npm - @wildo-ai/saas-models - Versions diffs - 1.0.1 → 1.1.0 - Mend

@wildo-ai/saas-models 1.0.1 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1282) hide show

package/dist/esm/applications/applications-context.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"applications-context.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAI9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
1	+ {"version":3,"file":"applications-context.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/esm/applications/applications-context.schemas.js CHANGED Viewed

@@ -11,4 +11,4 @@ export const ApplicationContextSchema = ApplicationSchema.extend({
     metadata: ApplicationMetadataSchema,
     appFrontendConfig: AppConfiguration_Shared_Schema.optional(),
 });
-//# sourceMappingURL=applications-context.schemas.js.map
+//# sourceMappingURL=applications-context.schemas.js.map

package/dist/esm/applications/applications-context.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"applications-context.schemas.js","sourceRoot":"","sources":["~~../../../~~src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACvH,OAAO,EAAE,8BAA8B,EAAE,MAAM,mDAAmD,CAAC;AAGnG,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACxE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC3C,kCAAkC,EAAE,8BAA8B;IAClE,QAAQ,EAAE,yBAAyB;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC7D,aAAa,EAAE,wBAAwB;IACvC,QAAQ,EAAE,yBAAyB;IACnC,iBAAiB,EAAE,8BAA8B,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC"}
1	+ {"version":3,"file":"applications-context.schemas.js","sourceRoot":"","sources":["../../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACvH,OAAO,EAAE,8BAA8B,EAAE,MAAM,mDAAmD,CAAC;AAGnG,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACxE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC3C,kCAAkC,EAAE,8BAA8B;IAClE,QAAQ,EAAE,yBAAyB;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC7D,aAAa,EAAE,wBAAwB;IACvC,QAAQ,EAAE,yBAAyB;IACnC,iBAAiB,EAAE,8BAA8B,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { ApplicationSchema, ApplicationVersionSchema, ApplicationMetadataSchema } from \"./applications.shared.schemas\";\nimport { AppConfiguration_Shared_Schema } from \"../config/app-configuration-shared.shared.schemas\";\n\n\nexport const ApplicationFullCurrentContextSchema = ApplicationSchema.extend({\n versions: z.array(ApplicationVersionSchema),\n AppConfiguration_Shared_App_Schema: AppConfiguration_Shared_Schema,\n metadata: ApplicationMetadataSchema,\n});\n\nexport type ApplicationFullCurrentContext = z.infer<typeof ApplicationFullCurrentContextSchema>;\n\nexport const ApplicationContextSchema = ApplicationSchema.extend({\n versionObject: ApplicationVersionSchema,\n metadata: ApplicationMetadataSchema,\n appFrontendConfig: AppConfiguration_Shared_Schema.optional(),\n});\n\nexport type ApplicationContext = z.infer<typeof ApplicationContextSchema>;\n"]}

package/dist/esm/applications/applications.shared.resources-config.schemas.d.ts CHANGED Viewed

@@ -5,20 +5,15 @@
  * Supports both organization self-management and platform admin oversight.
  */
 import { z } from 'zod';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
-export declare enum Application_Operations {
-    ACTIVATE = "activate",
-    SUSPEND = "suspend",
-    TRANSFER = "transfer"
-}
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
 type ApplicationCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH | CoreResourceOperation.CREATE | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
-export declare const applicationResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<typeof Application_Operations, ApplicationCoreOperations, z.ZodObject<{
+export declare const applicationResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, ApplicationCoreOperations, z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     appSlug: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
     appDisplayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     lastVersion: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
     platformAppId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip>>;
 export {};
 //# sourceMappingURL=applications.shared.resources-config.schemas.d.ts.map

package/dist/esm/applications/applications.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"applications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,~~EAAwB~~,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;~~AAQnG~~,~~oBAAY,sBAAsB;IAChC,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AASD,~~KAAK,yBAAyB,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,sDAAsD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;~~wCA8PnH~~,CAAC"}
1	+ {"version":3,"file":"applications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+E7E,KAAK,yBAAyB,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,sDAAsD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAiNnH,CAAC"}

package/dist/esm/applications/applications.shared.resources-config.schemas.js CHANGED Viewed

@@ -11,13 +11,70 @@ import { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../res
 import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
 import { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.js';
-// Custom operations enum for applications
-export var Application_Operations;
-(function (Application_Operations) {
-    Application_Operations["ACTIVATE"] = "activate";
-    Application_Operations["SUSPEND"] = "suspend";
-    Application_Operations["TRANSFER"] = "transfer";
-})(Application_Operations || (Application_Operations = {}));
+// Custom operations enum for applications.
+//
+// CROSS-ORGANIZATION APPLICATION TRANSFER IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY.
+// `TRANSFER` was declared here in two variants (`ORG_ADMIN` default at `riskLevel: CRITICAL`, and
+// an `APP_ADMIN_SUPER_ADMIN` `admin` variant adding `bypassOwnerApproval`), taking
+// `{ targetOrganizationId, transferReason }`. Both were ROUTED but never implemented, so each
+// request fell through to the generic core UPDATE, which persists only fields the resource schema
+// declares. Neither `targetOrganizationId` nor `transferReason` is one, so every call answered
+// **HTTP 200 having changed nothing** — an operator was told a CRITICAL cross-tenant move had
+// succeeded while the application stayed exactly where it was. Removed 2026-08-01.
+//
+// It was REMOVED rather than implemented on five independent grounds:
+//
+//  1. NO FIELD TO WRITE. `ApplicationSchema` carries no owning-organization field.
+//  2. NO RELATIONSHIP TO RE-POINT. The resources registry declares no
+//     `ORGANIZATIONS → APPLICATION` edge; applications are not organization-owned here.
+//  3. THE OWNERSHIP DIRECTION IS INVERTED. `APPLICATION` is a top-level, self-anchored
+//     `ResourcePrimaryScope`. The application IS the tenant container; organizations are a
+//     sibling scope living inside its tenancy. "Transferring" the application to one of its own
+//     organizations is incoherent, not merely unimplemented.
+//  4. WHERE ORGANIZATION OWNERSHIP DOES EXIST, IT IS ALREADY IMMUTABLE. The platform
+//     app-factory's own application record binds `organizationId` at create and marks it
+//     `excludeFromUpdate()` — a different resource, on a different service, already refusing
+//     this mutation.
+//  5. FRAMEWORK PRECEDENT. Cross-organization MEMBER transfer is refused for exactly this
+//     reason — a tenant-boundary crossing the framework does not sanction (see
+//     `organization-members.shared.resources-config.schemas.ts`). An application is the tenant
+//     container itself, so the argument applies with more force, not less.
+//
+// `bypassOwnerApproval` additionally named an approval flow that does not exist, and neither
+// variant emitted an audit event despite being cross-tenant and CRITICAL. Re-declaring an
+// application re-parenting verb would require, at minimum: a persisted ownership edge, an
+// approval flow for the flag to bypass, a custom implementation that writes the edge, and
+// audit/SIEM emission on both request and completion.
+//
+// APPLICATION STATUS LIFECYCLE IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY EITHER.
+// `ACTIVATE` and `SUSPEND` were declared here as `APP_ADMIN_SUPER_ADMIN` verbs (`MEDIUM` and
+// `CRITICAL` respectively, both with a generated bulk variant) taking `{ reason }` and
+// `{ suspensionReason, notifyOwners }`. Like TRANSFER they were ROUTED but never implemented, so
+// each fell through to the generic core UPDATE and answered **HTTP 200 having changed nothing** —
+// an operator was told a CRITICAL application suspension had taken effect while the application
+// kept serving. Removed 2026-08-01, on grounds that compound with TRANSFER's:
+//
+//  1. NO FIELD TO WRITE — and no plausible one. `ApplicationSchema` is
+//     `{_id, appSlug, appDisplayName, lastVersion, platformAppId}`: an identity row, carrying no
+//     lifecycle state at all. There is nothing to transition.
+//  2. THE LIFECYCLE IS OWNED ONE TIER UP. An application's real operational state lives at the
+//     platform tier (`PLATFORM_APPLICATIONS` / `Wildo_Application_Config`), provisioned and
+//     managed by the platform apps-manager. This row is the in-app registry entry an application
+//     reads to know its own identity — halting an application is a platform-tier action, not a
+//     self-service field flip on the application's own copy of its name.
+//  3. SAME INVERTED OWNERSHIP AS TRANSFER (ground 3 above). `APPLICATION` is a top-level
+//     `ResourcePrimaryScope`; suspending the tenant container from inside its own tenancy is
+//     incoherent, and the suspending super-admin's own session lives in that container.
+//
+// The resource specification's framing — "Created per org, managed by admins, and may be
+// transferred or suspended under governance", with 409s for destination-org slug collisions —
+// describes a per-organization application marketplace. The framework does not implement one, and
+// inventing an `ApplicationStatus` to satisfy two unimplemented buttons would have built that
+// model backwards from its UI. Re-declaring these verbs requires the ownership model first.
+//
+// Applications consequently declare NO custom operations (hence the `undefined` custom-operation
+// type parameter below). See `.claude/plans/status-lifecycle-operations-analysis.md` and
+// `.claude/plans/routed-unimplemented-operations-fail-closed.md`.
 const APPLICATION_SORT_FIELDS = ['appDisplayName', 'appSlug'];
 const APPLICATION_FILTER_FIELDS = {
     appSlug: z.string(),
@@ -40,7 +97,6 @@ export const applicationResourceConfiguration_InitializationFactory = (resources
         CoreResourceOperation.UPDATE,
         CoreResourceOperation.DELETE
     ],
-    customOperation: Application_Operations,
     operationsConfiguration: {
         [CoreResourceOperation.CREATE]: {
             variants: [
@@ -88,12 +144,37 @@ export const applicationResourceConfiguration_InitializationFactory = (resources
                 }
             ]
         },
+        /**
+         * ⚠️ NOTHING CONFINES THIS QUERY — and that is safe for a reason worth stating, because the
+         * comment on the default variant used to imply a mechanism that does not exist.
+         *
+         * `applications` is its own scope ROOT, so both repositories blacklist the APPLICATIONS axis and
+         * this LIST compiles to the EMPTY filter (measured 2026-08-12,
+         * `base-classes/__tests__/scope-root-collection-confinement.probe.test.ts`, RESIDUAL sweep). The
+         * old wording — "Org members can list *their* applications" — is exactly the shape of the claim
+         * that was FALSE on `organizations` and cost a full tenant-isolation investigation, one role tier
+         * higher.
+         *
+         * What makes it safe here is ARCHITECTURE, not a predicate: **one database per application.**
+         * "An application's organizations live in that application's own database"
+         * (`organizations.shared.schemas.ts`, on `slug` uniqueness), so this collection holds that
+         * application's own row and a caller can only ever see the application they are already using.
+         * Measured: an ordinary `ORG_MEMBER` receives 1 of 1 rows, projected to four summary fields.
+         *
+         * So the two variants below differ in ROLE, not in reach — `admin` exists for the fields and
+         * operations it unlocks elsewhere, not because it sees more rows here.
+         *
+         * ⚠️ This rests on the one-database-per-application invariant. `CREATE` is super-admin gated, so
+         * a second application row COULD be written into this database; if that ever becomes a real
+         * deployment shape, this resource inherits the `organizations` defect at the `ORG_MEMBER` tier
+         * and must be confined on `initiatorIds.applicationId`. Tracked as SEC-SCOPEROOT-3.
+         */
         [CoreResourceOperation.LIST]: {
             variants: [
                 {
                     variantType: ResourceOperationVariantType.API_CALL,
                     isDefault: true,
-                    roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can list their applications
+                    roles: [CORE_ORG_ROLES.ORG_MEMBER], // Unconfined by construction; safe because the collection holds this application only — see the block above
                     riskLevel: ResourceOperationRiskLevel.LOW,
                     filterFields: APPLICATION_FILTER_FIELDS,
                     sortFields: APPLICATION_SORT_FIELDS,
@@ -170,6 +251,16 @@ export const applicationResourceConfiguration_InitializationFactory = (resources
                     isDefault: true,
                     roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete their applications
                     riskLevel: ResourceOperationRiskLevel.CRITICAL,
+                    // An APPLICATION is a top-level scope in this framework, not an org-owned artifact, so
+                    // deleting one destroys everything scoped beneath it. Same reasoning as
+                    // `ORGANIZATIONS | DELETE`: `riskLevel` is UI-only and the per-user-type `stepUpAuth`
+                    // policy is opt-in, off by default, and freshness-satisfied — neither challenges the
+                    // caller here. Carries the same accepted audience limitation (re-auth is PASSWORD-only,
+                    // and directory-managed users have no password by design); see the note on
+                    // `ORGANIZATIONS | DELETE`.
+                    //
+                    // assurance-control: WILDO.IDENTITY.STEP_UP_AUTHENTICATION — re-authentication before a high-impact action.
+                    requiresStepUpAuthentication: true,
                 },
                 {
                     variantType: ResourceOperationVariantType.API_CALL,
@@ -177,83 +268,8 @@ export const applicationResourceConfiguration_InitializationFactory = (resources
                     variantKey: "admin",
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can delete any application
                     riskLevel: ResourceOperationRiskLevel.HIGH,
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,
-                    channel: CoreUserNotificationChannel.EMAIL,
-                }
-            ]
-        },
-        [Application_Operations.ACTIVATE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Only super admins can activate applications
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        reason: z.string().max(500).optional()
-                    }),
-                    haveBulkOperation: true
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,
-                    channel: CoreUserNotificationChannel.EMAIL,
-                }
-            ]
-        },
-        [Application_Operations.SUSPEND]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Only super admins can suspend applications
-                    riskLevel: ResourceOperationRiskLevel.CRITICAL,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        suspensionReason: z.string().min(1).max(500),
-                        notifyOwners: z.boolean().default(true)
-                    }),
-                    haveBulkOperation: true
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,
-                    channel: CoreUserNotificationChannel.EMAIL,
-                }
-            ]
-        },
-        [Application_Operations.TRANSFER]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can transfer their applications
-                    riskLevel: ResourceOperationRiskLevel.CRITICAL,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        targetOrganizationId: z.string().min(1),
-                        transferReason: z.string().min(1).max(500)
-                    }),
-                },
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: false,
-                    variantKey: "admin",
-                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can transfer any application
-                    riskLevel: ResourceOperationRiskLevel.HIGH,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        targetOrganizationId: z.string().min(1),
-                        transferReason: z.string().max(500).optional(),
-                        bypassOwnerApproval: z.boolean().default(false)
-                    })
+                    // Per-VARIANT flag — nothing is inherited from the default variant above.
+                    requiresStepUpAuthentication: true,
                 }
             ],
             userNotifications: [
@@ -265,4 +281,4 @@ export const applicationResourceConfiguration_InitializationFactory = (resources
         }
     },
 });
-//# sourceMappingURL=applications.shared.resources-config.schemas.js.map
+//# sourceMappingURL=applications.shared.resources-config.schemas.js.map

package/dist/esm/applications/applications.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"applications.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjG,0CAA0C;AAC1C,MAAM,CAAN,IAAY,sBAIX;AAJD,WAAY,sBAAsB;IAChC,+CAAqB,CAAA;IACrB,6CAAmB,CAAA;IACnB,+CAAqB,CAAA;AACvB,CAAC,EAJW,sBAAsB,KAAtB,sBAAsB,QAIjC;AAED,MAAM,uBAAuB,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AAE9D,MAAM,yBAAyB,GAAG;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,sDAAsD,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAIlK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,WAAW;IAChD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACzF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,yCAAyC;IAEjE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,sBAAsB;IAEvC,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,qCAAqC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,yEAAyE;oBACzE,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mDAAmD;oBAClG,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,oCAAoC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,wCAAwC;oBACvF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,0CAA0C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,yCAAyC;oBACxF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;oBACzC,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,EAAE;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC;oBACjD,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,GAAG;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,QAAQ;iBAC/C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE;YACjC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,8CAA8C;oBAC7F,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;qBACvC,CAAC;oBACF,iBAAiB,EAAE,IAAI;iBACxB;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE;YAChC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,6CAA6C;oBAC5F,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;wBAC5C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;qBACxC,CAAC;oBACF,iBAAiB,EAAE,IAAI;iBACxB;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE;YACjC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;wBACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;qBAC3C,CAAC;iBACH;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,4CAA4C;oBAC3F,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;wBACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;wBAC9C,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;qBAChD,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CAEF,CAAC,CAAC"}
1	+ {"version":3,"file":"applications.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjG,2CAA2C;AAC3C,EAAE;AACF,uFAAuF;AACvF,kGAAkG;AAClG,mFAAmF;AACnF,8FAA8F;AAC9F,kGAAkG;AAClG,+FAA+F;AAC/F,8FAA8F;AAC9F,mFAAmF;AACnF,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,mFAAmF;AACnF,sEAAsE;AACtE,wFAAwF;AACxF,uFAAuF;AACvF,2FAA2F;AAC3F,gGAAgG;AAChG,6DAA6D;AAC7D,qFAAqF;AACrF,yFAAyF;AACzF,6FAA6F;AAC7F,qBAAqB;AACrB,0FAA0F;AAC1F,+EAA+E;AAC/E,+FAA+F;AAC/F,2EAA2E;AAC3E,EAAE;AACF,6FAA6F;AAC7F,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,sDAAsD;AACtD,EAAE;AACF,mFAAmF;AACnF,6FAA6F;AAC7F,uFAAuF;AACvF,iGAAiG;AACjG,kGAAkG;AAClG,gGAAgG;AAChG,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,iGAAiG;AACjG,8DAA8D;AAC9D,+FAA+F;AAC/F,4FAA4F;AAC5F,iGAAiG;AACjG,+FAA+F;AAC/F,yEAAyE;AACzE,yFAAyF;AACzF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,kGAAkG;AAClG,8FAA8F;AAC9F,4FAA4F;AAC5F,EAAE;AACF,iGAAiG;AACjG,yFAAyF;AACzF,kEAAkE;AAElE,MAAM,uBAAuB,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AAE9D,MAAM,yBAAyB,GAAG;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,sDAAsD,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAIlK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,WAAW;IAChD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACzF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,yCAAyC;IAEjE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,qCAAqC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,yEAAyE;oBACzE,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mDAAmD;oBAClG,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,oCAAoC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,wCAAwC;oBACvF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4GAA4G;oBAChJ,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,yCAAyC;oBACxF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;oBACzC,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,EAAE;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC;oBACjD,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,GAAG;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,uFAAuF;oBACvF,wEAAwE;oBACxE,sFAAsF;oBACtF,qFAAqF;oBACrF,wFAAwF;oBACxF,2EAA2E;oBAC3E,4BAA4B;oBAC5B,EAAE;oBACF,4GAA4G;oBAC5G,4BAA4B,EAAE,IAAI;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,0EAA0E;oBAC1E,4BAA4B,EAAE,IAAI;iBACnC;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CAEF,CAAC,CAAC","sourcesContent":["/*\n Application Shared Resource Configuration\n \n Resource configuration for application management.\n * Supports both organization self-management and platform admin oversight.\n /\n\nimport { z } from 'zod';\nimport { ApplicationSchema } from './applications.shared.schemas';\n\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\n// Custom operations enum for applications.\n//\n// CROSS-ORGANIZATION APPLICATION TRANSFER IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY.\n// `TRANSFER` was declared here in two variants (`ORG_ADMIN` default at `riskLevel: CRITICAL`, and\n// an `APP_ADMIN_SUPER_ADMIN` `admin` variant adding `bypassOwnerApproval`), taking\n// `{ targetOrganizationId, transferReason }`. Both were ROUTED but never implemented, so each\n// request fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares. Neither `targetOrganizationId` nor `transferReason` is one, so every call answered\n// HTTP 200 having changed nothing* — an operator was told a CRITICAL cross-tenant move had\n// succeeded while the application stayed exactly where it was. Removed 2026-08-01.\n//\n// It was REMOVED rather than implemented on five independent grounds:\n//\n// 1. NO FIELD TO WRITE. `ApplicationSchema` carries no owning-organization field.\n// 2. NO RELATIONSHIP TO RE-POINT. The resources registry declares no\n// `ORGANIZATIONS → APPLICATION` edge; applications are not organization-owned here.\n// 3. THE OWNERSHIP DIRECTION IS INVERTED. `APPLICATION` is a top-level, self-anchored\n// `ResourcePrimaryScope`. The application IS the tenant container; organizations are a\n// sibling scope living inside its tenancy. \"Transferring\" the application to one of its own\n// organizations is incoherent, not merely unimplemented.\n// 4. WHERE ORGANIZATION OWNERSHIP DOES EXIST, IT IS ALREADY IMMUTABLE. The platform\n// app-factory's own application record binds `organizationId` at create and marks it\n// `excludeFromUpdate()` — a different resource, on a different service, already refusing\n// this mutation.\n// 5. FRAMEWORK PRECEDENT. Cross-organization MEMBER transfer is refused for exactly this\n// reason — a tenant-boundary crossing the framework does not sanction (see\n// `organization-members.shared.resources-config.schemas.ts`). An application is the tenant\n// container itself, so the argument applies with more force, not less.\n//\n// `bypassOwnerApproval` additionally named an approval flow that does not exist, and neither\n// variant emitted an audit event despite being cross-tenant and CRITICAL. Re-declaring an\n// application re-parenting verb would require, at minimum: a persisted ownership edge, an\n// approval flow for the flag to bypass, a custom implementation that writes the edge, and\n// audit/SIEM emission on both request and completion.\n//\n// APPLICATION STATUS LIFECYCLE IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY EITHER.\n// `ACTIVATE` and `SUSPEND` were declared here as `APP_ADMIN_SUPER_ADMIN` verbs (`MEDIUM` and\n// `CRITICAL` respectively, both with a generated bulk variant) taking `{ reason }` and\n// `{ suspensionReason, notifyOwners }`. Like TRANSFER they were ROUTED but never implemented, so\n// each fell through to the generic core UPDATE and answered HTTP 200 having changed nothing —\n// an operator was told a CRITICAL application suspension had taken effect while the application\n// kept serving. Removed 2026-08-01, on grounds that compound with TRANSFER's:\n//\n// 1. NO FIELD TO WRITE — and no plausible one. `ApplicationSchema` is\n// `{_id, appSlug, appDisplayName, lastVersion, platformAppId}`: an identity row, carrying no\n// lifecycle state at all. There is nothing to transition.\n// 2. THE LIFECYCLE IS OWNED ONE TIER UP. An application's real operational state lives at the\n// platform tier (`PLATFORM_APPLICATIONS` / `Wildo_Application_Config`), provisioned and\n// managed by the platform apps-manager. This row is the in-app registry entry an application\n// reads to know its own identity — halting an application is a platform-tier action, not a\n// self-service field flip on the application's own copy of its name.\n// 3. SAME INVERTED OWNERSHIP AS TRANSFER (ground 3 above). `APPLICATION` is a top-level\n// `ResourcePrimaryScope`; suspending the tenant container from inside its own tenancy is\n// incoherent, and the suspending super-admin's own session lives in that container.\n//\n// The resource specification's framing — \"Created per org, managed by admins, and may be\n// transferred or suspended under governance\", with 409s for destination-org slug collisions —\n// describes a per-organization application marketplace. The framework does not implement one, and\n// inventing an `ApplicationStatus` to satisfy two unimplemented buttons would have built that\n// model backwards from its UI. Re-declaring these verbs requires the ownership model first.\n//\n// Applications consequently declare NO custom operations (hence the `undefined` custom-operation\n// type parameter below). See `.claude/plans/status-lifecycle-operations-analysis.md` and\n// `.claude/plans/routed-unimplemented-operations-fail-closed.md`.\n\nconst APPLICATION_SORT_FIELDS = ['appDisplayName', 'appSlug'];\n\nconst APPLICATION_FILTER_FIELDS = {\n appSlug: z.string(),\n appDisplayName: z.string(),\n};\n\ntype ApplicationCoreOperations =\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\n/\nApplications Resource Configuration Factory\n/\nexport const applicationResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n undefined,\n ApplicationCoreOperations,\n typeof ApplicationSchema\n>({\n mainSchema: ApplicationSchema,\n resourceIdentifier: CoreResourceType.APPLICATION,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true, // Applications are core system resources\n\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE\n ],\n\n operationsConfiguration: {\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create applications\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n // Use database definition so platformAppId and lastVersion are preserved\n // requestDto auto-derived from decorators\n },\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: false,\n variantKey: \"admin\",\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can create applications for any org\n riskLevel: ResourceOperationRiskLevel.LOW,\n }\n ],\n userNotifications: [\n {\n target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n channel: CoreUserNotificationChannel.EMAIL,\n },\n {\n target: CoreUserNotificationTarget.USER_SELF,\n channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n }\n ]\n },\n\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can view applications\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: false,\n variantKey: \"admin\",\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can view any application\n riskLevel: ResourceOperationRiskLevel.LOW,\n }\n ]\n },\n\n /*\n ⚠️ NOTHING CONFINES THIS QUERY — and that is safe for a reason worth stating, because the\n * comment on the default variant used to imply a mechanism that does not exist.\n \n `applications` is its own scope ROOT, so both repositories blacklist the APPLICATIONS axis and\n * this LIST compiles to the EMPTY filter (measured 2026-08-12,\n * `base-classes/__tests__/scope-root-collection-confinement.probe.test.ts`, RESIDUAL sweep). The\n * old wording — \"Org members can list their applications\" — is exactly the shape of the claim\n * that was FALSE on `organizations` and cost a full tenant-isolation investigation, one role tier\n * higher.\n \n What makes it safe here is ARCHITECTURE, not a predicate: one database per application.\n * \"An application's organizations live in that application's own database\"\n * (`organizations.shared.schemas.ts`, on `slug` uniqueness), so this collection holds that\n * application's own row and a caller can only ever see the application they are already using.\n * Measured: an ordinary `ORG_MEMBER` receives 1 of 1 rows, projected to four summary fields.\n \n So the two variants below differ in ROLE, not in reach — `admin` exists for the fields and\n * operations it unlocks elsewhere, not because it sees more rows here.\n \n ⚠️ This rests on the one-database-per-application invariant. `CREATE` is super-admin gated, so\n * a second application row COULD be written into this database; if that ever becomes a real\n * deployment shape, this resource inherits the `organizations` defect at the `ORG_MEMBER` tier\n * and must be confined on `initiatorIds.applicationId`. Tracked as SEC-SCOPEROOT-3.\n */\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER], // Unconfined by construction; safe because the collection holds this application only — see the block above\n riskLevel: ResourceOperationRiskLevel.LOW,\n filterFields: APPLICATION_FILTER_FIELDS,\n sortFields: APPLICATION_SORT_FIELDS,\n },\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: false,\n variantKey: \"admin\",\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can list all applications\n riskLevel: ResourceOperationRiskLevel.LOW,\n filterFields: APPLICATION_FILTER_FIELDS,\n sortFields: APPLICATION_SORT_FIELDS,\n }\n ]\n },\n\n [CoreResourceOperation.SEARCH]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: true,\n searchableFields: ['name', 'description'],\n searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n filterFields: APPLICATION_FILTER_FIELDS,\n sortFields: APPLICATION_SORT_FIELDS,\n maxPaginatedResultPerPageLimit: 50,\n },\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: false,\n variantKey: \"admin\",\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: true,\n searchableFields: ['name', 'description', 'slug'],\n searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n filterFields: APPLICATION_FILTER_FIELDS,\n sortFields: APPLICATION_SORT_FIELDS,\n maxPaginatedResultPerPageLimit: 100,\n }\n ]\n },\n\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update their applications\n riskLevel: ResourceOperationRiskLevel.LOW,\n // requestDto auto-derived from decorators\n },\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: false,\n variantKey: \"admin\",\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can update any application\n riskLevel: ResourceOperationRiskLevel.LOW,\n // requestDto auto-derived from decorators\n }\n ],\n userNotifications: [\n {\n target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n channel: CoreUserNotificationChannel.EMAIL,\n }\n ]\n },\n\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete their applications\n riskLevel: ResourceOperationRiskLevel.CRITICAL,\n // An APPLICATION is a top-level scope in this framework, not an org-owned artifact, so\n // deleting one destroys everything scoped beneath it. Same reasoning as\n // `ORGANIZATIONS \| DELETE`: `riskLevel` is UI-only and the per-user-type `stepUpAuth`\n // policy is opt-in, off by default, and freshness-satisfied — neither challenges the\n // caller here. Carries the same accepted audience limitation (re-auth is PASSWORD-only,\n // and directory-managed users have no password by design); see the note on\n // `ORGANIZATIONS \| DELETE`.\n //\n // assurance-control: WILDO.IDENTITY.STEP_UP_AUTHENTICATION — re-authentication before a high-impact action.\n requiresStepUpAuthentication: true,\n },\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: false,\n variantKey: \"admin\",\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can delete any application\n riskLevel: ResourceOperationRiskLevel.HIGH,\n // Per-VARIANT flag — nothing is inherited from the default variant above.\n requiresStepUpAuthentication: true,\n }\n ],\n userNotifications: [\n {\n target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n channel: CoreUserNotificationChannel.EMAIL,\n }\n ]\n }\n },\n\n});\n"]}

package/dist/esm/applications/applications.shared.schemas.d.ts CHANGED Viewed

@@ -10,6 +10,48 @@ export declare enum BackendApiType {
     OAUTH2_PROVIDER_API = "oauth2_provider_api",
     MCP_API = "mcp_api"
 }
+/**
+ * Background app-owned runtimes — kinds that an application owns but that
+ * do NOT serve user-facing requests directly (no public HTTP surface for
+ * end-users, no rendered frontend).
+ *
+ * Introduced by the minions-and-workers plan
+ * (`.claude/plans/minions-and-workers-implementation.md`, KD-9):
+ *
+ * - `MINION` — TS/Node single-instance process sharing the application
+ *   scope (Mongo / Redis / RabbitMQ); hosts the actor system; consumes
+ *   queue / cron ticks. Always-up or cron-triggered.
+ * - `WORKER` — language-pluggable stateless HTTP subprocess (Rust / Node /
+ *   Java / …) called by the backend-api with a Wildo JWT. No backing
+ *   services; ClusterIP-only, no ingress.
+ *
+ * Deploy-time identity uses the `{kind, name}` vocabulary (`name` = the
+ * `wildo.saas.config.ts` bucket key), surfaced in two forms — the
+ * `APP_OWNED_SERVICE_KIND` + `APP_OWNED_SERVICE_NAME` **env** pair and the
+ * matching `wildo.ai/owned-service-{kind,name}` pod **labels**. WHICH forms a
+ * kind carries, and how it consumes them, differs because their runtimes differ:
+ *
+ * - `WORKER` — language-pluggable, so a non-Node runtime (the reference Rust
+ *   worker) READS the `APP_OWNED_SERVICE_NAME` **env** var at boot and forwards
+ *   it as the apps-manager `worker-bootstrap` path segment
+ *   (`appConfig.workers[name]`). A Node worker instead hardcodes `workerName` in
+ *   `defineWorkerInit`; the env pair is still stamped on every worker deploy path
+ *   (k8s, docker-compose, CLI `.env`) for the language-agnostic case +
+ *   observability, alongside the matching pod labels.
+ * - `MINION` — always Node, and sources its `minionName` from its compiled-in
+ *   `defineMinionInit({ minionName })` config (the minion package is
+ *   domain-specific by construction), cross-validated at boot against the
+ *   fetched `appConfig.minions[minionName]`. Because identity is a compile-time
+ *   fact, minions carry it ONLY as the `wildo.ai/owned-service-{kind,name}` pod
+ *   **labels** (operators, selectors, observability); the `APP_OWNED_SERVICE_*`
+ *   **env** pair is deliberately omitted on EVERY minion deploy path (k8s, CLI
+ *   `.env`, docker-compose), since an env identity would be a second,
+ *   drift-prone authority (see `env-configuration-generator.service.ts`).
+ */
+export declare enum BackgroundRuntimeType {
+    MINION = "minion",
+    WORKER = "worker"
+}
 /**
  * Schema for all shared (non-platform-private) application types.
  *
@@ -20,13 +62,25 @@ export declare enum BackendApiType {
  */
 export declare const AllSharedApplicationTypesSchema: z.ZodUnion<readonly [z.ZodEnum<typeof StaticFrontEndType>, z.ZodEnum<typeof BackendApiType>, z.ZodString]>;
 export type AllSharedApplicationTypes = z.infer<typeof AllSharedApplicationTypesSchema>;
+/**
+ * Full app-owned runtime identity surface: every primary application type
+ * (`AllSharedApplicationTypesSchema` — backend kinds, static frontends,
+ * dynamic-frontend keys) plus the background runtimes
+ * (`BackgroundRuntimeType` — minions, workers).
+ *
+ * Use this where a process needs to declare what kind of app-owned
+ * runtime it is without forcing every caller to switch on a coarse
+ * vocabulary that overlaps the existing fine-grained enums.
+ */
+export declare const AllAppOwnedRuntimeTypesSchema: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof StaticFrontEndType>, z.ZodEnum<typeof BackendApiType>, z.ZodString]>, z.ZodEnum<typeof BackgroundRuntimeType>]>;
+export type AllAppOwnedRuntimeTypes = z.infer<typeof AllAppOwnedRuntimeTypesSchema>;
 export declare const ApplicationSchema: z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     appSlug: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
     appDisplayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     lastVersion: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
     platformAppId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export type Application = z.infer<typeof ApplicationSchema>;
 export declare const ApplicationVersionSchema: z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
@@ -34,12 +88,12 @@ export declare const ApplicationVersionSchema: z.ZodObject<{
     version: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     releaseDate: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
     releaseNotes: z.ZodString;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export type ApplicationVersion = z.infer<typeof ApplicationVersionSchema>;
 export declare const ApplicationMetadataSchema: z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
-    description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+    appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
+    description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
+}, z.core.$strip>;
 export type ApplicationMetadata = z.infer<typeof ApplicationMetadataSchema>;
 //# sourceMappingURL=applications.shared.schemas.d.ts.map

package/dist/esm/applications/applications.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"applications.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,uBAAuB,4BAA4B;CACpD;AAED,oBAAY,cAAc;IACxB,gBAAgB,qBAAqB;IACrC,gBAAgB,qBAAqB;IACrC,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;IAC3C,OAAO,YAAY;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,4GAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,iBAAiB;;;;;;~~uCAO5B~~,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,wBAAwB;;;;;;~~uCAMnC~~,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;~~uCAIpC~~,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
1	+ {"version":3,"file":"applications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,uBAAuB,4BAA4B;CACpD;AAED,oBAAY,cAAc;IACxB,gBAAgB,qBAAqB;IACrC,gBAAgB,qBAAqB;IACrC,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;IAC3C,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,oBAAY,qBAAqB;IAC/B,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,4GAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,4KAGxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,iBAAiB;;;;;;iBAO5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,wBAAwB;;;;;;iBAMnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;iBAwBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/esm/applications/applications.shared.schemas.js CHANGED Viewed

@@ -12,6 +12,49 @@ export var BackendApiType;
     BackendApiType["OAUTH2_PROVIDER_API"] = "oauth2_provider_api";
     BackendApiType["MCP_API"] = "mcp_api";
 })(BackendApiType || (BackendApiType = {}));
+/**
+ * Background app-owned runtimes — kinds that an application owns but that
+ * do NOT serve user-facing requests directly (no public HTTP surface for
+ * end-users, no rendered frontend).
+ *
+ * Introduced by the minions-and-workers plan
+ * (`.claude/plans/minions-and-workers-implementation.md`, KD-9):
+ *
+ * - `MINION` — TS/Node single-instance process sharing the application
+ *   scope (Mongo / Redis / RabbitMQ); hosts the actor system; consumes
+ *   queue / cron ticks. Always-up or cron-triggered.
+ * - `WORKER` — language-pluggable stateless HTTP subprocess (Rust / Node /
+ *   Java / …) called by the backend-api with a Wildo JWT. No backing
+ *   services; ClusterIP-only, no ingress.
+ *
+ * Deploy-time identity uses the `{kind, name}` vocabulary (`name` = the
+ * `wildo.saas.config.ts` bucket key), surfaced in two forms — the
+ * `APP_OWNED_SERVICE_KIND` + `APP_OWNED_SERVICE_NAME` **env** pair and the
+ * matching `wildo.ai/owned-service-{kind,name}` pod **labels**. WHICH forms a
+ * kind carries, and how it consumes them, differs because their runtimes differ:
+ *
+ * - `WORKER` — language-pluggable, so a non-Node runtime (the reference Rust
+ *   worker) READS the `APP_OWNED_SERVICE_NAME` **env** var at boot and forwards
+ *   it as the apps-manager `worker-bootstrap` path segment
+ *   (`appConfig.workers[name]`). A Node worker instead hardcodes `workerName` in
+ *   `defineWorkerInit`; the env pair is still stamped on every worker deploy path
+ *   (k8s, docker-compose, CLI `.env`) for the language-agnostic case +
+ *   observability, alongside the matching pod labels.
+ * - `MINION` — always Node, and sources its `minionName` from its compiled-in
+ *   `defineMinionInit({ minionName })` config (the minion package is
+ *   domain-specific by construction), cross-validated at boot against the
+ *   fetched `appConfig.minions[minionName]`. Because identity is a compile-time
+ *   fact, minions carry it ONLY as the `wildo.ai/owned-service-{kind,name}` pod
+ *   **labels** (operators, selectors, observability); the `APP_OWNED_SERVICE_*`
+ *   **env** pair is deliberately omitted on EVERY minion deploy path (k8s, CLI
+ *   `.env`, docker-compose), since an env identity would be a second,
+ *   drift-prone authority (see `env-configuration-generator.service.ts`).
+ */
+export var BackgroundRuntimeType;
+(function (BackgroundRuntimeType) {
+    BackgroundRuntimeType["MINION"] = "minion";
+    BackgroundRuntimeType["WORKER"] = "worker";
+})(BackgroundRuntimeType || (BackgroundRuntimeType = {}));
 /**
  * Schema for all shared (non-platform-private) application types.
  *
@@ -25,6 +68,20 @@ export const AllSharedApplicationTypesSchema = z.union([
     z.enum(BackendApiType),
     z.string(),
 ]);
+/**
+ * Full app-owned runtime identity surface: every primary application type
+ * (`AllSharedApplicationTypesSchema` — backend kinds, static frontends,
+ * dynamic-frontend keys) plus the background runtimes
+ * (`BackgroundRuntimeType` — minions, workers).
+ *
+ * Use this where a process needs to declare what kind of app-owned
+ * runtime it is without forcing every caller to switch on a coarse
+ * vocabulary that overlaps the existing fine-grained enums.
+ */
+export const AllAppOwnedRuntimeTypesSchema = z.union([
+    AllSharedApplicationTypesSchema,
+    z.enum(BackgroundRuntimeType),
+]);
 export const ApplicationSchema = z.object({
     _id: z.string().isPrimaryKey().isSummaryField(),
     appSlug: z.string().isDBIndexed().isSummaryField().excludeFromUpdate(),
@@ -42,7 +99,27 @@ export const ApplicationVersionSchema = z.object({
 });
 export const ApplicationMetadataSchema = z.object({
     _id: z.string().isPrimaryKey().isSummaryField(),
-    appId: z.string().isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
-    description: z.string().isDBIndexed().isSummaryField(),
+    /**
+     * The owning application — and this row's BUSINESS IDENTITY.
+     *
+     * `APPLICATION → APPLICATION_METADATA` is 1:1, so "the metadata of application X"
+     * identifies the row completely. Declaring that lets the framework's business-key
+     * repository helpers address it: the app-init seed
+     * (`engine-applications:application-metadata`) upserts through
+     * `upsertByBusinessKey`, which refuses a schema that declares no identity —
+     * "Schema declares no business-key identity" — rather than guessing one.
+     *
+     * `.isUnique()` carries the 1:1 down to the database. `.isBusinessKey()` alone is
+     * a pure marker with no index, so two concurrent creates could otherwise leave
+     * an application with two metadata rows, which no read path expects.
+     *
+     * NB the field is named `appId`, not the canonical `applicationId` that every
+     * other APPLICATION-scoped resource uses. The relationship declares it, so the
+     * framework follows the declaration.
+     */
+    appId: z.string().isDBIndexed().isForeignKey().isBusinessKey().isUnique().isSummaryField().excludeFromUpdate(),
+    // `.default('')` so the row is eager-seedable via onParentCreate (placeholder;
+    // the app sets a real description later) — root-cause fix for the blocking field.
+    description: z.string().default('').isDBIndexed().isSummaryField(),
 });
-//# sourceMappingURL=applications.shared.schemas.js.map
+//# sourceMappingURL=applications.shared.schemas.js.map

package/dist/esm/applications/applications.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"applications.shared.schemas.js","sourceRoot":"","sources":["~~../../../~~src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,yEAAmD,CAAA;AACrD,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,uDAAqC,CAAA;IACrC,uDAAqC,CAAA;IACrC,uDAAqC,CAAA;IACrC,6DAA2C,CAAA;IAC3C,qCAAmB,CAAA;AACrB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC;IACrD,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC1B,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACtB,CAAC,CAAC,MAAM,EAAE;CACX,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACvE,cAAc,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC3E,+DAA+D;IAC/D,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,KAAK,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACpF,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACnD,WAAW,EAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACrD,YAAY,EAAG,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,KAAK,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;~~IACpF~~,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;~~CAC1D~~,CAAC,CAAC"}
1	+ {"version":3,"file":"applications.shared.schemas.js","sourceRoot":"","sources":["../../../../src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,yEAAmD,CAAA;AACrD,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,uDAAqC,CAAA;IACrC,uDAAqC,CAAA;IACrC,uDAAqC,CAAA;IACrC,6DAA2C,CAAA;IAC3C,qCAAmB,CAAA;AACrB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,0CAAiB,CAAA;IACjB,0CAAiB,CAAA;AACnB,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC;IACrD,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC1B,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACtB,CAAC,CAAC,MAAM,EAAE;CACX,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,+BAA+B;IAC/B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACvE,cAAc,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC3E,+DAA+D;IAC/D,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,KAAK,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACpF,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACnD,WAAW,EAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACrD,YAAY,EAAG,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAC/G,+EAA+E;IAC/E,kFAAkF;IAClF,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;CACtE,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport enum StaticFrontEndType {\n WEBSITE = 'website',\n TECHNICAL_DOCUMENTATION = 'technical_documentation',\n}\n\nexport enum BackendApiType {\n MAIN_BACKEND_API = 'main_backend_api',\n HEALTH_CHECK_API = 'health_check_api',\n MAIN_WEBHOOK_API = 'main_webhook_api',\n OAUTH2_PROVIDER_API = 'oauth2_provider_api',\n MCP_API = 'mcp_api',\n}\n\n/*\n Background app-owned runtimes — kinds that an application owns but that\n * do NOT serve user-facing requests directly (no public HTTP surface for\n * end-users, no rendered frontend).\n \n Introduced by the minions-and-workers plan\n * (`.claude/plans/minions-and-workers-implementation.md`, KD-9):\n \n - `MINION` — TS/Node single-instance process sharing the application\n * scope (Mongo / Redis / RabbitMQ); hosts the actor system; consumes\n * queue / cron ticks. Always-up or cron-triggered.\n * - `WORKER` — language-pluggable stateless HTTP subprocess (Rust / Node /\n * Java / …) called by the backend-api with a Wildo JWT. No backing\n * services; ClusterIP-only, no ingress.\n \n Deploy-time identity uses the `{kind, name}` vocabulary (`name` = the\n * `wildo.saas.config.ts` bucket key), surfaced in two forms — the\n * `APP_OWNED_SERVICE_KIND` + `APP_OWNED_SERVICE_NAME` env pair and the\n * matching `wildo.ai/owned-service-{kind,name}` pod labels. WHICH forms a\n * kind carries, and how it consumes them, differs because their runtimes differ:\n \n - `WORKER` — language-pluggable, so a non-Node runtime (the reference Rust\n * worker) READS the `APP_OWNED_SERVICE_NAME` env var at boot and forwards\n * it as the apps-manager `worker-bootstrap` path segment\n * (`appConfig.workers[name]`). A Node worker instead hardcodes `workerName` in\n * `defineWorkerInit`; the env pair is still stamped on every worker deploy path\n * (k8s, docker-compose, CLI `.env`) for the language-agnostic case +\n * observability, alongside the matching pod labels.\n * - `MINION` — always Node, and sources its `minionName` from its compiled-in\n * `defineMinionInit({ minionName })` config (the minion package is\n * domain-specific by construction), cross-validated at boot against the\n * fetched `appConfig.minions[minionName]`. Because identity is a compile-time\n * fact, minions carry it ONLY as the `wildo.ai/owned-service-{kind,name}` pod\n * labels (operators, selectors, observability); the `APP_OWNED_SERVICE_`\n env pair is deliberately omitted on EVERY minion deploy path (k8s, CLI\n * `.env`, docker-compose), since an env identity would be a second,\n * drift-prone authority (see `env-configuration-generator.service.ts`).\n /\nexport enum BackgroundRuntimeType {\n MINION = 'minion',\n WORKER = 'worker',\n}\n\n/\n Schema for all shared (non-platform-private) application types.\n \n Interactive frontend surfaces are config-defined strings keyed by frontend\n * service identity via `frontendServices` in AppConfiguration, not an enum.\n * `z.string()` accepts those config-defined values alongside the known\n * static-frontend and backend-API enums.\n /\nexport const AllSharedApplicationTypesSchema = z.union([\n z.enum(StaticFrontEndType),\n z.enum(BackendApiType),\n z.string(),\n]);\nexport type AllSharedApplicationTypes = z.infer<typeof AllSharedApplicationTypesSchema>;\n\n/\n Full app-owned runtime identity surface: every primary application type\n * (`AllSharedApplicationTypesSchema` — backend kinds, static frontends,\n * dynamic-frontend keys) plus the background runtimes\n * (`BackgroundRuntimeType` — minions, workers).\n \n Use this where a process needs to declare what kind of app-owned\n * runtime it is without forcing every caller to switch on a coarse\n * vocabulary that overlaps the existing fine-grained enums.\n /\nexport const AllAppOwnedRuntimeTypesSchema = z.union([\n AllSharedApplicationTypesSchema,\n z.enum(BackgroundRuntimeType),\n]);\nexport type AllAppOwnedRuntimeTypes = z.infer<typeof AllAppOwnedRuntimeTypesSchema>;\n\nexport const ApplicationSchema = z.object({\n _id : z.string().isPrimaryKey().isSummaryField(),\n appSlug : z.string().isDBIndexed().isSummaryField().excludeFromUpdate(),\n appDisplayName : z.string().isDBIndexed().isSummaryField(),\n lastVersion : z.string().optional().excludeFromCreate().excludeFromUpdate(),\n // Backend-only field - stored in DB but never sent to frontend\n platformAppId : z.string().isDBIndexed().isBackendOnly(),\n});\nexport type Application = z.infer<typeof ApplicationSchema>;\n\nexport const ApplicationVersionSchema = z.object({\n _id : z.string().isPrimaryKey().isSummaryField(),\n appId : z.string().isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n version : z.string().isDBIndexed().isSummaryField(),\n releaseDate : z.date().isDBIndexed().isSummaryField(),\n releaseNotes : z.string(),\n});\nexport type ApplicationVersion = z.infer<typeof ApplicationVersionSchema>;\n\nexport const ApplicationMetadataSchema = z.object({\n _id : z.string().isPrimaryKey().isSummaryField(),\n /\n The owning application — and this row's BUSINESS IDENTITY.\n \n `APPLICATION → APPLICATION_METADATA` is 1:1, so \"the metadata of application X\"\n * identifies the row completely. Declaring that lets the framework's business-key\n * repository helpers address it: the app-init seed\n * (`engine-applications:application-metadata`) upserts through\n * `upsertByBusinessKey`, which refuses a schema that declares no identity —\n * \"Schema declares no business-key identity\" — rather than guessing one.\n \n `.isUnique()` carries the 1:1 down to the database. `.isBusinessKey()` alone is\n * a pure marker with no index, so two concurrent creates could otherwise leave\n * an application with two metadata rows, which no read path expects.\n \n NB the field is named `appId`, not the canonical `applicationId` that every\n * other APPLICATION-scoped resource uses. The relationship declares it, so the\n * framework follows the declaration.\n */\n appId : z.string().isDBIndexed().isForeignKey().isBusinessKey().isUnique().isSummaryField().excludeFromUpdate(),\n // `.default('')` so the row is eager-seedable via onParentCreate (placeholder;\n // the app sets a real description later) — root-cause fix for the blocking field.\n description : z.string().default('').isDBIndexed().isSummaryField(),\n});\nexport type ApplicationMetadata = z.infer<typeof ApplicationMetadataSchema>;\n"]}

package/dist/esm/billing/billing-account.shared.resources-config.schemas.d.ts CHANGED Viewed

@@ -8,7 +8,7 @@
  * @see polymorphic-scope-approach-A-expansion.md — Phase 3
  */
 import { z } from 'zod';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
 export declare enum BillingAccount_Operations {
     /** Create a Stripe Checkout Session for the user to complete payment */
     OPEN_CHECKOUT = "open_checkout",
@@ -27,11 +27,11 @@ export declare const BillingAccount_OpenCheckoutRequestDto: z.ZodObject<{
     trialDays: z.ZodOptional<z.ZodNumber>;
     promotionCode: z.ZodOptional<z.ZodString>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 /** Request DTO for OPEN_PORTAL operation */
 export declare const BillingAccount_OpenPortalRequestDto: z.ZodObject<{
     returnUrl: z.ZodURL;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 /**
  * Polymorphic factory map for billing accounts.
  * Spread into `coreShared_ResourcesConfigurations_FactoryMap`:
@@ -41,5 +41,5 @@ export declare const BillingAccount_OpenPortalRequestDto: z.ZodObject<{
  *   - organizationBillingAccounts
  *   - userBillingAccounts
  */
-export declare const billingAccountsPolymorphicFactories: Record<string, import("../index.js").ResourceConfiguration_InitializationFactory<typeof BillingAccount_Operations, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, any>>;
+export declare const billingAccountsPolymorphicFactories: Record<string, import("..").ResourceConfiguration_InitializationFactory<typeof BillingAccount_Operations, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, any>>;
 //# sourceMappingURL=billing-account.shared.resources-config.schemas.d.ts.map