@iveri/contracts 0.17.0 → 0.18.0

package/dist/esm/api/localization/namespace.type.d.ts

@@ -0,0 +1,67 @@
+import type { IsoDateTime } from '../../type/iso-date-time.type.js';
+import type { Nullable } from '../../type/nil.type.js';
+import type { Paginated } from '../../type/paginated.type.js';
+import type { UUID } from '../../type/uuid.type.js';
+/**
+ * A bounded set of keys owned by one consumer — `unibox-web`, `billing.invoice`, `messaging.otp`.
+ *
+ * **The unit of publish and the unit of fetch, and it has to be both.** Without namespaces every
+ * consumer downloads every string the tenant has ever written, and a translator fixing one word in
+ * an invoice template republishes the entire admin panel's UI at the same time. Those are the two
+ * failures a flat key space produces, and neither is visible until the key count is in the
+ * thousands and it is expensive to fix.
+ *
+ * A namespace maps roughly to a deployable: one app, or one family of server-rendered messages.
+ */
+export interface Namespace {
+    id: UUID;
+    /** Lowercase `[a-z0-9.-]`, e.g. `unibox-web`. Unique within the tenant. */
+    key: string;
+    /** What lives in here, for whoever has to decide where a new key belongs. */
+    description: Nullable<string>;
+    /**
+     * Whether a release may include translations still in `draft`.
+     *
+     * Off by default. On for a namespace nobody reads in production yet, where requiring approval
+     * on every key means a translator cannot see their own work in the app.
+     */
+    allowsDraftRelease: boolean;
+    messageCount: number;
+    /** Null until the namespace has been published once. */
+    latestReleaseVersion: Nullable<number>;
+    latestReleaseAt: Nullable<IsoDateTime>;
+    createdAt: IsoDateTime;
+    updatedAt: IsoDateTime;
+}
+/** `GET /api/v1/namespaces`. */
+export type NamespacesPage = Paginated<Namespace>;
+/** `POST /api/v1/namespaces`. */
+export interface CreateNamespaceBody {
+    key: string;
+    description?: Nullable<string>;
+    allowsDraftRelease?: boolean;
+}
+/** `PATCH /api/v1/namespaces/:key`. The key itself is immutable — consumers pin it. */
+export interface UpdateNamespaceBody {
+    description?: Nullable<string>;
+    allowsDraftRelease?: boolean;
+}
+/**
+ * `GET /api/v1/namespaces/:key/progress` — how much is left to do, per locale.
+ *
+ * The one screen a translation project actually runs on. Answering it from the message listing
+ * would mean paging through every key to count what is missing.
+ */
+export interface NamespaceProgress {
+    namespaceKey: string;
+    messageCount: number;
+    locales: LocaleProgress[];
+}
+export interface LocaleProgress {
+    localeCode: string;
+    approved: number;
+    needsReview: number;
+    draft: number;
+    missing: number;
+}
+//# sourceMappingURL=namespace.type.d.ts.map

package/dist/esm/api/localization/namespace.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.type.d.ts","sourceRoot":"","sources":["../../../../src/api/localization/namespace.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,IAAI,CAAC;IAET,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IAEZ,6EAA6E;IAC7E,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B;;;;;OAKG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAE5B,YAAY,EAAE,MAAM,CAAC;IAErB,wDAAwD;IACxD,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEvC,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,gCAAgC;AAChC,MAAM,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;AAElD,iCAAiC;AACjC,MAAM,WAAW,mBAAmB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAChC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACnB"}

package/dist/esm/api/localization/namespace.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=namespace.type.js.map

package/dist/esm/api/localization/namespace.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.type.js","sourceRoot":"","sources":["../../../../src/api/localization/namespace.type.ts"],"names":[],"mappings":""}

package/dist/esm/api/localization/release.type.d.ts

@@ -0,0 +1,74 @@
+import type { IsoDateTime } from '../../type/iso-date-time.type.js';
+import type { Nullable } from '../../type/nil.type.js';
+import type { Paginated } from '../../type/paginated.type.js';
+import type { UUID } from '../../type/uuid.type.js';
+/**
+ * An immutable snapshot of one namespace, at every active locale, at one moment.
+ *
+ * **This is what makes the service safe to depend on.** Without it, editing a translation changes
+ * production text the instant it is saved — so a translator experimenting at 2am is a deploy, an
+ * unfinished sentence is an outage, and there is no way to answer "what did this say last
+ * Tuesday". With it, editing is free and publishing is the decision, gated by its own permission.
+ *
+ * The snapshot is stored in full rather than reconstructed from the translation rows by
+ * timestamp. Reconstruction sounds cheaper and is wrong: a message archived after the release, or
+ * a variable renamed, changes what the reconstruction produces, so a consumer pinned to version 3
+ * would silently get different bytes next month.
+ */
+export interface Release {
+    id: UUID;
+    namespaceId: UUID;
+    namespaceKey: string;
+    /** Monotonic per namespace, starting at 1. What a consumer pins. */
+    version: number;
+    /** What changed and why, for whoever reads the history. */
+    notes: Nullable<string>;
+    /** Locales the snapshot contains — the active ones at publish time, not necessarily now. */
+    localeCodes: string[];
+    messageCount: number;
+    /** Null when published by a service principal. */
+    publishedByUserId: Nullable<UUID>;
+    publishedAt: IsoDateTime;
+}
+/** `GET /api/v1/namespaces/:key/releases`. Newest first. */
+export type ReleasesPage = Paginated<Release>;
+/** `POST /api/v1/namespaces/:key/releases`. */
+export interface PublishReleaseBody {
+    notes?: Nullable<string>;
+}
+/**
+ * `GET /api/v1/namespaces/:key/releases/preview` — what publishing right now would change.
+ *
+ * Shown before the button is pressed. A publish is irreversible in the sense that matters — the
+ * consumers pull it — so the operator gets to see the diff first rather than discovering it in
+ * production.
+ */
+export interface ReleaseDiff {
+    namespaceKey: string;
+    /** The version this would become. */
+    nextVersion: number;
+    /** Null when nothing has been published yet, in which case everything reads as added. */
+    previousVersion: Nullable<number>;
+    entries: ReleaseDiffEntry[];
+    /**
+     * Messages with no publishable translation in a locale that is active.
+     *
+     * Not an error — a release ships with gaps and the consumer falls back. It is surfaced
+     * because shipping a gap should be a choice someone made, not one they made by not looking.
+     */
+    untranslated: UntranslatedEntry[];
+}
+export interface ReleaseDiffEntry {
+    messageKey: string;
+    localeCode: string;
+    change: 'added' | 'changed' | 'removed';
+    previousValue: Nullable<string>;
+    nextValue: Nullable<string>;
+}
+export interface UntranslatedEntry {
+    messageKey: string;
+    localeCode: string;
+    /** Where the fallback chain lands, or null if it falls off the end and the key renders raw. */
+    fallsBackTo: Nullable<string>;
+}
+//# sourceMappingURL=release.type.d.ts.map

package/dist/esm/api/localization/release.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.type.d.ts","sourceRoot":"","sources":["../../../../src/api/localization/release.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,IAAI,CAAC;IAET,WAAW,EAAE,IAAI,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IAErB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAEhB,2DAA2D;IAC3D,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExB,4FAA4F;IAC5F,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,YAAY,EAAE,MAAM,CAAC;IAErB,kDAAkD;IAClD,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,WAAW,EAAE,WAAW,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAE9C,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IAC/B,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IACxB,YAAY,EAAE,MAAM,CAAC;IAErB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IAEpB,yFAAyF;IACzF,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAElC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAE5B;;;;;OAKG;IACH,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACxC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACjC"}

package/dist/esm/api/localization/release.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=release.type.js.map

package/dist/esm/api/localization/release.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.type.js","sourceRoot":"","sources":["../../../../src/api/localization/release.type.ts"],"names":[],"mappings":""}

package/dist/esm/api/localization/render.type.d.ts

@@ -0,0 +1,50 @@
+import type { Nullable } from '../../type/nil.type.js';
+/**
+ * `POST /api/v1/render` — resolve and format messages server-side.
+ *
+ * The counterpart to {@link TranslationBundle}, for the case a bundle cannot serve: text produced
+ * on a server, where there is no compiled app to bake strings into and the target locale belongs
+ * to whoever will read the message rather than whoever is making the request. An OTP body, an
+ * invoice line, an order confirmation.
+ *
+ * **Batched, because the caller almost always needs several.** An invoice email is a subject, a
+ * greeting, six line labels and a footer, and one HTTP round trip per string would put this
+ * service on the latency path of every email the platform sends.
+ */
+export interface RenderBody {
+    /** BCP-47. Falls back through the locale chain when this one has no translation. */
+    localeCode: string;
+    items: RenderItem[];
+}
+export interface RenderItem {
+    namespaceKey: string;
+    messageKey: string;
+    /**
+     * Values for the message's declared placeholders.
+     *
+     * A missing one is an error rather than an empty substitution: an OTP that renders as
+     * "Your code is " is worse than an error, because it is sent.
+     */
+    variables?: Record<string, string | number>;
+}
+export interface RenderResult {
+    items: RenderedMessage[];
+}
+export interface RenderedMessage {
+    namespaceKey: string;
+    messageKey: string;
+    /** The locale actually used, which is not necessarily the one asked for. */
+    localeCode: string;
+    /** Formatted for {@link localeCode} — plural branches taken, numbers and dates localised. */
+    value: string;
+    /**
+     * True when the requested locale had nothing and the chain supplied this.
+     *
+     * Returned rather than hidden so a caller that must not send a half-localised message — an
+     * OTP, a legal notice — can decide for itself rather than discovering it from a customer.
+     */
+    isFallback: boolean;
+    /** The release the value came from. Null for a message that has never been published. */
+    version: Nullable<number>;
+}
+//# sourceMappingURL=render.type.d.ts.map

package/dist/esm/api/localization/render.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.type.d.ts","sourceRoot":"","sources":["../../../../src/api/localization/render.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACvB,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC;IAEnB,KAAK,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IACzB,KAAK,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IAEnB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IAEnB,6FAA6F;IAC7F,KAAK,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB,yFAAyF;IACzF,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC7B"}

package/dist/esm/api/localization/render.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=render.type.js.map

package/dist/esm/api/localization/render.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.type.js","sourceRoot":"","sources":["../../../../src/api/localization/render.type.ts"],"names":[],"mappings":""}

package/dist/esm/api/localization/translation-status.enum.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Where a single translation stands, for one message in one locale.
+ *
+ * The states exist to answer one question a translator asks constantly — *what is left to do* —
+ * and they are ordered by how much trust a reader may put in the value.
+ *
+ * `MISSING` is **not stored**. A translation row exists only once someone has written something,
+ * so "missing" is the absence of a row projected into this enum by the read side. Storing it
+ * would mean writing a row per message per locale the moment a key is created, which turns
+ * adding one key into N writes and makes "has anyone touched this?" unanswerable.
+ */
+export declare enum TranslationStatus {
+    /** No row exists. Synthesised by the read side so a listing can be filtered on it. */
+    MISSING = "missing",
+    /** Someone is working on it. Excluded from a release unless the namespace allows drafts. */
+    DRAFT = "draft",
+    /**
+     * Written, but the source text changed underneath it.
+     *
+     * Set automatically when the source-locale value of the same message is edited — an English
+     * label reworded from `Archive` to `Delete` leaves a Georgian translation that is
+     * grammatically fine and now says the wrong thing. Nothing else in the system can catch that,
+     * because the translation is still valid text.
+     */
+    NEEDS_REVIEW = "needs-review",
+    /** Reviewed and publishable. */
+    APPROVED = "approved"
+}
+//# sourceMappingURL=translation-status.enum.d.ts.map

package/dist/esm/api/localization/translation-status.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation-status.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/localization/translation-status.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,oBAAY,iBAAiB;IACzB,sFAAsF;IACtF,OAAO,YAAY;IAEnB,4FAA4F;IAC5F,KAAK,UAAU;IAEf;;;;;;;OAOG;IACH,YAAY,iBAAiB;IAE7B,gCAAgC;IAChC,QAAQ,aAAa;CACxB"}

package/dist/esm/api/localization/translation-status.enum.js

@@ -0,0 +1,30 @@
+/**
+ * Where a single translation stands, for one message in one locale.
+ *
+ * The states exist to answer one question a translator asks constantly — *what is left to do* —
+ * and they are ordered by how much trust a reader may put in the value.
+ *
+ * `MISSING` is **not stored**. A translation row exists only once someone has written something,
+ * so "missing" is the absence of a row projected into this enum by the read side. Storing it
+ * would mean writing a row per message per locale the moment a key is created, which turns
+ * adding one key into N writes and makes "has anyone touched this?" unanswerable.
+ */
+export var TranslationStatus;
+(function (TranslationStatus) {
+    /** No row exists. Synthesised by the read side so a listing can be filtered on it. */
+    TranslationStatus["MISSING"] = "missing";
+    /** Someone is working on it. Excluded from a release unless the namespace allows drafts. */
+    TranslationStatus["DRAFT"] = "draft";
+    /**
+     * Written, but the source text changed underneath it.
+     *
+     * Set automatically when the source-locale value of the same message is edited — an English
+     * label reworded from `Archive` to `Delete` leaves a Georgian translation that is
+     * grammatically fine and now says the wrong thing. Nothing else in the system can catch that,
+     * because the translation is still valid text.
+     */
+    TranslationStatus["NEEDS_REVIEW"] = "needs-review";
+    /** Reviewed and publishable. */
+    TranslationStatus["APPROVED"] = "approved";
+})(TranslationStatus || (TranslationStatus = {}));
+//# sourceMappingURL=translation-status.enum.js.map

package/dist/esm/api/localization/translation-status.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation-status.enum.js","sourceRoot":"","sources":["../../../../src/api/localization/translation-status.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,iBAmBX;AAnBD,WAAY,iBAAiB;IACzB,sFAAsF;IACtF,wCAAmB,CAAA;IAEnB,4FAA4F;IAC5F,oCAAe,CAAA;IAEf;;;;;;;OAOG;IACH,kDAA6B,CAAA;IAE7B,gCAAgC;IAChC,0CAAqB,CAAA;AACzB,CAAC,EAnBW,iBAAiB,KAAjB,iBAAiB,QAmB5B"}

package/dist/esm/api/localization/translation.type.d.ts

@@ -0,0 +1,74 @@
+import type { IsoDateTime } from '../../type/iso-date-time.type.js';
+import type { Nullable } from '../../type/nil.type.js';
+import type { UUID } from '../../type/uuid.type.js';
+import type { TranslationStatus } from './translation-status.enum.js';
+/**
+ * One message, in one locale.
+ *
+ * `value` is **ICU MessageFormat**, not a template string with our own placeholder syntax. That
+ * choice is the reason this service can be correct in Russian: Russian selects between `one`,
+ * `few`, `many` and `other` on the *numeric* value, and a hand-rolled `count === 1 ? a : b` is
+ * wrong for 2, 5 and 21 in ways an English-speaking reviewer cannot see. ICU already encodes
+ * every locale's plural rules, so the translation carries the branch and the code carries none.
+ */
+export interface Translation {
+    id: UUID;
+    messageId: UUID;
+    messageKey: string;
+    namespaceKey: string;
+    localeCode: string;
+    /** ICU MessageFormat. Validated against the message's declared variables on every write. */
+    value: string;
+    status: TranslationStatus;
+    /** Null when written by a service principal rather than a person. */
+    updatedByUserId: Nullable<UUID>;
+    createdAt: IsoDateTime;
+    updatedAt: IsoDateTime;
+}
+/**
+ * `PUT /api/v1/namespaces/:key/messages/:messageKey/translations/:localeCode`.
+ *
+ * An upsert rather than create/update, because a translator does not know or care whether a row
+ * exists — `MISSING` is the absence of one, and making them discover that through a 404 would be
+ * exposing our storage decision as a workflow step.
+ */
+export interface UpsertTranslationBody {
+    value: string;
+    /**
+     * Defaults to `DRAFT`. Setting `APPROVED` requires the same permission as any other write —
+     * approving is not separately gated, because the gate that matters is publishing.
+     */
+    status?: TranslationStatus;
+}
+/**
+ * `POST /api/v1/namespaces/:key/translations/bulk` — one locale, many messages.
+ *
+ * The entries that validate are written together in one transaction; the ones that do not are
+ * reported back. See {@link BulkUpsertTranslationsResult} for why it is not all-or-nothing.
+ */
+export interface BulkUpsertTranslationsBody {
+    localeCode: string;
+    entries: BulkTranslationEntry[];
+}
+export interface BulkTranslationEntry {
+    messageKey: string;
+    value: string;
+    status?: TranslationStatus;
+}
+/**
+ * The result of a bulk write.
+ *
+ * Rejections are returned per entry instead of failing the whole batch, because the usual caller
+ * is an import of a file a translator produced elsewhere: refusing 400 good rows over one bad
+ * placeholder means they have no way to make progress, and the failure they must fix is
+ * precisely the one this names.
+ */
+export interface BulkUpsertTranslationsResult {
+    written: number;
+    rejected: RejectedTranslation[];
+}
+export interface RejectedTranslation {
+    messageKey: string;
+    reason: string;
+}
+//# sourceMappingURL=translation.type.d.ts.map

package/dist/esm/api/localization/translation.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation.type.d.ts","sourceRoot":"","sources":["../../../../src/api/localization/translation.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,IAAI,CAAC;IAET,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IAEnB,4FAA4F;IAC5F,KAAK,EAAE,MAAM,CAAC;IAEd,MAAM,EAAE,iBAAiB,CAAC;IAE1B,qEAAqE;IACrE,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEhC,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAClB"}

package/dist/esm/api/localization/translation.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=translation.type.js.map

package/dist/esm/api/localization/translation.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation.type.js","sourceRoot":"","sources":["../../../../src/api/localization/translation.type.ts"],"names":[],"mappings":""}

package/dist/esm/api/localization/variable-type.enum.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The kind of value a message placeholder expects.
+ *
+ * **Declared on the message, not inferred from the text.** A translation is rejected at write
+ * time if its placeholders do not match the message's declared set, which is the single check
+ * that stops a Russian string shipping with a literal `{orderNumber}` in front of a customer.
+ * Inferring the set from whichever locale happened to be written first would make the check
+ * circular — the first typo becomes the specification.
+ *
+ * The type is what tells a renderer how to format the value and what an editor should show as an
+ * example. It also tells a translator what they are allowed to do with it: `PLURAL` may be
+ * branched on, `STRING` may not.
+ */
+export declare enum VariableType {
+    /** Substituted verbatim. `{name}` */
+    STRING = "string",
+    /** Formatted with `Intl.NumberFormat` for the target locale. `{count, number}` */
+    NUMBER = "number",
+    /** Formatted with `Intl.DateTimeFormat` for the target locale. `{dueAt, date, medium}` */
+    DATE = "date",
+    /**
+     * A count the translation branches on: `{n, plural, one {...} few {...} other {...}}`.
+     *
+     * Distinct from `NUMBER` because the plural categories a locale needs are not a formatting
+     * choice. Russian has `one`/`few`/`many`/`other` and English has `one`/`other`, so a
+     * translation written by substituting a number and appending an "s" is wrong in Russian in a
+     * way no reviewer of the English can see.
+     */
+    PLURAL = "plural",
+    /**
+     * A closed set the translation branches on: `{gender, select, female {...} other {...}}`.
+     *
+     * Georgian and Russian inflect around the subject where English does not, so a sentence that
+     * needs no branch in the source locale needs one in the target. The declared options are the
+     * contract — a translation branching on an option the message never declared is rejected.
+     */
+    SELECT = "select"
+}
+//# sourceMappingURL=variable-type.enum.d.ts.map

package/dist/esm/api/localization/variable-type.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variable-type.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/localization/variable-type.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,oBAAY,YAAY;IACpB,qCAAqC;IACrC,MAAM,WAAW;IAEjB,kFAAkF;IAClF,MAAM,WAAW;IAEjB,0FAA0F;IAC1F,IAAI,SAAS;IAEb;;;;;;;OAOG;IACH,MAAM,WAAW;IAEjB;;;;;;OAMG;IACH,MAAM,WAAW;CACpB"}

package/dist/esm/api/localization/variable-type.enum.js

@@ -0,0 +1,40 @@
+/**
+ * The kind of value a message placeholder expects.
+ *
+ * **Declared on the message, not inferred from the text.** A translation is rejected at write
+ * time if its placeholders do not match the message's declared set, which is the single check
+ * that stops a Russian string shipping with a literal `{orderNumber}` in front of a customer.
+ * Inferring the set from whichever locale happened to be written first would make the check
+ * circular — the first typo becomes the specification.
+ *
+ * The type is what tells a renderer how to format the value and what an editor should show as an
+ * example. It also tells a translator what they are allowed to do with it: `PLURAL` may be
+ * branched on, `STRING` may not.
+ */
+export var VariableType;
+(function (VariableType) {
+    /** Substituted verbatim. `{name}` */
+    VariableType["STRING"] = "string";
+    /** Formatted with `Intl.NumberFormat` for the target locale. `{count, number}` */
+    VariableType["NUMBER"] = "number";
+    /** Formatted with `Intl.DateTimeFormat` for the target locale. `{dueAt, date, medium}` */
+    VariableType["DATE"] = "date";
+    /**
+     * A count the translation branches on: `{n, plural, one {...} few {...} other {...}}`.
+     *
+     * Distinct from `NUMBER` because the plural categories a locale needs are not a formatting
+     * choice. Russian has `one`/`few`/`many`/`other` and English has `one`/`other`, so a
+     * translation written by substituting a number and appending an "s" is wrong in Russian in a
+     * way no reviewer of the English can see.
+     */
+    VariableType["PLURAL"] = "plural";
+    /**
+     * A closed set the translation branches on: `{gender, select, female {...} other {...}}`.
+     *
+     * Georgian and Russian inflect around the subject where English does not, so a sentence that
+     * needs no branch in the source locale needs one in the target. The declared options are the
+     * contract — a translation branching on an option the message never declared is rejected.
+     */
+    VariableType["SELECT"] = "select";
+})(VariableType || (VariableType = {}));
+//# sourceMappingURL=variable-type.enum.js.map

package/dist/esm/api/localization/variable-type.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variable-type.enum.js","sourceRoot":"","sources":["../../../../src/api/localization/variable-type.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,YA4BX;AA5BD,WAAY,YAAY;IACpB,qCAAqC;IACrC,iCAAiB,CAAA;IAEjB,kFAAkF;IAClF,iCAAiB,CAAA;IAEjB,0FAA0F;IAC1F,6BAAa,CAAA;IAEb;;;;;;;OAOG;IACH,iCAAiB,CAAA;IAEjB;;;;;;OAMG;IACH,iCAAiB,CAAA;AACrB,CAAC,EA5BW,YAAY,KAAZ,YAAY,QA4BvB"}

package/dist/esm/enum/user-permission.enum.d.ts

@@ -228,7 +228,50 @@ export declare enum UserPermission {
     /** Read tenant invoices and their immutable line items. */
     BILLING_INVOICE_READ = "billing:invoice:read",
     /** Create, finalize or void tenant invoices. */
-    BILLING_INVOICE_MANAGE = "billing:invoice:manage"
+    BILLING_INVOICE_MANAGE = "billing:invoice:manage",
+    /**
+     * Read locales, namespaces, keys, translations and release history — and pull a published
+     * bundle, which is how a build gets its strings.
+     *
+     * One read permission over all of it rather than one per aggregate: none of it is secret. It
+     * is text written to be shown to users, and a key list with the values hidden is unusable
+     * for the review this permission exists to enable.
+     */
+    LOCALIZATION_READ = "localization:read",
+    /**
+     * Define the structure — locales, namespaces, message keys and their declared variables.
+     *
+     * The engineer's half, and the sharper one despite sounding like configuration. A message key
+     * is compiled into an app (`t('inbox.title')`), so archiving one breaks a screen that already
+     * shipped; and editing a message's declared variables invalidates every translation of it in
+     * every language at once. A translator must not be able to do either by accident.
+     */
+    LOCALIZATION_MESSAGE_MANAGE = "localization:message:manage",
+    /**
+     * Write translation values.
+     *
+     * The translator's whole job, and deliberately the *only* thing it grants. This is the
+     * permission handed to an outside contractor or an agency, so it must be safe to hand to
+     * someone with no stake in the codebase: they can rewrite every string in the product and
+     * cannot add a key, remove one, or put a word of it in front of a customer.
+     */
+    LOCALIZATION_TRANSLATE = "localization:translate",
+    /**
+     * Cut a release — the act that actually changes what users read.
+     *
+     * Separate from `LOCALIZATION_TRANSLATE` for the reason the release aggregate exists at all:
+     * editing has to be free so a translator can work in the tool instead of in a spreadsheet,
+     * which is only tolerable if editing is not shipping. This is the gate between the two.
+     */
+    LOCALIZATION_PUBLISH = "localization:publish",
+    /**
+     * Resolve and format messages at runtime through `POST /render`.
+     *
+     * A service permission. `iveri-messaging-api` rendering an OTP body and `iveri-billing-api`
+     * rendering an invoice line hold this and nothing else here — they have no reason to read the
+     * key catalogue, and separating it keeps a compromised worker from enumerating it.
+     */
+    LOCALIZATION_RENDER = "localization:render"
 }
 /**
  * Every member, for seeding the owner role and validating custom-role input.

package/dist/esm/enum/user-permission.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAInD,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD;;;;;;;;;;;OAWG;IACH,uBAAuB,4BAA4B;IAGnD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;CACpD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}
+{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAInD,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD;;;;;;;;;;;OAWG;IACH,uBAAuB,4BAA4B;IAGnD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;IAUjD;;;;;;;OAOG;IACH,iBAAiB,sBAAsB;IAEvC;;;;;;;OAOG;IACH,2BAA2B,gCAAgC;IAE3D;;;;;;;OAOG;IACH,sBAAsB,2BAA2B;IAEjD;;;;;;OAMG;IACH,oBAAoB,yBAAyB;IAE7C;;;;;;OAMG;IACH,mBAAmB,wBAAwB;CAC9C;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}

package/dist/esm/enum/user-permission.enum.js

@@ -266,6 +266,56 @@ export var UserPermission;
     UserPermission["BILLING_INVOICE_READ"] = "billing:invoice:read";
     /** Create, finalize or void tenant invoices. */
     UserPermission["BILLING_INVOICE_MANAGE"] = "billing:invoice:manage";
+    // ══ iveri-localization-api ══════════════════════════════════════════════
+    //
+    // Four permissions for what looks like one job, because translation has four distinct
+    // audiences and the whole point of the service is that they are not the same person. An
+    // engineer defines keys, a translator writes values, a reviewer decides a language is ready,
+    // and a service reads the result. Collapsing them means a contractor hired to translate a
+    // panel into Georgian can delete the keys the panel is built from.
+    /**
+     * Read locales, namespaces, keys, translations and release history — and pull a published
+     * bundle, which is how a build gets its strings.
+     *
+     * One read permission over all of it rather than one per aggregate: none of it is secret. It
+     * is text written to be shown to users, and a key list with the values hidden is unusable
+     * for the review this permission exists to enable.
+     */
+    UserPermission["LOCALIZATION_READ"] = "localization:read";
+    /**
+     * Define the structure — locales, namespaces, message keys and their declared variables.
+     *
+     * The engineer's half, and the sharper one despite sounding like configuration. A message key
+     * is compiled into an app (`t('inbox.title')`), so archiving one breaks a screen that already
+     * shipped; and editing a message's declared variables invalidates every translation of it in
+     * every language at once. A translator must not be able to do either by accident.
+     */
+    UserPermission["LOCALIZATION_MESSAGE_MANAGE"] = "localization:message:manage";
+    /**
+     * Write translation values.
+     *
+     * The translator's whole job, and deliberately the *only* thing it grants. This is the
+     * permission handed to an outside contractor or an agency, so it must be safe to hand to
+     * someone with no stake in the codebase: they can rewrite every string in the product and
+     * cannot add a key, remove one, or put a word of it in front of a customer.
+     */
+    UserPermission["LOCALIZATION_TRANSLATE"] = "localization:translate";
+    /**
+     * Cut a release — the act that actually changes what users read.
+     *
+     * Separate from `LOCALIZATION_TRANSLATE` for the reason the release aggregate exists at all:
+     * editing has to be free so a translator can work in the tool instead of in a spreadsheet,
+     * which is only tolerable if editing is not shipping. This is the gate between the two.
+     */
+    UserPermission["LOCALIZATION_PUBLISH"] = "localization:publish";
+    /**
+     * Resolve and format messages at runtime through `POST /render`.
+     *
+     * A service permission. `iveri-messaging-api` rendering an OTP body and `iveri-billing-api`
+     * rendering an invoice line hold this and nothing else here — they have no reason to read the
+     * key catalogue, and separating it keeps a compromised worker from enumerating it.
+     */
+    UserPermission["LOCALIZATION_RENDER"] = "localization:render";
 })(UserPermission || (UserPermission = {}));
 /**
  * Every member, for seeding the owner role and validating custom-role input.

package/dist/esm/enum/user-permission.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cA6RX;AA7RD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;;;;;;OAWG;IACH,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;AACrD,CAAC,EA7RW,cAAc,KAAd,cAAc,QA6RzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}
+{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cAqVX;AArVD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;;;;;;OAWG;IACH,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,EAAE;IACF,sFAAsF;IACtF,wFAAwF;IACxF,6FAA6F;IAC7F,0FAA0F;IAC1F,mEAAmE;IAEnE;;;;;;;OAOG;IACH,yDAAuC,CAAA;IAEvC;;;;;;;OAOG;IACH,6EAA2D,CAAA;IAE3D;;;;;;;OAOG;IACH,mEAAiD,CAAA;IAEjD;;;;;;OAMG;IACH,+DAA6C,CAAA;IAE7C;;;;;;OAMG;IACH,6DAA2C,CAAA;AAC/C,CAAC,EArVW,cAAc,KAAd,cAAc,QAqVzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}