@wildo-ai/saas-models 1.0.1 → 1.1.1

package/LICENSE

@@ -0,0 +1,34 @@
+Copyright (c) 2026 P2C Consulting, s.à r.l.-S
+RCS Luxembourg B307591
+6C, Porte de France, L-4360 Esch-sur-Alzette, Luxembourg
+
+All rights reserved.
+
+This software and its accompanying materials (the "Software") are the
+confidential and proprietary property of P2C Consulting, s.à r.l.-S (the
+"Licensor"). The Software is made available for viewing only. No licence,
+right, or permission of any kind is granted by its publication or by its
+availability on any package registry or source repository.
+
+Without the Licensor's prior written permission, you may not use, copy,
+reproduce, modify, adapt, translate, merge, publish, distribute, sublicense,
+sell, host, or create derivative works of the Software, in whole or in part,
+nor use it to provide a service to any third party.
+
+Publication of the Software in any public registry is for distribution to
+authorised recipients and for technical evaluation of its packaging only. It
+does not place the Software in the public domain, does not constitute an open
+source release, and does not waive any right of the Licensor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+LICENSOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Third-party components distributed with the Software remain governed by their
+own licences.
+
+Contact: P2C Consulting, s.à r.l.-S, 6C, Porte de France, L-4360
+Esch-sur-Alzette, Luxembourg.

package/dist/esm/.builder.pid

@@ -0,0 +1,9 @@
+{
+  "schemaVersion": 1,
+  "writerPid": 94958,
+  "orchestratorPid": 94847,
+  "orchestratorSessionId": null,
+  "orchestratorStartedAt": "Mon Aug 31 09:18:19 2026",
+  "distDirectory": "/Users/paulcayon/Projects/Wildo.ai/dev/wildo-ai/engine/saas-models/dist/esm",
+  "acquiredAt": "2026-08-31T07:18:20.686Z"
+}

package/dist/esm/__tests__/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/__tests__/setup.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../../src/__tests__/setup.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC"}

package/dist/esm/__tests__/setup.js

@@ -1,4 +1,19 @@
 import 'reflect-metadata';
-// Global test setup for saas-models package
-// Add any global test configuration here 
-//# sourceMappingURL=setup.js.map
+import { initZodDecorators } from '@wildo-ai/zod-decorators';
+/**
+ * Initialize the zod-decorator chain BEFORE any test module loads its
+ * imports. The package's production root barrel
+ * (`engine/saas-models/src/index.ts`) calls this at module top-level —
+ * any consumer that imports from the bare specifier transitively boots
+ * the decorator chain. But individual test files import schemas via
+ * RELATIVE paths (`../applications.shared.schemas`), which bypasses the
+ * root barrel. Schemas like `ApplicationSchema` use
+ * `z.string().isPrimaryKey()` at module top-level, which throws
+ * `TypeError: z.string(...).isPrimaryKey is not a function` if the
+ * chain isn't initialized first.
+ *
+ * Vitest `setupFiles` run BEFORE any test-file imports, which is
+ * exactly the moment the chain must be patched.
+ */
+initZodDecorators();
+//# sourceMappingURL=setup.js.map

package/dist/esm/__tests__/setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/__tests__/setup.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,4CAA4C;AAC5C,0CAA0C"}
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../../src/__tests__/setup.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;;;;;;;;;;;;GAcG;AACH,iBAAiB,EAAE,CAAC","sourcesContent":["import 'reflect-metadata';\nimport { initZodDecorators } from '@wildo-ai/zod-decorators';\n\n/**\n * Initialize the zod-decorator chain BEFORE any test module loads its\n * imports. The package's production root barrel\n * (`engine/saas-models/src/index.ts`) calls this at module top-level —\n * any consumer that imports from the bare specifier transitively boots\n * the decorator chain. But individual test files import schemas via\n * RELATIVE paths (`../applications.shared.schemas`), which bypasses the\n * root barrel. Schemas like `ApplicationSchema` use\n * `z.string().isPrimaryKey()` at module top-level, which throws\n * `TypeError: z.string(...).isPrimaryKey is not a function` if the\n * chain isn't initialized first.\n *\n * Vitest `setupFiles` run BEFORE any test-file imports, which is\n * exactly the moment the chain must be patched.\n */\ninitZodDecorators();\n"]}

package/dist/esm/_inspect.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=_inspect.d.ts.map

package/dist/esm/_inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_inspect.d.ts","sourceRoot":"","sources":["../../../src/_inspect.ts"],"names":[],"mappings":""}

package/dist/esm/_inspect.js

@@ -0,0 +1,3 @@
+const x = undefined;
+void x;
+//# sourceMappingURL=_inspect.js.map

package/dist/esm/_inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_inspect.js","sourceRoot":"","sources":["../../../src/_inspect.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,GAAmB,SAAS,CAAC;AACpC,KAAK,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { CrossFrontendHandoffRequestSchema } from './security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\ntype Req = z.infer<typeof CrossFrontendHandoffRequestSchema>;\n\ndeclare const r: Req;\ntype ReturnPathType = typeof r.returnPath;\nconst x: ReturnPathType = undefined;\nvoid x;\n"]}

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.d.ts

@@ -5,13 +5,13 @@
  * App-focused management for descriptive information about applications.
  */
 import { z } from 'zod';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
 type ApplicationMetadataCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.CREATE | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
-export declare const applicationMetadataResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<undefined, ApplicationMetadataCoreOperations, z.ZodObject<{
+export declare const applicationMetadataResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, ApplicationMetadataCoreOperations, z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
-    description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+    appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
+    description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
+}, z.core.$strip>>;
 export {};
 //# sourceMappingURL=application-metadata.shared.resources-config.schemas.d.ts.map

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-metadata.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAwB,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AASnG,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;wCAmF3H,CAAC"}
+{"version":3,"file":"application-metadata.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAwB,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUnG,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;kBAsF3H,CAAC"}

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.js

@@ -9,6 +9,7 @@ import { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResource
 import { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas.js';
 import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
 import { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.js';
 /*
 Application Metadata Resource Configuration Factory
@@ -19,6 +20,9 @@ export const applicationMetadataResourceConfiguration_InitializationFactory = (r
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_METADATA],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    // onParentCreate eager-seeding writes through createAsSystem → opt into the
+    // fail-closed system-write policy (composition-oncreate-lifecycle plan).
+    systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },
     coreOperations: [
         CoreResourceOperation.READ,
         CoreResourceOperation.CREATE,
@@ -88,4 +92,4 @@ export const applicationMetadataResourceConfiguration_InitializationFactory = (r
         }
     },
 });
-//# sourceMappingURL=application-metadata.shared.resources-config.schemas.js.map
+//# sourceMappingURL=application-metadata.shared.resources-config.schemas.js.map

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-metadata.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAGxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"application-metadata.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAGxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAEhE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Metadata Shared Resource Configuration\n *\n * Resource configuration for application metadata management.\n * App-focused management for descriptive information about applications.\n */\n\nimport { z } from 'zod';\nimport { ApplicationMetadataSchema } from './applications.shared.schemas';\n\n\n\n\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourcePrimaryScope, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\ntype ApplicationMetadataCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Metadata Resource Configuration Factory\n*/\nexport const applicationMetadataResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  undefined,\n  ApplicationMetadataCoreOperations,\n  typeof ApplicationMetadataSchema\n>({\n  mainSchema: ApplicationMetadataSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_METADATA,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_METADATA],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  // onParentCreate eager-seeding writes through createAsSystem → opt into the\n  // fail-closed system-write policy (composition-oncreate-lifecycle plan).\n  systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application metadata\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    }\n  },\n});\n"]}

package/dist/esm/applications/application-subject.shared.schemas.d.ts

@@ -0,0 +1,51 @@
+import { z } from 'zod';
+/**
+ * Repository-maintained identity of one canonical application subject.
+ *
+ * This is deliberately distinct from the platform database `Application._id`,
+ * the mutable application slug, and any machine-local continuity authority
+ * domain. It remains stable when the repository is cloned or moved and changes
+ * only when an application is intentionally forked into a new semantic subject.
+ *
+ * UUID v4 narrows generation semantics while `.lowercase()` makes the textual
+ * representation canonical for manifests, digests, paths, and equality checks.
+ */
+export declare const ApplicationSubjectIdSchema: z.core.$ZodBranded<z.ZodUUID, "ApplicationSubjectId", "out">;
+export type ApplicationSubjectId = z.infer<typeof ApplicationSubjectIdSchema>;
+/** Immutable repository-bootstrap origin for a canonical application subject. */
+export declare enum ApplicationSubjectOriginKind {
+    INITIALIZED = "INITIALIZED",
+    FORK = "FORK"
+}
+export declare const ApplicationSubjectOriginSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<ApplicationSubjectOriginKind.INITIALIZED>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<ApplicationSubjectOriginKind.FORK>;
+    parentApplicationSubjectId: z.core.$ZodBranded<z.ZodUUID, "ApplicationSubjectId", "out">;
+    sourceGitCommit: z.ZodString;
+    sourceSubjectManifestDigest: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type ApplicationSubjectOrigin = z.infer<typeof ApplicationSubjectOriginSchema>;
+/**
+ * The one portable identity manifest committed at an application root.
+ *
+ * `createdAt` is observational and is deliberately excluded by the manifest
+ * digest protocol. The schema remains data-only so configuration/bootstrap
+ * code can parse it before importing executable application configuration.
+ */
+export declare const ApplicationSubjectManifestV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    applicationSubjectId: z.core.$ZodBranded<z.ZodUUID, "ApplicationSubjectId", "out">;
+    createdAt: z.ZodISODateTime;
+    origin: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<ApplicationSubjectOriginKind.INITIALIZED>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<ApplicationSubjectOriginKind.FORK>;
+        parentApplicationSubjectId: z.core.$ZodBranded<z.ZodUUID, "ApplicationSubjectId", "out">;
+        sourceGitCommit: z.ZodString;
+        sourceSubjectManifestDigest: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    manifestDigest: z.ZodString;
+}, z.core.$strict>;
+export type ApplicationSubjectManifestV1 = z.infer<typeof ApplicationSubjectManifestV1Schema>;
+//# sourceMappingURL=application-subject.shared.schemas.d.ts.map

package/dist/esm/applications/application-subject.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-subject.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,8DAGL,CAAC;AAGnC,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,iFAAiF;AACjF,oBAAY,4BAA4B;IACtC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;CACd;AAED,eAAO,MAAM,8BAA8B;;;;;;;4BAYzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;kBAgB5C,CAAC;AACJ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC"}

package/dist/esm/applications/application-subject.shared.schemas.js

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+/**
+ * Repository-maintained identity of one canonical application subject.
+ *
+ * This is deliberately distinct from the platform database `Application._id`,
+ * the mutable application slug, and any machine-local continuity authority
+ * domain. It remains stable when the repository is cloned or moved and changes
+ * only when an application is intentionally forked into a new semantic subject.
+ *
+ * UUID v4 narrows generation semantics while `.lowercase()` makes the textual
+ * representation canonical for manifests, digests, paths, and equality checks.
+ */
+export const ApplicationSubjectIdSchema = z
+    .uuidv4()
+    .lowercase()
+    .brand();
+/** Immutable repository-bootstrap origin for a canonical application subject. */
+export var ApplicationSubjectOriginKind;
+(function (ApplicationSubjectOriginKind) {
+    ApplicationSubjectOriginKind["INITIALIZED"] = "INITIALIZED";
+    ApplicationSubjectOriginKind["FORK"] = "FORK";
+})(ApplicationSubjectOriginKind || (ApplicationSubjectOriginKind = {}));
+export const ApplicationSubjectOriginSchema = z.discriminatedUnion('kind', [
+    z.strictObject({
+        kind: z.literal(ApplicationSubjectOriginKind.INITIALIZED),
+    }),
+    z.strictObject({
+        kind: z.literal(ApplicationSubjectOriginKind.FORK),
+        parentApplicationSubjectId: ApplicationSubjectIdSchema,
+        sourceGitCommit: z.string().min(1),
+        sourceSubjectManifestDigest: z
+            .string()
+            .regex(/^sha256:[0-9a-f]{64}$/),
+    }),
+]);
+/**
+ * The one portable identity manifest committed at an application root.
+ *
+ * `createdAt` is observational and is deliberately excluded by the manifest
+ * digest protocol. The schema remains data-only so configuration/bootstrap
+ * code can parse it before importing executable application configuration.
+ */
+export const ApplicationSubjectManifestV1Schema = z
+    .strictObject({
+    schemaVersion: z.literal(1),
+    applicationSubjectId: ApplicationSubjectIdSchema,
+    createdAt: z.iso.datetime(),
+    origin: ApplicationSubjectOriginSchema,
+    manifestDigest: z.string().regex(/^sha256:[0-9a-f]{64}$/),
+})
+    .refine((manifest) => manifest.origin.kind !== ApplicationSubjectOriginKind.FORK
+    || manifest.origin.parentApplicationSubjectId !== manifest.applicationSubjectId, {
+    message: 'a fork must create a distinct application subject identity',
+    path: ['origin', 'parentApplicationSubjectId'],
+});
+//# sourceMappingURL=application-subject.shared.schemas.js.map

package/dist/esm/applications/application-subject.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-subject.shared.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,EAAE;KACR,SAAS,EAAE;KACX,KAAK,EAA0B,CAAC;AAKnC,iFAAiF;AACjF,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,2DAA2B,CAAA;IAC3B,6CAAa,CAAA;AACf,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,WAAW,CAAC;KAC1D,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC;QAClD,0BAA0B,EAAE,0BAA0B;QACtD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,2BAA2B,EAAE,CAAC;aAC3B,MAAM,EAAE;aACR,KAAK,CAAC,uBAAuB,CAAC;KAClC,CAAC;CACH,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,oBAAoB,EAAE,0BAA0B;IAChD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,8BAA8B;IACtC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;CAC1D,CAAC;KACD,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,4BAA4B,CAAC,IAAI;OACvD,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,QAAQ,CAAC,oBAAoB,EACjF;IACE,OAAO,EAAE,4DAA4D;IACrE,IAAI,EAAE,CAAC,QAAQ,EAAE,4BAA4B,CAAC;CAC/C,CACF,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * Repository-maintained identity of one canonical application subject.\n *\n * This is deliberately distinct from the platform database `Application._id`,\n * the mutable application slug, and any machine-local continuity authority\n * domain. It remains stable when the repository is cloned or moved and changes\n * only when an application is intentionally forked into a new semantic subject.\n *\n * UUID v4 narrows generation semantics while `.lowercase()` makes the textual\n * representation canonical for manifests, digests, paths, and equality checks.\n */\nexport const ApplicationSubjectIdSchema = z\n  .uuidv4()\n  .lowercase()\n  .brand<'ApplicationSubjectId'>();\n\n\nexport type ApplicationSubjectId = z.infer<typeof ApplicationSubjectIdSchema>;\n\n/** Immutable repository-bootstrap origin for a canonical application subject. */\nexport enum ApplicationSubjectOriginKind {\n  INITIALIZED = 'INITIALIZED',\n  FORK = 'FORK',\n}\n\nexport const ApplicationSubjectOriginSchema = z.discriminatedUnion('kind', [\n  z.strictObject({\n    kind: z.literal(ApplicationSubjectOriginKind.INITIALIZED),\n  }),\n  z.strictObject({\n    kind: z.literal(ApplicationSubjectOriginKind.FORK),\n    parentApplicationSubjectId: ApplicationSubjectIdSchema,\n    sourceGitCommit: z.string().min(1),\n    sourceSubjectManifestDigest: z\n      .string()\n      .regex(/^sha256:[0-9a-f]{64}$/),\n  }),\n]);\nexport type ApplicationSubjectOrigin = z.infer<\n  typeof ApplicationSubjectOriginSchema\n>;\n\n/**\n * The one portable identity manifest committed at an application root.\n *\n * `createdAt` is observational and is deliberately excluded by the manifest\n * digest protocol. The schema remains data-only so configuration/bootstrap\n * code can parse it before importing executable application configuration.\n */\nexport const ApplicationSubjectManifestV1Schema = z\n  .strictObject({\n    schemaVersion: z.literal(1),\n    applicationSubjectId: ApplicationSubjectIdSchema,\n    createdAt: z.iso.datetime(),\n    origin: ApplicationSubjectOriginSchema,\n    manifestDigest: z.string().regex(/^sha256:[0-9a-f]{64}$/),\n  })\n  .refine(\n    (manifest) =>\n      manifest.origin.kind !== ApplicationSubjectOriginKind.FORK\n      || manifest.origin.parentApplicationSubjectId !== manifest.applicationSubjectId,\n    {\n      message: 'a fork must create a distinct application subject identity',\n      path: ['origin', 'parentApplicationSubjectId'],\n    },\n  );\nexport type ApplicationSubjectManifestV1 = z.infer<\n  typeof ApplicationSubjectManifestV1Schema\n>;\n"]}

package/dist/esm/applications/application-versions.shared.resources-config.schemas.d.ts

@@ -1,24 +1,22 @@
 /**
  * Application Version Shared Resource Configuration
  *
- * Resource configuration for application version management.
- * App-focused management for release and version control.
+ * The application's release log: one row per published build, carrying its version string,
+ * release date, and release notes. This resource RECORDS releases through core CRUD; it does
+ * not control them — which build runs where is owned by the deployment tooling, not by a
+ * resource operation. See the note below the imports for why the promotion verbs that once
+ * lived here were removed.
  */
 import { z } from 'zod';
-import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceRelationship } from '../resources/resources.shared.schemas.js';
-export declare enum ApplicationVersion_Operations {
-    PROMOTE = "promote",// Promote version to environment
-    ROLLBACK = "rollback",// Rollback to previous version
-    DEPRECATE = "deprecate"
-}
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { ResourceRelationship } from '../resources/resources.shared.schemas';
 type ApplicationVersionCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH | CoreResourceOperation.CREATE | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
-export declare const applicationVersionsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("../index.js").ResourceConfiguration<typeof ApplicationVersion_Operations, ApplicationVersionCoreOperations, z.ZodObject<{
+export declare const applicationVersionsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, ApplicationVersionCoreOperations, z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
     version: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     releaseDate: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
     releaseNotes: z.ZodString;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip>>;
 export {};
 //# sourceMappingURL=application-versions.shared.resources-config.schemas.d.ts.map

package/dist/esm/applications/application-versions.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-versions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAkF,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI7J,oBAAY,6BAA6B;IACvC,OAAO,YAAY,CAAE,iCAAiC;IACtD,QAAQ,aAAa,CAAE,+BAA+B;IACtD,SAAS,cAAc;CACxB;AASD,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;wCAyL3H,CAAC"}
+{"version":3,"file":"application-versions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA8CvI,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAuH3H,CAAC"}

package/dist/esm/applications/application-versions.shared.resources-config.schemas.js

@@ -1,8 +1,11 @@
 /**
  * Application Version Shared Resource Configuration
  *
- * Resource configuration for application version management.
- * App-focused management for release and version control.
+ * The application's release log: one row per published build, carrying its version string,
+ * release date, and release notes. This resource RECORDS releases through core CRUD; it does
+ * not control them — which build runs where is owned by the deployment tooling, not by a
+ * resource operation. See the note below the imports for why the promotion verbs that once
+ * lived here were removed.
  */
 import { z } from 'zod';
 import { ApplicationVersionSchema } from './applications.shared.schemas.js';
@@ -11,13 +14,41 @@ import { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.
 import { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas.js';
 import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas.js';
-// Custom operations enum for application versions
-export var ApplicationVersion_Operations;
-(function (ApplicationVersion_Operations) {
-    ApplicationVersion_Operations["PROMOTE"] = "promote";
-    ApplicationVersion_Operations["ROLLBACK"] = "rollback";
-    ApplicationVersion_Operations["DEPRECATE"] = "deprecate";
-})(ApplicationVersion_Operations || (ApplicationVersion_Operations = {}));
+// This resource has NO custom operations.
+//
+// `PROMOTE` / `ROLLBACK` / `DEPRECATE` were declared here as `ORG_ADMIN`-gated custom operations
+// and were removed on 2026-08-01. All three were ROUTED but never implemented, so each request
+// fell through to the generic core UPDATE, which persists only fields the resource schema
+// declares — none of `targetEnvironment`, `deploymentNotes`, `environment`, `rollbackReason`,
+// `deprecationReason`, or `deprecationDate` is one, so every call answered **HTTP 200 having
+// changed nothing**.
+//
+// They were REMOVED rather than implemented because the state they manage does not exist here,
+// and for PROMOTE/ROLLBACK cannot exist:
+//
+//  1. THE FRAMEWORK IS MONO-ENV. `RuntimeEnvironment` states that each running platform or
+//     application instance is one environment per deployment, and that the environment value is
+//     NOT used for multi-env routing, DB lookup keys, or isolation — every deployment has its
+//     own infra. So "version X is live in environment Y" cannot be stated truthfully in this
+//     application's own database: a staging deployment is a DIFFERENT deployment with a
+//     DIFFERENT database. A row here asserting a foreign environment's live version would
+//     describe state this process can neither read, verify, nor enforce.
+//  2. DEPLOYMENT IS OWNED BY THE CLI SELF-HOST LANE (`wildo config sync` /
+//     `K8sManifestGenerator`). The apps-manager runtime publishing lane was deliberately removed
+//     on 2026-07-17; resource verbs here would duplicate and contradict that decision.
+//  3. The platform's own version resource (`WILDO_APPLICATION_VERSIONS`, app-factory git
+//     branch/commit tracking) exposes READ/LIST/CREATE only — no environment field and no
+//     promotion verbs.
+//
+// `DEPRECATE` was not environment-coupled and so escaped (1), but was removed with the others:
+// nothing anywhere consumes deprecation state, and with promotion gone this resource is a
+// release-notes changelog ledger, on which a deprecation flag would be speculative state.
+//
+// What remains is honest: an append-mostly release log (version, release date, release notes)
+// managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a
+// custom implementation and the persisted state it writes — follow the organization-units
+// MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE
+// persists). See `.claude/plans/routed-unimplemented-operations-fail-closed.md`.
 const APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];
 const APPLICATION_VERSION_FILTER_FIELDS = {
     appId: z.string(),
@@ -40,7 +71,7 @@ export const applicationVersionsResourceConfiguration_InitializationFactory = (r
         CoreResourceOperation.UPDATE,
         CoreResourceOperation.DELETE
     ],
-    customOperation: ApplicationVersion_Operations,
+    customOperation: {},
     operationsConfiguration: {
         [CoreResourceOperation.CREATE]: {
             variants: [
@@ -131,70 +162,7 @@ export const applicationVersionsResourceConfiguration_InitializationFactory = (r
                     channel: CoreUserNotificationChannel.EMAIL,
                 }
             ]
-        },
-        [ApplicationVersion_Operations.PROMOTE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can promote versions
-                    riskLevel: ResourceOperationRiskLevel.HIGH,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        targetEnvironment: z.string().min(1),
-                        deploymentNotes: z.string().max(500).optional()
-                    })
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,
-                    channel: CoreUserNotificationChannel.EMAIL,
-                }
-            ]
-        },
-        [ApplicationVersion_Operations.ROLLBACK]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can rollback versions
-                    riskLevel: ResourceOperationRiskLevel.HIGH,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        environment: z.string().min(1),
-                        rollbackReason: z.string().min(1).max(500)
-                    })
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,
-                    channel: CoreUserNotificationChannel.EMAIL,
-                }
-            ]
-        },
-        [ApplicationVersion_Operations.DEPRECATE]: {
-            variants: [
-                {
-                    variantType: ResourceOperationVariantType.API_CALL,
-                    isDefault: true,
-                    roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can deprecate versions
-                    riskLevel: ResourceOperationRiskLevel.MEDIUM,
-                    resourceOperationLike: CoreResourceOperation.UPDATE,
-                    requestDto: z.object({
-                        deprecationReason: z.string().max(500).optional(),
-                        deprecationDate: z.date().optional()
-                    })
-                }
-            ],
-            userNotifications: [
-                {
-                    target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,
-                    channel: CoreUserNotificationChannel.EMAIL,
-                }
-            ]
         }
     },
 });
-//# sourceMappingURL=application-versions.shared.resources-config.schemas.js.map
+//# sourceMappingURL=application-versions.shared.resources-config.schemas.js.map

package/dist/esm/applications/application-versions.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-versions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAA8C,MAAM,uCAAuC,CAAC;AAC7J,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,kDAAkD;AAClD,MAAM,CAAN,IAAY,6BAIX;AAJD,WAAY,6BAA6B;IACvC,oDAAmB,CAAA;IACnB,sDAAqB,CAAA;IACrB,wDAAuB,CAAA;AACzB,CAAC,EAJW,6BAA6B,KAA7B,6BAA6B,QAIxC;AAED,MAAM,+BAA+B,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,iCAAiC,GAAG;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,6BAA6B;IAE9C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;oBAC5C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,iCAAiC;oBAC/C,UAAU,EAAE,+BAA+B;oBAC3C,8BAA8B,EAAE,EAAE;iBACnC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,6BAA6B,CAAC,OAAO,CAAC,EAAE;YACvC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,kCAAkC;oBACrE,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;wBACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;qBAChD,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,6BAA6B,CAAC,QAAQ,CAAC,EAAE;YACxC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,mCAAmC;oBACtE,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;qBAC3C,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAAE;YACzC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,oCAAoC;oBACvE,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;wBACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;wBACjD,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;qBACrC,CAAC;iBACH;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"application-versions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,0CAA0C;AAC1C,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,0FAA0F;AAC1F,8FAA8F;AAC9F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,+FAA+F;AAC/F,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,8FAA8F;AAC9F,6FAA6F;AAC7F,wFAAwF;AACxF,0FAA0F;AAC1F,yEAAyE;AACzE,2EAA2E;AAC3E,iGAAiG;AACjG,uFAAuF;AACvF,yFAAyF;AACzF,0FAA0F;AAC1F,uBAAuB;AACvB,EAAE;AACF,+FAA+F;AAC/F,0FAA0F;AAC1F,0FAA0F;AAC1F,EAAE;AACF,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,gGAAgG;AAChG,iFAAiF;AAEjF,MAAM,+BAA+B,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,iCAAiC,GAAG;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;oBAC5C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,iCAAiC;oBAC/C,UAAU,EAAE,+BAA+B;oBAC3C,8BAA8B,EAAE,EAAE;iBACnC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Version Shared Resource Configuration\n *\n * The application's release log: one row per published build, carrying its version string,\n * release date, and release notes. This resource RECORDS releases through core CRUD; it does\n * not control them — which build runs where is owned by the deployment tooling, not by a\n * resource operation. See the note below the imports for why the promotion verbs that once\n * lived here were removed.\n */\n\nimport { z } from 'zod';\nimport { ApplicationVersionSchema } from './applications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n// This resource has NO custom operations.\n//\n// `PROMOTE` / `ROLLBACK` / `DEPRECATE` were declared here as `ORG_ADMIN`-gated custom operations\n// and were removed on 2026-08-01. All three were ROUTED but never implemented, so each request\n// fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares — none of `targetEnvironment`, `deploymentNotes`, `environment`, `rollbackReason`,\n// `deprecationReason`, or `deprecationDate` is one, so every call answered **HTTP 200 having\n// changed nothing**.\n//\n// They were REMOVED rather than implemented because the state they manage does not exist here,\n// and for PROMOTE/ROLLBACK cannot exist:\n//\n//  1. THE FRAMEWORK IS MONO-ENV. `RuntimeEnvironment` states that each running platform or\n//     application instance is one environment per deployment, and that the environment value is\n//     NOT used for multi-env routing, DB lookup keys, or isolation — every deployment has its\n//     own infra. So \"version X is live in environment Y\" cannot be stated truthfully in this\n//     application's own database: a staging deployment is a DIFFERENT deployment with a\n//     DIFFERENT database. A row here asserting a foreign environment's live version would\n//     describe state this process can neither read, verify, nor enforce.\n//  2. DEPLOYMENT IS OWNED BY THE CLI SELF-HOST LANE (`wildo config sync` /\n//     `K8sManifestGenerator`). The apps-manager runtime publishing lane was deliberately removed\n//     on 2026-07-17; resource verbs here would duplicate and contradict that decision.\n//  3. The platform's own version resource (`WILDO_APPLICATION_VERSIONS`, app-factory git\n//     branch/commit tracking) exposes READ/LIST/CREATE only — no environment field and no\n//     promotion verbs.\n//\n// `DEPRECATE` was not environment-coupled and so escaped (1), but was removed with the others:\n// nothing anywhere consumes deprecation state, and with promotion gone this resource is a\n// release-notes changelog ledger, on which a deprecation flag would be speculative state.\n//\n// What remains is honest: an append-mostly release log (version, release date, release notes)\n// managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a\n// custom implementation and the persisted state it writes — follow the organization-units\n// MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE\n// persists). See `.claude/plans/routed-unimplemented-operations-fail-closed.md`.\n\nconst APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];\n\nconst APPLICATION_VERSION_FILTER_FIELDS = {\n  appId: z.string(),\n  version: z.string(),\n};\n\ntype ApplicationVersionCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Versions Resource Configuration Factory\n*/\nexport const applicationVersionsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  ApplicationVersionCoreOperations,\n  typeof ApplicationVersionSchema\n>({\n  mainSchema: ApplicationVersionSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_VERSIONS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_VERSIONS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application versions\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          searchableFields: ['version', 'description'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_VERSION_FILTER_FIELDS,\n          sortFields: APPLICATION_VERSION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can list application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application versions\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n});\n"]}