@wildo-ai/saas-frontend-lib 1.1.5 → 1.1.6

package/dist/esm/core/resources/operation-semantics.frontend.utils.d.ts

@@ -1,3 +1,4 @@
+import { z } from 'zod';
 import { CoreResourceOperation, ResourceOperationFrontendSurface, NavigationTransition } from '@wildo-ai/saas-models';
 import { ResourceOperationActionPresentation, ResourceOperationActionScope } from '../../core/resources/resources.frontend.schemas';
 export interface ResourceOperationSemanticsLike {
@@ -8,6 +9,8 @@ export interface ResourceOperationSemanticsLike {
     isOperationDefault?: boolean;
     isBulkOperation?: boolean;
     variantKey?: unknown;
+    /** Read only by the DROPDOWN rule: a pick that executes cannot also be a deliberate, confirmed act. */
+    riskLevel?: unknown;
     /**
      * The subset of `ResourceOperationFrontendConfig` this module's decisions read.
      *
@@ -28,16 +31,48 @@ export interface ResourceOperationSemanticsLike {
     };
 }
 export declare const BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY = "bulkOperationSelectionIds";
+/**
+ * The operation-context key carrying a CROSS-PAGE selection ("select all N matching") to whatever host
+ * presents a bulk action's form — the sibling of {@link BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY}.
+ *
+ * A form-bearing bulk action (one that asks for a value, like "Change status") is executed by the
+ * form host, which adds the selection through {@link mergeBulkSelectionIntoRequestData}. That merge
+ * read only the id key, so a cross-page selection never reached it and the request went out with no
+ * selection but the form's own empty `_match` (#1461, #2035 run 2026-09-30).
+ */
+export declare const BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY = "bulkOperationMatchSelection";
 export declare const RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY = "resourceOperationExecutedDiscriminator";
 export type ResourceOperationLayoutKind = 'create' | 'list' | 'read' | 'update' | 'search' | 'action';
 export declare function isLiteralCoreResourceOperation(operationIdentifier: unknown): operationIdentifier is CoreResourceOperation;
 export declare function resolveEffectiveCoreOperation(operationIdentifier: unknown, resourceOperationLike?: unknown): CoreResourceOperation | undefined;
 export declare function resolveEffectiveCoreOperationFromOperation(operation: ResourceOperationSemanticsLike): CoreResourceOperation | undefined;
 export declare function matchesResourceOperationSemantic(operation: ResourceOperationSemanticsLike, coreOperation: CoreResourceOperation): boolean;
+/**
+ * The operation whose generated TITLE names a surface that shows `operationIdentifier` — the page header and
+ * the overlay (dialog, sheet, tab) title alike, which must agree.
+ *
+ * The core EDIT surface is titled like the record's own page. UPDATE's title is generated as the name of an
+ * ACTION, a button word ("Update preferences", "Save changes"), while READ's is generated as a HEADING naming
+ * the surface ("Preferences"). An edit page headed by a verb names the button below it rather than the thing
+ * being edited, and the form's own save button already says the verb. So when the resource has a READ, the
+ * core UPDATE — including its polymorphic variants, which keep the `update` identifier — takes READ's title.
+ *
+ * Keyed on the literal identifier, NOT on the effective core semantics: a custom operation that BEHAVES like
+ * an update (`claimDomain`, `reset_to_defaults`) is a named action, and its own title is the only word that
+ * says which action the surface performs. A resource with no READ keeps UPDATE's title, the only word it has.
+ */
+export declare function resolveSurfaceTitleOperationIdentifier(operationIdentifier: unknown, resourceOperations: ReadonlyArray<{
+    operationIdentifier: unknown;
+}> | undefined): string;
 export declare function isUpdateLikeCoreOperation(coreOperation: CoreResourceOperation | undefined): boolean;
 export declare function isSingleResourceUpdateLikeOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare function shouldEmitResourceRefreshAfterDirectOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare function readBulkOperationSelectionIds(additionalContext?: Record<string, unknown>): string[] | undefined;
+/** The cross-page selection an operation context carries, when "select all N matching" was chosen. */
+export declare function readBulkOperationMatchSelection(additionalContext?: Record<string, unknown>): {
+    filters?: Record<string, unknown>;
+    search?: string;
+} | undefined;
 export declare function readResourceOperationExecutedDiscriminator(additionalContext?: Record<string, unknown>): string | undefined;
 /**
  * Build the wire selector a bulk operation uses to name the rows it targets.
@@ -84,7 +119,7 @@ export declare function mergeBulkSelectionIntoRequestData(params: {
 export declare function isSemanticCustomResourceOperation(operation: ResourceOperationSemanticsLike): boolean;
 export declare function isGeneratedFileRegenerateOperation(operation: ResourceOperationSemanticsLike): boolean;
 /**
- * Is this the CSV/JSON export companion of a LIST/SEARCH operation?
+ * Is this the file-export companion of a LIST/SEARCH operation?
  *
  * Identity comes from the generated-operation metadata, with the prefixed identifier as the fallback
  * for any surface that receives a thinned operation object — the same two-source shape
@@ -175,7 +210,7 @@ export declare const ACTION_MODAL_FIELD_CEILING = 6;
  * an overlay.
  *
  * Two, and the reasoning is the one this axis's `POPOVER` member already states: the anchored panel
- * is the single-input idiom ("assign to…", "change status to…", "snooze until…"), and it earns its
+ * is the small-input idiom ("snooze until…", "reject with a reason…"), and it earns its
  * place by keeping the row the user is acting on visible. A third control starts wanting the room a
  * dialog has, and the panel stops being cheaper than one.
  *
@@ -203,13 +238,67 @@ export declare function hasEmptyResourceOperationRequestBody(requestDto: unknown
  * from one surface and open an empty form on another.
  */
 export declare function operationCollectsNoCallerInput(operation: ResourceOperationSemanticsLike): boolean;
+/**
+ * Does this risk level ask for a confirmation before the operation runs?
+ *
+ * HIGH and CRITICAL do (a plain confirm, and a typed one); LOW and MEDIUM execute on click. The one
+ * definition the action ladder's confirm dialog and the DROPDOWN rule both read, so "risky enough to
+ * confirm" and "too risky to execute on a pick" cannot come to mean two different sets.
+ */
+export declare function isRiskyResourceOperation(riskLevel: unknown): boolean;
+/**
+ * The kind of domain a DROPDOWN lists — the two a person can pick from without typing a value.
+ *
+ * Two members because the lists are genuinely different things: an enum's values are CLOSED and
+ * known up front, so they are listed whole; a reference's candidates are records on the server, so
+ * they are SEARCHED as you type and scoped like the form's picker. A boolean is deliberately absent —
+ * a two-item menu for yes/no is a worse control than the toggle it would replace.
+ */
+export declare enum ResourceOperationChoiceDomain {
+    /** A closed enum — every value listed, labelled as the form labels it. */
+    ENUM = "enum",
+    /** A foreign key — the referenced records, searched server-side. */
+    REFERENCE = "reference"
+}
+/** The single field a DROPDOWN presents, and which kind of list it needs. */
+export interface ResourceOperationDropdownChoice {
+    /** The request field the pick is written to. */
+    fieldName: string;
+    /** That field's schema as the request DTO declares it (decorators intact). */
+    fieldSchema: z.ZodTypeAny;
+    domain: ResourceOperationChoiceDomain;
+}
+/**
+ * The one choice field this operation's input consists of, or `undefined` when its input is
+ * anything else.
+ *
+ * Qualifies only when, after the keys the host supplies itself (a bulk twin's `_ids`), EXACTLY ONE
+ * field remains and it is a single enum or a single foreign key. An array is refused: picking one
+ * item of a multi-pick and executing is not what the field asks for.
+ *
+ * Reads the schema structurally, like every other rule in this module, so the answer cannot
+ * disagree with the form the same operation would otherwise render.
+ */
+export declare function resolveResourceOperationDropdownChoice(operation: ResourceOperationSemanticsLike): ResourceOperationDropdownChoice | undefined;
+/**
+ * Can this operation honestly present as a DROPDOWN — one choice field, one row, and no confirmation
+ * owed?
+ *
+ * All three are correctness constraints, not taste. Without a single choice field there is no list to
+ * show. A pick executes immediately, so an operation whose risk level asks for a confirmation would
+ * lose it. And a BULK twin writes every selected row: one stray pick in a menu would rewrite them all
+ * with no second step, which is the one place "the pick is the submission" is the wrong promise. Each
+ * of those keeps the anchored FORM, which has an explicit Submit.
+ */
+export declare function operationCanPresentAsDropdown(operation: ResourceOperationSemanticsLike): boolean;
 /**
  * HOW does this action collect its input?
  *
  * The single answer for every action surface. An explicitly authored
- * {@link ResourceOperationActionPresentation} is returned untouched — the author has answered the
- * question and the framework does not second-guess them. Everything below is the DERIVATION for the
- * (overwhelmingly common) case where nothing was authored.
+ * {@link ResourceOperationActionPresentation} is returned as authored — the author has answered the
+ * question and the framework does not second-guess their TASTE — with ONE correctness exception: a
+ * DROPDOWN the operation cannot honestly be resolves to POPOVER (see below). Everything else is the
+ * DERIVATION for the (overwhelmingly common) case where nothing was authored.
  *
  * The derivation is ordered by how strong the evidence is, not by convenience:
  *
@@ -225,14 +314,24 @@ export declare function operationCollectsNoCallerInput(operation: ResourceOperat
  *    a second mechanism, not a vocabulary.
  * 4. **No caller input ⇒ DIRECT.** No `requestDto` at all, an explicit `z.object({})`, or a bulk
  *    body holding only the selector the host fills ({@link operationCollectsNoCallerInput}).
- * 5. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for
+ * 5. **One choice from an enum or a reference, and no confirmation owed ⇒ DROPDOWN.** The pick is
+ *    the submission, so the list of values IS the whole input ({@link operationCanPresentAsDropdown}).
+ * 6. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for
  *    them, so the row being acted on stays visible.
- * 6. **Input that fits an overlay ⇒ MODAL.**
- * 7. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback
+ * 7. **Input that fits an overlay ⇒ MODAL.**
+ * 8. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback
  *    for a `requestDto` this code cannot introspect (a thinned projection), because refusing to
  *    guess returns the behaviour the operation had before.
  *
- * ## Why step 5 is DERIVED, when it used to be authored-only
+ * ## An authored DROPDOWN that cannot be one resolves to POPOVER
+ *
+ * The only authored answer this function overrides, and for the same reason the click handler
+ * refuses a non-navigating presentation on a zero-input update-like action: honouring it would be
+ * wrong, not merely ugly. A DROPDOWN over two fields has no list to show, and one over a CRITICAL
+ * operation would execute without the typed confirmation every other surface demands. POPOVER is the
+ * nearest honest answer — the same anchored panel, holding the form with its Submit.
+ *
+ * ## Why step 6 is DERIVED, when it used to be authored-only
  *
  * This function returned `MODAL` for every small input and left `POPOVER` to authors, on the
  * reasoning that an anchored panel is a claim about the surrounding context — that the trigger is
@@ -243,9 +342,10 @@ export declare function operationCollectsNoCallerInput(operation: ResourceOperat
  * already degrades when it cannot: an item collapsed into the overflow menu or nested in a subgroup
  * takes its `onClick`, which `resolveActionPresentationTransition` maps to an OVERLAY — the same
  * chrome `MODAL` would have produced. So the cost of deriving the panel is zero where it cannot be
- * drawn, and the cost of NOT deriving it was that every one-field action in every application —
- * "change status to…", "assign to…" — covered the list it was acting on with a dialog, and the only
- * way out was to author the axis per operation.
+ * drawn, and the cost of NOT deriving it was that every small action in every application —
+ * "snooze until…", "reject with a reason…" — covered the list it was acting on with a dialog, and the
+ * only way out was to author the axis per operation. (The one-CHOICE actions — "change status to…",
+ * "assign to…" — have since moved one step earlier, to DROPDOWN.)
  *
  * `INLINE` stays authored-only, and the asymmetry is the point: its claim is about the ELEMENT (the
  * thing being acted on is a row that can transform in place), and its degrade target is an overlay
@@ -256,7 +356,7 @@ export declare function resolveResourceOperationActionPresentation(operation: Re
 /**
  * Does this presentation reach the NAVIGATION layer, or does the action layer own it end to end?
  *
- * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER` and `INLINE` are not: nothing is pushed,
+ * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER`, `DROPDOWN` and `INLINE` are not: nothing is pushed,
  * no zone changes, and there is nothing for a back button to pop — routing them through navigation
  * would mint zone entries for chrome that does not live in a zone.
  *

package/dist/esm/core/resources/operation-semantics.frontend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-semantics.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/operation-semantics.frontend.utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,qBAAqB,EAGrB,gCAAgC,EAChC,oBAAoB,EAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,mCAAmC,EACnC,4BAA4B,EAC7B,MAAM,+DAA+D,CAAC;AAEvE,MAAM,WAAW,8BAA8B;IAC7C,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE;QACxB,OAAO,CAAC,EAAE,gCAAgC,CAAC;QAC3C,kBAAkB,CAAC,EAAE,mCAAmC,CAAC;QACzD,WAAW,CAAC,EAAE,4BAA4B,CAAC;QAC3C,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,eAAO,MAAM,wCAAwC,8BAA8B,CAAC;AACpF,eAAO,MAAM,qDAAqD,2CAA2C,CAAC;AAE9G,MAAM,MAAM,2BAA2B,GACnC,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,CAAC;AAEb,wBAAgB,8BAA8B,CAC5C,mBAAmB,EAAE,OAAO,GAC3B,mBAAmB,IAAI,qBAAqB,CAE9C;AAED,wBAAgB,6BAA6B,CAC3C,mBAAmB,EAAE,OAAO,EAC5B,qBAAqB,CAAC,EAAE,OAAO,GAC9B,qBAAqB,GAAG,SAAS,CAUnC;AAED,wBAAgB,0CAA0C,CACxD,SAAS,EAAE,8BAA8B,GACxC,qBAAqB,GAAG,SAAS,CAKnC;AAED,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,8BAA8B,EACzC,aAAa,EAAE,qBAAqB,GACnC,OAAO,CAET;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,qBAAqB,GAAG,SAAS,GAC/C,OAAO,CAGT;AAED,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAGT;AAED,wBAAgB,6CAA6C,CAC3D,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAkBT;AAED,wBAAgB,6BAA6B,CAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,MAAM,EAAE,GAAG,SAAS,CAStB;AAED,wBAAgB,0CAA0C,CACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjG;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIrI;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAI7F;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,SAAS,EAAE,8BAA8B,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CActC;AAED,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAGT;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAOT;AAED;;;;;;;GAOG;AACH,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAMT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAQT;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAIT;AAED,eAAO,MAAM,4BAA4B,4BAOvC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,4BAIzC,CAAC;AAEH,eAAO,MAAM,6BAA6B,4BAIxC,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CA6BT;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAqG/C;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAEjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,8BAA8B,GAAG,OAAO,CASjG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAgB,0CAA0C,CACxD,SAAS,EAAE,8BAA8B,GACxC,mCAAmC,CA2DrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,mCAAmC,GAChD,OAAO,CAGT;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,mCAAmC,GAChD,oBAAoB,GAAG,SAAS,CAelC;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,8BAA8B,GACxC,2BAA2B,CAyB7B;AAED,wBAAgB,qCAAqC,CAAC,CAAC,SAAS,8BAA8B,EAC5F,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,aAAa,EAAE,qBAAqB,EACpC,OAAO,CAAC,EAAE;IACR,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GACA,CAAC,GAAG,SAAS,CA6Cf;AAED,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,8BAA8B,EACnF,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,aAAa,EAAE,qBAAqB,EACpC,OAAO,CAAC,EAAE;IACR,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GACA,CAAC,EAAE,CAoBL"}
+{"version":3,"file":"operation-semantics.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/resources/operation-semantics.frontend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAKL,qBAAqB,EAGrB,gCAAgC,EAEhC,oBAAoB,EAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,mCAAmC,EACnC,4BAA4B,EAC7B,MAAM,+DAA+D,CAAC;AAEvE,MAAM,WAAW,8BAA8B;IAC7C,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uGAAuG;IACvG,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE;QACxB,OAAO,CAAC,EAAE,gCAAgC,CAAC;QAC3C,kBAAkB,CAAC,EAAE,mCAAmC,CAAC;QACzD,WAAW,CAAC,EAAE,4BAA4B,CAAC;QAC3C,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,eAAO,MAAM,wCAAwC,8BAA8B,CAAC;AACpF;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,gCAAgC,CAAC;AACxF,eAAO,MAAM,qDAAqD,2CAA2C,CAAC;AAE9G,MAAM,MAAM,2BAA2B,GACnC,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,QAAQ,CAAC;AAEb,wBAAgB,8BAA8B,CAC5C,mBAAmB,EAAE,OAAO,GAC3B,mBAAmB,IAAI,qBAAqB,CAE9C;AAED,wBAAgB,6BAA6B,CAC3C,mBAAmB,EAAE,OAAO,EAC5B,qBAAqB,CAAC,EAAE,OAAO,GAC9B,qBAAqB,GAAG,SAAS,CAUnC;AAED,wBAAgB,0CAA0C,CACxD,SAAS,EAAE,8BAA8B,GACxC,qBAAqB,GAAG,SAAS,CAKnC;AAED,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,8BAA8B,EACzC,aAAa,EAAE,qBAAqB,GACnC,OAAO,CAET;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sCAAsC,CACpD,mBAAmB,EAAE,OAAO,EAC5B,kBAAkB,EAAE,aAAa,CAAC;IAAE,mBAAmB,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,SAAS,GAC9E,MAAM,CAQR;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,qBAAqB,GAAG,SAAS,GAC/C,OAAO,CAGT;AAED,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAGT;AAED,wBAAgB,6CAA6C,CAC3D,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAkBT;AAED,wBAAgB,6BAA6B,CAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,MAAM,EAAE,GAAG,SAAS,CAStB;AAED,sGAAsG;AACtG,wBAAgB,+BAA+B,CAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAYpE;AAED,wBAAgB,0CAA0C,CACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjG;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIrI;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAI7F;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,SAAS,EAAE,8BAA8B,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CA0BtC;AAED,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAGT;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAOT;AAED;;;;;;;GAOG;AACH,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAMT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAQT;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAIT;AAED,eAAO,MAAM,4BAA4B,4BAOvC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,4BAIzC,CAAC;AAEH,eAAO,MAAM,6BAA6B,4BAIxC,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,8BAA8B,GACxC,OAAO,CA6BT;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAsG/C;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAEjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,8BAA8B,GAAG,OAAO,CASjG;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAEpE;AAED;;;;;;;GAOG;AACH,oBAAY,6BAA6B;IACvC,0EAA0E;IAC1E,IAAI,SAAS;IACb,oEAAoE;IACpE,SAAS,cAAc;CACxB;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC9C,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sCAAsC,CACpD,SAAS,EAAE,8BAA8B,GACxC,+BAA+B,GAAG,SAAS,CAyB7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,8BAA8B,GAAG,OAAO,CAIhG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,wBAAgB,0CAA0C,CACxD,SAAS,EAAE,8BAA8B,GACxC,mCAAmC,CAqErC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,mCAAmC,GAChD,OAAO,CAGT;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,mCAAmC,GAChD,oBAAoB,GAAG,SAAS,CAkBlC;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,8BAA8B,GACxC,2BAA2B,CAyB7B;AAED,wBAAgB,qCAAqC,CAAC,CAAC,SAAS,8BAA8B,EAC5F,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,aAAa,EAAE,qBAAqB,EACpC,OAAO,CAAC,EAAE;IACR,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GACA,CAAC,GAAG,SAAS,CA6Cf;AAED,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,8BAA8B,EACnF,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,aAAa,EAAE,qBAAqB,EACpC,OAAO,CAAC,EAAE;IACR,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GACA,CAAC,EAAE,CAoBL"}

package/dist/esm/core/resources/operation-semantics.frontend.utils.js

@@ -1,8 +1,18 @@
 import { z } from 'zod';
-import { isFileSchema, unwrapSchema } from '@wildo-ai/zod-decorators';
-import { BULK_OPERATION_MATCH_FIELD, BULK_OPERATION_SELECTOR_FIELD, COLLECTION_OPERATIONS_WITHOUT_IDS, CoreResourceOperation, ResourceGeneratedOperationKind, ResourceOperationVariantType, ResourceOperationFrontendSurface, NavigationTransition, Resources_SharedUtils, } from '@wildo-ai/saas-models';
+import { FieldSchemaType, getSchemaType, isFileSchema, isForeignKeyField, unwrapSchema } from '@wildo-ai/zod-decorators';
+import { BULK_OPERATION_HOST_SUPPLIED_FIELDS, BULK_OPERATION_MATCH_FIELD, BULK_OPERATION_SELECTOR_FIELD, COLLECTION_OPERATIONS_WITHOUT_IDS, CoreResourceOperation, ResourceGeneratedOperationKind, ResourceOperationVariantType, ResourceOperationFrontendSurface, ResourceOperationRiskLevel, NavigationTransition, Resources_SharedUtils, } from '@wildo-ai/saas-models';
 import { isCollectionScopedOperation, ResourceOperationActionPresentation, ResourceOperationActionScope, } from '../../core/resources/resources.frontend.schemas.js';
 export const BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY = 'bulkOperationSelectionIds';
+/**
+ * The operation-context key carrying a CROSS-PAGE selection ("select all N matching") to whatever host
+ * presents a bulk action's form — the sibling of {@link BULK_OPERATION_SELECTION_IDS_CONTEXT_KEY}.
+ *
+ * A form-bearing bulk action (one that asks for a value, like "Change status") is executed by the
+ * form host, which adds the selection through {@link mergeBulkSelectionIntoRequestData}. That merge
+ * read only the id key, so a cross-page selection never reached it and the request went out with no
+ * selection but the form's own empty `_match` (#1461, #2035 run 2026-09-30).
+ */
+export const BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY = 'bulkOperationMatchSelection';
 export const RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY = 'resourceOperationExecutedDiscriminator';
 export function isLiteralCoreResourceOperation(operationIdentifier) {
     return Object.values(CoreResourceOperation).includes(operationIdentifier);
@@ -22,6 +32,27 @@ export function resolveEffectiveCoreOperationFromOperation(operation) {
 export function matchesResourceOperationSemantic(operation, coreOperation) {
     return resolveEffectiveCoreOperationFromOperation(operation) === coreOperation;
 }
+/**
+ * The operation whose generated TITLE names a surface that shows `operationIdentifier` — the page header and
+ * the overlay (dialog, sheet, tab) title alike, which must agree.
+ *
+ * The core EDIT surface is titled like the record's own page. UPDATE's title is generated as the name of an
+ * ACTION, a button word ("Update preferences", "Save changes"), while READ's is generated as a HEADING naming
+ * the surface ("Preferences"). An edit page headed by a verb names the button below it rather than the thing
+ * being edited, and the form's own save button already says the verb. So when the resource has a READ, the
+ * core UPDATE — including its polymorphic variants, which keep the `update` identifier — takes READ's title.
+ *
+ * Keyed on the literal identifier, NOT on the effective core semantics: a custom operation that BEHAVES like
+ * an update (`claimDomain`, `reset_to_defaults`) is a named action, and its own title is the only word that
+ * says which action the surface performs. A resource with no READ keeps UPDATE's title, the only word it has.
+ */
+export function resolveSurfaceTitleOperationIdentifier(operationIdentifier, resourceOperations) {
+    if (operationIdentifier === CoreResourceOperation.UPDATE
+        && resourceOperations?.some((candidate) => candidate.operationIdentifier === CoreResourceOperation.READ)) {
+        return CoreResourceOperation.READ;
+    }
+    return String(operationIdentifier);
+}
 export function isUpdateLikeCoreOperation(coreOperation) {
     return coreOperation === CoreResourceOperation.UPDATE
         || coreOperation === CoreResourceOperation.UPDATE_MANY;
@@ -55,6 +86,20 @@ export function readBulkOperationSelectionIds(additionalContext) {
     const ids = value.filter((candidate) => typeof candidate === 'string');
     return ids.length > 0 ? ids : undefined;
 }
+/** The cross-page selection an operation context carries, when "select all N matching" was chosen. */
+export function readBulkOperationMatchSelection(additionalContext) {
+    const value = additionalContext?.[BULK_OPERATION_MATCH_SELECTION_CONTEXT_KEY];
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return undefined;
+    }
+    const candidate = value;
+    return {
+        ...(candidate.filters && typeof candidate.filters === 'object' && !Array.isArray(candidate.filters)
+            ? { filters: candidate.filters }
+            : {}),
+        ...(typeof candidate.search === 'string' && candidate.search !== '' ? { search: candidate.search } : {}),
+    };
+}
 export function readResourceOperationExecutedDiscriminator(additionalContext) {
     const value = additionalContext?.[RESOURCE_OPERATION_EXECUTED_DISCRIMINATOR_CONTEXT_KEY];
     return typeof value === 'string' && value.length > 0 ? value : undefined;
@@ -107,12 +152,22 @@ export function mergeBulkSelectionIntoRequestData(params) {
     if (params.operation.isBulkOperation !== true) {
         return params.requestData;
     }
+    // The selector is the COLLECTION's to write, never the form's. Whatever the form's values carry
+    // under a selector key is dropped first, so an empty `_match: {}` a form happened to hold can never
+    // stand in for — or sit beside — the selection the person actually made.
+    const formValues = params.requestData
+        ? Object.fromEntries(Object.entries(params.requestData).filter(([key]) => !BULK_OPERATION_HOST_SUPPLIED_FIELDS.includes(key)))
+        : undefined;
+    const match = readBulkOperationMatchSelection(params.additionalContext);
+    if (match) {
+        return { ...(formValues ?? {}), ...buildBulkOperationMatchPayload(match) };
+    }
     const ids = readBulkOperationSelectionIds(params.additionalContext);
     if (!ids || ids.length === 0) {
-        return params.requestData;
+        return formValues;
     }
     return {
-        ...(params.requestData ?? {}),
+        ...(formValues ?? {}),
         ...buildBulkOperationSelectorPayload(ids),
     };
 }
@@ -127,7 +182,7 @@ export function isGeneratedFileRegenerateOperation(operation) {
             && resolveEffectiveCoreOperationFromOperation(operation) === CoreResourceOperation.UPDATE);
 }
 /**
- * Is this the CSV/JSON export companion of a LIST/SEARCH operation?
+ * Is this the file-export companion of a LIST/SEARCH operation?
  *
  * Identity comes from the generated-operation metadata, with the prefixed identifier as the fallback
  * for any surface that receives a thinned operation object — the same two-source shape
@@ -275,7 +330,7 @@ export const ACTION_MODAL_FIELD_CEILING = 6;
  * an overlay.
  *
  * Two, and the reasoning is the one this axis's `POPOVER` member already states: the anchored panel
- * is the single-input idiom ("assign to…", "change status to…", "snooze until…"), and it earns its
+ * is the small-input idiom ("snooze until…", "reject with a reason…"), and it earns its
  * place by keeping the row the user is acting on visible. A third control starts wanting the room a
  * dialog has, and the panel stops being cheaper than one.
  *
@@ -324,11 +379,12 @@ function requestBodyFitsAnAnchoredPanel(requestDto, suppliedKeys) {
  * to a dialog, while the SAME action on one row got the panel. The ladder has to count what the
  * person will actually see.
  *
- * Named from `BULK_OPERATION_SELECTOR_FIELD`, the one source both halves of the wire read, so the
- * key this skips and the key the request builder writes cannot drift apart.
+ * Named from `BULK_OPERATION_HOST_SUPPLIED_FIELDS` — both selectors, `_ids` and the cross-page
+ * `_match` — the one list the form's omission and the execution merge also read, so the keys this
+ * skips and the keys the request builder writes cannot drift apart.
  */
 function resolveHostSuppliedRequestKeys(operation) {
-    return operation.isBulkOperation === true ? new Set([BULK_OPERATION_SELECTOR_FIELD]) : new Set();
+    return operation.isBulkOperation === true ? new Set(BULK_OPERATION_HOST_SUPPLIED_FIELDS) : new Set();
 }
 /**
  * The field count of a request body every one of whose fields can be drawn without a page, or
@@ -396,13 +452,89 @@ export function operationCollectsNoCallerInput(operation) {
     const suppliedKeys = resolveHostSuppliedRequestKeys(operation);
     return Object.keys(operation.requestDto.shape).every((fieldName) => suppliedKeys.has(fieldName));
 }
+/**
+ * Does this risk level ask for a confirmation before the operation runs?
+ *
+ * HIGH and CRITICAL do (a plain confirm, and a typed one); LOW and MEDIUM execute on click. The one
+ * definition the action ladder's confirm dialog and the DROPDOWN rule both read, so "risky enough to
+ * confirm" and "too risky to execute on a pick" cannot come to mean two different sets.
+ */
+export function isRiskyResourceOperation(riskLevel) {
+    return riskLevel === ResourceOperationRiskLevel.HIGH || riskLevel === ResourceOperationRiskLevel.CRITICAL;
+}
+/**
+ * The kind of domain a DROPDOWN lists — the two a person can pick from without typing a value.
+ *
+ * Two members because the lists are genuinely different things: an enum's values are CLOSED and
+ * known up front, so they are listed whole; a reference's candidates are records on the server, so
+ * they are SEARCHED as you type and scoped like the form's picker. A boolean is deliberately absent —
+ * a two-item menu for yes/no is a worse control than the toggle it would replace.
+ */
+export var ResourceOperationChoiceDomain;
+(function (ResourceOperationChoiceDomain) {
+    /** A closed enum — every value listed, labelled as the form labels it. */
+    ResourceOperationChoiceDomain["ENUM"] = "enum";
+    /** A foreign key — the referenced records, searched server-side. */
+    ResourceOperationChoiceDomain["REFERENCE"] = "reference";
+})(ResourceOperationChoiceDomain || (ResourceOperationChoiceDomain = {}));
+/**
+ * The one choice field this operation's input consists of, or `undefined` when its input is
+ * anything else.
+ *
+ * Qualifies only when, after the keys the host supplies itself (a bulk twin's `_ids`), EXACTLY ONE
+ * field remains and it is a single enum or a single foreign key. An array is refused: picking one
+ * item of a multi-pick and executing is not what the field asks for.
+ *
+ * Reads the schema structurally, like every other rule in this module, so the answer cannot
+ * disagree with the form the same operation would otherwise render.
+ */
+export function resolveResourceOperationDropdownChoice(operation) {
+    const requestDto = operation.requestDto;
+    if (!(requestDto instanceof z.ZodObject)) {
+        return undefined;
+    }
+    const suppliedKeys = resolveHostSuppliedRequestKeys(operation);
+    const shape = requestDto.shape;
+    const fieldNames = Object.keys(shape).filter((fieldName) => !suppliedKeys.has(fieldName));
+    if (fieldNames.length !== 1) {
+        return undefined;
+    }
+    const fieldName = fieldNames[0];
+    const fieldSchema = shape[fieldName];
+    if (unwrapSchema(fieldSchema) instanceof z.ZodArray) {
+        return undefined;
+    }
+    if (isForeignKeyField(fieldSchema)) {
+        return { fieldName, fieldSchema, domain: ResourceOperationChoiceDomain.REFERENCE };
+    }
+    if (getSchemaType(fieldSchema) === FieldSchemaType.ENUM) {
+        return { fieldName, fieldSchema, domain: ResourceOperationChoiceDomain.ENUM };
+    }
+    return undefined;
+}
+/**
+ * Can this operation honestly present as a DROPDOWN — one choice field, one row, and no confirmation
+ * owed?
+ *
+ * All three are correctness constraints, not taste. Without a single choice field there is no list to
+ * show. A pick executes immediately, so an operation whose risk level asks for a confirmation would
+ * lose it. And a BULK twin writes every selected row: one stray pick in a menu would rewrite them all
+ * with no second step, which is the one place "the pick is the submission" is the wrong promise. Each
+ * of those keeps the anchored FORM, which has an explicit Submit.
+ */
+export function operationCanPresentAsDropdown(operation) {
+    return operation.isBulkOperation !== true
+        && !isRiskyResourceOperation(operation.riskLevel)
+        && resolveResourceOperationDropdownChoice(operation) !== undefined;
+}
 /**
  * HOW does this action collect its input?
  *
  * The single answer for every action surface. An explicitly authored
- * {@link ResourceOperationActionPresentation} is returned untouched — the author has answered the
- * question and the framework does not second-guess them. Everything below is the DERIVATION for the
- * (overwhelmingly common) case where nothing was authored.
+ * {@link ResourceOperationActionPresentation} is returned as authored — the author has answered the
+ * question and the framework does not second-guess their TASTE — with ONE correctness exception: a
+ * DROPDOWN the operation cannot honestly be resolves to POPOVER (see below). Everything else is the
+ * DERIVATION for the (overwhelmingly common) case where nothing was authored.
  *
  * The derivation is ordered by how strong the evidence is, not by convenience:
  *
@@ -418,14 +550,24 @@ export function operationCollectsNoCallerInput(operation) {
  *    a second mechanism, not a vocabulary.
  * 4. **No caller input ⇒ DIRECT.** No `requestDto` at all, an explicit `z.object({})`, or a bulk
  *    body holding only the selector the host fills ({@link operationCollectsNoCallerInput}).
- * 5. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for
+ * 5. **One choice from an enum or a reference, and no confirmation owed ⇒ DROPDOWN.** The pick is
+ *    the submission, so the list of values IS the whole input ({@link operationCanPresentAsDropdown}).
+ * 6. **One or two simple inputs ⇒ POPOVER.** An anchored panel beside the button that asked for
  *    them, so the row being acted on stays visible.
- * 6. **Input that fits an overlay ⇒ MODAL.**
- * 7. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback
+ * 7. **Input that fits an overlay ⇒ MODAL.**
+ * 8. **Everything else ⇒ PAGE.** Files, nested writes, large field sets — and the honest fallback
  *    for a `requestDto` this code cannot introspect (a thinned projection), because refusing to
  *    guess returns the behaviour the operation had before.
  *
- * ## Why step 5 is DERIVED, when it used to be authored-only
+ * ## An authored DROPDOWN that cannot be one resolves to POPOVER
+ *
+ * The only authored answer this function overrides, and for the same reason the click handler
+ * refuses a non-navigating presentation on a zero-input update-like action: honouring it would be
+ * wrong, not merely ugly. A DROPDOWN over two fields has no list to show, and one over a CRITICAL
+ * operation would execute without the typed confirmation every other surface demands. POPOVER is the
+ * nearest honest answer — the same anchored panel, holding the form with its Submit.
+ *
+ * ## Why step 6 is DERIVED, when it used to be authored-only
  *
  * This function returned `MODAL` for every small input and left `POPOVER` to authors, on the
  * reasoning that an anchored panel is a claim about the surrounding context — that the trigger is
@@ -436,9 +578,10 @@ export function operationCollectsNoCallerInput(operation) {
  * already degrades when it cannot: an item collapsed into the overflow menu or nested in a subgroup
  * takes its `onClick`, which `resolveActionPresentationTransition` maps to an OVERLAY — the same
  * chrome `MODAL` would have produced. So the cost of deriving the panel is zero where it cannot be
- * drawn, and the cost of NOT deriving it was that every one-field action in every application —
- * "change status to…", "assign to…" — covered the list it was acting on with a dialog, and the only
- * way out was to author the axis per operation.
+ * drawn, and the cost of NOT deriving it was that every small action in every application —
+ * "snooze until…", "reject with a reason…" — covered the list it was acting on with a dialog, and the
+ * only way out was to author the axis per operation. (The one-CHOICE actions — "change status to…",
+ * "assign to…" — have since moved one step earlier, to DROPDOWN.)
  *
  * `INLINE` stays authored-only, and the asymmetry is the point: its claim is about the ELEMENT (the
  * thing being acted on is a row that can transform in place), and its degrade target is an overlay
@@ -448,6 +591,10 @@ export function operationCollectsNoCallerInput(operation) {
 export function resolveResourceOperationActionPresentation(operation) {
     const config = operation.operationFrontendConfig;
     if (config?.actionPresentation) {
+        if (config.actionPresentation === ResourceOperationActionPresentation.DROPDOWN
+            && !operationCanPresentAsDropdown(operation)) {
+            return ResourceOperationActionPresentation.POPOVER;
+        }
         return config.actionPresentation;
     }
     if (config?.surface === ResourceOperationFrontendSurface.ADDRESSABLE) {
@@ -482,6 +629,9 @@ export function resolveResourceOperationActionPresentation(operation) {
     if (operationCollectsNoCallerInput(operation)) {
         return ResourceOperationActionPresentation.DIRECT;
     }
+    if (operationCanPresentAsDropdown(operation)) {
+        return ResourceOperationActionPresentation.DROPDOWN;
+    }
     const suppliedKeys = resolveHostSuppliedRequestKeys(operation);
     if (requestBodyFitsAnAnchoredPanel(operation.requestDto, suppliedKeys)) {
         return ResourceOperationActionPresentation.POPOVER;
@@ -493,7 +643,7 @@ export function resolveResourceOperationActionPresentation(operation) {
 /**
  * Does this presentation reach the NAVIGATION layer, or does the action layer own it end to end?
  *
- * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER` and `INLINE` are not: nothing is pushed,
+ * `MODAL` and `PAGE` are destinations. `DIRECT`, `POPOVER`, `DROPDOWN` and `INLINE` are not: nothing is pushed,
  * no zone changes, and there is nothing for a back button to pop — routing them through navigation
  * would mint zone entries for chrome that does not live in a zone.
  *
@@ -529,6 +679,9 @@ export function resolveActionPresentationTransition(presentation) {
     switch (presentation) {
         case ResourceOperationActionPresentation.MODAL:
         case ResourceOperationActionPresentation.POPOVER:
+        // A DROPDOWN degrades exactly like the popover it shares a host with: where nothing can anchor
+        // the list, the same single field is collected by the overlay form.
+        case ResourceOperationActionPresentation.DROPDOWN:
             return NavigationTransition.OVERLAY;
         case ResourceOperationActionPresentation.INLINE:
             // The DEGRADE target, like `POPOVER`'s above. An in-place host only exists inside a collection;