@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/users/anonymous-user-marketing-metadata.shared.schemas.d.ts

@@ -0,0 +1,76 @@
+/**
+ * AnonymousUser First-Touch Marketing Attribution (Phase 0.5, Q-D=β)
+ *
+ * Captured ONCE at session-init time on `AnonymousUser.marketingMetadata`
+ * and never overwritten on subsequent requests (first-touch semantics).
+ * Attribution lives on the session, not the conversion row — so a single
+ * `AnonymousUser` is the canonical source whether the visitor:
+ *   - converts via an `InboundContact` form submission,
+ *   - signs up directly,
+ *   - or never converts at all (cleaned up by the anonymous-session-cleanup
+ *     batch at session TTL).
+ *
+ * Marketing analytics joins `InboundContact → AnonymousUser →
+ * marketingMetadata` via the `anonymousUserId` FK declared in
+ * `inbound-contacts.shared.schemas.ts`.
+ *
+ * Field-by-field rationale:
+ *
+ * - `utm.*`            — Standard UTM parameters extracted from `req.query`
+ *                        on the marketing site landing request. All optional
+ *                        because organic / direct traffic has none.
+ * - `referrer`         — `Referer` HTTP header (note the historical
+ *                        misspelling — kept as `referrer` here to match
+ *                        the analytics-industry convention rather than
+ *                        the HTTP-header spec spelling).
+ * - `landingPath`      — Path of the FIRST page the visitor landed on
+ *                        (e.g. `/pricing`, `/blog/post-slug`). Sourced
+ *                        from a marketing-site-only `x-landing-path` HTTP
+ *                        header (registered in `WildoHeaderKeys`) that
+ *                        the marketing-site bootstrap injects on the
+ *                        very first request to the anonymous-session-init
+ *                        endpoint. We do NOT use `req.path` because the
+ *                        anonymous-session-init endpoint URL is itself
+ *                        not a marketing landing page.
+ * - `acceptLanguage`   — Raw `Accept-Language` header (full string, not
+ *                        parsed). Useful for analytics segmentation and
+ *                        for inferring locale preference when the visitor
+ *                        eventually creates an account.
+ *
+ * NOT modeled here (already on parent `AnonymousUserSchema`):
+ * - `userAgent`         — `AnonymousUser.userAgent` (line 14).
+ * - `consentGrantedAt`  — `AnonymousUserPrivacy.consentTimestamp`.
+ * - `ipHash`            — `AnonymousUser.ipHash` (line 15).
+ *
+ * Length caps mirror the existing `AnonymousUser.userAgent` truncation
+ * pattern (`.substring(0, 256)` in `createAnonymousUser`) — applied at
+ * the schema level here so the boundary is explicit and re-used at every
+ * write site.
+ */
+import { z } from 'zod';
+/**
+ * Standard UTM parameter subobject. Every field optional because
+ * organic / direct traffic carries no UTM params at all.
+ */
+export declare const UtmParametersSchema: z.ZodObject<{
+    source: z.ZodOptional<z.ZodString>;
+    medium: z.ZodOptional<z.ZodString>;
+    campaign: z.ZodOptional<z.ZodString>;
+    term: z.ZodOptional<z.ZodString>;
+    content: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UtmParameters = z.infer<typeof UtmParametersSchema>;
+export declare const AnonymousUserMarketingMetadataSchema: z.ZodObject<{
+    utm: z.ZodOptional<z.ZodObject<{
+        source: z.ZodOptional<z.ZodString>;
+        medium: z.ZodOptional<z.ZodString>;
+        campaign: z.ZodOptional<z.ZodString>;
+        term: z.ZodOptional<z.ZodString>;
+        content: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    referrer: z.ZodOptional<z.ZodString>;
+    landingPath: z.ZodOptional<z.ZodString>;
+    acceptLanguage: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AnonymousUserMarketingMetadata = z.infer<typeof AnonymousUserMarketingMetadataSchema>;
+//# sourceMappingURL=anonymous-user-marketing-metadata.shared.schemas.d.ts.map

package/dist/esm/users/anonymous-user-marketing-metadata.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymous-user-marketing-metadata.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/anonymous-user-marketing-metadata.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;iBAM9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,oCAAoC;;;;;;;;;;;iBAK/C,CAAC;AAEH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC"}

package/dist/esm/users/anonymous-user-marketing-metadata.shared.schemas.js

@@ -0,0 +1,72 @@
+/**
+ * AnonymousUser First-Touch Marketing Attribution (Phase 0.5, Q-D=β)
+ *
+ * Captured ONCE at session-init time on `AnonymousUser.marketingMetadata`
+ * and never overwritten on subsequent requests (first-touch semantics).
+ * Attribution lives on the session, not the conversion row — so a single
+ * `AnonymousUser` is the canonical source whether the visitor:
+ *   - converts via an `InboundContact` form submission,
+ *   - signs up directly,
+ *   - or never converts at all (cleaned up by the anonymous-session-cleanup
+ *     batch at session TTL).
+ *
+ * Marketing analytics joins `InboundContact → AnonymousUser →
+ * marketingMetadata` via the `anonymousUserId` FK declared in
+ * `inbound-contacts.shared.schemas.ts`.
+ *
+ * Field-by-field rationale:
+ *
+ * - `utm.*`            — Standard UTM parameters extracted from `req.query`
+ *                        on the marketing site landing request. All optional
+ *                        because organic / direct traffic has none.
+ * - `referrer`         — `Referer` HTTP header (note the historical
+ *                        misspelling — kept as `referrer` here to match
+ *                        the analytics-industry convention rather than
+ *                        the HTTP-header spec spelling).
+ * - `landingPath`      — Path of the FIRST page the visitor landed on
+ *                        (e.g. `/pricing`, `/blog/post-slug`). Sourced
+ *                        from a marketing-site-only `x-landing-path` HTTP
+ *                        header (registered in `WildoHeaderKeys`) that
+ *                        the marketing-site bootstrap injects on the
+ *                        very first request to the anonymous-session-init
+ *                        endpoint. We do NOT use `req.path` because the
+ *                        anonymous-session-init endpoint URL is itself
+ *                        not a marketing landing page.
+ * - `acceptLanguage`   — Raw `Accept-Language` header (full string, not
+ *                        parsed). Useful for analytics segmentation and
+ *                        for inferring locale preference when the visitor
+ *                        eventually creates an account.
+ *
+ * NOT modeled here (already on parent `AnonymousUserSchema`):
+ * - `userAgent`         — `AnonymousUser.userAgent` (line 14).
+ * - `consentGrantedAt`  — `AnonymousUserPrivacy.consentTimestamp`.
+ * - `ipHash`            — `AnonymousUser.ipHash` (line 15).
+ *
+ * Length caps mirror the existing `AnonymousUser.userAgent` truncation
+ * pattern (`.substring(0, 256)` in `createAnonymousUser`) — applied at
+ * the schema level here so the boundary is explicit and re-used at every
+ * write site.
+ */
+import { z } from 'zod';
+const MAX_UTM_FIELD_LENGTH = 256;
+const MAX_REFERRER_LENGTH = 2048; // URLs can be long (oauth callbacks etc.)
+const MAX_LANDING_PATH_LENGTH = 2048;
+const MAX_ACCEPT_LANGUAGE_LENGTH = 256;
+/**
+ * Standard UTM parameter subobject. Every field optional because
+ * organic / direct traffic carries no UTM params at all.
+ */
+export const UtmParametersSchema = z.object({
+    source: z.string().max(MAX_UTM_FIELD_LENGTH).optional(),
+    medium: z.string().max(MAX_UTM_FIELD_LENGTH).optional(),
+    campaign: z.string().max(MAX_UTM_FIELD_LENGTH).optional(),
+    term: z.string().max(MAX_UTM_FIELD_LENGTH).optional(),
+    content: z.string().max(MAX_UTM_FIELD_LENGTH).optional(),
+});
+export const AnonymousUserMarketingMetadataSchema = z.object({
+    utm: UtmParametersSchema.optional(),
+    referrer: z.string().max(MAX_REFERRER_LENGTH).optional(),
+    landingPath: z.string().max(MAX_LANDING_PATH_LENGTH).optional(),
+    acceptLanguage: z.string().max(MAX_ACCEPT_LANGUAGE_LENGTH).optional(),
+});
+//# sourceMappingURL=anonymous-user-marketing-metadata.shared.schemas.js.map

package/dist/esm/users/anonymous-user-marketing-metadata.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymous-user-marketing-metadata.shared.schemas.js","sourceRoot":"","sources":["../../../../src/users/anonymous-user-marketing-metadata.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,mBAAmB,GAAG,IAAI,CAAC,CAAO,0CAA0C;AAClF,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1D,MAAM,EAAK,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1D,QAAQ,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1D,IAAI,EAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1D,OAAO,EAAI,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,GAAG,EAAc,mBAAmB,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAS,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC/D,WAAW,EAAM,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACnE,cAAc,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC","sourcesContent":["/**\n * AnonymousUser First-Touch Marketing Attribution (Phase 0.5, Q-D=β)\n *\n * Captured ONCE at session-init time on `AnonymousUser.marketingMetadata`\n * and never overwritten on subsequent requests (first-touch semantics).\n * Attribution lives on the session, not the conversion row — so a single\n * `AnonymousUser` is the canonical source whether the visitor:\n *   - converts via an `InboundContact` form submission,\n *   - signs up directly,\n *   - or never converts at all (cleaned up by the anonymous-session-cleanup\n *     batch at session TTL).\n *\n * Marketing analytics joins `InboundContact → AnonymousUser →\n * marketingMetadata` via the `anonymousUserId` FK declared in\n * `inbound-contacts.shared.schemas.ts`.\n *\n * Field-by-field rationale:\n *\n * - `utm.*`            — Standard UTM parameters extracted from `req.query`\n *                        on the marketing site landing request. All optional\n *                        because organic / direct traffic has none.\n * - `referrer`         — `Referer` HTTP header (note the historical\n *                        misspelling — kept as `referrer` here to match\n *                        the analytics-industry convention rather than\n *                        the HTTP-header spec spelling).\n * - `landingPath`      — Path of the FIRST page the visitor landed on\n *                        (e.g. `/pricing`, `/blog/post-slug`). Sourced\n *                        from a marketing-site-only `x-landing-path` HTTP\n *                        header (registered in `WildoHeaderKeys`) that\n *                        the marketing-site bootstrap injects on the\n *                        very first request to the anonymous-session-init\n *                        endpoint. We do NOT use `req.path` because the\n *                        anonymous-session-init endpoint URL is itself\n *                        not a marketing landing page.\n * - `acceptLanguage`   — Raw `Accept-Language` header (full string, not\n *                        parsed). Useful for analytics segmentation and\n *                        for inferring locale preference when the visitor\n *                        eventually creates an account.\n *\n * NOT modeled here (already on parent `AnonymousUserSchema`):\n * - `userAgent`         — `AnonymousUser.userAgent` (line 14).\n * - `consentGrantedAt`  — `AnonymousUserPrivacy.consentTimestamp`.\n * - `ipHash`            — `AnonymousUser.ipHash` (line 15).\n *\n * Length caps mirror the existing `AnonymousUser.userAgent` truncation\n * pattern (`.substring(0, 256)` in `createAnonymousUser`) — applied at\n * the schema level here so the boundary is explicit and re-used at every\n * write site.\n */\n\nimport { z } from 'zod';\n\nconst MAX_UTM_FIELD_LENGTH = 256;\nconst MAX_REFERRER_LENGTH = 2048;       // URLs can be long (oauth callbacks etc.)\nconst MAX_LANDING_PATH_LENGTH = 2048;\nconst MAX_ACCEPT_LANGUAGE_LENGTH = 256;\n\n/**\n * Standard UTM parameter subobject. Every field optional because\n * organic / direct traffic carries no UTM params at all.\n */\nexport const UtmParametersSchema = z.object({\n  source   : z.string().max(MAX_UTM_FIELD_LENGTH).optional(),\n  medium   : z.string().max(MAX_UTM_FIELD_LENGTH).optional(),\n  campaign : z.string().max(MAX_UTM_FIELD_LENGTH).optional(),\n  term     : z.string().max(MAX_UTM_FIELD_LENGTH).optional(),\n  content  : z.string().max(MAX_UTM_FIELD_LENGTH).optional(),\n});\n\nexport type UtmParameters = z.infer<typeof UtmParametersSchema>;\n\nexport const AnonymousUserMarketingMetadataSchema = z.object({\n  utm            : UtmParametersSchema.optional(),\n  referrer       : z.string().max(MAX_REFERRER_LENGTH).optional(),\n  landingPath    : z.string().max(MAX_LANDING_PATH_LENGTH).optional(),\n  acceptLanguage : z.string().max(MAX_ACCEPT_LANGUAGE_LENGTH).optional(),\n});\n\nexport type AnonymousUserMarketingMetadata = z.infer<typeof AnonymousUserMarketingMetadataSchema>;\n"]}

package/dist/esm/users/anonymous-users.shared.resources-config.schemas.d.ts

@@ -3,25 +3,36 @@
  *
  * System resource — identity anchor for anonymous sessions.
  * CREATE, UPDATE, and DELETE are INTERNAL_CALL (managed by AnonymousSessionBackendService via service layer).
- * READ is available to anonymous users (own record) and admins.
+ * READ is admin-only (super-admin inspection). The anonymous session reaches its OWNED
+ * data through the nested `/anonymous-users/{uuidRef}/…` routes (which filter
+ * children by the `anonymousUserId` FK = `uuidRef`) and validates itself via the JWT —
+ * it never reads its own AnonymousUser row. See the READ variant note for why anon
+ * self-read is intentionally NOT offered (it would resolve by `_id`, not `uuidRef`).
  */
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
-export declare const anonymousUsersResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<undefined, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, import("zod").ZodObject<{
-    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>;
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
+export declare const anonymousUsersResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, import("zod").ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    uuidRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>;
     privacy: import("zod").ZodObject<{
-        dataProcessingConsent: import("zod").ZodDefault<import("zod").ZodEnum<typeof import("../index.js").DataProcessingConsent>>;
-        dataProcessingAgreementApproval: import("zod").ZodDefault<import("zod").ZodObject<{
-            accepted: import("zod").ZodDefault<import("zod").ZodBoolean>;
-            acceptedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
-            acceptedVersion: import("zod").ZodOptional<import("zod").ZodString>;
-            ipAddress: import("zod").ZodOptional<import("zod").ZodIPv4>;
-        }, import("zod/v4/core").$strip, core.$ZodObjectExtra>>;
-    }, import("zod/v4/core").$strip, core.$ZodObjectExtra>;
-    userAgent: import("zod").ZodOptional<import("zod").ZodString>;
-    ipHash: import("zod").ZodOptional<import("zod").ZodString>;
+        dataProcessingConsent: import("zod").ZodDefault<import("zod").ZodEnum<typeof import("..").DataProcessingConsent>>;
+    }, import("zod/v4/core").$strip>;
+    userAgent: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>;
+    ipHash: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>;
+    marketingMetadata: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodObject<{
+        utm: import("zod").ZodOptional<import("zod").ZodObject<{
+            source: import("zod").ZodOptional<import("zod").ZodString>;
+            medium: import("zod").ZodOptional<import("zod").ZodString>;
+            campaign: import("zod").ZodOptional<import("zod").ZodString>;
+            term: import("zod").ZodOptional<import("zod").ZodString>;
+            content: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        referrer: import("zod").ZodOptional<import("zod").ZodString>;
+        landingPath: import("zod").ZodOptional<import("zod").ZodString>;
+        acceptLanguage: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>>>;
     convertedToUserId: import("zod").ZodOptional<import("zod").ZodString>;
-    transpositionStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodEnum<typeof import("./anonymous-users.shared.schema.js").AnonymousUserTranspositionStatus>>>;
+    transpositionStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodEnum<typeof import("./anonymous-users.shared.schema").AnonymousUserTranspositionStatus>>>;
     createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodDate>>;
-}, import("zod/v4/core").$strip, core.$ZodObjectExtra>>;
+}, import("zod/v4/core").$strip>>;
 //# sourceMappingURL=anonymous-users.shared.resources-config.schemas.d.ts.map

package/dist/esm/users/anonymous-users.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anonymous-users.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/users/anonymous-users.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,eAAO,MAAM,yDAAyD,GACpE,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;uDAqE9C,CAAC"}
+{"version":3,"file":"anonymous-users.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/anonymous-users.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,eAAO,MAAM,yDAAyD,GACpE,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;iCAuG9C,CAAC"}

package/dist/esm/users/anonymous-users.shared.resources-config.schemas.js

@@ -3,10 +3,15 @@
  *
  * System resource — identity anchor for anonymous sessions.
  * CREATE, UPDATE, and DELETE are INTERNAL_CALL (managed by AnonymousSessionBackendService via service layer).
- * READ is available to anonymous users (own record) and admins.
+ * READ is admin-only (super-admin inspection). The anonymous session reaches its OWNED
+ * data through the nested `/anonymous-users/{uuidRef}/…` routes (which filter
+ * children by the `anonymousUserId` FK = `uuidRef`) and validates itself via the JWT —
+ * it never reads its own AnonymousUser row. See the READ variant note for why anon
+ * self-read is intentionally NOT offered (it would resolve by `_id`, not `uuidRef`).
  */
 import { AnonymousUserSchema } from './anonymous-users.shared.schema.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
 import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel, ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
 import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
@@ -16,6 +21,12 @@ export const anonymousUsersResourceConfiguration_InitializationFactory = (resour
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ANONYMOUS_USERS],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    // Session-init (`AnonymousSessionBackendService.createAnonymousUser`) writes the
+    // first-touch `marketingMetadata` (`.isBackendOnly()`) and a client-supplied
+    // custom `_id` in-process, with no HTTP request context to survive the strict-DTO
+    // strip. `createAsSystem` re-attaches the backend-only field after the parse,
+    // fail-closed behind this opt-in. INTERNAL_CALL-only resource → never HTTP-reachable.
+    systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },
     coreOperations: [
         CoreResourceOperation.CREATE,
         CoreResourceOperation.READ,
@@ -39,17 +50,45 @@ export const anonymousUsersResourceConfiguration_InitializationFactory = (resour
                 {
                     variantType: ResourceOperationVariantType.API_CALL,
                     isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_ANONYMOUS, CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    // Admin-only (super-admin inspection). Intentionally NOT anon-self-read: the
+                    // framework resolves a direct read-by-identifier to `{ _id: <value> }`, but an
+                    // anonymous session's identity is its client `uuidRef` (its `_id` is a server
+                    // ObjectId), so a self-read would look up `{ _id: <uuidRef> }` and never match.
+                    // The anonymous session never needs this — it reaches owned data via the nested
+                    // `/anonymous-users/{uuidRef}/…` routes (children filtered by the
+                    // `anonymousUserId` FK = `uuidRef`) and validates via the JWT. If anon self-read
+                    // is ever required, implement it to resolve by `uuidRef` (custom read impl), not `_id`.
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 },
             ],
         },
+        /**
+         * APPLICATION-WIDE by design, and unconfined by construction — recorded 2026-08-12 because it
+         * previously said nothing, and silence is what this resource class keeps getting wrong.
+         *
+         * `anonymousUsers` is its own scope ROOT: `resourceFieldIdentifier` IS the ANONYMOUS scope's
+         * field, so both repositories blacklist that axis and this LIST compiles with no scope predicate
+         * (`base-classes/__tests__/scope-root-collection-confinement.probe.test.ts`, RESIDUAL sweep).
+         *
+         * Unlike `organizations`, that is CORRECT here rather than a hole, and the reason is semantic
+         * rather than a judgement call: an anonymous session is a pre-authentication visitor of the
+         * APPLICATION. It has no organization — there is no tenant to confine it to — so a "confined"
+         * anonymous listing would name a relationship that does not exist. `super-admin` is therefore
+         * the whole of the control, and it is the right one.
+         *
+         * ⚠️ If anonymous sessions ever gain a tenant association, this becomes an ORGANIZATIONS-axis
+         * question and `assignScopeRootCollectionConfinementToFilter` is where it is answered — that
+         * authority is deliberately scoped to the tenant axis today.
+         *
+         * The sibling decisions live in `.claude/plans/organizations-scope-root-collection-gate-analysis.md`.
+         */
         [CoreResourceOperation.LIST]: {
             variants: [
                 {
                     variantType: ResourceOperationVariantType.API_CALL,
                     isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Application-wide by design — see the block above; there is no tenant to confine a pre-auth visitor to
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 },
             ],
@@ -76,4 +115,4 @@ export const anonymousUsersResourceConfiguration_InitializationFactory = (resour
         },
     },
 });
-//# sourceMappingURL=anonymous-users.shared.resources-config.schemas.js.map
+//# sourceMappingURL=anonymous-users.shared.resources-config.schemas.js.map

package/dist/esm/users/anonymous-users.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"anonymous-users.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/users/anonymous-users.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,CAAC,MAAM,yDAAyD,GAAG,CACvE,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,mBAAmB;IAC/B,kBAAkB,EAAE,gBAAgB,CAAC,eAAe;IACpD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,eAAe,CAAC;IAC7F,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC,qBAAqB,CAAC;oBAC3E,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"anonymous-users.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/users/anonymous-users.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,CAAC,MAAM,yDAAyD,GAAG,CACvE,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,mBAAmB;IAC/B,kBAAkB,EAAE,gBAAgB,CAAC,eAAe;IACpD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,eAAe,CAAC;IAC7F,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,iFAAiF;IACjF,6EAA6E;IAC7E,kFAAkF;IAClF,8EAA8E;IAC9E,sFAAsF;IACtF,kBAAkB,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAChE,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,6EAA6E;oBAC7E,+EAA+E;oBAC/E,8EAA8E;oBAC9E,gFAAgF;oBAChF,gFAAgF;oBAChF,kEAAkE;oBAClE,iFAAiF;oBACjF,wFAAwF;oBACxF,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD;;;;;;;;;;;;;;;;;;;WAmBG;QACH,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,wGAAwG;oBACvJ,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * AnonymousUser Resource Configuration (W7.3a)\n *\n * System resource — identity anchor for anonymous sessions.\n * CREATE, UPDATE, and DELETE are INTERNAL_CALL (managed by AnonymousSessionBackendService via service layer).\n * READ is admin-only (super-admin inspection). The anonymous session reaches its OWNED\n * data through the nested `/anonymous-users/{uuidRef}/…` routes (which filter\n * children by the `anonymousUserId` FK = `uuidRef`) and validates itself via the JWT —\n * it never reads its own AnonymousUser row. See the READ variant note for why anon\n * self-read is intentionally NOT offered (it would resolve by `_id`, not `uuidRef`).\n */\n\nimport { AnonymousUserSchema } from './anonymous-users.shared.schema';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nexport const anonymousUsersResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n) => createResourceConfiguration_Initialization<undefined,\n  CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE,\n  typeof AnonymousUserSchema\n>({\n  mainSchema: AnonymousUserSchema,\n  resourceIdentifier: CoreResourceType.ANONYMOUS_USERS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ANONYMOUS_USERS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  // Session-init (`AnonymousSessionBackendService.createAnonymousUser`) writes the\n  // first-touch `marketingMetadata` (`.isBackendOnly()`) and a client-supplied\n  // custom `_id` in-process, with no HTTP request context to survive the strict-DTO\n  // strip. `createAsSystem` re-attaches the backend-only field after the parse,\n  // fail-closed behind this opt-in. INTERNAL_CALL-only resource → never HTTP-reachable.\n  systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.INTERNAL_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          // Admin-only (super-admin inspection). Intentionally NOT anon-self-read: the\n          // framework resolves a direct read-by-identifier to `{ _id: <value> }`, but an\n          // anonymous session's identity is its client `uuidRef` (its `_id` is a server\n          // ObjectId), so a self-read would look up `{ _id: <uuidRef> }` and never match.\n          // The anonymous session never needs this — it reaches owned data via the nested\n          // `/anonymous-users/{uuidRef}/…` routes (children filtered by the\n          // `anonymousUserId` FK = `uuidRef`) and validates via the JWT. If anon self-read\n          // is ever required, implement it to resolve by `uuidRef` (custom read impl), not `_id`.\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    /**\n     * APPLICATION-WIDE by design, and unconfined by construction — recorded 2026-08-12 because it\n     * previously said nothing, and silence is what this resource class keeps getting wrong.\n     *\n     * `anonymousUsers` is its own scope ROOT: `resourceFieldIdentifier` IS the ANONYMOUS scope's\n     * field, so both repositories blacklist that axis and this LIST compiles with no scope predicate\n     * (`base-classes/__tests__/scope-root-collection-confinement.probe.test.ts`, RESIDUAL sweep).\n     *\n     * Unlike `organizations`, that is CORRECT here rather than a hole, and the reason is semantic\n     * rather than a judgement call: an anonymous session is a pre-authentication visitor of the\n     * APPLICATION. It has no organization — there is no tenant to confine it to — so a \"confined\"\n     * anonymous listing would name a relationship that does not exist. `super-admin` is therefore\n     * the whole of the control, and it is the right one.\n     *\n     * ⚠️ If anonymous sessions ever gain a tenant association, this becomes an ORGANIZATIONS-axis\n     * question and `assignScopeRootCollectionConfinementToFilter` is where it is answered — that\n     * authority is deliberately scoped to the tenant axis today.\n     *\n     * The sibling decisions live in `.claude/plans/organizations-scope-root-collection-gate-analysis.md`.\n     */\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Application-wide by design — see the block above; there is no tenant to confine a pre-auth visitor to\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.INTERNAL_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.INTERNAL_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        },\n      ],\n    },\n  },\n});\n"]}

package/dist/esm/users/anonymous-users.shared.schema.d.ts

@@ -6,22 +6,29 @@ export declare enum AnonymousUserTranspositionStatus {
     PARTIAL = "partial"
 }
 declare const _AnonymousUserSchema: z.ZodObject<{
-    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    uuidRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
     privacy: z.ZodObject<{
-        dataProcessingConsent: z.ZodDefault<z.ZodEnum<typeof import("../index.js").DataProcessingConsent>>;
-        dataProcessingAgreementApproval: z.ZodDefault<z.ZodObject<{
-            accepted: z.ZodDefault<z.ZodBoolean>;
-            acceptedAt: z.ZodOptional<z.ZodISODateTime>;
-            acceptedVersion: z.ZodOptional<z.ZodString>;
-            ipAddress: z.ZodOptional<z.ZodIPv4>;
-        }, z.core.$strip, core.$ZodObjectExtra>>;
-    }, z.core.$strip, core.$ZodObjectExtra>;
-    userAgent: z.ZodOptional<z.ZodString>;
-    ipHash: z.ZodOptional<z.ZodString>;
+        dataProcessingConsent: z.ZodDefault<z.ZodEnum<typeof import("..").DataProcessingConsent>>;
+    }, z.core.$strip>;
+    userAgent: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    ipHash: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    marketingMetadata: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodObject<{
+        utm: z.ZodOptional<z.ZodObject<{
+            source: z.ZodOptional<z.ZodString>;
+            medium: z.ZodOptional<z.ZodString>;
+            campaign: z.ZodOptional<z.ZodString>;
+            term: z.ZodOptional<z.ZodString>;
+            content: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        referrer: z.ZodOptional<z.ZodString>;
+        landingPath: z.ZodOptional<z.ZodString>;
+        acceptLanguage: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>>;
     convertedToUserId: z.ZodOptional<z.ZodString>;
     transpositionStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodEnum<typeof AnonymousUserTranspositionStatus>>>;
     createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export declare const AnonymousUserSchema: typeof _AnonymousUserSchema;
 export type AnonymousUser = z.infer<typeof _AnonymousUserSchema>;
 export {};

package/dist/esm/users/anonymous-users.shared.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anonymous-users.shared.schema.d.ts","sourceRoot":"","sources":["../../../src/users/anonymous-users.shared.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,wEAAwE;AACxE,oBAAY,gCAAgC;IAC1C,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAED,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;uCASxB,CAAC;AAEH,eAAO,MAAM,mBAAmB,EAAE,OAAO,oBAA2C,CAAC;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"anonymous-users.shared.schema.d.ts","sourceRoot":"","sources":["../../../../src/users/anonymous-users.shared.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,wEAAwE;AACxE,oBAAY,gCAAgC;IAC1C,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAED,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;iBAuExB,CAAC;AAEH,eAAO,MAAM,mBAAmB,EAAE,OAAO,oBAA2C,CAAC;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/esm/users/anonymous-users.shared.schema.js

@@ -1,5 +1,7 @@
 import { z } from "zod";
+import { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas.js';
 import { AnonymousUserPrivacySchema } from "../compliance/privacy/privacy.shared.schemas.js";
+import { AnonymousUserMarketingMetadataSchema } from "./anonymous-user-marketing-metadata.shared.schemas.js";
 /** W7.3a: Status of anonymous→authenticated ownership transposition. */
 export var AnonymousUserTranspositionStatus;
 (function (AnonymousUserTranspositionStatus) {
@@ -8,14 +10,76 @@ export var AnonymousUserTranspositionStatus;
     AnonymousUserTranspositionStatus["PARTIAL"] = "partial";
 })(AnonymousUserTranspositionStatus || (AnonymousUserTranspositionStatus = {}));
 const _AnonymousUserSchema = z.object({
-    _id: z.string().isSummaryField(),
+    /**
+     * Server-minted MongoDB identity (ObjectId, surfaced as a hex string).
+     * `.isPrimaryKey()` = the standard server-generated primary key (composite:
+     * excludeFromCreate + hidden + unique + indexed), IDENTICAL to every other
+     * resource — which is what makes session-init a normal create (it is server-minted,
+     * so it is never in the create payload, so it never crashes the strict-DTO parse).
+     *
+     * This is a PURE internal storage id. It is NOT the anonymous user's relational
+     * identity: children (`draft-notes`, `inbound-contacts`) reference {@link uuidRef}
+     * via their `anonymousUserId` FK, the session JWT carries `uuidRef`, and the nested
+     * `/anonymous-users/{uuidRef}/…` routes key off `uuidRef` — never this `_id`.
+     * See {@link uuidRef} for why the relational identity is the client handle, not `_id`.
+     */
+    _id: z.string().isPrimaryKey().isSummaryField(),
+    /**
+     * The anonymous user's RELATIONAL / business identity: a client-generated,
+     * unguessable UUID handle for the session (`crypto.randomUUID()` in the frontend
+     * `AnonymousSessionContext`). Everything client-facing keys off THIS, not `_id`:
+     * the `anonymousUserId` FK on child resources, the session JWT payload, the nested
+     * `/anonymous-users/{uuidRef}/draft-notes` URL param (+ its coherence check),
+     * and the cross-origin handoff. `_id` stays a pure internal DB storage id.
+     *
+     * Why the client generates it and why it is the identity (not `_id`):
+     * - **Cross-origin continuity**: a visitor starts on the marketing site
+     *   (`example.com`) and continues in the app (`app.example.com`) — two origins with
+     *   SEPARATE localStorage. The handle is generated client-side and handed across, so
+     *   the same anonymous user is resolved on both. It also survives page reload / the
+     *   24h JWT expiry (presented again at `x-anonymous-session-init` to re-resolve).
+     * - **Unguessable adoption handle**: presenting this value at init ADOPTS the
+     *   session, so it must be unguessable. A random UUID is; a server `_id`
+     *   (ObjectId = timestamp + counter) is partially enumerable — the wrong primitive.
+     * - **`_id` is a database concern**: the client value must never BE `_id`; it lives
+     *   here as an indexed, unique reference. Using one client-facing identity end-to-end
+     *   (rather than translating a client handle ⇄ a server `_id` at every seam) is why
+     *   children's `anonymousUserId` carries `uuidRef`.
+     *
+     * Set in-process by `AnonymousSessionBackendService.createAnonymousUser` from the
+     * validated init header. Unique-indexed for concurrent-tab / cross-origin
+     * create-or-resolve dedup. `.excludeFromUpdate()` — an immutable identity handle.
+     * Readable (not `.isBackendOnly()`) so the anonymous-session-cleanup batch can filter
+     * a user's children by it; it is not sensitive (the client that generated it already
+     * holds it, and it grants only zero-value anonymous access).
+     */
+    uuidRef: z.string().min(1).isDBIndexed().isUnique({ scope: 'global', sparse: false }).excludeFromUpdate(),
     privacy: AnonymousUserPrivacySchema,
-    userAgent: z.string().optional(),
-    ipHash: z.string().optional(),
+    // An anonymous user IS a person — one without an account. This resource declares no
+    // `exportSubject`, which is why a subject-export-based sweep misses it entirely; the categories are
+    // owed regardless of whether the row is exportable.
+    //
+    // USAGE for the user agent (a device/browser observation), IDENTITY for the IP hash: hashing does
+    // not stop it identifying — it is a pseudonymous identifier, GDPR Art. 4(5), the same reading the
+    // audit row's `clientInstanceId` already carries. LOCATION alongside, because an IP narrows where
+    // the person is even when hashed against a rainbow-table attacker rather than against the operator.
+    userAgent: z.string().optional().dataCategories(PersonalDataCategory.USAGE),
+    ipHash: z.string().optional().dataCategories([PersonalDataCategory.IDENTITY, PersonalDataCategory.LOCATION]),
+    /**
+     * Phase 0.5 (Q-D=β): first-touch marketing attribution captured at
+     * session-init time and never overwritten. Lives here on the
+     * `AnonymousUser` (the session anchor) rather than on
+     * `InboundContact` (the conversion row) so we get attribution for
+     * sessions that convert via signup OR contact form OR not at all.
+     * `.isBackendOnly()` strips it from every client-facing response —
+     * marketing analytics joins via `anonymousUserId` server-side only.
+     */
+    marketingMetadata: AnonymousUserMarketingMetadataSchema.optional().isBackendOnly()
+        .dataCategories(PersonalDataCategory.USAGE),
     /** W7.3a: Set when anonymous user registers/logs in. */
     convertedToUserId: z.string().optional(),
     transpositionStatus: z.enum(AnonymousUserTranspositionStatus).optional().isSummaryField(),
     createdAt: z.date().default(() => new Date()).isSummaryField(),
 });
 export const AnonymousUserSchema = _AnonymousUserSchema;
-//# sourceMappingURL=anonymous-users.shared.schema.js.map
+//# sourceMappingURL=anonymous-users.shared.schema.js.map

package/dist/esm/users/anonymous-users.shared.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"anonymous-users.shared.schema.js","sourceRoot":"","sources":["../../../src/users/anonymous-users.shared.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,wEAAwE;AACxE,MAAM,CAAN,IAAY,gCAIX;AAJD,WAAY,gCAAgC;IAC1C,uDAAmB,CAAA;IACnB,yDAAqB,CAAA;IACrB,uDAAmB,CAAA;AACrB,CAAC,EAJW,gCAAgC,KAAhC,gCAAgC,QAI3C;AAED,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE;IAChC,OAAO,EAAE,0BAA0B;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,wDAAwD;IACxD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE;IACzF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAgC,oBAAoB,CAAC"}
+{"version":3,"file":"anonymous-users.shared.schema.js","sourceRoot":"","sources":["../../../../src/users/anonymous-users.shared.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,oCAAoC,EAAE,MAAM,oDAAoD,CAAC;AAE1G,wEAAwE;AACxE,MAAM,CAAN,IAAY,gCAIX;AAJD,WAAY,gCAAgC;IAC1C,uDAAmB,CAAA;IACnB,yDAAqB,CAAA;IACrB,uDAAmB,CAAA;AACrB,CAAC,EAJW,gCAAgC,KAAhC,gCAAgC,QAI3C;AAED,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC;;;;;;;;;;;;OAYG;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE;IACzG,OAAO,EAAE,0BAA0B;IACnC,oFAAoF;IACpF,oGAAoG;IACpG,oDAAoD;IACpD,EAAE;IACF,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG,oGAAoG;IACpG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,KAAK,CAAC;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5G;;;;;;;;OAQG;IACH,iBAAiB,EAAE,oCAAoC,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE;SAC/E,cAAc,CAAC,oBAAoB,CAAC,KAAK,CAAC;IAC7C,wDAAwD;IACxD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE;IACzF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAgC,oBAAoB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { AnonymousUserPrivacySchema } from \"../compliance/privacy/privacy.shared.schemas\";\nimport { AnonymousUserMarketingMetadataSchema } from \"./anonymous-user-marketing-metadata.shared.schemas\";\n\n/** W7.3a: Status of anonymous→authenticated ownership transposition. */\nexport enum AnonymousUserTranspositionStatus {\n  PENDING = 'pending',\n  COMPLETE = 'complete',\n  PARTIAL = 'partial',\n}\n\nconst _AnonymousUserSchema = z.object({\n  /**\n   * Server-minted MongoDB identity (ObjectId, surfaced as a hex string).\n   * `.isPrimaryKey()` = the standard server-generated primary key (composite:\n   * excludeFromCreate + hidden + unique + indexed), IDENTICAL to every other\n   * resource — which is what makes session-init a normal create (it is server-minted,\n   * so it is never in the create payload, so it never crashes the strict-DTO parse).\n   *\n   * This is a PURE internal storage id. It is NOT the anonymous user's relational\n   * identity: children (`draft-notes`, `inbound-contacts`) reference {@link uuidRef}\n   * via their `anonymousUserId` FK, the session JWT carries `uuidRef`, and the nested\n   * `/anonymous-users/{uuidRef}/…` routes key off `uuidRef` — never this `_id`.\n   * See {@link uuidRef} for why the relational identity is the client handle, not `_id`.\n   */\n  _id: z.string().isPrimaryKey().isSummaryField(),\n  /**\n   * The anonymous user's RELATIONAL / business identity: a client-generated,\n   * unguessable UUID handle for the session (`crypto.randomUUID()` in the frontend\n   * `AnonymousSessionContext`). Everything client-facing keys off THIS, not `_id`:\n   * the `anonymousUserId` FK on child resources, the session JWT payload, the nested\n   * `/anonymous-users/{uuidRef}/draft-notes` URL param (+ its coherence check),\n   * and the cross-origin handoff. `_id` stays a pure internal DB storage id.\n   *\n   * Why the client generates it and why it is the identity (not `_id`):\n   * - **Cross-origin continuity**: a visitor starts on the marketing site\n   *   (`example.com`) and continues in the app (`app.example.com`) — two origins with\n   *   SEPARATE localStorage. The handle is generated client-side and handed across, so\n   *   the same anonymous user is resolved on both. It also survives page reload / the\n   *   24h JWT expiry (presented again at `x-anonymous-session-init` to re-resolve).\n   * - **Unguessable adoption handle**: presenting this value at init ADOPTS the\n   *   session, so it must be unguessable. A random UUID is; a server `_id`\n   *   (ObjectId = timestamp + counter) is partially enumerable — the wrong primitive.\n   * - **`_id` is a database concern**: the client value must never BE `_id`; it lives\n   *   here as an indexed, unique reference. Using one client-facing identity end-to-end\n   *   (rather than translating a client handle ⇄ a server `_id` at every seam) is why\n   *   children's `anonymousUserId` carries `uuidRef`.\n   *\n   * Set in-process by `AnonymousSessionBackendService.createAnonymousUser` from the\n   * validated init header. Unique-indexed for concurrent-tab / cross-origin\n   * create-or-resolve dedup. `.excludeFromUpdate()` — an immutable identity handle.\n   * Readable (not `.isBackendOnly()`) so the anonymous-session-cleanup batch can filter\n   * a user's children by it; it is not sensitive (the client that generated it already\n   * holds it, and it grants only zero-value anonymous access).\n   */\n  uuidRef: z.string().min(1).isDBIndexed().isUnique({ scope: 'global', sparse: false }).excludeFromUpdate(),\n  privacy: AnonymousUserPrivacySchema,\n  // An anonymous user IS a person — one without an account. This resource declares no\n  // `exportSubject`, which is why a subject-export-based sweep misses it entirely; the categories are\n  // owed regardless of whether the row is exportable.\n  //\n  // USAGE for the user agent (a device/browser observation), IDENTITY for the IP hash: hashing does\n  // not stop it identifying — it is a pseudonymous identifier, GDPR Art. 4(5), the same reading the\n  // audit row's `clientInstanceId` already carries. LOCATION alongside, because an IP narrows where\n  // the person is even when hashed against a rainbow-table attacker rather than against the operator.\n  userAgent: z.string().optional().dataCategories(PersonalDataCategory.USAGE),\n  ipHash: z.string().optional().dataCategories([PersonalDataCategory.IDENTITY, PersonalDataCategory.LOCATION]),\n  /**\n   * Phase 0.5 (Q-D=β): first-touch marketing attribution captured at\n   * session-init time and never overwritten. Lives here on the\n   * `AnonymousUser` (the session anchor) rather than on\n   * `InboundContact` (the conversion row) so we get attribution for\n   * sessions that convert via signup OR contact form OR not at all.\n   * `.isBackendOnly()` strips it from every client-facing response —\n   * marketing analytics joins via `anonymousUserId` server-side only.\n   */\n  marketingMetadata: AnonymousUserMarketingMetadataSchema.optional().isBackendOnly()\n    .dataCategories(PersonalDataCategory.USAGE),\n  /** W7.3a: Set when anonymous user registers/logs in. */\n  convertedToUserId: z.string().optional(),\n  transpositionStatus: z.enum(AnonymousUserTranspositionStatus).optional().isSummaryField(),\n  createdAt: z.date().default(() => new Date()).isSummaryField(),\n});\n\nexport const AnonymousUserSchema: typeof _AnonymousUserSchema = _AnonymousUserSchema;\nexport type AnonymousUser = z.infer<typeof _AnonymousUserSchema>;\n"]}

package/dist/esm/users/inbound-contacts.shared.resources-config.schemas.d.ts

@@ -0,0 +1,52 @@
+/**
+ * InboundContact Resource Configuration (Phase 0.5, Q-E=B path)
+ *
+ * Lead-capture resource for the public marketing site.
+ * APPLICATION-scope (anchored via the `ANONYMOUS_USERS → INBOUND_CONTACTS`
+ * relationship row in `coreSharedResourceRelationship`), NO
+ * `isAnonymizable: true` — the framework's anonymizable transposition
+ * pipeline gates on USER_SELF semantics, but `INBOUND_CONTACTS` is
+ * conceptually an org-owned admin resource. Transposition is handled
+ * by a focused manual hook in `AnonymousSessionBackendService` that
+ * UPDATEs `{ anonymousUserId } → { userId, anonymousUserId: null }`
+ * when the lead converts to an authenticated user.
+ *
+ * Operations:
+ * - CREATE       : public — `APP_ANONYMOUS` role, requires an active
+ *                  anonymous session. Per-endpoint rate-limit declared
+ *                  on the variant itself (5 req/min + 30 req/hour per IP),
+ *                  enforced at the controller pre-flight seam by
+ *                  `RateLimitBackendService.checkPolicyForVariant`
+ *                  BEFORE execution-context creation.
+ * - READ / LIST  : `APP_ADMIN_MARKETING_EDITOR` (admin marketing dashboard).
+ * - SEARCH       : `APP_ADMIN_MARKETING_EDITOR`.
+ * - UPDATE       : INTERNAL_CALL only — used by the manual transposition
+ *                  hook in `AnonymousSessionBackendService` to set
+ *                  `{ userId, anonymousUserId: null }` on lead conversion.
+ *                  Not exposed as a public API (no admin-edit surface in
+ *                  Phase 0.5 — leads are read-only in the dashboard).
+ * - DELETE       : `APP_ADMIN_SUPER_ADMIN` (compliance / data-cleanup).
+ *
+ * Marketing attribution does NOT live on this row. First-touch
+ * attribution is on `AnonymousUser.marketingMetadata` (Q-D=β); analytics
+ * joins via `anonymousUserId`.
+ */
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { type ResourceRelationship } from '../resources/resources.shared.schemas';
+export declare const inboundContactsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH, import("zod").ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    email: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEmail>>;
+    firstName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>>;
+    lastName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>>;
+    phone: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>;
+    anonymousUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodNullable<import("zod").ZodString>>>>;
+    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodNullable<import("zod").ZodString>>>>;
+    relatedUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>;
+    emailUserMatch: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodEnum<typeof import("./inbound-contacts.shared.schemas").InboundContactEmailUserMatch>>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDate>>>;
+    privacy: import("zod").ZodObject<{
+        dataProcessingConsent: import("zod").ZodDefault<import("zod").ZodEnum<typeof import("..").DataProcessingConsent>>;
+    }, import("zod/v4/core").$strip>;
+}, import("zod/v4/core").$strip>>;
+//# sourceMappingURL=inbound-contacts.shared.resources-config.schemas.d.ts.map

package/dist/esm/users/inbound-contacts.shared.resources-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-contacts.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/inbound-contacts.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,OAAO,EACL,qBAAqB,EAGtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,uCAAuC,CAAC;AAG/C,eAAO,MAAM,0DAA0D,GACrE,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;iCAyH9C,CAAC"}