@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/core/resources/ResourceOperationViewProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceOperationViewProvider.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceOperationViewProvider.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gEAAgE,CAAC;AAE7G,OAAO,EACL,4BAA4B,GAE7B,MAAM,iEAAiE,CAAC;AAUzE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,QAAQ,GAC2B;IACnC,MAAM,OAAO,GAAG,2BAA2B,CAAC;QAC1C,eAAe;QACf,cAAc;QACd,mBAAmB;KACpB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,CAAoC,GAAG,EAAE,CAAC,CAAC;QAC9D,GAAG,OAAO;QACV,mBAAmB;KACpB,CAAC,EAAE,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpC,OAAO,CACL,KAAC,4BAA4B,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAChD,QAAQ,GAC6B,CACzC,CAAC;AACJ,CAAC","sourcesContent":["import React, { useMemo } from 'react';\n\nimport type { NavigationInitiatorContext, NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useResourceOperationSurface } from '~wildo-frontend-lib/core/resources/useResourceOperationSurface';\nimport type { InlineParentContext } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport {\n  ResourceOperationViewContext,\n  type ResourceOperationViewContextValue,\n} from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\n\nexport interface ResourceOperationViewProviderProps {\n  resourceContext: FrontendResourceOperationContext;\n  navigationZone: NavigationZone;\n  navigationInitiator?: NavigationInitiatorContext;\n  inlineParentContext?: InlineParentContext;\n  children: React.ReactNode;\n}\n\n/**\n * Provides the shared runtime surface for one rendered resource-operation view.\n *\n * The provider intentionally reuses the headless `useResourceOperationSurface()`\n * seam rather than creating a second business-logic layer. It only makes that\n * runtime available to templates/presets deeper in the tree.\n *\n * The backing context object and the read hooks live in the sibling leaf module\n * `ResourceOperationViewContext.tsx`. This producing module is the ONLY one that\n * value-imports `useResourceOperationSurface`, so read-only consumers (filter\n * pickers, headers, list tables) stay off that surface's heavy import chain.\n * Keep it that way: never re-home a read hook here.\n */\nexport function ResourceOperationViewProvider({\n  resourceContext,\n  navigationZone,\n  navigationInitiator,\n  inlineParentContext,\n  children,\n}: ResourceOperationViewProviderProps): React.JSX.Element {\n  const surface = useResourceOperationSurface({\n    resourceContext,\n    navigationZone,\n    navigationInitiator,\n  });\n\n  const value = useMemo<ResourceOperationViewContextValue>(() => ({\n    ...surface,\n    inlineParentContext,\n  }), [inlineParentContext, surface]);\n\n  return (\n    <ResourceOperationViewContext.Provider value={value}>\n      {children}\n    </ResourceOperationViewContext.Provider>\n  );\n}\n"]}
+{"version":3,"file":"ResourceOperationViewProvider.js","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceOperationViewProvider.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gEAAgE,CAAC;AAE7G,OAAO,EACL,4BAA4B,GAE7B,MAAM,iEAAiE,CAAC;AAUzE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,QAAQ,GAC2B;IACnC,MAAM,OAAO,GAAG,2BAA2B,CAAC;QAC1C,eAAe;QACf,cAAc;QACd,mBAAmB;KACpB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,CAAoC,GAAG,EAAE,CAAC,CAAC;QAC9D,GAAG,OAAO;QACV,mBAAmB;KACpB,CAAC,EAAE,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpC,OAAO,CACL,KAAC,4BAA4B,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAChD,QAAQ,GAC6B,CACzC,CAAC;AACJ,CAAC","sourcesContent":["import React, { useMemo } from 'react';\n\nimport type { NavigationInitiatorContext, NavigationZone } from '~wildo-frontend-lib/core/navigation/navigation.schemas';\nimport type { FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { useResourceOperationSurface } from '~wildo-frontend-lib/core/resources/useResourceOperationSurface';\nimport type { InlineParentContext } from '~wildo-frontend-lib/components/resources/component-props.resources-layout.frontend.schemas';\nimport {\n  ResourceOperationViewContext,\n  type ResourceOperationViewContextValue,\n} from '~wildo-frontend-lib/core/resources/ResourceOperationViewContext';\n\nexport interface ResourceOperationViewProviderProps {\n  resourceContext: FrontendResourceOperationContext;\n  navigationZone: NavigationZone;\n  navigationInitiator?: NavigationInitiatorContext;\n  inlineParentContext?: InlineParentContext;\n  children: React.ReactNode;\n}\n\n/**\n * Provides the shared runtime surface for one rendered resource-operation view.\n *\n * The provider intentionally reuses the headless `useResourceOperationSurface()`\n * seam rather than creating a second business-logic layer. It only makes that\n * runtime available to templates/presets deeper in the tree.\n *\n * The backing context object and the read hooks live in the sibling leaf module\n * `ResourceOperationViewContext.tsx`. This producing module is the ONLY one that\n * value-imports `useResourceOperationSurface`, so read-only consumers (filter\n * pickers, headers, list tables) stay off that surface's heavy import chain.\n * Keep it that way: never re-home a read hook here.\n */\nexport function ResourceOperationViewProvider({\n  resourceContext,\n  navigationZone,\n  navigationInitiator,\n  inlineParentContext,\n  children,\n}: ResourceOperationViewProviderProps): React.JSX.Element {\n  const surface = useResourceOperationSurface({\n    resourceContext,\n    navigationZone,\n    navigationInitiator,\n  });\n\n  const value = useMemo<ResourceOperationViewContextValue>(() => ({\n    ...surface,\n    inlineParentContext,\n  }), [inlineParentContext, surface]);\n\n  return (\n    <ResourceOperationViewContext.Provider value={value}>\n      {children}\n    </ResourceOperationViewContext.Provider>\n  );\n}\n"]}

package/dist/esm/core/resources/ResourceReadCacheBridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceReadCacheBridge.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAqD,MAAM,OAAO,CAAC;AAsC1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAiO3C,CAAC"}
+{"version":3,"file":"ResourceReadCacheBridge.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAqD,MAAM,OAAO,CAAC;AAsC1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,EAuU3C,CAAC"}

package/dist/esm/core/resources/ResourceReadCacheBridge.js

@@ -87,18 +87,8 @@ export const ResourceReadCacheBridge = () => {
             logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });
         }
     }, [readCache]);
-    /*
-     * The SAFE accessor, because this bridge is mounted ABOVE `AppScopeProvider`.
-     *
-     * The provider lives inside the router shell, while the bridges sit beside `RMMRegistryProvider`
-     * one subtree up — so the throwing `useAppScope()` crashes the whole application here, which is
-     * exactly what it did the first time. `ScopedResourceRegistryProvider` already solved this the
-     * same way and for the same reason ("If AppScopeProvider isn't mounted yet, behave exactly like
-     * the base registry").
-     *
-     * The consequence is deliberate and safe: with no scope mounted, `currentOrganizationId` is
-     * `undefined` and stays that way, so the organization-switch effect below never fires a spurious
-     * clear — and nothing is being cached at that point either, because the socket has no rooms.
+    /* The production bridge lives inside AppScopeProvider so organization changes reach this owner.
+     * The safe accessor keeps isolated/headless mounts uncached until their coverage is established.
      */
     const appScope = useAppScopeSafe();
     const currentOrganizationId = appScope?.currentOrganizationId ?? null;
@@ -122,6 +112,73 @@ export const ResourceReadCacheBridge = () => {
     const confirmedRoomsRef = useRef(new Set());
     /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */
     const requestedRoomsRef = useRef(new Map());
+    /*
+     * Rooms a read asked for BEFORE the socket was up, held until it is.
+     *
+     * This is the difference between a cache that works on a page load and one that does not.
+     * `requestCoverage` used to return silently when disconnected, and nothing ever asked again — so
+     * every read that completed during the connect window was stored uncovered and stayed uncovered
+     * for the surface's whole life. Measured on the running dogfood application (2026-09-10): a single
+     * navigation to the todos collection issued FOUR coverage requests for `todos`, all four with
+     * `isConnected: false`, and the client emitted no `resource:subscribe` frame at all. Whether a room
+     * was ever claimed came down to whether some LATER read happened to re-enter `store()` after the
+     * socket came up, which is incidental rather than designed — and on the e2e lane's timing it did
+     * not happen, so the scenario timed out against a subscription nobody had asked for.
+     */
+    const pendingRoomsRef = useRef(new Map());
+    /*
+     * LATEST-VALUE refs, read by the authority rather than captured by it.
+     *
+     * The authority must be installed ONCE per cache instance, because installing it CLEARS the cache
+     * (see `setCoverageAuthority`). Capturing `isConnected` or the claim callbacks in the closure would
+     * put them in the effect's dependency list and reinstall the authority every time any of them
+     * changed — which is exactly what happened on the `isConnected` false -> true edge, wiping the
+     * cache at the precise moment it first became coverable. Assigned during render so a read firing
+     * from a sibling's effect cannot observe a stale value.
+     */
+    const isConnectedRef = useRef(isConnected);
+    isConnectedRef.current = isConnected;
+    /*
+     * Claim one scope room and record the outcome. The single place a claim is made, so a room queued
+     * while disconnected and a room requested while connected travel identical paths.
+     */
+    const claimScopeRoom = useCallback((roomName, qualifier) => {
+        if (requestedRoomsRef.current.has(roomName))
+            return;
+        requestedRoomsRef.current.set(roomName, qualifier);
+        void claimResourceRoom({
+            ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,
+            resourceType: qualifier.resourceType,
+            scopeKey: qualifier.scopeKey,
+            scopeId: qualifier.scopeId,
+            /*
+             * The scope's own identifier, in the shape the server's authorization expects. The subscribe
+             * handler refuses an EMPTY `contextResourceIdentifiers` outright, and `verifyScopeAccess` reads
+             * the scope from it — so this is the authorization input, not decoration.
+             */
+            contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },
+        }).then((result) => {
+            // A reset may retire this claim while its acknowledgement is in flight. Compare the request
+            // identity, not just the room name: switching away and back may request the same room again.
+            if (requestedRoomsRef.current.get(roomName) !== qualifier)
+                return;
+            if (result?.success) {
+                confirmedRoomsRef.current.add(roomName);
+                logDebug('scope room confirmed', { roomName });
+            }
+            else {
+                // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever
+                // served — the cache degrades to the un-cached path rather than guessing.
+                requestedRoomsRef.current.delete(roomName);
+                logDebug('scope room not confirmed; entries under it stay unservable', { roomName });
+            }
+        }).catch(() => {
+            if (requestedRoomsRef.current.get(roomName) === qualifier)
+                requestedRoomsRef.current.delete(roomName);
+        });
+    }, [claimResourceRoom]);
+    const claimScopeRoomRef = useRef(claimScopeRoom);
+    claimScopeRoomRef.current = claimScopeRoom;
     const releaseAllRooms = useCallback(() => {
         for (const [roomName, qualifier] of requestedRoomsRef.current) {
             void releaseResourceRoom({
@@ -134,7 +191,10 @@ export const ResourceReadCacheBridge = () => {
         }
         requestedRoomsRef.current.clear();
         confirmedRoomsRef.current.clear();
+        pendingRoomsRef.current.clear();
     }, [releaseResourceRoom]);
+    const releaseAllRoomsRef = useRef(releaseAllRooms);
+    releaseAllRoomsRef.current = releaseAllRooms;
     /*
      * Install the authority, and take it away again on unmount.
      *
@@ -146,55 +206,68 @@ export const ResourceReadCacheBridge = () => {
         const cache = readCache;
         const authority = {
             covers: (_resourceType, scopes) => {
-                if (!isConnected)
+                if (!isConnectedRef.current)
                     return false;
                 if (scopes.length === 0)
                     return false;
                 return scopes.every((scope) => confirmedRoomsRef.current.has(buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId)));
             },
             requestCoverage: (resourceType, scopes) => {
-                if (!isConnected)
-                    return;
                 for (const scope of scopes) {
                     const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);
                     if (requestedRoomsRef.current.has(roomName))
                         continue;
-                    requestedRoomsRef.current.set(roomName, { ...scope, resourceType });
-                    void claimResourceRoom({
-                        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,
-                        resourceType,
-                        scopeKey: scope.scopeKey,
-                        scopeId: scope.scopeId,
-                        /*
-                         * The scope's own identifier, in the shape the server's authorization expects. The
-                         * subscribe handler refuses an EMPTY `contextResourceIdentifiers` outright, and
-                         * `verifyScopeAccess` reads the scope from it — so this is the authorization input, not
-                         * decoration.
-                         */
-                        contextResourceIdentifiers: { [`${scope.scopeKey}Id`]: scope.scopeId },
-                    }).then((result) => {
-                        if (result?.success) {
-                            confirmedRoomsRef.current.add(roomName);
-                            logDebug('scope room confirmed', { roomName });
-                        }
-                        else {
-                            // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever
-                            // served — the cache degrades to the un-cached path rather than guessing.
-                            requestedRoomsRef.current.delete(roomName);
-                            logDebug('scope room not confirmed; entries under it stay unservable', { roomName });
-                        }
-                    }).catch(() => {
-                        requestedRoomsRef.current.delete(roomName);
-                    });
+                    /*
+                     * DEFERRED, not dropped. A read completing before the socket is up is the ordinary case on
+                     * a page load, not an edge — the surface's own first read is usually one of them — and
+                     * returning here silently left its entry uncovered forever.
+                     */
+                    if (!isConnectedRef.current) {
+                        pendingRoomsRef.current.set(roomName, { ...scope, resourceType });
+                        logDebug('coverage deferred until the socket is up', { roomName });
+                        continue;
+                    }
+                    claimScopeRoomRef.current(roomName, { ...scope, resourceType });
                 }
             },
         };
         cache.setCoverageAuthority(authority);
         return () => {
             cache.setCoverageAuthority(null);
-            releaseAllRooms();
+            releaseAllRoomsRef.current();
         };
-    }, [readCache, isConnected, claimResourceRoom, releaseAllRooms]);
+        /*
+         * `readCache` ALONE, and that is the whole point of the refs above.
+         *
+         * `isConnected` was in this list until 2026-09-10, and because installing an authority clears
+         * the cache, the false -> true edge emptied it at the exact moment it first became coverable.
+         * Every entry a page had read up to that point was discarded, and the coverage those reads had
+         * asked for had already been dropped by the disconnected early-return. The tier could therefore
+         * only ever cache reads that happened to occur AFTER the socket came up — on the dogfood
+         * application's todos collection, none did, so it served nothing while reporting nothing.
+         *
+         * The authority's IDENTITY does not change when the socket connects; only its ability to claim
+         * rooms does, and that is now read from a ref. A genuine socket REPLACEMENT is a different event
+         * and is still handled, by the `connectionCount` effect below.
+         */
+    }, [readCache]);
+    /*
+     * Claim what the page already asked for, as soon as the socket can carry it.
+     *
+     * The other half of the deferral above. Without this the queue would only be a politer way of
+     * dropping the request.
+     */
+    useEffect(() => {
+        if (!isConnected)
+            return;
+        if (pendingRoomsRef.current.size === 0)
+            return;
+        const deferred = [...pendingRoomsRef.current.entries()];
+        pendingRoomsRef.current.clear();
+        logDebug('claiming coverage deferred during the connect window', { rooms: deferred.length });
+        for (const [roomName, qualifier] of deferred)
+            claimScopeRoom(roomName, qualifier);
+    }, [isConnected, claimScopeRoom]);
     /*
      * Hand the cache the ambient application id.
      *
@@ -207,26 +280,50 @@ export const ResourceReadCacheBridge = () => {
         readCache.setApplicationId(currentApplicationId);
     }, [currentApplicationId, readCache]);
     /*
-     * A reconnect invalidates every confirmation.
+     * And the ambient ORGANIZATION id, for the hydration window rather than for an unaddressable scope.
+     * The value is already read above for the cache-clearing effect; the read path needs it too, or an
+     * org-scoped read issued before the route publishes one is cached under a room that hears no
+     * org invalidation (#1137). Same effect shape, so the two stay obviously parallel.
+     */
+    useEffect(() => {
+        readCache.setOrganizationId(currentOrganizationId);
+    }, [currentOrganizationId, readCache]);
+    /*
+     * A RE-connect invalidates every confirmation. The FIRST connection does not.
      *
-     * Rooms are per-SOCKET, so a new connection has joined nothing — and the window in which the
+     * Rooms are per-SOCKET, so a REPLACEMENT socket has joined nothing — and the window in which a
      * socket was down is exactly the window in which a mutation could have gone unheard. Both halves
-     * point the same way: drop the cache and start the claims again.
+     * point the same way for a reconnect: drop the cache and start the claims again.
+     *
+     * Neither half holds for connection number one, and treating it the same was the second half of
+     * the page-load defect. There is no earlier socket whose rooms could have lapsed, nothing was ever
+     * served (`covers()` answers false while disconnected, so a stale entry could not have reached a
+     * caller), and the "window in which a mutation went unheard" is the page load itself — during
+     * which the entries were read from the server and are as fresh as any read. Clearing there simply
+     * discarded the first screen's worth of reads and left the tier inert for the surface that
+     * triggered them. The residual window — a mutation between a read and its room being joined — is
+     * unavoidable in any read-through cache and exists identically for the first read AFTER connection.
      */
+    const previousConnectionCountRef = useRef(connectionCount);
     useEffect(() => {
-        if (connectionCount === 0)
+        const previousConnectionCount = previousConnectionCountRef.current;
+        previousConnectionCountRef.current = connectionCount;
+        if (connectionCount <= 1)
+            return;
+        if (connectionCount === previousConnectionCount)
             return;
         confirmedRoomsRef.current.clear();
         requestedRoomsRef.current.clear();
+        pendingRoomsRef.current.clear();
         readCache.clear();
-        logDebug('connection changed; coverage and cache reset', { connectionCount });
+        logDebug('reconnected; coverage and cache reset', { connectionCount });
     }, [connectionCount, readCache]);
     /*
      * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.
      *
      * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page
-     * reload, and reads are tenancy-filtered at the repository. So without this, switching organization
-     * would serve the previous tenant's rows from cache. The rooms are re-claimed under the new
+     * reload, and reads are tenancy-filtered at the repository. Clear entries and coverage rather than
+     * relying on every cache key or prior room claim to encode the new scope. The rooms are re-claimed under the new
      * organization by the next read that wants them.
      */
     useEffect(() => {

package/dist/esm/core/resources/ResourceReadCacheBridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceReadCacheBridge.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAGlG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAC/D,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAE/D,mCAAmC;AACnC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,EAAE,CAAC;IACpG,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,4BAA4B,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE;gBAC7F,yBAAyB,CAAC;QAChC,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChB;;;;;;;;;;;;OAYG;IACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACtE;;;;;;;;;;;OAWG;IACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,kBAAkB,EAAE,WAAW,EAAE,aAAa;WACtE,QAAQ,EAAE,oBAAoB;WAC9B,IAAI,CAAC;IAEV,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,MAAM,CAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,sFAAsF;IACtF,MAAM,iBAAiB,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAEhH,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9D,KAAK,mBAAmB,CAAC;gBACvB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;gBAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,SAAS,CAAC;QAExB,MAAM,SAAS,GAAkC;YAC/C,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;gBAChC,IAAI,CAAC,WAAW;oBAAE,OAAO,KAAK,CAAC;gBAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAC1D,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACjE,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACjF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBACtD,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;oBAEpE,KAAK,iBAAiB,CAAC;wBACrB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;wBAC7C,YAAY;wBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB;;;;;2BAKG;wBACH,0BAA0B,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE;qBACvE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBACjB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;4BACpB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;4BACxC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACjD,CAAC;6BAAM,CAAC;4BACN,qFAAqF;4BACrF,0EAA0E;4BAC1E,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;4BAC3C,QAAQ,CAAC,4DAA4D,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACvF,CAAC;oBACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBACZ,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC7C,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;QAEF,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,GAAG,EAAE;YACV,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC;IAEjE;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC,EAAE,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtC;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe,KAAK,CAAC;YAAE,OAAO;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,QAAQ,CAAC,8CAA8C,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,QAAQ,CAAC,2CAA2C,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnF,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAExD,mFAAmF;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV;;;;;;;eAOG;YACH,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvD,QAAQ,CAAC,gCAAgC,EAAE;gBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,cAAc,KAAK,+BAA+B,CAAC,uBAAuB;aAChG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC","sourcesContent":["import React, { useCallback, useContext, useEffect, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  WebSocketResourceDeliveryTarget,\n  buildScopeRoomName,\n  type ResourceScopeRoomQualifier,\n  type WS_ResourceDeletedPayload,\n  type WS_ResourceUpdatedPayload,\n} from '@wildo-ai/saas-models';\n\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport type { ResourceReadCoverageAuthority } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCacheBridge');\nlogger.setDebugTypeLogging('ResourceReadCacheBridge', false);\n\n/** The owner key every scope-room claim from this bridge is made under. */\nconst CLAIM_OWNER_PREFIX = 'read-cache';\n\n/**\n * The environment flag that removes the read cache from the picture entirely.\n *\n * Mirrors `COMPANION_INTROSPECTION_CACHE` on the companion side, deliberately: the same word, the\n * same value, so an operator who has met one knows the other. Optional, and read through the\n * NON-throwing accessor — a diagnostic toggle must never be able to stop an application booting\n * because it was not declared.\n */\nconst READ_CACHE_ENVIRONMENT_FLAG = 'VITE_RESOURCE_READ_CACHE';\n\n/** The value that turns it off. */\nconst READ_CACHE_DISABLED_VALUE = 'off';\n\n/**\n * Makes cached resource reads SERVABLE, by joining the rooms through which they would be told they\n * are stale — and by dropping them when that stops being true.\n *\n * ## Why the cache cannot do this itself\n *\n * `ResourceReadCacheFrontendService` is a plain service on the HTTP client, deliberately: both read\n * paths reach it and it must outlive any React tree. But the answer to \"would an invalidation for\n * this entry reach us?\" lives in the WebSocket connection, which is React-scoped. So the cache holds\n * the entries and this bridge holds the truth about whether they may be served.\n *\n * ## Scope rooms, which the engine already emits into and nobody joined\n *\n * On a mutation the notifications dispatcher emits twice: into the per-row RESOURCE room, and into\n * the SCOPE rooms. Its own comment says why they are separate — *\"Scope rooms are emitted separately\n * from per-resource rooms because they serve list/cache refresh semantics rather than authoritative\n * per-resource replay semantics.\"* That is exactly this tier's channel, and until now nothing on the\n * client subscribed to it: rooms were claimed only from live `ResourceMutationManager` instances, so\n * a LIST had no way to hear that it had changed.\n *\n * The room set for an entry is computed by `deriveResourceScopeRoomQualifiers` — the SAME function\n * the dispatcher uses to decide where to emit, moved into `@wildo-ai/saas-models` for this purpose.\n * Two implementations of that rule would fail silently: a client subscribed to the wrong room does\n * not error, it simply never hears anything.\n *\n * ## Coverage is refused, not assumed\n *\n * `covers()` answers `true` only while the socket is connected AND every room for the entry is\n * claimed AND confirmed by the server. A subscription the server REFUSED — `verifyResourceAccess`\n * denies a PUBLIC socket outright — leaves the room unconfirmed, so nothing is served from it. The\n * cache then behaves exactly as it did before this tier existed.\n */\nexport const ResourceReadCacheBridge: React.FC = () => {\n  const { on, isConnected, connectionCount, claimResourceRoom, releaseResourceRoom } = useWebSocket();\n  const { getReadCache } = useResourceRegistry();\n  /*\n   * Resolved ONCE per render into the cache INSTANCE, and every effect below depends on that\n   * instance rather than on `getReadCache`.\n   *\n   * `ResourceRegistryContext` builds its value object unmemoized, so `getReadCache` is a fresh\n   * closure on every provider render. Depending on it re-ran the authority effect each time, and\n   * `setCoverageAuthority` clears the cache by design — so the cache was emptied on essentially\n   * every render and could never survive long enough to be useful. The instance itself comes from\n   * the HTTP-client singleton and is stable for the life of the application.\n   *\n   * Found by a mutation test: removing the organization-switch clear left every case green, because\n   * this effect was already clearing the cache constantly and masking it.\n   */\n  const readCache = getReadCache();\n\n  /*\n   * The operator escape hatch, applied before anything can be stored.\n   *\n   * The blast radius of this tier is every generated application on both persistence adapters, so\n   * someone who SUSPECTS the cache has to be able to take it out of the picture without a rebuild\n   * and without waiting for a fix. `VITE_RESOURCE_READ_CACHE=off` does that, and the cache then\n   * behaves exactly as it did before this tier existed.\n   */\n  useEffect(() => {\n    const disabled = envLoader.readOptionalEnvironmentValue(READ_CACHE_ENVIRONMENT_FLAG)?.toLowerCase()\n      === READ_CACHE_DISABLED_VALUE;\n    readCache.setEnabled(!disabled);\n    if (disabled) {\n      logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });\n    }\n  }, [readCache]);\n  /*\n   * The SAFE accessor, because this bridge is mounted ABOVE `AppScopeProvider`.\n   *\n   * The provider lives inside the router shell, while the bridges sit beside `RMMRegistryProvider`\n   * one subtree up — so the throwing `useAppScope()` crashes the whole application here, which is\n   * exactly what it did the first time. `ScopedResourceRegistryProvider` already solved this the\n   * same way and for the same reason (\"If AppScopeProvider isn't mounted yet, behave exactly like\n   * the base registry\").\n   *\n   * The consequence is deliberate and safe: with no scope mounted, `currentOrganizationId` is\n   * `undefined` and stays that way, so the organization-switch effect below never fires a spurious\n   * clear — and nothing is being cached at that point either, because the socket has no rooms.\n   */\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n  /*\n   * The application id comes from APP CONFIG, not from the scope and not from the token.\n   *\n   * Both were checked on the running stack (issue #283): the access token's claims carry `userId`\n   * and no `applicationId`, and `AppScopeContext` derives its `currentApplicationId` by decoding\n   * that same token — so it is null wherever the claim is absent, which is everywhere. The backend\n   * now publishes the id on `appIdentity`, which is the one surface that actually has it.\n   *\n   * Read through `useContext` rather than `useApplication()` on purpose: that hook THROWS outside\n   * its provider, and a bridge that crashes the tree when mounted a level too high is a defect this\n   * component has already had once.\n   */\n  const applicationContext = useContext(ApplicationContext);\n  const currentApplicationId = applicationContext?.appIdentity?.applicationId\n    ?? appScope?.currentApplicationId\n    ?? null;\n\n  /** Rooms the server has CONFIRMED. Only these make an entry servable. */\n  const confirmedRoomsRef = useRef<Set<string>>(new Set());\n  /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */\n  const requestedRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n\n  const releaseAllRooms = useCallback(() => {\n    for (const [roomName, qualifier] of requestedRoomsRef.current) {\n      void releaseResourceRoom({\n        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n        resourceType: qualifier.resourceType,\n        scopeKey: qualifier.scopeKey,\n        scopeId: qualifier.scopeId,\n        contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n      });\n    }\n    requestedRoomsRef.current.clear();\n    confirmedRoomsRef.current.clear();\n  }, [releaseResourceRoom]);\n\n  /*\n   * Install the authority, and take it away again on unmount.\n   *\n   * `setCoverageAuthority` clears the cache on both edges by construction — an authority that is\n   * being replaced knows nothing about what the previous one covered, so every held entry is of\n   * unknown freshness.\n   */\n  useEffect(() => {\n    const cache = readCache;\n\n    const authority: ResourceReadCoverageAuthority = {\n      covers: (_resourceType, scopes) => {\n        if (!isConnected) return false;\n        if (scopes.length === 0) return false;\n        return scopes.every((scope) => confirmedRoomsRef.current.has(\n          buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId),\n        ));\n      },\n      requestCoverage: (resourceType, scopes) => {\n        if (!isConnected) return;\n        for (const scope of scopes) {\n          const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);\n          if (requestedRoomsRef.current.has(roomName)) continue;\n          requestedRoomsRef.current.set(roomName, { ...scope, resourceType });\n\n          void claimResourceRoom({\n            ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n            resourceType,\n            scopeKey: scope.scopeKey,\n            scopeId: scope.scopeId,\n            /*\n             * The scope's own identifier, in the shape the server's authorization expects. The\n             * subscribe handler refuses an EMPTY `contextResourceIdentifiers` outright, and\n             * `verifyScopeAccess` reads the scope from it — so this is the authorization input, not\n             * decoration.\n             */\n            contextResourceIdentifiers: { [`${scope.scopeKey}Id`]: scope.scopeId },\n          }).then((result) => {\n            if (result?.success) {\n              confirmedRoomsRef.current.add(roomName);\n              logDebug('scope room confirmed', { roomName });\n            } else {\n              // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever\n              // served — the cache degrades to the un-cached path rather than guessing.\n              requestedRoomsRef.current.delete(roomName);\n              logDebug('scope room not confirmed; entries under it stay unservable', { roomName });\n            }\n          }).catch(() => {\n            requestedRoomsRef.current.delete(roomName);\n          });\n        }\n      },\n    };\n\n    cache.setCoverageAuthority(authority);\n    return () => {\n      cache.setCoverageAuthority(null);\n      releaseAllRooms();\n    };\n  }, [readCache, isConnected, claimResourceRoom, releaseAllRooms]);\n\n  /*\n   * Hand the cache the ambient application id.\n   *\n   * An APPLICATION-scoped resource's room is keyed on it, and no URL carries one — so without this\n   * the read path cannot name the room it belongs in, and a push addressed there is received by\n   * nobody (issue #283). The bridge is the right place because it is a COMPONENT and can read the\n   * app scope; the cache service is plain and cannot.\n   */\n  useEffect(() => {\n    readCache.setApplicationId(currentApplicationId);\n  }, [currentApplicationId, readCache]);\n\n  /*\n   * A reconnect invalidates every confirmation.\n   *\n   * Rooms are per-SOCKET, so a new connection has joined nothing — and the window in which the\n   * socket was down is exactly the window in which a mutation could have gone unheard. Both halves\n   * point the same way: drop the cache and start the claims again.\n   */\n  useEffect(() => {\n    if (connectionCount === 0) return;\n    confirmedRoomsRef.current.clear();\n    requestedRoomsRef.current.clear();\n    readCache.clear();\n    logDebug('connection changed; coverage and cache reset', { connectionCount });\n  }, [connectionCount, readCache]);\n\n  /*\n   * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.\n   *\n   * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page\n   * reload, and reads are tenancy-filtered at the repository. So without this, switching organization\n   * would serve the previous tenant's rows from cache. The rooms are re-claimed under the new\n   * organization by the next read that wants them.\n   */\n  useEffect(() => {\n    readCache.clear();\n    releaseAllRooms();\n    logDebug('organization scope changed; cache cleared', { currentOrganizationId });\n  }, [currentOrganizationId, readCache, releaseAllRooms]);\n\n  /* Invalidate on anything the server says changed, at whatever grade it arrives. */\n  useEffect(() => {\n    if (!isConnected) return;\n\n    const unsubscribeUpdated = on<WS_ResourceUpdatedPayload>(\n      CoreWebSocketEvent.RESOURCE_UPDATED,\n      (payload) => {\n        /*\n         * Every grade invalidates, including the SYNC grade that carries a full row.\n         *\n         * A sync payload is authoritative for ONE row, and a cached entry is usually a LIST whose\n         * membership, ordering and pagination the row cannot settle — an added row does not announce\n         * where it belongs. Patching the row into the cached list would be a guess; dropping the\n         * entry costs one refetch and cannot be wrong.\n         */\n        readCache.invalidateResourceType(payload.resourceType);\n        logDebug('invalidated by resource update', {\n          resourceType: payload.resourceType,\n          deliveryTarget: payload.deliveryTarget,\n          isScopeRoom: payload.deliveryTarget === WebSocketResourceDeliveryTarget.SCOPE_ROOM_NOTIFICATION,\n        });\n      },\n    );\n\n    const unsubscribeDeleted = on<WS_ResourceDeletedPayload>(\n      CoreWebSocketEvent.RESOURCE_DELETED,\n      (payload) => {\n        readCache.invalidateResourceType(payload.resourceType);\n      },\n    );\n\n    return () => {\n      unsubscribeUpdated();\n      unsubscribeDeleted();\n    };\n  }, [on, isConnected, readCache]);\n\n  return null;\n};\n"]}
+{"version":3,"file":"ResourceReadCacheBridge.js","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAGlG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAC/D,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAE/D,mCAAmC;AACnC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,EAAE,CAAC;IACpG,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,4BAA4B,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE;gBAC7F,yBAAyB,CAAC;QAChC,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChB;;OAEG;IACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACtE;;;;;;;;;;;OAWG;IACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,kBAAkB,EAAE,WAAW,EAAE,aAAa;WACtE,QAAQ,EAAE,oBAAoB;WAC9B,IAAI,CAAC;IAEV,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,MAAM,CAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,sFAAsF;IACtF,MAAM,iBAAiB,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAChH;;;;;;;;;;;;OAYG;IACH,MAAM,eAAe,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9G;;;;;;;;;OASG;IACH,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC;;;OAGG;IACH,MAAM,cAAc,GAAG,WAAW,CAAC,CACjC,QAAgB,EAChB,SAAgE,EAChE,EAAE;QACF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QACpD,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAEnD,KAAK,iBAAiB,CAAC;YACrB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;YAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B;;;;eAIG;YACH,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;SAC/E,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,4FAA4F;YAC5F,6FAA6F;YAC7F,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAAE,OAAO;YAClE,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,qFAAqF;gBACrF,0EAA0E;gBAC1E,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3C,QAAQ,CAAC,4DAA4D,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAExB,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,cAAc,CAAC;IAE3C,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9D,KAAK,mBAAmB,CAAC;gBACvB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;gBAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACnD,kBAAkB,CAAC,OAAO,GAAG,eAAe,CAAC;IAE7C;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,SAAS,CAAC;QAExB,MAAM,SAAS,GAAkC;YAC/C,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;gBAChC,IAAI,CAAC,cAAc,CAAC,OAAO;oBAAE,OAAO,KAAK,CAAC;gBAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAC1D,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACjE,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;gBACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACjF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBAEtD;;;;uBAIG;oBACH,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBAC5B,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;wBAClE,QAAQ,CAAC,0CAA0C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACnE,SAAS;oBACX,CAAC;oBAED,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;SACF,CAAC;QAEF,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,GAAG,EAAE;YACV,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,CAAC;QACF;;;;;;;;;;;;;WAaG;IACL,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAE/C,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,QAAQ,CAAC,sDAAsD,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,QAAQ;YAAE,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC,EAAE,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtC;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IACrD,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEvC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,0BAA0B,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,uBAAuB,GAAG,0BAA0B,CAAC,OAAO,CAAC;QACnE,0BAA0B,CAAC,OAAO,GAAG,eAAe,CAAC;QACrD,IAAI,eAAe,IAAI,CAAC;YAAE,OAAO;QACjC,IAAI,eAAe,KAAK,uBAAuB;YAAE,OAAO;QACxD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,QAAQ,CAAC,uCAAuC,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,QAAQ,CAAC,2CAA2C,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnF,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAExD,mFAAmF;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV;;;;;;;eAOG;YACH,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvD,QAAQ,CAAC,gCAAgC,EAAE;gBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,cAAc,KAAK,+BAA+B,CAAC,uBAAuB;aAChG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC","sourcesContent":["import React, { useCallback, useContext, useEffect, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  WebSocketResourceDeliveryTarget,\n  buildScopeRoomName,\n  type ResourceScopeRoomQualifier,\n  type WS_ResourceDeletedPayload,\n  type WS_ResourceUpdatedPayload,\n} from '@wildo-ai/saas-models';\n\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport type { ResourceReadCoverageAuthority } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCacheBridge');\nlogger.setDebugTypeLogging('ResourceReadCacheBridge', false);\n\n/** The owner key every scope-room claim from this bridge is made under. */\nconst CLAIM_OWNER_PREFIX = 'read-cache';\n\n/**\n * The environment flag that removes the read cache from the picture entirely.\n *\n * Mirrors `COMPANION_INTROSPECTION_CACHE` on the companion side, deliberately: the same word, the\n * same value, so an operator who has met one knows the other. Optional, and read through the\n * NON-throwing accessor — a diagnostic toggle must never be able to stop an application booting\n * because it was not declared.\n */\nconst READ_CACHE_ENVIRONMENT_FLAG = 'VITE_RESOURCE_READ_CACHE';\n\n/** The value that turns it off. */\nconst READ_CACHE_DISABLED_VALUE = 'off';\n\n/**\n * Makes cached resource reads SERVABLE, by joining the rooms through which they would be told they\n * are stale — and by dropping them when that stops being true.\n *\n * ## Why the cache cannot do this itself\n *\n * `ResourceReadCacheFrontendService` is a plain service on the HTTP client, deliberately: both read\n * paths reach it and it must outlive any React tree. But the answer to \"would an invalidation for\n * this entry reach us?\" lives in the WebSocket connection, which is React-scoped. So the cache holds\n * the entries and this bridge holds the truth about whether they may be served.\n *\n * ## Scope rooms, which the engine already emits into and nobody joined\n *\n * On a mutation the notifications dispatcher emits twice: into the per-row RESOURCE room, and into\n * the SCOPE rooms. Its own comment says why they are separate — *\"Scope rooms are emitted separately\n * from per-resource rooms because they serve list/cache refresh semantics rather than authoritative\n * per-resource replay semantics.\"* That is exactly this tier's channel, and until now nothing on the\n * client subscribed to it: rooms were claimed only from live `ResourceMutationManager` instances, so\n * a LIST had no way to hear that it had changed.\n *\n * The room set for an entry is computed by `deriveResourceScopeRoomQualifiers` — the SAME function\n * the dispatcher uses to decide where to emit, moved into `@wildo-ai/saas-models` for this purpose.\n * Two implementations of that rule would fail silently: a client subscribed to the wrong room does\n * not error, it simply never hears anything.\n *\n * ## Coverage is refused, not assumed\n *\n * `covers()` answers `true` only while the socket is connected AND every room for the entry is\n * claimed AND confirmed by the server. A subscription the server REFUSED — `verifyResourceAccess`\n * denies a PUBLIC socket outright — leaves the room unconfirmed, so nothing is served from it. The\n * cache then behaves exactly as it did before this tier existed.\n */\nexport const ResourceReadCacheBridge: React.FC = () => {\n  const { on, isConnected, connectionCount, claimResourceRoom, releaseResourceRoom } = useWebSocket();\n  const { getReadCache } = useResourceRegistry();\n  /*\n   * Resolved ONCE per render into the cache INSTANCE, and every effect below depends on that\n   * instance rather than on `getReadCache`.\n   *\n   * `ResourceRegistryContext` builds its value object unmemoized, so `getReadCache` is a fresh\n   * closure on every provider render. Depending on it re-ran the authority effect each time, and\n   * `setCoverageAuthority` clears the cache by design — so the cache was emptied on essentially\n   * every render and could never survive long enough to be useful. The instance itself comes from\n   * the HTTP-client singleton and is stable for the life of the application.\n   *\n   * Found by a mutation test: removing the organization-switch clear left every case green, because\n   * this effect was already clearing the cache constantly and masking it.\n   */\n  const readCache = getReadCache();\n\n  /*\n   * The operator escape hatch, applied before anything can be stored.\n   *\n   * The blast radius of this tier is every generated application on both persistence adapters, so\n   * someone who SUSPECTS the cache has to be able to take it out of the picture without a rebuild\n   * and without waiting for a fix. `VITE_RESOURCE_READ_CACHE=off` does that, and the cache then\n   * behaves exactly as it did before this tier existed.\n   */\n  useEffect(() => {\n    const disabled = envLoader.readOptionalEnvironmentValue(READ_CACHE_ENVIRONMENT_FLAG)?.toLowerCase()\n      === READ_CACHE_DISABLED_VALUE;\n    readCache.setEnabled(!disabled);\n    if (disabled) {\n      logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });\n    }\n  }, [readCache]);\n  /* The production bridge lives inside AppScopeProvider so organization changes reach this owner.\n   * The safe accessor keeps isolated/headless mounts uncached until their coverage is established.\n   */\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n  /*\n   * The application id comes from APP CONFIG, not from the scope and not from the token.\n   *\n   * Both were checked on the running stack (issue #283): the access token's claims carry `userId`\n   * and no `applicationId`, and `AppScopeContext` derives its `currentApplicationId` by decoding\n   * that same token — so it is null wherever the claim is absent, which is everywhere. The backend\n   * now publishes the id on `appIdentity`, which is the one surface that actually has it.\n   *\n   * Read through `useContext` rather than `useApplication()` on purpose: that hook THROWS outside\n   * its provider, and a bridge that crashes the tree when mounted a level too high is a defect this\n   * component has already had once.\n   */\n  const applicationContext = useContext(ApplicationContext);\n  const currentApplicationId = applicationContext?.appIdentity?.applicationId\n    ?? appScope?.currentApplicationId\n    ?? null;\n\n  /** Rooms the server has CONFIRMED. Only these make an entry servable. */\n  const confirmedRoomsRef = useRef<Set<string>>(new Set());\n  /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */\n  const requestedRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n  /*\n   * Rooms a read asked for BEFORE the socket was up, held until it is.\n   *\n   * This is the difference between a cache that works on a page load and one that does not.\n   * `requestCoverage` used to return silently when disconnected, and nothing ever asked again — so\n   * every read that completed during the connect window was stored uncovered and stayed uncovered\n   * for the surface's whole life. Measured on the running dogfood application (2026-09-10): a single\n   * navigation to the todos collection issued FOUR coverage requests for `todos`, all four with\n   * `isConnected: false`, and the client emitted no `resource:subscribe` frame at all. Whether a room\n   * was ever claimed came down to whether some LATER read happened to re-enter `store()` after the\n   * socket came up, which is incidental rather than designed — and on the e2e lane's timing it did\n   * not happen, so the scenario timed out against a subscription nobody had asked for.\n   */\n  const pendingRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n  /*\n   * LATEST-VALUE refs, read by the authority rather than captured by it.\n   *\n   * The authority must be installed ONCE per cache instance, because installing it CLEARS the cache\n   * (see `setCoverageAuthority`). Capturing `isConnected` or the claim callbacks in the closure would\n   * put them in the effect's dependency list and reinstall the authority every time any of them\n   * changed — which is exactly what happened on the `isConnected` false -> true edge, wiping the\n   * cache at the precise moment it first became coverable. Assigned during render so a read firing\n   * from a sibling's effect cannot observe a stale value.\n   */\n  const isConnectedRef = useRef(isConnected);\n  isConnectedRef.current = isConnected;\n\n  /*\n   * Claim one scope room and record the outcome. The single place a claim is made, so a room queued\n   * while disconnected and a room requested while connected travel identical paths.\n   */\n  const claimScopeRoom = useCallback((\n    roomName: string,\n    qualifier: ResourceScopeRoomQualifier & { resourceType: string },\n  ) => {\n    if (requestedRoomsRef.current.has(roomName)) return;\n    requestedRoomsRef.current.set(roomName, qualifier);\n\n    void claimResourceRoom({\n      ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n      resourceType: qualifier.resourceType,\n      scopeKey: qualifier.scopeKey,\n      scopeId: qualifier.scopeId,\n      /*\n       * The scope's own identifier, in the shape the server's authorization expects. The subscribe\n       * handler refuses an EMPTY `contextResourceIdentifiers` outright, and `verifyScopeAccess` reads\n       * the scope from it — so this is the authorization input, not decoration.\n       */\n      contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n    }).then((result) => {\n      // A reset may retire this claim while its acknowledgement is in flight. Compare the request\n      // identity, not just the room name: switching away and back may request the same room again.\n      if (requestedRoomsRef.current.get(roomName) !== qualifier) return;\n      if (result?.success) {\n        confirmedRoomsRef.current.add(roomName);\n        logDebug('scope room confirmed', { roomName });\n      } else {\n        // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever\n        // served — the cache degrades to the un-cached path rather than guessing.\n        requestedRoomsRef.current.delete(roomName);\n        logDebug('scope room not confirmed; entries under it stay unservable', { roomName });\n      }\n    }).catch(() => {\n      if (requestedRoomsRef.current.get(roomName) === qualifier) requestedRoomsRef.current.delete(roomName);\n    });\n  }, [claimResourceRoom]);\n\n  const claimScopeRoomRef = useRef(claimScopeRoom);\n  claimScopeRoomRef.current = claimScopeRoom;\n\n  const releaseAllRooms = useCallback(() => {\n    for (const [roomName, qualifier] of requestedRoomsRef.current) {\n      void releaseResourceRoom({\n        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n        resourceType: qualifier.resourceType,\n        scopeKey: qualifier.scopeKey,\n        scopeId: qualifier.scopeId,\n        contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n      });\n    }\n    requestedRoomsRef.current.clear();\n    confirmedRoomsRef.current.clear();\n    pendingRoomsRef.current.clear();\n  }, [releaseResourceRoom]);\n\n  const releaseAllRoomsRef = useRef(releaseAllRooms);\n  releaseAllRoomsRef.current = releaseAllRooms;\n\n  /*\n   * Install the authority, and take it away again on unmount.\n   *\n   * `setCoverageAuthority` clears the cache on both edges by construction — an authority that is\n   * being replaced knows nothing about what the previous one covered, so every held entry is of\n   * unknown freshness.\n   */\n  useEffect(() => {\n    const cache = readCache;\n\n    const authority: ResourceReadCoverageAuthority = {\n      covers: (_resourceType, scopes) => {\n        if (!isConnectedRef.current) return false;\n        if (scopes.length === 0) return false;\n        return scopes.every((scope) => confirmedRoomsRef.current.has(\n          buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId),\n        ));\n      },\n      requestCoverage: (resourceType, scopes) => {\n        for (const scope of scopes) {\n          const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);\n          if (requestedRoomsRef.current.has(roomName)) continue;\n\n          /*\n           * DEFERRED, not dropped. A read completing before the socket is up is the ordinary case on\n           * a page load, not an edge — the surface's own first read is usually one of them — and\n           * returning here silently left its entry uncovered forever.\n           */\n          if (!isConnectedRef.current) {\n            pendingRoomsRef.current.set(roomName, { ...scope, resourceType });\n            logDebug('coverage deferred until the socket is up', { roomName });\n            continue;\n          }\n\n          claimScopeRoomRef.current(roomName, { ...scope, resourceType });\n        }\n      },\n    };\n\n    cache.setCoverageAuthority(authority);\n    return () => {\n      cache.setCoverageAuthority(null);\n      releaseAllRoomsRef.current();\n    };\n    /*\n     * `readCache` ALONE, and that is the whole point of the refs above.\n     *\n     * `isConnected` was in this list until 2026-09-10, and because installing an authority clears\n     * the cache, the false -> true edge emptied it at the exact moment it first became coverable.\n     * Every entry a page had read up to that point was discarded, and the coverage those reads had\n     * asked for had already been dropped by the disconnected early-return. The tier could therefore\n     * only ever cache reads that happened to occur AFTER the socket came up — on the dogfood\n     * application's todos collection, none did, so it served nothing while reporting nothing.\n     *\n     * The authority's IDENTITY does not change when the socket connects; only its ability to claim\n     * rooms does, and that is now read from a ref. A genuine socket REPLACEMENT is a different event\n     * and is still handled, by the `connectionCount` effect below.\n     */\n  }, [readCache]);\n\n  /*\n   * Claim what the page already asked for, as soon as the socket can carry it.\n   *\n   * The other half of the deferral above. Without this the queue would only be a politer way of\n   * dropping the request.\n   */\n  useEffect(() => {\n    if (!isConnected) return;\n    if (pendingRoomsRef.current.size === 0) return;\n\n    const deferred = [...pendingRoomsRef.current.entries()];\n    pendingRoomsRef.current.clear();\n    logDebug('claiming coverage deferred during the connect window', { rooms: deferred.length });\n    for (const [roomName, qualifier] of deferred) claimScopeRoom(roomName, qualifier);\n  }, [isConnected, claimScopeRoom]);\n\n  /*\n   * Hand the cache the ambient application id.\n   *\n   * An APPLICATION-scoped resource's room is keyed on it, and no URL carries one — so without this\n   * the read path cannot name the room it belongs in, and a push addressed there is received by\n   * nobody (issue #283). The bridge is the right place because it is a COMPONENT and can read the\n   * app scope; the cache service is plain and cannot.\n   */\n  useEffect(() => {\n    readCache.setApplicationId(currentApplicationId);\n  }, [currentApplicationId, readCache]);\n\n  /*\n   * And the ambient ORGANIZATION id, for the hydration window rather than for an unaddressable scope.\n   * The value is already read above for the cache-clearing effect; the read path needs it too, or an\n   * org-scoped read issued before the route publishes one is cached under a room that hears no\n   * org invalidation (#1137). Same effect shape, so the two stay obviously parallel.\n   */\n  useEffect(() => {\n    readCache.setOrganizationId(currentOrganizationId);\n  }, [currentOrganizationId, readCache]);\n\n  /*\n   * A RE-connect invalidates every confirmation. The FIRST connection does not.\n   *\n   * Rooms are per-SOCKET, so a REPLACEMENT socket has joined nothing — and the window in which a\n   * socket was down is exactly the window in which a mutation could have gone unheard. Both halves\n   * point the same way for a reconnect: drop the cache and start the claims again.\n   *\n   * Neither half holds for connection number one, and treating it the same was the second half of\n   * the page-load defect. There is no earlier socket whose rooms could have lapsed, nothing was ever\n   * served (`covers()` answers false while disconnected, so a stale entry could not have reached a\n   * caller), and the \"window in which a mutation went unheard\" is the page load itself — during\n   * which the entries were read from the server and are as fresh as any read. Clearing there simply\n   * discarded the first screen's worth of reads and left the tier inert for the surface that\n   * triggered them. The residual window — a mutation between a read and its room being joined — is\n   * unavoidable in any read-through cache and exists identically for the first read AFTER connection.\n   */\n  const previousConnectionCountRef = useRef(connectionCount);\n  useEffect(() => {\n    const previousConnectionCount = previousConnectionCountRef.current;\n    previousConnectionCountRef.current = connectionCount;\n    if (connectionCount <= 1) return;\n    if (connectionCount === previousConnectionCount) return;\n    confirmedRoomsRef.current.clear();\n    requestedRoomsRef.current.clear();\n    pendingRoomsRef.current.clear();\n    readCache.clear();\n    logDebug('reconnected; coverage and cache reset', { connectionCount });\n  }, [connectionCount, readCache]);\n\n  /*\n   * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.\n   *\n   * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page\n   * reload, and reads are tenancy-filtered at the repository. Clear entries and coverage rather than\n   * relying on every cache key or prior room claim to encode the new scope. The rooms are re-claimed under the new\n   * organization by the next read that wants them.\n   */\n  useEffect(() => {\n    readCache.clear();\n    releaseAllRooms();\n    logDebug('organization scope changed; cache cleared', { currentOrganizationId });\n  }, [currentOrganizationId, readCache, releaseAllRooms]);\n\n  /* Invalidate on anything the server says changed, at whatever grade it arrives. */\n  useEffect(() => {\n    if (!isConnected) return;\n\n    const unsubscribeUpdated = on<WS_ResourceUpdatedPayload>(\n      CoreWebSocketEvent.RESOURCE_UPDATED,\n      (payload) => {\n        /*\n         * Every grade invalidates, including the SYNC grade that carries a full row.\n         *\n         * A sync payload is authoritative for ONE row, and a cached entry is usually a LIST whose\n         * membership, ordering and pagination the row cannot settle — an added row does not announce\n         * where it belongs. Patching the row into the cached list would be a guess; dropping the\n         * entry costs one refetch and cannot be wrong.\n         */\n        readCache.invalidateResourceType(payload.resourceType);\n        logDebug('invalidated by resource update', {\n          resourceType: payload.resourceType,\n          deliveryTarget: payload.deliveryTarget,\n          isScopeRoom: payload.deliveryTarget === WebSocketResourceDeliveryTarget.SCOPE_ROOM_NOTIFICATION,\n        });\n      },\n    );\n\n    const unsubscribeDeleted = on<WS_ResourceDeletedPayload>(\n      CoreWebSocketEvent.RESOURCE_DELETED,\n      (payload) => {\n        readCache.invalidateResourceType(payload.resourceType);\n      },\n    );\n\n    return () => {\n      unsubscribeUpdated();\n      unsubscribeDeleted();\n    };\n  }, [on, isConnected, readCache]);\n\n  return null;\n};\n"]}

package/dist/esm/core/resources/ResourceRegistryContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistryContext.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAChI,OAAO,EAEL,mCAAmC,EAIpC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAmC,MAAM,OAAO,CAAC;AAEzF,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sEAAsE,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAE1L,OAAO,EAAkC,KAAK,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AAE1K;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACtC,MAAM,MAAM,uBAAuB,GAAG,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,EAAE,yBAAyB,CAAC;IAGpC;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,EAC3B,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,+BAA+B,GAAG,4BAA4B,EAC1E,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAC;IAGxB;;;OAGG;IACH,wBAAwB,EAAE,CAAC,WAAW,GAAG,GAAG,EAC1C,MAAM,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;OAEG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAC9D;QAAE,kBAAkB,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAGhE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,gCAAgC,GAAG,SAAS,CAAC;IACjG,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;IACtD,yBAAyB,EAAE,MAAM,MAAM,EAAE,CAAC;IAC1C,0BAA0B,EAAE,MAAM,MAAM,EAAE,CAAC;IAE3C;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,gCAAgC,CAAC;IAGrD,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/D,oBAAoB,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAClE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,mBAAmB,EAAE,kCAAkC,CAAC;CACzD;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAqE,CAAC;AAEjK;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,6BAA6B,CAqO5E,CAAC"}
+{"version":3,"file":"ResourceRegistryContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAChI,OAAO,EAEL,mCAAmC,EAIpC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAmC,MAAM,OAAO,CAAC;AAEzF,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sEAAsE,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAE1L,OAAO,EAAkC,KAAK,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AAE1K;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACtC,MAAM,MAAM,uBAAuB,GAAG,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,EAAE,yBAAyB,CAAC;IAGpC;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,EAC3B,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,+BAA+B,GAAG,4BAA4B,EAC1E,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAC;IAGxB;;;OAGG;IACH,wBAAwB,EAAE,CAAC,WAAW,GAAG,GAAG,EAC1C,MAAM,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;OAEG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAC9D;QAAE,kBAAkB,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAGhE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,gCAAgC,GAAG,SAAS,CAAC;IACjG,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;IACtD,yBAAyB,EAAE,MAAM,MAAM,EAAE,CAAC;IAC1C,0BAA0B,EAAE,MAAM,MAAM,EAAE,CAAC;IAE3C;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,gCAAgC,CAAC;IAGrD,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/D,oBAAoB,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAClE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,mBAAmB,EAAE,kCAAkC,CAAC;CACzD;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAqE,CAAC;AAEjK;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,6BAA6B,CAqO5E,CAAC"}

package/dist/esm/core/resources/ResourceRegistryContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistryContext.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,qBAAqB,EAErB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAc,EAAE,aAAa,EAAa,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAQlG,OAAO,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACnI,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAqF1K;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2D,aAAa,CAA0C,SAAS,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE;IACrH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IACzE,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,uFAAuF;IACvF,uCAAuC;IACvC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,wBAAwB,EAAE,CAAC;IAE7E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,QAAQ,CAAC,sBAA6B,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnG,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EACnC,aAAsC,EACtC,UAA0E,EAC1E,OAAwB,EACJ,EAAE;QACtB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,aAAa,KAAK,QAAQ;YACxD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,SAAS;YACjC,CAAC,CAAC,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM;YACxF,CAAC,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAEpI,IAAI,iBAAiB,EAAE,CAAC;YACtB,8BAA8B;YAC9B,OAAO,mBAAmB,CAAC,sBAAsB,CAC/C,gBAAgB,EAChB,UAA0C,EAC1C,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,OAAO,mBAAmB,CAAC,WAAW,CACpC,gBAAgB,EAChB,UAA6C,EAC7C,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EACH,MAA8F,EAC5E,EAAE;QACpB,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,QAAQ;YAC3B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAC3C,SAAiE,EACjE,EAAE;QACF,OAAO,8BAA8B,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAW,EAAE;QAChE,OAAO,YAAY,IAAI,QAAQ,CAAC,sBAAsB,CAAC;IACzD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAgD,EAAE;QAClH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAA8B,EAAE;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,yBAAyB,GAAG,WAAW,CAAC,GAAa,EAAE;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,0BAA0B,GAAG,WAAW,CAAC,GAAa,EAAE;QAC5D,OAAO,mBAAmB,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACrC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;OAIG;IACH,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,OAA4B,EAAQ,EAAE;QAChF,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,OAAiC,EAAQ,EAAE;QACnF,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,qBAAqB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QACpE,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;;;;OAOG;IACH,MAAM,YAAY,GAAG,WAAW,CAC9B,GAAqC,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAC1E,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,MAAM,KAAK,GAAgC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,QAAQ;QACR,QAAQ;QAER,wBAAwB;QACxB,WAAW;QAEX,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QAExB,UAAU;QACV,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QAEZ,OAAO;QACP,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,EAAE;QACF,QAAQ;QACR,WAAW;QACX,wBAAwB;QACxB,wBAAwB;QACxB,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QACZ,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,CAAC;IAEH,OAAO,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoC,CAAC;AACvG,CAAC,CAAC","sourcesContent":["import type { ResourceReadCacheFrontendService } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\nimport {\n  CoreResourceOperation,\n  ResourceConfiguration_OperationPath,\n  ResourcesConfig_OperationPathUtils,\n  validateRequiredForeignKeyFillability,\n  ForeignKeyFillabilityViolationSeverity,\n} from '@wildo-ai/saas-models';\n\nimport React, { createContext, ReactNode, useCallback, useEffect, useMemo } from 'react';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport {\n  ResourceOperationCallParameters,\n  ResourceSearchCallParameters\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-resources.frontend.service';\nimport { RequestOptions, TokenRenewalHandler, StepUpAuthHandler } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { ResourcesRepositoryFrontendService } from './resources-repository.frontend.service';\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { resolveEffectiveCoreOperationFromOperation } from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\n\n/**\n * Resource Registry Context\n * Manages resource configurations and operations\n *\n * ARCHITECTURE NOTE (Scopes):\n * - The base provider is `ResourceRegistryProvider`, which exposes `doOperation()` and the registry.\n * - The app can optionally wrap it with `ScopedResourceRegistryProvider` (in `core/resources/ScopedResourceRegistryProvider.tsx`).\n *   That wrapper **overrides `doOperation()`** to automatically inject the current `AppScope` into\n *   `parameters.contextualParameters` for nested callers (strictly relevant-only).\n * - This means `useResourceRegistry().doOperation(...)` may be the base implementation OR a scoped override,\n *   depending on provider hierarchy.\n */\n\nexport type OperationPathKey = string;\nexport type OperationPathIdentifier = ResourceConfiguration_OperationPath<any, any> | OperationPathKey;\n\nexport interface ResourceRegistryContextType {\n  // State\n  registry: FrontendResourcesRegistry;\n\n  // Main execution method\n  /**\n   * Execute a resource operation (API_CALL or SEARCH).\n   *\n   * IMPORTANT:\n   * This function can be transparently overridden by a nested provider (see note above),\n   * so callers usually should NOT manually inject global scope/context unless they are intentionally\n   * overriding/adding to the contextual parameters for a specific call.\n   *\n   * Merge semantics (when scoped):\n   * - scoped provider injects relevant AppScope fields\n   * - explicit `parameters.contextualParameters` passed by the caller override injected values\n   */\n  doOperation: <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ) => Promise<TResponse>;\n\n  // EnabledCondition helpers\n  /**\n   * Evaluate `operation.enabledCondition()` with the current registry + doOperation.\n   * This is used by UI to decide whether an operation should be shown/enabled.\n   */\n  evaluateOperationEnabled: <TMainSchema = any>(\n    params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n  ) => Promise<boolean>;\n\n  /**\n   * Static context-needs extraction for an operation (enabledCondition + prefix ops).\n   */\n  getOperationContextNeeds: (\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => { needsObjectContext: boolean; needsUserContext: boolean };\n\n  // Helpers\n  hasResource: (resourceName: string) => boolean;\n  getResourceConfiguration: (resourceName: string) => AnyFrontendResourceConfiguration | undefined;\n  getResourcesRegistry: () => FrontendResourcesRegistry;\n  getAvailableResourceTypes: () => string[];\n  getAvailableOperationPaths: () => string[];\n\n  /**\n   * The engine-wide resource READ cache.\n   *\n   * Exposed so the WebSocket layer can install its coverage authority and invalidate through it.\n   * The CACHE is exposed rather than the HTTP client that owns it: a consumer of this context has no\n   * business reaching the transport, and narrowing the surface keeps it that way.\n   */\n  getReadCache: () => ResourceReadCacheFrontendService;\n  \n  // Auth token management\n  setAuthToken: (token: string | null) => void;\n  setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;\n  setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;\n  setConsumableToken: (token: string | null) => void;\n}\n\nexport interface ResourceRegistryProviderProps {\n  children: ReactNode;\n  resourcesRepository: ResourcesRepositoryFrontendService;\n}\n\n/**\n * Resource Registry Context\n * Exported for use in separate hook file (Fast Refresh compatibility)\n * @internal - Use useResourceRegistry() hook instead of accessing this directly\n */\nexport const ResourceRegistryContext: React.Context<ResourceRegistryContextType | undefined> = createContext<ResourceRegistryContextType | undefined>(undefined);\n\n/**\n * ResourceRegistryProvider - Simplified version without location dependency\n * isActive computation is now handled by NavigationProvider which is more appropriate\n */\nexport const ResourceRegistryProvider: React.FC<ResourceRegistryProviderProps> = ({ children, resourcesRepository }) => {\n  // Get the registry and resources HTTP client from the repository service\n  const registry = resourcesRepository.getResourcesRegistry();\n  const resourcesHttpClient = resourcesRepository.getResourcesHttpClient();\n  // The base application HTTP client (exposed app-wide as `useApplication().httpClient`)\n  // is a SEPARATE instance from the resources client above. Resource-integrated file\n  // operations (`FormFieldFile` upload / metadata / delete) run through it, so it must\n  // receive the SAME auth token / renewal handler / step-up handler / consumable token\n  // that the resources client gets — otherwise those file requests go out unauthenticated\n  // (401). File upload was the first authenticated consumer of this base client, so this\n  // wiring gap was previously invisible.\n  const applicationHttpClient = resourcesRepository.getApplicationHttpClient();\n\n  // Dev-only mirror of the backend startup guardrail: surface required-FK\n  // fillability violations in the browser console so a frontend-focused dev sees\n  // them where the create form actually lives. The backend is the AUTHORITATIVE\n  // gate (it hard-fails on FAIL severity), so here we only warn — never throw,\n  // and always fail-open so a validator edge case can't affect app load.\n  useEffect(() => {\n    if (!envLoader.isDevelopment()) {\n      return;\n    }\n    try {\n      const violations = validateRequiredForeignKeyFillability(registry.resourceConfigurations as any);\n      for (const violation of violations) {\n        const label = violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL ? 'FAIL' : 'WARN';\n        // eslint-disable-next-line no-console\n        console.warn(`[required-fk-fillability:${label}] ${violation.kind}: ${violation.message}`);\n      }\n    } catch {\n      // Fail-open — never let the guardrail affect app load.\n    }\n  }, [registry]);\n\n  /**\n   * Main operation execution method - handles both regular and search operations\n   */\n  const doOperation = useCallback(async <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ): Promise<TResponse> => {\n    // Convert OperationPath object to string key if needed\n    const operationPathKey = typeof operationPath === 'string' \n      ? operationPath \n      : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n\n    const operation = resourcesHttpClient.getOperationDetails(operationPathKey);\n    const isSearchOperation = operation\n      ? resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.SEARCH\n      : ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey).operationIdentifier === CoreResourceOperation.SEARCH;\n\n    if (isSearchOperation) {\n      // Call search-specific method\n      return resourcesHttpClient.executeSearchOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceSearchCallParameters,\n        options\n      );\n    } else {\n      // Call regular operation method\n      return resourcesHttpClient.doOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceOperationCallParameters,\n        options\n      );\n    }\n  }, [resourcesHttpClient]);\n\n  /**\n   * Evaluate if an operation is enabled (enabledCondition).\n   * Centralized here so all consumers automatically benefit from any doOperation overrides\n   * (e.g. ScopedResourceRegistryProvider injecting AppScope).\n   */\n  const evaluateOperationEnabled = useCallback(\n    async <TMainSchema = any>(\n      params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n    ): Promise<boolean> => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: registry,\n        doOperation,\n      });\n    },\n    [registry, doOperation]\n  );\n\n  const getOperationContextNeeds = useCallback((\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => {\n    return OperationEnabledConditionUtils.getOperationContextNeeds(operation);\n  }, []);\n\n  /**\n   * Check if resource is available\n   */\n  const hasResource = useCallback((resourceName: string): boolean => {\n    return resourceName in registry.resourceConfigurations;\n  }, [registry]);\n\n  /**\n   * Get resource configuration\n   */\n  const getResourceConfiguration = useCallback((resourceName: string): AnyFrontendResourceConfiguration | undefined => {\n    return registry.resourceConfigurations[resourceName];\n  }, [registry]);\n\n  /**\n   * Get the full resources registry\n   */\n  const getResourcesRegistry = useCallback((): FrontendResourcesRegistry => {\n    return registry;\n  }, [registry]);\n\n  /**\n   * Get available resource types\n   */\n  const getAvailableResourceTypes = useCallback((): string[] => {\n    return Object.keys(registry.resourceConfigurations);\n  }, [registry]);\n\n  /**\n   * Get available operation paths\n   */\n  const getAvailableOperationPaths = useCallback((): string[] => {\n    return resourcesHttpClient.getAvailableOperationPaths();\n  }, [resourcesHttpClient]);\n  \n  /**\n   * Set authentication token for resource operations\n   */\n  const setAuthToken = useCallback((token: string | null): void => {\n    if (token) {\n      resourcesHttpClient.setAuthToken(token);\n      applicationHttpClient.setAuthToken(token);\n    } else {\n      resourcesHttpClient.clearAuthToken();\n      applicationHttpClient.clearAuthToken();\n    }\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /**\n   * Set token renewal handler for resource operations.\n   * Called by AuthSessionContext to enable automatic token refresh on 401s\n   * from the resources HTTP client (not just the manual calls client).\n   */\n  const setTokenRenewalHandler = useCallback((handler: TokenRenewalHandler): void => {\n    resourcesHttpClient.setTokenRenewalHandler(handler);\n    applicationHttpClient.setTokenRenewalHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setStepUpAuthHandler = useCallback((handler: StepUpAuthHandler | null): void => {\n    resourcesHttpClient.setStepUpAuthHandler(handler);\n    applicationHttpClient.setStepUpAuthHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setConsumableToken = useCallback((token: string | null): void => {\n    resourcesHttpClient.setConsumableToken(token);\n    applicationHttpClient.setConsumableToken(token);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /*\n   * Stable across renders, like every other member below.\n   *\n   * It used to be an inline arrow in the value object, which made it a NEW identity every render.\n   * `ResourceReadCacheBridge` depended on it in an effect whose job includes installing the cache's\n   * coverage authority — and installing an authority CLEARS the cache — so the read cache was emptied\n   * on essentially every render and could never do its job (issue #248).\n   */\n  const getReadCache = useCallback(\n    (): ResourceReadCacheFrontendService => resourcesHttpClient.getReadCache(),\n    [resourcesHttpClient],\n  );\n\n  /*\n   * MEMOIZED, and that is load-bearing rather than tidy.\n   *\n   * This value reaches 75 consumer files through `useResourceRegistry()`. Rebuilt every render, it\n   * re-rendered all of them and handed each a NEW identity for every function on it — so any consumer\n   * placing one in a dependency array got an effect that fired on every render. That is not\n   * hypothetical: it emptied the resource read cache continuously until #248 was fixed, and it\n   * defeated `ScopedResourceRegistryProvider`'s own `useMemo`, which depends on this object as\n   * `base`.\n   *\n   * Every member is itself a `useCallback` over the repository's stable service instances, so this\n   * memo only changes when the registry or a client actually does.\n   */\n  const value: ResourceRegistryContextType = useMemo(() => ({\n    // State\n    registry,\n\n    // Main execution method\n    doOperation,\n\n    // EnabledCondition helpers\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n\n    // Helpers\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n\n    // Auth\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  }), [\n    registry,\n    doOperation,\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  ]);\n\n  return <ResourceRegistryContext.Provider value={value}>{children}</ResourceRegistryContext.Provider>;\n};\n\n// useResourceRegistry hook is now in separate file: ./useResourceRegistry.ts\n// This separation is required for React Fast Refresh compatibility\n"]}
+{"version":3,"file":"ResourceRegistryContext.js","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,qBAAqB,EAErB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAc,EAAE,aAAa,EAAa,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAQlG,OAAO,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACnI,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAqF1K;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2D,aAAa,CAA0C,SAAS,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE;IACrH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IACzE,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,uFAAuF;IACvF,uCAAuC;IACvC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,wBAAwB,EAAE,CAAC;IAE7E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,QAAQ,CAAC,sBAA6B,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnG,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EACnC,aAAsC,EACtC,UAA0E,EAC1E,OAAwB,EACJ,EAAE;QACtB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,aAAa,KAAK,QAAQ;YACxD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,SAAS;YACjC,CAAC,CAAC,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM;YACxF,CAAC,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAEpI,IAAI,iBAAiB,EAAE,CAAC;YACtB,8BAA8B;YAC9B,OAAO,mBAAmB,CAAC,sBAAsB,CAC/C,gBAAgB,EAChB,UAA0C,EAC1C,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,OAAO,mBAAmB,CAAC,WAAW,CACpC,gBAAgB,EAChB,UAA6C,EAC7C,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EACH,MAA8F,EAC5E,EAAE;QACpB,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,QAAQ;YAC3B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAC3C,SAAiE,EACjE,EAAE;QACF,OAAO,8BAA8B,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAW,EAAE;QAChE,OAAO,YAAY,IAAI,QAAQ,CAAC,sBAAsB,CAAC;IACzD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAgD,EAAE;QAClH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAA8B,EAAE;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,yBAAyB,GAAG,WAAW,CAAC,GAAa,EAAE;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,0BAA0B,GAAG,WAAW,CAAC,GAAa,EAAE;QAC5D,OAAO,mBAAmB,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACrC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;OAIG;IACH,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,OAA4B,EAAQ,EAAE;QAChF,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,OAAiC,EAAQ,EAAE;QACnF,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,qBAAqB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QACpE,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;;;;OAOG;IACH,MAAM,YAAY,GAAG,WAAW,CAC9B,GAAqC,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAC1E,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,MAAM,KAAK,GAAgC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,QAAQ;QACR,QAAQ;QAER,wBAAwB;QACxB,WAAW;QAEX,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QAExB,UAAU;QACV,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QAEZ,OAAO;QACP,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,EAAE;QACF,QAAQ;QACR,WAAW;QACX,wBAAwB;QACxB,wBAAwB;QACxB,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QACZ,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,CAAC;IAEH,OAAO,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoC,CAAC;AACvG,CAAC,CAAC","sourcesContent":["import type { ResourceReadCacheFrontendService } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\nimport {\n  CoreResourceOperation,\n  ResourceConfiguration_OperationPath,\n  ResourcesConfig_OperationPathUtils,\n  validateRequiredForeignKeyFillability,\n  ForeignKeyFillabilityViolationSeverity,\n} from '@wildo-ai/saas-models';\n\nimport React, { createContext, ReactNode, useCallback, useEffect, useMemo } from 'react';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport {\n  ResourceOperationCallParameters,\n  ResourceSearchCallParameters\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-resources.frontend.service';\nimport { RequestOptions, TokenRenewalHandler, StepUpAuthHandler } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { ResourcesRepositoryFrontendService } from './resources-repository.frontend.service';\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { resolveEffectiveCoreOperationFromOperation } from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\n\n/**\n * Resource Registry Context\n * Manages resource configurations and operations\n *\n * ARCHITECTURE NOTE (Scopes):\n * - The base provider is `ResourceRegistryProvider`, which exposes `doOperation()` and the registry.\n * - The app can optionally wrap it with `ScopedResourceRegistryProvider` (in `core/resources/ScopedResourceRegistryProvider.tsx`).\n *   That wrapper **overrides `doOperation()`** to automatically inject the current `AppScope` into\n *   `parameters.contextualParameters` for nested callers (strictly relevant-only).\n * - This means `useResourceRegistry().doOperation(...)` may be the base implementation OR a scoped override,\n *   depending on provider hierarchy.\n */\n\nexport type OperationPathKey = string;\nexport type OperationPathIdentifier = ResourceConfiguration_OperationPath<any, any> | OperationPathKey;\n\nexport interface ResourceRegistryContextType {\n  // State\n  registry: FrontendResourcesRegistry;\n\n  // Main execution method\n  /**\n   * Execute a resource operation (API_CALL or SEARCH).\n   *\n   * IMPORTANT:\n   * This function can be transparently overridden by a nested provider (see note above),\n   * so callers usually should NOT manually inject global scope/context unless they are intentionally\n   * overriding/adding to the contextual parameters for a specific call.\n   *\n   * Merge semantics (when scoped):\n   * - scoped provider injects relevant AppScope fields\n   * - explicit `parameters.contextualParameters` passed by the caller override injected values\n   */\n  doOperation: <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ) => Promise<TResponse>;\n\n  // EnabledCondition helpers\n  /**\n   * Evaluate `operation.enabledCondition()` with the current registry + doOperation.\n   * This is used by UI to decide whether an operation should be shown/enabled.\n   */\n  evaluateOperationEnabled: <TMainSchema = any>(\n    params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n  ) => Promise<boolean>;\n\n  /**\n   * Static context-needs extraction for an operation (enabledCondition + prefix ops).\n   */\n  getOperationContextNeeds: (\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => { needsObjectContext: boolean; needsUserContext: boolean };\n\n  // Helpers\n  hasResource: (resourceName: string) => boolean;\n  getResourceConfiguration: (resourceName: string) => AnyFrontendResourceConfiguration | undefined;\n  getResourcesRegistry: () => FrontendResourcesRegistry;\n  getAvailableResourceTypes: () => string[];\n  getAvailableOperationPaths: () => string[];\n\n  /**\n   * The engine-wide resource READ cache.\n   *\n   * Exposed so the WebSocket layer can install its coverage authority and invalidate through it.\n   * The CACHE is exposed rather than the HTTP client that owns it: a consumer of this context has no\n   * business reaching the transport, and narrowing the surface keeps it that way.\n   */\n  getReadCache: () => ResourceReadCacheFrontendService;\n  \n  // Auth token management\n  setAuthToken: (token: string | null) => void;\n  setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;\n  setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;\n  setConsumableToken: (token: string | null) => void;\n}\n\nexport interface ResourceRegistryProviderProps {\n  children: ReactNode;\n  resourcesRepository: ResourcesRepositoryFrontendService;\n}\n\n/**\n * Resource Registry Context\n * Exported for use in separate hook file (Fast Refresh compatibility)\n * @internal - Use useResourceRegistry() hook instead of accessing this directly\n */\nexport const ResourceRegistryContext: React.Context<ResourceRegistryContextType | undefined> = createContext<ResourceRegistryContextType | undefined>(undefined);\n\n/**\n * ResourceRegistryProvider - Simplified version without location dependency\n * isActive computation is now handled by NavigationProvider which is more appropriate\n */\nexport const ResourceRegistryProvider: React.FC<ResourceRegistryProviderProps> = ({ children, resourcesRepository }) => {\n  // Get the registry and resources HTTP client from the repository service\n  const registry = resourcesRepository.getResourcesRegistry();\n  const resourcesHttpClient = resourcesRepository.getResourcesHttpClient();\n  // The base application HTTP client (exposed app-wide as `useApplication().httpClient`)\n  // is a SEPARATE instance from the resources client above. Resource-integrated file\n  // operations (`FormFieldFile` upload / metadata / delete) run through it, so it must\n  // receive the SAME auth token / renewal handler / step-up handler / consumable token\n  // that the resources client gets — otherwise those file requests go out unauthenticated\n  // (401). File upload was the first authenticated consumer of this base client, so this\n  // wiring gap was previously invisible.\n  const applicationHttpClient = resourcesRepository.getApplicationHttpClient();\n\n  // Dev-only mirror of the backend startup guardrail: surface required-FK\n  // fillability violations in the browser console so a frontend-focused dev sees\n  // them where the create form actually lives. The backend is the AUTHORITATIVE\n  // gate (it hard-fails on FAIL severity), so here we only warn — never throw,\n  // and always fail-open so a validator edge case can't affect app load.\n  useEffect(() => {\n    if (!envLoader.isDevelopment()) {\n      return;\n    }\n    try {\n      const violations = validateRequiredForeignKeyFillability(registry.resourceConfigurations as any);\n      for (const violation of violations) {\n        const label = violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL ? 'FAIL' : 'WARN';\n        // eslint-disable-next-line no-console\n        console.warn(`[required-fk-fillability:${label}] ${violation.kind}: ${violation.message}`);\n      }\n    } catch {\n      // Fail-open — never let the guardrail affect app load.\n    }\n  }, [registry]);\n\n  /**\n   * Main operation execution method - handles both regular and search operations\n   */\n  const doOperation = useCallback(async <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ): Promise<TResponse> => {\n    // Convert OperationPath object to string key if needed\n    const operationPathKey = typeof operationPath === 'string' \n      ? operationPath \n      : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n\n    const operation = resourcesHttpClient.getOperationDetails(operationPathKey);\n    const isSearchOperation = operation\n      ? resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.SEARCH\n      : ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey).operationIdentifier === CoreResourceOperation.SEARCH;\n\n    if (isSearchOperation) {\n      // Call search-specific method\n      return resourcesHttpClient.executeSearchOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceSearchCallParameters,\n        options\n      );\n    } else {\n      // Call regular operation method\n      return resourcesHttpClient.doOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceOperationCallParameters,\n        options\n      );\n    }\n  }, [resourcesHttpClient]);\n\n  /**\n   * Evaluate if an operation is enabled (enabledCondition).\n   * Centralized here so all consumers automatically benefit from any doOperation overrides\n   * (e.g. ScopedResourceRegistryProvider injecting AppScope).\n   */\n  const evaluateOperationEnabled = useCallback(\n    async <TMainSchema = any>(\n      params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n    ): Promise<boolean> => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: registry,\n        doOperation,\n      });\n    },\n    [registry, doOperation]\n  );\n\n  const getOperationContextNeeds = useCallback((\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => {\n    return OperationEnabledConditionUtils.getOperationContextNeeds(operation);\n  }, []);\n\n  /**\n   * Check if resource is available\n   */\n  const hasResource = useCallback((resourceName: string): boolean => {\n    return resourceName in registry.resourceConfigurations;\n  }, [registry]);\n\n  /**\n   * Get resource configuration\n   */\n  const getResourceConfiguration = useCallback((resourceName: string): AnyFrontendResourceConfiguration | undefined => {\n    return registry.resourceConfigurations[resourceName];\n  }, [registry]);\n\n  /**\n   * Get the full resources registry\n   */\n  const getResourcesRegistry = useCallback((): FrontendResourcesRegistry => {\n    return registry;\n  }, [registry]);\n\n  /**\n   * Get available resource types\n   */\n  const getAvailableResourceTypes = useCallback((): string[] => {\n    return Object.keys(registry.resourceConfigurations);\n  }, [registry]);\n\n  /**\n   * Get available operation paths\n   */\n  const getAvailableOperationPaths = useCallback((): string[] => {\n    return resourcesHttpClient.getAvailableOperationPaths();\n  }, [resourcesHttpClient]);\n  \n  /**\n   * Set authentication token for resource operations\n   */\n  const setAuthToken = useCallback((token: string | null): void => {\n    if (token) {\n      resourcesHttpClient.setAuthToken(token);\n      applicationHttpClient.setAuthToken(token);\n    } else {\n      resourcesHttpClient.clearAuthToken();\n      applicationHttpClient.clearAuthToken();\n    }\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /**\n   * Set token renewal handler for resource operations.\n   * Called by AuthSessionContext to enable automatic token refresh on 401s\n   * from the resources HTTP client (not just the manual calls client).\n   */\n  const setTokenRenewalHandler = useCallback((handler: TokenRenewalHandler): void => {\n    resourcesHttpClient.setTokenRenewalHandler(handler);\n    applicationHttpClient.setTokenRenewalHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setStepUpAuthHandler = useCallback((handler: StepUpAuthHandler | null): void => {\n    resourcesHttpClient.setStepUpAuthHandler(handler);\n    applicationHttpClient.setStepUpAuthHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setConsumableToken = useCallback((token: string | null): void => {\n    resourcesHttpClient.setConsumableToken(token);\n    applicationHttpClient.setConsumableToken(token);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /*\n   * Stable across renders, like every other member below.\n   *\n   * It used to be an inline arrow in the value object, which made it a NEW identity every render.\n   * `ResourceReadCacheBridge` depended on it in an effect whose job includes installing the cache's\n   * coverage authority — and installing an authority CLEARS the cache — so the read cache was emptied\n   * on essentially every render and could never do its job (issue #248).\n   */\n  const getReadCache = useCallback(\n    (): ResourceReadCacheFrontendService => resourcesHttpClient.getReadCache(),\n    [resourcesHttpClient],\n  );\n\n  /*\n   * MEMOIZED, and that is load-bearing rather than tidy.\n   *\n   * This value reaches 75 consumer files through `useResourceRegistry()`. Rebuilt every render, it\n   * re-rendered all of them and handed each a NEW identity for every function on it — so any consumer\n   * placing one in a dependency array got an effect that fired on every render. That is not\n   * hypothetical: it emptied the resource read cache continuously until #248 was fixed, and it\n   * defeated `ScopedResourceRegistryProvider`'s own `useMemo`, which depends on this object as\n   * `base`.\n   *\n   * Every member is itself a `useCallback` over the repository's stable service instances, so this\n   * memo only changes when the registry or a client actually does.\n   */\n  const value: ResourceRegistryContextType = useMemo(() => ({\n    // State\n    registry,\n\n    // Main execution method\n    doOperation,\n\n    // EnabledCondition helpers\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n\n    // Helpers\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n\n    // Auth\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  }), [\n    registry,\n    doOperation,\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  ]);\n\n  return <ResourceRegistryContext.Provider value={value}>{children}</ResourceRegistryContext.Provider>;\n};\n\n// useResourceRegistry hook is now in separate file: ./useResourceRegistry.ts\n// This separation is required for React Fast Refresh compatibility\n"]}

package/dist/esm/core/resources/ScopedResourceRegistryProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ScopedResourceRegistryProvider.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAwB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAYpE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,SAAS,CAAC;CACrB;AA4CD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,QAAQ,EAAE,EAAE,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAgFpH"}
+{"version":3,"file":"ScopedResourceRegistryProvider.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAwB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAYpE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,SAAS,CAAC;CACrB;AA4CD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,QAAQ,EAAE,EAAE,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAgFpH"}

package/dist/esm/core/resources/ScopedResourceRegistryProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ScopedResourceRegistryProvider.js","sourceRoot":"","sources":["../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAC;AACpE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAC1K,OAAO,EAAE,uBAAuB,EAAoC,MAAM,2BAA2B,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAM7E,SAAS,kBAAkB,CAAC,aAAqE;IAC/F,OAAO,OAAO,aAAa,KAAK,QAAQ;QACtC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAiD,EACjD,aAA4D;IAE5D,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACzF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,kCAAkC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAE3E,IAAI,MAAM,CAAC,mBAAmB,KAAK,aAAa,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAEnE,IAAI,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAAE,OAAO,KAAK,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,GAAG,aAAa,CAAC,UAAU,CAAC;YACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3C,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;QAED,IACE,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ;eACzD,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,sBAAsB,EAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;YACjD,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,KAAK,IAAI,CAAC;YAC1D,OAAO,QAAQ,KAAK,UAAU,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,IAAI,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAAE,QAAQ,EAAuC;IAC9F,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;QAC3C,gFAAgF;QAChF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,aAAoB,CAAC,CAAC;QAElE,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,UAAU,GAAyD,IAAI,CAAC;QAC5E,IAAI,CAAC;YACH,UAAU,GAAG,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzF,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,mBAAmB,GAAsC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACpG,MAAM,4BAA4B,GAC/B,UAAkB,EAAE,oBAAqE,CAAC;QAC7F,MAAM,0BAA0B,GAAG;YACjC,GAAG,mBAAmB;YACtB,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC;SACxC,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,GAAI,UAAkB;YACtB,oBAAoB,EAAE,0BAA0B;SACjD,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,IAAI,CAAC,QAAQ;YAChC,WAAW;SACkC,CAAC,CAAC;IACnD,CAAC,EACD,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC7B,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAA8B,GAAG,EAAE;QACtD,OAAO;YACL,GAAG,IAAI;YACP,WAAW;YACX,wBAAwB;SACzB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElD,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC3C,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC","sourcesContent":["import React, { useCallback, useMemo, type ReactNode } from 'react';\nimport {\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n  type ResourceConfiguration_Operation,\n  type ResourceConfiguration_OperationPath,\n} from '@wildo-ai/saas-models';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\nimport { ResourceRegistryContext, type ResourceRegistryContextType } from './ResourceRegistryContext';\nimport { useResourceRegistry } from './useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\nexport interface ScopedResourceRegistryProviderProps {\n  children: ReactNode;\n}\n\nfunction toOperationPathKey(operationPath: ResourceConfiguration_OperationPath<any, any> | string): string {\n  return typeof operationPath === 'string'\n    ? operationPath\n    : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n}\n\nfunction findOperationInRegistry(\n  registry: ResourceRegistryContextType['registry'],\n  operationPath: ResourceConfiguration_OperationPath<any, any>\n): ResourceConfiguration_Operation<any, any, any> | null {\n  const resourceConfig = registry.resourceConfigurations[operationPath.resourceIdentifier];\n  if (!resourceConfig) {\n    return null;\n  }\n\n  return resourceConfig.operations.find((op: any) => {\n    const opPath = ResourcesConfig_OperationPathUtils.extractOperationPath(op);\n\n    if (opPath.operationIdentifier !== operationPath.operationIdentifier) return false;\n    if (opPath.variantType !== operationPath.variantType) return false;\n\n    if (operationPath.isOperationDefault) {\n      if (!opPath.isOperationDefault) return false;\n    } else {\n      const expectedVariantKey = operationPath.variantKey;\n      const actualVariantKey = opPath.variantKey;\n      if ((actualVariantKey ?? undefined) !== (expectedVariantKey ?? undefined)) return false;\n    }\n\n    if (\n      opPath.variantType === ResourceOperationVariantType.API_CALL\n      || opPath.variantType === ResourceOperationVariantType.API_CALL_WITH_CALLBACK\n    ) {\n      const opIsBulk = opPath.isBulkOperation === true;\n      const pathIsBulk = operationPath.isBulkOperation === true;\n      return opIsBulk === pathIsBulk;\n    }\n\n    return true;\n  }) || null;\n}\n\n/**\n * Nested provider that re-exposes ResourceRegistryContext with a scoped `doOperation()`.\n *\n * This is intentionally placed INSIDE `AppScopeProvider` so it can inject the current scope\n * into all resource calls, while keeping the root `ResourceRegistryProvider` unchanged.\n */\nexport function ScopedResourceRegistryProvider({ children }: ScopedResourceRegistryProviderProps): React.ReactElement {\n  const base = useResourceRegistry();\n  const appScope = useAppScopeSafe();\n\n  const doOperation = useCallback<ResourceRegistryContextType['doOperation']>(\n    async (operationPath, parameters, options) => {\n      // If AppScopeProvider isn't mounted yet, behave exactly like the base registry.\n      if (!appScope) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const operationPathKey = toOperationPathKey(operationPath as any);\n\n      // Parse target operation to decide which contextual params are relevant.\n      // If parsing fails for any reason, fall back to base behavior.\n      let parsedPath: ResourceConfiguration_OperationPath<any, any> | null = null;\n      try {\n        parsedPath = ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey);\n      } catch {\n        parsedPath = null;\n      }\n\n      const operation = parsedPath ? findOperationInRegistry(base.registry, parsedPath) : null;\n\n      // If operation was not found in registry, fall back to unscoped behavior.\n      // This prevents fragile optional-chaining on initiatorInfos below.\n      if (!operation) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const injectedScopeParams: Record<string, string | string[]> = appScope.buildContextualParameters();\n      const existingContextualParameters =\n        (parameters as any)?.contextualParameters as Record<string, string | string[]> | undefined;\n      const mergedContextualParameters = {\n        ...injectedScopeParams,\n        ...(existingContextualParameters || {}),\n      };\n\n      const mergedParameters = {\n        ...(parameters as any),\n        contextualParameters: mergedContextualParameters,\n      };\n\n      return base.doOperation(operationPath, mergedParameters, options);\n    },\n    [appScope, base]\n  );\n\n  /**\n   * IMPORTANT:\n   * `ResourceRegistryProvider`'s `evaluateOperationEnabled` closes over its own `doOperation`.\n   * If we only override `doOperation` in context, enabledCondition evaluation would still run with\n   * the unscoped doOperation (missing AppScope injection).\n   *\n   * So we override `evaluateOperationEnabled` as well, wiring it to the scoped `doOperation`.\n   */\n  const evaluateOperationEnabled = useCallback<ResourceRegistryContextType['evaluateOperationEnabled']>(\n    async (params) => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: base.registry,\n        doOperation,\n      } satisfies EvaluateEnabledConditionParams<any>);\n    },\n    [base.registry, doOperation]\n  );\n\n  const value = useMemo<ResourceRegistryContextType>(() => {\n    return {\n      ...base,\n      doOperation,\n      evaluateOperationEnabled,\n    };\n  }, [base, doOperation, evaluateOperationEnabled]);\n\n  return (\n    <ResourceRegistryContext.Provider value={value}>\n      {children}\n    </ResourceRegistryContext.Provider>\n  );\n}\n\n"]}
+{"version":3,"file":"ScopedResourceRegistryProvider.js","sourceRoot":"","sources":["../../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAC;AACpE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAC1K,OAAO,EAAE,uBAAuB,EAAoC,MAAM,2BAA2B,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAM7E,SAAS,kBAAkB,CAAC,aAAqE;IAC/F,OAAO,OAAO,aAAa,KAAK,QAAQ;QACtC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAiD,EACjD,aAA4D;IAE5D,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACzF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,kCAAkC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAE3E,IAAI,MAAM,CAAC,mBAAmB,KAAK,aAAa,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAEnE,IAAI,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAAE,OAAO,KAAK,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,GAAG,aAAa,CAAC,UAAU,CAAC;YACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3C,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;QAED,IACE,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ;eACzD,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,sBAAsB,EAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;YACjD,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,KAAK,IAAI,CAAC;YAC1D,OAAO,QAAQ,KAAK,UAAU,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,IAAI,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAAE,QAAQ,EAAuC;IAC9F,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;QAC3C,gFAAgF;QAChF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,aAAoB,CAAC,CAAC;QAElE,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,UAAU,GAAyD,IAAI,CAAC;QAC5E,IAAI,CAAC;YACH,UAAU,GAAG,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzF,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,mBAAmB,GAAsC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACpG,MAAM,4BAA4B,GAC/B,UAAkB,EAAE,oBAAqE,CAAC;QAC7F,MAAM,0BAA0B,GAAG;YACjC,GAAG,mBAAmB;YACtB,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC;SACxC,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,GAAI,UAAkB;YACtB,oBAAoB,EAAE,0BAA0B;SACjD,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,IAAI,CAAC,QAAQ;YAChC,WAAW;SACkC,CAAC,CAAC;IACnD,CAAC,EACD,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC7B,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAA8B,GAAG,EAAE;QACtD,OAAO;YACL,GAAG,IAAI;YACP,WAAW;YACX,wBAAwB;SACzB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElD,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC3C,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC","sourcesContent":["import React, { useCallback, useMemo, type ReactNode } from 'react';\nimport {\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n  type ResourceConfiguration_Operation,\n  type ResourceConfiguration_OperationPath,\n} from '@wildo-ai/saas-models';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\nimport { ResourceRegistryContext, type ResourceRegistryContextType } from './ResourceRegistryContext';\nimport { useResourceRegistry } from './useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\nexport interface ScopedResourceRegistryProviderProps {\n  children: ReactNode;\n}\n\nfunction toOperationPathKey(operationPath: ResourceConfiguration_OperationPath<any, any> | string): string {\n  return typeof operationPath === 'string'\n    ? operationPath\n    : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n}\n\nfunction findOperationInRegistry(\n  registry: ResourceRegistryContextType['registry'],\n  operationPath: ResourceConfiguration_OperationPath<any, any>\n): ResourceConfiguration_Operation<any, any, any> | null {\n  const resourceConfig = registry.resourceConfigurations[operationPath.resourceIdentifier];\n  if (!resourceConfig) {\n    return null;\n  }\n\n  return resourceConfig.operations.find((op: any) => {\n    const opPath = ResourcesConfig_OperationPathUtils.extractOperationPath(op);\n\n    if (opPath.operationIdentifier !== operationPath.operationIdentifier) return false;\n    if (opPath.variantType !== operationPath.variantType) return false;\n\n    if (operationPath.isOperationDefault) {\n      if (!opPath.isOperationDefault) return false;\n    } else {\n      const expectedVariantKey = operationPath.variantKey;\n      const actualVariantKey = opPath.variantKey;\n      if ((actualVariantKey ?? undefined) !== (expectedVariantKey ?? undefined)) return false;\n    }\n\n    if (\n      opPath.variantType === ResourceOperationVariantType.API_CALL\n      || opPath.variantType === ResourceOperationVariantType.API_CALL_WITH_CALLBACK\n    ) {\n      const opIsBulk = opPath.isBulkOperation === true;\n      const pathIsBulk = operationPath.isBulkOperation === true;\n      return opIsBulk === pathIsBulk;\n    }\n\n    return true;\n  }) || null;\n}\n\n/**\n * Nested provider that re-exposes ResourceRegistryContext with a scoped `doOperation()`.\n *\n * This is intentionally placed INSIDE `AppScopeProvider` so it can inject the current scope\n * into all resource calls, while keeping the root `ResourceRegistryProvider` unchanged.\n */\nexport function ScopedResourceRegistryProvider({ children }: ScopedResourceRegistryProviderProps): React.ReactElement {\n  const base = useResourceRegistry();\n  const appScope = useAppScopeSafe();\n\n  const doOperation = useCallback<ResourceRegistryContextType['doOperation']>(\n    async (operationPath, parameters, options) => {\n      // If AppScopeProvider isn't mounted yet, behave exactly like the base registry.\n      if (!appScope) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const operationPathKey = toOperationPathKey(operationPath as any);\n\n      // Parse target operation to decide which contextual params are relevant.\n      // If parsing fails for any reason, fall back to base behavior.\n      let parsedPath: ResourceConfiguration_OperationPath<any, any> | null = null;\n      try {\n        parsedPath = ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey);\n      } catch {\n        parsedPath = null;\n      }\n\n      const operation = parsedPath ? findOperationInRegistry(base.registry, parsedPath) : null;\n\n      // If operation was not found in registry, fall back to unscoped behavior.\n      // This prevents fragile optional-chaining on initiatorInfos below.\n      if (!operation) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const injectedScopeParams: Record<string, string | string[]> = appScope.buildContextualParameters();\n      const existingContextualParameters =\n        (parameters as any)?.contextualParameters as Record<string, string | string[]> | undefined;\n      const mergedContextualParameters = {\n        ...injectedScopeParams,\n        ...(existingContextualParameters || {}),\n      };\n\n      const mergedParameters = {\n        ...(parameters as any),\n        contextualParameters: mergedContextualParameters,\n      };\n\n      return base.doOperation(operationPath, mergedParameters, options);\n    },\n    [appScope, base]\n  );\n\n  /**\n   * IMPORTANT:\n   * `ResourceRegistryProvider`'s `evaluateOperationEnabled` closes over its own `doOperation`.\n   * If we only override `doOperation` in context, enabledCondition evaluation would still run with\n   * the unscoped doOperation (missing AppScope injection).\n   *\n   * So we override `evaluateOperationEnabled` as well, wiring it to the scoped `doOperation`.\n   */\n  const evaluateOperationEnabled = useCallback<ResourceRegistryContextType['evaluateOperationEnabled']>(\n    async (params) => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: base.registry,\n        doOperation,\n      } satisfies EvaluateEnabledConditionParams<any>);\n    },\n    [base.registry, doOperation]\n  );\n\n  const value = useMemo<ResourceRegistryContextType>(() => {\n    return {\n      ...base,\n      doOperation,\n      evaluateOperationEnabled,\n    };\n  }, [base, doOperation, evaluateOperationEnabled]);\n\n  return (\n    <ResourceRegistryContext.Provider value={value}>\n      {children}\n    </ResourceRegistryContext.Provider>\n  );\n}\n\n"]}

package/dist/esm/core/resources/bulk-failure-grouping.frontend.utils.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Group a bulk run's refusals by REASON (#1461).
+ *
+ * A count tells a person something went wrong; it does not tell them what to do. Twelve rows
+ * refused for one reason are one thing to fix, while twelve ids are twelve lookups — so the reason
+ * is the unit the panel is built from, and the ids sit under it as the secondary detail they are.
+ *
+ * Reasons arrive as the refusal's REFERENCE, because a reference is what a locale turns into words;
+ * the resolver is passed in so this function stays free of i18n and can be tested for what it
+ * actually decides. A reference with no authored words falls back to the reference itself, which is
+ * a missing label looking missing rather than an invented sentence
+ * (`.claude/rules/display-text-comes-from-i18n.md`).
+ */
+import type { BulkJobFailure } from './useBulkJobProgress';
+export interface BulkFailureReasonGroup {
+    /** Stable key for the group — the refusal reference, or a fixed key when the row carried none. */
+    key: string;
+    /** What to show as the reason: resolved words, else the reference, else the unnamed-refusal key. */
+    reason: string;
+    /** The rows refused for this reason, in the order the run met them. */
+    resourceIds: string[];
+}
+/** The group key for a refusal that carried no reference at all — an error the engine could not name. */
+export declare const UNNAMED_BULK_FAILURE_REASON_KEY: "unnamedRefusal";
+export declare function groupBulkFailuresByReason(failures: readonly BulkJobFailure[], resolveReason: (reference: string) => string | undefined): BulkFailureReasonGroup[];
+//# sourceMappingURL=bulk-failure-grouping.frontend.utils.d.ts.map

package/dist/esm/core/resources/bulk-failure-grouping.frontend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-failure-grouping.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/bulk-failure-grouping.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,WAAW,sBAAsB;IACrC,kGAAkG;IAClG,GAAG,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,yGAAyG;AACzG,eAAO,MAAM,+BAA+B,EAAG,gBAAyB,CAAC;AAEzE,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,SAAS,cAAc,EAAE,EACnC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACvD,sBAAsB,EAAE,CAqB1B"}