@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

package/dist/esm/core/branding/OrganizationBrandingPublisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationBrandingPublisher.js","sourceRoot":"","sources":["../../../../../src/core/branding/OrganizationBrandingPublisher.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,kCAAkC,EAClC,uCAAuC,EACvC,qBAAqB,EACrB,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,2BAA2B,EAAE,MAAM,4EAA4E,CAAC;AACzH,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAE5E,MAAM,UAAU,6BAA6B;IAC3C,MAAM,EAAE,qBAAqB,EAAE,GAAG,WAAW,EAAE,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,GAAG,WAAW,EAAE,CAAC;IACjF,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACxD,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,CAAC;IACnC,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE,CAAC;IACxC,0FAA0F;IAC1F,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE1D,MAAM,cAAc,GAAG,qBAAqB,IAAI,IAAI,CAAC;IACrD,MAAM,QAAQ,GAAG,cAAc,KAAK,IAAI;WACnC,CAAC,SAAS;WACV,yBAAyB,KAAK,cAAc;WAC5C,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAEnD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAChB,cAAc,CAAC,2BAA2B,EAC1C,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,EACpD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,gBAAgB,CAAC,qBAAqB;WACvE,CAAC,qBAAqB,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CACvG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAET,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,CAAC,QAAiD,EAAQ,EAAE;YAC1E,IAAI,SAAS;gBAAE,OAAO;YACtB,4GAA4G;YAC5G,MAAM,IAAI,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,MAAM,OAAO,GAAG,IAAI,IAAI,cAAc,KAAK,IAAI;gBAC7C,CAAC,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,kBAAkB,GAAG,uCAAuC,CAAC,cAAc,EAAE,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;gBACjL,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,6BAA6B,EAAE;gBACjD,cAAc;gBACd,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,IAAI;gBAC5C,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,IAAI;gBAChD,OAAO;gBACP,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,IAAI;aAC3C,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,2BAA2B,CAAC,QAAQ,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3H,IAAI,CAAC,QAAQ,IAAI,cAAc,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,WAAW,CACT,kCAAkC,CAAC,kCAAkC,CAAC,aAAa,CAAC,EACpF,EAAE,oBAAoB,EAAE,EAAE,cAAc,EAAE,EAAE,CAC7C;aACE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;aAC7C,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzF,+EAA+E;IAC/E,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,6BAA6B,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAExL,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\n * Publishes the CURRENT organization's branding while it is in effect (#2306), for the surfaces mounted above the\n * organization and feature contexts (`UIProvider` applies the colour and carries the logo to `useBrandIdentity`).\n *\n * In effect means the organization holds `CoreFeature.CUSTOM_BRANDING` as the backend resolved it for THAT\n * organization: the answer is read only once the features response is for the current organization and has loaded, so\n * a switch never shows one organization's brand under another's entitlement, and a lapsed plan never flashes a brand\n * while loading (the availability hook is optimistic while loading, which is why it is not used here). Without the\n * entitlement, or without an organization, it publishes nulls and the application's own brand shows. The backend\n * makes the same decision for the surfaces it serves (`isOrganizationBrandingInEffect`), so a tenant's sign-in card and\n * its application agree.\n *\n * The branding is the organization profile's, read through its own READ (any member may read it). A read that fails\n * publishes nulls: presentation falls back to the application, never to an error.\n *\n * It is read again after any write to the organization profile in this tab (`RESOURCE_OPERATION_EXECUTED` on\n * `organizationProfiles`, not read-shaped), so an administrator who changes the colour sees it applied without a\n * reload. A change made in another session is seen on the next organization switch or reload: the shell's ordinary\n * staleness for a configuration-like value. When the publisher unmounts it publishes nulls, so nothing above it keeps\n * showing a brand nothing maintains any more.\n */\nimport { useEffect, useState } from 'react';\nimport {\n  CoreFeature,\n  CoreResourceType,\n  MAIN_API_BASE_PATH,\n  OrganizationBrandingAsset,\n  ResourcesConfig_OperationPathUtils,\n  buildOrganizationBrandingAssetRoutePath,\n  isReadShapedOperation,\n  organizationBrandingFile,\n  type OrganizationBranding,\n} from '@wildo-ai/saas-models';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useEventBus } from '~wildo-frontend-lib/core/events/useEventBus';\nimport { FrontendEvents } from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport { useFeatures } from '~wildo-frontend-lib/core/features/useFeatures';\nimport { useResourceRegistry } from '~wildo-frontend-lib/core/resources/useResourceRegistry';\nimport { findDefaultApiReadOperation } from '~wildo-frontend-lib/core/security/route-organization-access.frontend.utils';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\n\nexport function OrganizationBrandingPublisher(): null {\n  const { currentOrganizationId } = useUserOrgs();\n  const { isLoading, isFeatureEnabled, resolvedForOrganizationId } = useFeatures();\n  const { doOperation, registry } = useResourceRegistry();\n  const { emit, on } = useEventBus();\n  const { httpClient } = useApplication();\n  /** Advanced by every write to the organization profile, so the branding is read again. */\n  const [profileRevision, setProfileRevision] = useState(0);\n\n  const organizationId = currentOrganizationId ?? null;\n  const entitled = organizationId !== null\n    && !isLoading\n    && resolvedForOrganizationId === organizationId\n    && isFeatureEnabled(CoreFeature.CUSTOM_BRANDING);\n\n  useEffect(() => on(\n    FrontendEvents.RESOURCE_OPERATION_EXECUTED,\n    () => setProfileRevision((revision) => revision + 1),\n    (payload) => payload.resourceType === CoreResourceType.ORGANIZATION_PROFILES\n      && !isReadShapedOperation(payload.operation ?? { operationIdentifier: payload.operationIdentifier }),\n  ), [on]);\n\n  useEffect(() => {\n    let cancelled = false;\n    const publish = (branding: OrganizationBranding | null | undefined): void => {\n      if (cancelled) return;\n      // The uploaded logo's public address on the API (#2979); `useBrandIdentity` shows it through an object URL.\n      const logo = organizationId !== null ? organizationBrandingFile(branding?.logo) : undefined;\n      const logoUrl = logo && organizationId !== null\n        ? `${httpClient.getBaseURL().replace(/\\/+$/, '')}${MAIN_API_BASE_PATH}${buildOrganizationBrandingAssetRoutePath(organizationId, OrganizationBrandingAsset.LOGO, logo.updatedAt)}`\n        : null;\n      emit(FrontendEvents.ORGANIZATION_BRANDING_CHANGED, {\n        organizationId,\n        primaryColor: branding?.primaryColor ?? null,\n        secondaryColor: branding?.secondaryColor ?? null,\n        logoUrl,\n        productName: branding?.productName ?? null,\n      });\n    };\n    const readOperation = findDefaultApiReadOperation(registry.resourceConfigurations[CoreResourceType.ORGANIZATION_PROFILES]);\n    if (!entitled || organizationId === null || !readOperation) {\n      publish(null);\n      return () => { cancelled = true; };\n    }\n    doOperation<{ branding?: OrganizationBranding | null }>(\n      ResourcesConfig_OperationPathUtils.buildOperationPathKeyFromOperation(readOperation),\n      { contextualParameters: { organizationId } },\n    )\n      .then((profile) => publish(profile?.branding))\n      .catch(() => publish(null));\n    return () => { cancelled = true; };\n  }, [organizationId, entitled, doOperation, registry, emit, profileRevision, httpClient]);\n\n  // Unmounted: nothing maintains the brand any more, so the application's shows.\n  useEffect(() => () => emit(FrontendEvents.ORGANIZATION_BRANDING_CHANGED, { organizationId: null, primaryColor: null, secondaryColor: null, logoUrl: null, productName: null }), [emit]);\n\n  return null;\n}\n"]}

package/dist/esm/core/branding/useBrandIdentity.d.ts

@@ -30,6 +30,14 @@ export interface BrandIdentity {
      * asset into a square icon slot letterboxes it.
      */
     logoComposition?: BrandAssetComposition;
+    /**
+     * The resolved mark is the SINGLE-COLOUR (`MONOCHROME`) asset and the UI is dark.
+     *
+     * A monochrome mark is one colour by definition, and the generated one is dark: on a dark shell it all but vanished
+     * (measured on Wonder Todos, which pins it for both themes). The colour is not the mark's identity — its shape is —
+     * so a surface draws it light on a dark UI. The colour mark is never touched: it has its own `DARK` variant.
+     */
+    markIsSingleColourOnDarkUi?: boolean;
 }
 export interface UseBrandIdentityOptions {
     /**
@@ -50,6 +58,13 @@ export interface UseBrandIdentityOptions {
      * `LIGHT`, both falling back through `DEFAULT` inside `resolveBrandAsset`.
      */
     theme?: BrandAssetTheme;
+    /**
+     * Whether the current organization's logo and product name may replace the application's (#2306, #2979). Defaults to
+     * `true`: inside the application, members see the organization's brand while it is in effect. A PUBLIC page passes
+     * `false`: it speaks for the application (its sign-up, its legal pages), and a signed-in visitor's organization does
+     * not rebrand it. The sign-in card brands a tenant through its own input, from the identification response.
+     */
+    includeOrganizationBrand?: boolean;
 }
 /**
  * @wildo_source:part:start saas.frontend.brand-identity facet:layer:frontend facet:audience:app-developer
@@ -79,6 +94,12 @@ export interface UseBrandIdentityOptions {
  * it reads. Without that precedence the tool renders its customer's brand as its own, because there
  * is exactly one application-config endpoint and it belongs to the application.
  *
+ * Inside the application, the CURRENT organization's logo replaces the application's mark, and its product
+ * name the application's name when it set one, while that organization's custom branding is in effect (it
+ * holds the custom-branding entitlement). A PUBLIC page (sign-up, legal pages, anything a visitor reaches without being a
+ * member) speaks for the application, so it passes `{ includeOrganizationBrand: false }`: otherwise a
+ * signed-in visitor's organization rebrands it. The framework's own public shell already does.
+ *
  * @wildo_source:part:end saas.frontend.brand-identity
  */
 export declare function useBrandIdentity(options?: UseBrandIdentityOptions): BrandIdentity;

package/dist/esm/core/branding/useBrandIdentity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandIdentity.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAK/B;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,oEAAoE;IACpE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa,CAqDrF"}
+{"version":3,"file":"useBrandIdentity.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAM/B;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,oEAAoE;IACpE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa,CAwErF"}

package/dist/esm/core/branding/useBrandIdentity.js

@@ -1,7 +1,8 @@
 import { useMemo } from 'react';
-import { BrandAssetComposition, BrandAssetPurpose, BrandAssetTheme, resolveBrandAsset, } from '@wildo-ai/saas-models';
+import { applicationDisplayName, BrandAssetComposition, BrandAssetPurpose, BrandAssetTheme, resolveBrandAsset, } from '@wildo-ai/saas-models';
 import { useApplication } from '../../core/runtime/useApplication.js';
 import { useUI } from '../../core/ui/useUI.js';
+import { useDisplayableImageUrl } from '../../core/branding/useDisplayableImageUrl.js';
 /**
  * @wildo_source:part:start saas.frontend.brand-identity facet:layer:frontend facet:audience:app-developer
  *
@@ -30,12 +31,18 @@ import { useUI } from '../../core/ui/useUI.js';
  * it reads. Without that precedence the tool renders its customer's brand as its own, because there
  * is exactly one application-config endpoint and it belongs to the application.
  *
+ * Inside the application, the CURRENT organization's logo replaces the application's mark, and its product
+ * name the application's name when it set one, while that organization's custom branding is in effect (it
+ * holds the custom-branding entitlement). A PUBLIC page (sign-up, legal pages, anything a visitor reaches without being a
+ * member) speaks for the application, so it passes `{ includeOrganizationBrand: false }`: otherwise a
+ * signed-in visitor's organization rebrands it. The framework's own public shell already does.
+ *
  * @wildo_source:part:end saas.frontend.brand-identity
  */
 export function useBrandIdentity(options = {}) {
-    const { composition = BrandAssetComposition.SYMBOL, purpose = BrandAssetPurpose.PRIMARY, theme } = options;
+    const { composition = BrandAssetComposition.SYMBOL, purpose = BrandAssetPurpose.PRIMARY, theme, includeOrganizationBrand = true } = options;
     const { appConfig } = useApplication();
-    const { isDark, shellIdentity } = useUI();
+    const { isDark, shellIdentity, organizationLogoUrl, organizationProductName } = useUI();
     // ── WHOSE identity is this? ────────────────────────────────────────────────
     //
     // A frontend that declares `shellIdentity` in its frontend configuration is
@@ -66,7 +73,7 @@ export function useBrandIdentity(options = {}) {
         : appConfig.brandAssets;
     const name = shellIdentity
         ? shellIdentity.name
-        : (appConfig.appIdentity?.displayName || appConfig.appIdentity?.appName || '');
+        : (appConfig.appIdentity ? applicationDisplayName(appConfig.appIdentity) : '');
     const resolved = useMemo(() => {
         if (!brandAssets?.length)
             return undefined;
@@ -82,6 +89,25 @@ export function useBrandIdentity(options = {}) {
             purpose,
         });
     }, [brandAssets, composition, purpose, theme, isDark]);
-    return { name, logoUrl: resolved?.url, logoComposition: resolved?.composition };
+    /*
+     * The current organization's branding while it is in effect (#2306, #2979), inside the application and never inside
+     * a shell that presents its own identity:
+     * - its product name replaces the application's name;
+     * - its uploaded logo replaces the application's mark. It is one image, with no composition or theme variants, so
+     *   neither is claimed for it. It is served by the API, another origin, so it is shown through an object URL the
+     *   application's image policy admits (`useDisplayableImageUrl`); while that loads the name stands alone.
+     */
+    const organizationBrand = includeOrganizationBrand && !shellIdentity;
+    const organizationLogo = useDisplayableImageUrl(organizationBrand ? organizationLogoUrl : undefined);
+    const brandName = (organizationBrand && organizationProductName) || name;
+    if (organizationBrand && organizationLogoUrl) {
+        return { name: brandName, logoUrl: organizationLogo, logoComposition: undefined, markIsSingleColourOnDarkUi: false };
+    }
+    return {
+        name: brandName,
+        logoUrl: resolved?.url,
+        logoComposition: resolved?.composition,
+        markIsSingleColourOnDarkUi: resolved?.theme === BrandAssetTheme.MONOCHROME && isDark,
+    };
 }
 //# sourceMappingURL=useBrandIdentity.js.map

package/dist/esm/core/branding/useBrandIdentity.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandIdentity.js","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAwD1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,EAAE,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3G,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,CAAC;IAE1C,8EAA8E;IAC9E,EAAE;IACF,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,sCAAsC;IACtC,EAAE;IACF,6EAA6E;IAC7E,+DAA+D;IAC/D,sFAAsF;IACtF,yEAAyE;IACzE,4EAA4E;IAC5E,eAAe;IACf,EAAE;IACF,+EAA+E;IAC/E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE;IACF,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,WAAW,GAAoC,aAAa;QAChE,CAAC,CAAC,aAAa,CAAC,WAAW;QAC3B,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC1B,MAAM,IAAI,GAAG,aAAa;QACxB,CAAC,CAAC,aAAa,CAAC,IAAI;QACpB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC,WAAW,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,iBAAiB,CAAC,WAAW,EAAE;YACpC,WAAW;YACX,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,aAAa;YACb,KAAK,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;YACvE,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAEvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAClF,CAAC","sourcesContent":["import { useMemo } from 'react';\n\nimport {\n  BrandAssetComposition,\n  BrandAssetPurpose,\n  BrandAssetTheme,\n  resolveBrandAsset,\n  type RuntimeBrandAsset,\n} from '@wildo-ai/saas-models';\n\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\n\n/**\n * The application's brand identity as a shell surface needs it: a display name\n * plus the URL of the brand asset matching the requested composition and the\n * ACTIVE light/dark theme.\n */\nexport interface BrandIdentity {\n  /**\n   * Human-readable application name — `appIdentity.displayName` when authored,\n   * falling back to the technical `appName` (which the config schema requires,\n   * so this is always non-empty).\n   */\n  name: string;\n  /**\n   * Resolved brand-asset URL, or `undefined` when the application has generated\n   * no brand yet. Consumers must degrade gracefully rather than render a broken\n   * image (the schema documents brand assets as absent until generated).\n   */\n  logoUrl?: string;\n  /**\n   * Composition of the asset that was ACTUALLY resolved — which may differ from\n   * the one requested. `resolveBrandAsset`'s last fallback rung matches any\n   * composition at `(DEFAULT, PRIMARY)`, so an application whose brand contains\n   * no `SYMBOL` (a wordmark-only identity is a supported brand shape) yields its\n   * `WORDMARK`/`LOCKUP` master here.\n   *\n   * Surfaces MUST branch on this rather than assume they got what they asked\n   * for: a wordmark or lockup already CONTAINS the application name, so\n   * rendering it beside a name label duplicates the name, and squeezing a wide\n   * asset into a square icon slot letterboxes it.\n   */\n  logoComposition?: BrandAssetComposition;\n}\n\nexport interface UseBrandIdentityOptions {\n  /**\n   * Which brand composition the surface wants. Defaults to\n   * {@link BrandAssetComposition.SYMBOL} — the right choice for any surface that\n   * renders the application NAME as text beside the mark, because a `LOCKUP`\n   * already contains the name and would duplicate it.\n   */\n  composition?: BrandAssetComposition;\n  /** Asset purpose. Defaults to {@link BrandAssetPurpose.PRIMARY}. */\n  purpose?: BrandAssetPurpose;\n  /**\n   * PINS the mark variant instead of following the active UI theme — e.g.\n   * {@link BrandAssetTheme.MONOCHROME} for the single-colour mark, or\n   * {@link BrandAssetTheme.DEFAULT} to keep the colour mark on a dark shell.\n   *\n   * Omitted (the default) means ADAPTIVE: dark UI asks for `DARK`, light UI for\n   * `LIGHT`, both falling back through `DEFAULT` inside `resolveBrandAsset`.\n   */\n  theme?: BrandAssetTheme;\n}\n\n/**\n * @wildo_source:part:start saas.frontend.brand-identity facet:layer:frontend facet:audience:app-developer\n *\n * Reads the application's brand identity for a shell surface.\n *\n * Owns ONE decision every brand-rendering surface would otherwise re-derive:\n * how the active UI theme maps onto {@link BrandAssetTheme} (dark UI → `DARK`,\n * light UI → `LIGHT`), unless the caller PINS a variant via `options.theme`.\n * `resolveBrandAsset` then applies the framework's documented fallback chain, so\n * an app that generated only a default-theme mark still gets it in dark mode\n * instead of nothing.\n *\n * Must be used inside `ApplicationMainProvider` (it reads the application\n * config) and inside `UIProvider` (it reads the resolved dark-mode state).\n *\n * ## Two things a caller does not have to solve\n *\n * The MARK VARIANT follows the active UI theme by default — dark UI asks for the dark mark, light UI\n * for the light one, each falling back through the default. So an application that generated only a\n * default-theme mark still gets it in dark mode rather than nothing. Pin `options.theme` only when a\n * surface genuinely needs a fixed variant, such as a monochrome mark.\n *\n * WHOSE identity is rendered is decided here too, and it matters for any frontend that observes an\n * application rather than being one — a creation tool, a back office. Such a frontend declares\n * `shellIdentity` in its frontend configuration, and that identity WINS over the application config\n * it reads. Without that precedence the tool renders its customer's brand as its own, because there\n * is exactly one application-config endpoint and it belongs to the application.\n *\n * @wildo_source:part:end saas.frontend.brand-identity\n */\nexport function useBrandIdentity(options: UseBrandIdentityOptions = {}): BrandIdentity {\n  const { composition = BrandAssetComposition.SYMBOL, purpose = BrandAssetPurpose.PRIMARY, theme } = options;\n  const { appConfig } = useApplication();\n  const { isDark, shellIdentity } = useUI();\n\n  // ── WHOSE identity is this? ────────────────────────────────────────────────\n  //\n  // A frontend that declares `shellIdentity` in its frontend configuration is\n  // saying \"I am not the application I talk to\" — a creation tool, a back\n  // office, anything observing an application rather than being one. Its\n  // identity WINS here, because the alternative is silently presenting the\n  // customer's brand as the tool's own.\n  //\n  // That is not hypothetical. There is exactly ONE application-config endpoint\n  // and it belongs to the application: the dev companion answers\n  // `GET /api/v1/application-config?frontendServiceName=application-creation-workbench`\n  // with `appIdentity.displayName: \"Wonder CRM\"` (measured 2026-08-31), so\n  // without this precedence the workbench's brand header reads as the managed\n  // application.\n  //\n  // The two halves are taken TOGETHER, never mixed. A shell that declared a name\n  // but no assets must render its name UNMARKED rather than borrowing the\n  // application's mark — a foreign logo beside your own name is worse than no\n  // logo, and it is the exact mismatch this field exists to prevent. So the\n  // assets are read from whichever side supplied the name.\n  //\n  // `appConfig` is non-optional on the context type and the provider only mounts\n  // past the bootstrap gate, so it is read directly; `appIdentity` keeps its\n  // optional read because the runtime payload has historically been treated as\n  // possibly-absent (see `ApplicationMainContext`'s own `appIdentity?.version`).\n  const brandAssets: RuntimeBrandAsset[] | undefined = shellIdentity\n    ? shellIdentity.brandAssets\n    : appConfig.brandAssets;\n  const name = shellIdentity\n    ? shellIdentity.name\n    : (appConfig.appIdentity?.displayName || appConfig.appIdentity?.appName || '');\n\n  const resolved = useMemo(() => {\n    if (!brandAssets?.length) return undefined;\n    return resolveBrandAsset(brandAssets, {\n      composition,\n      // An explicit `theme` pins the variant (monochrome, or a forced side).\n      // Otherwise ADAPTIVE: LIGHT rather than DEFAULT for a light UI, because\n      // `resolveBrandAsset` tries the requested theme first and falls back to\n      // DEFAULT on its own — so asking for LIGHT strictly adds the ability to\n      // honor a light-specific asset, while asking for DEFAULT could never\n      // reach one.\n      theme: theme ?? (isDark ? BrandAssetTheme.DARK : BrandAssetTheme.LIGHT),\n      purpose,\n    });\n  }, [brandAssets, composition, purpose, theme, isDark]);\n\n  return { name, logoUrl: resolved?.url, logoComposition: resolved?.composition };\n}\n"]}
+{"version":3,"file":"useBrandIdentity.js","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAuElG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,EAAE,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,wBAAwB,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC5I,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,GAAG,KAAK,EAAE,CAAC;IAExF,8EAA8E;IAC9E,EAAE;IACF,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,sCAAsC;IACtC,EAAE;IACF,6EAA6E;IAC7E,+DAA+D;IAC/D,sFAAsF;IACtF,yEAAyE;IACzE,4EAA4E;IAC5E,eAAe;IACf,EAAE;IACF,+EAA+E;IAC/E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,EAAE;IACF,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,WAAW,GAAoC,aAAa;QAChE,CAAC,CAAC,aAAa,CAAC,WAAW;QAC3B,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC1B,MAAM,IAAI,GAAG,aAAa;QACxB,CAAC,CAAC,aAAa,CAAC,IAAI;QACpB,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC,WAAW,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,iBAAiB,CAAC,WAAW,EAAE;YACpC,WAAW;YACX,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,aAAa;YACb,KAAK,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;YACvE,OAAO;SACR,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAEvD;;;;;;;OAOG;IACH,MAAM,iBAAiB,GAAG,wBAAwB,IAAI,CAAC,aAAa,CAAC;IACrE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,IAAI,IAAI,CAAC;IACzE,IAAI,iBAAiB,IAAI,mBAAmB,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,SAAS,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC;IACvH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,EAAE,GAAG;QACtB,eAAe,EAAE,QAAQ,EAAE,WAAW;QACtC,0BAA0B,EAAE,QAAQ,EAAE,KAAK,KAAK,eAAe,CAAC,UAAU,IAAI,MAAM;KACrF,CAAC;AACJ,CAAC","sourcesContent":["import { useMemo } from 'react';\n\nimport {\n  applicationDisplayName,\n  BrandAssetComposition,\n  BrandAssetPurpose,\n  BrandAssetTheme,\n  resolveBrandAsset,\n  type RuntimeBrandAsset,\n} from '@wildo-ai/saas-models';\n\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\nimport { useUI } from '~wildo-frontend-lib/core/ui/useUI';\nimport { useDisplayableImageUrl } from '~wildo-frontend-lib/core/branding/useDisplayableImageUrl';\n\n/**\n * The application's brand identity as a shell surface needs it: a display name\n * plus the URL of the brand asset matching the requested composition and the\n * ACTIVE light/dark theme.\n */\nexport interface BrandIdentity {\n  /**\n   * Human-readable application name — `appIdentity.displayName` when authored,\n   * falling back to the technical `appName` (which the config schema requires,\n   * so this is always non-empty).\n   */\n  name: string;\n  /**\n   * Resolved brand-asset URL, or `undefined` when the application has generated\n   * no brand yet. Consumers must degrade gracefully rather than render a broken\n   * image (the schema documents brand assets as absent until generated).\n   */\n  logoUrl?: string;\n  /**\n   * Composition of the asset that was ACTUALLY resolved — which may differ from\n   * the one requested. `resolveBrandAsset`'s last fallback rung matches any\n   * composition at `(DEFAULT, PRIMARY)`, so an application whose brand contains\n   * no `SYMBOL` (a wordmark-only identity is a supported brand shape) yields its\n   * `WORDMARK`/`LOCKUP` master here.\n   *\n   * Surfaces MUST branch on this rather than assume they got what they asked\n   * for: a wordmark or lockup already CONTAINS the application name, so\n   * rendering it beside a name label duplicates the name, and squeezing a wide\n   * asset into a square icon slot letterboxes it.\n   */\n  logoComposition?: BrandAssetComposition;\n  /**\n   * The resolved mark is the SINGLE-COLOUR (`MONOCHROME`) asset and the UI is dark.\n   *\n   * A monochrome mark is one colour by definition, and the generated one is dark: on a dark shell it all but vanished\n   * (measured on Wonder Todos, which pins it for both themes). The colour is not the mark's identity — its shape is —\n   * so a surface draws it light on a dark UI. The colour mark is never touched: it has its own `DARK` variant.\n   */\n  markIsSingleColourOnDarkUi?: boolean;\n}\n\nexport interface UseBrandIdentityOptions {\n  /**\n   * Which brand composition the surface wants. Defaults to\n   * {@link BrandAssetComposition.SYMBOL} — the right choice for any surface that\n   * renders the application NAME as text beside the mark, because a `LOCKUP`\n   * already contains the name and would duplicate it.\n   */\n  composition?: BrandAssetComposition;\n  /** Asset purpose. Defaults to {@link BrandAssetPurpose.PRIMARY}. */\n  purpose?: BrandAssetPurpose;\n  /**\n   * PINS the mark variant instead of following the active UI theme — e.g.\n   * {@link BrandAssetTheme.MONOCHROME} for the single-colour mark, or\n   * {@link BrandAssetTheme.DEFAULT} to keep the colour mark on a dark shell.\n   *\n   * Omitted (the default) means ADAPTIVE: dark UI asks for `DARK`, light UI for\n   * `LIGHT`, both falling back through `DEFAULT` inside `resolveBrandAsset`.\n   */\n  theme?: BrandAssetTheme;\n  /**\n   * Whether the current organization's logo and product name may replace the application's (#2306, #2979). Defaults to\n   * `true`: inside the application, members see the organization's brand while it is in effect. A PUBLIC page passes\n   * `false`: it speaks for the application (its sign-up, its legal pages), and a signed-in visitor's organization does\n   * not rebrand it. The sign-in card brands a tenant through its own input, from the identification response.\n   */\n  includeOrganizationBrand?: boolean;\n}\n\n/**\n * @wildo_source:part:start saas.frontend.brand-identity facet:layer:frontend facet:audience:app-developer\n *\n * Reads the application's brand identity for a shell surface.\n *\n * Owns ONE decision every brand-rendering surface would otherwise re-derive:\n * how the active UI theme maps onto {@link BrandAssetTheme} (dark UI → `DARK`,\n * light UI → `LIGHT`), unless the caller PINS a variant via `options.theme`.\n * `resolveBrandAsset` then applies the framework's documented fallback chain, so\n * an app that generated only a default-theme mark still gets it in dark mode\n * instead of nothing.\n *\n * Must be used inside `ApplicationMainProvider` (it reads the application\n * config) and inside `UIProvider` (it reads the resolved dark-mode state).\n *\n * ## Two things a caller does not have to solve\n *\n * The MARK VARIANT follows the active UI theme by default — dark UI asks for the dark mark, light UI\n * for the light one, each falling back through the default. So an application that generated only a\n * default-theme mark still gets it in dark mode rather than nothing. Pin `options.theme` only when a\n * surface genuinely needs a fixed variant, such as a monochrome mark.\n *\n * WHOSE identity is rendered is decided here too, and it matters for any frontend that observes an\n * application rather than being one — a creation tool, a back office. Such a frontend declares\n * `shellIdentity` in its frontend configuration, and that identity WINS over the application config\n * it reads. Without that precedence the tool renders its customer's brand as its own, because there\n * is exactly one application-config endpoint and it belongs to the application.\n *\n * Inside the application, the CURRENT organization's logo replaces the application's mark, and its product\n * name the application's name when it set one, while that organization's custom branding is in effect (it\n * holds the custom-branding entitlement). A PUBLIC page (sign-up, legal pages, anything a visitor reaches without being a\n * member) speaks for the application, so it passes `{ includeOrganizationBrand: false }`: otherwise a\n * signed-in visitor's organization rebrands it. The framework's own public shell already does.\n *\n * @wildo_source:part:end saas.frontend.brand-identity\n */\nexport function useBrandIdentity(options: UseBrandIdentityOptions = {}): BrandIdentity {\n  const { composition = BrandAssetComposition.SYMBOL, purpose = BrandAssetPurpose.PRIMARY, theme, includeOrganizationBrand = true } = options;\n  const { appConfig } = useApplication();\n  const { isDark, shellIdentity, organizationLogoUrl, organizationProductName } = useUI();\n\n  // ── WHOSE identity is this? ────────────────────────────────────────────────\n  //\n  // A frontend that declares `shellIdentity` in its frontend configuration is\n  // saying \"I am not the application I talk to\" — a creation tool, a back\n  // office, anything observing an application rather than being one. Its\n  // identity WINS here, because the alternative is silently presenting the\n  // customer's brand as the tool's own.\n  //\n  // That is not hypothetical. There is exactly ONE application-config endpoint\n  // and it belongs to the application: the dev companion answers\n  // `GET /api/v1/application-config?frontendServiceName=application-creation-workbench`\n  // with `appIdentity.displayName: \"Wonder CRM\"` (measured 2026-08-31), so\n  // without this precedence the workbench's brand header reads as the managed\n  // application.\n  //\n  // The two halves are taken TOGETHER, never mixed. A shell that declared a name\n  // but no assets must render its name UNMARKED rather than borrowing the\n  // application's mark — a foreign logo beside your own name is worse than no\n  // logo, and it is the exact mismatch this field exists to prevent. So the\n  // assets are read from whichever side supplied the name.\n  //\n  // `appConfig` is non-optional on the context type and the provider only mounts\n  // past the bootstrap gate, so it is read directly; `appIdentity` keeps its\n  // optional read because the runtime payload has historically been treated as\n  // possibly-absent (see `ApplicationMainContext`'s own `appIdentity?.version`).\n  const brandAssets: RuntimeBrandAsset[] | undefined = shellIdentity\n    ? shellIdentity.brandAssets\n    : appConfig.brandAssets;\n  const name = shellIdentity\n    ? shellIdentity.name\n    : (appConfig.appIdentity ? applicationDisplayName(appConfig.appIdentity) : '');\n\n  const resolved = useMemo(() => {\n    if (!brandAssets?.length) return undefined;\n    return resolveBrandAsset(brandAssets, {\n      composition,\n      // An explicit `theme` pins the variant (monochrome, or a forced side).\n      // Otherwise ADAPTIVE: LIGHT rather than DEFAULT for a light UI, because\n      // `resolveBrandAsset` tries the requested theme first and falls back to\n      // DEFAULT on its own — so asking for LIGHT strictly adds the ability to\n      // honor a light-specific asset, while asking for DEFAULT could never\n      // reach one.\n      theme: theme ?? (isDark ? BrandAssetTheme.DARK : BrandAssetTheme.LIGHT),\n      purpose,\n    });\n  }, [brandAssets, composition, purpose, theme, isDark]);\n\n  /*\n   * The current organization's branding while it is in effect (#2306, #2979), inside the application and never inside\n   * a shell that presents its own identity:\n   * - its product name replaces the application's name;\n   * - its uploaded logo replaces the application's mark. It is one image, with no composition or theme variants, so\n   *   neither is claimed for it. It is served by the API, another origin, so it is shown through an object URL the\n   *   application's image policy admits (`useDisplayableImageUrl`); while that loads the name stands alone.\n   */\n  const organizationBrand = includeOrganizationBrand && !shellIdentity;\n  const organizationLogo = useDisplayableImageUrl(organizationBrand ? organizationLogoUrl : undefined);\n  const brandName = (organizationBrand && organizationProductName) || name;\n  if (organizationBrand && organizationLogoUrl) {\n    return { name: brandName, logoUrl: organizationLogo, logoComposition: undefined, markIsSingleColourOnDarkUi: false };\n  }\n  return {\n    name: brandName,\n    logoUrl: resolved?.url,\n    logoComposition: resolved?.composition,\n    markIsSingleColourOnDarkUi: resolved?.theme === BrandAssetTheme.MONOCHROME && isDark,\n  };\n}\n"]}

package/dist/esm/core/branding/useBrandPresentation.d.ts

@@ -24,6 +24,11 @@ export interface BrandPresentation {
      * it intrinsic width rather than a square slot, or it letterboxes.
      */
     markCarriesName: boolean;
+    /**
+     * Draw the mark LIGHT: it is the single-colour mark on a dark UI (`BrandIdentity.markIsSingleColourOnDarkUi`). A
+     * surface renders it as a light silhouette (e.g. `brightness-0 invert`) rather than as the dark asset it is.
+     */
+    drawMarkLight: boolean;
     /** Nothing identifiable at all — no usable mark and no name. Render no identity affordance. */
     isEmpty: boolean;
     /**

package/dist/esm/core/branding/useBrandPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandPresentation.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,CAyB3F"}
+{"version":3,"file":"useBrandPresentation.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,CA0B3F"}

package/dist/esm/core/branding/useBrandPresentation.js

@@ -32,6 +32,7 @@ export function useBrandPresentation(identity) {
         logoUrl: hasMark ? logoUrl : undefined,
         hasMark,
         markCarriesName,
+        drawMarkLight: hasMark && identity?.markIsSingleColourOnDarkUi === true,
         isEmpty: !hasMark && name.length === 0,
         onMarkError,
     };

package/dist/esm/core/branding/useBrandPresentation.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandPresentation.js","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAuC9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmC;IACtE,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAElC;;;OAGG;IACH,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;IAChD,MAAM,eAAe,GACnB,OAAO,IAAI,QAAQ,EAAE,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,MAAM,CAAC;IAElH,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtC,OAAO;QACP,eAAe;QACf,OAAO,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import { useCallback, useEffect, useState } from 'react';\n\nimport { BrandAssetComposition } from '@wildo-ai/saas-models';\n\nimport type { BrandIdentity } from './useBrandIdentity';\n\n/**\n * A brand identity, reduced to the decisions every surface that RENDERS one must take.\n *\n * {@link BrandIdentity} answers \"what did the brand resolve to\". This answers \"what may I therefore\n * draw\", which is a different question with four traps in it — and each trap is a visible defect\n * rather than a crash, so nothing fails loudly when a surface gets one wrong.\n */\nexport interface BrandPresentation {\n  /** The application (or shell) name. May be empty only if the identity itself carries none. */\n  name: string;\n  /** The mark's URL — present only when {@link hasMark} is true. */\n  logoUrl?: string;\n  /**\n   * A mark resolved AND has not failed to load. Distinct from `logoUrl !== undefined`: a URL that\n   * 404s is a resolved mark that must not be drawn.\n   */\n  hasMark: boolean;\n  /**\n   * The resolved mark CONTAINS the name — a `WORDMARK` or `LOCKUP`, which the resolver's last\n   * fallback rung can return for an application that generated no `SYMBOL`.\n   *\n   * Surfaces must not print the name beside such a mark: it would appear twice. They must also give\n   * it intrinsic width rather than a square slot, or it letterboxes.\n   */\n  markCarriesName: boolean;\n  /** Nothing identifiable at all — no usable mark and no name. Render no identity affordance. */\n  isEmpty: boolean;\n  /**\n   * Wire to the `<img>`'s `onError`. A brand asset URL comes from configuration and can point at a\n   * file that is not there; without this the surface renders a browser broken-image glyph where the\n   * product identity should be.\n   */\n  onMarkError: () => void;\n}\n\n/**\n * Turns a resolved {@link BrandIdentity} into the presentation decisions a surface needs.\n *\n * ## Why this is shared rather than re-derived\n *\n * The sidebar's `BRAND_HEADER` worked these out first, and every one of them is a rule about the\n * DATA rather than about a sidebar: a wordmark contains the name; a failed load must degrade to the\n * no-mark presentation instead of a broken image; the failure latch must reset when the URL changes\n * or a light/dark switch leaves the surface permanently markless; an identity with neither mark nor\n * name must render nothing rather than an empty click target.\n *\n * A second surface presenting a brand needs the same four answers, so they live here once. What is\n * NOT here is anything about layout — a rail collapses, a login page does not — because that is the\n * part that genuinely differs per surface.\n */\nexport function useBrandPresentation(identity: BrandIdentity | undefined): BrandPresentation {\n  const logoUrl = identity?.logoUrl;\n  const name = identity?.name ?? '';\n\n  /*\n   * Reset on every URL change, not only on mount. A light/dark switch resolves a DIFFERENT asset,\n   * and a latch left set from the previous one would suppress a mark that loads perfectly.\n   */\n  const [markFailed, setMarkFailed] = useState(false);\n  useEffect(() => setMarkFailed(false), [logoUrl]);\n\n  const onMarkError = useCallback(() => setMarkFailed(true), []);\n\n  const hasMark = Boolean(logoUrl) && !markFailed;\n  const markCarriesName =\n    hasMark && identity?.logoComposition !== undefined && identity.logoComposition !== BrandAssetComposition.SYMBOL;\n\n  return {\n    name,\n    logoUrl: hasMark ? logoUrl : undefined,\n    hasMark,\n    markCarriesName,\n    isEmpty: !hasMark && name.length === 0,\n    onMarkError,\n  };\n}\n"]}
+{"version":3,"file":"useBrandPresentation.js","sourceRoot":"","sources":["../../../../../src/core/branding/useBrandPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AA4C9D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmC;IACtE,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IAElC;;;OAGG;IACH,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;IAChD,MAAM,eAAe,GACnB,OAAO,IAAI,QAAQ,EAAE,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,MAAM,CAAC;IAElH,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtC,OAAO;QACP,eAAe;QACf,aAAa,EAAE,OAAO,IAAI,QAAQ,EAAE,0BAA0B,KAAK,IAAI;QACvE,OAAO,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import { useCallback, useEffect, useState } from 'react';\n\nimport { BrandAssetComposition } from '@wildo-ai/saas-models';\n\nimport type { BrandIdentity } from './useBrandIdentity';\n\n/**\n * A brand identity, reduced to the decisions every surface that RENDERS one must take.\n *\n * {@link BrandIdentity} answers \"what did the brand resolve to\". This answers \"what may I therefore\n * draw\", which is a different question with four traps in it — and each trap is a visible defect\n * rather than a crash, so nothing fails loudly when a surface gets one wrong.\n */\nexport interface BrandPresentation {\n  /** The application (or shell) name. May be empty only if the identity itself carries none. */\n  name: string;\n  /** The mark's URL — present only when {@link hasMark} is true. */\n  logoUrl?: string;\n  /**\n   * A mark resolved AND has not failed to load. Distinct from `logoUrl !== undefined`: a URL that\n   * 404s is a resolved mark that must not be drawn.\n   */\n  hasMark: boolean;\n  /**\n   * The resolved mark CONTAINS the name — a `WORDMARK` or `LOCKUP`, which the resolver's last\n   * fallback rung can return for an application that generated no `SYMBOL`.\n   *\n   * Surfaces must not print the name beside such a mark: it would appear twice. They must also give\n   * it intrinsic width rather than a square slot, or it letterboxes.\n   */\n  markCarriesName: boolean;\n  /**\n   * Draw the mark LIGHT: it is the single-colour mark on a dark UI (`BrandIdentity.markIsSingleColourOnDarkUi`). A\n   * surface renders it as a light silhouette (e.g. `brightness-0 invert`) rather than as the dark asset it is.\n   */\n  drawMarkLight: boolean;\n  /** Nothing identifiable at all — no usable mark and no name. Render no identity affordance. */\n  isEmpty: boolean;\n  /**\n   * Wire to the `<img>`'s `onError`. A brand asset URL comes from configuration and can point at a\n   * file that is not there; without this the surface renders a browser broken-image glyph where the\n   * product identity should be.\n   */\n  onMarkError: () => void;\n}\n\n/**\n * Turns a resolved {@link BrandIdentity} into the presentation decisions a surface needs.\n *\n * ## Why this is shared rather than re-derived\n *\n * The sidebar's `BRAND_HEADER` worked these out first, and every one of them is a rule about the\n * DATA rather than about a sidebar: a wordmark contains the name; a failed load must degrade to the\n * no-mark presentation instead of a broken image; the failure latch must reset when the URL changes\n * or a light/dark switch leaves the surface permanently markless; an identity with neither mark nor\n * name must render nothing rather than an empty click target.\n *\n * A second surface presenting a brand needs the same four answers, so they live here once. What is\n * NOT here is anything about layout — a rail collapses, a login page does not — because that is the\n * part that genuinely differs per surface.\n */\nexport function useBrandPresentation(identity: BrandIdentity | undefined): BrandPresentation {\n  const logoUrl = identity?.logoUrl;\n  const name = identity?.name ?? '';\n\n  /*\n   * Reset on every URL change, not only on mount. A light/dark switch resolves a DIFFERENT asset,\n   * and a latch left set from the previous one would suppress a mark that loads perfectly.\n   */\n  const [markFailed, setMarkFailed] = useState(false);\n  useEffect(() => setMarkFailed(false), [logoUrl]);\n\n  const onMarkError = useCallback(() => setMarkFailed(true), []);\n\n  const hasMark = Boolean(logoUrl) && !markFailed;\n  const markCarriesName =\n    hasMark && identity?.logoComposition !== undefined && identity.logoComposition !== BrandAssetComposition.SYMBOL;\n\n  return {\n    name,\n    logoUrl: hasMark ? logoUrl : undefined,\n    hasMark,\n    markCarriesName,\n    drawMarkLight: hasMark && identity?.markIsSingleColourOnDarkUi === true,\n    isEmpty: !hasMark && name.length === 0,\n    onMarkError,\n  };\n}\n"]}

package/dist/esm/core/branding/useDisplayableImageUrl.d.ts

@@ -0,0 +1,4 @@
+/** Whether an address can be loaded as an image under the application's policy without being fetched first. */
+export declare function isDirectlyDisplayableImageUrl(url: string, pageOrigin: string): boolean;
+export declare function useDisplayableImageUrl(url: string | undefined): string | undefined;
+//# sourceMappingURL=useDisplayableImageUrl.d.ts.map

package/dist/esm/core/branding/useDisplayableImageUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDisplayableImageUrl.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useDisplayableImageUrl.ts"],"names":[],"mappings":"AAoBA,+GAA+G;AAC/G,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAOtF;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CA+BlF"}

package/dist/esm/core/branding/useDisplayableImageUrl.js

@@ -0,0 +1,66 @@
+/**
+ * An image address the application's Content Security Policy lets an `<img>` (or a tab icon) load (#2979).
+ *
+ * The application's policy admits images from its own origin, `data:` and `blob:` only (`img-src 'self' data: blob:`),
+ * while its API, a different origin, is admitted to `connect-src`. So an image served by the API (an organization's
+ * uploaded logo or favicon) cannot be an `<img src>` once the policy is enforced, and widening `img-src` to fit would
+ * trust every image of that origin inside the signed-in application. This takes the route the framework already
+ * takes for uploaded files: fetch the bytes, show them as a `blob:` object URL.
+ *
+ * One rule, by the address alone, so a surface never has to know where an image comes from:
+ * - same-origin, relative, `data:` and `blob:` addresses are returned as they are (the application's own brand assets);
+ * - any other address is fetched through the application's HTTP client and shown as an object URL, revoked when the
+ *   address changes or the surface unmounts.
+ *
+ * `undefined` while a fetched image loads, or when the fetch fails: the surface shows what it shows with no image (the
+ * name alone), never a broken one.
+ */
+import { useEffect, useState } from 'react';
+import { useApplication } from '../../core/runtime/useApplication.js';
+/** Whether an address can be loaded as an image under the application's policy without being fetched first. */
+export function isDirectlyDisplayableImageUrl(url, pageOrigin) {
+    if (url.startsWith('data:') || url.startsWith('blob:'))
+        return true;
+    try {
+        return new URL(url, pageOrigin).origin === pageOrigin;
+    }
+    catch {
+        return false;
+    }
+}
+export function useDisplayableImageUrl(url) {
+    const { httpClient } = useApplication();
+    const direct = url !== undefined && isDirectlyDisplayableImageUrl(url, window.location.origin);
+    const [objectUrl, setObjectUrl] = useState(undefined);
+    useEffect(() => {
+        setObjectUrl(undefined);
+        if (url === undefined || direct)
+            return undefined;
+        let cancelled = false;
+        let created;
+        const controller = new AbortController();
+        httpClient
+            // Silent: an image that cannot be shown is shown as no image, never as an error toast.
+            .fetchFileBlob(url, { signal: controller.signal, silent: true })
+            .then((blob) => {
+            if (cancelled)
+                return;
+            created = URL.createObjectURL(blob);
+            setObjectUrl(created);
+        })
+            .catch(() => {
+            if (!cancelled)
+                setObjectUrl(undefined);
+        });
+        return () => {
+            cancelled = true;
+            controller.abort();
+            if (created)
+                URL.revokeObjectURL(created);
+        };
+    }, [url, direct, httpClient]);
+    if (url === undefined)
+        return undefined;
+    return direct ? url : objectUrl;
+}
+//# sourceMappingURL=useDisplayableImageUrl.js.map

package/dist/esm/core/branding/useDisplayableImageUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDisplayableImageUrl.js","sourceRoot":"","sources":["../../../../../src/core/branding/useDisplayableImageUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,+GAA+G;AAC/G,MAAM,UAAU,6BAA6B,CAAC,GAAW,EAAE,UAAkB;IAC3E,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAuB;IAC5D,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,IAAI,6BAA6B,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/F,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAqB,SAAS,CAAC,CAAC;IAE1E,SAAS,CAAC,GAAG,EAAE;QACb,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM;YAAE,OAAO,SAAS,CAAC;QAClD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,OAA2B,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,UAAU;YACR,uFAAuF;aACtF,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aAC/D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,SAAS;gBAAE,OAAO;YACtB,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACpC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,OAAO;gBAAE,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAE9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAClC,CAAC","sourcesContent":["/**\n * An image address the application's Content Security Policy lets an `<img>` (or a tab icon) load (#2979).\n *\n * The application's policy admits images from its own origin, `data:` and `blob:` only (`img-src 'self' data: blob:`),\n * while its API, a different origin, is admitted to `connect-src`. So an image served by the API (an organization's\n * uploaded logo or favicon) cannot be an `<img src>` once the policy is enforced, and widening `img-src` to fit would\n * trust every image of that origin inside the signed-in application. This takes the route the framework already\n * takes for uploaded files: fetch the bytes, show them as a `blob:` object URL.\n *\n * One rule, by the address alone, so a surface never has to know where an image comes from:\n * - same-origin, relative, `data:` and `blob:` addresses are returned as they are (the application's own brand assets);\n * - any other address is fetched through the application's HTTP client and shown as an object URL, revoked when the\n *   address changes or the surface unmounts.\n *\n * `undefined` while a fetched image loads, or when the fetch fails: the surface shows what it shows with no image (the\n * name alone), never a broken one.\n */\nimport { useEffect, useState } from 'react';\nimport { useApplication } from '~wildo-frontend-lib/core/runtime/useApplication';\n\n/** Whether an address can be loaded as an image under the application's policy without being fetched first. */\nexport function isDirectlyDisplayableImageUrl(url: string, pageOrigin: string): boolean {\n  if (url.startsWith('data:') || url.startsWith('blob:')) return true;\n  try {\n    return new URL(url, pageOrigin).origin === pageOrigin;\n  } catch {\n    return false;\n  }\n}\n\nexport function useDisplayableImageUrl(url: string | undefined): string | undefined {\n  const { httpClient } = useApplication();\n  const direct = url !== undefined && isDirectlyDisplayableImageUrl(url, window.location.origin);\n  const [objectUrl, setObjectUrl] = useState<string | undefined>(undefined);\n\n  useEffect(() => {\n    setObjectUrl(undefined);\n    if (url === undefined || direct) return undefined;\n    let cancelled = false;\n    let created: string | undefined;\n    const controller = new AbortController();\n    httpClient\n      // Silent: an image that cannot be shown is shown as no image, never as an error toast.\n      .fetchFileBlob(url, { signal: controller.signal, silent: true })\n      .then((blob) => {\n        if (cancelled) return;\n        created = URL.createObjectURL(blob);\n        setObjectUrl(created);\n      })\n      .catch(() => {\n        if (!cancelled) setObjectUrl(undefined);\n      });\n    return () => {\n      cancelled = true;\n      controller.abort();\n      if (created) URL.revokeObjectURL(created);\n    };\n  }, [url, direct, httpClient]);\n\n  if (url === undefined) return undefined;\n  return direct ? url : objectUrl;\n}\n"]}

package/dist/esm/core/branding/useOrganizationDocumentTitle.d.ts

@@ -0,0 +1,2 @@
+export declare function useOrganizationDocumentTitle(): void;
+//# sourceMappingURL=useOrganizationDocumentTitle.d.ts.map

package/dist/esm/core/branding/useOrganizationDocumentTitle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useOrganizationDocumentTitle.d.ts","sourceRoot":"","sources":["../../../../../src/core/branding/useOrganizationDocumentTitle.ts"],"names":[],"mappings":"AAYA,wBAAgB,4BAA4B,IAAI,IAAI,CAUnD"}

package/dist/esm/core/branding/useOrganizationDocumentTitle.js

@@ -0,0 +1,23 @@
+/**
+ * The browser title of the signed-in shell names the organization's product while its branding is in effect (#2979).
+ *
+ * Called by the signed-in shell's main container only, so a public page (sign-up, legal pages) never takes the
+ * organization's name: those speak for the application. While the organization has a product name, the title is that
+ * name; when it has none, its plan lapses, or the shell unmounts, the title it replaced is put back.
+ *
+ * Reads the UI context optionally, so a host or a test that mounts the container without a `UIProvider` changes nothing.
+ */
+import { useContext, useEffect } from 'react';
+import { UIContext } from '../../core/ui/UIContext.js';
+export function useOrganizationDocumentTitle() {
+    const ui = useContext(UIContext);
+    const productName = ui && !ui.shellIdentity ? ui.organizationProductName : undefined;
+    useEffect(() => {
+        if (!productName)
+            return undefined;
+        const previous = document.title;
+        document.title = productName;
+        return () => { document.title = previous; };
+    }, [productName]);
+}
+//# sourceMappingURL=useOrganizationDocumentTitle.js.map

package/dist/esm/core/branding/useOrganizationDocumentTitle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useOrganizationDocumentTitle.js","sourceRoot":"","sources":["../../../../../src/core/branding/useOrganizationDocumentTitle.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAElE,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;QAChC,QAAQ,CAAC,KAAK,GAAG,WAAW,CAAC;QAC7B,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;AACpB,CAAC","sourcesContent":["/**\n * The browser title of the signed-in shell names the organization's product while its branding is in effect (#2979).\n *\n * Called by the signed-in shell's main container only, so a public page (sign-up, legal pages) never takes the\n * organization's name: those speak for the application. While the organization has a product name, the title is that\n * name; when it has none, its plan lapses, or the shell unmounts, the title it replaced is put back.\n *\n * Reads the UI context optionally, so a host or a test that mounts the container without a `UIProvider` changes nothing.\n */\nimport { useContext, useEffect } from 'react';\nimport { UIContext } from '~wildo-frontend-lib/core/ui/UIContext';\n\nexport function useOrganizationDocumentTitle(): void {\n  const ui = useContext(UIContext);\n  const productName = ui && !ui.shellIdentity ? ui.organizationProductName : undefined;\n\n  useEffect(() => {\n    if (!productName) return undefined;\n    const previous = document.title;\n    document.title = productName;\n    return () => { document.title = previous; };\n  }, [productName]);\n}\n"]}

package/dist/esm/core/commons/save-blob-as-file.frontend.utils.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Hand bytes the application already holds to the browser as a downloaded file.
+ *
+ * For a download that goes through the authenticated http client, or one the page composed itself (a CSV, a dataset
+ * returned in a response body): a plain `<a href>` to the API would be an UNAUTHENTICATED request, because the access
+ * token lives in the client and not in a cookie. The object URL is revoked straight after the click, even when the
+ * click throws, so the file is not pinned in memory for the life of the document.
+ */
+export declare function saveBlobAsFile(blob: Blob, filename: string): void;
+/**
+ * Click a temporary download link to `href` under `filename`, and take the link out of the page again even when the
+ * click throws. For an object URL the caller already holds and keeps (a preview that is still on screen); a caller
+ * holding only bytes uses `saveBlobAsFile`, which also creates and revokes the URL.
+ */
+export declare function clickDownloadLink(href: string, filename: string): void;
+//# sourceMappingURL=save-blob-as-file.frontend.utils.d.ts.map

package/dist/esm/core/commons/save-blob-as-file.frontend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-blob-as-file.frontend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/core/commons/save-blob-as-file.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAOjE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAUtE"}

package/dist/esm/core/commons/save-blob-as-file.frontend.utils.js

@@ -0,0 +1,35 @@
+/**
+ * Hand bytes the application already holds to the browser as a downloaded file.
+ *
+ * For a download that goes through the authenticated http client, or one the page composed itself (a CSV, a dataset
+ * returned in a response body): a plain `<a href>` to the API would be an UNAUTHENTICATED request, because the access
+ * token lives in the client and not in a cookie. The object URL is revoked straight after the click, even when the
+ * click throws, so the file is not pinned in memory for the life of the document.
+ */
+export function saveBlobAsFile(blob, filename) {
+    const objectUrl = URL.createObjectURL(blob);
+    try {
+        clickDownloadLink(objectUrl, filename);
+    }
+    finally {
+        URL.revokeObjectURL(objectUrl);
+    }
+}
+/**
+ * Click a temporary download link to `href` under `filename`, and take the link out of the page again even when the
+ * click throws. For an object URL the caller already holds and keeps (a preview that is still on screen); a caller
+ * holding only bytes uses `saveBlobAsFile`, which also creates and revokes the URL.
+ */
+export function clickDownloadLink(href, filename) {
+    const link = document.createElement('a');
+    link.href = href;
+    link.download = filename;
+    document.body.appendChild(link);
+    try {
+        link.click();
+    }
+    finally {
+        link.remove();
+    }
+}
+//# sourceMappingURL=save-blob-as-file.frontend.utils.js.map

package/dist/esm/core/commons/save-blob-as-file.frontend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-blob-as-file.frontend.utils.js","sourceRoot":"","sources":["../../../../../src/core/commons/save-blob-as-file.frontend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAU,EAAE,QAAgB;IACzD,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,QAAgB;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;AACH,CAAC","sourcesContent":["/**\n * Hand bytes the application already holds to the browser as a downloaded file.\n *\n * For a download that goes through the authenticated http client, or one the page composed itself (a CSV, a dataset\n * returned in a response body): a plain `<a href>` to the API would be an UNAUTHENTICATED request, because the access\n * token lives in the client and not in a cookie. The object URL is revoked straight after the click, even when the\n * click throws, so the file is not pinned in memory for the life of the document.\n */\nexport function saveBlobAsFile(blob: Blob, filename: string): void {\n  const objectUrl = URL.createObjectURL(blob);\n  try {\n    clickDownloadLink(objectUrl, filename);\n  } finally {\n    URL.revokeObjectURL(objectUrl);\n  }\n}\n\n/**\n * Click a temporary download link to `href` under `filename`, and take the link out of the page again even when the\n * click throws. For an object URL the caller already holds and keeps (a preview that is still on screen); a caller\n * holding only bytes uses `saveBlobAsFile`, which also creates and revokes the URL.\n */\nexport function clickDownloadLink(href: string, filename: string): void {\n  const link = document.createElement('a');\n  link.href = href;\n  link.download = filename;\n  document.body.appendChild(link);\n  try {\n    link.click();\n  } finally {\n    link.remove();\n  }\n}\n"]}

package/dist/esm/core/components-registry/assert-registry-completeness.frontend.helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assert-registry-completeness.frontend.helper.d.ts","sourceRoot":"","sources":["../../../../../src/core/components-registry/assert-registry-completeness.frontend.helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AA6H5E,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,0BAA0B,CAoBxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACnD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,0BAA0B,CAwB7B"}
+{"version":3,"file":"assert-registry-completeness.frontend.helper.d.ts","sourceRoot":"","sources":["../../../../../src/core/components-registry/assert-registry-completeness.frontend.helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAqI5E,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,0BAA0B,CAoBxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,CAAC,EAAE;IACnD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,0BAA0B,CAwB7B"}

package/dist/esm/core/components-registry/assert-registry-completeness.frontend.helper.js

@@ -48,6 +48,10 @@ const KNOWN_NON_REGISTERED_COMPONENT_TYPES = new Set([
     FrontendComponentType.LOW_LEVEL_AI_EXECUTION_PLAN,
     FrontendComponentType.LOW_LEVEL_AI_TASK_DETAIL,
     FrontendComponentType.LOW_LEVEL_AI_TASK_MEMORY,
+    // One run's consumption (#2528): drawn in place by `FlowsActors_ExecutionUsage`, the flows-actors shells' shape.
+    FrontendComponentType.LOW_LEVEL_AI_EXECUTION_USAGE,
+    // A graph drawn read-only from a GraphView (#2529): composed in place by its hosts, behind the flows-actors graph door.
+    FrontendComponentType.LOW_LEVEL_AI_GRAPH_VIEWER,
     FrontendComponentType.LOW_LEVEL_AI_APPROVAL,
     FrontendComponentType.LOW_LEVEL_AI_DECISION,
     FrontendComponentType.LOW_LEVEL_AI_EXECUTION_STREAM,
@@ -110,6 +114,10 @@ const KNOWN_NON_REGISTERED_COMPONENT_TYPES = new Set([
     FrontendComponentType.APP_LAYOUTS_BILLING_SETTINGS,
     FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS,
     FrontendComponentType.APP_LAYOUTS_AGENT_WORK_OVERRIDE_RATE_SETTINGS,
+    FrontendComponentType.APP_LAYOUTS_AUTONOMOUS_AGENTS_SETTINGS,
+    FrontendComponentType.APP_LAYOUTS_MODEL_COST_BREAKDOWN_SETTINGS,
+    FrontendComponentType.APP_LAYOUTS_REPRESENTATIVE_ACTIVITY_SETTINGS,
+    FrontendComponentType.APP_LAYOUTS_AGENT_WORK_EVALUATION_EXPORT_SETTINGS,
     // (a) i18n-bundle-only — SurfaceErrorBoundary is rendered directly by `Surface` when the surface
     // policy asks for a boundary, never resolved through the registry. The enum entry exists so the
     // fallback's words are addressable labels.

package/dist/esm/core/components-registry/assert-registry-completeness.frontend.helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"assert-registry-completeness.frontend.helper.js","sourceRoot":"","sources":["../../../../../src/core/components-registry/assert-registry-completeness.frontend.helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,oCAAoC,GAAuC,IAAI,GAAG,CAAC;IACvF,+EAA+E;IAC/E,gFAAgF;IAChF,qBAAqB,CAAC,mCAAmC;IACzD,qEAAqE;IACrE,qBAAqB,CAAC,2BAA2B;IAEjD,sHAAsH;IACtH,qBAAqB,CAAC,sBAAsB;IAC5C,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,kBAAkB;IACxC,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,wBAAwB;IAC9C,qBAAqB,CAAC,wBAAwB;IAC9C,qBAAqB,CAAC,qBAAqB;IAC3C,qBAAqB,CAAC,qBAAqB;IAC3C,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,yBAAyB;IAE/C;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CAAC,kBAAkB;IACxC,qBAAqB,CAAC,uBAAuB;IAC7C,qBAAqB,CAAC,aAAa;IACnC,qBAAqB,CAAC,gBAAgB;IACtC,qBAAqB,CAAC,cAAc;IACpC,qBAAqB,CAAC,eAAe;IACrC,qBAAqB,CAAC,qBAAqB;IAC3C,qBAAqB,CAAC,cAAc;IACpC,qBAAqB,CAAC,aAAa;IACnC,qBAAqB,CAAC,eAAe;IACrC,qBAAqB,CAAC,wBAAwB;IAE9C,yGAAyG;IACzG,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,6BAA6B;IAEnD,iFAAiF;IACjF,qBAAqB,CAAC,kCAAkC;IACxD,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,wBAAwB;IAE9C,6EAA6E;IAC7E,qBAAqB,CAAC,0BAA0B;IAChD,qBAAqB,CAAC,sBAAsB;IAC5C,qBAAqB,CAAC,4BAA4B;IAClD,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,0BAA0B;IAChD,qBAAqB,CAAC,0BAA0B;IAEhD,yEAAyE;IACzE,0EAA0E;IAC1E,gEAAgE;IAChE,2EAA2E;IAC3E,2EAA2E;IAC3E,kBAAkB;IAClB,qBAAqB,CAAC,0BAA0B;IAChD,qBAAqB,CAAC,6BAA6B;IACnD,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,+EAA+E;IAC/E,qBAAqB,CAAC,wBAAwB;IAC9C,qBAAqB,CAAC,+BAA+B;IACrD,qBAAqB,CAAC,gCAAgC;IACtD,qBAAqB,CAAC,4BAA4B;IAClD,qBAAqB,CAAC,uCAAuC;IAC7D,qBAAqB,CAAC,6CAA6C;IAEnE,iGAAiG;IACjG,gGAAgG;IAChG,2CAA2C;IAC3C,qBAAqB,CAAC,kCAAkC;IAExD,iEAAiE;IACjE,sEAAsE;IACtE,yEAAyE;IACzE,oEAAoE;IACpE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,sBAAsB;IACtB,qBAAqB,CAAC,gCAAgC;IACtD,qBAAqB,CAAC,mCAAmC;CAC1D,CAAC,CAAC;AASH;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAA4B,CAAC;IAClF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,oCAAoC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7D,IAAI,wBAAwB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,eAAe,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,eAAe;QACf,eAAe,EAAE,oCAAoC,CAAC,IAAI;QAC1D,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAM1C;IACC,MAAM,MAAM,GAAG,2BAA2B,EAAE,CAAC;IAE7C,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GACX,yDAAyD,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG;QACjF,+DAA+D;QAC/D,qBAAqB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACzE,2CAA2C;QAC3C,gGAAgG;QAChG,sEAAsE;QACtE,gFAAgF;QAChF,+EAA+E,CAAC;IAElF,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,aAAa,CAAC;IACxF,IAAI,OAAO,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Tier-1 Registration Completeness Check\n *\n * Validates that every `FrontendComponentType` value that should have a\n * registered preset (Tier-1 — DI/registry-resolved) actually has one.\n *\n * Tier-2 / framework-internal / dispatcher / i18n-bundle-only slots are\n * explicitly deny-listed below. Any new addition to the enum that does\n * NOT belong on that list MUST be registered, otherwise this check fails.\n *\n * See `.cursor/plans/compound-component-system.md` Section 15 for the\n * full Tier-1 vs Tier-2 model.\n */\n\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { ComponentRegistryService } from './component-registry.frontend.service';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\n\n/**\n * Enum entries that intentionally have NO registered preset.\n *\n * Each entry MUST have a one-line justification explaining why it is not\n * registered. Categories:\n *\n *   (a) i18n-bundle-only — exists for `useI18n({ component })` lookup\n *       but is rendered via direct composition, not via `resolve()`.\n *   (b) framework-internal — the framework ships the implementation, so no\n *       preset is registered and this check must not demand one. It does NOT\n *       mean unswappable: a slot in this category may still consult the\n *       registry first and fall back to its built-in (see the guidance\n *       renderers below). Read each entry's own justification.\n *   (c) deprecated — superseded by another slot, kept only for migration.\n *   (d) dispatcher — meta-slot that resolves to one of several concrete\n *       slots at render time (HIGH_LEVEL_VIEWS_COMPOSITE etc.).\n *   (e) orphan — historical leftover, kept on the enum for back-compat\n *       of i18n keys but no longer wired to any wrapper.\n */\nconst KNOWN_NON_REGISTERED_COMPONENT_TYPES: ReadonlySet<FrontendComponentType> = new Set([\n  // (a) i18n-bundle-only — ContentSectionContainer uses direct composition. (The\n  // SECTION / GROUP / LEGEND slots are now registered ContentSection primitives.)\n  FrontendComponentType.LOW_LEVEL_CONTENT_SECTION_CONTAINER,\n  // (a) i18n-bundle-only — used by OverlayContainer direct composition\n  FrontendComponentType.LOW_LEVEL_OVERLAY_CONTAINER,\n\n  // (b) framework-internal — Flows-Actors orchestration shells (engine/saas-frontend-lib/src/components/flows-actors/*)\n  FrontendComponentType.LOW_LEVEL_AI_FLOW_NODE,\n  FrontendComponentType.LOW_LEVEL_AI_FLOW_EXECUTION,\n  FrontendComponentType.LOW_LEVEL_AI_SYSTEM_CATALOG,\n  FrontendComponentType.LOW_LEVEL_AI_ACTOR,\n  FrontendComponentType.LOW_LEVEL_AI_EXECUTION_PLAN,\n  FrontendComponentType.LOW_LEVEL_AI_TASK_DETAIL,\n  FrontendComponentType.LOW_LEVEL_AI_TASK_MEMORY,\n  FrontendComponentType.LOW_LEVEL_AI_APPROVAL,\n  FrontendComponentType.LOW_LEVEL_AI_DECISION,\n  FrontendComponentType.LOW_LEVEL_AI_EXECUTION_STREAM,\n  FrontendComponentType.LOW_LEVEL_AI_ARTIFACT_BROWSER,\n  FrontendComponentType.LOW_LEVEL_AI_AGENT_CONFIG,\n\n  /**\n   * (b) framework-internal — Guidance renderers\n   * (`engine/saas-frontend-lib/src/core/guidance/renderers/*`).\n   *\n   * Deny-listed because the ENGINE registers no preset for them: `GuidanceRenderer` ships working\n   * built-in implementations and falls back to them. That is why they belong here and why the\n   * check must not demand a registration.\n   *\n   * They are NOT unswappable, and this entry used to say they were. `GuidanceRenderer` resolves\n   * each element type through `GUIDANCE_ELEMENT_COMPONENT_TYPE` against this registry BEFORE its\n   * built-in map, so an application that registers a preset under `CorePresetNames.DEFAULT` for any\n   * of these types replaces that renderer — which is what the frontend-component specifications for\n   * these slots have always advertised.\n   */\n  FrontendComponentType.GUIDANCE_CHECKLIST,\n  FrontendComponentType.GUIDANCE_CHECKLIST_ITEM,\n  FrontendComponentType.GUIDANCE_TOUR,\n  FrontendComponentType.GUIDANCE_TOOLTIP,\n  FrontendComponentType.GUIDANCE_MODAL,\n  FrontendComponentType.GUIDANCE_BANNER,\n  FrontendComponentType.GUIDANCE_ANNOUNCEMENT,\n  FrontendComponentType.GUIDANCE_BADGE,\n  FrontendComponentType.GUIDANCE_CARD,\n  FrontendComponentType.GUIDANCE_SURVEY,\n  FrontendComponentType.GUIDANCE_ONBOARDING_VIEW,\n\n  // (b) framework-internal — Progression renderers (engine/saas-frontend-lib/src/components/progression/*)\n  FrontendComponentType.PROGRESSION_MILESTONE_TRACKER,\n  FrontendComponentType.PROGRESSION_ACHIEVEMENT_BADGE,\n\n  // (b) framework-internal — Lifecycle renderers (composed directly in app shells)\n  FrontendComponentType.LIFECYCLE_HOME_ACTIVATION_PROGRESS,\n  FrontendComponentType.LIFECYCLE_HOME_WELCOME_BACK,\n  FrontendComponentType.LIFECYCLE_HOME_DASHBOARD,\n\n  // (d) dispatcher — meta-slots that resolve to a concrete view at render time\n  FrontendComponentType.HIGH_LEVEL_VIEWS_COMPOSITE,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_CHART,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_FULL_CUSTOM,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_FLOWS_ACTORS,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_EXECUTION,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_NOT_FOUND,\n\n  // (b) framework-internal — H-8: app-owned shell slots. The enum entry is\n  // kept so that (1) host apps can register their own preset implementation\n  // for the slot if/when they need it, and (2) i18n labels remain\n  // addressable. The framework itself does not ship a default preset because\n  // the layout shape is intentionally app-owned (test harness page, security\n  // settings page).\n  FrontendComponentType.APP_LAYOUTS_TEST_COMPONENT,\n  FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS,\n  // The Settings Hub + its bespoke panels are composed by the navigation\n  // runtime (NavigationContentRenderer → SettingsHub) and the hub's own panel\n  // resolver, NOT the ComponentRegistry. Their enum entries exist for i18n\n  // label addressability + spec coverage; the framework ships no default preset.\n  FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB,\n  FrontendComponentType.APP_LAYOUTS_APPEARANCE_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_BILLING_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_AGENT_WORK_OVERRIDE_RATE_SETTINGS,\n\n  // (a) i18n-bundle-only — SurfaceErrorBoundary is rendered directly by `Surface` when the surface\n  // policy asks for a boundary, never resolved through the registry. The enum entry exists so the\n  // fallback's words are addressable labels.\n  FrontendComponentType.APP_LAYOUTS_SURFACE_ERROR_BOUNDARY,\n\n  // (e) orphan — H-5: FK editing AND display both flow through the\n  // dedicated RESOURCES_FIELDS_RESOURCE_REFERENCE preset (registered by\n  // category EDIT/DISPLAY in register-framework-layouts.ts) so there is no\n  // separate FORM_FIELD / DISPLAY_FIELD wrapper to register. The enum\n  // entries are kept on the schema for consumers that key i18n labels off\n  // them; renaming has cross-package blast radius (presets, generated\n  // specs, locale bundles), so we treat them as documented orphans rather\n  // than removing them.\n  FrontendComponentType.LOW_LEVEL_FORM_FIELD_FOREIGN_KEY,\n  FrontendComponentType.LOW_LEVEL_DISPLAY_FIELD_FOREIGN_KEY,\n]);\n\nexport interface RegistryCompletenessReport {\n  totalEnumValues: number;\n  registeredCount: number;\n  denyListedCount: number;\n  missing: FrontendComponentType[];\n}\n\n/**\n * Compute (without throwing) the set of enum entries that should be\n * registered but are not. Useful for tests and for the boot-time check.\n */\nexport function computeRegistryCompleteness(): RegistryCompletenessReport {\n  const allValues = Object.values(FrontendComponentType) as FrontendComponentType[];\n  const missing: FrontendComponentType[] = [];\n  let registeredCount = 0;\n\n  for (const type of allValues) {\n    if (KNOWN_NON_REGISTERED_COMPONENT_TYPES.has(type)) continue;\n    if (ComponentRegistryService.hasComponentType(type)) {\n      registeredCount += 1;\n    } else {\n      missing.push(type);\n    }\n  }\n\n  return {\n    totalEnumValues: allValues.length,\n    registeredCount,\n    denyListedCount: KNOWN_NON_REGISTERED_COMPONENT_TYPES.size,\n    missing,\n  };\n}\n\n/**\n * Boot-time guard.\n *\n * Call this once after every `registerDefaultPresets()` /\n * `registerFrameworkLayouts()` invocation completes during app startup.\n *\n * Behaviour:\n *  - In `development`: throws a hard error listing all missing entries.\n *    The developer must either register the missing component or add\n *    its enum value to `KNOWN_NON_REGISTERED_COMPONENT_TYPES` with a\n *    justification.\n *  - In `production`: logs a warning and returns. Avoids breaking a\n *    deployed app over a registration omission, but surfaces it loudly\n *    in monitoring.\n *\n * @returns the same report `computeRegistryCompleteness()` returned.\n */\nexport function assertRegistryCompleteness(options?: {\n  /**\n   * When true, throw even outside `development`. Useful for CI / unit\n   * tests that want a strict gate regardless of NODE_ENV.\n   */\n  strict?: boolean;\n}): RegistryCompletenessReport {\n  const report = computeRegistryCompleteness();\n\n  if (report.missing.length === 0) {\n    return report;\n  }\n\n  const message =\n    `[ComponentRegistry] Tier-1 completeness check failed: ${report.missing.length} ` +\n    `FrontendComponentType value(s) have no registered preset.\\n\\n` +\n    `Missing entries:\\n${report.missing.map(t => `  - ${t}`).join('\\n')}\\n\\n` +\n    `For each missing entry you must EITHER:\\n` +\n    `  (1) register a default preset in registerDefaultPresets() / registerFrameworkLayouts(); OR\\n` +\n    `  (2) add the enum value to KNOWN_NON_REGISTERED_COMPONENT_TYPES in ` +\n    `assert-registry-completeness.frontend.helper.ts with a one-line justification ` +\n    `(see compound-component-system.md Section 15 for the Tier-1 vs Tier-2 model).`;\n\n  const isDev = typeof process !== 'undefined' && process.env?.NODE_ENV === 'development';\n  if (options?.strict || isDev) {\n    throw new Error(message);\n  }\n\n  logger.warn('component-registry.completeness-check.failed', { message, missing: report.missing });\n  return report;\n}\n"]}
+{"version":3,"file":"assert-registry-completeness.frontend.helper.js","sourceRoot":"","sources":["../../../../../src/core/components-registry/assert-registry-completeness.frontend.helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,MAAM,MAAM,GAA0B,qBAAqB,CAAC,SAAS,EAAE,CAAC;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,oCAAoC,GAAuC,IAAI,GAAG,CAAC;IACvF,+EAA+E;IAC/E,gFAAgF;IAChF,qBAAqB,CAAC,mCAAmC;IACzD,qEAAqE;IACrE,qBAAqB,CAAC,2BAA2B;IAEjD,sHAAsH;IACtH,qBAAqB,CAAC,sBAAsB;IAC5C,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,kBAAkB;IACxC,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,wBAAwB;IAC9C,qBAAqB,CAAC,wBAAwB;IAC9C,iHAAiH;IACjH,qBAAqB,CAAC,4BAA4B;IAClD,wHAAwH;IACxH,qBAAqB,CAAC,yBAAyB;IAC/C,qBAAqB,CAAC,qBAAqB;IAC3C,qBAAqB,CAAC,qBAAqB;IAC3C,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,yBAAyB;IAE/C;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CAAC,kBAAkB;IACxC,qBAAqB,CAAC,uBAAuB;IAC7C,qBAAqB,CAAC,aAAa;IACnC,qBAAqB,CAAC,gBAAgB;IACtC,qBAAqB,CAAC,cAAc;IACpC,qBAAqB,CAAC,eAAe;IACrC,qBAAqB,CAAC,qBAAqB;IAC3C,qBAAqB,CAAC,cAAc;IACpC,qBAAqB,CAAC,aAAa;IACnC,qBAAqB,CAAC,eAAe;IACrC,qBAAqB,CAAC,wBAAwB;IAE9C,yGAAyG;IACzG,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,6BAA6B;IAEnD,iFAAiF;IACjF,qBAAqB,CAAC,kCAAkC;IACxD,qBAAqB,CAAC,2BAA2B;IACjD,qBAAqB,CAAC,wBAAwB;IAE9C,6EAA6E;IAC7E,qBAAqB,CAAC,0BAA0B;IAChD,qBAAqB,CAAC,sBAAsB;IAC5C,qBAAqB,CAAC,4BAA4B;IAClD,qBAAqB,CAAC,6BAA6B;IACnD,qBAAqB,CAAC,0BAA0B;IAChD,qBAAqB,CAAC,0BAA0B;IAEhD,yEAAyE;IACzE,0EAA0E;IAC1E,gEAAgE;IAChE,2EAA2E;IAC3E,2EAA2E;IAC3E,kBAAkB;IAClB,qBAAqB,CAAC,0BAA0B;IAChD,qBAAqB,CAAC,6BAA6B;IACnD,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,+EAA+E;IAC/E,qBAAqB,CAAC,wBAAwB;IAC9C,qBAAqB,CAAC,+BAA+B;IACrD,qBAAqB,CAAC,gCAAgC;IACtD,qBAAqB,CAAC,4BAA4B;IAClD,qBAAqB,CAAC,uCAAuC;IAC7D,qBAAqB,CAAC,6CAA6C;IACnE,qBAAqB,CAAC,sCAAsC;IAC5D,qBAAqB,CAAC,yCAAyC;IAC/D,qBAAqB,CAAC,4CAA4C;IAClE,qBAAqB,CAAC,iDAAiD;IAEvE,iGAAiG;IACjG,gGAAgG;IAChG,2CAA2C;IAC3C,qBAAqB,CAAC,kCAAkC;IAExD,iEAAiE;IACjE,sEAAsE;IACtE,yEAAyE;IACzE,oEAAoE;IACpE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,sBAAsB;IACtB,qBAAqB,CAAC,gCAAgC;IACtD,qBAAqB,CAAC,mCAAmC;CAC1D,CAAC,CAAC;AASH;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAA4B,CAAC;IAClF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,oCAAoC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7D,IAAI,wBAAwB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,eAAe,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,eAAe;QACf,eAAe,EAAE,oCAAoC,CAAC,IAAI;QAC1D,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAM1C;IACC,MAAM,MAAM,GAAG,2BAA2B,EAAE,CAAC;IAE7C,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GACX,yDAAyD,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG;QACjF,+DAA+D;QAC/D,qBAAqB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACzE,2CAA2C;QAC3C,gGAAgG;QAChG,sEAAsE;QACtE,gFAAgF;QAChF,+EAA+E,CAAC;IAElF,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,aAAa,CAAC;IACxF,IAAI,OAAO,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Tier-1 Registration Completeness Check\n *\n * Validates that every `FrontendComponentType` value that should have a\n * registered preset (Tier-1 — DI/registry-resolved) actually has one.\n *\n * Tier-2 / framework-internal / dispatcher / i18n-bundle-only slots are\n * explicitly deny-listed below. Any new addition to the enum that does\n * NOT belong on that list MUST be registered, otherwise this check fails.\n *\n * See `.cursor/plans/compound-component-system.md` Section 15 for the\n * full Tier-1 vs Tier-2 model.\n */\n\nimport { FrontendComponentType } from '@wildo-ai/presets-components-models';\nimport { ComponentRegistryService } from './component-registry.frontend.service';\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\n\nconst logger: LoggerFrontendService = LoggerFrontendService.getLogger();\n\n/**\n * Enum entries that intentionally have NO registered preset.\n *\n * Each entry MUST have a one-line justification explaining why it is not\n * registered. Categories:\n *\n *   (a) i18n-bundle-only — exists for `useI18n({ component })` lookup\n *       but is rendered via direct composition, not via `resolve()`.\n *   (b) framework-internal — the framework ships the implementation, so no\n *       preset is registered and this check must not demand one. It does NOT\n *       mean unswappable: a slot in this category may still consult the\n *       registry first and fall back to its built-in (see the guidance\n *       renderers below). Read each entry's own justification.\n *   (c) deprecated — superseded by another slot, kept only for migration.\n *   (d) dispatcher — meta-slot that resolves to one of several concrete\n *       slots at render time (HIGH_LEVEL_VIEWS_COMPOSITE etc.).\n *   (e) orphan — historical leftover, kept on the enum for back-compat\n *       of i18n keys but no longer wired to any wrapper.\n */\nconst KNOWN_NON_REGISTERED_COMPONENT_TYPES: ReadonlySet<FrontendComponentType> = new Set([\n  // (a) i18n-bundle-only — ContentSectionContainer uses direct composition. (The\n  // SECTION / GROUP / LEGEND slots are now registered ContentSection primitives.)\n  FrontendComponentType.LOW_LEVEL_CONTENT_SECTION_CONTAINER,\n  // (a) i18n-bundle-only — used by OverlayContainer direct composition\n  FrontendComponentType.LOW_LEVEL_OVERLAY_CONTAINER,\n\n  // (b) framework-internal — Flows-Actors orchestration shells (engine/saas-frontend-lib/src/components/flows-actors/*)\n  FrontendComponentType.LOW_LEVEL_AI_FLOW_NODE,\n  FrontendComponentType.LOW_LEVEL_AI_FLOW_EXECUTION,\n  FrontendComponentType.LOW_LEVEL_AI_SYSTEM_CATALOG,\n  FrontendComponentType.LOW_LEVEL_AI_ACTOR,\n  FrontendComponentType.LOW_LEVEL_AI_EXECUTION_PLAN,\n  FrontendComponentType.LOW_LEVEL_AI_TASK_DETAIL,\n  FrontendComponentType.LOW_LEVEL_AI_TASK_MEMORY,\n  // One run's consumption (#2528): drawn in place by `FlowsActors_ExecutionUsage`, the flows-actors shells' shape.\n  FrontendComponentType.LOW_LEVEL_AI_EXECUTION_USAGE,\n  // A graph drawn read-only from a GraphView (#2529): composed in place by its hosts, behind the flows-actors graph door.\n  FrontendComponentType.LOW_LEVEL_AI_GRAPH_VIEWER,\n  FrontendComponentType.LOW_LEVEL_AI_APPROVAL,\n  FrontendComponentType.LOW_LEVEL_AI_DECISION,\n  FrontendComponentType.LOW_LEVEL_AI_EXECUTION_STREAM,\n  FrontendComponentType.LOW_LEVEL_AI_ARTIFACT_BROWSER,\n  FrontendComponentType.LOW_LEVEL_AI_AGENT_CONFIG,\n\n  /**\n   * (b) framework-internal — Guidance renderers\n   * (`engine/saas-frontend-lib/src/core/guidance/renderers/*`).\n   *\n   * Deny-listed because the ENGINE registers no preset for them: `GuidanceRenderer` ships working\n   * built-in implementations and falls back to them. That is why they belong here and why the\n   * check must not demand a registration.\n   *\n   * They are NOT unswappable, and this entry used to say they were. `GuidanceRenderer` resolves\n   * each element type through `GUIDANCE_ELEMENT_COMPONENT_TYPE` against this registry BEFORE its\n   * built-in map, so an application that registers a preset under `CorePresetNames.DEFAULT` for any\n   * of these types replaces that renderer — which is what the frontend-component specifications for\n   * these slots have always advertised.\n   */\n  FrontendComponentType.GUIDANCE_CHECKLIST,\n  FrontendComponentType.GUIDANCE_CHECKLIST_ITEM,\n  FrontendComponentType.GUIDANCE_TOUR,\n  FrontendComponentType.GUIDANCE_TOOLTIP,\n  FrontendComponentType.GUIDANCE_MODAL,\n  FrontendComponentType.GUIDANCE_BANNER,\n  FrontendComponentType.GUIDANCE_ANNOUNCEMENT,\n  FrontendComponentType.GUIDANCE_BADGE,\n  FrontendComponentType.GUIDANCE_CARD,\n  FrontendComponentType.GUIDANCE_SURVEY,\n  FrontendComponentType.GUIDANCE_ONBOARDING_VIEW,\n\n  // (b) framework-internal — Progression renderers (engine/saas-frontend-lib/src/components/progression/*)\n  FrontendComponentType.PROGRESSION_MILESTONE_TRACKER,\n  FrontendComponentType.PROGRESSION_ACHIEVEMENT_BADGE,\n\n  // (b) framework-internal — Lifecycle renderers (composed directly in app shells)\n  FrontendComponentType.LIFECYCLE_HOME_ACTIVATION_PROGRESS,\n  FrontendComponentType.LIFECYCLE_HOME_WELCOME_BACK,\n  FrontendComponentType.LIFECYCLE_HOME_DASHBOARD,\n\n  // (d) dispatcher — meta-slots that resolve to a concrete view at render time\n  FrontendComponentType.HIGH_LEVEL_VIEWS_COMPOSITE,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_CHART,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_FULL_CUSTOM,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_FLOWS_ACTORS,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_EXECUTION,\n  FrontendComponentType.HIGH_LEVEL_VIEWS_NOT_FOUND,\n\n  // (b) framework-internal — H-8: app-owned shell slots. The enum entry is\n  // kept so that (1) host apps can register their own preset implementation\n  // for the slot if/when they need it, and (2) i18n labels remain\n  // addressable. The framework itself does not ship a default preset because\n  // the layout shape is intentionally app-owned (test harness page, security\n  // settings page).\n  FrontendComponentType.APP_LAYOUTS_TEST_COMPONENT,\n  FrontendComponentType.APP_LAYOUTS_SECURITY_SETTINGS,\n  // The Settings Hub + its bespoke panels are composed by the navigation\n  // runtime (NavigationContentRenderer → SettingsHub) and the hub's own panel\n  // resolver, NOT the ComponentRegistry. Their enum entries exist for i18n\n  // label addressability + spec coverage; the framework ships no default preset.\n  FrontendComponentType.APP_LAYOUTS_SETTINGS_HUB,\n  FrontendComponentType.APP_LAYOUTS_APPEARANCE_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_INVITATIONS_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_BILLING_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_CONNECTED_ACCOUNTS_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_AGENT_WORK_OVERRIDE_RATE_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_AUTONOMOUS_AGENTS_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_MODEL_COST_BREAKDOWN_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_REPRESENTATIVE_ACTIVITY_SETTINGS,\n  FrontendComponentType.APP_LAYOUTS_AGENT_WORK_EVALUATION_EXPORT_SETTINGS,\n\n  // (a) i18n-bundle-only — SurfaceErrorBoundary is rendered directly by `Surface` when the surface\n  // policy asks for a boundary, never resolved through the registry. The enum entry exists so the\n  // fallback's words are addressable labels.\n  FrontendComponentType.APP_LAYOUTS_SURFACE_ERROR_BOUNDARY,\n\n  // (e) orphan — H-5: FK editing AND display both flow through the\n  // dedicated RESOURCES_FIELDS_RESOURCE_REFERENCE preset (registered by\n  // category EDIT/DISPLAY in register-framework-layouts.ts) so there is no\n  // separate FORM_FIELD / DISPLAY_FIELD wrapper to register. The enum\n  // entries are kept on the schema for consumers that key i18n labels off\n  // them; renaming has cross-package blast radius (presets, generated\n  // specs, locale bundles), so we treat them as documented orphans rather\n  // than removing them.\n  FrontendComponentType.LOW_LEVEL_FORM_FIELD_FOREIGN_KEY,\n  FrontendComponentType.LOW_LEVEL_DISPLAY_FIELD_FOREIGN_KEY,\n]);\n\nexport interface RegistryCompletenessReport {\n  totalEnumValues: number;\n  registeredCount: number;\n  denyListedCount: number;\n  missing: FrontendComponentType[];\n}\n\n/**\n * Compute (without throwing) the set of enum entries that should be\n * registered but are not. Useful for tests and for the boot-time check.\n */\nexport function computeRegistryCompleteness(): RegistryCompletenessReport {\n  const allValues = Object.values(FrontendComponentType) as FrontendComponentType[];\n  const missing: FrontendComponentType[] = [];\n  let registeredCount = 0;\n\n  for (const type of allValues) {\n    if (KNOWN_NON_REGISTERED_COMPONENT_TYPES.has(type)) continue;\n    if (ComponentRegistryService.hasComponentType(type)) {\n      registeredCount += 1;\n    } else {\n      missing.push(type);\n    }\n  }\n\n  return {\n    totalEnumValues: allValues.length,\n    registeredCount,\n    denyListedCount: KNOWN_NON_REGISTERED_COMPONENT_TYPES.size,\n    missing,\n  };\n}\n\n/**\n * Boot-time guard.\n *\n * Call this once after every `registerDefaultPresets()` /\n * `registerFrameworkLayouts()` invocation completes during app startup.\n *\n * Behaviour:\n *  - In `development`: throws a hard error listing all missing entries.\n *    The developer must either register the missing component or add\n *    its enum value to `KNOWN_NON_REGISTERED_COMPONENT_TYPES` with a\n *    justification.\n *  - In `production`: logs a warning and returns. Avoids breaking a\n *    deployed app over a registration omission, but surfaces it loudly\n *    in monitoring.\n *\n * @returns the same report `computeRegistryCompleteness()` returned.\n */\nexport function assertRegistryCompleteness(options?: {\n  /**\n   * When true, throw even outside `development`. Useful for CI / unit\n   * tests that want a strict gate regardless of NODE_ENV.\n   */\n  strict?: boolean;\n}): RegistryCompletenessReport {\n  const report = computeRegistryCompleteness();\n\n  if (report.missing.length === 0) {\n    return report;\n  }\n\n  const message =\n    `[ComponentRegistry] Tier-1 completeness check failed: ${report.missing.length} ` +\n    `FrontendComponentType value(s) have no registered preset.\\n\\n` +\n    `Missing entries:\\n${report.missing.map(t => `  - ${t}`).join('\\n')}\\n\\n` +\n    `For each missing entry you must EITHER:\\n` +\n    `  (1) register a default preset in registerDefaultPresets() / registerFrameworkLayouts(); OR\\n` +\n    `  (2) add the enum value to KNOWN_NON_REGISTERED_COMPONENT_TYPES in ` +\n    `assert-registry-completeness.frontend.helper.ts with a one-line justification ` +\n    `(see compound-component-system.md Section 15 for the Tier-1 vs Tier-2 model).`;\n\n  const isDev = typeof process !== 'undefined' && process.env?.NODE_ENV === 'development';\n  if (options?.strict || isDev) {\n    throw new Error(message);\n  }\n\n  logger.warn('component-registry.completeness-check.failed', { message, missing: report.missing });\n  return report;\n}\n"]}

package/dist/esm/core/components-registry/component-resolver.frontend.helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component-resolver.frontend.helper.d.ts","sourceRoot":"","sources":["../../../../../src/core/components-registry/component-resolver.frontend.helper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,KAAK,EAAE,qBAAqB,EAAE,sCAAsC,EAAE,MAAM,mEAAmE,CAAC;AAKvJ,wBAAgB,uBAAuB,CAAC,MAAM,GAAG,GAAG,EAClD,aAAa,EAAE,qBAAqB,EACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,sCAAsC,GAChD,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CA8BlD;AAED,2GAA2G;AAC3G,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,EACnE,aAAa,EAAE,qBAAqB,EACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,sCAAsC,GAChD,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAG9E;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EACvD,aAAa,EAAE,qBAAqB,EACpC,aAAa,EAAE,MAAM,EACrB,qBAAqB,CAAC,EAAE,MAAM,EAAE,GAC/B,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,SAAS,CA8BhC;AAED;;;;;;;;;GASG;AACH,KAAK,wBAAwB,CAAC,CAAC,IAAI;KAChC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK;CACjE,CAAC,MAAM,CAAC,CAAC,CAAA;AAEV;;;;;;;;;;;;GAYG;AAEH,wBAAgB,oBAAoB,CAAC,SAAS,SAAS,MAAM,EAC3D,IAAI,EAAE,OAAO,EACb,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,SAAS,CAAC,CAAC,GAClE,SAAS,CAEX"}
+{"version":3,"file":"component-resolver.frontend.helper.d.ts","sourceRoot":"","sources":["../../../../../src/core/components-registry/component-resolver.frontend.helper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,KAAK,EAAE,qBAAqB,EAAE,sCAAsC,EAAE,MAAM,mEAAmE,CAAC;AAKvJ,wBAAgB,uBAAuB,CAAC,MAAM,GAAG,GAAG,EAClD,aAAa,EAAE,qBAAqB,EACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,sCAAsC,GAChD,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAmClD;AAED,2GAA2G;AAC3G,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,EACnE,aAAa,EAAE,qBAAqB,EACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,sCAAsC,GAChD,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAG9E;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EACvD,aAAa,EAAE,qBAAqB,EACpC,aAAa,EAAE,MAAM,EACrB,qBAAqB,CAAC,EAAE,MAAM,EAAE,GAC/B,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,SAAS,CAuDhC;AAED;;;;;;;;;GASG;AACH,KAAK,wBAAwB,CAAC,CAAC,IAAI;KAChC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK;CACjE,CAAC,MAAM,CAAC,CAAC,CAAA;AAEV;;;;;;;;;;;;GAYG;AAEH,wBAAgB,oBAAoB,CAAC,SAAS,SAAS,MAAM,EAC3D,IAAI,EAAE,OAAO,EACb,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,SAAS,CAAC,CAAC,GAClE,SAAS,CAEX"}