@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/notifications/notification-badges.shared.resources-config.schemas.js

@@ -1,50 +1,102 @@
-import { NotificationBadgeSchema } from './notification-badges.schemas.js';
-import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
-import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
-import { ResourceOperationRiskLevel, ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
-import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
 /**
- * Notification Badges Resource Configuration (Repository-only)
+ * Notification Badges Shared Resource Configurations
  *
- * Provides repository operations for storing notification badge counts.
- * Badges are system-managed counters used to show unread counts, pending items, etc.
+ * Polymorphic dual-scope (USER + ORGANIZATION). Two completely separate factories,
+ * each registered against its own `ResourceType` member and backed by its own
+ * MongoDB collection. We follow the lifecycle-state / guidance-state pattern
+ * (two side-by-side factories) rather than `createPolymorphicResourceConfigurations`
+ * because the variants have:
+ *   - Different schemas (`NotificationBadgeUserSelfSchema` vs
+ *     `NotificationBadgeOrganizationSchema`),
+ *   - Different role surfaces (`APP_USER` reads on the USER variant vs
+ *     `ORG_MEMBER` reads on the ORG variant), and
+ *   - Different parent-scope anchors (USERS vs ORGANIZATIONS).
  *
- * Primary scope: APPLICATION (badges span multiple scopes internally)
+ * Both variants:
+ *   - Operations: READ / LIST / CREATE / UPDATE (no DELETE — badges are reset to 0).
+ *   - `isSystemResource: true` — internal infrastructure, accessed via
+ *     `NotificationBadgeBackendService` (the public API is `increment`,
+ *     `decrement`, `set`, `reset` — never raw repository calls from app code).
  *
- * Operations:
- * - READ: Get a specific badge
- * - LIST: Get all badges for a scope
- * - CREATE: Create a new badge (internal use)
- * - UPDATE: Update badge count (internal use)
+ * Role + variant assignments per D-2 of `.cursor/plans/notification-badges-polymorphism-refactor.md`
+ * (mirrors the lifecycle-state precedent: READ/LIST exposed as `API_CALL` so
+ * the user can read their own badges through the framework's HTTP surface;
+ * CREATE/UPDATE stay `REPOSITORY_ONLY` because badge writes are exclusively
+ * driven by `NotificationBadgeBackendService` from internal dispatchers):
+ *   - USER variant:
+ *       READ / LIST  → `[CORE_APP_ROLES.APP_USER]` via `API_CALL`
+ *       CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`
+ *   - ORG variant:
+ *       READ / LIST  → `[CORE_ORG_ROLES.ORG_MEMBER]` via `API_CALL`
+ *                      (any org member can see aggregate org badges; matches
+ *                      the lifecycle-state pattern's symmetric ORG_MEMBER read)
+ *       CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`
  *
- * Note: No DELETE operation - badges are reset to 0 instead of deleted.
+ * @see notification-badges.schemas.ts — discriminated union at the data layer
+ * @see .cursor/plans/notification-badges-polymorphism-refactor.md
  */
-export const notificationBadgesResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
-    mainSchema: NotificationBadgeSchema,
-    resourceIdentifier: CoreResourceType.NOTIFICATION_BADGES,
-    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.NOTIFICATION_BADGES],
+import { NotificationBadgeUserSelfSchema, NotificationBadgeOrganizationSchema, } from './notification-badges.schemas.js';
+import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier, } from '../resources/resources.shared.core.definitions.js';
+import { ResourceOperationRiskLevel, ResourceOperationVariantType, } from '../resources/resources.shared.schemas.js';
+import { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas.js';
+export const userNotificationBadgesResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: NotificationBadgeUserSelfSchema,
+    resourceIdentifier: CoreResourceType.USER_NOTIFICATION_BADGES,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USER_NOTIFICATION_BADGES],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    /** Subject-export disclosure. The subject's own data. Secrets and backend-only values are withheld by the export's security floor regardless of this grant. */
+    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },
+    portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.DERIVED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.LIST,
         CoreResourceOperation.CREATE,
         CoreResourceOperation.UPDATE,
-        // No DELETE - badges are reset to 0 instead
+        // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal
+        // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade
+        // must physically remove the row when its owning user/org is deleted. Without it
+        // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.
+        CoreResourceOperation.DELETE,
     ],
     operationsConfiguration: {
         [CoreResourceOperation.READ]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    // The framework's user-self filter (USER_SELF primary scope) restricts
+                    // results to the authenticated user's own row.
+                    roles: [CORE_APP_ROLES.APP_USER],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                },
+            ],
+        },
+        [CoreResourceOperation.LIST]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_USER],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                },
+            ],
+        },
+        [CoreResourceOperation.CREATE]: {
             variants: [
                 {
                     variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
                     isDefault: true,
-                    // Internal use - accessed via NotificationBadgeBackendService
+                    // System-internal: only the dispatcher / batch services drive badge writes.
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.LOW,
                 },
             ],
         },
-        [CoreResourceOperation.LIST]: {
+        [CoreResourceOperation.UPDATE]: {
             variants: [
                 {
                     variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
@@ -54,6 +106,64 @@ export const notificationBadgesResourceConfiguration_InitializationFactory = (re
                 },
             ],
         },
+        // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition
+        // onParentDelete cascade so badge rows are physically removed when the owning
+        // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).
+        // Without a DELETE op the cascade (deleteChildrenImmediate) throws
+        // ErrorType.CONFIGURATION on any parent that still has a badge row.
+        // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).
+        [CoreResourceOperation.DELETE]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                },
+            ],
+        },
+    },
+});
+export const organizationNotificationBadgesResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: NotificationBadgeOrganizationSchema,
+    resourceIdentifier: CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES],
+    resourceRelationships: resourcesRelationships,
+    isSystemResource: true,
+    coreOperations: [
+        CoreResourceOperation.READ,
+        CoreResourceOperation.LIST,
+        CoreResourceOperation.CREATE,
+        CoreResourceOperation.UPDATE,
+        // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal
+        // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade
+        // must physically remove the row when its owning user/org is deleted. Without it
+        // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.
+        CoreResourceOperation.DELETE,
+    ],
+    operationsConfiguration: {
+        [CoreResourceOperation.READ]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    // Any org member can see aggregate org badges (e.g. unpaid invoices
+                    // count surfaced in the navbar). Matches the lifecycle-state pattern.
+                    roles: [CORE_ORG_ROLES.ORG_MEMBER],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                },
+            ],
+        },
+        [CoreResourceOperation.LIST]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    roles: [CORE_ORG_ROLES.ORG_MEMBER],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                },
+            ],
+        },
         [CoreResourceOperation.CREATE]: {
             variants: [
                 {
@@ -74,6 +184,22 @@ export const notificationBadgesResourceConfiguration_InitializationFactory = (re
                 },
             ],
         },
+        // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition
+        // onParentDelete cascade so badge rows are physically removed when the owning
+        // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).
+        // Without a DELETE op the cascade (deleteChildrenImmediate) throws
+        // ErrorType.CONFIGURATION on any parent that still has a badge row.
+        // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).
+        [CoreResourceOperation.DELETE]: {
+            variants: [
+                {
+                    variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.HIGH,
+                },
+            ],
+        },
     },
 });
-//# sourceMappingURL=notification-badges.shared.resources-config.schemas.js.map
+//# sourceMappingURL=notification-badges.shared.resources-config.schemas.js.map

package/dist/esm/notifications/notification-badges.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-badges.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/notifications/notification-badges.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AAEvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,6DAA6D,GAAG,CAC3E,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,uBAAuB;IACnC,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;IACxD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;IACjG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,4CAA4C;KAC7C;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,8DAA8D;oBAC9D,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"notification-badges.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/notifications/notification-badges.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAWhG,MAAM,CAAC,MAAM,iEAAiE,GAAG,CAC/E,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,+BAA+B;IAC3C,kBAAkB,EAAE,gBAAgB,CAAC,wBAAwB;IAC7D,uBAAuB,EACrB,kCAAkC,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;IAC/E,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,+JAA+J;IAC/J,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,OAAO,EAAE;IACvE,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,OAAO,EAAE;IAE3E,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,uEAAuE;oBACvE,+CAA+C;oBAC/C,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,4EAA4E;oBAC5E,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,gFAAgF;QAChF,mEAAmE;QACnE,oEAAoE;QACpE,8EAA8E;QAC9E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,yEAAyE,GAAG,CACvF,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,mCAAmC;IAC/C,kBAAkB,EAAE,gBAAgB,CAAC,gCAAgC;IACrE,uBAAuB,EACrB,kCAAkC,CAAC,gBAAgB,CAAC,gCAAgC,CAAC;IACvF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,oEAAoE;oBACpE,sEAAsE;oBACtE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,gFAAgF;QAChF,mEAAmE;QACnE,oEAAoE;QACpE,8EAA8E;QAC9E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Notification Badges Shared Resource Configurations\n *\n * Polymorphic dual-scope (USER + ORGANIZATION). Two completely separate factories,\n * each registered against its own `ResourceType` member and backed by its own\n * MongoDB collection. We follow the lifecycle-state / guidance-state pattern\n * (two side-by-side factories) rather than `createPolymorphicResourceConfigurations`\n * because the variants have:\n *   - Different schemas (`NotificationBadgeUserSelfSchema` vs\n *     `NotificationBadgeOrganizationSchema`),\n *   - Different role surfaces (`APP_USER` reads on the USER variant vs\n *     `ORG_MEMBER` reads on the ORG variant), and\n *   - Different parent-scope anchors (USERS vs ORGANIZATIONS).\n *\n * Both variants:\n *   - Operations: READ / LIST / CREATE / UPDATE (no DELETE — badges are reset to 0).\n *   - `isSystemResource: true` — internal infrastructure, accessed via\n *     `NotificationBadgeBackendService` (the public API is `increment`,\n *     `decrement`, `set`, `reset` — never raw repository calls from app code).\n *\n * Role + variant assignments per D-2 of `.cursor/plans/notification-badges-polymorphism-refactor.md`\n * (mirrors the lifecycle-state precedent: READ/LIST exposed as `API_CALL` so\n * the user can read their own badges through the framework's HTTP surface;\n * CREATE/UPDATE stay `REPOSITORY_ONLY` because badge writes are exclusively\n * driven by `NotificationBadgeBackendService` from internal dispatchers):\n *   - USER variant:\n *       READ / LIST  → `[CORE_APP_ROLES.APP_USER]` via `API_CALL`\n *       CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`\n *   - ORG variant:\n *       READ / LIST  → `[CORE_ORG_ROLES.ORG_MEMBER]` via `API_CALL`\n *                      (any org member can see aggregate org badges; matches\n *                      the lifecycle-state pattern's symmetric ORG_MEMBER read)\n *       CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`\n *\n * @see notification-badges.schemas.ts — discriminated union at the data layer\n * @see .cursor/plans/notification-badges-polymorphism-refactor.md\n */\n\nimport {\n  NotificationBadgeUserSelfSchema,\n  NotificationBadgeOrganizationSchema,\n} from './notification-badges.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport {\n  CoreResourceOperation,\n  CoreResourceType,\n  coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  ResourceRelationship,\n} from '../resources/resources.shared.schemas';\nimport { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// ─── USER NOTIFICATION BADGES ─────────────────────────────────────────────────\n\ntype UserNotificationBadgesCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\nexport const userNotificationBadgesResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<\n  undefined,\n  UserNotificationBadgesCoreOperations,\n  typeof NotificationBadgeUserSelfSchema\n> => createResourceConfiguration_Initialization<\n  undefined,\n  UserNotificationBadgesCoreOperations,\n  typeof NotificationBadgeUserSelfSchema\n>({\n  mainSchema: NotificationBadgeUserSelfSchema,\n  resourceIdentifier: CoreResourceType.USER_NOTIFICATION_BADGES,\n  resourceFieldIdentifier:\n    coreResourceShared_FieldIdentifier[CoreResourceType.USER_NOTIFICATION_BADGES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  /** Subject-export disclosure. The subject's own data. Secrets and backend-only values are withheld by the export's security floor regardless of this grant. */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },\n  portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.DERIVED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal\n    // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade\n    // must physically remove the row when its owning user/org is deleted. Without it\n    // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.\n    CoreResourceOperation.DELETE,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          // The framework's user-self filter (USER_SELF primary scope) restricts\n          // results to the authenticated user's own row.\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_USER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          // System-internal: only the dispatcher / batch services drive badge writes.\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n\n    // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n    // onParentDelete cascade so badge rows are physically removed when the owning\n    // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).\n    // Without a DELETE op the cascade (deleteChildrenImmediate) throws\n    // ErrorType.CONFIGURATION on any parent that still has a badge row.\n    // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        },\n      ],\n    },\n  },\n});\n\n// ─── ORGANIZATION NOTIFICATION BADGES ─────────────────────────────────────────\n\ntype OrganizationNotificationBadgesCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\nexport const organizationNotificationBadgesResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<\n  undefined,\n  OrganizationNotificationBadgesCoreOperations,\n  typeof NotificationBadgeOrganizationSchema\n> => createResourceConfiguration_Initialization<\n  undefined,\n  OrganizationNotificationBadgesCoreOperations,\n  typeof NotificationBadgeOrganizationSchema\n>({\n  mainSchema: NotificationBadgeOrganizationSchema,\n  resourceIdentifier: CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES,\n  resourceFieldIdentifier:\n    coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal\n    // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade\n    // must physically remove the row when its owning user/org is deleted. Without it\n    // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.\n    CoreResourceOperation.DELETE,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          // Any org member can see aggregate org badges (e.g. unpaid invoices\n          // count surfaced in the navbar). Matches the lifecycle-state pattern.\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n\n    // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n    // onParentDelete cascade so badge rows are physically removed when the owning\n    // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).\n    // Without a DELETE op the cascade (deleteChildrenImmediate) throws\n    // ErrorType.CONFIGURATION on any parent that still has a badge row.\n    // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        },\n      ],\n    },\n  },\n});\n"]}