@wildo-ai/saas-frontend-lib 1.1.3 → 1.1.5

package/dist/esm/core/resources/resource-label-field-paths.frontend.utils.js

@@ -0,0 +1,151 @@
+/**
+ * The label-bearing field paths of a schema — the exact population `useResourceLabels` asks i18n for.
+ *
+ * Extracted from `useResourceLabels` so the question "which keys will this surface look up?" has ONE
+ * answer that a hook and a test can both ask. Before this it was module-private, so any check that
+ * wanted to hold an authored label tree to what a surface renders had to re-derive the walk — and a
+ * re-derived walk is the copy that drifts first (a discriminated union's merged discriminator, the
+ * index-free array-item paths, the depth bound).
+ *
+ * The workbench's aspect-popup label totality check (#638) is the first such consumer: it walks every
+ * family aspect's item schema through THIS function, so a key it reports missing is a key the popup
+ * really asks for, and a key it does not report is one the popup never asks for.
+ */
+import { FieldSchemaType, getArrayItemSchema, getEnumValues, getSchemaType, getUnionObjectMembers, getZodObjectShape, unwrapSchema, } from '@wildo-ai/zod-decorators';
+import { resolveDeclaredSystemEnumName, resolveFieldEnumSchema, synthesizeUnionDiscriminatorEnums } from '@wildo-ai/presets-components-models';
+import { AutomatedLayoutFrontendUtils } from '../../core/automated-layout/automated-layout.frontend.utils.js';
+/** Max object-nesting depth walked when collecting label/enum entries (guards against
+ *  pathological / self-referential schemas while covering real nested settings objects
+ *  like `privacy.consentedPurposes` and `regional.dateFormat`). */
+const MAX_NESTED_FIELD_DEPTH = 4;
+/**
+ * Flatten a resource schema into every label-bearing field path, recursing into nested
+ * OBJECT fields so that fields rendered inside an `<ObjectScope name="privacy">` (which look
+ * their labels/enum-labels up by the dotted `privacy.consentedPurposes` key) resolve the
+ * same way top-level fields do. Without this, nested object fields fell back to no label /
+ * raw enum values. Arrays of scalars are recorded as leaves (their element enum, if any, is
+ * handled by {@link resolveResourceLabelEnumSchema}); arrays of OBJECTS are descended into under
+ * their index-free path.
+ *
+ * Throws only if the underlying shape resolution throws; callers that render treat that as
+ * "no entries yet" (a schema briefly undefined on first mount).
+ */
+export function collectResourceLabelFieldEntries(schema) {
+    const acc = [];
+    collectInto(schema, '', 0, acc);
+    return acc;
+}
+function collectInto(schema, prefix, depth, acc) {
+    let shape;
+    let unionMembers = [];
+    try {
+        /*
+         * A UNION of objects is walked PER MEMBER, merged by field name (the first member owning a key keeps
+         * it), so a member-only field — rendered under a `<DiscriminatorSwitch>`, or as the one member an item
+         * resolved to — still resolves its label. Membership is `getUnionObjectMembers`: a declared
+         * `z.discriminatedUnion`, or a plain `z.union` of objects one key discriminates — every member declares
+         * it as a literal with disjoint values, or omits it while being a `z.strictObject` (at most one member may
+         * omit it, since a strict member rejects the key, its absence places a value exactly). The compliance
+         * programme is that second case: V1 predates `schemaVersion` and omits it; V2 declares `z.literal(2)`.
+         * The display resolves an item's member through the SAME discriminator (`resolveDiscriminatedUnionVariant`),
+         * so the walk collects exactly the fields a rendered member can show.
+         *
+         * The plain-union half is #1022. The walk used to resolve unions only through `getObjectLikeFieldShape`,
+         * which knows DECLARED discriminated unions alone; the compliance programme's `documentationRequirements`
+         * items are `z.union([V1, V2])` keyed on `schemaVersion`, so nothing inside an item — its
+         * `governanceScope.subjectKind`, declaring `GovernedDocumentGovernanceSubjectKind` — had an entry, and
+         * its words could not resolve.
+         *
+         * CONTRACT with the application label deciders: a union `getUnionObjectMembers` rejects yields no shape
+         * here, so this walk collects NOTHING below it and asks for no word there. The labelling planner and the
+         * frontend label introspection mirror that by registering no enum of any shape anywhere in such a
+         * subtree (`insideUnresolvableUnion`) — change one side and the other plans words nobody reads.
+         *
+         * Anything else resolves the way the form/display RENDER path does (`getObjectLikeFieldShape`): a plain
+         * object's shape, or nothing.
+         */
+        unionMembers = getUnionObjectMembers(unwrapSchema(schema));
+        shape = unionMembers.length > 0
+            ? mergeUnionMemberShapes(unionMembers)
+            : AutomatedLayoutFrontendUtils.getObjectLikeFieldShape(schema, { commonOnly: false });
+    }
+    catch {
+        return;
+    }
+    if (!shape)
+        return;
+    /*
+     * The union's discriminator is collected across EVERY member, carrying the members' declared vocabulary
+     * only when they all agree — see `synthesizeUnionDiscriminatorEnums`, which the application labelling
+     * planner and the frontend label introspection call too, so the words asked for here and the words
+     * planned there come from one synthesis (#1021). The render path needs no change: it resolves the ACTUAL
+     * member and looks its value up in the resulting map.
+     */
+    const discriminatorEnums = synthesizeUnionDiscriminatorEnums(unionMembers);
+    for (const [name, fieldSchema] of Object.entries(shape)) {
+        const path = prefix ? `${prefix}.${name}` : name;
+        acc.push({ path, leaf: name, schema: discriminatorEnums[name] ?? fieldSchema });
+        if (depth < MAX_NESTED_FIELD_DEPTH && getSchemaType(fieldSchema) === FieldSchemaType.OBJECT) {
+            collectInto(fieldSchema, path, depth + 1, acc);
+        }
+        /*
+         * Descend into ARRAY-OF-OBJECT items too, under the item's INDEX-FREE path
+         * (`successCriteria.horizon`, never `successCriteria[0].horizon`): every item of one array
+         * shares one schema, so labels are per-FIELD, not per-row. Without this, a labelled enum
+         * inside an entry collection — a criterion's `horizon`, a constraint's `kind` — had no entry
+         * in `enumLabels`/`fieldLabels` at all and rendered its raw wire value, while the identical
+         * enum ONE level up resolved fine. The render path strips indices before its lookup
+         * (`DisplayField`), so the two sides meet on the same key.
+         *
+         * An item that is a union of objects is OBJECT-typed here too (`getSchemaType` reads a union of objects
+         * through its first member), and the recursion walks it per member — see the top of this function.
+         */
+        if (depth < MAX_NESTED_FIELD_DEPTH && getSchemaType(fieldSchema) === FieldSchemaType.ARRAY) {
+            const itemSchema = getArrayItemSchema(fieldSchema);
+            if (itemSchema && getSchemaType(itemSchema) === FieldSchemaType.OBJECT) {
+                collectInto(itemSchema, path, depth + 1, acc);
+            }
+        }
+    }
+}
+/** Merge a union's member shapes by field name; the first member declaring a key keeps its schema. */
+function mergeUnionMemberShapes(members) {
+    const merged = {};
+    for (const member of members) {
+        for (const [name, fieldSchema] of Object.entries(getZodObjectShape(member))) {
+            if (!Object.prototype.hasOwnProperty.call(merged, name))
+                merged[name] = fieldSchema;
+        }
+    }
+    return merged;
+}
+/**
+ * The enum-bearing schema behind a collected field, if any: a direct enum (or string literal), or the
+ * ELEMENT of an enum array (e.g. `roles: z.array(z.union([z.enum(CORE_ORG_ROLES), z.string()]))`, whose
+ * union element still yields enum values via `getEnumValues`). Without the array branch, array-of-enum
+ * fields rendered their members raw (e.g. `ORG_ADMIN`).
+ *
+ * Delegates to `resolveFieldEnumSchema` (`@wildo-ai/presets-components-models`), the same answer the dev
+ * companion's labelling planner and frontend label introspection read, so a field this renderer looks words
+ * up for is a field those plan words for (#1021, #1079).
+ */
+export function resolveResourceLabelEnumSchema(fieldSchema) {
+    return resolveFieldEnumSchema(fieldSchema);
+}
+/**
+ * The system enum a collected field DECLARES — the vocabulary whose `system_enums.<name>.<value>` words
+ * label its values — or `undefined` when it declares none.
+ *
+ * Reads the enum-bearing schema ({@link resolveResourceLabelEnumSchema}: the field itself, or an array's
+ * element) through `resolveDeclaredSystemEnumName`, the same function the dev companion's labelling planner
+ * uses to decide which fields' words it plans under `system_enums`. That shared answer is the whole point:
+ * the cascade used to guess the enum from the VALUE across every registered vocabulary, so a value two
+ * vocabularies share read the first one's word (#966).
+ */
+export function resolveResourceLabelSystemEnumName(fieldSchema) {
+    const enumSchema = resolveResourceLabelEnumSchema(fieldSchema);
+    if (!enumSchema)
+        return undefined;
+    return resolveDeclaredSystemEnumName(enumSchema, getEnumValues(enumSchema));
+}
+//# sourceMappingURL=resource-label-field-paths.frontend.utils.js.map

package/dist/esm/core/resources/resource-label-field-paths.frontend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-label-field-paths.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/resource-label-field-paths.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAC/I,OAAO,EAAE,4BAA4B,EAAE,MAAM,2EAA2E,CAAC;AAEzH;;mEAEmE;AACnE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAYjC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAoB;IACnE,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAClB,MAAoB,EACpB,MAAc,EACd,KAAa,EACb,GAA8B;IAE9B,IAAI,KAA+C,CAAC;IACpD,IAAI,YAAY,GAAmB,EAAE,CAAC;IACtC,IAAI,CAAC;QACH;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,YAAY,GAAG,qBAAqB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,KAAK,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC;YAC7B,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC;YACtC,CAAC,CAAC,4BAA4B,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB;;;;;;OAMG;IACH,MAAM,kBAAkB,GAAG,iCAAiC,CAAC,YAAY,CAAC,CAAC;IAE3E,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QAChF,IAAI,KAAK,GAAG,sBAAsB,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;YAC5F,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD;;;;;;;;;;;WAWG;QACH,IAAI,KAAK,GAAG,sBAAsB,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3F,MAAM,UAAU,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBACvE,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,WAA2B,CAAC;QACtG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAAC,WAAyB;IACtE,OAAO,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kCAAkC,CAAC,WAAyB;IAC1E,MAAM,UAAU,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,6BAA6B,CAAC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["/**\n * The label-bearing field paths of a schema — the exact population `useResourceLabels` asks i18n for.\n *\n * Extracted from `useResourceLabels` so the question \"which keys will this surface look up?\" has ONE\n * answer that a hook and a test can both ask. Before this it was module-private, so any check that\n * wanted to hold an authored label tree to what a surface renders had to re-derive the walk — and a\n * re-derived walk is the copy that drifts first (a discriminated union's merged discriminator, the\n * index-free array-item paths, the depth bound).\n *\n * The workbench's aspect-popup label totality check (#638) is the first such consumer: it walks every\n * family aspect's item schema through THIS function, so a key it reports missing is a key the popup\n * really asks for, and a key it does not report is one the popup never asks for.\n */\n\nimport type { z } from 'zod';\nimport {\n  FieldSchemaType,\n  getArrayItemSchema,\n  getEnumValues,\n  getSchemaType,\n  getUnionObjectMembers,\n  getZodObjectShape,\n  unwrapSchema,\n} from '@wildo-ai/zod-decorators';\nimport { resolveDeclaredSystemEnumName, resolveFieldEnumSchema, synthesizeUnionDiscriminatorEnums } from '@wildo-ai/presets-components-models';\nimport { AutomatedLayoutFrontendUtils } from '~wildo-frontend-lib/core/automated-layout/automated-layout.frontend.utils';\n\n/** Max object-nesting depth walked when collecting label/enum entries (guards against\n *  pathological / self-referential schemas while covering real nested settings objects\n *  like `privacy.consentedPurposes` and `regional.dateFormat`). */\nconst MAX_NESTED_FIELD_DEPTH = 4;\n\n/** A field reachable from the resource schema, identified by its dotted runtime path. */\nexport interface ResourceLabelFieldEntry {\n  /** Dotted path as seen by `DisplayField`/`FormField` inside an `ObjectScope` (e.g. `privacy.consentedPurposes`). */\n  path: string;\n  /** Final path segment, used for the unresolved-label rendering. */\n  leaf: string;\n  /** The field's Zod schema (decorators intact). */\n  schema: z.ZodTypeAny;\n}\n\n/**\n * Flatten a resource schema into every label-bearing field path, recursing into nested\n * OBJECT fields so that fields rendered inside an `<ObjectScope name=\"privacy\">` (which look\n * their labels/enum-labels up by the dotted `privacy.consentedPurposes` key) resolve the\n * same way top-level fields do. Without this, nested object fields fell back to no label /\n * raw enum values. Arrays of scalars are recorded as leaves (their element enum, if any, is\n * handled by {@link resolveResourceLabelEnumSchema}); arrays of OBJECTS are descended into under\n * their index-free path.\n *\n * Throws only if the underlying shape resolution throws; callers that render treat that as\n * \"no entries yet\" (a schema briefly undefined on first mount).\n */\nexport function collectResourceLabelFieldEntries(schema: z.ZodTypeAny): ResourceLabelFieldEntry[] {\n  const acc: ResourceLabelFieldEntry[] = [];\n  collectInto(schema, '', 0, acc);\n  return acc;\n}\n\nfunction collectInto(\n  schema: z.ZodTypeAny,\n  prefix: string,\n  depth: number,\n  acc: ResourceLabelFieldEntry[],\n): void {\n  let shape: Record<string, z.ZodTypeAny> | undefined;\n  let unionMembers: z.ZodTypeAny[] = [];\n  try {\n    /*\n     * A UNION of objects is walked PER MEMBER, merged by field name (the first member owning a key keeps\n     * it), so a member-only field — rendered under a `<DiscriminatorSwitch>`, or as the one member an item\n     * resolved to — still resolves its label. Membership is `getUnionObjectMembers`: a declared\n     * `z.discriminatedUnion`, or a plain `z.union` of objects one key discriminates — every member declares\n     * it as a literal with disjoint values, or omits it while being a `z.strictObject` (at most one member may\n     * omit it, since a strict member rejects the key, its absence places a value exactly). The compliance\n     * programme is that second case: V1 predates `schemaVersion` and omits it; V2 declares `z.literal(2)`.\n     * The display resolves an item's member through the SAME discriminator (`resolveDiscriminatedUnionVariant`),\n     * so the walk collects exactly the fields a rendered member can show.\n     *\n     * The plain-union half is #1022. The walk used to resolve unions only through `getObjectLikeFieldShape`,\n     * which knows DECLARED discriminated unions alone; the compliance programme's `documentationRequirements`\n     * items are `z.union([V1, V2])` keyed on `schemaVersion`, so nothing inside an item — its\n     * `governanceScope.subjectKind`, declaring `GovernedDocumentGovernanceSubjectKind` — had an entry, and\n     * its words could not resolve.\n     *\n     * CONTRACT with the application label deciders: a union `getUnionObjectMembers` rejects yields no shape\n     * here, so this walk collects NOTHING below it and asks for no word there. The labelling planner and the\n     * frontend label introspection mirror that by registering no enum of any shape anywhere in such a\n     * subtree (`insideUnresolvableUnion`) — change one side and the other plans words nobody reads.\n     *\n     * Anything else resolves the way the form/display RENDER path does (`getObjectLikeFieldShape`): a plain\n     * object's shape, or nothing.\n     */\n    unionMembers = getUnionObjectMembers(unwrapSchema(schema));\n    shape = unionMembers.length > 0\n      ? mergeUnionMemberShapes(unionMembers)\n      : AutomatedLayoutFrontendUtils.getObjectLikeFieldShape(schema, { commonOnly: false });\n  } catch {\n    return;\n  }\n  if (!shape) return;\n\n  /*\n   * The union's discriminator is collected across EVERY member, carrying the members' declared vocabulary\n   * only when they all agree — see `synthesizeUnionDiscriminatorEnums`, which the application labelling\n   * planner and the frontend label introspection call too, so the words asked for here and the words\n   * planned there come from one synthesis (#1021). The render path needs no change: it resolves the ACTUAL\n   * member and looks its value up in the resulting map.\n   */\n  const discriminatorEnums = synthesizeUnionDiscriminatorEnums(unionMembers);\n\n  for (const [name, fieldSchema] of Object.entries(shape)) {\n    const path = prefix ? `${prefix}.${name}` : name;\n    acc.push({ path, leaf: name, schema: discriminatorEnums[name] ?? fieldSchema });\n    if (depth < MAX_NESTED_FIELD_DEPTH && getSchemaType(fieldSchema) === FieldSchemaType.OBJECT) {\n      collectInto(fieldSchema, path, depth + 1, acc);\n    }\n    /*\n     * Descend into ARRAY-OF-OBJECT items too, under the item's INDEX-FREE path\n     * (`successCriteria.horizon`, never `successCriteria[0].horizon`): every item of one array\n     * shares one schema, so labels are per-FIELD, not per-row. Without this, a labelled enum\n     * inside an entry collection — a criterion's `horizon`, a constraint's `kind` — had no entry\n     * in `enumLabels`/`fieldLabels` at all and rendered its raw wire value, while the identical\n     * enum ONE level up resolved fine. The render path strips indices before its lookup\n     * (`DisplayField`), so the two sides meet on the same key.\n     *\n     * An item that is a union of objects is OBJECT-typed here too (`getSchemaType` reads a union of objects\n     * through its first member), and the recursion walks it per member — see the top of this function.\n     */\n    if (depth < MAX_NESTED_FIELD_DEPTH && getSchemaType(fieldSchema) === FieldSchemaType.ARRAY) {\n      const itemSchema = getArrayItemSchema(fieldSchema);\n      if (itemSchema && getSchemaType(itemSchema) === FieldSchemaType.OBJECT) {\n        collectInto(itemSchema, path, depth + 1, acc);\n      }\n    }\n  }\n}\n\n/** Merge a union's member shapes by field name; the first member declaring a key keeps its schema. */\nfunction mergeUnionMemberShapes(members: readonly z.ZodTypeAny[]): Record<string, z.ZodTypeAny> {\n  const merged: Record<string, z.ZodTypeAny> = {};\n  for (const member of members) {\n    for (const [name, fieldSchema] of Object.entries(getZodObjectShape(member))) {\n      if (!Object.prototype.hasOwnProperty.call(merged, name)) merged[name] = fieldSchema as z.ZodTypeAny;\n    }\n  }\n  return merged;\n}\n\n/**\n * The enum-bearing schema behind a collected field, if any: a direct enum (or string literal), or the\n * ELEMENT of an enum array (e.g. `roles: z.array(z.union([z.enum(CORE_ORG_ROLES), z.string()]))`, whose\n * union element still yields enum values via `getEnumValues`). Without the array branch, array-of-enum\n * fields rendered their members raw (e.g. `ORG_ADMIN`).\n *\n * Delegates to `resolveFieldEnumSchema` (`@wildo-ai/presets-components-models`), the same answer the dev\n * companion's labelling planner and frontend label introspection read, so a field this renderer looks words\n * up for is a field those plan words for (#1021, #1079).\n */\nexport function resolveResourceLabelEnumSchema(fieldSchema: z.ZodTypeAny): z.ZodTypeAny | undefined {\n  return resolveFieldEnumSchema(fieldSchema);\n}\n\n/**\n * The system enum a collected field DECLARES — the vocabulary whose `system_enums.<name>.<value>` words\n * label its values — or `undefined` when it declares none.\n *\n * Reads the enum-bearing schema ({@link resolveResourceLabelEnumSchema}: the field itself, or an array's\n * element) through `resolveDeclaredSystemEnumName`, the same function the dev companion's labelling planner\n * uses to decide which fields' words it plans under `system_enums`. That shared answer is the whole point:\n * the cascade used to guess the enum from the VALUE across every registered vocabulary, so a value two\n * vocabularies share read the first one's word (#966).\n */\nexport function resolveResourceLabelSystemEnumName(fieldSchema: z.ZodTypeAny): string | undefined {\n  const enumSchema = resolveResourceLabelEnumSchema(fieldSchema);\n  if (!enumSchema) return undefined;\n  return resolveDeclaredSystemEnumName(enumSchema, getEnumValues(enumSchema));\n}\n"]}

package/dist/esm/core/resources/resource-operation-view.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-operation-view.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/resource-operation-view.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAE5F;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EACvD,SAAS,EAAE,uCAAuC,GACjD,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,uCAAuC,GACjD,MAAM,GAAG,SAAS,CAEpB"}
+{"version":3,"file":"resource-operation-view.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/resource-operation-view.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAE5F;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EACvD,SAAS,EAAE,uCAAuC,GACjD,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,uCAAuC,GACjD,MAAM,GAAG,SAAS,CAEpB"}

package/dist/esm/core/resources/resource-operation-view.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-operation-view.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/resources/resource-operation-view.frontend.utils.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,SAAkD;IAElD,OAAO,SAAS,CAAC,uBAAuB,EAAE,UAAqD,CAAC;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAkD;IAElD,OAAO,SAAS,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,uBAAuB,CAAC;AAC3F,CAAC","sourcesContent":["import type React from 'react';\nimport type { FrontendResourceConfiguration_Operation } from './resources.frontend.schemas';\n\n/**\n * Resolve a direct UIBehavior-owned view component override for the current operation.\n *\n * This is the semantic declaration path for business/domain custom operation views.\n * Generic framework presets should continue using `displayPresetOverride.resourceLayoutPresetKey`.\n */\nexport function resolveResourceOperationCustomView<TProps>(\n  operation: FrontendResourceConfiguration_Operation,\n): React.ComponentType<TProps> | undefined {\n  return operation.operationFrontendConfig?.customView as React.ComponentType<TProps> | undefined;\n}\n\n/**\n * Resolve a framework preset override key for the current operation host.\n *\n * This remains the right mechanism for choosing between framework-owned variants\n * such as default vs table/expandable layouts.\n */\nexport function resolveResourceOperationPresetKey(\n  operation: FrontendResourceConfiguration_Operation,\n): string | undefined {\n  return operation.operationFrontendConfig?.displayPresetOverride?.resourceLayoutPresetKey;\n}\n"]}
+{"version":3,"file":"resource-operation-view.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/resource-operation-view.frontend.utils.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,SAAkD;IAElD,OAAO,SAAS,CAAC,uBAAuB,EAAE,UAAqD,CAAC;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAkD;IAElD,OAAO,SAAS,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,uBAAuB,CAAC;AAC3F,CAAC","sourcesContent":["import type React from 'react';\nimport type { FrontendResourceConfiguration_Operation } from './resources.frontend.schemas';\n\n/**\n * Resolve a direct UIBehavior-owned view component override for the current operation.\n *\n * This is the semantic declaration path for business/domain custom operation views.\n * Generic framework presets should continue using `displayPresetOverride.resourceLayoutPresetKey`.\n */\nexport function resolveResourceOperationCustomView<TProps>(\n  operation: FrontendResourceConfiguration_Operation,\n): React.ComponentType<TProps> | undefined {\n  return operation.operationFrontendConfig?.customView as React.ComponentType<TProps> | undefined;\n}\n\n/**\n * Resolve a framework preset override key for the current operation host.\n *\n * This remains the right mechanism for choosing between framework-owned variants\n * such as default vs table/expandable layouts.\n */\nexport function resolveResourceOperationPresetKey(\n  operation: FrontendResourceConfiguration_Operation,\n): string | undefined {\n  return operation.operationFrontendConfig?.displayPresetOverride?.resourceLayoutPresetKey;\n}\n"]}

package/dist/esm/core/resources/resource-path.frontend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-path.frontend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/resource-path.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iCAAiC,EACjC,oBAAoB,EACpB,4BAA4B,EAE7B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,gDAAgD;;;;;;;;iBAQ3D,CAAC;AAEH,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAE1H,eAAO,MAAM,0BAA0B;;;;;;;;;;;iBAGrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;iBAM9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}
+{"version":3,"file":"resource-path.frontend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/resource-path.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iCAAiC,EACjC,oBAAoB,EACpB,4BAA4B,EAE7B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,gDAAgD;;;;;;;;iBAQ3D,CAAC;AAEH,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAE1H,eAAO,MAAM,0BAA0B;;;;;;;;;;;iBAGrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;iBAM9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}

package/dist/esm/core/resources/resource-path.frontend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-path.frontend.schemas.js","sourceRoot":"","sources":["../../../../src/core/resources/resource-path.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iCAAiC,EACjC,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,YAAY,EAAE,kBAAkB;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,iBAAiB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAChD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC;IACtD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,2BAA2B,EAAE,gDAAgD,CAAC,KAAK,EAAE;CACtF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC,MAAM,CAAC;IACnF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IAC5D,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC","sourcesContent":["/**\n * Resource Path Schemas\n *\n * Extracted from resources.frontend.schemas.ts to break a circular dependency:\n *   resources.frontend.schemas → app-configuration-frontend.schemas\n *     → chart-view.frontend.schemas → views-frontend.schemas\n *     → resources.frontend.schemas  (cycle!)\n *\n * These schemas depend only on zod and @wildo-ai/saas-models, so placing them\n * here makes them safe to import from any config or schema file without cycles.\n */\n\nimport { z } from 'zod';\nimport {\n  ResourceParentResourceRequirement,\n  ResourcePrimaryScope,\n  ResourceOperationVariantType,\n  ResourceTypeSchema,\n} from '@wildo-ai/saas-models';\n\nexport const FrontendResource_ParentResourceRequirementSchema = z.object({\n  resourceType: ResourceTypeSchema,\n  foreignKeyField: z.string().optional(),\n  childResourceType: ResourceTypeSchema.optional(),\n  relationshipEdgeKey: z.string().optional(),\n  requirement: z.enum(ResourceParentResourceRequirement),\n  isPrimaryScope: z.boolean(),\n  primaryScope: z.enum(ResourcePrimaryScope).optional(),\n});\n\nexport type FrontendResource_ParentResourceRequirement = z.infer<typeof FrontendResource_ParentResourceRequirementSchema>;\n\nexport const FrontendResourcePathSchema = z.object({\n  resourceType: z.string(),\n  parentResourcesRequirements: FrontendResource_ParentResourceRequirementSchema.array(),\n});\n\nexport type FrontendResourcePath = z.infer<typeof FrontendResourcePathSchema>;\n\nexport const FrontendResourceOperationPathSchema = FrontendResourcePathSchema.extend({\n  operationIdentifier: z.string(),\n  variantType: z.enum(ResourceOperationVariantType).optional(),\n  isOperationDefault: z.boolean(),\n  isBulkOperation: z.boolean(),\n  variantKey: z.string().optional(),\n});\n\nexport type FrontendResourceOperationPath = z.infer<typeof FrontendResourceOperationPathSchema>;\n"]}
+{"version":3,"file":"resource-path.frontend.schemas.js","sourceRoot":"","sources":["../../../../../src/core/resources/resource-path.frontend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iCAAiC,EACjC,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,YAAY,EAAE,kBAAkB;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,iBAAiB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAChD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC;IACtD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,2BAA2B,EAAE,gDAAgD,CAAC,KAAK,EAAE;CACtF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC,MAAM,CAAC;IACnF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE;IAC5D,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC","sourcesContent":["/**\n * Resource Path Schemas\n *\n * Extracted from resources.frontend.schemas.ts to break a circular dependency:\n *   resources.frontend.schemas → app-configuration-frontend.schemas\n *     → chart-view.frontend.schemas → views-frontend.schemas\n *     → resources.frontend.schemas  (cycle!)\n *\n * These schemas depend only on zod and @wildo-ai/saas-models, so placing them\n * here makes them safe to import from any config or schema file without cycles.\n */\n\nimport { z } from 'zod';\nimport {\n  ResourceParentResourceRequirement,\n  ResourcePrimaryScope,\n  ResourceOperationVariantType,\n  ResourceTypeSchema,\n} from '@wildo-ai/saas-models';\n\nexport const FrontendResource_ParentResourceRequirementSchema = z.object({\n  resourceType: ResourceTypeSchema,\n  foreignKeyField: z.string().optional(),\n  childResourceType: ResourceTypeSchema.optional(),\n  relationshipEdgeKey: z.string().optional(),\n  requirement: z.enum(ResourceParentResourceRequirement),\n  isPrimaryScope: z.boolean(),\n  primaryScope: z.enum(ResourcePrimaryScope).optional(),\n});\n\nexport type FrontendResource_ParentResourceRequirement = z.infer<typeof FrontendResource_ParentResourceRequirementSchema>;\n\nexport const FrontendResourcePathSchema = z.object({\n  resourceType: z.string(),\n  parentResourcesRequirements: FrontendResource_ParentResourceRequirementSchema.array(),\n});\n\nexport type FrontendResourcePath = z.infer<typeof FrontendResourcePathSchema>;\n\nexport const FrontendResourceOperationPathSchema = FrontendResourcePathSchema.extend({\n  operationIdentifier: z.string(),\n  variantType: z.enum(ResourceOperationVariantType).optional(),\n  isOperationDefault: z.boolean(),\n  isBulkOperation: z.boolean(),\n  variantKey: z.string().optional(),\n});\n\nexport type FrontendResourceOperationPath = z.infer<typeof FrontendResourceOperationPathSchema>;\n"]}

package/dist/esm/core/resources/resource-read-cache.frontend.service.d.ts

@@ -57,6 +57,7 @@ export interface ResourceReadCoverageAuthority {
  */
 export declare class ResourceReadCacheFrontendService {
     private applicationId;
+    private organizationId;
     private readonly entries;
     private authority;
     private enabled;
@@ -83,6 +84,31 @@ export declare class ResourceReadCacheFrontendService {
      */
     setApplicationId(applicationId: string | null): void;
     getApplicationId(): string | null;
+    /**
+     * The ambient ORGANIZATION id, for the window in which the route has not published one yet.
+     *
+     * The sibling above exists because an application id is NEVER addressed. This one exists for the
+     * opposite reason: an organization id usually IS — `/organizations/:organizationId/...` — and the
+     * gap is purely temporal. A read issued before the organization scope hydrates carries no
+     * `organizationId` in its contextual parameters, so `deriveResourceScopeRoomQualifiers` emits only
+     * the incidental `user` room the generic loop produces and never the resource's own `org` room.
+     *
+     * That entry is still STORED, because `store()` refuses only an EMPTY scope set — so it is served
+     * from a room that no org-scoped invalidation is addressed to. A change another member of the same
+     * tenant makes cannot reach it, and `covers()` keeps reporting it servable. Measured as a test
+     * failure first (`browser-read-cache`, #1137: the client subscribed `resource:todos:user:<user>`
+     * and never `resource:todos:org:<org>`), but the stale read is the part that matters.
+     *
+     * Refusing to cache instead was REJECTED, and not on taste: the same choice was made for
+     * APPLICATION scope and recorded there as "strictly worse… disabled the tier in exchange for
+     * nothing". Supplying the id the resource is scoped by keeps the tier on AND makes the entry
+     * invalidatable, which refusing does not.
+     *
+     * Set by `ResourceReadCacheBridge`, which is a component and can read the app scope; the service is
+     * plain and cannot. Null until it does.
+     */
+    setOrganizationId(organizationId: string | null): void;
+    getOrganizationId(): string | null;
     setCoverageAuthority(authority: ResourceReadCoverageAuthority | null): void;
     /**
      * Turn the tier off entirely.

package/dist/esm/core/resources/resource-read-cache.frontend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-read-cache.frontend.service.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/resource-read-cache.frontend.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAiBxE;;;;;;;;;GASG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAAG,OAAO,CAAC;IAErF;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAAG,IAAI,CAAC;CAC5F;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,aAAa,CAAuB;IAE5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,OAAO,CAAQ;IAEvB;;;;;;OAMG;IACH;;;;;;;;;;;;;OAaG;IACI,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIpD,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC,oBAAoB,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,GAAG,IAAI;IAMlF;;;;;;;;;;;;OAYG;IACI,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKzC,IAAW,IAAI,IAAI,MAAM,CAExB;IAED;;;;;;OAMG;IACI,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAiB7C,sEAAsE;IAC/D,KAAK,CACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAC5C,IAAI;IAcP;;;;;;OAMG;IACI,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAWzD;;;;;;OAMG;IACI,KAAK,IAAI,IAAI;IAMpB,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;CAY5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,OAAO,GAClB,MAAM,GAAG,IAAI,CAuBf"}
+{"version":3,"file":"resource-read-cache.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/resource-read-cache.frontend.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAiBxE;;;;;;;;;GASG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAAG,OAAO,CAAC;IAErF;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAAG,IAAI,CAAC;CAC5F;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,cAAc,CAAuB;IAE7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,OAAO,CAAQ;IAEvB;;;;;;OAMG;IACH;;;;;;;;;;;;;OAaG;IACI,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIpD,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIxC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACI,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAItD,iBAAiB,IAAI,MAAM,GAAG,IAAI;IAIlC,oBAAoB,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,GAAG,IAAI;IAMlF;;;;;;;;;;;;OAYG;IACI,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKzC,IAAW,IAAI,IAAI,MAAM,CAExB;IAED;;;;;;OAMG;IACI,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAiB7C,sEAAsE;IAC/D,KAAK,CACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,SAAS,0BAA0B,EAAE,GAC5C,IAAI;IAcP;;;;;;OAMG;IACI,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAWzD;;;;;;OAMG;IACI,KAAK,IAAI,IAAI;IAMpB,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;CAY5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,OAAO,GAClB,MAAM,GAAG,IAAI,CAuBf"}

package/dist/esm/core/resources/resource-read-cache.frontend.service.js

@@ -44,6 +44,7 @@ const MAXIMUM_CACHED_READS = 200;
  */
 export class ResourceReadCacheFrontendService {
     applicationId = null;
+    organizationId = null;
     entries = new Map();
     authority = null;
     enabled = true;
@@ -74,6 +75,35 @@ export class ResourceReadCacheFrontendService {
     getApplicationId() {
         return this.applicationId;
     }
+    /**
+     * The ambient ORGANIZATION id, for the window in which the route has not published one yet.
+     *
+     * The sibling above exists because an application id is NEVER addressed. This one exists for the
+     * opposite reason: an organization id usually IS — `/organizations/:organizationId/...` — and the
+     * gap is purely temporal. A read issued before the organization scope hydrates carries no
+     * `organizationId` in its contextual parameters, so `deriveResourceScopeRoomQualifiers` emits only
+     * the incidental `user` room the generic loop produces and never the resource's own `org` room.
+     *
+     * That entry is still STORED, because `store()` refuses only an EMPTY scope set — so it is served
+     * from a room that no org-scoped invalidation is addressed to. A change another member of the same
+     * tenant makes cannot reach it, and `covers()` keeps reporting it servable. Measured as a test
+     * failure first (`browser-read-cache`, #1137: the client subscribed `resource:todos:user:<user>`
+     * and never `resource:todos:org:<org>`), but the stale read is the part that matters.
+     *
+     * Refusing to cache instead was REJECTED, and not on taste: the same choice was made for
+     * APPLICATION scope and recorded there as "strictly worse… disabled the tier in exchange for
+     * nothing". Supplying the id the resource is scoped by keeps the tier on AND makes the entry
+     * invalidatable, which refusing does not.
+     *
+     * Set by `ResourceReadCacheBridge`, which is a component and can read the app scope; the service is
+     * plain and cannot. Null until it does.
+     */
+    setOrganizationId(organizationId) {
+        this.organizationId = organizationId;
+    }
+    getOrganizationId() {
+        return this.organizationId;
+    }
     setCoverageAuthority(authority) {
         this.authority = authority;
         this.entries.clear();

package/dist/esm/core/resources/resource-read-cache.frontend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-read-cache.frontend.service.js","sourceRoot":"","sources":["../../../../src/core/resources/resource-read-cache.frontend.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;AACzD,MAAM,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAqCjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,gCAAgC;IACnC,aAAa,GAAkB,IAAI,CAAC;IAE3B,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,SAAS,GAAyC,IAAI,CAAC;IACvD,OAAO,GAAG,IAAI,CAAC;IAEvB;;;;;;OAMG;IACH;;;;;;;;;;;;;OAaG;IACI,gBAAgB,CAAC,aAA4B;QAClD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,oBAAoB,CAAC,SAA+C;QACzE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,QAAQ,CAAC,4BAA4B,EAAE,EAAE,YAAY,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,UAAU,CAAC,OAAgB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACI,IAAI,CAAC,GAAW;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,6FAA6F;YAC7F,iDAAiD;YACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,QAAQ,CAAC,iCAAiC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAClF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,sEAAsE;IAC/D,KAAK,CACV,GAAW,EACX,KAAc,EACd,YAAoB,EACpB,MAA6C;QAE7C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC7C,+FAA+F;QAC/F,gGAAgG;QAChG,8BAA8B;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEhC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACI,sBAAsB,CAAC,YAAoB;QAChD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC;YAAE,QAAQ,CAAC,8BAA8B,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;OAMG;IACI,KAAK;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,OAAO,GAAG,CAAC;YAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,6EAA6E;IACrE,mBAAmB;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,oBAAoB;YAAE,OAAO;QACtD,IAAI,SAA6B,CAAC;QAClC,IAAI,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAChC,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC5B,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,gBAAwB,EACxB,UAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IAEnC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;aACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7G,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,GAAG,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { ResourceScopeRoomQualifier } from '@wildo-ai/saas-models';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCache');\nlogger.setDebugTypeLogging('ResourceReadCache', false);\n\n/**\n * A ceiling on how many read results are held.\n *\n * Not a memory bound so much as a staleness bound: every entry is one more thing that has to be\n * invalidated correctly, and an unbounded map makes a missed invalidation permanent. 200 is the same\n * order as `RMM_REGISTRY_MAX_INSTANCES`, and eviction is least-recently-USED so an entry a surface\n * keeps reading survives while a page visited once does not.\n */\nconst MAXIMUM_CACHED_READS = 200;\n\n/**\n * Whether a cached read is currently covered by something that would tell us it went stale.\n *\n * This is the whole safety contract. A cached read may be SERVED only while an authority reports\n * that every room an invalidation for it would arrive through is joined — so a cache entry can never\n * outlive the subscription that keeps it honest.\n *\n * Implemented by the WebSocket layer. Absent — no provider mounted, socket down, subscription\n * refused — nothing is ever served from cache, and the tier degrades to exactly today's behaviour.\n */\nexport interface ResourceReadCoverageAuthority {\n  /**\n   * Whether an invalidation for this resource in these scopes would currently reach us.\n   *\n   * Must answer `false` when the transport is down, when any required room is not joined, and when\n   * the scope set is EMPTY — a read that belongs to no room has no channel through which it could\n   * ever be told it is stale, so it is not cacheable at all.\n   */\n  covers(resourceType: string, scopes: readonly ResourceScopeRoomQualifier[]): boolean;\n\n  /**\n   * Asked to start covering a resource in these scopes. Best-effort and asynchronous: the entry it\n   * was requested for is not servable until a later `covers` returns `true`.\n   */\n  requestCoverage(resourceType: string, scopes: readonly ResourceScopeRoomQualifier[]): void;\n}\n\ninterface CachedRead {\n  readonly value: unknown;\n  readonly resourceType: string;\n  readonly scopes: readonly ResourceScopeRoomQualifier[];\n  readonly storedAt: number;\n  lastReadAt: number;\n}\n\n/**\n * Holds resource READ results between navigations, so a surface that was visited before does not\n * re-fetch what nothing has changed.\n *\n * ## The problem, measured rather than assumed\n *\n * There is no cross-time read cache anywhere in the frontend today — `WildoBackendHttpClient` says\n * so at its in-flight map: *\"IN-FLIGHT sharing only … There is NO cross-time cache / TTL\"*. That\n * same comment records the cost: **one resource-detail mount fires ~9 GETs from 7 independent\n * consumers**, and navigating away and back pays all of them again.\n *\n * ## Why an entry is not servable unless something is watching it\n *\n * The obvious cache — store the response, serve it next time, invalidate on a WebSocket event — has\n * a hole that is silent rather than noisy. Resource events are delivered to ROOMS, and rooms are\n * joined by subscription. An entry whose room nobody has joined receives no invalidation, so it is\n * served confidently forever. Nothing errors, nothing retries; the data is simply wrong.\n *\n * So this tier inverts the default: a stored entry is a candidate, and only a\n * {@link ResourceReadCoverageAuthority} reporting live coverage makes it servable. With no authority\n * the tier stores and serves nothing, which is exactly today's behaviour — slow and correct.\n *\n * ## What it deliberately does NOT do\n *\n * - **No TTL.** A time bound would be a guess about how stale is acceptable, and it would let an\n *   uncovered entry be served for the length of the guess. Coverage is a fact; a TTL is a hope.\n * - **No stale-while-revalidate.** Serving a known-stale value while refetching is a reasonable\n *   pattern elsewhere; here it would silently reintroduce the wrong-data path this design exists to\n *   close, and it cannot satisfy \"a repeat navigation issues no request\" anyway.\n * - **No mutation caching.** Only read-family operations are ever stored.\n */\nexport class ResourceReadCacheFrontendService {\n  private applicationId: string | null = null;\n\n  private readonly entries = new Map<string, CachedRead>();\n  private authority: ResourceReadCoverageAuthority | null = null;\n  private enabled = true;\n\n  /**\n   * Install the coverage authority. Called by the WebSocket layer once it can answer.\n   *\n   * Replacing an authority CLEARS the cache: the new one knows nothing about what the old one was\n   * covering, so every held entry is of unknown freshness. Clearing costs a refetch and cannot be\n   * wrong, which is the direction this tier always errs in.\n   */\n  /**\n   * The application this session is reading, for the one scope an APPLICATION-scoped resource has.\n   *\n   * `deriveResourceScopeRoomQualifiers` yields the `app` room only when `applicationId` is present in\n   * the context it is handed, and a read's context is built from the URL's contextual parameters —\n   * which never carry one, because an application id is ambient rather than addressed. So without\n   * this, an APPLICATION-scoped resource derives whatever incidental `org`/`user` rooms its\n   * parameters imply and never its own, and a push addressed to `app` reaches nobody (issue #283,\n   * measured: 0 frames on a surface whose companion had just published to it).\n   *\n   * Set by `ResourceReadCacheBridge`, which is a component and can read the app scope; the service is\n   * plain and cannot. Null until it does, which is correct — before the scope is mounted there is no\n   * application to name.\n   */\n  public setApplicationId(applicationId: string | null): void {\n    this.applicationId = applicationId;\n  }\n\n  public getApplicationId(): string | null {\n    return this.applicationId;\n  }\n\n  public setCoverageAuthority(authority: ResourceReadCoverageAuthority | null): void {\n    this.authority = authority;\n    this.entries.clear();\n    logDebug('coverage authority changed', { hasAuthority: authority !== null });\n  }\n\n  /**\n   * Turn the tier off entirely.\n   *\n   * A door rather than a design. The blast radius here is every generated application on every\n   * persistence adapter, so an operator who suspects the cache must be able to remove it from the\n   * picture without a rebuild.\n   *\n   * **The handle is `VITE_RESOURCE_READ_CACHE=off`**, applied by `ResourceReadCacheBridge` — mirroring\n   * `COMPANION_INTROSPECTION_CACHE=off` on the companion side, same word and same value so an\n   * operator who has met one knows the other. Said explicitly because a door with no handle is worse\n   * than no door: this method existed for a while with only a test calling it, while this comment\n   * claimed an operator could reach it.\n   */\n  public setEnabled(enabled: boolean): void {\n    this.enabled = enabled;\n    if (!enabled) this.entries.clear();\n  }\n\n  public get size(): number {\n    return this.entries.size;\n  }\n\n  /**\n   * The cached value for a read, or `undefined` when there is none that may be served.\n   *\n   * Coverage is re-checked on every read rather than recorded at store time, because coverage is a\n   * property of NOW: a socket that dropped since the entry was stored must stop the entry being\n   * served, and only asking at read time can see that.\n   */\n  public read(key: string): unknown | undefined {\n    if (!this.enabled) return undefined;\n    const entry = this.entries.get(key);\n    if (!entry) return undefined;\n\n    if (!this.authority?.covers(entry.resourceType, entry.scopes)) {\n      // Not an error and not necessarily stale — simply unprovable. Dropping it keeps the map from\n      // filling with entries that can never be served.\n      this.entries.delete(key);\n      logDebug('entry dropped: no live coverage', { resourceType: entry.resourceType });\n      return undefined;\n    }\n\n    entry.lastReadAt = Date.now();\n    return entry.value;\n  }\n\n  /** Store a read result and ask the authority to start covering it. */\n  public store(\n    key: string,\n    value: unknown,\n    resourceType: string,\n    scopes: readonly ResourceScopeRoomQualifier[],\n  ): void {\n    if (!this.enabled || !this.authority) return;\n    // A read belonging to no scope has no room through which an invalidation could arrive. Storing\n    // it would create an entry that can never be proven fresh — so it is refused at the door rather\n    // than kept and never served.\n    if (scopes.length === 0) return;\n\n    this.authority.requestCoverage(resourceType, scopes);\n\n    const now = Date.now();\n    this.entries.set(key, { value, resourceType, scopes, storedAt: now, lastReadAt: now });\n    this.evictIfOverCapacity();\n  }\n\n  /**\n   * Drop every entry for a resource type.\n   *\n   * The invalidation the WebSocket layer calls. Deliberately coarse — per-row invalidation would\n   * have to know which cached LISTS contain that row, which is a question the cache cannot answer\n   * without parsing every stored payload against a shape it does not own.\n   */\n  public invalidateResourceType(resourceType: string): void {\n    let dropped = 0;\n    for (const [key, entry] of this.entries) {\n      if (entry.resourceType === resourceType) {\n        this.entries.delete(key);\n        dropped += 1;\n      }\n    }\n    if (dropped > 0) logDebug('invalidated by resource type', { resourceType, dropped });\n  }\n\n  /**\n   * Drop everything.\n   *\n   * Called on the two transitions that change WHICH rows a read would return without changing the\n   * request: an organization switch and a session change. Both happen without a page reload, so\n   * nothing else would clear this.\n   */\n  public clear(): void {\n    const dropped = this.entries.size;\n    this.entries.clear();\n    if (dropped > 0) logDebug('cleared', { dropped });\n  }\n\n  /** Least-recently-READ eviction, so a surface being used keeps its entry. */\n  private evictIfOverCapacity(): void {\n    if (this.entries.size <= MAXIMUM_CACHED_READS) return;\n    let oldestKey: string | undefined;\n    let oldestAt = Number.POSITIVE_INFINITY;\n    for (const [key, entry] of this.entries) {\n      if (entry.lastReadAt < oldestAt) {\n        oldestAt = entry.lastReadAt;\n        oldestKey = key;\n      }\n    }\n    if (oldestKey !== undefined) this.entries.delete(oldestKey);\n  }\n}\n\n/**\n * Render a read's identity so two structurally equal requests produce one key.\n *\n * Object keys are sorted at every depth: `{a:1,b:2}` and `{b:2,a:1}` are the same request, and\n * without sorting the second phrasing of one question would always miss. Arrays keep their order,\n * because in a filter or a sort an array's order is part of the question.\n *\n * Returns `null` for anything that cannot be rendered — a cycle, a `BigInt`, a function in a filter —\n * which every caller reads as \"do not cache this\", never as an error.\n */\nexport function renderResourceReadCacheKey(\n  operationPathKey: string,\n  parameters: unknown,\n): string | null {\n  const seen = new WeakSet<object>();\n\n  const render = (value: unknown): string => {\n    if (value === undefined) return 'u';\n    if (value === null) return 'n';\n    if (typeof value === 'function') throw new Error('not renderable');\n    if (typeof value === 'bigint') throw new Error('not renderable');\n    if (typeof value !== 'object') return JSON.stringify(value) ?? 'u';\n    if (seen.has(value as object)) throw new Error('not renderable');\n    seen.add(value as object);\n    if (Array.isArray(value)) return `[${value.map(render).join(',')}]`;\n    const entries = Object.entries(value as Record<string, unknown>)\n      .filter(([, entryValue]) => entryValue !== undefined)\n      .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0));\n    return `{${entries.map(([key, entryValue]) => `${JSON.stringify(key)}:${render(entryValue)}`).join(',')}}`;\n  };\n\n  try {\n    return `${operationPathKey}\u0001${render(parameters)}`;\n  } catch {\n    return null;\n  }\n}\n"]}
+{"version":3,"file":"resource-read-cache.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/resources/resource-read-cache.frontend.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;AACzD,MAAM,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAqCjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,gCAAgC;IACnC,aAAa,GAAkB,IAAI,CAAC;IACpC,cAAc,GAAkB,IAAI,CAAC;IAE5B,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,SAAS,GAAyC,IAAI,CAAC;IACvD,OAAO,GAAG,IAAI,CAAC;IAEvB;;;;;;OAMG;IACH;;;;;;;;;;;;;OAaG;IACI,gBAAgB,CAAC,aAA4B;QAClD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACI,iBAAiB,CAAC,cAA6B;QACpD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAEM,iBAAiB;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEM,oBAAoB,CAAC,SAA+C;QACzE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,QAAQ,CAAC,4BAA4B,EAAE,EAAE,YAAY,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,UAAU,CAAC,OAAgB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACI,IAAI,CAAC,GAAW;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,6FAA6F;YAC7F,iDAAiD;YACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,QAAQ,CAAC,iCAAiC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAClF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,sEAAsE;IAC/D,KAAK,CACV,GAAW,EACX,KAAc,EACd,YAAoB,EACpB,MAA6C;QAE7C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC7C,+FAA+F;QAC/F,gGAAgG;QAChG,8BAA8B;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEhC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACI,sBAAsB,CAAC,YAAoB;QAChD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC;YAAE,QAAQ,CAAC,8BAA8B,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;OAMG;IACI,KAAK;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,OAAO,GAAG,CAAC;YAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,6EAA6E;IACrE,mBAAmB;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,oBAAoB;YAAE,OAAO;QACtD,IAAI,SAA6B,CAAC;QAClC,IAAI,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAChC,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC5B,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,gBAAwB,EACxB,UAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IAEnC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;aACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7G,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,GAAG,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { ResourceScopeRoomQualifier } from '@wildo-ai/saas-models';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCache');\nlogger.setDebugTypeLogging('ResourceReadCache', false);\n\n/**\n * A ceiling on how many read results are held.\n *\n * Not a memory bound so much as a staleness bound: every entry is one more thing that has to be\n * invalidated correctly, and an unbounded map makes a missed invalidation permanent. 200 is the same\n * order as `RMM_REGISTRY_MAX_INSTANCES`, and eviction is least-recently-USED so an entry a surface\n * keeps reading survives while a page visited once does not.\n */\nconst MAXIMUM_CACHED_READS = 200;\n\n/**\n * Whether a cached read is currently covered by something that would tell us it went stale.\n *\n * This is the whole safety contract. A cached read may be SERVED only while an authority reports\n * that every room an invalidation for it would arrive through is joined — so a cache entry can never\n * outlive the subscription that keeps it honest.\n *\n * Implemented by the WebSocket layer. Absent — no provider mounted, socket down, subscription\n * refused — nothing is ever served from cache, and the tier degrades to exactly today's behaviour.\n */\nexport interface ResourceReadCoverageAuthority {\n  /**\n   * Whether an invalidation for this resource in these scopes would currently reach us.\n   *\n   * Must answer `false` when the transport is down, when any required room is not joined, and when\n   * the scope set is EMPTY — a read that belongs to no room has no channel through which it could\n   * ever be told it is stale, so it is not cacheable at all.\n   */\n  covers(resourceType: string, scopes: readonly ResourceScopeRoomQualifier[]): boolean;\n\n  /**\n   * Asked to start covering a resource in these scopes. Best-effort and asynchronous: the entry it\n   * was requested for is not servable until a later `covers` returns `true`.\n   */\n  requestCoverage(resourceType: string, scopes: readonly ResourceScopeRoomQualifier[]): void;\n}\n\ninterface CachedRead {\n  readonly value: unknown;\n  readonly resourceType: string;\n  readonly scopes: readonly ResourceScopeRoomQualifier[];\n  readonly storedAt: number;\n  lastReadAt: number;\n}\n\n/**\n * Holds resource READ results between navigations, so a surface that was visited before does not\n * re-fetch what nothing has changed.\n *\n * ## The problem, measured rather than assumed\n *\n * There is no cross-time read cache anywhere in the frontend today — `WildoBackendHttpClient` says\n * so at its in-flight map: *\"IN-FLIGHT sharing only … There is NO cross-time cache / TTL\"*. That\n * same comment records the cost: **one resource-detail mount fires ~9 GETs from 7 independent\n * consumers**, and navigating away and back pays all of them again.\n *\n * ## Why an entry is not servable unless something is watching it\n *\n * The obvious cache — store the response, serve it next time, invalidate on a WebSocket event — has\n * a hole that is silent rather than noisy. Resource events are delivered to ROOMS, and rooms are\n * joined by subscription. An entry whose room nobody has joined receives no invalidation, so it is\n * served confidently forever. Nothing errors, nothing retries; the data is simply wrong.\n *\n * So this tier inverts the default: a stored entry is a candidate, and only a\n * {@link ResourceReadCoverageAuthority} reporting live coverage makes it servable. With no authority\n * the tier stores and serves nothing, which is exactly today's behaviour — slow and correct.\n *\n * ## What it deliberately does NOT do\n *\n * - **No TTL.** A time bound would be a guess about how stale is acceptable, and it would let an\n *   uncovered entry be served for the length of the guess. Coverage is a fact; a TTL is a hope.\n * - **No stale-while-revalidate.** Serving a known-stale value while refetching is a reasonable\n *   pattern elsewhere; here it would silently reintroduce the wrong-data path this design exists to\n *   close, and it cannot satisfy \"a repeat navigation issues no request\" anyway.\n * - **No mutation caching.** Only read-family operations are ever stored.\n */\nexport class ResourceReadCacheFrontendService {\n  private applicationId: string | null = null;\n  private organizationId: string | null = null;\n\n  private readonly entries = new Map<string, CachedRead>();\n  private authority: ResourceReadCoverageAuthority | null = null;\n  private enabled = true;\n\n  /**\n   * Install the coverage authority. Called by the WebSocket layer once it can answer.\n   *\n   * Replacing an authority CLEARS the cache: the new one knows nothing about what the old one was\n   * covering, so every held entry is of unknown freshness. Clearing costs a refetch and cannot be\n   * wrong, which is the direction this tier always errs in.\n   */\n  /**\n   * The application this session is reading, for the one scope an APPLICATION-scoped resource has.\n   *\n   * `deriveResourceScopeRoomQualifiers` yields the `app` room only when `applicationId` is present in\n   * the context it is handed, and a read's context is built from the URL's contextual parameters —\n   * which never carry one, because an application id is ambient rather than addressed. So without\n   * this, an APPLICATION-scoped resource derives whatever incidental `org`/`user` rooms its\n   * parameters imply and never its own, and a push addressed to `app` reaches nobody (issue #283,\n   * measured: 0 frames on a surface whose companion had just published to it).\n   *\n   * Set by `ResourceReadCacheBridge`, which is a component and can read the app scope; the service is\n   * plain and cannot. Null until it does, which is correct — before the scope is mounted there is no\n   * application to name.\n   */\n  public setApplicationId(applicationId: string | null): void {\n    this.applicationId = applicationId;\n  }\n\n  public getApplicationId(): string | null {\n    return this.applicationId;\n  }\n\n  /**\n   * The ambient ORGANIZATION id, for the window in which the route has not published one yet.\n   *\n   * The sibling above exists because an application id is NEVER addressed. This one exists for the\n   * opposite reason: an organization id usually IS — `/organizations/:organizationId/...` — and the\n   * gap is purely temporal. A read issued before the organization scope hydrates carries no\n   * `organizationId` in its contextual parameters, so `deriveResourceScopeRoomQualifiers` emits only\n   * the incidental `user` room the generic loop produces and never the resource's own `org` room.\n   *\n   * That entry is still STORED, because `store()` refuses only an EMPTY scope set — so it is served\n   * from a room that no org-scoped invalidation is addressed to. A change another member of the same\n   * tenant makes cannot reach it, and `covers()` keeps reporting it servable. Measured as a test\n   * failure first (`browser-read-cache`, #1137: the client subscribed `resource:todos:user:<user>`\n   * and never `resource:todos:org:<org>`), but the stale read is the part that matters.\n   *\n   * Refusing to cache instead was REJECTED, and not on taste: the same choice was made for\n   * APPLICATION scope and recorded there as \"strictly worse… disabled the tier in exchange for\n   * nothing\". Supplying the id the resource is scoped by keeps the tier on AND makes the entry\n   * invalidatable, which refusing does not.\n   *\n   * Set by `ResourceReadCacheBridge`, which is a component and can read the app scope; the service is\n   * plain and cannot. Null until it does.\n   */\n  public setOrganizationId(organizationId: string | null): void {\n    this.organizationId = organizationId;\n  }\n\n  public getOrganizationId(): string | null {\n    return this.organizationId;\n  }\n\n  public setCoverageAuthority(authority: ResourceReadCoverageAuthority | null): void {\n    this.authority = authority;\n    this.entries.clear();\n    logDebug('coverage authority changed', { hasAuthority: authority !== null });\n  }\n\n  /**\n   * Turn the tier off entirely.\n   *\n   * A door rather than a design. The blast radius here is every generated application on every\n   * persistence adapter, so an operator who suspects the cache must be able to remove it from the\n   * picture without a rebuild.\n   *\n   * **The handle is `VITE_RESOURCE_READ_CACHE=off`**, applied by `ResourceReadCacheBridge` — mirroring\n   * `COMPANION_INTROSPECTION_CACHE=off` on the companion side, same word and same value so an\n   * operator who has met one knows the other. Said explicitly because a door with no handle is worse\n   * than no door: this method existed for a while with only a test calling it, while this comment\n   * claimed an operator could reach it.\n   */\n  public setEnabled(enabled: boolean): void {\n    this.enabled = enabled;\n    if (!enabled) this.entries.clear();\n  }\n\n  public get size(): number {\n    return this.entries.size;\n  }\n\n  /**\n   * The cached value for a read, or `undefined` when there is none that may be served.\n   *\n   * Coverage is re-checked on every read rather than recorded at store time, because coverage is a\n   * property of NOW: a socket that dropped since the entry was stored must stop the entry being\n   * served, and only asking at read time can see that.\n   */\n  public read(key: string): unknown | undefined {\n    if (!this.enabled) return undefined;\n    const entry = this.entries.get(key);\n    if (!entry) return undefined;\n\n    if (!this.authority?.covers(entry.resourceType, entry.scopes)) {\n      // Not an error and not necessarily stale — simply unprovable. Dropping it keeps the map from\n      // filling with entries that can never be served.\n      this.entries.delete(key);\n      logDebug('entry dropped: no live coverage', { resourceType: entry.resourceType });\n      return undefined;\n    }\n\n    entry.lastReadAt = Date.now();\n    return entry.value;\n  }\n\n  /** Store a read result and ask the authority to start covering it. */\n  public store(\n    key: string,\n    value: unknown,\n    resourceType: string,\n    scopes: readonly ResourceScopeRoomQualifier[],\n  ): void {\n    if (!this.enabled || !this.authority) return;\n    // A read belonging to no scope has no room through which an invalidation could arrive. Storing\n    // it would create an entry that can never be proven fresh — so it is refused at the door rather\n    // than kept and never served.\n    if (scopes.length === 0) return;\n\n    this.authority.requestCoverage(resourceType, scopes);\n\n    const now = Date.now();\n    this.entries.set(key, { value, resourceType, scopes, storedAt: now, lastReadAt: now });\n    this.evictIfOverCapacity();\n  }\n\n  /**\n   * Drop every entry for a resource type.\n   *\n   * The invalidation the WebSocket layer calls. Deliberately coarse — per-row invalidation would\n   * have to know which cached LISTS contain that row, which is a question the cache cannot answer\n   * without parsing every stored payload against a shape it does not own.\n   */\n  public invalidateResourceType(resourceType: string): void {\n    let dropped = 0;\n    for (const [key, entry] of this.entries) {\n      if (entry.resourceType === resourceType) {\n        this.entries.delete(key);\n        dropped += 1;\n      }\n    }\n    if (dropped > 0) logDebug('invalidated by resource type', { resourceType, dropped });\n  }\n\n  /**\n   * Drop everything.\n   *\n   * Called on the two transitions that change WHICH rows a read would return without changing the\n   * request: an organization switch and a session change. Both happen without a page reload, so\n   * nothing else would clear this.\n   */\n  public clear(): void {\n    const dropped = this.entries.size;\n    this.entries.clear();\n    if (dropped > 0) logDebug('cleared', { dropped });\n  }\n\n  /** Least-recently-READ eviction, so a surface being used keeps its entry. */\n  private evictIfOverCapacity(): void {\n    if (this.entries.size <= MAXIMUM_CACHED_READS) return;\n    let oldestKey: string | undefined;\n    let oldestAt = Number.POSITIVE_INFINITY;\n    for (const [key, entry] of this.entries) {\n      if (entry.lastReadAt < oldestAt) {\n        oldestAt = entry.lastReadAt;\n        oldestKey = key;\n      }\n    }\n    if (oldestKey !== undefined) this.entries.delete(oldestKey);\n  }\n}\n\n/**\n * Render a read's identity so two structurally equal requests produce one key.\n *\n * Object keys are sorted at every depth: `{a:1,b:2}` and `{b:2,a:1}` are the same request, and\n * without sorting the second phrasing of one question would always miss. Arrays keep their order,\n * because in a filter or a sort an array's order is part of the question.\n *\n * Returns `null` for anything that cannot be rendered — a cycle, a `BigInt`, a function in a filter —\n * which every caller reads as \"do not cache this\", never as an error.\n */\nexport function renderResourceReadCacheKey(\n  operationPathKey: string,\n  parameters: unknown,\n): string | null {\n  const seen = new WeakSet<object>();\n\n  const render = (value: unknown): string => {\n    if (value === undefined) return 'u';\n    if (value === null) return 'n';\n    if (typeof value === 'function') throw new Error('not renderable');\n    if (typeof value === 'bigint') throw new Error('not renderable');\n    if (typeof value !== 'object') return JSON.stringify(value) ?? 'u';\n    if (seen.has(value as object)) throw new Error('not renderable');\n    seen.add(value as object);\n    if (Array.isArray(value)) return `[${value.map(render).join(',')}]`;\n    const entries = Object.entries(value as Record<string, unknown>)\n      .filter(([, entryValue]) => entryValue !== undefined)\n      .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0));\n    return `{${entries.map(([key, entryValue]) => `${JSON.stringify(key)}:${render(entryValue)}`).join(',')}}`;\n  };\n\n  try {\n    return `${operationPathKey}\u0001${render(parameters)}`;\n  } catch {\n    return null;\n  }\n}\n"]}

package/dist/esm/core/resources/resources-repository.frontend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources-repository.frontend.service.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/resources-repository.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAC9G,OAAO,EAAE,gCAAgC,EAAE,MAAM,gFAAgF,CAAC;AAOlI,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AAIxG,OAAO,EAGL,2CAA2C,EAE3C,oBAAoB,EAqBrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAEV,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAGV,yBAAyB,EAE1B,MAAM,+DAA+D,CAAC;AAgJvE,qBAAa,kCAAkC;IAM3C,OAAO,CAAC,UAAU;IALpB,OAAO,CAAC,QAAQ,CAA0C;IAC1D,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,mBAAmB,CAAiD;gBAGlE,UAAU,EAAE,sBAAsB;IAG5C;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;;;;;;;OASG;IACU,mBAAmB,CAC9B,8CAA8C,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,2CAA2C,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;KAAE,EAC9H,oCAAoC,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAChE,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,EAC5D,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3C,kBAAkB,CAAC,EAAE,kBAAkB,EACvC,kCAAkC,CAAC,EAAE,2BAA2B,EAAE,GACjE,OAAO,CAAC,IAAI,CAAC;IAmPhB,OAAO,CAAC,2CAA2C;IA4BnD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,8BAA8B;IA0BtC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,mCAAmC;IAyN3C,OAAO,CAAC,qCAAqC;IAsB7C,OAAO,CAAC,qCAAqC;IAsC7C;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mCAAmC;IAwJ3C;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wCAAwC;IAsFhD;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,wBAAwB;IAyChC;;;;;;OAMG;IACH,OAAO,CAAC,gCAAgC;IAgBxC;;OAEG;IACI,oBAAoB,IAAI,yBAAyB;IAUxD;;OAEG;IACI,yBAAyB,IAAI,MAAM,EAAE;IAO5C;;OAEG;IACI,eAAe,IAAI;QACxB,uBAAuB,EAAE,MAAM,EAAE,CAAC;KACnC;IAUD;;;OAGG;IACI,sBAAsB,IAAI,gCAAgC;IAUjE;;;;;;;;;;;;OAYG;IACI,wBAAwB,IAAI,sBAAsB;IAIzD;;;;;;OAMG;IACH,OAAO,CAAC,4BAA4B;IAuCpC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,kCAAkC;IAoD1C;;;;;;OAMG;IACH,OAAO,CAAC,sCAAsC;CAkC/C"}
+{"version":3,"file":"resources-repository.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/resources-repository.frontend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAC9G,OAAO,EAAE,gCAAgC,EAAE,MAAM,gFAAgF,CAAC;AAOlI,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AAIxG,OAAO,EAGL,2CAA2C,EAE3C,oBAAoB,EAoByC,MAAM,uBAAuB,CAAC;AAC7F,OAAO,KAAK,EAEV,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAGV,yBAAyB,EAE1B,MAAM,+DAA+D,CAAC;AAgJvE,qBAAa,kCAAkC;IAM3C,OAAO,CAAC,UAAU;IALpB,OAAO,CAAC,QAAQ,CAA0C;IAC1D,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,mBAAmB,CAAiD;gBAGlE,UAAU,EAAE,sBAAsB;IAG5C;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;;;;;;;OASG;IACU,mBAAmB,CAC9B,8CAA8C,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,2CAA2C,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;KAAE,EAC9H,oCAAoC,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAChE,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,EAC5D,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3C,kBAAkB,CAAC,EAAE,kBAAkB,EACvC,kCAAkC,CAAC,EAAE,2BAA2B,EAAE,GACjE,OAAO,CAAC,IAAI,CAAC;IAmPhB,OAAO,CAAC,2CAA2C;IA4BnD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,8BAA8B;IA0BtC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,mCAAmC;IAyN3C,OAAO,CAAC,qCAAqC;IAsB7C,OAAO,CAAC,qCAAqC;IAsC7C;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mCAAmC;IAwJ3C;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wCAAwC;IAsFhD;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,wBAAwB;IAyChC;;;;;;OAMG;IACH,OAAO,CAAC,gCAAgC;IAgBxC;;OAEG;IACI,oBAAoB,IAAI,yBAAyB;IAUxD;;OAEG;IACI,yBAAyB,IAAI,MAAM,EAAE;IAO5C;;OAEG;IACI,eAAe,IAAI;QACxB,uBAAuB,EAAE,MAAM,EAAE,CAAC;KACnC;IAUD;;;OAGG;IACI,sBAAsB,IAAI,gCAAgC;IAUjE;;;;;;;;;;;;OAYG;IACI,wBAAwB,IAAI,sBAAsB;IAIzD;;;;;;OAMG;IACH,OAAO,CAAC,4BAA4B;IAuCpC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,kCAAkC;IAoD1C;;;;;;OAMG;IACH,OAAO,CAAC,sCAAsC;CAkC/C"}

package/dist/esm/core/resources/resources-repository.frontend.service.js

@@ -15,7 +15,7 @@ import { FrontendView_ScopeMode } from '../../core/config/views-frontend.schemas
 import { listResourceOwnedViewReferences, } from '../../core/config/resource-owned-view-resolution.frontend.utils.js';
 import { envLoader } from '../../core/runtime/env-variable-loader.frontend.service.js';
 import { FRONTEND_SCHEMA_KEY, } from '../../core/resources/resources.frontend.schemas.js';
-import { ENGINE_RUNTIME_REQUIRED_RESOURCE_TYPES, ResourcePrimaryScope, coreShared_ResourcesConfigurations_FactoryMap, coreSharedResourceRelationship, coreResourceShared_FieldIdentifier, coreResourceShared_FieldIdentifierPriority, ResourceOperationVariantType, ResourceOperationFrontendSurface, ResourcesConfigOperationsUrlsBuilderUtils, ResourcesConfigOperationsDtosBuilderUtils, ErrorType, ErrorCustomMessageReference, computeSubtreeMap, CoreResourceOperation, deriveRequestDto, ParentDisplay, RelationshipDisplayConfigSchema, reconcileGeneratedRelationshipBulkOperations, Resources_SharedUtils, ResourceRelationshipAccessScopeStrategy, coreNotificationBadgeDefinitions, findDuplicateRelationshipRegistrations, } from '@wildo-ai/saas-models';
+import { ENGINE_RUNTIME_REQUIRED_RESOURCE_TYPES, ResourcePrimaryScope, coreShared_ResourcesConfigurations_FactoryMap, coreSharedResourceRelationship, coreResourceShared_FieldIdentifier, coreResourceShared_FieldIdentifierPriority, ResourceOperationVariantType, ResourceOperationFrontendSurface, ResourcesConfigOperationsUrlsBuilderUtils, ResourcesConfigOperationsDtosBuilderUtils, ErrorType, ErrorCustomMessageReference, computeSubtreeMap, CoreResourceOperation, deriveRequestDto, ParentDisplay, RelationshipDisplayConfigSchema, reconcileGeneratedRelationshipBulkOperations, Resources_SharedUtils, ResourceRelationshipAccessScopeStrategy, coreNotificationBadgeDefinitions, findDuplicateRelationshipRegistrations, describeCaughtError } from '@wildo-ai/saas-models';
 import { buildResourceCompositeViewTranslationRef, } from '../../core/config/composite-view.schemas.js';
 import { getZodObjectShape, isForeignKeyField, unwrapSchema, getCustomFieldMetadata, addDecorators, ZodDecorator, ForeignKeyDisplayMode, SCHEMA_METADATA, getFileMetadata, getFieldUIDisplayConfig, declaredFileNatureCanDisplay, FileDisplayPresentation, FileActivationPolicy } from '@wildo-ai/zod-decorators';
 import { sharedErrorBuilder } from '../../core/errors/errors-builder.frontend.services.js';
@@ -337,7 +337,7 @@ export class ResourcesRepositoryFrontendService {
             if (error?.wildoError) {
                 throw error;
             }
-            throw this.buildConfigurationError(ErrorCustomMessageReference.CONFIGURATION, { message: `Failed to initialize frontend resources: ${error instanceof Error ? error.message : String(error)}` });
+            throw this.buildConfigurationError(ErrorCustomMessageReference.CONFIGURATION, { message: `Failed to initialize frontend resources: ${describeCaughtError(error)}` });
         }
     }
     normalizeResourceConfigurationRelationships(allResourceConfigurations, allResourceFieldIdentifiers) {