 = input => (undefined === input.minimum || "number" === typeof input.minimum) && (undefined === input.maximum || "number" === typeof input.maximum) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && 0 < input.multipleOf) && "number" === input.type; const _io5 = input => (undefined === input.format || "string" === typeof input.format) && (undefined === input.pattern || "string" === typeof input.pattern) && (undefined === input.contentMediaType || "string" === typeof input.contentMediaType) && (undefined === input.minLength || "number" === typeof input.minLength && (Math.floor(input.minLength) === input.minLength && 0 <= input.minLength && input.minLength <= 18446744073709552000)) && (undefined === input.maxLength || "number" === typeof input.maxLength && (Math.floor(input.maxLength) === input.maxLength && 0 <= input.maxLength && input.maxLength <= 18446744073709552000)) && "string" === input.type; const _io6 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _io7 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _iu0 = input => (() => {
+                    validate: (() => { const _iv4 = new Set(["date-time", "password", "regex", "uuid", "email", "hostname", "idn-email", "idn-hostname", "iri", "iri-reference", "ipv4", "ipv6", "uri", "uri-reference", "uri-template", "url", "date", "time", "duration", "json-pointer", "relative-json-pointer"]); const _vv8 = new Set(["date-time", "password", "regex", "uuid", "email", "hostname", "idn-email", "idn-hostname", "iri", "iri-reference", "ipv4", "ipv6", "uri", "uri-reference", "uri-template", "url", "date", "time", "duration", "json-pointer", "relative-json-pointer"]); const _io0 = input => Array.isArray(input.operations) && input.operations.every(elem => "object" === typeof elem && null !== elem && _io1(elem)); const _io1 = input => "string" === typeof input.specification && "string" === typeof input.description && "string" === typeof input.summary && (Array.isArray(input.parameters) && input.parameters.every(elem => "object" === typeof elem && null !== elem && _io2(elem))) && (null === input.requestBody || "object" === typeof input.requestBody && null !== input.requestBody && _io6(input.requestBody)) && (null === input.responseBody || "object" === typeof input.responseBody && null !== input.responseBody && _io7(input.responseBody)) && ("string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name)) && (Array.isArray(input.authorizationActors) && input.authorizationActors.every(elem => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) && 1 <= elem.length))) && ("string" === typeof input.path && RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path)) && ("get" === input.method || "post" === input.method || "put" === input.method || "delete" === input.method || "patch" === input.method); const _io2 = input => "string" === typeof input.name && RegExp("^[a-z][a-zA-Z0-9]*$").test(input.name) && "string" === typeof input.description && ("object" === typeof input.schema && null !== input.schema && _iu0(input.schema)); const _io3 = input => (undefined === input.minimum || "number" === typeof input.minimum && (Math.floor(input.minimum) === input.minimum && -9223372036854776000 <= input.minimum && input.minimum <= 9223372036854776000)) && (undefined === input.maximum || "number" === typeof input.maximum && (Math.floor(input.maximum) === input.maximum && -9223372036854776000 <= input.maximum && input.maximum <= 9223372036854776000)) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && (Math.floor(input.multipleOf) === input.multipleOf && 0 <= input.multipleOf && input.multipleOf <= 18446744073709552000 && 0 < input.multipleOf)) && "integer" === input.type; const _io4 = input => (undefined === input.minimum || "number" === typeof input.minimum) && (undefined === input.maximum || "number" === typeof input.maximum) && (undefined === input.exclusiveMinimum || "number" === typeof input.exclusiveMinimum) && (undefined === input.exclusiveMaximum || "number" === typeof input.exclusiveMaximum) && (undefined === input.multipleOf || "number" === typeof input.multipleOf && 0 < input.multipleOf) && "number" === input.type; const _io5 = input => (undefined === input.format || true === _iv4.has(input.format)) && (undefined === input.pattern || "string" === typeof input.pattern) && (undefined === input.contentMediaType || "string" === typeof input.contentMediaType) && (undefined === input.minLength || "number" === typeof input.minLength && (Math.floor(input.minLength) === input.minLength && 0 <= input.minLength && input.minLength <= 18446744073709552000)) && (undefined === input.maxLength || "number" === typeof input.maxLength && (Math.floor(input.maxLength) === input.maxLength && 0 <= input.maxLength && input.maxLength <= 18446744073709552000)) && "string" === input.type; const _io6 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _io7 = input => "string" === typeof input.description && "string" === typeof input.typeName; const _iu0 = input => (() => {
                         if ("number" === input.type)
                             return _io4(input);
                         else if ("integer" === input.type)
@@ -1427,12 +1515,12 @@ const collection = {
                             path: _path + ".operations",
                             expected: "Array<IAutoBeInterfaceOperationApplication.IOperation>",
                             value: input.operations
-                        })) && input.operations.map((elem, _index4) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
-                            path: _path + ".operations[" + _index4 + "]",
+                        })) && input.operations.map((elem, _index5) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
+                            path: _path + ".operations[" + _index5 + "]",
                             expected: "IAutoBeInterfaceOperationApplication.IOperation",
                             value: elem
-                        })) && _vo1(elem, _path + ".operations[" + _index4 + "]", true && _exceptionable) || _report(_exceptionable, {
-                            path: _path + ".operations[" + _index4 + "]",
+                        })) && _vo1(elem, _path + ".operations[" + _index5 + "]", true && _exceptionable) || _report(_exceptionable, {
+                            path: _path + ".operations[" + _index5 + "]",
                             expected: "IAutoBeInterfaceOperationApplication.IOperation",
                             value: elem
                         })).every(flag => flag) || _report(_exceptionable, {
@@ -1455,12 +1543,12 @@ const collection = {
                             path: _path + ".parameters",
                             expected: "Array<AutoBeOpenApi.IParameter>",
                             value: input.parameters
-                        })) && input.parameters.map((elem, _index5) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
-                            path: _path + ".parameters[" + _index5 + "]",
+                        })) && input.parameters.map((elem, _index6) => ("object" === typeof elem && null !== elem || _report(_exceptionable, {
+                            path: _path + ".parameters[" + _index6 + "]",
                             expected: "AutoBeOpenApi.IParameter",
                             value: elem
-                        })) && _vo2(elem, _path + ".parameters[" + _index5 + "]", true && _exceptionable) || _report(_exceptionable, {
-                            path: _path + ".parameters[" + _index5 + "]",
+                        })) && _vo2(elem, _path + ".parameters[" + _index6 + "]", true && _exceptionable) || _report(_exceptionable, {
+                            path: _path + ".parameters[" + _index6 + "]",
                             expected: "AutoBeOpenApi.IParameter",
                             value: elem
                         })).every(flag => flag) || _report(_exceptionable, {
@@ -1491,26 +1579,26 @@ const collection = {
                             path: _path + ".name",
                             expected: "(string & CamelCasePattern)",
                             value: input.name
-                        }), (Array.isArray(input.authorizationRoles) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles",
+                        }), (Array.isArray(input.authorizationActors) || _report(_exceptionable, {
+                            path: _path + ".authorizationActors",
                             expected: "Array<string & CamelCasePattern & MinLength<1>>",
-                            value: input.authorizationRoles
-                        })) && input.authorizationRoles.map((elem, _index6) => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles[" + _index6 + "]",
+                            value: input.authorizationActors
+                        })) && input.authorizationActors.map((elem, _index7) => "string" === typeof elem && (RegExp("^[a-z][a-zA-Z0-9]*$").test(elem) || _report(_exceptionable, {
+                            path: _path + ".authorizationActors[" + _index7 + "]",
                             expected: "string & CamelCasePattern",
                             value: elem
                         })) && (1 <= elem.length || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles[" + _index6 + "]",
+                            path: _path + ".authorizationActors[" + _index7 + "]",
                             expected: "string & MinLength<1>",
                             value: elem
                         })) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles[" + _index6 + "]",
+                            path: _path + ".authorizationActors[" + _index7 + "]",
                             expected: "(string & CamelCasePattern & MinLength<1>)",
                             value: elem
                         })).every(flag => flag) || _report(_exceptionable, {
-                            path: _path + ".authorizationRoles",
+                            path: _path + ".authorizationActors",
                             expected: "Array<string & CamelCasePattern & MinLength<1>>",
-                            value: input.authorizationRoles
+                            value: input.authorizationActors
                         }), "string" === typeof input.path && (RegExp("^\\/[a-zA-Z0-9\\/_{}.-]*$").test(input.path) || _report(_exceptionable, {
                             path: _path + ".path",
                             expected: "string & Pattern<\"^\\\\/[a-zA-Z0-9\\\\/_{}.-]*$\">",
@@ -1611,9 +1699,9 @@ const collection = {
                             path: _path + ".type",
                             expected: "\"number\"",
                             value: input.type
-                        })].every(flag => flag); const _vo5 = (input, _path, _exceptionable = true) => [undefined === input.format || "string" === typeof input.format || _report(_exceptionable, {
+                        })].every(flag => flag); const _vo5 = (input, _path, _exceptionable = true) => [undefined === input.format || true === _vv8.has(input.format) || _report(_exceptionable, {
                             path: _path + ".format",
-                            expected: "(string | undefined)",
+                            expected: "(\"date\" | \"date-time\" | \"duration\" | \"email\" | \"hostname\" | \"idn-email\" | \"idn-hostname\" | \"ipv4\" | \"ipv6\" | \"iri\" | \"iri-reference\" | \"json-pointer\" | \"password\" | \"regex\" | \"relative-json-pointer\" | \"time\" | \"uri\" | \"uri-reference\" | \"uri-template\" | \"url\" | \"uuid\" | undefined)",
                             value: input.format
                         }), undefined === input.pattern || "string" === typeof input.pattern || _report(_exceptionable, {
                             path: _path + ".pattern",