@wildo-ai/saas-frontend-lib 1.1.4 → 1.1.6

package/dist/esm/core/resources/hooks/useOperationEnabled.js

@@ -230,13 +230,15 @@ function operationsEnabledMapsEqual(a, b) {
             return false;
         if (av.isEnabled !== bv.isEnabled)
             return false;
+        if ((av.ineligibleSelectionIndices ?? []).join(',') !== (bv.ineligibleSelectionIndices ?? []).join(','))
+            return false;
         if (!featureAvailabilityEqual(av.featureAvailability, bv.featureAvailability))
             return false;
     }
     return true;
 }
 export function useOperationsEnabled(operations, params = {}) {
-    const { currentObject, inputDto, objectContext: providedObjectContext, resourceType, enabled = true, } = params;
+    const { currentObject, inputDto, objectContext: providedObjectContext, resourceType, enabled = true, selectionObjects, } = params;
     const { getResourcesRegistry, doOperation } = useResourceRegistry();
     const { user, permissions } = useUserOrgs();
     const appScope = useAppScopeSafe();
@@ -289,9 +291,9 @@ export function useOperationsEnabled(operations, params = {}) {
                     return;
                 }
                 try {
-                    const enabled = await evaluateEnabledCondition({
+                    const evaluateFor = (subject) => evaluateEnabledCondition({
                         operation,
-                        currentObject,
+                        currentObject: subject,
                         inputDto,
                         userContext: user || undefined,
                         initiatorIds,
@@ -300,7 +302,18 @@ export function useOperationsEnabled(operations, params = {}) {
                         resourceType,
                         doOperation,
                     });
-                    results.set(operationKey, { isEnabled: enabled, featureAvailability });
+                    if (operation.isBulkOperation === true && selectionObjects && selectionObjects.length > 0) {
+                        const perRow = await Promise.all(selectionObjects.map((row) => evaluateFor(row)));
+                        const ineligible = perRow.flatMap((passes, index) => (passes ? [] : [index]));
+                        results.set(operationKey, {
+                            isEnabled: ineligible.length === 0,
+                            featureAvailability,
+                            ...(ineligible.length > 0 ? { ineligibleSelectionIndices: ineligible } : {}),
+                        });
+                    }
+                    else {
+                        results.set(operationKey, { isEnabled: await evaluateFor(currentObject), featureAvailability });
+                    }
                 }
                 catch (error) {
                     results.set(operationKey, { isEnabled: false, featureAvailability });
@@ -316,6 +329,7 @@ export function useOperationsEnabled(operations, params = {}) {
         enabled,
         operations,
         currentObject,
+        selectionObjects,
         inputDto,
         providedObjectContext,
         user,

package/dist/esm/core/resources/hooks/useOperationEnabled.js.map

@@ -1 +1 @@
-{"version":3,"file":"useOperationEnabled.js","sourceRoot":"","sources":["../../../../../src/core/resources/hooks/useOperationEnabled.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,wBAAwB,EAExB,wBAAwB,GACzB,MAAM,qFAAqF,CAAC;AAE7F,OAAO,EAGL,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,mCAAmC,GAEpC,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yEAAyE,CAAC;AAiDlH,MAAM,UAAU,wBAAwB,CACtC,SAAiE;IAEjE,OAAO,kCAAkC,CAAC,mCAAmC,CAAC,SAAgB,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,0BAA0B,CACjC,SAAiE;IAEjE,OAAO,OAAO,CAAC,SAAS,CAAC,gBAAgB,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,cAAyC,EACzC,aAAwC;IAExC,OAAO,OAAO,CAAC,GAA8C,EAAE;QAC7D,MAAM,GAAG,GAAkC,EAAE,CAAC;QAC9C,IAAI,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAChC,IAAI,cAAc;YAAE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAC;QACxD,IAAI,aAAa;YAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;QACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA8C;IAE9C,MAAM,EACJ,SAAS,EACT,aAAa,EACb,QAAQ,EACR,aAAa,EAAE,qBAAqB,EACpC,YAAY,EACZ,OAAO,GAAG,IAAI,GACf,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,EACJ,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EAAE,eAAe,GAC3B,GAAG,WAAW,EAAE,CAAC;IAElB,+DAA+D;IAC/D,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EACzC,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,MAAM,YAAY,GAAG,qBAAqB,CACxC,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAC5C,QAAQ,EAAE,kBAAkB,EAAE,aAAa,CAC5C,CAAC;IAEF,+DAA+D;IAC/D,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAoC,EAAE;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,SAAS,EAAE,gBAAgB;gBAChC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,6BAA6B,CAAC,OAAO,EAAE;gBACzE,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CACvC,WAAW,EACX,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CACxC,CAAC;QAEF,OAAO,mCAAmC,CAAC,SAAS,EAAE;YACpD,gBAAgB;YAChB,wBAAwB;YACxB,kBAAkB;YAClB,oBAAoB;YACpB,SAAS;YACT,cAAc,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK;SAC5C,CAAC,CAAC;IACL,CAAC,EAAE;QACD,SAAS;QACT,eAAe;QACf,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,WAAW;QACX,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,GAAG,EAAE,CAAC,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,GAAG,EAAE,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,SAAS,CAAC,GAAG,EAAE;QACb,8CAA8C;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,gDAAgD;QAChD,IAAI,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;YAC5D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,CAAC,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACtE,2CAA2C;YAC3C,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,IAAI,YAAY,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,wBAAwB,CAAC;YACvB,SAAS;YACT,aAAa;YACb,QAAQ;YACR,WAAW,EAAE,IAAI,IAAI,SAAS;YAC9B,YAAY;YACZ,aAAa,EAAE,qBAAqB;YACpC,iBAAiB;YACjB,YAAY;YACZ,WAAW;SACZ,CAAC;aACC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAClE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,0CAA0C;YAC/D,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACP,CAAC,EAAE;QACD,OAAO;QACP,SAAS;QACT,aAAa;QACb,QAAQ;QACR,qBAAqB;QACrB,IAAI;QACJ,YAAY;QACZ,iBAAiB;QACjB,YAAY;QACZ,YAAY,CAAC,gBAAgB;QAC7B,WAAW;QACX,mBAAmB;KACpB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS;QACT,SAAS;QACT,KAAK;QACL,YAAY;QACZ,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,2EAA2E;AAC3E,SAAS,wBAAwB,CAC/B,CAAkC,EAClC,CAAkC;IAElC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAkC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CACjC,CAAqC,EACrC,CAAqC;IAErC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,SAAS,KAAK,EAAE,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAoE,EACpE,SAAkD,EAAE;IAEpD,MAAM,EACJ,aAAa,EACb,QAAQ,EACR,aAAa,EAAE,qBAAqB,EACpC,YAAY,EACZ,OAAO,GAAG,IAAI,GACf,GAAG,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,EACJ,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EAAE,eAAe,GAC3B,GAAG,WAAW,EAAE,CAAC;IAElB,MAAM,YAAY,GAAG,qBAAqB,CACxC,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAC5C,QAAQ,EAAE,kBAAkB,EAAE,aAAa,CAC5C,CAAC;IAEF,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAqC,IAAI,GAAG,EAAE,CAAC,CAAC;IAE5F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;YAC3D,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC/B,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,SAAS,GAAG,uBAAuB,CACvC,WAAW,EACX,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CACxC,CAAC;QAEF,MAAM,UAAU,GAAG;YACjB,gBAAgB;YAChB,wBAAwB;YACxB,kBAAkB;YAClB,oBAAoB;YACpB,SAAS;YACT,cAAc,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK;SAC5C,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;YAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;YAEzD,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBACjC,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBAEzD,MAAM,mBAAmB,GAAG,eAAe;oBACzC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAc,EAAE,QAAQ,EAAE,6BAA6B,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC7H,CAAC,CAAC,mCAAmC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAE/D,IAAI,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;oBAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,CAAC,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;oBACtE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBAED,MAAM,KAAK,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACpC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;wBAC7C,SAAS;wBACT,aAAa;wBACb,QAAQ;wBACR,WAAW,EAAE,IAAI,IAAI,SAAS;wBAC9B,YAAY;wBACZ,aAAa,EAAE,qBAAqB;wBACpC,iBAAiB;wBACjB,YAAY;wBACZ,WAAW;qBACZ,CAAC,CAAC;oBACH,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACzE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC,CAAC;QAEF,WAAW,EAAE,CAAC;QAEd,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE;QACD,OAAO;QACP,UAAU;QACV,aAAa;QACb,QAAQ;QACR,qBAAqB;QACrB,IAAI;QACJ,YAAY;QACZ,WAAW;QACX,QAAQ,EAAE,qBAAqB;QAC/B,iBAAiB;QACjB,YAAY;QACZ,WAAW;QACX,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,eAAe;QACf,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["/**\n * React hook for checking if an operation is enabled.\n * \n * This hook evaluates the enabledCondition for an operation based on:\n * - Current object (for READ/UPDATE/DELETE)\n * - Input DTO (for CREATE)\n * - User context (from UserOrgsContext)\n * - Object context (fetched if needed)\n * \n * Usage:\n * ```tsx\n * const { isEnabled, isLoading } = useOperationEnabled({\n *   operation: myOperation,\n *   currentObject: myObject,\n *   resourceType: 'TODOS'\n * });\n * ```\n */\n\nimport { useMemo } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport {\n  evaluateEnabledCondition,\n  type EvaluateEnabledConditionParams,\n  getOperationContextNeeds,\n} from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport {\n  type ResourceType,\n  type ExecutionContext_InitiatorIds,\n  FeatureUnavailabilityBehavior,\n  ResourcesConfig_OperationPathUtils,\n} from '@wildo-ai/saas-models';\nimport { useState, useEffect } from 'react';\nimport { useFeatures } from '~wildo-frontend-lib/core/features/useFeatures';\nimport {\n  resolveOperationFeatureAvailability,\n  type FeatureAvailability,\n} from '~wildo-frontend-lib/core/features/useOperationFeatureAvailability';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { useBillingSafe } from '~wildo-frontend-lib/core/billing/useBilling';\nimport { buildFeaturePolicyRoles } from '~wildo-frontend-lib/core/features/feature-unavailability.frontend.utils';\n\nexport type { FeatureAvailability };\n\nexport interface UseOperationEnabledParams<TMainSchema = any> {\n  /** The operation to evaluate */\n  operation: FrontendResourceConfiguration_Operation<any, any, any>;\n  /** Current object (for READ/UPDATE/DELETE operations) */\n  currentObject?: TMainSchema;\n  /** Input DTO (for CREATE operations) */\n  inputDto?: Partial<TMainSchema>;\n  /** Object context (parent/child relationships) - optional, will be fetched if needed */\n  objectContext?: any;\n  /** Resource type */\n  resourceType: ResourceType;\n  /** Whether to enable evaluation (default: true) */\n  enabled?: boolean;\n}\n\nexport interface UseOperationEnabledResult {\n  /** Whether the operation is enabled */\n  isEnabled: boolean;\n  /** Whether evaluation is in progress */\n  isLoading: boolean;\n  /** Error if evaluation failed */\n  error: Error | null;\n  /** Context needs for the operation */\n  contextNeeds: {\n    needsObjectContext: boolean;\n    needsUserContext: boolean;\n  };\n  /** Feature availability information (undefined if no requiredFeatures on operation) */\n  featureAvailability?: FeatureAvailability;\n}\n\n/** Result type for the batch useOperationsEnabled hook */\nexport interface OperationEnabledEntry {\n  isEnabled: boolean;\n  featureAvailability?: FeatureAvailability;\n}\n\nexport interface UseOperationsEnabledParams<TMainSchema = any> {\n  currentObject?: TMainSchema;\n  inputDto?: Partial<TMainSchema>;\n  objectContext?: EvaluateEnabledConditionParams<TMainSchema>['objectContext'];\n  resourceType?: ResourceType;\n  enabled?: boolean;\n}\n\nexport function buildOperationEnabledKey(\n  operation: FrontendResourceConfiguration_Operation<any, any, any>,\n): string {\n  return ResourcesConfig_OperationPathUtils.createOperationPathKeyFromOperation(operation as any);\n}\n\nfunction operationNeedsDeferredGate(\n  operation: FrontendResourceConfiguration_Operation<any, any, any>,\n): boolean {\n  return Boolean(operation.enabledCondition || operation.requiredFeatures);\n}\n\n/**\n * Derives a value-stable {@link ExecutionContext_InitiatorIds} from the\n * individual initiator primitives.\n *\n * Both enabled-condition hooks below feed `initiatorIds` into an effect's\n * dependency array. Building it directly from the `user` object and the\n * `appScope.primaryScopeValues` object made its identity churn whenever EITHER\n * source object's reference changed — most notably an access-token refresh,\n * which rebuilds `primaryScopeValues` (the access token is one of its `useMemo`\n * dependencies) even when the decoded user / organization / application ids are\n * unchanged. That needlessly re-fired the (async) evaluation effect. Keying the\n * memo on the three extracted primitives keeps the returned object\n * referentially stable until an id genuinely changes.\n */\nfunction useStableInitiatorIds(\n  userId: string | null | undefined,\n  organizationId: string | null | undefined,\n  applicationId: string | null | undefined,\n): ExecutionContext_InitiatorIds | undefined {\n  return useMemo((): ExecutionContext_InitiatorIds | undefined => {\n    const ids: ExecutionContext_InitiatorIds = {};\n    if (userId) ids.userId = userId;\n    if (organizationId) ids.organizationId = organizationId;\n    if (applicationId) ids.applicationId = applicationId;\n    return Object.keys(ids).length > 0 ? ids : undefined;\n  }, [userId, organizationId, applicationId]);\n}\n\n/**\n * Hook to check if an operation is enabled based on enabledCondition.\n * \n * Automatically handles:\n * - Context needs extraction\n * - User context from UserOrgsContext\n * - Object context fetching (if needed)\n * - Caching based on operation, object, and user\n */\nexport function useOperationEnabled<TMainSchema = any>(\n  params: UseOperationEnabledParams<TMainSchema>\n): UseOperationEnabledResult {\n  const {\n    operation,\n    currentObject,\n    inputDto,\n    objectContext: providedObjectContext,\n    resourceType,\n    enabled = true,\n  } = params;\n\n  const { getResourcesRegistry, doOperation } = useResourceRegistry();\n  const { user, permissions } = useUserOrgs();\n  const appScope = useAppScopeSafe();\n  const billing = useBillingSafe();\n  const resourcesRegistry = getResourcesRegistry();\n  const {\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    isLoading: featuresLoading,\n  } = useFeatures();\n\n  // Extract context needs (static, doesn't need to be in effect)\n  const contextNeeds = useMemo(\n    () => getOperationContextNeeds(operation),\n    [operation]\n  );\n\n  const initiatorIds = useStableInitiatorIds(\n    user?._id,\n    appScope?.primaryScopeValues?.organizationId,\n    appScope?.primaryScopeValues?.applicationId,\n  );\n\n  // ── Feature availability check (synchronous, from context) ──\n  const featureAvailability = useMemo((): FeatureAvailability | undefined => {\n    if (featuresLoading) {\n      return operation?.requiredFeatures\n        ? { isAvailable: false, behavior: FeatureUnavailabilityBehavior.DISABLE }\n        : undefined;\n    }\n    const userRoles = buildFeaturePolicyRoles(\n      permissions,\n      appScope?.currentOrganizationId ?? null,\n    );\n\n    return resolveOperationFeatureAvailability(operation, {\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      userRoles,\n      billingEnabled: billing?.isEnabled ?? false,\n    });\n  }, [\n    operation,\n    featuresLoading,\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    permissions,\n    appScope?.currentOrganizationId,\n    billing?.isEnabled,\n  ]);\n\n  const [isEnabled, setIsEnabled] = useState<boolean>(() => !operationNeedsDeferredGate(operation));\n  const [isLoading, setIsLoading] = useState<boolean>(() => operationNeedsDeferredGate(operation));\n  const [error, setError] = useState<Error | null>(null);\n\n  useEffect(() => {\n    // Skip evaluation if disabled or no operation\n    if (!enabled || !operation) {\n      setIsEnabled(true);\n      setIsLoading(false);\n      return;\n    }\n\n    // ── Feature check first (fast, synchronous) ──\n    if (featureAvailability && !featureAvailability.isAvailable) {\n      setIsEnabled(false);\n      setIsLoading(false);\n      return;\n    }\n\n    // Check if operation has enabledCondition\n    if (!('enabledCondition' in operation) || !operation.enabledCondition) {\n      // No enabledCondition means always enabled\n      setIsEnabled(true);\n      setIsLoading(false);\n      return;\n    }\n\n    // If needsUserContext but no user, operation is disabled\n    if (contextNeeds.needsUserContext && !user) {\n      setIsEnabled(false);\n      setIsLoading(false);\n      return;\n    }\n\n    // Evaluate enabledCondition\n    setIsLoading(true);\n    setError(null);\n\n    evaluateEnabledCondition({\n      operation,\n      currentObject,\n      inputDto,\n      userContext: user || undefined,\n      initiatorIds,\n      objectContext: providedObjectContext,\n      resourcesRegistry,\n      resourceType,\n      doOperation,\n    })\n      .then((enabled) => {\n        setIsEnabled(enabled);\n        setIsLoading(false);\n      })\n      .catch((err) => {\n        setError(err instanceof Error ? err : new Error('Unknown error'));\n        setIsEnabled(false); // Default to disabled on error for safety\n        setIsLoading(false);\n      });\n  }, [\n    enabled,\n    operation,\n    currentObject,\n    inputDto,\n    providedObjectContext,\n    user,\n    initiatorIds,\n    resourcesRegistry,\n    resourceType,\n    contextNeeds.needsUserContext,\n    doOperation,\n    featureAvailability,\n  ]);\n\n  return {\n    isEnabled,\n    isLoading,\n    error,\n    contextNeeds,\n    featureAvailability,\n  };\n}\n\n/**\n * Hook to check if multiple operations are enabled.\n * Useful for filtering operation lists.\n * \n * Evaluation order per operation:\n *   1. Feature check (fast, synchronous from context) — if failed, isEnabled=false with featureAvailability\n *   2. enabledCondition (may be async) — if failed, isEnabled=false, featureAvailability=undefined (not a feature issue)\n * \n * @param operations - Array of operations to check\n * @param currentObject - Current object (optional)\n * @param resourceType - Resource type\n * @returns Map of operation-path keys to { isEnabled, featureAvailability? }\n */\n/** Shallow value-equality for a single feature-availability descriptor. */\nfunction featureAvailabilityEqual(\n  a: FeatureAvailability | undefined,\n  b: FeatureAvailability | undefined,\n): boolean {\n  if (a === b) return true;\n  if (!a || !b) return false;\n  const ka = Object.keys(a) as (keyof FeatureAvailability)[];\n  const kb = Object.keys(b);\n  if (ka.length !== kb.length) return false;\n  for (const k of ka) {\n    if (a[k] !== b[k]) return false;\n  }\n  return true;\n}\n\n/**\n * Value-equality for the operations-enabled map. The async evaluation rebuilds a\n * fresh `Map` on every run, and its effect re-fires whenever any input identity\n * churns (e.g. a recomputed `operations`/`filteredOps` array). Without this guard\n * `setEnabledMap(freshMap)` re-renders on every commit even when nothing changed —\n * the recomputed map feeds the action-bar `items` memo, which re-renders the row\n * operations (and their Radix tooltips/menus) in a tight loop that pegs the CPU.\n * Comparing by value lets `setEnabledMap` bail when the enabled-states are\n * unchanged, breaking the loop while still propagating any real change.\n */\nfunction operationsEnabledMapsEqual(\n  a: Map<string, OperationEnabledEntry>,\n  b: Map<string, OperationEnabledEntry>,\n): boolean {\n  if (a === b) return true;\n  if (a.size !== b.size) return false;\n  for (const [key, av] of a) {\n    const bv = b.get(key);\n    if (!bv) return false;\n    if (av.isEnabled !== bv.isEnabled) return false;\n    if (!featureAvailabilityEqual(av.featureAvailability, bv.featureAvailability)) return false;\n  }\n  return true;\n}\n\nexport function useOperationsEnabled<TMainSchema = any>(\n  operations: FrontendResourceConfiguration_Operation<any, any, any>[],\n  params: UseOperationsEnabledParams<TMainSchema> = {},\n): Map<string, OperationEnabledEntry> {\n  const {\n    currentObject,\n    inputDto,\n    objectContext: providedObjectContext,\n    resourceType,\n    enabled = true,\n  } = params;\n  const { getResourcesRegistry, doOperation } = useResourceRegistry();\n  const { user, permissions } = useUserOrgs();\n  const appScope = useAppScopeSafe();\n  const billing = useBillingSafe();\n  const resourcesRegistry = getResourcesRegistry();\n  const {\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    isLoading: featuresLoading,\n  } = useFeatures();\n\n  const initiatorIds = useStableInitiatorIds(\n    user?._id,\n    appScope?.primaryScopeValues?.organizationId,\n    appScope?.primaryScopeValues?.applicationId,\n  );\n\n  const [enabledMap, setEnabledMap] = useState<Map<string, OperationEnabledEntry>>(new Map());\n\n  useEffect(() => {\n    if (!enabled) {\n      const bypassMap = new Map<string, OperationEnabledEntry>();\n      operations.forEach((operation) => {\n        bypassMap.set(buildOperationEnabledKey(operation), { isEnabled: true });\n      });\n      setEnabledMap((prev) => (operationsEnabledMapsEqual(prev, bypassMap) ? prev : bypassMap));\n      return;\n    }\n\n    if (!operations.length || !resourceType) {\n      setEnabledMap((prev) => (prev.size === 0 ? prev : new Map()));\n      return;\n    }\n\n    let cancelled = false;\n\n    const userRoles = buildFeaturePolicyRoles(\n      permissions,\n      appScope?.currentOrganizationId ?? null,\n    );\n\n    const featureCtx = {\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      userRoles,\n      billingEnabled: billing?.isEnabled ?? false,\n    };\n\n    const evaluateAll = async () => {\n      const results = new Map<string, OperationEnabledEntry>();\n\n      await Promise.all(\n        operations.map(async (operation) => {\n          const operationKey = buildOperationEnabledKey(operation);\n\n          const featureAvailability = featuresLoading\n            ? (operation.requiredFeatures ? { isAvailable: false as const, behavior: FeatureUnavailabilityBehavior.DISABLE } : undefined)\n            : resolveOperationFeatureAvailability(operation, featureCtx);\n\n          if (featureAvailability && !featureAvailability.isAvailable) {\n            results.set(operationKey, { isEnabled: false, featureAvailability });\n            return;\n          }\n\n          if (!('enabledCondition' in operation) || !operation.enabledCondition) {\n            results.set(operationKey, { isEnabled: true, featureAvailability });\n            return;\n          }\n\n          const needs = getOperationContextNeeds(operation);\n          if (needs.needsUserContext && !user) {\n            results.set(operationKey, { isEnabled: false, featureAvailability });\n            return;\n          }\n\n          try {\n            const enabled = await evaluateEnabledCondition({\n              operation,\n              currentObject,\n              inputDto,\n              userContext: user || undefined,\n              initiatorIds,\n              objectContext: providedObjectContext,\n              resourcesRegistry,\n              resourceType,\n              doOperation,\n            });\n            results.set(operationKey, { isEnabled: enabled, featureAvailability });\n          } catch (error) {\n            results.set(operationKey, { isEnabled: false, featureAvailability });\n          }\n        })\n      );\n\n      if (!cancelled) {\n        setEnabledMap((prev) => (operationsEnabledMapsEqual(prev, results) ? prev : results));\n      }\n    };\n\n    evaluateAll();\n\n    return () => { cancelled = true; };\n  }, [\n    enabled,\n    operations,\n    currentObject,\n    inputDto,\n    providedObjectContext,\n    user,\n    initiatorIds,\n    permissions,\n    appScope?.currentOrganizationId,\n    resourcesRegistry,\n    resourceType,\n    doOperation,\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    featuresLoading,\n    billing?.isEnabled,\n  ]);\n\n  return enabledMap;\n}\n"]}
+{"version":3,"file":"useOperationEnabled.js","sourceRoot":"","sources":["../../../../../../src/core/resources/hooks/useOperationEnabled.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,wBAAwB,EAExB,wBAAwB,GACzB,MAAM,qFAAqF,CAAC;AAE7F,OAAO,EAGL,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EACL,mCAAmC,GAEpC,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yEAAyE,CAAC;AAmElH,MAAM,UAAU,wBAAwB,CACtC,SAAiE;IAEjE,OAAO,kCAAkC,CAAC,mCAAmC,CAAC,SAAgB,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,0BAA0B,CACjC,SAAiE;IAEjE,OAAO,OAAO,CAAC,SAAS,CAAC,gBAAgB,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,cAAyC,EACzC,aAAwC;IAExC,OAAO,OAAO,CAAC,GAA8C,EAAE;QAC7D,MAAM,GAAG,GAAkC,EAAE,CAAC;QAC9C,IAAI,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAChC,IAAI,cAAc;YAAE,GAAG,CAAC,cAAc,GAAG,cAAc,CAAC;QACxD,IAAI,aAAa;YAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;QACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA8C;IAE9C,MAAM,EACJ,SAAS,EACT,aAAa,EACb,QAAQ,EACR,aAAa,EAAE,qBAAqB,EACpC,YAAY,EACZ,OAAO,GAAG,IAAI,GACf,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,EACJ,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EAAE,eAAe,GAC3B,GAAG,WAAW,EAAE,CAAC;IAElB,+DAA+D;IAC/D,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EACzC,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,MAAM,YAAY,GAAG,qBAAqB,CACxC,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAC5C,QAAQ,EAAE,kBAAkB,EAAE,aAAa,CAC5C,CAAC;IAEF,+DAA+D;IAC/D,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAoC,EAAE;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,SAAS,EAAE,gBAAgB;gBAChC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,6BAA6B,CAAC,OAAO,EAAE;gBACzE,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CACvC,WAAW,EACX,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CACxC,CAAC;QAEF,OAAO,mCAAmC,CAAC,SAAS,EAAE;YACpD,gBAAgB;YAChB,wBAAwB;YACxB,kBAAkB;YAClB,oBAAoB;YACpB,SAAS;YACT,cAAc,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK;SAC5C,CAAC,CAAC;IACL,CAAC,EAAE;QACD,SAAS;QACT,eAAe;QACf,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,WAAW;QACX,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,GAAG,EAAE,CAAC,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAU,GAAG,EAAE,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAC;IAEvD,SAAS,CAAC,GAAG,EAAE;QACb,8CAA8C;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,gDAAgD;QAChD,IAAI,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;YAC5D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,CAAC,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACtE,2CAA2C;YAC3C,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,IAAI,YAAY,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,wBAAwB,CAAC;YACvB,SAAS;YACT,aAAa;YACb,QAAQ;YACR,WAAW,EAAE,IAAI,IAAI,SAAS;YAC9B,YAAY;YACZ,aAAa,EAAE,qBAAqB;YACpC,iBAAiB;YACjB,YAAY;YACZ,WAAW;SACZ,CAAC;aACC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAClE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,0CAA0C;YAC/D,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACP,CAAC,EAAE;QACD,OAAO;QACP,SAAS;QACT,aAAa;QACb,QAAQ;QACR,qBAAqB;QACrB,IAAI;QACJ,YAAY;QACZ,iBAAiB;QACjB,YAAY;QACZ,YAAY,CAAC,gBAAgB;QAC7B,WAAW;QACX,mBAAmB;KACpB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS;QACT,SAAS;QACT,KAAK;QACL,YAAY;QACZ,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,2EAA2E;AAC3E,SAAS,wBAAwB,CAC/B,CAAkC,EAClC,CAAkC;IAElC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAkC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CACjC,CAAqC,EACrC,CAAqC;IAErC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,SAAS,KAAK,EAAE,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACtH,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAoE,EACpE,SAAkD,EAAE;IAEpD,MAAM,EACJ,aAAa,EACb,QAAQ,EACR,aAAa,EAAE,qBAAqB,EACpC,YAAY,EACZ,OAAO,GAAG,IAAI,EACd,gBAAgB,GACjB,GAAG,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,EACJ,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EAAE,eAAe,GAC3B,GAAG,WAAW,EAAE,CAAC;IAElB,MAAM,YAAY,GAAG,qBAAqB,CACxC,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,kBAAkB,EAAE,cAAc,EAC5C,QAAQ,EAAE,kBAAkB,EAAE,aAAa,CAC5C,CAAC;IAEF,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAqC,IAAI,GAAG,EAAE,CAAC,CAAC;IAE5F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;YAC3D,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC/B,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC;YACH,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,SAAS,GAAG,uBAAuB,CACvC,WAAW,EACX,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CACxC,CAAC;QAEF,MAAM,UAAU,GAAG;YACjB,gBAAgB;YAChB,wBAAwB;YACxB,kBAAkB;YAClB,oBAAoB;YACpB,SAAS;YACT,cAAc,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK;SAC5C,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;YAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;YAEzD,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBACjC,MAAM,YAAY,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBAEzD,MAAM,mBAAmB,GAAG,eAAe;oBACzC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAc,EAAE,QAAQ,EAAE,6BAA6B,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC7H,CAAC,CAAC,mCAAmC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAE/D,IAAI,mBAAmB,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;oBAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,CAAC,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;oBACtE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBAED,MAAM,KAAK,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACpC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,CAAC,OAAgC,EAAE,EAAE,CAAC,wBAAwB,CAAC;wBACjF,SAAS;wBACT,aAAa,EAAE,OAAO;wBACtB,QAAQ;wBACR,WAAW,EAAE,IAAI,IAAI,SAAS;wBAC9B,YAAY;wBACZ,aAAa,EAAE,qBAAqB;wBACpC,iBAAiB;wBACjB,YAAY;wBACZ,WAAW;qBACZ,CAAC,CAAC;oBACH,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;wBAClF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC9E,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE;4BACxB,SAAS,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;4BAClC,mBAAmB;4BACnB,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC7E,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC,aAAa,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAClG,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC,CAAC;QAEF,WAAW,EAAE,CAAC;QAEd,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE;QACD,OAAO;QACP,UAAU;QACV,aAAa;QACb,gBAAgB;QAChB,QAAQ;QACR,qBAAqB;QACrB,IAAI;QACJ,YAAY;QACZ,WAAW;QACX,QAAQ,EAAE,qBAAqB;QAC/B,iBAAiB;QACjB,YAAY;QACZ,WAAW;QACX,gBAAgB;QAChB,wBAAwB;QACxB,kBAAkB;QAClB,oBAAoB;QACpB,eAAe;QACf,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["/**\n * React hook for checking if an operation is enabled.\n * \n * This hook evaluates the enabledCondition for an operation based on:\n * - Current object (for READ/UPDATE/DELETE)\n * - Input DTO (for CREATE)\n * - User context (from UserOrgsContext)\n * - Object context (fetched if needed)\n * \n * Usage:\n * ```tsx\n * const { isEnabled, isLoading } = useOperationEnabled({\n *   operation: myOperation,\n *   currentObject: myObject,\n *   resourceType: 'TODOS'\n * });\n * ```\n */\n\nimport { useMemo } from 'react';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport {\n  evaluateEnabledCondition,\n  type EvaluateEnabledConditionParams,\n  getOperationContextNeeds,\n} from '~wildo-frontend-lib/core/resources/utils/operation-enabled-condition.frontend.utils';\nimport type { FrontendResourceConfiguration_Operation } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport {\n  type ResourceType,\n  type ExecutionContext_InitiatorIds,\n  FeatureUnavailabilityBehavior,\n  ResourcesConfig_OperationPathUtils,\n} from '@wildo-ai/saas-models';\nimport { useState, useEffect } from 'react';\nimport { useFeatures } from '~wildo-frontend-lib/core/features/useFeatures';\nimport {\n  resolveOperationFeatureAvailability,\n  type FeatureAvailability,\n} from '~wildo-frontend-lib/core/features/useOperationFeatureAvailability';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { useBillingSafe } from '~wildo-frontend-lib/core/billing/useBilling';\nimport { buildFeaturePolicyRoles } from '~wildo-frontend-lib/core/features/feature-unavailability.frontend.utils';\n\nexport type { FeatureAvailability };\n\nexport interface UseOperationEnabledParams<TMainSchema = any> {\n  /** The operation to evaluate */\n  operation: FrontendResourceConfiguration_Operation<any, any, any>;\n  /** Current object (for READ/UPDATE/DELETE operations) */\n  currentObject?: TMainSchema;\n  /** Input DTO (for CREATE operations) */\n  inputDto?: Partial<TMainSchema>;\n  /** Object context (parent/child relationships) - optional, will be fetched if needed */\n  objectContext?: any;\n  /** Resource type */\n  resourceType: ResourceType;\n  /** Whether to enable evaluation (default: true) */\n  enabled?: boolean;\n}\n\nexport interface UseOperationEnabledResult {\n  /** Whether the operation is enabled */\n  isEnabled: boolean;\n  /** Whether evaluation is in progress */\n  isLoading: boolean;\n  /** Error if evaluation failed */\n  error: Error | null;\n  /** Context needs for the operation */\n  contextNeeds: {\n    needsObjectContext: boolean;\n    needsUserContext: boolean;\n  };\n  /** Feature availability information (undefined if no requiredFeatures on operation) */\n  featureAvailability?: FeatureAvailability;\n}\n\n/** Result type for the batch useOperationsEnabled hook */\nexport interface OperationEnabledEntry {\n  isEnabled: boolean;\n  featureAvailability?: FeatureAvailability;\n  /**\n   * For a BULK operation judged row by row (`selectionObjects`): the indices, in `selectionObjects`,\n   * of the rows that FAIL its condition. Present only when some do. It is what lets the bar say\n   * \"2 of 5 selected can't…\" and offer to keep only the eligible rows, instead of a bare greyed button.\n   */\n  ineligibleSelectionIndices?: readonly number[];\n}\n\nexport interface UseOperationsEnabledParams<TMainSchema = any> {\n  currentObject?: TMainSchema;\n  inputDto?: Partial<TMainSchema>;\n  objectContext?: EvaluateEnabledConditionParams<TMainSchema>['objectContext'];\n  resourceType?: ResourceType;\n  enabled?: boolean;\n  /**\n   * The rows a BULK operation would act on. A bulk twin inherits its single-row variant's\n   * `enabledCondition`, which reads `currentObject` — so it is judged against EACH selected row,\n   * and the action is enabled only when every row passes. That is the backend's rule\n   * (`ServicesRegistryHandlerBackendService`, the multi-row branch of the enabled-state gate): the\n   * write is one write over the whole selection, so offering it on \"most rows qualify\" would only\n   * trade a disabled button for a refusal after the click.\n   *\n   * Ignored for a non-bulk operation, which keeps `currentObject`. When absent, a bulk operation is\n   * judged against `currentObject` as before.\n   */\n  selectionObjects?: readonly TMainSchema[];\n}\n\nexport function buildOperationEnabledKey(\n  operation: FrontendResourceConfiguration_Operation<any, any, any>,\n): string {\n  return ResourcesConfig_OperationPathUtils.createOperationPathKeyFromOperation(operation as any);\n}\n\nfunction operationNeedsDeferredGate(\n  operation: FrontendResourceConfiguration_Operation<any, any, any>,\n): boolean {\n  return Boolean(operation.enabledCondition || operation.requiredFeatures);\n}\n\n/**\n * Derives a value-stable {@link ExecutionContext_InitiatorIds} from the\n * individual initiator primitives.\n *\n * Both enabled-condition hooks below feed `initiatorIds` into an effect's\n * dependency array. Building it directly from the `user` object and the\n * `appScope.primaryScopeValues` object made its identity churn whenever EITHER\n * source object's reference changed — most notably an access-token refresh,\n * which rebuilds `primaryScopeValues` (the access token is one of its `useMemo`\n * dependencies) even when the decoded user / organization / application ids are\n * unchanged. That needlessly re-fired the (async) evaluation effect. Keying the\n * memo on the three extracted primitives keeps the returned object\n * referentially stable until an id genuinely changes.\n */\nfunction useStableInitiatorIds(\n  userId: string | null | undefined,\n  organizationId: string | null | undefined,\n  applicationId: string | null | undefined,\n): ExecutionContext_InitiatorIds | undefined {\n  return useMemo((): ExecutionContext_InitiatorIds | undefined => {\n    const ids: ExecutionContext_InitiatorIds = {};\n    if (userId) ids.userId = userId;\n    if (organizationId) ids.organizationId = organizationId;\n    if (applicationId) ids.applicationId = applicationId;\n    return Object.keys(ids).length > 0 ? ids : undefined;\n  }, [userId, organizationId, applicationId]);\n}\n\n/**\n * Hook to check if an operation is enabled based on enabledCondition.\n * \n * Automatically handles:\n * - Context needs extraction\n * - User context from UserOrgsContext\n * - Object context fetching (if needed)\n * - Caching based on operation, object, and user\n */\nexport function useOperationEnabled<TMainSchema = any>(\n  params: UseOperationEnabledParams<TMainSchema>\n): UseOperationEnabledResult {\n  const {\n    operation,\n    currentObject,\n    inputDto,\n    objectContext: providedObjectContext,\n    resourceType,\n    enabled = true,\n  } = params;\n\n  const { getResourcesRegistry, doOperation } = useResourceRegistry();\n  const { user, permissions } = useUserOrgs();\n  const appScope = useAppScopeSafe();\n  const billing = useBillingSafe();\n  const resourcesRegistry = getResourcesRegistry();\n  const {\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    isLoading: featuresLoading,\n  } = useFeatures();\n\n  // Extract context needs (static, doesn't need to be in effect)\n  const contextNeeds = useMemo(\n    () => getOperationContextNeeds(operation),\n    [operation]\n  );\n\n  const initiatorIds = useStableInitiatorIds(\n    user?._id,\n    appScope?.primaryScopeValues?.organizationId,\n    appScope?.primaryScopeValues?.applicationId,\n  );\n\n  // ── Feature availability check (synchronous, from context) ──\n  const featureAvailability = useMemo((): FeatureAvailability | undefined => {\n    if (featuresLoading) {\n      return operation?.requiredFeatures\n        ? { isAvailable: false, behavior: FeatureUnavailabilityBehavior.DISABLE }\n        : undefined;\n    }\n    const userRoles = buildFeaturePolicyRoles(\n      permissions,\n      appScope?.currentOrganizationId ?? null,\n    );\n\n    return resolveOperationFeatureAvailability(operation, {\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      userRoles,\n      billingEnabled: billing?.isEnabled ?? false,\n    });\n  }, [\n    operation,\n    featuresLoading,\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    permissions,\n    appScope?.currentOrganizationId,\n    billing?.isEnabled,\n  ]);\n\n  const [isEnabled, setIsEnabled] = useState<boolean>(() => !operationNeedsDeferredGate(operation));\n  const [isLoading, setIsLoading] = useState<boolean>(() => operationNeedsDeferredGate(operation));\n  const [error, setError] = useState<Error | null>(null);\n\n  useEffect(() => {\n    // Skip evaluation if disabled or no operation\n    if (!enabled || !operation) {\n      setIsEnabled(true);\n      setIsLoading(false);\n      return;\n    }\n\n    // ── Feature check first (fast, synchronous) ──\n    if (featureAvailability && !featureAvailability.isAvailable) {\n      setIsEnabled(false);\n      setIsLoading(false);\n      return;\n    }\n\n    // Check if operation has enabledCondition\n    if (!('enabledCondition' in operation) || !operation.enabledCondition) {\n      // No enabledCondition means always enabled\n      setIsEnabled(true);\n      setIsLoading(false);\n      return;\n    }\n\n    // If needsUserContext but no user, operation is disabled\n    if (contextNeeds.needsUserContext && !user) {\n      setIsEnabled(false);\n      setIsLoading(false);\n      return;\n    }\n\n    // Evaluate enabledCondition\n    setIsLoading(true);\n    setError(null);\n\n    evaluateEnabledCondition({\n      operation,\n      currentObject,\n      inputDto,\n      userContext: user || undefined,\n      initiatorIds,\n      objectContext: providedObjectContext,\n      resourcesRegistry,\n      resourceType,\n      doOperation,\n    })\n      .then((enabled) => {\n        setIsEnabled(enabled);\n        setIsLoading(false);\n      })\n      .catch((err) => {\n        setError(err instanceof Error ? err : new Error('Unknown error'));\n        setIsEnabled(false); // Default to disabled on error for safety\n        setIsLoading(false);\n      });\n  }, [\n    enabled,\n    operation,\n    currentObject,\n    inputDto,\n    providedObjectContext,\n    user,\n    initiatorIds,\n    resourcesRegistry,\n    resourceType,\n    contextNeeds.needsUserContext,\n    doOperation,\n    featureAvailability,\n  ]);\n\n  return {\n    isEnabled,\n    isLoading,\n    error,\n    contextNeeds,\n    featureAvailability,\n  };\n}\n\n/**\n * Hook to check if multiple operations are enabled.\n * Useful for filtering operation lists.\n * \n * Evaluation order per operation:\n *   1. Feature check (fast, synchronous from context) — if failed, isEnabled=false with featureAvailability\n *   2. enabledCondition (may be async) — if failed, isEnabled=false, featureAvailability=undefined (not a feature issue)\n * \n * @param operations - Array of operations to check\n * @param currentObject - Current object (optional)\n * @param resourceType - Resource type\n * @returns Map of operation-path keys to { isEnabled, featureAvailability? }\n */\n/** Shallow value-equality for a single feature-availability descriptor. */\nfunction featureAvailabilityEqual(\n  a: FeatureAvailability | undefined,\n  b: FeatureAvailability | undefined,\n): boolean {\n  if (a === b) return true;\n  if (!a || !b) return false;\n  const ka = Object.keys(a) as (keyof FeatureAvailability)[];\n  const kb = Object.keys(b);\n  if (ka.length !== kb.length) return false;\n  for (const k of ka) {\n    if (a[k] !== b[k]) return false;\n  }\n  return true;\n}\n\n/**\n * Value-equality for the operations-enabled map. The async evaluation rebuilds a\n * fresh `Map` on every run, and its effect re-fires whenever any input identity\n * churns (e.g. a recomputed `operations`/`filteredOps` array). Without this guard\n * `setEnabledMap(freshMap)` re-renders on every commit even when nothing changed —\n * the recomputed map feeds the action-bar `items` memo, which re-renders the row\n * operations (and their Radix tooltips/menus) in a tight loop that pegs the CPU.\n * Comparing by value lets `setEnabledMap` bail when the enabled-states are\n * unchanged, breaking the loop while still propagating any real change.\n */\nfunction operationsEnabledMapsEqual(\n  a: Map<string, OperationEnabledEntry>,\n  b: Map<string, OperationEnabledEntry>,\n): boolean {\n  if (a === b) return true;\n  if (a.size !== b.size) return false;\n  for (const [key, av] of a) {\n    const bv = b.get(key);\n    if (!bv) return false;\n    if (av.isEnabled !== bv.isEnabled) return false;\n    if ((av.ineligibleSelectionIndices ?? []).join(',') !== (bv.ineligibleSelectionIndices ?? []).join(',')) return false;\n    if (!featureAvailabilityEqual(av.featureAvailability, bv.featureAvailability)) return false;\n  }\n  return true;\n}\n\nexport function useOperationsEnabled<TMainSchema = any>(\n  operations: FrontendResourceConfiguration_Operation<any, any, any>[],\n  params: UseOperationsEnabledParams<TMainSchema> = {},\n): Map<string, OperationEnabledEntry> {\n  const {\n    currentObject,\n    inputDto,\n    objectContext: providedObjectContext,\n    resourceType,\n    enabled = true,\n    selectionObjects,\n  } = params;\n  const { getResourcesRegistry, doOperation } = useResourceRegistry();\n  const { user, permissions } = useUserOrgs();\n  const appScope = useAppScopeSafe();\n  const billing = useBillingSafe();\n  const resourcesRegistry = getResourcesRegistry();\n  const {\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    isLoading: featuresLoading,\n  } = useFeatures();\n\n  const initiatorIds = useStableInitiatorIds(\n    user?._id,\n    appScope?.primaryScopeValues?.organizationId,\n    appScope?.primaryScopeValues?.applicationId,\n  );\n\n  const [enabledMap, setEnabledMap] = useState<Map<string, OperationEnabledEntry>>(new Map());\n\n  useEffect(() => {\n    if (!enabled) {\n      const bypassMap = new Map<string, OperationEnabledEntry>();\n      operations.forEach((operation) => {\n        bypassMap.set(buildOperationEnabledKey(operation), { isEnabled: true });\n      });\n      setEnabledMap((prev) => (operationsEnabledMapsEqual(prev, bypassMap) ? prev : bypassMap));\n      return;\n    }\n\n    if (!operations.length || !resourceType) {\n      setEnabledMap((prev) => (prev.size === 0 ? prev : new Map()));\n      return;\n    }\n\n    let cancelled = false;\n\n    const userRoles = buildFeaturePolicyRoles(\n      permissions,\n      appScope?.currentOrganizationId ?? null,\n    );\n\n    const featureCtx = {\n      resolvedFeatures,\n      resolvedFeaturesResponse,\n      featureDefinitions,\n      unavailabilityPolicy,\n      userRoles,\n      billingEnabled: billing?.isEnabled ?? false,\n    };\n\n    const evaluateAll = async () => {\n      const results = new Map<string, OperationEnabledEntry>();\n\n      await Promise.all(\n        operations.map(async (operation) => {\n          const operationKey = buildOperationEnabledKey(operation);\n\n          const featureAvailability = featuresLoading\n            ? (operation.requiredFeatures ? { isAvailable: false as const, behavior: FeatureUnavailabilityBehavior.DISABLE } : undefined)\n            : resolveOperationFeatureAvailability(operation, featureCtx);\n\n          if (featureAvailability && !featureAvailability.isAvailable) {\n            results.set(operationKey, { isEnabled: false, featureAvailability });\n            return;\n          }\n\n          if (!('enabledCondition' in operation) || !operation.enabledCondition) {\n            results.set(operationKey, { isEnabled: true, featureAvailability });\n            return;\n          }\n\n          const needs = getOperationContextNeeds(operation);\n          if (needs.needsUserContext && !user) {\n            results.set(operationKey, { isEnabled: false, featureAvailability });\n            return;\n          }\n\n          try {\n            const evaluateFor = (subject: TMainSchema | undefined) => evaluateEnabledCondition({\n              operation,\n              currentObject: subject,\n              inputDto,\n              userContext: user || undefined,\n              initiatorIds,\n              objectContext: providedObjectContext,\n              resourcesRegistry,\n              resourceType,\n              doOperation,\n            });\n            if (operation.isBulkOperation === true && selectionObjects && selectionObjects.length > 0) {\n              const perRow = await Promise.all(selectionObjects.map((row) => evaluateFor(row)));\n              const ineligible = perRow.flatMap((passes, index) => (passes ? [] : [index]));\n              results.set(operationKey, {\n                isEnabled: ineligible.length === 0,\n                featureAvailability,\n                ...(ineligible.length > 0 ? { ineligibleSelectionIndices: ineligible } : {}),\n              });\n            } else {\n              results.set(operationKey, { isEnabled: await evaluateFor(currentObject), featureAvailability });\n            }\n          } catch (error) {\n            results.set(operationKey, { isEnabled: false, featureAvailability });\n          }\n        })\n      );\n\n      if (!cancelled) {\n        setEnabledMap((prev) => (operationsEnabledMapsEqual(prev, results) ? prev : results));\n      }\n    };\n\n    evaluateAll();\n\n    return () => { cancelled = true; };\n  }, [\n    enabled,\n    operations,\n    currentObject,\n    selectionObjects,\n    inputDto,\n    providedObjectContext,\n    user,\n    initiatorIds,\n    permissions,\n    appScope?.currentOrganizationId,\n    resourcesRegistry,\n    resourceType,\n    doOperation,\n    resolvedFeatures,\n    resolvedFeaturesResponse,\n    featureDefinitions,\n    unavailabilityPolicy,\n    featuresLoading,\n    billing?.isEnabled,\n  ]);\n\n  return enabledMap;\n}\n"]}

package/dist/esm/core/resources/in-place/InPlaceOperationContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InPlaceOperationContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/in-place/InPlaceOperationContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoE,MAAM,OAAO,CAAC;AAEzF,OAAO,KAAK,EAAE,uCAAuC,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AAE/J;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH;;;;;;GAMG;AACH,oBAAY,0BAA0B;IACpC,gEAAgE;IAChE,OAAO,YAAY;IACnB,qFAAqF;IACrF,MAAM,WAAW;CAClB;AAED,UAAU,0BAA0B;IAClC,iEAAiE;IACjE,SAAS,EAAE,uCAAuC,CAAC;IACnD,mGAAmG;IACnG,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAED,MAAM,MAAM,sBAAsB,GAC9B,CAAC,0BAA0B,GAAG;IAC5B,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC;IACzC,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,CAAC,0BAA0B,GAAG;IAC5B,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC;CACzC,CAAC,CAAC;AAEP,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC/C,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,wFAAwF;IACxF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAaD,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CAAC,EACvC,YAAY,EACZ,QAAQ,GACT,EAAE,6BAA6B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoCnD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,0BAA0B,CAEhE"}
+{"version":3,"file":"InPlaceOperationContext.d.ts","sourceRoot":"","sources":["../../../../../../src/core/resources/in-place/InPlaceOperationContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoE,MAAM,OAAO,CAAC;AAEzF,OAAO,KAAK,EAAE,uCAAuC,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AAE/J;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH;;;;;;GAMG;AACH,oBAAY,0BAA0B;IACpC,gEAAgE;IAChE,OAAO,YAAY;IACnB,qFAAqF;IACrF,MAAM,WAAW;CAClB;AAED,UAAU,0BAA0B;IAClC,iEAAiE;IACjE,SAAS,EAAE,uCAAuC,CAAC;IACnD,mGAAmG;IACnG,eAAe,EAAE,gCAAgC,CAAC;CACnD;AAED,MAAM,MAAM,sBAAsB,GAC9B,CAAC,0BAA0B,GAAG;IAC5B,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC;IACzC,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,CAAC,0BAA0B,GAAG;IAC5B,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC;CACzC,CAAC,CAAC;AAEP,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC/C,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,wFAAwF;IACxF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAaD,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CAAC,EACvC,YAAY,EACZ,QAAQ,GACT,EAAE,6BAA6B,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAoCnD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,0BAA0B,CAEhE"}

package/dist/esm/core/resources/in-place/InPlaceOperationContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"InPlaceOperationContext.js","sourceRoot":"","sources":["../../../../../src/core/resources/in-place/InPlaceOperationContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAIzF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,0BAKX;AALD,WAAY,0BAA0B;IACpC,gEAAgE;IAChE,iDAAmB,CAAA;IACnB,qFAAqF;IACrF,+CAAiB,CAAA;AACnB,CAAC,EALW,0BAA0B,KAA1B,0BAA0B,QAKrC;AAwCD,MAAM,sBAAsB,GAA+B;IACzD,WAAW,EAAE,KAAK;IAClB,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK;IAC5B,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,MAAM,uBAAuB,GAAG,aAAa,CAA6B,sBAAsB,CAAC,CAAC;AAelG,MAAM,UAAU,wBAAwB,CAAC,EACvC,YAAY,EACZ,QAAQ,GACsB;IAC9B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgC,IAAI,CAAC,CAAC;IAE1E,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,IAA4B,EAAE,EAAE;QACxD,IAAI,IAAI,CAAC,eAAe,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACvD,+FAA+F;YAC/F,6FAA6F;YAC7F,sBAAsB;YACtB,OAAO;QACT,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAErD,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,SAAiB,EAAE,EAAE;QACxD,iGAAiG;QACjG,6FAA6F;QAC7F,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,MAAM,EAAE,IAAI,KAAK,0BAA0B,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IAC/F,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,UAAU,GAAG,OAAO,CAA6B,GAAG,EAAE,CAAC,CAAC;QAC5D,WAAW,EAAE,IAAI;QACjB,MAAM;QACN,IAAI;QACJ,KAAK;QACL,eAAe;QACf,cAAc,EAAE,MAAM,EAAE,IAAI,KAAK,0BAA0B,CAAC,MAAM;KACnE,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;IAE5C,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,UAAU,YAChD,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,CAAC,uBAAuB,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["import React, { createContext, useCallback, useContext, useMemo, useState } from 'react';\n\nimport type { FrontendResourceConfiguration_Operation, FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\n\n/**\n * Where an ELEMENT-LEVEL operation is hosted — the mechanism behind\n * `ResourceOperationActionPresentation.INLINE` and `NavigationTransition.INPLACE`.\n *\n * ## Why this is NOT part of navigation\n *\n * `NavigationTransition.INPLACE` has existed since the navigation model was written and has never\n * done what its own docstring promises (\"operates at the element level, not the zone level\",\n * \"surrounding items remain visible\", \"the zone stack is unchanged\"). What it actually did was\n * resolve to the source zone and emit `NAVIGATION_REPLACE` — swapping the whole zone, which is\n * precisely REPLACE. The preset inline-edit kit has shipped it for CREATE/UPDATE the whole time.\n *\n * The reason it stayed hollow is visible in that list of promises: element-level hosting uses NONE\n * of what the navigation layer provides. No zone, no stack entry, no transition verb, no appearance,\n * no lifecycle modifier. Routing it through a resolver whose entire vocabulary it declines left the\n * controller holding a verb it had nothing to do with, so it fell through to the nearest thing that\n * did something — and that fall-through IS the defect. Building the element-level host inside\n * navigation would have re-created it one layer down.\n *\n * So the host lives where the elements are: a COLLECTION provides it, and BOTH tiers that can select\n * it ask for it here — the per-operation `ResourceOperationActionPresentation.INLINE`, and the\n * class-level `NavigationTransition.INPLACE` that an app authors in a zone's `transitions`, its\n * `appLevel.transitions`, or a relationship's `display.inParentNavigation`. Two tiers, one host, so\n * there is nothing for them to drift apart about.\n *\n * The controller reaches it through REACT CONTEXT rather than an event, and that is load-bearing\n * rather than incidental: the NEAREST provider wins automatically, so a nested child list transforms\n * its own row and not the parent list's row of the same resource type. An event would have to carry\n * enough identity to disambiguate two mounted collections, and would still be guessing.\n *\n * ## The degrade, and why it is not optional\n *\n * An in-place host only exists inside a collection. The same action can also be rendered on a detail\n * page, in a danger zone, or in a picker, where there is no row to transform. `isAvailable` reports\n * that honestly so the caller can fall back to an overlay, instead of an action that silently does\n * nothing in half the places it renders.\n */\n/**\n * What an element-level host is hosting.\n *\n * Two shapes, because a CREATE has no element to transform. Modelling it as an `elementId` of `''`\n * or `'new'` would make every consumer's `isElementActive` check accidentally true for a row whose\n * id failed to resolve — the two cases must not be able to collide, so they are separate members.\n */\nexport enum InPlaceOperationTargetKind {\n  /** An EXISTING element transforms into the operation's form. */\n  ELEMENT = 'element',\n  /** A NEW element materialises in the collection to collect the operation's input. */\n  CREATE = 'create',\n}\n\ninterface InPlaceOperationTargetBase {\n  /** The operation being hosted, resolved to its exact variant. */\n  operation: FrontendResourceConfiguration_Operation;\n  /** The context the host renders the operation with — identical to what any other host receives. */\n  resourceContext: FrontendResourceOperationContext;\n}\n\nexport type InPlaceOperationTarget =\n  | (InPlaceOperationTargetBase & {\n      kind: InPlaceOperationTargetKind.ELEMENT;\n      /** The row being transformed, by its addressable object id. */\n      elementId: string;\n    })\n  | (InPlaceOperationTargetBase & {\n      kind: InPlaceOperationTargetKind.CREATE;\n    });\n\nexport interface InPlaceOperationController {\n  /**\n   * Is an element-level host mounted above this point in the tree?\n   *\n   * `false` outside a collection. A caller MUST branch on it rather than calling `open()` and hoping\n   * — see the degrade rationale above.\n   */\n  isAvailable: boolean;\n  /** What is currently hosted, or `null`. At most one per collection. */\n  target: InPlaceOperationTarget | null;\n  open: (target: InPlaceOperationTarget) => void;\n  close: () => void;\n  /** Is THIS element the one currently transformed? The predicate a row renderer asks. */\n  isElementActive: (elementId: string) => boolean;\n  /**\n   * Is a NEW element being collected? The predicate a collection asks before rendering the extra\n   * leading element that has no row of its own.\n   */\n  isCreateActive: boolean;\n}\n\nconst UNAVAILABLE_CONTROLLER: InPlaceOperationController = {\n  isAvailable: false,\n  target: null,\n  open: () => undefined,\n  close: () => undefined,\n  isElementActive: () => false,\n  isCreateActive: false,\n};\n\nconst InPlaceOperationContext = createContext<InPlaceOperationController>(UNAVAILABLE_CONTROLLER);\n\nexport interface InPlaceOperationProviderProps {\n  /**\n   * The resource whose elements this host owns.\n   *\n   * Nested collections mean nested providers, and the inner one shadows the outer for its own\n   * subtree. Carrying the resource type makes a mismatched request refusable rather than silently\n   * transforming a row of the wrong list — an inner provider that accepted anything would turn a\n   * child-list action into a parent-row transformation.\n   */\n  resourceType: string;\n  children: React.ReactNode;\n}\n\nexport function InPlaceOperationProvider({\n  resourceType,\n  children,\n}: InPlaceOperationProviderProps): React.JSX.Element {\n  const [target, setTarget] = useState<InPlaceOperationTarget | null>(null);\n\n  const open = useCallback((next: InPlaceOperationTarget) => {\n    if (next.resourceContext.resourceType !== resourceType) {\n      // A request for another resource's element. Refused rather than rendered: the caller's degrade\n      // path (an overlay) is the correct outcome, and transforming an unrelated row would be worse\n      // than doing nothing.\n      return;\n    }\n    setTarget(next);\n  }, [resourceType]);\n\n  const close = useCallback(() => setTarget(null), []);\n\n  const isElementActive = useCallback((elementId: string) => {\n    // An empty id can never match. A row whose object id failed to resolve would otherwise match the\n    // same empty string a second unresolved row produces, transforming an arbitrary one of them.\n    if (!elementId) return false;\n    return target?.kind === InPlaceOperationTargetKind.ELEMENT && target.elementId === elementId;\n  }, [target]);\n\n  const controller = useMemo<InPlaceOperationController>(() => ({\n    isAvailable: true,\n    target,\n    open,\n    close,\n    isElementActive,\n    isCreateActive: target?.kind === InPlaceOperationTargetKind.CREATE,\n  }), [target, open, close, isElementActive]);\n\n  return (\n    <InPlaceOperationContext.Provider value={controller}>\n      {children}\n    </InPlaceOperationContext.Provider>\n  );\n}\n\n/**\n * Read the element-level host.\n *\n * Never throws when absent — it returns an UNAVAILABLE controller instead, because \"there is no\n * collection here\" is an ordinary, expected situation for an action bar (a detail page, a danger\n * zone, a picker) and not a misconfiguration. A throwing hook would force every action surface to\n * know whether it happens to be inside a list.\n */\nexport function useInPlaceOperation(): InPlaceOperationController {\n  return useContext(InPlaceOperationContext);\n}\n"]}
+{"version":3,"file":"InPlaceOperationContext.js","sourceRoot":"","sources":["../../../../../../src/core/resources/in-place/InPlaceOperationContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAIzF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,0BAKX;AALD,WAAY,0BAA0B;IACpC,gEAAgE;IAChE,iDAAmB,CAAA;IACnB,qFAAqF;IACrF,+CAAiB,CAAA;AACnB,CAAC,EALW,0BAA0B,KAA1B,0BAA0B,QAKrC;AAwCD,MAAM,sBAAsB,GAA+B;IACzD,WAAW,EAAE,KAAK;IAClB,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK;IAC5B,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,MAAM,uBAAuB,GAAG,aAAa,CAA6B,sBAAsB,CAAC,CAAC;AAelG,MAAM,UAAU,wBAAwB,CAAC,EACvC,YAAY,EACZ,QAAQ,GACsB;IAC9B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgC,IAAI,CAAC,CAAC;IAE1E,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,IAA4B,EAAE,EAAE;QACxD,IAAI,IAAI,CAAC,eAAe,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACvD,+FAA+F;YAC/F,6FAA6F;YAC7F,sBAAsB;YACtB,OAAO;QACT,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAErD,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,SAAiB,EAAE,EAAE;QACxD,iGAAiG;QACjG,6FAA6F;QAC7F,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,MAAM,EAAE,IAAI,KAAK,0BAA0B,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IAC/F,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,UAAU,GAAG,OAAO,CAA6B,GAAG,EAAE,CAAC,CAAC;QAC5D,WAAW,EAAE,IAAI;QACjB,MAAM;QACN,IAAI;QACJ,KAAK;QACL,eAAe;QACf,cAAc,EAAE,MAAM,EAAE,IAAI,KAAK,0BAA0B,CAAC,MAAM;KACnE,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;IAE5C,OAAO,CACL,KAAC,uBAAuB,CAAC,QAAQ,IAAC,KAAK,EAAE,UAAU,YAChD,QAAQ,GACwB,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,CAAC,uBAAuB,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["import React, { createContext, useCallback, useContext, useMemo, useState } from 'react';\n\nimport type { FrontendResourceConfiguration_Operation, FrontendResourceOperationContext } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\n\n/**\n * Where an ELEMENT-LEVEL operation is hosted — the mechanism behind\n * `ResourceOperationActionPresentation.INLINE` and `NavigationTransition.INPLACE`.\n *\n * ## Why this is NOT part of navigation\n *\n * `NavigationTransition.INPLACE` has existed since the navigation model was written and has never\n * done what its own docstring promises (\"operates at the element level, not the zone level\",\n * \"surrounding items remain visible\", \"the zone stack is unchanged\"). What it actually did was\n * resolve to the source zone and emit `NAVIGATION_REPLACE` — swapping the whole zone, which is\n * precisely REPLACE. The preset inline-edit kit has shipped it for CREATE/UPDATE the whole time.\n *\n * The reason it stayed hollow is visible in that list of promises: element-level hosting uses NONE\n * of what the navigation layer provides. No zone, no stack entry, no transition verb, no appearance,\n * no lifecycle modifier. Routing it through a resolver whose entire vocabulary it declines left the\n * controller holding a verb it had nothing to do with, so it fell through to the nearest thing that\n * did something — and that fall-through IS the defect. Building the element-level host inside\n * navigation would have re-created it one layer down.\n *\n * So the host lives where the elements are: a COLLECTION provides it, and BOTH tiers that can select\n * it ask for it here — the per-operation `ResourceOperationActionPresentation.INLINE`, and the\n * class-level `NavigationTransition.INPLACE` that an app authors in a zone's `transitions`, its\n * `appLevel.transitions`, or a relationship's `display.inParentNavigation`. Two tiers, one host, so\n * there is nothing for them to drift apart about.\n *\n * The controller reaches it through REACT CONTEXT rather than an event, and that is load-bearing\n * rather than incidental: the NEAREST provider wins automatically, so a nested child list transforms\n * its own row and not the parent list's row of the same resource type. An event would have to carry\n * enough identity to disambiguate two mounted collections, and would still be guessing.\n *\n * ## The degrade, and why it is not optional\n *\n * An in-place host only exists inside a collection. The same action can also be rendered on a detail\n * page, in a danger zone, or in a picker, where there is no row to transform. `isAvailable` reports\n * that honestly so the caller can fall back to an overlay, instead of an action that silently does\n * nothing in half the places it renders.\n */\n/**\n * What an element-level host is hosting.\n *\n * Two shapes, because a CREATE has no element to transform. Modelling it as an `elementId` of `''`\n * or `'new'` would make every consumer's `isElementActive` check accidentally true for a row whose\n * id failed to resolve — the two cases must not be able to collide, so they are separate members.\n */\nexport enum InPlaceOperationTargetKind {\n  /** An EXISTING element transforms into the operation's form. */\n  ELEMENT = 'element',\n  /** A NEW element materialises in the collection to collect the operation's input. */\n  CREATE = 'create',\n}\n\ninterface InPlaceOperationTargetBase {\n  /** The operation being hosted, resolved to its exact variant. */\n  operation: FrontendResourceConfiguration_Operation;\n  /** The context the host renders the operation with — identical to what any other host receives. */\n  resourceContext: FrontendResourceOperationContext;\n}\n\nexport type InPlaceOperationTarget =\n  | (InPlaceOperationTargetBase & {\n      kind: InPlaceOperationTargetKind.ELEMENT;\n      /** The row being transformed, by its addressable object id. */\n      elementId: string;\n    })\n  | (InPlaceOperationTargetBase & {\n      kind: InPlaceOperationTargetKind.CREATE;\n    });\n\nexport interface InPlaceOperationController {\n  /**\n   * Is an element-level host mounted above this point in the tree?\n   *\n   * `false` outside a collection. A caller MUST branch on it rather than calling `open()` and hoping\n   * — see the degrade rationale above.\n   */\n  isAvailable: boolean;\n  /** What is currently hosted, or `null`. At most one per collection. */\n  target: InPlaceOperationTarget | null;\n  open: (target: InPlaceOperationTarget) => void;\n  close: () => void;\n  /** Is THIS element the one currently transformed? The predicate a row renderer asks. */\n  isElementActive: (elementId: string) => boolean;\n  /**\n   * Is a NEW element being collected? The predicate a collection asks before rendering the extra\n   * leading element that has no row of its own.\n   */\n  isCreateActive: boolean;\n}\n\nconst UNAVAILABLE_CONTROLLER: InPlaceOperationController = {\n  isAvailable: false,\n  target: null,\n  open: () => undefined,\n  close: () => undefined,\n  isElementActive: () => false,\n  isCreateActive: false,\n};\n\nconst InPlaceOperationContext = createContext<InPlaceOperationController>(UNAVAILABLE_CONTROLLER);\n\nexport interface InPlaceOperationProviderProps {\n  /**\n   * The resource whose elements this host owns.\n   *\n   * Nested collections mean nested providers, and the inner one shadows the outer for its own\n   * subtree. Carrying the resource type makes a mismatched request refusable rather than silently\n   * transforming a row of the wrong list — an inner provider that accepted anything would turn a\n   * child-list action into a parent-row transformation.\n   */\n  resourceType: string;\n  children: React.ReactNode;\n}\n\nexport function InPlaceOperationProvider({\n  resourceType,\n  children,\n}: InPlaceOperationProviderProps): React.JSX.Element {\n  const [target, setTarget] = useState<InPlaceOperationTarget | null>(null);\n\n  const open = useCallback((next: InPlaceOperationTarget) => {\n    if (next.resourceContext.resourceType !== resourceType) {\n      // A request for another resource's element. Refused rather than rendered: the caller's degrade\n      // path (an overlay) is the correct outcome, and transforming an unrelated row would be worse\n      // than doing nothing.\n      return;\n    }\n    setTarget(next);\n  }, [resourceType]);\n\n  const close = useCallback(() => setTarget(null), []);\n\n  const isElementActive = useCallback((elementId: string) => {\n    // An empty id can never match. A row whose object id failed to resolve would otherwise match the\n    // same empty string a second unresolved row produces, transforming an arbitrary one of them.\n    if (!elementId) return false;\n    return target?.kind === InPlaceOperationTargetKind.ELEMENT && target.elementId === elementId;\n  }, [target]);\n\n  const controller = useMemo<InPlaceOperationController>(() => ({\n    isAvailable: true,\n    target,\n    open,\n    close,\n    isElementActive,\n    isCreateActive: target?.kind === InPlaceOperationTargetKind.CREATE,\n  }), [target, open, close, isElementActive]);\n\n  return (\n    <InPlaceOperationContext.Provider value={controller}>\n      {children}\n    </InPlaceOperationContext.Provider>\n  );\n}\n\n/**\n * Read the element-level host.\n *\n * Never throws when absent — it returns an UNAVAILABLE controller instead, because \"there is no\n * collection here\" is an ordinary, expected situation for an action bar (a detail page, a danger\n * zone, a picker) and not a misconfiguration. A throwing hook would force every action surface to\n * know whether it happens to be inside a list.\n */\nexport function useInPlaceOperation(): InPlaceOperationController {\n  return useContext(InPlaceOperationContext);\n}\n"]}

package/dist/esm/core/resources/operation-initiator-satisfaction.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-initiator-satisfaction.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../src/core/resources/operation-initiator-satisfaction.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uCAAuC,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAG9H,wBAAgB,qCAAqC,CAAC,MAAM,EAAE;IAC5D,SAAS,EAAE,uCAAuC,CAAC;IACnD,0BAA0B,EAAE,gCAAgC,CAAC,4BAA4B,CAAC,CAAC;IAC3F,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CACvD,GAAG,OAAO,CAkCV"}
+{"version":3,"file":"operation-initiator-satisfaction.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/operation-initiator-satisfaction.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uCAAuC,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAG9H,wBAAgB,qCAAqC,CAAC,MAAM,EAAE;IAC5D,SAAS,EAAE,uCAAuC,CAAC;IACnD,0BAA0B,EAAE,gCAAgC,CAAC,4BAA4B,CAAC,CAAC;IAC3F,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CACvD,GAAG,OAAO,CAkCV"}

package/dist/esm/core/resources/operation-initiator-satisfaction.frontend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"operation-initiator-satisfaction.frontend.utils.js","sourceRoot":"","sources":["../../../../src/core/resources/operation-initiator-satisfaction.frontend.utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,UAAU,qCAAqC,CAAC,MAIrD;IACC,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC;IAC7D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE;QAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC;QAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;YACpC,MAAM,aAAa,GAAG;gBACpB,SAAS,CAAC,eAAe;gBACzB,SAAS,CAAC,iBAAiB;gBAC3B,SAAS,CAAC,YAAY;aACvB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAE5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,aAAa,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtG,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,eAAe,GAAG,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACzD,OAAO,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { FrontendResourceConfiguration_Operation, FrontendResourceOperationContext } from './resources.frontend.schemas';\nimport { frontendResourceUtils } from './frontend-resource.utils';\n\nexport function operationInitiatorParametersSatisfied(params: {\n  operation: FrontendResourceConfiguration_Operation;\n  contextResourceIdentifiers: FrontendResourceOperationContext['contextResourceIdentifiers'];\n  contextualParameters: Record<string, string | number>;\n}): boolean {\n  const initiatorInfos = params.operation.initiatorInfos ?? [];\n  if (initiatorInfos.length === 0) {\n    return true;\n  }\n\n  return initiatorInfos.some((initiatorInfo) => {\n    const parameters = initiatorInfo.parameters ?? [];\n    if (parameters.length === 0) {\n      return true;\n    }\n\n    return parameters.every((parameter) => {\n      const candidateKeys = [\n        parameter.fieldIdentifier,\n        parameter.relationshipField,\n        parameter.resourceType,\n      ].filter((key): key is string => typeof key === 'string' && key.length > 0);\n\n      if (candidateKeys.length === 0) {\n        return false;\n      }\n\n      return candidateKeys.some((key) => {\n        const contextResourceId = frontendResourceUtils.getResourceId(params.contextResourceIdentifiers[key]);\n        if (contextResourceId.length > 0) {\n          return true;\n        }\n\n        const contextualValue = params.contextualParameters[key];\n        return contextualValue !== undefined && String(contextualValue).length > 0;\n      });\n    });\n  });\n}\n"]}
+{"version":3,"file":"operation-initiator-satisfaction.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/resources/operation-initiator-satisfaction.frontend.utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,UAAU,qCAAqC,CAAC,MAIrD;IACC,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC;IAC7D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE;QAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC;QAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;YACpC,MAAM,aAAa,GAAG;gBACpB,SAAS,CAAC,eAAe;gBACzB,SAAS,CAAC,iBAAiB;gBAC3B,SAAS,CAAC,YAAY;aACvB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAE5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,aAAa,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtG,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,eAAe,GAAG,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACzD,OAAO,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { FrontendResourceConfiguration_Operation, FrontendResourceOperationContext } from './resources.frontend.schemas';\nimport { frontendResourceUtils } from './frontend-resource.utils';\n\nexport function operationInitiatorParametersSatisfied(params: {\n  operation: FrontendResourceConfiguration_Operation;\n  contextResourceIdentifiers: FrontendResourceOperationContext['contextResourceIdentifiers'];\n  contextualParameters: Record<string, string | number>;\n}): boolean {\n  const initiatorInfos = params.operation.initiatorInfos ?? [];\n  if (initiatorInfos.length === 0) {\n    return true;\n  }\n\n  return initiatorInfos.some((initiatorInfo) => {\n    const parameters = initiatorInfo.parameters ?? [];\n    if (parameters.length === 0) {\n      return true;\n    }\n\n    return parameters.every((parameter) => {\n      const candidateKeys = [\n        parameter.fieldIdentifier,\n        parameter.relationshipField,\n        parameter.resourceType,\n      ].filter((key): key is string => typeof key === 'string' && key.length > 0);\n\n      if (candidateKeys.length === 0) {\n        return false;\n      }\n\n      return candidateKeys.some((key) => {\n        const contextResourceId = frontendResourceUtils.getResourceId(params.contextResourceIdentifiers[key]);\n        if (contextResourceId.length > 0) {\n          return true;\n        }\n\n        const contextualValue = params.contextualParameters[key];\n        return contextualValue !== undefined && String(contextualValue).length > 0;\n      });\n    });\n  });\n}\n"]}

package/dist/esm/core/resources/operation-semantics.frontend.utils.d.ts

@@ -1,3 +1,4 @@
+import { z } from 'zod';
 import { CoreResourceOperation, ResourceOperationFrontendSurface, NavigationTransition } from '@wildo-ai/saas-models';
 import { ResourceOperationActionPresentation, ResourceOperationActionScope } from '../../core/resources/resources.frontend.schemas';
 export interface ResourceOperationSemanticsLike {
@@ -8,6 +9,8 @@ export interface ResourceOperationSemanticsLike {
     isOperationDefault?: boolean;
     isBulkOperation?: boolean;
     variantKey?: unknown;
+    /** Read only by the DROPDOWN rule: a pick that executes cannot also be a deliberate, confirmed act. */
+    riskLevel?: unknown;
     /**
      * The subset of `ResourceOperationFrontendConfig` this module's decisions read.
      *
@@ -28,16 +31,48 @@ export interface ResourceOperationSemanticsLike {
     };
 }
 export declare const BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY = "bulkOperationSelectionIds";
+/**
+ * The operation-context key carrying a CROSS-PAGE selection ("select all N matching") to whatever host
+ * presents a bulk action's form — the sibling of {@link BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY}.
+ *
+ * A form-bearing bulk action (one that asks for a value, like "Change status") is executed by the
+ * form host, which adds the selection through {@link mergeBulkSelectionIntoRequestData}. That merge
+ * read only the id key, so a cross-page selection never reached it and the request went out with no
+ * selection but the form's own empty `_match` (#1461, #2035 run 2026-09-30).
+ */
+export declare const BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY = "bulkOperationMatchSelection";
 export declare const RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY = "resourceOperationExecutedDiscriminator";
 export type ResourceOperationLayoutKind = 'create' | 'list' | 'read' | 'update' | 'search' | 'action';
 export declare function isLiteralCoreResourceOperation(operationIdentifier: unknown): operationIdentifier is CoreResourceOperation;
 export declare function resolveEffectiveCoreOperation(operationIdentifier: unknown, resourceOperationLike?: unknown): CoreResourceOperation | undefined;
 export declare function resolveEffectiveCoreOperationFromOperation(operation: ResourceOperationSemanticsLike): CoreResourceOperation | undefined;
 export declare function matchesResourceOperationSemantic(operation: ResourceOperationSemanticsLike, coreOperation: CoreResourceOperation): boolean;
+/**
+ * The operation whose generated TITLE names a surface that shows `operationIdentifier` — the page header and
+ * the overlay (dialog, sheet, tab) title alike, which must agree.
+ *
+ * The core EDIT surface is titled like the record's own page. UPDATE's title is generated as the name of an
+ * ACTION, a button word ("Update preferences", "Save changes"), while READ's is generated as a HEADING naming
+ * the surface ("Preferences"). An edit page headed by a verb names the button below it rather than the thing
+ * being edited, and the form's own save button already says the verb. So when the resource has a READ, the
+ * core UPDATE — including its polymorphic variants, which keep the `update` identifier — takes READ's title.
+ *
+ * Keyed on the literal identifier, NOT on the effective core semantics: a custom operation that BEHAVES like
+ * an update (`claimDomain`, `reset_to_defaults`) is a named action, and its own title is the only word that
+ * says which action the surface performs. A resource with no READ keeps UPDATE's title, the only word it has.
+ */
+export declare function resolveSurfaceTitleOperationIdentifier(operationIdentifier: unknown, resourceOperations: ReadonlyArray<{
+    operationIdentifier: unknown;
+}> | undefined): string;
 export declare function isUpdateLikeCoreOperation(coreOperation: CoreResourceOperation | undefined): boolean;
 export declare function isSingleResourceUpdateLikeOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare function shouldEmitResourceRefreshAfterDirectOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare function readBulkOperationSelectionIds(additionalContext?: Record<string, unknown>): string[] | undefined;
+/** The cross-page selection an operation context carries, when "select all N matching" was chosen. */
+export declare function readBulkOperationMatchSelection(additionalContext?: Record<string, unknown>): {
+    filters?: Record<string, unknown>;
+    search?: string;
+} | undefined;
 export declare function readResourceOperationExecutedDiscriminator(additionalContext?: Record<string, unknown>): string | undefined;
 /**
  * Build the wire selector a bulk operation uses to name the rows it targets.
@@ -53,6 +88,29 @@ export declare function readResourceOperationExecutedDiscriminator(additionalCon
  * get right rather than one per surface.
  */
 export declare function buildBulkOperationSelectorPayload(ids: readonly string[]): Record<string, unknown>;
+/**
+ * The CROSS-PAGE selector payload: the query that produced the listing, not the rows it showed.
+ *
+ * Sibling of {@link buildBulkOperationSelectorPayload} and never sent beside it — the server refuses
+ * a request naming both, because honouring one would make the other silently inert. The matched
+ * count stays on the client: it is what the listing reported when the person chose, and the server
+ * re-evaluates the query itself rather than trusting a number the client sent (#1461).
+ */
+export declare function buildBulkOperationMatchPayload(match: {
+    filters?: Record<string, unknown>;
+    search?: string;
+}): Record<string, unknown>;
+/**
+ * The `resultSummary` an outcome event may carry: the operation's result when it is a PLAIN OBJECT,
+ * and nothing otherwise.
+ *
+ * The event schema types it as a record, and every producer used to pass any non-null object —
+ * which includes an array. A multi-row bulk update answers an array of rows, so its
+ * RESOURCE_OPERATION_EXECUTED was refused by the event bus ("Invalid payload") and nobody heard that
+ * the write succeeded: the listing kept its old values and the bulk bar kept the rows selected.
+ * One definition, so the producers cannot disagree about it again.
+ */
+export declare function toOperationResultSummary(result: unknown): Record<string, unknown> | undefined;
 export declare function mergeBulkSelectionIntoRequestData(params: {
     operation: ResourceOperationSemanticsLike;
     requestData?: Record<string, unknown>;
@@ -61,7 +119,7 @@ export declare function mergeBulkSelectionIntoRequestData(params: {
 export declare function isSemanticCustomResourceOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare function isGeneratedFileRegenerateOperation(operation: ResourceOperationSemanticsLike): boolean;
 /**
- * Is this the CSV/JSON export companion of a LIST/SEARCH operation?
+ * Is this the file-export companion of a LIST/SEARCH operation?
  *
  * Identity comes from the generated-operation metadata, with the prefixed identifier as the fallback
  * for any surface that receives a thinned operation object — the same two-source shape
@@ -69,6 +127,54 @@ export declare function isGeneratedFileRegenerateOperation(operation: ResourceOp
  * operations through several projections and not all of them carry `generatedOperation`.
  */
 export declare function isGeneratedCollectionExportOperation(operation: ResourceOperationSemanticsLike): boolean;
+/**
+ * A CUSTOM operation that borrows a COLLECTION verb, and therefore addresses no single row.
+ *
+ * `resourceOperationLike` answers a ROUTING question — which core verb's route shape and
+ * collection-level authorization does this operation borrow. The frontend has been reading it as a
+ * statement about what the operation MEANS to a user, and for the collection verbs those two
+ * answers come apart: an operation borrowing one of `COLLECTION_OPERATIONS_WITHOUT_IDS` gets a
+ * route with NO `:id` segment in it, so there is no row for a per-row button to act on. Clicking it
+ * on the third row does exactly what clicking it on the first row does.
+ *
+ * `AuditLogs.EXPORT_AUDIT_LOGS` is the worked example and says so at its own declaration: it borrows
+ * CREATE to get "the collection POST route shape without … requiring a meaningless `auditLogId` path
+ * value". It then rendered a Download button on every row of the audit trail.
+ *
+ * DERIVED rather than declared, for the reason the generated collection-export exemption beside it
+ * already gives: `actionScope: COLLECTION` is a per-app declaration, and asking every author to
+ * stamp it puts the burden on them for something the framework already knows from the route it
+ * built. Measured 2026-09-20 over `engine/` and `platform/`: five custom operations borrow a
+ * collection verb — this export, both access-grant `REQUEST_ACCESS` verbs, SCIM `GENERATE_TOKEN` and
+ * SSO `DISCOVER_ENDPOINTS` — and not one of the five is a per-row action. None had declared the
+ * scope, so all five rendered per row.
+ *
+ * `rowTargetRequestField` is the declared ESCAPE, not an oversight: it is how an operation says "I
+ * address the clicked row through the request BODY rather than the URL", which is precisely the
+ * shape a per-row action borrowing a collection verb would take. One that declares it stays an item
+ * action.
+ */
+export declare function isCollectionVerbBorrowingOperation(operation: ResourceOperationSemanticsLike): boolean;
+/**
+ * Does this operation act on the WHOLE COLLECTION rather than on one row?
+ *
+ * THE single answer to that question, because it is asked twice and the two askers do different
+ * jobs: `useResourceOperationActions` decides which actions EXIST on a surface, and
+ * `ResourceLayout_List` decides whether the collection-action surface is MOUNTED at all. An
+ * exemption added to one alone produces actions rendered into a container that was never created —
+ * which is exactly what happened on 2026-08-25, when three gate fixes in the hook changed nothing
+ * visible because the mount check still said there were no collection-scoped operations here.
+ *
+ * That hazard used to be managed by a ⚠️ comment asking the next author to remember both sites.
+ * Collapsing the predicate is the stronger form of the same instruction: there is now one site.
+ *
+ * Three ways to be collection-scoped, in descending order of how explicit they are:
+ *  1. DECLARED — `actionScope: COLLECTION`, the per-app opt-in for a "retry all" / "purge all";
+ *  2. DERIVED from the generated collection-export companion, which is collection-scoped by
+ *     construction and has no author to declare anything;
+ *  3. DERIVED from a borrowed COLLECTION verb — see {@link isCollectionVerbBorrowingOperation}.
+ */
+export declare function isCollectionScopedResourceOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare const NON_ITEM_RESOURCE_OPERATIONS: Set<CoreResourceOperation>;
 /**
  * Effective core semantics that are pure aggregate / collection READS — a data
@@ -99,6 +205,20 @@ export declare function shouldTreatAsNonItemResourceOperation(operation: Resourc
  * is why a single global constant is honest here.
  */
 export declare const ACTION_MODAL_FIELD_CEILING = 6;
+/**
+ * The largest request-body field count the framework will present in an ANCHORED PANEL rather than
+ * an overlay.
+ *
+ * Two, and the reasoning is the one this axis's `POPOVER` member already states: the anchored panel
+ * is the small-input idiom ("snooze until…", "reject with a reason…"), and it earns its
+ * place by keeping the row the user is acting on visible. A third control starts wanting the room a
+ * dialog has, and the panel stops being cheaper than one.
+ *
+ * Pairs with {@link ACTION_MODAL_FIELD_CEILING} as one ordered ladder — 1–2 anchored, 3–6 overlay,
+ * beyond that a page — so the two numbers are argued with together instead of one of them silently
+ * owning every case.
+ */
+export declare const ACTION_ANCHORED_FIELD_CEILING = 2;
 /**
  * Does this operation declare a request body with NO fields — an explicit `z.object({})`?
  *
@@ -106,13 +226,79 @@ export declare const ACTION_MODAL_FIELD_CEILING = 6;
  * Mirrors the backend's `hasMeaningfulExplicitRequestDto` (inverted).
  */
 export declare function hasEmptyResourceOperationRequestBody(requestDto: unknown): boolean;
+/**
+ * Does this operation collect NOTHING from a person? No `requestDto`, or one whose every field the
+ * host supplies itself.
+ *
+ * A bulk twin's request is its row variant's body plus the `_ids` selector the collection fills. A
+ * bulk action whose row variant takes no input therefore has a body of exactly `{ _ids }` — not
+ * empty, and not something anyone types. Checking raw emptiness sent Wonder Todos' bulk "Unassign"
+ * to a dialog holding an empty form and a Save button, where the same action on one row ran on
+ * click. The action ladder and the operation host both ask this, so an action cannot run directly
+ * from one surface and open an empty form on another.
+ */
+export declare function operationCollectsNoCallerInput(operation: ResourceOperationSemanticsLike): boolean;
+/**
+ * Does this risk level ask for a confirmation before the operation runs?
+ *
+ * HIGH and CRITICAL do (a plain confirm, and a typed one); LOW and MEDIUM execute on click. The one
+ * definition the action ladder's confirm dialog and the DROPDOWN rule both read, so "risky enough to
+ * confirm" and "too risky to execute on a pick" cannot come to mean two different sets.
+ */
+export declare function isRiskyResourceOperation(riskLevel: unknown): boolean;
+/**
+ * The kind of domain a DROPDOWN lists — the two a person can pick from without typing a value.
+ *
+ * Two members because the lists are genuinely different things: an enum's values are CLOSED and
+ * known up front, so they are listed whole; a reference's candidates are records on the server, so
+ * they are SEARCHED as you type and scoped like the form's picker. A boolean is deliberately absent —
+ * a two-item menu for yes/no is a worse control than the toggle it would replace.
+ */
+export declare enum ResourceOperationChoiceDomain {
+    /** A closed enum — every value listed, labelled as the form labels it. */
+    ENUM = "enum",
+    /** A foreign key — the referenced records, searched server-side. */
+    REFERENCE = "reference"
+}
+/** The single field a DROPDOWN presents, and which kind of list it needs. */
+export interface ResourceOperationDropdownChoice {
+    /** The request field the pick is written to. */
+    fieldName: string;
+    /** That field's schema as the request DTO declares it (decorators intact). */
+    fieldSchema: z.ZodTypeAny;
+    domain: ResourceOperationChoiceDomain;
+}
+/**
+ * The one choice field this operation's input consists of, or `undefined` when its input is
+ * anything else.
+ *
+ * Qualifies only when, after the keys the host supplies itself (a bulk twin's `_ids`), EXACTLY ONE
+ * field remains and it is a single enum or a single foreign key. An array is refused: picking one
+ * item of a multi-pick and executing is not what the field asks for.
+ *
+ * Reads the schema structurally, like every other rule in this module, so the answer cannot
+ * disagree with the form the same operation would otherwise render.
+ */
+export declare function resolveResourceOperationDropdownChoice(operation: ResourceOperationSemanticsLike): ResourceOperationDropdownChoice | undefined;
+/**
+ * Can this operation honestly present as a DROPDOWN — one choice field, one row, and no confirmation
+ * owed?
+ *
+ * All three are correctness constraints, not taste. Without a single choice field there is no list to
+ * show. A pick executes immediately, so an operation whose risk level asks for a confirmation would
+ * lose it. And a BULK twin writes every selected row: one stray pick in a menu would rewrite them all
+ * with no second step, which is the one place "the pick is the submission" is the wrong promise. Each
+ * of those keeps the anchored FORM, which has an explicit Submit.
+ */
+export declare function operationCanPresentAsDropdown(operation: ResourceOperationSemanticsLike): boolean;
 /**
  * HOW does this action collect its input?
  *
  * The single answer for every action surface. An explicitly authored
- * {@link ResourceOperationActionPresentation} is returned untouched — the author has answered the
- * question and the framework does not second-guess them. Everything below is the DERIVATION for the
- * (overwhelmingly common) case where nothing was authored.
+ * {@link ResourceOperationActionPresentation} is returned as authored — the author has answered the
+ * question and the framework does not second-guess their TASTE — with ONE correctness exception: a
+ * DROPDOWN the operation cannot honestly be resolves to POPOVER (see below). Everything else is the
+ * DERIVATION for the (overwhelmingly common) case where nothing was authored.
  *
  * The derivation is ordered by how strong the evidence is, not by convenience:
  *
@@ -126,22 +312,51 @@ export declare function hasEmptyResourceOperationRequestBody(requestDto: unknown
  *    before this axis existed. They are stated here so the axis DESCRIBES the framework's behaviour
  *    rather than sitting beside it — an axis that cannot express what the framework already does is
  *    a second mechanism, not a vocabulary.
- * 4. **No caller input ⇒ DIRECT.** No `requestDto` at all, or an explicit `z.object({})`.
- * 5. **Input that fits an overlay ⇒ MODAL.** The new behaviour, and the reason the axis exists.
- * 6. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback
+ * 4. **No caller input ⇒ DIRECT.** No `requestDto` at all, an explicit `z.object({})`, or a bulk
+ *    body holding only the selector the host fills ({@link operationCollectsNoCallerInput}).
+ * 5. **One choice from an enum or a reference, and no confirmation owed ⇒ DROPDOWN.** The pick is
+ *    the submission, so the list of values IS the whole input ({@link operationCanPresentAsDropdown}).
+ * 6. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for
+ *    them, so the row being acted on stays visible.
+ * 7. **Input that fits an overlay ⇒ MODAL.**
+ * 8. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback
  *    for a `requestDto` this code cannot introspect (a thinned projection), because refusing to
  *    guess returns the behaviour the operation had before.
  *
- * `POPOVER` and `INLINE` are never DERIVED, only authored. Both are claims about the surrounding
- * context — that the trigger is anchored and visible, that the element being acted on is a row in a
- * list — which this function cannot see from the operation alone. Guessing them would put chrome in
- * places it cannot render.
+ * ## An authored DROPDOWN that cannot be one resolves to POPOVER
+ *
+ * The only authored answer this function overrides, and for the same reason the click handler
+ * refuses a non-navigating presentation on a zero-input update-like action: honouring it would be
+ * wrong, not merely ugly. A DROPDOWN over two fields has no list to show, and one over a CRITICAL
+ * operation would execute without the typed confirmation every other surface demands. POPOVER is the
+ * nearest honest answer — the same anchored panel, holding the form with its Submit.
+ *
+ * ## Why step 6 is DERIVED, when it used to be authored-only
+ *
+ * This function returned `MODAL` for every small input and left `POPOVER` to authors, on the
+ * reasoning that an anchored panel is a claim about the surrounding context — that the trigger is
+ * anchored and visible — which the operation alone cannot support.
+ *
+ * The reasoning was sound and the conclusion did not follow, because nothing was ever asking this
+ * function to be right about the host. **The bar already decides whether it can anchor**, and it
+ * already degrades when it cannot: an item collapsed into the overflow menu or nested in a subgroup
+ * takes its `onClick`, which `resolveActionPresentationTransition` maps to an OVERLAY — the same
+ * chrome `MODAL` would have produced. So the cost of deriving the panel is zero where it cannot be
+ * drawn, and the cost of NOT deriving it was that every small action in every application —
+ * "snooze until…", "reject with a reason…" — covered the list it was acting on with a dialog, and the
+ * only way out was to author the axis per operation. (The one-CHOICE actions — "change status to…",
+ * "assign to…" — have since moved one step earlier, to DROPDOWN.)
+ *
+ * `INLINE` stays authored-only, and the asymmetry is the point: its claim is about the ELEMENT (the
+ * thing being acted on is a row that can transform in place), and its degrade target is an overlay
+ * over the list it was meant to keep visible — so guessing it wrong costs the user the very thing
+ * the presentation exists for. A popover guessed wrong costs nothing.
  */
 export declare function resolveResourceOperationActionPresentation(operation: ResourceOperationSemanticsLike): ResourceOperationActionPresentation;
 /**
  * Does this presentation reach the NAVIGATION layer, or does the action layer own it end to end?
  *
- * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER` and `INLINE` are not: nothing is pushed,
+ * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER`, `DROPDOWN` and `INLINE` are not: nothing is pushed,
  * no zone changes, and there is nothing for a back button to pop — routing them through navigation
  * would mint zone entries for chrome that does not live in a zone.
  *
@@ -175,9 +390,24 @@ export declare function resolveResourceOperationLayoutKind(operation: ResourceOp
 export declare function pickPreferredOperationForCoreSemantic<T extends ResourceOperationSemanticsLike>(operations: readonly T[], coreOperation: CoreResourceOperation, options?: {
     requireAddressable?: boolean;
     allowBulk?: boolean;
+    /** See {@link getOperationsForCoreSemantic}. */
+    requireLiteralIdentifier?: boolean;
 }): T | undefined;
 export declare function getOperationsForCoreSemantic<T extends ResourceOperationSemanticsLike>(operations: readonly T[], coreOperation: CoreResourceOperation, options?: {
     requireAddressable?: boolean;
     allowBulk?: boolean;
+    /**
+     * Accept ONLY the literal core verb, never an operation that borrows it through
+     * `resourceOperationLike`.
+     *
+     * Semantic matching is what lets a custom verb stand in for a core one, and that is right almost
+     * everywhere. It is wrong wherever the CALLER, not the operation, supplies the words: the list's
+     * create call-to-action labels itself `tResourceOperation(resourceType, CREATE, 'title')` — the
+     * LITERAL create's title — so a borrowed create is mislabelled by construction rather than by
+     * accident. On `AUDIT_LOGS`, whose literal CREATE is `REPOSITORY_ONLY` and therefore absent from
+     * the frontend registry, that produced a primary "Create Audit Log" button wired to
+     * `exportAuditLogs`.
+     */
+    requireLiteralIdentifier?: boolean;
 }): T[];
 //# sourceMappingURL=operation-semantics.frontend.utils.d.ts.map