npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.1 → 1.1.3 - Mend

@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (972) hide show

package/dist/esm/base-classes/services/batches/engine-custom-batch-manifests.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"engine-custom-batch-manifests.js","sourceRoot":"","sources":["../../../../../../src/base-classes/services/batches/engine-custom-batch-manifests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AA6C1G,yEAAyE;AACzE,MAAM,CAAN,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IACjC,kEAAuC,CAAA;IACvC,4DAAiC,CAAA;AACnC,CAAC,EAHW,uBAAuB,KAAvB,uBAAuB,QAGlC;AAuED,+EAA+E;AAE/E,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAwB,CAAC;AAEhE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAAoC,CAAC;AACxF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAAmC,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,gCAAyC,CAAC;AAClG,MAAM,CAAC,MAAM,6CAA6C,GAAG,qCAA8C,CAAC;AAE5G,iFAAiF;AACjF,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAAoC,CAAC;AAExF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAG,sCAA+C,CAAC;AAE9G;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,+BAAwC,CAAC;AAEhG;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAA6B,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAoB,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAAuC,CAAC;AAEpF,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAA2B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,iBAA0B,CAAC;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,WAAoB,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAG,eAAwB,CAAC;AAEvF,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iDAAiD,GAAG,WAAoB,CAAC;AAEtF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,aAAsB,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAqB,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAA+B,CAAC;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,mBAA4B,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAgC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAiC,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAA6B,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAoB,CAAC;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,sBAA+B,CAAC;AAElF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAoB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,iBAA0B,CAAC;AAExE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAsB,CAAC;AAE/D,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mCAAmC,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,uBAAuB;IACjC,kBAAkB,EAAE,gBAAgB,CAAC,KAAK;IAC1C,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC/G,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,wCAAwC;IAClD,kBAAkB,EAAE,gBAAgB,CAAC,cAAc;IACnD,mBAAmB,EAAE,qBAAqB,CAAC,WAAW;IACtD,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mDAAmD,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,6CAA6C;IACvD,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;IACxD,mBAAmB,EAAE,qBAAqB,CAAC,WAAW;IACtD,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAChH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,mCAAmC;IAC7C,kBAAkB,EAAE,mBAAmB,CAAC,iBAAiB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,aAAa;CAC9B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC/G,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,kCAAkC;IAC5C,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAChH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,mCAAmC;IAC7C,kBAAkB,EAAE,gBAAgB,CAAC,eAAe;IACpD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0DAA0D,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC3H,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,8CAA8C;IACxD,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,qFAAqF;IACrF,iFAAiF;IACjF,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAwC,MAAM,CAAC,MAAM,CAAC;IACzG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,4BAA4B;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,aAAa;IAClD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,+BAA+B;IAC/C,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mDAAmD,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,uCAAuC;IACjD,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;IAC3B,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wCAAwC,GAAwC,MAAM,CAAC,MAAM,CAAC;IACzG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,4BAA4B;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,4EAA4E;IAC5E,cAAc,EAAE,aAAa;IAC7B,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACpG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,0BAA0B;IACpC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gCAAgC;CACtD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAqC,MAAM,CAAC,MAAM,CAAC;IACxG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,8BAA8B;IACxC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,oCAAoC;CAC1D,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACrG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,2BAA2B;IACrC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gBAAgB,2BAA2B,EAAE;CACnE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2CAA2C,GAAqC,MAAM,CAAC,MAAM,CAAC;IACzG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,+BAA+B;IACzC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,cAAc,+BAA+B,EAAE;CACrE,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC1G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,gCAAgC;IAC1C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,cAAc,gCAAgC,EAAE;IACrE,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACtG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,4BAA4B;IACtC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,cAAc,4BAA4B,EAAE;IACjE,cAAc,EAAE,uBAAuB;CACxC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0DAA0D,GAAqC,MAAM,CAAC,MAAM,CAAC;IACxH,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,8CAA8C;IACxD,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,iBAAiB,8CAA8C,EAAE;IACtF,cAAc,EAAE,iDAAiD;IACjE,0BAA0B,EAAE,KAAK;CAClC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAqC,MAAM,CAAC,MAAM,CAAC;IAChH,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,sCAAsC;IAChD,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gBAAgB,sCAAsC,EAAE;IAC7E,cAAc,EAAE,yCAAyC;IACzD,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,kCAAkC;IAC5C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gBAAgB,kCAAkC,EAAE;IACzE,cAAc,EAAE,6BAA6B;CAC9C,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,kCAAkC;IAC5C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,OAAO,kCAAkC,EAAE;IAChE,cAAc,EAAE,6BAA6B;CAC9C,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACvG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,6BAA6B;IACvC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,OAAO,6BAA6B,EAAE;IAC3D,cAAc,EAAE,wBAAwB;CACzC,CAAC,CAAC;AAEH,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAmC,MAAM,CAAC,MAAM,CAAC;IACzF,mCAAmC;IACnC,8CAA8C;IAC9C,mDAAmD;IACnD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,0DAA0D;IAC1D,mDAAmD;IACnD,wCAAwC;IACxC,wCAAwC;IACxC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,wCAAwC;IACxC,kDAAkD;IAClD,8CAA8C;IAC9C,0DAA0D;IAC1D,8CAA8C;IAC9C,yCAAyC;CAC1C,CAAC,CAAC","sourcesContent":["/*\n Declarative manifest registry for every engine-owned custom batch.\n \n Each entry mirrors the `batchCronjob_Context` + optional\n * `cronJobExpression` that the corresponding `createCustomBatchExecutionService(...)`\n * call passes to the runtime batch factory. Because manifests are pure data\n * (no service imports, no container bindings) they can be consumed by both\n * the imperative runtime wiring (`start-application.backend.service.ts`\n * reads `_BATCH_REF` to populate the `customBatches` map) and the\n declarative specification layer (`@wildo-ai/saas-specifications` reads\n * {@link ENGINE_CUSTOM_BATCH_MANIFESTS} through the dedicated\n * `@wildo-ai/saas-backend-lib/custom-batch-manifests` subpath to\n * cross-validate `scheduledExecution.customBatchRef` at module load).\n \n Keeping the manifest as the single source of truth for every batch ref\n * closes the drift gap called out as D3-a in the non-view-specification\n * coverage plan: the runtime `customBatches.set(...)` call and the authored\n * `CustomBatchScheduledExecutionSpecification.customBatchRef` both resolve\n * through the same literal, so a typo or an unregistered batch is caught at\n * build-time or module-load rather than at a silent runtime no-op.\n \n This module imports only enum tokens and declarative types; it must never\n * pull in runtime services so that the specification package (and the\n * companion tooling downstream) can import the aggregator without dragging\n * the backend runtime graph into non-runtime consumers. The `CustomBatchManifest`\n * type itself lives here rather than in `saas-specifications` to avoid a\n * package-level circular dependency (`saas-specifications` already depends on\n * `saas-backend-lib`, not the other way round).\n /\n\nimport { CoreResourceOperation, CoreResourceType, ResourcePrimaryScope } from '@wildo-ai/saas-models';\nimport { BackendResourceType } from '~wildo-backend-lib/resources/models/resources-types.backend.schemas';\n\n/\n Common (kind-agnostic) fields carried by every {@link CustomBatchManifest}\n * arm. Documented here once so the per-arm shapes below stay focused on\n * what differs between `resource_anchored` and `scope_anchored` batches.\n /\ninterface CustomBatchManifestCommon {\n /* Stable ref used both as the `customBatches.set(...)` key and the spec `customBatchRef`. /\n batchRef: string;\n /* Operation identifier from the batch's `batchCronjob_Context`. /\n operationIdentifier: string;\n /\n Cron expression from the batch's `batchCronjob_Context.cronJobExpression`\n * when declared. Omitted for purely event-triggered custom batches (for\n * example the email `batch-send` path).\n \n When {@link cronExpressionConfigurable} is `true`, this value is the\n * runtime default rather than a fixed contract — applications can\n * override it via app config and the spec validator therefore treats this\n * as a guidance cron rather than an exact echo target.\n /\n cronExpression?: string;\n /\n Marks the cron schedule as runtime-configurable (for example\n * `lifecycle:dormancy-detection`, whose schedule resolves at registration\n * from `LifecycleConfig.dormancyCronSchedule`). When `true`:\n \n - The spec validator still requires the authored\n * `CustomBatchScheduledExecutionSpecification.cronExpression` to be a\n * non-empty trimmed string when present, so companion prompts always\n * carry a concrete cadence.\n * - The validator does not require the authored cron to equal\n * {@link cronExpression} — divergence is expected and is the whole point\n * of the configurable flag.\n * - Authoring sites should add a `codeHandling.notes` entry pointing at\n * the app-config seam that owns the runtime schedule so transposition\n * prompts can find the override path.\n \n Default `false` (omitted) — every other engine batch declares a fixed\n * cron and the strict echo check applies.\n /\n cronExpressionConfigurable?: boolean;\n}\n\n/* Runtime discriminator shared by engine custom-batch manifest arms. /\nexport enum CustomBatchManifestKind {\n RESOURCE_ANCHORED = 'resource_anchored',\n SCOPE_ANCHORED = 'scope_anchored',\n}\n\n/\n Declarative anchor for a custom batch registered through\n * `createCustomBatchExecutionService(...)`. The engine co-locates a manifest\n * next to each batch factory and applications do the same for their own\n * custom batches. The specification layer (`@wildo-ai/saas-specifications`)\n * consumes these manifests to cross-check every authored `customBatchRef`\n * at module load.\n \n Keeping the manifest structurally separate from the runtime service\n * instance avoids forcing `saas-specifications` into any runtime code path\n * while still giving spec validation a single, trustworthy source of truth\n * for which batch refs exist, where they anchor, and whether they carry a\n * cron schedule.\n \n Spec-layer consumers must import this module via the dedicated\n * `@wildo-ai/saas-backend-lib/custom-batch-manifests` subpath (rather than\n * the root barrel) so that the runtime service graph stays out of the spec\n * build. The root-barrel re-export exists only for backend-runtime callers\n * that already pay for the full `saas-backend-lib` graph.\n \n The manifest is a discriminated union mirroring\n * {@link BatchesCronjobsCustomExecution_Context}:\n \n - `resource_anchored` — the batch genuinely operates on a registered\n * resource (e.g. `files-cleanup` over `FILES`). The manifest carries\n * the target `resourceIdentifier` and the spec layer cross-validates\n * the authored anchor against the runtime `batchCronjob_Context`.\n * - `scope_anchored` — the batch is event-triggered and cross-resource\n * (e.g. `email.batch-send`, `m2m-webhook-delivery`). There is no honest\n * target resource, so the manifest declares the `primaryScope` the\n * bootstrap `ExecutionContext` runs under instead. Use this arm to\n * stop pretending an event-triggered worker \"belongs\" to a resource\n * row that exists only to satisfy the bootstrap requirement.\n \n Naming: `scope_anchored` `operationIdentifier` should follow the\n * `<domain>:<batch-ref>` convention (e.g. `notifications:email.batch-send`)\n * so synthetic operation labels stay grep-able alongside their batch ref.\n * The convention is enforced by `assertCustomBatchArm` and pinned by a\n * dedicated unit test.\n /\nexport type CustomBatchManifest =\n \| (CustomBatchManifestCommon & {\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED;\n /* Resource identifier from the batch's `batchCronjob_Context`. /\n resourceIdentifier: string;\n })\n \| (CustomBatchManifestCommon & {\n kind: CustomBatchManifestKind.SCOPE_ANCHORED;\n /\n Primary scope the batch's bootstrap `ExecutionContext` runs under.\n * Mirrors `BatchesCronjobsCustomExecution_Context.primaryScope` so\n * the spec validator can cross-check the authored arm against the\n * runtime context.\n /\n primaryScope: ResourcePrimaryScope;\n });\n\n/\n Per-arm narrow alias of {@link CustomBatchManifest}. Concrete manifest\n * exports (and any caller that needs to read `resourceIdentifier` /\n * `primaryScope` directly without re-narrowing on `kind`) should prefer\n * these over the broad union type — annotating an export with the broad\n * union would re-widen the literal `kind` and force every consumer back\n * through a discriminator narrowing it does not need.\n /\nexport type ResourceAnchoredCustomBatchManifest = Extract<CustomBatchManifest, { kind: CustomBatchManifestKind.RESOURCE_ANCHORED }>;\n/* Mirror of {@link ResourceAnchoredCustomBatchManifest} for `scope_anchored` manifests. /\nexport type ScopeAnchoredCustomBatchManifest = Extract<CustomBatchManifest, { kind: CustomBatchManifestKind.SCOPE_ANCHORED }>;\n\n// ── Batch-ref literals (authoritative) ──────────────────────────────────────\n\n/* Hourly files cleanup (PENDING/unlinked/soft-deleted file rows). /\nexport const FILES_CLEANUP_BATCH_REF = 'files-cleanup' as const;\n\n/* 6-hourly consumable token cleanup (expired/consumed/exhausted/revoked). /\nexport const CONSUMABLE_TOKENS_CLEANUP_BATCH_REF = 'consumable-tokens-cleanup' as const;\n/* Durable repair for A2A tasks abandoned by a pod that died mid-turn. /\nexport const A2A_ABANDONED_TASK_SWEEP_BATCH_REF = 'a2a-abandoned-task-sweep' as const;\n\n/\n Retention sweeps for the two resources that declare `.ttl()`.\n \n MongoDB expires those rows itself through a TTL index; PostgreSQL has no equivalent, so the\n * declaration is enforced by a framework sweep instead. One ref per resource because the batch\n * system anchors a batch to a resource — the IMPLEMENTATION is shared, only the anchor differs.\n /\nexport const JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF = 'job-executions-retention-sweep' as const;\nexport const JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF = 'job-payload-storage-retention-sweep' as const;\n\n/* Daily anonymous-session cleanup (TTL'd anonymous users + their resources). /\nexport const ANONYMOUS_SESSION_CLEANUP_BATCH_REF = 'anonymous-session-cleanup' as const;\n\n/\n Daily hygiene sweep for the invitation→membership-junction model: hard-deletes\n * long-stale `INVITED` membership rows (never accepted, past the accept-token grace)\n * and reaps orphan `PENDING_INVITATION` users that never materialized (no memberships).\n * Pure tidiness — correctness holds without it (accept tokens expire at 7d, admins can\n * REVOKE/RESEND, orphan pending users cannot authenticate). Per-row deletes route through\n * the ORGANIZATION_MEMBERS DELETE op so the token-revoke prefix fires.\n /\nexport const ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF = 'organization-member-invitation-sweep' as const;\n\n/\n Hourly sweep that lifts EXPIRED time-boxed suspensions.\n \n This batch is what makes `scheduledReactivationAt` mean anything. The lifecycle verbs accept a\n * window — `organizationMembers \| suspend` takes `suspensionEndDate`, `users \| suspend_user` takes\n * `suspensionDuration` in days — and record the resolved instant on the row. Without a sweep the\n * row keeps the deadline and the subject stays suspended forever: an administrator told the system\n * \"for seven days\" and the system silently meant \"until someone remembers\".\n \n That is the SAME defect class the routed-unimplemented-operations work exists to remove — a\n * declared contract the system does not honour — so the sweep is part of the feature, not an\n * optimisation. Unlike the invitation sweep above, correctness does NOT hold without it.\n \n Every reactivation is dispatched through the resource's own lifecycle verb\n * (`ORGANIZATION_MEMBERS \| reactivate`, `USERS \| unsuspend_user`) rather than writing `status`\n * directly, so it inherits the shared transition factory's state-machine check, its\n * `authoritativeFields` declaration and — critically — the administrative-continuity floors. A\n * direct write would be a second authority that bypasses all three.\n \n Hourly rather than daily: the unit a caller can express is a DAY, so a daily run would land the\n * lift up to 24h late on a 1-day suspension — a 100% overshoot. Hourly bounds the error at ~1h\n * while staying far cheaper than the per-minute alternative.\n /\nexport const SUSPENSION_REACTIVATION_SWEEP_BATCH_REF = 'suspension-reactivation-sweep' as const;\n\n/\n Daily tenant purge — the DESTRUCTIVE half of tenant teardown (WS-A).\n \n Destroys organizations whose `status` is `DELETED` and whose `purgeScheduledAt` deadline has\n * passed, by dispatching each one through the ordinary `ORGANIZATIONS \| DELETE` core operation so\n * the existing `onParentDelete` cascade does the work. It deliberately owns NO teardown logic of\n * its own: the cascade already dispatches per-edge strategies (`DELETE` vs\n * `IMPERSONALIZE_AND_RETAIN`) and already honours edges that opted out, so a purge that removed\n * rows itself would silently hard-delete children a retention decision had marked to keep.\n \n `cronExpressionConfigurable` — the runtime schedule resolves at registration from\n * `TenantTeardownConfig.purgeCronSchedule`; the literal below is the factory's built-in default so\n * the specification layer can still render a cadence when no operator override exists.\n /\nexport const ORGANIZATION_PURGE_BATCH_REF = 'organization-purge' as const;\n\n/\n Built-in default cron for `organization-purge` — daily at 03:00.\n \n Shared between the manifest (the spec validator's echo target) and the runtime wiring (the\n * fallback when `TenantTeardownConfig.purgeCronSchedule` is absent), so the default has ONE\n * change-point rather than a fallback ladder. Daily is deliberate: the retention window is measured\n * in days, so a finer cadence buys no promptness anyone can observe.\n /\nexport const ORGANIZATION_PURGE_DEFAULT_CRON = '0 3 * ' as const;\n\n/\n Configurable dormancy detection (user/org lifecycle transitions). The cron\n * schedule is resolved at registration time from `LifecycleConfig.dormancyCronSchedule`,\n * but the manifest still echoes the batch factory's built-in default so the\n * specification layer can render a meaningful cadence even when the runtime\n * override is not yet known. Authors who override the schedule at the app\n * level must document the override in their `codeHandling.notes`.\n /\nexport const DORMANCY_DETECTION_BATCH_REF = 'lifecycle:dormancy-detection' as const;\n\n/* Event-triggered email batch send (no cron — dispatched by upstream work). /\nexport const EMAIL_BATCH_SEND_BATCH_REF = 'email.batch-send' as const;\n\n/\n Configurable data-seeding scheduled-rerun batch (Phase 7 / Item 47).\n * Wakes up on the engine tick (default `* * * * `), iterates every seed\n carrying a {@link DataSeedDefinition.schedule} block, and dispatches\n * each seed's per-scope iteration through `manualEngine.runManual` with\n * `originOverride: SCHEDULED_RERUN`.\n \n The runtime cron is resolved at registration time from\n * `DataSeedingConfig.scheduledRerunCronSchedule`; the manifest still\n * carries the factory's built-in default so the specification layer can\n * render a meaningful cadence even when the operator override is absent.\n * `cronExpressionConfigurable: true` tells the spec validator to accept\n * any non-empty authored cron rather than requiring a strict echo —\n * see {@link CustomBatchManifest.cronExpressionConfigurable} for the\n * full rationale, mirroring {@link DORMANCY_DETECTION_BATCH_REF}.\n \n Anchored on the `APPLICATION` primary scope (N8) so each app's\n * cron-opted-in seeds are walked under that app's process — same\n * pattern as `email.batch-send` / `m2m-webhook-delivery`.\n \n Naming: the `batchRef` literal stays UNPREFIXED (no `data-seeding:`\n * prefix) so the `scope_anchored` `<domain>:<batchRef>` convention test\n * picks `data-seeding` as the synthetic operation domain naturally.\n * Mirrors `email.batch-send` / `m2m-webhook-delivery`, where the\n * batch's domain context is encoded in the operationIdentifier rather\n * than duplicated into the batchRef itself.\n /\nexport const DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF = 'scheduled-rerun' as const;\n\n/\n Built-in default cron for the engine-owned `data-seeding:scheduled-rerun`\n * batch — a minute-tick (`'* * * * '`). Shared between the manifest (which\n surfaces it to the spec validator as the authored-default echo target) and\n * the runtime wiring (which falls back to it when\n * `DataSeedingConfig.scheduledRerunCronSchedule` is not provided). Collapsing\n * the value to one `as const` literal eliminates the previous\n * `?? manifest.cronExpression ?? '* * * * '` trailing-fallback ladder and\n makes the default change-point discoverable.\n /\nexport const DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON = ' * * * ' as const;\n\n/\n Engine-owned ETL pipeline scheduled-run batch (partial-resource paper, PR-12). On each engine\n * tick it walks every registered resource declaring an `externalDataPipeline` with a `scheduleCron`, and\n * dispatches the due ones through the ETL run service (mode selection there carries the PR-6\n * \"a partial run orphans NOTHING\" guard). Unprefixed ref, same `<domain>:<batchRef>` convention\n * as {@link DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}.\n /\nexport const EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF = 'scheduled-run' as const;\n\n/* Built-in engine tick for `external-data:scheduled-run` — per-pipeline cadence lives on `scheduleCron`. /\nexport const EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_DEFAULT_CRON = ' * * * ' as const;\n\n/\n Engine-owned `DataSeedRun` retention cleanup batch (audit L4-10,\n * post-Phase-7 close-out). Prunes terminal-status rows older than\n * `DataSeedingConfig.runRetentionDays` once per day, while\n * preserving the most-recent (`MAX(seedVersion)`) row per business-key\n * group so dispatcher idempotency is never broken.\n \n The batch ref is unprefixed (no `data-seeding:` literal) so the\n * `scope_anchored` `<domain>:<batchRef>` convention test picks\n * `data-seeding` as the synthetic operation domain naturally — same\n * pattern as {@link DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}.\n /\nexport const DATA_SEEDING_RUN_CLEANUP_BATCH_REF = 'run-cleanup' as const;\n\n/\n Built-in cron for the engine-owned `data-seeding:run-cleanup` batch —\n * daily at 03:30 UTC. Co-scheduled with the other low-traffic-window\n * cleanup batches (`anonymous-session-cleanup` runs at 03:00 UTC; the\n * 30-minute offset keeps the two clean-ups out of each other's way\n * even though their target collections are disjoint).\n \n Not currently runtime-configurable — the cadence isn't operationally\n * sensitive for a retention sweep (an extra hour of grown ledger costs\n * cents). Make it configurable later via `DataSeedingConfig` if a\n * deployment needs a different window.\n /\nexport const DATA_SEEDING_RUN_CLEANUP_CRON = '30 3 * ' as const;\n\n/\n Event-triggered M2M outbound webhook delivery — one job per delivery row\n * enqueued by `M2MWebhookDispatcherBackendService.enqueueDelivery`. No cron,\n * no schedule: the job lifecycle is driven entirely by spec'd\n * `WEBHOOK_ORGANIZATION` / `WEBHOOK_APPLICATION` notification channels firing\n * from resource operations.\n \n Anchored on the `APPLICATION` primary scope (Step 3 of the email-templates\n * deprecation plan, A4 cleanup) rather than a single org-variant delivery-log\n * resource — a polymorphic event-triggered worker has no honest \"primary\"\n * resource (each enqueued row carries its own `scope: { type, id }` and\n * targets either `ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG` or\n * `APPLICATION_M2M_WEBHOOK_DELIVERY_LOG`). The synthetic bootstrap operation\n * runs through `APPLICATION.READ`, populates the application id, then\n * `withOperation()` swaps in `notifications:m2m-webhook-delivery` so audit\n * trails surface the honest batch identity instead of pretending the worker\n * mutates the org-variant log on every job — including for app-scoped\n * deliveries where that anchor was a flat-out lie.\n \n Per-row resource-type resolution remains the responsibility of the worker,\n * not the bootstrap context: see `resolveDeliveryLogResourceType` in\n * `m2m-webhook-delivery-log.repository.ts` (drives both reads and writes\n * off the per-row `input.scope.type`).\n /\nexport const M2M_WEBHOOK_DELIVERY_BATCH_REF = 'm2m-webhook-delivery' as const;\n\n/\n Event-triggered A2A push-notification delivery — one job per (task transition × registered\n * webhook), enqueued by `A2APushDispatcherBackendService` when a task's status advances.\n \n Anchored on `APPLICATION` for exactly the reason the M2M ref above gives, and one degree more\n * so: this worker's rows span THREE polymorphic variants (`USER_` / `ORGANIZATION_` /\n * `APPLICATION_A2A_PUSH_DELIVERY_LOG`), so there is no single resource it could honestly claim to\n * mutate. Each enqueued job carries its own owner scope and the worker resolves the variant from\n * it — see `resolveDeliveryLogScope` in `a2a-push-delivery-log.repository.ts`.\n \n No cron, no schedule: the job lifecycle is driven entirely by task transitions on tasks that\n * carry at least one push-notification configuration.\n /\nexport const A2A_PUSH_DELIVERY_BATCH_REF = 'a2a-push-delivery' as const;\n\n/\n Event-triggered SIEM webhook delivery — one job per security audit event\n * enqueued by `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`\n * (the SIEM webhook sink; Layer 2 of the audit-event pipeline). No cron, no schedule: the job\n * lifecycle is driven entirely by audit events firing for organizations that\n * have `siemExportConfig.enabled === true`.\n \n The enqueue side is gated per-org at dispatch time (the dispatcher returns\n * early when SIEM export is disabled or the event is filtered out), so the\n * drain is registered unconditionally — mirroring `email.batch-send` /\n * `m2m-webhook-delivery`. Gating the drain behind a global flag would\n * re-introduce the `JOB_BATCH_REF_NOT_FOUND → DLQ` drop this batch exists to\n * fix whenever an org has SIEM enabled but the global flag is off.\n \n Anchored on the `APPLICATION` primary scope (same as email / m2m): the\n * worker itself is a thin adapter that delegates to\n * `SIEMWebhookDeliveryBackendService.processDelivery`, which builds its own\n * internal `APP_ADMIN_SUPER_ADMIN @ APPLICATION` execution context for its DLQ\n * writes. The synthetic bootstrap operation runs through `APPLICATION.READ`,\n * then `withOperation()` swaps in `compliance:siem.webhook-delivery` so audit\n * trails surface the honest batch identity.\n \n The `batchRef` literal is the exact string the dispatcher passes to\n * `enqueueCustomBatch(...)` — importing it from here keeps a single source of\n * truth across queue dispatch, runtime wiring, and spec cross-validation.\n /\nexport const SIEM_WEBHOOK_DELIVERY_BATCH_REF = 'siem.webhook-delivery' as const;\n\n/\n Cron-triggered immudb audit-completeness reconciler (audit Phase 3). Periodically\n * replays the authoritative `AUDIT_LOGS` store into every reconcilable audit sink\n * (idempotent write-if-absent, keyed by `eventId`), guaranteeing the at-least-once\n * completeness the best-effort real-time fan-out cannot. The `<domain>:<batchRef>`\n * operation uses the `compliance` domain (owning module `compliance/audit-trails/`),\n * mirroring the SIEM delivery batch.\n /\nexport const IMMUDB_AUDIT_RECONCILE_BATCH_REF = 'immudb.audit-reconcile' as const;\n\n/\n Cron-triggered audit-log ARCHIVAL batch (audit Phase 5 / F1). Exports audit\n * records older than the operator-configured archival horizon\n * (`AppConfiguration.auditTrail.archiveAfterDays`) to durable off-DB\n * file-storage artifacts — one JSON artifact per UTC day-window. Records are\n * NEVER deleted: `AUDIT_LOGS` is immutable (G5), so this is a copy-out, not a\n * prune. The `<domain>:<batchRef>` operation uses the `compliance` domain\n * (owning module `compliance/audit-trails/`), mirroring the reconcile + SIEM\n * batches. OPT-IN: no-ops when `auditTrail.archiveAfterDays` is undefined.\n /\nexport const AUDIT_LOGS_ARCHIVE_BATCH_REF = 'audit-logs-archive' as const;\n\n/\n Built-in cron for the engine-owned `compliance:audit-logs-archive` batch —\n * daily at 04:00 UTC. Sequenced AFTER the low-traffic-window cleanup batches\n * (`anonymous-session-cleanup` 03:00, `data-seeding:run-cleanup` 03:30) so the\n * nightly maintenance sweeps stay out of each other's way. A daily cadence is\n * sufficient: a day-window only becomes archivable once it is fully older than\n * the (≥ 365-day, in production) archival horizon, so there is nothing to gain\n * from a finer tick. Not runtime-configurable — the operator-facing knob is\n * `auditTrail.archiveAfterDays`, NOT the cadence.\n /\nexport const AUDIT_LOGS_ARCHIVE_CRON = '0 4 * ' as const;\n\n/\n Hourly RAG reconciliation sweep (plan §3.c \"backstop sweep\", DL1). ONE mechanism, three jobs:\n * re-ingests chunk sets whose stored `contentHash` no longer matches the live source field\n * (whatever the write hook missed — raw repository doors, crashed post-commit work, files that\n * finished scanning after their binding write), deletes ORPHANED chunk sets whose parent row or\n * field declaration is gone (the bound on every log-never-throw removal seam, and the foundation of\n * the DL3 `.ttl()` door), and COUNTS the NULL-vector embedding backlog (log-only — the sibling\n * `rag:embedding-drain` batch drains it; this count is the independent cross-check).\n \n The batchRef literal stays UNPREFIXED so the `scope_anchored` `<domain>:<batchRef>` convention\n * test derives the `rag` domain from the operation identifier — the `data-seeding:scheduled-rerun`\n * pattern.\n /\nexport const RAG_RECONCILIATION_SWEEP_BATCH_REF = 'reconciliation-sweep' as const;\n\n/* Hourly on the hour — the standard engine-sweep cadence (files-cleanup, the A2A sweep). /\nexport const RAG_RECONCILIATION_SWEEP_CRON = '0 * * ' as const;\n\n/\n The RAG embedding drain (plan §3.d, Phase 4) — the worker that FILLS the NULL-vector ledger the\n * hourly sweep only counts: pages pending chunks, resolves the application's embeddings provider\n * by applicability class, embeds in provider-declared batches, stamps\n * `vector`/`embeddingClass`/`embeddingModel`/`embeddingDims`, and re-embeds chunks whose stamp no\n * longer matches the current class→model binding (the DL2 migration engine).\n \n A SIBLING batch rather than a fourth phase of the reconciliation sweep, deliberately: the sweep\n * is content reconciliation (hash/orphan correctness, hourly is plenty), the drain is provider\n * I/O (freshness-bound, provider-failure-retrying) — one batch per purpose keeps each run's\n * bounds, failure posture and cadence honest for its own job.\n \n The batchRef literal stays UNPREFIXED so the `scope_anchored` `<domain>:<batchRef>` convention\n * test derives the `rag` domain from the operation identifier.\n /\nexport const RAG_EMBEDDING_DRAIN_BATCH_REF = 'embedding-drain' as const;\n\n/\n Every 5 minutes — a freshly written chunk is retrievable within minutes rather than riding the\n * hourly reconciliation cadence. Deliberately MORE frequent than every other engine sweep because\n * this batch is a FRESHNESS drain, not a correctness backstop: an idle run costs one indexed\n * NULL-vector read (the steady state), while an hourly drain would make every new corpus write\n * invisible to retrieval for up to an hour. The 15-minute audit reconciler is the nearest\n * cadence precedent; 5 minutes is the same shape one notch tighter, and the run bounds\n * (`MAX_CHUNKS_PER_RUN`) keep a busy run comfortably inside the window.\n /\nexport const RAG_EMBEDDING_DRAIN_CRON = '/5 * * * ' as const;\n\n// ── Manifests ───────────────────────────────────────────────────────────────\n\nexport const ENGINE_FILES_CLEANUP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: FILES_CLEANUP_BATCH_REF,\n resourceIdentifier: CoreResourceType.FILES,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '0 * * ',\n});\n\n/\n Every 15 minutes: frequent enough that a retention window is honoured with useful precision\n * (MongoDB's own TTL monitor runs about once a minute), infrequent enough that a backlog is worked\n * down over several runs rather than in one long-running statement.\n /\nexport const ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.JOB_EXECUTIONS,\n operationIdentifier: CoreResourceOperation.DELETE_MANY,\n cronExpression: '/15 * * * ',\n});\n\nexport const ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.JOB_PAYLOAD_STORAGE,\n operationIdentifier: CoreResourceOperation.DELETE_MANY,\n cronExpression: '/15 * * * ',\n});\n\nexport const ENGINE_CONSUMABLE_TOKENS_CLEANUP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: CONSUMABLE_TOKENS_CLEANUP_BATCH_REF,\n resourceIdentifier: BackendResourceType.CONSUMABLE_TOKENS,\n operationIdentifier: CoreResourceOperation.DELETE,\n cronExpression: '0 /6 * * ',\n});\n\n/\n Marks A2A tasks FAILED when their liveness lease is gone — the durable half of the\n * derive-on-read design. Hourly is deliberate: `tasks/get` already reports abandoned\n * tasks correctly in real time, so this only has to stop the STORED rows lying to\n * LIST / analytics / audit, which tolerates an hour of lag.\n /\nexport const ENGINE_A2A_ABANDONED_TASK_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: A2A_ABANDONED_TASK_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.USER_FLOW_ACTOR_TASKS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '0 * * ',\n});\n\nexport const ENGINE_ANONYMOUS_SESSION_CLEANUP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: ANONYMOUS_SESSION_CLEANUP_BATCH_REF,\n resourceIdentifier: CoreResourceType.ANONYMOUS_USERS,\n operationIdentifier: CoreResourceOperation.DELETE,\n cronExpression: '0 3 * ',\n});\n\nexport const ENGINE_ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATION_MEMBERS,\n operationIdentifier: CoreResourceOperation.DELETE,\n // Daily at 04:00 UTC — after anonymous-session cleanup (03:00) and staggered off the\n // 6-hourly token cleanup so the accept tokens for swept rows are already purged.\n cronExpression: '0 4 * ',\n});\n\n/\n Resource-anchored on ORGANIZATIONS/DELETE — the operation the batch genuinely dispatches, not a\n * synthetic label. Scheduled at 03:00, one hour BEFORE the invitation sweep (04:00) on purpose: a\n * purge orphans the `PENDING_INVITATION` user shells of any never-accepted invitations in the\n * destroyed tenant, and the sweep is what reaps orphan shells. Running the purge first means those\n * shells are collected the same night rather than a day later.\n /\nexport const ENGINE_ORGANIZATION_PURGE_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: ORGANIZATION_PURGE_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATIONS,\n operationIdentifier: CoreResourceOperation.DELETE,\n cronExpression: ORGANIZATION_PURGE_DEFAULT_CRON,\n cronExpressionConfigurable: true,\n});\n\n/\n Resource-anchored on ORGANIZATION_MEMBERS/UPDATE — one of the two operations the sweep genuinely\n * dispatches (the other is `USERS \| unsuspend_user`, which also borrows UPDATE). Anchoring names a\n * real dispatched operation rather than a synthetic label, per the convention above.\n \n `0 * * * ` — hourly on the hour. See the ref's documentation for why not daily.\n /\nexport const ENGINE_SUSPENSION_REACTIVATION_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: SUSPENSION_REACTIVATION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATION_MEMBERS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '0 * * * ',\n cronExpressionConfigurable: true,\n});\n\nexport const ENGINE_DORMANCY_DETECTION_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: DORMANCY_DETECTION_BATCH_REF,\n resourceIdentifier: CoreResourceType.USER_LIFECYCLE_STATE,\n operationIdentifier: CoreResourceOperation.UPDATE,\n // Runtime cron is resolved from `LifecycleConfig.dormancyCronSchedule` and\n // the manifest value is only the factory's built-in fallback. Marking the\n // schedule as configurable tells the spec validator to accept any non-empty\n // authored cron rather than requiring a strict echo (see\n // `CustomBatchManifest.cronExpressionConfigurable` for the full rationale).\n cronExpression: '0 /6 * * ',\n cronExpressionConfigurable: true,\n});\n\n/\n Event-triggered email batch send. Anchored on the `APPLICATION` primary\n * scope — see {@link CustomBatchManifest} `scope_anchored` arm and the\n * OD-2.c branch of\n * `ExecutionContextCreatorBackendService.createForInternalCustomBatch`.\n \n The synthetic bootstrap operation runs through `APPLICATION.READ`, then\n * `withOperation()` swaps in `notifications:email.batch-send` so audit\n * trails surface the honest batch identity.\n /\nexport const ENGINE_EMAIL_BATCH_SEND_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: EMAIL_BATCH_SEND_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: 'notifications:email.batch-send',\n});\n\n/\n Event-triggered M2M outbound webhook delivery — anchored on the `APPLICATION`\n * primary scope (see {@link M2M_WEBHOOK_DELIVERY_BATCH_REF} for the full\n * rationale and the OD-2.c bootstrap branch in\n * `ExecutionContextCreatorBackendService.createForInternalCustomBatch`).\n /\nexport const ENGINE_M2M_WEBHOOK_DELIVERY_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: M2M_WEBHOOK_DELIVERY_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: 'notifications:m2m-webhook-delivery',\n});\n\n/\n Event-triggered SIEM webhook delivery — anchored on the `APPLICATION`\n * primary scope (see {@link SIEM_WEBHOOK_DELIVERY_BATCH_REF} for the full\n * rationale and the OD-2.c bootstrap branch in\n * `ExecutionContextCreatorBackendService.createForInternalCustomBatch`).\n \n The `<domain>:<batchRef>` operation identifier uses the `compliance` domain\n * (the owning module folder, `compliance/audit-trails/`), mirroring how\n * `email.batch-send` / `m2m-webhook-delivery` take their `notifications:`\n * prefix from their owning module.\n /\n/\n Event-triggered A2A push-notification delivery — anchored on the `APPLICATION` primary scope\n * (see {@link A2A_PUSH_DELIVERY_BATCH_REF}). The `flows-actors:` prefix names the owning module,\n * mirroring how `m2m-webhook-delivery` takes its `notifications:` prefix from its own.\n /\nexport const ENGINE_A2A_PUSH_DELIVERY_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: A2A_PUSH_DELIVERY_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `flows-actors:${A2A_PUSH_DELIVERY_BATCH_REF}`,\n});\n\nexport const ENGINE_SIEM_WEBHOOK_DELIVERY_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: SIEM_WEBHOOK_DELIVERY_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `compliance:${SIEM_WEBHOOK_DELIVERY_BATCH_REF}`,\n});\n\n/\n Cron audit-completeness reconciler (audit Phase 3). Scope-anchored @ APPLICATION —\n * it replays EVERY org's audit rows for system-wide completeness, so there is no\n * single honest target resource (mirrors the SIEM delivery anchoring). Fixed\n * every-15-minutes cadence: a completeness backfill only needs to catch the rare miss\n * the real-time sink dropped; not operator-configurable in v1. This `cronExpression`\n * is BOTH the spec cross-validation target AND (consumed by the batch's\n * `batchCronjob_Context.cronJobExpression`) the value that actually schedules the run.\n /\nexport const ENGINE_IMMUDB_AUDIT_RECONCILE_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: IMMUDB_AUDIT_RECONCILE_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `compliance:${IMMUDB_AUDIT_RECONCILE_BATCH_REF}`,\n cronExpression: '/15 * * * ',\n});\n\n/\n Cron audit-log archival batch (audit Phase 5 / F1). Scope-anchored @\n * APPLICATION — it scans EVERY org's aged audit rows into per-day archival\n * artifacts (cross-org, one artifact per day-window), so there is no single\n * honest target resource (mirrors the reconcile + SIEM anchoring). Fixed daily\n * cadence ({@link AUDIT_LOGS_ARCHIVE_CRON}); the operator-facing knob is the\n * archival horizon, not the schedule. This `cronExpression` is BOTH the spec\n * cross-validation target AND (consumed by the batch's\n * `batchCronjob_Context.cronJobExpression`) the value that actually schedules\n * the run — omitting it would register the batch but never fire it.\n /\nexport const ENGINE_AUDIT_LOGS_ARCHIVE_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: AUDIT_LOGS_ARCHIVE_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `compliance:${AUDIT_LOGS_ARCHIVE_BATCH_REF}`,\n cronExpression: AUDIT_LOGS_ARCHIVE_CRON,\n});\n\n/\n ETL pipeline scheduled-run batch (partial-resource paper, PR-12). Anchored on the\n * `APPLICATION` primary scope — slice 1 admits only SINGLE_TENANT_BINDING pipelines, so a\n * pipeline is app-wide by construction. Each engine tick walks every registered resource\n * declaring `externalDataPipeline.scheduleCron` and dispatches the DUE ones through the ETL run service.\n * The engine tick is fixed (`cronExpressionConfigurable: false`) — the operator-facing cadence\n * knob is each pipeline's own `scheduleCron`, never this tick.\n /\nexport const ENGINE_EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `external-data:${EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF}`,\n cronExpression: EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_DEFAULT_CRON,\n cronExpressionConfigurable: false,\n});\n\n/\n Data-seeding scheduled-rerun batch (Phase 7 / Item 47). Anchored on the\n * `APPLICATION` primary scope — see {@link DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}\n * for the rationale. The synthetic bootstrap operation runs through\n * `APPLICATION.READ`; the worker then walks every cron-opted-in seed\n * under that app's process. The cron expression is overridable via\n * `DataSeedingConfig.scheduledRerunCronSchedule` — the manifest's\n * `cronExpression` is the factory's built-in fallback used when no\n * operator override is provided.\n /\nexport const ENGINE_DATA_SEEDING_SCHEDULED_RERUN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `data-seeding:${DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}`,\n cronExpression: DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON,\n cronExpressionConfigurable: true,\n});\n\n/\n Data-seeding `DataSeedRun` retention cleanup batch (audit L4-10,\n * post-Phase-7 close-out). Anchored on the `APPLICATION` primary scope\n * — see {@link DATA_SEEDING_RUN_CLEANUP_BATCH_REF} for the rationale.\n \n Cron is fixed (not `cronExpressionConfigurable`) — a daily 03:30 UTC\n * sweep is sufficient for retention; the operator-facing knob is\n * `DataSeedingConfig.runRetentionDays`, NOT the cadence. The retention\n * window itself is read from `DataSeedingConfig.runRetentionDays` at\n * batch tick time (NOT at registration), so an in-place config change\n * takes effect on the next tick without a redeploy.\n /\nexport const ENGINE_DATA_SEEDING_RUN_CLEANUP_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: DATA_SEEDING_RUN_CLEANUP_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `data-seeding:${DATA_SEEDING_RUN_CLEANUP_BATCH_REF}`,\n cronExpression: DATA_SEEDING_RUN_CLEANUP_CRON,\n});\n\n/\n Hourly RAG reconciliation sweep — anchored on the `APPLICATION` primary scope: it walks EVERY\n * resource type declaring `.ragSource()` fields plus every chunk set in every reachable store, so\n * there is no single honest target resource (the reconcile/SIEM/archive anchoring rationale). The\n * `rag:` prefix names the owning module folder (`src/rag/`), per the `<domain>:<batchRef>`\n * convention. This `cronExpression` is BOTH the spec cross-validation target AND the value that\n * actually schedules the run — omitting it would register the batch but never fire it.\n /\nexport const ENGINE_RAG_RECONCILIATION_SWEEP_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: RAG_RECONCILIATION_SWEEP_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `rag:${RAG_RECONCILIATION_SWEEP_BATCH_REF}`,\n cronExpression: RAG_RECONCILIATION_SWEEP_CRON,\n});\n\n/\n Five-minute RAG embedding drain — anchored on the `APPLICATION` primary scope for the same\n * reason as the reconciliation sweep: it walks every chunk set in every reachable store, so\n * there is no single honest target resource. This `cronExpression` is BOTH the spec\n * cross-validation target AND the value that actually schedules the run — omitting it would\n * register the batch but never fire it.\n /\nexport const ENGINE_RAG_EMBEDDING_DRAIN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: RAG_EMBEDDING_DRAIN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `rag:${RAG_EMBEDDING_DRAIN_BATCH_REF}`,\n cronExpression: RAG_EMBEDDING_DRAIN_CRON,\n});\n\n// ── Aggregator ──────────────────────────────────────────────────────────────\n\n/\n Frozen registry of every engine-owned custom batch. The specification\n * package seeds {@link registerCustomBatchManifests} from this list at\n * engine-spec bootstrap so authored `scheduledExecution.customBatchRef`\n * values cross-validate against the same runtime anchors the backend\n * `customBatches.set(...)` block uses.\n */\nexport const ENGINE_CUSTOM_BATCH_MANIFESTS: readonly CustomBatchManifest[] = Object.freeze([\n ENGINE_FILES_CLEANUP_BATCH_MANIFEST,\n ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST,\n ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST,\n ENGINE_CONSUMABLE_TOKENS_CLEANUP_BATCH_MANIFEST,\n ENGINE_ANONYMOUS_SESSION_CLEANUP_BATCH_MANIFEST,\n ENGINE_A2A_ABANDONED_TASK_SWEEP_BATCH_MANIFEST,\n ENGINE_ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_MANIFEST,\n ENGINE_SUSPENSION_REACTIVATION_SWEEP_BATCH_MANIFEST,\n ENGINE_ORGANIZATION_PURGE_BATCH_MANIFEST,\n ENGINE_DORMANCY_DETECTION_BATCH_MANIFEST,\n ENGINE_EMAIL_BATCH_SEND_BATCH_MANIFEST,\n ENGINE_M2M_WEBHOOK_DELIVERY_BATCH_MANIFEST,\n ENGINE_A2A_PUSH_DELIVERY_BATCH_MANIFEST,\n ENGINE_SIEM_WEBHOOK_DELIVERY_BATCH_MANIFEST,\n ENGINE_IMMUDB_AUDIT_RECONCILE_BATCH_MANIFEST,\n ENGINE_AUDIT_LOGS_ARCHIVE_BATCH_MANIFEST,\n ENGINE_DATA_SEEDING_SCHEDULED_RERUN_BATCH_MANIFEST,\n ENGINE_DATA_SEEDING_RUN_CLEANUP_BATCH_MANIFEST,\n ENGINE_EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_MANIFEST,\n ENGINE_RAG_RECONCILIATION_SWEEP_BATCH_MANIFEST,\n ENGINE_RAG_EMBEDDING_DRAIN_BATCH_MANIFEST,\n]);\n"]}
1	+ {"version":3,"file":"engine-custom-batch-manifests.js","sourceRoot":"","sources":["../../../../../../src/base-classes/services/batches/engine-custom-batch-manifests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AA6C1G,yEAAyE;AACzE,MAAM,CAAN,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IACjC,kEAAuC,CAAA;IACvC,4DAAiC,CAAA;AACnC,CAAC,EAHW,uBAAuB,KAAvB,uBAAuB,QAGlC;AAuED,+EAA+E;AAE/E,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAwB,CAAC;AAEhE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAAoC,CAAC;AACxF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAAmC,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,gCAAyC,CAAC;AAClG,MAAM,CAAC,MAAM,6CAA6C,GAAG,qCAA8C,CAAC;AAE5G,iFAAiF;AACjF,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAAoC,CAAC;AAExF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAG,sCAA+C,CAAC;AAE9G;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,+BAAwC,CAAC;AAEhG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,yBAAkC,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAsB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAiC,CAAC;AAElF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAA6B,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,WAAoB,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAAuC,CAAC;AAEpF,gFAAgF;AAChF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,gBAAyB,CAAC;AAE5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAA2B,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,iBAA0B,CAAC;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,WAAoB,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAG,eAAwB,CAAC;AAEvF,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iDAAiD,GAAG,WAAoB,CAAC;AAEtF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,aAAsB,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAqB,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAA+B,CAAC;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,mBAA4B,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAgC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAiC,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAA6B,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAoB,CAAC;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,sBAA+B,CAAC;AAElF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAoB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,iBAA0B,CAAC;AAExE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAsB,CAAC;AAE/D,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mCAAmC,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,uBAAuB;IACjC,kBAAkB,EAAE,gBAAgB,CAAC,KAAK;IAC1C,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC/G,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,wCAAwC;IAClD,kBAAkB,EAAE,gBAAgB,CAAC,cAAc;IACnD,mBAAmB,EAAE,qBAAqB,CAAC,WAAW;IACtD,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mDAAmD,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,6CAA6C;IACvD,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;IACxD,mBAAmB,EAAE,qBAAqB,CAAC,WAAW;IACtD,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAChH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,mCAAmC;IAC7C,kBAAkB,EAAE,mBAAmB,CAAC,iBAAiB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,aAAa;CAC9B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC/G,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,kCAAkC;IAC5C,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAChH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,mCAAmC;IAC7C,kBAAkB,EAAE,gBAAgB,CAAC,eAAe;IACpD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0DAA0D,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC3H,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,8CAA8C;IACxD,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,qFAAqF;IACrF,iFAAiF;IACjF,cAAc,EAAE,WAAW;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAwC,MAAM,CAAC,MAAM,CAAC;IACzG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,4BAA4B;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,aAAa;IAClD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,+BAA+B;IAC/C,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH;;;;;;;;GAQG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAwC,MAAM,CAAC,MAAM,CAAC;IAClG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,qBAAqB;IAC/B,kBAAkB,EAAE,gBAAgB,CAAC,0BAA0B;IAC/D,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,aAAa;IAC7B,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC7G,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,gCAAgC;IAC1C,kBAAkB,EAAE,gBAAgB,CAAC,0BAA0B;IAC/D,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,YAAY;IAC5B,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6CAA6C,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC9G,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,iCAAiC;IAC3C,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,YAAY;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mDAAmD,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpH,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,uCAAuC;IACjD,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,cAAc,EAAE,WAAW;IAC3B,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wCAAwC,GAAwC,MAAM,CAAC,MAAM,CAAC;IACzG,IAAI,EAAE,uBAAuB,CAAC,iBAAiB;IAC/C,QAAQ,EAAE,4BAA4B;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;IACjD,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,4EAA4E;IAC5E,cAAc,EAAE,aAAa;IAC7B,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,kCAAkC;IAC5C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,0BAA0B;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sCAAsC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACpG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,0BAA0B;IACpC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gCAAgC;CACtD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAqC,MAAM,CAAC,MAAM,CAAC;IACxG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,8BAA8B;IACxC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,oCAAoC;CAC1D,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACrG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,2BAA2B;IACrC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gBAAgB,2BAA2B,EAAE;CACnE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2CAA2C,GAAqC,MAAM,CAAC,MAAM,CAAC;IACzG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,+BAA+B;IACzC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,cAAc,+BAA+B,EAAE;CACrE,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC1G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,gCAAgC;IAC1C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,cAAc,gCAAgC,EAAE;IACrE,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACtG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,4BAA4B;IACtC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,cAAc,4BAA4B,EAAE;IACjE,cAAc,EAAE,uBAAuB;CACxC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0DAA0D,GAAqC,MAAM,CAAC,MAAM,CAAC;IACxH,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,8CAA8C;IACxD,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,iBAAiB,8CAA8C,EAAE;IACtF,cAAc,EAAE,iDAAiD;IACjE,0BAA0B,EAAE,KAAK;CAClC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kDAAkD,GAAqC,MAAM,CAAC,MAAM,CAAC;IAChH,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,sCAAsC;IAChD,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gBAAgB,sCAAsC,EAAE;IAC7E,cAAc,EAAE,yCAAyC;IACzD,0BAA0B,EAAE,IAAI;CACjC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,kCAAkC;IAC5C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,gBAAgB,kCAAkC,EAAE;IACzE,cAAc,EAAE,6BAA6B;CAC9C,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC5G,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,kCAAkC;IAC5C,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,OAAO,kCAAkC,EAAE;IAChE,cAAc,EAAE,6BAA6B;CAC9C,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAqC,MAAM,CAAC,MAAM,CAAC;IACvG,IAAI,EAAE,uBAAuB,CAAC,cAAc;IAC5C,QAAQ,EAAE,6BAA6B;IACvC,YAAY,EAAE,oBAAoB,CAAC,WAAW;IAC9C,mBAAmB,EAAE,OAAO,6BAA6B,EAAE;IAC3D,cAAc,EAAE,wBAAwB;CACzC,CAAC,CAAC;AAEH,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAmC,MAAM,CAAC,MAAM,CAAC;IACzF,mCAAmC;IACnC,8CAA8C;IAC9C,mDAAmD;IACnD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,0DAA0D;IAC1D,mDAAmD;IACnD,6CAA6C;IAC7C,iCAAiC;IACjC,4CAA4C;IAC5C,wCAAwC;IACxC,wCAAwC;IACxC,8CAA8C;IAC9C,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,wCAAwC;IACxC,kDAAkD;IAClD,8CAA8C;IAC9C,0DAA0D;IAC1D,8CAA8C;IAC9C,yCAAyC;CAC1C,CAAC,CAAC","sourcesContent":["/*\n Declarative manifest registry for every engine-owned custom batch.\n \n Each entry mirrors the `batchCronjob_Context` + optional\n * `cronJobExpression` that the corresponding `createCustomBatchExecutionService(...)`\n * call passes to the runtime batch factory. Because manifests are pure data\n * (no service imports, no container bindings) they can be consumed by both\n * the imperative runtime wiring (`start-application.backend.service.ts`\n * reads `_BATCH_REF` to populate the `customBatches` map) and the\n declarative specification layer (`@wildo-ai/saas-specifications` reads\n * {@link ENGINE_CUSTOM_BATCH_MANIFESTS} through the dedicated\n * `@wildo-ai/saas-backend-lib/custom-batch-manifests` subpath to\n * cross-validate `scheduledExecution.customBatchRef` at module load).\n \n Keeping the manifest as the single source of truth for every batch ref\n * closes the drift gap called out as D3-a in the non-view-specification\n * coverage plan: the runtime `customBatches.set(...)` call and the authored\n * `CustomBatchScheduledExecutionSpecification.customBatchRef` both resolve\n * through the same literal, so a typo or an unregistered batch is caught at\n * build-time or module-load rather than at a silent runtime no-op.\n \n This module imports only enum tokens and declarative types; it must never\n * pull in runtime services so that the specification package (and the\n * companion tooling downstream) can import the aggregator without dragging\n * the backend runtime graph into non-runtime consumers. The `CustomBatchManifest`\n * type itself lives here rather than in `saas-specifications` to avoid a\n * package-level circular dependency (`saas-specifications` already depends on\n * `saas-backend-lib`, not the other way round).\n /\n\nimport { CoreResourceOperation, CoreResourceType, ResourcePrimaryScope } from '@wildo-ai/saas-models';\nimport { BackendResourceType } from '~wildo-backend-lib/resources/models/resources-types.backend.schemas';\n\n/\n Common (kind-agnostic) fields carried by every {@link CustomBatchManifest}\n * arm. Documented here once so the per-arm shapes below stay focused on\n * what differs between `resource_anchored` and `scope_anchored` batches.\n /\ninterface CustomBatchManifestCommon {\n /* Stable ref used both as the `customBatches.set(...)` key and the spec `customBatchRef`. /\n batchRef: string;\n /* Operation identifier from the batch's `batchCronjob_Context`. /\n operationIdentifier: string;\n /\n Cron expression from the batch's `batchCronjob_Context.cronJobExpression`\n * when declared. Omitted for purely event-triggered custom batches (for\n * example the email `batch-send` path).\n \n When {@link cronExpressionConfigurable} is `true`, this value is the\n * runtime default rather than a fixed contract — applications can\n * override it via app config and the spec validator therefore treats this\n * as a guidance cron rather than an exact echo target.\n /\n cronExpression?: string;\n /\n Marks the cron schedule as runtime-configurable (for example\n * `lifecycle:dormancy-detection`, whose schedule resolves at registration\n * from `LifecycleConfig.dormancyCronSchedule`). When `true`:\n \n - The spec validator still requires the authored\n * `CustomBatchScheduledExecutionSpecification.cronExpression` to be a\n * non-empty trimmed string when present, so companion prompts always\n * carry a concrete cadence.\n * - The validator does not require the authored cron to equal\n * {@link cronExpression} — divergence is expected and is the whole point\n * of the configurable flag.\n * - Authoring sites should add a `codeHandling.notes` entry pointing at\n * the app-config seam that owns the runtime schedule so transposition\n * prompts can find the override path.\n \n Default `false` (omitted) — every other engine batch declares a fixed\n * cron and the strict echo check applies.\n /\n cronExpressionConfigurable?: boolean;\n}\n\n/* Runtime discriminator shared by engine custom-batch manifest arms. /\nexport enum CustomBatchManifestKind {\n RESOURCE_ANCHORED = 'resource_anchored',\n SCOPE_ANCHORED = 'scope_anchored',\n}\n\n/\n Declarative anchor for a custom batch registered through\n * `createCustomBatchExecutionService(...)`. The engine co-locates a manifest\n * next to each batch factory and applications do the same for their own\n * custom batches. The specification layer (`@wildo-ai/saas-specifications`)\n * consumes these manifests to cross-check every authored `customBatchRef`\n * at module load.\n \n Keeping the manifest structurally separate from the runtime service\n * instance avoids forcing `saas-specifications` into any runtime code path\n * while still giving spec validation a single, trustworthy source of truth\n * for which batch refs exist, where they anchor, and whether they carry a\n * cron schedule.\n \n Spec-layer consumers must import this module via the dedicated\n * `@wildo-ai/saas-backend-lib/custom-batch-manifests` subpath (rather than\n * the root barrel) so that the runtime service graph stays out of the spec\n * build. The root-barrel re-export exists only for backend-runtime callers\n * that already pay for the full `saas-backend-lib` graph.\n \n The manifest is a discriminated union mirroring\n * {@link BatchesCronjobsCustomExecution_Context}:\n \n - `resource_anchored` — the batch genuinely operates on a registered\n * resource (e.g. `files-cleanup` over `FILES`). The manifest carries\n * the target `resourceIdentifier` and the spec layer cross-validates\n * the authored anchor against the runtime `batchCronjob_Context`.\n * - `scope_anchored` — the batch is event-triggered and cross-resource\n * (e.g. `email.batch-send`, `m2m-webhook-delivery`). There is no honest\n * target resource, so the manifest declares the `primaryScope` the\n * bootstrap `ExecutionContext` runs under instead. Use this arm to\n * stop pretending an event-triggered worker \"belongs\" to a resource\n * row that exists only to satisfy the bootstrap requirement.\n \n Naming: `scope_anchored` `operationIdentifier` should follow the\n * `<domain>:<batch-ref>` convention (e.g. `notifications:email.batch-send`)\n * so synthetic operation labels stay grep-able alongside their batch ref.\n * The convention is enforced by `assertCustomBatchArm` and pinned by a\n * dedicated unit test.\n /\nexport type CustomBatchManifest =\n \| (CustomBatchManifestCommon & {\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED;\n /* Resource identifier from the batch's `batchCronjob_Context`. /\n resourceIdentifier: string;\n })\n \| (CustomBatchManifestCommon & {\n kind: CustomBatchManifestKind.SCOPE_ANCHORED;\n /\n Primary scope the batch's bootstrap `ExecutionContext` runs under.\n * Mirrors `BatchesCronjobsCustomExecution_Context.primaryScope` so\n * the spec validator can cross-check the authored arm against the\n * runtime context.\n /\n primaryScope: ResourcePrimaryScope;\n });\n\n/\n Per-arm narrow alias of {@link CustomBatchManifest}. Concrete manifest\n * exports (and any caller that needs to read `resourceIdentifier` /\n * `primaryScope` directly without re-narrowing on `kind`) should prefer\n * these over the broad union type — annotating an export with the broad\n * union would re-widen the literal `kind` and force every consumer back\n * through a discriminator narrowing it does not need.\n /\nexport type ResourceAnchoredCustomBatchManifest = Extract<CustomBatchManifest, { kind: CustomBatchManifestKind.RESOURCE_ANCHORED }>;\n/* Mirror of {@link ResourceAnchoredCustomBatchManifest} for `scope_anchored` manifests. /\nexport type ScopeAnchoredCustomBatchManifest = Extract<CustomBatchManifest, { kind: CustomBatchManifestKind.SCOPE_ANCHORED }>;\n\n// ── Batch-ref literals (authoritative) ──────────────────────────────────────\n\n/* Hourly files cleanup (PENDING/unlinked/soft-deleted file rows). /\nexport const FILES_CLEANUP_BATCH_REF = 'files-cleanup' as const;\n\n/* 6-hourly consumable token cleanup (expired/consumed/exhausted/revoked). /\nexport const CONSUMABLE_TOKENS_CLEANUP_BATCH_REF = 'consumable-tokens-cleanup' as const;\n/* Durable repair for A2A tasks abandoned by a pod that died mid-turn. /\nexport const A2A_ABANDONED_TASK_SWEEP_BATCH_REF = 'a2a-abandoned-task-sweep' as const;\n\n/\n Retention sweeps for the two resources that declare `.ttl()`.\n \n MongoDB expires those rows itself through a TTL index; PostgreSQL has no equivalent, so the\n * declaration is enforced by a framework sweep instead. One ref per resource because the batch\n * system anchors a batch to a resource — the IMPLEMENTATION is shared, only the anchor differs.\n /\nexport const JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF = 'job-executions-retention-sweep' as const;\nexport const JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF = 'job-payload-storage-retention-sweep' as const;\n\n/* Daily anonymous-session cleanup (TTL'd anonymous users + their resources). /\nexport const ANONYMOUS_SESSION_CLEANUP_BATCH_REF = 'anonymous-session-cleanup' as const;\n\n/\n Daily hygiene sweep for the invitation→membership-junction model: hard-deletes\n * long-stale `INVITED` membership rows (never accepted, past the accept-token grace)\n * and reaps orphan `PENDING_INVITATION` users that never materialized (no memberships).\n * Pure tidiness — correctness holds without it (accept tokens expire at 7d, admins can\n * REVOKE/RESEND, orphan pending users cannot authenticate). Per-row deletes route through\n * the ORGANIZATION_MEMBERS DELETE op so the token-revoke prefix fires.\n /\nexport const ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF = 'organization-member-invitation-sweep' as const;\n\n/\n Hourly sweep that lifts EXPIRED time-boxed suspensions.\n \n This batch is what makes `scheduledReactivationAt` mean anything. The lifecycle verbs accept a\n * window — `organizationMembers \| suspend` takes `suspensionEndDate`, `users \| suspend_user` takes\n * `suspensionDuration` in days — and record the resolved instant on the row. Without a sweep the\n * row keeps the deadline and the subject stays suspended forever: an administrator told the system\n * \"for seven days\" and the system silently meant \"until someone remembers\".\n \n That is the SAME defect class the routed-unimplemented-operations work exists to remove — a\n * declared contract the system does not honour — so the sweep is part of the feature, not an\n * optimisation. Unlike the invitation sweep above, correctness does NOT hold without it.\n \n Every reactivation is dispatched through the resource's own lifecycle verb\n * (`ORGANIZATION_MEMBERS \| reactivate`, `USERS \| unsuspend_user`) rather than writing `status`\n * directly, so it inherits the shared transition factory's state-machine check, its\n * `authoritativeFields` declaration and — critically — the administrative-continuity floors. A\n * direct write would be a second authority that bypasses all three.\n \n Hourly rather than daily: the unit a caller can express is a DAY, so a daily run would land the\n * lift up to 24h late on a 1-day suspension — a 100% overshoot. Hourly bounds the error at ~1h\n * while staying far cheaper than the per-minute alternative.\n /\nexport const SUSPENSION_REACTIVATION_SWEEP_BATCH_REF = 'suspension-reactivation-sweep' as const;\n\n/\n Nightly relabelling of machine credentials and platform access grants whose window has elapsed.\n \n ## What it is, and emphatically what it is NOT\n \n It is NOT a control. Nothing about access changes when it runs: every guard already compares\n * `expiresAt` against now — `isCredentialExpired` on both machine fronts, the admission predicate\n * on a grant — so an elapsed credential stops working whether or not this batch has ever executed.\n * That separation must survive: if a guard ever starts reading `status` instead, a sweep that lags\n * becomes an authorization hole rather than a stale display.\n \n What it fixes is the RECORD. Before it, nothing anywhere wrote `EXPIRED`: no producer, no store\n * TTL, no sweep. So a listing of API keys, OAuth clients or access grants showed elapsed ones as\n * ACTIVE forever, and an operator or a customer reading it could not tell which credentials still\n * worked (#413). `credential-rotation-grace.backend.utils.ts` said so in its own docstring, and a\n * test comment beside the OIDC guard said it independently.\n \n ## Why a sweep and not a store TTL\n \n A Mongo TTL index DELETES a row; it cannot transition a status. Deletion is the wrong outcome for\n * a record a customer inspects — the history of an operator's access to their tenant is the point —\n * so a TTL is only the answer where disappearance is intended, which this is not.\n \n ## The lag is inherent and is the accepted cost\n \n Between the instant a credential elapses and the next run, the row still reads ACTIVE. Daily at\n * 02:30, staggered off the 03:00/04:00 sweeps. Hourly was rejected: unlike a time-boxed suspension,\n * where the caller expresses DAYS and a daily run overshoots by 100%, nothing here is waiting on the\n * label — the access already stopped — so the extra 23 passes buy a shorter display lag and nothing\n * else.\n \n Every transition is dispatched through the resource's own `expire` verb rather than writing\n * `status` directly, so it inherits each resource's ACTIVE-only precondition. That guard is the\n * reason the verbs exist: an INACTIVE key was retired by an administrator and a DENIED grant was\n * refused by a tenant, and relabelling either EXPIRED would erase who ended it.\n /\nexport const CREDENTIAL_EXPIRY_SWEEP_BATCH_REF = 'credential-expiry-sweep' as const;\n\n/\n The scheduled flush that makes a METERED product actually bill (#415).\n \n `UsageMeteringBackendService.flushToProvider` had NO CALLER — not in the engine, not in the\n * platform, not in either dogfood application. So a metered product could be declared, priced and\n * synced to the provider while no usage was ever reported: everything up to the local\n * `usageRecords` row worked, and the last hop to money did not exist. The resources registry's own\n * comment already said no cron called it.\n \n The cadence here is a CEILING, not the interval. Each product authors its own\n * `metering.flushIntervalMinutes`, and the flush itself decides per product whether enough time has\n * passed since its oldest pending row. This tick has to be at least as fast as the fastest interval\n * an author can reasonably want, and the work it does when nothing is due is one indexed query per\n * billing scope returning nothing.\n \n `/5 * * ` — every five minutes. Fast enough that a product asking for 5 gets roughly 5;\n `cronExpressionConfigurable` so an application metering something sharper can go faster. A slower\n * default would silently cap every product's authored interval at the tick, which is the failure this\n * whole issue is about: an authored value that the runtime quietly overrides.\n /\nexport const USAGE_FLUSH_BATCH_REF = 'usage-flush' as const;\n\n/\n Hourly reconciliation of local billing state against the billing provider.\n \n Anchored on `ORGANIZATION_SUBSCRIPTIONS \| UPDATE` because the subscription repair is the write\n * that can change what a customer is entitled to; the invoice half of the same run only inserts.\n \n Hourly is a deliberate floor and a deliberate ceiling. It must be slower than the provider's own\n * webhook retry schedule — Stripe retries a failed delivery for up to three days — or the sweep\n * spends its time \"repairing\" state a retry was about to deliver, and every transient webhook\n * failure is reported as drift. It must be fast enough that a subscription whose cancellation\n * webhook was lost stops granting entitlements within an hour rather than within a billing period.\n \n `cronExpressionConfigurable` — an application with thousands of subscriptions may want it slower,\n * because the run costs one provider call per live subscription plus one per billing account.\n /\nexport const BILLING_RECONCILIATION_BATCH_REF = 'billing-reconciliation' as const;\n\n/\n Daily tenant purge — the DESTRUCTIVE half of tenant teardown (WS-A).\n \n Destroys organizations whose `status` is `DELETED` and whose `purgeScheduledAt` deadline has\n * passed, by dispatching each one through the ordinary `ORGANIZATIONS \| DELETE` core operation so\n * the existing `onParentDelete` cascade does the work. It deliberately owns NO teardown logic of\n * its own: the cascade already dispatches per-edge strategies (`DELETE` vs\n * `IMPERSONALIZE_AND_RETAIN`) and already honours edges that opted out, so a purge that removed\n * rows itself would silently hard-delete children a retention decision had marked to keep.\n \n `cronExpressionConfigurable` — the runtime schedule resolves at registration from\n * `TenantTeardownConfig.purgeCronSchedule`; the literal below is the factory's built-in default so\n * the specification layer can still render a cadence when no operator override exists.\n /\nexport const ORGANIZATION_PURGE_BATCH_REF = 'organization-purge' as const;\n\n/\n Built-in default cron for `organization-purge` — daily at 03:00.\n \n Shared between the manifest (the spec validator's echo target) and the runtime wiring (the\n * fallback when `TenantTeardownConfig.purgeCronSchedule` is absent), so the default has ONE\n * change-point rather than a fallback ladder. Daily is deliberate: the retention window is measured\n * in days, so a finer cadence buys no promptness anyone can observe.\n /\nexport const ORGANIZATION_PURGE_DEFAULT_CRON = '0 3 * ' as const;\n\n/\n Configurable dormancy detection (user/org lifecycle transitions). The cron\n * schedule is resolved at registration time from `LifecycleConfig.dormancyCronSchedule`,\n * but the manifest still echoes the batch factory's built-in default so the\n * specification layer can render a meaningful cadence even when the runtime\n * override is not yet known. Authors who override the schedule at the app\n * level must document the override in their `codeHandling.notes`.\n /\nexport const DORMANCY_DETECTION_BATCH_REF = 'lifecycle:dormancy-detection' as const;\n\n/* Event-triggered email batch send (no cron — dispatched by upstream work). /\n/\n Deferred child-lifecycle teardown — the runtime behind `ChildLifecycleMode.LAZY` (#427).\n \n Event-triggered, never scheduled: one job per relationship edge whose parent was just deleted,\n * enqueued by `ServiceResourceBackendService.queueChildDeletion`. The consumer re-enters the SAME\n * cascade the IMMEDIATE mode runs, so discovery, the grandchild recursion, file orchestration, the\n * repository delete and the RAG chunk removal all happen exactly once and exactly as they would\n * have — just off the request path, which is the entire meaning of LAZY.\n /\nexport const CHILD_LIFECYCLE_TEARDOWN_BATCH_REF = 'child-teardown' as const;\n\nexport const EMAIL_BATCH_SEND_BATCH_REF = 'email.batch-send' as const;\n\n/\n Configurable data-seeding scheduled-rerun batch (Phase 7 / Item 47).\n * Wakes up on the engine tick (default `* * * * `), iterates every seed\n carrying a {@link DataSeedDefinition.schedule} block, and dispatches\n * each seed's per-scope iteration through `manualEngine.runManual` with\n * `originOverride: SCHEDULED_RERUN`.\n \n The runtime cron is resolved at registration time from\n * `DataSeedingConfig.scheduledRerunCronSchedule`; the manifest still\n * carries the factory's built-in default so the specification layer can\n * render a meaningful cadence even when the operator override is absent.\n * `cronExpressionConfigurable: true` tells the spec validator to accept\n * any non-empty authored cron rather than requiring a strict echo —\n * see {@link CustomBatchManifest.cronExpressionConfigurable} for the\n * full rationale, mirroring {@link DORMANCY_DETECTION_BATCH_REF}.\n \n Anchored on the `APPLICATION` primary scope (N8) so each app's\n * cron-opted-in seeds are walked under that app's process — same\n * pattern as `email.batch-send` / `m2m-webhook-delivery`.\n \n Naming: the `batchRef` literal stays UNPREFIXED (no `data-seeding:`\n * prefix) so the `scope_anchored` `<domain>:<batchRef>` convention test\n * picks `data-seeding` as the synthetic operation domain naturally.\n * Mirrors `email.batch-send` / `m2m-webhook-delivery`, where the\n * batch's domain context is encoded in the operationIdentifier rather\n * than duplicated into the batchRef itself.\n /\nexport const DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF = 'scheduled-rerun' as const;\n\n/\n Built-in default cron for the engine-owned `data-seeding:scheduled-rerun`\n * batch — a minute-tick (`'* * * * '`). Shared between the manifest (which\n surfaces it to the spec validator as the authored-default echo target) and\n * the runtime wiring (which falls back to it when\n * `DataSeedingConfig.scheduledRerunCronSchedule` is not provided). Collapsing\n * the value to one `as const` literal eliminates the previous\n * `?? manifest.cronExpression ?? '* * * * '` trailing-fallback ladder and\n makes the default change-point discoverable.\n /\nexport const DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON = ' * * * ' as const;\n\n/\n Engine-owned ETL pipeline scheduled-run batch (partial-resource paper, PR-12). On each engine\n * tick it walks every registered resource declaring an `externalDataPipeline` with a `scheduleCron`, and\n * dispatches the due ones through the ETL run service (mode selection there carries the PR-6\n * \"a partial run orphans NOTHING\" guard). Unprefixed ref, same `<domain>:<batchRef>` convention\n * as {@link DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}.\n /\nexport const EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF = 'scheduled-run' as const;\n\n/* Built-in engine tick for `external-data:scheduled-run` — per-pipeline cadence lives on `scheduleCron`. /\nexport const EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_DEFAULT_CRON = ' * * * ' as const;\n\n/\n Engine-owned `DataSeedRun` retention cleanup batch (audit L4-10,\n * post-Phase-7 close-out). Prunes terminal-status rows older than\n * `DataSeedingConfig.runRetentionDays` once per day, while\n * preserving the most-recent (`MAX(seedVersion)`) row per business-key\n * group so dispatcher idempotency is never broken.\n \n The batch ref is unprefixed (no `data-seeding:` literal) so the\n * `scope_anchored` `<domain>:<batchRef>` convention test picks\n * `data-seeding` as the synthetic operation domain naturally — same\n * pattern as {@link DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}.\n /\nexport const DATA_SEEDING_RUN_CLEANUP_BATCH_REF = 'run-cleanup' as const;\n\n/\n Built-in cron for the engine-owned `data-seeding:run-cleanup` batch —\n * daily at 03:30 UTC. Co-scheduled with the other low-traffic-window\n * cleanup batches (`anonymous-session-cleanup` runs at 03:00 UTC; the\n * 30-minute offset keeps the two clean-ups out of each other's way\n * even though their target collections are disjoint).\n \n Not currently runtime-configurable — the cadence isn't operationally\n * sensitive for a retention sweep (an extra hour of grown ledger costs\n * cents). Make it configurable later via `DataSeedingConfig` if a\n * deployment needs a different window.\n /\nexport const DATA_SEEDING_RUN_CLEANUP_CRON = '30 3 * ' as const;\n\n/\n Event-triggered M2M outbound webhook delivery — one job per delivery row\n * enqueued by `M2MWebhookDispatcherBackendService.enqueueDelivery`. No cron,\n * no schedule: the job lifecycle is driven entirely by spec'd\n * `WEBHOOK_ORGANIZATION` / `WEBHOOK_APPLICATION` notification channels firing\n * from resource operations.\n \n Anchored on the `APPLICATION` primary scope (Step 3 of the email-templates\n * deprecation plan, A4 cleanup) rather than a single org-variant delivery-log\n * resource — a polymorphic event-triggered worker has no honest \"primary\"\n * resource (each enqueued row carries its own `scope: { type, id }` and\n * targets either `ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG` or\n * `APPLICATION_M2M_WEBHOOK_DELIVERY_LOG`). The synthetic bootstrap operation\n * runs through `APPLICATION.READ`, populates the application id, then\n * `withOperation()` swaps in `notifications:m2m-webhook-delivery` so audit\n * trails surface the honest batch identity instead of pretending the worker\n * mutates the org-variant log on every job — including for app-scoped\n * deliveries where that anchor was a flat-out lie.\n \n Per-row resource-type resolution remains the responsibility of the worker,\n * not the bootstrap context: see `resolveDeliveryLogResourceType` in\n * `m2m-webhook-delivery-log.repository.ts` (drives both reads and writes\n * off the per-row `input.scope.type`).\n /\nexport const M2M_WEBHOOK_DELIVERY_BATCH_REF = 'm2m-webhook-delivery' as const;\n\n/\n Event-triggered A2A push-notification delivery — one job per (task transition × registered\n * webhook), enqueued by `A2APushDispatcherBackendService` when a task's status advances.\n \n Anchored on `APPLICATION` for exactly the reason the M2M ref above gives, and one degree more\n * so: this worker's rows span THREE polymorphic variants (`USER_` / `ORGANIZATION_` /\n * `APPLICATION_A2A_PUSH_DELIVERY_LOG`), so there is no single resource it could honestly claim to\n * mutate. Each enqueued job carries its own owner scope and the worker resolves the variant from\n * it — see `resolveDeliveryLogScope` in `a2a-push-delivery-log.repository.ts`.\n \n No cron, no schedule: the job lifecycle is driven entirely by task transitions on tasks that\n * carry at least one push-notification configuration.\n /\nexport const A2A_PUSH_DELIVERY_BATCH_REF = 'a2a-push-delivery' as const;\n\n/\n Event-triggered SIEM webhook delivery — one job per security audit event\n * enqueued by `AuditEventDispatcherBackendService.dispatchToOrganizationAuditSinks`\n * (the SIEM webhook sink; Layer 2 of the audit-event pipeline). No cron, no schedule: the job\n * lifecycle is driven entirely by audit events firing for organizations that\n * have `siemExportConfig.enabled === true`.\n \n The enqueue side is gated per-org at dispatch time (the dispatcher returns\n * early when SIEM export is disabled or the event is filtered out), so the\n * drain is registered unconditionally — mirroring `email.batch-send` /\n * `m2m-webhook-delivery`. Gating the drain behind a global flag would\n * re-introduce the `JOB_BATCH_REF_NOT_FOUND → DLQ` drop this batch exists to\n * fix whenever an org has SIEM enabled but the global flag is off.\n \n Anchored on the `APPLICATION` primary scope (same as email / m2m): the\n * worker itself is a thin adapter that delegates to\n * `SIEMWebhookDeliveryBackendService.processDelivery`, which builds its own\n * internal `APP_ADMIN_SUPER_ADMIN @ APPLICATION` execution context for its DLQ\n * writes. The synthetic bootstrap operation runs through `APPLICATION.READ`,\n * then `withOperation()` swaps in `compliance:siem.webhook-delivery` so audit\n * trails surface the honest batch identity.\n \n The `batchRef` literal is the exact string the dispatcher passes to\n * `enqueueCustomBatch(...)` — importing it from here keeps a single source of\n * truth across queue dispatch, runtime wiring, and spec cross-validation.\n /\nexport const SIEM_WEBHOOK_DELIVERY_BATCH_REF = 'siem.webhook-delivery' as const;\n\n/\n Cron-triggered immudb audit-completeness reconciler (audit Phase 3). Periodically\n * replays the authoritative `AUDIT_LOGS` store into every reconcilable audit sink\n * (idempotent write-if-absent, keyed by `eventId`), guaranteeing the at-least-once\n * completeness the best-effort real-time fan-out cannot. The `<domain>:<batchRef>`\n * operation uses the `compliance` domain (owning module `compliance/audit-trails/`),\n * mirroring the SIEM delivery batch.\n /\nexport const IMMUDB_AUDIT_RECONCILE_BATCH_REF = 'immudb.audit-reconcile' as const;\n\n/\n Cron-triggered audit-log ARCHIVAL batch (audit Phase 5 / F1). Exports audit\n * records older than the operator-configured archival horizon\n * (`AppConfiguration.auditTrail.archiveAfterDays`) to durable off-DB\n * file-storage artifacts — one JSON artifact per UTC day-window. Records are\n * NEVER deleted: `AUDIT_LOGS` is immutable (G5), so this is a copy-out, not a\n * prune. The `<domain>:<batchRef>` operation uses the `compliance` domain\n * (owning module `compliance/audit-trails/`), mirroring the reconcile + SIEM\n * batches. OPT-IN: no-ops when `auditTrail.archiveAfterDays` is undefined.\n /\nexport const AUDIT_LOGS_ARCHIVE_BATCH_REF = 'audit-logs-archive' as const;\n\n/\n Built-in cron for the engine-owned `compliance:audit-logs-archive` batch —\n * daily at 04:00 UTC. Sequenced AFTER the low-traffic-window cleanup batches\n * (`anonymous-session-cleanup` 03:00, `data-seeding:run-cleanup` 03:30) so the\n * nightly maintenance sweeps stay out of each other's way. A daily cadence is\n * sufficient: a day-window only becomes archivable once it is fully older than\n * the (≥ 365-day, in production) archival horizon, so there is nothing to gain\n * from a finer tick. Not runtime-configurable — the operator-facing knob is\n * `auditTrail.archiveAfterDays`, NOT the cadence.\n /\nexport const AUDIT_LOGS_ARCHIVE_CRON = '0 4 * ' as const;\n\n/\n Hourly RAG reconciliation sweep (plan §3.c \"backstop sweep\", DL1). ONE mechanism, three jobs:\n * re-ingests chunk sets whose stored `contentHash` no longer matches the live source field\n * (whatever the write hook missed — raw repository doors, crashed post-commit work, files that\n * finished scanning after their binding write), deletes ORPHANED chunk sets whose parent row or\n * field declaration is gone (the bound on every log-never-throw removal seam, and the foundation of\n * the DL3 `.ttl()` door), and COUNTS the NULL-vector embedding backlog (log-only — the sibling\n * `rag:embedding-drain` batch drains it; this count is the independent cross-check).\n \n The batchRef literal stays UNPREFIXED so the `scope_anchored` `<domain>:<batchRef>` convention\n * test derives the `rag` domain from the operation identifier — the `data-seeding:scheduled-rerun`\n * pattern.\n /\nexport const RAG_RECONCILIATION_SWEEP_BATCH_REF = 'reconciliation-sweep' as const;\n\n/* Hourly on the hour — the standard engine-sweep cadence (files-cleanup, the A2A sweep). /\nexport const RAG_RECONCILIATION_SWEEP_CRON = '0 * * ' as const;\n\n/\n The RAG embedding drain (plan §3.d, Phase 4) — the worker that FILLS the NULL-vector ledger the\n * hourly sweep only counts: pages pending chunks, resolves the application's embeddings provider\n * by applicability class, embeds in provider-declared batches, stamps\n * `vector`/`embeddingClass`/`embeddingModel`/`embeddingDims`, and re-embeds chunks whose stamp no\n * longer matches the current class→model binding (the DL2 migration engine).\n \n A SIBLING batch rather than a fourth phase of the reconciliation sweep, deliberately: the sweep\n * is content reconciliation (hash/orphan correctness, hourly is plenty), the drain is provider\n * I/O (freshness-bound, provider-failure-retrying) — one batch per purpose keeps each run's\n * bounds, failure posture and cadence honest for its own job.\n \n The batchRef literal stays UNPREFIXED so the `scope_anchored` `<domain>:<batchRef>` convention\n * test derives the `rag` domain from the operation identifier.\n /\nexport const RAG_EMBEDDING_DRAIN_BATCH_REF = 'embedding-drain' as const;\n\n/\n Every 5 minutes — a freshly written chunk is retrievable within minutes rather than riding the\n * hourly reconciliation cadence. Deliberately MORE frequent than every other engine sweep because\n * this batch is a FRESHNESS drain, not a correctness backstop: an idle run costs one indexed\n * NULL-vector read (the steady state), while an hourly drain would make every new corpus write\n * invisible to retrieval for up to an hour. The 15-minute audit reconciler is the nearest\n * cadence precedent; 5 minutes is the same shape one notch tighter, and the run bounds\n * (`MAX_CHUNKS_PER_RUN`) keep a busy run comfortably inside the window.\n /\nexport const RAG_EMBEDDING_DRAIN_CRON = '/5 * * * ' as const;\n\n// ── Manifests ───────────────────────────────────────────────────────────────\n\nexport const ENGINE_FILES_CLEANUP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: FILES_CLEANUP_BATCH_REF,\n resourceIdentifier: CoreResourceType.FILES,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '0 * * ',\n});\n\n/\n Every 15 minutes: frequent enough that a retention window is honoured with useful precision\n * (MongoDB's own TTL monitor runs about once a minute), infrequent enough that a backlog is worked\n * down over several runs rather than in one long-running statement.\n /\nexport const ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: JOB_EXECUTIONS_RETENTION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.JOB_EXECUTIONS,\n operationIdentifier: CoreResourceOperation.DELETE_MANY,\n cronExpression: '/15 * * * ',\n});\n\nexport const ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.JOB_PAYLOAD_STORAGE,\n operationIdentifier: CoreResourceOperation.DELETE_MANY,\n cronExpression: '/15 * * * ',\n});\n\nexport const ENGINE_CONSUMABLE_TOKENS_CLEANUP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: CONSUMABLE_TOKENS_CLEANUP_BATCH_REF,\n resourceIdentifier: BackendResourceType.CONSUMABLE_TOKENS,\n operationIdentifier: CoreResourceOperation.DELETE,\n cronExpression: '0 /6 * * ',\n});\n\n/\n Marks A2A tasks FAILED when their liveness lease is gone — the durable half of the\n * derive-on-read design. Hourly is deliberate: `tasks/get` already reports abandoned\n * tasks correctly in real time, so this only has to stop the STORED rows lying to\n * LIST / analytics / audit, which tolerates an hour of lag.\n /\nexport const ENGINE_A2A_ABANDONED_TASK_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: A2A_ABANDONED_TASK_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.USER_FLOW_ACTOR_TASKS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '0 * * ',\n});\n\nexport const ENGINE_ANONYMOUS_SESSION_CLEANUP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: ANONYMOUS_SESSION_CLEANUP_BATCH_REF,\n resourceIdentifier: CoreResourceType.ANONYMOUS_USERS,\n operationIdentifier: CoreResourceOperation.DELETE,\n cronExpression: '0 3 * ',\n});\n\nexport const ENGINE_ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATION_MEMBERS,\n operationIdentifier: CoreResourceOperation.DELETE,\n // Daily at 04:00 UTC — after anonymous-session cleanup (03:00) and staggered off the\n // 6-hourly token cleanup so the accept tokens for swept rows are already purged.\n cronExpression: '0 4 * ',\n});\n\n/\n Resource-anchored on ORGANIZATIONS/DELETE — the operation the batch genuinely dispatches, not a\n * synthetic label. Scheduled at 03:00, one hour BEFORE the invitation sweep (04:00) on purpose: a\n * purge orphans the `PENDING_INVITATION` user shells of any never-accepted invitations in the\n * destroyed tenant, and the sweep is what reaps orphan shells. Running the purge first means those\n * shells are collected the same night rather than a day later.\n /\nexport const ENGINE_ORGANIZATION_PURGE_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: ORGANIZATION_PURGE_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATIONS,\n operationIdentifier: CoreResourceOperation.DELETE,\n cronExpression: ORGANIZATION_PURGE_DEFAULT_CRON,\n cronExpressionConfigurable: true,\n});\n\n/\n Resource-anchored on ORGANIZATION_MEMBERS/UPDATE — one of the two operations the sweep genuinely\n * dispatches (the other is `USERS \| unsuspend_user`, which also borrows UPDATE). Anchoring names a\n * real dispatched operation rather than a synthetic label, per the convention above.\n \n `0 * * * ` — hourly on the hour. See the ref's documentation for why not daily.\n /\n/*\n Resource-anchored on APPLICATION_API_KEYS/UPDATE — one of the five operations the sweep genuinely\n * dispatches (the others are the org api-keys, both OAuth-client resources and platform access\n * grants, each borrowing UPDATE through its own `expire` verb). Anchoring names a real dispatched\n * operation rather than a synthetic label, per the convention above.\n \n `30 2 * * ` — daily at 02:30, staggered off the 03:00 anonymous-session cleanup and the 04:00\n invitation sweep. See the ref's documentation for why daily rather than hourly.\n /\n/\n Resource-anchored on ORGANIZATION_USAGE_RECORDS/UPDATE — the operation the flush genuinely\n * dispatches when it marks rows reported. The USER-scope usage records are swept in the same run\n * through the same operation; anchoring names one real dispatched operation rather than a synthetic\n * label, per the convention above.\n /\nexport const ENGINE_USAGE_FLUSH_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: USAGE_FLUSH_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATION_USAGE_RECORDS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '/5 * * * ',\n cronExpressionConfigurable: true,\n});\n\nexport const ENGINE_BILLING_RECONCILIATION_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: BILLING_RECONCILIATION_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATION_SUBSCRIPTIONS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '17 * * ',\n cronExpressionConfigurable: true,\n});\n\nexport const ENGINE_CREDENTIAL_EXPIRY_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: CREDENTIAL_EXPIRY_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.APPLICATION_API_KEYS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '30 2 * ',\n});\n\nexport const ENGINE_SUSPENSION_REACTIVATION_SWEEP_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: SUSPENSION_REACTIVATION_SWEEP_BATCH_REF,\n resourceIdentifier: CoreResourceType.ORGANIZATION_MEMBERS,\n operationIdentifier: CoreResourceOperation.UPDATE,\n cronExpression: '0 * * ',\n cronExpressionConfigurable: true,\n});\n\nexport const ENGINE_DORMANCY_DETECTION_BATCH_MANIFEST: ResourceAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.RESOURCE_ANCHORED,\n batchRef: DORMANCY_DETECTION_BATCH_REF,\n resourceIdentifier: CoreResourceType.USER_LIFECYCLE_STATE,\n operationIdentifier: CoreResourceOperation.UPDATE,\n // Runtime cron is resolved from `LifecycleConfig.dormancyCronSchedule` and\n // the manifest value is only the factory's built-in fallback. Marking the\n // schedule as configurable tells the spec validator to accept any non-empty\n // authored cron rather than requiring a strict echo (see\n // `CustomBatchManifest.cronExpressionConfigurable` for the full rationale).\n cronExpression: '0 /6 * * ',\n cronExpressionConfigurable: true,\n});\n\n/\n Event-triggered email batch send. Anchored on the `APPLICATION` primary\n * scope — see {@link CustomBatchManifest} `scope_anchored` arm and the\n * OD-2.c branch of\n * `ExecutionContextCreatorBackendService.createForInternalCustomBatch`.\n \n The synthetic bootstrap operation runs through `APPLICATION.READ`, then\n * `withOperation()` swaps in `notifications:email.batch-send` so audit\n * trails surface the honest batch identity.\n /\n/\n Deferred child-lifecycle teardown (#427). Anchored on the `APPLICATION` primary scope for the\n * same reason as the email and webhook drains: it is event-triggered and CROSS-RESOURCE — the\n * child resource differs per job, so there is no honest single target resource to anchor on.\n \n No `cronExpression`: nothing schedules it. A job exists only because a parent delete chose LAZY\n * for one of its edges.\n /\nexport const ENGINE_CHILD_LIFECYCLE_TEARDOWN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: CHILD_LIFECYCLE_TEARDOWN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: 'lifecycle:child-teardown',\n});\n\nexport const ENGINE_EMAIL_BATCH_SEND_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: EMAIL_BATCH_SEND_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: 'notifications:email.batch-send',\n});\n\n/\n Event-triggered M2M outbound webhook delivery — anchored on the `APPLICATION`\n * primary scope (see {@link M2M_WEBHOOK_DELIVERY_BATCH_REF} for the full\n * rationale and the OD-2.c bootstrap branch in\n * `ExecutionContextCreatorBackendService.createForInternalCustomBatch`).\n /\nexport const ENGINE_M2M_WEBHOOK_DELIVERY_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: M2M_WEBHOOK_DELIVERY_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: 'notifications:m2m-webhook-delivery',\n});\n\n/\n Event-triggered SIEM webhook delivery — anchored on the `APPLICATION`\n * primary scope (see {@link SIEM_WEBHOOK_DELIVERY_BATCH_REF} for the full\n * rationale and the OD-2.c bootstrap branch in\n * `ExecutionContextCreatorBackendService.createForInternalCustomBatch`).\n \n The `<domain>:<batchRef>` operation identifier uses the `compliance` domain\n * (the owning module folder, `compliance/audit-trails/`), mirroring how\n * `email.batch-send` / `m2m-webhook-delivery` take their `notifications:`\n * prefix from their owning module.\n /\n/\n Event-triggered A2A push-notification delivery — anchored on the `APPLICATION` primary scope\n * (see {@link A2A_PUSH_DELIVERY_BATCH_REF}). The `flows-actors:` prefix names the owning module,\n * mirroring how `m2m-webhook-delivery` takes its `notifications:` prefix from its own.\n /\nexport const ENGINE_A2A_PUSH_DELIVERY_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: A2A_PUSH_DELIVERY_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `flows-actors:${A2A_PUSH_DELIVERY_BATCH_REF}`,\n});\n\nexport const ENGINE_SIEM_WEBHOOK_DELIVERY_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: SIEM_WEBHOOK_DELIVERY_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `compliance:${SIEM_WEBHOOK_DELIVERY_BATCH_REF}`,\n});\n\n/\n Cron audit-completeness reconciler (audit Phase 3). Scope-anchored @ APPLICATION —\n * it replays EVERY org's audit rows for system-wide completeness, so there is no\n * single honest target resource (mirrors the SIEM delivery anchoring). Fixed\n * every-15-minutes cadence: a completeness backfill only needs to catch the rare miss\n * the real-time sink dropped; not operator-configurable in v1. This `cronExpression`\n * is BOTH the spec cross-validation target AND (consumed by the batch's\n * `batchCronjob_Context.cronJobExpression`) the value that actually schedules the run.\n /\nexport const ENGINE_IMMUDB_AUDIT_RECONCILE_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: IMMUDB_AUDIT_RECONCILE_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `compliance:${IMMUDB_AUDIT_RECONCILE_BATCH_REF}`,\n cronExpression: '/15 * * * ',\n});\n\n/\n Cron audit-log archival batch (audit Phase 5 / F1). Scope-anchored @\n * APPLICATION — it scans EVERY org's aged audit rows into per-day archival\n * artifacts (cross-org, one artifact per day-window), so there is no single\n * honest target resource (mirrors the reconcile + SIEM anchoring). Fixed daily\n * cadence ({@link AUDIT_LOGS_ARCHIVE_CRON}); the operator-facing knob is the\n * archival horizon, not the schedule. This `cronExpression` is BOTH the spec\n * cross-validation target AND (consumed by the batch's\n * `batchCronjob_Context.cronJobExpression`) the value that actually schedules\n * the run — omitting it would register the batch but never fire it.\n /\nexport const ENGINE_AUDIT_LOGS_ARCHIVE_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: AUDIT_LOGS_ARCHIVE_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `compliance:${AUDIT_LOGS_ARCHIVE_BATCH_REF}`,\n cronExpression: AUDIT_LOGS_ARCHIVE_CRON,\n});\n\n/\n ETL pipeline scheduled-run batch (partial-resource paper, PR-12). Anchored on the\n * `APPLICATION` primary scope — slice 1 admits only SINGLE_TENANT_BINDING pipelines, so a\n * pipeline is app-wide by construction. Each engine tick walks every registered resource\n * declaring `externalDataPipeline.scheduleCron` and dispatches the DUE ones through the ETL run service.\n * The engine tick is fixed (`cronExpressionConfigurable: false`) — the operator-facing cadence\n * knob is each pipeline's own `scheduleCron`, never this tick.\n /\nexport const ENGINE_EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `external-data:${EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_REF}`,\n cronExpression: EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_DEFAULT_CRON,\n cronExpressionConfigurable: false,\n});\n\n/\n Data-seeding scheduled-rerun batch (Phase 7 / Item 47). Anchored on the\n * `APPLICATION` primary scope — see {@link DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}\n * for the rationale. The synthetic bootstrap operation runs through\n * `APPLICATION.READ`; the worker then walks every cron-opted-in seed\n * under that app's process. The cron expression is overridable via\n * `DataSeedingConfig.scheduledRerunCronSchedule` — the manifest's\n * `cronExpression` is the factory's built-in fallback used when no\n * operator override is provided.\n /\nexport const ENGINE_DATA_SEEDING_SCHEDULED_RERUN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `data-seeding:${DATA_SEEDING_SCHEDULED_RERUN_BATCH_REF}`,\n cronExpression: DATA_SEEDING_SCHEDULED_RERUN_DEFAULT_CRON,\n cronExpressionConfigurable: true,\n});\n\n/\n Data-seeding `DataSeedRun` retention cleanup batch (audit L4-10,\n * post-Phase-7 close-out). Anchored on the `APPLICATION` primary scope\n * — see {@link DATA_SEEDING_RUN_CLEANUP_BATCH_REF} for the rationale.\n \n Cron is fixed (not `cronExpressionConfigurable`) — a daily 03:30 UTC\n * sweep is sufficient for retention; the operator-facing knob is\n * `DataSeedingConfig.runRetentionDays`, NOT the cadence. The retention\n * window itself is read from `DataSeedingConfig.runRetentionDays` at\n * batch tick time (NOT at registration), so an in-place config change\n * takes effect on the next tick without a redeploy.\n /\nexport const ENGINE_DATA_SEEDING_RUN_CLEANUP_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: DATA_SEEDING_RUN_CLEANUP_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `data-seeding:${DATA_SEEDING_RUN_CLEANUP_BATCH_REF}`,\n cronExpression: DATA_SEEDING_RUN_CLEANUP_CRON,\n});\n\n/\n Hourly RAG reconciliation sweep — anchored on the `APPLICATION` primary scope: it walks EVERY\n * resource type declaring `.ragSource()` fields plus every chunk set in every reachable store, so\n * there is no single honest target resource (the reconcile/SIEM/archive anchoring rationale). The\n * `rag:` prefix names the owning module folder (`src/rag/`), per the `<domain>:<batchRef>`\n * convention. This `cronExpression` is BOTH the spec cross-validation target AND the value that\n * actually schedules the run — omitting it would register the batch but never fire it.\n /\nexport const ENGINE_RAG_RECONCILIATION_SWEEP_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: RAG_RECONCILIATION_SWEEP_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `rag:${RAG_RECONCILIATION_SWEEP_BATCH_REF}`,\n cronExpression: RAG_RECONCILIATION_SWEEP_CRON,\n});\n\n/\n Five-minute RAG embedding drain — anchored on the `APPLICATION` primary scope for the same\n * reason as the reconciliation sweep: it walks every chunk set in every reachable store, so\n * there is no single honest target resource. This `cronExpression` is BOTH the spec\n * cross-validation target AND the value that actually schedules the run — omitting it would\n * register the batch but never fire it.\n /\nexport const ENGINE_RAG_EMBEDDING_DRAIN_BATCH_MANIFEST: ScopeAnchoredCustomBatchManifest = Object.freeze({\n kind: CustomBatchManifestKind.SCOPE_ANCHORED,\n batchRef: RAG_EMBEDDING_DRAIN_BATCH_REF,\n primaryScope: ResourcePrimaryScope.APPLICATION,\n operationIdentifier: `rag:${RAG_EMBEDDING_DRAIN_BATCH_REF}`,\n cronExpression: RAG_EMBEDDING_DRAIN_CRON,\n});\n\n// ── Aggregator ──────────────────────────────────────────────────────────────\n\n/\n Frozen registry of every engine-owned custom batch. The specification\n * package seeds {@link registerCustomBatchManifests} from this list at\n * engine-spec bootstrap so authored `scheduledExecution.customBatchRef`\n * values cross-validate against the same runtime anchors the backend\n * `customBatches.set(...)` block uses.\n */\nexport const ENGINE_CUSTOM_BATCH_MANIFESTS: readonly CustomBatchManifest[] = Object.freeze([\n ENGINE_FILES_CLEANUP_BATCH_MANIFEST,\n ENGINE_JOB_EXECUTIONS_RETENTION_SWEEP_MANIFEST,\n ENGINE_JOB_PAYLOAD_STORAGE_RETENTION_SWEEP_MANIFEST,\n ENGINE_CONSUMABLE_TOKENS_CLEANUP_BATCH_MANIFEST,\n ENGINE_ANONYMOUS_SESSION_CLEANUP_BATCH_MANIFEST,\n ENGINE_A2A_ABANDONED_TASK_SWEEP_BATCH_MANIFEST,\n ENGINE_ORGANIZATION_MEMBER_INVITATION_SWEEP_BATCH_MANIFEST,\n ENGINE_SUSPENSION_REACTIVATION_SWEEP_BATCH_MANIFEST,\n ENGINE_CREDENTIAL_EXPIRY_SWEEP_BATCH_MANIFEST,\n ENGINE_USAGE_FLUSH_BATCH_MANIFEST,\n ENGINE_BILLING_RECONCILIATION_BATCH_MANIFEST,\n ENGINE_ORGANIZATION_PURGE_BATCH_MANIFEST,\n ENGINE_DORMANCY_DETECTION_BATCH_MANIFEST,\n ENGINE_CHILD_LIFECYCLE_TEARDOWN_BATCH_MANIFEST,\n ENGINE_EMAIL_BATCH_SEND_BATCH_MANIFEST,\n ENGINE_M2M_WEBHOOK_DELIVERY_BATCH_MANIFEST,\n ENGINE_A2A_PUSH_DELIVERY_BATCH_MANIFEST,\n ENGINE_SIEM_WEBHOOK_DELIVERY_BATCH_MANIFEST,\n ENGINE_IMMUDB_AUDIT_RECONCILE_BATCH_MANIFEST,\n ENGINE_AUDIT_LOGS_ARCHIVE_BATCH_MANIFEST,\n ENGINE_DATA_SEEDING_SCHEDULED_RERUN_BATCH_MANIFEST,\n ENGINE_DATA_SEEDING_RUN_CLEANUP_BATCH_MANIFEST,\n ENGINE_EXTERNAL_DATA_PIPELINE_SCHEDULED_RUN_BATCH_MANIFEST,\n ENGINE_RAG_RECONCILIATION_SWEEP_BATCH_MANIFEST,\n ENGINE_RAG_EMBEDDING_DRAIN_BATCH_MANIFEST,\n]);\n"]}

package/dist/esm/base-classes/services/controllers/controller-resource.backend.service.d.ts CHANGED Viewed

@@ -14,6 +14,7 @@ import { AuthorizationsBackendService } from '../../../security/authorizations/s
 import { ExecutionContextCreatorBackendService } from '../../../runtime/services/execution-context-creator.backend.service';
 import { ResourceFileUploadHandlerBackendService } from '../../../files/handlers/resource-file-upload-handler.backend.service';
 import { FileFieldDetectionBackendService } from '../../../files/services/file-field-detection.backend.service';
+import { FileUploadGrantBackendService } from '../../../files/services/file-upload-grant.backend.service';
 import { ResourcesRegistryBackendService } from '../../../resources/services/resources-registry.backend.service';
 import { ExecutionContextHandlerBackendService } from '../../../runtime/services/execution-context-handler.backend.service';
 import { ResourceOperationHelperBackendService } from '../../../base-classes/services/resource-operations-helper.backend.service';
@@ -90,7 +91,7 @@ export declare function extractCollectionFilters(rawData: Record<string, unknown
  * `{ startDate, endDate }` object the SEARCH request DTO expects.
  *
  * WHY THIS EXISTS — a date-range filter is authored as an OBJECT
- * (`Resouces_Filter_DateRangeSchema` → `{ startDate?: Date, endDate?: Date }`), and
+ * (`Resources_Filter_DateRangeSchema` → `{ startDate?: Date, endDate?: Date }`), and
  * the frontend HTTP client / any generated SDK serialise it with bracket notation
  * (OpenAPI `style: deepObject`). Express 5 defaults its query parser to `simple`
  * (`querystring.parse`), under which `createdAt[startDate]=x` arrives as the LITERAL
@@ -137,11 +138,12 @@ export declare class ControllerResourceBackendService<TCustomOperationEnum exten
     private readonly anonymousSessionService;
     private readonly appConfigService;
     private readonly rateLimitService;
+    private readonly fileUploadGrantService;
     private readonly resourceConfiguration;
     private readonly operationsMap;
     private readonly router;
     protected logDebug: (message: string, context?: Record<string, unknown>) => void;
-    constructor(resourceType: ResourceType, logger: LoggerService, errorBuilder: ErrorBuilderBackendService, errorHandler: ErrorHandlerService, jwtService: JwtBackendService, authorizationsService: AuthorizationsBackendService, resourcesRegistry: ResourcesRegistryBackendService, executionContextCreator: ExecutionContextCreatorBackendService, executionContextHandler: ExecutionContextHandlerBackendService, repositoriesRegistry: RepositoriesRegistryHandlerBackendService, resourceOperationHelper: ResourceOperationHelperBackendService, servicesRegistry: ServicesRegistryHandlerBackendService, fileFieldDetection: FileFieldDetectionBackendService, fileUploadHandler: ResourceFileUploadHandlerBackendService, auditLogsService: AuditLogsBackendService, anonymousSessionService: AnonymousSessionBackendService, appConfigService: AppConfigurationService, rateLimitService: RateLimitBackendService);
+    constructor(resourceType: ResourceType, logger: LoggerService, errorBuilder: ErrorBuilderBackendService, errorHandler: ErrorHandlerService, jwtService: JwtBackendService, authorizationsService: AuthorizationsBackendService, resourcesRegistry: ResourcesRegistryBackendService, executionContextCreator: ExecutionContextCreatorBackendService, executionContextHandler: ExecutionContextHandlerBackendService, repositoriesRegistry: RepositoriesRegistryHandlerBackendService, resourceOperationHelper: ResourceOperationHelperBackendService, servicesRegistry: ServicesRegistryHandlerBackendService, fileFieldDetection: FileFieldDetectionBackendService, fileUploadHandler: ResourceFileUploadHandlerBackendService, auditLogsService: AuditLogsBackendService, anonymousSessionService: AnonymousSessionBackendService, appConfigService: AppConfigurationService, rateLimitService: RateLimitBackendService, fileUploadGrantService: FileUploadGrantBackendService);
     getRouter(): Router;
     private resolveContextAddressedSingletonOperationAuthorizationId;
     /**
@@ -165,7 +167,7 @@ export declare class ControllerResourceBackendService<TCustomOperationEnum exten
     private resolveAssociationParentContextResourceId;
     private stringifyPersistedValue;
     private ensureFileUploadTargetMatchesRouteContext;
-    static createInstance<TCustomOperationEnum extends EnumLikeType | undefined = undefined, TCoreOperationEnum extends Partial<CoreResourceOperation> | undefined = undefined, TMainSchema extends z.ZodTypeAny = z.ZodTypeAny>(resourceType: ResourceType, logger: LoggerService, errorBuilder: ErrorBuilderBackendService, errorHandler: ErrorHandlerService, jwtService: JwtBackendService, authorizationsService: AuthorizationsBackendService, resourcesRegistry: ResourcesRegistryBackendService, executionContextCreator: ExecutionContextCreatorBackendService, executionContextHandler: ExecutionContextHandlerBackendService, repositoriesRegistry: RepositoriesRegistryHandlerBackendService, resourceOperationHelper: ResourceOperationHelperBackendService, servicesRegistry: ServicesRegistryHandlerBackendService, fileFieldDetection: FileFieldDetectionBackendService, fileUploadHandler: ResourceFileUploadHandlerBackendService, auditLogsService: AuditLogsBackendService, anonymousSessionService: AnonymousSessionBackendService, appConfigService: AppConfigurationService, rateLimitService: RateLimitBackendService): ControllerResourceBackendService<TCustomOperationEnum, TCoreOperationEnum, TMainSchema>;
+    static createInstance<TCustomOperationEnum extends EnumLikeType | undefined = undefined, TCoreOperationEnum extends Partial<CoreResourceOperation> | undefined = undefined, TMainSchema extends z.ZodTypeAny = z.ZodTypeAny>(resourceType: ResourceType, logger: LoggerService, errorBuilder: ErrorBuilderBackendService, errorHandler: ErrorHandlerService, jwtService: JwtBackendService, authorizationsService: AuthorizationsBackendService, resourcesRegistry: ResourcesRegistryBackendService, executionContextCreator: ExecutionContextCreatorBackendService, executionContextHandler: ExecutionContextHandlerBackendService, repositoriesRegistry: RepositoriesRegistryHandlerBackendService, resourceOperationHelper: ResourceOperationHelperBackendService, servicesRegistry: ServicesRegistryHandlerBackendService, fileFieldDetection: FileFieldDetectionBackendService, fileUploadHandler: ResourceFileUploadHandlerBackendService, auditLogsService: AuditLogsBackendService, anonymousSessionService: AnonymousSessionBackendService, appConfigService: AppConfigurationService, rateLimitService: RateLimitBackendService, fileUploadGrantService: FileUploadGrantBackendService): ControllerResourceBackendService<TCustomOperationEnum, TCoreOperationEnum, TMainSchema>;
     private initializeOperationsMap;
     private initializeRoutes;
     /**
@@ -231,6 +233,15 @@ export declare class ControllerResourceBackendService<TCustomOperationEnum exten
      * first avoids unauthenticated callers forcing temp-disk writes through Multer
      * while still reusing the exact same execution context for the later upload.
      */
+    /**
+     * The handler behind `POST …/files/<field>/grant` (issue #312, D3). Runs AFTER the upload route's
+     * own authorization middleware, so by the time it executes the caller has been authorized on the
+     * target write exactly as an upload would be. It computes the two absolute URLs the grant needs from
+     * the request itself — the upload URL is this request's URL minus `/grant`, so it cannot drift from
+     * the route that was just authorized — and delegates the mint to the ONE function the MCP door also
+     * calls. Answers 201 with the grant; the token appears in it because it is the credential.
+     */
+    private buildFileUploadGrantMintHandler;
     private createFileUploadAuthorizationMiddleware;
     /**
      * Initialize validate-field routes for resources with unique fields.

package/dist/esm/base-classes/services/controllers/controller-resource.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"controller-resource.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/controllers/controller-resource.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,MAAM,EAAmC,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,2BAA2B,EAE3B,+BAA+B,EAE/B,YAAY,EAEZ,gDAAgD,EAKjD,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAwD,MAAM,0BAA0B,CAAC;~~AAqB9G~~,OAAO,EAAE,qBAAqB,EAAyF,MAAM,uBAAuB,CAAC;AAGrJ,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,8DAA8D,CAAC;AACjG,OAAO,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AAClI,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,uCAAuC,EAAE,MAAM,gFAAgF,CAAC;AACzI,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAE1H,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAG3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,qCAAqC,EAAE,MAAM,qFAAqF,CAAC;AAE5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AACzH,OAAO,EAAE,8BAA8B,EAAE,MAAM,wFAAwF,CAAC;AACxI,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAsBxG,wBAAgB,mCAAmC,CACjD,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,OAAO,GAC7B,OAAO,CAET;AAcD,KAAK,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAElD,KAAK,0BAA0B,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,KAAK,gCAAgC,GAAG;IACtC,YAAY,CAAC,EAAE,2BAA2B,CAAC,cAAc,CAAC,CAAC;CAC5D,CAAC;AA+KF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kCAAkC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAmB/E;AAqGD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,EAAE,gCAAgC,CAAC,cAAc,CAAC,GAC7D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB;AAmED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,EAAE,gCAAgC,CAAC,cAAc,CAAC,GAC7D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8BzB;AAED,wBAAgB,kCAAkC,CAChD,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAET;AAED,wBAAgB,+BAA+B,CAC7C,kBAAkB,EAAE,MAAM,EAC1B,uBAAuB,EAAE,MAAM,EAC/B,aAAa,EAAE,IAAI,CAAC,gDAAgD,EAAE,YAAY,CAAC,EACnF,gCAAgC,CAAC,EAAE,MAAM,EAAE,GAC1C,OAAO,CAyBT;AAWD,qBAAa,gCAAgC,CAC3C,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU;IAU7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;~~IAxBnC~~,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+E;IACrH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsG;IACpI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG/E,YAAY,EAAE,YAAY,EACT,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,iBAAiB,EAC7B,qBAAqB,EAAE,4BAA4B,EACnD,iBAAiB,EAAE,+BAA+B,EAClD,uBAAuB,EAAE,qCAAqC,EAC9D,uBAAuB,EAAE,qCAAqC,EAC9D,oBAAoB,EAAE,yCAAyC,EAC/D,uBAAuB,EAAE,qCAAqC,EAC9D,gBAAgB,EAAE,qCAAqC,EACvD,kBAAkB,EAAE,gCAAgC,EACpD,iBAAiB,EAAE,uCAAuC,EAC1D,gBAAgB,EAAE,uBAAuB,EACzC,uBAAuB,EAAE,8BAA8B,EACvD,gBAAgB,EAAE,uBAAuB,EACzC,gBAAgB,EAAE,uBAAuB;~~IAkBrD~~,SAAS,IAAI,MAAM;YAGZ,wDAAwD;IAqKtE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uCAAuC;YAgBjC,0DAA0D;IA0MxE,OAAO,CAAC,uDAAuD;IAc/D,OAAO,CAAC,yDAAyD;IAcjE,OAAO,CAAC,+BAA+B;IAoBvC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,yCAAyC;IA+BjD,OAAO,CAAC,uBAAuB;YAoBjB,yCAAyC;IA4JvD,MAAM,CAAC,cAAc,CACnB,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAE/C,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,iBAAiB,EAC7B,qBAAqB,EAAE,4BAA4B,EACnD,iBAAiB,EAAE,+BAA+B,EAClD,uBAAuB,EAAE,qCAAqC,EAC9D,uBAAuB,EAAE,qCAAqC,EAC9D,oBAAoB,EAAE,yCAAyC,EAC/D,uBAAuB,EAAE,qCAAqC,EAC9D,gBAAgB,EAAE,qCAAqC,EACvD,kBAAkB,EAAE,gCAAgC,EACpD,iBAAiB,EAAE,uCAAuC,EAC1D,gBAAgB,EAAE,uBAAuB,EACzC,uBAAuB,EAAE,8BAA8B,EACvD,gBAAgB,EAAE,uBAAuB,EACzC,gBAAgB,EAAE,uBAAuB,~~GACxC~~,gCAAgC,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC;IAU1F,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,gBAAgB;IAqCxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,OAAO,CAAC,yBAAyB;IAuGjC;;;;;OAKG;IACH;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,0BAA0B;~~IAsQlC~~;;;;;;;OAOG;IACH,OAAO,CAAC,uCAAuC;~~IA6E~~/C;;;;;;OAMG;IACH,OAAO,CAAC,6BAA6B;IAerC;;;OAGG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;;OAMG;IACH,OAAO,CAAC,mCAAmC;IA8C3C,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,8BAA8B;YAiBxB,WAAW;~~IA8VzB~~;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;YACW,sBAAsB;IAmMpC;;;;;;OAMG;YACW,8BAA8B;YAkC9B,0BAA0B;YAuC1B,2BAA2B;IAoEzC,OAAO,CAAC,mCAAmC;IAkD3C,OAAO,CAAC,qCAAqC;IAgD7C,OAAO,CAAC,mCAAmC;IAc3C,OAAO,CAAC,mCAAmC;~~IA4B3C~~,OAAO,CAAC,mBAAmB;~~IAgI3B~~;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,uCAAuC;IA2B/C,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;YAOX,YAAY;IAkH1B,OAAO,CAAC,yBAAyB;CAiBlC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,SAAS,EAAE,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzD,kBAAkB,EAAE,MAAM,EAC1B,kBAAkB,EAAE,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,GAC5E,0BAA0B,~~CAuE5B~~"}
1	+ {"version":3,"file":"controller-resource.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/controllers/controller-resource.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,MAAM,EAAmC,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,2BAA2B,EAE3B,+BAA+B,EAE/B,YAAY,EAEZ,gDAAgD,EAKjD,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAwD,MAAM,0BAA0B,CAAC;AAuB9G,OAAO,EAAE,qBAAqB,EAAyF,MAAM,uBAAuB,CAAC;AAGrJ,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,8DAA8D,CAAC;AACjG,OAAO,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AAClI,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,uCAAuC,EAAE,MAAM,gFAAgF,CAAC;AACzI,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAE1H,OAAO,EAAE,6BAA6B,EAAE,MAAM,qEAAqE,CAAC;AAGpH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAG3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,qCAAqC,EAAE,MAAM,qFAAqF,CAAC;AAE5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AACzH,OAAO,EAAE,8BAA8B,EAAE,MAAM,wFAAwF,CAAC;AACxI,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAsBxG,wBAAgB,mCAAmC,CACjD,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,OAAO,GAC7B,OAAO,CAET;AAcD,KAAK,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAElD,KAAK,0BAA0B,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,KAAK,gCAAgC,GAAG;IACtC,YAAY,CAAC,EAAE,2BAA2B,CAAC,cAAc,CAAC,CAAC;CAC5D,CAAC;AA+KF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kCAAkC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAmB/E;AAqGD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,EAAE,gCAAgC,CAAC,cAAc,CAAC,GAC7D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB;AAmED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,EAAE,gCAAgC,CAAC,cAAc,CAAC,GAC7D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8BzB;AAED,wBAAgB,kCAAkC,CAChD,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAET;AAED,wBAAgB,+BAA+B,CAC7C,kBAAkB,EAAE,MAAM,EAC1B,uBAAuB,EAAE,MAAM,EAC/B,aAAa,EAAE,IAAI,CAAC,gDAAgD,EAAE,YAAY,CAAC,EACnF,gCAAgC,CAAC,EAAE,MAAM,EAAE,GAC1C,OAAO,CAyBT;AAWD,qBAAa,gCAAgC,CAC3C,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU;IAU7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAzBzC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+E;IACrH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsG;IACpI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG/E,YAAY,EAAE,YAAY,EACT,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,iBAAiB,EAC7B,qBAAqB,EAAE,4BAA4B,EACnD,iBAAiB,EAAE,+BAA+B,EAClD,uBAAuB,EAAE,qCAAqC,EAC9D,uBAAuB,EAAE,qCAAqC,EAC9D,oBAAoB,EAAE,yCAAyC,EAC/D,uBAAuB,EAAE,qCAAqC,EAC9D,gBAAgB,EAAE,qCAAqC,EACvD,kBAAkB,EAAE,gCAAgC,EACpD,iBAAiB,EAAE,uCAAuC,EAC1D,gBAAgB,EAAE,uBAAuB,EACzC,uBAAuB,EAAE,8BAA8B,EACvD,gBAAgB,EAAE,uBAAuB,EACzC,gBAAgB,EAAE,uBAAuB,EACzC,sBAAsB,EAAE,6BAA6B;IAkBjE,SAAS,IAAI,MAAM;YAGZ,wDAAwD;IAqKtE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uCAAuC;YAgBjC,0DAA0D;IA0MxE,OAAO,CAAC,uDAAuD;IAc/D,OAAO,CAAC,yDAAyD;IAcjE,OAAO,CAAC,+BAA+B;IAoBvC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,yCAAyC;IA+BjD,OAAO,CAAC,uBAAuB;YAoBjB,yCAAyC;IA4JvD,MAAM,CAAC,cAAc,CACnB,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAE/C,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,iBAAiB,EAC7B,qBAAqB,EAAE,4BAA4B,EACnD,iBAAiB,EAAE,+BAA+B,EAClD,uBAAuB,EAAE,qCAAqC,EAC9D,uBAAuB,EAAE,qCAAqC,EAC9D,oBAAoB,EAAE,yCAAyC,EAC/D,uBAAuB,EAAE,qCAAqC,EAC9D,gBAAgB,EAAE,qCAAqC,EACvD,kBAAkB,EAAE,gCAAgC,EACpD,iBAAiB,EAAE,uCAAuC,EAC1D,gBAAgB,EAAE,uBAAuB,EACzC,uBAAuB,EAAE,8BAA8B,EACvD,gBAAgB,EAAE,uBAAuB,EACzC,gBAAgB,EAAE,uBAAuB,EACzC,sBAAsB,EAAE,6BAA6B,GACpD,gCAAgC,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC;IAU1F,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,gBAAgB;IAqCxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,OAAO,CAAC,yBAAyB;IAuGjC;;;;;OAKG;IACH;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,0BAA0B;IAsRlC;;;;;;;OAOG;IACH;;;;;;;OAOG;IACH,OAAO,CAAC,+BAA+B;IA0DvC,OAAO,CAAC,uCAAuC;IAwG/C;;;;;;OAMG;IACH,OAAO,CAAC,6BAA6B;IAerC;;;OAGG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;;OAMG;IACH,OAAO,CAAC,mCAAmC;IA8C3C,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,8BAA8B;YAiBxB,WAAW;IA+VzB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;YACW,sBAAsB;IAmMpC;;;;;;OAMG;YACW,8BAA8B;YAkC9B,0BAA0B;YAuC1B,2BAA2B;IAoEzC,OAAO,CAAC,mCAAmC;IAkD3C,OAAO,CAAC,qCAAqC;IAgD7C,OAAO,CAAC,mCAAmC;IAc3C,OAAO,CAAC,mCAAmC;IAuC3C,OAAO,CAAC,mBAAmB;IAiI3B;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,uCAAuC;IA2B/C,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;YAOX,YAAY;IAkH1B,OAAO,CAAC,yBAAyB;CAiBlC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,SAAS,EAAE,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzD,kBAAkB,EAAE,MAAM,EAC1B,kBAAkB,EAAE,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,GAC5E,0BAA0B,CA4E5B"}