@wildo-ai/saas-frontend-lib 1.1.1 → 1.1.3

package/dist/esm/core/resources/ResourceReadCacheBridge.js

@@ -0,0 +1,267 @@
+import { useCallback, useContext, useEffect, useRef } from 'react';
+import { CoreWebSocketEvent, WebSocketResourceDeliveryTarget, buildScopeRoomName, } from '@wildo-ai/saas-models';
+import { useWebSocket } from '../../core/requests/websockets/useWebSocket.js';
+import { useResourceRegistry } from '../../core/resources/useResourceRegistry.js';
+import { useAppScopeSafe } from '../../core/scope/useAppScope.js';
+import { ApplicationContext } from '../../core/runtime/ApplicationContext.shared.js';
+import { LoggerFrontendService } from '../../core/monitoring/logger.frontend.service.js';
+import { envLoader } from '../../core/runtime/env-variable-loader.frontend.service.js';
+const logger = LoggerFrontendService.getLogger();
+const logDebug = logger.debugByType('ResourceReadCacheBridge');
+logger.setDebugTypeLogging('ResourceReadCacheBridge', false);
+/** The owner key every scope-room claim from this bridge is made under. */
+const CLAIM_OWNER_PREFIX = 'read-cache';
+/**
+ * The environment flag that removes the read cache from the picture entirely.
+ *
+ * Mirrors `COMPANION_INTROSPECTION_CACHE` on the companion side, deliberately: the same word, the
+ * same value, so an operator who has met one knows the other. Optional, and read through the
+ * NON-throwing accessor — a diagnostic toggle must never be able to stop an application booting
+ * because it was not declared.
+ */
+const READ_CACHE_ENVIRONMENT_FLAG = 'VITE_RESOURCE_READ_CACHE';
+/** The value that turns it off. */
+const READ_CACHE_DISABLED_VALUE = 'off';
+/**
+ * Makes cached resource reads SERVABLE, by joining the rooms through which they would be told they
+ * are stale — and by dropping them when that stops being true.
+ *
+ * ## Why the cache cannot do this itself
+ *
+ * `ResourceReadCacheFrontendService` is a plain service on the HTTP client, deliberately: both read
+ * paths reach it and it must outlive any React tree. But the answer to "would an invalidation for
+ * this entry reach us?" lives in the WebSocket connection, which is React-scoped. So the cache holds
+ * the entries and this bridge holds the truth about whether they may be served.
+ *
+ * ## Scope rooms, which the engine already emits into and nobody joined
+ *
+ * On a mutation the notifications dispatcher emits twice: into the per-row RESOURCE room, and into
+ * the SCOPE rooms. Its own comment says why they are separate — *"Scope rooms are emitted separately
+ * from per-resource rooms because they serve list/cache refresh semantics rather than authoritative
+ * per-resource replay semantics."* That is exactly this tier's channel, and until now nothing on the
+ * client subscribed to it: rooms were claimed only from live `ResourceMutationManager` instances, so
+ * a LIST had no way to hear that it had changed.
+ *
+ * The room set for an entry is computed by `deriveResourceScopeRoomQualifiers` — the SAME function
+ * the dispatcher uses to decide where to emit, moved into `@wildo-ai/saas-models` for this purpose.
+ * Two implementations of that rule would fail silently: a client subscribed to the wrong room does
+ * not error, it simply never hears anything.
+ *
+ * ## Coverage is refused, not assumed
+ *
+ * `covers()` answers `true` only while the socket is connected AND every room for the entry is
+ * claimed AND confirmed by the server. A subscription the server REFUSED — `verifyResourceAccess`
+ * denies a PUBLIC socket outright — leaves the room unconfirmed, so nothing is served from it. The
+ * cache then behaves exactly as it did before this tier existed.
+ */
+export const ResourceReadCacheBridge = () => {
+    const { on, isConnected, connectionCount, claimResourceRoom, releaseResourceRoom } = useWebSocket();
+    const { getReadCache } = useResourceRegistry();
+    /*
+     * Resolved ONCE per render into the cache INSTANCE, and every effect below depends on that
+     * instance rather than on `getReadCache`.
+     *
+     * `ResourceRegistryContext` builds its value object unmemoized, so `getReadCache` is a fresh
+     * closure on every provider render. Depending on it re-ran the authority effect each time, and
+     * `setCoverageAuthority` clears the cache by design — so the cache was emptied on essentially
+     * every render and could never survive long enough to be useful. The instance itself comes from
+     * the HTTP-client singleton and is stable for the life of the application.
+     *
+     * Found by a mutation test: removing the organization-switch clear left every case green, because
+     * this effect was already clearing the cache constantly and masking it.
+     */
+    const readCache = getReadCache();
+    /*
+     * The operator escape hatch, applied before anything can be stored.
+     *
+     * The blast radius of this tier is every generated application on both persistence adapters, so
+     * someone who SUSPECTS the cache has to be able to take it out of the picture without a rebuild
+     * and without waiting for a fix. `VITE_RESOURCE_READ_CACHE=off` does that, and the cache then
+     * behaves exactly as it did before this tier existed.
+     */
+    useEffect(() => {
+        const disabled = envLoader.readOptionalEnvironmentValue(READ_CACHE_ENVIRONMENT_FLAG)?.toLowerCase()
+            === READ_CACHE_DISABLED_VALUE;
+        readCache.setEnabled(!disabled);
+        if (disabled) {
+            logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });
+        }
+    }, [readCache]);
+    /*
+     * The SAFE accessor, because this bridge is mounted ABOVE `AppScopeProvider`.
+     *
+     * The provider lives inside the router shell, while the bridges sit beside `RMMRegistryProvider`
+     * one subtree up — so the throwing `useAppScope()` crashes the whole application here, which is
+     * exactly what it did the first time. `ScopedResourceRegistryProvider` already solved this the
+     * same way and for the same reason ("If AppScopeProvider isn't mounted yet, behave exactly like
+     * the base registry").
+     *
+     * The consequence is deliberate and safe: with no scope mounted, `currentOrganizationId` is
+     * `undefined` and stays that way, so the organization-switch effect below never fires a spurious
+     * clear — and nothing is being cached at that point either, because the socket has no rooms.
+     */
+    const appScope = useAppScopeSafe();
+    const currentOrganizationId = appScope?.currentOrganizationId ?? null;
+    /*
+     * The application id comes from APP CONFIG, not from the scope and not from the token.
+     *
+     * Both were checked on the running stack (issue #283): the access token's claims carry `userId`
+     * and no `applicationId`, and `AppScopeContext` derives its `currentApplicationId` by decoding
+     * that same token — so it is null wherever the claim is absent, which is everywhere. The backend
+     * now publishes the id on `appIdentity`, which is the one surface that actually has it.
+     *
+     * Read through `useContext` rather than `useApplication()` on purpose: that hook THROWS outside
+     * its provider, and a bridge that crashes the tree when mounted a level too high is a defect this
+     * component has already had once.
+     */
+    const applicationContext = useContext(ApplicationContext);
+    const currentApplicationId = applicationContext?.appIdentity?.applicationId
+        ?? appScope?.currentApplicationId
+        ?? null;
+    /** Rooms the server has CONFIRMED. Only these make an entry servable. */
+    const confirmedRoomsRef = useRef(new Set());
+    /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */
+    const requestedRoomsRef = useRef(new Map());
+    const releaseAllRooms = useCallback(() => {
+        for (const [roomName, qualifier] of requestedRoomsRef.current) {
+            void releaseResourceRoom({
+                ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,
+                resourceType: qualifier.resourceType,
+                scopeKey: qualifier.scopeKey,
+                scopeId: qualifier.scopeId,
+                contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },
+            });
+        }
+        requestedRoomsRef.current.clear();
+        confirmedRoomsRef.current.clear();
+    }, [releaseResourceRoom]);
+    /*
+     * Install the authority, and take it away again on unmount.
+     *
+     * `setCoverageAuthority` clears the cache on both edges by construction — an authority that is
+     * being replaced knows nothing about what the previous one covered, so every held entry is of
+     * unknown freshness.
+     */
+    useEffect(() => {
+        const cache = readCache;
+        const authority = {
+            covers: (_resourceType, scopes) => {
+                if (!isConnected)
+                    return false;
+                if (scopes.length === 0)
+                    return false;
+                return scopes.every((scope) => confirmedRoomsRef.current.has(buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId)));
+            },
+            requestCoverage: (resourceType, scopes) => {
+                if (!isConnected)
+                    return;
+                for (const scope of scopes) {
+                    const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);
+                    if (requestedRoomsRef.current.has(roomName))
+                        continue;
+                    requestedRoomsRef.current.set(roomName, { ...scope, resourceType });
+                    void claimResourceRoom({
+                        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,
+                        resourceType,
+                        scopeKey: scope.scopeKey,
+                        scopeId: scope.scopeId,
+                        /*
+                         * The scope's own identifier, in the shape the server's authorization expects. The
+                         * subscribe handler refuses an EMPTY `contextResourceIdentifiers` outright, and
+                         * `verifyScopeAccess` reads the scope from it — so this is the authorization input, not
+                         * decoration.
+                         */
+                        contextResourceIdentifiers: { [`${scope.scopeKey}Id`]: scope.scopeId },
+                    }).then((result) => {
+                        if (result?.success) {
+                            confirmedRoomsRef.current.add(roomName);
+                            logDebug('scope room confirmed', { roomName });
+                        }
+                        else {
+                            // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever
+                            // served — the cache degrades to the un-cached path rather than guessing.
+                            requestedRoomsRef.current.delete(roomName);
+                            logDebug('scope room not confirmed; entries under it stay unservable', { roomName });
+                        }
+                    }).catch(() => {
+                        requestedRoomsRef.current.delete(roomName);
+                    });
+                }
+            },
+        };
+        cache.setCoverageAuthority(authority);
+        return () => {
+            cache.setCoverageAuthority(null);
+            releaseAllRooms();
+        };
+    }, [readCache, isConnected, claimResourceRoom, releaseAllRooms]);
+    /*
+     * Hand the cache the ambient application id.
+     *
+     * An APPLICATION-scoped resource's room is keyed on it, and no URL carries one — so without this
+     * the read path cannot name the room it belongs in, and a push addressed there is received by
+     * nobody (issue #283). The bridge is the right place because it is a COMPONENT and can read the
+     * app scope; the cache service is plain and cannot.
+     */
+    useEffect(() => {
+        readCache.setApplicationId(currentApplicationId);
+    }, [currentApplicationId, readCache]);
+    /*
+     * A reconnect invalidates every confirmation.
+     *
+     * Rooms are per-SOCKET, so a new connection has joined nothing — and the window in which the
+     * socket was down is exactly the window in which a mutation could have gone unheard. Both halves
+     * point the same way: drop the cache and start the claims again.
+     */
+    useEffect(() => {
+        if (connectionCount === 0)
+            return;
+        confirmedRoomsRef.current.clear();
+        requestedRoomsRef.current.clear();
+        readCache.clear();
+        logDebug('connection changed; coverage and cache reset', { connectionCount });
+    }, [connectionCount, readCache]);
+    /*
+     * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.
+     *
+     * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page
+     * reload, and reads are tenancy-filtered at the repository. So without this, switching organization
+     * would serve the previous tenant's rows from cache. The rooms are re-claimed under the new
+     * organization by the next read that wants them.
+     */
+    useEffect(() => {
+        readCache.clear();
+        releaseAllRooms();
+        logDebug('organization scope changed; cache cleared', { currentOrganizationId });
+    }, [currentOrganizationId, readCache, releaseAllRooms]);
+    /* Invalidate on anything the server says changed, at whatever grade it arrives. */
+    useEffect(() => {
+        if (!isConnected)
+            return;
+        const unsubscribeUpdated = on(CoreWebSocketEvent.RESOURCE_UPDATED, (payload) => {
+            /*
+             * Every grade invalidates, including the SYNC grade that carries a full row.
+             *
+             * A sync payload is authoritative for ONE row, and a cached entry is usually a LIST whose
+             * membership, ordering and pagination the row cannot settle — an added row does not announce
+             * where it belongs. Patching the row into the cached list would be a guess; dropping the
+             * entry costs one refetch and cannot be wrong.
+             */
+            readCache.invalidateResourceType(payload.resourceType);
+            logDebug('invalidated by resource update', {
+                resourceType: payload.resourceType,
+                deliveryTarget: payload.deliveryTarget,
+                isScopeRoom: payload.deliveryTarget === WebSocketResourceDeliveryTarget.SCOPE_ROOM_NOTIFICATION,
+            });
+        });
+        const unsubscribeDeleted = on(CoreWebSocketEvent.RESOURCE_DELETED, (payload) => {
+            readCache.invalidateResourceType(payload.resourceType);
+        });
+        return () => {
+            unsubscribeUpdated();
+            unsubscribeDeleted();
+        };
+    }, [on, isConnected, readCache]);
+    return null;
+};
+//# sourceMappingURL=ResourceReadCacheBridge.js.map

package/dist/esm/core/resources/ResourceReadCacheBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceReadCacheBridge.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAGlG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAC/D,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAE/D,mCAAmC;AACnC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,EAAE,CAAC;IACpG,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,4BAA4B,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE;gBAC7F,yBAAyB,CAAC;QAChC,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChB;;;;;;;;;;;;OAYG;IACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACtE;;;;;;;;;;;OAWG;IACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,kBAAkB,EAAE,WAAW,EAAE,aAAa;WACtE,QAAQ,EAAE,oBAAoB;WAC9B,IAAI,CAAC;IAEV,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,MAAM,CAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,sFAAsF;IACtF,MAAM,iBAAiB,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAEhH,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9D,KAAK,mBAAmB,CAAC;gBACvB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;gBAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,SAAS,CAAC;QAExB,MAAM,SAAS,GAAkC;YAC/C,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;gBAChC,IAAI,CAAC,WAAW;oBAAE,OAAO,KAAK,CAAC;gBAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAC1D,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACjE,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACjF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBACtD,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;oBAEpE,KAAK,iBAAiB,CAAC;wBACrB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;wBAC7C,YAAY;wBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB;;;;;2BAKG;wBACH,0BAA0B,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE;qBACvE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBACjB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;4BACpB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;4BACxC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACjD,CAAC;6BAAM,CAAC;4BACN,qFAAqF;4BACrF,0EAA0E;4BAC1E,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;4BAC3C,QAAQ,CAAC,4DAA4D,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACvF,CAAC;oBACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBACZ,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC7C,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;QAEF,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,GAAG,EAAE;YACV,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjE;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC,EAAE,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtC;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe,KAAK,CAAC;YAAE,OAAO;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,QAAQ,CAAC,8CAA8C,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,QAAQ,CAAC,2CAA2C,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnF,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAExD,mFAAmF;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV;;;;;;;eAOG;YACH,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvD,QAAQ,CAAC,gCAAgC,EAAE;gBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,cAAc,KAAK,+BAA+B,CAAC,uBAAuB;aAChG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC","sourcesContent":["import React, { useCallback, useContext, useEffect, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  WebSocketResourceDeliveryTarget,\n  buildScopeRoomName,\n  type ResourceScopeRoomQualifier,\n  type WS_ResourceDeletedPayload,\n  type WS_ResourceUpdatedPayload,\n} from '@wildo-ai/saas-models';\n\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport type { ResourceReadCoverageAuthority } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCacheBridge');\nlogger.setDebugTypeLogging('ResourceReadCacheBridge', false);\n\n/** The owner key every scope-room claim from this bridge is made under. */\nconst CLAIM_OWNER_PREFIX = 'read-cache';\n\n/**\n * The environment flag that removes the read cache from the picture entirely.\n *\n * Mirrors `COMPANION_INTROSPECTION_CACHE` on the companion side, deliberately: the same word, the\n * same value, so an operator who has met one knows the other. Optional, and read through the\n * NON-throwing accessor — a diagnostic toggle must never be able to stop an application booting\n * because it was not declared.\n */\nconst READ_CACHE_ENVIRONMENT_FLAG = 'VITE_RESOURCE_READ_CACHE';\n\n/** The value that turns it off. */\nconst READ_CACHE_DISABLED_VALUE = 'off';\n\n/**\n * Makes cached resource reads SERVABLE, by joining the rooms through which they would be told they\n * are stale — and by dropping them when that stops being true.\n *\n * ## Why the cache cannot do this itself\n *\n * `ResourceReadCacheFrontendService` is a plain service on the HTTP client, deliberately: both read\n * paths reach it and it must outlive any React tree. But the answer to \"would an invalidation for\n * this entry reach us?\" lives in the WebSocket connection, which is React-scoped. So the cache holds\n * the entries and this bridge holds the truth about whether they may be served.\n *\n * ## Scope rooms, which the engine already emits into and nobody joined\n *\n * On a mutation the notifications dispatcher emits twice: into the per-row RESOURCE room, and into\n * the SCOPE rooms. Its own comment says why they are separate — *\"Scope rooms are emitted separately\n * from per-resource rooms because they serve list/cache refresh semantics rather than authoritative\n * per-resource replay semantics.\"* That is exactly this tier's channel, and until now nothing on the\n * client subscribed to it: rooms were claimed only from live `ResourceMutationManager` instances, so\n * a LIST had no way to hear that it had changed.\n *\n * The room set for an entry is computed by `deriveResourceScopeRoomQualifiers` — the SAME function\n * the dispatcher uses to decide where to emit, moved into `@wildo-ai/saas-models` for this purpose.\n * Two implementations of that rule would fail silently: a client subscribed to the wrong room does\n * not error, it simply never hears anything.\n *\n * ## Coverage is refused, not assumed\n *\n * `covers()` answers `true` only while the socket is connected AND every room for the entry is\n * claimed AND confirmed by the server. A subscription the server REFUSED — `verifyResourceAccess`\n * denies a PUBLIC socket outright — leaves the room unconfirmed, so nothing is served from it. The\n * cache then behaves exactly as it did before this tier existed.\n */\nexport const ResourceReadCacheBridge: React.FC = () => {\n  const { on, isConnected, connectionCount, claimResourceRoom, releaseResourceRoom } = useWebSocket();\n  const { getReadCache } = useResourceRegistry();\n  /*\n   * Resolved ONCE per render into the cache INSTANCE, and every effect below depends on that\n   * instance rather than on `getReadCache`.\n   *\n   * `ResourceRegistryContext` builds its value object unmemoized, so `getReadCache` is a fresh\n   * closure on every provider render. Depending on it re-ran the authority effect each time, and\n   * `setCoverageAuthority` clears the cache by design — so the cache was emptied on essentially\n   * every render and could never survive long enough to be useful. The instance itself comes from\n   * the HTTP-client singleton and is stable for the life of the application.\n   *\n   * Found by a mutation test: removing the organization-switch clear left every case green, because\n   * this effect was already clearing the cache constantly and masking it.\n   */\n  const readCache = getReadCache();\n\n  /*\n   * The operator escape hatch, applied before anything can be stored.\n   *\n   * The blast radius of this tier is every generated application on both persistence adapters, so\n   * someone who SUSPECTS the cache has to be able to take it out of the picture without a rebuild\n   * and without waiting for a fix. `VITE_RESOURCE_READ_CACHE=off` does that, and the cache then\n   * behaves exactly as it did before this tier existed.\n   */\n  useEffect(() => {\n    const disabled = envLoader.readOptionalEnvironmentValue(READ_CACHE_ENVIRONMENT_FLAG)?.toLowerCase()\n      === READ_CACHE_DISABLED_VALUE;\n    readCache.setEnabled(!disabled);\n    if (disabled) {\n      logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });\n    }\n  }, [readCache]);\n  /*\n   * The SAFE accessor, because this bridge is mounted ABOVE `AppScopeProvider`.\n   *\n   * The provider lives inside the router shell, while the bridges sit beside `RMMRegistryProvider`\n   * one subtree up — so the throwing `useAppScope()` crashes the whole application here, which is\n   * exactly what it did the first time. `ScopedResourceRegistryProvider` already solved this the\n   * same way and for the same reason (\"If AppScopeProvider isn't mounted yet, behave exactly like\n   * the base registry\").\n   *\n   * The consequence is deliberate and safe: with no scope mounted, `currentOrganizationId` is\n   * `undefined` and stays that way, so the organization-switch effect below never fires a spurious\n   * clear — and nothing is being cached at that point either, because the socket has no rooms.\n   */\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n  /*\n   * The application id comes from APP CONFIG, not from the scope and not from the token.\n   *\n   * Both were checked on the running stack (issue #283): the access token's claims carry `userId`\n   * and no `applicationId`, and `AppScopeContext` derives its `currentApplicationId` by decoding\n   * that same token — so it is null wherever the claim is absent, which is everywhere. The backend\n   * now publishes the id on `appIdentity`, which is the one surface that actually has it.\n   *\n   * Read through `useContext` rather than `useApplication()` on purpose: that hook THROWS outside\n   * its provider, and a bridge that crashes the tree when mounted a level too high is a defect this\n   * component has already had once.\n   */\n  const applicationContext = useContext(ApplicationContext);\n  const currentApplicationId = applicationContext?.appIdentity?.applicationId\n    ?? appScope?.currentApplicationId\n    ?? null;\n\n  /** Rooms the server has CONFIRMED. Only these make an entry servable. */\n  const confirmedRoomsRef = useRef<Set<string>>(new Set());\n  /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */\n  const requestedRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n\n  const releaseAllRooms = useCallback(() => {\n    for (const [roomName, qualifier] of requestedRoomsRef.current) {\n      void releaseResourceRoom({\n        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n        resourceType: qualifier.resourceType,\n        scopeKey: qualifier.scopeKey,\n        scopeId: qualifier.scopeId,\n        contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n      });\n    }\n    requestedRoomsRef.current.clear();\n    confirmedRoomsRef.current.clear();\n  }, [releaseResourceRoom]);\n\n  /*\n   * Install the authority, and take it away again on unmount.\n   *\n   * `setCoverageAuthority` clears the cache on both edges by construction — an authority that is\n   * being replaced knows nothing about what the previous one covered, so every held entry is of\n   * unknown freshness.\n   */\n  useEffect(() => {\n    const cache = readCache;\n\n    const authority: ResourceReadCoverageAuthority = {\n      covers: (_resourceType, scopes) => {\n        if (!isConnected) return false;\n        if (scopes.length === 0) return false;\n        return scopes.every((scope) => confirmedRoomsRef.current.has(\n          buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId),\n        ));\n      },\n      requestCoverage: (resourceType, scopes) => {\n        if (!isConnected) return;\n        for (const scope of scopes) {\n          const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);\n          if (requestedRoomsRef.current.has(roomName)) continue;\n          requestedRoomsRef.current.set(roomName, { ...scope, resourceType });\n\n          void claimResourceRoom({\n            ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n            resourceType,\n            scopeKey: scope.scopeKey,\n            scopeId: scope.scopeId,\n            /*\n             * The scope's own identifier, in the shape the server's authorization expects. The\n             * subscribe handler refuses an EMPTY `contextResourceIdentifiers` outright, and\n             * `verifyScopeAccess` reads the scope from it — so this is the authorization input, not\n             * decoration.\n             */\n            contextResourceIdentifiers: { [`${scope.scopeKey}Id`]: scope.scopeId },\n          }).then((result) => {\n            if (result?.success) {\n              confirmedRoomsRef.current.add(roomName);\n              logDebug('scope room confirmed', { roomName });\n            } else {\n              // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever\n              // served — the cache degrades to the un-cached path rather than guessing.\n              requestedRoomsRef.current.delete(roomName);\n              logDebug('scope room not confirmed; entries under it stay unservable', { roomName });\n            }\n          }).catch(() => {\n            requestedRoomsRef.current.delete(roomName);\n          });\n        }\n      },\n    };\n\n    cache.setCoverageAuthority(authority);\n    return () => {\n      cache.setCoverageAuthority(null);\n      releaseAllRooms();\n    };\n  }, [readCache, isConnected, claimResourceRoom, releaseAllRooms]);\n\n  /*\n   * Hand the cache the ambient application id.\n   *\n   * An APPLICATION-scoped resource's room is keyed on it, and no URL carries one — so without this\n   * the read path cannot name the room it belongs in, and a push addressed there is received by\n   * nobody (issue #283). The bridge is the right place because it is a COMPONENT and can read the\n   * app scope; the cache service is plain and cannot.\n   */\n  useEffect(() => {\n    readCache.setApplicationId(currentApplicationId);\n  }, [currentApplicationId, readCache]);\n\n  /*\n   * A reconnect invalidates every confirmation.\n   *\n   * Rooms are per-SOCKET, so a new connection has joined nothing — and the window in which the\n   * socket was down is exactly the window in which a mutation could have gone unheard. Both halves\n   * point the same way: drop the cache and start the claims again.\n   */\n  useEffect(() => {\n    if (connectionCount === 0) return;\n    confirmedRoomsRef.current.clear();\n    requestedRoomsRef.current.clear();\n    readCache.clear();\n    logDebug('connection changed; coverage and cache reset', { connectionCount });\n  }, [connectionCount, readCache]);\n\n  /*\n   * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.\n   *\n   * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page\n   * reload, and reads are tenancy-filtered at the repository. So without this, switching organization\n   * would serve the previous tenant's rows from cache. The rooms are re-claimed under the new\n   * organization by the next read that wants them.\n   */\n  useEffect(() => {\n    readCache.clear();\n    releaseAllRooms();\n    logDebug('organization scope changed; cache cleared', { currentOrganizationId });\n  }, [currentOrganizationId, readCache, releaseAllRooms]);\n\n  /* Invalidate on anything the server says changed, at whatever grade it arrives. */\n  useEffect(() => {\n    if (!isConnected) return;\n\n    const unsubscribeUpdated = on<WS_ResourceUpdatedPayload>(\n      CoreWebSocketEvent.RESOURCE_UPDATED,\n      (payload) => {\n        /*\n         * Every grade invalidates, including the SYNC grade that carries a full row.\n         *\n         * A sync payload is authoritative for ONE row, and a cached entry is usually a LIST whose\n         * membership, ordering and pagination the row cannot settle — an added row does not announce\n         * where it belongs. Patching the row into the cached list would be a guess; dropping the\n         * entry costs one refetch and cannot be wrong.\n         */\n        readCache.invalidateResourceType(payload.resourceType);\n        logDebug('invalidated by resource update', {\n          resourceType: payload.resourceType,\n          deliveryTarget: payload.deliveryTarget,\n          isScopeRoom: payload.deliveryTarget === WebSocketResourceDeliveryTarget.SCOPE_ROOM_NOTIFICATION,\n        });\n      },\n    );\n\n    const unsubscribeDeleted = on<WS_ResourceDeletedPayload>(\n      CoreWebSocketEvent.RESOURCE_DELETED,\n      (payload) => {\n        readCache.invalidateResourceType(payload.resourceType);\n      },\n    );\n\n    return () => {\n      unsubscribeUpdated();\n      unsubscribeDeleted();\n    };\n  }, [on, isConnected, readCache]);\n\n  return null;\n};\n"]}

package/dist/esm/core/resources/ResourceRegistryContext.d.ts

@@ -1,3 +1,4 @@
+import type { ResourceReadCacheFrontendService } from '../../core/resources/resource-read-cache.frontend.service';
 import { ResourceConfiguration_OperationPath } from '@wildo-ai/saas-models';
 import React, { ReactNode } from 'react';
 import { ResourceOperationCallParameters, ResourceSearchCallParameters } from '../../core/requests/wildo-http-client-resources.frontend.service';
@@ -51,6 +52,14 @@ export interface ResourceRegistryContextType {
     getResourcesRegistry: () => FrontendResourcesRegistry;
     getAvailableResourceTypes: () => string[];
     getAvailableOperationPaths: () => string[];
+    /**
+     * The engine-wide resource READ cache.
+     *
+     * Exposed so the WebSocket layer can install its coverage authority and invalidate through it.
+     * The CACHE is exposed rather than the HTTP client that owns it: a consumer of this context has no
+     * business reaching the transport, and narrowing the surface keeps it that way.
+     */
+    getReadCache: () => ResourceReadCacheFrontendService;
     setAuthToken: (token: string | null) => void;
     setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;
     setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;

package/dist/esm/core/resources/ResourceRegistryContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistryContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAIpC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,EAAiB,SAAS,EAA0B,MAAM,OAAO,CAAC;AAEhF,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sEAAsE,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAE1L,OAAO,EAAkC,KAAK,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AAE1K;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACtC,MAAM,MAAM,uBAAuB,GAAG,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,EAAE,yBAAyB,CAAC;IAGpC;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,EAC3B,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,+BAA+B,GAAG,4BAA4B,EAC1E,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAC;IAGxB;;;OAGG;IACH,wBAAwB,EAAE,CAAC,WAAW,GAAG,GAAG,EAC1C,MAAM,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;OAEG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAC9D;QAAE,kBAAkB,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAGhE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,gCAAgC,GAAG,SAAS,CAAC;IACjG,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;IACtD,yBAAyB,EAAE,MAAM,MAAM,EAAE,CAAC;IAC1C,0BAA0B,EAAE,MAAM,MAAM,EAAE,CAAC;IAG3C,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/D,oBAAoB,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAClE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,mBAAmB,EAAE,kCAAkC,CAAC;CACzD;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAqE,CAAC;AAEjK;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,6BAA6B,CA2L5E,CAAC"}
+{"version":3,"file":"ResourceRegistryContext.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAChI,OAAO,EAEL,mCAAmC,EAIpC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAmC,MAAM,OAAO,CAAC;AAEzF,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sEAAsE,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAE1L,OAAO,EAAkC,KAAK,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AAE1K;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACtC,MAAM,MAAM,uBAAuB,GAAG,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,EAAE,yBAAyB,CAAC;IAGpC;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,EAC3B,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,+BAA+B,GAAG,4BAA4B,EAC1E,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAC;IAGxB;;;OAGG;IACH,wBAAwB,EAAE,CAAC,WAAW,GAAG,GAAG,EAC1C,MAAM,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;OAEG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAC9D;QAAE,kBAAkB,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAGhE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,gCAAgC,GAAG,SAAS,CAAC;IACjG,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;IACtD,yBAAyB,EAAE,MAAM,MAAM,EAAE,CAAC;IAC1C,0BAA0B,EAAE,MAAM,MAAM,EAAE,CAAC;IAE3C;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,gCAAgC,CAAC;IAGrD,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/D,oBAAoB,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAClE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,mBAAmB,EAAE,kCAAkC,CAAC;CACzD;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAqE,CAAC;AAEjK;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,6BAA6B,CAqO5E,CAAC"}

package/dist/esm/core/resources/ResourceRegistryContext.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { CoreResourceOperation, ResourcesConfig_OperationPathUtils, validateRequiredForeignKeyFillability, ForeignKeyFillabilityViolationSeverity, } from '@wildo-ai/saas-models';
-import { createContext, useCallback, useEffect } from 'react';
+import { createContext, useCallback, useEffect, useMemo } from 'react';
 import { envLoader } from '../../core/runtime/env-variable-loader.frontend.service.js';
 import { resolveEffectiveCoreOperationFromOperation } from '../../core/resources/operation-semantics.frontend.utils.js';
 import { OperationEnabledConditionUtils } from '../../core/resources/utils/operation-enabled-condition.frontend.utils.js';
@@ -50,7 +50,7 @@ export const ResourceRegistryProvider = ({ children, resourcesRepository }) => {
     /**
      * Main operation execution method - handles both regular and search operations
      */
-    const doOperation = async (operationPath, parameters, options) => {
+    const doOperation = useCallback(async (operationPath, parameters, options) => {
         // Convert OperationPath object to string key if needed
         const operationPathKey = typeof operationPath === 'string'
             ? operationPath
@@ -67,7 +67,7 @@ export const ResourceRegistryProvider = ({ children, resourcesRepository }) => {
             // Call regular operation method
             return resourcesHttpClient.doOperation(operationPathKey, parameters, options);
         }
-    };
+    }, [resourcesHttpClient]);
     /**
      * Evaluate if an operation is enabled (enabledCondition).
      * Centralized here so all consumers automatically benefit from any doOperation overrides
@@ -86,37 +86,37 @@ export const ResourceRegistryProvider = ({ children, resourcesRepository }) => {
     /**
      * Check if resource is available
      */
-    const hasResource = (resourceName) => {
+    const hasResource = useCallback((resourceName) => {
         return resourceName in registry.resourceConfigurations;
-    };
+    }, [registry]);
     /**
      * Get resource configuration
      */
-    const getResourceConfiguration = (resourceName) => {
+    const getResourceConfiguration = useCallback((resourceName) => {
         return registry.resourceConfigurations[resourceName];
-    };
+    }, [registry]);
     /**
      * Get the full resources registry
      */
-    const getResourcesRegistry = () => {
+    const getResourcesRegistry = useCallback(() => {
         return registry;
-    };
+    }, [registry]);
     /**
      * Get available resource types
      */
-    const getAvailableResourceTypes = () => {
+    const getAvailableResourceTypes = useCallback(() => {
         return Object.keys(registry.resourceConfigurations);
-    };
+    }, [registry]);
     /**
      * Get available operation paths
      */
-    const getAvailableOperationPaths = () => {
+    const getAvailableOperationPaths = useCallback(() => {
         return resourcesHttpClient.getAvailableOperationPaths();
-    };
+    }, [resourcesHttpClient]);
     /**
      * Set authentication token for resource operations
      */
-    const setAuthToken = (token) => {
+    const setAuthToken = useCallback((token) => {
         if (token) {
             resourcesHttpClient.setAuthToken(token);
             applicationHttpClient.setAuthToken(token);
@@ -125,25 +125,47 @@ export const ResourceRegistryProvider = ({ children, resourcesRepository }) => {
             resourcesHttpClient.clearAuthToken();
             applicationHttpClient.clearAuthToken();
         }
-    };
+    }, [resourcesHttpClient, applicationHttpClient]);
     /**
      * Set token renewal handler for resource operations.
      * Called by AuthSessionContext to enable automatic token refresh on 401s
      * from the resources HTTP client (not just the manual calls client).
      */
-    const setTokenRenewalHandler = (handler) => {
+    const setTokenRenewalHandler = useCallback((handler) => {
         resourcesHttpClient.setTokenRenewalHandler(handler);
         applicationHttpClient.setTokenRenewalHandler(handler);
-    };
-    const setStepUpAuthHandler = (handler) => {
+    }, [resourcesHttpClient, applicationHttpClient]);
+    const setStepUpAuthHandler = useCallback((handler) => {
         resourcesHttpClient.setStepUpAuthHandler(handler);
         applicationHttpClient.setStepUpAuthHandler(handler);
-    };
-    const setConsumableToken = (token) => {
+    }, [resourcesHttpClient, applicationHttpClient]);
+    const setConsumableToken = useCallback((token) => {
         resourcesHttpClient.setConsumableToken(token);
         applicationHttpClient.setConsumableToken(token);
-    };
-    const value = {
+    }, [resourcesHttpClient, applicationHttpClient]);
+    /*
+     * Stable across renders, like every other member below.
+     *
+     * It used to be an inline arrow in the value object, which made it a NEW identity every render.
+     * `ResourceReadCacheBridge` depended on it in an effect whose job includes installing the cache's
+     * coverage authority — and installing an authority CLEARS the cache — so the read cache was emptied
+     * on essentially every render and could never do its job (issue #248).
+     */
+    const getReadCache = useCallback(() => resourcesHttpClient.getReadCache(), [resourcesHttpClient]);
+    /*
+     * MEMOIZED, and that is load-bearing rather than tidy.
+     *
+     * This value reaches 75 consumer files through `useResourceRegistry()`. Rebuilt every render, it
+     * re-rendered all of them and handed each a NEW identity for every function on it — so any consumer
+     * placing one in a dependency array got an effect that fired on every render. That is not
+     * hypothetical: it emptied the resource read cache continuously until #248 was fixed, and it
+     * defeated `ScopedResourceRegistryProvider`'s own `useMemo`, which depends on this object as
+     * `base`.
+     *
+     * Every member is itself a `useCallback` over the repository's stable service instances, so this
+     * memo only changes when the registry or a client actually does.
+     */
+    const value = useMemo(() => ({
         // State
         registry,
         // Main execution method
@@ -157,12 +179,28 @@ export const ResourceRegistryProvider = ({ children, resourcesRepository }) => {
         getResourcesRegistry,
         getAvailableResourceTypes,
         getAvailableOperationPaths,
+        getReadCache,
         // Auth
         setAuthToken,
         setTokenRenewalHandler,
         setStepUpAuthHandler,
         setConsumableToken,
-    };
+    }), [
+        registry,
+        doOperation,
+        evaluateOperationEnabled,
+        getOperationContextNeeds,
+        hasResource,
+        getResourceConfiguration,
+        getResourcesRegistry,
+        getAvailableResourceTypes,
+        getAvailableOperationPaths,
+        getReadCache,
+        setAuthToken,
+        setTokenRenewalHandler,
+        setStepUpAuthHandler,
+        setConsumableToken,
+    ]);
     return _jsx(ResourceRegistryContext.Provider, { value: value, children: children });
 };
 //# sourceMappingURL=ResourceRegistryContext.js.map

package/dist/esm/core/resources/ResourceRegistryContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistryContext.js","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,qBAAqB,EAErB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAc,EAAE,aAAa,EAAa,WAAW,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAQlG,OAAO,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACnI,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AA4E1K;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2D,aAAa,CAA0C,SAAS,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE;IACrH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IACzE,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,uFAAuF;IACvF,uCAAuC;IACvC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,wBAAwB,EAAE,CAAC;IAE7E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,QAAQ,CAAC,sBAA6B,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnG,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,WAAW,GAAG,KAAK,EACvB,aAAsC,EACtC,UAA0E,EAC1E,OAAwB,EACJ,EAAE;QACtB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,aAAa,KAAK,QAAQ;YACxD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,SAAS;YACjC,CAAC,CAAC,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM;YACxF,CAAC,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAEpI,IAAI,iBAAiB,EAAE,CAAC;YACtB,8BAA8B;YAC9B,OAAO,mBAAmB,CAAC,sBAAsB,CAC/C,gBAAgB,EAChB,UAA0C,EAC1C,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,OAAO,mBAAmB,CAAC,WAAW,CACpC,gBAAgB,EAChB,UAA6C,EAC7C,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EACH,MAA8F,EAC5E,EAAE;QACpB,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,QAAQ;YAC3B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAC3C,SAAiE,EACjE,EAAE;QACF,OAAO,8BAA8B,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;OAEG;IACH,MAAM,WAAW,GAAG,CAAC,YAAoB,EAAW,EAAE;QACpD,OAAO,YAAY,IAAI,QAAQ,CAAC,sBAAsB,CAAC;IACzD,CAAC,CAAC;IAEF;;OAEG;IACH,MAAM,wBAAwB,GAAG,CAAC,YAAoB,EAAgD,EAAE;QACtG,OAAO,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF;;OAEG;IACH,MAAM,oBAAoB,GAAG,GAA8B,EAAE;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF;;OAEG;IACH,MAAM,yBAAyB,GAAG,GAAa,EAAE;QAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,CAAC;IAEF;;OAEG;IACH,MAAM,0BAA0B,GAAG,GAAa,EAAE;QAChD,OAAO,mBAAmB,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC,CAAC;IAEF;;OAEG;IACH,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAQ,EAAE;QAClD,IAAI,KAAK,EAAE,CAAC;YACV,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACrC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,sBAAsB,GAAG,CAAC,OAA4B,EAAQ,EAAE;QACpE,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,CAAC,OAAiC,EAAQ,EAAE;QACvE,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,qBAAqB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,KAAoB,EAAQ,EAAE;QACxD,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAgC;QACzC,QAAQ;QACR,QAAQ;QAER,wBAAwB;QACxB,WAAW;QAEX,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QAExB,UAAU;QACV,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAE1B,OAAO;QACP,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC;IAEF,OAAO,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoC,CAAC;AACvG,CAAC,CAAC","sourcesContent":["import {\n  CoreResourceOperation,\n  ResourceConfiguration_OperationPath,\n  ResourcesConfig_OperationPathUtils,\n  validateRequiredForeignKeyFillability,\n  ForeignKeyFillabilityViolationSeverity,\n} from '@wildo-ai/saas-models';\n\nimport React, { createContext, ReactNode, useCallback, useEffect } from 'react';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport {\n  ResourceOperationCallParameters,\n  ResourceSearchCallParameters\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-resources.frontend.service';\nimport { RequestOptions, TokenRenewalHandler, StepUpAuthHandler } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { ResourcesRepositoryFrontendService } from './resources-repository.frontend.service';\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { resolveEffectiveCoreOperationFromOperation } from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\n\n/**\n * Resource Registry Context\n * Manages resource configurations and operations\n *\n * ARCHITECTURE NOTE (Scopes):\n * - The base provider is `ResourceRegistryProvider`, which exposes `doOperation()` and the registry.\n * - The app can optionally wrap it with `ScopedResourceRegistryProvider` (in `core/resources/ScopedResourceRegistryProvider.tsx`).\n *   That wrapper **overrides `doOperation()`** to automatically inject the current `AppScope` into\n *   `parameters.contextualParameters` for nested callers (strictly relevant-only).\n * - This means `useResourceRegistry().doOperation(...)` may be the base implementation OR a scoped override,\n *   depending on provider hierarchy.\n */\n\nexport type OperationPathKey = string;\nexport type OperationPathIdentifier = ResourceConfiguration_OperationPath<any, any> | OperationPathKey;\n\nexport interface ResourceRegistryContextType {\n  // State\n  registry: FrontendResourcesRegistry;\n\n  // Main execution method\n  /**\n   * Execute a resource operation (API_CALL or SEARCH).\n   *\n   * IMPORTANT:\n   * This function can be transparently overridden by a nested provider (see note above),\n   * so callers usually should NOT manually inject global scope/context unless they are intentionally\n   * overriding/adding to the contextual parameters for a specific call.\n   *\n   * Merge semantics (when scoped):\n   * - scoped provider injects relevant AppScope fields\n   * - explicit `parameters.contextualParameters` passed by the caller override injected values\n   */\n  doOperation: <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ) => Promise<TResponse>;\n\n  // EnabledCondition helpers\n  /**\n   * Evaluate `operation.enabledCondition()` with the current registry + doOperation.\n   * This is used by UI to decide whether an operation should be shown/enabled.\n   */\n  evaluateOperationEnabled: <TMainSchema = any>(\n    params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n  ) => Promise<boolean>;\n\n  /**\n   * Static context-needs extraction for an operation (enabledCondition + prefix ops).\n   */\n  getOperationContextNeeds: (\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => { needsObjectContext: boolean; needsUserContext: boolean };\n\n  // Helpers\n  hasResource: (resourceName: string) => boolean;\n  getResourceConfiguration: (resourceName: string) => AnyFrontendResourceConfiguration | undefined;\n  getResourcesRegistry: () => FrontendResourcesRegistry;\n  getAvailableResourceTypes: () => string[];\n  getAvailableOperationPaths: () => string[];\n  \n  // Auth token management\n  setAuthToken: (token: string | null) => void;\n  setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;\n  setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;\n  setConsumableToken: (token: string | null) => void;\n}\n\nexport interface ResourceRegistryProviderProps {\n  children: ReactNode;\n  resourcesRepository: ResourcesRepositoryFrontendService;\n}\n\n/**\n * Resource Registry Context\n * Exported for use in separate hook file (Fast Refresh compatibility)\n * @internal - Use useResourceRegistry() hook instead of accessing this directly\n */\nexport const ResourceRegistryContext: React.Context<ResourceRegistryContextType | undefined> = createContext<ResourceRegistryContextType | undefined>(undefined);\n\n/**\n * ResourceRegistryProvider - Simplified version without location dependency\n * isActive computation is now handled by NavigationProvider which is more appropriate\n */\nexport const ResourceRegistryProvider: React.FC<ResourceRegistryProviderProps> = ({ children, resourcesRepository }) => {\n  // Get the registry and resources HTTP client from the repository service\n  const registry = resourcesRepository.getResourcesRegistry();\n  const resourcesHttpClient = resourcesRepository.getResourcesHttpClient();\n  // The base application HTTP client (exposed app-wide as `useApplication().httpClient`)\n  // is a SEPARATE instance from the resources client above. Resource-integrated file\n  // operations (`FormFieldFile` upload / metadata / delete) run through it, so it must\n  // receive the SAME auth token / renewal handler / step-up handler / consumable token\n  // that the resources client gets — otherwise those file requests go out unauthenticated\n  // (401). File upload was the first authenticated consumer of this base client, so this\n  // wiring gap was previously invisible.\n  const applicationHttpClient = resourcesRepository.getApplicationHttpClient();\n\n  // Dev-only mirror of the backend startup guardrail: surface required-FK\n  // fillability violations in the browser console so a frontend-focused dev sees\n  // them where the create form actually lives. The backend is the AUTHORITATIVE\n  // gate (it hard-fails on FAIL severity), so here we only warn — never throw,\n  // and always fail-open so a validator edge case can't affect app load.\n  useEffect(() => {\n    if (!envLoader.isDevelopment()) {\n      return;\n    }\n    try {\n      const violations = validateRequiredForeignKeyFillability(registry.resourceConfigurations as any);\n      for (const violation of violations) {\n        const label = violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL ? 'FAIL' : 'WARN';\n        // eslint-disable-next-line no-console\n        console.warn(`[required-fk-fillability:${label}] ${violation.kind}: ${violation.message}`);\n      }\n    } catch {\n      // Fail-open — never let the guardrail affect app load.\n    }\n  }, [registry]);\n\n  /**\n   * Main operation execution method - handles both regular and search operations\n   */\n  const doOperation = async <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ): Promise<TResponse> => {\n    // Convert OperationPath object to string key if needed\n    const operationPathKey = typeof operationPath === 'string' \n      ? operationPath \n      : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n\n    const operation = resourcesHttpClient.getOperationDetails(operationPathKey);\n    const isSearchOperation = operation\n      ? resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.SEARCH\n      : ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey).operationIdentifier === CoreResourceOperation.SEARCH;\n\n    if (isSearchOperation) {\n      // Call search-specific method\n      return resourcesHttpClient.executeSearchOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceSearchCallParameters,\n        options\n      );\n    } else {\n      // Call regular operation method\n      return resourcesHttpClient.doOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceOperationCallParameters,\n        options\n      );\n    }\n  };\n\n  /**\n   * Evaluate if an operation is enabled (enabledCondition).\n   * Centralized here so all consumers automatically benefit from any doOperation overrides\n   * (e.g. ScopedResourceRegistryProvider injecting AppScope).\n   */\n  const evaluateOperationEnabled = useCallback(\n    async <TMainSchema = any>(\n      params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n    ): Promise<boolean> => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: registry,\n        doOperation,\n      });\n    },\n    [registry, doOperation]\n  );\n\n  const getOperationContextNeeds = useCallback((\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => {\n    return OperationEnabledConditionUtils.getOperationContextNeeds(operation);\n  }, []);\n\n  /**\n   * Check if resource is available\n   */\n  const hasResource = (resourceName: string): boolean => {\n    return resourceName in registry.resourceConfigurations;\n  };\n\n  /**\n   * Get resource configuration\n   */\n  const getResourceConfiguration = (resourceName: string): AnyFrontendResourceConfiguration | undefined => {\n    return registry.resourceConfigurations[resourceName];\n  };\n\n  /**\n   * Get the full resources registry\n   */\n  const getResourcesRegistry = (): FrontendResourcesRegistry => {\n    return registry;\n  };\n\n  /**\n   * Get available resource types\n   */\n  const getAvailableResourceTypes = (): string[] => {\n    return Object.keys(registry.resourceConfigurations);\n  };\n\n  /**\n   * Get available operation paths\n   */\n  const getAvailableOperationPaths = (): string[] => {\n    return resourcesHttpClient.getAvailableOperationPaths();\n  };\n  \n  /**\n   * Set authentication token for resource operations\n   */\n  const setAuthToken = (token: string | null): void => {\n    if (token) {\n      resourcesHttpClient.setAuthToken(token);\n      applicationHttpClient.setAuthToken(token);\n    } else {\n      resourcesHttpClient.clearAuthToken();\n      applicationHttpClient.clearAuthToken();\n    }\n  };\n\n  /**\n   * Set token renewal handler for resource operations.\n   * Called by AuthSessionContext to enable automatic token refresh on 401s\n   * from the resources HTTP client (not just the manual calls client).\n   */\n  const setTokenRenewalHandler = (handler: TokenRenewalHandler): void => {\n    resourcesHttpClient.setTokenRenewalHandler(handler);\n    applicationHttpClient.setTokenRenewalHandler(handler);\n  };\n\n  const setStepUpAuthHandler = (handler: StepUpAuthHandler | null): void => {\n    resourcesHttpClient.setStepUpAuthHandler(handler);\n    applicationHttpClient.setStepUpAuthHandler(handler);\n  };\n\n  const setConsumableToken = (token: string | null): void => {\n    resourcesHttpClient.setConsumableToken(token);\n    applicationHttpClient.setConsumableToken(token);\n  };\n\n  const value: ResourceRegistryContextType = {\n    // State\n    registry,\n\n    // Main execution method\n    doOperation,\n\n    // EnabledCondition helpers\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n\n    // Helpers\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    \n    // Auth\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  };\n\n  return <ResourceRegistryContext.Provider value={value}>{children}</ResourceRegistryContext.Provider>;\n};\n\n// useResourceRegistry hook is now in separate file: ./useResourceRegistry.ts\n// This separation is required for React Fast Refresh compatibility\n"]}
+{"version":3,"file":"ResourceRegistryContext.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,qBAAqB,EAErB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAc,EAAE,aAAa,EAAa,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAQlG,OAAO,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACnI,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAqF1K;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2D,aAAa,CAA0C,SAAS,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE;IACrH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IACzE,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,uFAAuF;IACvF,uCAAuC;IACvC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,wBAAwB,EAAE,CAAC;IAE7E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,QAAQ,CAAC,sBAA6B,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnG,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EACnC,aAAsC,EACtC,UAA0E,EAC1E,OAAwB,EACJ,EAAE;QACtB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,aAAa,KAAK,QAAQ;YACxD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,SAAS;YACjC,CAAC,CAAC,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM;YACxF,CAAC,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAEpI,IAAI,iBAAiB,EAAE,CAAC;YACtB,8BAA8B;YAC9B,OAAO,mBAAmB,CAAC,sBAAsB,CAC/C,gBAAgB,EAChB,UAA0C,EAC1C,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,OAAO,mBAAmB,CAAC,WAAW,CACpC,gBAAgB,EAChB,UAA6C,EAC7C,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EACH,MAA8F,EAC5E,EAAE;QACpB,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,QAAQ;YAC3B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAC3C,SAAiE,EACjE,EAAE;QACF,OAAO,8BAA8B,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAW,EAAE;QAChE,OAAO,YAAY,IAAI,QAAQ,CAAC,sBAAsB,CAAC;IACzD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAgD,EAAE;QAClH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAA8B,EAAE;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,yBAAyB,GAAG,WAAW,CAAC,GAAa,EAAE;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,0BAA0B,GAAG,WAAW,CAAC,GAAa,EAAE;QAC5D,OAAO,mBAAmB,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACrC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;OAIG;IACH,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,OAA4B,EAAQ,EAAE;QAChF,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,OAAiC,EAAQ,EAAE;QACnF,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,qBAAqB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QACpE,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;;;;OAOG;IACH,MAAM,YAAY,GAAG,WAAW,CAC9B,GAAqC,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAC1E,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,MAAM,KAAK,GAAgC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,QAAQ;QACR,QAAQ;QAER,wBAAwB;QACxB,WAAW;QAEX,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QAExB,UAAU;QACV,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QAEZ,OAAO;QACP,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,EAAE;QACF,QAAQ;QACR,WAAW;QACX,wBAAwB;QACxB,wBAAwB;QACxB,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QACZ,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,CAAC;IAEH,OAAO,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoC,CAAC;AACvG,CAAC,CAAC","sourcesContent":["import type { ResourceReadCacheFrontendService } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\nimport {\n  CoreResourceOperation,\n  ResourceConfiguration_OperationPath,\n  ResourcesConfig_OperationPathUtils,\n  validateRequiredForeignKeyFillability,\n  ForeignKeyFillabilityViolationSeverity,\n} from '@wildo-ai/saas-models';\n\nimport React, { createContext, ReactNode, useCallback, useEffect, useMemo } from 'react';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport {\n  ResourceOperationCallParameters,\n  ResourceSearchCallParameters\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-resources.frontend.service';\nimport { RequestOptions, TokenRenewalHandler, StepUpAuthHandler } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { ResourcesRepositoryFrontendService } from './resources-repository.frontend.service';\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { resolveEffectiveCoreOperationFromOperation } from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\n\n/**\n * Resource Registry Context\n * Manages resource configurations and operations\n *\n * ARCHITECTURE NOTE (Scopes):\n * - The base provider is `ResourceRegistryProvider`, which exposes `doOperation()` and the registry.\n * - The app can optionally wrap it with `ScopedResourceRegistryProvider` (in `core/resources/ScopedResourceRegistryProvider.tsx`).\n *   That wrapper **overrides `doOperation()`** to automatically inject the current `AppScope` into\n *   `parameters.contextualParameters` for nested callers (strictly relevant-only).\n * - This means `useResourceRegistry().doOperation(...)` may be the base implementation OR a scoped override,\n *   depending on provider hierarchy.\n */\n\nexport type OperationPathKey = string;\nexport type OperationPathIdentifier = ResourceConfiguration_OperationPath<any, any> | OperationPathKey;\n\nexport interface ResourceRegistryContextType {\n  // State\n  registry: FrontendResourcesRegistry;\n\n  // Main execution method\n  /**\n   * Execute a resource operation (API_CALL or SEARCH).\n   *\n   * IMPORTANT:\n   * This function can be transparently overridden by a nested provider (see note above),\n   * so callers usually should NOT manually inject global scope/context unless they are intentionally\n   * overriding/adding to the contextual parameters for a specific call.\n   *\n   * Merge semantics (when scoped):\n   * - scoped provider injects relevant AppScope fields\n   * - explicit `parameters.contextualParameters` passed by the caller override injected values\n   */\n  doOperation: <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ) => Promise<TResponse>;\n\n  // EnabledCondition helpers\n  /**\n   * Evaluate `operation.enabledCondition()` with the current registry + doOperation.\n   * This is used by UI to decide whether an operation should be shown/enabled.\n   */\n  evaluateOperationEnabled: <TMainSchema = any>(\n    params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n  ) => Promise<boolean>;\n\n  /**\n   * Static context-needs extraction for an operation (enabledCondition + prefix ops).\n   */\n  getOperationContextNeeds: (\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => { needsObjectContext: boolean; needsUserContext: boolean };\n\n  // Helpers\n  hasResource: (resourceName: string) => boolean;\n  getResourceConfiguration: (resourceName: string) => AnyFrontendResourceConfiguration | undefined;\n  getResourcesRegistry: () => FrontendResourcesRegistry;\n  getAvailableResourceTypes: () => string[];\n  getAvailableOperationPaths: () => string[];\n\n  /**\n   * The engine-wide resource READ cache.\n   *\n   * Exposed so the WebSocket layer can install its coverage authority and invalidate through it.\n   * The CACHE is exposed rather than the HTTP client that owns it: a consumer of this context has no\n   * business reaching the transport, and narrowing the surface keeps it that way.\n   */\n  getReadCache: () => ResourceReadCacheFrontendService;\n  \n  // Auth token management\n  setAuthToken: (token: string | null) => void;\n  setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;\n  setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;\n  setConsumableToken: (token: string | null) => void;\n}\n\nexport interface ResourceRegistryProviderProps {\n  children: ReactNode;\n  resourcesRepository: ResourcesRepositoryFrontendService;\n}\n\n/**\n * Resource Registry Context\n * Exported for use in separate hook file (Fast Refresh compatibility)\n * @internal - Use useResourceRegistry() hook instead of accessing this directly\n */\nexport const ResourceRegistryContext: React.Context<ResourceRegistryContextType | undefined> = createContext<ResourceRegistryContextType | undefined>(undefined);\n\n/**\n * ResourceRegistryProvider - Simplified version without location dependency\n * isActive computation is now handled by NavigationProvider which is more appropriate\n */\nexport const ResourceRegistryProvider: React.FC<ResourceRegistryProviderProps> = ({ children, resourcesRepository }) => {\n  // Get the registry and resources HTTP client from the repository service\n  const registry = resourcesRepository.getResourcesRegistry();\n  const resourcesHttpClient = resourcesRepository.getResourcesHttpClient();\n  // The base application HTTP client (exposed app-wide as `useApplication().httpClient`)\n  // is a SEPARATE instance from the resources client above. Resource-integrated file\n  // operations (`FormFieldFile` upload / metadata / delete) run through it, so it must\n  // receive the SAME auth token / renewal handler / step-up handler / consumable token\n  // that the resources client gets — otherwise those file requests go out unauthenticated\n  // (401). File upload was the first authenticated consumer of this base client, so this\n  // wiring gap was previously invisible.\n  const applicationHttpClient = resourcesRepository.getApplicationHttpClient();\n\n  // Dev-only mirror of the backend startup guardrail: surface required-FK\n  // fillability violations in the browser console so a frontend-focused dev sees\n  // them where the create form actually lives. The backend is the AUTHORITATIVE\n  // gate (it hard-fails on FAIL severity), so here we only warn — never throw,\n  // and always fail-open so a validator edge case can't affect app load.\n  useEffect(() => {\n    if (!envLoader.isDevelopment()) {\n      return;\n    }\n    try {\n      const violations = validateRequiredForeignKeyFillability(registry.resourceConfigurations as any);\n      for (const violation of violations) {\n        const label = violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL ? 'FAIL' : 'WARN';\n        // eslint-disable-next-line no-console\n        console.warn(`[required-fk-fillability:${label}] ${violation.kind}: ${violation.message}`);\n      }\n    } catch {\n      // Fail-open — never let the guardrail affect app load.\n    }\n  }, [registry]);\n\n  /**\n   * Main operation execution method - handles both regular and search operations\n   */\n  const doOperation = useCallback(async <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ): Promise<TResponse> => {\n    // Convert OperationPath object to string key if needed\n    const operationPathKey = typeof operationPath === 'string' \n      ? operationPath \n      : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n\n    const operation = resourcesHttpClient.getOperationDetails(operationPathKey);\n    const isSearchOperation = operation\n      ? resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.SEARCH\n      : ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey).operationIdentifier === CoreResourceOperation.SEARCH;\n\n    if (isSearchOperation) {\n      // Call search-specific method\n      return resourcesHttpClient.executeSearchOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceSearchCallParameters,\n        options\n      );\n    } else {\n      // Call regular operation method\n      return resourcesHttpClient.doOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceOperationCallParameters,\n        options\n      );\n    }\n  }, [resourcesHttpClient]);\n\n  /**\n   * Evaluate if an operation is enabled (enabledCondition).\n   * Centralized here so all consumers automatically benefit from any doOperation overrides\n   * (e.g. ScopedResourceRegistryProvider injecting AppScope).\n   */\n  const evaluateOperationEnabled = useCallback(\n    async <TMainSchema = any>(\n      params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n    ): Promise<boolean> => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: registry,\n        doOperation,\n      });\n    },\n    [registry, doOperation]\n  );\n\n  const getOperationContextNeeds = useCallback((\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => {\n    return OperationEnabledConditionUtils.getOperationContextNeeds(operation);\n  }, []);\n\n  /**\n   * Check if resource is available\n   */\n  const hasResource = useCallback((resourceName: string): boolean => {\n    return resourceName in registry.resourceConfigurations;\n  }, [registry]);\n\n  /**\n   * Get resource configuration\n   */\n  const getResourceConfiguration = useCallback((resourceName: string): AnyFrontendResourceConfiguration | undefined => {\n    return registry.resourceConfigurations[resourceName];\n  }, [registry]);\n\n  /**\n   * Get the full resources registry\n   */\n  const getResourcesRegistry = useCallback((): FrontendResourcesRegistry => {\n    return registry;\n  }, [registry]);\n\n  /**\n   * Get available resource types\n   */\n  const getAvailableResourceTypes = useCallback((): string[] => {\n    return Object.keys(registry.resourceConfigurations);\n  }, [registry]);\n\n  /**\n   * Get available operation paths\n   */\n  const getAvailableOperationPaths = useCallback((): string[] => {\n    return resourcesHttpClient.getAvailableOperationPaths();\n  }, [resourcesHttpClient]);\n  \n  /**\n   * Set authentication token for resource operations\n   */\n  const setAuthToken = useCallback((token: string | null): void => {\n    if (token) {\n      resourcesHttpClient.setAuthToken(token);\n      applicationHttpClient.setAuthToken(token);\n    } else {\n      resourcesHttpClient.clearAuthToken();\n      applicationHttpClient.clearAuthToken();\n    }\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /**\n   * Set token renewal handler for resource operations.\n   * Called by AuthSessionContext to enable automatic token refresh on 401s\n   * from the resources HTTP client (not just the manual calls client).\n   */\n  const setTokenRenewalHandler = useCallback((handler: TokenRenewalHandler): void => {\n    resourcesHttpClient.setTokenRenewalHandler(handler);\n    applicationHttpClient.setTokenRenewalHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setStepUpAuthHandler = useCallback((handler: StepUpAuthHandler | null): void => {\n    resourcesHttpClient.setStepUpAuthHandler(handler);\n    applicationHttpClient.setStepUpAuthHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setConsumableToken = useCallback((token: string | null): void => {\n    resourcesHttpClient.setConsumableToken(token);\n    applicationHttpClient.setConsumableToken(token);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /*\n   * Stable across renders, like every other member below.\n   *\n   * It used to be an inline arrow in the value object, which made it a NEW identity every render.\n   * `ResourceReadCacheBridge` depended on it in an effect whose job includes installing the cache's\n   * coverage authority — and installing an authority CLEARS the cache — so the read cache was emptied\n   * on essentially every render and could never do its job (issue #248).\n   */\n  const getReadCache = useCallback(\n    (): ResourceReadCacheFrontendService => resourcesHttpClient.getReadCache(),\n    [resourcesHttpClient],\n  );\n\n  /*\n   * MEMOIZED, and that is load-bearing rather than tidy.\n   *\n   * This value reaches 75 consumer files through `useResourceRegistry()`. Rebuilt every render, it\n   * re-rendered all of them and handed each a NEW identity for every function on it — so any consumer\n   * placing one in a dependency array got an effect that fired on every render. That is not\n   * hypothetical: it emptied the resource read cache continuously until #248 was fixed, and it\n   * defeated `ScopedResourceRegistryProvider`'s own `useMemo`, which depends on this object as\n   * `base`.\n   *\n   * Every member is itself a `useCallback` over the repository's stable service instances, so this\n   * memo only changes when the registry or a client actually does.\n   */\n  const value: ResourceRegistryContextType = useMemo(() => ({\n    // State\n    registry,\n\n    // Main execution method\n    doOperation,\n\n    // EnabledCondition helpers\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n\n    // Helpers\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n\n    // Auth\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  }), [\n    registry,\n    doOperation,\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  ]);\n\n  return <ResourceRegistryContext.Provider value={value}>{children}</ResourceRegistryContext.Provider>;\n};\n\n// useResourceRegistry hook is now in separate file: ./useResourceRegistry.ts\n// This separation is required for React Fast Refresh compatibility\n"]}

package/dist/esm/core/resources/ScopedResourceRegistryProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ScopedResourceRegistryProvider.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAwB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAYpE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,SAAS,CAAC;CACrB;AA4CD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,QAAQ,EAAE,EAAE,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAgFpH"}
+{"version":3,"file":"ScopedResourceRegistryProvider.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAwB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAYpE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,SAAS,CAAC;CACrB;AA4CD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,QAAQ,EAAE,EAAE,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAgFpH"}