@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/users/user-self-preferences.shared.resources-config.schemas.js

@@ -5,8 +5,8 @@
  * Handles preferences that users can manage for themselves only.
  * Separated from USER_PREFERENCES for strict access control.
  */
-import { z } from 'zod';
-import { UserPreferencesSchema, UserPreferences_NotificationsSchema, UserPreferences_UI_ThemeSchema, UserPreferences_RegionalSchema, UserLanguagePreferencesSchema, UserTheme } from './users.shared.schemas.js';
+import { UserPreferencesSchema, } from './users.shared.schemas.js';
+import { buildUserPreferencesResetPatch, UserPreferencesResetRequestSchema } from './user-preferences-reset.shared.utils.js';
 import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel } from '../resources/resources.shared.schemas.js';
 import { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
@@ -14,17 +14,16 @@ import { ResourceOperationVariantType } from '../resources/resources.shared.sche
 import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
 import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
-// Custom operations enum for user self preferences management
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas.js';
+// Custom operations enum for user self preferences management.
+// Granular per-section update ops (notifications / privacy / ui-theme / regional /
+// language / dark-mode toggle) were removed: editing happens through the generic
+// UPDATE form, and theme/dark-mode live in the Appearance panel — not as resource
+// operations. Only the genuinely-distinct action remains.
 export var UserSelfPreferences_Operations;
 (function (UserSelfPreferences_Operations) {
-    UserSelfPreferences_Operations["UPDATE_NOTIFICATIONS"] = "update_notifications";
-    UserSelfPreferences_Operations["UPDATE_PRIVACY"] = "update_privacy";
-    UserSelfPreferences_Operations["UPDATE_UI_THEME"] = "update_ui_theme";
-    UserSelfPreferences_Operations["UPDATE_REGIONAL"] = "update_regional";
-    UserSelfPreferences_Operations["UPDATE_LANGUAGE"] = "update_language";
     UserSelfPreferences_Operations["RESET_TO_DEFAULTS"] = "reset_to_defaults";
-    UserSelfPreferences_Operations["EXPORT_PREFERENCES"] = "export_preferences";
-    UserSelfPreferences_Operations["TOGGLE_DARK_MODE"] = "toggle_dark_mode";
 })(UserSelfPreferences_Operations || (UserSelfPreferences_Operations = {}));
 /*
 User Self Preferences Resource Configuration Factory
@@ -35,10 +34,17 @@ export const userSelfPreferencesResourceConfiguration_InitializationFactory = (r
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_SELF_PREFERENCES],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true, // Self-scoped resource - same user context
+    /**
+     * Subject-export disclosure. Settings the user chose.
+     */
+    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },
+    /**
+     * Subject-export disclosure. Settings the user chose.
+     */
+    portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.SUBJECT_PROVIDED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.UPDATE,
-        CoreResourceOperation.CREATE,
     ],
     customOperation: UserSelfPreferences_Operations,
     operationsConfiguration: {
@@ -49,23 +55,15 @@ export const userSelfPreferencesResourceConfiguration_InitializationFactory = (r
                     isDefault: true,
                     roles: [CORE_APP_ROLES.APP_USER], // Only self can read their own preferences
                     riskLevel: ResourceOperationRiskLevel.LOW,
-                }
-            ]
-        },
-        [CoreResourceOperation.CREATE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER], // Only self can create their own preferences
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    // requestDto auto-derived from decorators
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
+                    // MCP: exposed to a USER-DELEGATED agent caller only. A machine principal carries no
+                    // `userId`, so this USER_SELF operation is not in its reachable scope set and is never
+                    // advertised to it. The record resolves to the CALLER's own preferences (the execution
+                    // context is scoped by the authenticated `userId`), so an agent can read the preferences
+                    // of the user who consented — never another user's.
+                    mcp: {
+                        exposed: true,
+                        description: 'Read the preferences of the user you are acting for (locale, timezone, theme, notification settings). Returns only that user\'s own preferences.',
+                    },
                 }
             ]
         },
@@ -77,118 +75,12 @@ export const userSelfPreferencesResourceConfiguration_InitializationFactory = (r
                     roles: [CORE_APP_ROLES.APP_USER], // Only self can update their own preferences
                     riskLevel: ResourceOperationRiskLevel.LOW,
                     // requestDto auto-derived from decorators
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.UPDATE_NOTIFICATIONS]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: UserPreferences_NotificationsSchema.partial(),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.UPDATE_PRIVACY]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM, // Privacy settings are more sensitive
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        privacy: z.any().optional(), // Using UserPrivacySchema from the main schema
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.UPDATE_UI_THEME]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: UserPreferences_UI_ThemeSchema.partial(),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.UPDATE_REGIONAL]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: UserPreferences_RegionalSchema.partial(),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.UPDATE_LANGUAGE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: UserLanguagePreferencesSchema.partial(),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.TOGGLE_DARK_MODE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        theme: z.enum(UserTheme).optional(),
-                    }),
+                    // MCP: same USER-DELEGATED-only exposure as READ above. The write targets the CALLER's own
+                    // preferences record; a machine principal never sees this tool.
+                    mcp: {
+                        exposed: true,
+                        description: 'Update the preferences of the user you are acting for (e.g. locale, timezone, theme, notification settings). Only supply the fields being changed; affects only that user\'s own preferences.',
+                    },
                 }
             ],
             userNotifications: [
@@ -204,41 +96,23 @@ export const userSelfPreferencesResourceConfiguration_InitializationFactory = (r
                     variantType: ResourceOperationVariantType.API_CALL,
                     isDefault: true,
                     roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
+                    // CRITICAL: a full/selective reset wipes the user's preferences — it must
+                    // require an explicit double-validation confirmation (see the framework
+                    // topics plan: settings-hub-framework-topics.md).
+                    riskLevel: ResourceOperationRiskLevel.CRITICAL,
                     resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        resetNotifications: z.boolean().default(false),
-                        resetPrivacy: z.boolean().default(false),
-                        resetUI: z.boolean().default(false),
-                        resetRegional: z.boolean().default(false),
-                        resetLanguage: z.boolean().default(false),
-                        resetAll: z.boolean().default(false),
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfPreferences_Operations.EXPORT_PREFERENCES]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.READ,
-                    requestDto: z.object({
-                        format: z.enum(['json', 'yaml']).default('json'),
-                    }),
-                    customResponseDto: z.object({
-                        downloadUrl: z.url(),
-                        expiresAt: z.date(),
-                        fileSize: z.number(),
-                    }),
+                    // The caller names WHICH blocks to reset, from the closed `UserPreferenceGroup`
+                    // vocabulary whose values ARE the persisted field names. It previously declared six
+                    // booleans (`resetNotifications`, `resetAll`, …) which name no schema path, so the
+                    // whole request was stripped — by the controller DTO parse, the repository re-parse,
+                    // and Mongoose strict — and the route answered 200 having reset nothing.
+                    requestDto: UserPreferencesResetRequestSchema,
+                    basicPrefixOperation: ({ inputDto, currentObject }) => buildUserPreferencesResetPatch(
+                    // `inputDto` is typed as the resource main schema while the runtime value is this
+                    // operation's request DTO, so re-parse rather than cast — the same idiom the
+                    // Wonder Todos `set_as_recurring` prefix uses. Doubles as a fail-closed guard on
+                    // any non-HTTP path that reached dispatch without the controller's parse.
+                    UserPreferencesResetRequestSchema.parse(inputDto), currentObject),
                 }
             ],
             userNotifications: [
@@ -250,4 +124,4 @@ export const userSelfPreferencesResourceConfiguration_InitializationFactory = (r
         }
     },
 });
-//# sourceMappingURL=user-self-preferences.shared.resources-config.schemas.js.map
+//# sourceMappingURL=user-self-preferences.shared.resources-config.schemas.js.map

package/dist/esm/users/user-self-preferences.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-self-preferences.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/users/user-self-preferences.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,mCAAmC,EACnC,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,EAC7B,SAAS,EACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,8DAA8D;AAC9D,MAAM,CAAN,IAAY,8BASX;AATD,WAAY,8BAA8B;IACxC,+EAA6C,CAAA;IAC7C,mEAAiC,CAAA;IACjC,qEAAmC,CAAA;IACnC,qEAAmC,CAAA;IACnC,qEAAmC,CAAA;IACnC,yEAAuC,CAAA;IACvC,2EAAyC,CAAA;IACzC,uEAAqC,CAAA;AACvC,CAAC,EATW,8BAA8B,KAA9B,8BAA8B,QASzC;AAOD;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,qBAAqB;IACjC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,2CAA2C;IAEnE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,8BAA8B;IAE/C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,2CAA2C;oBAC7E,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,6CAA6C;oBAC/E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,6CAA6C;oBAC/E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,oBAAoB,CAAC,EAAE;YACrD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,mCAAmC,CAAC,OAAO,EAAE;iBAC1D;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM,EAAE,sCAAsC;oBACpF,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,+CAA+C;qBAC7E,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,8BAA8B,CAAC,OAAO,EAAE;iBACrD;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,8BAA8B,CAAC,OAAO,EAAE;iBACrD;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,6BAA6B,CAAC,OAAO,EAAE;iBACpD;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,gBAAgB,CAAC,EAAE;YACjD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;qBACpC,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,EAAE;YAClD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;wBAC9C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;wBACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;wBACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;wBACzC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;wBACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;qBACrC,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,kBAAkB,CAAC,EAAE;YACnD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,IAAI;oBACjD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;qBACjD,CAAC;oBACF,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC1B,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE;wBACpB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;wBACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;qBACrB,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"user-self-preferences.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/users/user-self-preferences.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1H,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAEhG,+DAA+D;AAC/D,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,0DAA0D;AAC1D,MAAM,CAAN,IAAY,8BAEX;AAFD,WAAY,8BAA8B;IACxC,yEAAuC,CAAA;AACzC,CAAC,EAFW,8BAA8B,KAA9B,8BAA8B,QAEzC;AAMD;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,qBAAqB;IACjC,kBAAkB,EAAE,gBAAgB,CAAC,qBAAqB;IAC1D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;IACnG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,2CAA2C;IAEnE;;OAEG;IACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAEvE;;OAEG;IACH,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,gBAAgB,EAAE;IAEpF,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,8BAA8B;IAE/C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,2CAA2C;oBAC7E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qFAAqF;oBACrF,uFAAuF;oBACvF,uFAAuF;oBACvF,yFAAyF;oBACzF,oDAAoD;oBACpD,GAAG,EAAE;wBACH,OAAO,EAAE,IAAI;wBACb,WAAW,EAAE,kJAAkJ;qBAChK;iBACF;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,6CAA6C;oBAC/E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;oBAC1C,2FAA2F;oBAC3F,gEAAgE;oBAChE,GAAG,EAAE;wBACH,OAAO,EAAE,IAAI;wBACb,WAAW,EAAE,+LAA+L;qBAC7M;iBACF;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,EAAE;YAClD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,0EAA0E;oBAC1E,wEAAwE;oBACxE,kDAAkD;oBAClD,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,gFAAgF;oBAChF,oFAAoF;oBACpF,mFAAmF;oBACnF,qFAAqF;oBACrF,yEAAyE;oBACzE,UAAU,EAAE,iCAAiC;oBAC7C,oBAAoB,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,CACpD,8BAA8B;oBAC5B,kFAAkF;oBAClF,6EAA6E;oBAC7E,iFAAiF;oBACjF,0EAA0E;oBAC1E,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,EACjD,aAAa,CACd;iBACJ;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * User Self Preferences Shared Resource Configuration\n *\n * Resource configuration for user self preferences management operations.\n * Handles preferences that users can manage for themselves only.\n * Separated from USER_PREFERENCES for strict access control.\n */\n\nimport {\n  UserPreferencesSchema,\n} from './users.shared.schemas';\nimport { buildUserPreferencesResetPatch, UserPreferencesResetRequestSchema } from './user-preferences-reset.shared.utils';\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// Custom operations enum for user self preferences management.\n// Granular per-section update ops (notifications / privacy / ui-theme / regional /\n// language / dark-mode toggle) were removed: editing happens through the generic\n// UPDATE form, and theme/dark-mode live in the Appearance panel — not as resource\n// operations. Only the genuinely-distinct action remains.\nexport enum UserSelfPreferences_Operations {\n  RESET_TO_DEFAULTS = 'reset_to_defaults', // Reset all preferences to defaults\n}\n\ntype UserSelfPreferencesCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.UPDATE;\n\n/*\nUser Self Preferences Resource Configuration Factory\n*/\nexport const userSelfPreferencesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  typeof UserSelfPreferences_Operations,\n  UserSelfPreferencesCoreOperations,\n  typeof UserPreferencesSchema\n>({\n  mainSchema: UserPreferencesSchema,\n  resourceIdentifier: CoreResourceType.USER_SELF_PREFERENCES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_SELF_PREFERENCES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true, // Self-scoped resource - same user context\n\n  /**\n   * Subject-export disclosure. Settings the user chose.\n   */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },\n\n  /**\n   * Subject-export disclosure. Settings the user chose.\n   */\n  portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.SUBJECT_PROVIDED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.UPDATE,\n  ],\n\n  customOperation: UserSelfPreferences_Operations,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Only self can read their own preferences\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // MCP: exposed to a USER-DELEGATED agent caller only. A machine principal carries no\n          // `userId`, so this USER_SELF operation is not in its reachable scope set and is never\n          // advertised to it. The record resolves to the CALLER's own preferences (the execution\n          // context is scoped by the authenticated `userId`), so an agent can read the preferences\n          // of the user who consented — never another user's.\n          mcp: {\n            exposed: true,\n            description: 'Read the preferences of the user you are acting for (locale, timezone, theme, notification settings). Returns only that user\\'s own preferences.',\n          },\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Only self can update their own preferences\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n          // MCP: same USER-DELEGATED-only exposure as READ above. The write targets the CALLER's own\n          // preferences record; a machine principal never sees this tool.\n          mcp: {\n            exposed: true,\n            description: 'Update the preferences of the user you are acting for (e.g. locale, timezone, theme, notification settings). Only supply the fields being changed; affects only that user\\'s own preferences.',\n          },\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [UserSelfPreferences_Operations.RESET_TO_DEFAULTS]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          // CRITICAL: a full/selective reset wipes the user's preferences — it must\n          // require an explicit double-validation confirmation (see the framework\n          // topics plan: settings-hub-framework-topics.md).\n          riskLevel: ResourceOperationRiskLevel.CRITICAL,\n          resourceOperationLike: CoreResourceOperation.UPDATE,\n          // The caller names WHICH blocks to reset, from the closed `UserPreferenceGroup`\n          // vocabulary whose values ARE the persisted field names. It previously declared six\n          // booleans (`resetNotifications`, `resetAll`, …) which name no schema path, so the\n          // whole request was stripped — by the controller DTO parse, the repository re-parse,\n          // and Mongoose strict — and the route answered 200 having reset nothing.\n          requestDto: UserPreferencesResetRequestSchema,\n          basicPrefixOperation: ({ inputDto, currentObject }) =>\n            buildUserPreferencesResetPatch(\n              // `inputDto` is typed as the resource main schema while the runtime value is this\n              // operation's request DTO, so re-parse rather than cast — the same idiom the\n              // Wonder Todos `set_as_recurring` prefix uses. Doubles as a fail-closed guard on\n              // any non-HTTP path that reached dispatch without the controller's parse.\n              UserPreferencesResetRequestSchema.parse(inputDto),\n              currentObject,\n            ),\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    }\n  },\n});\n"]}

package/dist/esm/users/user-self-profiles.shared.resources-config.schemas.d.ts

@@ -5,27 +5,19 @@
  * Handles profile information that users can manage for themselves only.
  * Separated from USER_PROFILES for strict access control.
  */
-import { z } from 'zod';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
-export declare enum UserSelfProfiles_Operations {
-    UPDATE_AVATAR = "update_avatar",// Update user avatar
-    REMOVE_AVATAR = "remove_avatar",// Remove user avatar
-    UPDATE_CONTACT_INFO = "update_contact_info",// Update contact information
-    VERIFY_PHONE = "verify_phone",// Verify phone number
-    UPDATE_PERSONAL_INFO = "update_personal_info"
-}
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
 type UserSelfProfilesCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE;
-export declare const userSelfProfilesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<typeof UserSelfProfiles_Operations, UserSelfProfilesCoreOperations, z.ZodObject<{
-    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
-    firstName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
-    lastName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
-    displayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
-    avatar: z.ZodOptional<z.ZodURL>;
-    bio: z.ZodOptional<z.ZodString>;
-    phoneNumber: z.ZodOptional<z.ZodString>;
-    title: z.ZodOptional<z.ZodString>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+export declare const userSelfProfilesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, UserSelfProfilesCoreOperations, import("zod").ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>>>>;
+    firstName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    lastName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    displayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>>;
+    avatar: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedMultipleFileSchema>> | import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedFileSchema>>;
+    bio: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>;
+    phoneNumber: import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPhoneSchema>;
+    title: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodOptional<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>>;
 export {};
 //# sourceMappingURL=user-self-profiles.shared.resources-config.schemas.d.ts.map

package/dist/esm/users/user-self-profiles.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-self-profiles.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/users/user-self-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUzG,oBAAY,2BAA2B;IACrC,aAAa,kBAAkB,CAAE,qBAAqB;IACtD,aAAa,kBAAkB,CAAE,qBAAqB;IACtD,mBAAmB,wBAAwB,CAAE,6BAA6B;IAC1E,YAAY,iBAAiB,CAAE,sBAAsB;IACrD,oBAAoB,yBAAyB;CAC9C;AAED,KAAK,8BAA8B,GAC/B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,2DAA2D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;wCAmLxH,CAAC"}
+{"version":3,"file":"user-self-profiles.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/user-self-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAezG,KAAK,8BAA8B,GAC/B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,2DAA2D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;iCA6ExH,CAAC"}

package/dist/esm/users/user-self-profiles.shared.resources-config.schemas.js

@@ -5,7 +5,6 @@
  * Handles profile information that users can manage for themselves only.
  * Separated from USER_PROFILES for strict access control.
  */
-import { z } from 'zod';
 import { UserProfileSchema } from './users.shared.schemas.js';
 import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationRiskLevel } from '../resources/resources.shared.schemas.js';
@@ -14,15 +13,8 @@ import { ResourceOperationVariantType } from '../resources/resources.shared.sche
 import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
 import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
-// Custom operations enum for user self profile management
-export var UserSelfProfiles_Operations;
-(function (UserSelfProfiles_Operations) {
-    UserSelfProfiles_Operations["UPDATE_AVATAR"] = "update_avatar";
-    UserSelfProfiles_Operations["REMOVE_AVATAR"] = "remove_avatar";
-    UserSelfProfiles_Operations["UPDATE_CONTACT_INFO"] = "update_contact_info";
-    UserSelfProfiles_Operations["VERIFY_PHONE"] = "verify_phone";
-    UserSelfProfiles_Operations["UPDATE_PERSONAL_INFO"] = "update_personal_info";
-})(UserSelfProfiles_Operations || (UserSelfProfiles_Operations = {}));
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas.js';
 /*
 User Self Profiles Resource Configuration Factory
 */
@@ -32,12 +24,20 @@ export const userSelfProfilesResourceConfiguration_InitializationFactory = (reso
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_SELF_PROFILES],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true, // Self-scoped resource - same user context
+    /**
+     * Subject-export disclosure. Name, bio, avatar — supplied by the user.
+     */
+    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },
+    /**
+     * Subject-export disclosure. Name, bio, avatar — supplied by the user.
+     */
+    portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.SUBJECT_PROVIDED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.UPDATE,
         CoreResourceOperation.CREATE,
     ],
-    customOperation: UserSelfProfiles_Operations,
+    customOperation: {},
     operationsConfiguration: {
         [CoreResourceOperation.READ]: {
             variants: [
@@ -83,113 +83,6 @@ export const userSelfProfilesResourceConfiguration_InitializationFactory = (reso
                 }
             ]
         },
-        [UserSelfProfiles_Operations.UPDATE_AVATAR]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        avatar: z.url(),
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfProfiles_Operations.REMOVE_AVATAR]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfProfiles_Operations.UPDATE_CONTACT_INFO]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        phoneNumber: z.string()
-                            .regex(/^\+?[1-9]\d{1,14}$/, 'Invalid phone number format')
-                            .optional(),
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        },
-        [UserSelfProfiles_Operations.VERIFY_PHONE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        verificationCode: z.string().min(4).max(10),
-                    }),
-                    customResponseDto: z.object({
-                        verified: z.boolean(),
-                        verifiedAt: z.date().optional(),
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.SMS,
-                }
-            ]
-        },
-        [UserSelfProfiles_Operations.UPDATE_PERSONAL_INFO]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_USER],
-                    riskLevel: ResourceOperationRiskLevel.LOW,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        firstName: z.string().min(1).max(50).optional(),
-                        lastName: z.string().min(1).max(50).optional(),
-                        displayName: z.string().max(100).optional(),
-                        bio: z.string().max(500).optional(),
-                        title: z.string().max(100).optional()
-                    }),
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.USER_SELF,
-                    channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,
-                }
-            ]
-        }
     },
 });
-//# sourceMappingURL=user-self-profiles.shared.resources-config.schemas.js.map
+//# sourceMappingURL=user-self-profiles.shared.resources-config.schemas.js.map

package/dist/esm/users/user-self-profiles.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-self-profiles.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/users/user-self-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,0DAA0D;AAC1D,MAAM,CAAN,IAAY,2BAMX;AAND,WAAY,2BAA2B;IACrC,8DAA+B,CAAA;IAC/B,8DAA+B,CAAA;IAC/B,0EAA2C,CAAA;IAC3C,4DAA6B,CAAA;IAC7B,4EAA6C,CAAA;AAC/C,CAAC,EANW,2BAA2B,KAA3B,2BAA2B,QAMtC;AAOD;;EAEE;AACF,MAAM,CAAC,MAAM,2DAA2D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAIvK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB;IACvD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;IAChG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,2CAA2C;IAEnE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,2BAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,uCAAuC;oBACzE,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,yCAAyC;oBAC3E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,yCAAyC;oBAC3E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,2BAA2B,CAAC,aAAa,CAAC,EAAE;YAC3C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE;qBAChB,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,2BAA2B,CAAC,aAAa,CAAC,EAAE;YAC3C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;iBACpD;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,2BAA2B,CAAC,mBAAmB,CAAC,EAAE;YACjD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;6BACpB,KAAK,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;6BAC1D,QAAQ,EAAE;qBACd,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,2BAA2B,CAAC,YAAY,CAAC,EAAE;YAC1C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;qBAC5C,CAAC;oBACF,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;wBACrB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;qBAChC,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,GAAG;iBACzC;aACF;SACF;QAED,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,EAAE;YAClD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;wBAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;wBAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;wBAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;wBACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;qBACtC,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"user-self-profiles.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/users/user-self-profiles.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAWhG;;EAEE;AACF,MAAM,CAAC,MAAM,2DAA2D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAIvK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB;IACvD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;IAChG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,2CAA2C;IAEnE;;OAEG;IACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAEvE;;OAEG;IACH,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,gBAAgB,EAAE;IAEpF,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,uCAAuC;oBACzE,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,yCAAyC;oBAC3E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,yCAAyC;oBAC3E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * User Self Profiles Shared Resource Configuration\n *\n * Resource configuration for user self profile management operations.\n * Handles profile information that users can manage for themselves only.\n * Separated from USER_PROFILES for strict access control.\n */\n\nimport { UserProfileSchema } from './users.shared.schemas';\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// USER_SELF_PROFILES has NO custom operations — profile fields are edited through\n// the generic UPDATE form. The former granular update ops (avatar / contact info /\n// phone verify / personal info) were removed as redundant with UPDATE; phone-factor\n// MFA lives in the Security panel's enrollment flow, not on this resource.\ntype UserSelfProfilesCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.CREATE;\n\n/*\nUser Self Profiles Resource Configuration Factory\n*/\nexport const userSelfProfilesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  UserSelfProfilesCoreOperations,\n  typeof UserProfileSchema\n>({\n  mainSchema: UserProfileSchema,\n  resourceIdentifier: CoreResourceType.USER_SELF_PROFILES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_SELF_PROFILES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true, // Self-scoped resource - same user context\n\n  /**\n   * Subject-export disclosure. Name, bio, avatar — supplied by the user.\n   */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },\n\n  /**\n   * Subject-export disclosure. Name, bio, avatar — supplied by the user.\n   */\n  portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.SUBJECT_PROVIDED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.CREATE,\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Only self can read their own profile\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Only self can create their own profile\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER], // Only self can update their own profile\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n  },\n});\n"]}

package/dist/esm/users/user-self.shared.resources-config.schemas.d.ts

@@ -5,28 +5,24 @@
  * Handles profile management, preferences, and personal data operations.
  */
 import { z } from 'zod';
-import { UserStatus } from './users.shared.schemas.js';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
-import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
+import { UserStatus } from './users.shared.schemas';
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
+import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';
 export declare enum UserSelf_Operations {
-    UPDATE_PROFILE = "update_profile",// Update user profile information
-    UPDATE_PREFERENCES = "update_preferences",// Update user preferences
-    CHANGE_PASSWORD = "change_password",// Change user password
-    DELETE_ACCOUNT = "delete_account",// Self-delete account
-    EXPORT_DATA = "export_data",// Export personal data (GDPR)
     DEACTIVATE_ACCOUNT = "deactivate_account",// Temporarily deactivate account
     REACTIVATE_ACCOUNT = "reactivate_account"
 }
-type UserSelfCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.UPDATE;
-export declare const userSelfResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<typeof UserSelf_Operations, UserSelfCoreOperations, z.ZodObject<{
+type UserSelfCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.UPDATE | CoreResourceOperation.UPDATE_MANY;
+export declare const userSelfResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<typeof UserSelf_Operations, UserSelfCoreOperations, z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    email: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEmail>>>;
-    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodEnum<typeof UserStatus>>>>;
-    appRoles: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof CORE_APP_ROLES>, z.ZodString]>>>>;
-    userTypes: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    email: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEmail>>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodEnum<typeof UserStatus>>>>>>;
+    appRoles: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof CORE_APP_ROLES>, z.ZodString]>>>>>;
+    userTypes: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>>;
+    scheduledReactivationAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>>;
     createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>>;
     updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip>>;
 export {};
 //# sourceMappingURL=user-self.shared.resources-config.schemas.d.ts.map

package/dist/esm/users/user-self.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-self.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/users/user-self.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,UAAU,EAEX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAOzG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAGjF,oBAAY,mBAAmB;IAC7B,cAAc,mBAAmB,CAAE,kCAAkC;IACrE,kBAAkB,uBAAuB,CAAE,0BAA0B;IACrE,eAAe,oBAAoB,CAAE,uBAAuB;IAC5D,cAAc,mBAAmB,CAAE,sBAAsB;IACzD,WAAW,gBAAgB,CAAE,8BAA8B;IAC3D,kBAAkB,uBAAuB,CAAE,iCAAiC;IAC5E,kBAAkB,uBAAuB;CAC1C;AAED,KAAK,sBAAsB,GACvB,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,mDAAmD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;wCAyNhH,CAAC"}
+{"version":3,"file":"user-self.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/users/user-self.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAc,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAQzG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AA2FjF,oBAAY,mBAAmB;IAC7B,kBAAkB,uBAAuB,CAAE,iCAAiC;IAC5E,kBAAkB,uBAAuB;CAC1C;AAED,KAAK,sBAAsB,GACvB,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAKtC,eAAO,MAAM,mDAAmD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;kBA2RhH,CAAC"}