@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/users/user-profiles.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-profiles.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/users/user-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUzG,oBAAY,uBAAuB;IACjC,aAAa,kBAAkB,CAAE,qBAAqB;IACtD,aAAa,kBAAkB,CAAE,qBAAqB;IACtD,mBAAmB,wBAAwB,CAAE,6BAA6B;IAC1E,YAAY,iBAAiB;CAC9B;AAED,KAAK,0BAA0B,GAC3B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,uDAAuD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;wCAyOpH,CAAC"}
+{"version":3,"file":"user-profiles.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/user-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAwBzG,oBAAY,uBAAuB;IACjC,aAAa,kBAAkB,CAAE,qBAAqB;IACtD,aAAa,kBAAkB,CAAE,qBAAqB;IACtD,mBAAmB,wBAAwB;CAC5C;AAED,KAAK,0BAA0B,GAC3B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,uDAAuD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;kBAkQpH,CAAC"}

package/dist/esm/users/user-profiles.shared.resources-config.schemas.js

@@ -12,14 +12,27 @@ import { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resourc
 import { ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
 import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode, acknowledgeUnimplementedEngineOperation } from '../resources/resources-config.shared.schemas.js';
 import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
-// Custom operations enum for user profile management
+import { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas.js';
+// Custom operations enum for user profile management.
+//
+// There is deliberately no `verify_phone` here. Proving possession of a phone number is a
+// challenge/response against an issued code, and the framework already implements exactly that in
+// `AuthPhoneVerificationBackendService`: `CoreConsumableTokenTypes.PHONE_VERIFICATION` tokens
+// (single-use, 10-minute expiry, revoke-then-issue), a constant-time `timingSafeEqual` comparison,
+// an audit event on BOTH the success and the failure path, and the verified state persisted via
+// `setVerifiedPhone`. `AuthMethod.SMS_OTP` covers the same proof as a first-or-second auth factor
+// with its own rate limits and audit events. `USER_SELF_PROFILES` — the resource where a subject
+// edits their OWN profile — dropped its equivalent op for the same reason. A `verify_phone` on
+// THIS resource would be worse still: `USER_PROFILES` is the admin/directory surface, and an SMS
+// code proves possession by the phone's OWNER, not by the admin submitting it. Route phone-factor
+// work to the auth service, not to a second challenge store hanging off the profile row.
 export var UserProfiles_Operations;
 (function (UserProfiles_Operations) {
     UserProfiles_Operations["UPDATE_AVATAR"] = "update_avatar";
     UserProfiles_Operations["REMOVE_AVATAR"] = "remove_avatar";
     UserProfiles_Operations["UPDATE_CONTACT_INFO"] = "update_contact_info";
-    UserProfiles_Operations["VERIFY_PHONE"] = "verify_phone";
 })(UserProfiles_Operations || (UserProfiles_Operations = {}));
 /*
 User Profiles Resource Configuration Factory
@@ -30,6 +43,25 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_PROFILES],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    // Registration / invitation / SSO-JIT flows create a profile in-process with an
+    // explicit `userId` FK on a request-context-less EC, which the client-shaped
+    // CREATE DTO strips by name. Opt CREATE into the trusted `createAsSystem` path
+    // so `userId` is re-attached after the strict parse.
+    //
+    // UPDATE is opted into the same trust class: enterprise SSO + SCIM directory sync
+    // update profile attributes (EnterpriseUserProvisioningService.updateOrgUser) on a
+    // synthesised super-admin EC. Routing them through `updateAsSystem` keeps every
+    // trusted profile mutation on one fail-closed, policy-gated path and records the
+    // ACL-bypassing write in the SYSTEM_CONTEXT_WRITE audit trail (parity with reads).
+    systemAccessPolicy: {
+        exportSubject: ResourceSystemAccessMode.ALLOWED,
+        create: ResourceSystemAccessMode.ALLOWED,
+        update: ResourceSystemAccessMode.ALLOWED,
+    },
+    /**
+     * Subject-export disclosure. Admin door onto the same profile rows.
+     */
+    portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.SUBJECT_PROVIDED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.SEARCH,
@@ -53,6 +85,10 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     variantKey: "admin",
                     roles: [CORE_APP_ROLES.APP_ADMIN_VIEWER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
+                    // The default variant remains self-only. This explicit admission lets
+                    // the separately role-gated administration variant address another
+                    // user's profile without weakening the APP_USER route.
+                    admitsCrossSubjectUserAdministration: true,
                 }
             ]
         },
@@ -76,6 +112,7 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     variantKey: "admin",
                     roles: [CORE_APP_ROLES.APP_ADMIN_VIEWER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
+                    admitsCrossSubjectUserAdministration: true,
                     isSearchable: true,
                     searchableFields: ['firstName', 'lastName', 'displayName', 'phoneNumber'],
                     searchableOptions: { caseSensitive: false, fullMatchOnly: false },
@@ -100,6 +137,7 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     variantKey: "admin",
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                    admitsCrossSubjectUserAdministration: true,
                     // requestDto auto-derived from decorators
                 }
             ],
@@ -125,6 +163,7 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     variantKey: "admin",
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                    admitsCrossSubjectUserAdministration: true,
                     // requestDto auto-derived from decorators
                 }
             ],
@@ -149,6 +188,7 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     variantKey: "admin",
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.HIGH,
+                    admitsCrossSubjectUserAdministration: true,
                 }
             ],
             userNotifications: [
@@ -166,8 +206,11 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     roles: [CORE_APP_ROLES.APP_USER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
                     resourceOperationLike: CoreResourceOperation.UPDATE,
+                    // The profile schema owns the upload-only file reference contract.
+                    // Reusing it prevents this convenience route from accepting an
+                    // external URL that persistence cannot store as an avatar.
                     requestDto: z.object({
-                        avatar: z.url(),
+                        avatar: UserProfileSchema.shape.avatar.unwrap(),
                     }),
                 }
             ],
@@ -186,6 +229,20 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     roles: [CORE_APP_ROLES.APP_USER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
                     resourceOperationLike: CoreResourceOperation.UPDATE,
+                    // A verb whose entire job is to clear ONE field must not accept the whole profile.
+                    // Omitting `requestDto` auto-derived the FULL profile update DTO
+                    // (`{firstName, lastName, displayName, avatar, bio, phoneNumber, title}`), so
+                    // "remove_avatar" was an unconstrained profile rewrite that never had to touch the
+                    // avatar at all.
+                    requestDto: z.object({}),
+                    // Narrowing exposes that the clearing itself was never implemented — the overbroad
+                    // contract was the only thing making this operation appear to write. Clearing an
+                    // avatar is NOT a plain `{avatar: null}` patch: the field is `z_file(...).optional()`
+                    // (not `.nullish()`), so a null would fail the response projection, and dropping the
+                    // reference without releasing the stored object orphans the uploaded file. Both
+                    // belong to the file-management pipeline, so this is acknowledged (and now refuses)
+                    // rather than half-implemented here.
+                    unimplementedAcknowledgement: acknowledgeUnimplementedEngineOperation('Clearing an avatar needs the file pipeline, not a field patch: `avatar` is `z_file(...).optional()`, so writing `null` fails the response projection (the field would first have to become `.nullish()` — a schema reshape with its own blast radius), and releasing the stored object requires the file-deletion path or the upload is orphaned. Implement alongside file management; until then this refuses instead of silently rewriting the rest of the profile.'),
                 }
             ],
             userNotifications: [
@@ -203,10 +260,12 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                     roles: [CORE_APP_ROLES.APP_USER],
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
                     resourceOperationLike: CoreResourceOperation.UPDATE,
+                    // A named "update contact info" call must perform a change; an empty
+                    // body was previously accepted as a successful no-op. The same
+                    // canonical phone schema now governs both the main update and this
+                    // focused route.
                     requestDto: z.object({
-                        phoneNumber: z.string()
-                            .regex(/^\+?[1-9]\d{1,14}$/, 'Invalid phone number format')
-                            .optional(),
+                        phoneNumber: UserProfileSchema.shape.phoneNumber.unwrap(),
                     }),
                 }
             ],
@@ -217,30 +276,6 @@ export const userProfilesResourceConfiguration_InitializationFactory = (resource
                 }
             ]
         },
-        [UserProfiles_Operations.VERIFY_PHONE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        verificationCode: z.string().min(4).max(10),
-                    }),
-                    customResponseDto: z.object({
-                        verified: z.boolean(),
-                        verifiedAt: z.date().optional(),
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.SMS,
-                }
-            ]
-        }
     },
 });
-//# sourceMappingURL=user-profiles.shared.resources-config.schemas.js.map
+//# sourceMappingURL=user-profiles.shared.resources-config.schemas.js.map

package/dist/esm/users/user-profiles.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-profiles.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/users/user-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,qDAAqD;AACrD,MAAM,CAAN,IAAY,uBAKX;AALD,WAAY,uBAAuB;IACjC,0DAA+B,CAAA;IAC/B,0DAA+B,CAAA;IAC/B,sEAA2C,CAAA;IAC3C,wDAA6B,CAAA;AAC/B,CAAC,EALW,uBAAuB,KAAvB,uBAAuB,QAKlC;AASD;;EAEE;AACF,MAAM,CAAC,MAAM,uDAAuD,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAInK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,aAAa;IAClD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC;IAC3F,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,uBAAuB;IAExC,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,gDAAgD;oBAClF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAC;oBACxC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;oBAC1D,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;oBACrC,8BAA8B,EAAE,EAAE;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAC;oBACxC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC;oBACzE,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;oBACrC,8BAA8B,EAAE,GAAG;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,qCAAqC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,qCAAqC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,qCAAqC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE;YACvC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE;qBAChB,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE;YACvC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;iBACpD;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EAAE;YAC7C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;6BACpB,KAAK,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;6BAC1D,QAAQ,EAAE;qBACd,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE;YACtC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;qBAC5C,CAAC;oBACF,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;wBACrB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;qBAChC,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,GAAG;iBACzC;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"user-profiles.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/users/user-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,uCAAuC,EAAE,MAAM,8CAA8C,CAAC;AAEjI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAEhG,sDAAsD;AACtD,EAAE;AACF,0FAA0F;AAC1F,kGAAkG;AAClG,8FAA8F;AAC9F,mGAAmG;AACnG,gGAAgG;AAChG,kGAAkG;AAClG,iGAAiG;AACjG,+FAA+F;AAC/F,iGAAiG;AACjG,kGAAkG;AAClG,yFAAyF;AACzF,MAAM,CAAN,IAAY,uBAIX;AAJD,WAAY,uBAAuB;IACjC,0DAA+B,CAAA;IAC/B,0DAA+B,CAAA;IAC/B,sEAA2C,CAAA;AAC7C,CAAC,EAJW,uBAAuB,KAAvB,uBAAuB,QAIlC;AASD;;EAEE;AACF,MAAM,CAAC,MAAM,uDAAuD,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAInK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,aAAa;IAClD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC;IAC3F,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,gFAAgF;IAChF,6EAA6E;IAC7E,+EAA+E;IAC/E,qDAAqD;IACrD,EAAE;IACF,kFAAkF;IAClF,mFAAmF;IACnF,gFAAgF;IAChF,iFAAiF;IACjF,mFAAmF;IACnF,kBAAkB,EAAE;QAClB,aAAa,EAAE,wBAAwB,CAAC,OAAO;QAC/C,MAAM,EAAE,wBAAwB,CAAC,OAAO;QACxC,MAAM,EAAE,wBAAwB,CAAC,OAAO;KACzC;IAED;;OAEG;IACH,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,gBAAgB,EAAE;IAEpF,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,uBAAuB;IAExC,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,gDAAgD;oBAClF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAC;oBACxC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,sEAAsE;oBACtE,mEAAmE;oBACnE,uDAAuD;oBACvD,oCAAoC,EAAE,IAAI;iBAC3C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;oBAC1D,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;oBACrC,8BAA8B,EAAE,EAAE;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAC;oBACxC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,oCAAoC,EAAE,IAAI;oBAC1C,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC;oBACzE,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;oBACrC,8BAA8B,EAAE,GAAG;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,qCAAqC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,oCAAoC,EAAE,IAAI;oBAC1C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,qCAAqC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,oCAAoC,EAAE,IAAI;oBAC1C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,qCAAqC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,oCAAoC,EAAE,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE;YACvC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,mEAAmE;oBACnE,+DAA+D;oBAC/D,2DAA2D;oBAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;qBAChD,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE;YACvC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,mFAAmF;oBACnF,iEAAiE;oBACjE,8EAA8E;oBAC9E,mFAAmF;oBACnF,iBAAiB;oBACjB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,mFAAmF;oBACnF,iFAAiF;oBACjF,sFAAsF;oBACtF,qFAAqF;oBACrF,gFAAgF;oBAChF,oFAAoF;oBACpF,qCAAqC;oBACrC,4BAA4B,EAAE,uCAAuC,CACnE,ucAAuc,CACxc;iBACF;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EAAE;YAC7C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,qEAAqE;oBACrE,+DAA+D;oBAC/D,mEAAmE;oBACnE,iBAAiB;oBACjB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE;qBAC1D,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * User Profiles Shared Resource Configuration\n *\n * Resource configuration for user profile management operations.\n * Handles profile information like name, avatar, bio, contact details.\n */\n\nimport { z } from 'zod';\nimport { UserProfileSchema } from './users.shared.schemas';\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode, acknowledgeUnimplementedEngineOperation } from '../resources/resources-config.shared.schemas';\n\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// Custom operations enum for user profile management.\n//\n// There is deliberately no `verify_phone` here. Proving possession of a phone number is a\n// challenge/response against an issued code, and the framework already implements exactly that in\n// `AuthPhoneVerificationBackendService`: `CoreConsumableTokenTypes.PHONE_VERIFICATION` tokens\n// (single-use, 10-minute expiry, revoke-then-issue), a constant-time `timingSafeEqual` comparison,\n// an audit event on BOTH the success and the failure path, and the verified state persisted via\n// `setVerifiedPhone`. `AuthMethod.SMS_OTP` covers the same proof as a first-or-second auth factor\n// with its own rate limits and audit events. `USER_SELF_PROFILES` — the resource where a subject\n// edits their OWN profile — dropped its equivalent op for the same reason. A `verify_phone` on\n// THIS resource would be worse still: `USER_PROFILES` is the admin/directory surface, and an SMS\n// code proves possession by the phone's OWNER, not by the admin submitting it. Route phone-factor\n// work to the auth service, not to a second challenge store hanging off the profile row.\nexport enum UserProfiles_Operations {\n  UPDATE_AVATAR = 'update_avatar', // Update user avatar\n  REMOVE_AVATAR = 'remove_avatar', // Remove user avatar\n  UPDATE_CONTACT_INFO = 'update_contact_info', // Update contact information\n}\n\ntype UserProfilesCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.DELETE;\n\n/*\nUser Profiles Resource Configuration Factory\n*/\nexport const userProfilesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  typeof UserProfiles_Operations,\n  UserProfilesCoreOperations,\n  typeof UserProfileSchema\n>({\n  mainSchema: UserProfileSchema,\n  resourceIdentifier: CoreResourceType.USER_PROFILES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_PROFILES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  // Registration / invitation / SSO-JIT flows create a profile in-process with an\n  // explicit `userId` FK on a request-context-less EC, which the client-shaped\n  // CREATE DTO strips by name. Opt CREATE into the trusted `createAsSystem` path\n  // so `userId` is re-attached after the strict parse.\n  //\n  // UPDATE is opted into the same trust class: enterprise SSO + SCIM directory sync\n  // update profile attributes (EnterpriseUserProvisioningService.updateOrgUser) on a\n  // synthesised super-admin EC. Routing them through `updateAsSystem` keeps every\n  // trusted profile mutation on one fail-closed, policy-gated path and records the\n  // ACL-bypassing write in the SYSTEM_CONTEXT_WRITE audit trail (parity with reads).\n  systemAccessPolicy: {\n    exportSubject: ResourceSystemAccessMode.ALLOWED,\n    create: ResourceSystemAccessMode.ALLOWED,\n    update: ResourceSystemAccessMode.ALLOWED,\n  },\n\n  /**\n   * Subject-export disclosure. Admin door onto the same profile rows.\n   */\n  portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.SUBJECT_PROVIDED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.DELETE,\n  ],\n\n  customOperation: UserProfiles_Operations,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Users can read their own and others' profiles\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_VIEWER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // The default variant remains self-only. This explicit admission lets\n          // the separately role-gated administration variant address another\n          // user's profile without weakening the APP_USER route.\n          admitsCrossSubjectUserAdministration: true,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          searchableFields: ['firstName', 'lastName', 'displayName'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: {},\n          sortFields: ['firstName', 'lastName'],\n          maxPaginatedResultPerPageLimit: 50,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_VIEWER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          admitsCrossSubjectUserAdministration: true,\n          isSearchable: true,\n          searchableFields: ['firstName', 'lastName', 'displayName', 'phoneNumber'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: {},\n          sortFields: ['firstName', 'lastName'],\n          maxPaginatedResultPerPageLimit: 200,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Users can create their own profile\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          admitsCrossSubjectUserAdministration: true,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Users can update their own profile\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          admitsCrossSubjectUserAdministration: true,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Users can delete their own profile\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          admitsCrossSubjectUserAdministration: true,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [UserProfiles_Operations.UPDATE_AVATAR]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          resourceOperationLike: CoreResourceOperation.UPDATE,\n          // The profile schema owns the upload-only file reference contract.\n          // Reusing it prevents this convenience route from accepting an\n          // external URL that persistence cannot store as an avatar.\n          requestDto: z.object({\n            avatar: UserProfileSchema.shape.avatar.unwrap(),\n          }),\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [UserProfiles_Operations.REMOVE_AVATAR]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          resourceOperationLike: CoreResourceOperation.UPDATE,\n          // A verb whose entire job is to clear ONE field must not accept the whole profile.\n          // Omitting `requestDto` auto-derived the FULL profile update DTO\n          // (`{firstName, lastName, displayName, avatar, bio, phoneNumber, title}`), so\n          // \"remove_avatar\" was an unconstrained profile rewrite that never had to touch the\n          // avatar at all.\n          requestDto: z.object({}),\n          // Narrowing exposes that the clearing itself was never implemented — the overbroad\n          // contract was the only thing making this operation appear to write. Clearing an\n          // avatar is NOT a plain `{avatar: null}` patch: the field is `z_file(...).optional()`\n          // (not `.nullish()`), so a null would fail the response projection, and dropping the\n          // reference without releasing the stored object orphans the uploaded file. Both\n          // belong to the file-management pipeline, so this is acknowledged (and now refuses)\n          // rather than half-implemented here.\n          unimplementedAcknowledgement: acknowledgeUnimplementedEngineOperation(\n            'Clearing an avatar needs the file pipeline, not a field patch: `avatar` is `z_file(...).optional()`, so writing `null` fails the response projection (the field would first have to become `.nullish()` — a schema reshape with its own blast radius), and releasing the stored object requires the file-deletion path or the upload is orphaned. Implement alongside file management; until then this refuses instead of silently rewriting the rest of the profile.',\n          ),\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [UserProfiles_Operations.UPDATE_CONTACT_INFO]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          resourceOperationLike: CoreResourceOperation.UPDATE,\n          // A named \"update contact info\" call must perform a change; an empty\n          // body was previously accepted as a successful no-op. The same\n          // canonical phone schema now governs both the main update and this\n          // focused route.\n          requestDto: z.object({\n            phoneNumber: UserProfileSchema.shape.phoneNumber.unwrap(),\n          }),\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n  },\n});\n"]}

package/dist/esm/users/user-self-preferences.shared.resources-config.schemas.d.ts

@@ -5,67 +5,40 @@
  * Handles preferences that users can manage for themselves only.
  * Separated from USER_PREFERENCES for strict access control.
  */
-import { z } from 'zod';
-import { UserTheme } from './users.shared.schemas.js';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
 export declare enum UserSelfPreferences_Operations {
-    UPDATE_NOTIFICATIONS = "update_notifications",// Update notification preferences
-    UPDATE_PRIVACY = "update_privacy",// Update privacy settings
-    UPDATE_UI_THEME = "update_ui_theme",// Update UI and theme preferences
-    UPDATE_REGIONAL = "update_regional",// Update regional/locale preferences
-    UPDATE_LANGUAGE = "update_language",// Update language preferences
-    RESET_TO_DEFAULTS = "reset_to_defaults",// Reset all preferences to defaults
-    EXPORT_PREFERENCES = "export_preferences",// Export user preferences
-    TOGGLE_DARK_MODE = "toggle_dark_mode"
+    RESET_TO_DEFAULTS = "reset_to_defaults"
 }
-type UserSelfPreferencesCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE;
-export declare const userSelfPreferencesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<typeof UserSelfPreferences_Operations, UserSelfPreferencesCoreOperations, z.ZodObject<{
-    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
-    notifications: z.ZodDefault<z.ZodObject<{
-        email: z.ZodDefault<z.ZodBoolean>;
-        push: z.ZodDefault<z.ZodBoolean>;
-        sms: z.ZodDefault<z.ZodBoolean>;
-        inApp: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip, core.$ZodObjectExtra>>;
-    privacy: z.ZodDefault<z.ZodObject<{
-        dataProcessingConsent: z.ZodDefault<z.ZodEnum<typeof import("../index.js").DataProcessingConsent>>;
-        privacyLevel: z.ZodDefault<z.ZodEnum<typeof import("../index.js").PrivacyLevel>>;
-        termsOfUseApproval: z.ZodDefault<z.ZodObject<{
-            accepted: z.ZodDefault<z.ZodBoolean>;
-            acceptedAt: z.ZodOptional<z.ZodISODateTime>;
-            acceptedVersion: z.ZodOptional<z.ZodString>;
-            ipAddress: z.ZodOptional<z.ZodIPv4>;
-        }, z.core.$strip, core.$ZodObjectExtra>>;
-        privacyPolicyApproval: z.ZodDefault<z.ZodObject<{
-            accepted: z.ZodDefault<z.ZodBoolean>;
-            acceptedAt: z.ZodOptional<z.ZodISODateTime>;
-            acceptedVersion: z.ZodOptional<z.ZodString>;
-            ipAddress: z.ZodOptional<z.ZodIPv4>;
-        }, z.core.$strip, core.$ZodObjectExtra>>;
-        dataProcessingAgreementApproval: z.ZodDefault<z.ZodObject<{
-            accepted: z.ZodDefault<z.ZodBoolean>;
-            acceptedAt: z.ZodOptional<z.ZodISODateTime>;
-            acceptedVersion: z.ZodOptional<z.ZodString>;
-            ipAddress: z.ZodOptional<z.ZodIPv4>;
-        }, z.core.$strip, core.$ZodObjectExtra>>;
-    }, z.core.$strip, core.$ZodObjectExtra>>;
-    ui: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
-        theme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodEnum<typeof UserTheme>>>;
-    }, z.core.$strip, core.$ZodObjectExtra>>>;
-    regional: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
-        timezone: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/presets-components-models").CommonTimezone>, z.ZodString]>>>;
-        dateFormat: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").DateFormat>>>;
-        timeFormat: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").TimeFormat>>>;
-        locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
-    }, z.core.$strip, core.$ZodObjectExtra>>>;
-    languagePreferences: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
-        primaryLanguage: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
-        fallbackLanguages: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
-        autoDetect: z.ZodDefault<z.ZodBoolean>;
-        useOrganizationDefault: z.ZodDefault<z.ZodBoolean>;
-    }, z.core.$strip, core.$ZodObjectExtra>>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+type UserSelfPreferencesCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.UPDATE;
+export declare const userSelfPreferencesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<typeof UserSelfPreferences_Operations, UserSelfPreferencesCoreOperations, import("zod").ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>>>;
+    notifications: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodObject<{
+        email: import("zod").ZodDefault<import("zod").ZodBoolean>;
+        push: import("zod").ZodDefault<import("zod").ZodBoolean>;
+        sms: import("zod").ZodDefault<import("zod").ZodBoolean>;
+        inApp: import("zod").ZodDefault<import("zod").ZodBoolean>;
+    }, import("zod/v4/core").$strip>>>;
+    privacy: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodObject<{
+        dataProcessingConsent: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodEnum<typeof import("..").DataProcessingConsent>>>;
+        privacyLevel: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodEnum<typeof import("..").PrivacyLevel>>>;
+    }, import("zod/v4/core").$strip>>>;
+    ui: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodObject<{
+        theme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodEnum<typeof import("./users.shared.schemas").UserTheme>>>;
+    }, import("zod/v4/core").$strip>>>;
+    regional: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodObject<{
+        timezone: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodUnion<[import("zod").ZodEnum<typeof import("@wildo-ai/presets-components-models").CommonTimezone>, import("zod").ZodString]>>>;
+        dateFormat: import("zod").ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("@wildo-ai/presets-components-models").DateFormat>>>;
+        timeFormat: import("zod").ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("@wildo-ai/presets-components-models").TimeFormat>>>;
+        locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+    }, import("zod/v4/core").$strip>>>>;
+    languagePreferences: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodObject<{
+        primaryLanguage: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+        fallbackLanguages: import("zod").ZodDefault<import("zod").ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>>;
+        autoDetect: import("zod").ZodDefault<import("zod").ZodBoolean>;
+        useOrganizationDefault: import("zod").ZodDefault<import("zod").ZodBoolean>;
+    }, import("zod/v4/core").$strip>>>>;
+}, import("zod/v4/core").$strip>>;
 export {};
 //# sourceMappingURL=user-self-preferences.shared.resources-config.schemas.d.ts.map

package/dist/esm/users/user-self-preferences.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-self-preferences.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/users/user-self-preferences.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,SAAS,EACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUzG,oBAAY,8BAA8B;IACxC,oBAAoB,yBAAyB,CAAE,kCAAkC;IACjF,cAAc,mBAAmB,CAAE,0BAA0B;IAC7D,eAAe,oBAAoB,CAAE,kCAAkC;IACvE,eAAe,oBAAoB,CAAE,qCAAqC;IAC1E,eAAe,oBAAoB,CAAE,8BAA8B;IACnE,iBAAiB,sBAAsB,CAAE,oCAAoC;IAC7E,kBAAkB,uBAAuB,CAAE,0BAA0B;IACrE,gBAAgB,qBAAqB;CACtC;AAED,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA6O3H,CAAC"}
+{"version":3,"file":"user-self-preferences.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/user-self-preferences.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAgBzG,oBAAY,8BAA8B;IACxC,iBAAiB,sBAAsB;CACxC;AAED,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA6G3H,CAAC"}