@wildo-ai/saas-frontend-lib 1.1.9 → 1.1.11

package/dist/esm/core/runtime/routes.frontend.definitions.js

@@ -1,9 +1,14 @@
-import { FILE_UPLOAD_GRANT_PAGE_PATH, REAUTHENTICATION_CALLBACK_PAGE_PATH, PUBLIC_GOVERNED_DOCUMENT_REFS, PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS } from '@wildo-ai/saas-models';
+import { APPLICATION_ENTRY_POINT_PATHS, APPLICATION_SETTINGS_PATH, ApplicationEntryPoint, CHAT_IDENTITY_LINK_PAGE_PATH, FILE_UPLOAD_GRANT_PAGE_PATH, HUMAN_DECISION_INBOX_PAGE_PATH, REAUTHENTICATION_CALLBACK_PAGE_PATH, PUBLIC_GOVERNED_DOCUMENT_REFS, PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS, } from '@wildo-ai/saas-models';
 // Common route paths
 export const CommonRoutePaths = {
-    home: '/',
-    login: '/login',
-    register: '/register',
+    /**
+     * The three public entry pages are DERIVED from `APPLICATION_ENTRY_POINT_PATHS`: the marketing website links to
+     * them ("Sign in", "Get started") and cannot import this frontend module, so the paths live beside the
+     * vocabulary both read.
+     */
+    home: APPLICATION_ENTRY_POINT_PATHS[ApplicationEntryPoint.HOME],
+    login: APPLICATION_ENTRY_POINT_PATHS[ApplicationEntryPoint.SIGN_IN],
+    register: APPLICATION_ENTRY_POINT_PATHS[ApplicationEntryPoint.SIGN_UP],
     passwordLost: '/password-lost',
     invitation: '/invitation',
     confirmEmail: '/confirm-email',
@@ -43,6 +48,12 @@ export const CommonRoutePaths = {
      * on `/oauth/logged-out`. Public route; token-driven (never gates on a Bearer).
      */
     oauthLogoutConfirm: '/oauth/logout-confirm',
+    /**
+     * Where a signed-in member confirms and completes the one-time link a chat bot (Slack, Microsoft Teams) gave them
+     * (#2660). Derived from `CHAT_IDENTITY_LINK_PAGE_PATH`, so the URL the bot writes and the route mounted here cannot
+     * disagree. Public route; the page sends a visitor who is not signed in to sign in first, link intact.
+     */
+    chatIdentityLink: CHAT_IDENTITY_LINK_PAGE_PATH,
     /**
      * Browser-only OAuth2 / SAML callback landing.
      *
@@ -63,10 +74,15 @@ export const CommonRoutePaths = {
     enrollmentRequired: '/auth/enrollment-required',
     /** The organization-name step for an account parked at onboarding (#1090). Carries no session id: the parked session mints, so it stays in the auth context and out of history and request logs. */
     organizationOnboarding: '/auth/organization-onboarding',
+    /**
+     * The engine's decision inbox (#2527, `EnginePageRef.DECISIONS`): every pending decision the signed-in person may act
+     * on. Placed by the engine for an application whose agents can wait on a person's decision.
+     */
+    decisions: HUMAN_DECISION_INBOX_PAGE_PATH,
     /** Unified Settings Hub (overlay) — opened at its default section. `/settings/security` resolves here too (hub at its Security section). */
-    settings: '/settings',
+    settings: APPLICATION_SETTINGS_PATH,
     /** Unified Settings Hub (overlay) — opened at a specific section. URL-addressable for deep-link reconstruction. */
-    settingsSection: '/settings/:sectionRef',
+    settingsSection: `${APPLICATION_SETTINGS_PATH}/:sectionRef`,
     /**
      * Unified Settings Hub (overlay) — opened at a specific SUB-TAB of a section.
      *
@@ -76,7 +92,7 @@ export const CommonRoutePaths = {
      * "Single sign-on → Connections" could not be sent to anybody. That contradicted the hub's own
      * stated contract, which is that the URL is its single source of truth.
      */
-    settingsSectionSubTab: '/settings/:sectionRef/:subTabRef',
+    settingsSectionSubTab: `${APPLICATION_SETTINGS_PATH}/:sectionRef/:subTabRef`,
     /** W7.3b: One-off session token exchange — public, uses EphemeralSessionTokenStorage */
     oneOffSession: '/one-off-session/:token',
     /**

package/dist/esm/core/runtime/routes.frontend.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.frontend.definitions.js","sourceRoot":"","sources":["../../../../../src/core/runtime/routes.frontend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,oCAAoC,EAAE,MAAM,uBAAuB,CAAC;AAE9K,qBAAqB;AACrB,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,GAAG;IACT,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,WAAW;IACrB,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,gBAAgB;IAC9B;;;;;;OAMG;IACH,OAAO,EAAE,oCAAoC,CAAC,6BAA6B,CAAC,cAAc,CAAC;IAC3F,2FAA2F;IAC3F,KAAK,EAAE,oCAAoC,CAAC,6BAA6B,CAAC,aAAa,CAAC;IACxF;;;;;;;OAOG;IACH,YAAY,EAAE,gBAAgB;IAC9B;;;;;;OAMG;IACH,cAAc,EAAE,mBAAmB;IACnC;;;;;;;OAOG;IACH,kBAAkB,EAAE,uBAAuB;IAC3C;;;;;;;OAOG;IACH,YAAY,EAAE,gBAAgB;IAC9B;;;;OAIG;IACH,wBAAwB,EAAE,mCAAmC;IAC7D,eAAe,EAAE,yBAAyB;IAC1C,YAAY,EAAE,WAAW;IACzB,kBAAkB,EAAE,2BAA2B;IAC/C,oMAAoM;IACpM,sBAAsB,EAAE,+BAA+B;IAEvD,4IAA4I;IAC5I,QAAQ,EAAE,WAAW;IACrB,mHAAmH;IACnH,eAAe,EAAE,uBAAuB;IACxC;;;;;;;;OAQG;IACH,qBAAqB,EAAE,kCAAkC;IAEzD,wFAAwF;IACxF,aAAa,EAAE,yBAAyB;IAExC;;;;OAIG;IACH,eAAe,EAAE,GAAG,2BAA2B,SAAS;IAExD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,YAAY,EAAE,gBAAgB;IAE9B,qBAAqB;IACrB,OAAO,EAAE,YAAY;IACrB,eAAe,EAAE,qBAAqB;CAC9B,CAAC","sourcesContent":["import { FILE_UPLOAD_GRANT_PAGE_PATH, REAUTHENTICATION_CALLBACK_PAGE_PATH, PUBLIC_GOVERNED_DOCUMENT_REFS, PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS } from '@wildo-ai/saas-models';\n\n// Common route paths\nexport const CommonRoutePaths = {\n  home: '/',\n  login: '/login',\n  register: '/register',\n  passwordLost: '/password-lost',\n  invitation: '/invitation',\n  confirmEmail: '/confirm-email',\n  /**\n   * Public, exact-release privacy notice. Candidate or unverified bytes are never rendered here.\n   *\n   * Derived from `PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS` rather than spelled here: the consent panel and\n   * the marketing website link to the same page and cannot reach this frontend-only module, so the\n   * pairing lives beside the document refs where all three readers can see it.\n   */\n  privacy: PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS[PUBLIC_GOVERNED_DOCUMENT_REFS.PRIVACY_NOTICE],\n  /** Public, exact-release service terms. Derived for the same reason as `privacy` above. */\n  terms: PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS[PUBLIC_GOVERNED_DOCUMENT_REFS.SERVICE_TERMS],\n  /**\n   * OIDC interactive-consent screen (S1). A third-party client that acts on the user's behalf\n   * redirects the browser here with the OAuth authorize query (`client_id`, `redirect_uri`,\n   * `response_type=code`, `code_challenge`, optional `scope`/`resource`/`state`/`nonce`). The page\n   * calls `GET /oauth/authorize` (Bearer), renders the requesting client + scopes + agent resource,\n   * and on approve/deny POSTs to `/oauth/authorize/decision` then navigates to the returned\n   * `redirect_to`. Public route (self-redirects to login when unauthenticated).\n   */\n  oauthConsent: '/oauth/consent',\n  /**\n   * OIDC RP-Initiated Logout landing (revocation-C, §5). Where `GET /oauth/end-session` sends the browser\n   * after terminating the End-User's OP session when the request carried NO valid `post_logout_redirect_uri`\n   * — the OP displays a \"you have been signed out\" confirmation rather than redirecting back to the relying\n   * party. A request WITH a registered `post_logout_redirect_uri` skips this and redirects straight to the RP\n   * (with `state` echoed). Public route; the session is already terminated server-side before the browser lands.\n   */\n  oauthLoggedOut: '/oauth/logged-out',\n  /**\n   * OIDC RP-Initiated Logout §6 confirmation prompt (revocation-C). Where `GET /oauth/end-session` sends the\n   * browser for a NON-trusted logout — anything except a trusted RP presenting a valid `id_token_hint` AND an\n   * exact-match registered `post_logout_redirect_uri` (which is logged out directly, no prompt — the\n   * Keycloak-style posture). Carries a single-use `?token=` naming the session; the page asks the End-User to\n   * confirm, then POSTs the token to `POST /oauth/end-session/confirm` (which terminates the session) and lands\n   * on `/oauth/logged-out`. Public route; token-driven (never gates on a Bearer).\n   */\n  oauthLogoutConfirm: '/oauth/logout-confirm',\n  /**\n   * Browser-only OAuth2 / SAML callback landing.\n   *\n   * Renders `AuthPage_AuthCallback`, which extracts `code` from the URL\n   * search params and delegates to `handleAuthCodeExchange`. The framework\n   * targets web stacks exclusively, so there is no native deep-link\n   * variant for this path.\n   */\n  authCallback: '/auth/callback',\n  /**\n   * The page a federated re-authentication returns to, inside the step-up dialog's popup (#1441). Derived\n   * from the shared `REAUTHENTICATION_CALLBACK_PAGE_PATH`, so the URL the backend redirects to and the\n   * route mounted here cannot disagree.\n   */\n  reAuthenticationCallback: REAUTHENTICATION_CALLBACK_PAGE_PATH,\n  magicLinkVerify: '/auth/magic-link/verify',\n  mfaChallenge: '/auth/mfa',\n  enrollmentRequired: '/auth/enrollment-required',\n  /** The organization-name step for an account parked at onboarding (#1090). Carries no session id: the parked session mints, so it stays in the auth context and out of history and request logs. */\n  organizationOnboarding: '/auth/organization-onboarding',\n\n  /** Unified Settings Hub (overlay) — opened at its default section. `/settings/security` resolves here too (hub at its Security section). */\n  settings: '/settings',\n  /** Unified Settings Hub (overlay) — opened at a specific section. URL-addressable for deep-link reconstruction. */\n  settingsSection: '/settings/:sectionRef',\n  /**\n   * Unified Settings Hub (overlay) — opened at a specific SUB-TAB of a section.\n   *\n   * Ten destinations render as sub-tabs and they carry twenty-one panels between them, none of\n   * which was addressable before 2026-09-17: `SettingsSubTabs` held the active tab in local state\n   * seeded from `subTabs[0]`, so every link to a sub-tabbed section landed on its first tab and\n   * \"Single sign-on → Connections\" could not be sent to anybody. That contradicted the hub's own\n   * stated contract, which is that the URL is its single source of truth.\n   */\n  settingsSectionSubTab: '/settings/:sectionRef/:subTabRef',\n\n  /** W7.3b: One-off session token exchange — public, uses EphemeralSessionTokenStorage */\n  oneOffSession: '/one-off-session/:token',\n\n  /**\n   * Public drop page for a single-use file-upload grant (issue #312, D12). Derived from the shared\n   * `FILE_UPLOAD_GRANT_PAGE_PATH` so the URL the backend writes into a grant's `uploadPageUrl` and the\n   * route the frontend mounts cannot disagree.\n   */\n  fileUploadGrant: `${FILE_UPLOAD_GRANT_PAGE_PATH}/:token`,\n\n  /**\n   * cross-app-jwt-propagation.md Step 5: Cross-frontend handoff exchange landing.\n   *\n   * The cross-frontend handoff issuer (`POST /auth/cross-frontend-handoff`)\n   * composes a redirect URL of the shape\n   * `<targetPublicUrl>/auth/exchange?code=<token>&return=<encodedReturnPath>`.\n   * Every receiving frontend MUST mount a handler at this path. This entry\n   * pins the path (and lets `Auth_OneOffSession` in\n   * `mode='cross-frontend-handoff'` consume it via the shared `AppRouter`).\n   *\n   * Distinct from `authCallback` (`/auth/callback`) on purpose — the OAuth2\n   * callback URL carries provider-specific query params (`state`, `error`,\n   * `error_description`) that are irrelevant to a cross-frontend handoff,\n   * and the two flows have distinct telemetry / breadcrumb semantics.\n   * Distinct from `oneOffSession` (`/one-off-session/:token`) on purpose —\n   * one-off sessions consume W7.3b ephemeral tokens via a different backend\n   * endpoint (`/auth/one-off-session/exchange`); cross-frontend handoffs\n   * consume AUTH_CODE_EXCHANGE tokens via `/auth/token/exchange`.\n   *\n   * The query-param form (`?code=` rather than `:token` in the path) matches\n   * the docs-site `AuthExchangePage` already mounted at the same path on the\n   * docs target — keeping the URL shape uniform across SaaS-app and\n   * docs-site receivers means the handoff issuer composes ONE URL shape.\n   */\n  authExchange: '/auth/exchange',\n\n  // Development routes\n  devTest: '/_dev/test',\n  devThemeGallery: '/_dev/theme-gallery',\n} as const;\n\nexport type CommonRouteKey = keyof typeof CommonRoutePaths;\n\n"]}
+{"version":3,"file":"routes.frontend.definitions.js","sourceRoot":"","sources":["../../../../../src/core/runtime/routes.frontend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,EAC9B,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,uBAAuB,CAAC;AAE/B,qBAAqB;AACrB,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B;;;;OAIG;IACH,IAAI,EAAE,6BAA6B,CAAC,qBAAqB,CAAC,IAAI,CAAC;IAC/D,KAAK,EAAE,6BAA6B,CAAC,qBAAqB,CAAC,OAAO,CAAC;IACnE,QAAQ,EAAE,6BAA6B,CAAC,qBAAqB,CAAC,OAAO,CAAC;IACtE,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,gBAAgB;IAC9B;;;;;;OAMG;IACH,OAAO,EAAE,oCAAoC,CAAC,6BAA6B,CAAC,cAAc,CAAC;IAC3F,2FAA2F;IAC3F,KAAK,EAAE,oCAAoC,CAAC,6BAA6B,CAAC,aAAa,CAAC;IACxF;;;;;;;OAOG;IACH,YAAY,EAAE,gBAAgB;IAC9B;;;;;;OAMG;IACH,cAAc,EAAE,mBAAmB;IACnC;;;;;;;OAOG;IACH,kBAAkB,EAAE,uBAAuB;IAC3C;;;;OAIG;IACH,gBAAgB,EAAE,4BAA4B;IAC9C;;;;;;;OAOG;IACH,YAAY,EAAE,gBAAgB;IAC9B;;;;OAIG;IACH,wBAAwB,EAAE,mCAAmC;IAC7D,eAAe,EAAE,yBAAyB;IAC1C,YAAY,EAAE,WAAW;IACzB,kBAAkB,EAAE,2BAA2B;IAC/C,oMAAoM;IACpM,sBAAsB,EAAE,+BAA+B;IAEvD;;;OAGG;IACH,SAAS,EAAE,8BAA8B;IACzC,4IAA4I;IAC5I,QAAQ,EAAE,yBAAyB;IACnC,mHAAmH;IACnH,eAAe,EAAE,GAAG,yBAAyB,cAAc;IAC3D;;;;;;;;OAQG;IACH,qBAAqB,EAAE,GAAG,yBAAyB,yBAAyB;IAE5E,wFAAwF;IACxF,aAAa,EAAE,yBAAyB;IAExC;;;;OAIG;IACH,eAAe,EAAE,GAAG,2BAA2B,SAAS;IAExD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,YAAY,EAAE,gBAAgB;IAE9B,qBAAqB;IACrB,OAAO,EAAE,YAAY;IACrB,eAAe,EAAE,qBAAqB;CAC9B,CAAC","sourcesContent":["import {\n  APPLICATION_ENTRY_POINT_PATHS,\n  APPLICATION_SETTINGS_PATH,\n  ApplicationEntryPoint,\n  CHAT_IDENTITY_LINK_PAGE_PATH,\n  FILE_UPLOAD_GRANT_PAGE_PATH,\n  HUMAN_DECISION_INBOX_PAGE_PATH,\n  REAUTHENTICATION_CALLBACK_PAGE_PATH,\n  PUBLIC_GOVERNED_DOCUMENT_REFS,\n  PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS,\n} from '@wildo-ai/saas-models';\n\n// Common route paths\nexport const CommonRoutePaths = {\n  /**\n   * The three public entry pages are DERIVED from `APPLICATION_ENTRY_POINT_PATHS`: the marketing website links to\n   * them (\"Sign in\", \"Get started\") and cannot import this frontend module, so the paths live beside the\n   * vocabulary both read.\n   */\n  home: APPLICATION_ENTRY_POINT_PATHS[ApplicationEntryPoint.HOME],\n  login: APPLICATION_ENTRY_POINT_PATHS[ApplicationEntryPoint.SIGN_IN],\n  register: APPLICATION_ENTRY_POINT_PATHS[ApplicationEntryPoint.SIGN_UP],\n  passwordLost: '/password-lost',\n  invitation: '/invitation',\n  confirmEmail: '/confirm-email',\n  /**\n   * Public, exact-release privacy notice. Candidate or unverified bytes are never rendered here.\n   *\n   * Derived from `PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS` rather than spelled here: the consent panel and\n   * the marketing website link to the same page and cannot reach this frontend-only module, so the\n   * pairing lives beside the document refs where all three readers can see it.\n   */\n  privacy: PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS[PUBLIC_GOVERNED_DOCUMENT_REFS.PRIVACY_NOTICE],\n  /** Public, exact-release service terms. Derived for the same reason as `privacy` above. */\n  terms: PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS[PUBLIC_GOVERNED_DOCUMENT_REFS.SERVICE_TERMS],\n  /**\n   * OIDC interactive-consent screen (S1). A third-party client that acts on the user's behalf\n   * redirects the browser here with the OAuth authorize query (`client_id`, `redirect_uri`,\n   * `response_type=code`, `code_challenge`, optional `scope`/`resource`/`state`/`nonce`). The page\n   * calls `GET /oauth/authorize` (Bearer), renders the requesting client + scopes + agent resource,\n   * and on approve/deny POSTs to `/oauth/authorize/decision` then navigates to the returned\n   * `redirect_to`. Public route (self-redirects to login when unauthenticated).\n   */\n  oauthConsent: '/oauth/consent',\n  /**\n   * OIDC RP-Initiated Logout landing (revocation-C, §5). Where `GET /oauth/end-session` sends the browser\n   * after terminating the End-User's OP session when the request carried NO valid `post_logout_redirect_uri`\n   * — the OP displays a \"you have been signed out\" confirmation rather than redirecting back to the relying\n   * party. A request WITH a registered `post_logout_redirect_uri` skips this and redirects straight to the RP\n   * (with `state` echoed). Public route; the session is already terminated server-side before the browser lands.\n   */\n  oauthLoggedOut: '/oauth/logged-out',\n  /**\n   * OIDC RP-Initiated Logout §6 confirmation prompt (revocation-C). Where `GET /oauth/end-session` sends the\n   * browser for a NON-trusted logout — anything except a trusted RP presenting a valid `id_token_hint` AND an\n   * exact-match registered `post_logout_redirect_uri` (which is logged out directly, no prompt — the\n   * Keycloak-style posture). Carries a single-use `?token=` naming the session; the page asks the End-User to\n   * confirm, then POSTs the token to `POST /oauth/end-session/confirm` (which terminates the session) and lands\n   * on `/oauth/logged-out`. Public route; token-driven (never gates on a Bearer).\n   */\n  oauthLogoutConfirm: '/oauth/logout-confirm',\n  /**\n   * Where a signed-in member confirms and completes the one-time link a chat bot (Slack, Microsoft Teams) gave them\n   * (#2660). Derived from `CHAT_IDENTITY_LINK_PAGE_PATH`, so the URL the bot writes and the route mounted here cannot\n   * disagree. Public route; the page sends a visitor who is not signed in to sign in first, link intact.\n   */\n  chatIdentityLink: CHAT_IDENTITY_LINK_PAGE_PATH,\n  /**\n   * Browser-only OAuth2 / SAML callback landing.\n   *\n   * Renders `AuthPage_AuthCallback`, which extracts `code` from the URL\n   * search params and delegates to `handleAuthCodeExchange`. The framework\n   * targets web stacks exclusively, so there is no native deep-link\n   * variant for this path.\n   */\n  authCallback: '/auth/callback',\n  /**\n   * The page a federated re-authentication returns to, inside the step-up dialog's popup (#1441). Derived\n   * from the shared `REAUTHENTICATION_CALLBACK_PAGE_PATH`, so the URL the backend redirects to and the\n   * route mounted here cannot disagree.\n   */\n  reAuthenticationCallback: REAUTHENTICATION_CALLBACK_PAGE_PATH,\n  magicLinkVerify: '/auth/magic-link/verify',\n  mfaChallenge: '/auth/mfa',\n  enrollmentRequired: '/auth/enrollment-required',\n  /** The organization-name step for an account parked at onboarding (#1090). Carries no session id: the parked session mints, so it stays in the auth context and out of history and request logs. */\n  organizationOnboarding: '/auth/organization-onboarding',\n\n  /**\n   * The engine's decision inbox (#2527, `EnginePageRef.DECISIONS`): every pending decision the signed-in person may act\n   * on. Placed by the engine for an application whose agents can wait on a person's decision.\n   */\n  decisions: HUMAN_DECISION_INBOX_PAGE_PATH,\n  /** Unified Settings Hub (overlay) — opened at its default section. `/settings/security` resolves here too (hub at its Security section). */\n  settings: APPLICATION_SETTINGS_PATH,\n  /** Unified Settings Hub (overlay) — opened at a specific section. URL-addressable for deep-link reconstruction. */\n  settingsSection: `${APPLICATION_SETTINGS_PATH}/:sectionRef`,\n  /**\n   * Unified Settings Hub (overlay) — opened at a specific SUB-TAB of a section.\n   *\n   * Ten destinations render as sub-tabs and they carry twenty-one panels between them, none of\n   * which was addressable before 2026-09-17: `SettingsSubTabs` held the active tab in local state\n   * seeded from `subTabs[0]`, so every link to a sub-tabbed section landed on its first tab and\n   * \"Single sign-on → Connections\" could not be sent to anybody. That contradicted the hub's own\n   * stated contract, which is that the URL is its single source of truth.\n   */\n  settingsSectionSubTab: `${APPLICATION_SETTINGS_PATH}/:sectionRef/:subTabRef`,\n\n  /** W7.3b: One-off session token exchange — public, uses EphemeralSessionTokenStorage */\n  oneOffSession: '/one-off-session/:token',\n\n  /**\n   * Public drop page for a single-use file-upload grant (issue #312, D12). Derived from the shared\n   * `FILE_UPLOAD_GRANT_PAGE_PATH` so the URL the backend writes into a grant's `uploadPageUrl` and the\n   * route the frontend mounts cannot disagree.\n   */\n  fileUploadGrant: `${FILE_UPLOAD_GRANT_PAGE_PATH}/:token`,\n\n  /**\n   * cross-app-jwt-propagation.md Step 5: Cross-frontend handoff exchange landing.\n   *\n   * The cross-frontend handoff issuer (`POST /auth/cross-frontend-handoff`)\n   * composes a redirect URL of the shape\n   * `<targetPublicUrl>/auth/exchange?code=<token>&return=<encodedReturnPath>`.\n   * Every receiving frontend MUST mount a handler at this path. This entry\n   * pins the path (and lets `Auth_OneOffSession` in\n   * `mode='cross-frontend-handoff'` consume it via the shared `AppRouter`).\n   *\n   * Distinct from `authCallback` (`/auth/callback`) on purpose — the OAuth2\n   * callback URL carries provider-specific query params (`state`, `error`,\n   * `error_description`) that are irrelevant to a cross-frontend handoff,\n   * and the two flows have distinct telemetry / breadcrumb semantics.\n   * Distinct from `oneOffSession` (`/one-off-session/:token`) on purpose —\n   * one-off sessions consume W7.3b ephemeral tokens via a different backend\n   * endpoint (`/auth/one-off-session/exchange`); cross-frontend handoffs\n   * consume AUTH_CODE_EXCHANGE tokens via `/auth/token/exchange`.\n   *\n   * The query-param form (`?code=` rather than `:token` in the path) matches\n   * the docs-site `AuthExchangePage` already mounted at the same path on the\n   * docs target — keeping the URL shape uniform across SaaS-app and\n   * docs-site receivers means the handoff issuer composes ONE URL shape.\n   */\n  authExchange: '/auth/exchange',\n\n  // Development routes\n  devTest: '/_dev/test',\n  devThemeGallery: '/_dev/theme-gallery',\n} as const;\n\nexport type CommonRouteKey = keyof typeof CommonRoutePaths;\n\n"]}

package/dist/esm/core/runtime/start-application.frontend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-application.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/runtime/start-application.frontend.service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,OAAO,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAE9G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0EAA0E,CAAC;AAC9H,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAGL,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,2CAA2C,EAC3C,oBAAoB,EAGpB,KAAK,2BAA2B,EAAuB,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oEAAoE,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAEnI,OAAO,EAAE,KAAK,uBAAuB,EAAgC,MAAM,6CAA6C,CAAC;AAUzH,OAAO,EAEL,KAAK,4BAA4B,EAElC,MAAM,2FAA2F,CAAC;AACnG,OAAO,EAEL,KAAK,uCAAuC,EAC7C,MAAM,yFAAyF,CAAC;AAEjG,OAAO,EAOL,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAEjC,MAAM,0CAA0C,CAAC;AAwElD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,+BAA+B,CAAC;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;OAGG;IACH,8CAA8C,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,2CAA2C,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC;IAE/H;;OAEG;IACH,oCAAoC,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEjE;;OAEG;IACH,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAE7D;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAE5C;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,2BAA2B,EAAE,CAAC;IAE7D;;;OAGG;IACH,kBAAkB,EAAE,yBAAyB,CAAC;IAE9C,0EAA0E;IAC1E,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAElD,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAE5C,2EAA2E;IAC3E,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC;;;;;;;;;;;;;OAaG;IACH,uBAAuB,CAAC,EAAE,2BAA2B,CAAC;CACvD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,sBAAsB,CAAC;IACnC,kBAAkB,EAAE,kCAAkC,CAAC;IACvD,iBAAiB,EAAE,yBAAyB,CAAC;IAC7C,oBAAoB,EAAE,uBAAuB,CAAC;IAC9C,wBAAwB,EAAE,uCAAuC,CAAC;IAClE;;;;;;;OAOG;IACH,oBAAoB,EAAE,6BAA6B,CAAC;IACpD;;;;;;;;;;OAUG;IACH,yBAAyB,EAAE,4BAA4B,CAAC;IACxD,sFAAsF;IACtF,qBAAqB,EAAE,yBAAyB,CAAC;CAClD;AAED,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,qBAAqB,CAA6C;IAC1E,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,QAAQ,CAA+E;IAE/F;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,iCAAiC;IAwBnC,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC;YA4B7E,qBAAqB;IAiZnC;;OAEG;IACH,WAAW,IAAI,mBAAmB,GAAG,IAAI;IAIzC;;OAEG;IACH,wBAAwB,IAAI,OAAO;IAInC;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;OAEG;YACW,gBAAgB;CAoB/B;AAUD,eAAO,MAAM,uBAAuB,EAAyD,+BAA+B,CAAC"}
+{"version":3,"file":"start-application.frontend.service.d.ts","sourceRoot":"","sources":["../../../../../src/core/runtime/start-application.frontend.service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AAEpG,OAAO,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAE9G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0EAA0E,CAAC;AAC9H,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAGL,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,2CAA2C,EAC3C,oBAAoB,EAGpB,KAAK,2BAA2B,EAAuB,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oEAAoE,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAEnI,OAAO,EAAE,KAAK,uBAAuB,EAAgC,MAAM,6CAA6C,CAAC;AAUzH,OAAO,EAEL,KAAK,4BAA4B,EAElC,MAAM,2FAA2F,CAAC;AACnG,OAAO,EAEL,KAAK,uCAAuC,EAC7C,MAAM,yFAAyF,CAAC;AAEjG,OAAO,EAOL,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAEjC,MAAM,0CAA0C,CAAC;AAwElD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,+BAA+B,CAAC;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC;;;OAGG;IACH,8CAA8C,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,2CAA2C,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC;IAE/H;;OAEG;IACH,oCAAoC,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAEjE;;OAEG;IACH,mCAAmC,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAE7D;;;;;;;;;;;;;OAaG;IACH,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAE5C;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,2BAA2B,EAAE,CAAC;IAE7D;;;OAGG;IACH,kBAAkB,EAAE,yBAAyB,CAAC;IAE9C,0EAA0E;IAC1E,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAElD,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAE5C,2EAA2E;IAC3E,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC;;;;;;;;;;;;;OAaG;IACH,uBAAuB,CAAC,EAAE,2BAA2B,CAAC;CACvD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,sBAAsB,CAAC;IACnC,kBAAkB,EAAE,kCAAkC,CAAC;IACvD,iBAAiB,EAAE,yBAAyB,CAAC;IAC7C,oBAAoB,EAAE,uBAAuB,CAAC;IAC9C,wBAAwB,EAAE,uCAAuC,CAAC;IAClE;;;;;;;OAOG;IACH,oBAAoB,EAAE,6BAA6B,CAAC;IACpD;;;;;;;;;;OAUG;IACH,yBAAyB,EAAE,4BAA4B,CAAC;IACxD,sFAAsF;IACtF,qBAAqB,EAAE,yBAAyB,CAAC;CAClD;AAED,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,qBAAqB,CAA6C;IAC1E,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,QAAQ,CAA+E;IAE/F;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,iCAAiC;IAwBnC,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC;YA4B7E,qBAAqB;IAmZnC;;OAEG;IACH,WAAW,IAAI,mBAAmB,GAAG,IAAI;IAIzC;;OAEG;IACH,wBAAwB,IAAI,OAAO;IAInC;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;OAEG;YACW,gBAAgB;CAoB/B;AAUD,eAAO,MAAM,uBAAuB,EAAyD,+BAA+B,CAAC"}

package/dist/esm/core/runtime/start-application.frontend.service.js

@@ -285,7 +285,9 @@ export class StartApplicationFrontendService {
             // registration so custom component refs can be checked deterministically.
             if (envLoader.isDevelopment()) {
                 currentPhase = 'development launcher verification';
-                const verificationResult = verifyLauncherContent(resourcesRegistry, resolvedFrontendConfig, (componentRef) => ComponentRegistryService.hasComponentType(componentRef));
+                const verificationResult = verifyLauncherContent(resourcesRegistry, resolvedFrontendConfig, (componentRef) => ComponentRegistryService.hasComponentType(componentRef), 
+                // The organization role table is published by the backend, never part of the frontend config.
+                { organizationRoles: appConfigFromBackend.organizationRoles });
                 reportLauncherVerificationResults(verificationResult);
                 // Settings Hub: catch duplicate section refs (and sibling structural
                 // gaps) before they silently double-render the content panel. Verifies

package/dist/esm/core/runtime/start-application.frontend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"start-application.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/runtime/start-application.frontend.service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mFAAmF,CAAC;AACvI,OAAO,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAC9G,OAAO,EAAE,+BAA+B,EAAE,MAAM,uEAAuE,CAAC;AACxH,OAAO,EAAE,kCAAkC,EAAE,MAAM,0EAA0E,CAAC;AAG9H,OAAO,EACL,iDAAiD,EACjD,8BAA8B,EAK9B,kCAAkC,EAClC,kCAAkC,EACA,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EACL,gCAAgC,GAEjC,MAAM,oEAAoE,CAAC;AAE5E,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAgC,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AACzH,OAAO,EAAE,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AACnI,OAAO,EAAE,wBAAwB,EAAE,oCAAoC,EAAE,MAAM,6DAA6D,CAAC;AAC7I,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,oEAAoE,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kFAAkF,CAAC;AAC5H,OAAO,EACL,uCAAuC,GAGxC,MAAM,2FAA2F,CAAC;AACnG,OAAO,EACL,6CAA6C,GAE9C,MAAM,yFAAyF,CAAC;AACjG,OAAO,EAAE,mCAAmC,EAAE,MAAM,8EAA8E,CAAC;AACnI,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,+BAA+B,EAC/B,mBAAmB,GAIpB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAqBvE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAc,EACd,eAIC;IAED,MAAM,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC;QAClF,CAAC,CAAC,eAAe,CAAC,UAAU;QAC5B,CAAC,CAAC,SAAS,CAAC;IAEb,eAA8C,CAAC,yBAAyB,GAAG;QAC1E,GAAG,eAAe;QAClB,SAAS,EAAE,eAAe,CAAC,IAAI;QAC/B,YAAY,EAAE,eAAe,CAAC,OAAO;QACrC,KAAK,EAAE,eAAe,CAAC,KAAK;QAC5B,YAAY,EAAE,mBAAmB,CAAC,eAAe,CAAC;QAClD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACzD,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACvE,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,OAAO,eAA6C,CAAC;AACvD,CAAC;AAiID,MAAM,OAAO,+BAA+B;IAClC,QAAQ,GAA+B,IAAI,CAAC;IAC5C,aAAa,GAAG,KAAK,CAAC;IACtB,qBAAqB,GAAwC,IAAI,CAAC;IAClE,MAAM,GAAiC,IAAI,CAAC;IAC5C,QAAQ,GAA0E,IAAI,CAAC;IAE/F;;;;;;;;;;;;;;;;;OAiBG;IACK,iCAAiC,CAAC,gBAAyB;QACjE,IAAI,CAAC,gBAAgB;YAAE,OAAO;QAC9B,IAAI,WAAW,CAAC;QAChB,IAAI,CAAC;YACH,WAAW,GAAG,kCAAkC,CAAC,gBAAyB,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;YAC5F,IAAI,UAAU,CAAC,QAAQ,KAAK,kCAAkC,CAAC,KAAK,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAID,KAAK,CAAC,qBAAqB,CAAC,OAAgC;QAC1D,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ;YACrC,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEvB,IAAI,IAAI,CAAC,qBAAqB;YAC5B,OAAO,IAAI,CAAC,qBAAqB,CAAC;QAEpC,8FAA8F;QAC9F,MAAM,QAAQ,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;QACzD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC;YACjD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAE1B,IAAI,CAAC;gBACH,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,OAAgC;QAClE,MAAM,EACJ,MAAM,EACN,QAAQ,GAAG,IAAI,EACf,gBAAgB,GAAG,EAAE,EACrB,OAAO,EACP,8CAA8C,EAC9C,oCAAoC,EACpC,mCAAmC,EACnC,eAAe,GAChB,GAAG,OAAO,CAAC;QACZ,IAAI,YAAY,GAAG,qBAAqB,CAAC;QACzC,IAAI,SAAyE,CAAC;QAE9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACzD,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC,QAAS,CAAC,6CAA6C,EAAE;YAC5D,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,yBAAyB;YACzB,YAAY,GAAG,4BAA4B,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAE9E,+CAA+C;YAC/C,YAAY,GAAG,6BAA6B,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACpE,MAAM,iBAAiB,GAAG,IAAI,kCAAkC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAEjG,IAAI,CAAC;gBACH,YAAY,GAAG,mCAAmC,CAAC;gBACnD,SAAS,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE;oBAChD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;oBAClD,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,oBAAoB,CAAC;YACzB,IAAI,wBAA6E,CAAC;YAClF,IAAI,CAAC;gBACH,YAAY,GAAG,yCAAyC,CAAC;gBACzD,mCAAmC;gBACnC,+DAA+D;gBAC/D,mEAAmE;gBACnE,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAE,sCAAsC;gBACxE,MAAM,oBAAoB,GAAG,IAAI,CAAC,CAAE,4BAA4B;gBAChE,MAAM,mBAAmB,GAAG,IAAI,CAAC;gBAEjC,IAAI,SAAS,GAAiB,IAAI,CAAC;gBACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,gBAAgB,GAAG,iDAAiD,CAAC,KAAK,CAC9E,MAAM,iBAAiB,CAAC,oBAAoB,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAC5E,CAAC;wBACF,wBAAwB,GAAG,6CAA6C,CAAC;4BACvE,OAAO,EAAE,gBAAgB,CAAC,iBAAiB;4BAC3C,OAAO,EAAE,OAAO,CAAC,uBAAuB;4BACxC,mEAAmE;4BACnE,mEAAmE;4BACnE,mEAAmE;4BACnE,sDAAsD;4BACtD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;gCAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,wCAAwC,EAAE;oCAC1D,IAAI,EAAE,UAAU,CAAC,IAAI;oCACrB,WAAW,EAAE,UAAU,CAAC,WAAW;oCACnC,OAAO,EAAE,UAAU,CAAC,OAAO;iCAC5B,CAAC,CAAC;4BACL,CAAC;yBACF,CAAC,CAAC;wBACH,oBAAoB,GAAG,8BAA8B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;wBAC9E,MAAM,CAAC,2BAA2B;oBACpC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;wBAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;4BACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAC/C,mBAAmB,CACpB,CAAC;4BACF,IAAI,CAAC,QAAQ,CAAC,wBAAwB,OAAO,IAAI,qBAAqB,2BAA2B,KAAK,IAAI,EAAE;gCAC1G,KAAK,EAAE,SAAS,CAAC,OAAO;gCACxB,OAAO;gCACP,aAAa,EAAE,qBAAqB;6BACrC,CAAC,CAAC;4BACH,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;wBAC3D,CAAC;6BAAM,CAAC;4BACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,qBAAqB,+BAA+B,EAAE;gCAC7E,KAAK,EAAE,SAAS,CAAC,OAAO;gCACxB,aAAa,EAAE,qBAAqB;6BACrC,CAAC,CAAC;4BACH,MAAM,SAAS,CAAC;wBAClB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,0FAA0F;gBAC1F,2FAA2F;gBAC3F,6FAA6F;gBAC7F,8FAA8F;gBAC9F,mEAAmE;gBACnE,+BAA+B,CAAC,oBAAoB,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;gBAEvF,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE;oBAC9D,cAAc,EAAE,CAAC,CAAC,oBAAoB,CAAC,WAAW;oBAClD,iBAAiB,EAAE,CAAC,CAAC,oBAAoB,CAAC,cAAc;oBACxD,UAAU,EAAE,CAAC,CAAC,oBAAoB,CAAC,OAAO;oBAC1C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;iBAClF,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAS,CAAC,+CAA+C,EAAE;oBAC9D,OAAO,EAAE,oBAAoB,CAAC,WAAW,EAAE,OAAO;oBAClD,OAAO,EAAE,oBAAoB,CAAC,WAAW,EAAE,OAAO;oBAClD,OAAO,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI;oBACpC,wBAAwB,EACtB,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,qBAAqB;2BAC/C,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC;oBAC5E,eAAe,EAAE,oBAAoB,CAAC,cAAc,EAAE,SAAS,EAAE,eAAe;oBAChF,gBAAgB,EAAE,oBAAoB,CAAC,cAAc,EAAE,SAAS,EAAE,gBAAgB;oBAClF,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;oBACzE,sBAAsB,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC;iBACxE,CAAC,CAAC;YAGL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;oBAC1E,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,mBAAmB,EAAE,SAAS,EAAE,mBAAmB;oBACnD,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YAED,oEAAoE;YACpE,4EAA4E;YAC5E,YAAY,GAAG,mCAAmC,CAAC;YACnD,IAAI,sBAAsB,GAA8B;gBACtD,GAAG,OAAO,CAAC,kBAAkB;aAC9B,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;YAEhE,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBACpC,sBAAsB,GAAG,4BAA4B,CACnD,sBAAsB,EACtB,OAAO,CAAC,uBAAuB,CAChC,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;YACjH,CAAC;YAED,sBAAsB,GAAG,gCAAgC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAExF,IAAI,CAAC,iCAAiC,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;YAEhF,IAAI,CAAC,QAAS,CAAC,iCAAiC,EAAE;gBAChD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;gBAClD,WAAW,EAAE;oBACX,mBAAmB,EAAE,CAAC,CAAC,sBAAsB,CAAC,gBAAgB;oBAC9D,6BAA6B,EAAE,CAAC,CAAC,sBAAsB,CAAC,0BAA0B;oBAClF,eAAe,EAAE,CAAC,CAAC,sBAAsB,CAAC,yBAAyB;oBACnE,aAAa,EAAE,CAAC,CAAC,sBAAsB,CAAC,yBAAyB,EAAE,UAAU;iBAC9E;aACF,CAAC,CAAC;YAEH,kCAAkC;YAClC,YAAY,GAAG,2CAA2C,CAAC;YAC3D,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;YACtD,MAAM,kBAAkB,GAAG,IAAI,kCAAkC,CAAC,UAAU,CAAC,CAAC;YAC9E,MAAM,kBAAkB,CAAC,mBAAmB,CAC1C,8CAA8C,EAC9C,oCAAoC,EACpC,mCAAmC,EACnC,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,4BAA4B,CACrC,CAAC;YACF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,oBAAoB,EAAE,CAAC;YAEpE,oEAAoE;YACpE,YAAY,GAAG,+BAA+B,CAAC;YAC/C,MAAM,eAAe,EAAE,CAAC;YAExB,mEAAmE;YACnE,0EAA0E;YAC1E,IAAI,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC9B,YAAY,GAAG,mCAAmC,CAAC;gBACnD,MAAM,kBAAkB,GAAG,qBAAqB,CAC9C,iBAAiB,EACjB,sBAAsB,EACtB,CAAC,YAAoB,EAAE,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAClF,CAAC;gBACF,iCAAiC,CAAC,kBAAkB,CAAC,CAAC;gBAEtD,qEAAqE;gBACrE,uEAAuE;gBACvE,8DAA8D;gBAC9D,sEAAsE;gBACtE,qEAAqE;gBACrE,qDAAqD;gBACrD,oCAAoC,CAClC,wBAAwB,CACtB,wBAAwB,CAAC,sBAAsB,EAAE,WAAW,CAAC,EAC7D,0BAA0B,CAAC,sBAAsB,EAAE,WAAW,CAAC,EAC/D,iCAAiC,CAAC,sBAAsB,EAAE,WAAW,CAAC,CACvE,CACF,CAAC;gBAEF,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBACjC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC;wBACnE,iBAAiB;wBACjB,SAAS,EAAE,sBAAsB;wBACjC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;wBAClD,iFAAiF;wBACjF,2EAA2E;wBAC3E,kEAAkE;wBAClE,qBAAqB,EAAE,CAAC,YAAoB,EAAE,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,CAAC;qBACzG,CAAC,CAAC;oBAEH,IAAI,CAAC,4BAA4B,CAAC,OAAO,EAAE,CAAC;wBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kDAAkD,4BAA4B,CAAC,QAAQ;6BACpF,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC;6BAChC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,YAAY,GAAG,kBAAkB,CAAC;gBAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAChD,CAAC;YAED,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,YAAY,GAAG,kCAAkC,CAAC;YAClD,MAAM,wBAAwB,GAC5B,wBAAwB,IAAI,6CAA6C,EAAE,CAAC;YAC9E,MAAM,oBAAoB,GAAG,MAAM,4BAA4B,CAAC;gBAC9D,OAAO,EAAE,eAAe,CAAC,QAAQ;gBACjC,gGAAgG;gBAChG,qGAAqG;gBACrG,qFAAqF;gBACrF,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;gBACtH,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;oBAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE;wBAC/D,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,WAAW,EAAE,UAAU,CAAC,WAAW;wBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;qBAC5B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YAEH;;;;;;;;;;;;;eAaG;YACH,YAAY,GAAG,kCAAkC,CAAC;YAClD,mCAAmC,CAAC;gBAClC,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE;gBAC3C,WAAW,EAAE,oBAAoB,CAAC,WAAW;gBAC7C,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;oBAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE;wBAC/D,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,WAAW,EAAE,UAAU,CAAC,WAAW;wBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;qBAC5B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YAEH,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,6BAA6B,GAAG,CAAC,UAAuC,EAAQ,EAAE;gBACtF,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAA+B,EAAE;oBACjD,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC,CAAC;YACF,0EAA0E;YAC1E,qEAAqE;YACrE,2EAA2E;YAC3E,wEAAwE;YACxE,mBAAmB;YACnB,MAAM,8BAA8B,GAAG,qCAAqC,CAAC,wBAAwB,CAAC,OAAO,EAAE,EAAE;gBAC/G,kBAAkB,EAAE,uCAAuC,EAAE;gBAC7D,YAAY,EAAE,6BAA6B;aAC5C,CAAC,CAAC;YACH,MAAM,yBAAyB,GAAG,+BAA+B,CAAoB;gBACnF,aAAa,EAAE,8BAA8B;gBAC7C,YAAY,EAAE,6BAA6B;aAC5C,CAAC,CAAC;YAEH;;;;;;;;;;;;;;;;eAgBG;YACH,YAAY,GAAG,kCAAkC,CAAC;YAClD,MAAM,sBAAsB,GAAG,uCAAuC,CACpE,wBAAwB,CAAC,OAAO,EAAE,EAClC,8BAA8B,CAC/B,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,KAAK,mBAAmB,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;oBAC1E,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;wBACrC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,qCAAqC,EAAE;4BACvD,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,OAAO,EAAE,OAAO,CAAC,OAAO;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAwB;gBACpC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU;gBACV,kBAAkB;gBAClB,iBAAiB;gBACjB,oBAAoB;gBACpB,wBAAwB,EAAE,wBAAwB;gBAClD,oBAAoB;gBACpB,yBAAyB;gBACzB,qBAAqB,EAAE,sBAAsB;aAC9C,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAEtE,OAAO,QAAQ,CAAC;QAElB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,GAAG,8BAA8B,CAAC,KAAK,EAAE;gBAClE,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,mBAAmB,EAAE,SAAS,EAAE,mBAAmB;aACpD,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACrD,KAAK,EAAE,qBAAqB,CAAC,OAAO;oBACpC,KAAK,EAAE,qBAAqB,CAAC,KAAK;oBAClC,KAAK,EAAE,YAAY;oBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,mBAAmB,EAAE,SAAS,EAAE,mBAAmB;oBACnD,yBAAyB,EAAE,qBAAqB,CAAC,yBAAyB;iBAC3E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,qBAAqB,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,qBAAqB,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,gDAAgD;IAClD,CAAC;IAID;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,SAAmB;QAChD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC;YACH,4CAA4C;YAC5C,uEAAuE;YAEvE,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACjD,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;gBACvD,wDAAwD;YAC1D,CAAC,CAAC,CAAC,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,sEAAsE;QACxE,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,kEAAkE;AAClE,MAAM,WAAW,GAAQ,CAAC,OAAO,UAAU,KAAK,WAAW,CAAC,CAAC,CAAE,UAAkB,CAAC,CAAC,CAAE,MAAc,CAAC,CAAC;AACrG,IAAI,CAAC,WAAW,CAAC,sCAAsC,EAAE,CAAC;IACxD,WAAW,CAAC,sCAAsC,GAAG,IAAI,+BAA+B,EAAE,CAAC;AAC7F,CAAC;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC,sCAAyE,CAAC","sourcesContent":["/**\n * Start Application Frontend Service\n * Handles application initialization and startup logic\n */\n\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { WildoBackendHttpClient_ManualCalls } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { WildoBackendHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { configureClientInstanceIdPolicy } from '~wildo-frontend-lib/core/requests/client-instance-id.frontend.service';\nimport { ResourcesRepositoryFrontendService } from '~wildo-frontend-lib/core/resources/resources-repository.frontend.service';\nimport { InitializationApplicationConfig } from './ApplicationMainContext';\n\nimport {\n  AppConfiguration_FrontendBootstrapResponse_Schema,\n  AppConfiguration_Shared_Schema,\n  AppConfiguration_Shared,\n  type FeatureConfiguration,\n  ResourceConfiguration_InitializationFactory,\n  ResourceRelationship,\n  collectNavigationLayoutDiagnostics,\n  NavigationLayoutDiagnosticSeverity,\n  type NotificationBadgeDefinition, describeCaughtError } from '@wildo-ai/saas-models';\nimport {\n  AppConfiguration_Frontend_Schema,\n  type AppConfiguration_Frontend,\n} from '~wildo-frontend-lib/core/config/app-configuration-frontend.schemas';\nimport type { ResourceUIBehavior, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { type FrontendConfigOverrides, applyFrontendConfigOverrides } from './app-config-overrides.frontend.definitions';\nimport { verifyLauncherContent, reportLauncherVerificationResults } from '~wildo-frontend-lib/core/config/verify-launcher-content';\nimport { verifySettingsHubContent, reportSettingsHubVerificationResults } from '~wildo-frontend-lib/core/config/verify-settings-hub-content';\nimport {\n  resolveSettingsHubConfig,\n  findUnknownDestinationRefs,\n  resolveSettingsDestinationCatalog,\n} from '~wildo-frontend-lib/core/config/useSettingsHubConfig';\nimport { verifyFrontendFeatureReferences } from '~wildo-frontend-lib/core/config/verify-feature-references.frontend';\nimport { ComponentRegistryService } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.service';\nimport {\n  listContributedProviderComponentLoaders,\n  type AppProviderComponentRegistry,\n  type ProviderComponent,\n} from '~wildo-frontend-lib/core/components-registry/provider-component-registry.frontend.service';\nimport {\n  createFrontendProviderRegistryFrontendService,\n  type FrontendProviderRegistryFrontendService,\n} from '~wildo-frontend-lib/core/external-providers/frontend-provider-registry.frontend.service';\nimport { createFrontendErrorMonitoringBridge } from '~wildo-frontend-lib/core/monitoring/error-monitoring-bridge.frontend.service';\nimport {\n  activateFrontendProviderSdks,\n  collectProviderComponentRegistrations,\n  collectProviderScriptsWithoutComponents,\n  consentPurposesRequiredByProvider,\n  createProviderComponentRegistry,\n  loadProviderScripts,\n  type ActivatedFrontendProviderSdks,\n  type GeneratedAppProviderModules,\n  type ProviderComponentDiagnostic,\n} from '@wildo-ai/external-connectors-public/app';\nimport { AppFrontendType } from '@wildo-ai/saas-models/public-runtime';\n\ninterface InitializationFailureDiagnostics {\n  phase: string;\n  apiBaseUrl: string;\n  frontendServiceName?: string;\n  errorName?: string;\n  errorMessage: string;\n  stack?: string;\n  causeMessage?: string;\n  wildoError?: {\n    type?: unknown;\n    customMessageReference?: unknown;\n    context?: Record<string, unknown>;\n  };\n}\n\ntype InitializationFailureError = Error & {\n  initializationDiagnostics?: InitializationFailureDiagnostics;\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null;\n}\n\nfunction extractCauseMessage(error: unknown): string | undefined {\n  if (!isRecord(error) || !('cause' in error)) {\n    return undefined;\n  }\n\n  const cause = error.cause;\n  if (cause instanceof Error) {\n    return cause.message;\n  }\n\n  if (typeof cause === 'string') {\n    return cause;\n  }\n\n  return undefined;\n}\n\nfunction normalizeInitializationFailure(\n  error: unknown,\n  baseDiagnostics: {\n    phase: string;\n    apiBaseUrl: string;\n    frontendServiceName?: string;\n  },\n): InitializationFailureError {\n  const normalizedError = error instanceof Error ? error : new Error(String(error));\n  const wildoError = isRecord(normalizedError) && isRecord(normalizedError.wildoError)\n    ? normalizedError.wildoError\n    : undefined;\n\n  (normalizedError as InitializationFailureError).initializationDiagnostics = {\n    ...baseDiagnostics,\n    errorName: normalizedError.name,\n    errorMessage: normalizedError.message,\n    stack: normalizedError.stack,\n    causeMessage: extractCauseMessage(normalizedError),\n    wildoError: wildoError ? {\n      type: wildoError.type,\n      customMessageReference: wildoError.customMessageReference,\n      context: isRecord(wildoError.context) ? wildoError.context : undefined,\n    } : undefined,\n  };\n\n  return normalizedError as InitializationFailureError;\n}\n\nexport interface StartApplicationOptions {\n  config: InitializationApplicationConfig;\n  autoAuth?: boolean;\n  preloadResources?: string[];\n  onInitialized?: () => void;\n  onError?: (error: Error) => void;\n\n  /**\n   * Custom shared resources configuration factory map from custom-shared-lib.\n   * Required for custom resources to be registered in the frontend ResourceRegistryContext.\n   */\n  customShared_ResourcesConfigurationsFactoryMap?: { [key: string]: ResourceConfiguration_InitializationFactory<any, any, any> };\n\n  /**\n   * Custom shared resource field identifiers from custom-shared-lib.\n   */\n  customShared_ResourceFieldIdentifier?: { [key: string]: string };\n\n  /**\n   * Custom shared resource relationships from custom-shared-lib.\n   */\n  customShared_ResourcesRelationships?: ResourceRelationship[];\n\n  /**\n   * Resource types to leave OUT of the registry, even though the core factory map declares them.\n   *\n   * `ResourcesRepositoryFrontendService.initializeResources` has always accepted this; the bootstrap\n   * passed a hard-coded `undefined`, so the capability existed and no application-level caller could\n   * reach it. That is fine for an application, which wants the whole core vocabulary — and wrong for\n   * any OTHER kind of Wildo frontend.\n   *\n   * The application-creation workbench is the case that surfaced it: it observes an application's\n   * structure and is not that application's admin console, so registering the engine's billing,\n   * subscription, milestone, user and organization resources would surface a tenant vocabulary it has\n   * no business showing. Its exclusion set is derived from `CoreResourceType` minus the types its own\n   * relationships anchor on, so it needs no list here — only a way to pass one.\n   */\n  excludedResourceTypes?: ReadonlySet<string>;\n\n  /**\n   * Final frontend resource configuration preset.\n   *\n   * Controls how each resource and its operations appear in the frontend:\n   * labels, sections, views, empty state, guidance (resource-level) and\n   * addressability, sidebar placement, layout presets (operation-level).\n   *\n   * Apps must pass one already-composed object. In Wonder Todos, the engine\n   * module owns the framework base preset and layers any app-shell\n   * overrides before the final aggregated module registry reaches startup.\n   *\n   * The preset is the sole source of truth — only resources and operations\n   * declared in the preset exist in the frontend registry.\n   */\n  resourceUIBehavior?: ResourceUIBehavior;\n\n  /**\n   * App-declared notification badge definitions (merged with the framework's\n   * `coreNotificationBadgeDefinitions` in the frontend registry so\n   * `NavigationItemBadge` can resolve an app badge). Mirror the backend\n   * `ApplicationInitializationConfig.notificationBadgeDefinitions`.\n   */\n  notificationBadgeDefinitions?: NotificationBadgeDefinition[];\n\n  /**\n   * Base frontend configuration — provided by the app via the preset layer.\n   * No implicit framework defaults: apps must explicitly provide this.\n   */\n  baseFrontendConfig: AppConfiguration_Frontend;\n\n  /** Per-section frontend config overrides (factories or partial values) */\n  frontendConfigOverrides?: FrontendConfigOverrides;\n\n  /** Merged feature configuration used for frontend-only feature-ref validation. */\n  featureConfiguration?: FeatureConfiguration;\n\n  /** Component loader — registers component presets during initialization */\n  componentLoader: () => Promise<void>;\n\n  /**\n   * The CODE channel for frontend providers (#332): the\n   * `generatedFrontendProviderModules` export of this frontend service's own\n   * `src/generated/frontend-providers.generated.ts`, written by\n   * `wildo config sync`.\n   *\n   * The bootstrap payload says WHICH providers this service turned on; this says\n   * what code the bundle actually contains for them. Both are needed, because a\n   * JSON payload cannot carry an SDK loader and a bundle cannot know which\n   * environment it is running in.\n   *\n   * Config sync writes a stable empty map when the application declares no\n   * frontend providers. Pass that map from the generated startup module.\n   */\n  frontendProviderModules?: GeneratedAppProviderModules;\n}\n\nexport interface ApplicationServices {\n  logger: LoggerFrontendService;\n  httpClient: WildoBackendHttpClient;\n  resourceRepository: ResourcesRepositoryFrontendService;\n  resourcesRegistry: FrontendResourcesRegistry;\n  appConfigFromBackend: AppConfiguration_Shared;\n  frontendProviderRegistry: FrontendProviderRegistryFrontendService;\n  /**\n   * The vendor SDKs of every declared provider that carries one, already loaded\n   * and started (#332).\n   *\n   * Present even when empty, so a consumer never has to distinguish \"no SDKs\"\n   * from \"activation has not run\". `deactivateAll()` is the paired path a\n   * consent withdrawal needs.\n   */\n  frontendProviderSdks: ActivatedFrontendProviderSdks;\n  /**\n   * Components contributed by the live providers, keyed by capability (#380).\n   *\n   * A sibling of `ComponentRegistryService`, not a part of it: that one indexes\n   * the engine's CLOSED component-type enum with exactly one answer per key,\n   * while this indexes the OPEN capability vocabulary where several providers\n   * may answer and the surface presents the choice.\n   *\n   * Always present, even when empty, so a consumer never has to tell \"no\n   * provider components\" from \"registration has not run\".\n   */\n  providerComponentRegistry: AppProviderComponentRegistry;\n  /** Resolved per-app frontend configuration (defaults + overrides). Always present. */\n  frontendConfiguration: AppConfiguration_Frontend;\n}\n\nexport class StartApplicationFrontendService {\n  private services: ApplicationServices | null = null;\n  private isInitialized = false;\n  private initializationPromise: Promise<ApplicationServices> | null = null;\n  private logger: LoggerFrontendService | null = null;\n  private logDebug: ((message: string, context?: Record<string, unknown>) => void) | null = null;\n\n  /**\n   * Report what the authored navigation layout declares that the runtime will silently do\n   * differently — a SPLIT with no pane to open, a `persistent` split with no companion, a zone field\n   * that is inert on primary, inverted width bounds.\n   *\n   * ## Non-fatal, and the alternative was considered\n   *\n   * `collectNavigationLayoutDiagnostics` could have been a `superRefine` on `NavigationLayoutSchema`,\n   * which is parsed one line above inside `AppConfiguration_Frontend_Schema`. That would have made a\n   * declared split that renders as a dialog stop the application from booting — disproportionate to\n   * the defect, and the shape `.claude/rules/application-creation-directive.md` forbids: the\n   * mechanism MARKS what is not right and keeps going. The precedent is the administrative-continuity\n   * boot report, non-fatal for the same reason.\n   *\n   * Logged at `error`/`warn` rather than `debug` on purpose: a diagnostic behind a debug flag is one\n   * nobody has ever read. Each carries its own remedy, because a report with no remedy is a\n   * complaint.\n   */\n  private reportNavigationLayoutDiagnostics(navigationLayout: unknown): void {\n    if (!navigationLayout) return;\n    let diagnostics;\n    try {\n      diagnostics = collectNavigationLayoutDiagnostics(navigationLayout as never);\n    } catch (error) {\n      // A diagnostic pass must never be why an application fails to start.\n      this.logger.warn('Navigation layout diagnostics could not run', { error: describeCaughtError(error) });\n      return;\n    }\n    if (diagnostics.length === 0) return;\n\n    for (const diagnostic of diagnostics) {\n      const payload = { path: diagnostic.path, code: diagnostic.code, remedy: diagnostic.remedy };\n      if (diagnostic.severity === NavigationLayoutDiagnosticSeverity.ERROR) {\n        this.logger.error(`Navigation layout: ${diagnostic.message}`, payload);\n      } else {\n        this.logger.warn(`Navigation layout: ${diagnostic.message}`, payload);\n      }\n    }\n  }\n\n\n\n  async initializeApplication(options: StartApplicationOptions): Promise<ApplicationServices> {\n    if (this.isInitialized && this.services)\n      return this.services;\n\n    if (this.initializationPromise)\n      return this.initializationPromise;\n\n    // Freeze options snapshot to ensure stable initialization across dev StrictMode double-invoke\n    const snapshot: StartApplicationOptions = { ...options };\n    this.initializationPromise = this.performInitialization(snapshot);\n\n    try {\n      this.services = await this.initializationPromise;\n      this.isInitialized = true;\n\n      try {\n        options.onInitialized && options.onInitialized();\n      } catch (error) {\n        this.logger.error('Failed to fire onInitialized callback', { error: describeCaughtError(error) });\n      }\n      return this.services;\n\n    } catch (error) {\n      this.initializationPromise = null;\n      throw error;\n    }\n  }\n\n  private async performInitialization(options: StartApplicationOptions): Promise<ApplicationServices> {\n    const {\n      config,\n      autoAuth = true,\n      preloadResources = [],\n      onError,\n      customShared_ResourcesConfigurationsFactoryMap,\n      customShared_ResourceFieldIdentifier,\n      customShared_ResourcesRelationships,\n      componentLoader,\n    } = options;\n    let currentPhase = 'startup preparation';\n    let envConfig: ReturnType<typeof envLoader.loadEnvironmentConfig> | undefined;\n\n    if (!this.logger) {\n      this.logger = LoggerFrontendService.getLogger();\n      this.logDebug = this.logger.debugByType('StartApplicationFrontendService');\n      this.logger.setDebugTypeLogging('StartApplicationFrontendService', false);\n    }\n\n    this.logger.info('Starting application initialization...', {\n      autoAuth,\n    });\n\n    this.logDebug!('Frontend initialization started with config', {\n      apiBaseUrl: config.apiBaseUrl,\n      autoAuth,\n    });\n\n    try {\n      // Initialize HTTP client\n      currentPhase = 'http client initialization';\n      this.logDebug('Initializing HTTP client...');\n      const httpClient = new WildoBackendHttpClient({ baseURL: config.apiBaseUrl });\n\n      // Fetch application configuration from backend\n      currentPhase = 'manual backend client setup';\n      this.logDebug('Fetching application configuration from backend...');\n      const manualCallsClient = new WildoBackendHttpClient_ManualCalls({ baseURL: config.apiBaseUrl });\n\n      try {\n        currentPhase = 'environment configuration loading';\n        envConfig = envLoader.loadEnvironmentConfig();\n        this.logDebug('Environment configuration loaded', {\n          frontendServiceName: envConfig.frontendServiceName,\n          apiBaseUrl: envConfig.apiBaseUrl,\n          appName: envConfig.appName\n        });\n      } catch (error) {\n        this.logger.error('Failed to load environment configuration', { error: error.message });\n        throw new Error(`Environment configuration failed: ${error.message}`);\n      }\n\n      let appConfigFromBackend;\n      let frontendProviderRegistry: FrontendProviderRegistryFrontendService | undefined;\n      try {\n        currentPhase = 'backend application configuration fetch';\n        // Retry logic for config retrieval\n        // Note: Keep this low to avoid long waits when backend is down\n        // HTTP client also has its own retry logic (3 attempts by default)\n        const CONFIG_RETRY_ATTEMPTS = 2;  // Reduced from 10 to avoid long waits\n        const CONFIG_BASE_DELAY_MS = 2000;  // 2 seconds between retries\n        const CONFIG_MAX_DELAY_MS = 5000;\n\n        let lastError: Error | null = null;\n        for (let attempt = 1; attempt <= CONFIG_RETRY_ATTEMPTS; attempt++) {\n          try {\n            const bootstrapPayload = AppConfiguration_FrontendBootstrapResponse_Schema.parse(\n              await manualCallsClient.getApplicationConfig(envConfig.frontendServiceName),\n            );\n            frontendProviderRegistry = createFrontendProviderRegistryFrontendService({\n              entries: bootstrapPayload.frontendProviders,\n              modules: options.frontendProviderModules,\n              // Hydration diagnostics are WARNINGS, never failures. Every one of\n              // them names a provider that is declared but cannot fully run, and\n              // an application must still start: the alternative is a blank page\n              // because an analytics provider's config was renamed.\n              onDiagnostic: (diagnostic) => {\n                this.logger?.warn('Frontend provider hydration diagnostic', {\n                  kind: diagnostic.kind,\n                  providerRef: diagnostic.providerRef,\n                  message: diagnostic.message,\n                });\n              },\n            });\n            appConfigFromBackend = AppConfiguration_Shared_Schema.parse(bootstrapPayload);\n            break; // Success, exit retry loop\n          } catch (error) {\n            lastError = error instanceof Error ? error : new Error(String(error));\n\n            if (attempt < CONFIG_RETRY_ATTEMPTS) {\n              const delay = Math.min(\n                CONFIG_BASE_DELAY_MS * Math.pow(2, attempt - 1),\n                CONFIG_MAX_DELAY_MS\n              );\n              this.logDebug(`Config fetch attempt ${attempt}/${CONFIG_RETRY_ATTEMPTS} failed, retrying after ${delay}ms`, {\n                error: lastError.message,\n                attempt,\n                totalAttempts: CONFIG_RETRY_ATTEMPTS\n              });\n              await new Promise(resolve => setTimeout(resolve, delay));\n            } else {\n              this.logger.error(`All ${CONFIG_RETRY_ATTEMPTS} config fetch attempts failed`, {\n                error: lastError.message,\n                totalAttempts: CONFIG_RETRY_ATTEMPTS\n              });\n              throw lastError;\n            }\n          }\n        }\n\n        // Apply the application's client-install identification policy as soon as the config that\n        // carries it is available (Fork D / SD9). Until this line runs, the store is fail-closed —\n        // nothing is minted, stored, or sent — so bootstrap traffic before this point (including the\n        // config fetch itself) never carries a client-install id. Applying `DISABLED` is NOT a no-op:\n        // it purges any id a previously-enabled policy left on the device.\n        configureClientInstanceIdPolicy(appConfigFromBackend.compliance.clientInstanceIdScope);\n\n        this.logDebug('Application configuration fetched successfully', {\n          hasAppIdentity: !!appConfigFromBackend.appIdentity,\n          hasAppPreferences: !!appConfigFromBackend.appPreferences,\n          hasRuntime: !!appConfigFromBackend.runtime,\n          endpointsCount: Object.keys(appConfigFromBackend.runtime?.endPoints || {}).length\n        });\n\n        this.logDebug!('Application configuration loaded from backend', {\n          appName: appConfigFromBackend.appIdentity?.appName,\n          version: appConfigFromBackend.appIdentity?.version,\n          hasAuth: !!appConfigFromBackend.auth,\n          hasSocialOAuth2Providers:\n            !!appConfigFromBackend.auth?.socialOAuth2Providers\n            && Object.keys(appConfigFromBackend.auth.socialOAuth2Providers).length > 0,\n          defaultLanguage: appConfigFromBackend.appPreferences?.languages?.defaultLanguage,\n          enabledLanguages: appConfigFromBackend.appPreferences?.languages?.enabledLanguages,\n          endpointsList: Object.keys(appConfigFromBackend.runtime?.endPoints || {}),\n          frontendProvidersCount: frontendProviderRegistry?.listAll().length ?? 0,\n        });\n\n\n      } catch (error) {\n        this.logger.error('Failed to fetch application configuration from backend', {\n          error: error.message,\n          frontendServiceName: envConfig?.frontendServiceName,\n          apiBaseUrl: config.apiBaseUrl\n        });\n        throw new Error(`Application configuration fetch failed: ${error.message}`);\n      }\n\n      // Resolve frontend configuration from app-provided base + overrides\n      // Frontend config is owned entirely by the frontend — not sent from backend\n      currentPhase = 'frontend configuration validation';\n      let resolvedFrontendConfig: AppConfiguration_Frontend = {\n        ...options.baseFrontendConfig,\n      };\n      this.logDebug('Using app-provided base frontend configuration');\n\n      if (options.frontendConfigOverrides) {\n        resolvedFrontendConfig = applyFrontendConfigOverrides(\n          resolvedFrontendConfig,\n          options.frontendConfigOverrides,\n        );\n        this.logDebug('Applied frontend config overrides', { sections: Object.keys(options.frontendConfigOverrides) });\n      }\n\n      resolvedFrontendConfig = AppConfiguration_Frontend_Schema.parse(resolvedFrontendConfig);\n\n      this.reportNavigationLayoutDiagnostics(resolvedFrontendConfig.navigationLayout);\n\n      this.logDebug!('Frontend configuration resolved', {\n        frontendServiceName: envConfig.frontendServiceName,\n        finalConfig: {\n          hasNavigationLayout: !!resolvedFrontendConfig.navigationLayout,\n          hasAppComponentsConfiguration: !!resolvedFrontendConfig.appComponentsConfiguration,\n          hasDesignSystem: !!resolvedFrontendConfig.designSystemConfiguration,\n          hasTypography: !!resolvedFrontendConfig.designSystemConfiguration?.typography,\n        }\n      });\n\n      // Initialize resources repository\n      currentPhase = 'frontend resource registry initialization';\n      this.logDebug('Initializing resources repository...');\n      const resourceRepository = new ResourcesRepositoryFrontendService(httpClient);\n      await resourceRepository.initializeResources(\n        customShared_ResourcesConfigurationsFactoryMap,\n        customShared_ResourceFieldIdentifier,\n        customShared_ResourcesRelationships,\n        options.excludedResourceTypes,\n        options.resourceUIBehavior,\n        options.notificationBadgeDefinitions,\n      );\n      const resourcesRegistry = resourceRepository.getResourcesRegistry();\n\n      // Initialize frontend component presets (app-provided registration)\n      currentPhase = 'component preset registration';\n      await componentLoader();\n\n      // DEV-mode: verify launcher/view declarations only after component\n      // registration so custom component refs can be checked deterministically.\n      if (envLoader.isDevelopment()) {\n        currentPhase = 'development launcher verification';\n        const verificationResult = verifyLauncherContent(\n          resourcesRegistry,\n          resolvedFrontendConfig,\n          (componentRef: string) => ComponentRegistryService.hasComponentType(componentRef),\n        );\n        reportLauncherVerificationResults(verificationResult);\n\n        // Settings Hub: catch duplicate section refs (and sibling structural\n        // gaps) before they silently double-render the content panel. Verifies\n        // the SAME resolved config the SettingsHub component renders.\n        // Resolve the application's OWN authored rail — there is no framework\n        // default to fall back to, so a missing `settingsHub` verifies as an\n        // empty hub rather than as the engine's arrangement.\n        reportSettingsHubVerificationResults(\n          verifySettingsHubContent(\n            resolveSettingsHubConfig(resolvedFrontendConfig?.settingsHub),\n            findUnknownDestinationRefs(resolvedFrontendConfig?.settingsHub),\n            resolveSettingsDestinationCatalog(resolvedFrontendConfig?.settingsHub),\n          ),\n        );\n\n        if (options.featureConfiguration) {\n          const featureReferenceVerification = verifyFrontendFeatureReferences({\n            resourcesRegistry,\n            appConfig: resolvedFrontendConfig,\n            featureConfiguration: options.featureConfiguration,\n            // Same predicate the launcher verification uses, and available here for the same\n            // reason: this block runs AFTER `componentLoader()`, so a CUSTOM feature's\n            // `customComponentRef` can be checked against real registrations.\n            isComponentRegistered: (componentRef: string) => ComponentRegistryService.hasComponentType(componentRef),\n          });\n\n          if (!featureReferenceVerification.isValid) {\n            this.logger.warn(\n              `Invalid frontend feature references detected:\\n${featureReferenceVerification.warnings\n                .map(warning => `  ⚠ ${warning}`)\n                .join('\\n')}`,\n            );\n          }\n        }\n      }\n\n      // Preload resources if specified\n      if (preloadResources.length > 0) {\n        currentPhase = 'resource preload';\n        await this.preloadResources(preloadResources);\n      }\n\n      // Load and start every declared provider's SDK. AFTER the registry is\n      // composed, because the registry is what decides which providers are live\n      // for this service, and BEFORE the services object is handed out, so a\n      // consumer never observes a half-activated surface. One provider's\n      // failure never stops another's, and none of them can fail startup.\n      currentPhase = 'frontend provider SDK activation';\n      const resolvedProviderRegistry =\n        frontendProviderRegistry ?? createFrontendProviderRegistryFrontendService();\n      const frontendProviderSdks = await activateFrontendProviderSdks({\n        surface: AppFrontendType.SAAS_APP,\n        // The FIRST phase: providers that rest on no consent purpose. A consent-based one is started by\n        // `ConsentBasedProviderSdksProvider` once the signed-in person grants it (#1704); handing it to this\n        // runner, which holds no grant, would only log a withheld diagnostic on every start.\n        modules: resolvedProviderRegistry.listAll().filter((module) => consentPurposesRequiredByProvider(module).length === 0),\n        onDiagnostic: (diagnostic) => {\n          this.logger?.warn('Frontend provider SDK activation diagnostic', {\n            kind: diagnostic.kind,\n            providerRef: diagnostic.providerRef,\n            message: diagnostic.message,\n          });\n        },\n      });\n\n      /*\n       * Subscribe the live error-monitoring providers to the crash bus, IMMEDIATELY\n       * after activation and from the same hydrated modules (#437).\n       *\n       * Here rather than in a React component because it must survive the one\n       * situation a component cannot: a tree unmounting because it crashed. And after\n       * activation rather than before, because a sink only exists once its SDK has\n       * started — subscribing earlier would install a bridge with nothing behind it\n       * and silently drop every crash in the window.\n       *\n       * Deliberately NOT retained for teardown: the bus, like the activated SDKs,\n       * lives as long as the application does, and an unsubscribe reachable from\n       * application code is a way for crash reporting to be switched off by accident.\n       */\n      currentPhase = 'frontend error-monitoring bridge';\n      createFrontendErrorMonitoringBridge({\n        modules: resolvedProviderRegistry.listAll(),\n        activations: frontendProviderSdks.activations,\n        onDiagnostic: (diagnostic) => {\n          this.logger?.warn('Frontend error-monitoring bridge diagnostic', {\n            kind: diagnostic.kind,\n            providerRef: diagnostic.providerRef,\n            message: diagnostic.message,\n          });\n        },\n      });\n\n      // Registered from the SAME hydrated modules the SDKs activate from, so a\n      // provider that is not live for this service contributes no component\n      // either. Nothing is loaded here: a loader runs when a surface asks.\n      const onProviderComponentDiagnostic = (diagnostic: ProviderComponentDiagnostic): void => {\n        this.logger?.warn('Provider component diagnostic', {\n          kind: diagnostic.kind,\n          capability: diagnostic.capability,\n          providerRef: diagnostic.providerRef,\n          message: diagnostic.message,\n        });\n      };\n      // Each declaration is joined to its loader here: the module's own when it\n      // carries one, else the one the facet library contributed at startup\n      // (`registerDefaultPresets` → `registerProviderComponents`). A declaration\n      // nothing can load is reported and left out, so the chooser offers only\n      // what can render.\n      const providerComponentRegistrations = collectProviderComponentRegistrations(resolvedProviderRegistry.listAll(), {\n        contributedLoaders: listContributedProviderComponentLoaders(),\n        onDiagnostic: onProviderComponentDiagnostic,\n      });\n      const providerComponentRegistry = createProviderComponentRegistry<ProviderComponent>({\n        registrations: providerComponentRegistrations,\n        onDiagnostic: onProviderComponentDiagnostic,\n      });\n\n      /*\n       * Load the declared `<script>` tags of every live provider that contributes\n       * NO component — the same population rule as SDK activation above, which\n       * runs for every live provider.\n       *\n       * A provider's scripts load when its code first runs on this surface: WITH\n       * its component when it contributes one (the provider component registry\n       * awaits them before handing the component back, so no page pays for a\n       * picker's vendor loader nobody opened), and here, at startup, otherwise —\n       * because nothing else will ever ask. Before this, the SaaS app injected no\n       * provider script at all: only the website did, and a declared script was a\n       * label.\n       *\n       * Deliberately NOT awaited. A vendor CDN that is slow or unreachable must\n       * not hold the application's start hostage; a failure is a diagnostic about\n       * one provider, not a startup error.\n       */\n      currentPhase = 'frontend provider script loading';\n      const startupProviderScripts = collectProviderScriptsWithoutComponents(\n        resolvedProviderRegistry.listAll(),\n        providerComponentRegistrations,\n      );\n      if (startupProviderScripts.length > 0) {\n        void loadProviderScripts(startupProviderScripts, document).then((outcome) => {\n          for (const failure of outcome.failed) {\n            this.logger?.warn('Frontend provider script diagnostic', {\n              providerRef: failure.providerRef,\n              src: failure.src,\n              message: failure.message,\n            });\n          }\n        });\n      }\n\n      const services: ApplicationServices = {\n        logger: this.logger,\n        httpClient,\n        resourceRepository,\n        resourcesRegistry,\n        appConfigFromBackend,\n        frontendProviderRegistry: resolvedProviderRegistry,\n        frontendProviderSdks,\n        providerComponentRegistry,\n        frontendConfiguration: resolvedFrontendConfig,\n      };\n\n      this.logger.info('Application initialization completed successfully');\n\n      return services;\n\n    } catch (error) {\n      const initializationFailure = normalizeInitializationFailure(error, {\n        phase: currentPhase,\n        apiBaseUrl: config.apiBaseUrl,\n        frontendServiceName: envConfig?.frontendServiceName,\n      });\n\n      if (this.logger) {\n        this.logger.error('Application initialization failed', {\n          error: initializationFailure.message,\n          stack: initializationFailure.stack,\n          phase: currentPhase,\n          apiBaseUrl: config.apiBaseUrl,\n          frontendServiceName: envConfig?.frontendServiceName,\n          initializationDiagnostics: initializationFailure.initializationDiagnostics,\n        });\n      } else {\n        console.error('Application initialization failed:', initializationFailure);\n      }\n\n      if (onError) {\n        onError(initializationFailure);\n      }\n\n      throw initializationFailure;\n    }\n  }\n\n  /**\n   * Get the initialized services\n   */\n  getServices(): ApplicationServices | null {\n    return this.services;\n  }\n\n  /**\n   * Check if the application is initialized\n   */\n  isApplicationInitialized(): boolean {\n    return this.isInitialized;\n  }\n\n  /**\n   * Reset the initialization state (useful for testing)\n   */\n  reset(): void {\n    this.services = null;\n    this.isInitialized = false;\n    this.initializationPromise = null;\n    // Don't reset logger - keep singleton principle\n  }\n\n\n\n  /**\n   * Preload specified resources\n   */\n  private async preloadResources(resources: string[]): Promise<void> {\n    if (!this.logger) return;\n\n    this.logger.info('Preloading resources...', { resourceCount: resources.length });\n\n    try {\n      // TODO: Implement resource preloading logic\n      // This could involve fetching commonly used data, warming caches, etc.\n\n      await Promise.all(resources.map(async (resource) => {\n        this.logger!.debug(`Preloading resource: ${resource}`);\n        // Implement specific preloading logic per resource type\n      }));\n\n      this.logger.info('Resource preloading completed successfully');\n    } catch (error) {\n      this.logger.warn('Resource preloading failed', { error: error.message });\n      // Don't throw here - preloading failure shouldn't prevent app startup\n    }\n  }\n}\n\n/**\n * Global instance of the start application service\n */\n// Persist singleton across HMR/dev to avoid double initialization\nconst __globalAny: any = (typeof globalThis !== 'undefined' ? (globalThis as any) : (window as any));\nif (!__globalAny.__START_APPLICATION_FRONTEND_SERVICE__) {\n  __globalAny.__START_APPLICATION_FRONTEND_SERVICE__ = new StartApplicationFrontendService();\n}\nexport const startApplicationService = __globalAny.__START_APPLICATION_FRONTEND_SERVICE__ as StartApplicationFrontendService;\n"]}
+{"version":3,"file":"start-application.frontend.service.js","sourceRoot":"","sources":["../../../../../src/core/runtime/start-application.frontend.service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6DAA6D,CAAC;AACpG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mFAAmF,CAAC;AACvI,OAAO,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAC9G,OAAO,EAAE,+BAA+B,EAAE,MAAM,uEAAuE,CAAC;AACxH,OAAO,EAAE,kCAAkC,EAAE,MAAM,0EAA0E,CAAC;AAG9H,OAAO,EACL,iDAAiD,EACjD,8BAA8B,EAK9B,kCAAkC,EAClC,kCAAkC,EACA,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EACL,gCAAgC,GAEjC,MAAM,oEAAoE,CAAC;AAE5E,OAAO,EAAE,SAAS,EAAE,MAAM,uEAAuE,CAAC;AAClG,OAAO,EAAgC,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AACzH,OAAO,EAAE,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,yDAAyD,CAAC;AACnI,OAAO,EAAE,wBAAwB,EAAE,oCAAoC,EAAE,MAAM,6DAA6D,CAAC;AAC7I,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,oEAAoE,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kFAAkF,CAAC;AAC5H,OAAO,EACL,uCAAuC,GAGxC,MAAM,2FAA2F,CAAC;AACnG,OAAO,EACL,6CAA6C,GAE9C,MAAM,yFAAyF,CAAC;AACjG,OAAO,EAAE,mCAAmC,EAAE,MAAM,8EAA8E,CAAC;AACnI,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,+BAA+B,EAC/B,mBAAmB,GAIpB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAqBvE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAc,EACd,eAIC;IAED,MAAM,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC;QAClF,CAAC,CAAC,eAAe,CAAC,UAAU;QAC5B,CAAC,CAAC,SAAS,CAAC;IAEb,eAA8C,CAAC,yBAAyB,GAAG;QAC1E,GAAG,eAAe;QAClB,SAAS,EAAE,eAAe,CAAC,IAAI;QAC/B,YAAY,EAAE,eAAe,CAAC,OAAO;QACrC,KAAK,EAAE,eAAe,CAAC,KAAK;QAC5B,YAAY,EAAE,mBAAmB,CAAC,eAAe,CAAC;QAClD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACzD,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACvE,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,OAAO,eAA6C,CAAC;AACvD,CAAC;AAiID,MAAM,OAAO,+BAA+B;IAClC,QAAQ,GAA+B,IAAI,CAAC;IAC5C,aAAa,GAAG,KAAK,CAAC;IACtB,qBAAqB,GAAwC,IAAI,CAAC;IAClE,MAAM,GAAiC,IAAI,CAAC;IAC5C,QAAQ,GAA0E,IAAI,CAAC;IAE/F;;;;;;;;;;;;;;;;;OAiBG;IACK,iCAAiC,CAAC,gBAAyB;QACjE,IAAI,CAAC,gBAAgB;YAAE,OAAO;QAC9B,IAAI,WAAW,CAAC;QAChB,IAAI,CAAC;YACH,WAAW,GAAG,kCAAkC,CAAC,gBAAyB,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;YAC5F,IAAI,UAAU,CAAC,QAAQ,KAAK,kCAAkC,CAAC,KAAK,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAID,KAAK,CAAC,qBAAqB,CAAC,OAAgC;QAC1D,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ;YACrC,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEvB,IAAI,IAAI,CAAC,qBAAqB;YAC5B,OAAO,IAAI,CAAC,qBAAqB,CAAC;QAEpC,8FAA8F;QAC9F,MAAM,QAAQ,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;QACzD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC;YACjD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAE1B,IAAI,CAAC;gBACH,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,OAAgC;QAClE,MAAM,EACJ,MAAM,EACN,QAAQ,GAAG,IAAI,EACf,gBAAgB,GAAG,EAAE,EACrB,OAAO,EACP,8CAA8C,EAC9C,oCAAoC,EACpC,mCAAmC,EACnC,eAAe,GAChB,GAAG,OAAO,CAAC;QACZ,IAAI,YAAY,GAAG,qBAAqB,CAAC;QACzC,IAAI,SAAyE,CAAC;QAE9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACzD,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC,QAAS,CAAC,6CAA6C,EAAE;YAC5D,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,yBAAyB;YACzB,YAAY,GAAG,4BAA4B,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAE9E,+CAA+C;YAC/C,YAAY,GAAG,6BAA6B,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;YACpE,MAAM,iBAAiB,GAAG,IAAI,kCAAkC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAEjG,IAAI,CAAC;gBACH,YAAY,GAAG,mCAAmC,CAAC;gBACnD,SAAS,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE;oBAChD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;oBAClD,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,oBAAoB,CAAC;YACzB,IAAI,wBAA6E,CAAC;YAClF,IAAI,CAAC;gBACH,YAAY,GAAG,yCAAyC,CAAC;gBACzD,mCAAmC;gBACnC,+DAA+D;gBAC/D,mEAAmE;gBACnE,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAE,sCAAsC;gBACxE,MAAM,oBAAoB,GAAG,IAAI,CAAC,CAAE,4BAA4B;gBAChE,MAAM,mBAAmB,GAAG,IAAI,CAAC;gBAEjC,IAAI,SAAS,GAAiB,IAAI,CAAC;gBACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,gBAAgB,GAAG,iDAAiD,CAAC,KAAK,CAC9E,MAAM,iBAAiB,CAAC,oBAAoB,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAC5E,CAAC;wBACF,wBAAwB,GAAG,6CAA6C,CAAC;4BACvE,OAAO,EAAE,gBAAgB,CAAC,iBAAiB;4BAC3C,OAAO,EAAE,OAAO,CAAC,uBAAuB;4BACxC,mEAAmE;4BACnE,mEAAmE;4BACnE,mEAAmE;4BACnE,sDAAsD;4BACtD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;gCAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,wCAAwC,EAAE;oCAC1D,IAAI,EAAE,UAAU,CAAC,IAAI;oCACrB,WAAW,EAAE,UAAU,CAAC,WAAW;oCACnC,OAAO,EAAE,UAAU,CAAC,OAAO;iCAC5B,CAAC,CAAC;4BACL,CAAC;yBACF,CAAC,CAAC;wBACH,oBAAoB,GAAG,8BAA8B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;wBAC9E,MAAM,CAAC,2BAA2B;oBACpC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;wBAEtE,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;4BACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAC/C,mBAAmB,CACpB,CAAC;4BACF,IAAI,CAAC,QAAQ,CAAC,wBAAwB,OAAO,IAAI,qBAAqB,2BAA2B,KAAK,IAAI,EAAE;gCAC1G,KAAK,EAAE,SAAS,CAAC,OAAO;gCACxB,OAAO;gCACP,aAAa,EAAE,qBAAqB;6BACrC,CAAC,CAAC;4BACH,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;wBAC3D,CAAC;6BAAM,CAAC;4BACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,qBAAqB,+BAA+B,EAAE;gCAC7E,KAAK,EAAE,SAAS,CAAC,OAAO;gCACxB,aAAa,EAAE,qBAAqB;6BACrC,CAAC,CAAC;4BACH,MAAM,SAAS,CAAC;wBAClB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,0FAA0F;gBAC1F,2FAA2F;gBAC3F,6FAA6F;gBAC7F,8FAA8F;gBAC9F,mEAAmE;gBACnE,+BAA+B,CAAC,oBAAoB,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;gBAEvF,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE;oBAC9D,cAAc,EAAE,CAAC,CAAC,oBAAoB,CAAC,WAAW;oBAClD,iBAAiB,EAAE,CAAC,CAAC,oBAAoB,CAAC,cAAc;oBACxD,UAAU,EAAE,CAAC,CAAC,oBAAoB,CAAC,OAAO;oBAC1C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;iBAClF,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAS,CAAC,+CAA+C,EAAE;oBAC9D,OAAO,EAAE,oBAAoB,CAAC,WAAW,EAAE,OAAO;oBAClD,OAAO,EAAE,oBAAoB,CAAC,WAAW,EAAE,OAAO;oBAClD,OAAO,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI;oBACpC,wBAAwB,EACtB,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,qBAAqB;2BAC/C,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC;oBAC5E,eAAe,EAAE,oBAAoB,CAAC,cAAc,EAAE,SAAS,EAAE,eAAe;oBAChF,gBAAgB,EAAE,oBAAoB,CAAC,cAAc,EAAE,SAAS,EAAE,gBAAgB;oBAClF,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;oBACzE,sBAAsB,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC;iBACxE,CAAC,CAAC;YAGL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;oBAC1E,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,mBAAmB,EAAE,SAAS,EAAE,mBAAmB;oBACnD,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YAED,oEAAoE;YACpE,4EAA4E;YAC5E,YAAY,GAAG,mCAAmC,CAAC;YACnD,IAAI,sBAAsB,GAA8B;gBACtD,GAAG,OAAO,CAAC,kBAAkB;aAC9B,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;YAEhE,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBACpC,sBAAsB,GAAG,4BAA4B,CACnD,sBAAsB,EACtB,OAAO,CAAC,uBAAuB,CAChC,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;YACjH,CAAC;YAED,sBAAsB,GAAG,gCAAgC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAExF,IAAI,CAAC,iCAAiC,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;YAEhF,IAAI,CAAC,QAAS,CAAC,iCAAiC,EAAE;gBAChD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;gBAClD,WAAW,EAAE;oBACX,mBAAmB,EAAE,CAAC,CAAC,sBAAsB,CAAC,gBAAgB;oBAC9D,6BAA6B,EAAE,CAAC,CAAC,sBAAsB,CAAC,0BAA0B;oBAClF,eAAe,EAAE,CAAC,CAAC,sBAAsB,CAAC,yBAAyB;oBACnE,aAAa,EAAE,CAAC,CAAC,sBAAsB,CAAC,yBAAyB,EAAE,UAAU;iBAC9E;aACF,CAAC,CAAC;YAEH,kCAAkC;YAClC,YAAY,GAAG,2CAA2C,CAAC;YAC3D,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;YACtD,MAAM,kBAAkB,GAAG,IAAI,kCAAkC,CAAC,UAAU,CAAC,CAAC;YAC9E,MAAM,kBAAkB,CAAC,mBAAmB,CAC1C,8CAA8C,EAC9C,oCAAoC,EACpC,mCAAmC,EACnC,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,4BAA4B,CACrC,CAAC;YACF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,oBAAoB,EAAE,CAAC;YAEpE,oEAAoE;YACpE,YAAY,GAAG,+BAA+B,CAAC;YAC/C,MAAM,eAAe,EAAE,CAAC;YAExB,mEAAmE;YACnE,0EAA0E;YAC1E,IAAI,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC9B,YAAY,GAAG,mCAAmC,CAAC;gBACnD,MAAM,kBAAkB,GAAG,qBAAqB,CAC9C,iBAAiB,EACjB,sBAAsB,EACtB,CAAC,YAAoB,EAAE,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,CAAC;gBACjF,8FAA8F;gBAC9F,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,iBAAiB,EAAE,CAC9D,CAAC;gBACF,iCAAiC,CAAC,kBAAkB,CAAC,CAAC;gBAEtD,qEAAqE;gBACrE,uEAAuE;gBACvE,8DAA8D;gBAC9D,sEAAsE;gBACtE,qEAAqE;gBACrE,qDAAqD;gBACrD,oCAAoC,CAClC,wBAAwB,CACtB,wBAAwB,CAAC,sBAAsB,EAAE,WAAW,CAAC,EAC7D,0BAA0B,CAAC,sBAAsB,EAAE,WAAW,CAAC,EAC/D,iCAAiC,CAAC,sBAAsB,EAAE,WAAW,CAAC,CACvE,CACF,CAAC;gBAEF,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;oBACjC,MAAM,4BAA4B,GAAG,+BAA+B,CAAC;wBACnE,iBAAiB;wBACjB,SAAS,EAAE,sBAAsB;wBACjC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;wBAClD,iFAAiF;wBACjF,2EAA2E;wBAC3E,kEAAkE;wBAClE,qBAAqB,EAAE,CAAC,YAAoB,EAAE,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,CAAC;qBACzG,CAAC,CAAC;oBAEH,IAAI,CAAC,4BAA4B,CAAC,OAAO,EAAE,CAAC;wBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kDAAkD,4BAA4B,CAAC,QAAQ;6BACpF,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC;6BAChC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,YAAY,GAAG,kBAAkB,CAAC;gBAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAChD,CAAC;YAED,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,YAAY,GAAG,kCAAkC,CAAC;YAClD,MAAM,wBAAwB,GAC5B,wBAAwB,IAAI,6CAA6C,EAAE,CAAC;YAC9E,MAAM,oBAAoB,GAAG,MAAM,4BAA4B,CAAC;gBAC9D,OAAO,EAAE,eAAe,CAAC,QAAQ;gBACjC,gGAAgG;gBAChG,qGAAqG;gBACrG,qFAAqF;gBACrF,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;gBACtH,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;oBAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE;wBAC/D,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,WAAW,EAAE,UAAU,CAAC,WAAW;wBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;qBAC5B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YAEH;;;;;;;;;;;;;eAaG;YACH,YAAY,GAAG,kCAAkC,CAAC;YAClD,mCAAmC,CAAC;gBAClC,OAAO,EAAE,wBAAwB,CAAC,OAAO,EAAE;gBAC3C,WAAW,EAAE,oBAAoB,CAAC,WAAW;gBAC7C,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;oBAC3B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE;wBAC/D,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,WAAW,EAAE,UAAU,CAAC,WAAW;wBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;qBAC5B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YAEH,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,6BAA6B,GAAG,CAAC,UAAuC,EAAQ,EAAE;gBACtF,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+BAA+B,EAAE;oBACjD,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC,CAAC;YACF,0EAA0E;YAC1E,qEAAqE;YACrE,2EAA2E;YAC3E,wEAAwE;YACxE,mBAAmB;YACnB,MAAM,8BAA8B,GAAG,qCAAqC,CAAC,wBAAwB,CAAC,OAAO,EAAE,EAAE;gBAC/G,kBAAkB,EAAE,uCAAuC,EAAE;gBAC7D,YAAY,EAAE,6BAA6B;aAC5C,CAAC,CAAC;YACH,MAAM,yBAAyB,GAAG,+BAA+B,CAAoB;gBACnF,aAAa,EAAE,8BAA8B;gBAC7C,YAAY,EAAE,6BAA6B;aAC5C,CAAC,CAAC;YAEH;;;;;;;;;;;;;;;;eAgBG;YACH,YAAY,GAAG,kCAAkC,CAAC;YAClD,MAAM,sBAAsB,GAAG,uCAAuC,CACpE,wBAAwB,CAAC,OAAO,EAAE,EAClC,8BAA8B,CAC/B,CAAC;YACF,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,KAAK,mBAAmB,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;oBAC1E,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;wBACrC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,qCAAqC,EAAE;4BACvD,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,GAAG,EAAE,OAAO,CAAC,GAAG;4BAChB,OAAO,EAAE,OAAO,CAAC,OAAO;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAwB;gBACpC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU;gBACV,kBAAkB;gBAClB,iBAAiB;gBACjB,oBAAoB;gBACpB,wBAAwB,EAAE,wBAAwB;gBAClD,oBAAoB;gBACpB,yBAAyB;gBACzB,qBAAqB,EAAE,sBAAsB;aAC9C,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAEtE,OAAO,QAAQ,CAAC;QAElB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,GAAG,8BAA8B,CAAC,KAAK,EAAE;gBAClE,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,mBAAmB,EAAE,SAAS,EAAE,mBAAmB;aACpD,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACrD,KAAK,EAAE,qBAAqB,CAAC,OAAO;oBACpC,KAAK,EAAE,qBAAqB,CAAC,KAAK;oBAClC,KAAK,EAAE,YAAY;oBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,mBAAmB,EAAE,SAAS,EAAE,mBAAmB;oBACnD,yBAAyB,EAAE,qBAAqB,CAAC,yBAAyB;iBAC3E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,qBAAqB,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,qBAAqB,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,gDAAgD;IAClD,CAAC;IAID;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,SAAmB;QAChD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAEjF,IAAI,CAAC;YACH,4CAA4C;YAC5C,uEAAuE;YAEvE,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACjD,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;gBACvD,wDAAwD;YAC1D,CAAC,CAAC,CAAC,CAAC;YAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,sEAAsE;QACxE,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,kEAAkE;AAClE,MAAM,WAAW,GAAQ,CAAC,OAAO,UAAU,KAAK,WAAW,CAAC,CAAC,CAAE,UAAkB,CAAC,CAAC,CAAE,MAAc,CAAC,CAAC;AACrG,IAAI,CAAC,WAAW,CAAC,sCAAsC,EAAE,CAAC;IACxD,WAAW,CAAC,sCAAsC,GAAG,IAAI,+BAA+B,EAAE,CAAC;AAC7F,CAAC;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC,sCAAyE,CAAC","sourcesContent":["/**\n * Start Application Frontend Service\n * Handles application initialization and startup logic\n */\n\nimport { LoggerFrontendService } from '~wildo-frontend-lib/core/monitoring/logger.frontend.service';\nimport { WildoBackendHttpClient_ManualCalls } from '~wildo-frontend-lib/core/requests/wildo-http-client-manual-calls.frontend.service';\nimport { WildoBackendHttpClient } from '~wildo-frontend-lib/core/requests/wildo-http-client.frontend.service';\nimport { configureClientInstanceIdPolicy } from '~wildo-frontend-lib/core/requests/client-instance-id.frontend.service';\nimport { ResourcesRepositoryFrontendService } from '~wildo-frontend-lib/core/resources/resources-repository.frontend.service';\nimport { InitializationApplicationConfig } from './ApplicationMainContext';\n\nimport {\n  AppConfiguration_FrontendBootstrapResponse_Schema,\n  AppConfiguration_Shared_Schema,\n  AppConfiguration_Shared,\n  type FeatureConfiguration,\n  ResourceConfiguration_InitializationFactory,\n  ResourceRelationship,\n  collectNavigationLayoutDiagnostics,\n  NavigationLayoutDiagnosticSeverity,\n  type NotificationBadgeDefinition, describeCaughtError } from '@wildo-ai/saas-models';\nimport {\n  AppConfiguration_Frontend_Schema,\n  type AppConfiguration_Frontend,\n} from '~wildo-frontend-lib/core/config/app-configuration-frontend.schemas';\nimport type { ResourceUIBehavior, FrontendResourcesRegistry } from '~wildo-frontend-lib/core/resources/resources.frontend.schemas';\nimport { envLoader } from '~wildo-frontend-lib/core/runtime/env-variable-loader.frontend.service';\nimport { type FrontendConfigOverrides, applyFrontendConfigOverrides } from './app-config-overrides.frontend.definitions';\nimport { verifyLauncherContent, reportLauncherVerificationResults } from '~wildo-frontend-lib/core/config/verify-launcher-content';\nimport { verifySettingsHubContent, reportSettingsHubVerificationResults } from '~wildo-frontend-lib/core/config/verify-settings-hub-content';\nimport {\n  resolveSettingsHubConfig,\n  findUnknownDestinationRefs,\n  resolveSettingsDestinationCatalog,\n} from '~wildo-frontend-lib/core/config/useSettingsHubConfig';\nimport { verifyFrontendFeatureReferences } from '~wildo-frontend-lib/core/config/verify-feature-references.frontend';\nimport { ComponentRegistryService } from '~wildo-frontend-lib/core/components-registry/component-registry.frontend.service';\nimport {\n  listContributedProviderComponentLoaders,\n  type AppProviderComponentRegistry,\n  type ProviderComponent,\n} from '~wildo-frontend-lib/core/components-registry/provider-component-registry.frontend.service';\nimport {\n  createFrontendProviderRegistryFrontendService,\n  type FrontendProviderRegistryFrontendService,\n} from '~wildo-frontend-lib/core/external-providers/frontend-provider-registry.frontend.service';\nimport { createFrontendErrorMonitoringBridge } from '~wildo-frontend-lib/core/monitoring/error-monitoring-bridge.frontend.service';\nimport {\n  activateFrontendProviderSdks,\n  collectProviderComponentRegistrations,\n  collectProviderScriptsWithoutComponents,\n  consentPurposesRequiredByProvider,\n  createProviderComponentRegistry,\n  loadProviderScripts,\n  type ActivatedFrontendProviderSdks,\n  type GeneratedAppProviderModules,\n  type ProviderComponentDiagnostic,\n} from '@wildo-ai/external-connectors-public/app';\nimport { AppFrontendType } from '@wildo-ai/saas-models/public-runtime';\n\ninterface InitializationFailureDiagnostics {\n  phase: string;\n  apiBaseUrl: string;\n  frontendServiceName?: string;\n  errorName?: string;\n  errorMessage: string;\n  stack?: string;\n  causeMessage?: string;\n  wildoError?: {\n    type?: unknown;\n    customMessageReference?: unknown;\n    context?: Record<string, unknown>;\n  };\n}\n\ntype InitializationFailureError = Error & {\n  initializationDiagnostics?: InitializationFailureDiagnostics;\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null;\n}\n\nfunction extractCauseMessage(error: unknown): string | undefined {\n  if (!isRecord(error) || !('cause' in error)) {\n    return undefined;\n  }\n\n  const cause = error.cause;\n  if (cause instanceof Error) {\n    return cause.message;\n  }\n\n  if (typeof cause === 'string') {\n    return cause;\n  }\n\n  return undefined;\n}\n\nfunction normalizeInitializationFailure(\n  error: unknown,\n  baseDiagnostics: {\n    phase: string;\n    apiBaseUrl: string;\n    frontendServiceName?: string;\n  },\n): InitializationFailureError {\n  const normalizedError = error instanceof Error ? error : new Error(String(error));\n  const wildoError = isRecord(normalizedError) && isRecord(normalizedError.wildoError)\n    ? normalizedError.wildoError\n    : undefined;\n\n  (normalizedError as InitializationFailureError).initializationDiagnostics = {\n    ...baseDiagnostics,\n    errorName: normalizedError.name,\n    errorMessage: normalizedError.message,\n    stack: normalizedError.stack,\n    causeMessage: extractCauseMessage(normalizedError),\n    wildoError: wildoError ? {\n      type: wildoError.type,\n      customMessageReference: wildoError.customMessageReference,\n      context: isRecord(wildoError.context) ? wildoError.context : undefined,\n    } : undefined,\n  };\n\n  return normalizedError as InitializationFailureError;\n}\n\nexport interface StartApplicationOptions {\n  config: InitializationApplicationConfig;\n  autoAuth?: boolean;\n  preloadResources?: string[];\n  onInitialized?: () => void;\n  onError?: (error: Error) => void;\n\n  /**\n   * Custom shared resources configuration factory map from custom-shared-lib.\n   * Required for custom resources to be registered in the frontend ResourceRegistryContext.\n   */\n  customShared_ResourcesConfigurationsFactoryMap?: { [key: string]: ResourceConfiguration_InitializationFactory<any, any, any> };\n\n  /**\n   * Custom shared resource field identifiers from custom-shared-lib.\n   */\n  customShared_ResourceFieldIdentifier?: { [key: string]: string };\n\n  /**\n   * Custom shared resource relationships from custom-shared-lib.\n   */\n  customShared_ResourcesRelationships?: ResourceRelationship[];\n\n  /**\n   * Resource types to leave OUT of the registry, even though the core factory map declares them.\n   *\n   * `ResourcesRepositoryFrontendService.initializeResources` has always accepted this; the bootstrap\n   * passed a hard-coded `undefined`, so the capability existed and no application-level caller could\n   * reach it. That is fine for an application, which wants the whole core vocabulary — and wrong for\n   * any OTHER kind of Wildo frontend.\n   *\n   * The application-creation workbench is the case that surfaced it: it observes an application's\n   * structure and is not that application's admin console, so registering the engine's billing,\n   * subscription, milestone, user and organization resources would surface a tenant vocabulary it has\n   * no business showing. Its exclusion set is derived from `CoreResourceType` minus the types its own\n   * relationships anchor on, so it needs no list here — only a way to pass one.\n   */\n  excludedResourceTypes?: ReadonlySet<string>;\n\n  /**\n   * Final frontend resource configuration preset.\n   *\n   * Controls how each resource and its operations appear in the frontend:\n   * labels, sections, views, empty state, guidance (resource-level) and\n   * addressability, sidebar placement, layout presets (operation-level).\n   *\n   * Apps must pass one already-composed object. In Wonder Todos, the engine\n   * module owns the framework base preset and layers any app-shell\n   * overrides before the final aggregated module registry reaches startup.\n   *\n   * The preset is the sole source of truth — only resources and operations\n   * declared in the preset exist in the frontend registry.\n   */\n  resourceUIBehavior?: ResourceUIBehavior;\n\n  /**\n   * App-declared notification badge definitions (merged with the framework's\n   * `coreNotificationBadgeDefinitions` in the frontend registry so\n   * `NavigationItemBadge` can resolve an app badge). Mirror the backend\n   * `ApplicationInitializationConfig.notificationBadgeDefinitions`.\n   */\n  notificationBadgeDefinitions?: NotificationBadgeDefinition[];\n\n  /**\n   * Base frontend configuration — provided by the app via the preset layer.\n   * No implicit framework defaults: apps must explicitly provide this.\n   */\n  baseFrontendConfig: AppConfiguration_Frontend;\n\n  /** Per-section frontend config overrides (factories or partial values) */\n  frontendConfigOverrides?: FrontendConfigOverrides;\n\n  /** Merged feature configuration used for frontend-only feature-ref validation. */\n  featureConfiguration?: FeatureConfiguration;\n\n  /** Component loader — registers component presets during initialization */\n  componentLoader: () => Promise<void>;\n\n  /**\n   * The CODE channel for frontend providers (#332): the\n   * `generatedFrontendProviderModules` export of this frontend service's own\n   * `src/generated/frontend-providers.generated.ts`, written by\n   * `wildo config sync`.\n   *\n   * The bootstrap payload says WHICH providers this service turned on; this says\n   * what code the bundle actually contains for them. Both are needed, because a\n   * JSON payload cannot carry an SDK loader and a bundle cannot know which\n   * environment it is running in.\n   *\n   * Config sync writes a stable empty map when the application declares no\n   * frontend providers. Pass that map from the generated startup module.\n   */\n  frontendProviderModules?: GeneratedAppProviderModules;\n}\n\nexport interface ApplicationServices {\n  logger: LoggerFrontendService;\n  httpClient: WildoBackendHttpClient;\n  resourceRepository: ResourcesRepositoryFrontendService;\n  resourcesRegistry: FrontendResourcesRegistry;\n  appConfigFromBackend: AppConfiguration_Shared;\n  frontendProviderRegistry: FrontendProviderRegistryFrontendService;\n  /**\n   * The vendor SDKs of every declared provider that carries one, already loaded\n   * and started (#332).\n   *\n   * Present even when empty, so a consumer never has to distinguish \"no SDKs\"\n   * from \"activation has not run\". `deactivateAll()` is the paired path a\n   * consent withdrawal needs.\n   */\n  frontendProviderSdks: ActivatedFrontendProviderSdks;\n  /**\n   * Components contributed by the live providers, keyed by capability (#380).\n   *\n   * A sibling of `ComponentRegistryService`, not a part of it: that one indexes\n   * the engine's CLOSED component-type enum with exactly one answer per key,\n   * while this indexes the OPEN capability vocabulary where several providers\n   * may answer and the surface presents the choice.\n   *\n   * Always present, even when empty, so a consumer never has to tell \"no\n   * provider components\" from \"registration has not run\".\n   */\n  providerComponentRegistry: AppProviderComponentRegistry;\n  /** Resolved per-app frontend configuration (defaults + overrides). Always present. */\n  frontendConfiguration: AppConfiguration_Frontend;\n}\n\nexport class StartApplicationFrontendService {\n  private services: ApplicationServices | null = null;\n  private isInitialized = false;\n  private initializationPromise: Promise<ApplicationServices> | null = null;\n  private logger: LoggerFrontendService | null = null;\n  private logDebug: ((message: string, context?: Record<string, unknown>) => void) | null = null;\n\n  /**\n   * Report what the authored navigation layout declares that the runtime will silently do\n   * differently — a SPLIT with no pane to open, a `persistent` split with no companion, a zone field\n   * that is inert on primary, inverted width bounds.\n   *\n   * ## Non-fatal, and the alternative was considered\n   *\n   * `collectNavigationLayoutDiagnostics` could have been a `superRefine` on `NavigationLayoutSchema`,\n   * which is parsed one line above inside `AppConfiguration_Frontend_Schema`. That would have made a\n   * declared split that renders as a dialog stop the application from booting — disproportionate to\n   * the defect, and the shape `.claude/rules/application-creation-directive.md` forbids: the\n   * mechanism MARKS what is not right and keeps going. The precedent is the administrative-continuity\n   * boot report, non-fatal for the same reason.\n   *\n   * Logged at `error`/`warn` rather than `debug` on purpose: a diagnostic behind a debug flag is one\n   * nobody has ever read. Each carries its own remedy, because a report with no remedy is a\n   * complaint.\n   */\n  private reportNavigationLayoutDiagnostics(navigationLayout: unknown): void {\n    if (!navigationLayout) return;\n    let diagnostics;\n    try {\n      diagnostics = collectNavigationLayoutDiagnostics(navigationLayout as never);\n    } catch (error) {\n      // A diagnostic pass must never be why an application fails to start.\n      this.logger.warn('Navigation layout diagnostics could not run', { error: describeCaughtError(error) });\n      return;\n    }\n    if (diagnostics.length === 0) return;\n\n    for (const diagnostic of diagnostics) {\n      const payload = { path: diagnostic.path, code: diagnostic.code, remedy: diagnostic.remedy };\n      if (diagnostic.severity === NavigationLayoutDiagnosticSeverity.ERROR) {\n        this.logger.error(`Navigation layout: ${diagnostic.message}`, payload);\n      } else {\n        this.logger.warn(`Navigation layout: ${diagnostic.message}`, payload);\n      }\n    }\n  }\n\n\n\n  async initializeApplication(options: StartApplicationOptions): Promise<ApplicationServices> {\n    if (this.isInitialized && this.services)\n      return this.services;\n\n    if (this.initializationPromise)\n      return this.initializationPromise;\n\n    // Freeze options snapshot to ensure stable initialization across dev StrictMode double-invoke\n    const snapshot: StartApplicationOptions = { ...options };\n    this.initializationPromise = this.performInitialization(snapshot);\n\n    try {\n      this.services = await this.initializationPromise;\n      this.isInitialized = true;\n\n      try {\n        options.onInitialized && options.onInitialized();\n      } catch (error) {\n        this.logger.error('Failed to fire onInitialized callback', { error: describeCaughtError(error) });\n      }\n      return this.services;\n\n    } catch (error) {\n      this.initializationPromise = null;\n      throw error;\n    }\n  }\n\n  private async performInitialization(options: StartApplicationOptions): Promise<ApplicationServices> {\n    const {\n      config,\n      autoAuth = true,\n      preloadResources = [],\n      onError,\n      customShared_ResourcesConfigurationsFactoryMap,\n      customShared_ResourceFieldIdentifier,\n      customShared_ResourcesRelationships,\n      componentLoader,\n    } = options;\n    let currentPhase = 'startup preparation';\n    let envConfig: ReturnType<typeof envLoader.loadEnvironmentConfig> | undefined;\n\n    if (!this.logger) {\n      this.logger = LoggerFrontendService.getLogger();\n      this.logDebug = this.logger.debugByType('StartApplicationFrontendService');\n      this.logger.setDebugTypeLogging('StartApplicationFrontendService', false);\n    }\n\n    this.logger.info('Starting application initialization...', {\n      autoAuth,\n    });\n\n    this.logDebug!('Frontend initialization started with config', {\n      apiBaseUrl: config.apiBaseUrl,\n      autoAuth,\n    });\n\n    try {\n      // Initialize HTTP client\n      currentPhase = 'http client initialization';\n      this.logDebug('Initializing HTTP client...');\n      const httpClient = new WildoBackendHttpClient({ baseURL: config.apiBaseUrl });\n\n      // Fetch application configuration from backend\n      currentPhase = 'manual backend client setup';\n      this.logDebug('Fetching application configuration from backend...');\n      const manualCallsClient = new WildoBackendHttpClient_ManualCalls({ baseURL: config.apiBaseUrl });\n\n      try {\n        currentPhase = 'environment configuration loading';\n        envConfig = envLoader.loadEnvironmentConfig();\n        this.logDebug('Environment configuration loaded', {\n          frontendServiceName: envConfig.frontendServiceName,\n          apiBaseUrl: envConfig.apiBaseUrl,\n          appName: envConfig.appName\n        });\n      } catch (error) {\n        this.logger.error('Failed to load environment configuration', { error: error.message });\n        throw new Error(`Environment configuration failed: ${error.message}`);\n      }\n\n      let appConfigFromBackend;\n      let frontendProviderRegistry: FrontendProviderRegistryFrontendService | undefined;\n      try {\n        currentPhase = 'backend application configuration fetch';\n        // Retry logic for config retrieval\n        // Note: Keep this low to avoid long waits when backend is down\n        // HTTP client also has its own retry logic (3 attempts by default)\n        const CONFIG_RETRY_ATTEMPTS = 2;  // Reduced from 10 to avoid long waits\n        const CONFIG_BASE_DELAY_MS = 2000;  // 2 seconds between retries\n        const CONFIG_MAX_DELAY_MS = 5000;\n\n        let lastError: Error | null = null;\n        for (let attempt = 1; attempt <= CONFIG_RETRY_ATTEMPTS; attempt++) {\n          try {\n            const bootstrapPayload = AppConfiguration_FrontendBootstrapResponse_Schema.parse(\n              await manualCallsClient.getApplicationConfig(envConfig.frontendServiceName),\n            );\n            frontendProviderRegistry = createFrontendProviderRegistryFrontendService({\n              entries: bootstrapPayload.frontendProviders,\n              modules: options.frontendProviderModules,\n              // Hydration diagnostics are WARNINGS, never failures. Every one of\n              // them names a provider that is declared but cannot fully run, and\n              // an application must still start: the alternative is a blank page\n              // because an analytics provider's config was renamed.\n              onDiagnostic: (diagnostic) => {\n                this.logger?.warn('Frontend provider hydration diagnostic', {\n                  kind: diagnostic.kind,\n                  providerRef: diagnostic.providerRef,\n                  message: diagnostic.message,\n                });\n              },\n            });\n            appConfigFromBackend = AppConfiguration_Shared_Schema.parse(bootstrapPayload);\n            break; // Success, exit retry loop\n          } catch (error) {\n            lastError = error instanceof Error ? error : new Error(String(error));\n\n            if (attempt < CONFIG_RETRY_ATTEMPTS) {\n              const delay = Math.min(\n                CONFIG_BASE_DELAY_MS * Math.pow(2, attempt - 1),\n                CONFIG_MAX_DELAY_MS\n              );\n              this.logDebug(`Config fetch attempt ${attempt}/${CONFIG_RETRY_ATTEMPTS} failed, retrying after ${delay}ms`, {\n                error: lastError.message,\n                attempt,\n                totalAttempts: CONFIG_RETRY_ATTEMPTS\n              });\n              await new Promise(resolve => setTimeout(resolve, delay));\n            } else {\n              this.logger.error(`All ${CONFIG_RETRY_ATTEMPTS} config fetch attempts failed`, {\n                error: lastError.message,\n                totalAttempts: CONFIG_RETRY_ATTEMPTS\n              });\n              throw lastError;\n            }\n          }\n        }\n\n        // Apply the application's client-install identification policy as soon as the config that\n        // carries it is available (Fork D / SD9). Until this line runs, the store is fail-closed —\n        // nothing is minted, stored, or sent — so bootstrap traffic before this point (including the\n        // config fetch itself) never carries a client-install id. Applying `DISABLED` is NOT a no-op:\n        // it purges any id a previously-enabled policy left on the device.\n        configureClientInstanceIdPolicy(appConfigFromBackend.compliance.clientInstanceIdScope);\n\n        this.logDebug('Application configuration fetched successfully', {\n          hasAppIdentity: !!appConfigFromBackend.appIdentity,\n          hasAppPreferences: !!appConfigFromBackend.appPreferences,\n          hasRuntime: !!appConfigFromBackend.runtime,\n          endpointsCount: Object.keys(appConfigFromBackend.runtime?.endPoints || {}).length\n        });\n\n        this.logDebug!('Application configuration loaded from backend', {\n          appName: appConfigFromBackend.appIdentity?.appName,\n          version: appConfigFromBackend.appIdentity?.version,\n          hasAuth: !!appConfigFromBackend.auth,\n          hasSocialOAuth2Providers:\n            !!appConfigFromBackend.auth?.socialOAuth2Providers\n            && Object.keys(appConfigFromBackend.auth.socialOAuth2Providers).length > 0,\n          defaultLanguage: appConfigFromBackend.appPreferences?.languages?.defaultLanguage,\n          enabledLanguages: appConfigFromBackend.appPreferences?.languages?.enabledLanguages,\n          endpointsList: Object.keys(appConfigFromBackend.runtime?.endPoints || {}),\n          frontendProvidersCount: frontendProviderRegistry?.listAll().length ?? 0,\n        });\n\n\n      } catch (error) {\n        this.logger.error('Failed to fetch application configuration from backend', {\n          error: error.message,\n          frontendServiceName: envConfig?.frontendServiceName,\n          apiBaseUrl: config.apiBaseUrl\n        });\n        throw new Error(`Application configuration fetch failed: ${error.message}`);\n      }\n\n      // Resolve frontend configuration from app-provided base + overrides\n      // Frontend config is owned entirely by the frontend — not sent from backend\n      currentPhase = 'frontend configuration validation';\n      let resolvedFrontendConfig: AppConfiguration_Frontend = {\n        ...options.baseFrontendConfig,\n      };\n      this.logDebug('Using app-provided base frontend configuration');\n\n      if (options.frontendConfigOverrides) {\n        resolvedFrontendConfig = applyFrontendConfigOverrides(\n          resolvedFrontendConfig,\n          options.frontendConfigOverrides,\n        );\n        this.logDebug('Applied frontend config overrides', { sections: Object.keys(options.frontendConfigOverrides) });\n      }\n\n      resolvedFrontendConfig = AppConfiguration_Frontend_Schema.parse(resolvedFrontendConfig);\n\n      this.reportNavigationLayoutDiagnostics(resolvedFrontendConfig.navigationLayout);\n\n      this.logDebug!('Frontend configuration resolved', {\n        frontendServiceName: envConfig.frontendServiceName,\n        finalConfig: {\n          hasNavigationLayout: !!resolvedFrontendConfig.navigationLayout,\n          hasAppComponentsConfiguration: !!resolvedFrontendConfig.appComponentsConfiguration,\n          hasDesignSystem: !!resolvedFrontendConfig.designSystemConfiguration,\n          hasTypography: !!resolvedFrontendConfig.designSystemConfiguration?.typography,\n        }\n      });\n\n      // Initialize resources repository\n      currentPhase = 'frontend resource registry initialization';\n      this.logDebug('Initializing resources repository...');\n      const resourceRepository = new ResourcesRepositoryFrontendService(httpClient);\n      await resourceRepository.initializeResources(\n        customShared_ResourcesConfigurationsFactoryMap,\n        customShared_ResourceFieldIdentifier,\n        customShared_ResourcesRelationships,\n        options.excludedResourceTypes,\n        options.resourceUIBehavior,\n        options.notificationBadgeDefinitions,\n      );\n      const resourcesRegistry = resourceRepository.getResourcesRegistry();\n\n      // Initialize frontend component presets (app-provided registration)\n      currentPhase = 'component preset registration';\n      await componentLoader();\n\n      // DEV-mode: verify launcher/view declarations only after component\n      // registration so custom component refs can be checked deterministically.\n      if (envLoader.isDevelopment()) {\n        currentPhase = 'development launcher verification';\n        const verificationResult = verifyLauncherContent(\n          resourcesRegistry,\n          resolvedFrontendConfig,\n          (componentRef: string) => ComponentRegistryService.hasComponentType(componentRef),\n          // The organization role table is published by the backend, never part of the frontend config.\n          { organizationRoles: appConfigFromBackend.organizationRoles },\n        );\n        reportLauncherVerificationResults(verificationResult);\n\n        // Settings Hub: catch duplicate section refs (and sibling structural\n        // gaps) before they silently double-render the content panel. Verifies\n        // the SAME resolved config the SettingsHub component renders.\n        // Resolve the application's OWN authored rail — there is no framework\n        // default to fall back to, so a missing `settingsHub` verifies as an\n        // empty hub rather than as the engine's arrangement.\n        reportSettingsHubVerificationResults(\n          verifySettingsHubContent(\n            resolveSettingsHubConfig(resolvedFrontendConfig?.settingsHub),\n            findUnknownDestinationRefs(resolvedFrontendConfig?.settingsHub),\n            resolveSettingsDestinationCatalog(resolvedFrontendConfig?.settingsHub),\n          ),\n        );\n\n        if (options.featureConfiguration) {\n          const featureReferenceVerification = verifyFrontendFeatureReferences({\n            resourcesRegistry,\n            appConfig: resolvedFrontendConfig,\n            featureConfiguration: options.featureConfiguration,\n            // Same predicate the launcher verification uses, and available here for the same\n            // reason: this block runs AFTER `componentLoader()`, so a CUSTOM feature's\n            // `customComponentRef` can be checked against real registrations.\n            isComponentRegistered: (componentRef: string) => ComponentRegistryService.hasComponentType(componentRef),\n          });\n\n          if (!featureReferenceVerification.isValid) {\n            this.logger.warn(\n              `Invalid frontend feature references detected:\\n${featureReferenceVerification.warnings\n                .map(warning => `  ⚠ ${warning}`)\n                .join('\\n')}`,\n            );\n          }\n        }\n      }\n\n      // Preload resources if specified\n      if (preloadResources.length > 0) {\n        currentPhase = 'resource preload';\n        await this.preloadResources(preloadResources);\n      }\n\n      // Load and start every declared provider's SDK. AFTER the registry is\n      // composed, because the registry is what decides which providers are live\n      // for this service, and BEFORE the services object is handed out, so a\n      // consumer never observes a half-activated surface. One provider's\n      // failure never stops another's, and none of them can fail startup.\n      currentPhase = 'frontend provider SDK activation';\n      const resolvedProviderRegistry =\n        frontendProviderRegistry ?? createFrontendProviderRegistryFrontendService();\n      const frontendProviderSdks = await activateFrontendProviderSdks({\n        surface: AppFrontendType.SAAS_APP,\n        // The FIRST phase: providers that rest on no consent purpose. A consent-based one is started by\n        // `ConsentBasedProviderSdksProvider` once the signed-in person grants it (#1704); handing it to this\n        // runner, which holds no grant, would only log a withheld diagnostic on every start.\n        modules: resolvedProviderRegistry.listAll().filter((module) => consentPurposesRequiredByProvider(module).length === 0),\n        onDiagnostic: (diagnostic) => {\n          this.logger?.warn('Frontend provider SDK activation diagnostic', {\n            kind: diagnostic.kind,\n            providerRef: diagnostic.providerRef,\n            message: diagnostic.message,\n          });\n        },\n      });\n\n      /*\n       * Subscribe the live error-monitoring providers to the crash bus, IMMEDIATELY\n       * after activation and from the same hydrated modules (#437).\n       *\n       * Here rather than in a React component because it must survive the one\n       * situation a component cannot: a tree unmounting because it crashed. And after\n       * activation rather than before, because a sink only exists once its SDK has\n       * started — subscribing earlier would install a bridge with nothing behind it\n       * and silently drop every crash in the window.\n       *\n       * Deliberately NOT retained for teardown: the bus, like the activated SDKs,\n       * lives as long as the application does, and an unsubscribe reachable from\n       * application code is a way for crash reporting to be switched off by accident.\n       */\n      currentPhase = 'frontend error-monitoring bridge';\n      createFrontendErrorMonitoringBridge({\n        modules: resolvedProviderRegistry.listAll(),\n        activations: frontendProviderSdks.activations,\n        onDiagnostic: (diagnostic) => {\n          this.logger?.warn('Frontend error-monitoring bridge diagnostic', {\n            kind: diagnostic.kind,\n            providerRef: diagnostic.providerRef,\n            message: diagnostic.message,\n          });\n        },\n      });\n\n      // Registered from the SAME hydrated modules the SDKs activate from, so a\n      // provider that is not live for this service contributes no component\n      // either. Nothing is loaded here: a loader runs when a surface asks.\n      const onProviderComponentDiagnostic = (diagnostic: ProviderComponentDiagnostic): void => {\n        this.logger?.warn('Provider component diagnostic', {\n          kind: diagnostic.kind,\n          capability: diagnostic.capability,\n          providerRef: diagnostic.providerRef,\n          message: diagnostic.message,\n        });\n      };\n      // Each declaration is joined to its loader here: the module's own when it\n      // carries one, else the one the facet library contributed at startup\n      // (`registerDefaultPresets` → `registerProviderComponents`). A declaration\n      // nothing can load is reported and left out, so the chooser offers only\n      // what can render.\n      const providerComponentRegistrations = collectProviderComponentRegistrations(resolvedProviderRegistry.listAll(), {\n        contributedLoaders: listContributedProviderComponentLoaders(),\n        onDiagnostic: onProviderComponentDiagnostic,\n      });\n      const providerComponentRegistry = createProviderComponentRegistry<ProviderComponent>({\n        registrations: providerComponentRegistrations,\n        onDiagnostic: onProviderComponentDiagnostic,\n      });\n\n      /*\n       * Load the declared `<script>` tags of every live provider that contributes\n       * NO component — the same population rule as SDK activation above, which\n       * runs for every live provider.\n       *\n       * A provider's scripts load when its code first runs on this surface: WITH\n       * its component when it contributes one (the provider component registry\n       * awaits them before handing the component back, so no page pays for a\n       * picker's vendor loader nobody opened), and here, at startup, otherwise —\n       * because nothing else will ever ask. Before this, the SaaS app injected no\n       * provider script at all: only the website did, and a declared script was a\n       * label.\n       *\n       * Deliberately NOT awaited. A vendor CDN that is slow or unreachable must\n       * not hold the application's start hostage; a failure is a diagnostic about\n       * one provider, not a startup error.\n       */\n      currentPhase = 'frontend provider script loading';\n      const startupProviderScripts = collectProviderScriptsWithoutComponents(\n        resolvedProviderRegistry.listAll(),\n        providerComponentRegistrations,\n      );\n      if (startupProviderScripts.length > 0) {\n        void loadProviderScripts(startupProviderScripts, document).then((outcome) => {\n          for (const failure of outcome.failed) {\n            this.logger?.warn('Frontend provider script diagnostic', {\n              providerRef: failure.providerRef,\n              src: failure.src,\n              message: failure.message,\n            });\n          }\n        });\n      }\n\n      const services: ApplicationServices = {\n        logger: this.logger,\n        httpClient,\n        resourceRepository,\n        resourcesRegistry,\n        appConfigFromBackend,\n        frontendProviderRegistry: resolvedProviderRegistry,\n        frontendProviderSdks,\n        providerComponentRegistry,\n        frontendConfiguration: resolvedFrontendConfig,\n      };\n\n      this.logger.info('Application initialization completed successfully');\n\n      return services;\n\n    } catch (error) {\n      const initializationFailure = normalizeInitializationFailure(error, {\n        phase: currentPhase,\n        apiBaseUrl: config.apiBaseUrl,\n        frontendServiceName: envConfig?.frontendServiceName,\n      });\n\n      if (this.logger) {\n        this.logger.error('Application initialization failed', {\n          error: initializationFailure.message,\n          stack: initializationFailure.stack,\n          phase: currentPhase,\n          apiBaseUrl: config.apiBaseUrl,\n          frontendServiceName: envConfig?.frontendServiceName,\n          initializationDiagnostics: initializationFailure.initializationDiagnostics,\n        });\n      } else {\n        console.error('Application initialization failed:', initializationFailure);\n      }\n\n      if (onError) {\n        onError(initializationFailure);\n      }\n\n      throw initializationFailure;\n    }\n  }\n\n  /**\n   * Get the initialized services\n   */\n  getServices(): ApplicationServices | null {\n    return this.services;\n  }\n\n  /**\n   * Check if the application is initialized\n   */\n  isApplicationInitialized(): boolean {\n    return this.isInitialized;\n  }\n\n  /**\n   * Reset the initialization state (useful for testing)\n   */\n  reset(): void {\n    this.services = null;\n    this.isInitialized = false;\n    this.initializationPromise = null;\n    // Don't reset logger - keep singleton principle\n  }\n\n\n\n  /**\n   * Preload specified resources\n   */\n  private async preloadResources(resources: string[]): Promise<void> {\n    if (!this.logger) return;\n\n    this.logger.info('Preloading resources...', { resourceCount: resources.length });\n\n    try {\n      // TODO: Implement resource preloading logic\n      // This could involve fetching commonly used data, warming caches, etc.\n\n      await Promise.all(resources.map(async (resource) => {\n        this.logger!.debug(`Preloading resource: ${resource}`);\n        // Implement specific preloading logic per resource type\n      }));\n\n      this.logger.info('Resource preloading completed successfully');\n    } catch (error) {\n      this.logger.warn('Resource preloading failed', { error: error.message });\n      // Don't throw here - preloading failure shouldn't prevent app startup\n    }\n  }\n}\n\n/**\n * Global instance of the start application service\n */\n// Persist singleton across HMR/dev to avoid double initialization\nconst __globalAny: any = (typeof globalThis !== 'undefined' ? (globalThis as any) : (window as any));\nif (!__globalAny.__START_APPLICATION_FRONTEND_SERVICE__) {\n  __globalAny.__START_APPLICATION_FRONTEND_SERVICE__ = new StartApplicationFrontendService();\n}\nexport const startApplicationService = __globalAny.__START_APPLICATION_FRONTEND_SERVICE__ as StartApplicationFrontendService;\n"]}

package/dist/esm/core/scope/AppScopeContext.d.ts

@@ -21,7 +21,7 @@
  */
 import type { AppScopeFieldDefinition } from '../../core/resources/resources.frontend.schemas';
 import React, { type ReactNode } from 'react';
-import { AppScopePrimaryValues, AppScopeSessionMode, type AppScopeValue, PrimaryScopeFieldDefinition, type ScopeDependency, type SetScopeValueOptions } from './scope.frontend.schemas';
+import { AppScopePrimaryValues, AppScopeSessionMode, type AppScopeValue, PrimaryScopeFieldDefinition, ScopeChangeInitiator, type ScopeDependency, type SetScopeValueOptions } from './scope.frontend.schemas';
 /**
  * The shape of the AppScopeContext value.
  */
@@ -76,7 +76,12 @@ export interface AppScopeContextValue {
 }
 export declare const AppScopeContext: React.Context<AppScopeContextValue>;
 interface AppScopeInternalContextValue {
-    commitOrganizationScopeValue: (organizationId: string | null) => void;
+    /**
+     * Commit the session's current organization. `initiator` says who moved it and travels on the
+     * `PRIMARY_SCOPE_CHANGED` event, so a subscriber can tell the session following the route
+     * (`ROUTER`, #2247) from the person switching organization (`USER_SELECTION`).
+     */
+    commitOrganizationScopeValue: (organizationId: string | null, initiator?: ScopeChangeInitiator) => void;
 }
 /**
  * Internal hook for framework-owned contexts that need to delegate primary-scope

package/dist/esm/core/scope/AppScopeContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppScopeContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/scope/AppScopeContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAM7G,OAAO,KAAK,EAAE,EAOZ,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AAWf,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,aAAa,EAClB,2BAA2B,EAE3B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAE1B,MAAM,0BAA0B,CAAC;AAgBlC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IAGnC,+BAA+B;IAC/B,kBAAkB,EAAE,qBAAqB,CAAC;IAE1C,8BAA8B;IAC9B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEjD,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE9C,0EAA0E;IAC1E,WAAW,EAAE,mBAAmB,CAAC;IAEjC,mDAAmD;IACnD,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAItC,kDAAkD;IAClD,kBAAkB,EAAE,2BAA2B,EAAE,CAAC;IAElD,oEAAoE;IACpE,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;IAI7C;;;;OAIG;IACH,aAAa,EAAE,CACb,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE,oBAAoB,KAC3B,IAAI,CAAC;IAEV;;OAEG;IACH,sBAAsB,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAIjE,6DAA6D;IAC7D,YAAY,EAAE,eAAe,EAAE,CAAC;IAEhC;;OAEG;IACH,kBAAkB,EAAE,CAAC,qBAAqB,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAIhE;;;OAGG;IACH,+BAA+B,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9D;;;OAGG;IACH,yBAAyB,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAInE,mDAAmD;IACnD,OAAO,EAAE,OAAO,CAAC;IAEjB,sDAAsD;IACtD,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,eAAe,qCAA6D,CAAC;AAE1F,UAAU,4BAA4B;IACpC,4BAA4B,EAAE,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CACvE;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,4BAA4B,CAMlE;AA4DD,UAAU,qBAAqB;IAC7B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA29B5D,CAAC"}
+{"version":3,"file":"AppScopeContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/scope/AppScopeContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAM7G,OAAO,KAAK,EAAE,EAOZ,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AAWf,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,aAAa,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAE1B,MAAM,0BAA0B,CAAC;AAiBlC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IAGnC,+BAA+B;IAC/B,kBAAkB,EAAE,qBAAqB,CAAC;IAE1C,8BAA8B;IAC9B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEjD,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE9C,0EAA0E;IAC1E,WAAW,EAAE,mBAAmB,CAAC;IAEjC,mDAAmD;IACnD,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAItC,kDAAkD;IAClD,kBAAkB,EAAE,2BAA2B,EAAE,CAAC;IAElD,oEAAoE;IACpE,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;IAI7C;;;;OAIG;IACH,aAAa,EAAE,CACb,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE,oBAAoB,KAC3B,IAAI,CAAC;IAEV;;OAEG;IACH,sBAAsB,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAIjE,6DAA6D;IAC7D,YAAY,EAAE,eAAe,EAAE,CAAC;IAEhC;;OAEG;IACH,kBAAkB,EAAE,CAAC,qBAAqB,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAIhE;;;OAGG;IACH,+BAA+B,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE9D;;;OAGG;IACH,yBAAyB,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAInE,mDAAmD;IACnD,OAAO,EAAE,OAAO,CAAC;IAEjB,sDAAsD;IACtD,SAAS,EAAE,OAAO,CAAC;CACpB;AAGD,eAAO,MAAM,eAAe,qCAA6D,CAAC;AAE1F,UAAU,4BAA4B;IACpC;;;;OAIG;IACH,4BAA4B,EAAE,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACzG;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,4BAA4B,CAMlE;AA4DD,UAAU,qBAAqB;IAC7B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAqgC5D,CAAC"}

package/dist/esm/core/scope/AppScopeContext.js

@@ -20,7 +20,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * `appScope.fields` is the only supported declaration site for custom scope
  * fields in this greenfield framework.
  */
-import { isPrimaryScopeFieldIdentifier, ALL_COLLECTION_OPERATIONS, CoreResourceOperation, ResourceRelationshipAccessScopeStrategy, ResourcesConfig_OperationPathUtils, getParentDirectionRelationships, Resources_SharedUtils, SessionType, } from '@wildo-ai/saas-models';
+import { isPrimaryScopeFieldIdentifier, CoreResourceOperation, ResourceRelationshipAccessScopeStrategy, ResourcesConfig_OperationPathUtils, getParentDirectionRelationships, Resources_SharedUtils, ResourcePrimaryScope, SessionType, } from '@wildo-ai/saas-models';
 import { APP_SCOPE_FIELD_DEFAULT_POSITION, findDuplicateAppScopeResourceTypes, } from '../../core/config/app-configuration-frontend.schemas.js';
 import { useApplication } from '../../core/runtime/useApplication.js';
 import React, { createContext, useCallback, useEffect, useMemo, useRef, useState } from 'react';
@@ -36,6 +36,7 @@ import { NAVIGATION_STRUCTURAL_ZONES, NavigationContentType } from '../../core/n
 import { AppScopeSessionMode, ScopeChangeInitiator, PRIMARY_SCOPE_FIELDS, } from './scope.frontend.schemas.js';
 import { envLoader } from '../../core/runtime/env-variable-loader.frontend.service.js';
 import { ScopeUtilsService } from './scope.utils.frontend.service.js';
+import { operationAddressesOneRecord } from '../../core/resources/operation-semantics.frontend.utils.js';
 const logger = LoggerFrontendService.getLogger();
 const logDebug = logger.debugByType('AppScopeContext');
 logger.setDebugTypeLogging('AppScopeContext', false);
@@ -137,6 +138,12 @@ export const AppScopeProvider = ({ children }) => {
     // Ref to track last validated context for validation
     const lastValidatedContextRef = useRef(null);
     const previousPrimaryScopeValuesRef = useRef(null);
+    /**
+     * Who committed the organization the next `PRIMARY_SCOPE_CHANGED` announces. Written by
+     * `commitOrganizationScopeValue` when the value actually changes, read and cleared by the emitting effect.
+     * A ref, not state: it describes the cause of a state change and is never rendered.
+     */
+    const pendingOrganizationChangeInitiatorRef = useRef(undefined);
     const decodedAccessTokenValues = useMemo(() => decodeAccessTokenPayload(auth.accessToken), [auth.accessToken]);
     // ─── Primary Scope Values ────────────────────────────────────
     const primaryScopeValues = useMemo(() => ScopeUtilsService.buildPrimaryScopeValues({
@@ -186,11 +193,12 @@ export const AppScopeProvider = ({ children }) => {
             .join('; ');
         return `Duplicate app-scope resourceType declarations are not allowed in appScope.fields. Conflicts: ${duplicateSummary}`;
     }, [frontendConfiguration]);
-    const commitOrganizationScopeValue = useCallback((organizationId) => {
+    const commitOrganizationScopeValue = useCallback((organizationId, initiator) => {
         setCurrentOrganizationId(previousOrganizationId => {
             if (previousOrganizationId === organizationId) {
                 return previousOrganizationId;
             }
+            pendingOrganizationChangeInitiatorRef.current = initiator;
             tokenStorage.setOrganizationId(organizationId);
             if (previousOrganizationId && organizationId) {
                 notifyOrganizationSwitch(organizationId, previousOrganizationId);
@@ -198,10 +206,44 @@ export const AppScopeProvider = ({ children }) => {
             return organizationId;
         });
     }, [notifyOrganizationSwitch, tokenStorage]);
+    /**
+     * The stored organization is read when a session is ESTABLISHED or ends — a token appearing or going away, the
+     * restore concluding, the session type changing — never when an existing token merely ROTATES.
+     *
+     * The stored value is shared by every tab of the origin, and since #2247 it follows whatever organization a tab's
+     * route names. Re-reading it on every token VALUE made one tab adopt another tab's organization at its next
+     * refresh (its own, or the cross-tab `TOKEN_REFRESHED` broadcast): a tab on `/organizations/A/…` switched to B
+     * because a link into B was opened elsewhere, and the switch sent it home. So the stored value is the default a
+     * new session starts from, and within a session each tab keeps its own current organization, moved only by its
+     * route (`ROUTER`) or by the person (`USER_SELECTION`). A different person signing in over a live token is
+     * re-committed by `UserOrgsContext.loadOrganizations` from their own memberships.
+     */
+    const hasAccessToken = Boolean(auth.accessToken);
     useEffect(() => {
-        const storedOrganizationId = getResolvedStoredOrganizationId();
-        setCurrentOrganizationId(previousOrganizationId => (previousOrganizationId === storedOrganizationId ? previousOrganizationId : storedOrganizationId));
-    }, [auth.accessToken, auth.sessionRestored, auth.sessionType, tokenStorage]);
+        const hideDuringRestore = Boolean(auth.accessToken) && !auth.sessionRestored;
+        const signedIn = Boolean(auth.accessToken);
+        setCurrentOrganizationId(previousOrganizationId => {
+            if (hideDuringRestore) {
+                return null;
+            }
+            // Read INSIDE the updater, never in the effect body, and never over an organization already committed in this
+            // session (#2247, measured live 2026-10-03). The restore commits the stored organization, and the commit that
+            // marks the session restored is the one in which the route's follow effect commits the organization the URL
+            // names. That effect belongs to a child, so it runs first, but its update is only QUEUED (React computes it
+            // eagerly only when nothing else is pending on this provider). Reading storage in the effect body therefore
+            // saw the value from before the follow's update had written it, and the update queued here, being last, put
+            // the session back in the stored organization: the stored value said B while every reader asked about A.
+            // While signed in, an organization this session already committed is kept (restore and follow have decided
+            // it); storage only fills a session that has none yet. Signed out, storage is all there is.
+            const storedOrganizationId = tokenStorage.getOrganizationId();
+            if (signedIn && previousOrganizationId) {
+                return previousOrganizationId;
+            }
+            return previousOrganizationId === storedOrganizationId ? previousOrganizationId : storedOrganizationId;
+        });
+        // `auth` is read through this render's closure; the dependencies below are exactly the session transitions this
+        // answers.
+    }, [hasAccessToken, auth.sessionRestored, auth.sessionType, tokenStorage]);
     // ─── App Scope Fields from App Config ──────────────────────────
     useEffect(() => {
         if (!registry) {
@@ -320,6 +362,9 @@ export const AppScopeProvider = ({ children }) => {
     useEffect(() => {
         const previousPrimaryScopeValues = previousPrimaryScopeValuesRef.current;
         previousPrimaryScopeValuesRef.current = primaryScopeValues;
+        // Consumed whatever happens below, so a cause can never be attributed to a later, unrelated change.
+        const organizationChangeInitiator = pendingOrganizationChangeInitiatorRef.current;
+        pendingOrganizationChangeInitiatorRef.current = undefined;
         if (!previousPrimaryScopeValues) {
             return;
         }
@@ -329,11 +374,13 @@ export const AppScopeProvider = ({ children }) => {
             if (previousValue === nextValue) {
                 continue;
             }
+            const initiator = field.scopeLevel === ResourcePrimaryScope.ORGANIZATIONS ? organizationChangeInitiator : undefined;
             emit(FrontendEvents.PRIMARY_SCOPE_CHANGED, {
                 scopeLevel: field.scopeLevel,
                 fieldIdentifier: field.fieldIdentifier,
                 newValue: nextValue,
                 previousValue,
+                ...(initiator ? { initiator } : {}),
             });
         }
     }, [emit, primaryScopeValues]);
@@ -676,11 +723,10 @@ export const AppScopeProvider = ({ children }) => {
             const surfaceOperation = content.resourceContext?.operation;
             // Effective semantics, not the literal identifier: a custom operation
             // that IS a collection (`resourceOperationLike: LIST | SEARCH`) browses
-            // the population exactly as the core verb does.
-            const surfaceEffectiveOperation = surfaceOperation?.resourceOperationLike
-                ?? surfaceOperation?.operationIdentifier;
-            const surfaceIsCollectionOperation = !!surfaceEffectiveOperation
-                && ALL_COLLECTION_OPERATIONS.includes(surfaceEffectiveOperation);
+            // the population exactly as the core verb does, and so does a BULK variant.
+            // `operationAddressesOneRecord` is the one answer the header and the
+            // navigation layer use too.
+            const surfaceIsCollectionOperation = !!surfaceOperation && !operationAddressesOneRecord(surfaceOperation);
             for (const field of customScopeFields) {
                 if (!field.resourceType) {
                     continue;