@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/resources/resources.shared.core.definitions.js

@@ -1,4 +1,12 @@
 import { z } from 'zod';
+/**
+ * @wildo_source:part:start saas.models.core-resource-operation facet:layer:shared facet:family:resource-config
+ *
+ * Core CRUD and collection operations every resource may expose.
+ *
+ * @remarks Import from `@wildo-ai/saas-models`. App `resources-config` picks a
+ * subset via `coreOperations` and adds `customOperation` identifiers.
+ */
 export var CoreResourceOperation;
 (function (CoreResourceOperation) {
     CoreResourceOperation["READ"] = "read";
@@ -62,6 +70,7 @@ export const OPERATIONS_WITHOUT_REQUEST_BODY = [
     CoreResourceOperation.COUNT,
     CoreResourceOperation.SEARCH,
 ];
+/** @wildo_source:part:end saas.models.core-resource-operation */
 export var CoreResourceType;
 (function (CoreResourceType) {
     CoreResourceType["USER_SELF"] = "user_self";
@@ -75,32 +84,34 @@ export var CoreResourceType;
     CoreResourceType["ORGANIZATION_UNITS"] = "organizationUnits";
     CoreResourceType["ORGANIZATION_PROFILES"] = "organizationProfiles";
     CoreResourceType["ORGANIZATION_PREFERENCES"] = "organizationPreferences";
+    CoreResourceType["PLATFORM_ACCESS_GRANTS"] = "platformAccessGrants";
     CoreResourceType["ORGANIZATION_NOTIFICATIONS"] = "organizationNotifications";
     CoreResourceType["ORGANIZATION_FEATURES"] = "organizationFeatures";
     CoreResourceType["USER_FEATURES"] = "userFeatures";
     CoreResourceType["ORGANIZATION_MEMBERS"] = "organizationMembers";
-    CoreResourceType["ORGANIZATION_MEMBER_INVITATIONS"] = "organizationMemberInvitations";
+    /** Junction: a membership's role inside one organization unit (replaced an embedded array — D-B5). */
+    CoreResourceType["ORGANIZATION_UNIT_MEMBERS"] = "organizationUnitMembers";
     CoreResourceType["ORG_API_KEYS"] = "organizationApiKeys";
+    CoreResourceType["OAUTH_CLIENTS_ORGANIZATION"] = "organizationOAuthClients";
     CoreResourceType["ORGANIZATION_SCIM_TOKENS"] = "organizationScimTokens";
     CoreResourceType["ORGANIZATION_SCIM_PROVISIONING_CONFIG"] = "organizationScimProvisioningConfig";
-    // SSO & Auth Policy Resources (Phase H-SSO)
+    // SSO Resources (Phase H-SSO)
     CoreResourceType["ORGANIZATION_SSO_CONNECTIONS"] = "organizationSsoConnections";
     CoreResourceType["ORGANIZATION_SSO_CONFIG"] = "organizationSsoConfig";
-    CoreResourceType["ORGANIZATION_AUTH_POLICY"] = "organizationAuthPolicy";
     // SIEM / Compliance Resources (Phase H-SIEM)
     CoreResourceType["ORGANIZATION_SIEM_EXPORT_CONFIG"] = "organizationSiemExportConfig";
     CoreResourceType["ORGANIZATION_SIEM_DELIVERY_DLQ"] = "organizationSiemDeliveryDlq";
     CoreResourceType["APPLICATION"] = "applications";
     CoreResourceType["APPLICATION_SSO_CONFIG"] = "applicationSsoConfig";
     CoreResourceType["APPLICATION_SSO_CONNECTIONS"] = "applicationSsoConnections";
-    CoreResourceType["APPLICATION_AUTH_POLICY"] = "applicationAuthPolicy";
     CoreResourceType["APPLICATION_SIEM_EXPORT_CONFIG"] = "applicationSiemExportConfig";
     CoreResourceType["APPLICATION_SIEM_DELIVERY_DLQ"] = "applicationSiemDeliveryDlq";
-    CoreResourceType["APPLICATION_SCIM_TOKENS"] = "applicationScimTokens";
     CoreResourceType["APPLICATION_SCIM_PROVISIONING_CONFIG"] = "applicationScimProvisioningConfig";
     CoreResourceType["APPLICATION_API_KEYS"] = "applicationApiKeys";
+    CoreResourceType["OAUTH_CLIENTS_APPLICATION"] = "applicationOAuthClients";
     CoreResourceType["APPLICATION_METADATA"] = "applicationMetadata";
     CoreResourceType["APPLICATION_VERSIONS"] = "applicationVersions";
+    CoreResourceType["APPLICATION_FEATURES"] = "applicationFeatures";
     // Billing Accounts — polymorphic variants (one per primary scope)
     CoreResourceType["ORGANIZATION_BILLING_ACCOUNTS"] = "organizationBillingAccounts";
     CoreResourceType["USER_BILLING_ACCOUNTS"] = "userBillingAccounts";
@@ -123,20 +134,37 @@ export var CoreResourceType;
     CoreResourceType["REFERRALS"] = "referrals";
     // Audit and Compliance Resources
     CoreResourceType["AUDIT_LOGS"] = "auditLogs";
-    // Notification Resources
-    CoreResourceType["NOTIFICATION_BADGES"] = "notificationBadges";
+    // Notification Badges Resources — polymorphic dual-scope (USER + ORG).
+    // Each scope owns its own collection and its own access-control surface:
+    //   - USER variant: the user themselves reads/lists their badges; CREATE/UPDATE
+    //     are system-internal (driven by the dispatcher / batch services).
+    //   - ORG variant: org admins read/list their org's badges; CREATE/UPDATE are
+    //     system-internal.
+    // See `notifications/notification-badges.shared.resources-config.schemas.ts`.
+    CoreResourceType["USER_NOTIFICATION_BADGES"] = "userNotificationBadges";
+    CoreResourceType["ORGANIZATION_NOTIFICATION_BADGES"] = "organizationNotificationBadges";
+    // M2M Outbound Webhook Resources — polymorphic dual-scope (ORG + APP).
+    // See `notifications/m2m/webhook-config.shared.schemas.ts` and
+    // `notifications/m2m/m2m-webhook-delivery-log.shared.schemas.ts`.
+    CoreResourceType["ORGANIZATION_WEBHOOK_CONFIG"] = "organizationWebhookConfig";
+    CoreResourceType["APPLICATION_WEBHOOK_CONFIG"] = "applicationWebhookConfig";
+    CoreResourceType["ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG"] = "organizationM2mWebhookDeliveryLog";
+    CoreResourceType["APPLICATION_M2M_WEBHOOK_DELIVERY_LOG"] = "applicationM2mWebhookDeliveryLog";
     // File Management Resources
     CoreResourceType["FILES"] = "files";
     // Queue/Job Resources (internal, repository-only)
     CoreResourceType["JOB_EXECUTIONS"] = "jobExecutions";
     CoreResourceType["JOB_PAYLOAD_STORAGE"] = "jobPayloadStorage";
-    // Email Resources
-    CoreResourceType["EMAIL_TEMPLATES"] = "emailTemplates";
-    CoreResourceType["EMAIL_HEADER_FOOTER_TEMPLATES"] = "emailHeaderFooterTemplates";
     // Authentication Resources
     CoreResourceType["USER_IDENTITY_LINKS"] = "userIdentityLinks";
+    // OIDC persistent consent grants ("remember this app") — USER_SELF-scoped, provider-side.
+    CoreResourceType["OAUTH_CONSENT_GRANTS"] = "oauthConsentGrants";
     // Anonymous Session Resources
     CoreResourceType["ANONYMOUS_USERS"] = "anonymous_users";
+    // Marketing / Lead Capture Resources (Phase 0.5 — public marketing site
+    // forms write here; APPLICATION-scoped, no isAnonymizable, see Q-E=B in
+    // .cursor/plans/saas-website-slice.md).
+    CoreResourceType["INBOUND_CONTACTS"] = "inboundContacts";
     // Guidance State Resources — dual-scope (USER / ORGANIZATION)
     CoreResourceType["USER_GUIDANCE_STATE"] = "userGuidanceState";
     CoreResourceType["ORGANIZATION_GUIDANCE_STATE"] = "organizationGuidanceState";
@@ -146,7 +174,86 @@ export var CoreResourceType;
     // Lifecycle State Resources — dual-scope (USER / ORGANIZATION)
     CoreResourceType["USER_LIFECYCLE_STATE"] = "userLifecycleState";
     CoreResourceType["ORGANIZATION_LIFECYCLE_STATE"] = "organizationLifecycleState";
+    // Flows-Actors Execution Resources — persisted flow/actor system executions
+    // (conversational message log + kind-discriminated runtime state). POLYMORPHIC
+    // across owner scope: one variant per scope, each owned by the injected owner FK.
+    // The user variant is WS chat + user-delegated A2A; the org/app variants are
+    // machine-owned (API-key / OIDC-client A2A). Written by the conversational
+    // runtime; read as chat history by the owner. Values MUST match the polymorphic
+    // derivation from `flowActorExecutionsPolymorphicDeclaration`.
+    CoreResourceType["USER_FLOW_ACTOR_EXECUTIONS"] = "userFlowActorExecutions";
+    CoreResourceType["ORGANIZATION_FLOW_ACTOR_EXECUTIONS"] = "organizationFlowActorExecutions";
+    CoreResourceType["APPLICATION_FLOW_ACTOR_EXECUTIONS"] = "applicationFlowActorExecutions";
+    // Flows-Actors Task Resources — the persisted WORK record, deliberately a
+    // SEPARATE plane from the conversational execution above: executions own session
+    // history, tasks own an addressable/pollable/cancelable work lifecycle with its
+    // own status and artifacts. A task links back to an execution through a SOFT INDEXED
+    // FIELD (`flowActorExecutionId`), NOT a declared relationship of any kind — executions are
+    // polymorphic, so one foreign key would match no variant, and a declared edge would imply a
+    // cascade path that must not exist: a task has to OUTLIVE the conversation that produced it.
+    // (An earlier revision of this comment said "REFERENCE, never COMPOSITION", which read as a
+    // declared edge; no such relationship exists. The schema and the spec both describe the soft
+    // link correctly.) Derived from the canonical `Actors_Task_Schema`, mirroring how the
+    // platform persists `wildoApplicationActorTasks`. Surfaces the A2A `Task` object
+    // (`tasks/get` / `tasks/cancel`). Values MUST match the polymorphic derivation
+    // from `flowActorTasksPolymorphicDeclaration`.
+    CoreResourceType["USER_FLOW_ACTOR_TASKS"] = "userFlowActorTasks";
+    CoreResourceType["ORGANIZATION_FLOW_ACTOR_TASKS"] = "organizationFlowActorTasks";
+    CoreResourceType["APPLICATION_FLOW_ACTOR_TASKS"] = "applicationFlowActorTasks";
+    // A2A Push Notification Delivery Log (polymorphic — one per owner scope).
+    // One row per (task state change × registered webhook), written BEFORE the delivery is
+    // attempted so an unreachable queue still leaves a trace. Scope set MUST mirror the task
+    // resources above: an owner with no delivery-log variant is an owner whose notifications
+    // cannot be recorded. Values MUST match the polymorphic derivation from
+    // `a2aPushDeliveryLogPolymorphicDeclaration`.
+    CoreResourceType["USER_A2A_PUSH_DELIVERY_LOG"] = "userA2aPushDeliveryLog";
+    CoreResourceType["ORGANIZATION_A2A_PUSH_DELIVERY_LOG"] = "organizationA2aPushDeliveryLog";
+    CoreResourceType["APPLICATION_A2A_PUSH_DELIVERY_LOG"] = "applicationA2aPushDeliveryLog";
+    // A2A Token Budget State Resources (polymorphic SINGLETON — one per owner scope).
+    // Per-tenant, per-period LLM token-budget accumulator enforced on inbound A2A agent
+    // turns; written + read ONLY by the A2A runtime (via *AsSystem). Enum VALUES MUST match
+    // the polymorphic derivation from `a2aTokenBudgetStatePolymorphicDeclaration`
+    // (`toPascalCase('a2aTokenBudgetState')` = `A2aTokenBudgetState`, so the value is `A2a`).
+    CoreResourceType["USER_A2A_TOKEN_BUDGET_STATE"] = "userA2aTokenBudgetState";
+    CoreResourceType["ORGANIZATION_A2A_TOKEN_BUDGET_STATE"] = "organizationA2aTokenBudgetState";
+    CoreResourceType["APPLICATION_A2A_TOKEN_BUDGET_STATE"] = "applicationA2aTokenBudgetState";
 })(CoreResourceType || (CoreResourceType = {}));
+/**
+ * The core resources the ENGINE'S OWN runtime reads, which an application may never exclude.
+ *
+ * `excludedResourceTypes` exists so an application can drop core vocabulary it does not use — the
+ * billing-conditional resources it was built for, or, for a purpose-built console, most of the core
+ * catalog. That freedom has one floor: a resource the engine itself reads to function.
+ *
+ * It is declared HERE, in the shared tier, because the floor has TWO enforcement sites in different
+ * layers and they must never disagree: the frontend registry must REGISTER the resource, and the
+ * backend serving that frontend must MOUNT its controller. A floor honoured on one side only fails
+ * exactly as loudly as no floor at all — the workbench proved both halves in turn, first a registry
+ * with no `user_self` entry, then a 404 on `/api/v1/user-self/:id/context`.
+ *
+ * `USER_SELF` is that floor today. `UserOrgsContext.restoreUserSession` reads it to build the
+ * authenticated context after every login and every reload, and returns `false` when the registry
+ * has no entry for it — on which the caller logs out "to avoid a half-restored state". So excluding
+ * it does not degrade a feature; it makes authentication IMPOSSIBLE, in the most misleading way
+ * available: `POST /auth/authenticate` answers 200 with a valid token, the very next request goes out
+ * with no `Authorization` header, the 401 that follows is read as an expired session, and the user
+ * lands back on the login form. The only trace is one `warn`.
+ *
+ * That is why this is a floor the engine ENFORCES rather than a line in an application's
+ * documentation. An application cannot see this dependency — `restoreUserSession` is engine-internal
+ * — so an exclusion set derived from the application's own vocabulary (which is the correct way to
+ * write one) has no way to know it must carve this out. Measured on the application-creation
+ * workbench, whose exclusion is derived exactly that way: login succeeded and bounced, every time.
+ *
+ * `ORGANIZATIONS` is deliberately NOT here. `loadOrganizations` also reads the registry, but it warns
+ * and returns an empty list, so excluding it degrades the organization switcher and nothing else —
+ * a legitimate choice for a console with no tenant vocabulary. The floor is what BREAKS when absent,
+ * not everything the engine happens to read; a floor that grows past that would quietly re-impose the
+ * whole core catalog on every application.
+ */
+export const ENGINE_RUNTIME_REQUIRED_RESOURCE_TYPES = new Set([
+    CoreResourceType.USER_SELF,
+]);
 /**
  * Set of all billing resource types.
  * Used by the resource exclusion mechanism to conditionally exclude
@@ -175,12 +282,18 @@ export const BILLING_RESOURCE_TYPES = new Set([
     CoreResourceType.REFERRALS,
 ]);
 /**
+ * @wildo_source:part:start saas.models.resource-type facet:layer:shared facet:family:resource-config
+ *
  * Resource Type Schema (Core + Custom)
+ *
+ * @remarks Import from `@wildo-ai/saas-models`. Custom app resources use
+ * string literals beyond `CoreResourceType`.
  */
 export const ResourceTypeSchema = z.union([
     z.enum(CoreResourceType),
     z.string() // Custom resource types
 ]);
+/** @wildo_source:part:end saas.models.resource-type */
 /**
  * When multiple resource types share the same field identifier (e.g., USERS and
  * USER_SELF both use "userId"), this map declares which resource type is the
@@ -204,29 +317,30 @@ export const coreResourceShared_FieldIdentifier = {
     [CoreResourceType.APPLICATION]: 'applicationId',
     [CoreResourceType.APPLICATION_SSO_CONFIG]: 'applicationSsoConfigId',
     [CoreResourceType.APPLICATION_SSO_CONNECTIONS]: 'applicationSsoConnectionId',
-    [CoreResourceType.APPLICATION_AUTH_POLICY]: 'applicationAuthPolicyId',
     [CoreResourceType.APPLICATION_SIEM_EXPORT_CONFIG]: 'applicationSiemExportConfigId',
     [CoreResourceType.APPLICATION_SIEM_DELIVERY_DLQ]: 'applicationSiemDeliveryDlqId',
-    [CoreResourceType.APPLICATION_SCIM_TOKENS]: 'applicationScimTokenId',
     [CoreResourceType.APPLICATION_SCIM_PROVISIONING_CONFIG]: 'applicationScimProvisioningConfigId',
     [CoreResourceType.APPLICATION_METADATA]: 'applicationMetadataId',
     [CoreResourceType.APPLICATION_VERSIONS]: 'applicationVersionId',
+    [CoreResourceType.APPLICATION_FEATURES]: 'applicationFeaturesId',
     [CoreResourceType.ORGANIZATION_UNITS]: 'organizationUnitId',
     [CoreResourceType.ORGANIZATION_PROFILES]: 'organizationProfileId',
     [CoreResourceType.ORGANIZATION_PREFERENCES]: 'organizationPreferencesId',
+    [CoreResourceType.PLATFORM_ACCESS_GRANTS]: 'platformAccessGrantId',
     [CoreResourceType.ORGANIZATION_NOTIFICATIONS]: 'organizationNotificationsId',
     [CoreResourceType.ORGANIZATION_FEATURES]: 'organizationFeaturesId',
     [CoreResourceType.USER_FEATURES]: 'userFeaturesId',
     [CoreResourceType.ORGANIZATION_MEMBERS]: 'organizationMemberId',
-    [CoreResourceType.ORGANIZATION_MEMBER_INVITATIONS]: 'organizationMemberInvitationId',
+    [CoreResourceType.ORGANIZATION_UNIT_MEMBERS]: 'organizationUnitMemberId',
     [CoreResourceType.ORG_API_KEYS]: 'orgApiKeyId',
+    [CoreResourceType.OAUTH_CLIENTS_ORGANIZATION]: 'orgOAuthClientId',
     [CoreResourceType.ORGANIZATION_SCIM_TOKENS]: 'organizationScimTokenId',
     [CoreResourceType.ORGANIZATION_SCIM_PROVISIONING_CONFIG]: 'organizationScimProvisioningConfigId',
     [CoreResourceType.APPLICATION_API_KEYS]: 'appApiKeyId',
-    // SSO & Auth Policy Resources
+    [CoreResourceType.OAUTH_CLIENTS_APPLICATION]: 'appOAuthClientId',
+    // SSO Resources
     [CoreResourceType.ORGANIZATION_SSO_CONNECTIONS]: 'organizationSsoConnectionId',
     [CoreResourceType.ORGANIZATION_SSO_CONFIG]: 'organizationSsoConfigId',
-    [CoreResourceType.ORGANIZATION_AUTH_POLICY]: 'organizationAuthPolicyId',
     // SIEM / Compliance Resources
     [CoreResourceType.ORGANIZATION_SIEM_EXPORT_CONFIG]: 'organizationSiemExportConfigId',
     [CoreResourceType.ORGANIZATION_SIEM_DELIVERY_DLQ]: 'organizationSiemDeliveryDlqId',
@@ -251,15 +365,23 @@ export const coreResourceShared_FieldIdentifier = {
     [CoreResourceType.PROMOTIONS]: 'promotionId',
     [CoreResourceType.REFERRALS]: 'referralId',
     [CoreResourceType.AUDIT_LOGS]: 'auditLogId',
-    [CoreResourceType.NOTIFICATION_BADGES]: 'notificationBadgeId',
+    // Notification Badges — polymorphic dual-scope variants
+    [CoreResourceType.USER_NOTIFICATION_BADGES]: 'userNotificationBadgeId',
+    [CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES]: 'organizationNotificationBadgeId',
+    // M2M Outbound Webhook Resources — polymorphic dual-scope
+    [CoreResourceType.ORGANIZATION_WEBHOOK_CONFIG]: 'organizationWebhookConfigId',
+    [CoreResourceType.APPLICATION_WEBHOOK_CONFIG]: 'applicationWebhookConfigId',
+    [CoreResourceType.ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG]: 'organizationM2mWebhookDeliveryLogId',
+    [CoreResourceType.APPLICATION_M2M_WEBHOOK_DELIVERY_LOG]: 'applicationM2mWebhookDeliveryLogId',
     [CoreResourceType.FILES]: 'fileId',
     [CoreResourceType.JOB_EXECUTIONS]: 'jobExecutionId',
     [CoreResourceType.JOB_PAYLOAD_STORAGE]: 'jobPayloadStorageId',
-    [CoreResourceType.EMAIL_TEMPLATES]: 'emailTemplateId',
-    [CoreResourceType.EMAIL_HEADER_FOOTER_TEMPLATES]: 'emailHeaderFooterTemplateId',
     [CoreResourceType.USER_IDENTITY_LINKS]: 'userIdentityLinkId',
+    [CoreResourceType.OAUTH_CONSENT_GRANTS]: 'oauthConsentGrantId',
     // Anonymous Session Resources
     [CoreResourceType.ANONYMOUS_USERS]: 'anonymousUserId',
+    // Marketing / Lead Capture Resources
+    [CoreResourceType.INBOUND_CONTACTS]: 'inboundContactId',
     // Guidance State Resources
     [CoreResourceType.USER_GUIDANCE_STATE]: 'userGuidanceStateId',
     [CoreResourceType.ORGANIZATION_GUIDANCE_STATE]: 'organizationGuidanceStateId',
@@ -269,13 +391,37 @@ export const coreResourceShared_FieldIdentifier = {
     // Lifecycle State Resources
     [CoreResourceType.USER_LIFECYCLE_STATE]: 'userLifecycleStateId',
     [CoreResourceType.ORGANIZATION_LIFECYCLE_STATE]: 'organizationLifecycleStateId',
+    // Flows-Actors Execution Resources (polymorphic — one per owner scope)
+    [CoreResourceType.USER_FLOW_ACTOR_EXECUTIONS]: 'userFlowActorExecutionId',
+    [CoreResourceType.ORGANIZATION_FLOW_ACTOR_EXECUTIONS]: 'organizationFlowActorExecutionId',
+    [CoreResourceType.APPLICATION_FLOW_ACTOR_EXECUTIONS]: 'applicationFlowActorExecutionId',
+    // Flows-Actors Task Resources (polymorphic — one per owner scope)
+    [CoreResourceType.USER_FLOW_ACTOR_TASKS]: 'userFlowActorTaskId',
+    [CoreResourceType.ORGANIZATION_FLOW_ACTOR_TASKS]: 'organizationFlowActorTaskId',
+    [CoreResourceType.APPLICATION_FLOW_ACTOR_TASKS]: 'applicationFlowActorTaskId',
+    // A2A Push Notification Delivery Log (polymorphic — one per owner scope)
+    [CoreResourceType.USER_A2A_PUSH_DELIVERY_LOG]: 'userA2aPushDeliveryLogId',
+    [CoreResourceType.ORGANIZATION_A2A_PUSH_DELIVERY_LOG]: 'organizationA2aPushDeliveryLogId',
+    [CoreResourceType.APPLICATION_A2A_PUSH_DELIVERY_LOG]: 'applicationA2aPushDeliveryLogId',
+    // A2A Token Budget State Resources (polymorphic singleton — one per owner scope)
+    [CoreResourceType.USER_A2A_TOKEN_BUDGET_STATE]: 'userA2aTokenBudgetStateId',
+    [CoreResourceType.ORGANIZATION_A2A_TOKEN_BUDGET_STATE]: 'organizationA2aTokenBudgetStateId',
+    [CoreResourceType.APPLICATION_A2A_TOKEN_BUDGET_STATE]: 'applicationA2aTokenBudgetStateId',
 };
+/**
+ * @wildo_source:part:start saas.models.resource-field-identifier facet:layer:shared facet:family:resource-config
+ *
+ * FK / primary-key field identifier string for a resource (core or custom).
+ *
+ * @remarks Import from `@wildo-ai/saas-models`.
+ */
 export const ResourceFieldIdentifierSchema = z.union([
     z.string().refine((value) => Object.values(coreResourceShared_FieldIdentifier).includes(value), {
         message: "Must be a valid core resource field identifier"
     }),
     z.string() // Custom resource field identifiers
 ]);
+/** @wildo_source:part:end saas.models.resource-field-identifier */
 /**
  * Cascade direction for self-referencing relationships.
  * Used when resourceType1 === resourceType2 to disambiguate parent vs child.
@@ -287,4 +433,4 @@ export var CascadeDirection;
     /** Reverse child→parent — related resource is ancestor */
     CascadeDirection["BACKWARD"] = "backward";
 })(CascadeDirection || (CascadeDirection = {}));
-//# sourceMappingURL=resources.shared.core.definitions.js.map
+//# sourceMappingURL=resources.shared.core.definitions.js.map

package/dist/esm/resources/resources.shared.core.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"resources.shared.core.definitions.js","sourceRoot":"","sources":["../../../src/resources/resources.shared.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,CAAN,IAAY,qBAWX;AAXD,WAAY,qBAAqB;IAC/B,sCAAa,CAAA;IACb,0CAAiB,CAAA;IACjB,oDAA2B,CAAA;IAC3B,0CAAiB,CAAA;IACjB,oDAA2B,CAAA;IAC3B,0CAAiB,CAAA;IACjB,oDAA2B,CAAA;IAC3B,sCAAa,CAAA;IACb,0CAAiB,CAAA;IACjB,wCAAe,CAAA;AACjB,CAAC,EAXW,qBAAqB,KAArB,qBAAqB,QAWhC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4B;IACxE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;CAC5B,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA4B;IACpE,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,WAAW;CAClC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IAChE,GAAG,iCAAiC;IACpC,GAAG,6BAA6B;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IAChE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,WAAW;CAClC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA4B;IACtE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;IAC3B,qBAAqB,CAAC,MAAM;CAC7B,CAAC;AAEF,MAAM,CAAN,IAAY,gBAyGX;AAzGD,WAAY,gBAAgB;IAE1B,2CAAuB,CAAA;IACvB,mCAAe,CAAA;IACf,wDAAoC,CAAA;IACpC,kDAA8B,CAAA;IAC9B,wDAAoC,CAAA;IACpC,2DAAuC,CAAA;IACvC,iEAA6C,CAAA;IAC7C,mDAA+B,CAAA;IAC/B,4DAAwC,CAAA;IACxC,kEAA8C,CAAA;IAC9C,wEAAoD,CAAA;IACpD,4EAAwD,CAAA;IACxD,kEAA8C,CAAA;IAC9C,kDAA8B,CAAA;IAC9B,gEAA4C,CAAA;IAC5C,qFAAiE,CAAA;IAGjE,wDAAoC,CAAA;IACpC,uEAAmD,CAAA;IACnD,gGAA4E,CAAA;IAE5E,4CAA4C;IAC5C,+EAA2D,CAAA;IAC3D,qEAAiD,CAAA;IACjD,uEAAmD,CAAA;IAEnD,6CAA6C;IAC7C,oFAAgE,CAAA;IAChE,kFAA8D,CAAA;IAE9D,gDAA4B,CAAA;IAC5B,mEAA+C,CAAA;IAC/C,6EAAyD,CAAA;IACzD,qEAAiD,CAAA;IACjD,kFAA8D,CAAA;IAC9D,gFAA4D,CAAA;IAC5D,qEAAiD,CAAA;IACjD,8FAA0E,CAAA;IAC1E,+DAA2C,CAAA;IAC3C,gEAA4C,CAAA;IAC5C,gEAA4C,CAAA;IAE5C,kEAAkE;IAClE,iFAA6D,CAAA;IAC7D,iEAA6C,CAAA;IAE7C,+DAA+D;IAC/D,4EAAwD,CAAA;IACxD,4DAAwC,CAAA;IAExC,8DAA8D;IAC9D,yEAAqD,CAAA;IACrD,yDAAqC,CAAA;IAErC,+DAA+D;IAC/D,2EAAuD,CAAA;IACvD,2DAAuC,CAAA;IAEvC,8DAA8D;IAC9D,yEAAqD,CAAA;IACrD,yDAAqC,CAAA;IAErC,uDAAuD;IACvD,yCAAqB,CAAA;IACrB,qCAAiB,CAAA;IACjB,6CAAyB,CAAA;IACzB,2CAAuB,CAAA;IAEvB,iCAAiC;IACjC,4CAAwB,CAAA;IAExB,yBAAyB;IACzB,8DAA0C,CAAA;IAE1C,4BAA4B;IAC5B,mCAAe,CAAA;IAEf,kDAAkD;IAClD,oDAAgC,CAAA;IAChC,6DAAyC,CAAA;IAEzC,kBAAkB;IAClB,sDAAkC,CAAA;IAClC,gFAA4D,CAAA;IAE5D,2BAA2B;IAC3B,6DAAyC,CAAA;IAEzC,8BAA8B;IAC9B,uDAAmC,CAAA;IAEnC,8DAA8D;IAC9D,6DAAyC,CAAA;IACzC,6EAAyD,CAAA;IAEzD,iEAAiE;IACjE,mEAA+C,CAAA;IAC/C,mFAA+D,CAAA;IAE/D,+DAA+D;IAC/D,+DAA2C,CAAA;IAC3C,+EAA2D,CAAA;AAC7D,CAAC,EAzGW,gBAAgB,KAAhB,gBAAgB,QAyG3B;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAkC,IAAI,GAAG,CAAC;IAC3E,uCAAuC;IACvC,gBAAgB,CAAC,6BAA6B;IAC9C,gBAAgB,CAAC,qBAAqB;IACtC,oCAAoC;IACpC,gBAAgB,CAAC,0BAA0B;IAC3C,gBAAgB,CAAC,kBAAkB;IACnC,mCAAmC;IACnC,gBAAgB,CAAC,yBAAyB;IAC1C,gBAAgB,CAAC,iBAAiB;IAClC,oCAAoC;IACpC,gBAAgB,CAAC,0BAA0B;IAC3C,gBAAgB,CAAC,kBAAkB;IACnC,mCAAmC;IACnC,gBAAgB,CAAC,yBAAyB;IAC1C,gBAAgB,CAAC,iBAAiB;IAClC,oCAAoC;IACpC,gBAAgB,CAAC,QAAQ;IACzB,gBAAgB,CAAC,MAAM;IACvB,gBAAgB,CAAC,UAAU;IAC3B,gBAAgB,CAAC,SAAS;CAC3B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACxB,CAAC,CAAC,MAAM,EAAE,CAAC,wBAAwB;CACpC,CAAC,CAAC;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAqC;IACxF,MAAM,EAAE,gBAAgB,CAAC,KAAK;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAA0C;IACrF,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAClD,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ;IAClC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACxD,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,sCAAsC;IAC9E,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,eAAe;IACjD,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACxD,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,mBAAmB;IAC1D,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,uBAAuB;IACjE,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,eAAe;IAC/C,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,wBAAwB;IACnE,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B;IAC5E,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,yBAAyB;IACrE,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,+BAA+B;IAClF,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B;IAChF,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,wBAAwB;IACpE,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,EAAE,qCAAqC;IAC9F,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAChE,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IAE/D,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,oBAAoB;IAC3D,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,uBAAuB;IACjE,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,2BAA2B;IACxE,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,6BAA6B;IAC5E,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,wBAAwB;IAClE,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAClD,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IAC/D,CAAC,gBAAgB,CAAC,+BAA+B,CAAC,EAAE,gCAAgC;IAEpF,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,aAAa;IAC9C,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,yBAAyB;IACtE,CAAC,gBAAgB,CAAC,qCAAqC,CAAC,EAAE,sCAAsC;IAChG,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,aAAa;IACtD,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,6BAA6B;IAC9E,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,yBAAyB;IACrE,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,0BAA0B;IACvE,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,+BAA+B,CAAC,EAAE,gCAAgC;IACpF,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,+BAA+B;IAElF,0CAA0C;IAC1C,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B;IAChF,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,sBAAsB;IAChE,uCAAuC;IACvC,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,4BAA4B;IAC3E,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,oBAAoB;IAC3D,sCAAsC;IACtC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B;IACxE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,kBAAkB;IACxD,uCAAuC;IACvC,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,2BAA2B;IAC1E,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,mBAAmB;IAC1D,sCAAsC;IACtC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B;IACxE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,kBAAkB;IACxD,oCAAoC;IACpC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,WAAW;IACxC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS;IACpC,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,aAAa;IAC5C,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,YAAY;IAC1C,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,YAAY;IAC3C,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,qBAAqB;IAC7D,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ;IAClC,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,gBAAgB;IACnD,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,qBAAqB;IAC7D,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,iBAAiB;IACrD,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,6BAA6B;IAC/E,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,oBAAoB;IAC5D,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,iBAAiB;IACrD,2BAA2B;IAC3B,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,qBAAqB;IAC7D,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,6BAA6B;IAC7E,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,wBAAwB;IACnE,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,gCAAgC;IACnF,4BAA4B;IAC5B,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IAC/D,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,8BAA8B;CAClF,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC9F,OAAO,EAAE,gDAAgD;KAC1D,CAAC;IACF,CAAC,CAAC,MAAM,EAAE,CAAC,oCAAoC;CAChD,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAN,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,6DAA6D;IAC7D,uCAAmB,CAAA;IACnB,0DAA0D;IAC1D,yCAAqB,CAAA;AACvB,CAAC,EALW,gBAAgB,KAAhB,gBAAgB,QAK3B"}
+{"version":3,"file":"resources.shared.core.definitions.js","sourceRoot":"","sources":["../../../../src/resources/resources.shared.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,qBAWX;AAXD,WAAY,qBAAqB;IAC/B,sCAAa,CAAA;IACb,0CAAiB,CAAA;IACjB,oDAA2B,CAAA;IAC3B,0CAAiB,CAAA;IACjB,oDAA2B,CAAA;IAC3B,0CAAiB,CAAA;IACjB,oDAA2B,CAAA;IAC3B,sCAAa,CAAA;IACb,0CAAiB,CAAA;IACjB,wCAAe,CAAA;AACjB,CAAC,EAXW,qBAAqB,KAArB,qBAAqB,QAWhC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAA4B;IACxE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;CAC5B,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA4B;IACpE,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,WAAW;CAClC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IAChE,GAAG,iCAAiC;IACpC,GAAG,6BAA6B;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IAChE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,WAAW;IACjC,qBAAqB,CAAC,WAAW;CAClC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA4B;IACtE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;IAC3B,qBAAqB,CAAC,MAAM;CAC7B,CAAC;AACF,iEAAiE;AAEjE,MAAM,CAAN,IAAY,gBA6KX;AA7KD,WAAY,gBAAgB;IAE1B,2CAAuB,CAAA;IACvB,mCAAe,CAAA;IACf,wDAAoC,CAAA;IACpC,kDAA8B,CAAA;IAC9B,wDAAoC,CAAA;IACpC,2DAAuC,CAAA;IACvC,iEAA6C,CAAA;IAC7C,mDAA+B,CAAA;IAC/B,4DAAwC,CAAA;IACxC,kEAA8C,CAAA;IAC9C,wEAAoD,CAAA;IACpD,mEAA+C,CAAA;IAC/C,4EAAwD,CAAA;IACxD,kEAA8C,CAAA;IAC9C,kDAA8B,CAAA;IAC9B,gEAA4C,CAAA;IAC5C,sGAAsG;IACtG,yEAAqD,CAAA;IAGrD,wDAAoC,CAAA;IACpC,2EAAuD,CAAA;IACvD,uEAAmD,CAAA;IACnD,gGAA4E,CAAA;IAE5E,8BAA8B;IAC9B,+EAA2D,CAAA;IAC3D,qEAAiD,CAAA;IAEjD,6CAA6C;IAC7C,oFAAgE,CAAA;IAChE,kFAA8D,CAAA;IAE9D,gDAA4B,CAAA;IAC5B,mEAA+C,CAAA;IAC/C,6EAAyD,CAAA;IACzD,kFAA8D,CAAA;IAC9D,gFAA4D,CAAA;IAC5D,8FAA0E,CAAA;IAC1E,+DAA2C,CAAA;IAC3C,yEAAqD,CAAA;IACrD,gEAA4C,CAAA;IAC5C,gEAA4C,CAAA;IAC5C,gEAA4C,CAAA;IAE5C,kEAAkE;IAClE,iFAA6D,CAAA;IAC7D,iEAA6C,CAAA;IAE7C,+DAA+D;IAC/D,4EAAwD,CAAA;IACxD,4DAAwC,CAAA;IAExC,8DAA8D;IAC9D,yEAAqD,CAAA;IACrD,yDAAqC,CAAA;IAErC,+DAA+D;IAC/D,2EAAuD,CAAA;IACvD,2DAAuC,CAAA;IAEvC,8DAA8D;IAC9D,yEAAqD,CAAA;IACrD,yDAAqC,CAAA;IAErC,uDAAuD;IACvD,yCAAqB,CAAA;IACrB,qCAAiB,CAAA;IACjB,6CAAyB,CAAA;IACzB,2CAAuB,CAAA;IAEvB,iCAAiC;IACjC,4CAAwB,CAAA;IAExB,uEAAuE;IACvE,yEAAyE;IACzE,gFAAgF;IAChF,uEAAuE;IACvE,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAC9E,uEAAmD,CAAA;IACnD,uFAAmE,CAAA;IAEnE,uEAAuE;IACvE,+DAA+D;IAC/D,kEAAkE;IAClE,6EAAyD,CAAA;IACzD,2EAAuD,CAAA;IACvD,+FAA2E,CAAA;IAC3E,6FAAyE,CAAA;IAEzE,4BAA4B;IAC5B,mCAAe,CAAA;IAEf,kDAAkD;IAClD,oDAAgC,CAAA;IAChC,6DAAyC,CAAA;IAEzC,2BAA2B;IAC3B,6DAAyC,CAAA;IAEzC,0FAA0F;IAC1F,+DAA2C,CAAA;IAE3C,8BAA8B;IAC9B,uDAAmC,CAAA;IAEnC,wEAAwE;IACxE,wEAAwE;IACxE,wCAAwC;IACxC,wDAAoC,CAAA;IAEpC,8DAA8D;IAC9D,6DAAyC,CAAA;IACzC,6EAAyD,CAAA;IAEzD,iEAAiE;IACjE,mEAA+C,CAAA;IAC/C,mFAA+D,CAAA;IAE/D,+DAA+D;IAC/D,+DAA2C,CAAA;IAC3C,+EAA2D,CAAA;IAE3D,4EAA4E;IAC5E,+EAA+E;IAC/E,kFAAkF;IAClF,6EAA6E;IAC7E,2EAA2E;IAC3E,gFAAgF;IAChF,+DAA+D;IAC/D,0EAAsD,CAAA;IACtD,0FAAsE,CAAA;IACtE,wFAAoE,CAAA;IAEpE,0EAA0E;IAC1E,iFAAiF;IACjF,gFAAgF;IAChF,qFAAqF;IACrF,2FAA2F;IAC3F,4FAA4F;IAC5F,6FAA6F;IAC7F,4FAA4F;IAC5F,6FAA6F;IAC7F,sFAAsF;IACtF,iFAAiF;IACjF,+EAA+E;IAC/E,+CAA+C;IAC/C,gEAA4C,CAAA;IAC5C,gFAA4D,CAAA;IAC5D,8EAA0D,CAAA;IAE1D,0EAA0E;IAC1E,uFAAuF;IACvF,yFAAyF;IACzF,yFAAyF;IACzF,wEAAwE;IACxE,8CAA8C;IAC9C,yEAAqD,CAAA;IACrD,yFAAqE,CAAA;IACrE,uFAAmE,CAAA;IAEnE,kFAAkF;IAClF,oFAAoF;IACpF,wFAAwF;IACxF,8EAA8E;IAC9E,0FAA0F;IAC1F,2EAAuD,CAAA;IACvD,2FAAuE,CAAA;IACvE,yFAAqE,CAAA;AACvE,CAAC,EA7KW,gBAAgB,KAAhB,gBAAgB,QA6K3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAwB,IAAI,GAAG,CAAS;IACzF,gBAAgB,CAAC,SAAS;CAC3B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAkC,IAAI,GAAG,CAAC;IAC3E,uCAAuC;IACvC,gBAAgB,CAAC,6BAA6B;IAC9C,gBAAgB,CAAC,qBAAqB;IACtC,oCAAoC;IACpC,gBAAgB,CAAC,0BAA0B;IAC3C,gBAAgB,CAAC,kBAAkB;IACnC,mCAAmC;IACnC,gBAAgB,CAAC,yBAAyB;IAC1C,gBAAgB,CAAC,iBAAiB;IAClC,oCAAoC;IACpC,gBAAgB,CAAC,0BAA0B;IAC3C,gBAAgB,CAAC,kBAAkB;IACnC,mCAAmC;IACnC,gBAAgB,CAAC,yBAAyB;IAC1C,gBAAgB,CAAC,iBAAiB;IAClC,oCAAoC;IACpC,gBAAgB,CAAC,QAAQ;IACzB,gBAAgB,CAAC,MAAM;IACvB,gBAAgB,CAAC,UAAU;IAC3B,gBAAgB,CAAC,SAAS;CAC3B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACxB,CAAC,CAAC,MAAM,EAAE,CAAC,wBAAwB;CACpC,CAAC,CAAC;AAGH,uDAAuD;AAEvD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAqC;IACxF,MAAM,EAAE,gBAAgB,CAAC,KAAK;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAA0C;IACrF,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAClD,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ;IAClC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACxD,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,sCAAsC;IAC9E,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,eAAe;IACjD,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACxD,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,mBAAmB;IAC1D,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,uBAAuB;IACjE,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,eAAe;IAC/C,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,wBAAwB;IACnE,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B;IAC5E,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,+BAA+B;IAClF,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B;IAChF,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,EAAE,qCAAqC;IAC9F,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAChE,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IAC/D,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAEhE,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,oBAAoB;IAC3D,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,uBAAuB;IACjE,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,2BAA2B;IACxE,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,uBAAuB;IAClE,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,6BAA6B;IAC5E,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,wBAAwB;IAClE,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,gBAAgB;IAClD,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IAC/D,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B;IAExE,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,aAAa;IAC9C,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,kBAAkB;IACjE,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,yBAAyB;IACtE,CAAC,gBAAgB,CAAC,qCAAqC,CAAC,EAAE,sCAAsC;IAChG,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,aAAa;IACtD,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,kBAAkB;IAChE,gBAAgB;IAChB,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,6BAA6B;IAC9E,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,yBAAyB;IACrE,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,+BAA+B,CAAC,EAAE,gCAAgC;IACpF,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,+BAA+B;IAElF,0CAA0C;IAC1C,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B;IAChF,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,sBAAsB;IAChE,uCAAuC;IACvC,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,4BAA4B;IAC3E,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,oBAAoB;IAC3D,sCAAsC;IACtC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B;IACxE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,kBAAkB;IACxD,uCAAuC;IACvC,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,2BAA2B;IAC1E,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,mBAAmB;IAC1D,sCAAsC;IACtC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,0BAA0B;IACxE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,kBAAkB;IACxD,oCAAoC;IACpC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,WAAW;IACxC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS;IACpC,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,aAAa;IAC5C,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,YAAY;IAC1C,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,YAAY;IAC3C,wDAAwD;IACxD,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,yBAAyB;IACtE,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EAAE,iCAAiC;IACtF,0DAA0D;IAC1D,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,6BAA6B;IAC7E,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,4BAA4B;IAC3E,CAAC,gBAAgB,CAAC,qCAAqC,CAAC,EAAE,qCAAqC;IAC/F,CAAC,gBAAgB,CAAC,oCAAoC,CAAC,EAAE,oCAAoC;IAC7F,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ;IAClC,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,gBAAgB;IACnD,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,qBAAqB;IAC7D,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,oBAAoB;IAC5D,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,qBAAqB;IAC9D,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,iBAAiB;IACrD,qCAAqC;IACrC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,kBAAkB;IACvD,2BAA2B;IAC3B,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,qBAAqB;IAC7D,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,6BAA6B;IAC7E,8BAA8B;IAC9B,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,wBAAwB;IACnE,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,gCAAgC;IACnF,4BAA4B;IAC5B,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,sBAAsB;IAC/D,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,8BAA8B;IAC/E,uEAAuE;IACvE,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B;IACzE,CAAC,gBAAgB,CAAC,kCAAkC,CAAC,EAAE,kCAAkC;IACzF,CAAC,gBAAgB,CAAC,iCAAiC,CAAC,EAAE,iCAAiC;IACvF,kEAAkE;IAClE,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,qBAAqB;IAC/D,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,6BAA6B;IAC/E,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,4BAA4B;IAC7E,yEAAyE;IACzE,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,0BAA0B;IACzE,CAAC,gBAAgB,CAAC,kCAAkC,CAAC,EAAE,kCAAkC;IACzF,CAAC,gBAAgB,CAAC,iCAAiC,CAAC,EAAE,iCAAiC;IACvF,iFAAiF;IACjF,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,2BAA2B;IAC3E,CAAC,gBAAgB,CAAC,mCAAmC,CAAC,EAAE,mCAAmC;IAC3F,CAAC,gBAAgB,CAAC,kCAAkC,CAAC,EAAE,kCAAkC;CAC5F,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC9F,OAAO,EAAE,gDAAgD;KAC1D,CAAC;IACF,CAAC,CAAC,MAAM,EAAE,CAAC,oCAAoC;CAChD,CAAC,CAAC;AAGH,mEAAmE;AAEnE;;;GAGG;AACH,MAAM,CAAN,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,6DAA6D;IAC7D,uCAAmB,CAAA;IACnB,0DAA0D;IAC1D,yCAAqB,CAAA;AACvB,CAAC,EALW,gBAAgB,KAAhB,gBAAgB,QAK3B","sourcesContent":["import { z } from 'zod';\nimport { EnumLikeType }from '@wildo-ai/zod-decorators';\n\n\n\n\n/**\n * @wildo_source:part:start saas.models.core-resource-operation facet:layer:shared facet:family:resource-config\n *\n * Core CRUD and collection operations every resource may expose.\n *\n * @remarks Import from `@wildo-ai/saas-models`. App `resources-config` picks a\n * subset via `coreOperations` and adds `customOperation` identifiers.\n */\nexport enum CoreResourceOperation {\n  READ = 'read',        // View/retrieve existing resource\n  UPDATE = 'update',      // Update existing resource\n  UPDATE_MANY = 'update_many',   // Update multiple resources\n  DELETE = 'delete',    // Remove resource\n  DELETE_MANY = 'delete_many',   // Delete multiple resources\n  CREATE = 'create',    // Create new resource\n  CREATE_MANY = 'create_many',   // Create multiple resources\n  LIST = 'list',        // List/search multiple resources\n  SEARCH = 'search',    // Search resources with advanced filtering\n  COUNT = 'count',      // Count resources matching criteria\n}\n\nexport const ALL_CORE_OPERATIONS = Object.values(CoreResourceOperation);\n\n/**\n * Collection operations that operate on collections rather than specific resources.\n * These operations don't require a resource ID and authorization is based on roles + parent scope.\n */\nexport const COLLECTION_OPERATIONS_WITHOUT_IDS: CoreResourceOperation[] = [\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.CREATE,\n  CoreResourceOperation.CREATE_MANY,\n  CoreResourceOperation.SEARCH,\n  CoreResourceOperation.COUNT,\n];\n\n/**\n * Collection operations that may require resource IDs in the request body or query parameters.\n * These operations operate on collections but may filter/update/delete specific resources by ID.\n */\nexport const COLLECTION_OPERATIONS_WITH_ID: CoreResourceOperation[] = [\n  CoreResourceOperation.UPDATE_MANY,\n  CoreResourceOperation.DELETE_MANY,\n];\n\n/**\n * All collection operations (both with and without IDs).\n * These operations operate on collections rather than specific resources.\n * Used for URL building to determine if an operation needs an entity ID in the URL path.\n */\nexport const ALL_COLLECTION_OPERATIONS: CoreResourceOperation[] = [\n  ...COLLECTION_OPERATIONS_WITHOUT_IDS,\n  ...COLLECTION_OPERATIONS_WITH_ID,\n];\n\n/**\n * Operations that return array responses (multiple resources).\n * Used for validation and transformation logic that needs to handle arrays.\n */\nexport const ARRAY_RESPONSE_OPERATIONS: CoreResourceOperation[] = [\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.DELETE_MANY,\n  CoreResourceOperation.UPDATE_MANY,\n  CoreResourceOperation.CREATE_MANY,\n];\n\n/**\n * Operations that don't require request body validation.\n * These operations use IDs from execution context or query parameters, not from request body.\n */\nexport const OPERATIONS_WITHOUT_REQUEST_BODY: CoreResourceOperation[] = [\n  CoreResourceOperation.READ,\n  CoreResourceOperation.LIST,\n  CoreResourceOperation.DELETE,\n  CoreResourceOperation.COUNT,\n  CoreResourceOperation.SEARCH,\n];\n/** @wildo_source:part:end saas.models.core-resource-operation */\n\nexport enum CoreResourceType {\n\n  USER_SELF = 'user_self',\n  USERS = 'users',\n  USER_CREDENTIALS = 'userCredentials',\n  USER_PROFILES = 'userProfiles',\n  USER_PREFERENCES = 'userPreferences',\n  USER_SELF_PROFILES = 'userSelfProfiles',\n  USER_SELF_PREFERENCES = 'userSelfPreferences',\n  ORGANIZATIONS = 'organizations',\n  ORGANIZATION_UNITS = 'organizationUnits',\n  ORGANIZATION_PROFILES = 'organizationProfiles',\n  ORGANIZATION_PREFERENCES = 'organizationPreferences',\n  PLATFORM_ACCESS_GRANTS = 'platformAccessGrants',\n  ORGANIZATION_NOTIFICATIONS = 'organizationNotifications',\n  ORGANIZATION_FEATURES = 'organizationFeatures',\n  USER_FEATURES = 'userFeatures',\n  ORGANIZATION_MEMBERS = 'organizationMembers',\n  /** Junction: a membership's role inside one organization unit (replaced an embedded array — D-B5). */\n  ORGANIZATION_UNIT_MEMBERS = 'organizationUnitMembers',\n\n\n  ORG_API_KEYS = 'organizationApiKeys',\n  OAUTH_CLIENTS_ORGANIZATION = 'organizationOAuthClients',\n  ORGANIZATION_SCIM_TOKENS = 'organizationScimTokens',\n  ORGANIZATION_SCIM_PROVISIONING_CONFIG = 'organizationScimProvisioningConfig',\n\n  // SSO Resources (Phase H-SSO)\n  ORGANIZATION_SSO_CONNECTIONS = 'organizationSsoConnections',\n  ORGANIZATION_SSO_CONFIG = 'organizationSsoConfig',\n\n  // SIEM / Compliance Resources (Phase H-SIEM)\n  ORGANIZATION_SIEM_EXPORT_CONFIG = 'organizationSiemExportConfig',\n  ORGANIZATION_SIEM_DELIVERY_DLQ = 'organizationSiemDeliveryDlq',\n\n  APPLICATION = 'applications',\n  APPLICATION_SSO_CONFIG = 'applicationSsoConfig',\n  APPLICATION_SSO_CONNECTIONS = 'applicationSsoConnections',\n  APPLICATION_SIEM_EXPORT_CONFIG = 'applicationSiemExportConfig',\n  APPLICATION_SIEM_DELIVERY_DLQ = 'applicationSiemDeliveryDlq',\n  APPLICATION_SCIM_PROVISIONING_CONFIG = 'applicationScimProvisioningConfig',\n  APPLICATION_API_KEYS = 'applicationApiKeys',\n  OAUTH_CLIENTS_APPLICATION = 'applicationOAuthClients',\n  APPLICATION_METADATA = 'applicationMetadata',\n  APPLICATION_VERSIONS = 'applicationVersions',\n  APPLICATION_FEATURES = 'applicationFeatures',\n\n  // Billing Accounts — polymorphic variants (one per primary scope)\n  ORGANIZATION_BILLING_ACCOUNTS = 'organizationBillingAccounts',\n  USER_BILLING_ACCOUNTS = 'userBillingAccounts',\n\n  // Subscriptions — polymorphic variants (one per primary scope)\n  ORGANIZATION_SUBSCRIPTIONS = 'organizationSubscriptions',\n  USER_SUBSCRIPTIONS = 'userSubscriptions',\n\n  // Invoice Refs — polymorphic variants (one per primary scope)\n  ORGANIZATION_INVOICE_REFS = 'organizationInvoiceRefs',\n  USER_INVOICE_REFS = 'userInvoiceRefs',\n\n  // Usage Records — polymorphic variants (one per primary scope)\n  ORGANIZATION_USAGE_RECORDS = 'organizationUsageRecords',\n  USER_USAGE_RECORDS = 'userUsageRecords',\n\n  // Credit Pools — polymorphic variants (one per primary scope)\n  ORGANIZATION_CREDIT_POOLS = 'organizationCreditPools',\n  USER_CREDIT_POOLS = 'userCreditPools',\n\n  // Billing Resources — non-polymorphic (shared catalog)\n  PRODUCTS = 'products',\n  PRICES = 'prices',\n  PROMOTIONS = 'promotions',\n  REFERRALS = 'referrals',\n\n  // Audit and Compliance Resources\n  AUDIT_LOGS = 'auditLogs',\n\n  // Notification Badges Resources — polymorphic dual-scope (USER + ORG).\n  // Each scope owns its own collection and its own access-control surface:\n  //   - USER variant: the user themselves reads/lists their badges; CREATE/UPDATE\n  //     are system-internal (driven by the dispatcher / batch services).\n  //   - ORG variant: org admins read/list their org's badges; CREATE/UPDATE are\n  //     system-internal.\n  // See `notifications/notification-badges.shared.resources-config.schemas.ts`.\n  USER_NOTIFICATION_BADGES = 'userNotificationBadges',\n  ORGANIZATION_NOTIFICATION_BADGES = 'organizationNotificationBadges',\n\n  // M2M Outbound Webhook Resources — polymorphic dual-scope (ORG + APP).\n  // See `notifications/m2m/webhook-config.shared.schemas.ts` and\n  // `notifications/m2m/m2m-webhook-delivery-log.shared.schemas.ts`.\n  ORGANIZATION_WEBHOOK_CONFIG = 'organizationWebhookConfig',\n  APPLICATION_WEBHOOK_CONFIG = 'applicationWebhookConfig',\n  ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG = 'organizationM2mWebhookDeliveryLog',\n  APPLICATION_M2M_WEBHOOK_DELIVERY_LOG = 'applicationM2mWebhookDeliveryLog',\n\n  // File Management Resources\n  FILES = 'files',\n\n  // Queue/Job Resources (internal, repository-only)\n  JOB_EXECUTIONS = 'jobExecutions',\n  JOB_PAYLOAD_STORAGE = 'jobPayloadStorage',\n\n  // Authentication Resources\n  USER_IDENTITY_LINKS = 'userIdentityLinks',\n\n  // OIDC persistent consent grants (\"remember this app\") — USER_SELF-scoped, provider-side.\n  OAUTH_CONSENT_GRANTS = 'oauthConsentGrants',\n\n  // Anonymous Session Resources\n  ANONYMOUS_USERS = 'anonymous_users',\n\n  // Marketing / Lead Capture Resources (Phase 0.5 — public marketing site\n  // forms write here; APPLICATION-scoped, no isAnonymizable, see Q-E=B in\n  // .cursor/plans/saas-website-slice.md).\n  INBOUND_CONTACTS = 'inboundContacts',\n\n  // Guidance State Resources — dual-scope (USER / ORGANIZATION)\n  USER_GUIDANCE_STATE = 'userGuidanceState',\n  ORGANIZATION_GUIDANCE_STATE = 'organizationGuidanceState',\n\n  // Progression State Resources — dual-scope (USER / ORGANIZATION)\n  USER_PROGRESSION_STATE = 'userProgressionState',\n  ORGANIZATION_PROGRESSION_STATE = 'organizationProgressionState',\n\n  // Lifecycle State Resources — dual-scope (USER / ORGANIZATION)\n  USER_LIFECYCLE_STATE = 'userLifecycleState',\n  ORGANIZATION_LIFECYCLE_STATE = 'organizationLifecycleState',\n\n  // Flows-Actors Execution Resources — persisted flow/actor system executions\n  // (conversational message log + kind-discriminated runtime state). POLYMORPHIC\n  // across owner scope: one variant per scope, each owned by the injected owner FK.\n  // The user variant is WS chat + user-delegated A2A; the org/app variants are\n  // machine-owned (API-key / OIDC-client A2A). Written by the conversational\n  // runtime; read as chat history by the owner. Values MUST match the polymorphic\n  // derivation from `flowActorExecutionsPolymorphicDeclaration`.\n  USER_FLOW_ACTOR_EXECUTIONS = 'userFlowActorExecutions',\n  ORGANIZATION_FLOW_ACTOR_EXECUTIONS = 'organizationFlowActorExecutions',\n  APPLICATION_FLOW_ACTOR_EXECUTIONS = 'applicationFlowActorExecutions',\n\n  // Flows-Actors Task Resources — the persisted WORK record, deliberately a\n  // SEPARATE plane from the conversational execution above: executions own session\n  // history, tasks own an addressable/pollable/cancelable work lifecycle with its\n  // own status and artifacts. A task links back to an execution through a SOFT INDEXED\n  // FIELD (`flowActorExecutionId`), NOT a declared relationship of any kind — executions are\n  // polymorphic, so one foreign key would match no variant, and a declared edge would imply a\n  // cascade path that must not exist: a task has to OUTLIVE the conversation that produced it.\n  // (An earlier revision of this comment said \"REFERENCE, never COMPOSITION\", which read as a\n  // declared edge; no such relationship exists. The schema and the spec both describe the soft\n  // link correctly.) Derived from the canonical `Actors_Task_Schema`, mirroring how the\n  // platform persists `wildoApplicationActorTasks`. Surfaces the A2A `Task` object\n  // (`tasks/get` / `tasks/cancel`). Values MUST match the polymorphic derivation\n  // from `flowActorTasksPolymorphicDeclaration`.\n  USER_FLOW_ACTOR_TASKS = 'userFlowActorTasks',\n  ORGANIZATION_FLOW_ACTOR_TASKS = 'organizationFlowActorTasks',\n  APPLICATION_FLOW_ACTOR_TASKS = 'applicationFlowActorTasks',\n\n  // A2A Push Notification Delivery Log (polymorphic — one per owner scope).\n  // One row per (task state change × registered webhook), written BEFORE the delivery is\n  // attempted so an unreachable queue still leaves a trace. Scope set MUST mirror the task\n  // resources above: an owner with no delivery-log variant is an owner whose notifications\n  // cannot be recorded. Values MUST match the polymorphic derivation from\n  // `a2aPushDeliveryLogPolymorphicDeclaration`.\n  USER_A2A_PUSH_DELIVERY_LOG = 'userA2aPushDeliveryLog',\n  ORGANIZATION_A2A_PUSH_DELIVERY_LOG = 'organizationA2aPushDeliveryLog',\n  APPLICATION_A2A_PUSH_DELIVERY_LOG = 'applicationA2aPushDeliveryLog',\n\n  // A2A Token Budget State Resources (polymorphic SINGLETON — one per owner scope).\n  // Per-tenant, per-period LLM token-budget accumulator enforced on inbound A2A agent\n  // turns; written + read ONLY by the A2A runtime (via *AsSystem). Enum VALUES MUST match\n  // the polymorphic derivation from `a2aTokenBudgetStatePolymorphicDeclaration`\n  // (`toPascalCase('a2aTokenBudgetState')` = `A2aTokenBudgetState`, so the value is `A2a`).\n  USER_A2A_TOKEN_BUDGET_STATE = 'userA2aTokenBudgetState',\n  ORGANIZATION_A2A_TOKEN_BUDGET_STATE = 'organizationA2aTokenBudgetState',\n  APPLICATION_A2A_TOKEN_BUDGET_STATE = 'applicationA2aTokenBudgetState',\n}\n\n/**\n * The core resources the ENGINE'S OWN runtime reads, which an application may never exclude.\n *\n * `excludedResourceTypes` exists so an application can drop core vocabulary it does not use — the\n * billing-conditional resources it was built for, or, for a purpose-built console, most of the core\n * catalog. That freedom has one floor: a resource the engine itself reads to function.\n *\n * It is declared HERE, in the shared tier, because the floor has TWO enforcement sites in different\n * layers and they must never disagree: the frontend registry must REGISTER the resource, and the\n * backend serving that frontend must MOUNT its controller. A floor honoured on one side only fails\n * exactly as loudly as no floor at all — the workbench proved both halves in turn, first a registry\n * with no `user_self` entry, then a 404 on `/api/v1/user-self/:id/context`.\n *\n * `USER_SELF` is that floor today. `UserOrgsContext.restoreUserSession` reads it to build the\n * authenticated context after every login and every reload, and returns `false` when the registry\n * has no entry for it — on which the caller logs out \"to avoid a half-restored state\". So excluding\n * it does not degrade a feature; it makes authentication IMPOSSIBLE, in the most misleading way\n * available: `POST /auth/authenticate` answers 200 with a valid token, the very next request goes out\n * with no `Authorization` header, the 401 that follows is read as an expired session, and the user\n * lands back on the login form. The only trace is one `warn`.\n *\n * That is why this is a floor the engine ENFORCES rather than a line in an application's\n * documentation. An application cannot see this dependency — `restoreUserSession` is engine-internal\n * — so an exclusion set derived from the application's own vocabulary (which is the correct way to\n * write one) has no way to know it must carve this out. Measured on the application-creation\n * workbench, whose exclusion is derived exactly that way: login succeeded and bounced, every time.\n *\n * `ORGANIZATIONS` is deliberately NOT here. `loadOrganizations` also reads the registry, but it warns\n * and returns an empty list, so excluding it degrades the organization switcher and nothing else —\n * a legitimate choice for a console with no tenant vocabulary. The floor is what BREAKS when absent,\n * not everything the engine happens to read; a floor that grows past that would quietly re-impose the\n * whole core catalog on every application.\n */\nexport const ENGINE_RUNTIME_REQUIRED_RESOURCE_TYPES: ReadonlySet<string> = new Set<string>([\n  CoreResourceType.USER_SELF,\n]);\n\n\n/**\n * Set of all billing resource types.\n * Used by the resource exclusion mechanism to conditionally exclude\n * all billing resources when billing is disabled in app config.\n */\nexport const BILLING_RESOURCE_TYPES: ReadonlySet<CoreResourceType> = new Set([\n  // Polymorphic billing account variants\n  CoreResourceType.ORGANIZATION_BILLING_ACCOUNTS,\n  CoreResourceType.USER_BILLING_ACCOUNTS,\n  // Polymorphic subscription variants\n  CoreResourceType.ORGANIZATION_SUBSCRIPTIONS,\n  CoreResourceType.USER_SUBSCRIPTIONS,\n  // Polymorphic invoice ref variants\n  CoreResourceType.ORGANIZATION_INVOICE_REFS,\n  CoreResourceType.USER_INVOICE_REFS,\n  // Polymorphic usage record variants\n  CoreResourceType.ORGANIZATION_USAGE_RECORDS,\n  CoreResourceType.USER_USAGE_RECORDS,\n  // Polymorphic credit pool variants\n  CoreResourceType.ORGANIZATION_CREDIT_POOLS,\n  CoreResourceType.USER_CREDIT_POOLS,\n  // Non-polymorphic billing resources\n  CoreResourceType.PRODUCTS,\n  CoreResourceType.PRICES,\n  CoreResourceType.PROMOTIONS,\n  CoreResourceType.REFERRALS,\n]);\n\n/**\n * @wildo_source:part:start saas.models.resource-type facet:layer:shared facet:family:resource-config\n *\n * Resource Type Schema (Core + Custom)\n *\n * @remarks Import from `@wildo-ai/saas-models`. Custom app resources use\n * string literals beyond `CoreResourceType`.\n */\nexport const ResourceTypeSchema = z.union([\n  z.enum(CoreResourceType),\n  z.string() // Custom resource types\n]);\n\nexport type ResourceType = z.infer<typeof ResourceTypeSchema>;\n/** @wildo_source:part:end saas.models.resource-type */\n\n/**\n * When multiple resource types share the same field identifier (e.g., USERS and\n * USER_SELF both use \"userId\"), this map declares which resource type is the\n * canonical FK resolution target. Without this, the winner would depend on\n * relationship declaration order — a latent fragility.\n *\n * Used by both frontend and backend registry builds as a post-enrichment fixup.\n */\nexport const coreResourceShared_FieldIdentifierPriority: Record<string, CoreResourceType> = {\n    userId: CoreResourceType.USERS,\n};\n\nexport const coreResourceShared_FieldIdentifier: { [key in CoreResourceType]: string } = {\n    [CoreResourceType.ORGANIZATIONS]: 'organizationId',\n    [CoreResourceType.USERS]: 'userId',\n    [CoreResourceType.USER_CREDENTIALS]: 'userCredentialsId',\n    [CoreResourceType.USER_SELF]: 'userId', // Same as USERS but different context\n    [CoreResourceType.USER_PROFILES]: 'userProfileId',\n    [CoreResourceType.USER_PREFERENCES]: 'userPreferencesId',\n    [CoreResourceType.USER_SELF_PROFILES]: 'userSelfProfileId',\n    [CoreResourceType.USER_SELF_PREFERENCES]: 'userSelfPreferencesId',\n    [CoreResourceType.APPLICATION]: 'applicationId',\n    [CoreResourceType.APPLICATION_SSO_CONFIG]: 'applicationSsoConfigId',\n    [CoreResourceType.APPLICATION_SSO_CONNECTIONS]: 'applicationSsoConnectionId',\n    [CoreResourceType.APPLICATION_SIEM_EXPORT_CONFIG]: 'applicationSiemExportConfigId',\n    [CoreResourceType.APPLICATION_SIEM_DELIVERY_DLQ]: 'applicationSiemDeliveryDlqId',\n    [CoreResourceType.APPLICATION_SCIM_PROVISIONING_CONFIG]: 'applicationScimProvisioningConfigId',\n    [CoreResourceType.APPLICATION_METADATA]: 'applicationMetadataId',\n    [CoreResourceType.APPLICATION_VERSIONS]: 'applicationVersionId',\n    [CoreResourceType.APPLICATION_FEATURES]: 'applicationFeaturesId',\n\n    [CoreResourceType.ORGANIZATION_UNITS]: 'organizationUnitId',\n    [CoreResourceType.ORGANIZATION_PROFILES]: 'organizationProfileId',\n    [CoreResourceType.ORGANIZATION_PREFERENCES]: 'organizationPreferencesId',\n    [CoreResourceType.PLATFORM_ACCESS_GRANTS]: 'platformAccessGrantId',\n    [CoreResourceType.ORGANIZATION_NOTIFICATIONS]: 'organizationNotificationsId',\n    [CoreResourceType.ORGANIZATION_FEATURES]: 'organizationFeaturesId',\n    [CoreResourceType.USER_FEATURES]: 'userFeaturesId',\n    [CoreResourceType.ORGANIZATION_MEMBERS]: 'organizationMemberId',\n    [CoreResourceType.ORGANIZATION_UNIT_MEMBERS]: 'organizationUnitMemberId',\n\n    [CoreResourceType.ORG_API_KEYS]: 'orgApiKeyId',\n    [CoreResourceType.OAUTH_CLIENTS_ORGANIZATION]: 'orgOAuthClientId',\n    [CoreResourceType.ORGANIZATION_SCIM_TOKENS]: 'organizationScimTokenId',\n    [CoreResourceType.ORGANIZATION_SCIM_PROVISIONING_CONFIG]: 'organizationScimProvisioningConfigId',\n    [CoreResourceType.APPLICATION_API_KEYS]: 'appApiKeyId',\n    [CoreResourceType.OAUTH_CLIENTS_APPLICATION]: 'appOAuthClientId',\n    // SSO Resources\n    [CoreResourceType.ORGANIZATION_SSO_CONNECTIONS]: 'organizationSsoConnectionId',\n    [CoreResourceType.ORGANIZATION_SSO_CONFIG]: 'organizationSsoConfigId',\n    // SIEM / Compliance Resources\n    [CoreResourceType.ORGANIZATION_SIEM_EXPORT_CONFIG]: 'organizationSiemExportConfigId',\n    [CoreResourceType.ORGANIZATION_SIEM_DELIVERY_DLQ]: 'organizationSiemDeliveryDlqId',\n\n    // Billing Accounts — polymorphic variants\n    [CoreResourceType.ORGANIZATION_BILLING_ACCOUNTS]: 'organizationBillingAccountId',\n    [CoreResourceType.USER_BILLING_ACCOUNTS]: 'userBillingAccountId',\n    // Subscriptions — polymorphic variants\n    [CoreResourceType.ORGANIZATION_SUBSCRIPTIONS]: 'organizationSubscriptionId',\n    [CoreResourceType.USER_SUBSCRIPTIONS]: 'userSubscriptionId',\n    // Invoice Refs — polymorphic variants\n    [CoreResourceType.ORGANIZATION_INVOICE_REFS]: 'organizationInvoiceRefId',\n    [CoreResourceType.USER_INVOICE_REFS]: 'userInvoiceRefId',\n    // Usage Records — polymorphic variants\n    [CoreResourceType.ORGANIZATION_USAGE_RECORDS]: 'organizationUsageRecordId',\n    [CoreResourceType.USER_USAGE_RECORDS]: 'userUsageRecordId',\n    // Credit Pools — polymorphic variants\n    [CoreResourceType.ORGANIZATION_CREDIT_POOLS]: 'organizationCreditPoolId',\n    [CoreResourceType.USER_CREDIT_POOLS]: 'userCreditPoolId',\n    // Non-polymorphic billing resources\n    [CoreResourceType.PRODUCTS]: 'productId',\n    [CoreResourceType.PRICES]: 'priceId',\n    [CoreResourceType.PROMOTIONS]: 'promotionId',\n    [CoreResourceType.REFERRALS]: 'referralId',\n    [CoreResourceType.AUDIT_LOGS]: 'auditLogId',\n    // Notification Badges — polymorphic dual-scope variants\n    [CoreResourceType.USER_NOTIFICATION_BADGES]: 'userNotificationBadgeId',\n    [CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES]: 'organizationNotificationBadgeId',\n    // M2M Outbound Webhook Resources — polymorphic dual-scope\n    [CoreResourceType.ORGANIZATION_WEBHOOK_CONFIG]: 'organizationWebhookConfigId',\n    [CoreResourceType.APPLICATION_WEBHOOK_CONFIG]: 'applicationWebhookConfigId',\n    [CoreResourceType.ORGANIZATION_M2M_WEBHOOK_DELIVERY_LOG]: 'organizationM2mWebhookDeliveryLogId',\n    [CoreResourceType.APPLICATION_M2M_WEBHOOK_DELIVERY_LOG]: 'applicationM2mWebhookDeliveryLogId',\n    [CoreResourceType.FILES]: 'fileId',\n    [CoreResourceType.JOB_EXECUTIONS]: 'jobExecutionId',\n    [CoreResourceType.JOB_PAYLOAD_STORAGE]: 'jobPayloadStorageId',\n    [CoreResourceType.USER_IDENTITY_LINKS]: 'userIdentityLinkId',\n    [CoreResourceType.OAUTH_CONSENT_GRANTS]: 'oauthConsentGrantId',\n    // Anonymous Session Resources\n    [CoreResourceType.ANONYMOUS_USERS]: 'anonymousUserId',\n    // Marketing / Lead Capture Resources\n    [CoreResourceType.INBOUND_CONTACTS]: 'inboundContactId',\n    // Guidance State Resources\n    [CoreResourceType.USER_GUIDANCE_STATE]: 'userGuidanceStateId',\n    [CoreResourceType.ORGANIZATION_GUIDANCE_STATE]: 'organizationGuidanceStateId',\n    // Progression State Resources\n    [CoreResourceType.USER_PROGRESSION_STATE]: 'userProgressionStateId',\n    [CoreResourceType.ORGANIZATION_PROGRESSION_STATE]: 'organizationProgressionStateId',\n    // Lifecycle State Resources\n    [CoreResourceType.USER_LIFECYCLE_STATE]: 'userLifecycleStateId',\n    [CoreResourceType.ORGANIZATION_LIFECYCLE_STATE]: 'organizationLifecycleStateId',\n    // Flows-Actors Execution Resources (polymorphic — one per owner scope)\n    [CoreResourceType.USER_FLOW_ACTOR_EXECUTIONS]: 'userFlowActorExecutionId',\n    [CoreResourceType.ORGANIZATION_FLOW_ACTOR_EXECUTIONS]: 'organizationFlowActorExecutionId',\n    [CoreResourceType.APPLICATION_FLOW_ACTOR_EXECUTIONS]: 'applicationFlowActorExecutionId',\n    // Flows-Actors Task Resources (polymorphic — one per owner scope)\n    [CoreResourceType.USER_FLOW_ACTOR_TASKS]: 'userFlowActorTaskId',\n    [CoreResourceType.ORGANIZATION_FLOW_ACTOR_TASKS]: 'organizationFlowActorTaskId',\n    [CoreResourceType.APPLICATION_FLOW_ACTOR_TASKS]: 'applicationFlowActorTaskId',\n    // A2A Push Notification Delivery Log (polymorphic — one per owner scope)\n    [CoreResourceType.USER_A2A_PUSH_DELIVERY_LOG]: 'userA2aPushDeliveryLogId',\n    [CoreResourceType.ORGANIZATION_A2A_PUSH_DELIVERY_LOG]: 'organizationA2aPushDeliveryLogId',\n    [CoreResourceType.APPLICATION_A2A_PUSH_DELIVERY_LOG]: 'applicationA2aPushDeliveryLogId',\n    // A2A Token Budget State Resources (polymorphic singleton — one per owner scope)\n    [CoreResourceType.USER_A2A_TOKEN_BUDGET_STATE]: 'userA2aTokenBudgetStateId',\n    [CoreResourceType.ORGANIZATION_A2A_TOKEN_BUDGET_STATE]: 'organizationA2aTokenBudgetStateId',\n    [CoreResourceType.APPLICATION_A2A_TOKEN_BUDGET_STATE]: 'applicationA2aTokenBudgetStateId',\n};\n\n/**\n * @wildo_source:part:start saas.models.resource-field-identifier facet:layer:shared facet:family:resource-config\n *\n * FK / primary-key field identifier string for a resource (core or custom).\n *\n * @remarks Import from `@wildo-ai/saas-models`.\n */\nexport const ResourceFieldIdentifierSchema = z.union([\n  z.string().refine((value) => Object.values(coreResourceShared_FieldIdentifier).includes(value), {\n    message: \"Must be a valid core resource field identifier\"\n  }),\n  z.string() // Custom resource field identifiers\n]);\n\nexport type ResourceFieldIdentifier = z.infer<typeof ResourceFieldIdentifierSchema>;\n/** @wildo_source:part:end saas.models.resource-field-identifier */\n\n/**\n * Cascade direction for self-referencing relationships.\n * Used when resourceType1 === resourceType2 to disambiguate parent vs child.\n */\nexport enum CascadeDirection {\n  /** Standard parent→child — declaring resource is ancestor */\n  FORWARD = 'forward',\n  /** Reverse child→parent — related resource is ancestor */\n  BACKWARD = 'backward',\n}\n"]}