@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.5

package/dist/esm/core/resources/ResourceReadCacheBridge.js

@@ -87,18 +87,8 @@ export const ResourceReadCacheBridge = () => {
             logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });
         }
     }, [readCache]);
-    /*
-     * The SAFE accessor, because this bridge is mounted ABOVE `AppScopeProvider`.
-     *
-     * The provider lives inside the router shell, while the bridges sit beside `RMMRegistryProvider`
-     * one subtree up — so the throwing `useAppScope()` crashes the whole application here, which is
-     * exactly what it did the first time. `ScopedResourceRegistryProvider` already solved this the
-     * same way and for the same reason ("If AppScopeProvider isn't mounted yet, behave exactly like
-     * the base registry").
-     *
-     * The consequence is deliberate and safe: with no scope mounted, `currentOrganizationId` is
-     * `undefined` and stays that way, so the organization-switch effect below never fires a spurious
-     * clear — and nothing is being cached at that point either, because the socket has no rooms.
+    /* The production bridge lives inside AppScopeProvider so organization changes reach this owner.
+     * The safe accessor keeps isolated/headless mounts uncached until their coverage is established.
      */
     const appScope = useAppScopeSafe();
     const currentOrganizationId = appScope?.currentOrganizationId ?? null;
@@ -168,6 +158,10 @@ export const ResourceReadCacheBridge = () => {
              */
             contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },
         }).then((result) => {
+            // A reset may retire this claim while its acknowledgement is in flight. Compare the request
+            // identity, not just the room name: switching away and back may request the same room again.
+            if (requestedRoomsRef.current.get(roomName) !== qualifier)
+                return;
             if (result?.success) {
                 confirmedRoomsRef.current.add(roomName);
                 logDebug('scope room confirmed', { roomName });
@@ -179,7 +173,8 @@ export const ResourceReadCacheBridge = () => {
                 logDebug('scope room not confirmed; entries under it stay unservable', { roomName });
             }
         }).catch(() => {
-            requestedRoomsRef.current.delete(roomName);
+            if (requestedRoomsRef.current.get(roomName) === qualifier)
+                requestedRoomsRef.current.delete(roomName);
         });
     }, [claimResourceRoom]);
     const claimScopeRoomRef = useRef(claimScopeRoom);
@@ -284,6 +279,15 @@ export const ResourceReadCacheBridge = () => {
     useEffect(() => {
         readCache.setApplicationId(currentApplicationId);
     }, [currentApplicationId, readCache]);
+    /*
+     * And the ambient ORGANIZATION id, for the hydration window rather than for an unaddressable scope.
+     * The value is already read above for the cache-clearing effect; the read path needs it too, or an
+     * org-scoped read issued before the route publishes one is cached under a room that hears no
+     * org invalidation (#1137). Same effect shape, so the two stay obviously parallel.
+     */
+    useEffect(() => {
+        readCache.setOrganizationId(currentOrganizationId);
+    }, [currentOrganizationId, readCache]);
     /*
      * A RE-connect invalidates every confirmation. The FIRST connection does not.
      *
@@ -318,8 +322,8 @@ export const ResourceReadCacheBridge = () => {
      * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.
      *
      * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page
-     * reload, and reads are tenancy-filtered at the repository. So without this, switching organization
-     * would serve the previous tenant's rows from cache. The rooms are re-claimed under the new
+     * reload, and reads are tenancy-filtered at the repository. Clear entries and coverage rather than
+     * relying on every cache key or prior room claim to encode the new scope. The rooms are re-claimed under the new
      * organization by the next read that wants them.
      */
     useEffect(() => {

package/dist/esm/core/resources/ResourceReadCacheBridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceReadCacheBridge.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAGlG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAC/D,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAE/D,mCAAmC;AACnC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,EAAE,CAAC;IACpG,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,4BAA4B,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE;gBAC7F,yBAAyB,CAAC;QAChC,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChB;;;;;;;;;;;;OAYG;IACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACtE;;;;;;;;;;;OAWG;IACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,kBAAkB,EAAE,WAAW,EAAE,aAAa;WACtE,QAAQ,EAAE,oBAAoB;WAC9B,IAAI,CAAC;IAEV,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,MAAM,CAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,sFAAsF;IACtF,MAAM,iBAAiB,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAChH;;;;;;;;;;;;OAYG;IACH,MAAM,eAAe,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9G;;;;;;;;;OASG;IACH,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC;;;OAGG;IACH,MAAM,cAAc,GAAG,WAAW,CAAC,CACjC,QAAgB,EAChB,SAAgE,EAChE,EAAE;QACF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QACpD,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAEnD,KAAK,iBAAiB,CAAC;YACrB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;YAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B;;;;eAIG;YACH,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;SAC/E,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,qFAAqF;gBACrF,0EAA0E;gBAC1E,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3C,QAAQ,CAAC,4DAA4D,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAExB,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,cAAc,CAAC;IAE3C,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9D,KAAK,mBAAmB,CAAC;gBACvB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;gBAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACnD,kBAAkB,CAAC,OAAO,GAAG,eAAe,CAAC;IAE7C;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,SAAS,CAAC;QAExB,MAAM,SAAS,GAAkC;YAC/C,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;gBAChC,IAAI,CAAC,cAAc,CAAC,OAAO;oBAAE,OAAO,KAAK,CAAC;gBAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAC1D,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACjE,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;gBACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACjF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBAEtD;;;;uBAIG;oBACH,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBAC5B,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;wBAClE,QAAQ,CAAC,0CAA0C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACnE,SAAS;oBACX,CAAC;oBAED,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;SACF,CAAC;QAEF,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,GAAG,EAAE;YACV,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,CAAC;QACF;;;;;;;;;;;;;WAaG;IACL,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAE/C,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,QAAQ,CAAC,sDAAsD,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,QAAQ;YAAE,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC,EAAE,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,0BAA0B,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,uBAAuB,GAAG,0BAA0B,CAAC,OAAO,CAAC;QACnE,0BAA0B,CAAC,OAAO,GAAG,eAAe,CAAC;QACrD,IAAI,eAAe,IAAI,CAAC;YAAE,OAAO;QACjC,IAAI,eAAe,KAAK,uBAAuB;YAAE,OAAO;QACxD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,QAAQ,CAAC,uCAAuC,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,QAAQ,CAAC,2CAA2C,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnF,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAExD,mFAAmF;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV;;;;;;;eAOG;YACH,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvD,QAAQ,CAAC,gCAAgC,EAAE;gBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,cAAc,KAAK,+BAA+B,CAAC,uBAAuB;aAChG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC","sourcesContent":["import React, { useCallback, useContext, useEffect, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  WebSocketResourceDeliveryTarget,\n  buildScopeRoomName,\n  type ResourceScopeRoomQualifier,\n  type WS_ResourceDeletedPayload,\n  type WS_ResourceUpdatedPayload,\n} from '@wildo-ai/saas-models';\n\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport type { ResourceReadCoverageAuthority } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCacheBridge');\nlogger.setDebugTypeLogging('ResourceReadCacheBridge', false);\n\n/** The owner key every scope-room claim from this bridge is made under. */\nconst CLAIM_OWNER_PREFIX = 'read-cache';\n\n/**\n * The environment flag that removes the read cache from the picture entirely.\n *\n * Mirrors `COMPANION_INTROSPECTION_CACHE` on the companion side, deliberately: the same word, the\n * same value, so an operator who has met one knows the other. Optional, and read through the\n * NON-throwing accessor — a diagnostic toggle must never be able to stop an application booting\n * because it was not declared.\n */\nconst READ_CACHE_ENVIRONMENT_FLAG = 'VITE_RESOURCE_READ_CACHE';\n\n/** The value that turns it off. */\nconst READ_CACHE_DISABLED_VALUE = 'off';\n\n/**\n * Makes cached resource reads SERVABLE, by joining the rooms through which they would be told they\n * are stale — and by dropping them when that stops being true.\n *\n * ## Why the cache cannot do this itself\n *\n * `ResourceReadCacheFrontendService` is a plain service on the HTTP client, deliberately: both read\n * paths reach it and it must outlive any React tree. But the answer to \"would an invalidation for\n * this entry reach us?\" lives in the WebSocket connection, which is React-scoped. So the cache holds\n * the entries and this bridge holds the truth about whether they may be served.\n *\n * ## Scope rooms, which the engine already emits into and nobody joined\n *\n * On a mutation the notifications dispatcher emits twice: into the per-row RESOURCE room, and into\n * the SCOPE rooms. Its own comment says why they are separate — *\"Scope rooms are emitted separately\n * from per-resource rooms because they serve list/cache refresh semantics rather than authoritative\n * per-resource replay semantics.\"* That is exactly this tier's channel, and until now nothing on the\n * client subscribed to it: rooms were claimed only from live `ResourceMutationManager` instances, so\n * a LIST had no way to hear that it had changed.\n *\n * The room set for an entry is computed by `deriveResourceScopeRoomQualifiers` — the SAME function\n * the dispatcher uses to decide where to emit, moved into `@wildo-ai/saas-models` for this purpose.\n * Two implementations of that rule would fail silently: a client subscribed to the wrong room does\n * not error, it simply never hears anything.\n *\n * ## Coverage is refused, not assumed\n *\n * `covers()` answers `true` only while the socket is connected AND every room for the entry is\n * claimed AND confirmed by the server. A subscription the server REFUSED — `verifyResourceAccess`\n * denies a PUBLIC socket outright — leaves the room unconfirmed, so nothing is served from it. The\n * cache then behaves exactly as it did before this tier existed.\n */\nexport const ResourceReadCacheBridge: React.FC = () => {\n  const { on, isConnected, connectionCount, claimResourceRoom, releaseResourceRoom } = useWebSocket();\n  const { getReadCache } = useResourceRegistry();\n  /*\n   * Resolved ONCE per render into the cache INSTANCE, and every effect below depends on that\n   * instance rather than on `getReadCache`.\n   *\n   * `ResourceRegistryContext` builds its value object unmemoized, so `getReadCache` is a fresh\n   * closure on every provider render. Depending on it re-ran the authority effect each time, and\n   * `setCoverageAuthority` clears the cache by design — so the cache was emptied on essentially\n   * every render and could never survive long enough to be useful. The instance itself comes from\n   * the HTTP-client singleton and is stable for the life of the application.\n   *\n   * Found by a mutation test: removing the organization-switch clear left every case green, because\n   * this effect was already clearing the cache constantly and masking it.\n   */\n  const readCache = getReadCache();\n\n  /*\n   * The operator escape hatch, applied before anything can be stored.\n   *\n   * The blast radius of this tier is every generated application on both persistence adapters, so\n   * someone who SUSPECTS the cache has to be able to take it out of the picture without a rebuild\n   * and without waiting for a fix. `VITE_RESOURCE_READ_CACHE=off` does that, and the cache then\n   * behaves exactly as it did before this tier existed.\n   */\n  useEffect(() => {\n    const disabled = envLoader.readOptionalEnvironmentValue(READ_CACHE_ENVIRONMENT_FLAG)?.toLowerCase()\n      === READ_CACHE_DISABLED_VALUE;\n    readCache.setEnabled(!disabled);\n    if (disabled) {\n      logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });\n    }\n  }, [readCache]);\n  /*\n   * The SAFE accessor, because this bridge is mounted ABOVE `AppScopeProvider`.\n   *\n   * The provider lives inside the router shell, while the bridges sit beside `RMMRegistryProvider`\n   * one subtree up — so the throwing `useAppScope()` crashes the whole application here, which is\n   * exactly what it did the first time. `ScopedResourceRegistryProvider` already solved this the\n   * same way and for the same reason (\"If AppScopeProvider isn't mounted yet, behave exactly like\n   * the base registry\").\n   *\n   * The consequence is deliberate and safe: with no scope mounted, `currentOrganizationId` is\n   * `undefined` and stays that way, so the organization-switch effect below never fires a spurious\n   * clear — and nothing is being cached at that point either, because the socket has no rooms.\n   */\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n  /*\n   * The application id comes from APP CONFIG, not from the scope and not from the token.\n   *\n   * Both were checked on the running stack (issue #283): the access token's claims carry `userId`\n   * and no `applicationId`, and `AppScopeContext` derives its `currentApplicationId` by decoding\n   * that same token — so it is null wherever the claim is absent, which is everywhere. The backend\n   * now publishes the id on `appIdentity`, which is the one surface that actually has it.\n   *\n   * Read through `useContext` rather than `useApplication()` on purpose: that hook THROWS outside\n   * its provider, and a bridge that crashes the tree when mounted a level too high is a defect this\n   * component has already had once.\n   */\n  const applicationContext = useContext(ApplicationContext);\n  const currentApplicationId = applicationContext?.appIdentity?.applicationId\n    ?? appScope?.currentApplicationId\n    ?? null;\n\n  /** Rooms the server has CONFIRMED. Only these make an entry servable. */\n  const confirmedRoomsRef = useRef<Set<string>>(new Set());\n  /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */\n  const requestedRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n  /*\n   * Rooms a read asked for BEFORE the socket was up, held until it is.\n   *\n   * This is the difference between a cache that works on a page load and one that does not.\n   * `requestCoverage` used to return silently when disconnected, and nothing ever asked again — so\n   * every read that completed during the connect window was stored uncovered and stayed uncovered\n   * for the surface's whole life. Measured on the running dogfood application (2026-09-10): a single\n   * navigation to the todos collection issued FOUR coverage requests for `todos`, all four with\n   * `isConnected: false`, and the client emitted no `resource:subscribe` frame at all. Whether a room\n   * was ever claimed came down to whether some LATER read happened to re-enter `store()` after the\n   * socket came up, which is incidental rather than designed — and on the e2e lane's timing it did\n   * not happen, so the scenario timed out against a subscription nobody had asked for.\n   */\n  const pendingRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n  /*\n   * LATEST-VALUE refs, read by the authority rather than captured by it.\n   *\n   * The authority must be installed ONCE per cache instance, because installing it CLEARS the cache\n   * (see `setCoverageAuthority`). Capturing `isConnected` or the claim callbacks in the closure would\n   * put them in the effect's dependency list and reinstall the authority every time any of them\n   * changed — which is exactly what happened on the `isConnected` false -> true edge, wiping the\n   * cache at the precise moment it first became coverable. Assigned during render so a read firing\n   * from a sibling's effect cannot observe a stale value.\n   */\n  const isConnectedRef = useRef(isConnected);\n  isConnectedRef.current = isConnected;\n\n  /*\n   * Claim one scope room and record the outcome. The single place a claim is made, so a room queued\n   * while disconnected and a room requested while connected travel identical paths.\n   */\n  const claimScopeRoom = useCallback((\n    roomName: string,\n    qualifier: ResourceScopeRoomQualifier & { resourceType: string },\n  ) => {\n    if (requestedRoomsRef.current.has(roomName)) return;\n    requestedRoomsRef.current.set(roomName, qualifier);\n\n    void claimResourceRoom({\n      ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n      resourceType: qualifier.resourceType,\n      scopeKey: qualifier.scopeKey,\n      scopeId: qualifier.scopeId,\n      /*\n       * The scope's own identifier, in the shape the server's authorization expects. The subscribe\n       * handler refuses an EMPTY `contextResourceIdentifiers` outright, and `verifyScopeAccess` reads\n       * the scope from it — so this is the authorization input, not decoration.\n       */\n      contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n    }).then((result) => {\n      if (result?.success) {\n        confirmedRoomsRef.current.add(roomName);\n        logDebug('scope room confirmed', { roomName });\n      } else {\n        // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever\n        // served — the cache degrades to the un-cached path rather than guessing.\n        requestedRoomsRef.current.delete(roomName);\n        logDebug('scope room not confirmed; entries under it stay unservable', { roomName });\n      }\n    }).catch(() => {\n      requestedRoomsRef.current.delete(roomName);\n    });\n  }, [claimResourceRoom]);\n\n  const claimScopeRoomRef = useRef(claimScopeRoom);\n  claimScopeRoomRef.current = claimScopeRoom;\n\n  const releaseAllRooms = useCallback(() => {\n    for (const [roomName, qualifier] of requestedRoomsRef.current) {\n      void releaseResourceRoom({\n        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n        resourceType: qualifier.resourceType,\n        scopeKey: qualifier.scopeKey,\n        scopeId: qualifier.scopeId,\n        contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n      });\n    }\n    requestedRoomsRef.current.clear();\n    confirmedRoomsRef.current.clear();\n    pendingRoomsRef.current.clear();\n  }, [releaseResourceRoom]);\n\n  const releaseAllRoomsRef = useRef(releaseAllRooms);\n  releaseAllRoomsRef.current = releaseAllRooms;\n\n  /*\n   * Install the authority, and take it away again on unmount.\n   *\n   * `setCoverageAuthority` clears the cache on both edges by construction — an authority that is\n   * being replaced knows nothing about what the previous one covered, so every held entry is of\n   * unknown freshness.\n   */\n  useEffect(() => {\n    const cache = readCache;\n\n    const authority: ResourceReadCoverageAuthority = {\n      covers: (_resourceType, scopes) => {\n        if (!isConnectedRef.current) return false;\n        if (scopes.length === 0) return false;\n        return scopes.every((scope) => confirmedRoomsRef.current.has(\n          buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId),\n        ));\n      },\n      requestCoverage: (resourceType, scopes) => {\n        for (const scope of scopes) {\n          const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);\n          if (requestedRoomsRef.current.has(roomName)) continue;\n\n          /*\n           * DEFERRED, not dropped. A read completing before the socket is up is the ordinary case on\n           * a page load, not an edge — the surface's own first read is usually one of them — and\n           * returning here silently left its entry uncovered forever.\n           */\n          if (!isConnectedRef.current) {\n            pendingRoomsRef.current.set(roomName, { ...scope, resourceType });\n            logDebug('coverage deferred until the socket is up', { roomName });\n            continue;\n          }\n\n          claimScopeRoomRef.current(roomName, { ...scope, resourceType });\n        }\n      },\n    };\n\n    cache.setCoverageAuthority(authority);\n    return () => {\n      cache.setCoverageAuthority(null);\n      releaseAllRoomsRef.current();\n    };\n    /*\n     * `readCache` ALONE, and that is the whole point of the refs above.\n     *\n     * `isConnected` was in this list until 2026-09-10, and because installing an authority clears\n     * the cache, the false -> true edge emptied it at the exact moment it first became coverable.\n     * Every entry a page had read up to that point was discarded, and the coverage those reads had\n     * asked for had already been dropped by the disconnected early-return. The tier could therefore\n     * only ever cache reads that happened to occur AFTER the socket came up — on the dogfood\n     * application's todos collection, none did, so it served nothing while reporting nothing.\n     *\n     * The authority's IDENTITY does not change when the socket connects; only its ability to claim\n     * rooms does, and that is now read from a ref. A genuine socket REPLACEMENT is a different event\n     * and is still handled, by the `connectionCount` effect below.\n     */\n  }, [readCache]);\n\n  /*\n   * Claim what the page already asked for, as soon as the socket can carry it.\n   *\n   * The other half of the deferral above. Without this the queue would only be a politer way of\n   * dropping the request.\n   */\n  useEffect(() => {\n    if (!isConnected) return;\n    if (pendingRoomsRef.current.size === 0) return;\n\n    const deferred = [...pendingRoomsRef.current.entries()];\n    pendingRoomsRef.current.clear();\n    logDebug('claiming coverage deferred during the connect window', { rooms: deferred.length });\n    for (const [roomName, qualifier] of deferred) claimScopeRoom(roomName, qualifier);\n  }, [isConnected, claimScopeRoom]);\n\n  /*\n   * Hand the cache the ambient application id.\n   *\n   * An APPLICATION-scoped resource's room is keyed on it, and no URL carries one — so without this\n   * the read path cannot name the room it belongs in, and a push addressed there is received by\n   * nobody (issue #283). The bridge is the right place because it is a COMPONENT and can read the\n   * app scope; the cache service is plain and cannot.\n   */\n  useEffect(() => {\n    readCache.setApplicationId(currentApplicationId);\n  }, [currentApplicationId, readCache]);\n\n  /*\n   * A RE-connect invalidates every confirmation. The FIRST connection does not.\n   *\n   * Rooms are per-SOCKET, so a REPLACEMENT socket has joined nothing — and the window in which a\n   * socket was down is exactly the window in which a mutation could have gone unheard. Both halves\n   * point the same way for a reconnect: drop the cache and start the claims again.\n   *\n   * Neither half holds for connection number one, and treating it the same was the second half of\n   * the page-load defect. There is no earlier socket whose rooms could have lapsed, nothing was ever\n   * served (`covers()` answers false while disconnected, so a stale entry could not have reached a\n   * caller), and the \"window in which a mutation went unheard\" is the page load itself — during\n   * which the entries were read from the server and are as fresh as any read. Clearing there simply\n   * discarded the first screen's worth of reads and left the tier inert for the surface that\n   * triggered them. The residual window — a mutation between a read and its room being joined — is\n   * unavoidable in any read-through cache and exists identically for the first read AFTER connection.\n   */\n  const previousConnectionCountRef = useRef(connectionCount);\n  useEffect(() => {\n    const previousConnectionCount = previousConnectionCountRef.current;\n    previousConnectionCountRef.current = connectionCount;\n    if (connectionCount <= 1) return;\n    if (connectionCount === previousConnectionCount) return;\n    confirmedRoomsRef.current.clear();\n    requestedRoomsRef.current.clear();\n    pendingRoomsRef.current.clear();\n    readCache.clear();\n    logDebug('reconnected; coverage and cache reset', { connectionCount });\n  }, [connectionCount, readCache]);\n\n  /*\n   * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.\n   *\n   * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page\n   * reload, and reads are tenancy-filtered at the repository. So without this, switching organization\n   * would serve the previous tenant's rows from cache. The rooms are re-claimed under the new\n   * organization by the next read that wants them.\n   */\n  useEffect(() => {\n    readCache.clear();\n    releaseAllRooms();\n    logDebug('organization scope changed; cache cleared', { currentOrganizationId });\n  }, [currentOrganizationId, readCache, releaseAllRooms]);\n\n  /* Invalidate on anything the server says changed, at whatever grade it arrives. */\n  useEffect(() => {\n    if (!isConnected) return;\n\n    const unsubscribeUpdated = on<WS_ResourceUpdatedPayload>(\n      CoreWebSocketEvent.RESOURCE_UPDATED,\n      (payload) => {\n        /*\n         * Every grade invalidates, including the SYNC grade that carries a full row.\n         *\n         * A sync payload is authoritative for ONE row, and a cached entry is usually a LIST whose\n         * membership, ordering and pagination the row cannot settle — an added row does not announce\n         * where it belongs. Patching the row into the cached list would be a guess; dropping the\n         * entry costs one refetch and cannot be wrong.\n         */\n        readCache.invalidateResourceType(payload.resourceType);\n        logDebug('invalidated by resource update', {\n          resourceType: payload.resourceType,\n          deliveryTarget: payload.deliveryTarget,\n          isScopeRoom: payload.deliveryTarget === WebSocketResourceDeliveryTarget.SCOPE_ROOM_NOTIFICATION,\n        });\n      },\n    );\n\n    const unsubscribeDeleted = on<WS_ResourceDeletedPayload>(\n      CoreWebSocketEvent.RESOURCE_DELETED,\n      (payload) => {\n        readCache.invalidateResourceType(payload.resourceType);\n      },\n    );\n\n    return () => {\n      unsubscribeUpdated();\n      unsubscribeDeleted();\n    };\n  }, [on, isConnected, readCache]);\n\n  return null;\n};\n"]}
+{"version":3,"file":"ResourceReadCacheBridge.js","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceReadCacheBridge.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAGlG,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;AACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAC/D,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAE/D,mCAAmC;AACnC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAa,GAAG,EAAE;IACpD,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,YAAY,EAAE,CAAC;IACpG,MAAM,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,4BAA4B,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE;gBAC7F,yBAAyB,CAAC;QAChC,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChB;;OAEG;IACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IACtE;;;;;;;;;;;OAWG;IACH,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,kBAAkB,EAAE,WAAW,EAAE,aAAa;WACtE,QAAQ,EAAE,oBAAoB;WAC9B,IAAI,CAAC;IAEV,yEAAyE;IACzE,MAAM,iBAAiB,GAAG,MAAM,CAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,sFAAsF;IACtF,MAAM,iBAAiB,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAChH;;;;;;;;;;;;OAYG;IACH,MAAM,eAAe,GAAG,MAAM,CAAqE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9G;;;;;;;;;OASG;IACH,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC;IAErC;;;OAGG;IACH,MAAM,cAAc,GAAG,WAAW,CAAC,CACjC,QAAgB,EAChB,SAAgE,EAChE,EAAE;QACF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO;QACpD,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAEnD,KAAK,iBAAiB,CAAC;YACrB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;YAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B;;;;eAIG;YACH,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;SAC/E,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,4FAA4F;YAC5F,6FAA6F;YAC7F,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAAE,OAAO;YAClE,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,qFAAqF;gBACrF,0EAA0E;gBAC1E,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3C,QAAQ,CAAC,4DAA4D,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAExB,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,GAAG,cAAc,CAAC;IAE3C,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;YAC9D,KAAK,mBAAmB,CAAC;gBACvB,QAAQ,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE;gBAC7C,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,0BAA0B,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACnD,kBAAkB,CAAC,OAAO,GAAG,eAAe,CAAC;IAE7C;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,SAAS,CAAC;QAExB,MAAM,SAAS,GAAkC;YAC/C,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;gBAChC,IAAI,CAAC,cAAc,CAAC,OAAO;oBAAE,OAAO,KAAK,CAAC;gBAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAC1D,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACjE,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;gBACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACjF,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBAEtD;;;;uBAIG;oBACH,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;wBAC5B,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;wBAClE,QAAQ,CAAC,0CAA0C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACnE,SAAS;oBACX,CAAC;oBAED,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;SACF,CAAC;QAEF,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,GAAG,EAAE;YACV,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,CAAC;QACF;;;;;;;;;;;;;WAaG;IACL,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAE/C,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,QAAQ,CAAC,sDAAsD,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,QAAQ;YAAE,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IACnD,CAAC,EAAE,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtC;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IACrD,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,CAAC;IAEvC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,0BAA0B,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,uBAAuB,GAAG,0BAA0B,CAAC,OAAO,CAAC;QACnE,0BAA0B,CAAC,OAAO,GAAG,eAAe,CAAC;QACrD,IAAI,eAAe,IAAI,CAAC;YAAE,OAAO;QACjC,IAAI,eAAe,KAAK,uBAAuB;YAAE,OAAO;QACxD,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,QAAQ,CAAC,uCAAuC,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,QAAQ,CAAC,2CAA2C,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnF,CAAC,EAAE,CAAC,qBAAqB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAExD,mFAAmF;IACnF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO;QAEzB,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV;;;;;;;eAOG;YACH,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvD,QAAQ,CAAC,gCAAgC,EAAE;gBACzC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,OAAO,CAAC,cAAc,KAAK,+BAA+B,CAAC,uBAAuB;aAChG,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAC3B,kBAAkB,CAAC,gBAAgB,EACnC,CAAC,OAAO,EAAE,EAAE;YACV,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC,CACF,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC","sourcesContent":["import React, { useCallback, useContext, useEffect, useRef } from 'react';\nimport {\n  CoreWebSocketEvent,\n  WebSocketResourceDeliveryTarget,\n  buildScopeRoomName,\n  type ResourceScopeRoomQualifier,\n  type WS_ResourceDeletedPayload,\n  type WS_ResourceUpdatedPayload,\n} from '@wildo-ai/saas-models';\n\nimport { useWebSocket } from '~wildo-frontend-lib/core/requests/websockets/useWebSocket';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport type { ResourceReadCoverageAuthority } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\n\nconst logger = LoggerFrontendService.getLogger();\nconst logDebug = logger.debugByType('ResourceReadCacheBridge');\nlogger.setDebugTypeLogging('ResourceReadCacheBridge', false);\n\n/** The owner key every scope-room claim from this bridge is made under. */\nconst CLAIM_OWNER_PREFIX = 'read-cache';\n\n/**\n * The environment flag that removes the read cache from the picture entirely.\n *\n * Mirrors `COMPANION_INTROSPECTION_CACHE` on the companion side, deliberately: the same word, the\n * same value, so an operator who has met one knows the other. Optional, and read through the\n * NON-throwing accessor — a diagnostic toggle must never be able to stop an application booting\n * because it was not declared.\n */\nconst READ_CACHE_ENVIRONMENT_FLAG = 'VITE_RESOURCE_READ_CACHE';\n\n/** The value that turns it off. */\nconst READ_CACHE_DISABLED_VALUE = 'off';\n\n/**\n * Makes cached resource reads SERVABLE, by joining the rooms through which they would be told they\n * are stale — and by dropping them when that stops being true.\n *\n * ## Why the cache cannot do this itself\n *\n * `ResourceReadCacheFrontendService` is a plain service on the HTTP client, deliberately: both read\n * paths reach it and it must outlive any React tree. But the answer to \"would an invalidation for\n * this entry reach us?\" lives in the WebSocket connection, which is React-scoped. So the cache holds\n * the entries and this bridge holds the truth about whether they may be served.\n *\n * ## Scope rooms, which the engine already emits into and nobody joined\n *\n * On a mutation the notifications dispatcher emits twice: into the per-row RESOURCE room, and into\n * the SCOPE rooms. Its own comment says why they are separate — *\"Scope rooms are emitted separately\n * from per-resource rooms because they serve list/cache refresh semantics rather than authoritative\n * per-resource replay semantics.\"* That is exactly this tier's channel, and until now nothing on the\n * client subscribed to it: rooms were claimed only from live `ResourceMutationManager` instances, so\n * a LIST had no way to hear that it had changed.\n *\n * The room set for an entry is computed by `deriveResourceScopeRoomQualifiers` — the SAME function\n * the dispatcher uses to decide where to emit, moved into `@wildo-ai/saas-models` for this purpose.\n * Two implementations of that rule would fail silently: a client subscribed to the wrong room does\n * not error, it simply never hears anything.\n *\n * ## Coverage is refused, not assumed\n *\n * `covers()` answers `true` only while the socket is connected AND every room for the entry is\n * claimed AND confirmed by the server. A subscription the server REFUSED — `verifyResourceAccess`\n * denies a PUBLIC socket outright — leaves the room unconfirmed, so nothing is served from it. The\n * cache then behaves exactly as it did before this tier existed.\n */\nexport const ResourceReadCacheBridge: React.FC = () => {\n  const { on, isConnected, connectionCount, claimResourceRoom, releaseResourceRoom } = useWebSocket();\n  const { getReadCache } = useResourceRegistry();\n  /*\n   * Resolved ONCE per render into the cache INSTANCE, and every effect below depends on that\n   * instance rather than on `getReadCache`.\n   *\n   * `ResourceRegistryContext` builds its value object unmemoized, so `getReadCache` is a fresh\n   * closure on every provider render. Depending on it re-ran the authority effect each time, and\n   * `setCoverageAuthority` clears the cache by design — so the cache was emptied on essentially\n   * every render and could never survive long enough to be useful. The instance itself comes from\n   * the HTTP-client singleton and is stable for the life of the application.\n   *\n   * Found by a mutation test: removing the organization-switch clear left every case green, because\n   * this effect was already clearing the cache constantly and masking it.\n   */\n  const readCache = getReadCache();\n\n  /*\n   * The operator escape hatch, applied before anything can be stored.\n   *\n   * The blast radius of this tier is every generated application on both persistence adapters, so\n   * someone who SUSPECTS the cache has to be able to take it out of the picture without a rebuild\n   * and without waiting for a fix. `VITE_RESOURCE_READ_CACHE=off` does that, and the cache then\n   * behaves exactly as it did before this tier existed.\n   */\n  useEffect(() => {\n    const disabled = envLoader.readOptionalEnvironmentValue(READ_CACHE_ENVIRONMENT_FLAG)?.toLowerCase()\n      === READ_CACHE_DISABLED_VALUE;\n    readCache.setEnabled(!disabled);\n    if (disabled) {\n      logger.info('Resource read cache disabled by environment', { flag: READ_CACHE_ENVIRONMENT_FLAG });\n    }\n  }, [readCache]);\n  /* The production bridge lives inside AppScopeProvider so organization changes reach this owner.\n   * The safe accessor keeps isolated/headless mounts uncached until their coverage is established.\n   */\n  const appScope = useAppScopeSafe();\n  const currentOrganizationId = appScope?.currentOrganizationId ?? null;\n  /*\n   * The application id comes from APP CONFIG, not from the scope and not from the token.\n   *\n   * Both were checked on the running stack (issue #283): the access token's claims carry `userId`\n   * and no `applicationId`, and `AppScopeContext` derives its `currentApplicationId` by decoding\n   * that same token — so it is null wherever the claim is absent, which is everywhere. The backend\n   * now publishes the id on `appIdentity`, which is the one surface that actually has it.\n   *\n   * Read through `useContext` rather than `useApplication()` on purpose: that hook THROWS outside\n   * its provider, and a bridge that crashes the tree when mounted a level too high is a defect this\n   * component has already had once.\n   */\n  const applicationContext = useContext(ApplicationContext);\n  const currentApplicationId = applicationContext?.appIdentity?.applicationId\n    ?? appScope?.currentApplicationId\n    ?? null;\n\n  /** Rooms the server has CONFIRMED. Only these make an entry servable. */\n  const confirmedRoomsRef = useRef<Set<string>>(new Set());\n  /** Rooms claimed but not yet confirmed, so a burst of reads claims each room once. */\n  const requestedRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n  /*\n   * Rooms a read asked for BEFORE the socket was up, held until it is.\n   *\n   * This is the difference between a cache that works on a page load and one that does not.\n   * `requestCoverage` used to return silently when disconnected, and nothing ever asked again — so\n   * every read that completed during the connect window was stored uncovered and stayed uncovered\n   * for the surface's whole life. Measured on the running dogfood application (2026-09-10): a single\n   * navigation to the todos collection issued FOUR coverage requests for `todos`, all four with\n   * `isConnected: false`, and the client emitted no `resource:subscribe` frame at all. Whether a room\n   * was ever claimed came down to whether some LATER read happened to re-enter `store()` after the\n   * socket came up, which is incidental rather than designed — and on the e2e lane's timing it did\n   * not happen, so the scenario timed out against a subscription nobody had asked for.\n   */\n  const pendingRoomsRef = useRef<Map<string, ResourceScopeRoomQualifier & { resourceType: string }>>(new Map());\n  /*\n   * LATEST-VALUE refs, read by the authority rather than captured by it.\n   *\n   * The authority must be installed ONCE per cache instance, because installing it CLEARS the cache\n   * (see `setCoverageAuthority`). Capturing `isConnected` or the claim callbacks in the closure would\n   * put them in the effect's dependency list and reinstall the authority every time any of them\n   * changed — which is exactly what happened on the `isConnected` false -> true edge, wiping the\n   * cache at the precise moment it first became coverable. Assigned during render so a read firing\n   * from a sibling's effect cannot observe a stale value.\n   */\n  const isConnectedRef = useRef(isConnected);\n  isConnectedRef.current = isConnected;\n\n  /*\n   * Claim one scope room and record the outcome. The single place a claim is made, so a room queued\n   * while disconnected and a room requested while connected travel identical paths.\n   */\n  const claimScopeRoom = useCallback((\n    roomName: string,\n    qualifier: ResourceScopeRoomQualifier & { resourceType: string },\n  ) => {\n    if (requestedRoomsRef.current.has(roomName)) return;\n    requestedRoomsRef.current.set(roomName, qualifier);\n\n    void claimResourceRoom({\n      ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n      resourceType: qualifier.resourceType,\n      scopeKey: qualifier.scopeKey,\n      scopeId: qualifier.scopeId,\n      /*\n       * The scope's own identifier, in the shape the server's authorization expects. The subscribe\n       * handler refuses an EMPTY `contextResourceIdentifiers` outright, and `verifyScopeAccess` reads\n       * the scope from it — so this is the authorization input, not decoration.\n       */\n      contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n    }).then((result) => {\n      // A reset may retire this claim while its acknowledgement is in flight. Compare the request\n      // identity, not just the room name: switching away and back may request the same room again.\n      if (requestedRoomsRef.current.get(roomName) !== qualifier) return;\n      if (result?.success) {\n        confirmedRoomsRef.current.add(roomName);\n        logDebug('scope room confirmed', { roomName });\n      } else {\n        // Refused or unreachable. The room stays unconfirmed, so nothing keyed to it is ever\n        // served — the cache degrades to the un-cached path rather than guessing.\n        requestedRoomsRef.current.delete(roomName);\n        logDebug('scope room not confirmed; entries under it stay unservable', { roomName });\n      }\n    }).catch(() => {\n      if (requestedRoomsRef.current.get(roomName) === qualifier) requestedRoomsRef.current.delete(roomName);\n    });\n  }, [claimResourceRoom]);\n\n  const claimScopeRoomRef = useRef(claimScopeRoom);\n  claimScopeRoomRef.current = claimScopeRoom;\n\n  const releaseAllRooms = useCallback(() => {\n    for (const [roomName, qualifier] of requestedRoomsRef.current) {\n      void releaseResourceRoom({\n        ownerKey: `${CLAIM_OWNER_PREFIX}:${roomName}`,\n        resourceType: qualifier.resourceType,\n        scopeKey: qualifier.scopeKey,\n        scopeId: qualifier.scopeId,\n        contextResourceIdentifiers: { [`${qualifier.scopeKey}Id`]: qualifier.scopeId },\n      });\n    }\n    requestedRoomsRef.current.clear();\n    confirmedRoomsRef.current.clear();\n    pendingRoomsRef.current.clear();\n  }, [releaseResourceRoom]);\n\n  const releaseAllRoomsRef = useRef(releaseAllRooms);\n  releaseAllRoomsRef.current = releaseAllRooms;\n\n  /*\n   * Install the authority, and take it away again on unmount.\n   *\n   * `setCoverageAuthority` clears the cache on both edges by construction — an authority that is\n   * being replaced knows nothing about what the previous one covered, so every held entry is of\n   * unknown freshness.\n   */\n  useEffect(() => {\n    const cache = readCache;\n\n    const authority: ResourceReadCoverageAuthority = {\n      covers: (_resourceType, scopes) => {\n        if (!isConnectedRef.current) return false;\n        if (scopes.length === 0) return false;\n        return scopes.every((scope) => confirmedRoomsRef.current.has(\n          buildScopeRoomName(_resourceType, scope.scopeKey, scope.scopeId),\n        ));\n      },\n      requestCoverage: (resourceType, scopes) => {\n        for (const scope of scopes) {\n          const roomName = buildScopeRoomName(resourceType, scope.scopeKey, scope.scopeId);\n          if (requestedRoomsRef.current.has(roomName)) continue;\n\n          /*\n           * DEFERRED, not dropped. A read completing before the socket is up is the ordinary case on\n           * a page load, not an edge — the surface's own first read is usually one of them — and\n           * returning here silently left its entry uncovered forever.\n           */\n          if (!isConnectedRef.current) {\n            pendingRoomsRef.current.set(roomName, { ...scope, resourceType });\n            logDebug('coverage deferred until the socket is up', { roomName });\n            continue;\n          }\n\n          claimScopeRoomRef.current(roomName, { ...scope, resourceType });\n        }\n      },\n    };\n\n    cache.setCoverageAuthority(authority);\n    return () => {\n      cache.setCoverageAuthority(null);\n      releaseAllRoomsRef.current();\n    };\n    /*\n     * `readCache` ALONE, and that is the whole point of the refs above.\n     *\n     * `isConnected` was in this list until 2026-09-10, and because installing an authority clears\n     * the cache, the false -> true edge emptied it at the exact moment it first became coverable.\n     * Every entry a page had read up to that point was discarded, and the coverage those reads had\n     * asked for had already been dropped by the disconnected early-return. The tier could therefore\n     * only ever cache reads that happened to occur AFTER the socket came up — on the dogfood\n     * application's todos collection, none did, so it served nothing while reporting nothing.\n     *\n     * The authority's IDENTITY does not change when the socket connects; only its ability to claim\n     * rooms does, and that is now read from a ref. A genuine socket REPLACEMENT is a different event\n     * and is still handled, by the `connectionCount` effect below.\n     */\n  }, [readCache]);\n\n  /*\n   * Claim what the page already asked for, as soon as the socket can carry it.\n   *\n   * The other half of the deferral above. Without this the queue would only be a politer way of\n   * dropping the request.\n   */\n  useEffect(() => {\n    if (!isConnected) return;\n    if (pendingRoomsRef.current.size === 0) return;\n\n    const deferred = [...pendingRoomsRef.current.entries()];\n    pendingRoomsRef.current.clear();\n    logDebug('claiming coverage deferred during the connect window', { rooms: deferred.length });\n    for (const [roomName, qualifier] of deferred) claimScopeRoom(roomName, qualifier);\n  }, [isConnected, claimScopeRoom]);\n\n  /*\n   * Hand the cache the ambient application id.\n   *\n   * An APPLICATION-scoped resource's room is keyed on it, and no URL carries one — so without this\n   * the read path cannot name the room it belongs in, and a push addressed there is received by\n   * nobody (issue #283). The bridge is the right place because it is a COMPONENT and can read the\n   * app scope; the cache service is plain and cannot.\n   */\n  useEffect(() => {\n    readCache.setApplicationId(currentApplicationId);\n  }, [currentApplicationId, readCache]);\n\n  /*\n   * And the ambient ORGANIZATION id, for the hydration window rather than for an unaddressable scope.\n   * The value is already read above for the cache-clearing effect; the read path needs it too, or an\n   * org-scoped read issued before the route publishes one is cached under a room that hears no\n   * org invalidation (#1137). Same effect shape, so the two stay obviously parallel.\n   */\n  useEffect(() => {\n    readCache.setOrganizationId(currentOrganizationId);\n  }, [currentOrganizationId, readCache]);\n\n  /*\n   * A RE-connect invalidates every confirmation. The FIRST connection does not.\n   *\n   * Rooms are per-SOCKET, so a REPLACEMENT socket has joined nothing — and the window in which a\n   * socket was down is exactly the window in which a mutation could have gone unheard. Both halves\n   * point the same way for a reconnect: drop the cache and start the claims again.\n   *\n   * Neither half holds for connection number one, and treating it the same was the second half of\n   * the page-load defect. There is no earlier socket whose rooms could have lapsed, nothing was ever\n   * served (`covers()` answers false while disconnected, so a stale entry could not have reached a\n   * caller), and the \"window in which a mutation went unheard\" is the page load itself — during\n   * which the entries were read from the server and are as fresh as any read. Clearing there simply\n   * discarded the first screen's worth of reads and left the tier inert for the surface that\n   * triggered them. The residual window — a mutation between a read and its room being joined — is\n   * unavoidable in any read-through cache and exists identically for the first read AFTER connection.\n   */\n  const previousConnectionCountRef = useRef(connectionCount);\n  useEffect(() => {\n    const previousConnectionCount = previousConnectionCountRef.current;\n    previousConnectionCountRef.current = connectionCount;\n    if (connectionCount <= 1) return;\n    if (connectionCount === previousConnectionCount) return;\n    confirmedRoomsRef.current.clear();\n    requestedRoomsRef.current.clear();\n    pendingRoomsRef.current.clear();\n    readCache.clear();\n    logDebug('reconnected; coverage and cache reset', { connectionCount });\n  }, [connectionCount, readCache]);\n\n  /*\n   * An ORGANIZATION SWITCH changes which rows a read returns without changing the request.\n   *\n   * `commitOrganizationScopeValue` is a `setState` plus a WebSocket room re-point — there is no page\n   * reload, and reads are tenancy-filtered at the repository. Clear entries and coverage rather than\n   * relying on every cache key or prior room claim to encode the new scope. The rooms are re-claimed under the new\n   * organization by the next read that wants them.\n   */\n  useEffect(() => {\n    readCache.clear();\n    releaseAllRooms();\n    logDebug('organization scope changed; cache cleared', { currentOrganizationId });\n  }, [currentOrganizationId, readCache, releaseAllRooms]);\n\n  /* Invalidate on anything the server says changed, at whatever grade it arrives. */\n  useEffect(() => {\n    if (!isConnected) return;\n\n    const unsubscribeUpdated = on<WS_ResourceUpdatedPayload>(\n      CoreWebSocketEvent.RESOURCE_UPDATED,\n      (payload) => {\n        /*\n         * Every grade invalidates, including the SYNC grade that carries a full row.\n         *\n         * A sync payload is authoritative for ONE row, and a cached entry is usually a LIST whose\n         * membership, ordering and pagination the row cannot settle — an added row does not announce\n         * where it belongs. Patching the row into the cached list would be a guess; dropping the\n         * entry costs one refetch and cannot be wrong.\n         */\n        readCache.invalidateResourceType(payload.resourceType);\n        logDebug('invalidated by resource update', {\n          resourceType: payload.resourceType,\n          deliveryTarget: payload.deliveryTarget,\n          isScopeRoom: payload.deliveryTarget === WebSocketResourceDeliveryTarget.SCOPE_ROOM_NOTIFICATION,\n        });\n      },\n    );\n\n    const unsubscribeDeleted = on<WS_ResourceDeletedPayload>(\n      CoreWebSocketEvent.RESOURCE_DELETED,\n      (payload) => {\n        readCache.invalidateResourceType(payload.resourceType);\n      },\n    );\n\n    return () => {\n      unsubscribeUpdated();\n      unsubscribeDeleted();\n    };\n  }, [on, isConnected, readCache]);\n\n  return null;\n};\n"]}

package/dist/esm/core/resources/ResourceRegistryContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistryContext.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAChI,OAAO,EAEL,mCAAmC,EAIpC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAmC,MAAM,OAAO,CAAC;AAEzF,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sEAAsE,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAE1L,OAAO,EAAkC,KAAK,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AAE1K;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACtC,MAAM,MAAM,uBAAuB,GAAG,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,EAAE,yBAAyB,CAAC;IAGpC;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,EAC3B,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,+BAA+B,GAAG,4BAA4B,EAC1E,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAC;IAGxB;;;OAGG;IACH,wBAAwB,EAAE,CAAC,WAAW,GAAG,GAAG,EAC1C,MAAM,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;OAEG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAC9D;QAAE,kBAAkB,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAGhE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,gCAAgC,GAAG,SAAS,CAAC;IACjG,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;IACtD,yBAAyB,EAAE,MAAM,MAAM,EAAE,CAAC;IAC1C,0BAA0B,EAAE,MAAM,MAAM,EAAE,CAAC;IAE3C;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,gCAAgC,CAAC;IAGrD,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/D,oBAAoB,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAClE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,mBAAmB,EAAE,kCAAkC,CAAC;CACzD;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAqE,CAAC;AAEjK;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,6BAA6B,CAqO5E,CAAC"}
+{"version":3,"file":"ResourceRegistryContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAChI,OAAO,EAEL,mCAAmC,EAIpC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,EAAiB,SAAS,EAAmC,MAAM,OAAO,CAAC;AAEzF,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,sEAAsE,CAAC;AAC9I,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,uCAAuC,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAE1L,OAAO,EAAkC,KAAK,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AAE1K;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACtC,MAAM,MAAM,uBAAuB,GAAG,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,gBAAgB,CAAC;AAEvG,MAAM,WAAW,2BAA2B;IAE1C,QAAQ,EAAE,yBAAyB,CAAC;IAGpC;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,CAAC,SAAS,GAAG,GAAG,EAC3B,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,+BAA+B,GAAG,4BAA4B,EAC1E,OAAO,CAAC,EAAE,cAAc,KACrB,OAAO,CAAC,SAAS,CAAC,CAAC;IAGxB;;;OAGG;IACH,wBAAwB,EAAE,CAAC,WAAW,GAAG,GAAG,EAC1C,MAAM,EAAE,IAAI,CAAC,8BAA8B,CAAC,WAAW,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB;;OAEG;IACH,wBAAwB,EAAE,CACxB,SAAS,EAAE,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAC9D;QAAE,kBAAkB,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAGhE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/C,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,gCAAgC,GAAG,SAAS,CAAC;IACjG,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;IACtD,yBAAyB,EAAE,MAAM,MAAM,EAAE,CAAC;IAC1C,0BAA0B,EAAE,MAAM,MAAM,EAAE,CAAC;IAE3C;;;;;;OAMG;IACH,YAAY,EAAE,MAAM,gCAAgC,CAAC;IAGrD,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/D,oBAAoB,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,CAAC;IAClE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,SAAS,CAAC;IACpB,mBAAmB,EAAE,kCAAkC,CAAC;CACzD;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAqE,CAAC;AAEjK;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,EAAE,CAAC,6BAA6B,CAqO5E,CAAC"}

package/dist/esm/core/resources/ResourceRegistryContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResourceRegistryContext.js","sourceRoot":"","sources":["../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,qBAAqB,EAErB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAc,EAAE,aAAa,EAAa,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAQlG,OAAO,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACnI,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAqF1K;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2D,aAAa,CAA0C,SAAS,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE;IACrH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IACzE,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,uFAAuF;IACvF,uCAAuC;IACvC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,wBAAwB,EAAE,CAAC;IAE7E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,QAAQ,CAAC,sBAA6B,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnG,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EACnC,aAAsC,EACtC,UAA0E,EAC1E,OAAwB,EACJ,EAAE;QACtB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,aAAa,KAAK,QAAQ;YACxD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,SAAS;YACjC,CAAC,CAAC,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM;YACxF,CAAC,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAEpI,IAAI,iBAAiB,EAAE,CAAC;YACtB,8BAA8B;YAC9B,OAAO,mBAAmB,CAAC,sBAAsB,CAC/C,gBAAgB,EAChB,UAA0C,EAC1C,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,OAAO,mBAAmB,CAAC,WAAW,CACpC,gBAAgB,EAChB,UAA6C,EAC7C,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EACH,MAA8F,EAC5E,EAAE;QACpB,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,QAAQ;YAC3B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAC3C,SAAiE,EACjE,EAAE;QACF,OAAO,8BAA8B,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAW,EAAE;QAChE,OAAO,YAAY,IAAI,QAAQ,CAAC,sBAAsB,CAAC;IACzD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAgD,EAAE;QAClH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAA8B,EAAE;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,yBAAyB,GAAG,WAAW,CAAC,GAAa,EAAE;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,0BAA0B,GAAG,WAAW,CAAC,GAAa,EAAE;QAC5D,OAAO,mBAAmB,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACrC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;OAIG;IACH,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,OAA4B,EAAQ,EAAE;QAChF,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,OAAiC,EAAQ,EAAE;QACnF,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,qBAAqB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QACpE,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;;;;OAOG;IACH,MAAM,YAAY,GAAG,WAAW,CAC9B,GAAqC,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAC1E,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,MAAM,KAAK,GAAgC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,QAAQ;QACR,QAAQ;QAER,wBAAwB;QACxB,WAAW;QAEX,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QAExB,UAAU;QACV,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QAEZ,OAAO;QACP,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,EAAE;QACF,QAAQ;QACR,WAAW;QACX,wBAAwB;QACxB,wBAAwB;QACxB,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QACZ,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,CAAC;IAEH,OAAO,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoC,CAAC;AACvG,CAAC,CAAC","sourcesContent":["import type { ResourceReadCacheFrontendService } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\nimport {\n  CoreResourceOperation,\n  ResourceConfiguration_OperationPath,\n  ResourcesConfig_OperationPathUtils,\n  validateRequiredForeignKeyFillability,\n  ForeignKeyFillabilityViolationSeverity,\n} from '@wildo-ai/saas-models';\n\nimport React, { createContext, ReactNode, useCallback, useEffect, useMemo } from 'react';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport {\n  ResourceOperationCallParameters,\n  ResourceSearchCallParameters\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-resources.frontend.service';\nimport { RequestOptions, TokenRenewalHandler, StepUpAuthHandler } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { ResourcesRepositoryFrontendService } from './resources-repository.frontend.service';\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { resolveEffectiveCoreOperationFromOperation } from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\n\n/**\n * Resource Registry Context\n * Manages resource configurations and operations\n *\n * ARCHITECTURE NOTE (Scopes):\n * - The base provider is `ResourceRegistryProvider`, which exposes `doOperation()` and the registry.\n * - The app can optionally wrap it with `ScopedResourceRegistryProvider` (in `core/resources/ScopedResourceRegistryProvider.tsx`).\n *   That wrapper **overrides `doOperation()`** to automatically inject the current `AppScope` into\n *   `parameters.contextualParameters` for nested callers (strictly relevant-only).\n * - This means `useResourceRegistry().doOperation(...)` may be the base implementation OR a scoped override,\n *   depending on provider hierarchy.\n */\n\nexport type OperationPathKey = string;\nexport type OperationPathIdentifier = ResourceConfiguration_OperationPath<any, any> | OperationPathKey;\n\nexport interface ResourceRegistryContextType {\n  // State\n  registry: FrontendResourcesRegistry;\n\n  // Main execution method\n  /**\n   * Execute a resource operation (API_CALL or SEARCH).\n   *\n   * IMPORTANT:\n   * This function can be transparently overridden by a nested provider (see note above),\n   * so callers usually should NOT manually inject global scope/context unless they are intentionally\n   * overriding/adding to the contextual parameters for a specific call.\n   *\n   * Merge semantics (when scoped):\n   * - scoped provider injects relevant AppScope fields\n   * - explicit `parameters.contextualParameters` passed by the caller override injected values\n   */\n  doOperation: <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ) => Promise<TResponse>;\n\n  // EnabledCondition helpers\n  /**\n   * Evaluate `operation.enabledCondition()` with the current registry + doOperation.\n   * This is used by UI to decide whether an operation should be shown/enabled.\n   */\n  evaluateOperationEnabled: <TMainSchema = any>(\n    params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n  ) => Promise<boolean>;\n\n  /**\n   * Static context-needs extraction for an operation (enabledCondition + prefix ops).\n   */\n  getOperationContextNeeds: (\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => { needsObjectContext: boolean; needsUserContext: boolean };\n\n  // Helpers\n  hasResource: (resourceName: string) => boolean;\n  getResourceConfiguration: (resourceName: string) => AnyFrontendResourceConfiguration | undefined;\n  getResourcesRegistry: () => FrontendResourcesRegistry;\n  getAvailableResourceTypes: () => string[];\n  getAvailableOperationPaths: () => string[];\n\n  /**\n   * The engine-wide resource READ cache.\n   *\n   * Exposed so the WebSocket layer can install its coverage authority and invalidate through it.\n   * The CACHE is exposed rather than the HTTP client that owns it: a consumer of this context has no\n   * business reaching the transport, and narrowing the surface keeps it that way.\n   */\n  getReadCache: () => ResourceReadCacheFrontendService;\n  \n  // Auth token management\n  setAuthToken: (token: string | null) => void;\n  setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;\n  setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;\n  setConsumableToken: (token: string | null) => void;\n}\n\nexport interface ResourceRegistryProviderProps {\n  children: ReactNode;\n  resourcesRepository: ResourcesRepositoryFrontendService;\n}\n\n/**\n * Resource Registry Context\n * Exported for use in separate hook file (Fast Refresh compatibility)\n * @internal - Use useResourceRegistry() hook instead of accessing this directly\n */\nexport const ResourceRegistryContext: React.Context<ResourceRegistryContextType | undefined> = createContext<ResourceRegistryContextType | undefined>(undefined);\n\n/**\n * ResourceRegistryProvider - Simplified version without location dependency\n * isActive computation is now handled by NavigationProvider which is more appropriate\n */\nexport const ResourceRegistryProvider: React.FC<ResourceRegistryProviderProps> = ({ children, resourcesRepository }) => {\n  // Get the registry and resources HTTP client from the repository service\n  const registry = resourcesRepository.getResourcesRegistry();\n  const resourcesHttpClient = resourcesRepository.getResourcesHttpClient();\n  // The base application HTTP client (exposed app-wide as `useApplication().httpClient`)\n  // is a SEPARATE instance from the resources client above. Resource-integrated file\n  // operations (`FormFieldFile` upload / metadata / delete) run through it, so it must\n  // receive the SAME auth token / renewal handler / step-up handler / consumable token\n  // that the resources client gets — otherwise those file requests go out unauthenticated\n  // (401). File upload was the first authenticated consumer of this base client, so this\n  // wiring gap was previously invisible.\n  const applicationHttpClient = resourcesRepository.getApplicationHttpClient();\n\n  // Dev-only mirror of the backend startup guardrail: surface required-FK\n  // fillability violations in the browser console so a frontend-focused dev sees\n  // them where the create form actually lives. The backend is the AUTHORITATIVE\n  // gate (it hard-fails on FAIL severity), so here we only warn — never throw,\n  // and always fail-open so a validator edge case can't affect app load.\n  useEffect(() => {\n    if (!envLoader.isDevelopment()) {\n      return;\n    }\n    try {\n      const violations = validateRequiredForeignKeyFillability(registry.resourceConfigurations as any);\n      for (const violation of violations) {\n        const label = violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL ? 'FAIL' : 'WARN';\n        // eslint-disable-next-line no-console\n        console.warn(`[required-fk-fillability:${label}] ${violation.kind}: ${violation.message}`);\n      }\n    } catch {\n      // Fail-open — never let the guardrail affect app load.\n    }\n  }, [registry]);\n\n  /**\n   * Main operation execution method - handles both regular and search operations\n   */\n  const doOperation = useCallback(async <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ): Promise<TResponse> => {\n    // Convert OperationPath object to string key if needed\n    const operationPathKey = typeof operationPath === 'string' \n      ? operationPath \n      : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n\n    const operation = resourcesHttpClient.getOperationDetails(operationPathKey);\n    const isSearchOperation = operation\n      ? resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.SEARCH\n      : ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey).operationIdentifier === CoreResourceOperation.SEARCH;\n\n    if (isSearchOperation) {\n      // Call search-specific method\n      return resourcesHttpClient.executeSearchOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceSearchCallParameters,\n        options\n      );\n    } else {\n      // Call regular operation method\n      return resourcesHttpClient.doOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceOperationCallParameters,\n        options\n      );\n    }\n  }, [resourcesHttpClient]);\n\n  /**\n   * Evaluate if an operation is enabled (enabledCondition).\n   * Centralized here so all consumers automatically benefit from any doOperation overrides\n   * (e.g. ScopedResourceRegistryProvider injecting AppScope).\n   */\n  const evaluateOperationEnabled = useCallback(\n    async <TMainSchema = any>(\n      params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n    ): Promise<boolean> => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: registry,\n        doOperation,\n      });\n    },\n    [registry, doOperation]\n  );\n\n  const getOperationContextNeeds = useCallback((\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => {\n    return OperationEnabledConditionUtils.getOperationContextNeeds(operation);\n  }, []);\n\n  /**\n   * Check if resource is available\n   */\n  const hasResource = useCallback((resourceName: string): boolean => {\n    return resourceName in registry.resourceConfigurations;\n  }, [registry]);\n\n  /**\n   * Get resource configuration\n   */\n  const getResourceConfiguration = useCallback((resourceName: string): AnyFrontendResourceConfiguration | undefined => {\n    return registry.resourceConfigurations[resourceName];\n  }, [registry]);\n\n  /**\n   * Get the full resources registry\n   */\n  const getResourcesRegistry = useCallback((): FrontendResourcesRegistry => {\n    return registry;\n  }, [registry]);\n\n  /**\n   * Get available resource types\n   */\n  const getAvailableResourceTypes = useCallback((): string[] => {\n    return Object.keys(registry.resourceConfigurations);\n  }, [registry]);\n\n  /**\n   * Get available operation paths\n   */\n  const getAvailableOperationPaths = useCallback((): string[] => {\n    return resourcesHttpClient.getAvailableOperationPaths();\n  }, [resourcesHttpClient]);\n  \n  /**\n   * Set authentication token for resource operations\n   */\n  const setAuthToken = useCallback((token: string | null): void => {\n    if (token) {\n      resourcesHttpClient.setAuthToken(token);\n      applicationHttpClient.setAuthToken(token);\n    } else {\n      resourcesHttpClient.clearAuthToken();\n      applicationHttpClient.clearAuthToken();\n    }\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /**\n   * Set token renewal handler for resource operations.\n   * Called by AuthSessionContext to enable automatic token refresh on 401s\n   * from the resources HTTP client (not just the manual calls client).\n   */\n  const setTokenRenewalHandler = useCallback((handler: TokenRenewalHandler): void => {\n    resourcesHttpClient.setTokenRenewalHandler(handler);\n    applicationHttpClient.setTokenRenewalHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setStepUpAuthHandler = useCallback((handler: StepUpAuthHandler | null): void => {\n    resourcesHttpClient.setStepUpAuthHandler(handler);\n    applicationHttpClient.setStepUpAuthHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setConsumableToken = useCallback((token: string | null): void => {\n    resourcesHttpClient.setConsumableToken(token);\n    applicationHttpClient.setConsumableToken(token);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /*\n   * Stable across renders, like every other member below.\n   *\n   * It used to be an inline arrow in the value object, which made it a NEW identity every render.\n   * `ResourceReadCacheBridge` depended on it in an effect whose job includes installing the cache's\n   * coverage authority — and installing an authority CLEARS the cache — so the read cache was emptied\n   * on essentially every render and could never do its job (issue #248).\n   */\n  const getReadCache = useCallback(\n    (): ResourceReadCacheFrontendService => resourcesHttpClient.getReadCache(),\n    [resourcesHttpClient],\n  );\n\n  /*\n   * MEMOIZED, and that is load-bearing rather than tidy.\n   *\n   * This value reaches 75 consumer files through `useResourceRegistry()`. Rebuilt every render, it\n   * re-rendered all of them and handed each a NEW identity for every function on it — so any consumer\n   * placing one in a dependency array got an effect that fired on every render. That is not\n   * hypothetical: it emptied the resource read cache continuously until #248 was fixed, and it\n   * defeated `ScopedResourceRegistryProvider`'s own `useMemo`, which depends on this object as\n   * `base`.\n   *\n   * Every member is itself a `useCallback` over the repository's stable service instances, so this\n   * memo only changes when the registry or a client actually does.\n   */\n  const value: ResourceRegistryContextType = useMemo(() => ({\n    // State\n    registry,\n\n    // Main execution method\n    doOperation,\n\n    // EnabledCondition helpers\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n\n    // Helpers\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n\n    // Auth\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  }), [\n    registry,\n    doOperation,\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  ]);\n\n  return <ResourceRegistryContext.Provider value={value}>{children}</ResourceRegistryContext.Provider>;\n};\n\n// useResourceRegistry hook is now in separate file: ./useResourceRegistry.ts\n// This separation is required for React Fast Refresh compatibility\n"]}
+{"version":3,"file":"ResourceRegistryContext.js","sourceRoot":"","sources":["../../../../../src/core/resources/ResourceRegistryContext.tsx"],"names":[],"mappings":";AACA,OAAO,EACL,qBAAqB,EAErB,kCAAkC,EAClC,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,OAAc,EAAE,aAAa,EAAa,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAQlG,OAAO,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACnI,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAqF1K;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2D,aAAa,CAA0C,SAAS,CAAC,CAAC;AAEjK;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,EAAE;IACrH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IACzE,uFAAuF;IACvF,mFAAmF;IACnF,qFAAqF;IACrF,qFAAqF;IACrF,wFAAwF;IACxF,uFAAuF;IACvF,uCAAuC;IACvC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC,wBAAwB,EAAE,CAAC;IAE7E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,qCAAqC,CAAC,QAAQ,CAAC,sBAA6B,CAAC,CAAC;YACjG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,KAAK,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnG,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EACnC,aAAsC,EACtC,UAA0E,EAC1E,OAAwB,EACJ,EAAE;QACtB,uDAAuD;QACvD,MAAM,gBAAgB,GAAG,OAAO,aAAa,KAAK,QAAQ;YACxD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,SAAS;YACjC,CAAC,CAAC,0CAA0C,CAAC,SAAS,CAAC,KAAK,qBAAqB,CAAC,MAAM;YACxF,CAAC,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM,CAAC;QAEpI,IAAI,iBAAiB,EAAE,CAAC;YACtB,8BAA8B;YAC9B,OAAO,mBAAmB,CAAC,sBAAsB,CAC/C,gBAAgB,EAChB,UAA0C,EAC1C,OAAO,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,OAAO,mBAAmB,CAAC,WAAW,CACpC,gBAAgB,EAChB,UAA6C,EAC7C,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;;;OAIG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EACH,MAA8F,EAC5E,EAAE;QACpB,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,QAAQ;YAC3B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAC3C,SAAiE,EACjE,EAAE;QACF,OAAO,8BAA8B,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP;;OAEG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAW,EAAE;QAChE,OAAO,YAAY,IAAI,QAAQ,CAAC,sBAAsB,CAAC;IACzD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAAC,CAAC,YAAoB,EAAgD,EAAE;QAClH,OAAO,QAAQ,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAA8B,EAAE;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,yBAAyB,GAAG,WAAW,CAAC,GAAa,EAAE;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf;;OAEG;IACH,MAAM,0BAA0B,GAAG,WAAW,CAAC,GAAa,EAAE;QAC5D,OAAO,mBAAmB,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,cAAc,EAAE,CAAC;YACrC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;OAIG;IACH,MAAM,sBAAsB,GAAG,WAAW,CAAC,CAAC,OAA4B,EAAQ,EAAE;QAChF,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,qBAAqB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,OAAiC,EAAQ,EAAE;QACnF,mBAAmB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,qBAAqB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD,MAAM,kBAAkB,GAAG,WAAW,CAAC,CAAC,KAAoB,EAAQ,EAAE;QACpE,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC9C,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEjD;;;;;;;OAOG;IACH,MAAM,YAAY,GAAG,WAAW,CAC9B,GAAqC,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,EAC1E,CAAC,mBAAmB,CAAC,CACtB,CAAC;IAEF;;;;;;;;;;;;OAYG;IACH,MAAM,KAAK,GAAgC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,QAAQ;QACR,QAAQ;QAER,wBAAwB;QACxB,WAAW;QAEX,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QAExB,UAAU;QACV,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QAEZ,OAAO;QACP,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,EAAE;QACF,QAAQ;QACR,WAAW;QACX,wBAAwB;QACxB,wBAAwB;QACxB,WAAW;QACX,wBAAwB;QACxB,oBAAoB;QACpB,yBAAyB;QACzB,0BAA0B;QAC1B,YAAY;QACZ,YAAY;QACZ,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC,CAAC;IAEH,OAAO,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoC,CAAC;AACvG,CAAC,CAAC","sourcesContent":["import type { ResourceReadCacheFrontendService } from '~wildo-frontend-lib/core/resources/resource-read-cache.frontend.service';\nimport {\n  CoreResourceOperation,\n  ResourceConfiguration_OperationPath,\n  ResourcesConfig_OperationPathUtils,\n  validateRequiredForeignKeyFillability,\n  ForeignKeyFillabilityViolationSeverity,\n} from '@wildo-ai/saas-models';\n\nimport React, { createContext, ReactNode, useCallback, useEffect, useMemo } from 'react';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport {\n  ResourceOperationCallParameters,\n  ResourceSearchCallParameters\n} from '~wildo-frontend-lib/core/requests/wildo-http-client-resources.frontend.service';\nimport { RequestOptions, TokenRenewalHandler, StepUpAuthHandler } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { ResourcesRepositoryFrontendService } from './resources-repository.frontend.service';\nimport type { AnyFrontendResourceConfiguration, FrontendResourceConfiguration_Operation, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { resolveEffectiveCoreOperationFromOperation } from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\n\n/**\n * Resource Registry Context\n * Manages resource configurations and operations\n *\n * ARCHITECTURE NOTE (Scopes):\n * - The base provider is `ResourceRegistryProvider`, which exposes `doOperation()` and the registry.\n * - The app can optionally wrap it with `ScopedResourceRegistryProvider` (in `core/resources/ScopedResourceRegistryProvider.tsx`).\n *   That wrapper **overrides `doOperation()`** to automatically inject the current `AppScope` into\n *   `parameters.contextualParameters` for nested callers (strictly relevant-only).\n * - This means `useResourceRegistry().doOperation(...)` may be the base implementation OR a scoped override,\n *   depending on provider hierarchy.\n */\n\nexport type OperationPathKey = string;\nexport type OperationPathIdentifier = ResourceConfiguration_OperationPath<any, any> | OperationPathKey;\n\nexport interface ResourceRegistryContextType {\n  // State\n  registry: FrontendResourcesRegistry;\n\n  // Main execution method\n  /**\n   * Execute a resource operation (API_CALL or SEARCH).\n   *\n   * IMPORTANT:\n   * This function can be transparently overridden by a nested provider (see note above),\n   * so callers usually should NOT manually inject global scope/context unless they are intentionally\n   * overriding/adding to the contextual parameters for a specific call.\n   *\n   * Merge semantics (when scoped):\n   * - scoped provider injects relevant AppScope fields\n   * - explicit `parameters.contextualParameters` passed by the caller override injected values\n   */\n  doOperation: <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ) => Promise<TResponse>;\n\n  // EnabledCondition helpers\n  /**\n   * Evaluate `operation.enabledCondition()` with the current registry + doOperation.\n   * This is used by UI to decide whether an operation should be shown/enabled.\n   */\n  evaluateOperationEnabled: <TMainSchema = any>(\n    params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n  ) => Promise<boolean>;\n\n  /**\n   * Static context-needs extraction for an operation (enabledCondition + prefix ops).\n   */\n  getOperationContextNeeds: (\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => { needsObjectContext: boolean; needsUserContext: boolean };\n\n  // Helpers\n  hasResource: (resourceName: string) => boolean;\n  getResourceConfiguration: (resourceName: string) => AnyFrontendResourceConfiguration | undefined;\n  getResourcesRegistry: () => FrontendResourcesRegistry;\n  getAvailableResourceTypes: () => string[];\n  getAvailableOperationPaths: () => string[];\n\n  /**\n   * The engine-wide resource READ cache.\n   *\n   * Exposed so the WebSocket layer can install its coverage authority and invalidate through it.\n   * The CACHE is exposed rather than the HTTP client that owns it: a consumer of this context has no\n   * business reaching the transport, and narrowing the surface keeps it that way.\n   */\n  getReadCache: () => ResourceReadCacheFrontendService;\n  \n  // Auth token management\n  setAuthToken: (token: string | null) => void;\n  setTokenRenewalHandler: (handler: TokenRenewalHandler) => void;\n  setStepUpAuthHandler: (handler: StepUpAuthHandler | null) => void;\n  setConsumableToken: (token: string | null) => void;\n}\n\nexport interface ResourceRegistryProviderProps {\n  children: ReactNode;\n  resourcesRepository: ResourcesRepositoryFrontendService;\n}\n\n/**\n * Resource Registry Context\n * Exported for use in separate hook file (Fast Refresh compatibility)\n * @internal - Use useResourceRegistry() hook instead of accessing this directly\n */\nexport const ResourceRegistryContext: React.Context<ResourceRegistryContextType | undefined> = createContext<ResourceRegistryContextType | undefined>(undefined);\n\n/**\n * ResourceRegistryProvider - Simplified version without location dependency\n * isActive computation is now handled by NavigationProvider which is more appropriate\n */\nexport const ResourceRegistryProvider: React.FC<ResourceRegistryProviderProps> = ({ children, resourcesRepository }) => {\n  // Get the registry and resources HTTP client from the repository service\n  const registry = resourcesRepository.getResourcesRegistry();\n  const resourcesHttpClient = resourcesRepository.getResourcesHttpClient();\n  // The base application HTTP client (exposed app-wide as `useApplication().httpClient`)\n  // is a SEPARATE instance from the resources client above. Resource-integrated file\n  // operations (`FormFieldFile` upload / metadata / delete) run through it, so it must\n  // receive the SAME auth token / renewal handler / step-up handler / consumable token\n  // that the resources client gets — otherwise those file requests go out unauthenticated\n  // (401). File upload was the first authenticated consumer of this base client, so this\n  // wiring gap was previously invisible.\n  const applicationHttpClient = resourcesRepository.getApplicationHttpClient();\n\n  // Dev-only mirror of the backend startup guardrail: surface required-FK\n  // fillability violations in the browser console so a frontend-focused dev sees\n  // them where the create form actually lives. The backend is the AUTHORITATIVE\n  // gate (it hard-fails on FAIL severity), so here we only warn — never throw,\n  // and always fail-open so a validator edge case can't affect app load.\n  useEffect(() => {\n    if (!envLoader.isDevelopment()) {\n      return;\n    }\n    try {\n      const violations = validateRequiredForeignKeyFillability(registry.resourceConfigurations as any);\n      for (const violation of violations) {\n        const label = violation.severity === ForeignKeyFillabilityViolationSeverity.FAIL ? 'FAIL' : 'WARN';\n        // eslint-disable-next-line no-console\n        console.warn(`[required-fk-fillability:${label}] ${violation.kind}: ${violation.message}`);\n      }\n    } catch {\n      // Fail-open — never let the guardrail affect app load.\n    }\n  }, [registry]);\n\n  /**\n   * Main operation execution method - handles both regular and search operations\n   */\n  const doOperation = useCallback(async <TResponse = any>(\n    operationPath: OperationPathIdentifier,\n    parameters: ResourceOperationCallParameters | ResourceSearchCallParameters,\n    options?: RequestOptions\n  ): Promise<TResponse> => {\n    // Convert OperationPath object to string key if needed\n    const operationPathKey = typeof operationPath === 'string' \n      ? operationPath \n      : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n\n    const operation = resourcesHttpClient.getOperationDetails(operationPathKey);\n    const isSearchOperation = operation\n      ? resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.SEARCH\n      : ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey).operationIdentifier === CoreResourceOperation.SEARCH;\n\n    if (isSearchOperation) {\n      // Call search-specific method\n      return resourcesHttpClient.executeSearchOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceSearchCallParameters,\n        options\n      );\n    } else {\n      // Call regular operation method\n      return resourcesHttpClient.doOperation<TResponse>(\n        operationPathKey,\n        parameters as ResourceOperationCallParameters,\n        options\n      );\n    }\n  }, [resourcesHttpClient]);\n\n  /**\n   * Evaluate if an operation is enabled (enabledCondition).\n   * Centralized here so all consumers automatically benefit from any doOperation overrides\n   * (e.g. ScopedResourceRegistryProvider injecting AppScope).\n   */\n  const evaluateOperationEnabled = useCallback(\n    async <TMainSchema = any>(\n      params: Omit<EvaluateEnabledConditionParams<TMainSchema>, 'resourcesRegistry' | 'doOperation'>\n    ): Promise<boolean> => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: registry,\n        doOperation,\n      });\n    },\n    [registry, doOperation]\n  );\n\n  const getOperationContextNeeds = useCallback((\n    operation: FrontendResourceConfiguration_Operation<any, any, any>\n  ) => {\n    return OperationEnabledConditionUtils.getOperationContextNeeds(operation);\n  }, []);\n\n  /**\n   * Check if resource is available\n   */\n  const hasResource = useCallback((resourceName: string): boolean => {\n    return resourceName in registry.resourceConfigurations;\n  }, [registry]);\n\n  /**\n   * Get resource configuration\n   */\n  const getResourceConfiguration = useCallback((resourceName: string): AnyFrontendResourceConfiguration | undefined => {\n    return registry.resourceConfigurations[resourceName];\n  }, [registry]);\n\n  /**\n   * Get the full resources registry\n   */\n  const getResourcesRegistry = useCallback((): FrontendResourcesRegistry => {\n    return registry;\n  }, [registry]);\n\n  /**\n   * Get available resource types\n   */\n  const getAvailableResourceTypes = useCallback((): string[] => {\n    return Object.keys(registry.resourceConfigurations);\n  }, [registry]);\n\n  /**\n   * Get available operation paths\n   */\n  const getAvailableOperationPaths = useCallback((): string[] => {\n    return resourcesHttpClient.getAvailableOperationPaths();\n  }, [resourcesHttpClient]);\n  \n  /**\n   * Set authentication token for resource operations\n   */\n  const setAuthToken = useCallback((token: string | null): void => {\n    if (token) {\n      resourcesHttpClient.setAuthToken(token);\n      applicationHttpClient.setAuthToken(token);\n    } else {\n      resourcesHttpClient.clearAuthToken();\n      applicationHttpClient.clearAuthToken();\n    }\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /**\n   * Set token renewal handler for resource operations.\n   * Called by AuthSessionContext to enable automatic token refresh on 401s\n   * from the resources HTTP client (not just the manual calls client).\n   */\n  const setTokenRenewalHandler = useCallback((handler: TokenRenewalHandler): void => {\n    resourcesHttpClient.setTokenRenewalHandler(handler);\n    applicationHttpClient.setTokenRenewalHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setStepUpAuthHandler = useCallback((handler: StepUpAuthHandler | null): void => {\n    resourcesHttpClient.setStepUpAuthHandler(handler);\n    applicationHttpClient.setStepUpAuthHandler(handler);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  const setConsumableToken = useCallback((token: string | null): void => {\n    resourcesHttpClient.setConsumableToken(token);\n    applicationHttpClient.setConsumableToken(token);\n  }, [resourcesHttpClient, applicationHttpClient]);\n\n  /*\n   * Stable across renders, like every other member below.\n   *\n   * It used to be an inline arrow in the value object, which made it a NEW identity every render.\n   * `ResourceReadCacheBridge` depended on it in an effect whose job includes installing the cache's\n   * coverage authority — and installing an authority CLEARS the cache — so the read cache was emptied\n   * on essentially every render and could never do its job (issue #248).\n   */\n  const getReadCache = useCallback(\n    (): ResourceReadCacheFrontendService => resourcesHttpClient.getReadCache(),\n    [resourcesHttpClient],\n  );\n\n  /*\n   * MEMOIZED, and that is load-bearing rather than tidy.\n   *\n   * This value reaches 75 consumer files through `useResourceRegistry()`. Rebuilt every render, it\n   * re-rendered all of them and handed each a NEW identity for every function on it — so any consumer\n   * placing one in a dependency array got an effect that fired on every render. That is not\n   * hypothetical: it emptied the resource read cache continuously until #248 was fixed, and it\n   * defeated `ScopedResourceRegistryProvider`'s own `useMemo`, which depends on this object as\n   * `base`.\n   *\n   * Every member is itself a `useCallback` over the repository's stable service instances, so this\n   * memo only changes when the registry or a client actually does.\n   */\n  const value: ResourceRegistryContextType = useMemo(() => ({\n    // State\n    registry,\n\n    // Main execution method\n    doOperation,\n\n    // EnabledCondition helpers\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n\n    // Helpers\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n\n    // Auth\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  }), [\n    registry,\n    doOperation,\n    evaluateOperationEnabled,\n    getOperationContextNeeds,\n    hasResource,\n    getResourceConfiguration,\n    getResourcesRegistry,\n    getAvailableResourceTypes,\n    getAvailableOperationPaths,\n    getReadCache,\n    setAuthToken,\n    setTokenRenewalHandler,\n    setStepUpAuthHandler,\n    setConsumableToken,\n  ]);\n\n  return <ResourceRegistryContext.Provider value={value}>{children}</ResourceRegistryContext.Provider>;\n};\n\n// useResourceRegistry hook is now in separate file: ./useResourceRegistry.ts\n// This separation is required for React Fast Refresh compatibility\n"]}

package/dist/esm/core/resources/ScopedResourceRegistryProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ScopedResourceRegistryProvider.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAwB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAYpE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,SAAS,CAAC;CACrB;AA4CD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,QAAQ,EAAE,EAAE,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAgFpH"}
+{"version":3,"file":"ScopedResourceRegistryProvider.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAwB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAYpE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,SAAS,CAAC;CACrB;AA4CD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,QAAQ,EAAE,EAAE,mCAAmC,GAAG,KAAK,CAAC,YAAY,CAgFpH"}

package/dist/esm/core/resources/ScopedResourceRegistryProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ScopedResourceRegistryProvider.js","sourceRoot":"","sources":["../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAC;AACpE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAC1K,OAAO,EAAE,uBAAuB,EAAoC,MAAM,2BAA2B,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAM7E,SAAS,kBAAkB,CAAC,aAAqE;IAC/F,OAAO,OAAO,aAAa,KAAK,QAAQ;QACtC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAiD,EACjD,aAA4D;IAE5D,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACzF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,kCAAkC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAE3E,IAAI,MAAM,CAAC,mBAAmB,KAAK,aAAa,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAEnE,IAAI,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAAE,OAAO,KAAK,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,GAAG,aAAa,CAAC,UAAU,CAAC;YACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3C,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;QAED,IACE,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ;eACzD,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,sBAAsB,EAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;YACjD,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,KAAK,IAAI,CAAC;YAC1D,OAAO,QAAQ,KAAK,UAAU,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,IAAI,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAAE,QAAQ,EAAuC;IAC9F,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;QAC3C,gFAAgF;QAChF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,aAAoB,CAAC,CAAC;QAElE,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,UAAU,GAAyD,IAAI,CAAC;QAC5E,IAAI,CAAC;YACH,UAAU,GAAG,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzF,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,mBAAmB,GAAsC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACpG,MAAM,4BAA4B,GAC/B,UAAkB,EAAE,oBAAqE,CAAC;QAC7F,MAAM,0BAA0B,GAAG;YACjC,GAAG,mBAAmB;YACtB,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC;SACxC,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,GAAI,UAAkB;YACtB,oBAAoB,EAAE,0BAA0B;SACjD,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,IAAI,CAAC,QAAQ;YAChC,WAAW;SACkC,CAAC,CAAC;IACnD,CAAC,EACD,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC7B,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAA8B,GAAG,EAAE;QACtD,OAAO;YACL,GAAG,IAAI;YACP,WAAW;YACX,wBAAwB;SACzB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElD,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC3C,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC","sourcesContent":["import React, { useCallback, useMemo, type ReactNode } from 'react';\nimport {\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n  type ResourceConfiguration_Operation,\n  type ResourceConfiguration_OperationPath,\n} from '@wildo-ai/saas-models';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\nimport { ResourceRegistryContext, type ResourceRegistryContextType } from './ResourceRegistryContext';\nimport { useResourceRegistry } from './useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\nexport interface ScopedResourceRegistryProviderProps {\n  children: ReactNode;\n}\n\nfunction toOperationPathKey(operationPath: ResourceConfiguration_OperationPath<any, any> | string): string {\n  return typeof operationPath === 'string'\n    ? operationPath\n    : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n}\n\nfunction findOperationInRegistry(\n  registry: ResourceRegistryContextType['registry'],\n  operationPath: ResourceConfiguration_OperationPath<any, any>\n): ResourceConfiguration_Operation<any, any, any> | null {\n  const resourceConfig = registry.resourceConfigurations[operationPath.resourceIdentifier];\n  if (!resourceConfig) {\n    return null;\n  }\n\n  return resourceConfig.operations.find((op: any) => {\n    const opPath = ResourcesConfig_OperationPathUtils.extractOperationPath(op);\n\n    if (opPath.operationIdentifier !== operationPath.operationIdentifier) return false;\n    if (opPath.variantType !== operationPath.variantType) return false;\n\n    if (operationPath.isOperationDefault) {\n      if (!opPath.isOperationDefault) return false;\n    } else {\n      const expectedVariantKey = operationPath.variantKey;\n      const actualVariantKey = opPath.variantKey;\n      if ((actualVariantKey ?? undefined) !== (expectedVariantKey ?? undefined)) return false;\n    }\n\n    if (\n      opPath.variantType === ResourceOperationVariantType.API_CALL\n      || opPath.variantType === ResourceOperationVariantType.API_CALL_WITH_CALLBACK\n    ) {\n      const opIsBulk = opPath.isBulkOperation === true;\n      const pathIsBulk = operationPath.isBulkOperation === true;\n      return opIsBulk === pathIsBulk;\n    }\n\n    return true;\n  }) || null;\n}\n\n/**\n * Nested provider that re-exposes ResourceRegistryContext with a scoped `doOperation()`.\n *\n * This is intentionally placed INSIDE `AppScopeProvider` so it can inject the current scope\n * into all resource calls, while keeping the root `ResourceRegistryProvider` unchanged.\n */\nexport function ScopedResourceRegistryProvider({ children }: ScopedResourceRegistryProviderProps): React.ReactElement {\n  const base = useResourceRegistry();\n  const appScope = useAppScopeSafe();\n\n  const doOperation = useCallback<ResourceRegistryContextType['doOperation']>(\n    async (operationPath, parameters, options) => {\n      // If AppScopeProvider isn't mounted yet, behave exactly like the base registry.\n      if (!appScope) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const operationPathKey = toOperationPathKey(operationPath as any);\n\n      // Parse target operation to decide which contextual params are relevant.\n      // If parsing fails for any reason, fall back to base behavior.\n      let parsedPath: ResourceConfiguration_OperationPath<any, any> | null = null;\n      try {\n        parsedPath = ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey);\n      } catch {\n        parsedPath = null;\n      }\n\n      const operation = parsedPath ? findOperationInRegistry(base.registry, parsedPath) : null;\n\n      // If operation was not found in registry, fall back to unscoped behavior.\n      // This prevents fragile optional-chaining on initiatorInfos below.\n      if (!operation) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const injectedScopeParams: Record<string, string | string[]> = appScope.buildContextualParameters();\n      const existingContextualParameters =\n        (parameters as any)?.contextualParameters as Record<string, string | string[]> | undefined;\n      const mergedContextualParameters = {\n        ...injectedScopeParams,\n        ...(existingContextualParameters || {}),\n      };\n\n      const mergedParameters = {\n        ...(parameters as any),\n        contextualParameters: mergedContextualParameters,\n      };\n\n      return base.doOperation(operationPath, mergedParameters, options);\n    },\n    [appScope, base]\n  );\n\n  /**\n   * IMPORTANT:\n   * `ResourceRegistryProvider`'s `evaluateOperationEnabled` closes over its own `doOperation`.\n   * If we only override `doOperation` in context, enabledCondition evaluation would still run with\n   * the unscoped doOperation (missing AppScope injection).\n   *\n   * So we override `evaluateOperationEnabled` as well, wiring it to the scoped `doOperation`.\n   */\n  const evaluateOperationEnabled = useCallback<ResourceRegistryContextType['evaluateOperationEnabled']>(\n    async (params) => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: base.registry,\n        doOperation,\n      } satisfies EvaluateEnabledConditionParams<any>);\n    },\n    [base.registry, doOperation]\n  );\n\n  const value = useMemo<ResourceRegistryContextType>(() => {\n    return {\n      ...base,\n      doOperation,\n      evaluateOperationEnabled,\n    };\n  }, [base, doOperation, evaluateOperationEnabled]);\n\n  return (\n    <ResourceRegistryContext.Provider value={value}>\n      {children}\n    </ResourceRegistryContext.Provider>\n  );\n}\n\n"]}
+{"version":3,"file":"ScopedResourceRegistryProvider.js","sourceRoot":"","sources":["../../../../../src/core/resources/ScopedResourceRegistryProvider.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,WAAW,EAAE,OAAO,EAAkB,MAAM,OAAO,CAAC;AACpE,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAuC,MAAM,qFAAqF,CAAC;AAC1K,OAAO,EAAE,uBAAuB,EAAoC,MAAM,2BAA2B,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAM7E,SAAS,kBAAkB,CAAC,aAAqE;IAC/F,OAAO,OAAO,aAAa,KAAK,QAAQ;QACtC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,kCAAkC,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAiD,EACjD,aAA4D;IAE5D,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACzF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,kCAAkC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAE3E,IAAI,MAAM,CAAC,mBAAmB,KAAK,aAAa,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAEnE,IAAI,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAAE,OAAO,KAAK,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,GAAG,aAAa,CAAC,UAAU,CAAC;YACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3C,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;QAED,IACE,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ;eACzD,MAAM,CAAC,WAAW,KAAK,4BAA4B,CAAC,sBAAsB,EAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;YACjD,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,KAAK,IAAI,CAAC;YAC1D,OAAO,QAAQ,KAAK,UAAU,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,IAAI,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAAE,QAAQ,EAAuC;IAC9F,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;QAC3C,gFAAgF;QAChF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,aAAoB,CAAC,CAAC;QAElE,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,UAAU,GAAyD,IAAI,CAAC;QAC5E,IAAI,CAAC;YACH,UAAU,GAAG,kCAAkC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzF,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,mBAAmB,GAAsC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACpG,MAAM,4BAA4B,GAC/B,UAAkB,EAAE,oBAAqE,CAAC;QAC7F,MAAM,0BAA0B,GAAG;YACjC,GAAG,mBAAmB;YACtB,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC;SACxC,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,GAAI,UAAkB;YACtB,oBAAoB,EAAE,0BAA0B;SACjD,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC,EACD,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjB,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,wBAAwB,GAAG,WAAW,CAC1C,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,OAAO,8BAA8B,CAAC,wBAAwB,CAAC;YAC7D,GAAI,MAAc;YAClB,iBAAiB,EAAE,IAAI,CAAC,QAAQ;YAChC,WAAW;SACkC,CAAC,CAAC;IACnD,CAAC,EACD,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC7B,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAA8B,GAAG,EAAE;QACtD,OAAO;YACL,GAAG,IAAI;YACP,WAAW;YACX,wBAAwB;SACzB,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAElD,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC3C,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC","sourcesContent":["import React, { useCallback, useMemo, type ReactNode } from 'react';\nimport {\n  ResourcesConfig_OperationPathUtils,\n  ResourceOperationVariantType,\n  type ResourceConfiguration_Operation,\n  type ResourceConfiguration_OperationPath,\n} from '@wildo-ai/saas-models';\nimport { OperationEnabledConditionUtils, type EvaluateEnabledConditionParams } from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\nimport { ResourceRegistryContext, type ResourceRegistryContextType } from './ResourceRegistryContext';\nimport { useResourceRegistry } from './useResourceRegistry';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\n\nexport interface ScopedResourceRegistryProviderProps {\n  children: ReactNode;\n}\n\nfunction toOperationPathKey(operationPath: ResourceConfiguration_OperationPath<any, any> | string): string {\n  return typeof operationPath === 'string'\n    ? operationPath\n    : ResourcesConfig_OperationPathUtils.createOperationPathKey(operationPath);\n}\n\nfunction findOperationInRegistry(\n  registry: ResourceRegistryContextType['registry'],\n  operationPath: ResourceConfiguration_OperationPath<any, any>\n): ResourceConfiguration_Operation<any, any, any> | null {\n  const resourceConfig = registry.resourceConfigurations[operationPath.resourceIdentifier];\n  if (!resourceConfig) {\n    return null;\n  }\n\n  return resourceConfig.operations.find((op: any) => {\n    const opPath = ResourcesConfig_OperationPathUtils.extractOperationPath(op);\n\n    if (opPath.operationIdentifier !== operationPath.operationIdentifier) return false;\n    if (opPath.variantType !== operationPath.variantType) return false;\n\n    if (operationPath.isOperationDefault) {\n      if (!opPath.isOperationDefault) return false;\n    } else {\n      const expectedVariantKey = operationPath.variantKey;\n      const actualVariantKey = opPath.variantKey;\n      if ((actualVariantKey ?? undefined) !== (expectedVariantKey ?? undefined)) return false;\n    }\n\n    if (\n      opPath.variantType === ResourceOperationVariantType.API_CALL\n      || opPath.variantType === ResourceOperationVariantType.API_CALL_WITH_CALLBACK\n    ) {\n      const opIsBulk = opPath.isBulkOperation === true;\n      const pathIsBulk = operationPath.isBulkOperation === true;\n      return opIsBulk === pathIsBulk;\n    }\n\n    return true;\n  }) || null;\n}\n\n/**\n * Nested provider that re-exposes ResourceRegistryContext with a scoped `doOperation()`.\n *\n * This is intentionally placed INSIDE `AppScopeProvider` so it can inject the current scope\n * into all resource calls, while keeping the root `ResourceRegistryProvider` unchanged.\n */\nexport function ScopedResourceRegistryProvider({ children }: ScopedResourceRegistryProviderProps): React.ReactElement {\n  const base = useResourceRegistry();\n  const appScope = useAppScopeSafe();\n\n  const doOperation = useCallback<ResourceRegistryContextType['doOperation']>(\n    async (operationPath, parameters, options) => {\n      // If AppScopeProvider isn't mounted yet, behave exactly like the base registry.\n      if (!appScope) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const operationPathKey = toOperationPathKey(operationPath as any);\n\n      // Parse target operation to decide which contextual params are relevant.\n      // If parsing fails for any reason, fall back to base behavior.\n      let parsedPath: ResourceConfiguration_OperationPath<any, any> | null = null;\n      try {\n        parsedPath = ResourcesConfig_OperationPathUtils.parseOperationPathKey(operationPathKey);\n      } catch {\n        parsedPath = null;\n      }\n\n      const operation = parsedPath ? findOperationInRegistry(base.registry, parsedPath) : null;\n\n      // If operation was not found in registry, fall back to unscoped behavior.\n      // This prevents fragile optional-chaining on initiatorInfos below.\n      if (!operation) {\n        return base.doOperation(operationPath, parameters, options);\n      }\n\n      const injectedScopeParams: Record<string, string | string[]> = appScope.buildContextualParameters();\n      const existingContextualParameters =\n        (parameters as any)?.contextualParameters as Record<string, string | string[]> | undefined;\n      const mergedContextualParameters = {\n        ...injectedScopeParams,\n        ...(existingContextualParameters || {}),\n      };\n\n      const mergedParameters = {\n        ...(parameters as any),\n        contextualParameters: mergedContextualParameters,\n      };\n\n      return base.doOperation(operationPath, mergedParameters, options);\n    },\n    [appScope, base]\n  );\n\n  /**\n   * IMPORTANT:\n   * `ResourceRegistryProvider`'s `evaluateOperationEnabled` closes over its own `doOperation`.\n   * If we only override `doOperation` in context, enabledCondition evaluation would still run with\n   * the unscoped doOperation (missing AppScope injection).\n   *\n   * So we override `evaluateOperationEnabled` as well, wiring it to the scoped `doOperation`.\n   */\n  const evaluateOperationEnabled = useCallback<ResourceRegistryContextType['evaluateOperationEnabled']>(\n    async (params) => {\n      return OperationEnabledConditionUtils.evaluateEnabledCondition({\n        ...(params as any),\n        resourcesRegistry: base.registry,\n        doOperation,\n      } satisfies EvaluateEnabledConditionParams<any>);\n    },\n    [base.registry, doOperation]\n  );\n\n  const value = useMemo<ResourceRegistryContextType>(() => {\n    return {\n      ...base,\n      doOperation,\n      evaluateOperationEnabled,\n    };\n  }, [base, doOperation, evaluateOperationEnabled]);\n\n  return (\n    <ResourceRegistryContext.Provider value={value}>\n      {children}\n    </ResourceRegistryContext.Provider>\n  );\n}\n\n"]}

package/dist/esm/core/resources/bulk-failure-grouping.frontend.utils.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Group a bulk run's refusals by REASON (#1461).
+ *
+ * A count tells a person something went wrong; it does not tell them what to do. Twelve rows
+ * refused for one reason are one thing to fix, while twelve ids are twelve lookups — so the reason
+ * is the unit the panel is built from, and the ids sit under it as the secondary detail they are.
+ *
+ * Reasons arrive as the refusal's REFERENCE, because a reference is what a locale turns into words;
+ * the resolver is passed in so this function stays free of i18n and can be tested for what it
+ * actually decides. A reference with no authored words falls back to the reference itself, which is
+ * a missing label looking missing rather than an invented sentence
+ * (`.claude/rules/display-text-comes-from-i18n.md`).
+ */
+import type { BulkJobFailure } from './useBulkJobProgress';
+export interface BulkFailureReasonGroup {
+    /** Stable key for the group — the refusal reference, or a fixed key when the row carried none. */
+    key: string;
+    /** What to show as the reason: resolved words, else the reference, else the unnamed-refusal key. */
+    reason: string;
+    /** The rows refused for this reason, in the order the run met them. */
+    resourceIds: string[];
+}
+/** The group key for a refusal that carried no reference at all — an error the engine could not name. */
+export declare const UNNAMED_BULK_FAILURE_REASON_KEY: "unnamedRefusal";
+export declare function groupBulkFailuresByReason(failures: readonly BulkJobFailure[], resolveReason: (reference: string) => string | undefined): BulkFailureReasonGroup[];
+//# sourceMappingURL=bulk-failure-grouping.frontend.utils.d.ts.map

package/dist/esm/core/resources/bulk-failure-grouping.frontend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-failure-grouping.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/bulk-failure-grouping.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,WAAW,sBAAsB;IACrC,kGAAkG;IAClG,GAAG,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,yGAAyG;AACzG,eAAO,MAAM,+BAA+B,EAAG,gBAAyB,CAAC;AAEzE,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,SAAS,cAAc,EAAE,EACnC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACvD,sBAAsB,EAAE,CAqB1B"}

package/dist/esm/core/resources/bulk-failure-grouping.frontend.utils.js

@@ -0,0 +1,23 @@
+/** The group key for a refusal that carried no reference at all — an error the engine could not name. */
+export const UNNAMED_BULK_FAILURE_REASON_KEY = 'unnamedRefusal';
+export function groupBulkFailuresByReason(failures, resolveReason) {
+    const groups = new Map();
+    for (const failure of failures) {
+        const key = failure.customMessageReference ?? UNNAMED_BULK_FAILURE_REASON_KEY;
+        const existing = groups.get(key);
+        if (existing) {
+            existing.resourceIds.push(failure.resourceId);
+            continue;
+        }
+        groups.set(key, {
+            key,
+            reason: (failure.customMessageReference ? resolveReason(failure.customMessageReference) : undefined) ?? key,
+            resourceIds: [failure.resourceId],
+        });
+    }
+    // Most-refused first: the reason accounting for most rows is the one worth reading first, and a
+    // panel that listed them in arrival order would bury it behind whichever row happened to fail
+    // earliest.
+    return [...groups.values()].sort((left, right) => right.resourceIds.length - left.resourceIds.length);
+}
+//# sourceMappingURL=bulk-failure-grouping.frontend.utils.js.map

package/dist/esm/core/resources/bulk-failure-grouping.frontend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-failure-grouping.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/bulk-failure-grouping.frontend.utils.ts"],"names":[],"mappings":"AAwBA,yGAAyG;AACzG,MAAM,CAAC,MAAM,+BAA+B,GAAG,gBAAyB,CAAC;AAEzE,MAAM,UAAU,yBAAyB,CACvC,QAAmC,EACnC,aAAwD;IAExD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkC,CAAC;IAEzD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,sBAAsB,IAAI,+BAA+B,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YACd,GAAG;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG;YAC3G,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,gGAAgG;IAChG,8FAA8F;IAC9F,YAAY;IACZ,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACxG,CAAC","sourcesContent":["/**\n * Group a bulk run's refusals by REASON (#1461).\n *\n * A count tells a person something went wrong; it does not tell them what to do. Twelve rows\n * refused for one reason are one thing to fix, while twelve ids are twelve lookups — so the reason\n * is the unit the panel is built from, and the ids sit under it as the secondary detail they are.\n *\n * Reasons arrive as the refusal's REFERENCE, because a reference is what a locale turns into words;\n * the resolver is passed in so this function stays free of i18n and can be tested for what it\n * actually decides. A reference with no authored words falls back to the reference itself, which is\n * a missing label looking missing rather than an invented sentence\n * (`.claude/rules/display-text-comes-from-i18n.md`).\n */\nimport type { BulkJobFailure } from './useBulkJobProgress';\n\nexport interface BulkFailureReasonGroup {\n  /** Stable key for the group — the refusal reference, or a fixed key when the row carried none. */\n  key: string;\n  /** What to show as the reason: resolved words, else the reference, else the unnamed-refusal key. */\n  reason: string;\n  /** The rows refused for this reason, in the order the run met them. */\n  resourceIds: string[];\n}\n\n/** The group key for a refusal that carried no reference at all — an error the engine could not name. */\nexport const UNNAMED_BULK_FAILURE_REASON_KEY = 'unnamedRefusal' as const;\n\nexport function groupBulkFailuresByReason(\n  failures: readonly BulkJobFailure[],\n  resolveReason: (reference: string) => string | undefined,\n): BulkFailureReasonGroup[] {\n  const groups = new Map<string, BulkFailureReasonGroup>();\n\n  for (const failure of failures) {\n    const key = failure.customMessageReference ?? UNNAMED_BULK_FAILURE_REASON_KEY;\n    const existing = groups.get(key);\n    if (existing) {\n      existing.resourceIds.push(failure.resourceId);\n      continue;\n    }\n    groups.set(key, {\n      key,\n      reason: (failure.customMessageReference ? resolveReason(failure.customMessageReference) : undefined) ?? key,\n      resourceIds: [failure.resourceId],\n    });\n  }\n\n  // Most-refused first: the reason accounting for most rows is the one worth reading first, and a\n  // panel that listed them in arrival order would bury it behind whichever row happened to fail\n  // earliest.\n  return [...groups.values()].sort((left, right) => right.resourceIds.length - left.resourceIds.length);\n}\n"]}

package/dist/esm/core/resources/collection-export-url.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collection-export-url.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/collection-export-url.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAML,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EACV,6BAA6B,EAC7B,uCAAuC,EACvC,yBAAyB,EAC1B,MAAM,+DAA+D,CAAC;AACvE,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AAEpI,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,yBAAyB,CAAC;IACpC,cAAc,EAAE,6BAA6B,CAAC;IAC9C,gEAAgE;IAChE,eAAe,EAAE,uCAAuC,CAAC;IACzD,YAAY,EAAE,YAAY,CAAC;IAC3B;;;;OAIG;IACH,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACtD,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,8BAA8B,CAAC;IACvC,QAAQ,EAAE,gCAAgC,CAAC;IAC3C;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,8BAA8B,GAAG,MAAM,GAAG,IAAI,CA8C9F;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,8BAA8B,CAAC;IACvC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB"}
+{"version":3,"file":"collection-export-url.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/collection-export-url.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAML,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACrC,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EACV,6BAA6B,EAC7B,uCAAuC,EACvC,yBAAyB,EAC1B,MAAM,+DAA+D,CAAC;AACvE,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AAEpI,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,yBAAyB,CAAC;IACpC,cAAc,EAAE,6BAA6B,CAAC;IAC9C,gEAAgE;IAChE,eAAe,EAAE,uCAAuC,CAAC;IACzD,YAAY,EAAE,YAAY,CAAC;IAC3B;;;;OAIG;IACH,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACtD,2BAA2B,CAAC,EAAE,0CAA0C,EAAE,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,8BAA8B,CAAC;IACvC,QAAQ,EAAE,gCAAgC,CAAC;IAC3C;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,8BAA8B,GAAG,MAAM,GAAG,IAAI,CA8C9F;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,8BAA8B,CAAC;IACvC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhB"}

package/dist/esm/core/resources/collection-export-url.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"collection-export-url.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/resources/collection-export-url.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,6BAA6B,EAC7B,oCAAoC,EACpC,uCAAuC,EACvC,kBAAkB,EAClB,yCAAyC,GAI1C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAsCnG;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAsC;IAC7E,MAAM,EACJ,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EACvD,0BAA0B,EAAE,oBAAoB,EAAE,2BAA2B,EAC7E,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAC3C,GAAG,MAAM,CAAC;IAEX,IAAI,CAAC,cAAc,EAAE,uBAAuB,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAE9E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,yCAAyC,CAAC,gCAAgC,CAC3F,cAAc,EACd,eAAe,EACf,QAAQ,CAAC,2BAA2B,CACrC,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,SAAS,GAAG,qBAAqB,CAAC,uBAAuB,CAC7D,UAAU,EACV,0BAA0B,EAC1B,cAAc,CAAC,kBAAkB,EACjC,cAAc,CAAC,uBAAuB,EACtC,2BAA2B,EAC3B,QAAQ,CAAC,2BAA2B,CACrC,CAAC;QAEF,qFAAqF;QACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACrF,IAAI,eAAe,CAAC,yBAAyB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAErE,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC;QACxD,KAAK,CAAC,GAAG,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;gBAAE,SAAS;YAClD,0FAA0F;YAC1F,gDAAgD;YAChD,IAAI,GAAG,KAAK,oCAAoC,IAAI,GAAG,KAAK,uCAAuC;gBAAE,SAAS;YAC9G,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,wFAAwF;QACxF,OAAO,GAAG,UAAU,GAAG,kBAAkB,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAK9C;IACC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,+FAA+F;QAC/F,2FAA2F;QAC3F,6BAA6B;QAC7B,IAAI,CAAC,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACtG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC","sourcesContent":["/**\n * The API URL of a listing's export companion, and the download that follows it.\n *\n * ## Why the export cannot go through the ordinary action executor\n *\n * Every other resource action ends in `doOperation()`, which parses a JSON result and hands it to\n * the refresh/notification pipeline. An export answers BYTES with a `Content-Disposition`, so there\n * is no result to parse and nothing to refresh — the browser has to be handed a file. That is the\n * same shape the generated-file REGENERATE action already needed special handling for, one step\n * further: regenerate returns JSON and the bytes are fetched later; an export IS the bytes.\n */\nimport {\n  buildCollectionExportFilename,\n  COLLECTION_EXPORT_FORMAT_QUERY_PARAM,\n  COLLECTION_EXPORT_ROW_SCOPE_QUERY_PARAM,\n  MAIN_API_BASE_PATH,\n  ResourcesConfigOperationsUrlsBuilderUtils,\n  type ResourceCollectionExportFormat,\n  type ResourceCollectionExportRowScope,\n  type ResourceType,\n} from '@wildo-ai/saas-models';\nimport { NavigationUtils } from '~wildo-frontend-lib/core/navigation/navigation.utils';\nimport { frontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport type {\n  FrontendResourceConfiguration,\n  FrontendResourceConfiguration_Operation,\n  FrontendResourcesRegistry,\n} from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport type { FrontendResource_ParentResourceRequirement } from '~wildo-frontend-lib/core/resources/resource-path.frontend.schemas';\n\nexport interface BuildCollectionExportUrlParams {\n  registry: FrontendResourcesRegistry;\n  resourceConfig: FrontendResourceConfiguration;\n  /** The DERIVED export operation, not the listing it exports. */\n  exportOperation: FrontendResourceConfiguration_Operation;\n  resourceType: ResourceType;\n  /**\n   * `string | number` rather than `string`: the transport normalizer emits numeric ids as numbers,\n   * and narrowing here would push a cast onto every caller for a value that is stringified into a\n   * URL segment anyway.\n   */\n  contextResourceIdentifiers: Record<string, string>;\n  /**\n   * `string | number`: the parameter map resolved for URL substitution can carry numeric ids, and\n   * narrowing here would push a cast onto every caller for a value that is stringified into a URL\n   * segment anyway.\n   */\n  contextualParameters: Record<string, string | number>;\n  parentResourcesRequirements?: FrontendResource_ParentResourceRequirement[];\n  apiBaseUrl: string;\n  format: ResourceCollectionExportFormat;\n  rowScope: ResourceCollectionExportRowScope;\n  /**\n   * The query the LISTING is currently showing — filters, sort, page. Forwarded verbatim so\n   * \"export what I am looking at\" needs no second grammar, and so a `VISIBLE_PAGE` export returns\n   * the page on screen rather than a different one.\n   */\n  listingQuery?: Record<string, string | number | undefined>;\n}\n\n/**\n * `null` when the route cannot be fully resolved from the current context — the caller then hides\n * the action rather than offering a download that would 404. Deliberately the same posture the file\n * serve URL takes: an unresolved placeholder is a missing parent id, not an error to raise.\n */\nexport function buildCollectionExportUrl(params: BuildCollectionExportUrlParams): string | null {\n  const {\n    registry, resourceConfig, exportOperation, resourceType,\n    contextResourceIdentifiers, contextualParameters, parentResourcesRequirements,\n    apiBaseUrl, format, rowScope, listingQuery,\n  } = params;\n\n  if (!resourceConfig?.resourceFieldIdentifier || !exportOperation) return null;\n\n  try {\n    const routePaths = ResourcesConfigOperationsUrlsBuilderUtils.buildOperationFrontendRoutePaths(\n      resourceConfig,\n      exportOperation,\n      registry.allResourceFieldIdentifiers,\n    );\n    if (routePaths.length === 0) return null;\n\n    const routePath = frontendResourceUtils.selectMatchingRoutePath(\n      routePaths,\n      contextResourceIdentifiers,\n      resourceConfig.resourceIdentifier,\n      resourceConfig.resourceFieldIdentifier,\n      parentResourcesRequirements,\n      registry.allResourceFieldIdentifiers,\n    );\n\n    // A collection-level route: the parent chain only, and no id of this resource's own.\n    const resolved = NavigationUtils.resolveUrlPath(routePath.url, contextualParameters);\n    if (NavigationUtils.hasUnresolvedPlaceholders(resolved)) return null;\n\n    const query = new URLSearchParams();\n    query.set(COLLECTION_EXPORT_FORMAT_QUERY_PARAM, format);\n    query.set(COLLECTION_EXPORT_ROW_SCOPE_QUERY_PARAM, rowScope);\n    for (const [key, value] of Object.entries(listingQuery ?? {})) {\n      if (value === undefined || value === '') continue;\n      // Never forwarded: the caller's own selectors are set above, and a listing query carrying\n      // them would otherwise decide the format twice.\n      if (key === COLLECTION_EXPORT_FORMAT_QUERY_PARAM || key === COLLECTION_EXPORT_ROW_SCOPE_QUERY_PARAM) continue;\n      query.set(key, String(value));\n    }\n\n    // Frontend route paths omit `/api/v1`; re-add it to match the registered backend route.\n    return `${apiBaseUrl}${MAIN_API_BASE_PATH}${resolved}?${query.toString()}`;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Fetch the export through the AUTHENTICATED client and hand the bytes to the browser.\n *\n * A plain `<a href>` or `window.open` would issue an UNAUTHENTICATED request — the access token\n * lives in the http client, not in a cookie the browser would attach — so the download must go\n * through `getBlob` and be released as an object URL. The object URL is revoked immediately after\n * the click: leaving it alive pins the whole file in memory for the life of the document, and an\n * export is exactly the payload where that matters.\n */\nexport async function downloadCollectionExport(params: {\n  url: string;\n  resourceType: ResourceType;\n  format: ResourceCollectionExportFormat;\n  getBlob: (url: string) => Promise<Blob>;\n}): Promise<void> {\n  const blob = await params.getBlob(params.url);\n  const objectUrl = URL.createObjectURL(blob);\n  try {\n    const link = document.createElement('a');\n    link.href = objectUrl;\n    // The server already names the file in `Content-Disposition`, but a blob download does not see\n    // that header — the name has to be supplied here. Same builder as the server's, so the two\n    // agree instead of drifting.\n    link.download = buildCollectionExportFilename(String(params.resourceType), params.format, new Date());\n    document.body.appendChild(link);\n    link.click();\n    link.remove();\n  } finally {\n    URL.revokeObjectURL(objectUrl);\n  }\n}\n"]}
+{"version":3,"file":"collection-export-url.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/collection-export-url.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,6BAA6B,EAC7B,oCAAoC,EACpC,uCAAuC,EACvC,kBAAkB,EAClB,yCAAyC,GAI1C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAsCnG;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAsC;IAC7E,MAAM,EACJ,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EACvD,0BAA0B,EAAE,oBAAoB,EAAE,2BAA2B,EAC7E,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAC3C,GAAG,MAAM,CAAC;IAEX,IAAI,CAAC,cAAc,EAAE,uBAAuB,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAE9E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,yCAAyC,CAAC,gCAAgC,CAC3F,cAAc,EACd,eAAe,EACf,QAAQ,CAAC,2BAA2B,CACrC,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,SAAS,GAAG,qBAAqB,CAAC,uBAAuB,CAC7D,UAAU,EACV,0BAA0B,EAC1B,cAAc,CAAC,kBAAkB,EACjC,cAAc,CAAC,uBAAuB,EACtC,2BAA2B,EAC3B,QAAQ,CAAC,2BAA2B,CACrC,CAAC;QAEF,qFAAqF;QACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACrF,IAAI,eAAe,CAAC,yBAAyB,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAErE,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC;QACxD,KAAK,CAAC,GAAG,CAAC,uCAAuC,EAAE,QAAQ,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;gBAAE,SAAS;YAClD,0FAA0F;YAC1F,gDAAgD;YAChD,IAAI,GAAG,KAAK,oCAAoC,IAAI,GAAG,KAAK,uCAAuC;gBAAE,SAAS;YAC9G,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,wFAAwF;QACxF,OAAO,GAAG,UAAU,GAAG,kBAAkB,GAAG,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAK9C;IACC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,+FAA+F;QAC/F,2FAA2F;QAC3F,6BAA6B;QAC7B,IAAI,CAAC,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACtG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC","sourcesContent":["/**\n * The API URL of a listing's export companion, and the download that follows it.\n *\n * ## Why the export cannot go through the ordinary action executor\n *\n * Every other resource action ends in `doOperation()`, which parses a JSON result and hands it to\n * the refresh/notification pipeline. An export answers BYTES with a `Content-Disposition`, so there\n * is no result to parse and nothing to refresh — the browser has to be handed a file. That is the\n * same shape the generated-file REGENERATE action already needed special handling for, one step\n * further: regenerate returns JSON and the bytes are fetched later; an export IS the bytes.\n */\nimport {\n  buildCollectionExportFilename,\n  COLLECTION_EXPORT_FORMAT_QUERY_PARAM,\n  COLLECTION_EXPORT_ROW_SCOPE_QUERY_PARAM,\n  MAIN_API_BASE_PATH,\n  ResourcesConfigOperationsUrlsBuilderUtils,\n  type ResourceCollectionExportFormat,\n  type ResourceCollectionExportRowScope,\n  type ResourceType,\n} from '@wildo-ai/saas-models';\nimport { NavigationUtils } from '~wildo-frontend-lib/core/navigation/navigation.utils';\nimport { frontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport type {\n  FrontendResourceConfiguration,\n  FrontendResourceConfiguration_Operation,\n  FrontendResourcesRegistry,\n} from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport type { FrontendResource_ParentResourceRequirement } from '~wildo-frontend-lib/core/resources/resource-path.frontend.schemas';\n\nexport interface BuildCollectionExportUrlParams {\n  registry: FrontendResourcesRegistry;\n  resourceConfig: FrontendResourceConfiguration;\n  /** The DERIVED export operation, not the listing it exports. */\n  exportOperation: FrontendResourceConfiguration_Operation;\n  resourceType: ResourceType;\n  /**\n   * `string | number` rather than `string`: the transport normalizer emits numeric ids as numbers,\n   * and narrowing here would push a cast onto every caller for a value that is stringified into a\n   * URL segment anyway.\n   */\n  contextResourceIdentifiers: Record<string, string>;\n  /**\n   * `string | number`: the parameter map resolved for URL substitution can carry numeric ids, and\n   * narrowing here would push a cast onto every caller for a value that is stringified into a URL\n   * segment anyway.\n   */\n  contextualParameters: Record<string, string | number>;\n  parentResourcesRequirements?: FrontendResource_ParentResourceRequirement[];\n  apiBaseUrl: string;\n  format: ResourceCollectionExportFormat;\n  rowScope: ResourceCollectionExportRowScope;\n  /**\n   * The query the LISTING is currently showing — filters, sort, page. Forwarded verbatim so\n   * \"export what I am looking at\" needs no second grammar, and so a `VISIBLE_PAGE` export returns\n   * the page on screen rather than a different one.\n   */\n  listingQuery?: Record<string, string | number | undefined>;\n}\n\n/**\n * `null` when the route cannot be fully resolved from the current context — the caller then hides\n * the action rather than offering a download that would 404. Deliberately the same posture the file\n * serve URL takes: an unresolved placeholder is a missing parent id, not an error to raise.\n */\nexport function buildCollectionExportUrl(params: BuildCollectionExportUrlParams): string | null {\n  const {\n    registry, resourceConfig, exportOperation, resourceType,\n    contextResourceIdentifiers, contextualParameters, parentResourcesRequirements,\n    apiBaseUrl, format, rowScope, listingQuery,\n  } = params;\n\n  if (!resourceConfig?.resourceFieldIdentifier || !exportOperation) return null;\n\n  try {\n    const routePaths = ResourcesConfigOperationsUrlsBuilderUtils.buildOperationFrontendRoutePaths(\n      resourceConfig,\n      exportOperation,\n      registry.allResourceFieldIdentifiers,\n    );\n    if (routePaths.length === 0) return null;\n\n    const routePath = frontendResourceUtils.selectMatchingRoutePath(\n      routePaths,\n      contextResourceIdentifiers,\n      resourceConfig.resourceIdentifier,\n      resourceConfig.resourceFieldIdentifier,\n      parentResourcesRequirements,\n      registry.allResourceFieldIdentifiers,\n    );\n\n    // A collection-level route: the parent chain only, and no id of this resource's own.\n    const resolved = NavigationUtils.resolveUrlPath(routePath.url, contextualParameters);\n    if (NavigationUtils.hasUnresolvedPlaceholders(resolved)) return null;\n\n    const query = new URLSearchParams();\n    query.set(COLLECTION_EXPORT_FORMAT_QUERY_PARAM, format);\n    query.set(COLLECTION_EXPORT_ROW_SCOPE_QUERY_PARAM, rowScope);\n    for (const [key, value] of Object.entries(listingQuery ?? {})) {\n      if (value === undefined || value === '') continue;\n      // Never forwarded: the caller's own selectors are set above, and a listing query carrying\n      // them would otherwise decide the format twice.\n      if (key === COLLECTION_EXPORT_FORMAT_QUERY_PARAM || key === COLLECTION_EXPORT_ROW_SCOPE_QUERY_PARAM) continue;\n      query.set(key, String(value));\n    }\n\n    // Frontend route paths omit `/api/v1`; re-add it to match the registered backend route.\n    return `${apiBaseUrl}${MAIN_API_BASE_PATH}${resolved}?${query.toString()}`;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Fetch the export through the AUTHENTICATED client and hand the bytes to the browser.\n *\n * A plain `<a href>` or `window.open` would issue an UNAUTHENTICATED request — the access token\n * lives in the http client, not in a cookie the browser would attach — so the download must go\n * through `getBlob` and be released as an object URL. The object URL is revoked immediately after\n * the click: leaving it alive pins the whole file in memory for the life of the document, and an\n * export is exactly the payload where that matters.\n */\nexport async function downloadCollectionExport(params: {\n  url: string;\n  resourceType: ResourceType;\n  format: ResourceCollectionExportFormat;\n  getBlob: (url: string) => Promise<Blob>;\n}): Promise<void> {\n  const blob = await params.getBlob(params.url);\n  const objectUrl = URL.createObjectURL(blob);\n  try {\n    const link = document.createElement('a');\n    link.href = objectUrl;\n    // The server already names the file in `Content-Disposition`, but a blob download does not see\n    // that header — the name has to be supplied here. Same builder as the server's, so the two\n    // agree instead of drifting.\n    link.download = buildCollectionExportFilename(String(params.resourceType), params.format, new Date());\n    document.body.appendChild(link);\n    link.click();\n    link.remove();\n  } finally {\n    URL.revokeObjectURL(objectUrl);\n  }\n}\n"]}

package/dist/esm/core/resources/collection-filter-presets.frontend.utils.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Applying and reading back a collection's PRESET FILTERS.
+ *
+ * A preset has no state of its own — it is a write into the collection's existing filter values,
+ * and its ON/OFF is derived by reading them back. Everything here is therefore a pure function of
+ * `(preset, currentFilters, now)`, which is what lets the pills stay in step with the filters
+ * panel, the chips and the quick-filter tabs without any of the four knowing about the others.
+ *
+ * `now` is a parameter rather than a `new Date()` inside these functions, for two reasons that
+ * both matter: a single click must resolve every field of a preset against ONE instant (two
+ * `new Date()` calls either side of midnight would produce a window that excludes the row the user
+ * is looking at), and a relative window is otherwise untestable.
+ */
+import { type CollectionFilterPreset } from '../../core/resources/resources.frontend.schemas';
+/** The `{ startDate, endDate }` pair the framework's date-range filter carries. */
+export interface CollectionFilterDateRange {
+    startDate: Date;
+    endDate: Date;
+}
+/**
+ * The CONCRETE filter assignment a preset makes at instant `now` — literals unchanged, relative
+ * ranges resolved to their `{ startDate, endDate }` window.
+ */
+export declare function resolveCollectionFilterPresetAssignment(preset: CollectionFilterPreset, now: Date): Record<string, unknown>;
+/**
+ * Is this preset currently ON?
+ *
+ * ON means every key it assigns holds its value — nothing weaker. A preset that assigns two fields
+ * and finds only one of them set is OFF, because a half-applied narrowing is not the one the pill
+ * names, and showing it as on would make the next click REMOVE a filter the user set by hand.
+ */
+export declare function isCollectionFilterPresetActive(preset: CollectionFilterPreset, currentFilters: Record<string, unknown>, now: Date): boolean;
+/**
+ * The filter values after clicking this preset — applied when it was off, removed when it was on.
+ *
+ * Removing DELETES the keys rather than setting them to `undefined`, matching what the filters
+ * panel and the chips do when a filter is cleared; a key present with `undefined` counts as an
+ * active filter in `countActiveFilters` and would inflate the trigger's badge.
+ */
+export declare function toggleCollectionFilterPreset(preset: CollectionFilterPreset, currentFilters: Record<string, unknown>, now: Date): Record<string, unknown>;
+//# sourceMappingURL=collection-filter-presets.frontend.utils.d.ts.map

package/dist/esm/core/resources/collection-filter-presets.frontend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-filter-presets.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/collection-filter-presets.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAEL,KAAK,sBAAsB,EAE5B,MAAM,+DAA+D,CAAC;AAEvE,mFAAmF;AACnF,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;CACf;AA6DD;;;GAGG;AACH,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,IAAI,GACR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAuCD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,sBAAsB,EAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,IAAI,GACR,OAAO,CAKT;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,sBAAsB,EAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,IAAI,GACR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUzB"}