@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

package/dist/esm/notifications/services/notification-badge.backend.service.js

@@ -18,7 +18,7 @@ import { projectCaughtErrorLogFields } from '../../errors/utils/error-log-level-
 import { RepositoriesRegistryHandlerBackendService, } from '../../base-classes/services/repositories/repositories-registry-handler.backend.service.js';
 import { ResourcesRegistryBackendService } from '../../resources/services/resources-registry.backend.service.js';
 import { ExecutionContextCreatorBackendService } from '../../runtime/services/execution-context-creator.backend.service.js';
-import { ResourcePrimaryScope, NotificationBadgeOperation, NotificationBadgeSourceKind, CoreResourceType, CoreResourceOperation, CoreWebSocketEvent, } from '@wildo-ai/saas-models';
+import { ResourcePrimaryScope, NotificationBadgeOperation, NotificationBadgeSourceKind, CoreResourceType, CoreResourceOperation, buildNotificationBadgeReference, parseNotificationBadgeReference, CoreWebSocketEvent, } from '@wildo-ai/saas-models';
 import { WebSocketService } from '../../requests/service/websocket.service.js';
 /**
  * The derived-badge SOURCE count passes a fully explicit, self-scoped filter
@@ -29,6 +29,22 @@ import { WebSocketService } from '../../requests/service/websocket.service.js';
  * FK is injected/filtered correctly rather than bypassed.)
  */
 const EXPLICIT_SCOPE_REPO_OPTIONS = { excludeContextualFilter: true };
+/**
+ * How many times a RELATIVE badge write (increment / decrement) re-attempts its guarded statement
+ * before giving up and reporting the count it can observe.
+ *
+ * Two is what the mechanism needs and three is the margin. A first pass misses only when the badge
+ * row does not exist yet; the pass then materializes a ZERO row and the SECOND pass applies the
+ * delta to it. The only other way a pass can miss is the decrement's two-statement floor (see
+ * {@link NotificationBadgeBackendService.applyGuardedCountDelta}) losing a race in the window
+ * between its two statements — that is a genuine retry, and one spare pass is generous for a
+ * contention window measured in a single round trip.
+ *
+ * The loop terminates on its own budget rather than on a condition, because the exhaustion outcome
+ * is deliberately NOT a throw: a badge is a decoration, and failing a domain mutation because a
+ * counter could not be advanced would trade a cosmetic defect for a functional one.
+ */
+const RELATIVE_BADGE_WRITE_PASSES = 3;
 /**
  * NotificationBadgeBackendService
  *
@@ -91,10 +107,14 @@ let NotificationBadgeBackendService = class NotificationBadgeBackendService {
         });
     }
     /**
-     * Build a badge reference string
+     * Build a badge reference string.
+     *
+     * Delegates to the shared builder rather than re-templating the format: the browser reduces this
+     * exact string to a badge KEY on arrival, so the producer and the consumer must be reading one
+     * definition of where the parts are.
      */
     buildBadgeReference(scope, scopeId, identifier) {
-        return `${scope}:${scopeId}:${identifier}`;
+        return buildNotificationBadgeReference(scope, scopeId, identifier);
     }
     /**
      * Parse a badge reference string.
@@ -106,18 +126,7 @@ let NotificationBadgeBackendService = class NotificationBadgeBackendService {
      * to fail fast at parse time rather than later during dispatch.
      */
     parseBadgeReference(badgeReference) {
-        const parts = badgeReference.split(':');
-        if (parts.length !== 3)
-            return null;
-        const [scope, scopeId, identifier] = parts;
-        if (!this.isSupportedScope(scope)) {
-            return null;
-        }
-        return {
-            scope: scope,
-            scopeId,
-            identifier: identifier,
-        };
+        return parseNotificationBadgeReference(badgeReference);
     }
     /**
      * Get badge count for a specific identifier and scope
@@ -165,51 +174,73 @@ let NotificationBadgeBackendService = class NotificationBadgeBackendService {
         }
     }
     /**
-     * Execute a badge operation (increment, decrement, set, reset)
+     * Execute a badge operation (increment, decrement, set, reset).
+     *
+     * ## Two write shapes, because the vocabulary carries two kinds of change
+     *
+     * `SET` and `RESET` are ABSOLUTE: the value written does not depend on the value read, so a plain
+     * read-then-write is already correct — concurrent absolute writes are last-writer-wins, which is
+     * what "set it to N" means.
+     *
+     * `INCREMENT` and `DECREMENT` are RELATIVE, and that is where this method used to lose data. It
+     * read `count`, computed `count ± value` in JavaScript, and wrote the result back. Two operations
+     * committing concurrently both read the SAME previous value, so the second write overwrote the
+     * first and one increment vanished — with no error, no log, and a badge that is simply too low
+     * forever after (an EVENT_COUNTER badge is never re-derived; that is the whole distinction
+     * `NotificationBadgeSourceKind` draws, and it is why the drift is permanent here and self-healing
+     * on a DERIVED_QUERY badge).
+     *
+     * More checking cannot fix that — the two writers have nothing to collide on. So the relative arms
+     * now go through the adapter-neutral guarded mutation, where the STORE performs the arithmetic in
+     * one statement (`$inc` on MongoDB, `COALESCE(col, 0) + delta` on PostgreSQL) and the two writers
+     * collide on the row itself. See {@link applyRelativeCountChange}.
      */
     async executeBadgeOperation(executionContext, scope, scopeId, identifier, operation, value = 1) {
+        const resourceType = this.resolveResourceType(scope);
         const repository = this.resolveRepository(scope);
-        if (!repository) {
+        if (!resourceType || !repository) {
             throw this.errorBuilder.buildError('INTERNAL', executionContext, {
                 customMessageReference: 'NOTIFICATION_BADGES_REPOSITORY_NOT_FOUND',
                 context: { scope },
             });
         }
-        // Find existing badge
-        let badge = await this.findBadge(executionContext, scope, scopeId, identifier);
-        const previousCount = badge?.count ?? 0;
+        let previousCount;
         let newCount;
-        // Calculate new count based on operation
         switch (operation) {
             case NotificationBadgeOperation.INCREMENT:
-                newCount = previousCount + value;
-                break;
-            case NotificationBadgeOperation.DECREMENT:
-                newCount = Math.max(0, previousCount - value);
+            case NotificationBadgeOperation.DECREMENT: {
+                const delta = operation === NotificationBadgeOperation.INCREMENT ? value : -value;
+                ({ previousCount, newCount } = await this.applyRelativeCountChange(resourceType, scope, scopeId, identifier, delta));
                 break;
+            }
             case NotificationBadgeOperation.SET:
-                newCount = Math.max(0, value);
-                break;
-            case NotificationBadgeOperation.RESET:
-                newCount = 0;
+            case NotificationBadgeOperation.RESET: {
+                const absoluteCount = operation === NotificationBadgeOperation.SET ? Math.max(0, value) : 0;
+                ({ previousCount, newCount } = await this.writeAbsoluteCount(repository, scope, scopeId, identifier, absoluteCount));
                 break;
-            default:
+            }
+            default: {
+                /**
+                 * The vocabulary is closed, but the dispatcher reaches this method through
+                 * `badgeOp.operation as NotificationBadgeOperation` — an unchecked cast over an authored
+                 * string — so an unknown member can arrive at runtime.
+                 *
+                 * It now reads the count and writes NOTHING. The previous behaviour wrote `previousCount`
+                 * back over itself, which on an absent badge MATERIALIZED a zero row for an operation
+                 * nobody could name: a write performed because the switch had no other arm to fall into.
+                 * The event is still emitted below, so a client that asked for an unknown operation is
+                 * told the current value rather than left silent.
+                 */
+                previousCount = await this.getBadgeCount(executionContext, scope, scopeId, identifier);
                 newCount = previousCount;
-        }
-        // Update or create badge through a badge-resource-scoped EC (see
-        // buildBadgeExecutionContext) so context enrichment injects the scope FK
-        // (userId / organizationId) that the create DTO auto-excludes.
-        const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);
-        if (badge) {
-            await repository.update(badgeExecutionContext, badge._id, {
-                count: newCount,
-                updatedAt: new Date(),
-            });
-        }
-        else {
-            // Create new badge
-            const newBadge = this.buildNewBadge(scope, scopeId, identifier, newCount);
-            await repository.create(badgeExecutionContext, newBadge);
+                this.logger.warn('Unknown notification badge operation — reporting the current count without writing', {
+                    scope,
+                    scopeId,
+                    identifier,
+                    operation: String(operation),
+                });
+                break;
+            }
         }
         const badgeReference = this.buildBadgeReference(scope, scopeId, identifier);
         // Emit WebSocket event
@@ -226,6 +257,182 @@ let NotificationBadgeBackendService = class NotificationBadgeBackendService {
             newCount,
         };
     }
+    /**
+     * Apply a RELATIVE change (`+value` / `-value`) to a badge counter without ever reading it into
+     * JavaScript first.
+     *
+     * ## The shape, and why it is a loop rather than a straight line
+     *
+     * A guarded mutation only mutates a row that ALREADY EXISTS — it returns `null` when its filter
+     * matched nothing, and it cannot insert. A badge row, meanwhile, is materialized lazily on its
+     * first write. So the write is "apply the delta; if there was no row, materialize one at ZERO and
+     * apply the delta to that".
+     *
+     * **Materializing at ZERO rather than at the target is the load-bearing detail.** Creating the row
+     * already carrying `value` would mean two racing first-increments each insert a row holding `1`,
+     * and one of the two increments is lost exactly as before — the defect would simply have moved
+     * from the update to the insert. Creating at zero and then letting BOTH callers apply their own
+     * delta through the atomic statement keeps every increment: the store matches one row for both,
+     * and it ends at 2.
+     *
+     * ## The residual, stated rather than hidden
+     *
+     * Two racing materializations can still leave a DUPLICATE badge row, because nothing in the schema
+     * makes `(scopeId, identifier)` unique — `identifier` carries `.isSummaryField()` and no
+     * `.isUnique()`, so the store has no constraint to refuse the second insert with. That duplicate
+     * hazard is older than this method and is not what this change is about: it costs a stray row,
+     * whereas the read-modify-write cost a permanently wrong number. Closing it means a unique index,
+     * which is an engine resource change owing a migration in every PostgreSQL-backed surface
+     * (`.claude/rules/engine-resource-changes-owe-migrations.md`) and belongs with the badge-identity
+     * work, not here.
+     *
+     * @returns the count before and after, as observed from the row the store returned.
+     */
+    async applyRelativeCountChange(resourceType, scope, scopeId, identifier, delta) {
+        /**
+         * The identity of the ONE row this write may touch.
+         *
+         * Tenant scoping is preserved BY CONSTRUCTION rather than by the execution context: the guarded
+         * mutation is an infrastructure-tier door whose contract puts scope-aware filter construction on
+         * the caller, and the scope key (`userId` / `organizationId`) is right here in the filter, so
+         * the statement cannot reach another tenant's badge. That is the same posture the promotion
+         * redemption counter and the credit pool take.
+         */
+        const identityFilter = { ...this.buildScopeFilter(scope, scopeId), identifier };
+        for (let pass = 0; pass < RELATIVE_BADGE_WRITE_PASSES; pass += 1) {
+            const applied = await this.applyGuardedCountDelta(resourceType, identityFilter, delta);
+            if (applied) {
+                return applied;
+            }
+            /**
+             * Nothing matched. There are exactly two reasons, and they need opposite responses, so ask
+             * which one it is instead of assuming.
+             *
+             * - The badge row does not exist yet — materialize it and let the next pass apply the delta.
+             * - A DECREMENT lost the race between its two floor statements (see
+             *   {@link applyGuardedCountDelta}) — the row exists, and materializing would duplicate it.
+             *   Retry the pair instead.
+             *
+             * The read costs a round trip on a path taken once per badge lifetime (plus a genuinely rare
+             * contention window), which is why it is affordable here and would not be on the hot arm.
+             */
+            const existing = await this.findBadgeByIdentity(scope, scopeId, identifier);
+            if (!existing) {
+                await this.materializeZeroBadge(scope, scopeId, identifier);
+            }
+        }
+        /**
+         * Every pass lost its race. Report what the row currently holds and write nothing further: a
+         * badge is a decoration, and the caller is a domain mutation that has already committed, so
+         * throwing here would turn a cosmetic loss into a failed user action. The warning is what makes
+         * the loss visible — silence is what let the original read-modify-write defect live.
+         */
+        const current = await this.findBadgeByIdentity(scope, scopeId, identifier);
+        const currentCount = current?.count ?? 0;
+        this.logger.warn('Notification badge counter change was dropped after exhausting its atomic write passes', {
+            scope,
+            scopeId,
+            identifier,
+            delta,
+            currentCount,
+            passes: RELATIVE_BADGE_WRITE_PASSES,
+        });
+        return { previousCount: currentCount, newCount: currentCount };
+    }
+    /**
+     * ONE attempt at the atomic delta. Returns the before/after counts, or `null` when no row matched.
+     *
+     * ## The decrement floor lives in the FILTER, not in `Math.max`
+     *
+     * `Math.max(0, previousCount - value)` computes the floor from a value read moments earlier, which
+     * is the very read this change exists to remove. The floor is therefore expressed as a GUARD the
+     * store evaluates in the same statement as the write — `count: { $gte: magnitude }` — which is the
+     * idiom the promotion redemption counter uses for its `maxRedemptions` ceiling.
+     *
+     * That guard alone would REFUSE a decrement that cannot be taken in full, where the previous
+     * behaviour CLAMPED it to zero. Preserving the clamp needs a second statement, because neither
+     * adapter's neutral vocabulary can express "subtract, floored at zero" in one (there is no `$max`
+     * in `RepositoryGuardedMutation`, deliberately — an operator no adapter pair can honour identically
+     * does not get a name there). So a below-floor row is set to zero by a SECOND guarded statement,
+     * itself conditioned on the row still being below the floor. Each statement is atomic, and the
+     * pair is safe in every interleaving:
+     *
+     * - first matched → the count fell by exactly `magnitude`;
+     * - first missed, second matched → the count was below the floor at the moment of the write and is
+     *   now zero, which is what `Math.max(0, count - value)` meant for that count;
+     * - both missed → either no row, or a concurrent INCREMENT crossed the floor between the two
+     *   statements. The caller distinguishes those and retries rather than concluding.
+     *
+     * ## `updatedAt` is deliberately absent from the descriptor
+     *
+     * Both adapters bump it themselves — mongoose's `timestamps` hook on one, an explicit
+     * planned-column assignment inside `prepareGuardedUpdate` on the other. Passing it here would be a
+     * second authority for the same field, and the two would disagree the day either arm changes.
+     */
+    async applyGuardedCountDelta(resourceType, identityFilter, delta) {
+        if (delta >= 0) {
+            const incremented = await this.repositoriesRegistry.atomicGuardedMutation(resourceType, identityFilter, { increment: { count: delta } });
+            if (!incremented)
+                return null;
+            return { previousCount: incremented.count - delta, newCount: incremented.count };
+        }
+        const magnitude = -delta;
+        const decremented = await this.repositoriesRegistry.atomicGuardedMutation(resourceType, { ...identityFilter, count: { $gte: magnitude } }, { increment: { count: delta } });
+        if (decremented) {
+            return { previousCount: decremented.count + magnitude, newCount: decremented.count };
+        }
+        const clamped = await this.repositoriesRegistry.atomicGuardedMutation(resourceType, { ...identityFilter, count: { $lt: magnitude } }, { set: { count: 0 } });
+        if (!clamped)
+            return null;
+        /**
+         * `previousCount` is reported as the post-write zero rather than as an estimate. The row's
+         * pre-write count was somewhere in `[0, magnitude)` and the statement that overwrote it cannot
+         * report the value it replaced — a guarded mutation returns the row AFTER the write on both
+         * adapters. Nothing reads this field (it exists on `BadgeUpdateResult` and is consumed only by
+         * this service's own debug line), and an invented number would be worse than a floor.
+         */
+        return { previousCount: clamped.count, newCount: clamped.count };
+    }
+    /**
+     * Insert the badge row at ZERO so a subsequent atomic delta has something to mutate.
+     *
+     * Goes through the SERVICE tier (`repository.create` with the badge-scoped execution context)
+     * rather than a raw insert, so the row is schema-validated and gets its scope FK injected by
+     * context enrichment at birth — see {@link buildBadgeExecutionContext} for why the triggering
+     * operation's own context cannot serve here.
+     */
+    async materializeZeroBadge(scope, scopeId, identifier) {
+        const repository = this.resolveRepository(scope);
+        if (!repository)
+            return;
+        const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);
+        await repository.create(badgeExecutionContext, this.buildNewBadge(scope, scopeId, identifier, 0));
+    }
+    /**
+     * Write an ABSOLUTE count (`SET` / `RESET`).
+     *
+     * The read here is NOT a read-modify-write: the value written is fixed by the caller, so a
+     * concurrent absolute write can only replace it wholesale, which is what an absolute write means.
+     * The read decides update-versus-insert and supplies the reported `previousCount`.
+     */
+    async writeAbsoluteCount(repository, scope, scopeId, identifier, absoluteCount) {
+        const badge = await this.findBadgeByIdentity(scope, scopeId, identifier);
+        const previousCount = badge?.count ?? 0;
+        // Update or create badge through a badge-resource-scoped EC (see
+        // buildBadgeExecutionContext) so context enrichment injects the scope FK
+        // (userId / organizationId) that the create DTO auto-excludes.
+        const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);
+        if (badge) {
+            await repository.update(badgeExecutionContext, badge._id, {
+                count: absoluteCount,
+                updatedAt: new Date(),
+            });
+        }
+        else {
+            await repository.create(badgeExecutionContext, this.buildNewBadge(scope, scopeId, identifier, absoluteCount));
+        }
+        return { previousCount, newCount: absoluteCount };
+    }
     /**
      * Increment a badge count
      */
@@ -347,9 +554,24 @@ let NotificationBadgeBackendService = class NotificationBadgeBackendService {
     // Private Helper Methods
     // ================================
     /**
-     * Find a badge by scope, scopeId, and identifier
+     * Find a badge by scope, scopeId, and identifier.
+     *
+     * `executionContext` is the CALLER's context and is deliberately not used for the read: a badge
+     * read runs on its own badge-resource-scoped context, exactly as a badge write does, because the
+     * triggering operation's context carries the wrong scope (see {@link buildBadgeExecutionContext}).
+     * The parameter is kept so the private read reads like every other method on this service.
+     */
+    findBadge(executionContext, scope, scopeId, identifier) {
+        return this.findBadgeByIdentity(scope, scopeId, identifier);
+    }
+    /**
+     * The badge read itself, addressed only by identity.
+     *
+     * Split out of {@link findBadge} because the atomic write path has no caller execution context to
+     * pass — it is reconciling its own guarded statements, not serving a request — and inventing one
+     * to satisfy a parameter the read never consults would be ceremony.
      */
-    async findBadge(executionContext, scope, scopeId, identifier) {
+    async findBadgeByIdentity(scope, scopeId, identifier) {
         const repository = this.resolveRepository(scope);
         if (!repository) {
             return null;
@@ -377,24 +599,27 @@ let NotificationBadgeBackendService = class NotificationBadgeBackendService {
      * resilient (per existing behavior).
      */
     resolveRepository(scope) {
+        const resourceType = this.resolveResourceType(scope);
+        return resourceType ? this.repositoriesRegistry.getRepository(resourceType) : undefined;
+    }
+    /**
+     * Resolve the RESOURCE TYPE backing a badge scope — the same polymorphism dispatch
+     * {@link resolveRepository} performs, named separately because the atomic write path addresses the
+     * registry by resource type rather than by repository handle.
+     *
+     * One switch, two consumers: a second copy of this mapping is how a future third scope reaches one
+     * of them and not the other.
+     */
+    resolveResourceType(scope) {
         switch (scope) {
             case ResourcePrimaryScope.USER_SELF:
-                return this.repositoriesRegistry.getRepository(CoreResourceType.USER_NOTIFICATION_BADGES);
+                return CoreResourceType.USER_NOTIFICATION_BADGES;
             case ResourcePrimaryScope.ORGANIZATIONS:
-                return this.repositoriesRegistry.getRepository(CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES);
+                return CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES;
             default:
                 return undefined;
         }
     }
-    /**
-     * Whether a string scope value is one of the supported badge scopes.
-     * Used by `parseBadgeReference` to reject APPLICATION-scoped references
-     * at parse time (the variant was dropped in the polymorphism refactor).
-     */
-    isSupportedScope(scope) {
-        return scope === ResourcePrimaryScope.USER_SELF
-            || scope === ResourcePrimaryScope.ORGANIZATIONS;
-    }
     /**
      * Build filter for scope-specific queries.
      *

package/dist/esm/notifications/services/notification-badge.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-badge.backend.service.js","sourceRoot":"","sources":["../../../../../src/notifications/services/notification-badge.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EACL,yCAAyC,GAE1C,MAAM,qGAAqG,CAAC;AAC7G,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAGtI,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAG1B,2BAA2B,EAC3B,gBAAgB,EAChB,qBAAqB,EAErB,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAoB,MAAM,uDAAuD,CAAC;AAoB3G;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAW,CAAC;AAE/E;;;;;;GAMG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAKY;IACa;IACe;IAClB;IACO;IACc;IAR3E,QAAQ,CAA+D;IAEjF,YACsD,MAAqB,EACR,YAAwC,EACzB,oBAA+D,EACjF,gBAAkC,EAC3B,iBAAkD,EACpC,uBAA8D;QAL7F,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QACzB,yBAAoB,GAApB,oBAAoB,CAA2C;QACjF,qBAAgB,GAAhB,gBAAgB,CAAkB;QAC3B,sBAAiB,GAAjB,iBAAiB,CAAiC;QACpC,4BAAuB,GAAvB,uBAAuB,CAAuC;QAEjJ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,0BAA0B,CAAC,KAA2B,EAAE,OAAe;QAC7E,MAAM,WAAW,GAAG,KAAK,KAAK,oBAAoB,CAAC,SAAS,CAAC;QAC7D,MAAM,YAAY,GAAG,WAAW;YAC9B,CAAC,CAAC,gBAAgB,CAAC,wBAAwB;YAC3C,CAAC,CAAC,gBAAgB,CAAC,gCAAgC,CAAC;QACtD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACvE,6EAA6E;QAC7E,yEAAyE;QACzE,2EAA2E;QAC3E,8BAA8B;QAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;YACvE,YAAY;YACZ,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;YACjD,+BAA+B,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,mBAAmB,CAAC,KAA2B,EAAE,OAAe,EAAE,UAAuC;QAC9G,OAAO,GAAG,KAAK,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;;;OAQG;IACI,mBAAmB,CAAC,cAAsB;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,KAAK,EAAE,KAA6B;YACpC,OAAO;YACP,UAAU,EAAE,UAAyC;SACtD,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CACxB,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC;QAEvC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACjF,OAAO,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBAC5C,KAAK;gBACL,OAAO;gBACP,UAAU;gBACV,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CACvB,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe;QAEf,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAoB,qBAAqB,EAAE,MAAM,CAAC,CAAC;YAEvF,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAC3C,KAAK;gBACL,OAAO;gBACP,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,qBAAqB,CAChC,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC,EACvC,SAAqC,EACrC,QAAgB,CAAC;QAEjB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,UAAiB,EACjB,gBAAgB,EAChB;gBACE,sBAAsB,EAAE,0CAAiD;gBACzE,OAAO,EAAE,EAAE,KAAK,EAAE;aACnB,CACF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/E,MAAM,aAAa,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;QACxC,IAAI,QAAgB,CAAC;QAErB,yCAAyC;QACzC,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,0BAA0B,CAAC,SAAS;gBACvC,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAC;gBACjC,MAAM;YACR,KAAK,0BAA0B,CAAC,SAAS;gBACvC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,KAAK,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,0BAA0B,CAAC,GAAG;gBACjC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,0BAA0B,CAAC,KAAK;gBACnC,QAAQ,GAAG,CAAC,CAAC;gBACb,MAAM;YACR;gBACE,QAAQ,GAAG,aAAa,CAAC;QAC7B,CAAC;QAED,iEAAiE;QACjE,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,UAAU,CAAC,MAAM,CAAoB,qBAAqB,EAAE,KAAK,CAAC,GAAG,EAAE;gBAC3E,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;aACf,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,mBAAmB;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC1E,MAAM,UAAU,CAAC,MAAM,CAAoB,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5E,uBAAuB;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAExG,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE;YACxC,cAAc;YACd,SAAS;YACT,aAAa;YACb,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO;YACL,cAAc;YACd,aAAa;YACb,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CACpB,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC,EACvC,SAAiB,CAAC;QAElB,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,SAAS,EACpC,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CACpB,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC,EACvC,SAAiB,CAAC;QAElB,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,SAAS,EACpC,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,GAAG,CACd,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC,EACvC,KAAa;QAEb,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,GAAG,EAC9B,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK,CAChB,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC;QAEvC,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,KAAK,CACjC,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,qBAAqB,CAChC,gBAA4D,EAC5D,UAAuC,EACvC,OAAe;QAEf,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC5D,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,yEAAyE;QACzE,gFAAgF;QAChF,iFAAiF;QACjF,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,uEAAuE;QACvE,IAAI,sBAAsB,GAA0B,gBAAgB,CAAC;QACrE,IAAI,CAAC;YACH,sBAAsB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;gBAC/F,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,mBAAmB,EAAE,qBAAqB,CAAC,KAAK;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,yEAAyE;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;QAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;QAE5G,4DAA4D;QAC5D,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,uBAAuB,CAClC,gBAA4D,EAC5D,YAAwE;QAExE,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,CAAC,4BAA4B,IAAI,EAAE,CAAC;QACrG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GACX,UAAU,CAAC,KAAK,KAAK,oBAAoB,CAAC,SAAS;gBACjD,CAAC,CAAC,YAAY,CAAC,MAAM;gBACrB,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,oBAAoB,CAAC,aAAa;oBACvD,CAAC,CAAC,YAAY,CAAC,cAAc;oBAC7B,CAAC,CAAC,IAAI,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;oBACzE,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,2EAA2E;oBAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC3G,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;gBACxH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBACrD,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,yBAAyB;IACzB,mCAAmC;IAEnC;;OAEG;IACK,KAAK,CAAC,SAAS,CACrB,gBAA4D,EAC5D,KAA2B,EAC3B,OAAe,EACf,UAAuC;QAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG;YACb,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC;YACxC,UAAU;SACX,CAAC;QAEF,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAoB,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,iBAAiB,CAAC,KAA2B;QACnD,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;YAC5F,KAAK,oBAAoB,CAAC,aAAa;gBACrC,OAAO,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;YACpG;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,KAAa;QACpC,OAAO,KAAK,KAAK,oBAAoB,CAAC,SAAS;eAC1C,KAAK,KAAK,oBAAoB,CAAC,aAAa,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CAAC,KAA2B,EAAE,OAAe;QACnE,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,KAAK,oBAAoB,CAAC,aAAa;gBACrC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;YACrC;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CACnB,KAA2B,EAC3B,OAAe,EACf,UAAuC,EACvC,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAQ;YAChB,KAAK;YACL,UAAU;YACV,KAAK;YACL,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;gBACtB,MAAM;YACR,KAAK,oBAAoB,CAAC,aAAa;gBACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;gBAC9B,MAAM;QACV,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,eAAe,CAC3B,KAA2B,EAC3B,OAAe,EACf,UAAuC,EACvC,QAAgB,EAChB,eAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,OAAO,GAA0B;YACrC,cAAc;YACd,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,KAAK,KAAK,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACnF,CAAC;QAEF,MAAM,OAAO,GAAqB;YAChC,IAAI,EAAE,kBAAkB,CAAC,YAAY;YACrC,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,eAAe;SACxB,CAAC;QAEF,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM;YACR,KAAK,oBAAoB,CAAC,aAAa;gBACrC,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjE,MAAM;YACR;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;oBACnE,KAAK;oBACL,OAAO;oBACP,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;IACH,CAAC;CACF,CAAA;AAzjBY,+BAA+B;IAD3C,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;qCALL,aAAa;QACM,0BAA0B;QACH,yCAAyC;QAC/D,gBAAgB;QACR,+BAA+B;QACX,qCAAqC;GAVxI,+BAA+B,CAyjB3C","sourcesContent":["import { inject, injectable } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport {\n  RepositoriesRegistryHandlerBackendService,\n  type BackendResourceRepository,\n} from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { ResourceConfiguration_Operation } from '@wildo-ai/saas-models';\nimport {\n  ResourcePrimaryScope,\n  NotificationBadgeOperation,\n  NotificationBadge,\n  NotificationBadgeDefinition,\n  NotificationBadgeSourceKind,\n  CoreResourceType,\n  CoreResourceOperation,\n  NotificationBadgeIdentifier,\n  CoreWebSocketEvent,\n  WS_BadgeUpdatePayload,\n} from '@wildo-ai/saas-models';\nimport { WebSocketService, WebSocketMessage } from '~wildo-backend-lib/requests/service/websocket.service';\n\n/**\n * Badge reference format: `${scope}:${scopeId}:${identifier}`\n * Examples:\n * - user_self:user123:new_messages\n * - organization:org456:pending_tasks\n */\nexport interface BadgeReference {\n  scope: ResourcePrimaryScope;\n  scopeId: string;\n  identifier: NotificationBadgeIdentifier;\n}\n\nexport interface BadgeUpdateResult {\n  badgeReference: string;\n  previousCount: number;\n  newCount: number;\n}\n\n/**\n * The derived-badge SOURCE count passes a fully explicit, self-scoped filter\n * (`{ ...authoredFilter, [scopeField]: scopeId }`), so ambient contextual\n * filtering is skipped — the count must be identical regardless of the execution\n * context driving the recompute. (The badge resource's OWN ops instead use a\n * dedicated badge-scoped EC — see `buildBadgeExecutionContext` — so their scope\n * FK is injected/filtered correctly rather than bypassed.)\n */\nconst EXPLICIT_SCOPE_REPO_OPTIONS = { excludeContextualFilter: true } as const;\n\n/**\n * NotificationBadgeBackendService\n *\n * Manages notification badge counts stored in the database.\n * Provides operations to increment, decrement, set, and reset badge counts.\n * Emits WebSocket events when badge counts change.\n */\n@injectable()\nexport class NotificationBadgeBackendService {\n\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositoriesRegistry: RepositoriesRegistryHandlerBackendService,\n    @inject(SAAS_SERVICE_TYPES.WebSocketService) private readonly webSocketService: WebSocketService,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: ResourcesRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n  ) {\n    this.logDebug = this.logger.debugByType('NotificationBadgeService');\n    this.logger.setDebugTypeLogging('NotificationBadgeService', false);\n  }\n\n  /**\n   * Build a badge-resource-scoped execution context for the badge's OWN\n   * repository operations (read/create/update on `userNotificationBadges` /\n   * `organizationNotificationBadges`).\n   *\n   * WHY this exists — the badge scope FK (`userId` / `organizationId`) is a\n   * parent-scope field that the framework AUTO-EXCLUDES from the create DTO\n   * (it is meant to be injected from the request's URL/scope context). A badge\n   * write driven by a system service (dispatcher recompute / connect-seed) has\n   * no such URL context, and reusing the TRIGGERING operation's execution\n   * context (e.g. a `todos` op, or the connect-seed's `APPLICATION.READ`) carries\n   * the WRONG scope — `context_filter` / `context_enrichment` fail closed, or the\n   * scope FK is simply never injected (`userId: Path 'userId' is required`).\n   *\n   * Building a dedicated internal EC for the badge resource, with ONLY the badge's\n   * own scope field in its context map, makes the standard pipeline correct:\n   * context enrichment injects the scope FK on create, and contextual filtering\n   * scopes reads by exactly that field. Mirrors the `FilesBackendService`\n   * internal-repository-context pattern.\n   */\n  private buildBadgeExecutionContext(scope: ResourcePrimaryScope, scopeId: string): Promise<ExecutionContext<any>> {\n    const isUserScope = scope === ResourcePrimaryScope.USER_SELF;\n    const resourceType = isUserScope\n      ? CoreResourceType.USER_NOTIFICATION_BADGES\n      : CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES;\n    const scopeFieldIdentifier = isUserScope ? 'userId' : 'organizationId';\n    // The scope goes ONLY in the context map (enrichment injects it / contextual\n    // filtering scopes by it). It must NOT go in `initiatorIds`: an internal\n    // (`internally_initiated_request`) EC forbids identity fields there — only\n    // `applicationId` is allowed.\n    return this.executionContextCreator.createForInternalRepositoryOperation({\n      resourceType,\n      operationIdentifier: CoreResourceOperation.CREATE,\n      contextResourcesFieldIdentifier: new Map([[scopeFieldIdentifier, scopeId]]),\n    });\n  }\n\n  /**\n   * Build a badge reference string\n   */\n  public buildBadgeReference(scope: ResourcePrimaryScope, scopeId: string, identifier: NotificationBadgeIdentifier): string {\n    return `${scope}:${scopeId}:${identifier}`;\n  }\n\n  /**\n   * Parse a badge reference string.\n   *\n   * Validates that the embedded scope is a SUPPORTED badge scope (USER_SELF or\n   * ORGANIZATIONS). The polymorphism refactor dropped APPLICATION-scope badges\n   * (no canonical identifiers existed at that scope and no resource type backs\n   * it anymore) — so a reference like `application:appId:foo` is rejected here\n   * to fail fast at parse time rather than later during dispatch.\n   */\n  public parseBadgeReference(badgeReference: string): BadgeReference | null {\n    const parts = badgeReference.split(':');\n    if (parts.length !== 3) return null;\n\n    const [scope, scopeId, identifier] = parts;\n    if (!this.isSupportedScope(scope)) {\n      return null;\n    }\n\n    return {\n      scope: scope as ResourcePrimaryScope,\n      scopeId,\n      identifier: identifier as NotificationBadgeIdentifier,\n    };\n  }\n\n  /**\n   * Get badge count for a specific identifier and scope\n   */\n  public async getBadgeCount<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<number> {\n    try {\n      const badge = await this.findBadge(executionContext, scope, scopeId, identifier);\n      return badge?.count ?? 0;\n    } catch (error) {\n      this.logger.warn('Failed to get badge count', {\n        scope,\n        scopeId,\n        identifier,\n        ...projectCaughtErrorLogFields(error),\n      });\n      return 0;\n    }\n  }\n\n  /**\n   * Get all badges for a specific scope\n   */\n  public async getAllBadges<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string\n  ): Promise<Array<{ identifier: string; count: number }>> {\n    try {\n      const repository = this.resolveRepository(scope);\n      if (!repository) {\n        this.logger.warn('NotificationBadges repository not found', { scope });\n        return [];\n      }\n\n      const filter = this.buildScopeFilter(scope, scopeId);\n      const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n      const badges = await repository.list<NotificationBadge>(badgeExecutionContext, filter);\n\n      return badges.map(badge => ({\n        identifier: badge.identifier,\n        count: badge.count,\n      }));\n    } catch (error) {\n      this.logger.warn('Failed to get all badges', {\n        scope,\n        scopeId,\n        ...projectCaughtErrorLogFields(error),\n      });\n      return [];\n    }\n  }\n\n  /**\n   * Execute a badge operation (increment, decrement, set, reset)\n   */\n  public async executeBadgeOperation<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    operation: NotificationBadgeOperation,\n    value: number = 1\n  ): Promise<BadgeUpdateResult> {\n    const repository = this.resolveRepository(scope);\n    if (!repository) {\n      throw this.errorBuilder.buildError(\n        'INTERNAL' as any,\n        executionContext,\n        {\n          customMessageReference: 'NOTIFICATION_BADGES_REPOSITORY_NOT_FOUND' as any,\n          context: { scope },\n        }\n      );\n    }\n\n    // Find existing badge\n    let badge = await this.findBadge(executionContext, scope, scopeId, identifier);\n    const previousCount = badge?.count ?? 0;\n    let newCount: number;\n\n    // Calculate new count based on operation\n    switch (operation) {\n      case NotificationBadgeOperation.INCREMENT:\n        newCount = previousCount + value;\n        break;\n      case NotificationBadgeOperation.DECREMENT:\n        newCount = Math.max(0, previousCount - value);\n        break;\n      case NotificationBadgeOperation.SET:\n        newCount = Math.max(0, value);\n        break;\n      case NotificationBadgeOperation.RESET:\n        newCount = 0;\n        break;\n      default:\n        newCount = previousCount;\n    }\n\n    // Update or create badge through a badge-resource-scoped EC (see\n    // buildBadgeExecutionContext) so context enrichment injects the scope FK\n    // (userId / organizationId) that the create DTO auto-excludes.\n    const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n    if (badge) {\n      await repository.update<NotificationBadge>(badgeExecutionContext, badge._id, {\n        count: newCount,\n        updatedAt: new Date(),\n      } as any);\n    } else {\n      // Create new badge\n      const newBadge = this.buildNewBadge(scope, scopeId, identifier, newCount);\n      await repository.create<NotificationBadge>(badgeExecutionContext, newBadge);\n    }\n\n    const badgeReference = this.buildBadgeReference(scope, scopeId, identifier);\n\n    // Emit WebSocket event\n    await this.emitBadgeUpdate(scope, scopeId, identifier, newCount, executionContext.initiatorIds?.userId);\n\n    this.logDebug('Badge operation executed', {\n      badgeReference,\n      operation,\n      previousCount,\n      newCount,\n    });\n\n    return {\n      badgeReference,\n      previousCount,\n      newCount,\n    };\n  }\n\n  /**\n   * Increment a badge count\n   */\n  public async increment<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    amount: number = 1\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.INCREMENT,\n      amount\n    );\n  }\n\n  /**\n   * Decrement a badge count\n   */\n  public async decrement<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    amount: number = 1\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.DECREMENT,\n      amount\n    );\n  }\n\n  /**\n   * Set a badge count to a specific value\n   */\n  public async set<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    value: number\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.SET,\n      value\n    );\n  }\n\n  /**\n   * Reset a badge count to zero\n   */\n  public async reset<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.RESET\n    );\n  }\n\n  /**\n   * Recompute a DERIVED_QUERY badge and persist the result (R5).\n   *\n   * The count is RE-DERIVED from the source resource collection every time\n   * (`count(resourceType where {...filter, [scopeField]: scopeId})`) and then\n   * `SET` onto the badge — it is never incrementally tracked, so it CANNOT\n   * drift (bulk mutations, deletes, reopen, out-of-band edits all reconcile on\n   * the next recompute). Called by the dispatcher when the source resource is\n   * mutated. No-op for non-DERIVED definitions.\n   */\n  public async recomputeDerivedBadge<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    definition: NotificationBadgeDefinition,\n    scopeId: string\n  ): Promise<void> {\n    if (definition.source.kind !== NotificationBadgeSourceKind.DERIVED_QUERY) {\n      return;\n    }\n\n    const source = definition.source;\n    const sourceRepository = this.repositoriesRegistry.getRepository(source.resourceType);\n    if (!sourceRepository) {\n      this.logger.warn('Derived badge source repository not found', {\n        identifier: definition.identifier,\n        resourceType: source.resourceType,\n      });\n      return;\n    }\n\n    // Bind the scope onto the authored filter, then count the source collection.\n    // The filter is FULLY self-scoped (`[scopeField]: scopeId` pins it to the\n    // badge's own scope), so the count must be identical regardless of which\n    // execution context drives the recompute. Build a dedicated internal EC for the\n    // SOURCE resource's own count rather than reusing the caller's EC — the mutation\n    // path passes the triggering op's EC (works), but the connect-seed passes an\n    // APPLICATION.READ EC, and counting a foreign resource off that mismatched EC\n    // threw \"Cannot read properties of undefined (reading 'operations')\". With the\n    // source-scoped EC + explicit filter, contextual filtering is skipped.\n    let sourceExecutionContext: ExecutionContext<any> = executionContext;\n    try {\n      sourceExecutionContext = await this.executionContextCreator.createForInternalRepositoryOperation({\n        resourceType: source.resourceType,\n        operationIdentifier: CoreResourceOperation.COUNT,\n      });\n    } catch {\n      // Fall back to the caller's EC if the source resource has no resolvable\n      // internal count operation (the explicit filter still scopes the count).\n    }\n    const filter = { ...source.filter, [source.scopeField]: scopeId };\n    const { count } = await sourceRepository.count(sourceExecutionContext, filter, EXPLICIT_SCOPE_REPO_OPTIONS);\n\n    // SET (not increment) — the derived count is authoritative.\n    await this.set(executionContext, definition.scope, scopeId, definition.identifier, count);\n  }\n\n  /**\n   * Seed every registered badge for a freshly-connected client (R6a —\n   * compute-on-connect). For each definition in the connecting scope: DERIVED\n   * badges are recomputed (fresh count, emits), EVENT badges have their stored\n   * count re-emitted so the client paints the current value on first render.\n   *\n   * `executionContext` MUST be the connecting user's own authenticated context\n   * (built by the WS layer from the validated socket auth) and `initiatorIds`\n   * MUST be the server-validated socket identity — never client handshake data —\n   * so the scopeId that drives every count is pinned to the caller's own scope\n   * (no cross-tenant read). Per-badge failures are logged, never abort siblings.\n   */\n  public async syncBadgesForConnection<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    initiatorIds: { userId?: string | null; organizationId?: string | null }\n  ): Promise<void> {\n    const definitions = this.resourcesRegistry.getResourcesRegistry().notificationBadgeDefinitions ?? [];\n    if (definitions.length === 0) {\n      return;\n    }\n\n    for (const definition of definitions) {\n      const scopeId =\n        definition.scope === ResourcePrimaryScope.USER_SELF\n          ? initiatorIds.userId\n          : definition.scope === ResourcePrimaryScope.ORGANIZATIONS\n            ? initiatorIds.organizationId\n            : null;\n      if (!scopeId) {\n        continue;\n      }\n\n      try {\n        if (definition.source.kind === NotificationBadgeSourceKind.DERIVED_QUERY) {\n          await this.recomputeDerivedBadge(executionContext, definition, scopeId);\n        } else {\n          // EVENT_COUNTER — re-emit the stored value so the client seeds on connect.\n          const count = await this.getBadgeCount(executionContext, definition.scope, scopeId, definition.identifier);\n          await this.emitBadgeUpdate(definition.scope, scopeId, definition.identifier, count, initiatorIds.userId ?? undefined);\n        }\n      } catch (error) {\n        this.logger.warn('Failed to seed badge on connection', {\n          identifier: definition.identifier,\n          scope: definition.scope,\n          ...projectCaughtErrorLogFields(error),\n        });\n      }\n    }\n  }\n\n  // ================================\n  // Private Helper Methods\n  // ================================\n\n  /**\n   * Find a badge by scope, scopeId, and identifier\n   */\n  private async findBadge<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<NotificationBadge | null> {\n    const repository = this.resolveRepository(scope);\n    if (!repository) {\n      return null;\n    }\n\n    const filter = {\n      ...this.buildScopeFilter(scope, scopeId),\n      identifier,\n    };\n\n    const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n    const badges = await repository.list<NotificationBadge>(badgeExecutionContext, filter);\n    return badges.length > 0 ? badges[0] : null;\n  }\n\n  /**\n   * Resolve the repository for a given badge scope.\n   *\n   * Polymorphism dispatch:\n   *   USER_SELF      → `USER_NOTIFICATION_BADGES` repository\n   *   ORGANIZATIONS  → `ORGANIZATION_NOTIFICATION_BADGES` repository\n   *   APPLICATION    → unsupported (variant dropped); returns `undefined` so\n   *                    callers can fail-fast with their own error context.\n   *\n   * Returns `undefined` (not throws) so the caller controls error semantics —\n   * `executeBadgeOperation` throws an explicit error, while `findBadge` /\n   * `getAllBadges` swallow and return empty results to keep the read path\n   * resilient (per existing behavior).\n   */\n  private resolveRepository(scope: ResourcePrimaryScope): BackendResourceRepository | undefined {\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        return this.repositoriesRegistry.getRepository(CoreResourceType.USER_NOTIFICATION_BADGES);\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        return this.repositoriesRegistry.getRepository(CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES);\n      default:\n        return undefined;\n    }\n  }\n\n  /**\n   * Whether a string scope value is one of the supported badge scopes.\n   * Used by `parseBadgeReference` to reject APPLICATION-scoped references\n   * at parse time (the variant was dropped in the polymorphism refactor).\n   */\n  private isSupportedScope(scope: string): scope is ResourcePrimaryScope {\n    return scope === ResourcePrimaryScope.USER_SELF\n      || scope === ResourcePrimaryScope.ORGANIZATIONS;\n  }\n\n  /**\n   * Build filter for scope-specific queries.\n   *\n   * Each variant has its own collection, so the scope discriminator field is\n   * implicit — we only need to filter by the scope-id field. The scope key is\n   * still set on the payload (`buildNewBadge`) because the schema requires it\n   * as the discriminated-union tag.\n   */\n  private buildScopeFilter(scope: ResourcePrimaryScope, scopeId: string): Record<string, any> {\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        return { userId: scopeId };\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        return { organizationId: scopeId };\n      default:\n        return {};\n    }\n  }\n\n  /**\n   * Build a new badge document.\n   *\n   * `scope` is required by the schema (it is the discriminated-union tag), so\n   * we still set it on the payload even though each variant lives in a\n   * dedicated collection.\n   */\n  private buildNewBadge(\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    count: number\n  ): Partial<NotificationBadge> {\n    const now = new Date();\n    const base: any = {\n      scope,\n      identifier,\n      count,\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        base.userId = scopeId;\n        break;\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        base.organizationId = scopeId;\n        break;\n    }\n\n    return base;\n  }\n\n  /**\n   * Emit WebSocket event for badge update.\n   *\n   * Routing:\n   *   USER_SELF      → `sendToUser(scopeId, …)`\n   *   ORGANIZATIONS  → `sendToOrganization(scopeId, …)`\n   *\n   * The APPLICATION arm is gone (the variant was dropped). If a future need\n   * for global broadcast badges arises, reintroduce it as its own scope and\n   * resource type rather than re-overloading APPLICATION.\n   */\n  private async emitBadgeUpdate(\n    scope: ResourcePrimaryScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    newCount: number,\n    initiatorUserId?: string\n  ): Promise<void> {\n    const badgeReference = this.buildBadgeReference(scope, scopeId, identifier);\n\n    const payload: WS_BadgeUpdatePayload = {\n      badgeReference,\n      badgeCount: newCount,\n      organizationId: scope === ResourcePrimaryScope.ORGANIZATIONS ? scopeId : undefined,\n    };\n\n    const message: WebSocketMessage = {\n      type: CoreWebSocketEvent.BADGE_UPDATE,\n      payload,\n      timestamp: new Date(),\n      userId: initiatorUserId,\n    };\n\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        await this.webSocketService.sendToUser(scopeId, message);\n        break;\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        await this.webSocketService.sendToOrganization(scopeId, message);\n        break;\n      default:\n        this.logger.warn('Skipping badge WS emission for unsupported scope', {\n          scope,\n          scopeId,\n          identifier,\n        });\n        break;\n    }\n  }\n}\n"]}
+{"version":3,"file":"notification-badge.backend.service.js","sourceRoot":"","sources":["../../../../src/notifications/services/notification-badge.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EACL,yCAAyC,GAE1C,MAAM,qGAAqG,CAAC;AAC7G,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAGtI,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAG1B,2BAA2B,EAC3B,gBAAgB,EAChB,qBAAqB,EAErB,+BAA+B,EAC/B,+BAA+B,EAE/B,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAoB,MAAM,uDAAuD,CAAC;AAsB3G;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAW,CAAC;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAEtC;;;;;;GAMG;AAEI,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAKY;IACa;IACe;IAClB;IACO;IACc;IAR3E,QAAQ,CAA+D;IAEjF,YACsD,MAAqB,EACR,YAAwC,EACzB,oBAA+D,EACjF,gBAAkC,EAC3B,iBAAkD,EACpC,uBAA8D;QAL7F,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QACzB,yBAAoB,GAApB,oBAAoB,CAA2C;QACjF,qBAAgB,GAAhB,gBAAgB,CAAkB;QAC3B,sBAAiB,GAAjB,iBAAiB,CAAiC;QACpC,4BAAuB,GAAvB,uBAAuB,CAAuC;QAEjJ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,0BAA0B,CAAC,KAAwB,EAAE,OAAe;QAC1E,MAAM,WAAW,GAAG,KAAK,KAAK,oBAAoB,CAAC,SAAS,CAAC;QAC7D,MAAM,YAAY,GAAG,WAAW;YAC9B,CAAC,CAAC,gBAAgB,CAAC,wBAAwB;YAC3C,CAAC,CAAC,gBAAgB,CAAC,gCAAgC,CAAC;QACtD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACvE,6EAA6E;QAC7E,yEAAyE;QACzE,2EAA2E;QAC3E,8BAA8B;QAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;YACvE,YAAY;YACZ,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;YACjD,+BAA+B,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACI,mBAAmB,CAAC,KAAwB,EAAE,OAAe,EAAE,UAAuC;QAC3G,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;OAQG;IACI,mBAAmB,CAAC,cAAsB;QAC/C,OAAO,+BAA+B,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CACxB,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC;QAEvC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACjF,OAAO,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBAC5C,KAAK;gBACL,OAAO;gBACP,UAAU;gBACV,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CACvB,gBAA4D,EAC5D,KAAwB,EACxB,OAAe;QAEf,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAoB,qBAAqB,EAAE,MAAM,CAAC,CAAC;YAEvF,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAC3C,KAAK;gBACL,OAAO;gBACP,GAAG,2BAA2B,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,KAAK,CAAC,qBAAqB,CAChC,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,SAAqC,EACrC,QAAgB,CAAC;QAEjB,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,UAAiB,EACjB,gBAAgB,EAChB;gBACE,sBAAsB,EAAE,0CAAiD;gBACzE,OAAO,EAAE,EAAE,KAAK,EAAE;aACnB,CACF,CAAC;QACJ,CAAC;QAED,IAAI,aAAqB,CAAC;QAC1B,IAAI,QAAgB,CAAC;QAErB,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,0BAA0B,CAAC,SAAS,CAAC;YAC1C,KAAK,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,SAAS,KAAK,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClF,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;gBACrH,MAAM;YACR,CAAC;YACD,KAAK,0BAA0B,CAAC,GAAG,CAAC;YACpC,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,MAAM,aAAa,GAAG,SAAS,KAAK,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5F,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;gBACrH,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR;;;;;;;;;;mBAUG;gBACH,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;gBACvF,QAAQ,GAAG,aAAa,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oFAAoF,EAAE;oBACrG,KAAK;oBACL,OAAO;oBACP,UAAU;oBACV,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;iBAC7B,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5E,uBAAuB;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAExG,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE;YACxC,cAAc;YACd,SAAS;YACT,aAAa;YACb,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO;YACL,cAAc;YACd,aAAa;YACb,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACK,KAAK,CAAC,wBAAwB,CACpC,YAA0B,EAC1B,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,KAAa;QAEb;;;;;;;;WAQG;QACH,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;QAEhF,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,2BAA2B,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YACvF,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;YAED;;;;;;;;;;;eAWG;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED;;;;;WAKG;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wFAAwF,EAAE;YACzG,KAAK;YACL,OAAO;YACP,UAAU;YACV,KAAK;YACL,YAAY;YACZ,MAAM,EAAE,2BAA2B;SACpC,CAAC,CAAC;QACH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACK,KAAK,CAAC,sBAAsB,CAClC,YAA0B,EAC1B,cAAuC,EACvC,KAAa;QAEb,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CACvE,YAAY,EACZ,cAAc,EACd,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAChC,CAAC;YACF,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,GAAG,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;QACnF,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC;QAEzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CACvE,YAAY,EACZ,EAAE,GAAG,cAAc,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EACjD,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAChC,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,GAAG,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;QACvF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CACnE,YAAY,EACZ,EAAE,GAAG,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAChD,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACtB,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B;;;;;;WAMG;QACH,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACnE,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,oBAAoB,CAChC,KAAwB,EACxB,OAAe,EACf,UAAuC;QAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,UAAU,CAAC,MAAM,CAAoB,qBAAqB,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IACvH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,kBAAkB,CAC9B,UAAqC,EACrC,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,aAAqB;QAErB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;QAExC,iEAAiE;QACjE,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,UAAU,CAAC,MAAM,CAAoB,qBAAqB,EAAE,KAAK,CAAC,GAAG,EAAE;gBAC3E,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE;aACf,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,CAAC,MAAM,CAAoB,qBAAqB,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QACnI,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CACpB,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,SAAiB,CAAC;QAElB,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,SAAS,EACpC,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CACpB,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,SAAiB,CAAC;QAElB,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,SAAS,EACpC,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,GAAG,CACd,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,KAAa;QAEb,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,GAAG,EAC9B,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK,CAChB,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC;QAEvC,OAAO,IAAI,CAAC,qBAAqB,CAC/B,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,UAAU,EACV,0BAA0B,CAAC,KAAK,CACjC,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,qBAAqB,CAChC,gBAA4D,EAC5D,UAAuC,EACvC,OAAe;QAEf,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC5D,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,yEAAyE;QACzE,gFAAgF;QAChF,iFAAiF;QACjF,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,uEAAuE;QACvE,IAAI,sBAAsB,GAA0B,gBAAgB,CAAC;QACrE,IAAI,CAAC;YACH,sBAAsB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;gBAC/F,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,mBAAmB,EAAE,qBAAqB,CAAC,KAAK;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,yEAAyE;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;QAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;QAE5G,4DAA4D;QAC5D,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,uBAAuB,CAClC,gBAA4D,EAC5D,YAAwE;QAExE,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,CAAC,4BAA4B,IAAI,EAAE,CAAC;QACrG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GACX,UAAU,CAAC,KAAK,KAAK,oBAAoB,CAAC,SAAS;gBACjD,CAAC,CAAC,YAAY,CAAC,MAAM;gBACrB,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,oBAAoB,CAAC,aAAa;oBACvD,CAAC,CAAC,YAAY,CAAC,cAAc;oBAC7B,CAAC,CAAC,IAAI,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;oBACzE,MAAM,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,2EAA2E;oBAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;oBAC3G,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;gBACxH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBACrD,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,GAAG,2BAA2B,CAAC,KAAK,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,yBAAyB;IACzB,mCAAmC;IAEnC;;;;;;;OAOG;IACK,SAAS,CACf,gBAA4D,EAC5D,KAAwB,EACxB,OAAe,EACf,UAAuC;QAEvC,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,mBAAmB,CAC/B,KAAwB,EACxB,OAAe,EACf,UAAuC;QAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG;YACb,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC;YACxC,UAAU;SACX,CAAC;QAEF,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAoB,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,iBAAiB,CAAC,KAAwB;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,CAAC;IAED;;;;;;;OAOG;IACK,mBAAmB,CAAC,KAAwB;QAClD,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,gBAAgB,CAAC,wBAAwB,CAAC;YACnD,KAAK,oBAAoB,CAAC,aAAa;gBACrC,OAAO,gBAAgB,CAAC,gCAAgC,CAAC;YAC3D;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CAAC,KAAwB,EAAE,OAAe;QAChE,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,KAAK,oBAAoB,CAAC,aAAa;gBACrC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;YACrC;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CACnB,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAQ;YAChB,KAAK;YACL,UAAU;YACV,KAAK;YACL,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;gBACtB,MAAM;YACR,KAAK,oBAAoB,CAAC,aAAa;gBACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;gBAC9B,MAAM;QACV,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,eAAe,CAC3B,KAAwB,EACxB,OAAe,EACf,UAAuC,EACvC,QAAgB,EAChB,eAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,OAAO,GAA0B;YACrC,cAAc;YACd,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,KAAK,KAAK,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACnF,CAAC;QAEF,MAAM,OAAO,GAAqB;YAChC,IAAI,EAAE,kBAAkB,CAAC,YAAY;YACrC,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,eAAe;SACxB,CAAC;QAEF,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,oBAAoB,CAAC,SAAS;gBACjC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM;YACR,KAAK,oBAAoB,CAAC,aAAa;gBACrC,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjE,MAAM;YACR;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;oBACnE,KAAK;oBACL,OAAO;oBACP,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;IACH,CAAC;CACF,CAAA;AAtzBY,+BAA+B;IAD3C,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;qCALL,aAAa;QACM,0BAA0B;QACH,yCAAyC;QAC/D,gBAAgB;QACR,+BAA+B;QACX,qCAAqC;GAVxI,+BAA+B,CAszB3C","sourcesContent":["import { inject, injectable } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport {\n  RepositoriesRegistryHandlerBackendService,\n  type BackendResourceRepository,\n} from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { ResourceConfiguration_Operation } from '@wildo-ai/saas-models';\nimport {\n  ResourcePrimaryScope,\n  NotificationBadgeOperation,\n  NotificationBadge,\n  NotificationBadgeDefinition,\n  NotificationBadgeSourceKind,\n  CoreResourceType,\n  CoreResourceOperation,\n  NotificationBadgeIdentifier,\n  buildNotificationBadgeReference,\n  parseNotificationBadgeReference,\n  type NotificationScope,\n  CoreWebSocketEvent,\n  WS_BadgeUpdatePayload,\n  type ResourceType,\n} from '@wildo-ai/saas-models';\nimport { WebSocketService, WebSocketMessage } from '~wildo-backend-lib/requests/service/websocket.service';\n\n/**\n * A parsed badge REFERENCE — one badge ROW, addressed as `<scope>:<scopeId>:<identifier>`.\n *\n * The FORMAT is not defined here. It lives once in `@wildo-ai/saas-models`\n * (`buildNotificationBadgeReference` / `parseNotificationBadgeReference`) because the browser badge\n * store parses the same string off the wire, and two hand-rolled `split(':')` implementations are\n * how a producer and a consumer come to disagree about what the parts mean.\n */\nexport interface BadgeReference {\n  scope: NotificationScope;\n  scopeId: string;\n  identifier: NotificationBadgeIdentifier;\n}\n\nexport interface BadgeUpdateResult {\n  badgeReference: string;\n  previousCount: number;\n  newCount: number;\n}\n\n/**\n * The derived-badge SOURCE count passes a fully explicit, self-scoped filter\n * (`{ ...authoredFilter, [scopeField]: scopeId }`), so ambient contextual\n * filtering is skipped — the count must be identical regardless of the execution\n * context driving the recompute. (The badge resource's OWN ops instead use a\n * dedicated badge-scoped EC — see `buildBadgeExecutionContext` — so their scope\n * FK is injected/filtered correctly rather than bypassed.)\n */\nconst EXPLICIT_SCOPE_REPO_OPTIONS = { excludeContextualFilter: true } as const;\n\n/**\n * How many times a RELATIVE badge write (increment / decrement) re-attempts its guarded statement\n * before giving up and reporting the count it can observe.\n *\n * Two is what the mechanism needs and three is the margin. A first pass misses only when the badge\n * row does not exist yet; the pass then materializes a ZERO row and the SECOND pass applies the\n * delta to it. The only other way a pass can miss is the decrement's two-statement floor (see\n * {@link NotificationBadgeBackendService.applyGuardedCountDelta}) losing a race in the window\n * between its two statements — that is a genuine retry, and one spare pass is generous for a\n * contention window measured in a single round trip.\n *\n * The loop terminates on its own budget rather than on a condition, because the exhaustion outcome\n * is deliberately NOT a throw: a badge is a decoration, and failing a domain mutation because a\n * counter could not be advanced would trade a cosmetic defect for a functional one.\n */\nconst RELATIVE_BADGE_WRITE_PASSES = 3;\n\n/**\n * NotificationBadgeBackendService\n *\n * Manages notification badge counts stored in the database.\n * Provides operations to increment, decrement, set, and reset badge counts.\n * Emits WebSocket events when badge counts change.\n */\n@injectable()\nexport class NotificationBadgeBackendService {\n\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositoriesRegistry: RepositoriesRegistryHandlerBackendService,\n    @inject(SAAS_SERVICE_TYPES.WebSocketService) private readonly webSocketService: WebSocketService,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: ResourcesRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n  ) {\n    this.logDebug = this.logger.debugByType('NotificationBadgeService');\n    this.logger.setDebugTypeLogging('NotificationBadgeService', false);\n  }\n\n  /**\n   * Build a badge-resource-scoped execution context for the badge's OWN\n   * repository operations (read/create/update on `userNotificationBadges` /\n   * `organizationNotificationBadges`).\n   *\n   * WHY this exists — the badge scope FK (`userId` / `organizationId`) is a\n   * parent-scope field that the framework AUTO-EXCLUDES from the create DTO\n   * (it is meant to be injected from the request's URL/scope context). A badge\n   * write driven by a system service (dispatcher recompute / connect-seed) has\n   * no such URL context, and reusing the TRIGGERING operation's execution\n   * context (e.g. a `todos` op, or the connect-seed's `APPLICATION.READ`) carries\n   * the WRONG scope — `context_filter` / `context_enrichment` fail closed, or the\n   * scope FK is simply never injected (`userId: Path 'userId' is required`).\n   *\n   * Building a dedicated internal EC for the badge resource, with ONLY the badge's\n   * own scope field in its context map, makes the standard pipeline correct:\n   * context enrichment injects the scope FK on create, and contextual filtering\n   * scopes reads by exactly that field. Mirrors the `FilesBackendService`\n   * internal-repository-context pattern.\n   */\n  private buildBadgeExecutionContext(scope: NotificationScope, scopeId: string): Promise<ExecutionContext<any>> {\n    const isUserScope = scope === ResourcePrimaryScope.USER_SELF;\n    const resourceType = isUserScope\n      ? CoreResourceType.USER_NOTIFICATION_BADGES\n      : CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES;\n    const scopeFieldIdentifier = isUserScope ? 'userId' : 'organizationId';\n    // The scope goes ONLY in the context map (enrichment injects it / contextual\n    // filtering scopes by it). It must NOT go in `initiatorIds`: an internal\n    // (`internally_initiated_request`) EC forbids identity fields there — only\n    // `applicationId` is allowed.\n    return this.executionContextCreator.createForInternalRepositoryOperation({\n      resourceType,\n      operationIdentifier: CoreResourceOperation.CREATE,\n      contextResourcesFieldIdentifier: new Map([[scopeFieldIdentifier, scopeId]]),\n    });\n  }\n\n  /**\n   * Build a badge reference string.\n   *\n   * Delegates to the shared builder rather than re-templating the format: the browser reduces this\n   * exact string to a badge KEY on arrival, so the producer and the consumer must be reading one\n   * definition of where the parts are.\n   */\n  public buildBadgeReference(scope: NotificationScope, scopeId: string, identifier: NotificationBadgeIdentifier): string {\n    return buildNotificationBadgeReference(scope, scopeId, identifier);\n  }\n\n  /**\n   * Parse a badge reference string.\n   *\n   * Validates that the embedded scope is a SUPPORTED badge scope (USER_SELF or\n   * ORGANIZATIONS). The polymorphism refactor dropped APPLICATION-scope badges\n   * (no canonical identifiers existed at that scope and no resource type backs\n   * it anymore) — so a reference like `application:appId:foo` is rejected here\n   * to fail fast at parse time rather than later during dispatch.\n   */\n  public parseBadgeReference(badgeReference: string): BadgeReference | null {\n    return parseNotificationBadgeReference(badgeReference);\n  }\n\n  /**\n   * Get badge count for a specific identifier and scope\n   */\n  public async getBadgeCount<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<number> {\n    try {\n      const badge = await this.findBadge(executionContext, scope, scopeId, identifier);\n      return badge?.count ?? 0;\n    } catch (error) {\n      this.logger.warn('Failed to get badge count', {\n        scope,\n        scopeId,\n        identifier,\n        ...projectCaughtErrorLogFields(error),\n      });\n      return 0;\n    }\n  }\n\n  /**\n   * Get all badges for a specific scope\n   */\n  public async getAllBadges<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string\n  ): Promise<Array<{ identifier: string; count: number }>> {\n    try {\n      const repository = this.resolveRepository(scope);\n      if (!repository) {\n        this.logger.warn('NotificationBadges repository not found', { scope });\n        return [];\n      }\n\n      const filter = this.buildScopeFilter(scope, scopeId);\n      const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n      const badges = await repository.list<NotificationBadge>(badgeExecutionContext, filter);\n\n      return badges.map(badge => ({\n        identifier: badge.identifier,\n        count: badge.count,\n      }));\n    } catch (error) {\n      this.logger.warn('Failed to get all badges', {\n        scope,\n        scopeId,\n        ...projectCaughtErrorLogFields(error),\n      });\n      return [];\n    }\n  }\n\n  /**\n   * Execute a badge operation (increment, decrement, set, reset).\n   *\n   * ## Two write shapes, because the vocabulary carries two kinds of change\n   *\n   * `SET` and `RESET` are ABSOLUTE: the value written does not depend on the value read, so a plain\n   * read-then-write is already correct — concurrent absolute writes are last-writer-wins, which is\n   * what \"set it to N\" means.\n   *\n   * `INCREMENT` and `DECREMENT` are RELATIVE, and that is where this method used to lose data. It\n   * read `count`, computed `count ± value` in JavaScript, and wrote the result back. Two operations\n   * committing concurrently both read the SAME previous value, so the second write overwrote the\n   * first and one increment vanished — with no error, no log, and a badge that is simply too low\n   * forever after (an EVENT_COUNTER badge is never re-derived; that is the whole distinction\n   * `NotificationBadgeSourceKind` draws, and it is why the drift is permanent here and self-healing\n   * on a DERIVED_QUERY badge).\n   *\n   * More checking cannot fix that — the two writers have nothing to collide on. So the relative arms\n   * now go through the adapter-neutral guarded mutation, where the STORE performs the arithmetic in\n   * one statement (`$inc` on MongoDB, `COALESCE(col, 0) + delta` on PostgreSQL) and the two writers\n   * collide on the row itself. See {@link applyRelativeCountChange}.\n   */\n  public async executeBadgeOperation<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    operation: NotificationBadgeOperation,\n    value: number = 1\n  ): Promise<BadgeUpdateResult> {\n    const resourceType = this.resolveResourceType(scope);\n    const repository = this.resolveRepository(scope);\n    if (!resourceType || !repository) {\n      throw this.errorBuilder.buildError(\n        'INTERNAL' as any,\n        executionContext,\n        {\n          customMessageReference: 'NOTIFICATION_BADGES_REPOSITORY_NOT_FOUND' as any,\n          context: { scope },\n        }\n      );\n    }\n\n    let previousCount: number;\n    let newCount: number;\n\n    switch (operation) {\n      case NotificationBadgeOperation.INCREMENT:\n      case NotificationBadgeOperation.DECREMENT: {\n        const delta = operation === NotificationBadgeOperation.INCREMENT ? value : -value;\n        ({ previousCount, newCount } = await this.applyRelativeCountChange(resourceType, scope, scopeId, identifier, delta));\n        break;\n      }\n      case NotificationBadgeOperation.SET:\n      case NotificationBadgeOperation.RESET: {\n        const absoluteCount = operation === NotificationBadgeOperation.SET ? Math.max(0, value) : 0;\n        ({ previousCount, newCount } = await this.writeAbsoluteCount(repository, scope, scopeId, identifier, absoluteCount));\n        break;\n      }\n      default: {\n        /**\n         * The vocabulary is closed, but the dispatcher reaches this method through\n         * `badgeOp.operation as NotificationBadgeOperation` — an unchecked cast over an authored\n         * string — so an unknown member can arrive at runtime.\n         *\n         * It now reads the count and writes NOTHING. The previous behaviour wrote `previousCount`\n         * back over itself, which on an absent badge MATERIALIZED a zero row for an operation\n         * nobody could name: a write performed because the switch had no other arm to fall into.\n         * The event is still emitted below, so a client that asked for an unknown operation is\n         * told the current value rather than left silent.\n         */\n        previousCount = await this.getBadgeCount(executionContext, scope, scopeId, identifier);\n        newCount = previousCount;\n        this.logger.warn('Unknown notification badge operation — reporting the current count without writing', {\n          scope,\n          scopeId,\n          identifier,\n          operation: String(operation),\n        });\n        break;\n      }\n    }\n\n    const badgeReference = this.buildBadgeReference(scope, scopeId, identifier);\n\n    // Emit WebSocket event\n    await this.emitBadgeUpdate(scope, scopeId, identifier, newCount, executionContext.initiatorIds?.userId);\n\n    this.logDebug('Badge operation executed', {\n      badgeReference,\n      operation,\n      previousCount,\n      newCount,\n    });\n\n    return {\n      badgeReference,\n      previousCount,\n      newCount,\n    };\n  }\n\n  /**\n   * Apply a RELATIVE change (`+value` / `-value`) to a badge counter without ever reading it into\n   * JavaScript first.\n   *\n   * ## The shape, and why it is a loop rather than a straight line\n   *\n   * A guarded mutation only mutates a row that ALREADY EXISTS — it returns `null` when its filter\n   * matched nothing, and it cannot insert. A badge row, meanwhile, is materialized lazily on its\n   * first write. So the write is \"apply the delta; if there was no row, materialize one at ZERO and\n   * apply the delta to that\".\n   *\n   * **Materializing at ZERO rather than at the target is the load-bearing detail.** Creating the row\n   * already carrying `value` would mean two racing first-increments each insert a row holding `1`,\n   * and one of the two increments is lost exactly as before — the defect would simply have moved\n   * from the update to the insert. Creating at zero and then letting BOTH callers apply their own\n   * delta through the atomic statement keeps every increment: the store matches one row for both,\n   * and it ends at 2.\n   *\n   * ## The residual, stated rather than hidden\n   *\n   * Two racing materializations can still leave a DUPLICATE badge row, because nothing in the schema\n   * makes `(scopeId, identifier)` unique — `identifier` carries `.isSummaryField()` and no\n   * `.isUnique()`, so the store has no constraint to refuse the second insert with. That duplicate\n   * hazard is older than this method and is not what this change is about: it costs a stray row,\n   * whereas the read-modify-write cost a permanently wrong number. Closing it means a unique index,\n   * which is an engine resource change owing a migration in every PostgreSQL-backed surface\n   * (`.claude/rules/engine-resource-changes-owe-migrations.md`) and belongs with the badge-identity\n   * work, not here.\n   *\n   * @returns the count before and after, as observed from the row the store returned.\n   */\n  private async applyRelativeCountChange(\n    resourceType: ResourceType,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    delta: number\n  ): Promise<{ previousCount: number; newCount: number }> {\n    /**\n     * The identity of the ONE row this write may touch.\n     *\n     * Tenant scoping is preserved BY CONSTRUCTION rather than by the execution context: the guarded\n     * mutation is an infrastructure-tier door whose contract puts scope-aware filter construction on\n     * the caller, and the scope key (`userId` / `organizationId`) is right here in the filter, so\n     * the statement cannot reach another tenant's badge. That is the same posture the promotion\n     * redemption counter and the credit pool take.\n     */\n    const identityFilter = { ...this.buildScopeFilter(scope, scopeId), identifier };\n\n    for (let pass = 0; pass < RELATIVE_BADGE_WRITE_PASSES; pass += 1) {\n      const applied = await this.applyGuardedCountDelta(resourceType, identityFilter, delta);\n      if (applied) {\n        return applied;\n      }\n\n      /**\n       * Nothing matched. There are exactly two reasons, and they need opposite responses, so ask\n       * which one it is instead of assuming.\n       *\n       * - The badge row does not exist yet — materialize it and let the next pass apply the delta.\n       * - A DECREMENT lost the race between its two floor statements (see\n       *   {@link applyGuardedCountDelta}) — the row exists, and materializing would duplicate it.\n       *   Retry the pair instead.\n       *\n       * The read costs a round trip on a path taken once per badge lifetime (plus a genuinely rare\n       * contention window), which is why it is affordable here and would not be on the hot arm.\n       */\n      const existing = await this.findBadgeByIdentity(scope, scopeId, identifier);\n      if (!existing) {\n        await this.materializeZeroBadge(scope, scopeId, identifier);\n      }\n    }\n\n    /**\n     * Every pass lost its race. Report what the row currently holds and write nothing further: a\n     * badge is a decoration, and the caller is a domain mutation that has already committed, so\n     * throwing here would turn a cosmetic loss into a failed user action. The warning is what makes\n     * the loss visible — silence is what let the original read-modify-write defect live.\n     */\n    const current = await this.findBadgeByIdentity(scope, scopeId, identifier);\n    const currentCount = current?.count ?? 0;\n    this.logger.warn('Notification badge counter change was dropped after exhausting its atomic write passes', {\n      scope,\n      scopeId,\n      identifier,\n      delta,\n      currentCount,\n      passes: RELATIVE_BADGE_WRITE_PASSES,\n    });\n    return { previousCount: currentCount, newCount: currentCount };\n  }\n\n  /**\n   * ONE attempt at the atomic delta. Returns the before/after counts, or `null` when no row matched.\n   *\n   * ## The decrement floor lives in the FILTER, not in `Math.max`\n   *\n   * `Math.max(0, previousCount - value)` computes the floor from a value read moments earlier, which\n   * is the very read this change exists to remove. The floor is therefore expressed as a GUARD the\n   * store evaluates in the same statement as the write — `count: { $gte: magnitude }` — which is the\n   * idiom the promotion redemption counter uses for its `maxRedemptions` ceiling.\n   *\n   * That guard alone would REFUSE a decrement that cannot be taken in full, where the previous\n   * behaviour CLAMPED it to zero. Preserving the clamp needs a second statement, because neither\n   * adapter's neutral vocabulary can express \"subtract, floored at zero\" in one (there is no `$max`\n   * in `RepositoryGuardedMutation`, deliberately — an operator no adapter pair can honour identically\n   * does not get a name there). So a below-floor row is set to zero by a SECOND guarded statement,\n   * itself conditioned on the row still being below the floor. Each statement is atomic, and the\n   * pair is safe in every interleaving:\n   *\n   * - first matched → the count fell by exactly `magnitude`;\n   * - first missed, second matched → the count was below the floor at the moment of the write and is\n   *   now zero, which is what `Math.max(0, count - value)` meant for that count;\n   * - both missed → either no row, or a concurrent INCREMENT crossed the floor between the two\n   *   statements. The caller distinguishes those and retries rather than concluding.\n   *\n   * ## `updatedAt` is deliberately absent from the descriptor\n   *\n   * Both adapters bump it themselves — mongoose's `timestamps` hook on one, an explicit\n   * planned-column assignment inside `prepareGuardedUpdate` on the other. Passing it here would be a\n   * second authority for the same field, and the two would disagree the day either arm changes.\n   */\n  private async applyGuardedCountDelta(\n    resourceType: ResourceType,\n    identityFilter: Record<string, unknown>,\n    delta: number\n  ): Promise<{ previousCount: number; newCount: number } | null> {\n    if (delta >= 0) {\n      const incremented = await this.repositoriesRegistry.atomicGuardedMutation<NotificationBadge>(\n        resourceType,\n        identityFilter,\n        { increment: { count: delta } },\n      );\n      if (!incremented) return null;\n      return { previousCount: incremented.count - delta, newCount: incremented.count };\n    }\n\n    const magnitude = -delta;\n\n    const decremented = await this.repositoriesRegistry.atomicGuardedMutation<NotificationBadge>(\n      resourceType,\n      { ...identityFilter, count: { $gte: magnitude } },\n      { increment: { count: delta } },\n    );\n    if (decremented) {\n      return { previousCount: decremented.count + magnitude, newCount: decremented.count };\n    }\n\n    const clamped = await this.repositoriesRegistry.atomicGuardedMutation<NotificationBadge>(\n      resourceType,\n      { ...identityFilter, count: { $lt: magnitude } },\n      { set: { count: 0 } },\n    );\n    if (!clamped) return null;\n    /**\n     * `previousCount` is reported as the post-write zero rather than as an estimate. The row's\n     * pre-write count was somewhere in `[0, magnitude)` and the statement that overwrote it cannot\n     * report the value it replaced — a guarded mutation returns the row AFTER the write on both\n     * adapters. Nothing reads this field (it exists on `BadgeUpdateResult` and is consumed only by\n     * this service's own debug line), and an invented number would be worse than a floor.\n     */\n    return { previousCount: clamped.count, newCount: clamped.count };\n  }\n\n  /**\n   * Insert the badge row at ZERO so a subsequent atomic delta has something to mutate.\n   *\n   * Goes through the SERVICE tier (`repository.create` with the badge-scoped execution context)\n   * rather than a raw insert, so the row is schema-validated and gets its scope FK injected by\n   * context enrichment at birth — see {@link buildBadgeExecutionContext} for why the triggering\n   * operation's own context cannot serve here.\n   */\n  private async materializeZeroBadge(\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<void> {\n    const repository = this.resolveRepository(scope);\n    if (!repository) return;\n    const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n    await repository.create<NotificationBadge>(badgeExecutionContext, this.buildNewBadge(scope, scopeId, identifier, 0));\n  }\n\n  /**\n   * Write an ABSOLUTE count (`SET` / `RESET`).\n   *\n   * The read here is NOT a read-modify-write: the value written is fixed by the caller, so a\n   * concurrent absolute write can only replace it wholesale, which is what an absolute write means.\n   * The read decides update-versus-insert and supplies the reported `previousCount`.\n   */\n  private async writeAbsoluteCount(\n    repository: BackendResourceRepository,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    absoluteCount: number\n  ): Promise<{ previousCount: number; newCount: number }> {\n    const badge = await this.findBadgeByIdentity(scope, scopeId, identifier);\n    const previousCount = badge?.count ?? 0;\n\n    // Update or create badge through a badge-resource-scoped EC (see\n    // buildBadgeExecutionContext) so context enrichment injects the scope FK\n    // (userId / organizationId) that the create DTO auto-excludes.\n    const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n    if (badge) {\n      await repository.update<NotificationBadge>(badgeExecutionContext, badge._id, {\n        count: absoluteCount,\n        updatedAt: new Date(),\n      } as any);\n    } else {\n      await repository.create<NotificationBadge>(badgeExecutionContext, this.buildNewBadge(scope, scopeId, identifier, absoluteCount));\n    }\n\n    return { previousCount, newCount: absoluteCount };\n  }\n\n  /**\n   * Increment a badge count\n   */\n  public async increment<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    amount: number = 1\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.INCREMENT,\n      amount\n    );\n  }\n\n  /**\n   * Decrement a badge count\n   */\n  public async decrement<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    amount: number = 1\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.DECREMENT,\n      amount\n    );\n  }\n\n  /**\n   * Set a badge count to a specific value\n   */\n  public async set<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    value: number\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.SET,\n      value\n    );\n  }\n\n  /**\n   * Reset a badge count to zero\n   */\n  public async reset<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<BadgeUpdateResult> {\n    return this.executeBadgeOperation(\n      executionContext,\n      scope,\n      scopeId,\n      identifier,\n      NotificationBadgeOperation.RESET\n    );\n  }\n\n  /**\n   * Recompute a DERIVED_QUERY badge and persist the result (R5).\n   *\n   * The count is RE-DERIVED from the source resource collection every time\n   * (`count(resourceType where {...filter, [scopeField]: scopeId})`) and then\n   * `SET` onto the badge — it is never incrementally tracked, so it CANNOT\n   * drift (bulk mutations, deletes, reopen, out-of-band edits all reconcile on\n   * the next recompute). Called by the dispatcher when the source resource is\n   * mutated. No-op for non-DERIVED definitions.\n   */\n  public async recomputeDerivedBadge<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    definition: NotificationBadgeDefinition,\n    scopeId: string\n  ): Promise<void> {\n    if (definition.source.kind !== NotificationBadgeSourceKind.DERIVED_QUERY) {\n      return;\n    }\n\n    const source = definition.source;\n    const sourceRepository = this.repositoriesRegistry.getRepository(source.resourceType);\n    if (!sourceRepository) {\n      this.logger.warn('Derived badge source repository not found', {\n        identifier: definition.identifier,\n        resourceType: source.resourceType,\n      });\n      return;\n    }\n\n    // Bind the scope onto the authored filter, then count the source collection.\n    // The filter is FULLY self-scoped (`[scopeField]: scopeId` pins it to the\n    // badge's own scope), so the count must be identical regardless of which\n    // execution context drives the recompute. Build a dedicated internal EC for the\n    // SOURCE resource's own count rather than reusing the caller's EC — the mutation\n    // path passes the triggering op's EC (works), but the connect-seed passes an\n    // APPLICATION.READ EC, and counting a foreign resource off that mismatched EC\n    // threw \"Cannot read properties of undefined (reading 'operations')\". With the\n    // source-scoped EC + explicit filter, contextual filtering is skipped.\n    let sourceExecutionContext: ExecutionContext<any> = executionContext;\n    try {\n      sourceExecutionContext = await this.executionContextCreator.createForInternalRepositoryOperation({\n        resourceType: source.resourceType,\n        operationIdentifier: CoreResourceOperation.COUNT,\n      });\n    } catch {\n      // Fall back to the caller's EC if the source resource has no resolvable\n      // internal count operation (the explicit filter still scopes the count).\n    }\n    const filter = { ...source.filter, [source.scopeField]: scopeId };\n    const { count } = await sourceRepository.count(sourceExecutionContext, filter, EXPLICIT_SCOPE_REPO_OPTIONS);\n\n    // SET (not increment) — the derived count is authoritative.\n    await this.set(executionContext, definition.scope, scopeId, definition.identifier, count);\n  }\n\n  /**\n   * Seed every registered badge for a freshly-connected client (R6a —\n   * compute-on-connect). For each definition in the connecting scope: DERIVED\n   * badges are recomputed (fresh count, emits), EVENT badges have their stored\n   * count re-emitted so the client paints the current value on first render.\n   *\n   * `executionContext` MUST be the connecting user's own authenticated context\n   * (built by the WS layer from the validated socket auth) and `initiatorIds`\n   * MUST be the server-validated socket identity — never client handshake data —\n   * so the scopeId that drives every count is pinned to the caller's own scope\n   * (no cross-tenant read). Per-badge failures are logged, never abort siblings.\n   */\n  public async syncBadgesForConnection<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    initiatorIds: { userId?: string | null; organizationId?: string | null }\n  ): Promise<void> {\n    const definitions = this.resourcesRegistry.getResourcesRegistry().notificationBadgeDefinitions ?? [];\n    if (definitions.length === 0) {\n      return;\n    }\n\n    for (const definition of definitions) {\n      const scopeId =\n        definition.scope === ResourcePrimaryScope.USER_SELF\n          ? initiatorIds.userId\n          : definition.scope === ResourcePrimaryScope.ORGANIZATIONS\n            ? initiatorIds.organizationId\n            : null;\n      if (!scopeId) {\n        continue;\n      }\n\n      try {\n        if (definition.source.kind === NotificationBadgeSourceKind.DERIVED_QUERY) {\n          await this.recomputeDerivedBadge(executionContext, definition, scopeId);\n        } else {\n          // EVENT_COUNTER — re-emit the stored value so the client seeds on connect.\n          const count = await this.getBadgeCount(executionContext, definition.scope, scopeId, definition.identifier);\n          await this.emitBadgeUpdate(definition.scope, scopeId, definition.identifier, count, initiatorIds.userId ?? undefined);\n        }\n      } catch (error) {\n        this.logger.warn('Failed to seed badge on connection', {\n          identifier: definition.identifier,\n          scope: definition.scope,\n          ...projectCaughtErrorLogFields(error),\n        });\n      }\n    }\n  }\n\n  // ================================\n  // Private Helper Methods\n  // ================================\n\n  /**\n   * Find a badge by scope, scopeId, and identifier.\n   *\n   * `executionContext` is the CALLER's context and is deliberately not used for the read: a badge\n   * read runs on its own badge-resource-scoped context, exactly as a badge write does, because the\n   * triggering operation's context carries the wrong scope (see {@link buildBadgeExecutionContext}).\n   * The parameter is kept so the private read reads like every other method on this service.\n   */\n  private findBadge<TResourceConfigOperation extends ResourceConfiguration_Operation<any, any, any>>(\n    executionContext: ExecutionContext<TResourceConfigOperation>,\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<NotificationBadge | null> {\n    return this.findBadgeByIdentity(scope, scopeId, identifier);\n  }\n\n  /**\n   * The badge read itself, addressed only by identity.\n   *\n   * Split out of {@link findBadge} because the atomic write path has no caller execution context to\n   * pass — it is reconciling its own guarded statements, not serving a request — and inventing one\n   * to satisfy a parameter the read never consults would be ceremony.\n   */\n  private async findBadgeByIdentity(\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier\n  ): Promise<NotificationBadge | null> {\n    const repository = this.resolveRepository(scope);\n    if (!repository) {\n      return null;\n    }\n\n    const filter = {\n      ...this.buildScopeFilter(scope, scopeId),\n      identifier,\n    };\n\n    const badgeExecutionContext = await this.buildBadgeExecutionContext(scope, scopeId);\n    const badges = await repository.list<NotificationBadge>(badgeExecutionContext, filter);\n    return badges.length > 0 ? badges[0] : null;\n  }\n\n  /**\n   * Resolve the repository for a given badge scope.\n   *\n   * Polymorphism dispatch:\n   *   USER_SELF      → `USER_NOTIFICATION_BADGES` repository\n   *   ORGANIZATIONS  → `ORGANIZATION_NOTIFICATION_BADGES` repository\n   *   APPLICATION    → unsupported (variant dropped); returns `undefined` so\n   *                    callers can fail-fast with their own error context.\n   *\n   * Returns `undefined` (not throws) so the caller controls error semantics —\n   * `executeBadgeOperation` throws an explicit error, while `findBadge` /\n   * `getAllBadges` swallow and return empty results to keep the read path\n   * resilient (per existing behavior).\n   */\n  private resolveRepository(scope: NotificationScope): BackendResourceRepository | undefined {\n    const resourceType = this.resolveResourceType(scope);\n    return resourceType ? this.repositoriesRegistry.getRepository(resourceType) : undefined;\n  }\n\n  /**\n   * Resolve the RESOURCE TYPE backing a badge scope — the same polymorphism dispatch\n   * {@link resolveRepository} performs, named separately because the atomic write path addresses the\n   * registry by resource type rather than by repository handle.\n   *\n   * One switch, two consumers: a second copy of this mapping is how a future third scope reaches one\n   * of them and not the other.\n   */\n  private resolveResourceType(scope: NotificationScope): ResourceType | undefined {\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        return CoreResourceType.USER_NOTIFICATION_BADGES;\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        return CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES;\n      default:\n        return undefined;\n    }\n  }\n\n  /**\n   * Build filter for scope-specific queries.\n   *\n   * Each variant has its own collection, so the scope discriminator field is\n   * implicit — we only need to filter by the scope-id field. The scope key is\n   * still set on the payload (`buildNewBadge`) because the schema requires it\n   * as the discriminated-union tag.\n   */\n  private buildScopeFilter(scope: NotificationScope, scopeId: string): Record<string, any> {\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        return { userId: scopeId };\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        return { organizationId: scopeId };\n      default:\n        return {};\n    }\n  }\n\n  /**\n   * Build a new badge document.\n   *\n   * `scope` is required by the schema (it is the discriminated-union tag), so\n   * we still set it on the payload even though each variant lives in a\n   * dedicated collection.\n   */\n  private buildNewBadge(\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    count: number\n  ): Partial<NotificationBadge> {\n    const now = new Date();\n    const base: any = {\n      scope,\n      identifier,\n      count,\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        base.userId = scopeId;\n        break;\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        base.organizationId = scopeId;\n        break;\n    }\n\n    return base;\n  }\n\n  /**\n   * Emit WebSocket event for badge update.\n   *\n   * Routing:\n   *   USER_SELF      → `sendToUser(scopeId, …)`\n   *   ORGANIZATIONS  → `sendToOrganization(scopeId, …)`\n   *\n   * The APPLICATION arm is gone (the variant was dropped). If a future need\n   * for global broadcast badges arises, reintroduce it as its own scope and\n   * resource type rather than re-overloading APPLICATION.\n   */\n  private async emitBadgeUpdate(\n    scope: NotificationScope,\n    scopeId: string,\n    identifier: NotificationBadgeIdentifier,\n    newCount: number,\n    initiatorUserId?: string\n  ): Promise<void> {\n    const badgeReference = this.buildBadgeReference(scope, scopeId, identifier);\n\n    const payload: WS_BadgeUpdatePayload = {\n      badgeReference,\n      badgeCount: newCount,\n      organizationId: scope === ResourcePrimaryScope.ORGANIZATIONS ? scopeId : undefined,\n    };\n\n    const message: WebSocketMessage = {\n      type: CoreWebSocketEvent.BADGE_UPDATE,\n      payload,\n      timestamp: new Date(),\n      userId: initiatorUserId,\n    };\n\n    switch (scope) {\n      case ResourcePrimaryScope.USER_SELF:\n        await this.webSocketService.sendToUser(scopeId, message);\n        break;\n      case ResourcePrimaryScope.ORGANIZATIONS:\n        await this.webSocketService.sendToOrganization(scopeId, message);\n        break;\n      default:\n        this.logger.warn('Skipping badge WS emission for unsupported scope', {\n          scope,\n          scopeId,\n          identifier,\n        });\n        break;\n    }\n  }\n}\n"]}