@wildo-ai/saas-frontend-lib 1.1.10 → 1.1.11

package/dist/esm/core/resources/operation-semantics.frontend.utils.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import { FieldSchemaType, getSchemaType, isFileSchema, isForeignKeyField, unwrapSchema } from '@wildo-ai/zod-decorators';
-import { BULK_OPERATION_HOST_SUPPLIED_FIELDS, BULK_OPERATION_MATCH_FIELD, BULK_OPERATION_SELECTOR_FIELD, COLLECTION_OPERATIONS_WITHOUT_IDS, CoreResourceOperation, ResourceGeneratedOperationKind, ResourceOperationVariantType, ResourceOperationFrontendSurface, ResourceOperationRiskLevel, NavigationTransition, Resources_SharedUtils, } from '@wildo-ai/saas-models';
+import { ALL_COLLECTION_OPERATIONS, BULK_OPERATION_HOST_SUPPLIED_FIELDS, BULK_OPERATION_MATCH_FIELD, BULK_OPERATION_SELECTOR_FIELD, COLLECTION_OPERATIONS_WITHOUT_IDS, CoreResourceOperation, ResourceGeneratedOperationKind, ResourceOperationVariantType, ResourceOperationFrontendSurface, ResourceOperationRiskLevel, NavigationTransition, Resources_SharedUtils, Resources_BulkOperationMatchListingSchema, getContextAddressedCompositionSingletonRelationshipCandidates, } from '@wildo-ai/saas-models';
 import { isCollectionScopedOperation, ResourceOperationActionPresentation, ResourceOperationActionScope, } from '../../core/resources/resources.frontend.schemas.js';
 export const BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY = 'bulkOperationSelectionIds';
 /**
@@ -53,6 +53,22 @@ export function resolveSurfaceTitleOperationIdentifier(operationIdentifier, reso
     }
     return String(operationIdentifier);
 }
+/**
+ * Is a surface showing this operation HEADED by the record's own name, rather than by the operation's title?
+ *
+ * Only for a CORE verb that addresses one record — READ (the record's page), UPDATE (its edit page, titled like the
+ * page: see {@link resolveSurfaceTitleOperationIdentifier}) and DELETE (whose question is WHICH record). A NAMED
+ * action on one record keeps its own title as the heading: `setRepresentativeAdmissionPolicy`'s title is what the page DOES, and the
+ * record is the thing it does it to, so its name sits beneath the title instead of replacing it (#2058). Until
+ * then a record label replaced every one-record surface's title, and every named action opened as a page headed
+ * only "E2E spfbb168", which says nothing about which action the form below performs.
+ *
+ * Keyed on the literal identifier for the same reason the title rule is: a custom operation BORROWING update
+ * semantics (`resourceOperationLike`) is still a named action.
+ */
+export function surfaceHeadingIsRecordName(operation) {
+    return isLiteralCoreResourceOperation(operation.operationIdentifier) && operationAddressesOneRecord(operation);
+}
 export function isUpdateLikeCoreOperation(coreOperation) {
     return coreOperation === CoreResourceOperation.UPDATE
         || coreOperation === CoreResourceOperation.UPDATE_MANY;
@@ -93,13 +109,33 @@ export function readBulkOperationMatchSelection(additionalContext) {
         return undefined;
     }
     const candidate = value;
+    // The listing the rows came from (#2718), read through its own wire schema so a malformed one travels as none.
+    const listing = Resources_BulkOperationMatchListingSchema.safeParse(candidate.listing);
     return {
         ...(candidate.filters && typeof candidate.filters === 'object' && !Array.isArray(candidate.filters)
             ? { filters: candidate.filters }
             : {}),
         ...(typeof candidate.search === 'string' && candidate.search !== '' ? { search: candidate.search } : {}),
+        ...(candidate.listing !== undefined && listing.success ? { listing: listing.data } : {}),
     };
 }
+/**
+ * How many records a bulk operation context names, for the words a bulk form shows ("will be cleared on 40 records",
+ * #2620): the ids when rows were picked, else the count the LISTING reported for a cross-page selection
+ * (`matchedCount`, a statement about the moment the person chose, as the bulk bar shows it). `undefined` when the context
+ * names no selection, or a cross-page one without its count.
+ *
+ * Read only for display: the selection the server writes to is the one `mergeBulkSelectionIntoRequestData` sends, and the
+ * count never travels with it.
+ */
+export function readBulkOperationSelectionCount(additionalContext) {
+    const ids = readBulkOperationSelectionIds(additionalContext);
+    if (ids)
+        return ids.length;
+    const match = additionalContext?.[BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY];
+    const matchedCount = match && typeof match === 'object' ? match.matchedCount : undefined;
+    return typeof matchedCount === 'number' && Number.isInteger(matchedCount) && matchedCount >= 0 ? matchedCount : undefined;
+}
 export function readResourceOperationExecutedDiscriminator(additionalContext) {
     const value = additionalContext?.[RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY];
     return typeof value === 'string' && value.length > 0 ? value : undefined;
@@ -131,7 +167,9 @@ export function buildBulkOperationSelectorPayload(ids) {
 export function buildBulkOperationMatchPayload(match) {
     const filters = match.filters && Object.keys(match.filters).length > 0 ? { filters: match.filters } : {};
     const search = match.search ? { search: match.search } : {};
-    return { [BULK_OPERATION_MATCH_FIELD]: { ...filters, ...search } };
+    // The listing the rows came from, so the server re-runs exactly that operation and variant (#2718).
+    const listing = match.listing ? { listing: match.listing } : {};
+    return { [BULK_OPERATION_MATCH_FIELD]: { ...filters, ...search, ...listing } };
 }
 /**
  * The `resultSummary` an outcome event may carry: the operation's result when it is a PLAIN OBJECT,
@@ -152,20 +190,22 @@ export function mergeBulkSelectionIntoRequestData(params) {
     if (params.operation.isBulkOperation !== true) {
         return params.requestData;
     }
-    // The selector is the COLLECTION's to write, never the form's. Whatever the form's values carry
-    // under a selector key is dropped first, so an empty `_match: {}` a form happened to hold can never
-    // stand in for — or sit beside — the selection the person actually made.
+    const match = readBulkOperationMatchSelection(params.additionalContext);
+    const ids = readBulkOperationSelectionIds(params.additionalContext);
+    // No selection in the context: the caller's request is left exactly as given — a programmatic
+    // `execute({ _ids })` names its own rows, and dropping them would turn it into a no-target request.
+    if (!match && (!ids || ids.length === 0)) {
+        return params.requestData;
+    }
+    // The context supplies the selection, so it is the COLLECTION's to write, never the form's: whatever
+    // the request carries under a selector key is dropped first, so an empty `_match: {}` can never stand
+    // in for — or sit beside — the selection the person actually made.
     const formValues = params.requestData
         ? Object.fromEntries(Object.entries(params.requestData).filter(([key]) => !BULK_OPERATION_HOST_SUPPLIED_FIELDS.includes(key)))
         : undefined;
-    const match = readBulkOperationMatchSelection(params.additionalContext);
     if (match) {
         return { ...(formValues ?? {}), ...buildBulkOperationMatchPayload(match) };
     }
-    const ids = readBulkOperationSelectionIds(params.additionalContext);
-    if (!ids || ids.length === 0) {
-        return formValues;
-    }
     return {
         ...(formValues ?? {}),
         ...buildBulkOperationSelectorPayload(ids),
@@ -194,6 +234,51 @@ export function isGeneratedCollectionExportOperation(operation) {
         || (typeof operation.operationIdentifier === 'string'
             && Resources_SharedUtils.parseGeneratedCollectionExportOperationIdentifier(operation.operationIdentifier) !== undefined);
 }
+/**
+ * Does this collection export re-run the VARIANT the listing shows (#2705)?
+ *
+ * An export re-runs exactly the variant that declared it. A resource can show one operation's variants on different
+ * screens: a member's own listing (unkeyed), and the governed `directory` (keyed) an administrator reads. An export of
+ * one, offered on the other, downloads a set the person is not looking at: the directory's whole tenant list from a
+ * member listing's toolbar, with that listing's filters. So it is offered only where its source variant is the one shown.
+ *
+ * `listingVariantKeys` is the variant the listing shows for each verb: a key, `null` for the unkeyed variant, or
+ * `undefined` when the listing did not say (no constraint: a surface that supplies nothing sees no change).
+ */
+export function collectionExportReRunsListingVariant(operation, listingVariantKeys) {
+    if (!listingVariantKeys || operation.generatedOperation?.kind !== ResourceGeneratedOperationKind.GENERATED_COLLECTION_EXPORT) {
+        return true;
+    }
+    const shown = operation.generatedOperation.sourceCoreOperation === CoreResourceOperation.SEARCH
+        ? listingVariantKeys.search
+        : listingVariantKeys.list;
+    if (shown === undefined)
+        return true;
+    const sourceVariantKey = typeof operation.generatedOperation.sourceVariantKey === 'string' ? operation.generatedOperation.sourceVariantKey : null;
+    return sourceVariantKey === shown;
+}
+/**
+ * Does this operation address ONE persisted record, so that its context's own-type slot is that record's id?
+ *
+ * A non-bulk READ, UPDATE or DELETE does, and so does a custom operation borrowing one of them. Nothing else
+ * does: every collection verb (`ALL_COLLECTION_OPERATIONS`: LIST, SEARCH, COUNT, CREATE, CREATE_MANY,
+ * UPDATE_MANY, DELETE_MANY), a BULK variant of any verb (`haveBulkOperation` — an UPDATE or DELETE over a
+ * selection; saas-models builds its route with no entity id for the same reason), and an operation whose
+ * semantic cannot be resolved. On those an own-type id in the context is AMBIENT SCOPE — the quick-switcher's
+ * selected record, for one — and never "the current record".
+ *
+ * The single answer to that question. The resource header asks it before letting a record's label replace
+ * the operation title, the navigation layer before reading a context's type slot as an id
+ * (`NavigationUtils.isScopeAddressedOperationContext`), and the app scope before treating a surface as one
+ * that addresses a record of a scope field's type. They used to answer it separately, from a hand-closed list
+ * each, and disagreed about CREATE_MANY and the bulk variants.
+ */
+export function operationAddressesOneRecord(operation) {
+    if (operation.isBulkOperation === true)
+        return false;
+    const effectiveCoreOperation = resolveEffectiveCoreOperationFromOperation(operation);
+    return effectiveCoreOperation !== undefined && !ALL_COLLECTION_OPERATIONS.includes(effectiveCoreOperation);
+}
 /**
  * A CUSTOM operation that borrows a COLLECTION verb, and therefore addresses no single row.
  *
@@ -250,11 +335,38 @@ export function isCollectionVerbBorrowingOperation(operation) {
  *  2. DERIVED from the generated collection-export companion, which is collection-scoped by
  *     construction and has no author to declare anything;
  *  3. DERIVED from a borrowed COLLECTION verb — see {@link isCollectionVerbBorrowingOperation}.
+ *
+ * The third follows what the verb ADDRESSES, not the verb it is like (#2326). A verb with no `:id` addresses the
+ * collection its context selects, and for a context-addressed SINGLETON that collection is one record: the one a
+ * detail page shows when its context is that record's owner. There the verb acts on the record on screen, so it is
+ * an item action (`addressesTheContextSingletonRecord`, decided by {@link recordIsItsContextSingleton}). A settings
+ * singleton whose ENABLE and DISABLE borrow CREATE for the id-less route is the case that found it (a representing
+ * organization's activity-feed settings, since retired, #2592): they appeared on no surface at all, since a singleton
+ * has no list to carry collection actions. The
+ * two DECLARED kinds are untouched: a "retry all" means all, wherever it renders.
  */
-export function isCollectionScopedResourceOperation(operation) {
+export function isCollectionScopedResourceOperation(operation, options) {
     return isCollectionScopedOperation(operation.operationFrontendConfig)
         || isGeneratedCollectionExportOperation(operation)
-        || isCollectionVerbBorrowingOperation(operation);
+        || (!options?.addressesTheContextSingletonRecord && isCollectionVerbBorrowingOperation(operation));
+}
+/**
+ * Is the record on screen the one its context selects (#2326)? True when the resource is a context-addressed
+ * composition singleton under some parent, the record names that parent, and the surface's context IS that parent.
+ *
+ * The last condition is what keeps the rule to the record a person opened in its own context. The same singleton can
+ * also be a row of somebody's administrative list, reached from another context; an id-less verb there would address
+ * the context's record, not that row's, so it must not become a row action.
+ */
+export function recordIsItsContextSingleton(input) {
+    if (!input.resourceRelationships || !input.currentObject)
+        return false;
+    return getContextAddressedCompositionSingletonRelationshipCandidates(input.resourceRelationships).some((candidate) => {
+        const owner = input.currentObject[candidate.foreignKeyField];
+        const context = input.contextResourceIdentifiers[candidate.parentResourceType];
+        const contextId = typeof context === 'string' ? context : context?.resourceId;
+        return typeof owner === 'string' && owner.length > 0 && owner === contextId;
+    });
 }
 export const NON_ITEM_RESOURCE_OPERATIONS = new Set([
     CoreResourceOperation.LIST,
@@ -525,6 +637,8 @@ export function resolveResourceOperationDropdownChoice(operation) {
 export function operationCanPresentAsDropdown(operation) {
     return operation.isBulkOperation !== true
         && !isRiskyResourceOperation(operation.riskLevel)
+        // Its choices depend on the row and the application (#2744): the form that applies the offer collects it instead.
+        && !operation.requestFieldOffers
         && resolveResourceOperationDropdownChoice(operation) !== undefined;
 }
 /**
@@ -725,7 +839,6 @@ export function pickPreferredOperationForCoreSemantic(operations, coreOperation,
     }
     const preferredVariantTypes = [
         ResourceOperationVariantType.API_CALL,
-        ResourceOperationVariantType.API_CALL_WITH_CALLBACK,
     ];
     return [...filtered].sort((left, right) => {
         const leftLiteral = left.operationIdentifier === coreOperation ? 1 : 0;

package/dist/esm/core/resources/operation-semantics.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"operation-semantics.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/operation-semantics.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACzH,OAAO,EACL,mCAAmC,EACnC,0BAA0B,EAC1B,6BAA6B,EAC7B,iCAAiC,EACjC,qBAAqB,EACrB,8BAA8B,EAC9B,4BAA4B,EAC5B,gCAAgC,EAChC,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,GAC7B,MAAM,+DAA+D,CAAC;AAgCvE,MAAM,CAAC,MAAM,wCAAwC,GAAG,2BAA2B,CAAC;AACpF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG,6BAA6B,CAAC;AACxF,MAAM,CAAC,MAAM,qDAAqD,GAAG,wCAAwC,CAAC;AAU9G,MAAM,UAAU,8BAA8B,CAC5C,mBAA4B;IAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,mBAA4C,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,mBAA4B,EAC5B,qBAA+B;IAE/B,IAAI,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,qBAA8C,CAAC,EAAE,CAAC;QAC3H,OAAO,qBAA8C,CAAC;IACxD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,mBAA4C,CAAC,EAAE,CAAC;QAChG,OAAO,mBAA4C,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,SAAyC;IAEzC,OAAO,6BAA6B,CAClC,SAAS,CAAC,mBAAmB,EAC7B,SAAS,CAAC,qBAAqB,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,SAAyC,EACzC,aAAoC;IAEpC,OAAO,0CAA0C,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sCAAsC,CACpD,mBAA4B,EAC5B,kBAA+E;IAE/E,IACE,mBAAmB,KAAK,qBAAqB,CAAC,MAAM;WACjD,kBAAkB,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,IAAI,CAAC,EACxG,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAAgD;IAEhD,OAAO,aAAa,KAAK,qBAAqB,CAAC,MAAM;WAChD,aAAa,KAAK,qBAAqB,CAAC,WAAW,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,SAAyC;IAEzC,OAAO,SAAS,CAAC,eAAe,KAAK,IAAI;WACpC,yBAAyB,CAAC,0CAA0C,CAAC,SAAS,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,6CAA6C,CAC3D,SAAyC;IAEzC,IAAI,kCAAkC,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IAEjF,QAAQ,kBAAkB,EAAE,CAAC;QAC3B,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW,CAAC;QACvC,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW,CAAC;QACvC,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,iBAA2C;IAE3C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,wCAAwC,CAAC,CAAC;IAE5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,+BAA+B,CAC7C,iBAA2C;IAE3C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,0CAA0C,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,KAAgD,CAAC;IACnE,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;YACjG,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAkC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,iBAA2C;IAE3C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,qDAAqD,CAAC,CAAC;IACzF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iCAAiC,CAAC,GAAsB;IACtE,OAAO,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAA6D;IAC1G,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAe;IACtD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5E,CAAC,CAAC,MAAiC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAIjD;IACC,IAAI,MAAM,CAAC,SAAS,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,gGAAgG;IAChG,oGAAoG;IACpG,yEAAyE;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW;QACnC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAE,mCAAyD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACrJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAG,+BAA+B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,8BAA8B,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,GAAG,GAAG,6BAA6B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACrB,GAAG,iCAAiC,CAAC,GAAG,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,SAAyC;IAEzC,OAAO,CAAC,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;WAChE,0CAA0C,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,SAAyC;IAEzC,OAAO,SAAS,CAAC,kBAAkB,EAAE,IAAI,KAAK,8BAA8B,CAAC,yBAAyB;WACjG,CACD,OAAO,SAAS,CAAC,mBAAmB,KAAK,QAAQ;eAC9C,qBAAqB,CAAC,+CAA+C,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,SAAS;eAClH,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAC1F,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oCAAoC,CAClD,SAAyC;IAEzC,OAAO,SAAS,CAAC,kBAAkB,EAAE,IAAI,KAAK,8BAA8B,CAAC,2BAA2B;WACnG,CACD,OAAO,SAAS,CAAC,mBAAmB,KAAK,QAAQ;eAC9C,qBAAqB,CAAC,iDAAiD,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,SAAS,CACxH,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,kCAAkC,CAChD,SAAyC;IAEzC,yFAAyF;IACzF,4EAA4E;IAC5E,IAAI,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,SAAS,CAAC,uBAAuB,EAAE,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,sBAAsB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IACrF,OAAO,sBAAsB,KAAK,SAAS;WACtC,iCAAiC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mCAAmC,CACjD,SAAyC;IAEzC,OAAO,2BAA2B,CAAC,SAAS,CAAC,uBAAuB,CAAC;WAChE,oCAAoC,CAAC,SAAS,CAAC;WAC/C,kCAAkC,CAAC,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAwB;IACzE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;IAC3B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,IAAI;CAC3B,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAwB;IAC3E,qBAAqB,CAAC,KAAK;IAC3B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAwB;IAC1E,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,MAAM,UAAU,qCAAqC,CACnD,SAAyC;IAEzC,gGAAgG;IAChG,4FAA4F;IAC5F,mGAAmG;IACnG,kGAAkG;IAClG,8FAA8F;IAC9F,WAAW;IACX,IAAI,oCAAoC,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IACE,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;WAC1D,4BAA4B,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnE,MAAM,sBAAsB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,sBAAsB,IAAI,8BAA8B,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAAC,UAAmB,EAAE,YAAiC;IACtF,IAAI,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,kCAAkC,CAAC,UAAU,EAAE,0BAA0B,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC;AAChH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CAAC,UAAmB,EAAE,YAAiC;IAC5F,OAAO,kCAAkC,CAAC,UAAU,EAAE,6BAA6B,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC;AACnH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,8BAA8B,CAAC,SAAyC;IAC/E,OAAO,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAS,mCAAmC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC/G,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kCAAkC,CACzC,UAAmB,EACnB,OAAe,EACf,YAAiC;IAEjC,IAAI,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAqC,CAAC;IAC/D,6FAA6F;IAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,CAAC;QAElD,IAAI,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpC,+FAA+F;YAC/F,mDAAmD;YACnD,OAAO,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,OAAuB,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oCAAoC,CAAC,UAAmB;IACtE,OAAO,UAAU,YAAY,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAAC,SAAyC;IACtF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,YAAY,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,OAAO,SAAS,KAAK,0BAA0B,CAAC,IAAI,IAAI,SAAS,KAAK,0BAA0B,CAAC,QAAQ,CAAC;AAC5G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,6BAKX;AALD,WAAY,6BAA6B;IACvC,0EAA0E;IAC1E,8CAAa,CAAA;IACb,oEAAoE;IACpE,wDAAuB,CAAA;AACzB,CAAC,EALW,6BAA6B,KAA7B,6BAA6B,QAKxC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sCAAsC,CACpD,SAAyC;IAEzC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACxC,IAAI,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAqC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAE,CAAC;IACtC,IAAI,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,CAAC,SAAS,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAyC;IACrF,OAAO,SAAS,CAAC,eAAe,KAAK,IAAI;WACpC,CAAC,wBAAwB,CAAC,SAAS,CAAC,SAAS,CAAC;WAC9C,sCAAsC,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAM,UAAU,0CAA0C,CACxD,SAAyC;IAEzC,MAAM,MAAM,GAAG,SAAS,CAAC,uBAAuB,CAAC;IAEjD,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC/B,IACE,MAAM,CAAC,kBAAkB,KAAK,mCAAmC,CAAC,QAAQ;eACvE,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAC5C,CAAC;YACD,OAAO,mCAAmC,CAAC,OAAO,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC,kBAAkB,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,EAAE,CAAC;QACrE,OAAO,mCAAmC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IACE,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;WAC1D,6BAA6B,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,EACnE,CAAC;QACD,OAAO,mCAAmC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IAAI,kCAAkC,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,iGAAiG;IACjG,2DAA2D;IAC3D,EAAE;IACF,4FAA4F;IAC5F,gFAAgF;IAChF,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,2DAA2D;IAC3D,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,mCAAmC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,mCAAmC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAClC,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,IACE,MAAM,EAAE,WAAW,KAAK,4BAA4B,CAAC,UAAU;WAC5D,oCAAoC,CAAC,SAAS,CAAC,UAAU,CAAC,EAC7D,CAAC;QACD,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,IAAI,8BAA8B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,IAAI,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,mCAAmC,CAAC,QAAQ,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAE/D,IAAI,8BAA8B,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QACvE,OAAO,mCAAmC,CAAC,OAAO,CAAC;IACrD,CAAC;IAED,OAAO,wBAAwB,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC;QACjE,CAAC,CAAC,mCAAmC,CAAC,KAAK;QAC3C,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAiD;IAEjD,OAAO,YAAY,KAAK,mCAAmC,CAAC,KAAK;WAC5D,YAAY,KAAK,mCAAmC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mCAAmC,CACjD,YAAiD;IAEjD,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,mCAAmC,CAAC,KAAK,CAAC;QAC/C,KAAK,mCAAmC,CAAC,OAAO,CAAC;QACjD,+FAA+F;QAC/F,oEAAoE;QACpE,KAAK,mCAAmC,CAAC,QAAQ;YAC/C,OAAO,oBAAoB,CAAC,OAAO,CAAC;QACtC,KAAK,mCAAmC,CAAC,MAAM;YAC7C,gGAAgG;YAChG,6FAA6F;YAC7F,wFAAwF;YACxF,2FAA2F;YAC3F,yBAAyB;YACzB,OAAO,oBAAoB,CAAC,OAAO,CAAC;QACtC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,SAAyC;IAEzC,MAAM,kBAAkB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IAEjF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,QAAQ,kBAAkB,EAAE,CAAC;QAC3B,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,QAAQ,CAAC;QAClB,KAAK,qBAAqB,CAAC,IAAI;YAC7B,OAAO,MAAM,CAAC;QAChB,KAAK,qBAAqB,CAAC,IAAI,CAAC;QAChC,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,MAAM,CAAC;QAChB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,QAAQ,CAAC;QAClB,KAAK,qBAAqB,CAAC,MAAM;YAC/B,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,UAAwB,EACxB,aAAoC,EACpC,OAKC;IAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,qBAAqB,GAAG;QAC5B,4BAA4B,CAAC,QAAQ;QACrC,4BAA4B,CAAC,sBAAsB;KACpD,CAAC;IAEF,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;QAED,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAA2C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtH,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAA2C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxH,IAAI,oBAAoB,KAAK,qBAAqB,EAAE,CAAC;YACnD,OAAO,qBAAqB,GAAG,oBAAoB,CAAC;QACtD,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvH,MAAM,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,eAAe,KAAK,gBAAgB,EAAE,CAAC;YACzC,OAAO,gBAAgB,GAAG,eAAe,CAAC;QAC5C,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAwB,EACxB,aAAoC,EACpC,OAgBC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrC,IAAI,CAAC,gCAAgC,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,wBAAwB,IAAI,SAAS,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;YACzF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,kBAAkB,IAAI,SAAS,CAAC,uBAAuB,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,EAAE,CAAC;YAC/H,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { z } from 'zod';\nimport { FieldSchemaType, getSchemaType, isFileSchema, isForeignKeyField, unwrapSchema } from '@wildo-ai/zod-decorators';\nimport {\n  BULK_OPERATION_HOST_SUPPLIED_FIELDS,\n  BULK_OPERATION_MATCH_FIELD,\n  BULK_OPERATION_SELECTOR_FIELD,\n  COLLECTION_OPERATIONS_WITHOUT_IDS,\n  CoreResourceOperation,\n  ResourceGeneratedOperationKind,\n  ResourceOperationVariantType,\n  ResourceOperationFrontendSurface,\n  ResourceOperationRiskLevel,\n  NavigationTransition,\n  Resources_SharedUtils,\n} from '@wildo-ai/saas-models';\nimport {\n  isCollectionScopedOperation,\n  ResourceOperationActionPresentation,\n  ResourceOperationActionScope,\n} from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\n\nexport interface ResourceOperationSemanticsLike {\n  operationIdentifier: unknown;\n  resourceOperationLike?: unknown;\n  requestDto?: unknown;\n  variantType?: unknown;\n  isOperationDefault?: boolean;\n  isBulkOperation?: boolean;\n  variantKey?: unknown;\n  /** Read only by the DROPDOWN rule: a pick that executes cannot also be a deliberate, confirmed act. */\n  riskLevel?: unknown;\n  /**\n   * The subset of `ResourceOperationFrontendConfig` this module's decisions read.\n   *\n   * Deliberately a structural subset rather than the full config type: these helpers run against\n   * operation objects arriving through several projections (the frontend registry, a thinned\n   * navigation payload, a test fixture), and requiring the whole config would make them unusable on\n   * exactly the surfaces that need them most.\n   */\n  operationFrontendConfig?: {\n    surface?: ResourceOperationFrontendSurface;\n    actionPresentation?: ResourceOperationActionPresentation;\n    actionScope?: ResourceOperationActionScope;\n    rowTargetRequestField?: string;\n  };\n  generatedOperation?: {\n    kind?: unknown;\n    fieldName?: unknown;\n  };\n}\n\nexport const BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY = 'bulkOperationSelectionIds';\n/**\n * The operation-context key carrying a CROSS-PAGE selection (\"select all N matching\") to whatever host\n * presents a bulk action's form — the sibling of {@link BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY}.\n *\n * A form-bearing bulk action (one that asks for a value, like \"Change status\") is executed by the\n * form host, which adds the selection through {@link mergeBulkSelectionIntoRequestData}. That merge\n * read only the id key, so a cross-page selection never reached it and the request went out with no\n * selection but the form's own empty `_match` (#1461, #2035 run 2026-09-30).\n */\nexport const BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY = 'bulkOperationMatchSelection';\nexport const RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY = 'resourceOperationExecutedDiscriminator';\n\nexport type ResourceOperationLayoutKind =\n  | 'create'\n  | 'list'\n  | 'read'\n  | 'update'\n  | 'search'\n  | 'action';\n\nexport function isLiteralCoreResourceOperation(\n  operationIdentifier: unknown,\n): operationIdentifier is CoreResourceOperation {\n  return Object.values(CoreResourceOperation).includes(operationIdentifier as CoreResourceOperation);\n}\n\nexport function resolveEffectiveCoreOperation(\n  operationIdentifier: unknown,\n  resourceOperationLike?: unknown,\n): CoreResourceOperation | undefined {\n  if (resourceOperationLike && Object.values(CoreResourceOperation).includes(resourceOperationLike as CoreResourceOperation)) {\n    return resourceOperationLike as CoreResourceOperation;\n  }\n\n  if (Object.values(CoreResourceOperation).includes(operationIdentifier as CoreResourceOperation)) {\n    return operationIdentifier as CoreResourceOperation;\n  }\n\n  return undefined;\n}\n\nexport function resolveEffectiveCoreOperationFromOperation(\n  operation: ResourceOperationSemanticsLike,\n): CoreResourceOperation | undefined {\n  return resolveEffectiveCoreOperation(\n    operation.operationIdentifier,\n    operation.resourceOperationLike,\n  );\n}\n\nexport function matchesResourceOperationSemantic(\n  operation: ResourceOperationSemanticsLike,\n  coreOperation: CoreResourceOperation,\n): boolean {\n  return resolveEffectiveCoreOperationFromOperation(operation) === coreOperation;\n}\n\n/**\n * The operation whose generated TITLE names a surface that shows `operationIdentifier` — the page header and\n * the overlay (dialog, sheet, tab) title alike, which must agree.\n *\n * The core EDIT surface is titled like the record's own page. UPDATE's title is generated as the name of an\n * ACTION, a button word (\"Update preferences\", \"Save changes\"), while READ's is generated as a HEADING naming\n * the surface (\"Preferences\"). An edit page headed by a verb names the button below it rather than the thing\n * being edited, and the form's own save button already says the verb. So when the resource has a READ, the\n * core UPDATE — including its polymorphic variants, which keep the `update` identifier — takes READ's title.\n *\n * Keyed on the literal identifier, NOT on the effective core semantics: a custom operation that BEHAVES like\n * an update (`claimDomain`, `reset_to_defaults`) is a named action, and its own title is the only word that\n * says which action the surface performs. A resource with no READ keeps UPDATE's title, the only word it has.\n */\nexport function resolveSurfaceTitleOperationIdentifier(\n  operationIdentifier: unknown,\n  resourceOperations: ReadonlyArray<{ operationIdentifier: unknown }> | undefined,\n): string {\n  if (\n    operationIdentifier === CoreResourceOperation.UPDATE\n    && resourceOperations?.some((candidate) => candidate.operationIdentifier === CoreResourceOperation.READ)\n  ) {\n    return CoreResourceOperation.READ;\n  }\n  return String(operationIdentifier);\n}\n\nexport function isUpdateLikeCoreOperation(\n  coreOperation: CoreResourceOperation | undefined,\n): boolean {\n  return coreOperation === CoreResourceOperation.UPDATE\n    || coreOperation === CoreResourceOperation.UPDATE_MANY;\n}\n\nexport function isSingleResourceUpdateLikeOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return operation.isBulkOperation !== true\n    && isUpdateLikeCoreOperation(resolveEffectiveCoreOperationFromOperation(operation));\n}\n\nexport function shouldEmitResourceRefreshAfterDirectOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  if (isGeneratedFileRegenerateOperation(operation)) {\n    return true;\n  }\n\n  const effectiveOperation = resolveEffectiveCoreOperationFromOperation(operation);\n\n  switch (effectiveOperation) {\n    case CoreResourceOperation.CREATE:\n    case CoreResourceOperation.CREATE_MANY:\n    case CoreResourceOperation.UPDATE:\n    case CoreResourceOperation.UPDATE_MANY:\n    case CoreResourceOperation.DELETE:\n    case CoreResourceOperation.DELETE_MANY:\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport function readBulkOperationSelectionIds(\n  additionalContext?: Record<string, unknown>,\n): string[] | undefined {\n  const value = additionalContext?.[BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY];\n\n  if (!Array.isArray(value)) {\n    return undefined;\n  }\n\n  const ids = value.filter((candidate): candidate is string => typeof candidate === 'string');\n  return ids.length > 0 ? ids : undefined;\n}\n\n/** The cross-page selection an operation context carries, when \"select all N matching\" was chosen. */\nexport function readBulkOperationMatchSelection(\n  additionalContext?: Record<string, unknown>,\n): { filters?: Record<string, unknown>; search?: string } | undefined {\n  const value = additionalContext?.[BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY];\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    return undefined;\n  }\n  const candidate = value as { filters?: unknown; search?: unknown };\n  return {\n    ...(candidate.filters && typeof candidate.filters === 'object' && !Array.isArray(candidate.filters)\n      ? { filters: candidate.filters as Record<string, unknown> }\n      : {}),\n    ...(typeof candidate.search === 'string' && candidate.search !== '' ? { search: candidate.search } : {}),\n  };\n}\n\nexport function readResourceOperationExecutedDiscriminator(\n  additionalContext?: Record<string, unknown>,\n): string | undefined {\n  const value = additionalContext?.[RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY];\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\n/**\n * Build the wire selector a bulk operation uses to name the rows it targets.\n *\n * The field name comes from {@link BULK_OPERATION_SELECTOR_FIELD} — the ONE named source both halves\n * of the contract read — because spelling it here is exactly how this broke. Every frontend bulk\n * surface emitted `ids`, which is not in the bulk request DTO\n * (`Resources_BulkOperationBaseSchema.extend(...)`), so the strict Zod parse stripped it and then\n * refused the request for the `_ids` it never received. It type-checked, it looked right, and the\n * generic bulk lane had never once worked from the UI.\n *\n * Every frontend producer of a bulk payload goes through this function, so there is one spelling to\n * get right rather than one per surface.\n */\nexport function buildBulkOperationSelectorPayload(ids: readonly string[]): Record<string, unknown> {\n  return { [BULK_OPERATION_SELECTOR_FIELD]: [...ids] };\n}\n\n/**\n * The CROSS-PAGE selector payload: the query that produced the listing, not the rows it showed.\n *\n * Sibling of {@link buildBulkOperationSelectorPayload} and never sent beside it — the server refuses\n * a request naming both, because honouring one would make the other silently inert. The matched\n * count stays on the client: it is what the listing reported when the person chose, and the server\n * re-evaluates the query itself rather than trusting a number the client sent (#1461).\n */\nexport function buildBulkOperationMatchPayload(match: { filters?: Record<string, unknown>; search?: string }): Record<string, unknown> {\n  const filters = match.filters && Object.keys(match.filters).length > 0 ? { filters: match.filters } : {};\n  const search = match.search ? { search: match.search } : {};\n  return { [BULK_OPERATION_MATCH_FIELD]: { ...filters, ...search } };\n}\n\n/**\n * The `resultSummary` an outcome event may carry: the operation's result when it is a PLAIN OBJECT,\n * and nothing otherwise.\n *\n * The event schema types it as a record, and every producer used to pass any non-null object —\n * which includes an array. A multi-row bulk update answers an array of rows, so its\n * RESOURCE_OPERATION_EXECUTED was refused by the event bus (\"Invalid payload\") and nobody heard that\n * the write succeeded: the listing kept its old values and the bulk bar kept the rows selected.\n * One definition, so the producers cannot disagree about it again.\n */\nexport function toOperationResultSummary(result: unknown): Record<string, unknown> | undefined {\n  return typeof result === 'object' && result !== null && !Array.isArray(result)\n    ? result as Record<string, unknown>\n    : undefined;\n}\n\nexport function mergeBulkSelectionIntoRequestData(params: {\n  operation: ResourceOperationSemanticsLike;\n  requestData?: Record<string, unknown>;\n  additionalContext?: Record<string, unknown>;\n}): Record<string, unknown> | undefined {\n  if (params.operation.isBulkOperation !== true) {\n    return params.requestData;\n  }\n\n  // The selector is the COLLECTION's to write, never the form's. Whatever the form's values carry\n  // under a selector key is dropped first, so an empty `_match: {}` a form happened to hold can never\n  // stand in for — or sit beside — the selection the person actually made.\n  const formValues = params.requestData\n    ? Object.fromEntries(Object.entries(params.requestData).filter(([key]) => !(BULK_OPERATION_HOST_SUPPLIED_FIELDS as readonly string[]).includes(key)))\n    : undefined;\n\n  const match = readBulkOperationMatchSelection(params.additionalContext);\n  if (match) {\n    return { ...(formValues ?? {}), ...buildBulkOperationMatchPayload(match) };\n  }\n\n  const ids = readBulkOperationSelectionIds(params.additionalContext);\n  if (!ids || ids.length === 0) {\n    return formValues;\n  }\n\n  return {\n    ...(formValues ?? {}),\n    ...buildBulkOperationSelectorPayload(ids),\n  };\n}\n\nexport function isSemanticCustomResourceOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return !isLiteralCoreResourceOperation(operation.operationIdentifier)\n    && resolveEffectiveCoreOperationFromOperation(operation) !== undefined;\n}\n\nexport function isGeneratedFileRegenerateOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return operation.generatedOperation?.kind === ResourceGeneratedOperationKind.GENERATED_FILE_REGENERATE\n    || (\n      typeof operation.operationIdentifier === 'string'\n      && Resources_SharedUtils.parseGeneratedFileRegenerateOperationIdentifier(operation.operationIdentifier) !== undefined\n      && resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.UPDATE\n    );\n}\n\n/**\n * Is this the file-export companion of a LIST/SEARCH operation?\n *\n * Identity comes from the generated-operation metadata, with the prefixed identifier as the fallback\n * for any surface that receives a thinned operation object — the same two-source shape\n * {@link isGeneratedFileRegenerateOperation} uses, and for the same reason: the frontend receives\n * operations through several projections and not all of them carry `generatedOperation`.\n */\nexport function isGeneratedCollectionExportOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return operation.generatedOperation?.kind === ResourceGeneratedOperationKind.GENERATED_COLLECTION_EXPORT\n    || (\n      typeof operation.operationIdentifier === 'string'\n      && Resources_SharedUtils.parseGeneratedCollectionExportOperationIdentifier(operation.operationIdentifier) !== undefined\n    );\n}\n\n/**\n * A CUSTOM operation that borrows a COLLECTION verb, and therefore addresses no single row.\n *\n * `resourceOperationLike` answers a ROUTING question — which core verb's route shape and\n * collection-level authorization does this operation borrow. The frontend has been reading it as a\n * statement about what the operation MEANS to a user, and for the collection verbs those two\n * answers come apart: an operation borrowing one of `COLLECTION_OPERATIONS_WITHOUT_IDS` gets a\n * route with NO `:id` segment in it, so there is no row for a per-row button to act on. Clicking it\n * on the third row does exactly what clicking it on the first row does.\n *\n * `AuditLogs.EXPORT_AUDIT_LOGS` is the worked example and says so at its own declaration: it borrows\n * CREATE to get \"the collection POST route shape without … requiring a meaningless `auditLogId` path\n * value\". It then rendered a Download button on every row of the audit trail.\n *\n * DERIVED rather than declared, for the reason the generated collection-export exemption beside it\n * already gives: `actionScope: COLLECTION` is a per-app declaration, and asking every author to\n * stamp it puts the burden on them for something the framework already knows from the route it\n * built. Measured 2026-09-20 over `engine/` and `platform/`: five custom operations borrow a\n * collection verb — this export, both access-grant `REQUEST_ACCESS` verbs, SCIM `GENERATE_TOKEN` and\n * SSO `DISCOVER_ENDPOINTS` — and not one of the five is a per-row action. None had declared the\n * scope, so all five rendered per row.\n *\n * `rowTargetRequestField` is the declared ESCAPE, not an oversight: it is how an operation says \"I\n * address the clicked row through the request BODY rather than the URL\", which is precisely the\n * shape a per-row action borrowing a collection verb would take. One that declares it stays an item\n * action.\n */\nexport function isCollectionVerbBorrowingOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  // A LITERAL core verb is not borrowing anything — `CREATE` is the resource's create, and\n  // `LIST`/`SEARCH`/`COUNT` are already handled as non-item operations below.\n  if (isLiteralCoreResourceOperation(operation.operationIdentifier)) return false;\n  if (operation.operationFrontendConfig?.rowTargetRequestField) return false;\n  const effectiveCoreOperation = resolveEffectiveCoreOperationFromOperation(operation);\n  return effectiveCoreOperation !== undefined\n    && COLLECTION_OPERATIONS_WITHOUT_IDS.includes(effectiveCoreOperation);\n}\n\n/**\n * Does this operation act on the WHOLE COLLECTION rather than on one row?\n *\n * THE single answer to that question, because it is asked twice and the two askers do different\n * jobs: `useResourceOperationActions` decides which actions EXIST on a surface, and\n * `ResourceLayout_List` decides whether the collection-action surface is MOUNTED at all. An\n * exemption added to one alone produces actions rendered into a container that was never created —\n * which is exactly what happened on 2026-08-25, when three gate fixes in the hook changed nothing\n * visible because the mount check still said there were no collection-scoped operations here.\n *\n * That hazard used to be managed by a ⚠️ comment asking the next author to remember both sites.\n * Collapsing the predicate is the stronger form of the same instruction: there is now one site.\n *\n * Three ways to be collection-scoped, in descending order of how explicit they are:\n *  1. DECLARED — `actionScope: COLLECTION`, the per-app opt-in for a \"retry all\" / \"purge all\";\n *  2. DERIVED from the generated collection-export companion, which is collection-scoped by\n *     construction and has no author to declare anything;\n *  3. DERIVED from a borrowed COLLECTION verb — see {@link isCollectionVerbBorrowingOperation}.\n */\nexport function isCollectionScopedResourceOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return isCollectionScopedOperation(operation.operationFrontendConfig)\n    || isGeneratedCollectionExportOperation(operation)\n    || isCollectionVerbBorrowingOperation(operation);\n}\n\nexport const NON_ITEM_RESOURCE_OPERATIONS = new Set<CoreResourceOperation>([\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.SEARCH,\n  CoreResourceOperation.COUNT,\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.CREATE_MANY,\n  CoreResourceOperation.READ,\n]);\n\n/**\n * Effective core semantics that are pure aggregate / collection READS — a data\n * provider the surface calls programmatically, never a per-item user action,\n * even when worn by a CUSTOM operation. A `get_state` op declaring\n * `resourceOperationLike: COUNT` (no `requestDto`) is the canonical example: it\n * fetches aggregate state for a panel to render, so as an action-bar button it is\n * a dead control that fetches and shows nothing.\n *\n * `READ` and `CREATE` are deliberately EXCLUDED: custom READ-like ops\n * (`open_portal`, `usage_stats`) and CREATE-like ops (a \"clone\" / \"duplicate\")\n * ARE real user actions and must keep their button.\n */\nexport const NON_ITEM_CUSTOM_CORE_SEMANTICS = new Set<CoreResourceOperation>([\n  CoreResourceOperation.COUNT,\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.SEARCH,\n]);\n\nexport const NAVIGABLE_RESOURCE_OPERATIONS = new Set<CoreResourceOperation>([\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.READ,\n  CoreResourceOperation.UPDATE,\n]);\n\nexport function shouldTreatAsNonItemResourceOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  // The collection-export companion BORROWS `resourceOperationLike: LIST/SEARCH` so that routing,\n  // collection-level authorization and URL building all treat it as a listing. That makes the\n  // aggregate-read test below match it — and it is exactly wrong here: an export is an ACTION a user\n  // clicks, not a data provider. Without this exemption the action is filtered out of every bar and\n  // the feature has no surface at all, which is silent: nothing errors, the button simply never\n  // renders.\n  if (isGeneratedCollectionExportOperation(operation)) {\n    return false;\n  }\n\n  if (\n    isLiteralCoreResourceOperation(operation.operationIdentifier)\n    && NON_ITEM_RESOURCE_OPERATIONS.has(operation.operationIdentifier)\n  ) {\n    return true;\n  }\n\n  // A CUSTOM operation whose effective core semantic is an aggregate/collection\n  // read (COUNT/LIST/SEARCH) is a data provider, not a per-item action — keep it\n  // out of the action bar so it does not render as a dead, do-nothing button.\n  if (!isLiteralCoreResourceOperation(operation.operationIdentifier)) {\n    const effectiveCoreOperation = resolveEffectiveCoreOperationFromOperation(operation);\n    if (effectiveCoreOperation && NON_ITEM_CUSTOM_CORE_SEMANTICS.has(effectiveCoreOperation)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * The largest request-body field count the framework will present in an OVERLAY rather than a page.\n *\n * Six is a judgement, not a measurement, and it is written down here — in ONE place, named — so it\n * can be argued with instead of rediscovered. It is the point at which the industry guidance stops\n * saying \"keep the user in context\" and starts saying \"give the task the room a page has\": Carbon\n * routes complex data entry to a full page, Filament's `->form()` modal is described for collecting\n * *extra information*, not for authoring a record.\n *\n * An author who disagrees for a specific operation does not tune this number — they declare\n * `actionPresentation` and the derivation is not consulted at all. That is the escape hatch, and it\n * is why a single global constant is honest here.\n */\nexport const ACTION_MODAL_FIELD_CEILING = 6;\n\n/**\n * The largest request-body field count the framework will present in an ANCHORED PANEL rather than\n * an overlay.\n *\n * Two, and the reasoning is the one this axis's `POPOVER` member already states: the anchored panel\n * is the small-input idiom (\"snooze until…\", \"reject with a reason…\"), and it earns its\n * place by keeping the row the user is acting on visible. A third control starts wanting the room a\n * dialog has, and the panel stops being cheaper than one.\n *\n * Pairs with {@link ACTION_MODAL_FIELD_CEILING} as one ordered ladder — 1–2 anchored, 3–6 overlay,\n * beyond that a page — so the two numbers are argued with together instead of one of them silently\n * owning every case.\n */\nexport const ACTION_ANCHORED_FIELD_CEILING = 2;\n\n/**\n * Can the framework honestly present this request body inside an overlay?\n *\n * Three refusals, each for a different reason rather than by symmetry:\n *  - **not an object schema** — nothing can be counted, so nothing can be promised;\n *  - **a file field** — upload chrome (drag target, crop, progress, retry) needs room an overlay\n *    does not have, and a half-visible upload is worse than a page;\n *  - **a nested object / array-of-objects** — a nested write is a form inside a form, which is the\n *    shape a page exists for.\n *\n * Anything else is judged on size alone. Note this reads the schema STRUCTURALLY and never a field\n * count carried alongside it: the operation object reaching the frontend is a projection, and a\n * count computed elsewhere would be a second source able to disagree with the schema it describes.\n */\nfunction requestBodyFitsAnOverlay(requestDto: unknown, suppliedKeys: ReadonlySet<string>): boolean {\n  if (!(requestDto instanceof z.ZodObject)) {\n    return false;\n  }\n\n  return countFieldsPresentableWithoutAPage(requestDto, ACTION_MODAL_FIELD_CEILING, suppliedKeys) !== undefined;\n}\n\n/**\n * Is this request body small and simple enough for an ANCHORED PANEL?\n *\n * The SHAPE test is identical to the overlay's — a file, a nested object or a repeating sub-form\n * belongs on a page whichever chrome is being considered — so only the ceiling differs. Sharing\n * `countFieldsPresentableWithoutAPage` is what keeps the two answers from disagreeing about what\n * \"simple\" means: two copies of that list would drift the first time a field kind is added.\n */\nfunction requestBodyFitsAnAnchoredPanel(requestDto: unknown, suppliedKeys: ReadonlySet<string>): boolean {\n  return countFieldsPresentableWithoutAPage(requestDto, ACTION_ANCHORED_FIELD_CEILING, suppliedKeys) !== undefined;\n}\n\n/**\n * The request keys a BULK action's host fills itself, which are therefore not inputs a person fills.\n *\n * A bulk twin's request is the single-row request plus `_ids` — the selection — and the form hides\n * that key because the collection supplies it. Counting it anyway made every bulk action look one\n * field larger than it is: a two-field bulk action counted three and fell from the anchored panel\n * to a dialog, while the SAME action on one row got the panel. The ladder has to count what the\n * person will actually see.\n *\n * Named from `BULK_OPERATION_HOST_SUPPLIED_FIELDS` — both selectors, `_ids` and the cross-page\n * `_match` — the one list the form's omission and the execution merge also read, so the keys this\n * skips and the keys the request builder writes cannot drift apart.\n */\nfunction resolveHostSuppliedRequestKeys(operation: ResourceOperationSemanticsLike): ReadonlySet<string> {\n  return operation.isBulkOperation === true ? new Set<string>(BULK_OPERATION_HOST_SUPPLIED_FIELDS) : new Set();\n}\n\n/**\n * The field count of a request body every one of whose fields can be drawn without a page, or\n * `undefined` when the body is empty, over `ceiling`, unintrospectable, or holds a field that\n * cannot.\n *\n * Reads the schema STRUCTURALLY and never a field count carried alongside it: the operation object\n * reaching the frontend is a projection, and a count computed elsewhere would be a second source\n * able to disagree with the schema it describes.\n */\nfunction countFieldsPresentableWithoutAPage(\n  requestDto: unknown,\n  ceiling: number,\n  suppliedKeys: ReadonlySet<string>,\n): number | undefined {\n  if (!(requestDto instanceof z.ZodObject)) {\n    return undefined;\n  }\n\n  const shape = requestDto.shape as Record<string, z.ZodTypeAny>;\n  // Keys the HOST supplies are not inputs anyone fills — see `resolveHostSuppliedRequestKeys`.\n  const fieldNames = Object.keys(shape).filter((fieldName) => !suppliedKeys.has(fieldName));\n\n  if (fieldNames.length === 0 || fieldNames.length > ceiling) {\n    return undefined;\n  }\n\n  const everyFieldFits = fieldNames.every((fieldName) => {\n    const unwrapped = unwrapSchema(shape[fieldName]!);\n\n    if (isFileSchema(unwrapped)) {\n      return false;\n    }\n\n    if (unwrapped instanceof z.ZodObject) {\n      return false;\n    }\n\n    if (unwrapped instanceof z.ZodArray) {\n      // An array of scalars (a list of ids, a set of tags) is one control and fits fine. An array of\n      // OBJECTS is a repeating sub-form, which does not.\n      return !(unwrapSchema(unwrapped.element as z.ZodTypeAny) instanceof z.ZodObject);\n    }\n\n    return true;\n  });\n\n  return everyFieldFits ? fieldNames.length : undefined;\n}\n\n/**\n * Does this operation declare a request body with NO fields — an explicit `z.object({})`?\n *\n * Such a zero-input operation has no form to collect, so it executes rather than opening one.\n * Mirrors the backend's `hasMeaningfulExplicitRequestDto` (inverted).\n */\nexport function hasEmptyResourceOperationRequestBody(requestDto: unknown): boolean {\n  return requestDto instanceof z.ZodObject && Object.keys(requestDto.shape).length === 0;\n}\n\n/**\n * Does this operation collect NOTHING from a person? No `requestDto`, or one whose every field the\n * host supplies itself.\n *\n * A bulk twin's request is its row variant's body plus the `_ids` selector the collection fills. A\n * bulk action whose row variant takes no input therefore has a body of exactly `{ _ids }` — not\n * empty, and not something anyone types. Checking raw emptiness sent Wonder Todos' bulk \"Unassign\"\n * to a dialog holding an empty form and a Save button, where the same action on one row ran on\n * click. The action ladder and the operation host both ask this, so an action cannot run directly\n * from one surface and open an empty form on another.\n */\nexport function operationCollectsNoCallerInput(operation: ResourceOperationSemanticsLike): boolean {\n  if (!operation.requestDto) {\n    return true;\n  }\n  if (!(operation.requestDto instanceof z.ZodObject)) {\n    return false;\n  }\n  const suppliedKeys = resolveHostSuppliedRequestKeys(operation);\n  return Object.keys(operation.requestDto.shape).every((fieldName) => suppliedKeys.has(fieldName));\n}\n\n/**\n * Does this risk level ask for a confirmation before the operation runs?\n *\n * HIGH and CRITICAL do (a plain confirm, and a typed one); LOW and MEDIUM execute on click. The one\n * definition the action ladder's confirm dialog and the DROPDOWN rule both read, so \"risky enough to\n * confirm\" and \"too risky to execute on a pick\" cannot come to mean two different sets.\n */\nexport function isRiskyResourceOperation(riskLevel: unknown): boolean {\n  return riskLevel === ResourceOperationRiskLevel.HIGH || riskLevel === ResourceOperationRiskLevel.CRITICAL;\n}\n\n/**\n * The kind of domain a DROPDOWN lists — the two a person can pick from without typing a value.\n *\n * Two members because the lists are genuinely different things: an enum's values are CLOSED and\n * known up front, so they are listed whole; a reference's candidates are records on the server, so\n * they are SEARCHED as you type and scoped like the form's picker. A boolean is deliberately absent —\n * a two-item menu for yes/no is a worse control than the toggle it would replace.\n */\nexport enum ResourceOperationChoiceDomain {\n  /** A closed enum — every value listed, labelled as the form labels it. */\n  ENUM = 'enum',\n  /** A foreign key — the referenced records, searched server-side. */\n  REFERENCE = 'reference',\n}\n\n/** The single field a DROPDOWN presents, and which kind of list it needs. */\nexport interface ResourceOperationDropdownChoice {\n  /** The request field the pick is written to. */\n  fieldName: string;\n  /** That field's schema as the request DTO declares it (decorators intact). */\n  fieldSchema: z.ZodTypeAny;\n  domain: ResourceOperationChoiceDomain;\n}\n\n/**\n * The one choice field this operation's input consists of, or `undefined` when its input is\n * anything else.\n *\n * Qualifies only when, after the keys the host supplies itself (a bulk twin's `_ids`), EXACTLY ONE\n * field remains and it is a single enum or a single foreign key. An array is refused: picking one\n * item of a multi-pick and executing is not what the field asks for.\n *\n * Reads the schema structurally, like every other rule in this module, so the answer cannot\n * disagree with the form the same operation would otherwise render.\n */\nexport function resolveResourceOperationDropdownChoice(\n  operation: ResourceOperationSemanticsLike,\n): ResourceOperationDropdownChoice | undefined {\n  const requestDto = operation.requestDto;\n  if (!(requestDto instanceof z.ZodObject)) {\n    return undefined;\n  }\n\n  const suppliedKeys = resolveHostSuppliedRequestKeys(operation);\n  const shape = requestDto.shape as Record<string, z.ZodTypeAny>;\n  const fieldNames = Object.keys(shape).filter((fieldName) => !suppliedKeys.has(fieldName));\n  if (fieldNames.length !== 1) {\n    return undefined;\n  }\n\n  const fieldName = fieldNames[0]!;\n  const fieldSchema = shape[fieldName]!;\n  if (unwrapSchema(fieldSchema) instanceof z.ZodArray) {\n    return undefined;\n  }\n  if (isForeignKeyField(fieldSchema)) {\n    return { fieldName, fieldSchema, domain: ResourceOperationChoiceDomain.REFERENCE };\n  }\n  if (getSchemaType(fieldSchema) === FieldSchemaType.ENUM) {\n    return { fieldName, fieldSchema, domain: ResourceOperationChoiceDomain.ENUM };\n  }\n  return undefined;\n}\n\n/**\n * Can this operation honestly present as a DROPDOWN — one choice field, one row, and no confirmation\n * owed?\n *\n * All three are correctness constraints, not taste. Without a single choice field there is no list to\n * show. A pick executes immediately, so an operation whose risk level asks for a confirmation would\n * lose it. And a BULK twin writes every selected row: one stray pick in a menu would rewrite them all\n * with no second step, which is the one place \"the pick is the submission\" is the wrong promise. Each\n * of those keeps the anchored FORM, which has an explicit Submit.\n */\nexport function operationCanPresentAsDropdown(operation: ResourceOperationSemanticsLike): boolean {\n  return operation.isBulkOperation !== true\n    && !isRiskyResourceOperation(operation.riskLevel)\n    && resolveResourceOperationDropdownChoice(operation) !== undefined;\n}\n\n/**\n * HOW does this action collect its input?\n *\n * The single answer for every action surface. An explicitly authored\n * {@link ResourceOperationActionPresentation} is returned as authored — the author has answered the\n * question and the framework does not second-guess their TASTE — with ONE correctness exception: a\n * DROPDOWN the operation cannot honestly be resolves to POPOVER (see below). Everything else is the\n * DERIVATION for the (overwhelmingly common) case where nothing was authored.\n *\n * The derivation is ordered by how strong the evidence is, not by convenience:\n *\n * 1. **`ADDRESSABLE` ⇒ PAGE.** Declaring an operation deep-linkable IS declaring it a destination.\n *    Nothing derived may take that away.\n * 2. **A literal core CREATE / READ / UPDATE ⇒ PAGE.** These are the framework's own page surfaces\n *    and every app's navigation config is written against them; deriving an overlay here would\n *    silently restyle every existing application.\n * 3. **Already-established in-place shapes ⇒ DIRECT.** A row-targeted action (its target rides the\n *    body), a zero-input collection action, and a generated-file regenerate all executed on click\n *    before this axis existed. They are stated here so the axis DESCRIBES the framework's behaviour\n *    rather than sitting beside it — an axis that cannot express what the framework already does is\n *    a second mechanism, not a vocabulary.\n * 4. **No caller input ⇒ DIRECT.** No `requestDto` at all, an explicit `z.object({})`, or a bulk\n *    body holding only the selector the host fills ({@link operationCollectsNoCallerInput}).\n * 5. **One choice from an enum or a reference, and no confirmation owed ⇒ DROPDOWN.** The pick is\n *    the submission, so the list of values IS the whole input ({@link operationCanPresentAsDropdown}).\n * 6. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for\n *    them, so the row being acted on stays visible.\n * 7. **Input that fits an overlay ⇒ MODAL.**\n * 8. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback\n *    for a `requestDto` this code cannot introspect (a thinned projection), because refusing to\n *    guess returns the behaviour the operation had before.\n *\n * ## An authored DROPDOWN that cannot be one resolves to POPOVER\n *\n * The only authored answer this function overrides, and for the same reason the click handler\n * refuses a non-navigating presentation on a zero-input update-like action: honouring it would be\n * wrong, not merely ugly. A DROPDOWN over two fields has no list to show, and one over a CRITICAL\n * operation would execute without the typed confirmation every other surface demands. POPOVER is the\n * nearest honest answer — the same anchored panel, holding the form with its Submit.\n *\n * ## Why step 6 is DERIVED, when it used to be authored-only\n *\n * This function returned `MODAL` for every small input and left `POPOVER` to authors, on the\n * reasoning that an anchored panel is a claim about the surrounding context — that the trigger is\n * anchored and visible — which the operation alone cannot support.\n *\n * The reasoning was sound and the conclusion did not follow, because nothing was ever asking this\n * function to be right about the host. **The bar already decides whether it can anchor**, and it\n * already degrades when it cannot: an item collapsed into the overflow menu or nested in a subgroup\n * takes its `onClick`, which `resolveActionPresentationTransition` maps to an OVERLAY — the same\n * chrome `MODAL` would have produced. So the cost of deriving the panel is zero where it cannot be\n * drawn, and the cost of NOT deriving it was that every small action in every application —\n * \"snooze until…\", \"reject with a reason…\" — covered the list it was acting on with a dialog, and the\n * only way out was to author the axis per operation. (The one-CHOICE actions — \"change status to…\",\n * \"assign to…\" — have since moved one step earlier, to DROPDOWN.)\n *\n * `INLINE` stays authored-only, and the asymmetry is the point: its claim is about the ELEMENT (the\n * thing being acted on is a row that can transform in place), and its degrade target is an overlay\n * over the list it was meant to keep visible — so guessing it wrong costs the user the very thing\n * the presentation exists for. A popover guessed wrong costs nothing.\n */\nexport function resolveResourceOperationActionPresentation(\n  operation: ResourceOperationSemanticsLike,\n): ResourceOperationActionPresentation {\n  const config = operation.operationFrontendConfig;\n\n  if (config?.actionPresentation) {\n    if (\n      config.actionPresentation === ResourceOperationActionPresentation.DROPDOWN\n      && !operationCanPresentAsDropdown(operation)\n    ) {\n      return ResourceOperationActionPresentation.POPOVER;\n    }\n    return config.actionPresentation;\n  }\n\n  if (config?.surface === ResourceOperationFrontendSurface.ADDRESSABLE) {\n    return ResourceOperationActionPresentation.PAGE;\n  }\n\n  if (\n    isLiteralCoreResourceOperation(operation.operationIdentifier)\n    && NAVIGABLE_RESOURCE_OPERATIONS.has(operation.operationIdentifier)\n  ) {\n    return ResourceOperationActionPresentation.PAGE;\n  }\n\n  if (isGeneratedFileRegenerateOperation(operation)) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  // A ZERO-INPUT single-resource UPDATE-like custom action keeps its host, even though it collects\n  // nothing and would otherwise be DIRECT by the rule below.\n  //\n  // Its mutation must run under an explicit RMM-vs-weaker-guarantee contract, and only a host\n  // provides one — `useResourceOperationSurface.executeCurrentOperation()` throws\n  // `MissingRMMRuntimeError` rather than writing without it. Executing such an action straight from\n  // the action bar would take the plain `doOperation` path and lose that guarantee SILENTLY, which\n  // is why the click handler also refuses to honour an AUTHORED non-navigating presentation here:\n  // this is a correctness constraint, not a styling default.\n  if (!operation.requestDto && isSingleResourceUpdateLikeOperation(operation)) {\n    return ResourceOperationActionPresentation.PAGE;\n  }\n\n  if (config?.rowTargetRequestField) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  if (\n    config?.actionScope === ResourceOperationActionScope.COLLECTION\n    && hasEmptyResourceOperationRequestBody(operation.requestDto)\n  ) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  if (operationCollectsNoCallerInput(operation)) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  if (operationCanPresentAsDropdown(operation)) {\n    return ResourceOperationActionPresentation.DROPDOWN;\n  }\n\n  const suppliedKeys = resolveHostSuppliedRequestKeys(operation);\n\n  if (requestBodyFitsAnAnchoredPanel(operation.requestDto, suppliedKeys)) {\n    return ResourceOperationActionPresentation.POPOVER;\n  }\n\n  return requestBodyFitsAnOverlay(operation.requestDto, suppliedKeys)\n    ? ResourceOperationActionPresentation.MODAL\n    : ResourceOperationActionPresentation.PAGE;\n}\n\n/**\n * Does this presentation reach the NAVIGATION layer, or does the action layer own it end to end?\n *\n * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER`, `DROPDOWN` and `INLINE` are not: nothing is pushed,\n * no zone changes, and there is nothing for a back button to pop — routing them through navigation\n * would mint zone entries for chrome that does not live in a zone.\n *\n * `INLINE` is the one worth explaining, because `NavigationTransition.INPLACE` exists and looks like\n * its home. It is not: element-level hosting uses NONE of what navigation provides — no zone, no\n * stack entry, no appearance, no lifecycle modifier — and routing it there is exactly why that\n * transition has never done what its docstring promises (it falls through to a zone REPLACE). The\n * host lives with the elements instead; see `InPlaceOperationContext`.\n */\nexport function actionPresentationNavigates(\n  presentation: ResourceOperationActionPresentation,\n): boolean {\n  return presentation === ResourceOperationActionPresentation.MODAL\n    || presentation === ResourceOperationActionPresentation.PAGE;\n}\n\n/**\n * The navigation transition an action presentation is an alias FOR.\n *\n * `PAGE` maps to `undefined` deliberately, and it is the most important row: a page is not a\n * transition, it is \"let the ordinary chain answer\". Returning `PUSH` here would flatten every\n * app's zone transitions, viewport overrides and relationship defaults into one verb — the axis\n * would stop being an alias and start being an override, which is the failure mode this design\n * exists to avoid.\n *\n * `POPOVER` maps to `OVERLAY` — its DEGRADE target, not its normal path. A popover normally never\n * reaches navigation ({@link actionPresentationNavigates} is false for it), but a host that cannot\n * ANCHOR one — an action collapsed into an overflow menu or nested in a subgroup — has to present\n * the same input somewhere, and the honest substitute for \"a small panel next to the button\" is an\n * overlay. Leaving it `undefined` would send that action to the ordinary chain and produce a full\n * PAGE for the presentation that asked for the least chrome of all.\n *\n * `DIRECT` maps to `undefined` because it collects nothing: there is no input to relocate.\n */\nexport function resolveActionPresentationTransition(\n  presentation: ResourceOperationActionPresentation,\n): NavigationTransition | undefined {\n  switch (presentation) {\n    case ResourceOperationActionPresentation.MODAL:\n    case ResourceOperationActionPresentation.POPOVER:\n    // A DROPDOWN degrades exactly like the popover it shares a host with: where nothing can anchor\n    // the list, the same single field is collected by the overlay form.\n    case ResourceOperationActionPresentation.DROPDOWN:\n      return NavigationTransition.OVERLAY;\n    case ResourceOperationActionPresentation.INLINE:\n      // The DEGRADE target, like `POPOVER`'s above. An in-place host only exists inside a collection;\n      // the same action rendered on a detail page or in a danger zone has no row to transform, and\n      // an overlay is the closest thing to \"collect this without leaving the page\". It is NOT\n      // `NavigationTransition.INPLACE` — see `actionPresentationNavigates` for why that would be\n      // rebuilding the defect.\n      return NavigationTransition.OVERLAY;\n    default:\n      return undefined;\n  }\n}\n\nexport function resolveResourceOperationLayoutKind(\n  operation: ResourceOperationSemanticsLike,\n): ResourceOperationLayoutKind {\n  const effectiveOperation = resolveEffectiveCoreOperationFromOperation(operation);\n\n  if (!effectiveOperation) {\n    return 'action';\n  }\n\n  switch (effectiveOperation) {\n    case CoreResourceOperation.CREATE:\n    case CoreResourceOperation.CREATE_MANY:\n      return 'create';\n    case CoreResourceOperation.LIST:\n      return 'list';\n    case CoreResourceOperation.READ:\n    case CoreResourceOperation.DELETE:\n    case CoreResourceOperation.DELETE_MANY:\n      return 'read';\n    case CoreResourceOperation.UPDATE:\n    case CoreResourceOperation.UPDATE_MANY:\n      return 'update';\n    case CoreResourceOperation.SEARCH:\n      return 'search';\n    default:\n      return 'action';\n  }\n}\n\nexport function pickPreferredOperationForCoreSemantic<T extends ResourceOperationSemanticsLike>(\n  operations: readonly T[],\n  coreOperation: CoreResourceOperation,\n  options?: {\n    requireAddressable?: boolean;\n    allowBulk?: boolean;\n    /** See {@link getOperationsForCoreSemantic}. */\n    requireLiteralIdentifier?: boolean;\n  },\n): T | undefined {\n  const filtered = getOperationsForCoreSemantic(operations, coreOperation, options);\n\n  if (filtered.length === 0) {\n    return undefined;\n  }\n\n  const preferredVariantTypes = [\n    ResourceOperationVariantType.API_CALL,\n    ResourceOperationVariantType.API_CALL_WITH_CALLBACK,\n  ];\n\n  return [...filtered].sort((left, right) => {\n    const leftLiteral = left.operationIdentifier === coreOperation ? 1 : 0;\n    const rightLiteral = right.operationIdentifier === coreOperation ? 1 : 0;\n    if (leftLiteral !== rightLiteral) {\n      return rightLiteral - leftLiteral;\n    }\n\n    const leftDefault = left.isOperationDefault ? 1 : 0;\n    const rightDefault = right.isOperationDefault ? 1 : 0;\n    if (leftDefault !== rightDefault) {\n      return rightDefault - leftDefault;\n    }\n\n    const leftNonBulk = left.isBulkOperation === true ? 0 : 1;\n    const rightNonBulk = right.isBulkOperation === true ? 0 : 1;\n    if (leftNonBulk !== rightNonBulk) {\n      return rightNonBulk - leftNonBulk;\n    }\n\n    const leftPreferredVariant = preferredVariantTypes.includes(left.variantType as ResourceOperationVariantType) ? 1 : 0;\n    const rightPreferredVariant = preferredVariantTypes.includes(right.variantType as ResourceOperationVariantType) ? 1 : 0;\n    if (leftPreferredVariant !== rightPreferredVariant) {\n      return rightPreferredVariant - leftPreferredVariant;\n    }\n\n    const leftAddressable = left.operationFrontendConfig?.surface === ResourceOperationFrontendSurface.ADDRESSABLE ? 1 : 0;\n    const rightAddressable = right.operationFrontendConfig?.surface === ResourceOperationFrontendSurface.ADDRESSABLE ? 1 : 0;\n    if (leftAddressable !== rightAddressable) {\n      return rightAddressable - leftAddressable;\n    }\n\n    return String(left.variantKey ?? '').localeCompare(String(right.variantKey ?? ''));\n  })[0];\n}\n\nexport function getOperationsForCoreSemantic<T extends ResourceOperationSemanticsLike>(\n  operations: readonly T[],\n  coreOperation: CoreResourceOperation,\n  options?: {\n    requireAddressable?: boolean;\n    allowBulk?: boolean;\n    /**\n     * Accept ONLY the literal core verb, never an operation that borrows it through\n     * `resourceOperationLike`.\n     *\n     * Semantic matching is what lets a custom verb stand in for a core one, and that is right almost\n     * everywhere. It is wrong wherever the CALLER, not the operation, supplies the words: the list's\n     * create call-to-action labels itself `tResourceOperation(resourceType, CREATE, 'title')` — the\n     * LITERAL create's title — so a borrowed create is mislabelled by construction rather than by\n     * accident. On `AUDIT_LOGS`, whose literal CREATE is `REPOSITORY_ONLY` and therefore absent from\n     * the frontend registry, that produced a primary \"Create Audit Log\" button wired to\n     * `exportAuditLogs`.\n     */\n    requireLiteralIdentifier?: boolean;\n  },\n): T[] {\n  return operations.filter((operation) => {\n    if (!matchesResourceOperationSemantic(operation, coreOperation)) {\n      return false;\n    }\n\n    if (options?.requireLiteralIdentifier && operation.operationIdentifier !== coreOperation) {\n      return false;\n    }\n\n    if (options?.requireAddressable && operation.operationFrontendConfig?.surface !== ResourceOperationFrontendSurface.ADDRESSABLE) {\n      return false;\n    }\n\n    if (options?.allowBulk !== true && operation.isBulkOperation) {\n      return false;\n    }\n\n    return true;\n  });\n}\n"]}
+{"version":3,"file":"operation-semantics.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/operation-semantics.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACzH,OAAO,EACL,yBAAyB,EACzB,mCAAmC,EACnC,0BAA0B,EAC1B,6BAA6B,EAC7B,iCAAiC,EACjC,qBAAqB,EACrB,8BAA8B,EAC9B,4BAA4B,EAC5B,gCAAgC,EAChC,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,yCAAyC,EACzC,6DAA6D,GAG9D,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,GAC7B,MAAM,+DAA+D,CAAC;AAwCvE,MAAM,CAAC,MAAM,wCAAwC,GAAG,2BAA2B,CAAC;AACpF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG,6BAA6B,CAAC;AACxF,MAAM,CAAC,MAAM,qDAAqD,GAAG,wCAAwC,CAAC;AAU9G,MAAM,UAAU,8BAA8B,CAC5C,mBAA4B;IAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,mBAA4C,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,mBAA4B,EAC5B,qBAA+B;IAE/B,IAAI,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,qBAA8C,CAAC,EAAE,CAAC;QAC3H,OAAO,qBAA8C,CAAC;IACxD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,mBAA4C,CAAC,EAAE,CAAC;QAChG,OAAO,mBAA4C,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,SAAyC;IAEzC,OAAO,6BAA6B,CAClC,SAAS,CAAC,mBAAmB,EAC7B,SAAS,CAAC,qBAAqB,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,SAAyC,EACzC,aAAoC;IAEpC,OAAO,0CAA0C,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sCAAsC,CACpD,mBAA4B,EAC5B,kBAA+E;IAE/E,IACE,mBAAmB,KAAK,qBAAqB,CAAC,MAAM;WACjD,kBAAkB,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,IAAI,CAAC,EACxG,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAAyC;IAClF,OAAO,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAAgD;IAEhD,OAAO,aAAa,KAAK,qBAAqB,CAAC,MAAM;WAChD,aAAa,KAAK,qBAAqB,CAAC,WAAW,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,SAAyC;IAEzC,OAAO,SAAS,CAAC,eAAe,KAAK,IAAI;WACpC,yBAAyB,CAAC,0CAA0C,CAAC,SAAS,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,6CAA6C,CAC3D,SAAyC;IAEzC,IAAI,kCAAkC,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IAEjF,QAAQ,kBAAkB,EAAE,CAAC;QAC3B,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW,CAAC;QACvC,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW,CAAC;QACvC,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,iBAA2C;IAE3C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,wCAAwC,CAAC,CAAC;IAE5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,+BAA+B,CAC7C,iBAA2C;IAE3C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,0CAA0C,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,KAAmE,CAAC;IACtF,+GAA+G;IAC/G,MAAM,OAAO,GAAG,yCAAyC,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvF,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;YACjG,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAkC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAAC,iBAA2C;IACzF,MAAM,GAAG,GAAG,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;IAC7D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,0CAA0C,CAA2C,CAAC;IACxH,MAAM,YAAY,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5H,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,iBAA2C;IAE3C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC,qDAAqD,CAAC,CAAC;IACzF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iCAAiC,CAAC,GAAsB;IACtE,OAAO,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAI9C;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,oGAAoG;IACpG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAe;IACtD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5E,CAAC,CAAC,MAAiC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAIjD;IACC,IAAI,MAAM,CAAC,SAAS,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,+BAA+B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,6BAA6B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACpE,8FAA8F;IAC9F,oGAAoG;IACpG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,qGAAqG;IACrG,sGAAsG;IACtG,mEAAmE;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW;QACnC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAE,mCAAyD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACrJ,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,8BAA8B,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACrB,GAAG,iCAAiC,CAAC,GAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,SAAyC;IAEzC,OAAO,CAAC,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;WAChE,0CAA0C,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,SAAyC;IAEzC,OAAO,SAAS,CAAC,kBAAkB,EAAE,IAAI,KAAK,8BAA8B,CAAC,yBAAyB;WACjG,CACD,OAAO,SAAS,CAAC,mBAAmB,KAAK,QAAQ;eAC9C,qBAAqB,CAAC,+CAA+C,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,SAAS;eAClH,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAC1F,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oCAAoC,CAClD,SAAyC;IAEzC,OAAO,SAAS,CAAC,kBAAkB,EAAE,IAAI,KAAK,8BAA8B,CAAC,2BAA2B;WACnG,CACD,OAAO,SAAS,CAAC,mBAAmB,KAAK,QAAQ;eAC9C,qBAAqB,CAAC,iDAAiD,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,SAAS,CACxH,CAAC;AACN,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oCAAoC,CAClD,SAAyC,EACzC,kBAAgF;IAEhF,IAAI,CAAC,kBAAkB,IAAI,SAAS,CAAC,kBAAkB,EAAE,IAAI,KAAK,8BAA8B,CAAC,2BAA2B,EAAE,CAAC;QAC7H,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM;QAC7F,CAAC,CAAC,kBAAkB,CAAC,MAAM;QAC3B,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,gBAAgB,GAAG,OAAO,SAAS,CAAC,kBAAkB,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAClJ,OAAO,gBAAgB,KAAK,KAAK,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAyC;IACnF,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,sBAAsB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IACrF,OAAO,sBAAsB,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;AAC7G,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,kCAAkC,CAChD,SAAyC;IAEzC,yFAAyF;IACzF,4EAA4E;IAC5E,IAAI,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,SAAS,CAAC,uBAAuB,EAAE,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,sBAAsB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IACrF,OAAO,sBAAsB,KAAK,SAAS;WACtC,iCAAiC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,mCAAmC,CACjD,SAAyC,EACzC,OAA0D;IAE1D,OAAO,2BAA2B,CAAC,SAAS,CAAC,uBAAuB,CAAC;WAChE,oCAAoC,CAAC,SAAS,CAAC;WAC/C,CAAC,CAAC,OAAO,EAAE,kCAAkC,IAAI,kCAAkC,CAAC,SAAS,CAAC,CAAC,CAAC;AACvG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,IAAI,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,6DAA6D,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACnH,MAAM,KAAK,GAAG,KAAK,CAAC,aAAc,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAwB;IACzE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;IAC3B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,IAAI;CAC3B,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAwB;IAC3E,qBAAqB,CAAC,KAAK;IAC3B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAwB;IAC1E,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,MAAM,UAAU,qCAAqC,CACnD,SAAyC;IAEzC,gGAAgG;IAChG,4FAA4F;IAC5F,mGAAmG;IACnG,kGAAkG;IAClG,8FAA8F;IAC9F,WAAW;IACX,IAAI,oCAAoC,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IACE,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;WAC1D,4BAA4B,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnE,MAAM,sBAAsB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,sBAAsB,IAAI,8BAA8B,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,SAAS,wBAAwB,CAAC,UAAmB,EAAE,YAAiC;IACtF,IAAI,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,kCAAkC,CAAC,UAAU,EAAE,0BAA0B,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC;AAChH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,8BAA8B,CAAC,UAAmB,EAAE,YAAiC;IAC5F,OAAO,kCAAkC,CAAC,UAAU,EAAE,6BAA6B,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC;AACnH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,8BAA8B,CAAC,SAAyC;IAC/E,OAAO,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAS,mCAAmC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC/G,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kCAAkC,CACzC,UAAmB,EACnB,OAAe,EACf,YAAiC;IAEjC,IAAI,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAqC,CAAC;IAC/D,6FAA6F;IAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,CAAC;QAElD,IAAI,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpC,+FAA+F;YAC/F,mDAAmD;YACnD,OAAO,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,OAAuB,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oCAAoC,CAAC,UAAmB;IACtE,OAAO,UAAU,YAAY,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAAC,SAAyC;IACtF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,YAAY,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,OAAO,SAAS,KAAK,0BAA0B,CAAC,IAAI,IAAI,SAAS,KAAK,0BAA0B,CAAC,QAAQ,CAAC;AAC5G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,6BAKX;AALD,WAAY,6BAA6B;IACvC,0EAA0E;IAC1E,8CAAa,CAAA;IACb,oEAAoE;IACpE,wDAAuB,CAAA;AACzB,CAAC,EALW,6BAA6B,KAA7B,6BAA6B,QAKxC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sCAAsC,CACpD,SAAyC;IAEzC,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACxC,IAAI,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAqC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAE,CAAC;IACtC,IAAI,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,CAAC,SAAS,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAyC;IACrF,OAAO,SAAS,CAAC,eAAe,KAAK,IAAI;WACpC,CAAC,wBAAwB,CAAC,SAAS,CAAC,SAAS,CAAC;QACjD,kHAAkH;WAC/G,CAAC,SAAS,CAAC,kBAAkB;WAC7B,sCAAsC,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAM,UAAU,0CAA0C,CACxD,SAAyC;IAEzC,MAAM,MAAM,GAAG,SAAS,CAAC,uBAAuB,CAAC;IAEjD,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC/B,IACE,MAAM,CAAC,kBAAkB,KAAK,mCAAmC,CAAC,QAAQ;eACvE,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAC5C,CAAC;YACD,OAAO,mCAAmC,CAAC,OAAO,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC,kBAAkB,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,EAAE,CAAC;QACrE,OAAO,mCAAmC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IACE,8BAA8B,CAAC,SAAS,CAAC,mBAAmB,CAAC;WAC1D,6BAA6B,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,EACnE,CAAC;QACD,OAAO,mCAAmC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IAAI,kCAAkC,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,iGAAiG;IACjG,2DAA2D;IAC3D,EAAE;IACF,4FAA4F;IAC5F,gFAAgF;IAChF,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,2DAA2D;IAC3D,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,mCAAmC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,mCAAmC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAClC,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,IACE,MAAM,EAAE,WAAW,KAAK,4BAA4B,CAAC,UAAU;WAC5D,oCAAoC,CAAC,SAAS,CAAC,UAAU,CAAC,EAC7D,CAAC;QACD,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,IAAI,8BAA8B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO,mCAAmC,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,IAAI,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,mCAAmC,CAAC,QAAQ,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAE/D,IAAI,8BAA8B,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QACvE,OAAO,mCAAmC,CAAC,OAAO,CAAC;IACrD,CAAC;IAED,OAAO,wBAAwB,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC;QACjE,CAAC,CAAC,mCAAmC,CAAC,KAAK;QAC3C,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAiD;IAEjD,OAAO,YAAY,KAAK,mCAAmC,CAAC,KAAK;WAC5D,YAAY,KAAK,mCAAmC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mCAAmC,CACjD,YAAiD;IAEjD,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,mCAAmC,CAAC,KAAK,CAAC;QAC/C,KAAK,mCAAmC,CAAC,OAAO,CAAC;QACjD,+FAA+F;QAC/F,oEAAoE;QACpE,KAAK,mCAAmC,CAAC,QAAQ;YAC/C,OAAO,oBAAoB,CAAC,OAAO,CAAC;QACtC,KAAK,mCAAmC,CAAC,MAAM;YAC7C,gGAAgG;YAChG,6FAA6F;YAC7F,wFAAwF;YACxF,2FAA2F;YAC3F,yBAAyB;YACzB,OAAO,oBAAoB,CAAC,OAAO,CAAC;QACtC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,SAAyC;IAEzC,MAAM,kBAAkB,GAAG,0CAA0C,CAAC,SAAS,CAAC,CAAC;IAEjF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,QAAQ,kBAAkB,EAAE,CAAC;QAC3B,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,QAAQ,CAAC;QAClB,KAAK,qBAAqB,CAAC,IAAI;YAC7B,OAAO,MAAM,CAAC;QAChB,KAAK,qBAAqB,CAAC,IAAI,CAAC;QAChC,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,MAAM,CAAC;QAChB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAClC,KAAK,qBAAqB,CAAC,WAAW;YACpC,OAAO,QAAQ,CAAC;QAClB,KAAK,qBAAqB,CAAC,MAAM;YAC/B,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,UAAwB,EACxB,aAAoC,EACpC,OAKC;IAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,qBAAqB,GAAG;QAC5B,4BAA4B,CAAC,QAAQ;KACtC,CAAC;IAEF,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO,YAAY,GAAG,WAAW,CAAC;QACpC,CAAC;QAED,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAA2C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtH,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAA2C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxH,IAAI,oBAAoB,KAAK,qBAAqB,EAAE,CAAC;YACnD,OAAO,qBAAqB,GAAG,oBAAoB,CAAC;QACtD,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvH,MAAM,gBAAgB,GAAG,KAAK,CAAC,uBAAuB,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,eAAe,KAAK,gBAAgB,EAAE,CAAC;YACzC,OAAO,gBAAgB,GAAG,eAAe,CAAC;QAC5C,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAwB,EACxB,aAAoC,EACpC,OAgBC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrC,IAAI,CAAC,gCAAgC,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,wBAAwB,IAAI,SAAS,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;YACzF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,kBAAkB,IAAI,SAAS,CAAC,uBAAuB,EAAE,OAAO,KAAK,gCAAgC,CAAC,WAAW,EAAE,CAAC;YAC/H,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { z } from 'zod';\nimport { FieldSchemaType, getSchemaType, isFileSchema, isForeignKeyField, unwrapSchema } from '@wildo-ai/zod-decorators';\nimport {\n  ALL_COLLECTION_OPERATIONS,\n  BULK_OPERATION_HOST_SUPPLIED_FIELDS,\n  BULK_OPERATION_MATCH_FIELD,\n  BULK_OPERATION_SELECTOR_FIELD,\n  COLLECTION_OPERATIONS_WITHOUT_IDS,\n  CoreResourceOperation,\n  ResourceGeneratedOperationKind,\n  ResourceOperationVariantType,\n  ResourceOperationFrontendSurface,\n  ResourceOperationRiskLevel,\n  NavigationTransition,\n  Resources_SharedUtils,\n  Resources_BulkOperationMatchListingSchema,\n  getContextAddressedCompositionSingletonRelationshipCandidates,\n  type ResourceConfiguration_ResourceRelationships,\n  type Resources_BulkOperationMatchListing,\n} from '@wildo-ai/saas-models';\nimport {\n  isCollectionScopedOperation,\n  ResourceOperationActionPresentation,\n  ResourceOperationActionScope,\n} from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\n\nexport interface ResourceOperationSemanticsLike {\n  operationIdentifier: unknown;\n  resourceOperationLike?: unknown;\n  requestDto?: unknown;\n  variantType?: unknown;\n  isOperationDefault?: boolean;\n  isBulkOperation?: boolean;\n  variantKey?: unknown;\n  /** Read only by the DROPDOWN rule: a pick that executes cannot also be a deliberate, confirmed act. */\n  riskLevel?: unknown;\n  /**\n   * Read only by the DROPDOWN rule (#2744 review N1): a dropdown lists its field's values and executes the pick, outside\n   * the form that applies an operation's offers, so an operation that declares offers is not presented as one.\n   */\n  requestFieldOffers?: unknown;\n  /**\n   * The subset of `ResourceOperationFrontendConfig` this module's decisions read.\n   *\n   * Deliberately a structural subset rather than the full config type: these helpers run against\n   * operation objects arriving through several projections (the frontend registry, a thinned\n   * navigation payload, a test fixture), and requiring the whole config would make them unusable on\n   * exactly the surfaces that need them most.\n   */\n  operationFrontendConfig?: {\n    surface?: ResourceOperationFrontendSurface;\n    actionPresentation?: ResourceOperationActionPresentation;\n    actionScope?: ResourceOperationActionScope;\n    rowTargetRequestField?: string;\n  };\n  generatedOperation?: {\n    kind?: unknown;\n    fieldName?: unknown;\n    /** On a collection export: the LIST/SEARCH verb and the keyed VARIANT it re-runs (#2705). */\n    sourceCoreOperation?: unknown;\n    sourceVariantKey?: unknown;\n  };\n}\n\nexport const BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY = 'bulkOperationSelectionIds';\n/**\n * The operation-context key carrying a CROSS-PAGE selection (\"select all N matching\") to whatever host\n * presents a bulk action's form — the sibling of {@link BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY}.\n *\n * A form-bearing bulk action (one that asks for a value, like \"Change status\") is executed by the\n * form host, which adds the selection through {@link mergeBulkSelectionIntoRequestData}. That merge\n * read only the id key, so a cross-page selection never reached it and the request went out with no\n * selection but the form's own empty `_match` (#1461, #2035 run 2026-09-30).\n */\nexport const BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY = 'bulkOperationMatchSelection';\nexport const RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY = 'resourceOperationExecutedDiscriminator';\n\nexport type ResourceOperationLayoutKind =\n  | 'create'\n  | 'list'\n  | 'read'\n  | 'update'\n  | 'search'\n  | 'action';\n\nexport function isLiteralCoreResourceOperation(\n  operationIdentifier: unknown,\n): operationIdentifier is CoreResourceOperation {\n  return Object.values(CoreResourceOperation).includes(operationIdentifier as CoreResourceOperation);\n}\n\nexport function resolveEffectiveCoreOperation(\n  operationIdentifier: unknown,\n  resourceOperationLike?: unknown,\n): CoreResourceOperation | undefined {\n  if (resourceOperationLike && Object.values(CoreResourceOperation).includes(resourceOperationLike as CoreResourceOperation)) {\n    return resourceOperationLike as CoreResourceOperation;\n  }\n\n  if (Object.values(CoreResourceOperation).includes(operationIdentifier as CoreResourceOperation)) {\n    return operationIdentifier as CoreResourceOperation;\n  }\n\n  return undefined;\n}\n\nexport function resolveEffectiveCoreOperationFromOperation(\n  operation: ResourceOperationSemanticsLike,\n): CoreResourceOperation | undefined {\n  return resolveEffectiveCoreOperation(\n    operation.operationIdentifier,\n    operation.resourceOperationLike,\n  );\n}\n\nexport function matchesResourceOperationSemantic(\n  operation: ResourceOperationSemanticsLike,\n  coreOperation: CoreResourceOperation,\n): boolean {\n  return resolveEffectiveCoreOperationFromOperation(operation) === coreOperation;\n}\n\n/**\n * The operation whose generated TITLE names a surface that shows `operationIdentifier` — the page header and\n * the overlay (dialog, sheet, tab) title alike, which must agree.\n *\n * The core EDIT surface is titled like the record's own page. UPDATE's title is generated as the name of an\n * ACTION, a button word (\"Update preferences\", \"Save changes\"), while READ's is generated as a HEADING naming\n * the surface (\"Preferences\"). An edit page headed by a verb names the button below it rather than the thing\n * being edited, and the form's own save button already says the verb. So when the resource has a READ, the\n * core UPDATE — including its polymorphic variants, which keep the `update` identifier — takes READ's title.\n *\n * Keyed on the literal identifier, NOT on the effective core semantics: a custom operation that BEHAVES like\n * an update (`claimDomain`, `reset_to_defaults`) is a named action, and its own title is the only word that\n * says which action the surface performs. A resource with no READ keeps UPDATE's title, the only word it has.\n */\nexport function resolveSurfaceTitleOperationIdentifier(\n  operationIdentifier: unknown,\n  resourceOperations: ReadonlyArray<{ operationIdentifier: unknown }> | undefined,\n): string {\n  if (\n    operationIdentifier === CoreResourceOperation.UPDATE\n    && resourceOperations?.some((candidate) => candidate.operationIdentifier === CoreResourceOperation.READ)\n  ) {\n    return CoreResourceOperation.READ;\n  }\n  return String(operationIdentifier);\n}\n\n/**\n * Is a surface showing this operation HEADED by the record's own name, rather than by the operation's title?\n *\n * Only for a CORE verb that addresses one record — READ (the record's page), UPDATE (its edit page, titled like the\n * page: see {@link resolveSurfaceTitleOperationIdentifier}) and DELETE (whose question is WHICH record). A NAMED\n * action on one record keeps its own title as the heading: `setRepresentativeAdmissionPolicy`'s title is what the page DOES, and the\n * record is the thing it does it to, so its name sits beneath the title instead of replacing it (#2058). Until\n * then a record label replaced every one-record surface's title, and every named action opened as a page headed\n * only \"E2E spfbb168\", which says nothing about which action the form below performs.\n *\n * Keyed on the literal identifier for the same reason the title rule is: a custom operation BORROWING update\n * semantics (`resourceOperationLike`) is still a named action.\n */\nexport function surfaceHeadingIsRecordName(operation: ResourceOperationSemanticsLike): boolean {\n  return isLiteralCoreResourceOperation(operation.operationIdentifier) && operationAddressesOneRecord(operation);\n}\n\nexport function isUpdateLikeCoreOperation(\n  coreOperation: CoreResourceOperation | undefined,\n): boolean {\n  return coreOperation === CoreResourceOperation.UPDATE\n    || coreOperation === CoreResourceOperation.UPDATE_MANY;\n}\n\nexport function isSingleResourceUpdateLikeOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return operation.isBulkOperation !== true\n    && isUpdateLikeCoreOperation(resolveEffectiveCoreOperationFromOperation(operation));\n}\n\nexport function shouldEmitResourceRefreshAfterDirectOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  if (isGeneratedFileRegenerateOperation(operation)) {\n    return true;\n  }\n\n  const effectiveOperation = resolveEffectiveCoreOperationFromOperation(operation);\n\n  switch (effectiveOperation) {\n    case CoreResourceOperation.CREATE:\n    case CoreResourceOperation.CREATE_MANY:\n    case CoreResourceOperation.UPDATE:\n    case CoreResourceOperation.UPDATE_MANY:\n    case CoreResourceOperation.DELETE:\n    case CoreResourceOperation.DELETE_MANY:\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport function readBulkOperationSelectionIds(\n  additionalContext?: Record<string, unknown>,\n): string[] | undefined {\n  const value = additionalContext?.[BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY];\n\n  if (!Array.isArray(value)) {\n    return undefined;\n  }\n\n  const ids = value.filter((candidate): candidate is string => typeof candidate === 'string');\n  return ids.length > 0 ? ids : undefined;\n}\n\n/** The cross-page selection an operation context carries, when \"select all N matching\" was chosen. */\nexport function readBulkOperationMatchSelection(\n  additionalContext?: Record<string, unknown>,\n): { filters?: Record<string, unknown>; search?: string; listing?: Resources_BulkOperationMatchListing } | undefined {\n  const value = additionalContext?.[BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY];\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    return undefined;\n  }\n  const candidate = value as { filters?: unknown; search?: unknown; listing?: unknown };\n  // The listing the rows came from (#2718), read through its own wire schema so a malformed one travels as none.\n  const listing = Resources_BulkOperationMatchListingSchema.safeParse(candidate.listing);\n  return {\n    ...(candidate.filters && typeof candidate.filters === 'object' && !Array.isArray(candidate.filters)\n      ? { filters: candidate.filters as Record<string, unknown> }\n      : {}),\n    ...(typeof candidate.search === 'string' && candidate.search !== '' ? { search: candidate.search } : {}),\n    ...(candidate.listing !== undefined && listing.success ? { listing: listing.data } : {}),\n  };\n}\n\n/**\n * How many records a bulk operation context names, for the words a bulk form shows (\"will be cleared on 40 records\",\n * #2620): the ids when rows were picked, else the count the LISTING reported for a cross-page selection\n * (`matchedCount`, a statement about the moment the person chose, as the bulk bar shows it). `undefined` when the context\n * names no selection, or a cross-page one without its count.\n *\n * Read only for display: the selection the server writes to is the one `mergeBulkSelectionIntoRequestData` sends, and the\n * count never travels with it.\n */\nexport function readBulkOperationSelectionCount(additionalContext?: Record<string, unknown>): number | undefined {\n  const ids = readBulkOperationSelectionIds(additionalContext);\n  if (ids) return ids.length;\n  const match = additionalContext?.[BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY] as { matchedCount?: unknown } | undefined;\n  const matchedCount = match && typeof match === 'object' ? match.matchedCount : undefined;\n  return typeof matchedCount === 'number' && Number.isInteger(matchedCount) && matchedCount >= 0 ? matchedCount : undefined;\n}\n\nexport function readResourceOperationExecutedDiscriminator(\n  additionalContext?: Record<string, unknown>,\n): string | undefined {\n  const value = additionalContext?.[RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY];\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\n/**\n * Build the wire selector a bulk operation uses to name the rows it targets.\n *\n * The field name comes from {@link BULK_OPERATION_SELECTOR_FIELD} — the ONE named source both halves\n * of the contract read — because spelling it here is exactly how this broke. Every frontend bulk\n * surface emitted `ids`, which is not in the bulk request DTO\n * (`Resources_BulkOperationBaseSchema.extend(...)`), so the strict Zod parse stripped it and then\n * refused the request for the `_ids` it never received. It type-checked, it looked right, and the\n * generic bulk lane had never once worked from the UI.\n *\n * Every frontend producer of a bulk payload goes through this function, so there is one spelling to\n * get right rather than one per surface.\n */\nexport function buildBulkOperationSelectorPayload(ids: readonly string[]): Record<string, unknown> {\n  return { [BULK_OPERATION_SELECTOR_FIELD]: [...ids] };\n}\n\n/**\n * The CROSS-PAGE selector payload: the query that produced the listing, not the rows it showed.\n *\n * Sibling of {@link buildBulkOperationSelectorPayload} and never sent beside it — the server refuses\n * a request naming both, because honouring one would make the other silently inert. The matched\n * count stays on the client: it is what the listing reported when the person chose, and the server\n * re-evaluates the query itself rather than trusting a number the client sent (#1461).\n */\nexport function buildBulkOperationMatchPayload(match: {\n  filters?: Record<string, unknown>;\n  search?: string;\n  listing?: Resources_BulkOperationMatchListing;\n}): Record<string, unknown> {\n  const filters = match.filters && Object.keys(match.filters).length > 0 ? { filters: match.filters } : {};\n  const search = match.search ? { search: match.search } : {};\n  // The listing the rows came from, so the server re-runs exactly that operation and variant (#2718).\n  const listing = match.listing ? { listing: match.listing } : {};\n  return { [BULK_OPERATION_MATCH_FIELD]: { ...filters, ...search, ...listing } };\n}\n\n/**\n * The `resultSummary` an outcome event may carry: the operation's result when it is a PLAIN OBJECT,\n * and nothing otherwise.\n *\n * The event schema types it as a record, and every producer used to pass any non-null object —\n * which includes an array. A multi-row bulk update answers an array of rows, so its\n * RESOURCE_OPERATION_EXECUTED was refused by the event bus (\"Invalid payload\") and nobody heard that\n * the write succeeded: the listing kept its old values and the bulk bar kept the rows selected.\n * One definition, so the producers cannot disagree about it again.\n */\nexport function toOperationResultSummary(result: unknown): Record<string, unknown> | undefined {\n  return typeof result === 'object' && result !== null && !Array.isArray(result)\n    ? result as Record<string, unknown>\n    : undefined;\n}\n\nexport function mergeBulkSelectionIntoRequestData(params: {\n  operation: ResourceOperationSemanticsLike;\n  requestData?: Record<string, unknown>;\n  additionalContext?: Record<string, unknown>;\n}): Record<string, unknown> | undefined {\n  if (params.operation.isBulkOperation !== true) {\n    return params.requestData;\n  }\n\n  const match = readBulkOperationMatchSelection(params.additionalContext);\n  const ids = readBulkOperationSelectionIds(params.additionalContext);\n  // No selection in the context: the caller's request is left exactly as given — a programmatic\n  // `execute({ _ids })` names its own rows, and dropping them would turn it into a no-target request.\n  if (!match && (!ids || ids.length === 0)) {\n    return params.requestData;\n  }\n\n  // The context supplies the selection, so it is the COLLECTION's to write, never the form's: whatever\n  // the request carries under a selector key is dropped first, so an empty `_match: {}` can never stand\n  // in for — or sit beside — the selection the person actually made.\n  const formValues = params.requestData\n    ? Object.fromEntries(Object.entries(params.requestData).filter(([key]) => !(BULK_OPERATION_HOST_SUPPLIED_FIELDS as readonly string[]).includes(key)))\n    : undefined;\n\n  if (match) {\n    return { ...(formValues ?? {}), ...buildBulkOperationMatchPayload(match) };\n  }\n\n  return {\n    ...(formValues ?? {}),\n    ...buildBulkOperationSelectorPayload(ids!),\n  };\n}\n\nexport function isSemanticCustomResourceOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return !isLiteralCoreResourceOperation(operation.operationIdentifier)\n    && resolveEffectiveCoreOperationFromOperation(operation) !== undefined;\n}\n\nexport function isGeneratedFileRegenerateOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return operation.generatedOperation?.kind === ResourceGeneratedOperationKind.GENERATED_FILE_REGENERATE\n    || (\n      typeof operation.operationIdentifier === 'string'\n      && Resources_SharedUtils.parseGeneratedFileRegenerateOperationIdentifier(operation.operationIdentifier) !== undefined\n      && resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.UPDATE\n    );\n}\n\n/**\n * Is this the file-export companion of a LIST/SEARCH operation?\n *\n * Identity comes from the generated-operation metadata, with the prefixed identifier as the fallback\n * for any surface that receives a thinned operation object — the same two-source shape\n * {@link isGeneratedFileRegenerateOperation} uses, and for the same reason: the frontend receives\n * operations through several projections and not all of them carry `generatedOperation`.\n */\nexport function isGeneratedCollectionExportOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  return operation.generatedOperation?.kind === ResourceGeneratedOperationKind.GENERATED_COLLECTION_EXPORT\n    || (\n      typeof operation.operationIdentifier === 'string'\n      && Resources_SharedUtils.parseGeneratedCollectionExportOperationIdentifier(operation.operationIdentifier) !== undefined\n    );\n}\n\n/**\n * Does this collection export re-run the VARIANT the listing shows (#2705)?\n *\n * An export re-runs exactly the variant that declared it. A resource can show one operation's variants on different\n * screens: a member's own listing (unkeyed), and the governed `directory` (keyed) an administrator reads. An export of\n * one, offered on the other, downloads a set the person is not looking at: the directory's whole tenant list from a\n * member listing's toolbar, with that listing's filters. So it is offered only where its source variant is the one shown.\n *\n * `listingVariantKeys` is the variant the listing shows for each verb: a key, `null` for the unkeyed variant, or\n * `undefined` when the listing did not say (no constraint: a surface that supplies nothing sees no change).\n */\nexport function collectionExportReRunsListingVariant(\n  operation: ResourceOperationSemanticsLike,\n  listingVariantKeys: { list?: string | null; search?: string | null } | undefined,\n): boolean {\n  if (!listingVariantKeys || operation.generatedOperation?.kind !== ResourceGeneratedOperationKind.GENERATED_COLLECTION_EXPORT) {\n    return true;\n  }\n  const shown = operation.generatedOperation.sourceCoreOperation === CoreResourceOperation.SEARCH\n    ? listingVariantKeys.search\n    : listingVariantKeys.list;\n  if (shown === undefined) return true;\n  const sourceVariantKey = typeof operation.generatedOperation.sourceVariantKey === 'string' ? operation.generatedOperation.sourceVariantKey : null;\n  return sourceVariantKey === shown;\n}\n\n/**\n * Does this operation address ONE persisted record, so that its context's own-type slot is that record's id?\n *\n * A non-bulk READ, UPDATE or DELETE does, and so does a custom operation borrowing one of them. Nothing else\n * does: every collection verb (`ALL_COLLECTION_OPERATIONS`: LIST, SEARCH, COUNT, CREATE, CREATE_MANY,\n * UPDATE_MANY, DELETE_MANY), a BULK variant of any verb (`haveBulkOperation` — an UPDATE or DELETE over a\n * selection; saas-models builds its route with no entity id for the same reason), and an operation whose\n * semantic cannot be resolved. On those an own-type id in the context is AMBIENT SCOPE — the quick-switcher's\n * selected record, for one — and never \"the current record\".\n *\n * The single answer to that question. The resource header asks it before letting a record's label replace\n * the operation title, the navigation layer before reading a context's type slot as an id\n * (`NavigationUtils.isScopeAddressedOperationContext`), and the app scope before treating a surface as one\n * that addresses a record of a scope field's type. They used to answer it separately, from a hand-closed list\n * each, and disagreed about CREATE_MANY and the bulk variants.\n */\nexport function operationAddressesOneRecord(operation: ResourceOperationSemanticsLike): boolean {\n  if (operation.isBulkOperation === true) return false;\n  const effectiveCoreOperation = resolveEffectiveCoreOperationFromOperation(operation);\n  return effectiveCoreOperation !== undefined && !ALL_COLLECTION_OPERATIONS.includes(effectiveCoreOperation);\n}\n\n/**\n * A CUSTOM operation that borrows a COLLECTION verb, and therefore addresses no single row.\n *\n * `resourceOperationLike` answers a ROUTING question — which core verb's route shape and\n * collection-level authorization does this operation borrow. The frontend has been reading it as a\n * statement about what the operation MEANS to a user, and for the collection verbs those two\n * answers come apart: an operation borrowing one of `COLLECTION_OPERATIONS_WITHOUT_IDS` gets a\n * route with NO `:id` segment in it, so there is no row for a per-row button to act on. Clicking it\n * on the third row does exactly what clicking it on the first row does.\n *\n * `AuditLogs.EXPORT_AUDIT_LOGS` is the worked example and says so at its own declaration: it borrows\n * CREATE to get \"the collection POST route shape without … requiring a meaningless `auditLogId` path\n * value\". It then rendered a Download button on every row of the audit trail.\n *\n * DERIVED rather than declared, for the reason the generated collection-export exemption beside it\n * already gives: `actionScope: COLLECTION` is a per-app declaration, and asking every author to\n * stamp it puts the burden on them for something the framework already knows from the route it\n * built. Measured 2026-09-20 over `engine/` and `platform/`: five custom operations borrow a\n * collection verb — this export, both access-grant `REQUEST_ACCESS` verbs, SCIM `GENERATE_TOKEN` and\n * SSO `DISCOVER_ENDPOINTS` — and not one of the five is a per-row action. None had declared the\n * scope, so all five rendered per row.\n *\n * `rowTargetRequestField` is the declared ESCAPE, not an oversight: it is how an operation says \"I\n * address the clicked row through the request BODY rather than the URL\", which is precisely the\n * shape a per-row action borrowing a collection verb would take. One that declares it stays an item\n * action.\n */\nexport function isCollectionVerbBorrowingOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  // A LITERAL core verb is not borrowing anything — `CREATE` is the resource's create, and\n  // `LIST`/`SEARCH`/`COUNT` are already handled as non-item operations below.\n  if (isLiteralCoreResourceOperation(operation.operationIdentifier)) return false;\n  if (operation.operationFrontendConfig?.rowTargetRequestField) return false;\n  const effectiveCoreOperation = resolveEffectiveCoreOperationFromOperation(operation);\n  return effectiveCoreOperation !== undefined\n    && COLLECTION_OPERATIONS_WITHOUT_IDS.includes(effectiveCoreOperation);\n}\n\n/**\n * Does this operation act on the WHOLE COLLECTION rather than on one row?\n *\n * THE single answer to that question, because it is asked twice and the two askers do different\n * jobs: `useResourceOperationActions` decides which actions EXIST on a surface, and\n * `ResourceLayout_List` decides whether the collection-action surface is MOUNTED at all. An\n * exemption added to one alone produces actions rendered into a container that was never created —\n * which is exactly what happened on 2026-08-25, when three gate fixes in the hook changed nothing\n * visible because the mount check still said there were no collection-scoped operations here.\n *\n * That hazard used to be managed by a ⚠️ comment asking the next author to remember both sites.\n * Collapsing the predicate is the stronger form of the same instruction: there is now one site.\n *\n * Three ways to be collection-scoped, in descending order of how explicit they are:\n *  1. DECLARED — `actionScope: COLLECTION`, the per-app opt-in for a \"retry all\" / \"purge all\";\n *  2. DERIVED from the generated collection-export companion, which is collection-scoped by\n *     construction and has no author to declare anything;\n *  3. DERIVED from a borrowed COLLECTION verb — see {@link isCollectionVerbBorrowingOperation}.\n *\n * The third follows what the verb ADDRESSES, not the verb it is like (#2326). A verb with no `:id` addresses the\n * collection its context selects, and for a context-addressed SINGLETON that collection is one record: the one a\n * detail page shows when its context is that record's owner. There the verb acts on the record on screen, so it is\n * an item action (`addressesTheContextSingletonRecord`, decided by {@link recordIsItsContextSingleton}). A settings\n * singleton whose ENABLE and DISABLE borrow CREATE for the id-less route is the case that found it (a representing\n * organization's activity-feed settings, since retired, #2592): they appeared on no surface at all, since a singleton\n * has no list to carry collection actions. The\n * two DECLARED kinds are untouched: a \"retry all\" means all, wherever it renders.\n */\nexport function isCollectionScopedResourceOperation(\n  operation: ResourceOperationSemanticsLike,\n  options?: { addressesTheContextSingletonRecord?: boolean },\n): boolean {\n  return isCollectionScopedOperation(operation.operationFrontendConfig)\n    || isGeneratedCollectionExportOperation(operation)\n    || (!options?.addressesTheContextSingletonRecord && isCollectionVerbBorrowingOperation(operation));\n}\n\n/**\n * Is the record on screen the one its context selects (#2326)? True when the resource is a context-addressed\n * composition singleton under some parent, the record names that parent, and the surface's context IS that parent.\n *\n * The last condition is what keeps the rule to the record a person opened in its own context. The same singleton can\n * also be a row of somebody's administrative list, reached from another context; an id-less verb there would address\n * the context's record, not that row's, so it must not become a row action.\n */\nexport function recordIsItsContextSingleton(input: {\n  resourceRelationships: ResourceConfiguration_ResourceRelationships | undefined;\n  currentObject: Record<string, unknown> | undefined;\n  contextResourceIdentifiers: Record<string, string | { fieldIdentifier: string; resourceId: string }>;\n}): boolean {\n  if (!input.resourceRelationships || !input.currentObject) return false;\n  return getContextAddressedCompositionSingletonRelationshipCandidates(input.resourceRelationships).some((candidate) => {\n    const owner = input.currentObject![candidate.foreignKeyField];\n    const context = input.contextResourceIdentifiers[candidate.parentResourceType];\n    const contextId = typeof context === 'string' ? context : context?.resourceId;\n    return typeof owner === 'string' && owner.length > 0 && owner === contextId;\n  });\n}\n\nexport const NON_ITEM_RESOURCE_OPERATIONS = new Set<CoreResourceOperation>([\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.SEARCH,\n  CoreResourceOperation.COUNT,\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.CREATE_MANY,\n  CoreResourceOperation.READ,\n]);\n\n/**\n * Effective core semantics that are pure aggregate / collection READS — a data\n * provider the surface calls programmatically, never a per-item user action,\n * even when worn by a CUSTOM operation. A `get_state` op declaring\n * `resourceOperationLike: COUNT` (no `requestDto`) is the canonical example: it\n * fetches aggregate state for a panel to render, so as an action-bar button it is\n * a dead control that fetches and shows nothing.\n *\n * `READ` and `CREATE` are deliberately EXCLUDED: custom READ-like ops\n * (`open_portal`, `usage_stats`) and CREATE-like ops (a \"clone\" / \"duplicate\")\n * ARE real user actions and must keep their button.\n */\nexport const NON_ITEM_CUSTOM_CORE_SEMANTICS = new Set<CoreResourceOperation>([\n  CoreResourceOperation.COUNT,\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.SEARCH,\n]);\n\nexport const NAVIGABLE_RESOURCE_OPERATIONS = new Set<CoreResourceOperation>([\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.READ,\n  CoreResourceOperation.UPDATE,\n]);\n\nexport function shouldTreatAsNonItemResourceOperation(\n  operation: ResourceOperationSemanticsLike,\n): boolean {\n  // The collection-export companion BORROWS `resourceOperationLike: LIST/SEARCH` so that routing,\n  // collection-level authorization and URL building all treat it as a listing. That makes the\n  // aggregate-read test below match it — and it is exactly wrong here: an export is an ACTION a user\n  // clicks, not a data provider. Without this exemption the action is filtered out of every bar and\n  // the feature has no surface at all, which is silent: nothing errors, the button simply never\n  // renders.\n  if (isGeneratedCollectionExportOperation(operation)) {\n    return false;\n  }\n\n  if (\n    isLiteralCoreResourceOperation(operation.operationIdentifier)\n    && NON_ITEM_RESOURCE_OPERATIONS.has(operation.operationIdentifier)\n  ) {\n    return true;\n  }\n\n  // A CUSTOM operation whose effective core semantic is an aggregate/collection\n  // read (COUNT/LIST/SEARCH) is a data provider, not a per-item action — keep it\n  // out of the action bar so it does not render as a dead, do-nothing button.\n  if (!isLiteralCoreResourceOperation(operation.operationIdentifier)) {\n    const effectiveCoreOperation = resolveEffectiveCoreOperationFromOperation(operation);\n    if (effectiveCoreOperation && NON_ITEM_CUSTOM_CORE_SEMANTICS.has(effectiveCoreOperation)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * The largest request-body field count the framework will present in an OVERLAY rather than a page.\n *\n * Six is a judgement, not a measurement, and it is written down here — in ONE place, named — so it\n * can be argued with instead of rediscovered. It is the point at which the industry guidance stops\n * saying \"keep the user in context\" and starts saying \"give the task the room a page has\": Carbon\n * routes complex data entry to a full page, Filament's `->form()` modal is described for collecting\n * *extra information*, not for authoring a record.\n *\n * An author who disagrees for a specific operation does not tune this number — they declare\n * `actionPresentation` and the derivation is not consulted at all. That is the escape hatch, and it\n * is why a single global constant is honest here.\n */\nexport const ACTION_MODAL_FIELD_CEILING = 6;\n\n/**\n * The largest request-body field count the framework will present in an ANCHORED PANEL rather than\n * an overlay.\n *\n * Two, and the reasoning is the one this axis's `POPOVER` member already states: the anchored panel\n * is the small-input idiom (\"snooze until…\", \"reject with a reason…\"), and it earns its\n * place by keeping the row the user is acting on visible. A third control starts wanting the room a\n * dialog has, and the panel stops being cheaper than one.\n *\n * Pairs with {@link ACTION_MODAL_FIELD_CEILING} as one ordered ladder — 1–2 anchored, 3–6 overlay,\n * beyond that a page — so the two numbers are argued with together instead of one of them silently\n * owning every case.\n */\nexport const ACTION_ANCHORED_FIELD_CEILING = 2;\n\n/**\n * Can the framework honestly present this request body inside an overlay?\n *\n * Three refusals, each for a different reason rather than by symmetry:\n *  - **not an object schema** — nothing can be counted, so nothing can be promised;\n *  - **a file field** — upload chrome (drag target, crop, progress, retry) needs room an overlay\n *    does not have, and a half-visible upload is worse than a page;\n *  - **a nested object / array-of-objects** — a nested write is a form inside a form, which is the\n *    shape a page exists for.\n *\n * Anything else is judged on size alone. Note this reads the schema STRUCTURALLY and never a field\n * count carried alongside it: the operation object reaching the frontend is a projection, and a\n * count computed elsewhere would be a second source able to disagree with the schema it describes.\n */\nfunction requestBodyFitsAnOverlay(requestDto: unknown, suppliedKeys: ReadonlySet<string>): boolean {\n  if (!(requestDto instanceof z.ZodObject)) {\n    return false;\n  }\n\n  return countFieldsPresentableWithoutAPage(requestDto, ACTION_MODAL_FIELD_CEILING, suppliedKeys) !== undefined;\n}\n\n/**\n * Is this request body small and simple enough for an ANCHORED PANEL?\n *\n * The SHAPE test is identical to the overlay's — a file, a nested object or a repeating sub-form\n * belongs on a page whichever chrome is being considered — so only the ceiling differs. Sharing\n * `countFieldsPresentableWithoutAPage` is what keeps the two answers from disagreeing about what\n * \"simple\" means: two copies of that list would drift the first time a field kind is added.\n */\nfunction requestBodyFitsAnAnchoredPanel(requestDto: unknown, suppliedKeys: ReadonlySet<string>): boolean {\n  return countFieldsPresentableWithoutAPage(requestDto, ACTION_ANCHORED_FIELD_CEILING, suppliedKeys) !== undefined;\n}\n\n/**\n * The request keys a BULK action's host fills itself, which are therefore not inputs a person fills.\n *\n * A bulk twin's request is the single-row request plus `_ids` — the selection — and the form hides\n * that key because the collection supplies it. Counting it anyway made every bulk action look one\n * field larger than it is: a two-field bulk action counted three and fell from the anchored panel\n * to a dialog, while the SAME action on one row got the panel. The ladder has to count what the\n * person will actually see.\n *\n * Named from `BULK_OPERATION_HOST_SUPPLIED_FIELDS` — both selectors, `_ids` and the cross-page\n * `_match` — the one list the form's omission and the execution merge also read, so the keys this\n * skips and the keys the request builder writes cannot drift apart.\n */\nfunction resolveHostSuppliedRequestKeys(operation: ResourceOperationSemanticsLike): ReadonlySet<string> {\n  return operation.isBulkOperation === true ? new Set<string>(BULK_OPERATION_HOST_SUPPLIED_FIELDS) : new Set();\n}\n\n/**\n * The field count of a request body every one of whose fields can be drawn without a page, or\n * `undefined` when the body is empty, over `ceiling`, unintrospectable, or holds a field that\n * cannot.\n *\n * Reads the schema STRUCTURALLY and never a field count carried alongside it: the operation object\n * reaching the frontend is a projection, and a count computed elsewhere would be a second source\n * able to disagree with the schema it describes.\n */\nfunction countFieldsPresentableWithoutAPage(\n  requestDto: unknown,\n  ceiling: number,\n  suppliedKeys: ReadonlySet<string>,\n): number | undefined {\n  if (!(requestDto instanceof z.ZodObject)) {\n    return undefined;\n  }\n\n  const shape = requestDto.shape as Record<string, z.ZodTypeAny>;\n  // Keys the HOST supplies are not inputs anyone fills — see `resolveHostSuppliedRequestKeys`.\n  const fieldNames = Object.keys(shape).filter((fieldName) => !suppliedKeys.has(fieldName));\n\n  if (fieldNames.length === 0 || fieldNames.length > ceiling) {\n    return undefined;\n  }\n\n  const everyFieldFits = fieldNames.every((fieldName) => {\n    const unwrapped = unwrapSchema(shape[fieldName]!);\n\n    if (isFileSchema(unwrapped)) {\n      return false;\n    }\n\n    if (unwrapped instanceof z.ZodObject) {\n      return false;\n    }\n\n    if (unwrapped instanceof z.ZodArray) {\n      // An array of scalars (a list of ids, a set of tags) is one control and fits fine. An array of\n      // OBJECTS is a repeating sub-form, which does not.\n      return !(unwrapSchema(unwrapped.element as z.ZodTypeAny) instanceof z.ZodObject);\n    }\n\n    return true;\n  });\n\n  return everyFieldFits ? fieldNames.length : undefined;\n}\n\n/**\n * Does this operation declare a request body with NO fields — an explicit `z.object({})`?\n *\n * Such a zero-input operation has no form to collect, so it executes rather than opening one.\n * Mirrors the backend's `hasMeaningfulExplicitRequestDto` (inverted).\n */\nexport function hasEmptyResourceOperationRequestBody(requestDto: unknown): boolean {\n  return requestDto instanceof z.ZodObject && Object.keys(requestDto.shape).length === 0;\n}\n\n/**\n * Does this operation collect NOTHING from a person? No `requestDto`, or one whose every field the\n * host supplies itself.\n *\n * A bulk twin's request is its row variant's body plus the `_ids` selector the collection fills. A\n * bulk action whose row variant takes no input therefore has a body of exactly `{ _ids }` — not\n * empty, and not something anyone types. Checking raw emptiness sent Wonder Todos' bulk \"Unassign\"\n * to a dialog holding an empty form and a Save button, where the same action on one row ran on\n * click. The action ladder and the operation host both ask this, so an action cannot run directly\n * from one surface and open an empty form on another.\n */\nexport function operationCollectsNoCallerInput(operation: ResourceOperationSemanticsLike): boolean {\n  if (!operation.requestDto) {\n    return true;\n  }\n  if (!(operation.requestDto instanceof z.ZodObject)) {\n    return false;\n  }\n  const suppliedKeys = resolveHostSuppliedRequestKeys(operation);\n  return Object.keys(operation.requestDto.shape).every((fieldName) => suppliedKeys.has(fieldName));\n}\n\n/**\n * Does this risk level ask for a confirmation before the operation runs?\n *\n * HIGH and CRITICAL do (a plain confirm, and a typed one); LOW and MEDIUM execute on click. The one\n * definition the action ladder's confirm dialog and the DROPDOWN rule both read, so \"risky enough to\n * confirm\" and \"too risky to execute on a pick\" cannot come to mean two different sets.\n */\nexport function isRiskyResourceOperation(riskLevel: unknown): boolean {\n  return riskLevel === ResourceOperationRiskLevel.HIGH || riskLevel === ResourceOperationRiskLevel.CRITICAL;\n}\n\n/**\n * The kind of domain a DROPDOWN lists — the two a person can pick from without typing a value.\n *\n * Two members because the lists are genuinely different things: an enum's values are CLOSED and\n * known up front, so they are listed whole; a reference's candidates are records on the server, so\n * they are SEARCHED as you type and scoped like the form's picker. A boolean is deliberately absent —\n * a two-item menu for yes/no is a worse control than the toggle it would replace.\n */\nexport enum ResourceOperationChoiceDomain {\n  /** A closed enum — every value listed, labelled as the form labels it. */\n  ENUM = 'enum',\n  /** A foreign key — the referenced records, searched server-side. */\n  REFERENCE = 'reference',\n}\n\n/** The single field a DROPDOWN presents, and which kind of list it needs. */\nexport interface ResourceOperationDropdownChoice {\n  /** The request field the pick is written to. */\n  fieldName: string;\n  /** That field's schema as the request DTO declares it (decorators intact). */\n  fieldSchema: z.ZodTypeAny;\n  domain: ResourceOperationChoiceDomain;\n}\n\n/**\n * The one choice field this operation's input consists of, or `undefined` when its input is\n * anything else.\n *\n * Qualifies only when, after the keys the host supplies itself (a bulk twin's `_ids`), EXACTLY ONE\n * field remains and it is a single enum or a single foreign key. An array is refused: picking one\n * item of a multi-pick and executing is not what the field asks for.\n *\n * Reads the schema structurally, like every other rule in this module, so the answer cannot\n * disagree with the form the same operation would otherwise render.\n */\nexport function resolveResourceOperationDropdownChoice(\n  operation: ResourceOperationSemanticsLike,\n): ResourceOperationDropdownChoice | undefined {\n  const requestDto = operation.requestDto;\n  if (!(requestDto instanceof z.ZodObject)) {\n    return undefined;\n  }\n\n  const suppliedKeys = resolveHostSuppliedRequestKeys(operation);\n  const shape = requestDto.shape as Record<string, z.ZodTypeAny>;\n  const fieldNames = Object.keys(shape).filter((fieldName) => !suppliedKeys.has(fieldName));\n  if (fieldNames.length !== 1) {\n    return undefined;\n  }\n\n  const fieldName = fieldNames[0]!;\n  const fieldSchema = shape[fieldName]!;\n  if (unwrapSchema(fieldSchema) instanceof z.ZodArray) {\n    return undefined;\n  }\n  if (isForeignKeyField(fieldSchema)) {\n    return { fieldName, fieldSchema, domain: ResourceOperationChoiceDomain.REFERENCE };\n  }\n  if (getSchemaType(fieldSchema) === FieldSchemaType.ENUM) {\n    return { fieldName, fieldSchema, domain: ResourceOperationChoiceDomain.ENUM };\n  }\n  return undefined;\n}\n\n/**\n * Can this operation honestly present as a DROPDOWN — one choice field, one row, and no confirmation\n * owed?\n *\n * All three are correctness constraints, not taste. Without a single choice field there is no list to\n * show. A pick executes immediately, so an operation whose risk level asks for a confirmation would\n * lose it. And a BULK twin writes every selected row: one stray pick in a menu would rewrite them all\n * with no second step, which is the one place \"the pick is the submission\" is the wrong promise. Each\n * of those keeps the anchored FORM, which has an explicit Submit.\n */\nexport function operationCanPresentAsDropdown(operation: ResourceOperationSemanticsLike): boolean {\n  return operation.isBulkOperation !== true\n    && !isRiskyResourceOperation(operation.riskLevel)\n    // Its choices depend on the row and the application (#2744): the form that applies the offer collects it instead.\n    && !operation.requestFieldOffers\n    && resolveResourceOperationDropdownChoice(operation) !== undefined;\n}\n\n/**\n * HOW does this action collect its input?\n *\n * The single answer for every action surface. An explicitly authored\n * {@link ResourceOperationActionPresentation} is returned as authored — the author has answered the\n * question and the framework does not second-guess their TASTE — with ONE correctness exception: a\n * DROPDOWN the operation cannot honestly be resolves to POPOVER (see below). Everything else is the\n * DERIVATION for the (overwhelmingly common) case where nothing was authored.\n *\n * The derivation is ordered by how strong the evidence is, not by convenience:\n *\n * 1. **`ADDRESSABLE` ⇒ PAGE.** Declaring an operation deep-linkable IS declaring it a destination.\n *    Nothing derived may take that away.\n * 2. **A literal core CREATE / READ / UPDATE ⇒ PAGE.** These are the framework's own page surfaces\n *    and every app's navigation config is written against them; deriving an overlay here would\n *    silently restyle every existing application.\n * 3. **Already-established in-place shapes ⇒ DIRECT.** A row-targeted action (its target rides the\n *    body), a zero-input collection action, and a generated-file regenerate all executed on click\n *    before this axis existed. They are stated here so the axis DESCRIBES the framework's behaviour\n *    rather than sitting beside it — an axis that cannot express what the framework already does is\n *    a second mechanism, not a vocabulary.\n * 4. **No caller input ⇒ DIRECT.** No `requestDto` at all, an explicit `z.object({})`, or a bulk\n *    body holding only the selector the host fills ({@link operationCollectsNoCallerInput}).\n * 5. **One choice from an enum or a reference, and no confirmation owed ⇒ DROPDOWN.** The pick is\n *    the submission, so the list of values IS the whole input ({@link operationCanPresentAsDropdown}).\n * 6. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for\n *    them, so the row being acted on stays visible.\n * 7. **Input that fits an overlay ⇒ MODAL.**\n * 8. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback\n *    for a `requestDto` this code cannot introspect (a thinned projection), because refusing to\n *    guess returns the behaviour the operation had before.\n *\n * ## An authored DROPDOWN that cannot be one resolves to POPOVER\n *\n * The only authored answer this function overrides, and for the same reason the click handler\n * refuses a non-navigating presentation on a zero-input update-like action: honouring it would be\n * wrong, not merely ugly. A DROPDOWN over two fields has no list to show, and one over a CRITICAL\n * operation would execute without the typed confirmation every other surface demands. POPOVER is the\n * nearest honest answer — the same anchored panel, holding the form with its Submit.\n *\n * ## Why step 6 is DERIVED, when it used to be authored-only\n *\n * This function returned `MODAL` for every small input and left `POPOVER` to authors, on the\n * reasoning that an anchored panel is a claim about the surrounding context — that the trigger is\n * anchored and visible — which the operation alone cannot support.\n *\n * The reasoning was sound and the conclusion did not follow, because nothing was ever asking this\n * function to be right about the host. **The bar already decides whether it can anchor**, and it\n * already degrades when it cannot: an item collapsed into the overflow menu or nested in a subgroup\n * takes its `onClick`, which `resolveActionPresentationTransition` maps to an OVERLAY — the same\n * chrome `MODAL` would have produced. So the cost of deriving the panel is zero where it cannot be\n * drawn, and the cost of NOT deriving it was that every small action in every application —\n * \"snooze until…\", \"reject with a reason…\" — covered the list it was acting on with a dialog, and the\n * only way out was to author the axis per operation. (The one-CHOICE actions — \"change status to…\",\n * \"assign to…\" — have since moved one step earlier, to DROPDOWN.)\n *\n * `INLINE` stays authored-only, and the asymmetry is the point: its claim is about the ELEMENT (the\n * thing being acted on is a row that can transform in place), and its degrade target is an overlay\n * over the list it was meant to keep visible — so guessing it wrong costs the user the very thing\n * the presentation exists for. A popover guessed wrong costs nothing.\n */\nexport function resolveResourceOperationActionPresentation(\n  operation: ResourceOperationSemanticsLike,\n): ResourceOperationActionPresentation {\n  const config = operation.operationFrontendConfig;\n\n  if (config?.actionPresentation) {\n    if (\n      config.actionPresentation === ResourceOperationActionPresentation.DROPDOWN\n      && !operationCanPresentAsDropdown(operation)\n    ) {\n      return ResourceOperationActionPresentation.POPOVER;\n    }\n    return config.actionPresentation;\n  }\n\n  if (config?.surface === ResourceOperationFrontendSurface.ADDRESSABLE) {\n    return ResourceOperationActionPresentation.PAGE;\n  }\n\n  if (\n    isLiteralCoreResourceOperation(operation.operationIdentifier)\n    && NAVIGABLE_RESOURCE_OPERATIONS.has(operation.operationIdentifier)\n  ) {\n    return ResourceOperationActionPresentation.PAGE;\n  }\n\n  if (isGeneratedFileRegenerateOperation(operation)) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  // A ZERO-INPUT single-resource UPDATE-like custom action keeps its host, even though it collects\n  // nothing and would otherwise be DIRECT by the rule below.\n  //\n  // Its mutation must run under an explicit RMM-vs-weaker-guarantee contract, and only a host\n  // provides one — `useResourceOperationSurface.executeCurrentOperation()` throws\n  // `MissingRMMRuntimeError` rather than writing without it. Executing such an action straight from\n  // the action bar would take the plain `doOperation` path and lose that guarantee SILENTLY, which\n  // is why the click handler also refuses to honour an AUTHORED non-navigating presentation here:\n  // this is a correctness constraint, not a styling default.\n  if (!operation.requestDto && isSingleResourceUpdateLikeOperation(operation)) {\n    return ResourceOperationActionPresentation.PAGE;\n  }\n\n  if (config?.rowTargetRequestField) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  if (\n    config?.actionScope === ResourceOperationActionScope.COLLECTION\n    && hasEmptyResourceOperationRequestBody(operation.requestDto)\n  ) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  if (operationCollectsNoCallerInput(operation)) {\n    return ResourceOperationActionPresentation.DIRECT;\n  }\n\n  if (operationCanPresentAsDropdown(operation)) {\n    return ResourceOperationActionPresentation.DROPDOWN;\n  }\n\n  const suppliedKeys = resolveHostSuppliedRequestKeys(operation);\n\n  if (requestBodyFitsAnAnchoredPanel(operation.requestDto, suppliedKeys)) {\n    return ResourceOperationActionPresentation.POPOVER;\n  }\n\n  return requestBodyFitsAnOverlay(operation.requestDto, suppliedKeys)\n    ? ResourceOperationActionPresentation.MODAL\n    : ResourceOperationActionPresentation.PAGE;\n}\n\n/**\n * Does this presentation reach the NAVIGATION layer, or does the action layer own it end to end?\n *\n * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER`, `DROPDOWN` and `INLINE` are not: nothing is pushed,\n * no zone changes, and there is nothing for a back button to pop — routing them through navigation\n * would mint zone entries for chrome that does not live in a zone.\n *\n * `INLINE` is the one worth explaining, because `NavigationTransition.INPLACE` exists and looks like\n * its home. It is not: element-level hosting uses NONE of what navigation provides — no zone, no\n * stack entry, no appearance, no lifecycle modifier — and routing it there is exactly why that\n * transition has never done what its docstring promises (it falls through to a zone REPLACE). The\n * host lives with the elements instead; see `InPlaceOperationContext`.\n */\nexport function actionPresentationNavigates(\n  presentation: ResourceOperationActionPresentation,\n): boolean {\n  return presentation === ResourceOperationActionPresentation.MODAL\n    || presentation === ResourceOperationActionPresentation.PAGE;\n}\n\n/**\n * The navigation transition an action presentation is an alias FOR.\n *\n * `PAGE` maps to `undefined` deliberately, and it is the most important row: a page is not a\n * transition, it is \"let the ordinary chain answer\". Returning `PUSH` here would flatten every\n * app's zone transitions, viewport overrides and relationship defaults into one verb — the axis\n * would stop being an alias and start being an override, which is the failure mode this design\n * exists to avoid.\n *\n * `POPOVER` maps to `OVERLAY` — its DEGRADE target, not its normal path. A popover normally never\n * reaches navigation ({@link actionPresentationNavigates} is false for it), but a host that cannot\n * ANCHOR one — an action collapsed into an overflow menu or nested in a subgroup — has to present\n * the same input somewhere, and the honest substitute for \"a small panel next to the button\" is an\n * overlay. Leaving it `undefined` would send that action to the ordinary chain and produce a full\n * PAGE for the presentation that asked for the least chrome of all.\n *\n * `DIRECT` maps to `undefined` because it collects nothing: there is no input to relocate.\n */\nexport function resolveActionPresentationTransition(\n  presentation: ResourceOperationActionPresentation,\n): NavigationTransition | undefined {\n  switch (presentation) {\n    case ResourceOperationActionPresentation.MODAL:\n    case ResourceOperationActionPresentation.POPOVER:\n    // A DROPDOWN degrades exactly like the popover it shares a host with: where nothing can anchor\n    // the list, the same single field is collected by the overlay form.\n    case ResourceOperationActionPresentation.DROPDOWN:\n      return NavigationTransition.OVERLAY;\n    case ResourceOperationActionPresentation.INLINE:\n      // The DEGRADE target, like `POPOVER`'s above. An in-place host only exists inside a collection;\n      // the same action rendered on a detail page or in a danger zone has no row to transform, and\n      // an overlay is the closest thing to \"collect this without leaving the page\". It is NOT\n      // `NavigationTransition.INPLACE` — see `actionPresentationNavigates` for why that would be\n      // rebuilding the defect.\n      return NavigationTransition.OVERLAY;\n    default:\n      return undefined;\n  }\n}\n\nexport function resolveResourceOperationLayoutKind(\n  operation: ResourceOperationSemanticsLike,\n): ResourceOperationLayoutKind {\n  const effectiveOperation = resolveEffectiveCoreOperationFromOperation(operation);\n\n  if (!effectiveOperation) {\n    return 'action';\n  }\n\n  switch (effectiveOperation) {\n    case CoreResourceOperation.CREATE:\n    case CoreResourceOperation.CREATE_MANY:\n      return 'create';\n    case CoreResourceOperation.LIST:\n      return 'list';\n    case CoreResourceOperation.READ:\n    case CoreResourceOperation.DELETE:\n    case CoreResourceOperation.DELETE_MANY:\n      return 'read';\n    case CoreResourceOperation.UPDATE:\n    case CoreResourceOperation.UPDATE_MANY:\n      return 'update';\n    case CoreResourceOperation.SEARCH:\n      return 'search';\n    default:\n      return 'action';\n  }\n}\n\nexport function pickPreferredOperationForCoreSemantic<T extends ResourceOperationSemanticsLike>(\n  operations: readonly T[],\n  coreOperation: CoreResourceOperation,\n  options?: {\n    requireAddressable?: boolean;\n    allowBulk?: boolean;\n    /** See {@link getOperationsForCoreSemantic}. */\n    requireLiteralIdentifier?: boolean;\n  },\n): T | undefined {\n  const filtered = getOperationsForCoreSemantic(operations, coreOperation, options);\n\n  if (filtered.length === 0) {\n    return undefined;\n  }\n\n  const preferredVariantTypes = [\n    ResourceOperationVariantType.API_CALL,\n  ];\n\n  return [...filtered].sort((left, right) => {\n    const leftLiteral = left.operationIdentifier === coreOperation ? 1 : 0;\n    const rightLiteral = right.operationIdentifier === coreOperation ? 1 : 0;\n    if (leftLiteral !== rightLiteral) {\n      return rightLiteral - leftLiteral;\n    }\n\n    const leftDefault = left.isOperationDefault ? 1 : 0;\n    const rightDefault = right.isOperationDefault ? 1 : 0;\n    if (leftDefault !== rightDefault) {\n      return rightDefault - leftDefault;\n    }\n\n    const leftNonBulk = left.isBulkOperation === true ? 0 : 1;\n    const rightNonBulk = right.isBulkOperation === true ? 0 : 1;\n    if (leftNonBulk !== rightNonBulk) {\n      return rightNonBulk - leftNonBulk;\n    }\n\n    const leftPreferredVariant = preferredVariantTypes.includes(left.variantType as ResourceOperationVariantType) ? 1 : 0;\n    const rightPreferredVariant = preferredVariantTypes.includes(right.variantType as ResourceOperationVariantType) ? 1 : 0;\n    if (leftPreferredVariant !== rightPreferredVariant) {\n      return rightPreferredVariant - leftPreferredVariant;\n    }\n\n    const leftAddressable = left.operationFrontendConfig?.surface === ResourceOperationFrontendSurface.ADDRESSABLE ? 1 : 0;\n    const rightAddressable = right.operationFrontendConfig?.surface === ResourceOperationFrontendSurface.ADDRESSABLE ? 1 : 0;\n    if (leftAddressable !== rightAddressable) {\n      return rightAddressable - leftAddressable;\n    }\n\n    return String(left.variantKey ?? '').localeCompare(String(right.variantKey ?? ''));\n  })[0];\n}\n\nexport function getOperationsForCoreSemantic<T extends ResourceOperationSemanticsLike>(\n  operations: readonly T[],\n  coreOperation: CoreResourceOperation,\n  options?: {\n    requireAddressable?: boolean;\n    allowBulk?: boolean;\n    /**\n     * Accept ONLY the literal core verb, never an operation that borrows it through\n     * `resourceOperationLike`.\n     *\n     * Semantic matching is what lets a custom verb stand in for a core one, and that is right almost\n     * everywhere. It is wrong wherever the CALLER, not the operation, supplies the words: the list's\n     * create call-to-action labels itself `tResourceOperation(resourceType, CREATE, 'title')` — the\n     * LITERAL create's title — so a borrowed create is mislabelled by construction rather than by\n     * accident. On `AUDIT_LOGS`, whose literal CREATE is `REPOSITORY_ONLY` and therefore absent from\n     * the frontend registry, that produced a primary \"Create Audit Log\" button wired to\n     * `exportAuditLogs`.\n     */\n    requireLiteralIdentifier?: boolean;\n  },\n): T[] {\n  return operations.filter((operation) => {\n    if (!matchesResourceOperationSemantic(operation, coreOperation)) {\n      return false;\n    }\n\n    if (options?.requireLiteralIdentifier && operation.operationIdentifier !== coreOperation) {\n      return false;\n    }\n\n    if (options?.requireAddressable && operation.operationFrontendConfig?.surface !== ResourceOperationFrontendSurface.ADDRESSABLE) {\n      return false;\n    }\n\n    if (options?.allowBulk !== true && operation.isBulkOperation) {\n      return false;\n    }\n\n    return true;\n  });\n}\n"]}

package/dist/esm/core/resources/read-through-organization-unit.frontend.utils.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Whether a read-through resource's form asks for an organization unit that this deployment ignores (#2939).
+ *
+ * The shared resource factory injects `organizationUnitId` into EVERY read-through (`HTTP_API`) resource and admits it
+ * on a create, because a create on a PARTITIONED system of record must name the unit whose partition the new row goes
+ * to. Whether the bound system is partitioned is a property of the deployment's system-of-record instance, which the
+ * shared configuration cannot know: the backend decides it at boot and narrows exactly those resources on this field
+ * (`derivePartitionedResourceNarrowing`). The session's access profile serves that decision as
+ * `organizationUnitNarrowing`. A read-through resource it does not narrow on this field is not partitioned here, the
+ * backend ignores the unit on its create, and a form asking for it would show a control that does nothing.
+ *
+ * Answers `false` — keep the field — while the narrowing is unknown (no session yet, or its access profile failed to
+ * load): hiding it then would make a create on a partitioned system fail with `WRITE_PARTITION_UNIT_REQUIRED`, while
+ * showing it on an unpartitioned one costs only an ignored optional field.
+ */
+export declare function isReadThroughOrganizationUnitFieldInert(input: {
+    readonly resourceType: string;
+    readonly resourceConfiguration: {
+        readonly persistenceAdapter?: unknown;
+    } | undefined;
+    readonly formFieldShape: Readonly<Record<string, unknown>> | undefined;
+    readonly organizationUnitNarrowing: Readonly<Record<string, {
+        readonly unitFieldName: string;
+    } | undefined>> | null | undefined;
+}): boolean;
+/**
+ * The organization units a read-through resource's CREATE form may offer in `organizationUnitId` (#2943): the units
+ * the session's access profile says this caller may name (`readThroughCreateOrganizationUnits`, the backend's create
+ * placement asked in advance), or `undefined` when the form should keep offering every unit as a reference — the field
+ * is not on this form, the resource is not read-through, or the answer was not computed.
+ *
+ * An EMPTY answer is kept: the caller can create into no unit, so the form offers none rather than units every create
+ * would be refused in, and the create's refusal says why (`UNIT_HAS_NO_PARTITION` / `UNIT_HAS_SEVERAL_PARTITIONS`).
+ * The answer is the session's: a unit assigned a partition, or granted to the caller, after the access profile loaded
+ * is offered only once it reloads.
+ */
+export declare function readThroughCreateOrganizationUnitCandidates(input: {
+    readonly resourceType: string;
+    readonly resourceConfiguration: {
+        readonly persistenceAdapter?: unknown;
+    } | undefined;
+    readonly formFieldShape: Readonly<Record<string, unknown>> | undefined;
+    readonly readThroughCreateOrganizationUnits: Readonly<Record<string, readonly string[] | undefined>> | null | undefined;
+}): readonly string[] | undefined;
+//# sourceMappingURL=read-through-organization-unit.frontend.utils.d.ts.map

package/dist/esm/core/resources/read-through-organization-unit.frontend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-through-organization-unit.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/read-through-organization-unit.frontend.utils.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uCAAuC,CAAC,KAAK,EAAE;IAC7D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IACtF,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;CACjI,GAAG,OAAO,CAMV;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IACtF,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,kCAAkC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;CACzH,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAKhC"}