@wildo-ai/saas-backend-lib 1.1.3 → 1.1.4

package/dist/esm/base-classes/services/repositories/http-api/http-api-transport.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-api-transport.backend.js","sourceRoot":"","sources":["../../../../../../../src/base-classes/services/repositories/http-api/http-api-transport.backend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;;;GAIG;AACH,MAAM,CAAN,IAAY,2BAMX;AAND,WAAY,2BAA2B;IACrC,kDAAmB,CAAA;IACnB,kDAAmB,CAAA;IACnB,4DAA6B,CAAA;IAC7B,4DAA6B,CAAA;IAC7B,8EAA+C,CAAA;AACjD,CAAC,EANW,2BAA2B,KAA3B,2BAA2B,QAMtC;AAuBD;;;;GAIG;AACH,MAAM,CAAN,IAAY,4BASX;AATD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,mEAAmC,CAAA;IACnC,oGAAoG;IACpG,uDAAuB,CAAA;IACvB,0DAA0D;IAC1D,6CAAa,CAAA;IACb,oDAAoD;IACpD,iDAAiB,CAAA;AACnB,CAAC,EATW,4BAA4B,KAA5B,4BAA4B,QASvC;AAUD,wCAAwC;AACxC,MAAM,CAAN,IAAY,gCAOX;AAPD,WAAY,gCAAgC;IAC1C,wFAAwF;IACxF,iDAAa,CAAA;IACb,4EAA4E;IAC5E,iDAAa,CAAA;IACb,4EAA4E;IAC5E,iDAAa,CAAA;AACf,CAAC,EAPW,gCAAgC,KAAhC,gCAAgC,QAO3C;AAsCD;;;;GAIG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAG5B;IAFlB,YACE,OAAe,EACC,MAOf;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QATC,WAAM,GAAN,MAAM,CAOrB;QAGD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAGC;IAFZ,UAAU,GAAa,EAAE,CAAC;IAE3C,YAA6B,oBAA6B;QAA7B,yBAAoB,GAApB,oBAAoB,CAAS;IAAG,CAAC;IAE9D,mGAAmG;IACnG,UAAU,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;QACnC,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;YACvE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,oBAAoB;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAsC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,4BAA4B,CAAC,IAAI;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAClF,KAAK,4BAA4B,CAAC,eAAe;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;QAC7I,KAAK,4BAA4B,CAAC,SAAS;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,4BAA4B,CAAC,IAAI;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAChE,KAAK,4BAA4B,CAAC,MAAM;YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAChE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,IAAI,CAAC;YACpC,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgC,EAChC,SAAkE,EAClE,SAA2B,EAC3B,UAA8B;IAE9B,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,qBAAqB,CAC7B,sCAAsC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EACrE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,2BAA2B,CAAC,qBAAqB,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;IAChD,IAAI,SAA4C,CAAC;IAEjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,uFAAuF;gBACvF,oFAAoF;gBACpF,OAAO,EAAE,MAAM,CAAC,WAAW,KAAK,SAAS;oBACvC,CAAC,CAAC,OAAO,CAAC,OAAO;oBACjB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBAC9D,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEvC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,IAAI,qBAAqB,CACrC,4BAA4B,QAAQ,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EAClF,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,CAAC,YAAY,EAAE,CACzI,CAAC;gBACF,IAAI,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACxF,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,gCAAgC,CAAC,IAAI,CAAC;YACnF,IAAI,QAAQ,KAAK,gCAAgC,CAAC,IAAI,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,QAAQ,KAAK,gCAAgC,CAAC,IAAI,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACtE,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,qFAAqF;gBACrF,MAAM,IAAI,qBAAqB,CAC7B,4BAA4B,QAAQ,CAAC,MAAM,6BAA6B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EACvG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,CAAC,YAAY,EAAE,CACzI,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B,CAAC,YAAY,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACnK,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;YACtE,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAC9C,OAAO;gBACL,CAAC,CAAC,iCAAiC,SAAS,CAAC,SAAS,OAAO,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE;gBAC5F,CAAC,CAAC,gCAAgC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9H,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,EAAE,CAC3J,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC/C,SAAS,GAAG,cAAc,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,cAAc,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,8FAA8F;IAC9F,0FAA0F;IAC1F,MAAM,SAAS,IAAI,IAAI,qBAAqB,CAC1C,4BAA4B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EAC3D,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,2BAA2B,CAAC,OAAO,EAAE,CAC/G,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC","sourcesContent":["/**\n * HTTP transport for the HTTP-API resource repository — the ONE place a remote call leaves the\n * process, carrying the binding's declared remote-call semantics (ETL decision D10 / R15):\n * per-call timeout, bounded retry for idempotent read-family calls only, and an optional local\n * rate budget. Engine-independent by design (no DI, no ErrorBuilder): the adapter maps\n * {@link HttpApiTransportError} into its ordinary error projection.\n */\n\nimport type { API_HttpMethod } from '@wildo-ai/external-connectors-models';\nimport type { HttpApiRemoteCallSemantics } from '@wildo-ai/saas-models/external-data';\n\n/**\n * How a transport attempt failed — each member names a DIFFERENT remedy: TIMEOUT/NETWORK are\n * environmental (retryable), REMOTE_ERROR carries the target's own final answer, INVALID_JSON is\n * a contract breach at the target, RATE_BUDGET_EXHAUSTED is the binding's own local ceiling.\n */\nexport enum HttpApiTransportFailureKind {\n  TIMEOUT = 'TIMEOUT',\n  NETWORK = 'NETWORK',\n  REMOTE_ERROR = 'REMOTE_ERROR',\n  INVALID_JSON = 'INVALID_JSON',\n  RATE_BUDGET_EXHAUSTED = 'RATE_BUDGET_EXHAUSTED',\n}\n\n/**\n * Minimal fetch shape — injectable so unit tests run without a network.\n *\n * `body` widened beyond `string` for S3a (#331): a hand-authored provider operation may upload a\n * file (`FormData`, so the platform picks the multipart boundary — a transport that wrote its own\n * `Content-Type` would produce a boundary the body does not use) or send raw bytes.\n */\nexport type HttpApiFetchLike = (\n  url: string,\n  init: {\n    method: string;\n    headers: Record<string, string>;\n    body?: string | FormData | Uint8Array;\n    signal?: AbortSignal;\n  },\n) => Promise<{\n  status: number;\n  ok: boolean;\n  text(): Promise<string>;\n}>;\n\n/**\n * How a request body is encoded on the wire. Slice 1 needed JSON alone, because every ETL call is\n * a read; a hand-authored WRITE reaches vendors that take form bodies and file uploads, so the\n * encoding is carried on the request rather than inferred from the method.\n */\nexport enum HttpApiTransportBodyEncoding {\n  JSON = 'json',\n  FORM_URLENCODED = 'form-urlencoded',\n  /** `FormData`; the transport sends NO `Content-Type`, so the platform sets it with its boundary. */\n  MULTIPART = 'multipart',\n  /** A raw text body under a caller-declared media type. */\n  TEXT = 'text',\n  /** Raw bytes under a caller-declared media type. */\n  BINARY = 'binary',\n}\n\n/** The request body, discriminated so each encoding carries exactly what it needs. */\nexport type HttpApiTransportBody =\n  | { encoding: HttpApiTransportBodyEncoding.JSON; value: unknown }\n  | { encoding: HttpApiTransportBodyEncoding.FORM_URLENCODED; value: Readonly<Record<string, string>> }\n  | { encoding: HttpApiTransportBodyEncoding.MULTIPART; value: FormData }\n  | { encoding: HttpApiTransportBodyEncoding.TEXT; value: string; contentType: string }\n  | { encoding: HttpApiTransportBodyEncoding.BINARY; value: Uint8Array; contentType: string };\n\n/** How the RESPONSE body is decoded. */\nexport enum HttpApiTransportResponseDecoding {\n  /** Parse as JSON; a 2xx with an unparsable body is a contract failure at the target. */\n  JSON = 'json',\n  /** Keep the raw text (a CSV export, an XML document); nothing is parsed. */\n  TEXT = 'text',\n  /** Read nothing — for a write whose body carries no information (a 204). */\n  NONE = 'none',\n}\n\nexport interface HttpApiTransportRequest {\n  /**\n   * The transport is deliberately method-agnostic plumbing; WHICH methods a caller may compile is\n   * governed one layer up (the read compilers speak GET/POST, the stance-6b erasure door speaks\n   * DELETE, a provider operation speaks whatever it declares). The vocabulary is\n   * `API_HttpMethod` — the one named HTTP-method source this repository already has — rather than\n   * a third list beside the two read/erasure ones.\n   */\n  method: `${API_HttpMethod}`;\n  url: string;\n  headers: Record<string, string>;\n  body?: HttpApiTransportBody;\n  /** Absent = {@link HttpApiTransportResponseDecoding.JSON}, which is what every caller did before S3a. */\n  responseDecoding?: HttpApiTransportResponseDecoding;\n  /**\n   * Whether re-sending this exact request is safe. REQUIRED, and deliberately not defaulted from\n   * the method.\n   *\n   * Before S3a every call through here was a read or a delete-by-key, so retrying a timeout was\n   * always right and the policy could stay implicit. The moment a hand-authored PUT/PATCH/POST\n   * write arrives, an implicit retry duplicates it — and a default derived from the method would\n   * be wrong in BOTH directions: it would stop retrying the POST-shaped reads the ETL depends on\n   * (JSON-RPC, search endpoints), and it would happily retry a POST that charges a card. So each\n   * caller answers, and the compiler makes every framing site answer.\n   */\n  retrySafe: boolean;\n}\n\nexport interface HttpApiTransportResponse {\n  status: number;\n  /** Parsed JSON body; `undefined` for an empty body or a non-JSON decoding. */\n  json: unknown;\n  /** Raw body text, present for {@link HttpApiTransportResponseDecoding.TEXT}. */\n  text?: string;\n}\n\n/**\n * Every transport failure carries WHAT was attempted and HOW OFTEN, so the adapter's refusal\n * names the remote reality instead of a generic network error. Never carries the request\n * headers (they hold credentials).\n */\nexport class HttpApiTransportError extends Error {\n  constructor(\n    message: string,\n    public readonly detail: {\n      readonly url: string;\n      readonly method: string;\n      /** HTTP status of the LAST attempt; undefined when no response was received. */\n      readonly status?: number;\n      readonly attempts: number;\n      readonly kind: HttpApiTransportFailureKind;\n    },\n  ) {\n    super(message);\n    this.name = 'HttpApiTransportError';\n  }\n}\n\nconst RETRYABLE_STATUS = new Set([429, 502, 503, 504]);\n\n/**\n * A per-binding local rate budget (`maxRequestsPerMinute`) — a sliding-window counter, not a\n * fairness scheduler. When the window is full the call REFUSES immediately rather than queueing:\n * queueing inside a request lifecycle turns a rate problem into a latency problem the caller\n * cannot see (scope-down paper: refusal is the honest failure mode).\n */\nexport class HttpApiRateBudget {\n  private readonly timestamps: number[] = [];\n\n  constructor(private readonly maxRequestsPerMinute?: number) {}\n\n  /** Returns true when the call may proceed (and records it); false when the budget is exhausted. */\n  tryConsume(nowMs: number = Date.now()): boolean {\n    if (this.maxRequestsPerMinute === undefined) return true;\n    const windowStart = nowMs - 60_000;\n    while (this.timestamps.length > 0 && this.timestamps[0] <= windowStart) {\n      this.timestamps.shift();\n    }\n    if (this.timestamps.length >= this.maxRequestsPerMinute) return false;\n    this.timestamps.push(nowMs);\n    return true;\n  }\n}\n\n/**\n * Frame one request body: the wire bytes and the `Content-Type` that describes them.\n *\n * MULTIPART deliberately contributes NO header — `FormData` carries a boundary the platform\n * generates while serializing, and a `Content-Type` written here would name a different one, so\n * the target would parse zero parts from a body that looks well formed.\n */\nfunction frameBody(body: HttpApiTransportBody | undefined): { payload?: string | FormData | Uint8Array; contentType?: string } {\n  if (body === undefined) return {};\n  switch (body.encoding) {\n    case HttpApiTransportBodyEncoding.JSON:\n      return { payload: JSON.stringify(body.value), contentType: 'application/json' };\n    case HttpApiTransportBodyEncoding.FORM_URLENCODED:\n      return { payload: new URLSearchParams(body.value as Record<string, string>).toString(), contentType: 'application/x-www-form-urlencoded' };\n    case HttpApiTransportBodyEncoding.MULTIPART:\n      return { payload: body.value };\n    case HttpApiTransportBodyEncoding.TEXT:\n      return { payload: body.value, contentType: body.contentType };\n    case HttpApiTransportBodyEncoding.BINARY:\n      return { payload: body.value, contentType: body.contentType };\n    default: {\n      const exhaustiveCheck: never = body;\n      return exhaustiveCheck;\n    }\n  }\n}\n\n/**\n * Execute one remote call under the caller's semantics.\n *\n * Retry applies to a timeout, a network error, or a retryable status (429/502/503/504) — and ONLY\n * when the request declares itself `retrySafe`. Any other non-2xx status is a terminal remote\n * answer and is thrown on the first attempt: retrying a 400/401/403/404 re-asks a question whose\n * answer is final.\n *\n * The `retrySafe` gate arrived with S3a (#331). Every call before it was a read or a\n * delete-by-key, so the policy could be \"retry every transient\" and be right; a hand-authored\n * write makes that policy a duplicate-submission engine. Note a 429 is gated too, and that is\n * deliberate rather than an oversight: a 429 means the vendor did not act, but a TIMEOUT on the\n * same request means we do not know whether it acted, and one gate that is honest about both\n * beats two that invite the reader to work out which case they are in.\n */\nexport async function executeHttpApiTransportCall(\n  request: HttpApiTransportRequest,\n  semantics: Pick<HttpApiRemoteCallSemantics, 'timeoutMs' | 'retry'>,\n  fetchImpl: HttpApiFetchLike,\n  rateBudget?: HttpApiRateBudget,\n): Promise<HttpApiTransportResponse> {\n  if (rateBudget && !rateBudget.tryConsume()) {\n    throw new HttpApiTransportError(\n      `HTTP-API rate budget exhausted for ${request.method} ${request.url}`,\n      { url: request.url, method: request.method, attempts: 0, kind: HttpApiTransportFailureKind.RATE_BUDGET_EXHAUSTED },\n    );\n  }\n\n  const maxAttempts = semantics.retry.maxAttempts;\n  let lastError: HttpApiTransportError | undefined;\n\n  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n    if (attempt > 1) {\n      await delay(semantics.retry.backoffMs * (attempt - 1));\n    }\n\n    const abort = new AbortController();\n    const timeout = setTimeout(() => abort.abort(), semantics.timeoutMs);\n    try {\n      const framed = frameBody(request.body);\n      const response = await fetchImpl(request.url, {\n        method: request.method,\n        // The caller's own headers win: a provider that must send its own `Content-Type` for a\n        // text body has already declared it, and the framing default must not overwrite it.\n        headers: framed.contentType === undefined\n          ? request.headers\n          : { 'Content-Type': framed.contentType, ...request.headers },\n        body: framed.payload,\n        signal: abort.signal,\n      });\n      const bodyText = await response.text();\n\n      if (!response.ok) {\n        const error = new HttpApiTransportError(\n          `HTTP-API remote answered ${response.status} for ${request.method} ${request.url}`,\n          { url: request.url, method: request.method, status: response.status, attempts: attempt, kind: HttpApiTransportFailureKind.REMOTE_ERROR },\n        );\n        if (request.retrySafe && RETRYABLE_STATUS.has(response.status) && attempt < maxAttempts) {\n          lastError = error;\n          continue;\n        }\n        throw error;\n      }\n\n      const decoding = request.responseDecoding ?? HttpApiTransportResponseDecoding.JSON;\n      if (decoding === HttpApiTransportResponseDecoding.NONE) {\n        return { status: response.status, json: undefined };\n      }\n      if (decoding === HttpApiTransportResponseDecoding.TEXT) {\n        return { status: response.status, json: undefined, text: bodyText };\n      }\n      if (bodyText.length === 0) {\n        return { status: response.status, json: undefined };\n      }\n      try {\n        return { status: response.status, json: JSON.parse(bodyText) };\n      } catch {\n        // A 2xx with unparsable JSON is a CONTRACT failure, not a transient — never retried.\n        throw new HttpApiTransportError(\n          `HTTP-API remote answered ${response.status} with a non-JSON body for ${request.method} ${request.url}`,\n          { url: request.url, method: request.method, status: response.status, attempts: attempt, kind: HttpApiTransportFailureKind.INVALID_JSON },\n        );\n      }\n    } catch (error) {\n      if (error instanceof HttpApiTransportError) {\n        if (request.retrySafe && error.detail.kind === HttpApiTransportFailureKind.REMOTE_ERROR && RETRYABLE_STATUS.has(error.detail.status ?? 0) && attempt < maxAttempts) {\n          lastError = error;\n          continue;\n        }\n        throw error;\n      }\n      const isAbort = error instanceof Error && error.name === 'AbortError';\n      const transportError = new HttpApiTransportError(\n        isAbort\n          ? `HTTP-API call timed out after ${semantics.timeoutMs}ms: ${request.method} ${request.url}`\n          : `HTTP-API network failure for ${request.method} ${request.url}: ${error instanceof Error ? error.message : String(error)}`,\n        { url: request.url, method: request.method, attempts: attempt, kind: isAbort ? HttpApiTransportFailureKind.TIMEOUT : HttpApiTransportFailureKind.NETWORK },\n      );\n      if (request.retrySafe && attempt < maxAttempts) {\n        lastError = transportError;\n        continue;\n      }\n      throw transportError;\n    } finally {\n      clearTimeout(timeout);\n    }\n  }\n\n  // Unreachable: every path in the loop either returns or throws — a non-retry-safe request\n  // throws on its first attempt, and a retry-safe one throws on its last. Kept for control-flow\n  // honesty, and because a future edit that adds a `continue` should land somewhere honest.\n  throw lastError ?? new HttpApiTransportError(\n    `HTTP-API call failed for ${request.method} ${request.url}`,\n    { url: request.url, method: request.method, attempts: maxAttempts, kind: HttpApiTransportFailureKind.NETWORK },\n  );\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n"]}
+{"version":3,"file":"http-api-transport.backend.js","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/http-api/http-api-transport.backend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;;;GAIG;AACH,MAAM,CAAN,IAAY,2BAMX;AAND,WAAY,2BAA2B;IACrC,kDAAmB,CAAA;IACnB,kDAAmB,CAAA;IACnB,4DAA6B,CAAA;IAC7B,4DAA6B,CAAA;IAC7B,8EAA+C,CAAA;AACjD,CAAC,EANW,2BAA2B,KAA3B,2BAA2B,QAMtC;AAuBD;;;;GAIG;AACH,MAAM,CAAN,IAAY,4BASX;AATD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,mEAAmC,CAAA;IACnC,oGAAoG;IACpG,uDAAuB,CAAA;IACvB,0DAA0D;IAC1D,6CAAa,CAAA;IACb,oDAAoD;IACpD,iDAAiB,CAAA;AACnB,CAAC,EATW,4BAA4B,KAA5B,4BAA4B,QASvC;AAUD,wCAAwC;AACxC,MAAM,CAAN,IAAY,gCAOX;AAPD,WAAY,gCAAgC;IAC1C,wFAAwF;IACxF,iDAAa,CAAA;IACb,4EAA4E;IAC5E,iDAAa,CAAA;IACb,4EAA4E;IAC5E,iDAAa,CAAA;AACf,CAAC,EAPW,gCAAgC,KAAhC,gCAAgC,QAO3C;AAsCD;;;;GAIG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAG5B;IAFlB,YACE,OAAe,EACC,MAOf;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QATC,WAAM,GAAN,MAAM,CAOrB;QAGD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAGC;IAFZ,UAAU,GAAa,EAAE,CAAC;IAE3C,YAA6B,oBAA6B;QAA7B,yBAAoB,GAApB,oBAAoB,CAAS;IAAG,CAAC;IAE9D,mGAAmG;IACnG,UAAU,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;QACnC,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;YACvE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,oBAAoB;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAsC;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,4BAA4B,CAAC,IAAI;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAClF,KAAK,4BAA4B,CAAC,eAAe;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;QAC7I,KAAK,4BAA4B,CAAC,SAAS;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,4BAA4B,CAAC,IAAI;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAChE,KAAK,4BAA4B,CAAC,MAAM;YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAChE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,IAAI,CAAC;YACpC,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgC,EAChC,SAAkE,EAClE,SAA2B,EAC3B,UAA8B;IAE9B,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,qBAAqB,CAC7B,sCAAsC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EACrE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,2BAA2B,CAAC,qBAAqB,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;IAChD,IAAI,SAA4C,CAAC;IAEjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,uFAAuF;gBACvF,oFAAoF;gBACpF,OAAO,EAAE,MAAM,CAAC,WAAW,KAAK,SAAS;oBACvC,CAAC,CAAC,OAAO,CAAC,OAAO;oBACjB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBAC9D,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEvC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,IAAI,qBAAqB,CACrC,4BAA4B,QAAQ,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EAClF,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,CAAC,YAAY,EAAE,CACzI,CAAC;gBACF,IAAI,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACxF,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,gCAAgC,CAAC,IAAI,CAAC;YACnF,IAAI,QAAQ,KAAK,gCAAgC,CAAC,IAAI,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,QAAQ,KAAK,gCAAgC,CAAC,IAAI,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACtE,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,qFAAqF;gBACrF,MAAM,IAAI,qBAAqB,CAC7B,4BAA4B,QAAQ,CAAC,MAAM,6BAA6B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EACvG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,CAAC,YAAY,EAAE,CACzI,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,2BAA2B,CAAC,YAAY,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACnK,SAAS,GAAG,KAAK,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;YACtE,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAC9C,OAAO;gBACL,CAAC,CAAC,iCAAiC,SAAS,CAAC,SAAS,OAAO,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE;gBAC5F,CAAC,CAAC,gCAAgC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9H,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,EAAE,CAC3J,CAAC;YACF,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC/C,SAAS,GAAG,cAAc,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,cAAc,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,8FAA8F;IAC9F,0FAA0F;IAC1F,MAAM,SAAS,IAAI,IAAI,qBAAqB,CAC1C,4BAA4B,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,EAC3D,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,2BAA2B,CAAC,OAAO,EAAE,CAC/G,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC","sourcesContent":["/**\n * HTTP transport for the HTTP-API resource repository — the ONE place a remote call leaves the\n * process, carrying the binding's declared remote-call semantics (ETL decision D10 / R15):\n * per-call timeout, bounded retry for idempotent read-family calls only, and an optional local\n * rate budget. Engine-independent by design (no DI, no ErrorBuilder): the adapter maps\n * {@link HttpApiTransportError} into its ordinary error projection.\n */\n\nimport type { API_HttpMethod } from '@wildo-ai/external-connectors-models';\nimport type { HttpApiRemoteCallSemantics } from '@wildo-ai/saas-models/external-data';\n\n/**\n * How a transport attempt failed — each member names a DIFFERENT remedy: TIMEOUT/NETWORK are\n * environmental (retryable), REMOTE_ERROR carries the target's own final answer, INVALID_JSON is\n * a contract breach at the target, RATE_BUDGET_EXHAUSTED is the binding's own local ceiling.\n */\nexport enum HttpApiTransportFailureKind {\n  TIMEOUT = 'TIMEOUT',\n  NETWORK = 'NETWORK',\n  REMOTE_ERROR = 'REMOTE_ERROR',\n  INVALID_JSON = 'INVALID_JSON',\n  RATE_BUDGET_EXHAUSTED = 'RATE_BUDGET_EXHAUSTED',\n}\n\n/**\n * Minimal fetch shape — injectable so unit tests run without a network.\n *\n * `body` widened beyond `string` for S3a (#331): a hand-authored provider operation may upload a\n * file (`FormData`, so the platform picks the multipart boundary — a transport that wrote its own\n * `Content-Type` would produce a boundary the body does not use) or send raw bytes.\n */\nexport type HttpApiFetchLike = (\n  url: string,\n  init: {\n    method: string;\n    headers: Record<string, string>;\n    body?: string | FormData | Uint8Array;\n    signal?: AbortSignal;\n  },\n) => Promise<{\n  status: number;\n  ok: boolean;\n  text(): Promise<string>;\n}>;\n\n/**\n * How a request body is encoded on the wire. Slice 1 needed JSON alone, because every ETL call is\n * a read; a hand-authored WRITE reaches vendors that take form bodies and file uploads, so the\n * encoding is carried on the request rather than inferred from the method.\n */\nexport enum HttpApiTransportBodyEncoding {\n  JSON = 'json',\n  FORM_URLENCODED = 'form-urlencoded',\n  /** `FormData`; the transport sends NO `Content-Type`, so the platform sets it with its boundary. */\n  MULTIPART = 'multipart',\n  /** A raw text body under a caller-declared media type. */\n  TEXT = 'text',\n  /** Raw bytes under a caller-declared media type. */\n  BINARY = 'binary',\n}\n\n/** The request body, discriminated so each encoding carries exactly what it needs. */\nexport type HttpApiTransportBody =\n  | { encoding: HttpApiTransportBodyEncoding.JSON; value: unknown }\n  | { encoding: HttpApiTransportBodyEncoding.FORM_URLENCODED; value: Readonly<Record<string, string>> }\n  | { encoding: HttpApiTransportBodyEncoding.MULTIPART; value: FormData }\n  | { encoding: HttpApiTransportBodyEncoding.TEXT; value: string; contentType: string }\n  | { encoding: HttpApiTransportBodyEncoding.BINARY; value: Uint8Array; contentType: string };\n\n/** How the RESPONSE body is decoded. */\nexport enum HttpApiTransportResponseDecoding {\n  /** Parse as JSON; a 2xx with an unparsable body is a contract failure at the target. */\n  JSON = 'json',\n  /** Keep the raw text (a CSV export, an XML document); nothing is parsed. */\n  TEXT = 'text',\n  /** Read nothing — for a write whose body carries no information (a 204). */\n  NONE = 'none',\n}\n\nexport interface HttpApiTransportRequest {\n  /**\n   * The transport is deliberately method-agnostic plumbing; WHICH methods a caller may compile is\n   * governed one layer up (the read compilers speak GET/POST, the stance-6b erasure door speaks\n   * DELETE, a provider operation speaks whatever it declares). The vocabulary is\n   * `API_HttpMethod` — the one named HTTP-method source this repository already has — rather than\n   * a third list beside the two read/erasure ones.\n   */\n  method: `${API_HttpMethod}`;\n  url: string;\n  headers: Record<string, string>;\n  body?: HttpApiTransportBody;\n  /** Absent = {@link HttpApiTransportResponseDecoding.JSON}, which is what every caller did before S3a. */\n  responseDecoding?: HttpApiTransportResponseDecoding;\n  /**\n   * Whether re-sending this exact request is safe. REQUIRED, and deliberately not defaulted from\n   * the method.\n   *\n   * Before S3a every call through here was a read or a delete-by-key, so retrying a timeout was\n   * always right and the policy could stay implicit. The moment a hand-authored PUT/PATCH/POST\n   * write arrives, an implicit retry duplicates it — and a default derived from the method would\n   * be wrong in BOTH directions: it would stop retrying the POST-shaped reads the ETL depends on\n   * (JSON-RPC, search endpoints), and it would happily retry a POST that charges a card. So each\n   * caller answers, and the compiler makes every framing site answer.\n   */\n  retrySafe: boolean;\n}\n\nexport interface HttpApiTransportResponse {\n  status: number;\n  /** Parsed JSON body; `undefined` for an empty body or a non-JSON decoding. */\n  json: unknown;\n  /** Raw body text, present for {@link HttpApiTransportResponseDecoding.TEXT}. */\n  text?: string;\n}\n\n/**\n * Every transport failure carries WHAT was attempted and HOW OFTEN, so the adapter's refusal\n * names the remote reality instead of a generic network error. Never carries the request\n * headers (they hold credentials).\n */\nexport class HttpApiTransportError extends Error {\n  constructor(\n    message: string,\n    public readonly detail: {\n      readonly url: string;\n      readonly method: string;\n      /** HTTP status of the LAST attempt; undefined when no response was received. */\n      readonly status?: number;\n      readonly attempts: number;\n      readonly kind: HttpApiTransportFailureKind;\n    },\n  ) {\n    super(message);\n    this.name = 'HttpApiTransportError';\n  }\n}\n\nconst RETRYABLE_STATUS = new Set([429, 502, 503, 504]);\n\n/**\n * A per-binding local rate budget (`maxRequestsPerMinute`) — a sliding-window counter, not a\n * fairness scheduler. When the window is full the call REFUSES immediately rather than queueing:\n * queueing inside a request lifecycle turns a rate problem into a latency problem the caller\n * cannot see (scope-down paper: refusal is the honest failure mode).\n */\nexport class HttpApiRateBudget {\n  private readonly timestamps: number[] = [];\n\n  constructor(private readonly maxRequestsPerMinute?: number) {}\n\n  /** Returns true when the call may proceed (and records it); false when the budget is exhausted. */\n  tryConsume(nowMs: number = Date.now()): boolean {\n    if (this.maxRequestsPerMinute === undefined) return true;\n    const windowStart = nowMs - 60_000;\n    while (this.timestamps.length > 0 && this.timestamps[0] <= windowStart) {\n      this.timestamps.shift();\n    }\n    if (this.timestamps.length >= this.maxRequestsPerMinute) return false;\n    this.timestamps.push(nowMs);\n    return true;\n  }\n}\n\n/**\n * Frame one request body: the wire bytes and the `Content-Type` that describes them.\n *\n * MULTIPART deliberately contributes NO header — `FormData` carries a boundary the platform\n * generates while serializing, and a `Content-Type` written here would name a different one, so\n * the target would parse zero parts from a body that looks well formed.\n */\nfunction frameBody(body: HttpApiTransportBody | undefined): { payload?: string | FormData | Uint8Array; contentType?: string } {\n  if (body === undefined) return {};\n  switch (body.encoding) {\n    case HttpApiTransportBodyEncoding.JSON:\n      return { payload: JSON.stringify(body.value), contentType: 'application/json' };\n    case HttpApiTransportBodyEncoding.FORM_URLENCODED:\n      return { payload: new URLSearchParams(body.value as Record<string, string>).toString(), contentType: 'application/x-www-form-urlencoded' };\n    case HttpApiTransportBodyEncoding.MULTIPART:\n      return { payload: body.value };\n    case HttpApiTransportBodyEncoding.TEXT:\n      return { payload: body.value, contentType: body.contentType };\n    case HttpApiTransportBodyEncoding.BINARY:\n      return { payload: body.value, contentType: body.contentType };\n    default: {\n      const exhaustiveCheck: never = body;\n      return exhaustiveCheck;\n    }\n  }\n}\n\n/**\n * Execute one remote call under the caller's semantics.\n *\n * Retry applies to a timeout, a network error, or a retryable status (429/502/503/504) — and ONLY\n * when the request declares itself `retrySafe`. Any other non-2xx status is a terminal remote\n * answer and is thrown on the first attempt: retrying a 400/401/403/404 re-asks a question whose\n * answer is final.\n *\n * The `retrySafe` gate arrived with S3a (#331). Every call before it was a read or a\n * delete-by-key, so the policy could be \"retry every transient\" and be right; a hand-authored\n * write makes that policy a duplicate-submission engine. Note a 429 is gated too, and that is\n * deliberate rather than an oversight: a 429 means the vendor did not act, but a TIMEOUT on the\n * same request means we do not know whether it acted, and one gate that is honest about both\n * beats two that invite the reader to work out which case they are in.\n */\nexport async function executeHttpApiTransportCall(\n  request: HttpApiTransportRequest,\n  semantics: Pick<HttpApiRemoteCallSemantics, 'timeoutMs' | 'retry'>,\n  fetchImpl: HttpApiFetchLike,\n  rateBudget?: HttpApiRateBudget,\n): Promise<HttpApiTransportResponse> {\n  if (rateBudget && !rateBudget.tryConsume()) {\n    throw new HttpApiTransportError(\n      `HTTP-API rate budget exhausted for ${request.method} ${request.url}`,\n      { url: request.url, method: request.method, attempts: 0, kind: HttpApiTransportFailureKind.RATE_BUDGET_EXHAUSTED },\n    );\n  }\n\n  const maxAttempts = semantics.retry.maxAttempts;\n  let lastError: HttpApiTransportError | undefined;\n\n  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n    if (attempt > 1) {\n      await delay(semantics.retry.backoffMs * (attempt - 1));\n    }\n\n    const abort = new AbortController();\n    const timeout = setTimeout(() => abort.abort(), semantics.timeoutMs);\n    try {\n      const framed = frameBody(request.body);\n      const response = await fetchImpl(request.url, {\n        method: request.method,\n        // The caller's own headers win: a provider that must send its own `Content-Type` for a\n        // text body has already declared it, and the framing default must not overwrite it.\n        headers: framed.contentType === undefined\n          ? request.headers\n          : { 'Content-Type': framed.contentType, ...request.headers },\n        body: framed.payload,\n        signal: abort.signal,\n      });\n      const bodyText = await response.text();\n\n      if (!response.ok) {\n        const error = new HttpApiTransportError(\n          `HTTP-API remote answered ${response.status} for ${request.method} ${request.url}`,\n          { url: request.url, method: request.method, status: response.status, attempts: attempt, kind: HttpApiTransportFailureKind.REMOTE_ERROR },\n        );\n        if (request.retrySafe && RETRYABLE_STATUS.has(response.status) && attempt < maxAttempts) {\n          lastError = error;\n          continue;\n        }\n        throw error;\n      }\n\n      const decoding = request.responseDecoding ?? HttpApiTransportResponseDecoding.JSON;\n      if (decoding === HttpApiTransportResponseDecoding.NONE) {\n        return { status: response.status, json: undefined };\n      }\n      if (decoding === HttpApiTransportResponseDecoding.TEXT) {\n        return { status: response.status, json: undefined, text: bodyText };\n      }\n      if (bodyText.length === 0) {\n        return { status: response.status, json: undefined };\n      }\n      try {\n        return { status: response.status, json: JSON.parse(bodyText) };\n      } catch {\n        // A 2xx with unparsable JSON is a CONTRACT failure, not a transient — never retried.\n        throw new HttpApiTransportError(\n          `HTTP-API remote answered ${response.status} with a non-JSON body for ${request.method} ${request.url}`,\n          { url: request.url, method: request.method, status: response.status, attempts: attempt, kind: HttpApiTransportFailureKind.INVALID_JSON },\n        );\n      }\n    } catch (error) {\n      if (error instanceof HttpApiTransportError) {\n        if (request.retrySafe && error.detail.kind === HttpApiTransportFailureKind.REMOTE_ERROR && RETRYABLE_STATUS.has(error.detail.status ?? 0) && attempt < maxAttempts) {\n          lastError = error;\n          continue;\n        }\n        throw error;\n      }\n      const isAbort = error instanceof Error && error.name === 'AbortError';\n      const transportError = new HttpApiTransportError(\n        isAbort\n          ? `HTTP-API call timed out after ${semantics.timeoutMs}ms: ${request.method} ${request.url}`\n          : `HTTP-API network failure for ${request.method} ${request.url}: ${error instanceof Error ? error.message : String(error)}`,\n        { url: request.url, method: request.method, attempts: attempt, kind: isAbort ? HttpApiTransportFailureKind.TIMEOUT : HttpApiTransportFailureKind.NETWORK },\n      );\n      if (request.retrySafe && attempt < maxAttempts) {\n        lastError = transportError;\n        continue;\n      }\n      throw transportError;\n    } finally {\n      clearTimeout(timeout);\n    }\n  }\n\n  // Unreachable: every path in the loop either returns or throws — a non-retry-safe request\n  // throws on its first attempt, and a retry-safe one throws on its last. Kept for control-flow\n  // honesty, and because a future edit that adds a `continue` should land somewhere honest.\n  throw lastError ?? new HttpApiTransportError(\n    `HTTP-API call failed for ${request.method} ${request.url}`,\n    { url: request.url, method: request.method, attempts: maxAttempts, kind: HttpApiTransportFailureKind.NETWORK },\n  );\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n"]}

package/dist/esm/base-classes/services/repositories/http-api/odata-query-compiler.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"odata-query-compiler.backend.d.ts","sourceRoot":"","sources":["../../../../../../../src/base-classes/services/repositories/http-api/odata-query-compiler.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACzB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAEV,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,UAAU,iBAAiB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC/C;AAgDD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED,0CAA0C;AAC1C,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,GACjB,oBAAoB,CAKtB;AAoCD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,sBAAsB,EAC7B,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5B,oBAAoB,CA8CtB;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,iBAAiB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAClD,OAAO,EAAE;IACP,iFAAiF;IACjF,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,yFAAyF;IACzF,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,oBAAoB,CA4BtB;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,sBAAsB,GAC5B,oBAAoB,CAQtB"}
+{"version":3,"file":"odata-query-compiler.backend.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/http-api/odata-query-compiler.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACzB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAEV,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,UAAU,iBAAiB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC/C;AAgDD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED,0CAA0C;AAC1C,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,GACjB,oBAAoB,CAKtB;AAoCD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,sBAAsB,EAC7B,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5B,oBAAoB,CA8CtB;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,iBAAiB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAClD,OAAO,EAAE;IACP,iFAAiF;IACjF,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,yFAAyF;IACzF,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,oBAAoB,CA4BtB;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,sBAAsB,GAC5B,oBAAoB,CAQtB"}

package/dist/esm/base-classes/services/repositories/http-api/odoo-jsonrpc-compiler.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"odoo-jsonrpc-compiler.backend.d.ts","sourceRoot":"","sources":["../../../../../../../src/base-classes/services/repositories/http-api/odoo-jsonrpc-compiler.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,eAAe,EAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAsB,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAE3F;;;;;GAKG;AACH,oBAAY,uBAAuB;IACjC,IAAI,SAAS;IACb,WAAW,gBAAgB;IAC3B,YAAY,iBAAiB;CAC9B;AAED;;;;;GAKG;AACH,oBAAY,0BAA0B;IACpC,MAAM,WAAW;CAClB;AAED,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,uBAAuB,GAAG,0BAA0B,CAAC;IAC7D,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAEtF;AAID,KAAK,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;AAE5D,UAAU,gBAAgB;IACxB,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC/C;AAyBD,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,sBAAsB,GAC5B,cAAc,EAAE,CAyBlB;AAED,sGAAsG;AACtG,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,GACjB,gBAAgB,CAGlB;AAED,0EAA0E;AAC1E,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAYlB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE;IACP,kFAAkF;IAClF,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,mEAAmE;IACnE,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,gBAAgB,CAiBlB;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAMlB"}
+{"version":3,"file":"odoo-jsonrpc-compiler.backend.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/http-api/odoo-jsonrpc-compiler.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,eAAe,EAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAsB,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAE3F;;;;;GAKG;AACH,oBAAY,uBAAuB;IACjC,IAAI,SAAS;IACb,WAAW,gBAAgB;IAC3B,YAAY,iBAAiB;CAC9B;AAED;;;;;GAKG;AACH,oBAAY,0BAA0B;IACpC,MAAM,WAAW;CAClB;AAED,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,uBAAuB,GAAG,0BAA0B,CAAC;IAC7D,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAEtF;AAID,KAAK,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;AAE5D,UAAU,gBAAgB;IACxB,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC/C;AAyBD,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,sBAAsB,GAC5B,cAAc,EAAE,CAyBlB;AAED,sGAAsG;AACtG,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,gBAAgB,EACzB,UAAU,EAAE,MAAM,GACjB,gBAAgB,CAGlB;AAED,0EAA0E;AAC1E,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAYlB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE;IACP,kFAAkF;IAClF,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,mEAAmE;IACnE,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,GACA,gBAAgB,CAiBlB;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAMlB"}

package/dist/esm/base-classes/services/repositories/http-api/rest-json-query-compiler.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest-json-query-compiler.backend.d.ts","sourceRoot":"","sources":["../../../../../../../src/base-classes/services/repositories/http-api/rest-json-query-compiler.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC9B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,GAAG,0BAA0B,EAAE,CAAC;IACxC,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAClD,+DAA+D;IAC/D,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,oBAAoB;IAC5B,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC/C;AAqCD;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,GAAG,6BAA6B,EAAE,CAAC;IAC3C,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC;AAED,+FAA+F;AAC/F,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,2BAA2B,EACjC,UAAU,EAAE,MAAM,GACjB,8BAA8B,CAMhC;AAED,8FAA8F;AAC9F,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,wBAAwB,EAC9B,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAQzB;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oBAAoB,GAAG;IAAE,uBAAuB,CAAC,EAAE,MAAM,CAAA;CAAE,EACpE,IAAI,EAAE,wBAAwB,EAC9B,KAAK,EAAE,sBAAsB,GAC5B,uBAAuB,CAyEzB"}
+{"version":3,"file":"rest-json-query-compiler.backend.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/http-api/rest-json-query-compiler.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC9B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,GAAG,0BAA0B,EAAE,CAAC;IACxC,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAClD,+DAA+D;IAC/D,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,oBAAoB;IAC5B,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IACtC,aAAa,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC/C;AAqCD;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,GAAG,6BAA6B,EAAE,CAAC;IAC3C,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC;AAED,+FAA+F;AAC/F,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,2BAA2B,EACjC,UAAU,EAAE,MAAM,GACjB,8BAA8B,CAMhC;AAED,8FAA8F;AAC9F,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,wBAAwB,EAC9B,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAQzB;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oBAAoB,GAAG;IAAE,uBAAuB,CAAC,EAAE,MAAM,CAAA;CAAE,EACpE,IAAI,EAAE,wBAAwB,EAC9B,KAAK,EAAE,sBAAsB,GAC5B,uBAAuB,CAyEzB"}

package/dist/esm/base-classes/services/repositories/infrastructure-tier-contract.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"infrastructure-tier-contract.backend.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/infrastructure-tier-contract.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH;;;;;;;GAOG;AACH,oBAAY,kBAAkB;IAC5B,gGAAgG;IAChG,eAAe,oCAAoC;IACnD,gFAAgF;IAChF,SAAS,8BAA8B;IACvC,oFAAoF;IACpF,oBAAoB,sBAAsB;IAC1C,sEAAsE;IACtE,eAAe,oCAAoC;IACnD,qFAAqF;IACrF,WAAW,gCAAgC;IAC3C,+DAA+D;IAC/D,WAAW,gCAAgC;IAC3C,yCAAyC;IACzC,uBAAuB,0BAA0B;IACjD,iEAAiE;IACjE,sBAAsB,yBAAyB;IAC/C,wCAAwC;IACxC,sBAAsB,yBAAyB;CAChD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,oBAAY,iCAAiC;IAC3C;;;OAGG;IACH,aAAa,kBAAkB;IAC/B;;;;;;;;;;;OAWG;IACH,cAAc,kBAAkB;IAChC;;;;OAIG;IACH,iBAAiB,qBAAqB;IACtC;;;;;OAKG;IACH,cAAc,kBAAkB;IAChC;;;;OAIG;IACH,kBAAkB,qBAAqB;IACvC;;;OAGG;IACH,WAAW,eAAe;IAC1B;;;;;;;;;OASG;IACH,yBAAyB,6BAA6B;IACtD;;;;OAIG;IACH,kBAAkB,sBAAsB;CACzC;AAED,oBAAY,4BAA4B;IACtC,6CAA6C;IAC7C,SAAS,cAAc;IACvB,sFAAsF;IACtF,MAAM,WAAW;IACjB,mGAAmG;IACnG,cAAc,mBAAmB;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GACxC;IAAE,OAAO,EAAE,4BAA4B,CAAC,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC7F;IAAE,OAAO,EAAE,4BAA4B,CAAC,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA4I7E,eAAO,MAAM,4BAA4B,EAAE,MAAM,CAC/C,kBAAkB,EAClB,MAAM,CAAC,iCAAiC,EAAE,gCAAgC,CAAC,CAyR5E,CAAC;AAIF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8CAA8C,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM3F,CAAC;AAEF;;;;;;;;GAQG;AACH,oBAAY,sCAAsC;IAChD,YAAY,gBAAgB;IAC5B,4BAA4B,+BAA+B;CAC5D;AAED,eAAO,MAAM,0CAA0C,EAAE,MAAM,CAC7D,sCAAsC,EACtC,MAAM,CAcP,CAAC"}
+{"version":3,"file":"infrastructure-tier-contract.backend.d.ts","sourceRoot":"","sources":["../../../../../src/base-classes/services/repositories/infrastructure-tier-contract.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH;;;;;;;GAOG;AACH,oBAAY,kBAAkB;IAC5B,gGAAgG;IAChG,eAAe,oCAAoC;IACnD,gFAAgF;IAChF,SAAS,8BAA8B;IACvC,oFAAoF;IACpF,oBAAoB,sBAAsB;IAC1C,sEAAsE;IACtE,eAAe,oCAAoC;IACnD,qFAAqF;IACrF,WAAW,gCAAgC;IAC3C,+DAA+D;IAC/D,WAAW,gCAAgC;IAC3C,yCAAyC;IACzC,uBAAuB,0BAA0B;IACjD,iEAAiE;IACjE,sBAAsB,yBAAyB;IAC/C,wCAAwC;IACxC,sBAAsB,yBAAyB;CAChD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,oBAAY,iCAAiC;IAC3C;;;OAGG;IACH,aAAa,kBAAkB;IAC/B;;;;;;;;;;;OAWG;IACH,cAAc,kBAAkB;IAChC;;;;OAIG;IACH,iBAAiB,qBAAqB;IACtC;;;;;OAKG;IACH,cAAc,kBAAkB;IAChC;;;;OAIG;IACH,kBAAkB,qBAAqB;IACvC;;;OAGG;IACH,WAAW,eAAe;IAC1B;;;;;;;;;OASG;IACH,yBAAyB,6BAA6B;IACtD;;;;OAIG;IACH,kBAAkB,sBAAsB;CACzC;AAED,oBAAY,4BAA4B;IACtC,6CAA6C;IAC7C,SAAS,cAAc;IACvB,sFAAsF;IACtF,MAAM,WAAW;IACjB,mGAAmG;IACnG,cAAc,mBAAmB;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GACxC;IAAE,OAAO,EAAE,4BAA4B,CAAC,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC7F;IAAE,OAAO,EAAE,4BAA4B,CAAC,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA4I7E,eAAO,MAAM,4BAA4B,EAAE,MAAM,CAC/C,kBAAkB,EAClB,MAAM,CAAC,iCAAiC,EAAE,gCAAgC,CAAC,CAyR5E,CAAC;AAIF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8CAA8C,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM3F,CAAC;AAEF;;;;;;;;GAQG;AACH,oBAAY,sCAAsC;IAChD,YAAY,gBAAgB;IAC5B,4BAA4B,+BAA+B;CAC5D;AAED,eAAO,MAAM,0CAA0C,EAAE,MAAM,CAC7D,sCAAsC,EACtC,MAAM,CAcP,CAAC"}

package/dist/esm/base-classes/services/repositories/infrastructure-tier-contract.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"infrastructure-tier-contract.backend.js","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/infrastructure-tier-contract.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBAmBX;AAnBD,WAAY,kBAAkB;IAC5B,gGAAgG;IAChG,yEAAmD,CAAA;IACnD,gFAAgF;IAChF,6DAAuC,CAAA;IACvC,oFAAoF;IACpF,gEAA0C,CAAA;IAC1C,sEAAsE;IACtE,yEAAmD,CAAA;IACnD,qFAAqF;IACrF,iEAA2C,CAAA;IAC3C,+DAA+D;IAC/D,iEAA2C,CAAA;IAC3C,yCAAyC;IACzC,uEAAiD,CAAA;IACjD,iEAAiE;IACjE,qEAA+C,CAAA;IAC/C,wCAAwC;IACxC,qEAA+C,CAAA;AACjD,CAAC,EAnBW,kBAAkB,KAAlB,kBAAkB,QAmB7B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,iCA4DX;AA5DD,WAAY,iCAAiC;IAC3C;;;OAGG;IACH,oEAA+B,CAAA;IAC/B;;;;;;;;;;;OAWG;IACH,qEAAgC,CAAA;IAChC;;;;OAIG;IACH,2EAAsC,CAAA;IACtC;;;;;OAKG;IACH,qEAAgC,CAAA;IAChC;;;;OAIG;IACH,4EAAuC,CAAA;IACvC;;;OAGG;IACH,+DAA0B,CAAA;IAC1B;;;;;;;;;OASG;IACH,2FAAsD,CAAA;IACtD;;;;OAIG;IACH,6EAAwC,CAAA;AAC1C,CAAC,EA5DW,iCAAiC,KAAjC,iCAAiC,QA4D5C;AAED,MAAM,CAAN,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACtC,6CAA6C;IAC7C,uDAAuB,CAAA;IACvB,sFAAsF;IACtF,iDAAiB,CAAA;IACjB,mGAAmG;IACnG,iEAAiC,CAAA;AACnC,CAAC,EAPW,4BAA4B,KAA5B,4BAA4B,QAOvC;AAYD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,4BAA4B,CAAC;AAC3E,MAAM,EACJ,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,yBAAyB,EACzB,kBAAkB,GACnB,GAAG,iCAAiC,CAAC;AAEtC,oGAAoG;AACpG,mGAAmG;AACnG,sGAAsG;AACtG,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,oBAAoB,GAAqC;IAC7D,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,+FAA+F;UAC7F,+FAA+F;UAC/F,yBAAyB;IAC7B,YAAY,EACV,8FAA8F;UAC5F,+EAA+E;CACpF,CAAC;AAEF,yFAAyF;AACzF,MAAM,qBAAqB,GAAqC;IAC9D,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,gGAAgG;UAC9F,4FAA4F;UAC5F,8FAA8F;UAC9F,oCAAoC;IACxC,YAAY,EACV,iGAAiG;UAC/F,gGAAgG;UAChG,sFAAsF;CAC3F,CAAC;AAEF,kGAAkG;AAClG,MAAM,kBAAkB,GAAqC;IAC3D,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,mFAAmF;IAC3F,YAAY,EAAE,IAAI;CACnB,CAAC;AAEF,gGAAgG;AAChG,MAAM,wCAAwC,GAAqC;IACjF,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,oFAAoF;CAC7F,CAAC;AAEF,4BAA4B;AAC5B,MAAM,yCAAyC,GAAqC;IAClF,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,8EAA8E;CACvF,CAAC;AAEF;;;GAGG;AACH,MAAM,wCAAwC,GAAqC;IACjF,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,8FAA8F;UAC5F,iGAAiG;UACjG,+CAA+C;IACnD,YAAY,EACV,8FAA8F;UAC5F,8EAA8E;CACnF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mCAAmC,GAAqC;IAC5E,OAAO,EAAE,SAAS;IAClB,GAAG,EACD,+FAA+F;UAC7F,mEAAmE;CACxE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,wCAAwC,GAAG,CAAC,SAAiB,EAAoC,EAAE,CAAC,CAAC;IACzG,OAAO,EAAE,SAAS;IAClB,GAAG,EACD,gBAAgB,SAAS,2EAA2E;UAClG,6FAA6F;UAC7F,uFAAuF;CAC5F,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,oCAAoC,GAAG,CAAC,WAAmB,EAAoC,EAAE,CAAC,CAAC;IACvG,OAAO,EAAE,SAAS;IAClB,GAAG,EACD,oFAAoF,WAAW,GAAG;UAChG,mGAAmG;UACnG,0DAA0D;CAC/D,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,CAAC,KAAa,EAAoC,EAAE,CAAC,CAAC;IAC/F,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,8FAA8F;UAC5F,0EAA0E;IAC9E,YAAY,EAAE,wCAAwC,KAAK,EAAE;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAGrC;IACF,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE;QACpC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE;YAChB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,2FAA2F;kBACzF,4FAA4F;kBAC5F,8FAA8F;kBAC9F,6FAA6F;kBAC7F,0CAA0C;SAC/C;QACD,CAAC,kBAAkB,CAAC,EAAE,yCAAyC;QAC/D,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE;YAC3B,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,0FAA0F;kBACxF,qFAAqF;kBACrF,6FAA6F;kBAC7F,0FAA0F;kBAC1F,2FAA2F;kBAC3F,8FAA8F;kBAC9F,0EAA0E;kBAC1E,iEAAiE;SACtE;QACD,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,8FAA8F;kBAC5F,4FAA4F;kBAC5F,6FAA6F;kBAC7F,uBAAuB;SAC5B;KACF;IAED,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;QAC9B,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,mGAAmG;cACjG,gBAAgB,CACnB;QACD,CAAC,kBAAkB,CAAC,EAAE,yCAAyC;QAC/D,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE,wCAAwC,CAAC,qBAAqB,CAAC;KACtF;IAED,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE;QACzC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE;YAChB,OAAO,EAAE,MAAM;YACf,MAAM,EACJ,0FAA0F;kBACxF,oFAAoF;YACxF,YAAY,EACV,6FAA6F;kBAC3F,kFAAkF;kBAClF,6DAA6D;SAClE;QACD,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,gGAAgG;cAC9F,iBAAiB,CACpB;QACD,CAAC,kBAAkB,CAAC,EAAE,yCAAyC;QAC/D,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE,wCAAwC,CAAC,mBAAmB,CAAC;KACpF;IAED,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE;QACpC,CAAC,aAAa,CAAC,EAAE;YACf,OAAO,EAAE,MAAM;YACf,MAAM,EACJ,8FAA8F;kBAC5F,4FAA4F;kBAC5F,2FAA2F;kBAC3F,4FAA4F;kBAC5F,6FAA6F;kBAC7F,wFAAwF;kBACxF,yFAAyF;kBACzF,4FAA4F;kBAC5F,yDAAyD;YAC7D,YAAY,EACV,wFAAwF;kBACtF,+EAA+E;kBAC/E,kFAAkF;kBAClF,6FAA6F;kBAC7F,kFAAkF;kBAClF,mFAAmF;kBACnF,4FAA4F;kBAC5F,+FAA+F;kBAC/F,8FAA8F;kBAC9F,4FAA4F;kBAC5F,6FAA6F;kBAC7F,yFAAyF;SAC9F;QACD,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE;YACnB,OAAO,EAAE,MAAM;YACf,MAAM,EACJ,+FAA+F;kBAC7F,wFAAwF;kBACxF,0FAA0F;kBAC1F,6CAA6C;YACjD,YAAY,EACV,sFAAsF;kBACpF,6FAA6F;kBAC7F,yFAAyF;kBACzF,0CAA0C;SAC/C;QACD,CAAC,cAAc,CAAC,EAAE;YAChB,OAAO,EAAE,cAAc;YACvB,MAAM,EACJ,+FAA+F;kBAC7F,iEAAiE;SACtE;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,4CAA4C,CAC7C;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,iGAAiG;kBAC/F,gGAAgG;kBAChG,oFAAoF;kBACpF,8FAA8F;kBAC9F,yDAAyD;SAC9D;KACF;IAED,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE;QAChC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,oGAAoG;cAClG,mCAAmC,CACtC;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,gEAAgE,CACjE;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE;YAC3B,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,8FAA8F;kBAC5F,qFAAqF;kBACrF,gGAAgG;kBAChG,8FAA8F;kBAC9F,kDAAkD;SACvD;QACD,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,8FAA8F;kBAC5F,8FAA8F;kBAC9F,gGAAgG;kBAChG,6BAA6B;SAClC;KACF;IAED,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE;QAChC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE;YACnB,OAAO,EAAE,cAAc;YACvB,MAAM,EACJ,+FAA+F;kBAC7F,0FAA0F;kBAC1F,iFAAiF;SACtF;QACD,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,4FAA4F;cAC1F,6FAA6F;cAC7F,sDAAsD,CACzD;QACD,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,cAAc;YACvB,MAAM,EACJ,+FAA+F;kBAC7F,8FAA8F;kBAC9F,uDAAuD;kBACvD,yFAAyF;kBACzF,6FAA6F;kBAC7F,qEAAqE;SAC1E;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,+FAA+F;kBAC7F,4FAA4F;kBAC5F,4FAA4F;kBAC5F,gGAAgG;kBAChG,+FAA+F;kBAC/F,4FAA4F;kBAC5F,yFAAyF;kBACzF,6FAA6F;kBAC7F,8FAA8F;kBAC9F,0DAA0D;SAC/D;KACF;IAED,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,EAAE;QAC5C,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,4EAA4E,CAC7E;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,+DAA+D,CAChE;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,6FAA6F;kBAC3F,8FAA8F;kBAC9F,kCAAkC;SACvC;KACF;IAED,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE;QAC3C,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,8EAA8E,CAC/E;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,8FAA8F;cAC5F,oBAAoB,CACvB;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,kGAAkG;kBAChG,8FAA8F;kBAC9F,+FAA+F;kBAC/F,6FAA6F;kBAC7F,sCAAsC;SAC3C;KACF;IAED,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE;QAC3C,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,8EAA8E,CAC/E;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,2FAA2F,CAC5F;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,yFAAyF;kBACvF,8FAA8F;kBAC9F,4FAA4F;kBAC5F,uFAAuF;kBACvF,0FAA0F;kBAC1F,kFAAkF;SACvF;KACF;CACF,CAAC;AAEF,oGAAoG;AAEpG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC;IAC9F,oBAAoB,EAClB,kGAAkG;UAChG,6FAA6F;UAC7F,2FAA2F;UAC3F,0BAA0B;CAC/B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,sCAGX;AAHD,WAAY,sCAAsC;IAChD,sEAA4B,CAAA;IAC5B,qGAA2D,CAAA;AAC7D,CAAC,EAHW,sCAAsC,KAAtC,sCAAsC,QAGjD;AAED,MAAM,CAAC,MAAM,0CAA0C,GAGnD;IACF,CAAC,sCAAsC,CAAC,YAAY,CAAC,EACnD,8FAA8F;UAC5F,mGAAmG;UACnG,kGAAkG;UAClG,kDAAkD;IACtD,CAAC,sCAAsC,CAAC,4BAA4B,CAAC,EACnE,qGAAqG;UACnG,+FAA+F;UAC/F,mGAAmG;UACnG,kGAAkG;UAClG,+FAA+F;UAC/F,6DAA6D;CAClE,CAAC","sourcesContent":["/**\n * The contract every INFRASTRUCTURE-TIER door on {@link RepositoriesRegistryHandlerBackendService}\n * answers to.\n *\n * ## Why this file exists\n *\n * The infrastructure tier is a deliberate bypass: its doors sit BELOW the service tier, take a\n * pre-built filter or an already-final document, and run no declared operation and no authorization.\n * Its clearest warrant is the field-uniqueness check behind the `validate-field` route. A field\n * declared unique with `scope: 'global'` must be counted across the ENTIRE collection — \"no additional\n * filter (intentional — check entire collection)\" — including tenants the caller cannot see, and the\n * answer returned as nothing but a number. A declared operation cannot serve that: `buildContextualFilter`\n * would scope the count to the caller's tenant and the answer would simply be wrong. So the door\n * deliberately waives tenant scoping and deliberately does NOT waive the retention hide, because\n * counting a hidden row would turn the same number into an existence oracle.\n *\n * Its WEAKEST warrant is the one the tier has most often cited, and issue #100 asked for it to be\n * settled: \"a consumable token is minted by a system action and consumed BEFORE authentication, so\n * there is genuinely no principal to authorize\". That conflates two moments. CONSUMPTION has no\n * principal — the token IS the credential. MINTING is a write the running system performs inside a\n * flow it controls, and the framework already has a vocabulary for exactly that: `createAsSystem`\n * fail-closes unless the resource opts in with `systemAccessPolicy.create = ALLOWED`, synthesises an\n * APPLICATION-scope super-admin context, and dispatches the resource's OWN declared CREATE —\n * which `CONSUMABLE_TOKENS` declares. So the framework does not owe a new \"system principal\"\n * vocabulary.\n *\n * That settles the FRAMEWORK question and deliberately does not settle the CALLER's: this door turns\n * out to have a second, stronger reason to bypass the declared pipeline. `createsOneOffSession` is\n * sealed `.excludeFromCreate()` so that no repository-create path can mint a session-establishing\n * token, which is what makes `createToken` the sole minter and therefore the single funnel enforcing\n * the impersonation-credential lifetime ceiling. A raw door is the shape that seal depends on. See\n * `INSERT_DOCUMENT / authorization` below, and issue #102.\n *\n * What was missing is not correctness, it is a CONTRACT. Each door carried its own hand-written prose\n * about which cross-cutting invariant it upheld and which it skipped, so the tier's posture existed\n * only as a set of independent rationales. Adding a door, or a new invariant, meant re-deriving the\n * obligation by hand at every site with nothing mechanical to say whether it had been done — the exact\n * failure shape `.claude/rules/invariant-call-site-enumeration.md` records, where an invariant is\n * applied at one of its N sites and the miss is invisible.\n *\n * So the posture is DECLARED here instead, once, as data. Because the table is typed\n * `Record<InfrastructureDoor, Record<InfrastructureCrossCuttingConcern, …>>`, adding a member to\n * EITHER enum fails to compile until every new cell is filled in. That is the property this file is\n * for: the missing case becomes a compiler error rather than something a reviewer has to notice.\n *\n * ## The tier is NINE doors, not the four that share a name\n *\n * Issue #100 listed four, all suffixed `*ForInfrastructure`. That is the population the SUFFIX\n * describes, and it was half the tier. Four more handler members have the identical posture under a\n * different name — `atomicIncrementField` and `atomicConditionalSet` carry, verbatim, the same\n * `@internal Framework-internal infrastructure primitive — NOT part of the operation lifecycle. The\n * caller owns authorization, scope-aware filter construction, and audit logging.` that the suffixed\n * doors carry; `atomicGuardedMutation` and `readUnscopedByKey` likewise dispatch a caller-built filter\n * straight to an adapter with no operation above them.\n *\n * That is why {@link INFRASTRUCTURE_TIER_CONTRACT}'s pin discovers the tier by what a member DOES —\n * resolving a repository and dispatching to it — rather than by what it is called. Enumerating by name\n * finds every site that agrees with you about naming, which is `invariant-call-site-enumeration.md`\n * #12 and #20 in one. The sibling guard `rag-ingestion-write-door-coverage.guard.test.ts` had already\n * reached the same population from the write side: three of its five raw write doors carry no suffix.\n *\n * ## What this file is NOT\n *\n * It does not gate anything at runtime. A door's behaviour lives in the door; this is the record of\n * what that behaviour promises, kept adjacent and kept complete. Turning it into a runtime guard would\n * add a second authority that can disagree with the code, which is the failure this repository has\n * paid for repeatedly (see `.claude/rules/one-source-of-truth.md`).\n *\n * It is also not a place to fix a door. Filling the table surfaced one real asymmetry — see\n * {@link InfrastructureCrossCuttingConcern.TRANSACTION_PARTICIPATION} at\n * {@link InfrastructureDoor.COUNT_DOCUMENTS} — and it is RECORDED here rather than quietly repaired,\n * because a waiver nobody can see is the condition this contract exists to end.\n *\n * @see issue #100 — the decision this file implements.\n */\n\n/**\n * The doors.\n *\n * Each value is the METHOD NAME on the handler, deliberately, so\n * `__tests__/infrastructure-tier-contract.guard.test.ts` can discover the real tier from the handler's\n * source and assert this enum matches it exactly. A hand-maintained list that merely LOOKS complete is\n * what this file exists to prevent, so the list is checked against the class rather than trusted.\n */\nexport enum InfrastructureDoor {\n  /** Backs field-uniqueness validation, which runs INSIDE an in-flight operation's validation. */\n  COUNT_DOCUMENTS = 'countDocumentsForInfrastructure',\n  /** Multi-row read for a framework-internal reader (consumable-token lookup). */\n  FIND_MANY = 'findManyForInfrastructure',\n  /** Single-row read below BOTH the operation tier and the execution-context tier. */\n  READ_UNSCOPED_BY_KEY = 'readUnscopedByKey',\n  /** INSERT of an already-final document (consumable-token minting). */\n  INSERT_DOCUMENT = 'insertDocumentForInfrastructure',\n  /** Multi-row guarded write (token revocation by relatedId, usage-record marking). */\n  BULK_UPDATE = 'bulkUpdateForInfrastructure',\n  /** Multi-row DELETE (the consumable-token retention sweep). */\n  DELETE_MANY = 'deleteManyForInfrastructure',\n  /** Single-row compare-and-swap write. */\n  ATOMIC_GUARDED_MUTATION = 'atomicGuardedMutation',\n  /** Single-row counter increment (metering, quota accounting). */\n  ATOMIC_INCREMENT_FIELD = 'atomicIncrementField',\n  /** Single-row conditional set/clear. */\n  ATOMIC_CONDITIONAL_SET = 'atomicConditionalSet',\n}\n\n/**\n * The cross-cutting invariants a door must answer for explicitly.\n *\n * ## The admission criterion, so the next member is not settled by taste\n *\n * A concern belongs here when it is an invariant that holds across the whole persistence boundary AND\n * a door can silently fail to uphold it. Members arrive on one of two bases, and each member's own\n * doc-comment names which:\n *\n *  - **conferred from above** — an ordinary declared operation gets it for free at the controller or\n *    service tier, and a door that runs no operation therefore does not (authorization, tenant\n *    scoping, schema validation, the RAG ingestion gate, the audit trail);\n *  - **promised by the door itself** — nothing above confers it; the door's own general name promises\n *    it, and the family has broken it in production (retention hide, transaction participation,\n *    adapter neutrality).\n *\n * This set is OPEN. Adding a member is the point: it immediately breaks compilation at every door\n * until each declares a posture. Candidates DELIBERATELY excluded are recorded as data in\n * {@link INFRASTRUCTURE_CONCERN_CANDIDATES_EXCLUDED} rather than left absent — an absence is\n * indistinguishable from an oversight, which is the shape this whole file is about.\n */\nexport enum InfrastructureCrossCuttingConcern {\n  /**\n   * CONFERRED FROM ABOVE. Who may do this. The controller resolves it from the declared operation's\n   * roles and variant; these doors run no operation, so nothing resolves a principal.\n   */\n  AUTHORIZATION = 'authorization',\n  /**\n   * CONFERRED FROM ABOVE. Which TENANT'S rows this statement may reach. The adapters' own\n   * `buildContextualFilter` injects the scope FK (organizationId / userId) into every operation-tier\n   * filter; the raw primitives these doors dispatch deliberately do not call it — \"the caller's filter\n   * is the whole confinement, by design\".\n   *\n   * Distinct from {@link AUTHORIZATION} on purpose, and the distinction is the tier's own: the handler\n   * states at `readUnscopedByKey` that \"a read that skips tenant scoping must NOT also skip erasure\n   * retention: those are different questions\". Roles and rows are two gates, answered from two inputs,\n   * and fusing them is what `.claude/rules/administrative-continuity-floors.md` records as producing\n   * cross-tenant reach nobody declared.\n   */\n  TENANT_SCOPING = 'tenantScoping',\n  /**\n   * CONFERRED FROM ABOVE. That a written value was checked against a declared schema. The controller's\n   * `validateRequestData` parses the payload through the operation's `requestDto` before any write;\n   * these doors take an already-built document or mutation descriptor and no Zod schema sees it.\n   */\n  SCHEMA_VALIDATION = 'schemaValidation',\n  /**\n   * PROMISED BY THE DOOR. An erased-but-retained row must stay invisible to reads and unaffected by\n   * writes — \"kept but frozen\". The tier applies it at its own single dispatch point\n   * (`applyRetentionHideToRawFilter`) rather than in each adapter, so a future adapter inherits it by\n   * construction.\n   */\n  RETENTION_HIDE = 'retentionHide',\n  /**\n   * CONFERRED FROM ABOVE. A `.ragSource()` field changing must re-derive the affected chunk set. The\n   * hook lives at the service tier's single post-commit chokepoint, which is ABOVE these doors, so no\n   * door can feed it.\n   */\n  RAG_INGESTION_GATE = 'ragIngestionGate',\n  /**\n   * CONFERRED FROM ABOVE. A security-relevant action must leave an auditable record. The operation\n   * lifecycle emits it; no lifecycle runs here.\n   */\n  AUDIT_TRAIL = 'auditTrail',\n  /**\n   * PROMISED BY THE DOOR. A statement issued inside a caller's transaction must ENROL in it. Every\n   * underlying primitive accepts `RepositoryOptions` and both adapters honour it, so whether a door\n   * participates is decided entirely by whether the door accepts and forwards them.\n   *\n   * This is a member because the family has already lost it once, silently and expensively:\n   * `bulkUpdateForInfrastructure` neither accepted nor forwarded options, so `revokeTokensByRelatedId`\n   * committed immediately regardless of its caller's transaction and a driver retry observed a count\n   * of 0 for work that had happened exactly once.\n   */\n  TRANSACTION_PARTICIPATION = 'transactionParticipation',\n  /**\n   * PROMISED BY THE DOOR. A generally-named capability must work on every persistence adapter, not\n   * only the one it was written against. A member here is one the family has broken twice — both\n   * breakages were a reach for `(repository as any).mongooseModel` behind a neutral-sounding name.\n   */\n  ADAPTER_NEUTRALITY = 'adapterNeutrality',\n}\n\nexport enum InfrastructureConcernPosture {\n  /** The door itself upholds the invariant. */\n  PRESERVED = 'preserved',\n  /** The invariant could apply and deliberately is not upheld. A reason is required. */\n  WAIVED = 'waived',\n  /** The invariant cannot apply to this door's shape at all (e.g. a retention hide on an INSERT). */\n  NOT_APPLICABLE = 'not-applicable',\n}\n\n/**\n * `compensation` is the field that makes a waiver reviewable: it names what ELSE catches the gap, or\n * is `null` to state plainly that nothing does. A waiver with no compensation is not forbidden — it is\n * simply visible, which is the whole ask of issue #100.\n */\nexport type InfrastructureConcernDeclaration =\n  | { posture: InfrastructureConcernPosture.PRESERVED; how: string }\n  | { posture: InfrastructureConcernPosture.WAIVED; reason: string; compensation: string | null }\n  | { posture: InfrastructureConcernPosture.NOT_APPLICABLE; reason: string };\n\nconst { PRESERVED, WAIVED, NOT_APPLICABLE } = InfrastructureConcernPosture;\nconst {\n  AUTHORIZATION,\n  TENANT_SCOPING,\n  SCHEMA_VALIDATION,\n  RETENTION_HIDE,\n  RAG_INGESTION_GATE,\n  AUDIT_TRAIL,\n  TRANSACTION_PARTICIPATION,\n  ADAPTER_NEUTRALITY,\n} = InfrastructureCrossCuttingConcern;\n\n// ── Declarations shared verbatim across doors ────────────────────────────────────────────────────\n// Written once where the reason is genuinely the same one. Where a door's reason is its own, it is\n// written at the door — moved from that door's JSDoc rather than paraphrased, so the rationale exists\n// in exactly one place and cannot drift from the copy it was summarised into.\n\n/**\n * Identical at every door. The placement note is the real mitigation: these members live on the\n * HANDLER and not on the `BackendResourceRepository` interface an application's custom code is handed.\n */\nconst AUTHORIZATION_WAIVED: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason:\n    'Below the service tier: no declared operation runs, so there is no principal to resolve. The '\n    + 'caller authorizes before calling; `executionContext` here is error context only and is never '\n    + 'read for authorization.',\n  compensation:\n    'Declared on the handler rather than on the `BackendResourceRepository` interface, so custom '\n    + 'application code cannot reach these doors through the repository it is given.',\n};\n\n/** Identical at every door: the caller's filter or document is the whole confinement. */\nconst TENANT_SCOPING_WAIVED: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason:\n    'The adapters\\' `buildContextualFilter` — which injects the resource\\'s scope FK — runs on the '\n    + 'operation-tier paths only. A raw primitive takes the caller\\'s filter as given, so a door '\n    + 'reaching a scope-bearing resource without its scope predicate returns cross-tenant rows and '\n    + 'nothing below the door re-adds it.',\n  compensation:\n    'Handler-only placement (as for authorization), plus the narrowness of the callers: the tier is '\n    + 'reached today only by field-uniqueness validation, consumable tokens and usage metering, each '\n    + 'of which builds its own filter. Nothing mechanical enforces that on a future caller.',\n};\n\n/** Identical at every door: the door emits nothing, and nothing downstream substitutes for it. */\nconst AUDIT_TRAIL_WAIVED: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason: 'No operation lifecycle runs, so no auditable event is emitted by the door itself.',\n  compensation: null,\n};\n\n/** The three read doors: a read materializes no value, so no schema could be applied to one. */\nconst SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ: InfrastructureConcernDeclaration = {\n  posture: NOT_APPLICABLE,\n  reason: 'Read-only: writes no value, so there is nothing for a declared schema to validate.',\n};\n\n/** The three read doors. */\nconst RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ: InfrastructureConcernDeclaration = {\n  posture: NOT_APPLICABLE,\n  reason: 'Read-only: writes nothing, so no `.ragSource()` field can change through it.',\n};\n\n/**\n * The pre-built WRITE doors, minus {@link InfrastructureDoor.INSERT_DOCUMENT}, which has its own partial\n * compensation (the cast), and minus {@link InfrastructureDoor.DELETE_MANY}, which materializes no value.\n */\nconst SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason:\n    'The door takes an already-built mutation descriptor. The ordinary UPDATE path validates the '\n    + 'after-image against the resource\\'s main schema; nothing on this path does, so a value outside '\n    + 'a declared Zod constraint is stored as given.',\n  compensation:\n    'Shape only, never values: `describeGuardedMutationInexpressibility` refuses a mutation that '\n    + 'cannot be expressed on every adapter. Nothing checks what the mutation SAYS.',\n};\n\n/**\n * The plain reason SEVEN doors give: they accept `RepositoryOptions` and forward them unchanged.\n *\n * ALL EIGHT doors do that now. {@link InfrastructureDoor.COUNT_DOCUMENTS} states its own cell rather\n * than reusing this one because it has a longer story to tell — it was the one door that accepted no\n * options at all (issue #104), and its cell records that rather than letting the repair erase it.\n * This comment previously read \"every door BUT COUNT_DOCUMENTS accepts them\", which was true when it\n * was written and became a false description of the tier the moment the door was fixed.\n */\nconst TRANSACTION_PARTICIPATION_PRESERVED: InfrastructureConcernDeclaration = {\n  posture: PRESERVED,\n  how:\n    'Accepts `RepositoryOptions` and forwards them to the primitive, so a caller already inside a '\n    + 'transaction enrols this statement in it (Mongo session / PG trx).',\n};\n\n/**\n * The four doors whose only adapter-neutrality claim is that they dispatch a primitive declared on the\n * `BackendResourceRepository` interface — so an adapter omitting one fails to compile rather than\n * throwing on first use. Every raw primitive is declared there and implemented on both persisting arms\n * (the read-only HTTP-API and introspection arms declare each one as an explicit refusal).\n */\nconst ADAPTER_NEUTRALITY_PRESERVED_BY_CONTRACT = (primitive: string): InfrastructureConcernDeclaration => ({\n  posture: PRESERVED,\n  how:\n    `Dispatches \\`${primitive}\\`, which is declared on the \\`BackendResourceRepository\\` interface and `\n    + 'implemented by both the MongoDB and PostgreSQL arms — so an adapter that omits it fails to '\n    + 'compile rather than throwing on first use. No `as any` and no runtime `typeof` probe.',\n});\n\n/**\n * The retention hide as five of the six filter-bearing doors state it: applied at THIS dispatch point\n * and only here, so both adapter arms receive an already-hidden filter and the predicate lives in one\n * place. {@link InfrastructureDoor.COUNT_DOCUMENTS} states a stronger, caller-specific reason and\n * carries its own.\n */\nconst RETENTION_HIDE_PRESERVED_AT_DISPATCH = (consequence: string): InfrastructureConcernDeclaration => ({\n  posture: PRESERVED,\n  how:\n    `The filter passes through \\`applyRetentionHideToRawFilter\\` HERE and only here — ${consequence} `\n    + 'Enforcing it at the single dispatch point rather than in each adapter is what stops it drifting: '\n    + 'a future adapter inherits the predicate by construction.',\n});\n\n/**\n * The materializing write doors' RAG posture, identical in mechanism and differing only in what the\n * sweep reconciles for that door's shape. Moved from each door's own `rag-ingestion-gate: N/A —` comment,\n * which the sibling guard `rag-ingestion-write-door-coverage.guard.test.ts` still requires to be\n * present AT the door; that guard checks the waiver EXISTS, this table records what it says.\n */\nconst RAG_INGESTION_GATE_WAIVED_TO_SWEEP = (bound: string): InfrastructureConcernDeclaration => ({\n  posture: WAIVED,\n  reason:\n    'Below the service tier, so the post-commit ingestion chokepoint cannot observe this door. A '\n    + '`.ragSource()` field written through it is not re-indexed at write time.',\n  compensation: `The hourly RAG reconciliation sweep: ${bound}`,\n});\n\nexport const INFRASTRUCTURE_TIER_CONTRACT: Record<\n  InfrastructureDoor,\n  Record<InfrastructureCrossCuttingConcern, InfrastructureConcernDeclaration>\n> = {\n  [InfrastructureDoor.COUNT_DOCUMENTS]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ,\n    [RETENTION_HIDE]: {\n      posture: PRESERVED,\n      how:\n        'The filter passes through `applyRetentionHideToRawFilter` here and only here. Counting a '\n        + 'hidden row would report a collision against a record the caller cannot see — an existence '\n        + 'oracle for the field-uniqueness-validation caller. The consequence (a later INSERT can then '\n        + 'collide on a plain unique business-key index) is the separate, tracked G-BKEY gate, and is '\n        + 'NOT resolved by re-leaking the row here.',\n    },\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ,\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: {\n      posture: PRESERVED,\n      how:\n        'Accepts `RepositoryOptions` and forwards them to `countByRawFilter`, matching all seven '\n        + 'siblings. It was the ONE door in the tier that accepted none, so a caller inside a '\n        + 'transaction counted OUTSIDE it — the identical shape `bulkUpdateForInfrastructure` records '\n        + 'as a silent correctness hole, at the door nobody enumerated until this table gave every '\n        + 'door a row to fill in. Surfaced by filling the table (issue #104), fixed separately from '\n        + 'the change that declared the contract so the demonstration stayed visible. No caller passes '\n        + 'options today, so the forward is pinned rather than behaviour-verified: '\n        + '`__tests__/infrastructure-tier-transaction-forwarding.test.ts`.',\n    },\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Delegates to `countByRawFilter`. It previously reached `(repository as any).mongooseModel`, '\n        + 'which made it MongoDB-only and left field-uniqueness validation unable to answer \"is this '\n        + 'value already taken?\" on any PostgreSQL-backed resource — a generally-named capability one '\n        + 'adapter did not have.',\n    },\n  },\n\n  [InfrastructureDoor.FIND_MANY]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained row must stay invisible to reads, and this is the single place the predicate is added '\n      + 'for this path.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ,\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: ADAPTER_NEUTRALITY_PRESERVED_BY_CONTRACT('findManyByRawFilter'),\n  },\n\n  [InfrastructureDoor.READ_UNSCOPED_BY_KEY]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: {\n      posture: WAIVED,\n      reason:\n        'Unscoped BY NAME and by design — the only read on the repository contract that takes no '\n        + 'execution context at all. Scope narrowing is the caller\\'s filter to express here.',\n      compensation:\n        'Only the boundary this door does NOT relax: a read that skips tenant scoping must not also '\n        + 'skip erasure retention — those are different questions — so the hide is applied '\n        + 'unconditionally below. Nothing re-adds the scope predicate.',\n    },\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'no caller may opt out of erasure retention by choosing this entry point, however unscoped the '\n      + 'read itself is.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ,\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: ADAPTER_NEUTRALITY_PRESERVED_BY_CONTRACT('readUnscopedByKey'),\n  },\n\n  [InfrastructureDoor.INSERT_DOCUMENT]: {\n    [AUTHORIZATION]: {\n      posture: WAIVED,\n      reason:\n        'Below the service tier, so no principal is resolved — but unlike its siblings this door has '\n        + 'a DECLARED alternative it is not using, and the reason it gives for not using it does not '\n        + 'hold. \"A consumable token is consumed before authentication, so there is no principal to '\n        + 'authorize\" is true of CONSUMPTION and not of MINTING, which is a write the running system '\n        + 'performs inside a flow it controls. `SystemAccessBackendService.createAsSystem` exists for '\n        + 'precisely that principal, and `CONSUMABLE_TOKENS` already declares a CREATE operation '\n        + '(INTERNAL_CALL, ORG_ADMIN, with a requestDto). Routing through it would restore schema '\n        + 'validation, the RAG ingestion hook, the audit trail and the scope-context channel at this '\n        + 'door — five of the eight rows below stop being waivers.',\n      compensation:\n        'Handler-only placement, as for every door here — AND, at this door only, a deliberate '\n        + 'security seal that makes the raw insert load-bearing rather than incidental. '\n        + '`createsOneOffSession` is `.excludeFromCreate().excludeFromUpdate()` so that no '\n        + 'repository-create path can mint a session-establishing token, which leaves `createToken` — '\n        + 'this door\\'s caller — the SOLE minter and therefore the single funnel enforcing '\n        + '`ONE_OFF_SESSION_ABSOLUTE_MAX_MINUTES` fail-closed at issuance. That token is an '\n        + 'impersonation credential: exchanging it mints a JWT session for another user. Routing the '\n        + 'mint through `createAsSystem` would strip the field (measured: the preserve list resolves to '\n        + '`[\"organizationId\",\"userId\"]`, because a defaulted excluded field is deliberately withheld) '\n        + 'and silently mint every such token as non-session-establishing; relaxing the exclusion to '\n        + 'fix that would open a second mint path that never meets the ceiling. So the waiver here is '\n        + 'not an unpaid debt — it is the shape the credential ceiling depends on. See issue #102.',\n    },\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: {\n      posture: WAIVED,\n      reason:\n        'The callers build a COMPLETE document — their own `_id`, their own `createdAt`/`updatedAt` — '\n        + 'so the write deliberately skips the model create path: `Model.castObject` applies the '\n        + 'schema\\'s type CASTS only, no defaults, no timestamps, NO VALIDATION. A value outside a '\n        + 'declared Zod constraint is stored as given.',\n      compensation:\n        'The cast THROWS on a value the schema cannot represent (a non-ObjectId string on an '\n        + '`isForeignKey` path), so a structurally impossible write fails loudly at the write instead '\n        + 'of storing a row no cast filter can ever match — issue #71\\'s silent form. Field-level '\n        + 'constraints are not checked by anything.',\n    },\n    [RETENTION_HIDE]: {\n      posture: NOT_APPLICABLE,\n      reason:\n        'An INSERT creates a brand-new row, so there is no existing row to protect. A retained row is '\n        + 'reached only through a filter, and this statement carries none.',\n    },\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its missing-set row scan picks the row up.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Delegates to `insertRawDocument`, which casts the document through the model before the driver '\n        + 'sees it — the fix for issue #71. Uncast, this tier wrote a string where every sibling queries '\n        + 'an ObjectId, so a row written by this tier was not reliably findable BY this tier '\n        + '(`revokeTokensByRelatedId` matched 0 rows that existed). The PostgreSQL arm routes the same '\n        + 'insert through `toSqlWriteRow` for exactly this reason.',\n    },\n  },\n\n  [InfrastructureDoor.BULK_UPDATE]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a bulk infrastructure update must never rewrite an erased-but-retained row, and retained rows are '\n      + 'excluded from the modified count.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison reconciles the affected chunk sets.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: {\n      posture: PRESERVED,\n      how:\n        'Accepts `RepositoryOptions` and forwards them — and this door is WHY the concern is on this '\n        + 'axis. It did neither until recently, so every bulk infrastructure update committed '\n        + 'immediately regardless of the transaction its caller was inside: `revokeTokensByRelatedId`\\'s '\n        + 'revocation could not be rolled back, and on a driver retry the caller observed a count of 0 '\n        + 'for work that had in fact happened exactly once.',\n    },\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Takes an ADAPTER-NEUTRAL mutation descriptor rather than a raw `{ $set: … }`, and refuses a '\n        + 'mutation it cannot express on every adapter instead of silently degrading. The dialect used '\n        + 'to sit in the SIGNATURE, so every caller wrote MongoDB and a PostgreSQL-backed resource could '\n        + 'not be bulk-updated at all.',\n    },\n  },\n\n  [InfrastructureDoor.DELETE_MANY]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: {\n      posture: NOT_APPLICABLE,\n      reason:\n        'A DELETE writes no value, so there is nothing for a declared schema to validate. This is the '\n        + 'one WRITE door for which the concern is genuinely inapplicable rather than waived — its '\n        + 'siblings all carry a pre-built payload a schema could have checked and did not.',\n    },\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained (erased-but-kept) row is immutable, and DESTROYING one is the sharpest form of '\n      + 'mutating it — the retention posture exists precisely to keep a row that must be kept, so a '\n      + 'framework sweep must not be the thing that reaps it.',\n    ),\n    [RAG_INGESTION_GATE]: {\n      posture: NOT_APPLICABLE,\n      reason:\n        'Materializes no value, so no `.ragSource()` field can change through it and there is nothing '\n        + 'to re-index. The mirror obligation — REMOVING a deleted row\\'s chunks — is not this concern '\n        + 'and is not owned here either: the removal-seam guard '\n        + '(`rag-chunk-removal-seam-coverage.guard.test.ts`) excludes the raw repository doors BY '\n        + 'DECLARATION, bounding every one of them on the hourly reconciliation sweep\\'s orphan pass, '\n        + 'and this door joins that family rather than opening a new question.',\n    },\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Dispatches the interface-declared `deleteManyByRawFilter`, so an adapter that omits it fails '\n        + 'to compile. THE DOOR EXISTS BECAUSE ITS ABSENCE WAS THE DEFECT: with a bulk UPDATE on the '\n        + 'tier and no bulk DELETE, the consumable-tokens cleanup batch had one route to reap rows — '\n        + 'reaching past the contract for `MongoDBService.getConnection()` — which made the framework\\'s '\n        + 'only credential-retention sweep MongoDB-only. It was invisible while every application ran a '\n        + 'mongod beside PostgreSQL, and failed every six hours on the first one (`wonder-crm`) that '\n        + 'did not, with spent password-reset / invitation / magic-link rows accumulating with no '\n        + 'sweep. Note the neutrality this door CANNOT confer: an unexpressible predicate (`$expr`, a '\n        + 'column-to-column comparison) is still the caller\\'s problem, and the batch resolves its one '\n        + 'such lane by reading candidates and comparing in memory.',\n    },\n  },\n\n  [InfrastructureDoor.ATOMIC_GUARDED_MUTATION]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained row is immutable, so the compare-and-swap must never match one.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison reconciles the affected chunk set.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Refuses a mutation that is not adapter-neutral (`describeGuardedMutationInexpressibility`) '\n        + 'BEFORE dispatching, rather than degrading on the arm that cannot express it, and dispatches '\n        + 'an interface-declared primitive.',\n    },\n  },\n\n  [InfrastructureDoor.ATOMIC_INCREMENT_FIELD]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained (erased-but-kept) row is immutable and must never be incremented.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison re-derives the chunk set. In practice this door writes counters, '\n      + 'never corpus text.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Dispatches the interface-declared `atomicIncrementField`. Its predecessor took a MongoDB update '\n        + 'expression and reached for `mongooseModel`, so a counter built on it did not merely degrade '\n        + 'on PostgreSQL — it failed every write, and where the caller swallowed the error (as metering '\n        + 'paths do, so accounting never breaks a served request) the counter silently stayed at zero '\n        + 'and any cap built on it never fired.',\n    },\n  },\n\n  [InfrastructureDoor.ATOMIC_CONDITIONAL_SET]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained row is immutable, so neither the set nor the clear may reach one.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison reconciles the chunk set of a field set or cleared through it.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Dispatches the interface-declared `atomicConditionalSet`. Until the neutral primitives '\n        + 'existed, CLEARING a field had no adapter-neutral expression at all — the only route was the '\n        + 'raw-MongoDB `atomicConditionalUpdate` (since retired), so every clear was silently also a '\n        + 'MongoDB pin. The file-cleanup batch is the case that forced it: it clears stale link '\n        + 'metadata from timed-out and malformed rows, so a PostgreSQL-backed FILES resource would '\n        + 'have accepted writes and then stranded every row that batch exists to normalize.',\n    },\n  },\n};\n\n// ── The boundary of the enumeration, recorded rather than left implicit ──────────────────────────\n\n/**\n * Handler members that resolve a repository and dispatch to it, and are NOT infrastructure doors.\n *\n * The pin discovers the tier behaviourally — \"resolves a repository, then dispatches to it\" — which is\n * the only discovery that survives a rename. That query also finds the one member for which the answer\n * is legitimately different, and it is named here so the exclusion is a declaration a reader can\n * challenge rather than a silent filter inside a test.\n *\n * The pin asserts each of these is actually FOUND by the discovery, so an entry that stops matching\n * cannot quietly shrink the population it is excluded from.\n */\nexport const INFRASTRUCTURE_TIER_OPERATION_DISPATCH_MEMBERS: Readonly<Record<string, string>> = {\n  doByExecutionContext:\n    'The DECLARED-operation dispatcher — the opposite of this tier. It carries an `ExecutionContext` '\n    + 'whose operation the service and controller tiers have already authorized, and `doByPath` / '\n    + '`doByKey` both funnel into it. It is found by the same query because it, too, resolves a '\n    + 'repository and calls it.',\n};\n\n/**\n * Cross-cutting concerns CONSIDERED for {@link InfrastructureCrossCuttingConcern} and deliberately\n * left out, with the reason each collapses into an existing member.\n *\n * Recorded as data, not omitted, because `.claude/rules/invariant-call-site-enumeration.md` #14 is\n * exactly this: a site that DECLARES itself exempt is quieter than a missing one, so the declaration\n * has to be somewhere a reader can check it. Both entries below were checked against code rather than\n * reasoned about — the citations are the point.\n */\nexport enum InfrastructureExcludedConcernCandidate {\n  SIEM_ROUTING = 'siemRouting',\n  SUBJECT_ERASURE_REACHABILITY = 'subjectErasureReachability',\n}\n\nexport const INFRASTRUCTURE_CONCERN_CANDIDATES_EXCLUDED: Record<\n  InfrastructureExcludedConcernCandidate,\n  string\n> = {\n  [InfrastructureExcludedConcernCandidate.SIEM_ROUTING]:\n    'Entailed by AUDIT_TRAIL, not independent of it. The routing service is declared as one that '\n    + '\"dispatches AUDIT EVENTS to org SIEM endpoints\" (`inject/models/service-types.ts`), so its input '\n    + 'is an emitted event. A door that emits none produces nothing to route, and a per-door SIEM cell '\n    + 'could only ever restate that door\\'s audit cell.',\n  [InfrastructureExcludedConcernCandidate.SUBJECT_ERASURE_REACHABILITY]:\n    'Splits cleanly into a half that is already a member and a half that is not a property of the door. '\n    + 'The VISIBILITY-and-immutability half of erasure IS the retention hide — same predicate, same '\n    + 'dispatch point — and is declared per door as RETENTION_HIDE. The DISCOVERY half (can the erasure '\n    + 'orchestrator find the rows?) is answered by the resource graph: `eraseSubjectInPlace` walks the '\n    + 'edges of the subject resource\\'s own configuration, so a row is reachable because of how its '\n    + 'resource is declared, never because of which door wrote it.',\n};\n"]}
+{"version":3,"file":"infrastructure-tier-contract.backend.js","sourceRoot":"","sources":["../../../../../src/base-classes/services/repositories/infrastructure-tier-contract.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBAmBX;AAnBD,WAAY,kBAAkB;IAC5B,gGAAgG;IAChG,yEAAmD,CAAA;IACnD,gFAAgF;IAChF,6DAAuC,CAAA;IACvC,oFAAoF;IACpF,gEAA0C,CAAA;IAC1C,sEAAsE;IACtE,yEAAmD,CAAA;IACnD,qFAAqF;IACrF,iEAA2C,CAAA;IAC3C,+DAA+D;IAC/D,iEAA2C,CAAA;IAC3C,yCAAyC;IACzC,uEAAiD,CAAA;IACjD,iEAAiE;IACjE,qEAA+C,CAAA;IAC/C,wCAAwC;IACxC,qEAA+C,CAAA;AACjD,CAAC,EAnBW,kBAAkB,KAAlB,kBAAkB,QAmB7B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,iCA4DX;AA5DD,WAAY,iCAAiC;IAC3C;;;OAGG;IACH,oEAA+B,CAAA;IAC/B;;;;;;;;;;;OAWG;IACH,qEAAgC,CAAA;IAChC;;;;OAIG;IACH,2EAAsC,CAAA;IACtC;;;;;OAKG;IACH,qEAAgC,CAAA;IAChC;;;;OAIG;IACH,4EAAuC,CAAA;IACvC;;;OAGG;IACH,+DAA0B,CAAA;IAC1B;;;;;;;;;OASG;IACH,2FAAsD,CAAA;IACtD;;;;OAIG;IACH,6EAAwC,CAAA;AAC1C,CAAC,EA5DW,iCAAiC,KAAjC,iCAAiC,QA4D5C;AAED,MAAM,CAAN,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACtC,6CAA6C;IAC7C,uDAAuB,CAAA;IACvB,sFAAsF;IACtF,iDAAiB,CAAA;IACjB,mGAAmG;IACnG,iEAAiC,CAAA;AACnC,CAAC,EAPW,4BAA4B,KAA5B,4BAA4B,QAOvC;AAYD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,4BAA4B,CAAC;AAC3E,MAAM,EACJ,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,yBAAyB,EACzB,kBAAkB,GACnB,GAAG,iCAAiC,CAAC;AAEtC,oGAAoG;AACpG,mGAAmG;AACnG,sGAAsG;AACtG,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,oBAAoB,GAAqC;IAC7D,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,+FAA+F;UAC7F,+FAA+F;UAC/F,yBAAyB;IAC7B,YAAY,EACV,8FAA8F;UAC5F,+EAA+E;CACpF,CAAC;AAEF,yFAAyF;AACzF,MAAM,qBAAqB,GAAqC;IAC9D,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,gGAAgG;UAC9F,4FAA4F;UAC5F,8FAA8F;UAC9F,oCAAoC;IACxC,YAAY,EACV,iGAAiG;UAC/F,gGAAgG;UAChG,sFAAsF;CAC3F,CAAC;AAEF,kGAAkG;AAClG,MAAM,kBAAkB,GAAqC;IAC3D,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,mFAAmF;IAC3F,YAAY,EAAE,IAAI;CACnB,CAAC;AAEF,gGAAgG;AAChG,MAAM,wCAAwC,GAAqC;IACjF,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,oFAAoF;CAC7F,CAAC;AAEF,4BAA4B;AAC5B,MAAM,yCAAyC,GAAqC;IAClF,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,8EAA8E;CACvF,CAAC;AAEF;;;GAGG;AACH,MAAM,wCAAwC,GAAqC;IACjF,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,8FAA8F;UAC5F,iGAAiG;UACjG,+CAA+C;IACnD,YAAY,EACV,8FAA8F;UAC5F,8EAA8E;CACnF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mCAAmC,GAAqC;IAC5E,OAAO,EAAE,SAAS;IAClB,GAAG,EACD,+FAA+F;UAC7F,mEAAmE;CACxE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,wCAAwC,GAAG,CAAC,SAAiB,EAAoC,EAAE,CAAC,CAAC;IACzG,OAAO,EAAE,SAAS;IAClB,GAAG,EACD,gBAAgB,SAAS,2EAA2E;UAClG,6FAA6F;UAC7F,uFAAuF;CAC5F,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,oCAAoC,GAAG,CAAC,WAAmB,EAAoC,EAAE,CAAC,CAAC;IACvG,OAAO,EAAE,SAAS;IAClB,GAAG,EACD,oFAAoF,WAAW,GAAG;UAChG,mGAAmG;UACnG,0DAA0D;CAC/D,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,kCAAkC,GAAG,CAAC,KAAa,EAAoC,EAAE,CAAC,CAAC;IAC/F,OAAO,EAAE,MAAM;IACf,MAAM,EACJ,8FAA8F;UAC5F,0EAA0E;IAC9E,YAAY,EAAE,wCAAwC,KAAK,EAAE;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAGrC;IACF,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE;QACpC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE;YAChB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,2FAA2F;kBACzF,4FAA4F;kBAC5F,8FAA8F;kBAC9F,6FAA6F;kBAC7F,0CAA0C;SAC/C;QACD,CAAC,kBAAkB,CAAC,EAAE,yCAAyC;QAC/D,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE;YAC3B,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,0FAA0F;kBACxF,qFAAqF;kBACrF,6FAA6F;kBAC7F,0FAA0F;kBAC1F,2FAA2F;kBAC3F,8FAA8F;kBAC9F,0EAA0E;kBAC1E,iEAAiE;SACtE;QACD,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,8FAA8F;kBAC5F,4FAA4F;kBAC5F,6FAA6F;kBAC7F,uBAAuB;SAC5B;KACF;IAED,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;QAC9B,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,mGAAmG;cACjG,gBAAgB,CACnB;QACD,CAAC,kBAAkB,CAAC,EAAE,yCAAyC;QAC/D,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE,wCAAwC,CAAC,qBAAqB,CAAC;KACtF;IAED,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE;QACzC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE;YAChB,OAAO,EAAE,MAAM;YACf,MAAM,EACJ,0FAA0F;kBACxF,oFAAoF;YACxF,YAAY,EACV,6FAA6F;kBAC3F,kFAAkF;kBAClF,6DAA6D;SAClE;QACD,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,gGAAgG;cAC9F,iBAAiB,CACpB;QACD,CAAC,kBAAkB,CAAC,EAAE,yCAAyC;QAC/D,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE,wCAAwC,CAAC,mBAAmB,CAAC;KACpF;IAED,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE;QACpC,CAAC,aAAa,CAAC,EAAE;YACf,OAAO,EAAE,MAAM;YACf,MAAM,EACJ,8FAA8F;kBAC5F,4FAA4F;kBAC5F,2FAA2F;kBAC3F,4FAA4F;kBAC5F,6FAA6F;kBAC7F,wFAAwF;kBACxF,yFAAyF;kBACzF,4FAA4F;kBAC5F,yDAAyD;YAC7D,YAAY,EACV,wFAAwF;kBACtF,+EAA+E;kBAC/E,kFAAkF;kBAClF,6FAA6F;kBAC7F,kFAAkF;kBAClF,mFAAmF;kBACnF,4FAA4F;kBAC5F,+FAA+F;kBAC/F,8FAA8F;kBAC9F,4FAA4F;kBAC5F,6FAA6F;kBAC7F,yFAAyF;SAC9F;QACD,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE;YACnB,OAAO,EAAE,MAAM;YACf,MAAM,EACJ,+FAA+F;kBAC7F,wFAAwF;kBACxF,0FAA0F;kBAC1F,6CAA6C;YACjD,YAAY,EACV,sFAAsF;kBACpF,6FAA6F;kBAC7F,yFAAyF;kBACzF,0CAA0C;SAC/C;QACD,CAAC,cAAc,CAAC,EAAE;YAChB,OAAO,EAAE,cAAc;YACvB,MAAM,EACJ,+FAA+F;kBAC7F,iEAAiE;SACtE;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,4CAA4C,CAC7C;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,iGAAiG;kBAC/F,gGAAgG;kBAChG,oFAAoF;kBACpF,8FAA8F;kBAC9F,yDAAyD;SAC9D;KACF;IAED,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE;QAChC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,oGAAoG;cAClG,mCAAmC,CACtC;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,gEAAgE,CACjE;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE;YAC3B,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,8FAA8F;kBAC5F,qFAAqF;kBACrF,gGAAgG;kBAChG,8FAA8F;kBAC9F,kDAAkD;SACvD;QACD,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,8FAA8F;kBAC5F,8FAA8F;kBAC9F,gGAAgG;kBAChG,6BAA6B;SAClC;KACF;IAED,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE;QAChC,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE;YACnB,OAAO,EAAE,cAAc;YACvB,MAAM,EACJ,+FAA+F;kBAC7F,0FAA0F;kBAC1F,iFAAiF;SACtF;QACD,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,4FAA4F;cAC1F,6FAA6F;cAC7F,sDAAsD,CACzD;QACD,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,cAAc;YACvB,MAAM,EACJ,+FAA+F;kBAC7F,8FAA8F;kBAC9F,uDAAuD;kBACvD,yFAAyF;kBACzF,6FAA6F;kBAC7F,qEAAqE;SAC1E;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,+FAA+F;kBAC7F,4FAA4F;kBAC5F,4FAA4F;kBAC5F,gGAAgG;kBAChG,+FAA+F;kBAC/F,4FAA4F;kBAC5F,yFAAyF;kBACzF,6FAA6F;kBAC7F,8FAA8F;kBAC9F,0DAA0D;SAC/D;KACF;IAED,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,EAAE;QAC5C,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,4EAA4E,CAC7E;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,+DAA+D,CAChE;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,6FAA6F;kBAC3F,8FAA8F;kBAC9F,kCAAkC;SACvC;KACF;IAED,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE;QAC3C,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,8EAA8E,CAC/E;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,8FAA8F;cAC5F,oBAAoB,CACvB;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,kGAAkG;kBAChG,8FAA8F;kBAC9F,+FAA+F;kBAC/F,6FAA6F;kBAC7F,sCAAsC;SAC3C;KACF;IAED,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE;QAC3C,CAAC,aAAa,CAAC,EAAE,oBAAoB;QACrC,CAAC,cAAc,CAAC,EAAE,qBAAqB;QACvC,CAAC,iBAAiB,CAAC,EAAE,wCAAwC;QAC7D,CAAC,cAAc,CAAC,EAAE,oCAAoC,CACpD,8EAA8E,CAC/E;QACD,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CACtD,2FAA2F,CAC5F;QACD,CAAC,WAAW,CAAC,EAAE,kBAAkB;QACjC,CAAC,yBAAyB,CAAC,EAAE,mCAAmC;QAChE,CAAC,kBAAkB,CAAC,EAAE;YACpB,OAAO,EAAE,SAAS;YAClB,GAAG,EACD,yFAAyF;kBACvF,8FAA8F;kBAC9F,4FAA4F;kBAC5F,uFAAuF;kBACvF,0FAA0F;kBAC1F,kFAAkF;SACvF;KACF;CACF,CAAC;AAEF,oGAAoG;AAEpG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAqC;IAC9F,oBAAoB,EAClB,kGAAkG;UAChG,6FAA6F;UAC7F,2FAA2F;UAC3F,0BAA0B;CAC/B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAN,IAAY,sCAGX;AAHD,WAAY,sCAAsC;IAChD,sEAA4B,CAAA;IAC5B,qGAA2D,CAAA;AAC7D,CAAC,EAHW,sCAAsC,KAAtC,sCAAsC,QAGjD;AAED,MAAM,CAAC,MAAM,0CAA0C,GAGnD;IACF,CAAC,sCAAsC,CAAC,YAAY,CAAC,EACnD,8FAA8F;UAC5F,mGAAmG;UACnG,kGAAkG;UAClG,kDAAkD;IACtD,CAAC,sCAAsC,CAAC,4BAA4B,CAAC,EACnE,qGAAqG;UACnG,+FAA+F;UAC/F,mGAAmG;UACnG,kGAAkG;UAClG,+FAA+F;UAC/F,6DAA6D;CAClE,CAAC","sourcesContent":["/**\n * The contract every INFRASTRUCTURE-TIER door on {@link RepositoriesRegistryHandlerBackendService}\n * answers to.\n *\n * ## Why this file exists\n *\n * The infrastructure tier is a deliberate bypass: its doors sit BELOW the service tier, take a\n * pre-built filter or an already-final document, and run no declared operation and no authorization.\n * Its clearest warrant is the field-uniqueness check behind the `validate-field` route. A field\n * declared unique with `scope: 'global'` must be counted across the ENTIRE collection — \"no additional\n * filter (intentional — check entire collection)\" — including tenants the caller cannot see, and the\n * answer returned as nothing but a number. A declared operation cannot serve that: `buildContextualFilter`\n * would scope the count to the caller's tenant and the answer would simply be wrong. So the door\n * deliberately waives tenant scoping and deliberately does NOT waive the retention hide, because\n * counting a hidden row would turn the same number into an existence oracle.\n *\n * Its WEAKEST warrant is the one the tier has most often cited, and issue #100 asked for it to be\n * settled: \"a consumable token is minted by a system action and consumed BEFORE authentication, so\n * there is genuinely no principal to authorize\". That conflates two moments. CONSUMPTION has no\n * principal — the token IS the credential. MINTING is a write the running system performs inside a\n * flow it controls, and the framework already has a vocabulary for exactly that: `createAsSystem`\n * fail-closes unless the resource opts in with `systemAccessPolicy.create = ALLOWED`, synthesises an\n * APPLICATION-scope super-admin context, and dispatches the resource's OWN declared CREATE —\n * which `CONSUMABLE_TOKENS` declares. So the framework does not owe a new \"system principal\"\n * vocabulary.\n *\n * That settles the FRAMEWORK question and deliberately does not settle the CALLER's: this door turns\n * out to have a second, stronger reason to bypass the declared pipeline. `createsOneOffSession` is\n * sealed `.excludeFromCreate()` so that no repository-create path can mint a session-establishing\n * token, which is what makes `createToken` the sole minter and therefore the single funnel enforcing\n * the impersonation-credential lifetime ceiling. A raw door is the shape that seal depends on. See\n * `INSERT_DOCUMENT / authorization` below, and issue #102.\n *\n * What was missing is not correctness, it is a CONTRACT. Each door carried its own hand-written prose\n * about which cross-cutting invariant it upheld and which it skipped, so the tier's posture existed\n * only as a set of independent rationales. Adding a door, or a new invariant, meant re-deriving the\n * obligation by hand at every site with nothing mechanical to say whether it had been done — the exact\n * failure shape `.claude/rules/invariant-call-site-enumeration.md` records, where an invariant is\n * applied at one of its N sites and the miss is invisible.\n *\n * So the posture is DECLARED here instead, once, as data. Because the table is typed\n * `Record<InfrastructureDoor, Record<InfrastructureCrossCuttingConcern, …>>`, adding a member to\n * EITHER enum fails to compile until every new cell is filled in. That is the property this file is\n * for: the missing case becomes a compiler error rather than something a reviewer has to notice.\n *\n * ## The tier is NINE doors, not the four that share a name\n *\n * Issue #100 listed four, all suffixed `*ForInfrastructure`. That is the population the SUFFIX\n * describes, and it was half the tier. Four more handler members have the identical posture under a\n * different name — `atomicIncrementField` and `atomicConditionalSet` carry, verbatim, the same\n * `@internal Framework-internal infrastructure primitive — NOT part of the operation lifecycle. The\n * caller owns authorization, scope-aware filter construction, and audit logging.` that the suffixed\n * doors carry; `atomicGuardedMutation` and `readUnscopedByKey` likewise dispatch a caller-built filter\n * straight to an adapter with no operation above them.\n *\n * That is why {@link INFRASTRUCTURE_TIER_CONTRACT}'s pin discovers the tier by what a member DOES —\n * resolving a repository and dispatching to it — rather than by what it is called. Enumerating by name\n * finds every site that agrees with you about naming, which is `invariant-call-site-enumeration.md`\n * #12 and #20 in one. The sibling guard `rag-ingestion-write-door-coverage.guard.test.ts` had already\n * reached the same population from the write side: three of its five raw write doors carry no suffix.\n *\n * ## What this file is NOT\n *\n * It does not gate anything at runtime. A door's behaviour lives in the door; this is the record of\n * what that behaviour promises, kept adjacent and kept complete. Turning it into a runtime guard would\n * add a second authority that can disagree with the code, which is the failure this repository has\n * paid for repeatedly (see `.claude/rules/one-source-of-truth.md`).\n *\n * It is also not a place to fix a door. Filling the table surfaced one real asymmetry — see\n * {@link InfrastructureCrossCuttingConcern.TRANSACTION_PARTICIPATION} at\n * {@link InfrastructureDoor.COUNT_DOCUMENTS} — and it is RECORDED here rather than quietly repaired,\n * because a waiver nobody can see is the condition this contract exists to end.\n *\n * @see issue #100 — the decision this file implements.\n */\n\n/**\n * The doors.\n *\n * Each value is the METHOD NAME on the handler, deliberately, so\n * `__tests__/infrastructure-tier-contract.guard.test.ts` can discover the real tier from the handler's\n * source and assert this enum matches it exactly. A hand-maintained list that merely LOOKS complete is\n * what this file exists to prevent, so the list is checked against the class rather than trusted.\n */\nexport enum InfrastructureDoor {\n  /** Backs field-uniqueness validation, which runs INSIDE an in-flight operation's validation. */\n  COUNT_DOCUMENTS = 'countDocumentsForInfrastructure',\n  /** Multi-row read for a framework-internal reader (consumable-token lookup). */\n  FIND_MANY = 'findManyForInfrastructure',\n  /** Single-row read below BOTH the operation tier and the execution-context tier. */\n  READ_UNSCOPED_BY_KEY = 'readUnscopedByKey',\n  /** INSERT of an already-final document (consumable-token minting). */\n  INSERT_DOCUMENT = 'insertDocumentForInfrastructure',\n  /** Multi-row guarded write (token revocation by relatedId, usage-record marking). */\n  BULK_UPDATE = 'bulkUpdateForInfrastructure',\n  /** Multi-row DELETE (the consumable-token retention sweep). */\n  DELETE_MANY = 'deleteManyForInfrastructure',\n  /** Single-row compare-and-swap write. */\n  ATOMIC_GUARDED_MUTATION = 'atomicGuardedMutation',\n  /** Single-row counter increment (metering, quota accounting). */\n  ATOMIC_INCREMENT_FIELD = 'atomicIncrementField',\n  /** Single-row conditional set/clear. */\n  ATOMIC_CONDITIONAL_SET = 'atomicConditionalSet',\n}\n\n/**\n * The cross-cutting invariants a door must answer for explicitly.\n *\n * ## The admission criterion, so the next member is not settled by taste\n *\n * A concern belongs here when it is an invariant that holds across the whole persistence boundary AND\n * a door can silently fail to uphold it. Members arrive on one of two bases, and each member's own\n * doc-comment names which:\n *\n *  - **conferred from above** — an ordinary declared operation gets it for free at the controller or\n *    service tier, and a door that runs no operation therefore does not (authorization, tenant\n *    scoping, schema validation, the RAG ingestion gate, the audit trail);\n *  - **promised by the door itself** — nothing above confers it; the door's own general name promises\n *    it, and the family has broken it in production (retention hide, transaction participation,\n *    adapter neutrality).\n *\n * This set is OPEN. Adding a member is the point: it immediately breaks compilation at every door\n * until each declares a posture. Candidates DELIBERATELY excluded are recorded as data in\n * {@link INFRASTRUCTURE_CONCERN_CANDIDATES_EXCLUDED} rather than left absent — an absence is\n * indistinguishable from an oversight, which is the shape this whole file is about.\n */\nexport enum InfrastructureCrossCuttingConcern {\n  /**\n   * CONFERRED FROM ABOVE. Who may do this. The controller resolves it from the declared operation's\n   * roles and variant; these doors run no operation, so nothing resolves a principal.\n   */\n  AUTHORIZATION = 'authorization',\n  /**\n   * CONFERRED FROM ABOVE. Which TENANT'S rows this statement may reach. The adapters' own\n   * `buildContextualFilter` injects the scope FK (organizationId / userId) into every operation-tier\n   * filter; the raw primitives these doors dispatch deliberately do not call it — \"the caller's filter\n   * is the whole confinement, by design\".\n   *\n   * Distinct from {@link AUTHORIZATION} on purpose, and the distinction is the tier's own: the handler\n   * states at `readUnscopedByKey` that \"a read that skips tenant scoping must NOT also skip erasure\n   * retention: those are different questions\". Roles and rows are two gates, answered from two inputs,\n   * and fusing them is what `.claude/rules/administrative-continuity-floors.md` records as producing\n   * cross-tenant reach nobody declared.\n   */\n  TENANT_SCOPING = 'tenantScoping',\n  /**\n   * CONFERRED FROM ABOVE. That a written value was checked against a declared schema. The controller's\n   * `validateRequestData` parses the payload through the operation's `requestDto` before any write;\n   * these doors take an already-built document or mutation descriptor and no Zod schema sees it.\n   */\n  SCHEMA_VALIDATION = 'schemaValidation',\n  /**\n   * PROMISED BY THE DOOR. An erased-but-retained row must stay invisible to reads and unaffected by\n   * writes — \"kept but frozen\". The tier applies it at its own single dispatch point\n   * (`applyRetentionHideToRawFilter`) rather than in each adapter, so a future adapter inherits it by\n   * construction.\n   */\n  RETENTION_HIDE = 'retentionHide',\n  /**\n   * CONFERRED FROM ABOVE. A `.ragSource()` field changing must re-derive the affected chunk set. The\n   * hook lives at the service tier's single post-commit chokepoint, which is ABOVE these doors, so no\n   * door can feed it.\n   */\n  RAG_INGESTION_GATE = 'ragIngestionGate',\n  /**\n   * CONFERRED FROM ABOVE. A security-relevant action must leave an auditable record. The operation\n   * lifecycle emits it; no lifecycle runs here.\n   */\n  AUDIT_TRAIL = 'auditTrail',\n  /**\n   * PROMISED BY THE DOOR. A statement issued inside a caller's transaction must ENROL in it. Every\n   * underlying primitive accepts `RepositoryOptions` and both adapters honour it, so whether a door\n   * participates is decided entirely by whether the door accepts and forwards them.\n   *\n   * This is a member because the family has already lost it once, silently and expensively:\n   * `bulkUpdateForInfrastructure` neither accepted nor forwarded options, so `revokeTokensByRelatedId`\n   * committed immediately regardless of its caller's transaction and a driver retry observed a count\n   * of 0 for work that had happened exactly once.\n   */\n  TRANSACTION_PARTICIPATION = 'transactionParticipation',\n  /**\n   * PROMISED BY THE DOOR. A generally-named capability must work on every persistence adapter, not\n   * only the one it was written against. A member here is one the family has broken twice — both\n   * breakages were a reach for `(repository as any).mongooseModel` behind a neutral-sounding name.\n   */\n  ADAPTER_NEUTRALITY = 'adapterNeutrality',\n}\n\nexport enum InfrastructureConcernPosture {\n  /** The door itself upholds the invariant. */\n  PRESERVED = 'preserved',\n  /** The invariant could apply and deliberately is not upheld. A reason is required. */\n  WAIVED = 'waived',\n  /** The invariant cannot apply to this door's shape at all (e.g. a retention hide on an INSERT). */\n  NOT_APPLICABLE = 'not-applicable',\n}\n\n/**\n * `compensation` is the field that makes a waiver reviewable: it names what ELSE catches the gap, or\n * is `null` to state plainly that nothing does. A waiver with no compensation is not forbidden — it is\n * simply visible, which is the whole ask of issue #100.\n */\nexport type InfrastructureConcernDeclaration =\n  | { posture: InfrastructureConcernPosture.PRESERVED; how: string }\n  | { posture: InfrastructureConcernPosture.WAIVED; reason: string; compensation: string | null }\n  | { posture: InfrastructureConcernPosture.NOT_APPLICABLE; reason: string };\n\nconst { PRESERVED, WAIVED, NOT_APPLICABLE } = InfrastructureConcernPosture;\nconst {\n  AUTHORIZATION,\n  TENANT_SCOPING,\n  SCHEMA_VALIDATION,\n  RETENTION_HIDE,\n  RAG_INGESTION_GATE,\n  AUDIT_TRAIL,\n  TRANSACTION_PARTICIPATION,\n  ADAPTER_NEUTRALITY,\n} = InfrastructureCrossCuttingConcern;\n\n// ── Declarations shared verbatim across doors ────────────────────────────────────────────────────\n// Written once where the reason is genuinely the same one. Where a door's reason is its own, it is\n// written at the door — moved from that door's JSDoc rather than paraphrased, so the rationale exists\n// in exactly one place and cannot drift from the copy it was summarised into.\n\n/**\n * Identical at every door. The placement note is the real mitigation: these members live on the\n * HANDLER and not on the `BackendResourceRepository` interface an application's custom code is handed.\n */\nconst AUTHORIZATION_WAIVED: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason:\n    'Below the service tier: no declared operation runs, so there is no principal to resolve. The '\n    + 'caller authorizes before calling; `executionContext` here is error context only and is never '\n    + 'read for authorization.',\n  compensation:\n    'Declared on the handler rather than on the `BackendResourceRepository` interface, so custom '\n    + 'application code cannot reach these doors through the repository it is given.',\n};\n\n/** Identical at every door: the caller's filter or document is the whole confinement. */\nconst TENANT_SCOPING_WAIVED: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason:\n    'The adapters\\' `buildContextualFilter` — which injects the resource\\'s scope FK — runs on the '\n    + 'operation-tier paths only. A raw primitive takes the caller\\'s filter as given, so a door '\n    + 'reaching a scope-bearing resource without its scope predicate returns cross-tenant rows and '\n    + 'nothing below the door re-adds it.',\n  compensation:\n    'Handler-only placement (as for authorization), plus the narrowness of the callers: the tier is '\n    + 'reached today only by field-uniqueness validation, consumable tokens and usage metering, each '\n    + 'of which builds its own filter. Nothing mechanical enforces that on a future caller.',\n};\n\n/** Identical at every door: the door emits nothing, and nothing downstream substitutes for it. */\nconst AUDIT_TRAIL_WAIVED: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason: 'No operation lifecycle runs, so no auditable event is emitted by the door itself.',\n  compensation: null,\n};\n\n/** The three read doors: a read materializes no value, so no schema could be applied to one. */\nconst SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ: InfrastructureConcernDeclaration = {\n  posture: NOT_APPLICABLE,\n  reason: 'Read-only: writes no value, so there is nothing for a declared schema to validate.',\n};\n\n/** The three read doors. */\nconst RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ: InfrastructureConcernDeclaration = {\n  posture: NOT_APPLICABLE,\n  reason: 'Read-only: writes nothing, so no `.ragSource()` field can change through it.',\n};\n\n/**\n * The pre-built WRITE doors, minus {@link InfrastructureDoor.INSERT_DOCUMENT}, which has its own partial\n * compensation (the cast), and minus {@link InfrastructureDoor.DELETE_MANY}, which materializes no value.\n */\nconst SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE: InfrastructureConcernDeclaration = {\n  posture: WAIVED,\n  reason:\n    'The door takes an already-built mutation descriptor. The ordinary UPDATE path validates the '\n    + 'after-image against the resource\\'s main schema; nothing on this path does, so a value outside '\n    + 'a declared Zod constraint is stored as given.',\n  compensation:\n    'Shape only, never values: `describeGuardedMutationInexpressibility` refuses a mutation that '\n    + 'cannot be expressed on every adapter. Nothing checks what the mutation SAYS.',\n};\n\n/**\n * The plain reason SEVEN doors give: they accept `RepositoryOptions` and forward them unchanged.\n *\n * ALL EIGHT doors do that now. {@link InfrastructureDoor.COUNT_DOCUMENTS} states its own cell rather\n * than reusing this one because it has a longer story to tell — it was the one door that accepted no\n * options at all (issue #104), and its cell records that rather than letting the repair erase it.\n * This comment previously read \"every door BUT COUNT_DOCUMENTS accepts them\", which was true when it\n * was written and became a false description of the tier the moment the door was fixed.\n */\nconst TRANSACTION_PARTICIPATION_PRESERVED: InfrastructureConcernDeclaration = {\n  posture: PRESERVED,\n  how:\n    'Accepts `RepositoryOptions` and forwards them to the primitive, so a caller already inside a '\n    + 'transaction enrols this statement in it (Mongo session / PG trx).',\n};\n\n/**\n * The four doors whose only adapter-neutrality claim is that they dispatch a primitive declared on the\n * `BackendResourceRepository` interface — so an adapter omitting one fails to compile rather than\n * throwing on first use. Every raw primitive is declared there and implemented on both persisting arms\n * (the read-only HTTP-API and introspection arms declare each one as an explicit refusal).\n */\nconst ADAPTER_NEUTRALITY_PRESERVED_BY_CONTRACT = (primitive: string): InfrastructureConcernDeclaration => ({\n  posture: PRESERVED,\n  how:\n    `Dispatches \\`${primitive}\\`, which is declared on the \\`BackendResourceRepository\\` interface and `\n    + 'implemented by both the MongoDB and PostgreSQL arms — so an adapter that omits it fails to '\n    + 'compile rather than throwing on first use. No `as any` and no runtime `typeof` probe.',\n});\n\n/**\n * The retention hide as five of the six filter-bearing doors state it: applied at THIS dispatch point\n * and only here, so both adapter arms receive an already-hidden filter and the predicate lives in one\n * place. {@link InfrastructureDoor.COUNT_DOCUMENTS} states a stronger, caller-specific reason and\n * carries its own.\n */\nconst RETENTION_HIDE_PRESERVED_AT_DISPATCH = (consequence: string): InfrastructureConcernDeclaration => ({\n  posture: PRESERVED,\n  how:\n    `The filter passes through \\`applyRetentionHideToRawFilter\\` HERE and only here — ${consequence} `\n    + 'Enforcing it at the single dispatch point rather than in each adapter is what stops it drifting: '\n    + 'a future adapter inherits the predicate by construction.',\n});\n\n/**\n * The materializing write doors' RAG posture, identical in mechanism and differing only in what the\n * sweep reconciles for that door's shape. Moved from each door's own `rag-ingestion-gate: N/A —` comment,\n * which the sibling guard `rag-ingestion-write-door-coverage.guard.test.ts` still requires to be\n * present AT the door; that guard checks the waiver EXISTS, this table records what it says.\n */\nconst RAG_INGESTION_GATE_WAIVED_TO_SWEEP = (bound: string): InfrastructureConcernDeclaration => ({\n  posture: WAIVED,\n  reason:\n    'Below the service tier, so the post-commit ingestion chokepoint cannot observe this door. A '\n    + '`.ragSource()` field written through it is not re-indexed at write time.',\n  compensation: `The hourly RAG reconciliation sweep: ${bound}`,\n});\n\nexport const INFRASTRUCTURE_TIER_CONTRACT: Record<\n  InfrastructureDoor,\n  Record<InfrastructureCrossCuttingConcern, InfrastructureConcernDeclaration>\n> = {\n  [InfrastructureDoor.COUNT_DOCUMENTS]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ,\n    [RETENTION_HIDE]: {\n      posture: PRESERVED,\n      how:\n        'The filter passes through `applyRetentionHideToRawFilter` here and only here. Counting a '\n        + 'hidden row would report a collision against a record the caller cannot see — an existence '\n        + 'oracle for the field-uniqueness-validation caller. The consequence (a later INSERT can then '\n        + 'collide on a plain unique business-key index) is the separate, tracked G-BKEY gate, and is '\n        + 'NOT resolved by re-leaking the row here.',\n    },\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ,\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: {\n      posture: PRESERVED,\n      how:\n        'Accepts `RepositoryOptions` and forwards them to `countByRawFilter`, matching all seven '\n        + 'siblings. It was the ONE door in the tier that accepted none, so a caller inside a '\n        + 'transaction counted OUTSIDE it — the identical shape `bulkUpdateForInfrastructure` records '\n        + 'as a silent correctness hole, at the door nobody enumerated until this table gave every '\n        + 'door a row to fill in. Surfaced by filling the table (issue #104), fixed separately from '\n        + 'the change that declared the contract so the demonstration stayed visible. No caller passes '\n        + 'options today, so the forward is pinned rather than behaviour-verified: '\n        + '`__tests__/infrastructure-tier-transaction-forwarding.test.ts`.',\n    },\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Delegates to `countByRawFilter`. It previously reached `(repository as any).mongooseModel`, '\n        + 'which made it MongoDB-only and left field-uniqueness validation unable to answer \"is this '\n        + 'value already taken?\" on any PostgreSQL-backed resource — a generally-named capability one '\n        + 'adapter did not have.',\n    },\n  },\n\n  [InfrastructureDoor.FIND_MANY]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained row must stay invisible to reads, and this is the single place the predicate is added '\n      + 'for this path.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ,\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: ADAPTER_NEUTRALITY_PRESERVED_BY_CONTRACT('findManyByRawFilter'),\n  },\n\n  [InfrastructureDoor.READ_UNSCOPED_BY_KEY]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: {\n      posture: WAIVED,\n      reason:\n        'Unscoped BY NAME and by design — the only read on the repository contract that takes no '\n        + 'execution context at all. Scope narrowing is the caller\\'s filter to express here.',\n      compensation:\n        'Only the boundary this door does NOT relax: a read that skips tenant scoping must not also '\n        + 'skip erasure retention — those are different questions — so the hide is applied '\n        + 'unconditionally below. Nothing re-adds the scope predicate.',\n    },\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_NOT_APPLICABLE_ON_READ,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'no caller may opt out of erasure retention by choosing this entry point, however unscoped the '\n      + 'read itself is.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_NOT_APPLICABLE_ON_READ,\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: ADAPTER_NEUTRALITY_PRESERVED_BY_CONTRACT('readUnscopedByKey'),\n  },\n\n  [InfrastructureDoor.INSERT_DOCUMENT]: {\n    [AUTHORIZATION]: {\n      posture: WAIVED,\n      reason:\n        'Below the service tier, so no principal is resolved — but unlike its siblings this door has '\n        + 'a DECLARED alternative it is not using, and the reason it gives for not using it does not '\n        + 'hold. \"A consumable token is consumed before authentication, so there is no principal to '\n        + 'authorize\" is true of CONSUMPTION and not of MINTING, which is a write the running system '\n        + 'performs inside a flow it controls. `SystemAccessBackendService.createAsSystem` exists for '\n        + 'precisely that principal, and `CONSUMABLE_TOKENS` already declares a CREATE operation '\n        + '(INTERNAL_CALL, ORG_ADMIN, with a requestDto). Routing through it would restore schema '\n        + 'validation, the RAG ingestion hook, the audit trail and the scope-context channel at this '\n        + 'door — five of the eight rows below stop being waivers.',\n      compensation:\n        'Handler-only placement, as for every door here — AND, at this door only, a deliberate '\n        + 'security seal that makes the raw insert load-bearing rather than incidental. '\n        + '`createsOneOffSession` is `.excludeFromCreate().excludeFromUpdate()` so that no '\n        + 'repository-create path can mint a session-establishing token, which leaves `createToken` — '\n        + 'this door\\'s caller — the SOLE minter and therefore the single funnel enforcing '\n        + '`ONE_OFF_SESSION_ABSOLUTE_MAX_MINUTES` fail-closed at issuance. That token is an '\n        + 'impersonation credential: exchanging it mints a JWT session for another user. Routing the '\n        + 'mint through `createAsSystem` would strip the field (measured: the preserve list resolves to '\n        + '`[\"organizationId\",\"userId\"]`, because a defaulted excluded field is deliberately withheld) '\n        + 'and silently mint every such token as non-session-establishing; relaxing the exclusion to '\n        + 'fix that would open a second mint path that never meets the ceiling. So the waiver here is '\n        + 'not an unpaid debt — it is the shape the credential ceiling depends on. See issue #102.',\n    },\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: {\n      posture: WAIVED,\n      reason:\n        'The callers build a COMPLETE document — their own `_id`, their own `createdAt`/`updatedAt` — '\n        + 'so the write deliberately skips the model create path: `Model.castObject` applies the '\n        + 'schema\\'s type CASTS only, no defaults, no timestamps, NO VALIDATION. A value outside a '\n        + 'declared Zod constraint is stored as given.',\n      compensation:\n        'The cast THROWS on a value the schema cannot represent (a non-ObjectId string on an '\n        + '`isForeignKey` path), so a structurally impossible write fails loudly at the write instead '\n        + 'of storing a row no cast filter can ever match — issue #71\\'s silent form. Field-level '\n        + 'constraints are not checked by anything.',\n    },\n    [RETENTION_HIDE]: {\n      posture: NOT_APPLICABLE,\n      reason:\n        'An INSERT creates a brand-new row, so there is no existing row to protect. A retained row is '\n        + 'reached only through a filter, and this statement carries none.',\n    },\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its missing-set row scan picks the row up.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Delegates to `insertRawDocument`, which casts the document through the model before the driver '\n        + 'sees it — the fix for issue #71. Uncast, this tier wrote a string where every sibling queries '\n        + 'an ObjectId, so a row written by this tier was not reliably findable BY this tier '\n        + '(`revokeTokensByRelatedId` matched 0 rows that existed). The PostgreSQL arm routes the same '\n        + 'insert through `toSqlWriteRow` for exactly this reason.',\n    },\n  },\n\n  [InfrastructureDoor.BULK_UPDATE]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a bulk infrastructure update must never rewrite an erased-but-retained row, and retained rows are '\n      + 'excluded from the modified count.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison reconciles the affected chunk sets.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: {\n      posture: PRESERVED,\n      how:\n        'Accepts `RepositoryOptions` and forwards them — and this door is WHY the concern is on this '\n        + 'axis. It did neither until recently, so every bulk infrastructure update committed '\n        + 'immediately regardless of the transaction its caller was inside: `revokeTokensByRelatedId`\\'s '\n        + 'revocation could not be rolled back, and on a driver retry the caller observed a count of 0 '\n        + 'for work that had in fact happened exactly once.',\n    },\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Takes an ADAPTER-NEUTRAL mutation descriptor rather than a raw `{ $set: … }`, and refuses a '\n        + 'mutation it cannot express on every adapter instead of silently degrading. The dialect used '\n        + 'to sit in the SIGNATURE, so every caller wrote MongoDB and a PostgreSQL-backed resource could '\n        + 'not be bulk-updated at all.',\n    },\n  },\n\n  [InfrastructureDoor.DELETE_MANY]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: {\n      posture: NOT_APPLICABLE,\n      reason:\n        'A DELETE writes no value, so there is nothing for a declared schema to validate. This is the '\n        + 'one WRITE door for which the concern is genuinely inapplicable rather than waived — its '\n        + 'siblings all carry a pre-built payload a schema could have checked and did not.',\n    },\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained (erased-but-kept) row is immutable, and DESTROYING one is the sharpest form of '\n      + 'mutating it — the retention posture exists precisely to keep a row that must be kept, so a '\n      + 'framework sweep must not be the thing that reaps it.',\n    ),\n    [RAG_INGESTION_GATE]: {\n      posture: NOT_APPLICABLE,\n      reason:\n        'Materializes no value, so no `.ragSource()` field can change through it and there is nothing '\n        + 'to re-index. The mirror obligation — REMOVING a deleted row\\'s chunks — is not this concern '\n        + 'and is not owned here either: the removal-seam guard '\n        + '(`rag-chunk-removal-seam-coverage.guard.test.ts`) excludes the raw repository doors BY '\n        + 'DECLARATION, bounding every one of them on the hourly reconciliation sweep\\'s orphan pass, '\n        + 'and this door joins that family rather than opening a new question.',\n    },\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Dispatches the interface-declared `deleteManyByRawFilter`, so an adapter that omits it fails '\n        + 'to compile. THE DOOR EXISTS BECAUSE ITS ABSENCE WAS THE DEFECT: with a bulk UPDATE on the '\n        + 'tier and no bulk DELETE, the consumable-tokens cleanup batch had one route to reap rows — '\n        + 'reaching past the contract for `MongoDBService.getConnection()` — which made the framework\\'s '\n        + 'only credential-retention sweep MongoDB-only. It was invisible while every application ran a '\n        + 'mongod beside PostgreSQL, and failed every six hours on the first one (`wonder-crm`) that '\n        + 'did not, with spent password-reset / invitation / magic-link rows accumulating with no '\n        + 'sweep. Note the neutrality this door CANNOT confer: an unexpressible predicate (`$expr`, a '\n        + 'column-to-column comparison) is still the caller\\'s problem, and the batch resolves its one '\n        + 'such lane by reading candidates and comparing in memory.',\n    },\n  },\n\n  [InfrastructureDoor.ATOMIC_GUARDED_MUTATION]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained row is immutable, so the compare-and-swap must never match one.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison reconciles the affected chunk set.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Refuses a mutation that is not adapter-neutral (`describeGuardedMutationInexpressibility`) '\n        + 'BEFORE dispatching, rather than degrading on the arm that cannot express it, and dispatches '\n        + 'an interface-declared primitive.',\n    },\n  },\n\n  [InfrastructureDoor.ATOMIC_INCREMENT_FIELD]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained (erased-but-kept) row is immutable and must never be incremented.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison re-derives the chunk set. In practice this door writes counters, '\n      + 'never corpus text.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Dispatches the interface-declared `atomicIncrementField`. Its predecessor took a MongoDB update '\n        + 'expression and reached for `mongooseModel`, so a counter built on it did not merely degrade '\n        + 'on PostgreSQL — it failed every write, and where the caller swallowed the error (as metering '\n        + 'paths do, so accounting never breaks a served request) the counter silently stayed at zero '\n        + 'and any cap built on it never fired.',\n    },\n  },\n\n  [InfrastructureDoor.ATOMIC_CONDITIONAL_SET]: {\n    [AUTHORIZATION]: AUTHORIZATION_WAIVED,\n    [TENANT_SCOPING]: TENANT_SCOPING_WAIVED,\n    [SCHEMA_VALIDATION]: SCHEMA_VALIDATION_WAIVED_PRE_BUILT_WRITE,\n    [RETENTION_HIDE]: RETENTION_HIDE_PRESERVED_AT_DISPATCH(\n      'a retained row is immutable, so neither the set nor the clear may reach one.',\n    ),\n    [RAG_INGESTION_GATE]: RAG_INGESTION_GATE_WAIVED_TO_SWEEP(\n      'its contentHash comparison reconciles the chunk set of a field set or cleared through it.',\n    ),\n    [AUDIT_TRAIL]: AUDIT_TRAIL_WAIVED,\n    [TRANSACTION_PARTICIPATION]: TRANSACTION_PARTICIPATION_PRESERVED,\n    [ADAPTER_NEUTRALITY]: {\n      posture: PRESERVED,\n      how:\n        'Dispatches the interface-declared `atomicConditionalSet`. Until the neutral primitives '\n        + 'existed, CLEARING a field had no adapter-neutral expression at all — the only route was the '\n        + 'raw-MongoDB `atomicConditionalUpdate` (since retired), so every clear was silently also a '\n        + 'MongoDB pin. The file-cleanup batch is the case that forced it: it clears stale link '\n        + 'metadata from timed-out and malformed rows, so a PostgreSQL-backed FILES resource would '\n        + 'have accepted writes and then stranded every row that batch exists to normalize.',\n    },\n  },\n};\n\n// ── The boundary of the enumeration, recorded rather than left implicit ──────────────────────────\n\n/**\n * Handler members that resolve a repository and dispatch to it, and are NOT infrastructure doors.\n *\n * The pin discovers the tier behaviourally — \"resolves a repository, then dispatches to it\" — which is\n * the only discovery that survives a rename. That query also finds the one member for which the answer\n * is legitimately different, and it is named here so the exclusion is a declaration a reader can\n * challenge rather than a silent filter inside a test.\n *\n * The pin asserts each of these is actually FOUND by the discovery, so an entry that stops matching\n * cannot quietly shrink the population it is excluded from.\n */\nexport const INFRASTRUCTURE_TIER_OPERATION_DISPATCH_MEMBERS: Readonly<Record<string, string>> = {\n  doByExecutionContext:\n    'The DECLARED-operation dispatcher — the opposite of this tier. It carries an `ExecutionContext` '\n    + 'whose operation the service and controller tiers have already authorized, and `doByPath` / '\n    + '`doByKey` both funnel into it. It is found by the same query because it, too, resolves a '\n    + 'repository and calls it.',\n};\n\n/**\n * Cross-cutting concerns CONSIDERED for {@link InfrastructureCrossCuttingConcern} and deliberately\n * left out, with the reason each collapses into an existing member.\n *\n * Recorded as data, not omitted, because `.claude/rules/invariant-call-site-enumeration.md` #14 is\n * exactly this: a site that DECLARES itself exempt is quieter than a missing one, so the declaration\n * has to be somewhere a reader can check it. Both entries below were checked against code rather than\n * reasoned about — the citations are the point.\n */\nexport enum InfrastructureExcludedConcernCandidate {\n  SIEM_ROUTING = 'siemRouting',\n  SUBJECT_ERASURE_REACHABILITY = 'subjectErasureReachability',\n}\n\nexport const INFRASTRUCTURE_CONCERN_CANDIDATES_EXCLUDED: Record<\n  InfrastructureExcludedConcernCandidate,\n  string\n> = {\n  [InfrastructureExcludedConcernCandidate.SIEM_ROUTING]:\n    'Entailed by AUDIT_TRAIL, not independent of it. The routing service is declared as one that '\n    + '\"dispatches AUDIT EVENTS to org SIEM endpoints\" (`inject/models/service-types.ts`), so its input '\n    + 'is an emitted event. A door that emits none produces nothing to route, and a per-door SIEM cell '\n    + 'could only ever restate that door\\'s audit cell.',\n  [InfrastructureExcludedConcernCandidate.SUBJECT_ERASURE_REACHABILITY]:\n    'Splits cleanly into a half that is already a member and a half that is not a property of the door. '\n    + 'The VISIBILITY-and-immutability half of erasure IS the retention hide — same predicate, same '\n    + 'dispatch point — and is declared per door as RETENTION_HIDE. The DISCOVERY half (can the erasure '\n    + 'orchestrator find the rows?) is answered by the resource graph: `eraseSubjectInPlace` walks the '\n    + 'edges of the subject resource\\'s own configuration, so a row is reachable because of how its '\n    + 'resource is declared, never because of which door wrote it.',\n};\n"]}

package/dist/esm/base-classes/services/repositories/introspection/introspection-resource-repository.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"introspection-resource-repository.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../../src/base-classes/services/repositories/introspection/introspection-resource-repository.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,kCAAkC,EAClC,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AAE3G;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,6CAA6C;IAEtD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAHb,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,aAAa,EAAE,MAAM,sCAAsC,GAAG,SAAS;IA2B7E,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACpC,uBAAuB,EAAE,UAAU,CAAC,OAAO,kCAAkC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAClH,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,GAAG,EACzB,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,CAAC,CAAC;IASA,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACnC,0BAA0B,EAAE,MAAM,EAClC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,GAAG,EACzB,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,CAAC,CAAC;IAUA,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,CAAC,EAAE,GAAG,GACT,OAAO,CAAC,CAAC,CAAC;YAIC,WAAW;YAUX,uBAAuB;IAsBxB,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAK7F,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAIzH;;;;;;;;;;;;OAYG;IACU,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAe3G;;;OAGG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAI7G,MAAM,CAAC,CAAC,GAAG,GAAG,EACzB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,GAAG,GACX,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAM3B,KAAK,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;YAKvF,MAAM;IAiCpB,OAAO,CAAC,cAAc;IAoBT,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IAC5B,oBAAoB,IAAI,OAAO,CAAC,KAAK,CAAC;IACtC,oBAAoB,IAAI,OAAO,CAAC,KAAK,CAAC;IACtC,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC;IACvC,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC;IACvC,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC;IACvC,iBAAiB,IAAI,OAAO,CAAC,KAAK,CAAC;IACnC,mBAAmB,IAAI,OAAO,CAAC,KAAK,CAAC;IAElD,OAAO,CAAC,eAAe;CAYxB"}
+{"version":3,"file":"introspection-resource-repository.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/introspection/introspection-resource-repository.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,kCAAkC,EAClC,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AAE3G;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,6CAA6C;IAEtD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAHb,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,aAAa,EAAE,MAAM,sCAAsC,GAAG,SAAS;IA2B7E,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACpC,uBAAuB,EAAE,UAAU,CAAC,OAAO,kCAAkC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAClH,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,GAAG,EACzB,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,CAAC,CAAC;IASA,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACnC,0BAA0B,EAAE,MAAM,EAClC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,GAAG,EACzB,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,CAAC,CAAC;IAUA,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,CAAC,EAAE,GAAG,GACT,OAAO,CAAC,CAAC,CAAC;YAIC,WAAW;YAUX,uBAAuB;IAsBxB,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAK7F,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAIzH;;;;;;;;;;;;OAYG;IACU,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAe3G;;;OAGG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAI7G,MAAM,CAAC,CAAC,GAAG,GAAG,EACzB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,GAAG,GACX,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAM3B,KAAK,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;YAKvF,MAAM;IAiCpB,OAAO,CAAC,cAAc;IAoBT,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC;IAC5B,oBAAoB,IAAI,OAAO,CAAC,KAAK,CAAC;IACtC,oBAAoB,IAAI,OAAO,CAAC,KAAK,CAAC;IACtC,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC;IACvC,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC;IACvC,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC;IACvC,iBAAiB,IAAI,OAAO,CAAC,KAAK,CAAC;IACnC,mBAAmB,IAAI,OAAO,CAAC,KAAK,CAAC;IAElD,OAAO,CAAC,eAAe;CAYxB"}

package/dist/esm/base-classes/services/repositories/introspection/introspection-resource-source.backend.port.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"introspection-resource-source.backend.port.d.ts","sourceRoot":"","sources":["../../../../../../../src/base-classes/services/repositories/introspection/introspection-resource-source.backend.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,0BAA0B;IACzC,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,sCAAsC;IACrD,qFAAqF;IACrF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAExC,mHAAmH;IACnH,UAAU,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACnF"}
+{"version":3,"file":"introspection-resource-source.backend.port.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/introspection/introspection-resource-source.backend.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,0BAA0B;IACzC,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,sCAAsC;IACrD,qFAAqF;IACrF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAExC,mHAAmH;IACnH,UAAU,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACnF"}

package/dist/esm/base-classes/services/repositories/postgresql-resource-repository.backend.service.d.ts

@@ -170,6 +170,63 @@ export declare class PostgreSQLResourceRepositoryBackendService<TCustomOperation
      * today.
      */
     private toSqlWriteRow;
+    /**
+     * Keep only the keys this table HAS A COLUMN FOR — the SQL twin of the mongoose schema's own
+     * projection, and the third site of the `plannedFieldNames` gate the two guarded-write sites
+     * already apply.
+     *
+     * ## Why the payload legitimately carries a key that is not a column
+     *
+     * A repository does not receive "the row to write". It receives the OPERATION'S VALIDATED
+     * REQUEST — `validateRepositoryWriteData` parses the payload against the operation's own
+     * `requestDto` — and a custom operation's request DTO declares the ARGUMENTS the operation
+     * takes, not the columns it writes. `claimDomain` takes `{ domain }`, a DNS name being claimed;
+     * its PREFIX hook computes the `domains` block from it and that block is what persists. `domain`
+     * itself was never a field of the resource.
+     *
+     * That is not one operation's quirk. Surveyed over the whole engine catalogue, **43 write
+     * operations declare 63 such request keys** — `reason`, `justification`, `notifyMembers`,
+     * `newParentUnitId`, `featureId`, `cancelImmediately`, `requestedDurationMinutes`, and so on.
+     * The normal case for a custom write verb is to take arguments.
+     *
+     * ## The divergence this closes
+     *
+     * MongoDB projects the payload onto the persisted shape and always has: `SCHEMA_DEFAULT_OPTIONS`
+     * sets `strict: true`, so mongoose drops a path its schema does not declare and the write
+     * succeeds. Here the same key reached the statement and PostgreSQL refused the whole UPDATE with
+     * `column "domain" of relation "organizationssoconfig" does not exist` — measured over HTTP on
+     * 2026-09-09 (issue #573). So the projection existed on one adapter as an accident of the ODM and
+     * on the other not at all, which is the adapter divergence, not the tolerance.
+     *
+     * ## Drop, not refuse — decided rather than inherited
+     *
+     * Refusing a payload key with no column reads like the stricter answer and is not equivalent: it
+     * would refuse all 43 operations above, every one of which is correctly authored and works on
+     * MongoDB today. A refusal is a NEW contract, it would have to be applied to BOTH adapters to
+     * mean anything (a refusal on one adapter only is the very divergence being closed), and its
+     * natural home is a startup-time check over DECLARATIONS — beside the `authoritativeFields`
+     * validator — never a runtime refusal on a live request. The two `plannedFieldNames` gates in
+     * this file already chose to drop, for the same no-op-parity reason.
+     *
+     * A per-operation `requestOnly` DECLARATION was considered as the "state it rather than infer
+     * it" alternative, and rejected: the plan already decides which keys are columns, so a second
+     * declaration would state the same fact twice and let the two disagree
+     * (`.claude/rules/derive-before-you-ask.md` — name what already decides it before adding a
+     * declaration a human maintains).
+     *
+     * ## Why `plannedFieldNames`, and not `planPhysicalColumnNames`
+     *
+     * `plannedFieldNames` is the PERMISSIVE set: for a hybrid-inheritance resource it also contains
+     * the variant-only names `transformForSqlWrite` sweeps into `variantConfig`. Running after that
+     * sweep, those keys are already gone, so the extra members cannot admit anything — while gating
+     * on the narrower physical set would newly DROP a variant field the sweep failed to move, turning
+     * today's loud failure into a silent one. Permissive here is deliberate: this projection removes
+     * an adapter divergence and must not quietly change any other outcome.
+     *
+     * Dropped names are logged at debug rather than warned, matching `cleanInputData`'s report of
+     * what it removed. A warning on the normal case teaches a reader to skim the warnings that matter.
+     */
+    private projectOntoPlannedColumns;
     /**
      * Render every JSONB-backed column's value as JSON TEXT, so PostgreSQL parses it as `jsonb`.
      *

package/dist/esm/base-classes/services/repositories/postgresql-resource-repository.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql-resource-repository.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/base-classes/services/repositories/postgresql-resource-repository.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,+BAA+B,EAC/B,6CAA6C,EAC7C,YAAY,EAEb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EAUrB,2BAA2B,EAC3B,yBAAyB,EAE1B,MAAM,uBAAuB,CAAC;AAuB/B,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8EAA8E,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AAEjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,qFAAqF,CAAC;AACjJ,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EAClB,MAAM,qEAAqE,CAAC;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAElI,OAAO,EAAE,yCAAyC,EAAE,MAAM,wEAAwE,CAAC;AACnI,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mEAAmE,CAAC;AAElH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAI5G,KAAK,yCAAyC,GAAG,GAAG,CAAC;AAErD;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAEjG,OAAO,KAAK,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACtB,MAAM,0DAA0D,CAAC;AAUlE,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,6CAA6C,CAAC;AA6BrD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAK/D;AAED,qBAAa,0CAA0C,CACrD,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC/C,YAAW,yBAAyB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC;IAiCzF,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAvCrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+E;IACrH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsG;IACpI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAc;IAChD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAc;IAC/C,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAc;IACnD,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAU;IACvD;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAgB;IAE7D,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG/E,YAAY,EAAE,YAAY,EACT,SAAS,EAAE,gCAAgC,EAC3C,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,gBAAgB,EAAE,+BAA+B,EACjD,uBAAuB,EAAE,qCAAqC,EAC9D,oBAAoB,EAAE,yCAAyC,EAC/D,UAAU,EAAE,yCAAyC,EACrD,iBAAiB,CAAC,EAAE,wBAAwB;IAuE/D;;;OAGG;IACH,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,SAAS;IAcrF;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,OAAO,CAAC,gBAAgB;IAmBxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAOlC;;;;;;OAMG;IACH;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,aAAa;IAUrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiDG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,sBAAsB;IAM9B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,uBAAuB;IAQ/B;;OAEG;IACH,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,kBAAkB,GAAG,IAAI;IAQ7E,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACpC,uBAAuB,EAAE,6CAA6C,EACtE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,mBAAmB,EACzC,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC;IAKA,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACnC,0BAA0B,EAAE,MAAM,EAClC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,mBAAmB,EACzC,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC;IAkBA,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,gBAAgB,EAAE,gBAAgB,CAAC,+BAA+B,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,EAC1H,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC;YASC,WAAW;IAuFzB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,uBAAuB;IAuBlB,MAAM,CAAC,CAAC,GAAG,SAAS,EAC/B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC,EACjC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAapC,UAAU,CAAC,CAAC,GAAG,SAAS,EACnC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,EAAE,mBAAmB,CAAC,WAAW,CAAC,EACtC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAiBzC,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,YAAY,EAAE,cAAc,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAazD;;;;OAIG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,YAAY,EAAE,cAAc,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAkB5C,MAAM,CAAC,CAAC,GAAG,SAAS,EAC/B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,YAAY,EAAE,cAAc,EAC5B,IAAI,EAAE,qBAAqB,CAAC,WAAW,CAAC,EACxC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAa5C,UAAU,CAAC,CAAC,GAAG,SAAS,EACnC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,EAAE,qBAAqB,CAAC,WAAW,CAAC,EACxC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAezC,MAAM,CACjB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,EAAE,mBAAmB,EACxC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAcL,UAAU,CACrB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,EAAE,CAAC;IAaP,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;KAAE,GACnG,OAAO,CAAC,yBAAyB,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAkB/D,MAAM,CAAC,CAAC,GAAG,GAAG,EACzB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,GAAQ,EAChB,aAAa,GAAE,GAAQ,EACvB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAa3B,KAAK,CAChB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,MAAM,GAAE,GAAQ,EAChB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAatB,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO;IAU9D;;;;;;OAMG;IACU,iBAAiB,CAAC,CAAC,GAAG,SAAS,EAC1C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAczD;;;;OAIG;IACU,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAWpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;YACW,6BAA6B;IAsB3C;;;;;;;;;;OAUG;IACU,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC9C,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAIpB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH;;;;;;;;;;;;;;OAcG;IACU,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC;IAmBnH;;;;;;;;;;;OAWG;IACU,mBAAmB,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IASrH;;;;;;;;;;;;;;OAcG;IACU,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa5G;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAAC,CAAC,GAAG,GAAG,EACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAYpB;;;;;;;;;;;OAWG;YACW,oBAAoB;IAwJlC;;;;;;OAMG;IACU,qBAAqB,CAAC,CAAC,GAAG,GAAG,EACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,yBAAyB,EACnC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAMpB;;;;;;;;;;;OAWG;IACU,qBAAqB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,yBAAyB,EACnC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAWlB;;;;;;;;;;;;;;;;OAgBG;IACU,qBAAqB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAoBlB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,wBAAwB;IAShC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;;;;;;OAOG;IACU,sBAAsB,CAAC,CAAC,GAAG,SAAS,EAC/C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAuBtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8CG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,EAAE,mBAAmB,EACjC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;KAAE,CAAC;IA2G7E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACU,cAAc,CAAC,CAAC,GAAG,SAAS,EACvC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;KAAE,CAAC;IAwR7E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IAIU,kBAAkB,CAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,mBAAmB,EACjC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAuDhB;;;;;;;;;OASG;IACH,OAAO,CAAC,0BAA0B;IAuBlC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,4BAA4B;IAapC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;;OAGG;YACW,SAAS;IAiFvB,4EAA4E;YAC9D,aAAa;YA8Eb,OAAO;YA2BP,SAAS;YA4HT,SAAS;YAyCT,aAAa;YAwBb,aAAa;YAiEb,OAAO;YAyFP,SAAS;YAiFT,QAAQ;IA2BtB;;;;;;;;;;;;;OAaG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACzC,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;KAAE,GACnG,OAAO,CAAC,yBAAyB,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAkB5E;;;;;;;;;;;;;;;;OAgBG;IACU,yBAAyB,CACpC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC;IA+CpB;;;;;;;;;;;;;;;;;OAiBG;IACU,wBAAwB,CACnC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAC9B,OAAO,CAAC,MAAM,EAAE,CAAC;IAuEpB;;;;;;;;;;;;OAYG;IACU,cAAc,CACzB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IA6ClB,sFAAsF;YACxE,wBAAwB;YAcxB,UAAU;IAYxB,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,6BAA6B;IA4CrC,OAAO,CAAC,qBAAqB;IAsN7B;;;;;OAKG;IACH;;;;;;;;;;;;OAYG;YACW,2CAA2C;IAkEzD;;;;;;OAMG;IACH,OAAO,KAAK,kBAAkB,GAO7B;YAEa,sCAAsC;IA8BpD,OAAO,CAAC,0BAA0B;IAelC;;;;;;;;;;OAUG;YACW,eAAe;IA0B7B,OAAO,CAAC,gCAAgC;IAsBxC;;;;;;;;;;;;;;;;;OAiBG;YACW,oBAAoB;IAiDlC;;;;;;;;OAQG;YACW,8BAA8B;IAoB5C,OAAO,CAAC,qBAAqB;IAmC7B,OAAO,CAAC,6BAA6B;IAwDrC,OAAO,CAAC,4BAA4B;CAuBrC"}
+{"version":3,"file":"postgresql-resource-repository.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/base-classes/services/repositories/postgresql-resource-repository.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,+BAA+B,EAC/B,6CAA6C,EAC7C,YAAY,EAEb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EAUrB,2BAA2B,EAC3B,yBAAyB,EAE1B,MAAM,uBAAuB,CAAC;AAuB/B,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8EAA8E,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AAEjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gEAAgE,CAAC;AACzG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,qFAAqF,CAAC;AACjJ,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EAClB,MAAM,qEAAqE,CAAC;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAElI,OAAO,EAAE,yCAAyC,EAAE,MAAM,wEAAwE,CAAC;AACnI,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mEAAmE,CAAC;AAElH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAI5G,KAAK,yCAAyC,GAAG,GAAG,CAAC;AAErD;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAGjG,OAAO,KAAK,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACtB,MAAM,0DAA0D,CAAC;AAUlE,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,6CAA6C,CAAC;AA6BrD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAK/D;AAED,qBAAa,0CAA0C,CACrD,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC/C,YAAW,yBAAyB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC;IAiCzF,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAvCrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+E;IACrH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsG;IACpI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAc;IAChD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAc;IAC/C,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAc;IACnD,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAU;IACvD;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAgB;IAE7D,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG/E,YAAY,EAAE,YAAY,EACT,SAAS,EAAE,gCAAgC,EAC3C,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,0BAA0B,EACxC,gBAAgB,EAAE,+BAA+B,EACjD,uBAAuB,EAAE,qCAAqC,EAC9D,oBAAoB,EAAE,yCAAyC,EAC/D,UAAU,EAAE,yCAAyC,EACrD,iBAAiB,CAAC,EAAE,wBAAwB;IAuE/D;;;OAGG;IACH,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,SAAS;IAcrF;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,OAAO,CAAC,gBAAgB;IAmBxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAOlC;;;;;;OAMG;IACH;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,aAAa;IAYrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,OAAO,CAAC,yBAAyB;IAmBjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiDG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,sBAAsB;IAM9B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,uBAAuB;IAQ/B;;OAEG;IACH,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,kBAAkB,GAAG,IAAI;IAQ7E,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACpC,uBAAuB,EAAE,6CAA6C,EACtE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,mBAAmB,EACzC,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC;IAKA,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EACnC,0BAA0B,EAAE,MAAM,EAClC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,CAAC,EAAE,mBAAmB,EACzC,IAAI,CAAC,EAAE,CAAC,EACR,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC;IAkBA,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,gBAAgB,EAAE,gBAAgB,CAAC,+BAA+B,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,EAC1H,IAAI,CAAC,EAAE,GAAG,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC;YASC,WAAW;IAuFzB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,uBAAuB;IAuBlB,MAAM,CAAC,CAAC,GAAG,SAAS,EAC/B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC,EACjC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAapC,UAAU,CAAC,CAAC,GAAG,SAAS,EACnC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,EAAE,mBAAmB,CAAC,WAAW,CAAC,EACtC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAiBzC,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,YAAY,EAAE,cAAc,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAazD;;;;OAIG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,YAAY,EAAE,cAAc,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAkB5C,MAAM,CAAC,CAAC,GAAG,SAAS,EAC/B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,YAAY,EAAE,cAAc,EAC5B,IAAI,EAAE,qBAAqB,CAAC,WAAW,CAAC,EACxC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAa5C,UAAU,CAAC,CAAC,GAAG,SAAS,EACnC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,IAAI,EAAE,qBAAqB,CAAC,WAAW,CAAC,EACxC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAezC,MAAM,CACjB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,mBAAmB,EAAE,mBAAmB,EACxC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAcL,UAAU,CACrB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,EAAE,CAAC;IAaP,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,GAAG,SAAS,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;KAAE,GACnG,OAAO,CAAC,yBAAyB,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAkB/D,MAAM,CAAC,CAAC,GAAG,GAAG,EACzB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,GAAQ,EAChB,aAAa,GAAE,GAAQ,EACvB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAa3B,KAAK,CAChB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,MAAM,GAAE,GAAQ,EAChB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAatB,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO;IAU9D;;;;;;OAMG;IACU,iBAAiB,CAAC,CAAC,GAAG,SAAS,EAC1C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,6BAA6B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAczD;;;;OAIG;IACU,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAWpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;YACW,6BAA6B;IAsB3C;;;;;;;;;;OAUG;IACU,oBAAoB,CAAC,CAAC,GAAG,GAAG,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC9C,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC1C,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAIpB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH;;;;;;;;;;;;;;OAcG;IACU,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC;IAmBnH;;;;;;;;;;;OAWG;IACU,mBAAmB,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IASrH;;;;;;;;;;;;;;OAcG;IACU,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAa5G;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAAC,CAAC,GAAG,GAAG,EACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAYpB;;;;;;;;;;;OAWG;YACW,oBAAoB;IAmKlC;;;;;;OAMG;IACU,qBAAqB,CAAC,CAAC,GAAG,GAAG,EACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,yBAAyB,EACnC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAMpB;;;;;;;;;;;OAWG;IACU,qBAAqB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,yBAAyB,EACnC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAWlB;;;;;;;;;;;;;;;;OAgBG;IACU,qBAAqB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC;IAoBlB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAI/B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,wBAAwB;IAShC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;;;;;;OAOG;IACU,sBAAsB,CAAC,CAAC,GAAG,SAAS,EAC/C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAuBtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8CG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,YAAY,EAAE,mBAAmB,EACjC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;KAAE,CAAC;IAmH7E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACU,cAAc,CAAC,CAAC,GAAG,SAAS,EACvC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;KAAE,CAAC;IAwR7E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IAIU,kBAAkB,CAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,mBAAmB,EACjC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAuDhB;;;;;;;;;OASG;IACH,OAAO,CAAC,0BAA0B;IAuBlC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,4BAA4B;IAapC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;;OAGG;YACW,SAAS;IAiFvB,4EAA4E;YAC9D,aAAa;YA8Eb,OAAO;YA2BP,SAAS;YA4HT,SAAS;YAyCT,aAAa;YAwBb,aAAa;YAiEb,OAAO;YAyFP,SAAS;YAiFT,QAAQ;IA2BtB;;;;;;;;;;;;;OAaG;IACU,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACzC,mBAAmB,CAAC,CAAC,GAAG,SAAS,EAC5C,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,aAAa,EAAE,eAAe,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;KAAE,GACnG,OAAO,CAAC,yBAAyB,CAAC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAkB5E;;;;;;;;;;;;;;;;OAgBG;IACU,yBAAyB,CACpC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC;IA+CpB;;;;;;;;;;;;;;;;;OAiBG;IACU,wBAAwB,CACnC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAC9B,OAAO,CAAC,MAAM,EAAE,CAAC;IAuEpB;;;;;;;;;;;;OAYG;IACU,cAAc,CACzB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IA6ClB,sFAAsF;YACxE,wBAAwB;YAcxB,UAAU;IAYxB,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;OAOG;IACH,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,6BAA6B;IA4CrC,OAAO,CAAC,qBAAqB;IAsN7B;;;;;OAKG;IACH;;;;;;;;;;;;OAYG;YACW,2CAA2C;IAkEzD;;;;;;OAMG;IACH,OAAO,KAAK,kBAAkB,GAO7B;YAEa,sCAAsC;IA8BpD,OAAO,CAAC,0BAA0B;IAelC;;;;;;;;;;OAUG;YACW,eAAe;IA0B7B,OAAO,CAAC,gCAAgC;IAsBxC;;;;;;;;;;;;;;;;;OAiBG;YACW,oBAAoB;IAiDlC;;;;;;;;OAQG;YACW,8BAA8B;IAoB5C,OAAO,CAAC,qBAAqB;IAmC7B,OAAO,CAAC,6BAA6B;IAwDrC,OAAO,CAAC,4BAA4B;CAuBrC"}