@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

package/dist/esm/core/navigation/launcher-runtime-availability.js.map

@@ -1 +1 @@
-{"version":3,"file":"launcher-runtime-availability.js","sourceRoot":"","sources":["../../../../../src/core/navigation/launcher-runtime-availability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAEhC,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,yBAAyB,GAY1B,MAAM,iEAAiE,CAAC;AAWzE;;;;;;GAMG;AACH,MAAM,UAAU,qCAAqC;IACnD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC;IACtC,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,WAAW,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IAEjC,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,iFAAiF;IACjF,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAE3E,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;QACvC,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,EAAE;QAC7C,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,EAAE;QAC9C,SAAS,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE;QACtC,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,IAAI,EAAE;QAClD,mBAAmB,EAAE;YACnB,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC3C,UAAU;YACV,WAAW;YACX,WAAW;YACX,eAAe;SAChB;KACF,CAAC,EAAE;QACF,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE,QAAQ;QACrB,gBAAgB,EAAE,QAAQ;QAC1B,OAAO,EAAE,SAAS;QAClB,UAAU;QACV,WAAW;QACX,WAAW;QACX,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAqD,EACrD,OAA2C;IAE3C,IAAI,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAEvD,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,uCAAuC,CAC9C,KAAoB,EACpB,OAA2C;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1B,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,CAAC;gBACN,GAAG,IAAI;gBACP,QAAQ,EAAE,uCAAuC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;aAC1E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gDAAgD,CACvD,OAAsC,EACtC,OAA2C;IAE3C,OAAO;QACL,GAAG,OAAO;QACV,QAAQ,EAAE,uCAAuC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,QAAsC,EACtC,OAA2C;IAE3C,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,QAAQ,CAAC;IAEvC,MAAM,gBAAgB,GAAqB,EAAE,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,sCAAsC,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC;YAClF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,KAAK,yBAAyB,CAAC,eAAe,EAAE,CAAC;YACtE,gBAAgB,CAAC,IAAI,CAAC,gDAAgD,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,8CAA8C,CAC5D,QAA0C,EAC1C,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAMD,MAAM,UAAU,4CAA4C,CAC1D,KAAsB,EACtB,OAA2C;IAE3C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IAEjC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACzB,sCAAsC,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,KAAoC,EACpC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAgC,EAChC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,KAAqC,EACrC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,QAAqC,EACrC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAwC,EACxC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC","sourcesContent":["import { useMemo } from 'react';\nimport type { AppScopeValue } from '~wildo-frontend-lib/core/scope/scope.frontend.schemas';\nimport { useAppModeSafe } from '~wildo-frontend-lib/core/mode/AppModeContext';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { useUserOrgs } from '~wildo-frontend-lib/core/security/useUserOrgs';\nimport { useFeatures } from '~wildo-frontend-lib/core/features/useFeatures';\nimport { useBillingSafe } from '~wildo-frontend-lib/core/billing/useBilling';\nimport { CoreFeature } from '@wildo-ai/saas-models';\nimport {\n  SidebarSectionContentKind,\n  type AppModeDefinition,\n  type CommandMenuCommand,\n  type ControlPanelItem,\n  type HotkeyBinding,\n  type LauncherRuntimeAvailabilityConfig,\n  type MenubarLauncherItem,\n  type QuickActionItem,\n  type SidebarItem,\n  type SidebarSection,\n  type SidebarSection_NavigationList,\n  type ToolbarItem,\n} from '~wildo-frontend-lib/core/config/launcher-items.frontend.schemas';\n\nexport interface LauncherRuntimeAvailabilityContext {\n  activeMode: string | null;\n  availableModes: AppModeDefinition[];\n  allScopeValues: Record<string, AppScopeValue>;\n  userRoles: string[];\n  resolvedFeatures: string[];\n  runtimeCapabilities: Record<string, boolean>;\n}\n\n/**\n * Centralized runtime signals used by declarative launcher availability.\n *\n * v1 only evaluates `runtimeCapabilities`, but the broader context is exposed so\n * the same hook can remain the single source of truth when future launcher\n * slices need more runtime information.\n */\nexport function useLauncherRuntimeAvailabilityContext(): LauncherRuntimeAvailabilityContext {\n  const appMode = useAppModeSafe();\n  const appScope = useAppScopeSafe();\n  const { permissions } = useUserOrgs();\n  const { resolvedFeatures, isFeatureOffered } = useFeatures();\n  const billing = useBillingSafe();\n\n  // Enterprise-config features (SSO / SCIM / SIEM / webhooks) are gated by the\n  // framework FEATURE system, along the correct axis. This capability is the\n  // app-shell SURVIVAL filter (`requiredCapabilities`) — false → the item is\n  // removed entirely — so it must answer \"does this app OFFER feature X?\", NOT\n  // \"is the current org ENTITLED to it?\". Using `isFeatureOffered` (entitled OR\n  // reachable via an upgrade/add-on) means a billing-on org whose plan lacks the\n  // feature still SURVIVES the filter and the section can render an upgrade/add-on\n  // prompt via {@link FeatureGate} + `unavailabilityPolicy`, instead of vanishing.\n  // Billing off → offered == entitled, so behaviour is unchanged there. Entitlement\n  // itself is enforced at render time (FeatureGate) and by the backend FeatureGate.\n  const ssoEnabled = isFeatureOffered(CoreFeature.SINGLE_SIGN_ON);\n  const scimEnabled = isFeatureOffered(CoreFeature.DIRECTORY_PROVISIONING);\n  const siemEnabled = isFeatureOffered(CoreFeature.SECURITY_EVENT_EXPORT);\n  const webhooksEnabled = isFeatureOffered(CoreFeature.M2M_WEBHOOK_DELIVERY);\n\n  return useMemo(() => ({\n    activeMode: appMode?.activeMode ?? null,\n    availableModes: appMode?.availableModes ?? [],\n    allScopeValues: appScope?.allScopeValues ?? {},\n    userRoles: permissions?.appLevel ?? [],\n    resolvedFeatures: resolvedFeatures?.features ?? [],\n    runtimeCapabilities: {\n      billingEnabled: Boolean(billing?.isEnabled),\n      ssoEnabled,\n      scimEnabled,\n      siemEnabled,\n      webhooksEnabled,\n    },\n  }), [\n    appMode?.activeMode,\n    appMode?.availableModes,\n    appScope?.allScopeValues,\n    permissions?.appLevel,\n    resolvedFeatures?.features,\n    billing?.isEnabled,\n    ssoEnabled,\n    scimEnabled,\n    siemEnabled,\n    webhooksEnabled,\n  ]);\n}\n\n/**\n * v1 runtime availability is intentionally capability-only.\n *\n * `requiredFeatures` remains the canonical plan/subscription gate later in the\n * launcher resolution + surface rendering pipeline.\n */\nexport function isLauncherRuntimeAvailabilitySatisfied(\n  config: LauncherRuntimeAvailabilityConfig | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): boolean {\n  if (!config?.requiredCapabilities?.length) return true;\n\n  return config.requiredCapabilities.every(capability => Boolean(context.runtimeCapabilities[capability]));\n}\n\nfunction filterSidebarItemsByRuntimeAvailability(\n  items: SidebarItem[],\n  context: LauncherRuntimeAvailabilityContext,\n): SidebarItem[] {\n  return items.flatMap(item => {\n    if (!isLauncherRuntimeAvailabilitySatisfied(item.runtimeAvailability, context)) {\n      return [];\n    }\n\n    if (!item.children?.length) {\n      return [item];\n    }\n\n    return [{\n      ...item,\n      children: filterSidebarItemsByRuntimeAvailability(item.children, context),\n    }];\n  });\n}\n\nfunction filterNavigationListSectionByRuntimeAvailability(\n  section: SidebarSection_NavigationList,\n  context: LauncherRuntimeAvailabilityContext,\n): SidebarSection_NavigationList {\n  return {\n    ...section,\n    children: filterSidebarItemsByRuntimeAvailability(section.children, context),\n  };\n}\n\nexport function filterSidebarSectionsByRuntimeAvailability(\n  sections: SidebarSection[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): SidebarSection[] | undefined {\n  if (!sections?.length) return sections;\n\n  const filteredSections: SidebarSection[] = [];\n\n  for (const section of sections) {\n    if (!isLauncherRuntimeAvailabilitySatisfied(section.runtimeAvailability, context)) {\n      continue;\n    }\n\n    if (section.contentKind === SidebarSectionContentKind.NAVIGATION_LIST) {\n      filteredSections.push(filterNavigationListSectionByRuntimeAvailability(section, context));\n      continue;\n    }\n\n    filteredSections.push(section);\n  }\n\n  return filteredSections;\n}\n\nexport function filterCommandMenuCommandsByRuntimeAvailability(\n  commands: CommandMenuCommand[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): CommandMenuCommand[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(commands, context);\n}\n\ntype RuntimeAvailabilityFlatLauncherItem = {\n  runtimeAvailability?: LauncherRuntimeAvailabilityConfig;\n};\n\nexport function filterFlatLauncherItemsByRuntimeAvailability<T extends RuntimeAvailabilityFlatLauncherItem>(\n  items: T[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): T[] | undefined {\n  if (!items?.length) return items;\n\n  return items.filter(item =>\n    isLauncherRuntimeAvailabilitySatisfied(item.runtimeAvailability, context),\n  );\n}\n\nexport function filterQuickActionItemsByRuntimeAvailability(\n  items: QuickActionItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): QuickActionItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n\nexport function filterToolbarItemsByRuntimeAvailability(\n  items: ToolbarItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): ToolbarItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n\nexport function filterControlPanelItemsByRuntimeAvailability(\n  items: ControlPanelItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): ControlPanelItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n\nexport function filterHotkeyBindingsByRuntimeAvailability(\n  bindings: HotkeyBinding[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): HotkeyBinding[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(bindings, context);\n}\n\nexport function filterMenubarItemsByRuntimeAvailability(\n  items: MenubarLauncherItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): MenubarLauncherItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n"]}
+{"version":3,"file":"launcher-runtime-availability.js","sourceRoot":"","sources":["../../../../../src/core/navigation/launcher-runtime-availability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,4DAA4D,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAC;AAChG,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GAInC,MAAM,+EAA+E,CAAC;AACvF,OAAO,EACL,uCAAuC,EACvC,+BAA+B,GAChC,MAAM,oFAAoF,CAAC;AAC5F,OAAO,EAAE,+CAA+C,EAAE,MAAM,8DAA8D,CAAC;AAC/H,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,6CAA6C,EAAE,MAAM,iDAAiD,CAAC;AAChH,OAAO,EAAE,WAAW,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAA+B,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EACL,yBAAyB,GAY1B,MAAM,iEAAiE,CAAC;AAWzE;;;;;GAKG;AACH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,qCAAqC,CAAC,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qCAAqC,CAAC,cAAkC;IACtF,MAAM,WAAW,GAAG,UAAU,CAAC,eAAe,CAAC,EAAE,WAAW,IAAI,IAAI,CAAC;IACrE,MAAM,qBAAqB,GAAG,eAAe,EAAE,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAC/E,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;IAC9C,MAAM,mBAAmB,GAAG,cAAc,IAAI,qBAAqB,CAAC;IACpE,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpB,gBAAgB,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE;QAC7C,iBAAiB,EAAE,CAAC,mBAAmB,IAAI,WAAW,EAAE,aAAa,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE;QACnG,UAAU;QACV,cAAc,EAAE,mBAAmB;QACnC,aAAa,EAAE,WAAW,EAAE,aAAa,IAAI,IAAI;KAClD,CAAC,EAAE,CAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B;IACrC,MAAM,SAAS,GAAG,UAAU,CAAC,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAC5D,MAAM,yBAAyB,GAAG,SAAS,EAAE,yBAAyB,CAAC;IACvE,MAAM,iBAAiB,GAAG,SAAS,EAAE,iBAAqE,CAAC;IAC3G,MAAM,aAAa,GAAG,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC;IACjE,MAAM,qBAAqB,GAAG,eAAe,EAAE,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAC/E,OAAO,OAAO,CACZ,GAAG,EAAE,CAAC,CAAC,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,EAC9F,CAAC,yBAAyB,EAAE,iBAAiB,EAAE,aAAa,EAAE,qBAAqB,CAAC,CACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,gCAAgC;IAC9C,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,mCAAmC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,wHAAwH;AACxH,SAAS,0BAA0B;IACjC,MAAM,aAAa,GAAG,UAAU,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC;IACjE,MAAM,qBAAqB,GAAG,eAAe,EAAE,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAC/E,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,IAAI,CAAC,qBAAqB;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,IAAI,GAAG,aAAa,EAAE,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,qBAAqB,CAAC,EAAE,IAAI,CAAC;QACrG,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0CAA0C;IACxD,MAAM,iBAAiB,GAAG,UAAU,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC;IACvF,MAAM,WAAW,GAAG,0BAA0B,EAAE,CAAC;IACjD,OAAO,OAAO,CACZ,GAAG,EAAE,CAAC,sCAAsC,CAAC,iBAA0B,EAAE,WAAW,CAAC,EACrF,CAAC,iBAAiB,EAAE,WAAW,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAW,EAAE,CAAC,KAAK,CAAC;AAE/D,MAAM,UAAU,qCAAqC;IACnD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,uBAAuB,EAAE,CAAC;IACjD,qHAAqH;IACrH,8GAA8G;IAC9G,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,QAAQ,EAAE,gBAAgB,CAAC;IACpD,MAAM,gBAAgB,GAAG,QAAQ,EAAE,gBAAgB,IAAI,eAAe,CAAC;IACvE,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IAEjC,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,iFAAiF;IACjF,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAChE,qHAAqH;IACrH,8GAA8G;IAC9G,qHAAqH;IACrH,uFAAuF;IACvF,MAAM,4BAA4B,GAAG,gBAAgB,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAC1F,MAAM,uBAAuB,GAAG,0BAA0B,EAAE,CAAC;IAC7D,MAAM,uCAAuC,GAAG,0CAA0C,EAAE,CAAC;IAC7F,MAAM,uBAAuB,GAAG,6CAA6C,CAC3E,+BAA+B,CAAC;QAC9B,cAAc,EAAE,4BAA4B;QAC5C,qBAAqB,EAAE,uBAAuB,KAAK,SAAS;QAC5D,oCAAoC,EAAE,uCAAuC;KAC9E,CAAC,EACF,cAAc,CACf,CAAC;IACF,MAAM,iCAAiC,GAAG,OAAO,CAC/C,GAAG,EAAE,CAAC,uCAAuC,CAAC;QAC5C,cAAc,EAAE,4BAA4B;QAC5C,oCAAoC,EAAE,uCAAuC;QAC7E,mBAAmB,EAAE,uBAAuB;KAC7C,CAAC,EACF,CAAC,4BAA4B,EAAE,uCAAuC,EAAE,uBAAuB,CAAC,CACjG,CAAC;IACF,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAE3E,6GAA6G;IAC7G,+GAA+G;IAC/G,qGAAqG;IACrG,MAAM,iBAAiB,GAAG,+BAA+B,EAAE,CAAC;IAC5D,oHAAoH;IACpH,gCAAgC;IAChC,MAAM,iBAAiB,GAAG,gCAAgC,EAAE,CAAC;IAC7D,sHAAsH;IACtH,sGAAsG;IACtG,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC;IACpF,sHAAsH;IACtH,MAAM,kCAAkC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACnJ,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC,EACpF,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACrC,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;QACvC,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,EAAE;QAC7C,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,EAAE;QAC9C,cAAc;QACd,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,IAAI,EAAE;QAClD,mBAAmB,EAAE;YACnB,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC3C,UAAU;YACV,GAAG,iCAAiC;YACpC,WAAW;YACX,eAAe;YACf,GAAG,iBAAiB;YACpB,GAAG,iBAAiB;YACpB,GAAG,aAAa;YAChB,CAAC,+CAA+C,CAAC,EAAE,kCAAkC;SACtF;KACF,CAAC,EAAE;QACF,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,cAAc;QACxB,cAAc;QACd,gBAAgB,EAAE,QAAQ;QAC1B,OAAO,EAAE,SAAS;QAClB,UAAU;QACV,iCAAiC;QACjC,WAAW;QACX,eAAe;QACf,iBAAiB;QACjB,iBAAiB;QACjB,aAAa;QACb,kCAAkC;KACnC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAqD,EACrD,OAA2C;IAE3C,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClI,OAAO,cAAc,IAAI,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,uCAAuC,CAC9C,KAAoB,EACpB,OAA2C;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1B,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,CAAC;gBACN,GAAG,IAAI;gBACP,QAAQ,EAAE,uCAAuC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;aAC1E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gDAAgD,CACvD,OAAsC,EACtC,OAA2C;IAE3C,OAAO;QACL,GAAG,OAAO;QACV,QAAQ,EAAE,uCAAuC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,QAAsC,EACtC,OAA2C;IAE3C,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,QAAQ,CAAC;IAEvC,MAAM,gBAAgB,GAAqB,EAAE,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,sCAAsC,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC;YAClF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,KAAK,yBAAyB,CAAC,eAAe,EAAE,CAAC;YACtE,gBAAgB,CAAC,IAAI,CAAC,gDAAgD,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,8CAA8C,CAC5D,QAA0C,EAC1C,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAMD,MAAM,UAAU,4CAA4C,CAC1D,KAAsB,EACtB,OAA2C;IAE3C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IAEjC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CACzB,sCAAsC,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,KAAoC,EACpC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAgC,EAChC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,KAAqC,EACrC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,QAAqC,EACrC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,KAAwC,EACxC,OAA2C;IAE3C,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC","sourcesContent":["import { useContext, useMemo } from 'react';\nimport type { AppScopeValue } from '~wildo-frontend-lib/core/scope/scope.frontend.schemas';\nimport { useAppModeSafe } from '~wildo-frontend-lib/core/mode/AppModeContext';\nimport { useAppScopeSafe } from '~wildo-frontend-lib/core/scope/useAppScope';\nimport { UserOrgsContext } from '~wildo-frontend-lib/core/security/UserOrgsContext';\nimport { useApplicationRoleTables } from '~wildo-frontend-lib/core/security/useApplicationRoleTables';\nimport { FeaturesContext } from '~wildo-frontend-lib/core/features/FeaturesContext';\nimport { useBillingSafe } from '~wildo-frontend-lib/core/billing/useBilling';\nimport { ApplicationContext } from '~wildo-frontend-lib/core/runtime/ApplicationContext.shared';\nimport {\n  deriveRelationshipShapeCapabilities,\n  deriveRelationshipSideCapabilities,\n  type RelationshipShapeCapability,\n  type RelationshipSideCapability,\n  type RelationshipCapabilityInput,\n} from '~wildo-frontend-lib/core/config/relationship-side-capabilities.frontend.utils';\nimport {\n  deriveDirectoryProvisioningCapabilities,\n  isUnrevokedScimTokenProbeNeeded,\n} from '~wildo-frontend-lib/core/config/directory-provisioning-capabilities.frontend.utils';\nimport { PROFESSIONAL_QUALIFICATIONS_DECLARED_CAPABILITY } from '~wildo-frontend-lib/core/config/engine-settings-destinations';\nimport { deriveDecisionInboxCapabilities } from '~wildo-frontend-lib/core/config/decision-inbox-capability.frontend.utils';\nimport { useCurrentOrganizationHoldsUnrevokedScimToken } from './useCurrentOrganizationHoldsUnrevokedScimToken';\nimport { CoreFeature, isOrganizationTypeDirectoryProvisioned } from '@wildo-ai/saas-models';\nimport { type LauncherEffectiveRoles, viewerHoldsOneOfRoles } from './launcher-resolution';\nimport {\n  SidebarSectionContentKind,\n  type AppModeDefinition,\n  type CommandMenuCommand,\n  type ControlPanelItem,\n  type HotkeyBinding,\n  type LauncherRuntimeAvailabilityConfig,\n  type MenubarLauncherItem,\n  type QuickActionItem,\n  type SidebarItem,\n  type SidebarSection,\n  type SidebarSection_NavigationList,\n  type ToolbarItem,\n} from '~wildo-frontend-lib/core/config/launcher-items.frontend.schemas';\n\nexport interface LauncherRuntimeAvailabilityContext {\n  activeMode: string | null;\n  availableModes: AppModeDefinition[];\n  allScopeValues: Record<string, AppScopeValue>;\n  effectiveRoles: LauncherEffectiveRoles;\n  resolvedFeatures: string[];\n  runtimeCapabilities: Record<string, boolean>;\n}\n\n/**\n * Centralized runtime signals used by declarative launcher availability.\n *\n * The filter evaluates `runtimeCapabilities` and `effectiveRoles`; the broader context is exposed so the same hook\n * stays the single source of truth when future launcher slices need more runtime information.\n */\n/**\n * The viewer's roles, the ONE place they are derived for the shell's visibility checks (#2376): their application\n * roles, their roles in the CURRENT organization, and the application's role tables to expand them against.\n *\n * Read from the session context without the throwing `useUserOrgs`, so a surface outside the session provider gets a\n * viewer who holds no role. Roles not loaded yet are empty too (see `LauncherEffectiveRoles`): a role-gated entry\n * appears once they arrive, never offered first and withdrawn after.\n */\nexport function useViewerEffectiveRoles(): LauncherEffectiveRoles {\n  return useViewerEffectiveRolesInOrganization(undefined);\n}\n\n/**\n * The viewer's roles as they stand IN ONE ORGANIZATION (#2473): the same derivation as {@link useViewerEffectiveRoles},\n * with the organization roles read for `organizationId` instead of the current organization.\n *\n * For a decision about a record of another tenant. A platform operator who opened a tenant through the directory holds\n * no role in that tenant, whatever they hold in their own current organization, and offering them a write on the\n * strength of their own organization's roles would offer an edit the backend refuses (and records as an attempted\n * crossing). `undefined` means the current organization.\n */\nexport function useViewerEffectiveRolesInOrganization(organizationId: string | undefined): LauncherEffectiveRoles {\n  const permissions = useContext(UserOrgsContext)?.permissions ?? null;\n  const currentOrganizationId = useAppScopeSafe()?.currentOrganizationId ?? null;\n  const roleTables = useApplicationRoleTables();\n  const scopeOrganizationId = organizationId ?? currentOrganizationId;\n  return useMemo(() => ({\n    applicationRoles: permissions?.appLevel ?? [],\n    organizationRoles: (scopeOrganizationId && permissions?.organizations?.[scopeOrganizationId]) || [],\n    roleTables,\n    organizationId: scopeOrganizationId,\n    accessProfile: permissions?.accessProfile ?? null,\n  }), [permissions, scopeOrganizationId, roleTables]);\n}\n\n/**\n * Which sides of which relationship kinds the CURRENT organization's type can take (#1597, #2722), as the runtime\n * capabilities the relationship settings and forms require. Read from the declaration\n * (`appConfig.organizationRelationships` and `appConfig.organizationTypes`), the organizations the session has loaded,\n * and the current organization; `false` everywhere until all are known. Read without the throwing hooks, so a surface\n * outside the providers is offered neither side.\n */\nfunction useRelationshipCapabilityInput(): RelationshipCapabilityInput {\n  const appConfig = useContext(ApplicationContext)?.appConfig;\n  const organizationRelationships = appConfig?.organizationRelationships;\n  const organizationTypes = appConfig?.organizationTypes as RelationshipCapabilityInput['organizationTypes'];\n  const organizations = useContext(UserOrgsContext)?.organizations;\n  const currentOrganizationId = useAppScopeSafe()?.currentOrganizationId ?? null;\n  return useMemo(\n    () => ({ organizationRelationships, organizationTypes, organizations, currentOrganizationId }),\n    [organizationRelationships, organizationTypes, organizations, currentOrganizationId],\n  );\n}\n\nexport function useRelationshipSideCapabilities(): Record<RelationshipSideCapability, boolean> {\n  const input = useRelationshipCapabilityInput();\n  return useMemo(() => deriveRelationshipSideCapabilities(input), [input]);\n}\n\n/** Where the operator stands in the kinds the current organization takes a side in (#2618, #2722), as runtime capabilities. */\nexport function useRelationshipShapeCapabilities(): Record<RelationshipShapeCapability, boolean> {\n  const input = useRelationshipCapabilityInput();\n  return useMemo(() => deriveRelationshipShapeCapabilities(input), [input]);\n}\n\n/** The CURRENT organization's declared type, from the organizations the session has loaded; `undefined` until known. */\nfunction useCurrentOrganizationType(): string | undefined {\n  const organizations = useContext(UserOrgsContext)?.organizations;\n  const currentOrganizationId = useAppScopeSafe()?.currentOrganizationId ?? null;\n  return useMemo(() => {\n    if (!currentOrganizationId) return undefined;\n    const type = organizations?.find((organization) => organization._id === currentOrganizationId)?.type;\n    return typeof type === 'string' && type.length > 0 ? type : undefined;\n  }, [organizations, currentOrganizationId]);\n}\n\n/**\n * Whether a directory may provision the CURRENT organization (#2613): its declared type says `scimProvisioning`, by\n * the one rule the SCIM API, token generation and the directory-managed check also read. `false` until the declaration,\n * the organizations and the current organization are known, so SCIM settings never appear first and vanish after.\n */\nexport function useCurrentOrganizationDirectoryProvisioned(): boolean {\n  const organizationTypes = useContext(ApplicationContext)?.appConfig?.organizationTypes;\n  const currentType = useCurrentOrganizationType();\n  return useMemo(\n    () => isOrganizationTypeDirectoryProvisioned(organizationTypes as never, currentType),\n    [organizationTypes, currentType],\n  );\n}\n\n/** Outside the features provider nothing is offered. Module-level, so the memo below sees one identity. */\nconst offersNoFeature = (_featureId: string): boolean => false;\n\nexport function useLauncherRuntimeAvailabilityContext(): LauncherRuntimeAvailabilityContext {\n  const appMode = useAppModeSafe();\n  const appScope = useAppScopeSafe();\n  const effectiveRoles = useViewerEffectiveRoles();\n  // Read without the throwing `useFeatures`, like the roles above: a surface outside the features provider (a resource\n  // action bar in an isolated host, a test) gets a shell that offers no feature rather than a crash. Inside the\n  // application every reader sits under the provider, so nothing there changes.\n  const features = useContext(FeaturesContext);\n  const resolvedFeatures = features?.resolvedFeatures;\n  const isFeatureOffered = features?.isFeatureOffered ?? offersNoFeature;\n  const billing = useBillingSafe();\n\n  // Enterprise-config features (SSO / SCIM / SIEM / webhooks) are gated by the\n  // framework FEATURE system, along the correct axis. This capability is the\n  // app-shell SURVIVAL filter (`requiredCapabilities`) — false → the item is\n  // removed entirely — so it must answer \"does this app OFFER feature X?\", NOT\n  // \"is the current org ENTITLED to it?\". Using `isFeatureOffered` (entitled OR\n  // reachable via an upgrade/add-on) means a billing-on org whose plan lacks the\n  // feature still SURVIVES the filter and the section can render an upgrade/add-on\n  // prompt via {@link FeatureGate} + `unavailabilityPolicy`, instead of vanishing.\n  // Billing off → offered == entitled, so behaviour is unchanged there. Entitlement\n  // itself is enforced at render time (FeatureGate) and by the backend FeatureGate.\n  const ssoEnabled = isFeatureOffered(CoreFeature.SINGLE_SIGN_ON);\n  // SCIM also needs the current organization's TYPE to admit a directory (#2613): the feature can be offered while the\n  // type says no, and then the settings would mint a token the SCIM API refuses. Where the type says no but the\n  // organization still holds an unrevoked token, the settings stay reachable with that token's Revoke and nothing else\n  // (#2649); whether it holds one is the one capability the shell has to ask the server.\n  const directoryProvisioningOffered = isFeatureOffered(CoreFeature.DIRECTORY_PROVISIONING);\n  const currentOrganizationType = useCurrentOrganizationType();\n  const currentOrganizationDirectoryProvisioned = useCurrentOrganizationDirectoryProvisioned();\n  const holdsUnrevokedScimToken = useCurrentOrganizationHoldsUnrevokedScimToken(\n    isUnrevokedScimTokenProbeNeeded({\n      featureOffered: directoryProvisioningOffered,\n      organizationTypeKnown: currentOrganizationType !== undefined,\n      organizationTypeDirectoryProvisioned: currentOrganizationDirectoryProvisioned,\n    }),\n    effectiveRoles,\n  );\n  const directoryProvisioningCapabilities = useMemo(\n    () => deriveDirectoryProvisioningCapabilities({\n      featureOffered: directoryProvisioningOffered,\n      organizationTypeDirectoryProvisioned: currentOrganizationDirectoryProvisioned,\n      holdsUnrevokedToken: holdsUnrevokedScimToken,\n    }),\n    [directoryProvisioningOffered, currentOrganizationDirectoryProvisioned, holdsUnrevokedScimToken],\n  );\n  const siemEnabled = isFeatureOffered(CoreFeature.SECURITY_EVENT_EXPORT);\n  const webhooksEnabled = isFeatureOffered(CoreFeature.M2M_WEBHOOK_DELIVERY);\n\n  // Which side of an organization relationship the CURRENT organization's type can take (#1597): read from the\n  // declaration, so a representing organization is not offered a granting organization's register and a granting\n  // organization is not offered a representing organization's list of the organizations it represents.\n  const relationshipSides = useRelationshipSideCapabilities();\n  // Which form the relationship verbs take in this application's shape (#2618): the operator asked without a name, or\n  // the other organization named.\n  const relationshipShape = useRelationshipShapeCapabilities();\n  // Who is offered the decision inbox (#2577): a holder of an answering role in ANY organization entry the server reads\n  // an answerer from, not only in the current organization. Read without the throwing `useApplication`.\n  const decisionInboxOffer = useContext(ApplicationContext)?.appConfig?.decisionInbox;\n  // Whether the application declares any professional qualification kind (#2967): the qualifications settings need one.\n  const professionalQualificationsDeclared = Object.keys(useContext(ApplicationContext)?.appConfig?.professionalQualificationKinds ?? {}).length > 0;\n  const decisionInbox = useMemo(\n    () => deriveDecisionInboxCapabilities({ offer: decisionInboxOffer, effectiveRoles }),\n    [decisionInboxOffer, effectiveRoles],\n  );\n\n  return useMemo(() => ({\n    activeMode: appMode?.activeMode ?? null,\n    availableModes: appMode?.availableModes ?? [],\n    allScopeValues: appScope?.allScopeValues ?? {},\n    effectiveRoles,\n    resolvedFeatures: resolvedFeatures?.features ?? [],\n    runtimeCapabilities: {\n      billingEnabled: Boolean(billing?.isEnabled),\n      ssoEnabled,\n      ...directoryProvisioningCapabilities,\n      siemEnabled,\n      webhooksEnabled,\n      ...relationshipSides,\n      ...relationshipShape,\n      ...decisionInbox,\n      [PROFESSIONAL_QUALIFICATIONS_DECLARED_CAPABILITY]: professionalQualificationsDeclared,\n    },\n  }), [\n    appMode?.activeMode,\n    appMode?.availableModes,\n    appScope?.allScopeValues,\n    effectiveRoles,\n    resolvedFeatures?.features,\n    billing?.isEnabled,\n    ssoEnabled,\n    directoryProvisioningCapabilities,\n    siemEnabled,\n    webhooksEnabled,\n    relationshipSides,\n    relationshipShape,\n    decisionInbox,\n    professionalQualificationsDeclared,\n  ]);\n}\n\n/**\n * Whether a launcher item (or a Settings Hub section) survives the app-shell filtering pass: every required runtime\n * capability is on, and the viewer holds one of its `requiredRoles` (#2376).\n *\n * `requiredFeatures` remains the canonical plan/subscription gate later in the\n * launcher resolution + surface rendering pipeline.\n */\nexport function isLauncherRuntimeAvailabilitySatisfied(\n  config: LauncherRuntimeAvailabilityConfig | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): boolean {\n  const capabilitiesOn = (config?.requiredCapabilities ?? []).every(capability => Boolean(context.runtimeCapabilities[capability]));\n  return capabilitiesOn && viewerHoldsOneOfRoles(config?.requiredRoles, context.effectiveRoles);\n}\n\nfunction filterSidebarItemsByRuntimeAvailability(\n  items: SidebarItem[],\n  context: LauncherRuntimeAvailabilityContext,\n): SidebarItem[] {\n  return items.flatMap(item => {\n    if (!isLauncherRuntimeAvailabilitySatisfied(item.runtimeAvailability, context)) {\n      return [];\n    }\n\n    if (!item.children?.length) {\n      return [item];\n    }\n\n    return [{\n      ...item,\n      children: filterSidebarItemsByRuntimeAvailability(item.children, context),\n    }];\n  });\n}\n\nfunction filterNavigationListSectionByRuntimeAvailability(\n  section: SidebarSection_NavigationList,\n  context: LauncherRuntimeAvailabilityContext,\n): SidebarSection_NavigationList {\n  return {\n    ...section,\n    children: filterSidebarItemsByRuntimeAvailability(section.children, context),\n  };\n}\n\nexport function filterSidebarSectionsByRuntimeAvailability(\n  sections: SidebarSection[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): SidebarSection[] | undefined {\n  if (!sections?.length) return sections;\n\n  const filteredSections: SidebarSection[] = [];\n\n  for (const section of sections) {\n    if (!isLauncherRuntimeAvailabilitySatisfied(section.runtimeAvailability, context)) {\n      continue;\n    }\n\n    if (section.contentKind === SidebarSectionContentKind.NAVIGATION_LIST) {\n      filteredSections.push(filterNavigationListSectionByRuntimeAvailability(section, context));\n      continue;\n    }\n\n    filteredSections.push(section);\n  }\n\n  return filteredSections;\n}\n\nexport function filterCommandMenuCommandsByRuntimeAvailability(\n  commands: CommandMenuCommand[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): CommandMenuCommand[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(commands, context);\n}\n\ntype RuntimeAvailabilityFlatLauncherItem = {\n  runtimeAvailability?: LauncherRuntimeAvailabilityConfig;\n};\n\nexport function filterFlatLauncherItemsByRuntimeAvailability<T extends RuntimeAvailabilityFlatLauncherItem>(\n  items: T[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): T[] | undefined {\n  if (!items?.length) return items;\n\n  return items.filter(item =>\n    isLauncherRuntimeAvailabilitySatisfied(item.runtimeAvailability, context),\n  );\n}\n\nexport function filterQuickActionItemsByRuntimeAvailability(\n  items: QuickActionItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): QuickActionItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n\nexport function filterToolbarItemsByRuntimeAvailability(\n  items: ToolbarItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): ToolbarItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n\nexport function filterControlPanelItemsByRuntimeAvailability(\n  items: ControlPanelItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): ControlPanelItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n\nexport function filterHotkeyBindingsByRuntimeAvailability(\n  bindings: HotkeyBinding[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): HotkeyBinding[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(bindings, context);\n}\n\nexport function filterMenubarItemsByRuntimeAvailability(\n  items: MenubarLauncherItem[] | undefined,\n  context: LauncherRuntimeAvailabilityContext,\n): MenubarLauncherItem[] | undefined {\n  return filterFlatLauncherItemsByRuntimeAvailability(items, context);\n}\n"]}

package/dist/esm/core/navigation/navigation-cascade.d.ts

@@ -2,9 +2,10 @@
  * The CASCADING ORCHESTRATOR: what fills the zones a reader did not click.
  *
  * Two functions, one concern. When content lands in an adjacent zone, the zones ABOVE it must show
- * the ancestors that content belongs to, or the reader sees a record with no context beside it —
- * `cascadeAncestorZones` for a record with a parent chain, `cascadeSiblingListIntoPrimary` for a FLAT
- * resource whose detail was split out of primary (#203).
+ * the context that content belongs to, or the reader sees a record with nothing beside it.
+ * `cascadeAncestorZones` places a record's ANCESTORS. `cascadeSiblingListIntoPrimary` places a record's
+ * OWN collection in PRIMARY, in two roles: beside a FLAT resource's detail split out of primary (#203),
+ * and in place of an ancestor that PRIMARY cannot hold (#2115, see the PRIMARY rule in the cascade).
  *
  * Split out of `useNavigationController.ts` on 2026-09-25. It is the ONE piece both halves of that
  * module used — the controller cascades after a click, the router-sync hooks cascade after a deep
@@ -15,21 +16,22 @@ import { NavigationZoneState, NavigationContent, NavigationContentType } from '.
 import { NavigationZoneName } from '@wildo-ai/saas-models';
 import type { FrontendResource_ParentResourceRequirement } from '../../core/resources/resource-path.frontend.schemas';
 import type { FrontendResourcesRegistry } from '../../core/resources/resources.frontend.schemas';
+import { NavigationSource } from './navigation.schemas';
 /**
- * Auto-populate ancestor zones when navigating to SECONDARY or COMPANION.
+ * Put a record's OWN collection into PRIMARY, in the record's parent context.
  *
- * When a resource is placed in SECONDARY or COMPANION, its ancestor resources
- * should be visible in the zones above it. This function checks which
- * ancestor zones are empty and populates them with the appropriate content.
+ * Two callers, one shape — the list-detail pairing, which the zone-dependency cleanup keeps (a pane
+ * beside a collection of its own type):
  *
- * Rules:
- * - Only cascades for resource operations (not views)
- * - Only populates EMPTY zones (never overwrites user-navigated content)
- * - Uses `parentResourcesRequirements` to determine ancestor chain
- * - Stops at primary scope ancestors (org/user level)
- * - Maximum 2 ancestor zones (PRIMARY + SECONDARY for a COMPANION target)
+ * - `useRouterSync`, for a FLAT resource whose detail was restored into SECONDARY (#203) — or, at a width
+ *   where that pane is collapsed, pushed into PRIMARY on top of this list;
+ * - `cascadeAncestorZones`, in place of an ancestor PRIMARY cannot hold — a collection of another
+ *   type, or none at all (#2115).
+ *
+ * It places nothing when the resource has no configuration or no addressable LIST: PRIMARY then stays
+ * empty and renders the route's Outlet. That is the one remaining way to show a record twice, and it
+ * needs a resource whose records are reachable while its collection is not.
  */
-/** Put a flat resource's LIST into PRIMARY beside a detail restored into SECONDARY (#203). */
 export declare function cascadeSiblingListIntoPrimary(params: {
     resourceType: string;
     contextResourceIdentifiers: Record<string, string>;
@@ -37,7 +39,35 @@ export declare function cascadeSiblingListIntoPrimary(params: {
     registry: FrontendResourcesRegistry;
     emit: (event: string, payload: any) => void;
     getZoneState: (zone: NavigationZoneName) => NavigationZoneState;
+    /**
+     * Provenance stamped on the emitted event — `URL_SYNC` by default, `CONTROLLER` from the ancestor
+     * cascade, which stamps its own ancestor placements the same way on both paths. Recorded for
+     * diagnostics (the navigation log); nothing branches on it.
+     */
+    navigationSource?: NavigationSource;
+    /**
+     * Replace what PRIMARY holds instead of leaving it alone. The ancestor cascade passes its own
+     * `overwriteExisting` here: a URL-first rebuild REPLACES the ancestor zones so they match the URL, and
+     * this placement stands in for an ancestor, so it must replace too. Without it, stale primary content
+     * would survive a rebuild that every other ancestor placement overwrites.
+     */
+    replaceExisting?: boolean;
 }): void;
+/**
+ * Auto-populate ancestor zones when navigating to SECONDARY or COMPANION.
+ *
+ * When a resource is placed in SECONDARY or COMPANION, its ancestor resources
+ * should be visible in the zones above it.
+ *
+ * Rules:
+ * - Only cascades for resource operations (not views)
+ * - Populates EMPTY zones only — unless `overwriteExisting` (URL-first reconstruction), which replaces
+ *   them so the visible stack matches the authoritative browser URL
+ * - Uses `parentResourcesRequirements` to determine ancestor chain
+ * - Stops at primary scope ancestors (org/user level)
+ * - Maximum 2 ancestor zones (PRIMARY + SECONDARY for a COMPANION target)
+ * - PRIMARY never receives a collection of another type than the pane below it (see the rule in the loop)
+ */
 export declare function cascadeAncestorZones(targetContent: NavigationContent & {
     contentType: NavigationContentType.RESOURCE_OPERATION;
 }, resolvedZone: NavigationZoneName, registry: FrontendResourcesRegistry, contextIdentifiers: Record<string, string>, emit: (event: string, payload: any) => void, routerNavigate: ReturnType<typeof useNavigate> | null, getZoneState: (zone: NavigationZoneName) => NavigationZoneState, options?: {

package/dist/esm/core/navigation/navigation-cascade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"navigation-cascade.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/navigation-cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,kBAAkB,EAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AACpI,OAAO,KAAK,EACV,yBAAyB,EAC1B,MAAM,+DAA+D,CAAC;AAgBvE;;;;;;;;;;;;;GAaG;AACH,8FAA8F;AAC9F,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,2BAA2B,EAAE,0CAA0C,EAAE,CAAC;IAC1E,QAAQ,EAAE,yBAAyB,CAAC;IACpC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC;IAC5C,YAAY,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,mBAAmB,CAAC;CACjE,GAAG,IAAI,CA+DP;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,iBAAiB,GAAG;IAAE,WAAW,EAAE,qBAAqB,CAAC,kBAAkB,CAAA;CAAE,EAC5F,YAAY,EAAE,kBAAkB,EAChC,QAAQ,EAAE,yBAAyB,EACnC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1C,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,EAC3C,cAAc,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,IAAI,EACrD,YAAY,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,mBAAmB,EAC/D,OAAO,CAAC,EAAE;IACR,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,GACA,IAAI,CA0JN"}
+{"version":3,"file":"navigation-cascade.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/navigation-cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,kBAAkB,EAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,mEAAmE,CAAC;AACpI,OAAO,KAAK,EACV,yBAAyB,EAC1B,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAexD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,2BAA2B,EAAE,0CAA0C,EAAE,CAAC;IAC1E,QAAQ,EAAE,yBAAyB,CAAC;IACpC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC;IAC5C,YAAY,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,mBAAmB,CAAC;IAChE;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,IAAI,CAiEP;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,iBAAiB,GAAG;IAAE,WAAW,EAAE,qBAAqB,CAAC,kBAAkB,CAAA;CAAE,EAC5F,YAAY,EAAE,kBAAkB,EAChC,QAAQ,EAAE,yBAAyB,EACnC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1C,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,EAC3C,cAAc,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,IAAI,EACrD,YAAY,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,mBAAmB,EAC/D,OAAO,CAAC,EAAE;IACR,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,GACA,IAAI,CA4MN"}

package/dist/esm/core/navigation/navigation-cascade.js

@@ -2,9 +2,10 @@
  * The CASCADING ORCHESTRATOR: what fills the zones a reader did not click.
  *
  * Two functions, one concern. When content lands in an adjacent zone, the zones ABOVE it must show
- * the ancestors that content belongs to, or the reader sees a record with no context beside it —
- * `cascadeAncestorZones` for a record with a parent chain, `cascadeSiblingListIntoPrimary` for a FLAT
- * resource whose detail was split out of primary (#203).
+ * the context that content belongs to, or the reader sees a record with nothing beside it.
+ * `cascadeAncestorZones` places a record's ANCESTORS. `cascadeSiblingListIntoPrimary` places a record's
+ * OWN collection in PRIMARY, in two roles: beside a FLAT resource's detail split out of primary (#203),
+ * and in place of an ancestor that PRIMARY cannot hold (#2115, see the PRIMARY rule in the cascade).
  *
  * Split out of `useNavigationController.ts` on 2026-09-25. It is the ONE piece both halves of that
  * module used — the controller cascades after a click, the router-sync hooks cascade after a deep
@@ -23,23 +24,23 @@ import { logDebug, resourceOperationOwnsBrowserUrl, updateBrowserUrl } from './n
 // Cascading Orchestrator
 // ================================
 /**
- * Auto-populate ancestor zones when navigating to SECONDARY or COMPANION.
+ * Put a record's OWN collection into PRIMARY, in the record's parent context.
  *
- * When a resource is placed in SECONDARY or COMPANION, its ancestor resources
- * should be visible in the zones above it. This function checks which
- * ancestor zones are empty and populates them with the appropriate content.
+ * Two callers, one shape — the list-detail pairing, which the zone-dependency cleanup keeps (a pane
+ * beside a collection of its own type):
  *
- * Rules:
- * - Only cascades for resource operations (not views)
- * - Only populates EMPTY zones (never overwrites user-navigated content)
- * - Uses `parentResourcesRequirements` to determine ancestor chain
- * - Stops at primary scope ancestors (org/user level)
- * - Maximum 2 ancestor zones (PRIMARY + SECONDARY for a COMPANION target)
+ * - `useRouterSync`, for a FLAT resource whose detail was restored into SECONDARY (#203) — or, at a width
+ *   where that pane is collapsed, pushed into PRIMARY on top of this list;
+ * - `cascadeAncestorZones`, in place of an ancestor PRIMARY cannot hold — a collection of another
+ *   type, or none at all (#2115).
+ *
+ * It places nothing when the resource has no configuration or no addressable LIST: PRIMARY then stays
+ * empty and renders the route's Outlet. That is the one remaining way to show a record twice, and it
+ * needs a resource whose records are reachable while its collection is not.
  */
-/** Put a flat resource's LIST into PRIMARY beside a detail restored into SECONDARY (#203). */
 export function cascadeSiblingListIntoPrimary(params) {
     const { resourceType, contextResourceIdentifiers, parentResourcesRequirements, registry, emit, getZoneState } = params;
-    if (getZoneState(NavigationZoneName.PRIMARY).stack.length > 0)
+    if (!params.replaceExisting && getZoneState(NavigationZoneName.PRIMARY).stack.length > 0)
         return;
     const resourceConfig = registry.resourceConfigurations?.[resourceType];
     if (!resourceConfig)
@@ -50,8 +51,10 @@ export function cascadeSiblingListIntoPrimary(params) {
      * The DEFAULT addressable LIST, picked WITHOUT the context-addressability check.
      * `pickPreferredOperationForCoreSemanticAddressability` asks "reachable given the PARENT context",
      * which a flat STANDALONE resource can never satisfy — it answers false for an operation that is
-     * plainly addressable and reachable from the sidebar. `allowBulk` is required too: a LIST addresses
-     * a COLLECTION and the semantic filter drops bulk operations by default.
+     * plainly addressable and reachable from the sidebar. For a NESTED resource (the #2115 role) the
+     * parent ids it needs are in `contextResourceIdentifiers`, and the URL below is resolved from them.
+     * `allowBulk` is required too: a LIST addresses a COLLECTION and the semantic filter drops bulk
+     * operations by default.
      */
     const listOperation = pickPreferredOperationForCoreSemantic(getOperationsForCoreSemantic(resourceConfig.operations ?? [], CoreResourceOperation.LIST, { allowBulk: true })
         .filter((candidate) => isOperationAddressable(candidate.operationFrontendConfig)), CoreResourceOperation.LIST, { allowBulk: true });
@@ -85,10 +88,25 @@ export function cascadeSiblingListIntoPrimary(params) {
         ...(listUrl ? { urlPath: listUrl } : {}),
         stackEntryId: NavigationUtils.generateStackEntryId(),
         initiator: { sourceZone: NavigationZoneName.PRIMARY },
-        navigationSource: NavigationSource.URL_SYNC,
+        navigationSource: params.navigationSource ?? NavigationSource.URL_SYNC,
         transition: NavigationTransition.REPLACE,
     });
 }
+/**
+ * Auto-populate ancestor zones when navigating to SECONDARY or COMPANION.
+ *
+ * When a resource is placed in SECONDARY or COMPANION, its ancestor resources
+ * should be visible in the zones above it.
+ *
+ * Rules:
+ * - Only cascades for resource operations (not views)
+ * - Populates EMPTY zones only — unless `overwriteExisting` (URL-first reconstruction), which replaces
+ *   them so the visible stack matches the authoritative browser URL
+ * - Uses `parentResourcesRequirements` to determine ancestor chain
+ * - Stops at primary scope ancestors (org/user level)
+ * - Maximum 2 ancestor zones (PRIMARY + SECONDARY for a COMPANION target)
+ * - PRIMARY never receives a collection of another type than the pane below it (see the rule in the loop)
+ */
 export function cascadeAncestorZones(targetContent, resolvedZone, registry, contextIdentifiers, emit, routerNavigate, getZoneState, options) {
     const parentRequirements = targetContent.resourceContext.parentResourcesRequirements;
     if (!parentRequirements || parentRequirements.length === 0)
@@ -157,7 +175,12 @@ export function cascadeAncestorZones(targetContent, resolvedZone, registry, cont
                 ancestorContextIdentifiers[contextKey] = id;
             }
         }
-        const ancestorSelfId = contextIdentifiers[ancestorResourceType];
+        // The ancestor's own id. Its FOREIGN-KEY slot names it whenever the context carries one; the TYPE slot does
+        // only for an ancestor of another type. For a self-referencing ancestor (the target's own type) the type slot
+        // is the TARGET's own id — a self-referencing parent lives in its foreign-key slot (#2143) — so reading it
+        // there placed the record as its own parent (a BACKWARD self-relationship cascades the parent's READ).
+        const ancestorSelfId = (ancestor.foreignKeyField ? contextIdentifiers[ancestor.foreignKeyField] : undefined)
+            ?? (ancestorResourceType !== targetResourceType ? contextIdentifiers[ancestorResourceType] : undefined);
         const ancestorSelectionContextIdentifiers = ancestorSelfId
             ? {
                 ...ancestorContextIdentifiers,
@@ -169,6 +192,51 @@ export function cascadeAncestorZones(targetContent, resolvedZone, registry, cont
             contextResourceIdentifiers: ancestorSelectionContextIdentifiers,
             contextualParameters: FrontendResourceUtils.buildContextualParameters(ancestorSelectionContextIdentifiers, registry),
         });
+        /*
+         * PRIMARY is what the zone-dependency cleanup measures SECONDARY against (`NavigationContext`, its top
+         * entry only; COMPANION is kept when it belongs to PRIMARY's record or to the SECONDARY record beside
+         * it). A collection in PRIMARY keeps the pane below it only when it holds that pane's OWN type — the
+         * list-detail pairing. A collection of another type (the parent's, when the parent's record has no page
+         * of its own) clears the very pane this cascade is placing it for (#2115). An EMPTY primary is no answer
+         * either: it renders the route's Outlet, which is the same record a second time.
+         *
+         * So the cascade never PLACES such a collection in PRIMARY: it places the pane below's own collection
+         * instead, in that pane's parent context. (It does not police what a reader put there by clicking.) In
+         * SECONDARY (the middle of a three-pane chain) a parent's collection clears nothing — the companion is
+         * still kept by the record in PRIMARY — and the resolver's fallback stands.
+         *
+         * On the click path this placement writes no browser URL, unlike an ancestor placement below: the URL
+         * stays the record's. A deep link writes none either way.
+         *
+         * What this cannot rescue, stated rather than hidden: a pane below whose collection is not addressable
+         * (or that has no configuration). Nothing is placed, PRIMARY stays empty, and it renders the route's
+         * Outlet — the record twice (`cascadeSiblingListIntoPrimary`).
+         */
+        const placesForeignCollectionInPrimary = zone === NavigationZoneName.PRIMARY
+            && (!opConfig || (NavigationUtils.isCollectionOperationContext({ operation: opConfig }) && ancestorResourceType !== childType));
+        if (placesForeignCollectionInPrimary) {
+            // The pane below's parent chain is everything up to and including this ancestor (root → leaf). For the
+            // nearest ancestor that is the record's whole chain.
+            const childParentRequirements = parentRequirements.slice(0, ancestorIndex + 1);
+            const childContextIdentifiers = {};
+            for (const req of childParentRequirements) {
+                const contextKey = req.foreignKeyField ?? req.resourceType;
+                const id = contextIdentifiers[contextKey] ?? contextIdentifiers[req.resourceType];
+                if (id)
+                    childContextIdentifiers[contextKey] = id;
+            }
+            cascadeSiblingListIntoPrimary({
+                resourceType: childType,
+                contextResourceIdentifiers: childContextIdentifiers,
+                parentResourcesRequirements: childParentRequirements,
+                registry,
+                emit,
+                getZoneState,
+                navigationSource: NavigationSource.CONTROLLER,
+                replaceExisting: !!options?.overwriteExisting,
+            });
+            continue;
+        }
         if (!opConfig)
             continue;
         const ancestorOp = resolveEffectiveCoreOperationFromOperation(opConfig);

package/dist/esm/core/navigation/navigation-cascade.js.map

@@ -1 +1 @@
-{"version":3,"file":"navigation-cascade.js","sourceRoot":"","sources":["../../../../../src/core/navigation/navigation-cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EACL,cAAc,GACf,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAGL,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AACvG,OAAO,EACL,0CAA0C,EAC1C,4BAA4B,EAC5B,qCAAqC,GACtC,MAAM,uEAAuE,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAChH,mCAAmC;AACnC,yBAAyB;AACzB,mCAAmC;AAEnC;;;;;;;;;;;;;GAaG;AACH,8FAA8F;AAC9F,MAAM,UAAU,6BAA6B,CAAC,MAO7C;IACC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IACvH,IAAI,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAEtE,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,CAAC,cAAc;QAAE,OAAO;IAE5B,MAAM,sBAAsB,GAAG,EAAE,GAAG,0BAA0B,EAAE,CAAC;IACjE,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,MAAM,aAAa,GAAG,qCAAqC,CACzD,4BAA4B,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,EAAE,qBAAqB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC3G,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,EACnF,qBAAqB,CAAC,IAAI,EAC1B,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,IAAI,CAAC,aAAa;QAAE,OAAO;IAE3B;;;;;;;;;;;;;OAaG;IACH,MAAM,OAAO,GAAG,eAAe,CAAC,kBAAkB,CAChD,cAAuB,EACvB,aAAsB,EACtB,sBAAsB,EACtB,QAAQ,CAAC,2BAA2B,EACpC,2BAAoC,CACrC,EAAE,WAAW,CAAC;IAEf,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;QACtC,IAAI,EAAE,kBAAkB,CAAC,OAAO;QAChC,OAAO,EAAE;YACP,WAAW,EAAE,qBAAqB,CAAC,kBAAkB;YACrD,eAAe,EAAE,qBAAqB,CAAC,mDAAmD,CAAC;gBACzF,YAAY,EAAE,SAAS,EAAE,aAAa;gBACtC,0BAA0B,EAAE,sBAAsB;gBAClD,2BAA2B;aAC5B,CAAC;SACH;QACD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,YAAY,EAAE,eAAe,CAAC,oBAAoB,EAAE;QACpD,SAAS,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,OAAO,EAAE;QACrD,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ;QAC3C,UAAU,EAAE,oBAAoB,CAAC,OAAO;KACzC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,aAA4F,EAC5F,YAAgC,EAChC,QAAmC,EACnC,kBAA0C,EAC1C,IAA2C,EAC3C,cAAqD,EACrD,YAA+D,EAC/D,OAEC;IAED,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,2BAA2E,CAAC;IACrI,IAAI,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnE,yCAAyC;IACzC,iFAAiF;IACjF,0FAA0F;IAC1F,iGAAiG;IACjG,MAAM,eAAe,GAAyB,EAAE,CAAC;IACjD,IAAI,YAAY,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAClD,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,YAAY,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;QACzD,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEzC,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC;IAEpD,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC;IAEtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAE9B,oEAAoE;QACpE,IAAI,QAAQ,CAAC,cAAc;YAAE,SAAS;QAEtC,8EAA8E;QAC9E,2EAA2E;QAC3E,+CAA+C;QAC/C,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,iBAAiB,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAExE,+BAA+B;QAC/B,MAAM,oBAAoB,GAAG,QAAQ,CAAC,YAAY,CAAC;QACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC,oBAAoB,CAAC,CAAC;QAC/E,IAAI,CAAC,cAAc;YAAE,SAAS;QAE9B,wEAAwE;QACxE,MAAM,SAAS,GAAG,QAAQ,CAAC,iBAAiB;eACvC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,eAAe,CAAC,uBAAuB,CAC1D,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,eAAe,CACpE,CAAC;QAEF,qDAAqD;QACrD,iFAAiF;QACjF,6EAA6E;QAC7E,4EAA4E;QAC5E,iFAAiF;QACjF,+EAA+E;QAC/E,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,aAAa,GAAG,CAAC;YAC1C,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;QAEP,kCAAkC;QAClC,MAAM,0BAA0B,GAA2B,EAAE,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,YAAY,CAAC;YAC3D,2EAA2E;YAC3E,wEAAwE;YACxE,gCAAgC;YAChC,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClF,IAAI,EAAE,EAAE,CAAC;gBACP,0BAA0B,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAChE,MAAM,mCAAmC,GAAG,cAAc;YACxD,CAAC,CAAC;gBACE,GAAG,0BAA0B;gBAC7B,CAAC,oBAAoB,CAAC,EAAE,cAAc;aACvC;YACH,CAAC,CAAC,0BAA0B,CAAC;QAE/B,MAAM,QAAQ,GAAG,eAAe,CAAC,8BAA8B,CAC7D,YAAY,EACZ,cAAqB,EACrB;YACE,QAAQ;YACR,0BAA0B,EAAE,mCAAmC;YAC/D,oBAAoB,EAAE,qBAAqB,CAAC,yBAAyB,CACnE,mCAAmC,EACnC,QAAQ,CACT;SACF,CACF,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,UAAU,GAAG,0CAA0C,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,cAAc,IAAI,UAAU,KAAK,qBAAqB,CAAC,IAAI,EAAE,CAAC;YAChE,0BAA0B,CAAC,oBAAoB,CAAC,GAAG,cAAc,CAAC;QACpE,CAAC;QAED,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,mDAAmD,CAAC;YACxG,YAAY,EAAE,oBAAoB;YAClC,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,0BAA0B;YACtD,2BAA2B,EAAE,kBAAkB;SAChD,CAAC,CAAC;QAEH,MAAM,eAAe,GAAsB;YACzC,WAAW,EAAE,qBAAqB,CAAC,kBAAkB;YACrD,eAAe,EAAE,uBAAuB;SACzC,CAAC;QAEF,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,WAA+B,CAAC;QACpC,IAAI,+BAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,kBAAkB,CACjD,cAAqB,EACrB,QAAe,EACf,0BAA0B,EAC1B,QAAQ,CAAC,2BAA2B,EACpC,kBAAyB,CAC1B,CAAC;YACF,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;gBAC1B,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAAC,oBAAoB,EAAE,CAAC;QAC5D,QAAQ,CAAC,gDAAgD,EAAE;YACzD,IAAI;YACJ,oBAAoB;YACpB,UAAU;YACV,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;YACtC,IAAI;YACJ,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,WAAW;YACpB,YAAY;YACZ,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;YAC/B,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;YAC7C,UAAU,EAAE,oBAAoB,CAAC,OAAO;SACzC,CAAC,CAAC;QAEH,wEAAwE;QACxE,8EAA8E;QAC9E,IAAI,IAAI,KAAK,kBAAkB,CAAC,OAAO,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YACzE,gBAAgB,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * The CASCADING ORCHESTRATOR: what fills the zones a reader did not click.\n *\n * Two functions, one concern. When content lands in an adjacent zone, the zones ABOVE it must show\n * the ancestors that content belongs to, or the reader sees a record with no context beside it —\n * `cascadeAncestorZones` for a record with a parent chain, `cascadeSiblingListIntoPrimary` for a FLAT\n * resource whose detail was split out of primary (#203).\n *\n * Split out of `useNavigationController.ts` on 2026-09-25. It is the ONE piece both halves of that\n * module used — the controller cascades after a click, the router-sync hooks cascade after a deep\n * link — which is why it is its own module rather than living with either.\n */\n\nimport {\n  useNavigate,\n} from 'react-router-dom';\nimport {\n  FrontendEvents,\n} from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport {\n  NavigationZoneState,\n  NavigationContent,\n  NavigationContentType,\n} from './navigation.schemas';\nimport {\n  NavigationTransition,\n  NavigationZoneName,\n  CoreResourceOperation,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResource_ParentResourceRequirement } from '~wildo-frontend-lib/core/resources/resource-path.frontend.schemas';\nimport type {\n  FrontendResourcesRegistry,\n} from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { NavigationSource } from './navigation.schemas';\nimport { NavigationUtils } from './navigation.utils';\nimport { FrontendResourceUtils, frontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { isOperationAddressable } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport {\n  resolveEffectiveCoreOperationFromOperation,\n  getOperationsForCoreSemantic,\n  pickPreferredOperationForCoreSemantic,\n} from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\n\nimport { logDebug, resourceOperationOwnsBrowserUrl, updateBrowserUrl } from './navigation-controller-internals';\n// ================================\n// Cascading Orchestrator\n// ================================\n\n/**\n * Auto-populate ancestor zones when navigating to SECONDARY or COMPANION.\n *\n * When a resource is placed in SECONDARY or COMPANION, its ancestor resources\n * should be visible in the zones above it. This function checks which\n * ancestor zones are empty and populates them with the appropriate content.\n *\n * Rules:\n * - Only cascades for resource operations (not views)\n * - Only populates EMPTY zones (never overwrites user-navigated content)\n * - Uses `parentResourcesRequirements` to determine ancestor chain\n * - Stops at primary scope ancestors (org/user level)\n * - Maximum 2 ancestor zones (PRIMARY + SECONDARY for a COMPANION target)\n */\n/** Put a flat resource's LIST into PRIMARY beside a detail restored into SECONDARY (#203). */\nexport function cascadeSiblingListIntoPrimary(params: {\n  resourceType: string;\n  contextResourceIdentifiers: Record<string, string>;\n  parentResourcesRequirements: FrontendResource_ParentResourceRequirement[];\n  registry: FrontendResourcesRegistry;\n  emit: (event: string, payload: any) => void;\n  getZoneState: (zone: NavigationZoneName) => NavigationZoneState;\n}): void {\n  const { resourceType, contextResourceIdentifiers, parentResourcesRequirements, registry, emit, getZoneState } = params;\n  if (getZoneState(NavigationZoneName.PRIMARY).stack.length > 0) return;\n\n  const resourceConfig = registry.resourceConfigurations?.[resourceType];\n  if (!resourceConfig) return;\n\n  const listContextIdentifiers = { ...contextResourceIdentifiers };\n  delete listContextIdentifiers[resourceType];\n\n  /*\n   * The DEFAULT addressable LIST, picked WITHOUT the context-addressability check.\n   * `pickPreferredOperationForCoreSemanticAddressability` asks \"reachable given the PARENT context\",\n   * which a flat STANDALONE resource can never satisfy — it answers false for an operation that is\n   * plainly addressable and reachable from the sidebar. `allowBulk` is required too: a LIST addresses\n   * a COLLECTION and the semantic filter drops bulk operations by default.\n   */\n  const listOperation = pickPreferredOperationForCoreSemantic(\n    getOperationsForCoreSemantic(resourceConfig.operations ?? [], CoreResourceOperation.LIST, { allowBulk: true })\n      .filter((candidate) => isOperationAddressable(candidate.operationFrontendConfig)),\n    CoreResourceOperation.LIST,\n    { allowBulk: true },\n  );\n  if (!listOperation) return;\n\n  /*\n   * The list's OWN address, which is not the same thing as writing the browser URL.\n   *\n   * This entry was placed address-less under the note \"the browser URL belongs to the DETAIL in\n   * secondary\" — true of who WRITES the URL, and wrong as a reason to leave `urlPath` empty. An\n   * entry's `urlPath` is its ADDRESS, read by everything that asks what a zone holds: `goBack`,\n   * `dismissZone`, `findStructuralRouteOwner`, `zoneOwnsBrowserUrl`. Nothing here writes the\n   * browser URL — this is an emit, and the controller's write lives in `navigate()`.\n   *\n   * Measured on the workbench, 2026-09-25: with the list address-less, `resolveZoneDismissUrl`\n   * found no primary address, wrote nothing, and the pane CLOSED while the URL still named it — so\n   * the next reload reopened it. `goBack` from the last pane had the identical hole, which predates\n   * the dismiss control and is fixed by the same line.\n   */\n  const listUrl = NavigationUtils.resolveResourceUrl(\n    resourceConfig as never,\n    listOperation as never,\n    listContextIdentifiers,\n    registry.allResourceFieldIdentifiers,\n    parentResourcesRequirements as never,\n  )?.resolvedUrl;\n\n  emit(FrontendEvents.NAVIGATION_REPLACE, {\n    zone: NavigationZoneName.PRIMARY,\n    content: {\n      contentType: NavigationContentType.RESOURCE_OPERATION,\n      resourceContext: frontendResourceUtils.createFrontendResourceOperationContextFromOperation({\n        resourceType, operation: listOperation,\n        contextResourceIdentifiers: listContextIdentifiers,\n        parentResourcesRequirements,\n      }),\n    },\n    ...(listUrl ? { urlPath: listUrl } : {}),\n    stackEntryId: NavigationUtils.generateStackEntryId(),\n    initiator: { sourceZone: NavigationZoneName.PRIMARY },\n    navigationSource: NavigationSource.URL_SYNC,\n    transition: NavigationTransition.REPLACE,\n  });\n}\n\nexport function cascadeAncestorZones(\n  targetContent: NavigationContent & { contentType: NavigationContentType.RESOURCE_OPERATION },\n  resolvedZone: NavigationZoneName,\n  registry: FrontendResourcesRegistry,\n  contextIdentifiers: Record<string, string>,\n  emit: (event: string, payload: any) => void,\n  routerNavigate: ReturnType<typeof useNavigate> | null,\n  getZoneState: (zone: NavigationZoneName) => NavigationZoneState,\n  options?: {\n    overwriteExisting?: boolean;\n  },\n): void {\n  const parentRequirements = targetContent.resourceContext.parentResourcesRequirements as FrontendResource_ParentResourceRequirement[];\n  if (!parentRequirements || parentRequirements.length === 0) return;\n\n  // Determine which zones need population.\n  // Order matters: zonesToPopulate[i] maps to ancestors[i] (nearest parent first).\n  // For COMPANION target: nearest parent → SECONDARY (adjacent), furthest → PRIMARY (root).\n  // This maintains the master-detail-detail convention: PRIMARY=broadest, COMPANION=most specific.\n  const zonesToPopulate: NavigationZoneName[] = [];\n  if (resolvedZone === NavigationZoneName.SECONDARY) {\n    zonesToPopulate.push(NavigationZoneName.PRIMARY);\n  } else if (resolvedZone === NavigationZoneName.COMPANION) {\n    zonesToPopulate.push(NavigationZoneName.SECONDARY, NavigationZoneName.PRIMARY);\n  }\n\n  if (zonesToPopulate.length === 0) return;\n\n  // parentResourcesRequirements is ordered root → leaf (closest ancestor last).\n  // Reverse to process nearest parent first — nearest maps to adjacent zone.\n  const ancestors = [...parentRequirements].reverse();\n\n  const targetResourceType = targetContent.resourceContext.resourceType;\n\n  for (let i = 0; i < zonesToPopulate.length && i < ancestors.length; i++) {\n    const zone = zonesToPopulate[i];\n    const ancestor = ancestors[i];\n\n    // Skip primary scope ancestors (org, user) — these don't get a zone\n    if (ancestor.isPrimaryScope) continue;\n\n    // Controller-driven cascade keeps existing user context intact, but URL-first\n    // reconstruction is allowed to replace ancestor zones so the visible stack\n    // matches the authoritative browser URL again.\n    const zoneState = getZoneState(zone);\n    if (!options?.overwriteExisting && zoneState.stack.length > 0) continue;\n\n    // Get ancestor resource config\n    const ancestorResourceType = ancestor.resourceType;\n    const ancestorConfig = registry.resourceConfigurations?.[ancestorResourceType];\n    if (!ancestorConfig) continue;\n\n    // Find relationship between ancestor and target (or intermediate child)\n    const childType = ancestor.childResourceType\n      ?? (i === 0 ? targetResourceType : ancestors[i - 1].resourceType);\n    const relationship = NavigationUtils.findRelationshipBetween(\n      ancestorResourceType, childType, registry, ancestor.foreignKeyField\n    );\n\n    // Build parent requirements for the ancestor itself:\n    // The ancestor's parents are those ABOVE it in the chain (root → leaf ordering).\n    // Using slice(0, index) ensures we only include entries before the ancestor,\n    // not entries below it (which are its children/grandchildren, not parents).\n    // Previously used filter(req => req.resourceType !== ancestorResourceType) which\n    // incorrectly kept descendants as parents for non-adjacent ancestors (Bug #1).\n    // `ancestors` is reversed (nearest parent first) but `parentRequirements`\n    // stays root → leaf, so convert back by position instead of looking up by\n    // resource type. Position-based slicing is what keeps repeated/self-ref\n    // parent types from collapsing onto the first matching entry.\n    const ancestorIndex = parentRequirements.length - 1 - i;\n    const ancestorParentReqs = ancestorIndex > 0\n      ? parentRequirements.slice(0, ancestorIndex)\n      : [];\n\n    // Build ancestor resource context\n    const ancestorContextIdentifiers: Record<string, string> = {};\n    for (const req of ancestorParentReqs) {\n      const contextKey = req.foreignKeyField ?? req.resourceType;\n      // Prefer the FK-keyed slot when present. Same-type parent chains store the\n      // parent id under the FK field so the resource-type key can continue to\n      // represent the current record.\n      const id = contextIdentifiers[contextKey] ?? contextIdentifiers[req.resourceType];\n      if (id) {\n        ancestorContextIdentifiers[contextKey] = id;\n      }\n    }\n    const ancestorSelfId = contextIdentifiers[ancestorResourceType];\n    const ancestorSelectionContextIdentifiers = ancestorSelfId\n      ? {\n          ...ancestorContextIdentifiers,\n          [ancestorResourceType]: ancestorSelfId,\n        }\n      : ancestorContextIdentifiers;\n\n    const opConfig = NavigationUtils.resolveAncestorOperationConfig(\n      relationship,\n      ancestorConfig as any,\n      {\n        registry,\n        contextResourceIdentifiers: ancestorSelectionContextIdentifiers,\n        contextualParameters: FrontendResourceUtils.buildContextualParameters(\n          ancestorSelectionContextIdentifiers,\n          registry,\n        ),\n      },\n    );\n    if (!opConfig) continue;\n    const ancestorOp = resolveEffectiveCoreOperationFromOperation(opConfig);\n    if (ancestorSelfId && ancestorOp === CoreResourceOperation.READ) {\n      ancestorContextIdentifiers[ancestorResourceType] = ancestorSelfId;\n    }\n\n    const ancestorResourceContext = frontendResourceUtils.createFrontendResourceOperationContextFromOperation({\n      resourceType: ancestorResourceType,\n      operation: opConfig,\n      contextResourceIdentifiers: ancestorContextIdentifiers,\n      parentResourcesRequirements: ancestorParentReqs,\n    });\n\n    const ancestorContent: NavigationContent = {\n      contentType: NavigationContentType.RESOURCE_OPERATION,\n      resourceContext: ancestorResourceContext,\n    };\n\n    // Resolve URL for ancestor — only when the ancestor operation actually\n    // owns a browser URL (declared ADDRESSABLE). Same surface gate as the main\n    // navigate() path: an EMBEDDED ancestor read must not stamp an unroutable\n    // URL onto the revealed zone entry or the browser.\n    let ancestorUrl: string | undefined;\n    if (resourceOperationOwnsBrowserUrl(opConfig)) {\n      const resolved = NavigationUtils.resolveResourceUrl(\n        ancestorConfig as any,\n        opConfig as any,\n        ancestorContextIdentifiers,\n        registry.allResourceFieldIdentifiers,\n        ancestorParentReqs as any,\n      );\n      if (resolved?.resolvedUrl) {\n        ancestorUrl = resolved.resolvedUrl;\n      }\n    }\n\n    const stackEntryId = NavigationUtils.generateStackEntryId();\n    logDebug('cascadeAncestorZones: populating ancestor zone', {\n      zone,\n      ancestorResourceType,\n      ancestorOp,\n      ancestorUrl,\n    });\n    emit(FrontendEvents.NAVIGATION_REPLACE, {\n      zone,\n      content: ancestorContent,\n      urlPath: ancestorUrl,\n      stackEntryId,\n      initiator: { sourceZone: zone },\n      navigationSource: NavigationSource.CONTROLLER,\n      transition: NavigationTransition.REPLACE,\n    });\n\n    // Update URL only for PRIMARY zone ancestor (the URL bar shows PRIMARY)\n    // Skip URL update when routerNavigate is null (reverse cascade from URL sync)\n    if (zone === NavigationZoneName.PRIMARY && ancestorUrl && routerNavigate) {\n      updateBrowserUrl(routerNavigate, ancestorUrl, true);\n    }\n  }\n}"]}
+{"version":3,"file":"navigation-cascade.js","sourceRoot":"","sources":["../../../../../src/core/navigation/navigation-cascade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,cAAc,GACf,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAGL,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC1H,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AACvG,OAAO,EACL,0CAA0C,EAC1C,4BAA4B,EAC5B,qCAAqC,GACtC,MAAM,uEAAuE,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAChH,mCAAmC;AACnC,yBAAyB;AACzB,mCAAmC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAoB7C;IACC,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IACvH,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAEjG,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,CAAC,cAAc;QAAE,OAAO;IAE5B,MAAM,sBAAsB,GAAG,EAAE,GAAG,0BAA0B,EAAE,CAAC;IACjE,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAE5C;;;;;;;;OAQG;IACH,MAAM,aAAa,GAAG,qCAAqC,CACzD,4BAA4B,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,EAAE,qBAAqB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC3G,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,EACnF,qBAAqB,CAAC,IAAI,EAC1B,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,IAAI,CAAC,aAAa;QAAE,OAAO;IAE3B;;;;;;;;;;;;;OAaG;IACH,MAAM,OAAO,GAAG,eAAe,CAAC,kBAAkB,CAChD,cAAuB,EACvB,aAAsB,EACtB,sBAAsB,EACtB,QAAQ,CAAC,2BAA2B,EACpC,2BAAoC,CACrC,EAAE,WAAW,CAAC;IAEf,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;QACtC,IAAI,EAAE,kBAAkB,CAAC,OAAO;QAChC,OAAO,EAAE;YACP,WAAW,EAAE,qBAAqB,CAAC,kBAAkB;YACrD,eAAe,EAAE,qBAAqB,CAAC,mDAAmD,CAAC;gBACzF,YAAY,EAAE,SAAS,EAAE,aAAa;gBACtC,0BAA0B,EAAE,sBAAsB;gBAClD,2BAA2B;aAC5B,CAAC;SACH;QACD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,YAAY,EAAE,eAAe,CAAC,oBAAoB,EAAE;QACpD,SAAS,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,OAAO,EAAE;QACrD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,QAAQ;QACtE,UAAU,EAAE,oBAAoB,CAAC,OAAO;KACzC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAA4F,EAC5F,YAAgC,EAChC,QAAmC,EACnC,kBAA0C,EAC1C,IAA2C,EAC3C,cAAqD,EACrD,YAA+D,EAC/D,OAEC;IAED,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,2BAA2E,CAAC;IACrI,IAAI,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnE,yCAAyC;IACzC,iFAAiF;IACjF,0FAA0F;IAC1F,iGAAiG;IACjG,MAAM,eAAe,GAAyB,EAAE,CAAC;IACjD,IAAI,YAAY,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAClD,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,YAAY,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;QACzD,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEzC,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC;IAEpD,MAAM,kBAAkB,GAAG,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC;IAEtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAE9B,oEAAoE;QACpE,IAAI,QAAQ,CAAC,cAAc;YAAE,SAAS;QAEtC,8EAA8E;QAC9E,2EAA2E;QAC3E,+CAA+C;QAC/C,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,iBAAiB,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAExE,+BAA+B;QAC/B,MAAM,oBAAoB,GAAG,QAAQ,CAAC,YAAY,CAAC;QACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC,oBAAoB,CAAC,CAAC;QAC/E,IAAI,CAAC,cAAc;YAAE,SAAS;QAE9B,wEAAwE;QACxE,MAAM,SAAS,GAAG,QAAQ,CAAC,iBAAiB;eACvC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,eAAe,CAAC,uBAAuB,CAC1D,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,eAAe,CACpE,CAAC;QAEF,qDAAqD;QACrD,iFAAiF;QACjF,6EAA6E;QAC7E,4EAA4E;QAC5E,iFAAiF;QACjF,+EAA+E;QAC/E,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,aAAa,GAAG,CAAC;YAC1C,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;QAEP,kCAAkC;QAClC,MAAM,0BAA0B,GAA2B,EAAE,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,YAAY,CAAC;YAC3D,2EAA2E;YAC3E,wEAAwE;YACxE,gCAAgC;YAChC,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClF,IAAI,EAAE,EAAE,CAAC;gBACP,0BAA0B,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,4GAA4G;QAC5G,8GAA8G;QAC9G,2GAA2G;QAC3G,uGAAuG;QACvG,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;eACvG,CAAC,oBAAoB,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1G,MAAM,mCAAmC,GAAG,cAAc;YACxD,CAAC,CAAC;gBACE,GAAG,0BAA0B;gBAC7B,CAAC,oBAAoB,CAAC,EAAE,cAAc;aACvC;YACH,CAAC,CAAC,0BAA0B,CAAC;QAE/B,MAAM,QAAQ,GAAG,eAAe,CAAC,8BAA8B,CAC7D,YAAY,EACZ,cAAqB,EACrB;YACE,QAAQ;YACR,0BAA0B,EAAE,mCAAmC;YAC/D,oBAAoB,EAAE,qBAAqB,CAAC,yBAAyB,CACnE,mCAAmC,EACnC,QAAQ,CACT;SACF,CACF,CAAC;QAEF;;;;;;;;;;;;;;;;;;;WAmBG;QACH,MAAM,gCAAgC,GAAG,IAAI,KAAK,kBAAkB,CAAC,OAAO;eACvE,CAAC,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,4BAA4B,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC;QAClI,IAAI,gCAAgC,EAAE,CAAC;YACrC,uGAAuG;YACvG,qDAAqD;YACrD,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;YAC/E,MAAM,uBAAuB,GAA2B,EAAE,CAAC;YAC3D,KAAK,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,YAAY,CAAC;gBAC3D,MAAM,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAClF,IAAI,EAAE;oBAAE,uBAAuB,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACnD,CAAC;YACD,6BAA6B,CAAC;gBAC5B,YAAY,EAAE,SAAS;gBACvB,0BAA0B,EAAE,uBAAuB;gBACnD,2BAA2B,EAAE,uBAAuB;gBACpD,QAAQ;gBACR,IAAI;gBACJ,YAAY;gBACZ,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;gBAC7C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB;aAC9C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,UAAU,GAAG,0CAA0C,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,cAAc,IAAI,UAAU,KAAK,qBAAqB,CAAC,IAAI,EAAE,CAAC;YAChE,0BAA0B,CAAC,oBAAoB,CAAC,GAAG,cAAc,CAAC;QACpE,CAAC;QAED,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,mDAAmD,CAAC;YACxG,YAAY,EAAE,oBAAoB;YAClC,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,0BAA0B;YACtD,2BAA2B,EAAE,kBAAkB;SAChD,CAAC,CAAC;QAEH,MAAM,eAAe,GAAsB;YACzC,WAAW,EAAE,qBAAqB,CAAC,kBAAkB;YACrD,eAAe,EAAE,uBAAuB;SACzC,CAAC;QAEF,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,WAA+B,CAAC;QACpC,IAAI,+BAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,kBAAkB,CACjD,cAAqB,EACrB,QAAe,EACf,0BAA0B,EAC1B,QAAQ,CAAC,2BAA2B,EACpC,kBAAyB,CAC1B,CAAC;YACF,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;gBAC1B,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAAC,oBAAoB,EAAE,CAAC;QAC5D,QAAQ,CAAC,gDAAgD,EAAE;YACzD,IAAI;YACJ,oBAAoB;YACpB,UAAU;YACV,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE;YACtC,IAAI;YACJ,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,WAAW;YACpB,YAAY;YACZ,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;YAC/B,gBAAgB,EAAE,gBAAgB,CAAC,UAAU;YAC7C,UAAU,EAAE,oBAAoB,CAAC,OAAO;SACzC,CAAC,CAAC;QAEH,wEAAwE;QACxE,8EAA8E;QAC9E,IAAI,IAAI,KAAK,kBAAkB,CAAC,OAAO,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YACzE,gBAAgB,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * The CASCADING ORCHESTRATOR: what fills the zones a reader did not click.\n *\n * Two functions, one concern. When content lands in an adjacent zone, the zones ABOVE it must show\n * the context that content belongs to, or the reader sees a record with nothing beside it.\n * `cascadeAncestorZones` places a record's ANCESTORS. `cascadeSiblingListIntoPrimary` places a record's\n * OWN collection in PRIMARY, in two roles: beside a FLAT resource's detail split out of primary (#203),\n * and in place of an ancestor that PRIMARY cannot hold (#2115, see the PRIMARY rule in the cascade).\n *\n * Split out of `useNavigationController.ts` on 2026-09-25. It is the ONE piece both halves of that\n * module used — the controller cascades after a click, the router-sync hooks cascade after a deep\n * link — which is why it is its own module rather than living with either.\n */\n\nimport {\n  useNavigate,\n} from 'react-router-dom';\nimport {\n  FrontendEvents,\n} from '~wildo-frontend-lib/core/events/events.frontend.schemas';\nimport {\n  NavigationZoneState,\n  NavigationContent,\n  NavigationContentType,\n} from './navigation.schemas';\nimport {\n  NavigationTransition,\n  NavigationZoneName,\n  CoreResourceOperation,\n} from '@wildo-ai/saas-models';\nimport type { FrontendResource_ParentResourceRequirement } from '~wildo-frontend-lib/core/resources/resource-path.frontend.schemas';\nimport type {\n  FrontendResourcesRegistry,\n} from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { NavigationSource } from './navigation.schemas';\nimport { NavigationUtils } from './navigation.utils';\nimport { FrontendResourceUtils, frontendResourceUtils } from '~wildo-frontend-lib/core/resources/frontend-resource.utils';\nimport { isOperationAddressable } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport {\n  resolveEffectiveCoreOperationFromOperation,\n  getOperationsForCoreSemantic,\n  pickPreferredOperationForCoreSemantic,\n} from '~wildo-frontend-lib/core/resources/operation-semantics.frontend.utils';\n\nimport { logDebug, resourceOperationOwnsBrowserUrl, updateBrowserUrl } from './navigation-controller-internals';\n// ================================\n// Cascading Orchestrator\n// ================================\n\n/**\n * Put a record's OWN collection into PRIMARY, in the record's parent context.\n *\n * Two callers, one shape — the list-detail pairing, which the zone-dependency cleanup keeps (a pane\n * beside a collection of its own type):\n *\n * - `useRouterSync`, for a FLAT resource whose detail was restored into SECONDARY (#203) — or, at a width\n *   where that pane is collapsed, pushed into PRIMARY on top of this list;\n * - `cascadeAncestorZones`, in place of an ancestor PRIMARY cannot hold — a collection of another\n *   type, or none at all (#2115).\n *\n * It places nothing when the resource has no configuration or no addressable LIST: PRIMARY then stays\n * empty and renders the route's Outlet. That is the one remaining way to show a record twice, and it\n * needs a resource whose records are reachable while its collection is not.\n */\nexport function cascadeSiblingListIntoPrimary(params: {\n  resourceType: string;\n  contextResourceIdentifiers: Record<string, string>;\n  parentResourcesRequirements: FrontendResource_ParentResourceRequirement[];\n  registry: FrontendResourcesRegistry;\n  emit: (event: string, payload: any) => void;\n  getZoneState: (zone: NavigationZoneName) => NavigationZoneState;\n  /**\n   * Provenance stamped on the emitted event — `URL_SYNC` by default, `CONTROLLER` from the ancestor\n   * cascade, which stamps its own ancestor placements the same way on both paths. Recorded for\n   * diagnostics (the navigation log); nothing branches on it.\n   */\n  navigationSource?: NavigationSource;\n  /**\n   * Replace what PRIMARY holds instead of leaving it alone. The ancestor cascade passes its own\n   * `overwriteExisting` here: a URL-first rebuild REPLACES the ancestor zones so they match the URL, and\n   * this placement stands in for an ancestor, so it must replace too. Without it, stale primary content\n   * would survive a rebuild that every other ancestor placement overwrites.\n   */\n  replaceExisting?: boolean;\n}): void {\n  const { resourceType, contextResourceIdentifiers, parentResourcesRequirements, registry, emit, getZoneState } = params;\n  if (!params.replaceExisting && getZoneState(NavigationZoneName.PRIMARY).stack.length > 0) return;\n\n  const resourceConfig = registry.resourceConfigurations?.[resourceType];\n  if (!resourceConfig) return;\n\n  const listContextIdentifiers = { ...contextResourceIdentifiers };\n  delete listContextIdentifiers[resourceType];\n\n  /*\n   * The DEFAULT addressable LIST, picked WITHOUT the context-addressability check.\n   * `pickPreferredOperationForCoreSemanticAddressability` asks \"reachable given the PARENT context\",\n   * which a flat STANDALONE resource can never satisfy — it answers false for an operation that is\n   * plainly addressable and reachable from the sidebar. For a NESTED resource (the #2115 role) the\n   * parent ids it needs are in `contextResourceIdentifiers`, and the URL below is resolved from them.\n   * `allowBulk` is required too: a LIST addresses a COLLECTION and the semantic filter drops bulk\n   * operations by default.\n   */\n  const listOperation = pickPreferredOperationForCoreSemantic(\n    getOperationsForCoreSemantic(resourceConfig.operations ?? [], CoreResourceOperation.LIST, { allowBulk: true })\n      .filter((candidate) => isOperationAddressable(candidate.operationFrontendConfig)),\n    CoreResourceOperation.LIST,\n    { allowBulk: true },\n  );\n  if (!listOperation) return;\n\n  /*\n   * The list's OWN address, which is not the same thing as writing the browser URL.\n   *\n   * This entry was placed address-less under the note \"the browser URL belongs to the DETAIL in\n   * secondary\" — true of who WRITES the URL, and wrong as a reason to leave `urlPath` empty. An\n   * entry's `urlPath` is its ADDRESS, read by everything that asks what a zone holds: `goBack`,\n   * `dismissZone`, `findStructuralRouteOwner`, `zoneOwnsBrowserUrl`. Nothing here writes the\n   * browser URL — this is an emit, and the controller's write lives in `navigate()`.\n   *\n   * Measured on the workbench, 2026-09-25: with the list address-less, `resolveZoneDismissUrl`\n   * found no primary address, wrote nothing, and the pane CLOSED while the URL still named it — so\n   * the next reload reopened it. `goBack` from the last pane had the identical hole, which predates\n   * the dismiss control and is fixed by the same line.\n   */\n  const listUrl = NavigationUtils.resolveResourceUrl(\n    resourceConfig as never,\n    listOperation as never,\n    listContextIdentifiers,\n    registry.allResourceFieldIdentifiers,\n    parentResourcesRequirements as never,\n  )?.resolvedUrl;\n\n  emit(FrontendEvents.NAVIGATION_REPLACE, {\n    zone: NavigationZoneName.PRIMARY,\n    content: {\n      contentType: NavigationContentType.RESOURCE_OPERATION,\n      resourceContext: frontendResourceUtils.createFrontendResourceOperationContextFromOperation({\n        resourceType, operation: listOperation,\n        contextResourceIdentifiers: listContextIdentifiers,\n        parentResourcesRequirements,\n      }),\n    },\n    ...(listUrl ? { urlPath: listUrl } : {}),\n    stackEntryId: NavigationUtils.generateStackEntryId(),\n    initiator: { sourceZone: NavigationZoneName.PRIMARY },\n    navigationSource: params.navigationSource ?? NavigationSource.URL_SYNC,\n    transition: NavigationTransition.REPLACE,\n  });\n}\n\n/**\n * Auto-populate ancestor zones when navigating to SECONDARY or COMPANION.\n *\n * When a resource is placed in SECONDARY or COMPANION, its ancestor resources\n * should be visible in the zones above it.\n *\n * Rules:\n * - Only cascades for resource operations (not views)\n * - Populates EMPTY zones only — unless `overwriteExisting` (URL-first reconstruction), which replaces\n *   them so the visible stack matches the authoritative browser URL\n * - Uses `parentResourcesRequirements` to determine ancestor chain\n * - Stops at primary scope ancestors (org/user level)\n * - Maximum 2 ancestor zones (PRIMARY + SECONDARY for a COMPANION target)\n * - PRIMARY never receives a collection of another type than the pane below it (see the rule in the loop)\n */\nexport function cascadeAncestorZones(\n  targetContent: NavigationContent & { contentType: NavigationContentType.RESOURCE_OPERATION },\n  resolvedZone: NavigationZoneName,\n  registry: FrontendResourcesRegistry,\n  contextIdentifiers: Record<string, string>,\n  emit: (event: string, payload: any) => void,\n  routerNavigate: ReturnType<typeof useNavigate> | null,\n  getZoneState: (zone: NavigationZoneName) => NavigationZoneState,\n  options?: {\n    overwriteExisting?: boolean;\n  },\n): void {\n  const parentRequirements = targetContent.resourceContext.parentResourcesRequirements as FrontendResource_ParentResourceRequirement[];\n  if (!parentRequirements || parentRequirements.length === 0) return;\n\n  // Determine which zones need population.\n  // Order matters: zonesToPopulate[i] maps to ancestors[i] (nearest parent first).\n  // For COMPANION target: nearest parent → SECONDARY (adjacent), furthest → PRIMARY (root).\n  // This maintains the master-detail-detail convention: PRIMARY=broadest, COMPANION=most specific.\n  const zonesToPopulate: NavigationZoneName[] = [];\n  if (resolvedZone === NavigationZoneName.SECONDARY) {\n    zonesToPopulate.push(NavigationZoneName.PRIMARY);\n  } else if (resolvedZone === NavigationZoneName.COMPANION) {\n    zonesToPopulate.push(NavigationZoneName.SECONDARY, NavigationZoneName.PRIMARY);\n  }\n\n  if (zonesToPopulate.length === 0) return;\n\n  // parentResourcesRequirements is ordered root → leaf (closest ancestor last).\n  // Reverse to process nearest parent first — nearest maps to adjacent zone.\n  const ancestors = [...parentRequirements].reverse();\n\n  const targetResourceType = targetContent.resourceContext.resourceType;\n\n  for (let i = 0; i < zonesToPopulate.length && i < ancestors.length; i++) {\n    const zone = zonesToPopulate[i];\n    const ancestor = ancestors[i];\n\n    // Skip primary scope ancestors (org, user) — these don't get a zone\n    if (ancestor.isPrimaryScope) continue;\n\n    // Controller-driven cascade keeps existing user context intact, but URL-first\n    // reconstruction is allowed to replace ancestor zones so the visible stack\n    // matches the authoritative browser URL again.\n    const zoneState = getZoneState(zone);\n    if (!options?.overwriteExisting && zoneState.stack.length > 0) continue;\n\n    // Get ancestor resource config\n    const ancestorResourceType = ancestor.resourceType;\n    const ancestorConfig = registry.resourceConfigurations?.[ancestorResourceType];\n    if (!ancestorConfig) continue;\n\n    // Find relationship between ancestor and target (or intermediate child)\n    const childType = ancestor.childResourceType\n      ?? (i === 0 ? targetResourceType : ancestors[i - 1].resourceType);\n    const relationship = NavigationUtils.findRelationshipBetween(\n      ancestorResourceType, childType, registry, ancestor.foreignKeyField\n    );\n\n    // Build parent requirements for the ancestor itself:\n    // The ancestor's parents are those ABOVE it in the chain (root → leaf ordering).\n    // Using slice(0, index) ensures we only include entries before the ancestor,\n    // not entries below it (which are its children/grandchildren, not parents).\n    // Previously used filter(req => req.resourceType !== ancestorResourceType) which\n    // incorrectly kept descendants as parents for non-adjacent ancestors (Bug #1).\n    // `ancestors` is reversed (nearest parent first) but `parentRequirements`\n    // stays root → leaf, so convert back by position instead of looking up by\n    // resource type. Position-based slicing is what keeps repeated/self-ref\n    // parent types from collapsing onto the first matching entry.\n    const ancestorIndex = parentRequirements.length - 1 - i;\n    const ancestorParentReqs = ancestorIndex > 0\n      ? parentRequirements.slice(0, ancestorIndex)\n      : [];\n\n    // Build ancestor resource context\n    const ancestorContextIdentifiers: Record<string, string> = {};\n    for (const req of ancestorParentReqs) {\n      const contextKey = req.foreignKeyField ?? req.resourceType;\n      // Prefer the FK-keyed slot when present. Same-type parent chains store the\n      // parent id under the FK field so the resource-type key can continue to\n      // represent the current record.\n      const id = contextIdentifiers[contextKey] ?? contextIdentifiers[req.resourceType];\n      if (id) {\n        ancestorContextIdentifiers[contextKey] = id;\n      }\n    }\n    // The ancestor's own id. Its FOREIGN-KEY slot names it whenever the context carries one; the TYPE slot does\n    // only for an ancestor of another type. For a self-referencing ancestor (the target's own type) the type slot\n    // is the TARGET's own id — a self-referencing parent lives in its foreign-key slot (#2143) — so reading it\n    // there placed the record as its own parent (a BACKWARD self-relationship cascades the parent's READ).\n    const ancestorSelfId = (ancestor.foreignKeyField ? contextIdentifiers[ancestor.foreignKeyField] : undefined)\n      ?? (ancestorResourceType !== targetResourceType ? contextIdentifiers[ancestorResourceType] : undefined);\n    const ancestorSelectionContextIdentifiers = ancestorSelfId\n      ? {\n          ...ancestorContextIdentifiers,\n          [ancestorResourceType]: ancestorSelfId,\n        }\n      : ancestorContextIdentifiers;\n\n    const opConfig = NavigationUtils.resolveAncestorOperationConfig(\n      relationship,\n      ancestorConfig as any,\n      {\n        registry,\n        contextResourceIdentifiers: ancestorSelectionContextIdentifiers,\n        contextualParameters: FrontendResourceUtils.buildContextualParameters(\n          ancestorSelectionContextIdentifiers,\n          registry,\n        ),\n      },\n    );\n\n    /*\n     * PRIMARY is what the zone-dependency cleanup measures SECONDARY against (`NavigationContext`, its top\n     * entry only; COMPANION is kept when it belongs to PRIMARY's record or to the SECONDARY record beside\n     * it). A collection in PRIMARY keeps the pane below it only when it holds that pane's OWN type — the\n     * list-detail pairing. A collection of another type (the parent's, when the parent's record has no page\n     * of its own) clears the very pane this cascade is placing it for (#2115). An EMPTY primary is no answer\n     * either: it renders the route's Outlet, which is the same record a second time.\n     *\n     * So the cascade never PLACES such a collection in PRIMARY: it places the pane below's own collection\n     * instead, in that pane's parent context. (It does not police what a reader put there by clicking.) In\n     * SECONDARY (the middle of a three-pane chain) a parent's collection clears nothing — the companion is\n     * still kept by the record in PRIMARY — and the resolver's fallback stands.\n     *\n     * On the click path this placement writes no browser URL, unlike an ancestor placement below: the URL\n     * stays the record's. A deep link writes none either way.\n     *\n     * What this cannot rescue, stated rather than hidden: a pane below whose collection is not addressable\n     * (or that has no configuration). Nothing is placed, PRIMARY stays empty, and it renders the route's\n     * Outlet — the record twice (`cascadeSiblingListIntoPrimary`).\n     */\n    const placesForeignCollectionInPrimary = zone === NavigationZoneName.PRIMARY\n      && (!opConfig || (NavigationUtils.isCollectionOperationContext({ operation: opConfig }) && ancestorResourceType !== childType));\n    if (placesForeignCollectionInPrimary) {\n      // The pane below's parent chain is everything up to and including this ancestor (root → leaf). For the\n      // nearest ancestor that is the record's whole chain.\n      const childParentRequirements = parentRequirements.slice(0, ancestorIndex + 1);\n      const childContextIdentifiers: Record<string, string> = {};\n      for (const req of childParentRequirements) {\n        const contextKey = req.foreignKeyField ?? req.resourceType;\n        const id = contextIdentifiers[contextKey] ?? contextIdentifiers[req.resourceType];\n        if (id) childContextIdentifiers[contextKey] = id;\n      }\n      cascadeSiblingListIntoPrimary({\n        resourceType: childType,\n        contextResourceIdentifiers: childContextIdentifiers,\n        parentResourcesRequirements: childParentRequirements,\n        registry,\n        emit,\n        getZoneState,\n        navigationSource: NavigationSource.CONTROLLER,\n        replaceExisting: !!options?.overwriteExisting,\n      });\n      continue;\n    }\n    if (!opConfig) continue;\n    const ancestorOp = resolveEffectiveCoreOperationFromOperation(opConfig);\n    if (ancestorSelfId && ancestorOp === CoreResourceOperation.READ) {\n      ancestorContextIdentifiers[ancestorResourceType] = ancestorSelfId;\n    }\n\n    const ancestorResourceContext = frontendResourceUtils.createFrontendResourceOperationContextFromOperation({\n      resourceType: ancestorResourceType,\n      operation: opConfig,\n      contextResourceIdentifiers: ancestorContextIdentifiers,\n      parentResourcesRequirements: ancestorParentReqs,\n    });\n\n    const ancestorContent: NavigationContent = {\n      contentType: NavigationContentType.RESOURCE_OPERATION,\n      resourceContext: ancestorResourceContext,\n    };\n\n    // Resolve URL for ancestor — only when the ancestor operation actually\n    // owns a browser URL (declared ADDRESSABLE). Same surface gate as the main\n    // navigate() path: an EMBEDDED ancestor read must not stamp an unroutable\n    // URL onto the revealed zone entry or the browser.\n    let ancestorUrl: string | undefined;\n    if (resourceOperationOwnsBrowserUrl(opConfig)) {\n      const resolved = NavigationUtils.resolveResourceUrl(\n        ancestorConfig as any,\n        opConfig as any,\n        ancestorContextIdentifiers,\n        registry.allResourceFieldIdentifiers,\n        ancestorParentReqs as any,\n      );\n      if (resolved?.resolvedUrl) {\n        ancestorUrl = resolved.resolvedUrl;\n      }\n    }\n\n    const stackEntryId = NavigationUtils.generateStackEntryId();\n    logDebug('cascadeAncestorZones: populating ancestor zone', {\n      zone,\n      ancestorResourceType,\n      ancestorOp,\n      ancestorUrl,\n    });\n    emit(FrontendEvents.NAVIGATION_REPLACE, {\n      zone,\n      content: ancestorContent,\n      urlPath: ancestorUrl,\n      stackEntryId,\n      initiator: { sourceZone: zone },\n      navigationSource: NavigationSource.CONTROLLER,\n      transition: NavigationTransition.REPLACE,\n    });\n\n    // Update URL only for PRIMARY zone ancestor (the URL bar shows PRIMARY)\n    // Skip URL update when routerNavigate is null (reverse cascade from URL sync)\n    if (zone === NavigationZoneName.PRIMARY && ancestorUrl && routerNavigate) {\n      updateBrowserUrl(routerNavigate, ancestorUrl, true);\n    }\n  }\n}"]}

package/dist/esm/core/navigation/navigation-commit.d.ts

@@ -0,0 +1,45 @@
+import type { NavigationZone } from './navigation.schemas';
+/**
+ * The moment a navigation COMMITS: the controller has resolved where content goes and now emits the zone-state event and
+ * updates the browser URL, in one synchronous step. Everything before it (resolution, access checks, context loading) is
+ * asynchronous; this step is not, which is what lets a layout animate BETWEEN the state before and the state after.
+ *
+ * A layout may install ONE wrapper around that step (#2055): the animated 2D layouts' view-transition arrival calls
+ * `document.startViewTransition(() => flushSync(commit))`, so the browser captures the screen before the commit and
+ * after it, and morphs the pressed row into the pane that opened. With no wrapper installed, the commit simply runs.
+ *
+ * Why here and not on the router: React Router's own `viewTransition` option wraps the ROUTER's state update, and the
+ * panes do not follow the router. They follow the zone state this controller emits BEFORE it touches the URL, so a
+ * router-side transition would capture a screen that has already changed.
+ */
+/** Where the committing navigation sends its content. */
+export interface NavigationCommitTarget {
+    /** The zone that receives the content. */
+    zone: NavigationZone;
+}
+/**
+ * Runs `commit` EXACTLY ONCE — now, or within the browser's next frame. A view transition runs its update in the frame
+ * after it captured the screen, so a wrapper may defer the commit that long, never longer; it must never skip it or run
+ * it twice. The navigation has already been decided, and the URL and the zones must not disagree.
+ */
+export type NavigationCommitWrapper = (commit: () => void, target: NavigationCommitTarget) => void;
+/**
+ * How long a wrapper may hold a commit before it runs anyway. A view transition calls its update within a frame, and
+ * also when it is skipped (a hidden tab, another transition); this only catches a wrapper that forgot.
+ */
+export declare const NAVIGATION_COMMIT_MAX_DEFERRAL_MS = 400;
+/**
+ * Installs the wrapper every navigation commit runs through, and returns the function that removes it. One at a time: an
+ * application has one shell layout, so a second install replaces the first, and removing a wrapper that has since been
+ * replaced leaves the newer one in place.
+ */
+export declare function installNavigationCommitWrapper(wrapper: NavigationCommitWrapper): () => void;
+/**
+ * Lands a commit a wrapper is still holding, at once. Called before ANY change to the zone state is applied
+ * (`NavigationContext` applies every navigation event through it), so nothing — a later navigation's clean break, a
+ * dismiss, a back, the router reconciling a URL — can land before an earlier commit and then be undone by it.
+ */
+export declare function flushHeldNavigationCommit(): void;
+/** Runs a navigation's commit through the installed wrapper, or directly when none is installed. */
+export declare function runNavigationCommit(commit: () => void, target: NavigationCommitTarget): void;
+//# sourceMappingURL=navigation-commit.d.ts.map

package/dist/esm/core/navigation/navigation-commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"navigation-commit.d.ts","sourceRoot":"","sources":["../../../../../src/core/navigation/navigation-commit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AAEH,yDAAyD;AACzD,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;AAEnG;;;GAGG;AACH,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAMrD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,IAAI,CAK3F;AAQD;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,oGAAoG;AACpG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI,CA4B5F"}

package/dist/esm/core/navigation/navigation-commit.js

@@ -0,0 +1,68 @@
+/**
+ * How long a wrapper may hold a commit before it runs anyway. A view transition calls its update within a frame, and
+ * also when it is skipped (a hidden tab, another transition); this only catches a wrapper that forgot.
+ */
+export const NAVIGATION_COMMIT_MAX_DEFERRAL_MS = 400;
+let installedWrapper = null;
+/** The commit a wrapper is holding, if any: a newer navigation runs it first, so two navigations never swap order. */
+let heldCommit = null;
+/**
+ * Installs the wrapper every navigation commit runs through, and returns the function that removes it. One at a time: an
+ * application has one shell layout, so a second install replaces the first, and removing a wrapper that has since been
+ * replaced leaves the newer one in place.
+ */
+export function installNavigationCommitWrapper(wrapper) {
+    installedWrapper = wrapper;
+    return () => {
+        if (installedWrapper === wrapper)
+            installedWrapper = null;
+    };
+}
+/*
+ * Two residuals are accepted, both inside the hold (one frame; 400 ms at worst): a controller method that READS the zones
+ * before emitting (a dismiss of a pane not yet landed) sees them before the held commit, and a browser Back pressed in
+ * that frame lets the held commit push its URL after the popstate — the zones end right, and router sync re-applies the
+ * URL. Neither can be reached by a reader acting on what is on screen, since the held pane is not on screen yet.
+ */
+/**
+ * Lands a commit a wrapper is still holding, at once. Called before ANY change to the zone state is applied
+ * (`NavigationContext` applies every navigation event through it), so nothing — a later navigation's clean break, a
+ * dismiss, a back, the router reconciling a URL — can land before an earlier commit and then be undone by it.
+ */
+export function flushHeldNavigationCommit() {
+    heldCommit?.();
+}
+/** Runs a navigation's commit through the installed wrapper, or directly when none is installed. */
+export function runNavigationCommit(commit, target) {
+    // An earlier commit still held by a wrapper lands first: the later navigation must win.
+    flushHeldNavigationCommit();
+    const wrapper = installedWrapper;
+    if (!wrapper) {
+        commit();
+        return;
+    }
+    let committed = false;
+    let safety;
+    const once = () => {
+        if (committed)
+            return;
+        committed = true;
+        if (heldCommit === once)
+            heldCommit = null;
+        clearTimeout(safety);
+        commit();
+    };
+    try {
+        wrapper(once, target);
+    }
+    catch (error) {
+        // A wrapper that threw must not lose the navigation.
+        once();
+        throw error;
+    }
+    if (!committed) {
+        heldCommit = once;
+        safety = setTimeout(once, NAVIGATION_COMMIT_MAX_DEFERRAL_MS);
+    }
+}
+//# sourceMappingURL=navigation-commit.js.map

package/dist/esm/core/navigation/navigation-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"navigation-commit.js","sourceRoot":"","sources":["../../../../../src/core/navigation/navigation-commit.ts"],"names":[],"mappings":"AA6BA;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAErD,IAAI,gBAAgB,GAAmC,IAAI,CAAC;AAC5D,sHAAsH;AACtH,IAAI,UAAU,GAAwB,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAgC;IAC7E,gBAAgB,GAAG,OAAO,CAAC;IAC3B,OAAO,GAAG,EAAE;QACV,IAAI,gBAAgB,KAAK,OAAO;YAAE,gBAAgB,GAAG,IAAI,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,UAAU,EAAE,EAAE,CAAC;AACjB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,MAAkB,EAAE,MAA8B;IACpF,wFAAwF;IACxF,yBAAyB,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,EAAE,CAAC;QACT,OAAO;IACT,CAAC;IACD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,MAAiD,CAAC;IACtD,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,SAAS;YAAE,OAAO;QACtB,SAAS,GAAG,IAAI,CAAC;QACjB,IAAI,UAAU,KAAK,IAAI;YAAE,UAAU,GAAG,IAAI,CAAC;QAC3C,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,EAAE,CAAC;IACX,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qDAAqD;QACrD,IAAI,EAAE,CAAC;QACP,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC","sourcesContent":["import type { NavigationZone } from './navigation.schemas';\n\n/**\n * The moment a navigation COMMITS: the controller has resolved where content goes and now emits the zone-state event and\n * updates the browser URL, in one synchronous step. Everything before it (resolution, access checks, context loading) is\n * asynchronous; this step is not, which is what lets a layout animate BETWEEN the state before and the state after.\n *\n * A layout may install ONE wrapper around that step (#2055): the animated 2D layouts' view-transition arrival calls\n * `document.startViewTransition(() => flushSync(commit))`, so the browser captures the screen before the commit and\n * after it, and morphs the pressed row into the pane that opened. With no wrapper installed, the commit simply runs.\n *\n * Why here and not on the router: React Router's own `viewTransition` option wraps the ROUTER's state update, and the\n * panes do not follow the router. They follow the zone state this controller emits BEFORE it touches the URL, so a\n * router-side transition would capture a screen that has already changed.\n */\n\n/** Where the committing navigation sends its content. */\nexport interface NavigationCommitTarget {\n  /** The zone that receives the content. */\n  zone: NavigationZone;\n}\n\n/**\n * Runs `commit` EXACTLY ONCE — now, or within the browser's next frame. A view transition runs its update in the frame\n * after it captured the screen, so a wrapper may defer the commit that long, never longer; it must never skip it or run\n * it twice. The navigation has already been decided, and the URL and the zones must not disagree.\n */\nexport type NavigationCommitWrapper = (commit: () => void, target: NavigationCommitTarget) => void;\n\n/**\n * How long a wrapper may hold a commit before it runs anyway. A view transition calls its update within a frame, and\n * also when it is skipped (a hidden tab, another transition); this only catches a wrapper that forgot.\n */\nexport const NAVIGATION_COMMIT_MAX_DEFERRAL_MS = 400;\n\nlet installedWrapper: NavigationCommitWrapper | null = null;\n/** The commit a wrapper is holding, if any: a newer navigation runs it first, so two navigations never swap order. */\nlet heldCommit: (() => void) | null = null;\n\n/**\n * Installs the wrapper every navigation commit runs through, and returns the function that removes it. One at a time: an\n * application has one shell layout, so a second install replaces the first, and removing a wrapper that has since been\n * replaced leaves the newer one in place.\n */\nexport function installNavigationCommitWrapper(wrapper: NavigationCommitWrapper): () => void {\n  installedWrapper = wrapper;\n  return () => {\n    if (installedWrapper === wrapper) installedWrapper = null;\n  };\n}\n\n/*\n * Two residuals are accepted, both inside the hold (one frame; 400 ms at worst): a controller method that READS the zones\n * before emitting (a dismiss of a pane not yet landed) sees them before the held commit, and a browser Back pressed in\n * that frame lets the held commit push its URL after the popstate — the zones end right, and router sync re-applies the\n * URL. Neither can be reached by a reader acting on what is on screen, since the held pane is not on screen yet.\n */\n/**\n * Lands a commit a wrapper is still holding, at once. Called before ANY change to the zone state is applied\n * (`NavigationContext` applies every navigation event through it), so nothing — a later navigation's clean break, a\n * dismiss, a back, the router reconciling a URL — can land before an earlier commit and then be undone by it.\n */\nexport function flushHeldNavigationCommit(): void {\n  heldCommit?.();\n}\n\n/** Runs a navigation's commit through the installed wrapper, or directly when none is installed. */\nexport function runNavigationCommit(commit: () => void, target: NavigationCommitTarget): void {\n  // An earlier commit still held by a wrapper lands first: the later navigation must win.\n  flushHeldNavigationCommit();\n  const wrapper = installedWrapper;\n  if (!wrapper) {\n    commit();\n    return;\n  }\n  let committed = false;\n  let safety: ReturnType<typeof setTimeout> | undefined;\n  const once = (): void => {\n    if (committed) return;\n    committed = true;\n    if (heldCommit === once) heldCommit = null;\n    clearTimeout(safety);\n    commit();\n  };\n  try {\n    wrapper(once, target);\n  } catch (error) {\n    // A wrapper that threw must not lose the navigation.\n    once();\n    throw error;\n  }\n  if (!committed) {\n    heldCommit = once;\n    safety = setTimeout(once, NAVIGATION_COMMIT_MAX_DEFERRAL_MS);\n  }\n}\n"]}