@wildo-ai/platform-core-shared 1.1.11 → 1.1.12

package/dist/esm/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-application-executions.custom.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qBAAqB,EAGrB,oBAAoB,EAErB,MAAM,uBAAuB,CAAC;AAY/B,KAAK,wCAAwC,GACzC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,CAAC;AA2CjC;;;;GAIG;AACH,eAAO,MAAM,iFAAiF,GAC3F,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAwB7C,CAAC;AAEL,eAAO,MAAM,gFAAgF,GAC1F,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAwB7C,CAAC"}
+{"version":3,"file":"wildo-application-executions.custom.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qBAAqB,EAGrB,oBAAoB,EAErB,MAAM,uBAAuB,CAAC;AAY/B,KAAK,wCAAwC,GACzC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,CAAC;AA4CjC;;;;GAIG;AACH,eAAO,MAAM,iFAAiF,GAC3F,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAwB7C,CAAC;AAEL,eAAO,MAAM,gFAAgF,GAC1F,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAwB7C,CAAC"}

package/dist/esm/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.js

@@ -15,7 +15,7 @@ function createRepositoryOnlyDefaultVariant() {
  *
  * The original decision ("no public resource-controller surface") was made when the ONLY consumer
  * was the companion's own repository-direct persistence. The application-creation workbench now
- * consumes these rows AS RESOURCES (plan `workbench-creation-board-resources.md`, Phase 1): the
+ * consumes these rows AS RESOURCES: the
  * creation board renders them through the engine's embedded resource surfaces instead of bespoke
  * companion routes. That requires exactly the read half of an API surface, so exactly the read half
  * is opened:
@@ -30,8 +30,9 @@ function createRepositoryOnlyDefaultVariant() {
  * - CREATE/UPDATE: unchanged `REPOSITORY_ONLY`. The companion remains the only writer, and the
  *   generated write API the original decision refused stays refused.
  *
- * This config is shared with the platform tier (apps-manager registers the same map), so the read
- * routes appear there too, behind the same ORG_MEMBER gate — a deliberate consequence, not a leak.
+ * This config is shared with the platform tier (apps-manager registers the same map), but apps-manager mounts no
+ * resource controller (its `controllerWhiteList` is empty), so the read routes exist only on the development companion
+ * (#3319).
  */
 function createOrgMemberReadApiVariant() {
     return {

package/dist/esm/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-application-executions.custom.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAE5B,0CAA0C,GAC3C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oCAAoC,EACpC,yBAAyB,GAC1B,MAAM,yDAAyD,CAAC;AACjE,OAAO,EACL,8CAA8C,EAC9C,6CAA6C,GAC9C,MAAM,sDAAsD,CAAC;AAE9D,MAAM,oCAAoC,GAAG,SAAS,CAAC;AAQvD,SAAS,kCAAkC;IACzC,OAAO;QACL,WAAW,EAAE,4BAA4B,CAAC,eAAwB;QAClE,SAAS,EAAE,IAAa;QACxB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;QAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAY;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,6BAA6B;IACpC,OAAO;QACL,WAAW,EAAE,4BAA4B,CAAC,QAAiB;QAC3D,SAAS,EAAE,IAAa;QACxB,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;QAClC,SAAS,EAAE,0BAA0B,CAAC,GAAY;KACnD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iFAAiF,GAC5F,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI5F;IACA,UAAU,EAAE,8CAA8C;IAC1D,kBAAkB,EAAE,yBAAyB,CAAC,yCAAyC;IACvF,uBAAuB,EACrB,oCAAoC,CAAC,yBAAyB,CAAC,yCAAyC,CAAC;IAC3G,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;KAC7B;IACD,eAAe,EAAE,oCAAoC;IACrD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;QACpF,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;KACrF;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gFAAgF,GAC3F,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI5F;IACA,UAAU,EAAE,6CAA6C;IACzD,kBAAkB,EAAE,yBAAyB,CAAC,wCAAwC;IACtF,uBAAuB,EACrB,oCAAoC,CAAC,yBAAyB,CAAC,wCAAwC,CAAC;IAC1G,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;KAC7B;IACD,eAAe,EAAE,oCAAoC;IACrD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;QACpF,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;KACrF;CACF,CAAC,CAAC","sourcesContent":["import {\n  CORE_APP_ROLES,\n  CORE_ORG_ROLES,\n  CoreResourceOperation,\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  ResourceRelationship,\n  createResourceConfiguration_Initialization,\n} from '@wildo-ai/saas-models';\nimport {\n  CustomShared_ResourceFieldIdentifier,\n  CustomShared_ResourceType,\n} from '../core/resources/resources-types.custom.shared.schemas';\nimport {\n  Wildo_Application_ActorSystem_Execution_Schema,\n  Wildo_Application_FlowSystem_Execution_Schema,\n} from './wildo-application-executions.custom.shared.schemas';\n\nconst WildoApplicationExecution_Operations = undefined;\n\ntype WildoApplicationExecution_CoreOperations =\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.UPDATE;\n\nfunction createRepositoryOnlyDefaultVariant() {\n  return {\n    variantType: ResourceOperationVariantType.REPOSITORY_ONLY as const,\n    isDefault: true as const,\n    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n    riskLevel: ResourceOperationRiskLevel.LOW as const,\n  };\n}\n\n/**\n * READ/LIST are API-callable since 2026-09-01; CREATE/UPDATE stay repository-only.\n *\n * The original decision (\"no public resource-controller surface\") was made when the ONLY consumer\n * was the companion's own repository-direct persistence. The application-creation workbench now\n * consumes these rows AS RESOURCES (plan `workbench-creation-board-resources.md`, Phase 1): the\n * creation board renders them through the engine's embedded resource surfaces instead of bespoke\n * companion routes. That requires exactly the read half of an API surface, so exactly the read half\n * is opened:\n *\n * - READ/LIST: `API_CALL`, gated `ORG_MEMBER` — the SAME read-posture as the parent\n *   `wildoApplications` rows one resource over, resolved through organization membership. The first\n *   draft reused the repository-only variants' `APP_ADMIN_SUPER_ADMIN`, and the measurement retired\n *   it: a companion operator's app-tier roles are plain `APP_USER` (the seeded developer holds\n *   `ORG_ADMIN` via MEMBERSHIP, not app-tier super-admin), so the admin gate 403'd the exact\n *   operator this surface serves. Consistent with the audit-retention decision (2026-07-29): rows\n *   kept as the organization's own audit material are rows its members may read.\n * - CREATE/UPDATE: unchanged `REPOSITORY_ONLY`. The companion remains the only writer, and the\n *   generated write API the original decision refused stays refused.\n *\n * This config is shared with the platform tier (apps-manager registers the same map), so the read\n * routes appear there too, behind the same ORG_MEMBER gate — a deliberate consequence, not a leak.\n */\nfunction createOrgMemberReadApiVariant() {\n  return {\n    variantType: ResourceOperationVariantType.API_CALL as const,\n    isDefault: true as const,\n    roles: [CORE_ORG_ROLES.ORG_MEMBER],\n    riskLevel: ResourceOperationRiskLevel.LOW as const,\n  };\n}\n\n/**\n * These records are control-plane persistence written ONLY by the local companion. Writes stay\n * repository-first with no generated API; the READ HALF is an ORG_MEMBER-gated API surface since\n * 2026-09-01 — see `createOrgMemberReadApiVariant` above for the decision.\n */\nexport const wildoApplicationActorSystemExecutions_ResourceConfiguration_InitializationFactory =\n  (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n    typeof WildoApplicationExecution_Operations,\n    WildoApplicationExecution_CoreOperations,\n    typeof Wildo_Application_ActorSystem_Execution_Schema\n  >({\n    mainSchema: Wildo_Application_ActorSystem_Execution_Schema,\n    resourceIdentifier: CustomShared_ResourceType.WILDO_APPLICATION_ACTOR_SYSTEM_EXECUTIONS,\n    resourceFieldIdentifier:\n      CustomShared_ResourceFieldIdentifier[CustomShared_ResourceType.WILDO_APPLICATION_ACTOR_SYSTEM_EXECUTIONS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: false,\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.UPDATE,\n    ],\n    customOperation: WildoApplicationExecution_Operations,\n    operationsConfiguration: {\n      [CoreResourceOperation.CREATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n      [CoreResourceOperation.READ]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.LIST]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.UPDATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n    },\n  });\n\nexport const wildoApplicationFlowSystemExecutions_ResourceConfiguration_InitializationFactory =\n  (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n    typeof WildoApplicationExecution_Operations,\n    WildoApplicationExecution_CoreOperations,\n    typeof Wildo_Application_FlowSystem_Execution_Schema\n  >({\n    mainSchema: Wildo_Application_FlowSystem_Execution_Schema,\n    resourceIdentifier: CustomShared_ResourceType.WILDO_APPLICATION_FLOW_SYSTEM_EXECUTIONS,\n    resourceFieldIdentifier:\n      CustomShared_ResourceFieldIdentifier[CustomShared_ResourceType.WILDO_APPLICATION_FLOW_SYSTEM_EXECUTIONS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: false,\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.UPDATE,\n    ],\n    customOperation: WildoApplicationExecution_Operations,\n    operationsConfiguration: {\n      [CoreResourceOperation.CREATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n      [CoreResourceOperation.READ]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.LIST]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.UPDATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n    },\n  });\n"]}
+{"version":3,"file":"wildo-application-executions.custom.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/wildo-application-executions/wildo-application-executions.custom.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAE5B,0CAA0C,GAC3C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oCAAoC,EACpC,yBAAyB,GAC1B,MAAM,yDAAyD,CAAC;AACjE,OAAO,EACL,8CAA8C,EAC9C,6CAA6C,GAC9C,MAAM,sDAAsD,CAAC;AAE9D,MAAM,oCAAoC,GAAG,SAAS,CAAC;AAQvD,SAAS,kCAAkC;IACzC,OAAO;QACL,WAAW,EAAE,4BAA4B,CAAC,eAAwB;QAClE,SAAS,EAAE,IAAa;QACxB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;QAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAY;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,6BAA6B;IACpC,OAAO;QACL,WAAW,EAAE,4BAA4B,CAAC,QAAiB;QAC3D,SAAS,EAAE,IAAa;QACxB,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;QAClC,SAAS,EAAE,0BAA0B,CAAC,GAAY;KACnD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iFAAiF,GAC5F,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI5F;IACA,UAAU,EAAE,8CAA8C;IAC1D,kBAAkB,EAAE,yBAAyB,CAAC,yCAAyC;IACvF,uBAAuB,EACrB,oCAAoC,CAAC,yBAAyB,CAAC,yCAAyC,CAAC;IAC3G,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;KAC7B;IACD,eAAe,EAAE,oCAAoC;IACrD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;QACpF,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;KACrF;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gFAAgF,GAC3F,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI5F;IACA,UAAU,EAAE,6CAA6C;IACzD,kBAAkB,EAAE,yBAAyB,CAAC,wCAAwC;IACtF,uBAAuB,EACrB,oCAAoC,CAAC,yBAAyB,CAAC,wCAAwC,CAAC;IAC1G,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;KAC7B;IACD,eAAe,EAAE,oCAAoC;IACrD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;QACpF,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,6BAA6B,EAAE,CAAC,EAAE;QAC7E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE;KACrF;CACF,CAAC,CAAC","sourcesContent":["import {\n  CORE_APP_ROLES,\n  CORE_ORG_ROLES,\n  CoreResourceOperation,\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  ResourceRelationship,\n  createResourceConfiguration_Initialization,\n} from '@wildo-ai/saas-models';\nimport {\n  CustomShared_ResourceFieldIdentifier,\n  CustomShared_ResourceType,\n} from '../core/resources/resources-types.custom.shared.schemas';\nimport {\n  Wildo_Application_ActorSystem_Execution_Schema,\n  Wildo_Application_FlowSystem_Execution_Schema,\n} from './wildo-application-executions.custom.shared.schemas';\n\nconst WildoApplicationExecution_Operations = undefined;\n\ntype WildoApplicationExecution_CoreOperations =\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.UPDATE;\n\nfunction createRepositoryOnlyDefaultVariant() {\n  return {\n    variantType: ResourceOperationVariantType.REPOSITORY_ONLY as const,\n    isDefault: true as const,\n    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n    riskLevel: ResourceOperationRiskLevel.LOW as const,\n  };\n}\n\n/**\n * READ/LIST are API-callable since 2026-09-01; CREATE/UPDATE stay repository-only.\n *\n * The original decision (\"no public resource-controller surface\") was made when the ONLY consumer\n * was the companion's own repository-direct persistence. The application-creation workbench now\n * consumes these rows AS RESOURCES: the\n * creation board renders them through the engine's embedded resource surfaces instead of bespoke\n * companion routes. That requires exactly the read half of an API surface, so exactly the read half\n * is opened:\n *\n * - READ/LIST: `API_CALL`, gated `ORG_MEMBER` — the SAME read-posture as the parent\n *   `wildoApplications` rows one resource over, resolved through organization membership. The first\n *   draft reused the repository-only variants' `APP_ADMIN_SUPER_ADMIN`, and the measurement retired\n *   it: a companion operator's app-tier roles are plain `APP_USER` (the seeded developer holds\n *   `ORG_ADMIN` via MEMBERSHIP, not app-tier super-admin), so the admin gate 403'd the exact\n *   operator this surface serves. Consistent with the audit-retention decision (2026-07-29): rows\n *   kept as the organization's own audit material are rows its members may read.\n * - CREATE/UPDATE: unchanged `REPOSITORY_ONLY`. The companion remains the only writer, and the\n *   generated write API the original decision refused stays refused.\n *\n * This config is shared with the platform tier (apps-manager registers the same map), but apps-manager mounts no\n * resource controller (its `controllerWhiteList` is empty), so the read routes exist only on the development companion\n * (#3319).\n */\nfunction createOrgMemberReadApiVariant() {\n  return {\n    variantType: ResourceOperationVariantType.API_CALL as const,\n    isDefault: true as const,\n    roles: [CORE_ORG_ROLES.ORG_MEMBER],\n    riskLevel: ResourceOperationRiskLevel.LOW as const,\n  };\n}\n\n/**\n * These records are control-plane persistence written ONLY by the local companion. Writes stay\n * repository-first with no generated API; the READ HALF is an ORG_MEMBER-gated API surface since\n * 2026-09-01 — see `createOrgMemberReadApiVariant` above for the decision.\n */\nexport const wildoApplicationActorSystemExecutions_ResourceConfiguration_InitializationFactory =\n  (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n    typeof WildoApplicationExecution_Operations,\n    WildoApplicationExecution_CoreOperations,\n    typeof Wildo_Application_ActorSystem_Execution_Schema\n  >({\n    mainSchema: Wildo_Application_ActorSystem_Execution_Schema,\n    resourceIdentifier: CustomShared_ResourceType.WILDO_APPLICATION_ACTOR_SYSTEM_EXECUTIONS,\n    resourceFieldIdentifier:\n      CustomShared_ResourceFieldIdentifier[CustomShared_ResourceType.WILDO_APPLICATION_ACTOR_SYSTEM_EXECUTIONS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: false,\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.UPDATE,\n    ],\n    customOperation: WildoApplicationExecution_Operations,\n    operationsConfiguration: {\n      [CoreResourceOperation.CREATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n      [CoreResourceOperation.READ]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.LIST]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.UPDATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n    },\n  });\n\nexport const wildoApplicationFlowSystemExecutions_ResourceConfiguration_InitializationFactory =\n  (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n    typeof WildoApplicationExecution_Operations,\n    WildoApplicationExecution_CoreOperations,\n    typeof Wildo_Application_FlowSystem_Execution_Schema\n  >({\n    mainSchema: Wildo_Application_FlowSystem_Execution_Schema,\n    resourceIdentifier: CustomShared_ResourceType.WILDO_APPLICATION_FLOW_SYSTEM_EXECUTIONS,\n    resourceFieldIdentifier:\n      CustomShared_ResourceFieldIdentifier[CustomShared_ResourceType.WILDO_APPLICATION_FLOW_SYSTEM_EXECUTIONS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: false,\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.UPDATE,\n    ],\n    customOperation: WildoApplicationExecution_Operations,\n    operationsConfiguration: {\n      [CoreResourceOperation.CREATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n      [CoreResourceOperation.READ]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.LIST]: { variants: [createOrgMemberReadApiVariant()] },\n      [CoreResourceOperation.UPDATE]: { variants: [createRepositoryOnlyDefaultVariant()] },\n    },\n  });\n"]}