@wildo-ai/saas-frontend-lib 1.1.2 → 1.1.4

package/dist/esm/core/config/config-merge-utilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-merge-utilities.js","sourceRoot":"","sources":["../../../../../src/core/config/config-merge-utilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAYlG,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEtG,mEAAmE;AACnE,8BAA8B;AAC9B,mEAAmE;AAEnE;;;;;;;;;GASG;AACH,SAAS,UAAU,CACjB,IAAS,EACT,QAAa,EACb,KAA0B;IAE1B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAa,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErB,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAgC,EAChC,QAAoC;IAEpC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IAE7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,gBAAgB;AAChB,mEAAmE;AAEnE;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAqC,EACrC,QAAyC;IAEzC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAExC,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,mEAAmE;AACnE,uBAAuB;AACvB,mEAAmE;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAkC,EAClC,QAAsC;IAEtC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,8BAA8B,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ;QAAE,OAAO,8BAA8B,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAExE,OAAO,8BAA8B,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,8BAA8B,CAAC,QAA0B;IAChE,+EAA+E;IAC/E,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,aAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,aAAa,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,aAAa;QAAE,OAAO,QAAQ,CAAC;IAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,KAAgC,EAAE,UAAkB,EAAQ,EAAE;QAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3B,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,WAAW,KAAK,yBAAyB,CAAC,eAAe,EAAE,CAAC;YACtE,MAAM,GAAG,GAAG,OAA8F,CAAC;YAC3G,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,YAAY,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CACV,2CAA2C,GAAG,aAAa,SAAS,CAAC,MAAM,+BAA+B;kBACxG,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD;kBACrF,mGAAmG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD,MAAM,UAAU,wBAAwB,CACtC,IAA+B,EAC/B,KAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,wDAAwD;AACxD,mEAAmE;AAEnE;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,sBAAsB,CAAC,kBAAkB;YAC5C,OAAO,sBAAsB,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC;QAC3G,KAAK,sBAAsB,CAAC,IAAI;YAC9B,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,sBAAsB,CAAC,aAAa;YACvC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7D,KAAK,sBAAsB,CAAC,WAAW;YACrC,OAAO,eAAe,IAAI,CAAC,OAAO,EAAE,CAAC;QACvC,KAAK,sBAAsB,CAAC,gBAAgB;YAC1C,OAAO,oBAAoB,IAAI,CAAC,YAAY,EAAE,CAAC;QACjD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAAsC,EACtC,UAAkB,EAClB,KAAoB;IAEpB,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,QAAQ,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAExC,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5B,IAAI,OAAO,CAAC,GAAG,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW,KAAK,yBAAyB,CAAC,eAAe,EAAE,CAAC;YACpG,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,OAA8F,CAAC;QAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACvC,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAsC,EACtC,KAAuC;IAEvC,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAuC,EACvC,KAAwC;IAExC,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,UAAU,CACf,IAAI,EACJ,KAAK,EACL,IAAI,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CACjE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA4C,EAC5C,KAA6C;IAE7C,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["/**\n * Configuration Merge Utilities\n *\n * Explicit merge functions for composing preset + app config. The engine\n * never merges implicitly — these are functions the app calls at config\n * time to produce a single flat configuration.\n *\n * All utilities follow the same semantic: **replace-by-ref on collision,\n * append new.** The `app` argument always wins over the `base` argument\n * on key collisions.\n *\n * @example\n * ```typescript\n * import {\n *   mergeAppScope, mergeAppModes, mergeSidebarSections,\n *   ApplicationLevelComponentType,\n * } from '@wildo-ai/saas-frontend-lib';\n *\n * // Compose a kit preset with app-specific overrides.\n * // Each merge utility produces a flat array/object — pass the result\n * // directly into the AppConfiguration_Frontend config object.\n * const frontendConfig: AppConfiguration_Frontend = {\n *   // ...other config...\n *   appScope: mergeAppScope(kitPreset.appScope, { fields: myAppScopeFields }),\n *   appModes: mergeAppModes(kitPreset.appModes, myAppModes),\n *   appComponentsConfiguration: {\n *     ...kitPreset.appComponentsConfiguration,\n *     [ApplicationLevelComponentType.SIDEBAR]: {\n *       ...kitPreset.appComponentsConfiguration.sidebar,\n *       contentSections: mergeSidebarSections(\n *         kitPreset.sidebarSections,\n *         myAppSections,\n *       ),\n *     },\n *   },\n * };\n * ```\n *\n * @see component-taxonomy-deep-review.md §7.8\n * @see app-shell-implementation-plan.md Step 8\n */\n\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\n\nimport type { QuickSwitcherScopeField } from './app-configuration-frontend.schemas';\nimport type { FullCustomViewDefinition } from './full-custom-view.schemas';\nimport type {\n  AppModeDefinition,\n  CommandMenuCommand,\n  LauncherItemRef,\n  MenubarLauncherItem,\n  SidebarItem,\n  SidebarSection,\n} from './launcher-items.frontend.schemas';\nimport { LauncherItemTargetKind, SidebarSectionContentKind } from './launcher-items.frontend.schemas';\n\n// ════════════════════════════════════════════════════════════════\n// Generic merge-by-key helper\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Merges two arrays by a key field. Items from `override` replace items\n * from `base` on key collision. Items unique to either array are preserved.\n * Order: base items first (with overrides applied in-place), then\n * override-only items appended at the end.\n *\n * **Invariant:** Keys must be unique within each input array. If duplicates\n * exist in `base`, only the first occurrence is kept. If duplicates exist\n * in `override`, only the last occurrence wins (Map semantics).\n */\nfunction mergeByKey<T>(\n  base: T[],\n  override: T[],\n  keyFn: (item: T) => string,\n): T[] {\n  const overrideMap = new Map<string, T>();\n  for (const item of override) {\n    overrideMap.set(keyFn(item), item);\n  }\n\n  const result: T[] = [];\n  const emittedKeys = new Set<string>();\n\n  for (const baseItem of base) {\n    const key = keyFn(baseItem);\n    if (emittedKeys.has(key)) continue;\n    emittedKeys.add(key);\n\n    if (overrideMap.has(key)) {\n      result.push(overrideMap.get(key)!);\n    } else {\n      result.push(baseItem);\n    }\n  }\n\n  for (const overrideItem of override) {\n    const key = keyFn(overrideItem);\n    if (!emittedKeys.has(key)) {\n      emittedKeys.add(key);\n      result.push(overrideItem);\n    }\n  }\n\n  return result;\n}\n\n// ════════════════════════════════════════════════════════════════\n// mergeAppScope\n// ════════════════════════════════════════════════════════════════\n\ninterface AppScopeConfig {\n  fields?: QuickSwitcherScopeField[];\n}\n\n/**\n * Merges two `appScope` configurations.\n *\n * **Merge key:** `fieldIdentifier`\n * **Semantics:** App fields win on collision. Base-only fields preserved.\n *\n * @param base   - Base scope config (e.g., from a kit preset)\n * @param override - App-specific scope config (wins on collision)\n * @returns Merged scope config\n */\nexport function mergeAppScope(\n  base: AppScopeConfig | undefined,\n  override: AppScopeConfig | undefined,\n): AppScopeConfig {\n  if (!base && !override) return {};\n  if (!base) return { ...override };\n  if (!override) return { ...base };\n\n  const baseFields = base.fields ?? [];\n  const overrideFields = override.fields ?? [];\n\n  if (baseFields.length === 0 && overrideFields.length === 0) {\n    return {};\n  }\n\n  return {\n    fields: mergeByKey(baseFields, overrideFields, f => f.fieldIdentifier),\n  };\n}\n\n// ════════════════════════════════════════════════════════════════\n// mergeAppModes\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Merges two `appModes` arrays.\n *\n * **Merge key:** `ref`\n * **Semantics:** App modes win on collision. Base-only modes preserved.\n *\n * @param base   - Base modes array (e.g., from a kit preset)\n * @param override - App-specific modes array (wins on collision)\n * @returns Merged modes array\n */\nexport function mergeAppModes(\n  base: AppModeDefinition[] | undefined,\n  override: AppModeDefinition[] | undefined,\n): AppModeDefinition[] {\n  if (!base && !override) return [];\n  if (!base) return [...(override ?? [])];\n  if (!override) return [...(base ?? [])];\n\n  return mergeByKey(base, override, m => m.ref);\n}\n\n// ════════════════════════════════════════════════════════════════\n// mergeSidebarSections\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Merges two `contentSections` arrays.\n *\n * **Merge key:** `ref`\n * **Semantics:** App sections **replace** base sections on collision\n * (full section replace, no item-level deep merge). Base-only sections\n * preserved.\n *\n * @param base   - Base sections array (e.g., from a kit preset)\n * @param override - App-specific sections array (wins on collision)\n * @returns Merged sections array\n */\nexport function mergeSidebarSections(\n  base: SidebarSection[] | undefined,\n  override: SidebarSection[] | undefined,\n): SidebarSection[] {\n  if (!base && !override) return [];\n  if (!base) return warnOnDuplicateLauncherTargets([...(override ?? [])]);\n  if (!override) return warnOnDuplicateLauncherTargets([...(base ?? [])]);\n\n  return warnOnDuplicateLauncherTargets(mergeByKey(base, override, s => s.ref));\n}\n\n/**\n * DEV-only diagnostic: report launcher items that resolve to the SAME navigation\n * target from more than one place in the merged sidebar (across sections and\n * nesting levels). The merge dedupes by section `ref` only — two sections each\n * carrying a `todoLists LIST` item are structurally valid and the app may WANT\n * that IA, so this warns and never auto-dedupes. It exists because duplicate\n * targets used to double-highlight in the sidebar (frontend-ux-quality-audit E2);\n * the active-state election now picks one, but the duplication itself is usually\n * a merge accident worth surfacing to the app author.\n */\nfunction warnOnDuplicateLauncherTargets(sections: SidebarSection[]): SidebarSection[] {\n  // `mergeSidebarSections` legitimately runs at MODULE SCOPE (apps compose their\n  // module registry at import time, before `ApplicationMainProvider` injects the\n  // env source), where `envLoader.isDevelopment()` THROWS \"No environment source\n  // available\". A diagnostic must never crash the surface it guards: treat \"env\n  // not yet resolvable\" as \"skip the warning\" — the merge itself is env-free.\n  let isDevelopment: boolean;\n  try {\n    isDevelopment = envLoader.isDevelopment();\n  } catch {\n    isDevelopment = false;\n  }\n  if (!isDevelopment) return sections;\n\n  const keyLocations = new Map<string, string[]>();\n  const collect = (items: SidebarItem[] | undefined, sectionRef: string): void => {\n    for (const item of items ?? []) {\n      const key = launcherItemRefKey(item);\n      const locations = keyLocations.get(key) ?? [];\n      locations.push(sectionRef);\n      keyLocations.set(key, locations);\n      collect(item.children, sectionRef);\n    }\n  };\n  for (const section of sections) {\n    if (section.contentKind === SidebarSectionContentKind.NAVIGATION_LIST) {\n      const nav = section as Extract<SidebarSection, { contentKind: SidebarSectionContentKind.NAVIGATION_LIST }>;\n      collect(nav.children, section.ref);\n    }\n  }\n\n  for (const [key, locations] of keyLocations) {\n    if (locations.length > 1) {\n      console.warn(\n        `[mergeSidebarSections] Launcher target \"${key}\" appears ${locations.length} times in the merged sidebar `\n        + `(sections: ${locations.join(', ')}). Only one occurrence will highlight as active. `\n        + `If this duplication is unintentional, remove the extra item from one of the contributing configs.`,\n      );\n    }\n  }\n\n  return sections;\n}\n\n\nexport function mergeQuickSwitcherFields(\n  base: QuickSwitcherScopeField[],\n  extra: QuickSwitcherScopeField[],\n): QuickSwitcherScopeField[] {\n  const seen = new Set<string>();\n  const merged: QuickSwitcherScopeField[] = [];\n\n  for (const field of [...base, ...extra]) {\n    if (seen.has(field.fieldIdentifier)) {\n      continue;\n    }\n\n    seen.add(field.fieldIdentifier);\n    merged.push(field);\n  }\n\n  return merged;\n}\n\n// ════════════════════════════════════════════════════════════════\n// Launcher item keys & command / sidebar append helpers\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Stable key for deduping launcher rows (sidebar children, command list, etc.).\n */\nexport function launcherItemRefKey(item: LauncherItemRef): string {\n  switch (item.kind) {\n    case LauncherItemTargetKind.RESOURCE_OPERATION:\n      return `resource_operation:${item.resourceType}:${item.operation}:${item.operationVariant ?? 'default'}`;\n    case LauncherItemTargetKind.VIEW:\n      return `${item.kind}:${item.viewRef}`;\n    case LauncherItemTargetKind.RESOURCE_VIEW:\n      return `${item.kind}:${item.resourceType}:${item.viewRef}`;\n    case LauncherItemTargetKind.ENGINE_PAGE:\n      return `engine_page:${item.pageRef}`;\n    case LauncherItemTargetKind.CUSTOM_COMPONENT:\n      return `custom_component:${item.componentRef}`;\n    default:\n      return 'unknown';\n  }\n}\n\n/**\n * Appends sidebar navigation children to the `NAVIGATION_LIST` section with `sectionRef`.\n * Skips items whose `launcherItemRefKey` already exists under that section (idempotent).\n */\nexport function appendNavChildrenToSidebarSection(\n  sections: SidebarSection[] | undefined,\n  sectionRef: string,\n  items: SidebarItem[],\n): SidebarSection[] {\n  if (!sections?.length) return sections ?? [];\n  if (!items.length) return [...sections];\n\n  return sections.map(section => {\n    if (section.ref !== sectionRef || section.contentKind !== SidebarSectionContentKind.NAVIGATION_LIST) {\n      return section;\n    }\n    const nav = section as Extract<SidebarSection, { contentKind: SidebarSectionContentKind.NAVIGATION_LIST }>;\n    const existing = new Set(nav.children.map(launcherItemRefKey));\n    const toAdd = items.filter(i => !existing.has(launcherItemRefKey(i)));\n    if (toAdd.length === 0) return section;\n    return { ...nav, children: [...nav.children, ...toAdd] };\n  });\n}\n\n/**\n * Merges command menu command arrays by `launcherItemRefKey` — override wins on collision.\n */\nexport function mergeCommandMenuCommandLists(\n  base: CommandMenuCommand[] | undefined,\n  extra: CommandMenuCommand[] | undefined,\n): CommandMenuCommand[] {\n  if (!base?.length) return [...(extra ?? [])];\n  if (!extra?.length) return [...base];\n  return mergeByKey(base, extra, launcherItemRefKey);\n}\n\n/**\n * Merges menubar launcher rows by launcher identity + menubar group.\n * Override wins on collision.\n */\nexport function mergeMenubarLauncherItems(\n  base: MenubarLauncherItem[] | undefined,\n  extra: MenubarLauncherItem[] | undefined,\n): MenubarLauncherItem[] {\n  if (!base?.length) return [...(extra ?? [])];\n  if (!extra?.length) return [...base];\n  return mergeByKey(\n    base,\n    extra,\n    item => `${launcherItemRefKey(item)}:${item.group ?? 'default'}`,\n  );\n}\n\n/**\n * Merges `fullCustomViews` by `ref` — override wins on collision.\n */\nexport function mergeFullCustomViewsByRef(\n  base: FullCustomViewDefinition[] | undefined,\n  extra: FullCustomViewDefinition[] | undefined,\n): FullCustomViewDefinition[] {\n  if (!base?.length) return [...(extra ?? [])];\n  if (!extra?.length) return [...base];\n  return mergeByKey(base, extra, v => v.ref);\n}\n"]}
+{"version":3,"file":"config-merge-utilities.js","sourceRoot":"","sources":["../../../../src/core/config/config-merge-utilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAYlG,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEtG,mEAAmE;AACnE,8BAA8B;AAC9B,mEAAmE;AAEnE;;;;;;;;;GASG;AACH,SAAS,UAAU,CACjB,IAAS,EACT,QAAa,EACb,KAA0B;IAE1B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAa,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErB,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAgC,EAChC,QAAoC;IAEpC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IAE7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,gBAAgB;AAChB,mEAAmE;AAEnE;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAqC,EACrC,QAAyC;IAEzC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAExC,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,mEAAmE;AACnE,uBAAuB;AACvB,mEAAmE;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAkC,EAClC,QAAsC;IAEtC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,8BAA8B,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ;QAAE,OAAO,8BAA8B,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAExE,OAAO,8BAA8B,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,8BAA8B,CAAC,QAA0B;IAChE,+EAA+E;IAC/E,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,aAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,aAAa,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,aAAa;QAAE,OAAO,QAAQ,CAAC;IAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,KAAgC,EAAE,UAAkB,EAAQ,EAAE;QAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3B,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,WAAW,KAAK,yBAAyB,CAAC,eAAe,EAAE,CAAC;YACtE,MAAM,GAAG,GAAG,OAA8F,CAAC;YAC3G,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,YAAY,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CACV,2CAA2C,GAAG,aAAa,SAAS,CAAC,MAAM,+BAA+B;kBACxG,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD;kBACrF,mGAAmG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD,MAAM,UAAU,wBAAwB,CACtC,IAA+B,EAC/B,KAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,wDAAwD;AACxD,mEAAmE;AAEnE;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,sBAAsB,CAAC,kBAAkB;YAC5C,OAAO,sBAAsB,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC;QAC3G,KAAK,sBAAsB,CAAC,IAAI;YAC9B,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,sBAAsB,CAAC,aAAa;YACvC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7D,KAAK,sBAAsB,CAAC,WAAW;YACrC,OAAO,eAAe,IAAI,CAAC,OAAO,EAAE,CAAC;QACvC,KAAK,sBAAsB,CAAC,gBAAgB;YAC1C,OAAO,oBAAoB,IAAI,CAAC,YAAY,EAAE,CAAC;QACjD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAC/C,QAAsC,EACtC,UAAkB,EAClB,KAAoB;IAEpB,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,QAAQ,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAExC,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5B,IAAI,OAAO,CAAC,GAAG,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW,KAAK,yBAAyB,CAAC,eAAe,EAAE,CAAC;YACpG,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,OAA8F,CAAC;QAC3G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACvC,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAsC,EACtC,KAAuC;IAEvC,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAuC,EACvC,KAAwC;IAExC,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,UAAU,CACf,IAAI,EACJ,KAAK,EACL,IAAI,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CACjE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA4C,EAC5C,KAA6C;IAE7C,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["/**\n * Configuration Merge Utilities\n *\n * Explicit merge functions for composing preset + app config. The engine\n * never merges implicitly — these are functions the app calls at config\n * time to produce a single flat configuration.\n *\n * All utilities follow the same semantic: **replace-by-ref on collision,\n * append new.** The `app` argument always wins over the `base` argument\n * on key collisions.\n *\n * @example\n * ```typescript\n * import {\n *   mergeAppScope, mergeAppModes, mergeSidebarSections,\n *   ApplicationLevelComponentType,\n * } from '@wildo-ai/saas-frontend-lib';\n *\n * // Compose a kit preset with app-specific overrides.\n * // Each merge utility produces a flat array/object — pass the result\n * // directly into the AppConfiguration_Frontend config object.\n * const frontendConfig: AppConfiguration_Frontend = {\n *   // ...other config...\n *   appScope: mergeAppScope(kitPreset.appScope, { fields: myAppScopeFields }),\n *   appModes: mergeAppModes(kitPreset.appModes, myAppModes),\n *   appComponentsConfiguration: {\n *     ...kitPreset.appComponentsConfiguration,\n *     [ApplicationLevelComponentType.SIDEBAR]: {\n *       ...kitPreset.appComponentsConfiguration.sidebar,\n *       contentSections: mergeSidebarSections(\n *         kitPreset.sidebarSections,\n *         myAppSections,\n *       ),\n *     },\n *   },\n * };\n * ```\n *\n * @see component-taxonomy-deep-review.md §7.8\n * @see app-shell-implementation-plan.md Step 8\n */\n\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\n\nimport type { QuickSwitcherScopeField } from './app-configuration-frontend.schemas';\nimport type { FullCustomViewDefinition } from './full-custom-view.schemas';\nimport type {\n  AppModeDefinition,\n  CommandMenuCommand,\n  LauncherItemRef,\n  MenubarLauncherItem,\n  SidebarItem,\n  SidebarSection,\n} from './launcher-items.frontend.schemas';\nimport { LauncherItemTargetKind, SidebarSectionContentKind } from './launcher-items.frontend.schemas';\n\n// ════════════════════════════════════════════════════════════════\n// Generic merge-by-key helper\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Merges two arrays by a key field. Items from `override` replace items\n * from `base` on key collision. Items unique to either array are preserved.\n * Order: base items first (with overrides applied in-place), then\n * override-only items appended at the end.\n *\n * **Invariant:** Keys must be unique within each input array. If duplicates\n * exist in `base`, only the first occurrence is kept. If duplicates exist\n * in `override`, only the last occurrence wins (Map semantics).\n */\nfunction mergeByKey<T>(\n  base: T[],\n  override: T[],\n  keyFn: (item: T) => string,\n): T[] {\n  const overrideMap = new Map<string, T>();\n  for (const item of override) {\n    overrideMap.set(keyFn(item), item);\n  }\n\n  const result: T[] = [];\n  const emittedKeys = new Set<string>();\n\n  for (const baseItem of base) {\n    const key = keyFn(baseItem);\n    if (emittedKeys.has(key)) continue;\n    emittedKeys.add(key);\n\n    if (overrideMap.has(key)) {\n      result.push(overrideMap.get(key)!);\n    } else {\n      result.push(baseItem);\n    }\n  }\n\n  for (const overrideItem of override) {\n    const key = keyFn(overrideItem);\n    if (!emittedKeys.has(key)) {\n      emittedKeys.add(key);\n      result.push(overrideItem);\n    }\n  }\n\n  return result;\n}\n\n// ════════════════════════════════════════════════════════════════\n// mergeAppScope\n// ════════════════════════════════════════════════════════════════\n\ninterface AppScopeConfig {\n  fields?: QuickSwitcherScopeField[];\n}\n\n/**\n * Merges two `appScope` configurations.\n *\n * **Merge key:** `fieldIdentifier`\n * **Semantics:** App fields win on collision. Base-only fields preserved.\n *\n * @param base   - Base scope config (e.g., from a kit preset)\n * @param override - App-specific scope config (wins on collision)\n * @returns Merged scope config\n */\nexport function mergeAppScope(\n  base: AppScopeConfig | undefined,\n  override: AppScopeConfig | undefined,\n): AppScopeConfig {\n  if (!base && !override) return {};\n  if (!base) return { ...override };\n  if (!override) return { ...base };\n\n  const baseFields = base.fields ?? [];\n  const overrideFields = override.fields ?? [];\n\n  if (baseFields.length === 0 && overrideFields.length === 0) {\n    return {};\n  }\n\n  return {\n    fields: mergeByKey(baseFields, overrideFields, f => f.fieldIdentifier),\n  };\n}\n\n// ════════════════════════════════════════════════════════════════\n// mergeAppModes\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Merges two `appModes` arrays.\n *\n * **Merge key:** `ref`\n * **Semantics:** App modes win on collision. Base-only modes preserved.\n *\n * @param base   - Base modes array (e.g., from a kit preset)\n * @param override - App-specific modes array (wins on collision)\n * @returns Merged modes array\n */\nexport function mergeAppModes(\n  base: AppModeDefinition[] | undefined,\n  override: AppModeDefinition[] | undefined,\n): AppModeDefinition[] {\n  if (!base && !override) return [];\n  if (!base) return [...(override ?? [])];\n  if (!override) return [...(base ?? [])];\n\n  return mergeByKey(base, override, m => m.ref);\n}\n\n// ════════════════════════════════════════════════════════════════\n// mergeSidebarSections\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Merges two `contentSections` arrays.\n *\n * **Merge key:** `ref`\n * **Semantics:** App sections **replace** base sections on collision\n * (full section replace, no item-level deep merge). Base-only sections\n * preserved.\n *\n * @param base   - Base sections array (e.g., from a kit preset)\n * @param override - App-specific sections array (wins on collision)\n * @returns Merged sections array\n */\nexport function mergeSidebarSections(\n  base: SidebarSection[] | undefined,\n  override: SidebarSection[] | undefined,\n): SidebarSection[] {\n  if (!base && !override) return [];\n  if (!base) return warnOnDuplicateLauncherTargets([...(override ?? [])]);\n  if (!override) return warnOnDuplicateLauncherTargets([...(base ?? [])]);\n\n  return warnOnDuplicateLauncherTargets(mergeByKey(base, override, s => s.ref));\n}\n\n/**\n * DEV-only diagnostic: report launcher items that resolve to the SAME navigation\n * target from more than one place in the merged sidebar (across sections and\n * nesting levels). The merge dedupes by section `ref` only — two sections each\n * carrying a `todoLists LIST` item are structurally valid and the app may WANT\n * that IA, so this warns and never auto-dedupes. It exists because duplicate\n * targets used to double-highlight in the sidebar (frontend-ux-quality-audit E2);\n * the active-state election now picks one, but the duplication itself is usually\n * a merge accident worth surfacing to the app author.\n */\nfunction warnOnDuplicateLauncherTargets(sections: SidebarSection[]): SidebarSection[] {\n  // `mergeSidebarSections` legitimately runs at MODULE SCOPE (apps compose their\n  // module registry at import time, before `ApplicationMainProvider` injects the\n  // env source), where `envLoader.isDevelopment()` THROWS \"No environment source\n  // available\". A diagnostic must never crash the surface it guards: treat \"env\n  // not yet resolvable\" as \"skip the warning\" — the merge itself is env-free.\n  let isDevelopment: boolean;\n  try {\n    isDevelopment = envLoader.isDevelopment();\n  } catch {\n    isDevelopment = false;\n  }\n  if (!isDevelopment) return sections;\n\n  const keyLocations = new Map<string, string[]>();\n  const collect = (items: SidebarItem[] | undefined, sectionRef: string): void => {\n    for (const item of items ?? []) {\n      const key = launcherItemRefKey(item);\n      const locations = keyLocations.get(key) ?? [];\n      locations.push(sectionRef);\n      keyLocations.set(key, locations);\n      collect(item.children, sectionRef);\n    }\n  };\n  for (const section of sections) {\n    if (section.contentKind === SidebarSectionContentKind.NAVIGATION_LIST) {\n      const nav = section as Extract<SidebarSection, { contentKind: SidebarSectionContentKind.NAVIGATION_LIST }>;\n      collect(nav.children, section.ref);\n    }\n  }\n\n  for (const [key, locations] of keyLocations) {\n    if (locations.length > 1) {\n      console.warn(\n        `[mergeSidebarSections] Launcher target \"${key}\" appears ${locations.length} times in the merged sidebar `\n        + `(sections: ${locations.join(', ')}). Only one occurrence will highlight as active. `\n        + `If this duplication is unintentional, remove the extra item from one of the contributing configs.`,\n      );\n    }\n  }\n\n  return sections;\n}\n\n\nexport function mergeQuickSwitcherFields(\n  base: QuickSwitcherScopeField[],\n  extra: QuickSwitcherScopeField[],\n): QuickSwitcherScopeField[] {\n  const seen = new Set<string>();\n  const merged: QuickSwitcherScopeField[] = [];\n\n  for (const field of [...base, ...extra]) {\n    if (seen.has(field.fieldIdentifier)) {\n      continue;\n    }\n\n    seen.add(field.fieldIdentifier);\n    merged.push(field);\n  }\n\n  return merged;\n}\n\n// ════════════════════════════════════════════════════════════════\n// Launcher item keys & command / sidebar append helpers\n// ════════════════════════════════════════════════════════════════\n\n/**\n * Stable key for deduping launcher rows (sidebar children, command list, etc.).\n */\nexport function launcherItemRefKey(item: LauncherItemRef): string {\n  switch (item.kind) {\n    case LauncherItemTargetKind.RESOURCE_OPERATION:\n      return `resource_operation:${item.resourceType}:${item.operation}:${item.operationVariant ?? 'default'}`;\n    case LauncherItemTargetKind.VIEW:\n      return `${item.kind}:${item.viewRef}`;\n    case LauncherItemTargetKind.RESOURCE_VIEW:\n      return `${item.kind}:${item.resourceType}:${item.viewRef}`;\n    case LauncherItemTargetKind.ENGINE_PAGE:\n      return `engine_page:${item.pageRef}`;\n    case LauncherItemTargetKind.CUSTOM_COMPONENT:\n      return `custom_component:${item.componentRef}`;\n    default:\n      return 'unknown';\n  }\n}\n\n/**\n * Appends sidebar navigation children to the `NAVIGATION_LIST` section with `sectionRef`.\n * Skips items whose `launcherItemRefKey` already exists under that section (idempotent).\n */\nexport function appendNavChildrenToSidebarSection(\n  sections: SidebarSection[] | undefined,\n  sectionRef: string,\n  items: SidebarItem[],\n): SidebarSection[] {\n  if (!sections?.length) return sections ?? [];\n  if (!items.length) return [...sections];\n\n  return sections.map(section => {\n    if (section.ref !== sectionRef || section.contentKind !== SidebarSectionContentKind.NAVIGATION_LIST) {\n      return section;\n    }\n    const nav = section as Extract<SidebarSection, { contentKind: SidebarSectionContentKind.NAVIGATION_LIST }>;\n    const existing = new Set(nav.children.map(launcherItemRefKey));\n    const toAdd = items.filter(i => !existing.has(launcherItemRefKey(i)));\n    if (toAdd.length === 0) return section;\n    return { ...nav, children: [...nav.children, ...toAdd] };\n  });\n}\n\n/**\n * Merges command menu command arrays by `launcherItemRefKey` — override wins on collision.\n */\nexport function mergeCommandMenuCommandLists(\n  base: CommandMenuCommand[] | undefined,\n  extra: CommandMenuCommand[] | undefined,\n): CommandMenuCommand[] {\n  if (!base?.length) return [...(extra ?? [])];\n  if (!extra?.length) return [...base];\n  return mergeByKey(base, extra, launcherItemRefKey);\n}\n\n/**\n * Merges menubar launcher rows by launcher identity + menubar group.\n * Override wins on collision.\n */\nexport function mergeMenubarLauncherItems(\n  base: MenubarLauncherItem[] | undefined,\n  extra: MenubarLauncherItem[] | undefined,\n): MenubarLauncherItem[] {\n  if (!base?.length) return [...(extra ?? [])];\n  if (!extra?.length) return [...base];\n  return mergeByKey(\n    base,\n    extra,\n    item => `${launcherItemRefKey(item)}:${item.group ?? 'default'}`,\n  );\n}\n\n/**\n * Merges `fullCustomViews` by `ref` — override wins on collision.\n */\nexport function mergeFullCustomViewsByRef(\n  base: FullCustomViewDefinition[] | undefined,\n  extra: FullCustomViewDefinition[] | undefined,\n): FullCustomViewDefinition[] {\n  if (!base?.length) return [...(extra ?? [])];\n  if (!extra?.length) return [...base];\n  return mergeByKey(base, extra, v => v.ref);\n}\n"]}

package/dist/esm/core/config/engine-settings-destinations.d.ts

@@ -1,51 +1,4 @@
 import type { SettingsDestination, SettingsHubConfig } from './settings-hub.frontend.schemas';
-/** @wildo_source:part:start saas.frontend.settings-hub.engine-destinations facet:layer:frontend facet:family:config facet:audience:app-developer */
-/**
- * Every settings destination the engine ships, as a named vocabulary.
- *
- * Exists because these refs are a CLOSED vocabulary that engine code addresses
- * by name — the billing command-menu entry opens `/settings/billing`, and any
- * future engine launcher will do the same. Before this enum, `'billing'` was a
- * bare literal in `billing-launcher.ts` with nothing tying it to the catalog
- * entry it names: rename the destination and the command silently resolves to
- * the hub's DEFAULT section instead of failing, so a menu item labelled
- * "Billing" would open Profile.
- *
- * **Engine code must address a destination through this enum. Application
- * config addresses one by string**, deliberately: a placement is authored data,
- * an application should not import an engine enum to write its own rail, and a
- * typo there is caught at DEV startup by `verifySettingsHubContent`.
- */
-export declare enum EngineSettingsDestinationRef {
-    /** The signed-in user's own profile record. */
-    PROFILE = "profile",
-    /** Password, MFA, sessions — a bespoke engine panel. */
-    SECURITY = "security",
-    /** Theme and appearance preferences — a bespoke engine panel. */
-    APPEARANCE = "appearance",
-    /** The signed-in user's own preference record. */
-    PREFERENCES = "preferences",
-    /** Invitations addressed TO the signed-in user, across organizations they have not joined. */
-    MY_INVITATIONS = "my-invitations",
-    /** The current organization's own record. Org owner/admin only. */
-    ORGANIZATION_GENERAL = "organization-general",
-    /** Organization membership list, including INVITED rows. Org owner/admin only. */
-    MEMBERS = "members",
-    /** Billing home — subscription, plans, usage, invoices. Gated on the `billingEnabled` capability. */
-    BILLING = "billing",
-    /** Organization API keys. Org owner/admin only. */
-    API_KEYS = "api-keys",
-    /** Single sign-on configuration and connections. */
-    SSO = "sso",
-    /** SCIM directory provisioning configuration and tokens. */
-    SCIM = "scim",
-    /** Audit-event streaming configuration and failed-delivery queue. */
-    SIEM = "siem",
-    /** Outbound webhook endpoints and delivery log. */
-    WEBHOOKS = "webhooks",
-    /** The organization's audit log. Org owner/admin only. */
-    AUDIT_LOGS = "audit-logs"
-}
 /**
  * Every settings destination the engine ships, keyed by `ref`.
  *
@@ -55,8 +8,6 @@ export declare enum EngineSettingsDestinationRef {
  * meant to remove.
  */
 export declare const ENGINE_SETTINGS_DESTINATIONS: readonly SettingsDestination[];
-/** Every destination ref the engine ships — the set a placement is validated against. */
-export declare const ENGINE_SETTINGS_DESTINATION_REFS: ReadonlySet<string>;
 /**
  * The full placement set `wildo init` scaffolds into a new application's config.
  *

package/dist/esm/core/config/engine-settings-destinations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-settings-destinations.d.ts","sourceRoot":"","sources":["../../../../../src/core/config/engine-settings-destinations.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAE9F,oJAAoJ;AACpJ;;;;;;;;;;;;;;;GAeG;AACH,oBAAY,4BAA4B;IACtC,+CAA+C;IAC/C,OAAO,YAAY;IACnB,wDAAwD;IACxD,QAAQ,aAAa;IACrB,iEAAiE;IACjE,UAAU,eAAe;IACzB,kDAAkD;IAClD,WAAW,gBAAgB;IAC3B,8FAA8F;IAC9F,cAAc,mBAAmB;IACjC,mEAAmE;IACnE,oBAAoB,yBAAyB;IAC7C,kFAAkF;IAClF,OAAO,YAAY;IACnB,qGAAqG;IACrG,OAAO,YAAY;IACnB,mDAAmD;IACnD,QAAQ,aAAa;IACrB,oDAAoD;IACpD,GAAG,QAAQ;IACX,4DAA4D;IAC5D,IAAI,SAAS;IACb,qEAAqE;IACrE,IAAI,SAAS;IACb,mDAAmD;IACnD,QAAQ,aAAa;IACrB,0DAA0D;IAC1D,UAAU,eAAe;CAC1B;AA4BD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,mBAAmB,EAgNtE,CAAC;AAEF,yFAAyF;AACzF,eAAO,MAAM,gCAAgC,EAAE,WAAW,CAAC,MAAM,CAEhE,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,4BAA4B,EAAE,iBAsB1C,CAAC"}
+{"version":3,"file":"engine-settings-destinations.d.ts","sourceRoot":"","sources":["../../../../src/core/config/engine-settings-destinations.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AA2B9F;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,mBAAmB,EA+RtE,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,4BAA4B,EAAE,iBA0B1C,CAAC"}

package/dist/esm/core/config/engine-settings-destinations.js

@@ -26,58 +26,23 @@
  *
  * Sub-tab labels stay on the target: they describe the destination's internal
  * structure, not its position in the rail.
- */
-import { CoreFeature, CoreResourceOperation, CoreResourceType, CORE_ORG_ROLES, ResourcePrimaryScope } from '@wildo-ai/saas-models';
-import { SettingsPanelRef, SettingsSectionTargetKind } from './settings-hub.frontend.schemas.js';
-/** @wildo_source:part:start saas.frontend.settings-hub.engine-destinations facet:layer:frontend facet:family:config facet:audience:app-developer */
-/**
- * Every settings destination the engine ships, as a named vocabulary.
  *
- * Exists because these refs are a CLOSED vocabulary that engine code addresses
- * by name — the billing command-menu entry opens `/settings/billing`, and any
- * future engine launcher will do the same. Before this enum, `'billing'` was a
- * bare literal in `billing-launcher.ts` with nothing tying it to the catalog
- * entry it names: rename the destination and the command silently resolves to
- * the hub's DEFAULT section instead of failing, so a menu item labelled
- * "Billing" would open Profile.
+ * ## The refs themselves live in `@wildo-ai/saas-models`
  *
- * **Engine code must address a destination through this enum. Application
- * config addresses one by string**, deliberately: a placement is authored data,
- * an application should not import an engine enum to write its own rail, and a
- * typo there is caught at DEV startup by `verifySettingsHubContent`.
+ * `EngineSettingsDestinationRef` and `ENGINE_SETTINGS_DESTINATION_REFS` are declared in
+ * `saas-models` (`frontend-definitions/settings-destination-ref.definitions.ts`); this file
+ * declares only what each ref MEANS. The split exists because the ref vocabulary has a
+ * backend-side consumer this package can never serve: `validatePlacementPlan`'s `UNKNOWN_SUBJECT`
+ * hard floor is held by the app-creation semantic authority, which must not depend on
+ * `saas-frontend-lib`. Everything that names a component, a panel or a sub-tab stayed here; the
+ * sixteen ids did not.
+ *
+ * The enum is deliberately NOT re-exported from this module, from the package root, or from
+ * `companion-exports`: a symbol reachable through two public doors is a symbol whose two doors
+ * drift. Every consumer — including this package's own — imports it from `@wildo-ai/saas-models`.
  */
-export var EngineSettingsDestinationRef;
-(function (EngineSettingsDestinationRef) {
-    /** The signed-in user's own profile record. */
-    EngineSettingsDestinationRef["PROFILE"] = "profile";
-    /** Password, MFA, sessions — a bespoke engine panel. */
-    EngineSettingsDestinationRef["SECURITY"] = "security";
-    /** Theme and appearance preferences — a bespoke engine panel. */
-    EngineSettingsDestinationRef["APPEARANCE"] = "appearance";
-    /** The signed-in user's own preference record. */
-    EngineSettingsDestinationRef["PREFERENCES"] = "preferences";
-    /** Invitations addressed TO the signed-in user, across organizations they have not joined. */
-    EngineSettingsDestinationRef["MY_INVITATIONS"] = "my-invitations";
-    /** The current organization's own record. Org owner/admin only. */
-    EngineSettingsDestinationRef["ORGANIZATION_GENERAL"] = "organization-general";
-    /** Organization membership list, including INVITED rows. Org owner/admin only. */
-    EngineSettingsDestinationRef["MEMBERS"] = "members";
-    /** Billing home — subscription, plans, usage, invoices. Gated on the `billingEnabled` capability. */
-    EngineSettingsDestinationRef["BILLING"] = "billing";
-    /** Organization API keys. Org owner/admin only. */
-    EngineSettingsDestinationRef["API_KEYS"] = "api-keys";
-    /** Single sign-on configuration and connections. */
-    EngineSettingsDestinationRef["SSO"] = "sso";
-    /** SCIM directory provisioning configuration and tokens. */
-    EngineSettingsDestinationRef["SCIM"] = "scim";
-    /** Audit-event streaming configuration and failed-delivery queue. */
-    EngineSettingsDestinationRef["SIEM"] = "siem";
-    /** Outbound webhook endpoints and delivery log. */
-    EngineSettingsDestinationRef["WEBHOOKS"] = "webhooks";
-    /** The organization's audit log. Org owner/admin only. */
-    EngineSettingsDestinationRef["AUDIT_LOGS"] = "audit-logs";
-})(EngineSettingsDestinationRef || (EngineSettingsDestinationRef = {}));
-/** @wildo_source:part:end saas.frontend.settings-hub.engine-destinations */
+import { CoreFeature, CoreResourceOperation, CoreResourceType, CORE_ORG_ROLES, EngineSettingsDestinationRef, ResourcePrimaryScope } from '@wildo-ai/saas-models';
+import { SettingsPanelRef, SettingsSectionTargetKind } from './settings-hub.frontend.schemas.js';
 /** Org-management destinations are visible to organization owners and admins. */
 const ORG_MANAGEMENT_ROLES = [CORE_ORG_ROLES.ORG_OWNER, CORE_ORG_ROLES.ORG_ADMIN];
 /**
@@ -143,6 +108,49 @@ export const ENGINE_SETTINGS_DESTINATIONS = [
         ref: EngineSettingsDestinationRef.MY_INVITATIONS,
         target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.INVITATIONS },
     },
+    {
+        // Where a PERSON connects their own third-party accounts.
+        //
+        // No `requiredRoles`, and that is the substantive difference from the organization sibling
+        // rather than an omission. Every authenticated user owns their own connections; the resource
+        // declares `APP_USER` on every variant and no administrative variant at all, so authorization
+        // is by OWNERSHIP and adding a role gate here could only ever hide the screen from someone
+        // entitled to it.
+        //
+        // No `runtimeAvailability` gate either, for the organization destination's reason: gating on
+        // "the application declared a provider" would hide the screen exactly when somebody is looking
+        // for it, since providers are declared whether or not anyone has connected one.
+        ref: EngineSettingsDestinationRef.MY_PROVIDER_CREDENTIALS,
+        // TWO tabs, because the screen answers two questions and one of them has no resource behind it.
+        //
+        // "Connect" is the catalogue — what this person MAY connect — and it is a bespoke panel because
+        // connecting is a flow out to a vendor rather than a row somebody creates. "Credentials" is the
+        // ordinary resource list: what they HAVE connected, plus the pasted keys that never went through
+        // a vendor at all.
+        //
+        // Connect comes FIRST deliberately. On the day somebody opens this screen for the first time the
+        // list is empty, and an empty table is the least informative thing to greet them with; it is also
+        // the tab the connection callback returns them to, carrying the outcome it has to render.
+        target: {
+            kind: SettingsSectionTargetKind.SUB_TABS,
+            subTabs: [
+                {
+                    ref: 'connect',
+                    label: 'Connect',
+                    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.CONNECTED_ACCOUNTS },
+                },
+                {
+                    ref: 'credentials',
+                    label: 'Credentials',
+                    target: {
+                        kind: SettingsSectionTargetKind.RESOURCE_OPERATION,
+                        resourceType: CoreResourceType.USER_PROVIDER_CREDENTIALS,
+                        operation: CoreResourceOperation.LIST,
+                    },
+                },
+            ],
+        },
+    },
     // ── Organization ───────────────────────────────────────────────
     {
         ref: EngineSettingsDestinationRef.ORGANIZATION_GENERAL,
@@ -187,6 +195,42 @@ export const ENGINE_SETTINGS_DESTINATIONS = [
             operation: CoreResourceOperation.LIST,
         },
     },
+    {
+        // Where a tenant connects its OWN third-party accounts. Until this existed the resource had
+        // backend doors, an encrypted store, migrations and audit events, and no way for the
+        // administrator it is FOR to reach any of it — so every tenant kept acting as the application's
+        // own third-party principal, which is the defect the resource was built to remove.
+        //
+        // No `runtimeAvailability` gate: unlike SSO or SIEM this needs no capability to be switched on,
+        // and gating it on "the application declared a provider" would hide the screen exactly when an
+        // operator is looking for it, since an application declares providers whether or not any tenant
+        // has connected one.
+        ref: EngineSettingsDestinationRef.PROVIDER_CREDENTIALS,
+        requiredRoles: ORG_MANAGEMENT_ROLES,
+        // TWO tabs, for the person-scope destination's reason: "Connect" is a flow out to a vendor and
+        // has no resource behind it, while "Credentials" is the ordinary list of what the tenant HAS.
+        // Connect comes first because it is where the connection callback returns, carrying the outcome
+        // it has to render.
+        target: {
+            kind: SettingsSectionTargetKind.SUB_TABS,
+            subTabs: [
+                {
+                    ref: 'connect',
+                    label: 'Connect',
+                    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.ORGANIZATION_CONNECTED_ACCOUNTS },
+                },
+                {
+                    ref: 'credentials',
+                    label: 'Credentials',
+                    target: {
+                        kind: SettingsSectionTargetKind.RESOURCE_OPERATION,
+                        resourceType: CoreResourceType.ORG_PROVIDER_CREDENTIALS,
+                        operation: CoreResourceOperation.LIST,
+                    },
+                },
+            ],
+        },
+    },
     // ── Organization · enterprise credentials & compliance ─────────
     // Each gates on org-admin role + a per-feature runtime capability
     // (resource-registration presence). Multi-resource domains split into
@@ -317,8 +361,6 @@ export const ENGINE_SETTINGS_DESTINATIONS = [
         },
     },
 ];
-/** Every destination ref the engine ships — the set a placement is validated against. */
-export const ENGINE_SETTINGS_DESTINATION_REFS = new Set(ENGINE_SETTINGS_DESTINATIONS.map(destination => destination.ref));
 /**
  * The full placement set `wildo init` scaffolds into a new application's config.
  *
@@ -349,15 +391,19 @@ export const SCAFFOLD_SETTINGS_HUB_CONFIG = {
         { destinationRef: EngineSettingsDestinationRef.APPEARANCE, categoryRef: 'account', label: 'Appearance', order: 2 },
         { destinationRef: EngineSettingsDestinationRef.PREFERENCES, categoryRef: 'account', label: 'Preferences', order: 3 },
         { destinationRef: EngineSettingsDestinationRef.MY_INVITATIONS, categoryRef: 'account', label: 'Invitations', order: 4 },
+        // Same label as the organization placement below, deliberately: it is the same feature, and the
+        // CATEGORY is what says whose accounts these are.
+        { destinationRef: EngineSettingsDestinationRef.MY_PROVIDER_CREDENTIALS, categoryRef: 'account', label: 'Connected accounts', order: 5 },
         { destinationRef: EngineSettingsDestinationRef.ORGANIZATION_GENERAL, categoryRef: 'organization', label: 'General', order: 0 },
         { destinationRef: EngineSettingsDestinationRef.MEMBERS, categoryRef: 'organization', label: 'Members', order: 1 },
         { destinationRef: EngineSettingsDestinationRef.BILLING, categoryRef: 'organization', label: 'Billing', order: 3 },
         { destinationRef: EngineSettingsDestinationRef.API_KEYS, categoryRef: 'organization', label: 'API keys', order: 4 },
-        { destinationRef: EngineSettingsDestinationRef.SSO, categoryRef: 'organization', label: 'Single sign-on', order: 5 },
-        { destinationRef: EngineSettingsDestinationRef.SCIM, categoryRef: 'organization', label: 'User provisioning', order: 6 },
-        { destinationRef: EngineSettingsDestinationRef.SIEM, categoryRef: 'organization', label: 'Audit streaming', order: 7 },
-        { destinationRef: EngineSettingsDestinationRef.WEBHOOKS, categoryRef: 'organization', label: 'Webhooks', order: 8 },
-        { destinationRef: EngineSettingsDestinationRef.AUDIT_LOGS, categoryRef: 'organization', label: 'Audit log', order: 9 },
+        { destinationRef: EngineSettingsDestinationRef.PROVIDER_CREDENTIALS, categoryRef: 'organization', label: 'Connected accounts', order: 5 },
+        { destinationRef: EngineSettingsDestinationRef.SSO, categoryRef: 'organization', label: 'Single sign-on', order: 6 },
+        { destinationRef: EngineSettingsDestinationRef.SCIM, categoryRef: 'organization', label: 'User provisioning', order: 7 },
+        { destinationRef: EngineSettingsDestinationRef.SIEM, categoryRef: 'organization', label: 'Audit streaming', order: 8 },
+        { destinationRef: EngineSettingsDestinationRef.WEBHOOKS, categoryRef: 'organization', label: 'Webhooks', order: 9 },
+        { destinationRef: EngineSettingsDestinationRef.AUDIT_LOGS, categoryRef: 'organization', label: 'Audit log', order: 10 },
     ],
     defaultSectionRef: 'profile',
 };

package/dist/esm/core/config/engine-settings-destinations.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine-settings-destinations.js","sourceRoot":"","sources":["../../../../../src/core/config/engine-settings-destinations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnI,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG9F,oJAAoJ;AACpJ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,4BA6BX;AA7BD,WAAY,4BAA4B;IACtC,+CAA+C;IAC/C,mDAAmB,CAAA;IACnB,wDAAwD;IACxD,qDAAqB,CAAA;IACrB,iEAAiE;IACjE,yDAAyB,CAAA;IACzB,kDAAkD;IAClD,2DAA2B,CAAA;IAC3B,8FAA8F;IAC9F,iEAAiC,CAAA;IACjC,mEAAmE;IACnE,6EAA6C,CAAA;IAC7C,kFAAkF;IAClF,mDAAmB,CAAA;IACnB,qGAAqG;IACrG,mDAAmB,CAAA;IACnB,mDAAmD;IACnD,qDAAqB,CAAA;IACrB,oDAAoD;IACpD,2CAAW,CAAA;IACX,4DAA4D;IAC5D,6CAAa,CAAA;IACb,qEAAqE;IACrE,6CAAa,CAAA;IACb,mDAAmD;IACnD,qDAAqB,CAAA;IACrB,0DAA0D;IAC1D,yDAAyB,CAAA;AAC3B,CAAC,EA7BW,4BAA4B,KAA5B,4BAA4B,QA6BvC;AACD,4EAA4E;AAE5E,iFAAiF;AACjF,MAAM,oBAAoB,GAAa,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAC5C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAmC;IAC1E,kEAAkE;IAClE;QACE,GAAG,EAAE,4BAA4B,CAAC,OAAO;QACzC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,kBAAkB;YACjD,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,QAAQ;QAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KAC9F;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,UAAU;QAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU,EAAE;KAChG;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,WAAW;QAC7C,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,qBAAqB;YACpD,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,oFAAoF;QACpF,kFAAkF;QAClF,iFAAiF;QACjF,kFAAkF;QAClF,yFAAyF;QACzF,GAAG,EAAE,4BAA4B,CAAC,cAAc;QAChD,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE;KACjG;IACD,kEAAkE;IAClE;QACE,GAAG,EAAE,4BAA4B,CAAC,oBAAoB;QACtD,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,aAAa;YAC5C,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,8EAA8E;QAC9E,gFAAgF;QAChF,0EAA0E;QAC1E,wEAAwE;QACxE,GAAG,EAAE,4BAA4B,CAAC,OAAO;QACzC,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,oBAAoB;YACnD,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,OAAO;QACzC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,0BAA0B,CAAC,EAAE;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,gDAAgD;QAChD,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,OAAO,EAAE;KAC7F;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,QAAQ;QAC1C,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,YAAY;YAC3C,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,2EAA2E;IAC3E;QACE,GAAG,EAAE,4BAA4B,CAAC,GAAG;QACrC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACvE,oBAAoB,EAAE,WAAW,CAAC,cAAc;QAChD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,mBAAmB;oBACxB,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,uBAAuB;wBACtD,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,iBAAiB;oBACtB,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,4BAA4B;wBAC3D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,IAAI;QACtC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,uBAAuB,CAAC,EAAE;QACxE,oBAAoB,EAAE,WAAW,CAAC,sBAAsB;QACxD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,mBAAmB;oBACxB,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,qCAAqC;wBACpE,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,aAAa;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,wBAAwB;wBACvD,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,IAAI;QACtC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,uBAAuB,CAAC,EAAE;QACxE,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;QACvD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,aAAa;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,+BAA+B;wBAC9D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,wBAAwB;oBAC7B,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,8BAA8B;wBAC7D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,QAAQ;QAC1C,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,2BAA2B,CAAC,EAAE;QAC5E,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;QACtD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,oBAAoB;oBACzB,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,2BAA2B;wBAC1D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,uBAAuB;oBAC5B,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,qCAAqC;wBACpE,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,UAAU;QAC5C,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,UAAU;YACzC,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;CACF,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,gCAAgC,GAAwB,IAAI,GAAG,CAC1E,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CACjE,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,UAAU,EAAE;QACV,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACrF,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;KACpG;IACD,UAAU,EAAE;QACV,EAAE,cAAc,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QAC5G,EAAE,cAAc,EAAE,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9G,EAAE,cAAc,EAAE,4BAA4B,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE;QAClH,EAAE,cAAc,EAAE,4BAA4B,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QACpH,EAAE,cAAc,EAAE,4BAA4B,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QACvH,EAAE,cAAc,EAAE,4BAA4B,CAAC,oBAAoB,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9H,EAAE,cAAc,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACjH,EAAE,cAAc,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACjH,EAAE,cAAc,EAAE,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE;QACnH,EAAE,cAAc,EAAE,4BAA4B,CAAC,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE;QACpH,EAAE,cAAc,EAAE,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE;QACxH,EAAE,cAAc,EAAE,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE;QACtH,EAAE,cAAc,EAAE,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE;QACnH,EAAE,cAAc,EAAE,4BAA4B,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE;KACvH;IACD,iBAAiB,EAAE,SAAS;CAC7B,CAAC","sourcesContent":["/**\n * The engine's settings DESTINATION catalog — addressable, and deliberately unplaced.\n *\n * Each entry says what a settings surface IS: its target, and the gating that\n * decides whether the current principal may see it at all. **No entry carries a\n * `categoryRef`, an `order` or a `label`**, because those are placement, and\n * placement belongs to the application (`SettingsPlacement`).\n *\n * This file replaced `settings-hub.frontend.defaults.ts`, which shipped a fully\n * PLACED hub as a framework default. That default was the reason an application\n * could not add, remove, reorder or rename a settings section: the render path\n * read the framework's arrangement, so an application had no arrangement of its\n * own to read. Splitting destination from placement keeps the engine owning what\n * a destination MEANS while the application owns where it sits — and makes\n * \"remove this section\" expressible, which under a merged default it was not.\n *\n * Gating notes carried over from the previous default, because they are\n * destination facts rather than placement facts:\n *\n * - Account destinations are `USER_SELF`-shaped and always available to an\n *   authenticated user; the category's scope does the hiding.\n * - Organization destinations gate on org owner/admin roles, and several\n *   additionally on a runtime capability, so an application that excludes the\n *   backing resource surfaces nothing. This is the \"face to right management of\n *   the user\" gating — a member who cannot manage the org sees no such section.\n *\n * Sub-tab labels stay on the target: they describe the destination's internal\n * structure, not its position in the rail.\n */\nimport { CoreFeature, CoreResourceOperation, CoreResourceType, CORE_ORG_ROLES, ResourcePrimaryScope } from '@wildo-ai/saas-models';\nimport { SettingsPanelRef, SettingsSectionTargetKind } from './settings-hub.frontend.schemas';\nimport type { SettingsDestination, SettingsHubConfig } from './settings-hub.frontend.schemas';\n\n/** @wildo_source:part:start saas.frontend.settings-hub.engine-destinations facet:layer:frontend facet:family:config facet:audience:app-developer */\n/**\n * Every settings destination the engine ships, as a named vocabulary.\n *\n * Exists because these refs are a CLOSED vocabulary that engine code addresses\n * by name — the billing command-menu entry opens `/settings/billing`, and any\n * future engine launcher will do the same. Before this enum, `'billing'` was a\n * bare literal in `billing-launcher.ts` with nothing tying it to the catalog\n * entry it names: rename the destination and the command silently resolves to\n * the hub's DEFAULT section instead of failing, so a menu item labelled\n * \"Billing\" would open Profile.\n *\n * **Engine code must address a destination through this enum. Application\n * config addresses one by string**, deliberately: a placement is authored data,\n * an application should not import an engine enum to write its own rail, and a\n * typo there is caught at DEV startup by `verifySettingsHubContent`.\n */\nexport enum EngineSettingsDestinationRef {\n  /** The signed-in user's own profile record. */\n  PROFILE = 'profile',\n  /** Password, MFA, sessions — a bespoke engine panel. */\n  SECURITY = 'security',\n  /** Theme and appearance preferences — a bespoke engine panel. */\n  APPEARANCE = 'appearance',\n  /** The signed-in user's own preference record. */\n  PREFERENCES = 'preferences',\n  /** Invitations addressed TO the signed-in user, across organizations they have not joined. */\n  MY_INVITATIONS = 'my-invitations',\n  /** The current organization's own record. Org owner/admin only. */\n  ORGANIZATION_GENERAL = 'organization-general',\n  /** Organization membership list, including INVITED rows. Org owner/admin only. */\n  MEMBERS = 'members',\n  /** Billing home — subscription, plans, usage, invoices. Gated on the `billingEnabled` capability. */\n  BILLING = 'billing',\n  /** Organization API keys. Org owner/admin only. */\n  API_KEYS = 'api-keys',\n  /** Single sign-on configuration and connections. */\n  SSO = 'sso',\n  /** SCIM directory provisioning configuration and tokens. */\n  SCIM = 'scim',\n  /** Audit-event streaming configuration and failed-delivery queue. */\n  SIEM = 'siem',\n  /** Outbound webhook endpoints and delivery log. */\n  WEBHOOKS = 'webhooks',\n  /** The organization's audit log. Org owner/admin only. */\n  AUDIT_LOGS = 'audit-logs',\n}\n/** @wildo_source:part:end saas.frontend.settings-hub.engine-destinations */\n\n/** Org-management destinations are visible to organization owners and admins. */\nconst ORG_MANAGEMENT_ROLES: string[] = [CORE_ORG_ROLES.ORG_OWNER, CORE_ORG_ROLES.ORG_ADMIN];\n\n/**\n * Runtime capability key for \"billing is enabled for this app\". Wired in\n * `useLauncherRuntimeAvailabilityContext` (`runtimeCapabilities.billingEnabled`);\n * there is no enum for capability keys yet, so the launcher-config string is the\n * single source of truth.\n */\nconst BILLING_ENABLED_CAPABILITY = 'billingEnabled';\n\n/**\n * Runtime capability keys for the enterprise-config features. Unlike billing\n * (which reads `appConfig.billing.enabled`), these have no app-config toggle —\n * they are wired in `useLauncherRuntimeAvailabilityContext` from\n * resource-registration presence (`hasResource(ORGANIZATION_*_CONFIG)`), so a\n * destination auto-hides when its app excludes the resource and otherwise\n * degrades to org-admin role gating. Keep these string literals in sync with the\n * keys emitted there.\n */\nconst SSO_ENABLED_CAPABILITY = 'ssoEnabled';\nconst SCIM_ENABLED_CAPABILITY = 'scimEnabled';\nconst SIEM_ENABLED_CAPABILITY = 'siemEnabled';\nconst WEBHOOKS_ENABLED_CAPABILITY = 'webhooksEnabled';\n\n/**\n * Every settings destination the engine ships, keyed by `ref`.\n *\n * An application places these by ref. A placement naming a ref absent from this\n * catalog is refused at DEV startup rather than silently dropped — a settings\n * section that quietly fails to appear is indistinguishable from one an author\n * meant to remove.\n */\nexport const ENGINE_SETTINGS_DESTINATIONS: readonly SettingsDestination[] = [\n  // ── Account ────────────────────────────────────────────────────\n  {\n    ref: EngineSettingsDestinationRef.PROFILE,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.USER_SELF_PROFILES,\n      operation: CoreResourceOperation.READ,\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.SECURITY,\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.SECURITY },\n  },\n  {\n    ref: EngineSettingsDestinationRef.APPEARANCE,\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.APPEARANCE },\n  },\n  {\n    ref: EngineSettingsDestinationRef.PREFERENCES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.USER_SELF_PREFERENCES,\n      operation: CoreResourceOperation.READ,\n    },\n  },\n  {\n    // The caller's OWN received invitations (Approach P) — their own INVITED membership\n    // rows across orgs they haven't joined yet. Distinct from the org-admin's view of\n    // sent invites, which are now just INVITED-status rows in the 'members' list (no\n    // separate org 'invitations' section). No `requiredRoles`: any authenticated user\n    // can act on invitations addressed to them (authorized server-side by userId-ownership).\n    ref: EngineSettingsDestinationRef.MY_INVITATIONS,\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.INVITATIONS },\n  },\n  // ── Organization ───────────────────────────────────────────────\n  {\n    ref: EngineSettingsDestinationRef.ORGANIZATION_GENERAL,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.ORGANIZATIONS,\n      operation: CoreResourceOperation.READ,\n    },\n  },\n  {\n    // NOTE: no separate org-level \"invitations\" destination — invitations are now\n    // INVITED-status rows inside the ORGANIZATION_MEMBERS junction, so they surface\n    // in this list (filter by status) rather than a parallel destination. The\n    // invitee's own pending invitations live in the 'my-invitations' panel.\n    ref: EngineSettingsDestinationRef.MEMBERS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.ORGANIZATION_MEMBERS,\n      operation: CoreResourceOperation.LIST,\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.BILLING,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [BILLING_ENABLED_CAPABILITY] },\n    // THE billing home — a bespoke panel over the aggregated BillingContext\n    // state (subscription, plans + checkout, usage, invoices, portal link).\n    // Deliberately NOT per-resource LIST sub-tabs: the billing child resources\n    // are routed under the billing account (`REQUIRES_CONTEXT`), so org-scoped\n    // generic panels cannot address them, while the aggregated state endpoint is\n    // org-addressable and auto-creates the account.\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.BILLING },\n  },\n  {\n    ref: EngineSettingsDestinationRef.API_KEYS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.ORG_API_KEYS,\n      operation: CoreResourceOperation.LIST,\n    },\n  },\n  // ── Organization · enterprise credentials & compliance ─────────\n  // Each gates on org-admin role + a per-feature runtime capability\n  // (resource-registration presence). Multi-resource domains split into\n  // sub-tabs pairing the singleton config (READ) with its collection (LIST).\n  {\n    ref: EngineSettingsDestinationRef.SSO,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [SSO_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.SINGLE_SIGN_ON,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'sso-configuration',\n          label: 'Configuration',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SSO_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'sso-connections',\n          label: 'Connections',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SSO_CONNECTIONS,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.SCIM,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [SCIM_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.DIRECTORY_PROVISIONING,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'scim-provisioning',\n          label: 'Provisioning',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SCIM_PROVISIONING_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'scim-tokens',\n          label: 'Tokens',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SCIM_TOKENS,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.SIEM,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [SIEM_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.SECURITY_EVENT_EXPORT,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'siem-export',\n          label: 'Export',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SIEM_EXPORT_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'siem-failed-deliveries',\n          label: 'Failed deliveries',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SIEM_DELIVERY_DLQ,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.WEBHOOKS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [WEBHOOKS_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.M2M_WEBHOOK_DELIVERY,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'webhooks-endpoints',\n          label: 'Endpoints',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_WEBHOOK_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'webhooks-delivery-log',\n          label: 'Delivery log',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.AUDIT_LOGS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.AUDIT_LOGS,\n      operation: CoreResourceOperation.LIST,\n    },\n  },\n];\n\n/** Every destination ref the engine ships — the set a placement is validated against. */\nexport const ENGINE_SETTINGS_DESTINATION_REFS: ReadonlySet<string> = new Set(\n  ENGINE_SETTINGS_DESTINATIONS.map(destination => destination.ref),\n);\n\n/**\n * The full placement set `wildo init` scaffolds into a new application's config.\n *\n * **This is GENERATION INPUT, not a runtime fallback.** Nothing in the render\n * path may read it — `resolveSettingsHubConfig()` resolves the application's own\n * authored config and nothing else. The distinction is the entire point of the\n * split: a scaffold is a starting arrangement an author edits and owns, whereas\n * a default is an arrangement that reasserts itself and cannot be edited away.\n *\n * It places every engine destination so a new application starts complete and\n * edits DOWN, which is the direction that surfaces what exists. Starting empty\n * would hide the catalog behind documentation.\n *\n * The `label`s here are the English strings the previous framework default\n * carried, and they are NOT a temporary convenience to be removed once label\n * generation runs. The companion feeds each authored label to the labellize\n * prompt as that key's `purpose`, so it is the wording INTENT generation\n * translates — delete it and the model falls back to inventing from the ref.\n */\nexport const SCAFFOLD_SETTINGS_HUB_CONFIG: SettingsHubConfig = {\n  categories: [\n    { ref: 'account', label: 'Account', scope: ResourcePrimaryScope.USER_SELF, order: 0 },\n    { ref: 'organization', label: 'Organization', scope: ResourcePrimaryScope.ORGANIZATIONS, order: 1 },\n  ],\n  placements: [\n    { destinationRef: EngineSettingsDestinationRef.PROFILE, categoryRef: 'account', label: 'Profile', order: 0 },\n    { destinationRef: EngineSettingsDestinationRef.SECURITY, categoryRef: 'account', label: 'Security', order: 1 },\n    { destinationRef: EngineSettingsDestinationRef.APPEARANCE, categoryRef: 'account', label: 'Appearance', order: 2 },\n    { destinationRef: EngineSettingsDestinationRef.PREFERENCES, categoryRef: 'account', label: 'Preferences', order: 3 },\n    { destinationRef: EngineSettingsDestinationRef.MY_INVITATIONS, categoryRef: 'account', label: 'Invitations', order: 4 },\n    { destinationRef: EngineSettingsDestinationRef.ORGANIZATION_GENERAL, categoryRef: 'organization', label: 'General', order: 0 },\n    { destinationRef: EngineSettingsDestinationRef.MEMBERS, categoryRef: 'organization', label: 'Members', order: 1 },\n    { destinationRef: EngineSettingsDestinationRef.BILLING, categoryRef: 'organization', label: 'Billing', order: 3 },\n    { destinationRef: EngineSettingsDestinationRef.API_KEYS, categoryRef: 'organization', label: 'API keys', order: 4 },\n    { destinationRef: EngineSettingsDestinationRef.SSO, categoryRef: 'organization', label: 'Single sign-on', order: 5 },\n    { destinationRef: EngineSettingsDestinationRef.SCIM, categoryRef: 'organization', label: 'User provisioning', order: 6 },\n    { destinationRef: EngineSettingsDestinationRef.SIEM, categoryRef: 'organization', label: 'Audit streaming', order: 7 },\n    { destinationRef: EngineSettingsDestinationRef.WEBHOOKS, categoryRef: 'organization', label: 'Webhooks', order: 8 },\n    { destinationRef: EngineSettingsDestinationRef.AUDIT_LOGS, categoryRef: 'organization', label: 'Audit log', order: 9 },\n  ],\n  defaultSectionRef: 'profile',\n};\n"]}
+{"version":3,"file":"engine-settings-destinations.js","sourceRoot":"","sources":["../../../../src/core/config/engine-settings-destinations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,cAAc,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACjK,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAG9F,iFAAiF;AACjF,MAAM,oBAAoB,GAAa,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAC5C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAmC;IAC1E,kEAAkE;IAClE;QACE,GAAG,EAAE,4BAA4B,CAAC,OAAO;QACzC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,kBAAkB;YACjD,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,QAAQ;QAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KAC9F;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,UAAU;QAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU,EAAE;KAChG;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,WAAW;QAC7C,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,qBAAqB;YACpD,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,oFAAoF;QACpF,kFAAkF;QAClF,iFAAiF;QACjF,kFAAkF;QAClF,yFAAyF;QACzF,GAAG,EAAE,4BAA4B,CAAC,cAAc;QAChD,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE;KACjG;IACD;QACE,0DAA0D;QAC1D,EAAE;QACF,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,2FAA2F;QAC3F,kBAAkB;QAClB,EAAE;QACF,6FAA6F;QAC7F,+FAA+F;QAC/F,gFAAgF;QAChF,GAAG,EAAE,4BAA4B,CAAC,uBAAuB;QACzD,gGAAgG;QAChG,EAAE;QACF,gGAAgG;QAChG,gGAAgG;QAChG,iGAAiG;QACjG,mBAAmB;QACnB,EAAE;QACF,iGAAiG;QACjG,kGAAkG;QAClG,0FAA0F;QAC1F,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,SAAS;oBACd,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,kBAAkB,EAAE;iBACxG;gBACD;oBACE,GAAG,EAAE,aAAa;oBAClB,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,yBAAyB;wBACxD,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD,kEAAkE;IAClE;QACE,GAAG,EAAE,4BAA4B,CAAC,oBAAoB;QACtD,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,aAAa;YAC5C,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,8EAA8E;QAC9E,gFAAgF;QAChF,0EAA0E;QAC1E,wEAAwE;QACxE,GAAG,EAAE,4BAA4B,CAAC,OAAO;QACzC,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,oBAAoB;YACnD,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,OAAO;QACzC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,0BAA0B,CAAC,EAAE;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,6EAA6E;QAC7E,gDAAgD;QAChD,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,OAAO,EAAE;KAC7F;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,QAAQ;QAC1C,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,YAAY;YAC3C,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;IACD;QACE,4FAA4F;QAC5F,qFAAqF;QACrF,gGAAgG;QAChG,mFAAmF;QACnF,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,qBAAqB;QACrB,GAAG,EAAE,4BAA4B,CAAC,oBAAoB;QACtD,aAAa,EAAE,oBAAoB;QACnC,+FAA+F;QAC/F,8FAA8F;QAC9F,gGAAgG;QAChG,oBAAoB;QACpB,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,SAAS;oBACd,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,+BAA+B,EAAE;iBACrH;gBACD;oBACE,GAAG,EAAE,aAAa;oBAClB,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,wBAAwB;wBACvD,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,2EAA2E;IAC3E;QACE,GAAG,EAAE,4BAA4B,CAAC,GAAG;QACrC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACvE,oBAAoB,EAAE,WAAW,CAAC,cAAc;QAChD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,mBAAmB;oBACxB,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,uBAAuB;wBACtD,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,iBAAiB;oBACtB,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,4BAA4B;wBAC3D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,IAAI;QACtC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,uBAAuB,CAAC,EAAE;QACxE,oBAAoB,EAAE,WAAW,CAAC,sBAAsB;QACxD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,mBAAmB;oBACxB,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,qCAAqC;wBACpE,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,aAAa;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,wBAAwB;wBACvD,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,IAAI;QACtC,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,uBAAuB,CAAC,EAAE;QACxE,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;QACvD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,aAAa;oBAClB,KAAK,EAAE,QAAQ;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,+BAA+B;wBAC9D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,wBAAwB;oBAC7B,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,8BAA8B;wBAC7D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,QAAQ;QAC1C,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,EAAE,oBAAoB,EAAE,CAAC,2BAA2B,CAAC,EAAE;QAC5E,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;QACtD,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,QAAQ;YACxC,OAAO,EAAE;gBACP;oBACE,GAAG,EAAE,oBAAoB;oBACzB,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,2BAA2B;wBAC1D,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;gBACD;oBACE,GAAG,EAAE,uBAAuB;oBAC5B,KAAK,EAAE,cAAc;oBACrB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;wBAClD,YAAY,EAAE,gBAAgB,CAAC,qCAAqC;wBACpE,SAAS,EAAE,qBAAqB,CAAC,IAAI;qBACtC;iBACF;aACF;SACF;KACF;IACD;QACE,GAAG,EAAE,4BAA4B,CAAC,UAAU;QAC5C,aAAa,EAAE,oBAAoB;QACnC,MAAM,EAAE;YACN,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;YAClD,YAAY,EAAE,gBAAgB,CAAC,UAAU;YACzC,SAAS,EAAE,qBAAqB,CAAC,IAAI;SACtC;KACF;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,UAAU,EAAE;QACV,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACrF,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;KACpG;IACD,UAAU,EAAE;QACV,EAAE,cAAc,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QAC5G,EAAE,cAAc,EAAE,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9G,EAAE,cAAc,EAAE,4BAA4B,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE;QAClH,EAAE,cAAc,EAAE,4BAA4B,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QACpH,EAAE,cAAc,EAAE,4BAA4B,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QACvH,gGAAgG;QAChG,kDAAkD;QAClD,EAAE,cAAc,EAAE,4BAA4B,CAAC,uBAAuB,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE;QACvI,EAAE,cAAc,EAAE,4BAA4B,CAAC,oBAAoB,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9H,EAAE,cAAc,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACjH,EAAE,cAAc,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QACjH,EAAE,cAAc,EAAE,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE;QACnH,EAAE,cAAc,EAAE,4BAA4B,CAAC,oBAAoB,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE;QACzI,EAAE,cAAc,EAAE,4BAA4B,CAAC,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE;QACpH,EAAE,cAAc,EAAE,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE;QACxH,EAAE,cAAc,EAAE,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE;QACtH,EAAE,cAAc,EAAE,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE;QACnH,EAAE,cAAc,EAAE,4BAA4B,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE;KACxH;IACD,iBAAiB,EAAE,SAAS;CAC7B,CAAC","sourcesContent":["/**\n * The engine's settings DESTINATION catalog — addressable, and deliberately unplaced.\n *\n * Each entry says what a settings surface IS: its target, and the gating that\n * decides whether the current principal may see it at all. **No entry carries a\n * `categoryRef`, an `order` or a `label`**, because those are placement, and\n * placement belongs to the application (`SettingsPlacement`).\n *\n * This file replaced `settings-hub.frontend.defaults.ts`, which shipped a fully\n * PLACED hub as a framework default. That default was the reason an application\n * could not add, remove, reorder or rename a settings section: the render path\n * read the framework's arrangement, so an application had no arrangement of its\n * own to read. Splitting destination from placement keeps the engine owning what\n * a destination MEANS while the application owns where it sits — and makes\n * \"remove this section\" expressible, which under a merged default it was not.\n *\n * Gating notes carried over from the previous default, because they are\n * destination facts rather than placement facts:\n *\n * - Account destinations are `USER_SELF`-shaped and always available to an\n *   authenticated user; the category's scope does the hiding.\n * - Organization destinations gate on org owner/admin roles, and several\n *   additionally on a runtime capability, so an application that excludes the\n *   backing resource surfaces nothing. This is the \"face to right management of\n *   the user\" gating — a member who cannot manage the org sees no such section.\n *\n * Sub-tab labels stay on the target: they describe the destination's internal\n * structure, not its position in the rail.\n *\n * ## The refs themselves live in `@wildo-ai/saas-models`\n *\n * `EngineSettingsDestinationRef` and `ENGINE_SETTINGS_DESTINATION_REFS` are declared in\n * `saas-models` (`frontend-definitions/settings-destination-ref.definitions.ts`); this file\n * declares only what each ref MEANS. The split exists because the ref vocabulary has a\n * backend-side consumer this package can never serve: `validatePlacementPlan`'s `UNKNOWN_SUBJECT`\n * hard floor is held by the app-creation semantic authority, which must not depend on\n * `saas-frontend-lib`. Everything that names a component, a panel or a sub-tab stayed here; the\n * sixteen ids did not.\n *\n * The enum is deliberately NOT re-exported from this module, from the package root, or from\n * `companion-exports`: a symbol reachable through two public doors is a symbol whose two doors\n * drift. Every consumer — including this package's own — imports it from `@wildo-ai/saas-models`.\n */\nimport { CoreFeature, CoreResourceOperation, CoreResourceType, CORE_ORG_ROLES, EngineSettingsDestinationRef, ResourcePrimaryScope } from '@wildo-ai/saas-models';\nimport { SettingsPanelRef, SettingsSectionTargetKind } from './settings-hub.frontend.schemas';\nimport type { SettingsDestination, SettingsHubConfig } from './settings-hub.frontend.schemas';\n\n/** Org-management destinations are visible to organization owners and admins. */\nconst ORG_MANAGEMENT_ROLES: string[] = [CORE_ORG_ROLES.ORG_OWNER, CORE_ORG_ROLES.ORG_ADMIN];\n\n/**\n * Runtime capability key for \"billing is enabled for this app\". Wired in\n * `useLauncherRuntimeAvailabilityContext` (`runtimeCapabilities.billingEnabled`);\n * there is no enum for capability keys yet, so the launcher-config string is the\n * single source of truth.\n */\nconst BILLING_ENABLED_CAPABILITY = 'billingEnabled';\n\n/**\n * Runtime capability keys for the enterprise-config features. Unlike billing\n * (which reads `appConfig.billing.enabled`), these have no app-config toggle —\n * they are wired in `useLauncherRuntimeAvailabilityContext` from\n * resource-registration presence (`hasResource(ORGANIZATION_*_CONFIG)`), so a\n * destination auto-hides when its app excludes the resource and otherwise\n * degrades to org-admin role gating. Keep these string literals in sync with the\n * keys emitted there.\n */\nconst SSO_ENABLED_CAPABILITY = 'ssoEnabled';\nconst SCIM_ENABLED_CAPABILITY = 'scimEnabled';\nconst SIEM_ENABLED_CAPABILITY = 'siemEnabled';\nconst WEBHOOKS_ENABLED_CAPABILITY = 'webhooksEnabled';\n\n/**\n * Every settings destination the engine ships, keyed by `ref`.\n *\n * An application places these by ref. A placement naming a ref absent from this\n * catalog is refused at DEV startup rather than silently dropped — a settings\n * section that quietly fails to appear is indistinguishable from one an author\n * meant to remove.\n */\nexport const ENGINE_SETTINGS_DESTINATIONS: readonly SettingsDestination[] = [\n  // ── Account ────────────────────────────────────────────────────\n  {\n    ref: EngineSettingsDestinationRef.PROFILE,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.USER_SELF_PROFILES,\n      operation: CoreResourceOperation.READ,\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.SECURITY,\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.SECURITY },\n  },\n  {\n    ref: EngineSettingsDestinationRef.APPEARANCE,\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.APPEARANCE },\n  },\n  {\n    ref: EngineSettingsDestinationRef.PREFERENCES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.USER_SELF_PREFERENCES,\n      operation: CoreResourceOperation.READ,\n    },\n  },\n  {\n    // The caller's OWN received invitations (Approach P) — their own INVITED membership\n    // rows across orgs they haven't joined yet. Distinct from the org-admin's view of\n    // sent invites, which are now just INVITED-status rows in the 'members' list (no\n    // separate org 'invitations' section). No `requiredRoles`: any authenticated user\n    // can act on invitations addressed to them (authorized server-side by userId-ownership).\n    ref: EngineSettingsDestinationRef.MY_INVITATIONS,\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.INVITATIONS },\n  },\n  {\n    // Where a PERSON connects their own third-party accounts.\n    //\n    // No `requiredRoles`, and that is the substantive difference from the organization sibling\n    // rather than an omission. Every authenticated user owns their own connections; the resource\n    // declares `APP_USER` on every variant and no administrative variant at all, so authorization\n    // is by OWNERSHIP and adding a role gate here could only ever hide the screen from someone\n    // entitled to it.\n    //\n    // No `runtimeAvailability` gate either, for the organization destination's reason: gating on\n    // \"the application declared a provider\" would hide the screen exactly when somebody is looking\n    // for it, since providers are declared whether or not anyone has connected one.\n    ref: EngineSettingsDestinationRef.MY_PROVIDER_CREDENTIALS,\n    // TWO tabs, because the screen answers two questions and one of them has no resource behind it.\n    //\n    // \"Connect\" is the catalogue — what this person MAY connect — and it is a bespoke panel because\n    // connecting is a flow out to a vendor rather than a row somebody creates. \"Credentials\" is the\n    // ordinary resource list: what they HAVE connected, plus the pasted keys that never went through\n    // a vendor at all.\n    //\n    // Connect comes FIRST deliberately. On the day somebody opens this screen for the first time the\n    // list is empty, and an empty table is the least informative thing to greet them with; it is also\n    // the tab the connection callback returns them to, carrying the outcome it has to render.\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'connect',\n          label: 'Connect',\n          target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.CONNECTED_ACCOUNTS },\n        },\n        {\n          ref: 'credentials',\n          label: 'Credentials',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.USER_PROVIDER_CREDENTIALS,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  // ── Organization ───────────────────────────────────────────────\n  {\n    ref: EngineSettingsDestinationRef.ORGANIZATION_GENERAL,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.ORGANIZATIONS,\n      operation: CoreResourceOperation.READ,\n    },\n  },\n  {\n    // NOTE: no separate org-level \"invitations\" destination — invitations are now\n    // INVITED-status rows inside the ORGANIZATION_MEMBERS junction, so they surface\n    // in this list (filter by status) rather than a parallel destination. The\n    // invitee's own pending invitations live in the 'my-invitations' panel.\n    ref: EngineSettingsDestinationRef.MEMBERS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.ORGANIZATION_MEMBERS,\n      operation: CoreResourceOperation.LIST,\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.BILLING,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [BILLING_ENABLED_CAPABILITY] },\n    // THE billing home — a bespoke panel over the aggregated BillingContext\n    // state (subscription, plans + checkout, usage, invoices, portal link).\n    // Deliberately NOT per-resource LIST sub-tabs: the billing child resources\n    // are routed under the billing account (`REQUIRES_CONTEXT`), so org-scoped\n    // generic panels cannot address them, while the aggregated state endpoint is\n    // org-addressable and auto-creates the account.\n    target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.BILLING },\n  },\n  {\n    ref: EngineSettingsDestinationRef.API_KEYS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.ORG_API_KEYS,\n      operation: CoreResourceOperation.LIST,\n    },\n  },\n  {\n    // Where a tenant connects its OWN third-party accounts. Until this existed the resource had\n    // backend doors, an encrypted store, migrations and audit events, and no way for the\n    // administrator it is FOR to reach any of it — so every tenant kept acting as the application's\n    // own third-party principal, which is the defect the resource was built to remove.\n    //\n    // No `runtimeAvailability` gate: unlike SSO or SIEM this needs no capability to be switched on,\n    // and gating it on \"the application declared a provider\" would hide the screen exactly when an\n    // operator is looking for it, since an application declares providers whether or not any tenant\n    // has connected one.\n    ref: EngineSettingsDestinationRef.PROVIDER_CREDENTIALS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    // TWO tabs, for the person-scope destination's reason: \"Connect\" is a flow out to a vendor and\n    // has no resource behind it, while \"Credentials\" is the ordinary list of what the tenant HAS.\n    // Connect comes first because it is where the connection callback returns, carrying the outcome\n    // it has to render.\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'connect',\n          label: 'Connect',\n          target: { kind: SettingsSectionTargetKind.ENGINE_PANEL, panelRef: SettingsPanelRef.ORGANIZATION_CONNECTED_ACCOUNTS },\n        },\n        {\n          ref: 'credentials',\n          label: 'Credentials',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORG_PROVIDER_CREDENTIALS,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  // ── Organization · enterprise credentials & compliance ─────────\n  // Each gates on org-admin role + a per-feature runtime capability\n  // (resource-registration presence). Multi-resource domains split into\n  // sub-tabs pairing the singleton config (READ) with its collection (LIST).\n  {\n    ref: EngineSettingsDestinationRef.SSO,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [SSO_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.SINGLE_SIGN_ON,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'sso-configuration',\n          label: 'Configuration',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SSO_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'sso-connections',\n          label: 'Connections',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SSO_CONNECTIONS,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.SCIM,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [SCIM_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.DIRECTORY_PROVISIONING,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'scim-provisioning',\n          label: 'Provisioning',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SCIM_PROVISIONING_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'scim-tokens',\n          label: 'Tokens',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SCIM_TOKENS,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.SIEM,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [SIEM_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.SECURITY_EVENT_EXPORT,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'siem-export',\n          label: 'Export',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SIEM_EXPORT_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'siem-failed-deliveries',\n          label: 'Failed deliveries',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_SIEM_DELIVERY_DLQ,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.WEBHOOKS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    runtimeAvailability: { requiredCapabilities: [WEBHOOKS_ENABLED_CAPABILITY] },\n    entitlementFeatureId: CoreFeature.M2M_WEBHOOK_DELIVERY,\n    target: {\n      kind: SettingsSectionTargetKind.SUB_TABS,\n      subTabs: [\n        {\n          ref: 'webhooks-endpoints',\n          label: 'Endpoints',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_WEBHOOK_CONFIG,\n            operation: CoreResourceOperation.READ,\n          },\n        },\n        {\n          ref: 'webhooks-delivery-log',\n          label: 'Delivery log',\n          target: {\n            kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n            resourceType: CoreResourceType.ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG,\n            operation: CoreResourceOperation.LIST,\n          },\n        },\n      ],\n    },\n  },\n  {\n    ref: EngineSettingsDestinationRef.AUDIT_LOGS,\n    requiredRoles: ORG_MANAGEMENT_ROLES,\n    target: {\n      kind: SettingsSectionTargetKind.RESOURCE_OPERATION,\n      resourceType: CoreResourceType.AUDIT_LOGS,\n      operation: CoreResourceOperation.LIST,\n    },\n  },\n];\n\n/**\n * The full placement set `wildo init` scaffolds into a new application's config.\n *\n * **This is GENERATION INPUT, not a runtime fallback.** Nothing in the render\n * path may read it — `resolveSettingsHubConfig()` resolves the application's own\n * authored config and nothing else. The distinction is the entire point of the\n * split: a scaffold is a starting arrangement an author edits and owns, whereas\n * a default is an arrangement that reasserts itself and cannot be edited away.\n *\n * It places every engine destination so a new application starts complete and\n * edits DOWN, which is the direction that surfaces what exists. Starting empty\n * would hide the catalog behind documentation.\n *\n * The `label`s here are the English strings the previous framework default\n * carried, and they are NOT a temporary convenience to be removed once label\n * generation runs. The companion feeds each authored label to the labellize\n * prompt as that key's `purpose`, so it is the wording INTENT generation\n * translates — delete it and the model falls back to inventing from the ref.\n */\nexport const SCAFFOLD_SETTINGS_HUB_CONFIG: SettingsHubConfig = {\n  categories: [\n    { ref: 'account', label: 'Account', scope: ResourcePrimaryScope.USER_SELF, order: 0 },\n    { ref: 'organization', label: 'Organization', scope: ResourcePrimaryScope.ORGANIZATIONS, order: 1 },\n  ],\n  placements: [\n    { destinationRef: EngineSettingsDestinationRef.PROFILE, categoryRef: 'account', label: 'Profile', order: 0 },\n    { destinationRef: EngineSettingsDestinationRef.SECURITY, categoryRef: 'account', label: 'Security', order: 1 },\n    { destinationRef: EngineSettingsDestinationRef.APPEARANCE, categoryRef: 'account', label: 'Appearance', order: 2 },\n    { destinationRef: EngineSettingsDestinationRef.PREFERENCES, categoryRef: 'account', label: 'Preferences', order: 3 },\n    { destinationRef: EngineSettingsDestinationRef.MY_INVITATIONS, categoryRef: 'account', label: 'Invitations', order: 4 },\n    // Same label as the organization placement below, deliberately: it is the same feature, and the\n    // CATEGORY is what says whose accounts these are.\n    { destinationRef: EngineSettingsDestinationRef.MY_PROVIDER_CREDENTIALS, categoryRef: 'account', label: 'Connected accounts', order: 5 },\n    { destinationRef: EngineSettingsDestinationRef.ORGANIZATION_GENERAL, categoryRef: 'organization', label: 'General', order: 0 },\n    { destinationRef: EngineSettingsDestinationRef.MEMBERS, categoryRef: 'organization', label: 'Members', order: 1 },\n    { destinationRef: EngineSettingsDestinationRef.BILLING, categoryRef: 'organization', label: 'Billing', order: 3 },\n    { destinationRef: EngineSettingsDestinationRef.API_KEYS, categoryRef: 'organization', label: 'API keys', order: 4 },\n    { destinationRef: EngineSettingsDestinationRef.PROVIDER_CREDENTIALS, categoryRef: 'organization', label: 'Connected accounts', order: 5 },\n    { destinationRef: EngineSettingsDestinationRef.SSO, categoryRef: 'organization', label: 'Single sign-on', order: 6 },\n    { destinationRef: EngineSettingsDestinationRef.SCIM, categoryRef: 'organization', label: 'User provisioning', order: 7 },\n    { destinationRef: EngineSettingsDestinationRef.SIEM, categoryRef: 'organization', label: 'Audit streaming', order: 8 },\n    { destinationRef: EngineSettingsDestinationRef.WEBHOOKS, categoryRef: 'organization', label: 'Webhooks', order: 9 },\n    { destinationRef: EngineSettingsDestinationRef.AUDIT_LOGS, categoryRef: 'organization', label: 'Audit log', order: 10 },\n  ],\n  defaultSectionRef: 'profile',\n};\n"]}

package/dist/esm/core/config/execution-view.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-view.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/core/config/execution-view.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,gEAAgE,CAAC;AAExE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EACL,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAKL,KAAK,4BAA4B,EAClC,MAAM,kCAAkC,CAAC;AAI1C,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AACpI,OAAO,KAAK,EACV,uCAAuC,EACvC,yBAAyB,EACzB,YAAY,EACb,MAAM,+DAA+D,CAAC;AAUvE;;;;GAIG;AACH,oBAAY,gCAAgC;IAC1C,2BAA2B,gCAAgC;IAC3D,+BAA+B,oCAAoC;CACpE;AAED;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC;;;iBAG9C,CAAC;AAEH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gCAAgC,CAAC;CAC1C;AAED,oBAAY,4BAA4B;IACtC,MAAM,WAAW;IACjB,2BAA2B,gCAAgC;IAC3D,+BAA+B,oCAAoC;IACnE,uBAAuB,4BAA4B;CACpD;AAuBD;;;;;;;GAOG;AACH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;6BAKjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AACtG,mFAAmF;AAEnF,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,uBAAuB,CAAC;IACxC,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,oBAAY,+BAA+B;IACzC,sEAAsE;IACtE,aAAa,kBAAkB;IAC/B,+EAA+E;IAC/E,kBAAkB,uBAAuB;CAC1C;AAED,eAAO,MAAM,wCAAwC,kFAGnD,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,sCAAsC;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,YAAY,CAAC;IACxB,YAAY,EAAE,+BAA+B,CAAC;CAC/C;AAED,eAAO,MAAM,4CAA4C;;;;iBAIvD,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD,mBAAmB,EAAE,+BAA+B,CAAC;IACrD,2BAA2B,CAAC,EAAE,sCAAsC,EAAE,CAAC;CACxE;AAED,eAAO,MAAM,yCAAyC;;;;;;;iBAIpD,CAAC;AACH,4FAA4F;AAE5F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,kFAA2C,CAAC;AAC1F,MAAM,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAEvD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwExC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC;IACvC,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E,8BAA8B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,oBAAoB,CAAC;IACnC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,gBAAgB,CAAC,EAAE,mCAAmC,CAAC;IACvD,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;IAClE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;IAChE,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,oGAAoG;IACpG,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,eAAO,MAAM,0CAA0C,mBAAmB,CAAC;AAE3E,MAAM,WAAW,oCAAoC;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,gBAAgB,CAAC,EAAE,mCAAmC,CAAC;IACvD,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACpD,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E,8BAA8B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;IAClE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;IAChE,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,oGAAoG;IACpG,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAC/D,MAAM,GAAE,IAAI,CAAC,oCAAoC,EAAE,eAAe,CAAM,GACvE,oCAAoC,CAKtC;AACD,qEAAqE;AAErE,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,2BAA2B,GACrC,MAAM,CAMR;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0CAA0C,CACxD,KAAK,SAAS,2BAA2B,EAEzC,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,GACjD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAuBvB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,SAAS,wBAAwB,EACjF,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,EAClD,iBAAiB,EAAE,qBAAqB,GACvC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAqBvB;AAED,wBAAgB,iCAAiC,CAC/C,aAAa,EAAE,uBAAuB,GAAG,SAAS,GACjD,OAAO,CAKT;AAED,wBAAgB,sCAAsC,CACpD,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,GAClD,4BAA4B,CAO9B;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC,GAAG,uBAAuB,GAAG,SAAS,CAmBtC;AAED,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,IAAI,CACb,uCAAuC,EACvC,qBAAqB,GAAG,YAAY,GAAG,oBAAoB,CAC5D,GACA,YAAY,CAMd;AAED,wBAAgB,yCAAyC,CACvD,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,YAAY,GACnB,OAAO,CAMT;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sCAAsC,CAAC,MAAM,EAAE;IAC7D,cAAc,EAAE,IAAI,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CACb,uCAAuC,EACvC,qBAAqB,GAAG,YAAY,GAAG,oBAAoB,CAC5D,CAAC;CACH,GAAG,+BAA+B,CAYlC;AACD,uGAAuG;AAEvG,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClD,MAAM,CAWR;AAED,wBAAgB,+CAA+C,CAC7D,YAAY,EAAE,eAAe,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAWpC"}
+{"version":3,"file":"execution-view.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/config/execution-view.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,gEAAgE,CAAC;AAExE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EACL,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAKL,KAAK,4BAA4B,EAClC,MAAM,kCAAkC,CAAC;AAI1C,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AACpI,OAAO,KAAK,EACV,uCAAuC,EACvC,yBAAyB,EACzB,YAAY,EACb,MAAM,+DAA+D,CAAC;AAUvE;;;;GAIG;AACH,oBAAY,gCAAgC;IAC1C,2BAA2B,gCAAgC;IAC3D,+BAA+B,oCAAoC;CACpE;AAED;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC;;;iBAG9C,CAAC;AAEH,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gCAAgC,CAAC;CAC1C;AAED,oBAAY,4BAA4B;IACtC,MAAM,WAAW;IACjB,2BAA2B,gCAAgC;IAC3D,+BAA+B,oCAAoC;IACnE,uBAAuB,4BAA4B;CACpD;AAuBD;;;;;;;GAOG;AACH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;6BAKjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AACtG,mFAAmF;AAEnF,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,uBAAuB,CAAC;IACxC,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,oBAAY,+BAA+B;IACzC,sEAAsE;IACtE,aAAa,kBAAkB;IAC/B,+EAA+E;IAC/E,kBAAkB,uBAAuB;CAC1C;AAED,eAAO,MAAM,wCAAwC,kFAGnD,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,sCAAsC;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,YAAY,CAAC;IACxB,YAAY,EAAE,+BAA+B,CAAC;CAC/C;AAED,eAAO,MAAM,4CAA4C;;;;iBAIvD,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD,mBAAmB,EAAE,+BAA+B,CAAC;IACrD,2BAA2B,CAAC,EAAE,sCAAsC,EAAE,CAAC;CACxE;AAED,eAAO,MAAM,yCAAyC;;;;;;;iBAIpD,CAAC;AACH,4FAA4F;AAE5F;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,kFAA2C,CAAC;AAC1F,MAAM,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAEvD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwExC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC;IACvC,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E,8BAA8B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,oBAAoB,CAAC;IACnC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,gBAAgB,CAAC,EAAE,mCAAmC,CAAC;IACvD,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;IAClE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;IAChE,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,oGAAoG;IACpG,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,eAAO,MAAM,0CAA0C,mBAAmB,CAAC;AAE3E,MAAM,WAAW,oCAAoC;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,gBAAgB,CAAC,EAAE,mCAAmC,CAAC;IACvD,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACpD,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E,8BAA8B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;IAClE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;IAChE,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,oGAAoG;IACpG,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAC/D,MAAM,GAAE,IAAI,CAAC,oCAAoC,EAAE,eAAe,CAAM,GACvE,oCAAoC,CAKtC;AACD,qEAAqE;AAErE,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,2BAA2B,GACrC,MAAM,CAMR;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0CAA0C,CACxD,KAAK,SAAS,2BAA2B,EAEzC,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,GACjD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAuBvB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,SAAS,wBAAwB,EACjF,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,EAClD,iBAAiB,EAAE,qBAAqB,GACvC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAqBvB;AAED,wBAAgB,iCAAiC,CAC/C,aAAa,EAAE,uBAAuB,GAAG,SAAS,GACjD,OAAO,CAKT;AAED,wBAAgB,sCAAsC,CACpD,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,GAClD,4BAA4B,CAO9B;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC,GAAG,uBAAuB,GAAG,SAAS,CAmBtC;AAED,wBAAgB,uCAAuC,CACrD,SAAS,EAAE,IAAI,CACb,uCAAuC,EACvC,qBAAqB,GAAG,YAAY,GAAG,oBAAoB,CAC5D,GACA,YAAY,CAMd;AAED,wBAAgB,yCAAyC,CACvD,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,YAAY,GACnB,OAAO,CAMT;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sCAAsC,CAAC,MAAM,EAAE;IAC7D,cAAc,EAAE,IAAI,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CACb,uCAAuC,EACvC,qBAAqB,GAAG,YAAY,GAAG,oBAAoB,CAC5D,CAAC;CACH,GAAG,+BAA+B,CAYlC;AACD,uGAAuG;AAEvG,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClD,MAAM,CAWR;AAED,wBAAgB,+CAA+C,CAC7D,YAAY,EAAE,eAAe,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAWpC"}