npm - @wildo-ai/saas-models - Versions diffs - 1.1.2 → 1.1.3 - Mend

@wildo-ai/saas-models 1.1.2 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (410) hide show

package/dist/esm/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,iBAAiB,EAAE,CAAC;AAEpB,cAAc,yDAAyD,CAAC;AACxE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,qCAAqC,CAAA;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8DAA8D,CAAC;AAE7E,cAAc,mDAAmD,CAAC;AAClE,cAAc,uDAAuD,CAAC;AACtE,cAAc,sCAAsC,CAAC;AACrD,cAAc,kDAAkD,CAAC;AACjE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uEAAuE,CAAC;AACtF,cAAc,iDAAiD,CAAC;AAChE,cAAc,kEAAkE,CAAC;AACjF,cAAc,sDAAsD,CAAC;AACrE,cAAc,uEAAuE,CAAC;AACtF,cAAc,qDAAqD,CAAC;AACpE,cAAc,sEAAsE,CAAC;AACrF,cAAc,yCAAyC,CAAC;AACxD,cAAc,4CAA4C,CAAC;AAE3D,cAAc,4EAA4E,CAAC;AAE3F,cAAc,6DAA6D,CAAC;AAC5E,cAAc,uEAAuE,CAAC;AAEtF,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AACjG,8FAA8F;AAC9F,mGAAmG;AACnG,qDAAqD;AACrD,EAAE;AACF,oEAAoE;AACpE,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,gGAAgG;AAChG,gGAAgG;AAChG,6GAA6G;AAC7G,gGAAgG;AAChG,qDAAqD;AACrD,EAAE;AACF,2FAA2F;AAC3F,0FAA0F;AAE1F,cAAc,wDAAwD,CAAC;AACvE,cAAc,yDAAyD,CAAC;AACxE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,wDAAwD,CAAC;AACvE,cAAc,uDAAuD,CAAC;AACtE,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,uDAAuD,CAAC;AAEtE,2FAA2F;AAC3F,kGAAkG;AAClG,mGAAmG;AACnG,qFAAqF;AACrF,cAAc,qDAAqD,CAAC;AAEpE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6EAA6E,CAAC;AAC5F,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAE7D,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,4CAA4C,CAAC;AAE3D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+CAA+C,CAAC;AAC9D,cAAc,0CAA0C,CAAC;AACzD,cAAc,sDAAsD,CAAC;AACrE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qEAAqE,CAAC;AACpF,cAAc,8CAA8C,CAAC;AAC7D,cAAc,mDAAmD,CAAC;AAClE,cAAc,0DAA0D,CAAC;AACzE,cAAc,oEAAoE,CAAC;AACnF,cAAc,6DAA6D,CAAC;AAC5E,cAAc,8EAA8E,CAAC;AAE7F,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAE/C,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,0BAA0B;AAE1B,cAAc,uCAAuC,CAAC;AACtD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wDAAwD,CAAC;AACvE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,iDAAiD,CAAC;AAChE,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,oDAAoD,CAAC;AACnE,yFAAyF;AACzF,cAAc,mEAAmE,CAAC;AAClF,cAAc,0DAA0D,CAAC;AACzE,cAAc,qDAAqD,CAAC;AACpE,cAAc,kEAAkE,CAAC;AACjF,cAAc,kEAAkE,CAAC;AACjF,cAAc,wDAAwD,CAAC;AACvE,cAAc,wEAAwE,CAAC;AACvF,cAAc,iDAAiD,CAAC;AAChE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,iDAAiD,CAAC;AAChE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,wDAAwD,CAAC;AACvE,cAAc,sDAAsD,CAAC;AACrE,cAAc,sDAAsD,CAAC;AACrE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,kEAAkE,CAAC;AACjF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,iDAAiD,CAAC;AAChE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wDAAwD,CAAC;AACvE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kCAAkC,CAAC;AAEjD,8BAA8B;AAC9B,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,0CAA0C,CAAC;AAEzD,eAAe;AACf,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,0CAA0C,CAAC;AAEzD,oBAAoB;AACpB,cAAc,wCAAwC,CAAC;AAEvD,oEAAoE;AACpE,cAAc,mDAAmD,CAAC;AAClE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6DAA6D,CAAC;AAC5E,cAAc,qEAAqE,CAAC;AACpF,cAAc,qEAAqE,CAAC;AACpF,cAAc,6CAA6C,CAAC;AAE5D,gBAAgB;AAChB,cAAc,2CAA2C,CAAC;AAC1D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,uDAAuD,CAAC;AACtE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,kDAAkD,CAAC;AACjE,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,iGAAiG;AACjG,6IAA6I;AAC7I,wFAAwF;AACxF,cAAc,mDAAmD,CAAC;AAClE,cAAc,uDAAuD,CAAC;AACtE,cAAc,6CAA6C,CAAC;AAE5D,qDAAqD;AAErD,uBAAuB;AACvB,cAAc,sDAAsD,CAAC;AACrE,cAAc,0DAA0D,CAAC;AACzE,cAAc,sEAAsE,CAAC;AACrF,cAAc,uEAAuE,CAAC;AACtF,cAAc,yDAAyD,CAAC;AACxE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,qEAAqE,CAAC;AACpF,cAAc,0DAA0D,CAAC;AACzE,cAAc,oDAAoD,CAAC;AACnE,cAAc,wDAAwD,CAAC;AACvE,cAAc,oDAAoD,CAAC;AACnE,cAAc,oDAAoD,CAAC;AACnE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kEAAkE,CAAC;AACjF,cAAc,iEAAiE,CAAC;AAChF,cAAc,uDAAuD,CAAC;AACtE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,oCAAoC,CAAC;AACnD,cAAc,kDAAkD,CAAC;AACjE,cAAc,yDAAyD,CAAC;AACxE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC;AAC5D,yCAAyC;AAEzC,cAAc,0DAA0D,CAAC;AACzE,cAAc,2EAA2E,CAAC;AAC1F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,+EAA+E,CAAC;AAC9F,cAAc,mEAAmE,CAAC;AAClF,cAAc,oFAAoF,CAAC;AACnG,cAAc,kEAAkE,CAAC;AACjF,cAAc,mFAAmF,CAAC;AAClG,cAAc,4DAA4D,CAAC;AAC3E,cAAc,6EAA6E,CAAC;AAC5F,cAAc,uEAAuE,CAAC;AACtF,cAAc,yEAAyE,CAAC;AACxF,cAAc,0FAA0F,CAAC;AAEzG,UAAU;AACV,cAAc,0CAA0C,CAAC;AACzD,cAAc,2DAA2D,CAAC;AAC1E,cAAc,gDAAgD,CAAC;AAC/D,cAAc,wCAAwC,CAAC;AACvD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uDAAuD,CAAC;AACtE,cAAc,sCAAsC,CAAC;AACrD,cAAc,uDAAuD,CAAC;AACtE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iDAAiD,CAAC;AAChE,cAAc,kCAAkC,CAAC;AACjD,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC;AACjE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qCAAqC,CAAC;AACpD,cAAc,sDAAsD,CAAC;AACrE,cAAc,mCAAmC,CAAC;AAClD,cAAc,oDAAoD,CAAC;AACnE,cAAc,uCAAuC,CAAC;AACtD,cAAc,wDAAwD,CAAC;AACvE,cAAc,uCAAuC,CAAC;AACtD,cAAc,wDAAwD,CAAC;AAEvE,gBAAgB;AAChB,cAAc,sDAAsD,CAAC;AACrE,cAAc,uEAAuE,CAAC;AACtF,cAAc,qDAAqD,CAAC;AACpE,cAAc,sEAAsE,CAAC;AACrF,cAAc,2DAA2D,CAAC;AAC1E,cAAc,4EAA4E,CAAC;AAC3F,cAAc,yDAAyD,CAAC;AACxE,cAAc,0EAA0E,CAAC;AACzF,cAAc,qDAAqD,CAAC;AACpE,cAAc,sEAAsE,CAAC;AACrF,cAAc,mDAAmD,CAAC;AAClE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,0DAA0D,CAAC;AACzE,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,oEAAoE,CAAC;AACnF,cAAc,8CAA8C,CAAC;AAC7D,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AAEtE,WAAW;AACX,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0EAA0E,CAAC;AACzF,cAAc,2EAA2E,CAAC;AAC1F,cAAc,uDAAuD,CAAC;AACtE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,oFAAoF,CAAC;AACnG,cAAc,qFAAqF,CAAC;AACpG,cAAc,8DAA8D,CAAC;AAC7E,cAAc,+EAA+E,CAAC;AAC9F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,wDAAwD,CAAC;AACvE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,gFAAgF,CAAC;AAC/F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,oEAAoE,CAAC;AACnF,cAAc,iEAAiE,CAAC;AAChF,cAAc,kFAAkF,CAAC;AACjG,cAAc,iDAAiD,CAAC;AAChE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,mDAAmD,CAAC;AAGlE,QAAQ;AACR,cAAc,yCAAyC,CAAC;AACxD,cAAc,0DAA0D,CAAC;AACzE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+CAA+C,CAAC;AAC9D,cAAc,uDAAuD,CAAC;AACtE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0DAA0D,CAAC;AACzE,cAAc,mDAAmD,CAAC;AAClE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,+DAA+D,CAAC;AAC9E,cAAc,0DAA0D,CAAC;AACzE,cAAc,uCAAuC,CAAC;AACtD,cAAc,yDAAyD,CAAC;AACxE,cAAc,yCAAyC,CAAC;AACxD,cAAc,0DAA0D,CAAC;AACzE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6DAA6D,CAAC;AAE5E,0BAA0B;AAC1B,cAAc,iDAAiD,CAAC;AAEhE,kBAAkB;AAClB,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0DAA0D,CAAC;AACzE,cAAc,iEAAiE,CAAC;AAChF,cAAc,0CAA0C,CAAC;AACzD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAE7D,eAAe;AACf,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,mDAAmD,CAAC;AAElE,WAAW;AACX,cAAc,yCAAyC,CAAC;AACxD,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2DAA2D,CAAC;AAC1E,wBAAwB;AACxB,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8DAA8D,CAAC;AAE7E,sBAAsB;AACtB,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,4DAA4D,CAAC;AAE3E,oDAAoD;AACpD,cAAc,mDAAmD,CAAC;AAElE,iBAAiB;AACjB,cAAc,4CAA4C,CAAC","sourcesContent":["// Flow-Actor System & App-Blueprint\nimport { initZodDecorators } from '@wildo-ai/zod-decorators';\ninitZodDecorators();\n\nexport * from './companion/shared-library-companion.shared.definitions';\nexport * from './companion/provider-discovery.shared.schemas';\nexport * from './flows-actors/flows.shared.schemas'\nexport * from './flows-actors/actors.shared.schemas';\nexport * from './flows-actors/tasks.actors.shared.schemas';\nexport * from './flows-actors/task-continuity-binding.actors.shared.schemas';\n\nexport * from './flows-actors/flows-actors.system.shared.schemas';\nexport * from './flows-actors/flows-actors.system.shared.definitions';\nexport * from './flows-actors/agents.shared.schemas';\nexport * from './flows-actors/agent-traceability.shared.schemas';\nexport * from './flows-actors/flows-actors.io.shared.schemas';\nexport * from './flows-actors/flows-actors.commons.shared.schemas';\nexport * from './flows-actors/flows-actors.frontend.shared.schemas';\nexport * from './flows-actors/flows-actors-execution.shared.schemas';\nexport * from './flows-actors/flows-actors-execution.shared.resources-config.schemas';\nexport * from './flows-actors/flows-actors-task.shared.schemas';\nexport * from './flows-actors/flows-actors-task.shared.resources-config.schemas';\nexport * from './flows-actors/a2a-token-budget-state.shared.schemas';\nexport * from './flows-actors/a2a-token-budget-state.shared.resources-config.schemas';\nexport * from './flows-actors/a2a-push-delivery-log.shared.schemas';\nexport * from './flows-actors/a2a-push-delivery-log.shared.resources-config.schemas';\nexport * from './flows-actors/prompt-ir.shared.schemas';\nexport * from './flows-actors/deliberation.shared.schemas';\n\nexport * from './flows-actors/utils/flow-actors.context-builder.apps-context.shared.utils';\n\nexport * from './flows-actors/apps-blueprint/apps-blueprint.shared.schemas';\nexport * from './flows-actors/apps-blueprint/artifacts.apps-blueprint.shared.schemas';\n\n// Meta-workflow contracts (playbooks, decisions, actions, execution bindings, portable application\n// continuity) are NOT re-exported here. They are defined in this package and published through the\n// dedicated `@wildo-ai/saas-models/meta-workflows` entrypoint, so the root barrel does not put a\n// whole authoring domain in front of consumers that only need the resource/schema vocabulary.\n// Re-adding any `flows-actors/meta-workflows/` line here fails `pnpm check:package-entrypoints`.\n// See `.claude/rules/package-public-entrypoints.md`.\n//\n// The BOUNDARY between that domain and the Actor Task vocabulary is\n// `flows-actors/task-continuity-binding.actors.shared.schemas`, exported above. It is deliberately\n// NOT a `meta-workflows/` file: a root-exported Actor Task carries a continuity correlation, so\n// the correlation object and the one nominal enum on it belong to the root's own surface. Keeping\n// them on the far side of the subpath is what produced `TS2742`/`TS2883` at every consumer that\n// derived a schema from `Actors_Task_Schema` — the `meta-workflows` subpath published the enum,\n// but a root-only consumer never resolves that subpath, so no name it could use existed — while transitively\n// dragging 12 of the 15 `meta-workflows/*` modules into this barrel's closure anyway, which is\n// exactly what the paragraph above claims not to do.\n//\n// When a root-exported contract needs something the authoring domain owns, move it to that\n// boundary module. Do NOT re-export across the subpath, and do NOT annotate the consumer.\n\nexport from './external-providers/external-providers.shared.schemas';\nexport * from './external-providers/engine-capabilities.shared.schemas';\nexport * from './external-providers/engine-capability-resolution-mode.shared';\nexport * from './external-providers/frontend-bootstrap.shared.schemas';\nexport * from './external-providers/provider-metadata.shared.schemas';\nexport * from './external-providers/provider-capability.shared.schemas';\nexport * from './external-providers/provider-protocol.shared.schemas';\nexport * from './external-providers/compose-provider-registry.shared';\n\n// The external-data AUTHORING contract (the virtual binding + the pipeline declaration) is\n// published ONLY by `@wildo-ai/saas-models/external-data` — one door per room. Row IDENTITY stays\n// here on purpose: a synthesized id reaches URLs and frontend routing, so it is not an integration\n// concern. See `external-data.exports.ts` for the measurement behind both decisions.\nexport * from './http-api-binding/http-api-binding-id.shared.utils';\n\nexport * from './errors/errors.shared.schemas';\nexport * from './frontend-definitions/frontend-notification-custom-message-ref.definitions';\nexport * from './i18n/labelling.dto.shared.schemas';\nexport * from './i18n/interpolate-label-params.shared.utils';\n\nexport * from './errors/errors.shared.definitions';\nexport * from './errors/errors.shared.utils';\nexport * from './errors/errors.custom-message-ref.shared.definitions';\nexport * from './errors/resource-access-forbidden.shared.error';\nexport * from './errors/zod-issue-formatting.shared.utils';\n\nexport * from './files/files.shared.schemas';\nexport * from './files/files.shared.utils';\nexport * from './files/files.shared.resources-config.schemas';\nexport * from './files/file-upload-grant.shared.schemas';\nexport * from './notifications/notification-badges.core.definitions';\nexport * from './notifications/notification-badges.schemas';\nexport * from './notifications/notification-badges.shared.resources-config.schemas';\nexport * from './notifications/notifications.shared.schemas';\nexport * from './notifications/m2m/webhook-config.shared.schemas';\nexport * from './notifications/m2m/m2m-webhook-delivery-contract.shared';\nexport * from './notifications/m2m/webhook-config.shared.resources-config.schemas';\nexport * from './notifications/m2m/m2m-webhook-delivery-log.shared.schemas';\nexport * from './notifications/m2m/m2m-webhook-delivery-log.shared.resources-config.schemas';\n\nexport * from './requests/header-keys.shared';\nexport * from './requests/websocket.shared.schemas';\nexport * from './requests/http-requests.shared';\nexport * from './crdt/crdt-merge.shared.utils';\n\n// Data Seeding — schemas + factory + DataSeedRun resource were RELOCATED to\n// `@wildo-ai/saas-backend-lib` in Phase 2.G (the user moved them; the\n// shared models for data-seeding are a backend-only concern). Consumers\n// must import from `@wildo-ai/saas-backend-lib` instead. Do NOT re-add\n// `export * from './data-seeding/...'` here — the directory no longer\n// exists in this package.\n\nexport * from './requests/rate-limits.shared.schemas';\nexport * from './requests/manual-controllers-routes-urls';\nexport * from './resources/resources-registry.shared.core.definitions';\nexport * from './resources/resources.shared.core.definitions';\nexport * from './resources/resources.shared.schemas';\nexport * from './resources/context-policy.shared.schemas';\nexport * from './resources/child-operations.shared.schemas';\nexport * from './resources/relationship-display.shared.schemas';\nexport * from './resources/resources.shared.utils';\nexport * from './resources/resources-config.shared.factory';\nexport * from './resources/resources-config.shared.schemas';\nexport * from './resources/collection-query-parameters.shared';\nexport * from './resources/resources-relationships.shared.factory';\nexport * from './resources/resources-serialization.shared.schemas';\n// DELETED: resource-frontend.shared.schemas — transferred to @wildo-ai/saas-frontend-lib\nexport * from './resources/utils/persistence-adapter-discrimination.shared.utils';\nexport * from './resources/utils/resources-config-operations.path.utils';\nexport * from './resources/utils/resources-config-operations.utils';\nexport * from './resources/utils/resources-config-operations.urls-builder.utils';\nexport * from './resources/utils/resources-config-operations.dtos-builder.utils';\nexport * from './resources/utils/templatable-file-fields.shared.utils';\nexport * from './resources/utils/context-addressed-composition-singleton.shared.utils';\nexport * from './resources/utils/resources-config-naming.utils';\nexport * from './resources/utils/resource-polymorphism.utils';\nexport * from './resources/utils/resource-polymorphism.schemas';\nexport * from './resources/utils/resource-polymorphism.relationships';\nexport * from './resources/utils/resource-polymorphism.factory';\nexport * from './resources/utils/resources-config-context-needs.utils';\nexport * from './resources/utils/required-fk-fillability.validation';\nexport * from './resources/utils/composition-seedability.validation';\nexport * from './resources/utils/composition-cascade-deletability.validation';\nexport * from './resources/utils/duplicate-relationship-registration.validation';\nexport * from './resources/utils/schema-family-builder.utils';\nexport * from './resources/utils/schema-variant-resolver.utils';\nexport * from './resources/utils/resources-summary.utils';\nexport * from './resources/utils/repository-dto-builder.utils';\nexport * from './resources/utils/schema-type-utils';\nexport * from './resources/utils/schema-type-inference.utils';\nexport * from './resources/utils/resource-operation-type-guards.utils';\nexport * from './resources/utils/shared-persistence-collection.utils';\nexport * from './runtime/execution-context.shared.schemas';\nexport * from './runtime/runtime.shared.schemas';\n\n// Charts / Aggregation engine\nexport * from './charts/aggregation-query.shared.schemas';\nexport * from './charts/aggregation.shared.definitions';\nexport * from './charts/chart-definition-builder.shared';\n\n// Queue system\nexport * from './queue/rabbitmq-queue-args.shared';\nexport * from './queue/queues.shared.schemas';\nexport * from './queue/queues.shared.utils';\nexport * from './queue/jobs.shared.schemas';\nexport * from './queue/jobs.shared.utils';\nexport * from './queue/jobs.shared.resources-config.schemas';\nexport * from './resources/utils/resources-serialization.utils';\nexport * from './resources/utils/resource-subtree.utils';\n\n// Monitoring domain\nexport * from './monitoring/monitoring.shared.schemas';\n\n// Applications domain (must come before config due to dependencies)\nexport * from './applications/application-subject.shared.schemas';\nexport * from './applications/applications.shared.schemas';\nexport * from './applications/applications.shared.resources-config.schemas';\nexport * from './applications/application-versions.shared.resources-config.schemas';\nexport * from './applications/application-metadata.shared.resources-config.schemas';\nexport * from './applications/applications-context.schemas';\n\n// Config domain\nexport * from './config/app-frontend-type.shared.schemas';\nexport * from './config/entity-identity-config.shared.schemas';\nexport * from './config/registration-acquisition-policy.shared.utils';\nexport * from './config/auth-config-resolution.shared.utils';\nexport * from './config/app-configuration-shared.shared.schemas';\nexport * from './config/brand-assets.shared.schemas';\nexport * from './config/configuration-validation.shared.schemas';\nexport * from './config/postgresql.shared.schemas';\nexport * from './config/frontend/navigation.shared.schemas';\n// DELETED: app-level-action-launcher.shared.schemas — transferred to @wildo-ai/saas-frontend-lib\n// DELETED: views-frontend.shared.schemas — FrontendView_ScopeMode + FrontendView_DefinitionSchema transferred to @wildo-ai/saas-frontend-lib\n// DELETED: composite-view.frontend.schemas — transferred to @wildo-ai/saas-frontend-lib\nexport * from './config/frontend/chart-definition.shared.schemas';\nexport * from './config/frontend/chart-registration-alignment.shared';\nexport * from './config/frontend/onboarding.shared.schemas';\n\n// Other domains (excluding resources-config.schemas)\n\n// Audit and Compliance\nexport * from './compliance/audit-trails/audit-actor.shared.schemas';\nexport * from './compliance/audit-trails/auditable-events.shared.schema';\nexport * from './compliance/audit-trails/audit-logs.shared.resources-config.schemas';\nexport * from './compliance/audit-trails/security-audit-event-envelope.shared.schema';\nexport * from './compliance/audit-trails/audit-log-sink.shared.schemas';\nexport * from './compliance/audit-trails/audit-trail-config.shared.schemas';\nexport * from './compliance/data-classification/data-classification.shared.schemas';\nexport * from './compliance/documents/governed-documents.shared.schemas';\nexport * from './compliance/privacy/data-retention.shared.schemas';\nexport * from './compliance/privacy/retention-schedule.shared.schemas';\nexport * from './compliance/privacy/ai-use-posture.shared.schemas';\nexport * from './compliance/privacy/client-storage.shared.schemas';\nexport * from './compliance/privacy/personal-data-category.shared.schemas';\nexport * from './compliance/privacy/personal-data-declaration.shared.utils';\nexport * from './compliance/privacy/operating-jurisdictions.shared.schemas';\nexport * from './compliance/privacy/operator-compliance-identity.shared.schemas';\nexport * from './external-providers/provider-compliance-profile.shared.schemas';\nexport * from './compliance/privacy/impersonalization.shared.schemas';\nexport * from './compliance/privacy/impersonalization-scrub.shared.utils';\nexport * from './compliance/privacy/subject-erasure.shared.schemas';\nexport * from './compliance/privacy/subject-export.shared.schemas';\nexport * from './exports/tabular-csv.shared.utils';\nexport * from './resources/utils/collection-export.shared.utils';\nexport * from './compliance/privacy/subject-export-render.shared.utils';\nexport * from './compliance/privacy/redaction.shared.schemas';\nexport * from './compliance/privacy/privacy.shared.schemas';\nexport * from './compliance/privacy/sharing.shared.schemas';\n// Auth (Polymorphic — SSO + SIEM + SCIM)\n\nexport * from './security/authentications/sso/sso-config.shared.schemas';\nexport * from './security/authentications/sso/sso-config.shared.resources-config.schemas';\nexport * from './security/authentications/sso/sso-connection.shared.schemas';\nexport * from './security/authentications/sso/sso-connection.shared.resources-config.schemas';\nexport * from './security/authentications/siem/siem-export-config.shared.schemas';\nexport * from './security/authentications/siem/siem-export-config.shared.resources-config.schemas';\nexport * from './security/authentications/siem/siem-delivery-dlq.shared.schemas';\nexport * from './security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas';\nexport * from './security/authentications/scim/scim-tokens.shared.schemas';\nexport * from './security/authentications/scim/scim-tokens.shared.resources-config.schemas';\nexport * from './security/authentications/scim/scim-organization-unit-mapping.shared';\nexport * from './security/authentications/scim/scim-provisioning-config.shared.schemas';\nexport * from './security/authentications/scim/scim-provisioning-config.shared.resources-config.schemas';\n\n// Billing\nexport * from './billing/billing-account.shared.schemas';\nexport * from './billing/billing-account.shared.resources-config.schemas';\nexport * from './billing/billing-configuration.shared.schemas';\nexport * from './billing/billing-enums.shared.schemas';\nexport * from './billing/billing-types.shared.schemas';\nexport * from './billing/credit-pool.shared.schemas';\nexport * from './billing/credit-pool.shared.resources-config.schemas';\nexport * from './billing/invoice-ref.shared.schemas';\nexport * from './billing/invoice-ref.shared.resources-config.schemas';\nexport * from './billing/price.shared.schemas';\nexport * from './billing/price.shared.resources-config.schemas';\nexport * from './billing/product.shared.schemas';\nexport * from './billing/product.shared.resources-config.schemas';\nexport * from './billing/product-behavior-policy.shared.schemas';\nexport * from './billing/product-definition.shared.schemas';\nexport * from './billing/promotions.shared.schemas';\nexport * from './billing/promotions.shared.resources-config.schemas';\nexport * from './billing/referral.shared.schemas';\nexport * from './billing/referral.shared.resources-config.schemas';\nexport * from './billing/subscription.shared.schemas';\nexport * from './billing/subscription.shared.resources-config.schemas';\nexport * from './billing/usage-record.shared.schemas';\nexport * from './billing/usage-record.shared.resources-config.schemas';\n\n// Organizations\nexport * from './organizations/organization-features.shared.schemas';\nexport * from './organizations/organization-features.shared.resources-config.schemas';\nexport * from './organizations/organization-members.shared.schemas';\nexport * from './organizations/organization-members.shared.resources-config.schemas';\nexport * from './organizations/organization-notifications.shared.schemas';\nexport * from './organizations/organization-notifications.shared.resources-config.schemas';\nexport * from './organizations/organization-preferences.shared.schemas';\nexport * from './organizations/organization-preferences.shared.resources-config.schemas';\nexport * from './organizations/organization-profile.shared.schemas';\nexport * from './organizations/organization-profile.shared.resources-config.schemas';\nexport * from './organizations/organization-units.shared.schemas';\nexport * from './organizations/organization-units.shared.path';\nexport * from './organizations/organization-unit-members.shared.schemas';\nexport * from './organizations/organization-unit-inheritance.shared';\nexport * from './organizations/organization-unit-narrowing.shared';\nexport * from './organizations/organization-unit-narrowing-decision.shared';\nexport * from './organizations/organization-unit-members.shared.resources-config.schemas';\nexport * from './organizations/organization-units.shared.resources-config.schemas';\nexport * from './organizations/organizations.shared.schemas';\nexport * from './organizations/organizations.shared.resources-config.schemas';\nexport * from './organizations/tenant-teardown-config.shared.schemas';\n\n// Security\nexport * from './security/api-keys/api-keys.shared.schemas';\nexport * from './security/api-keys/api-keys-application.shared.resources-config.schemas';\nexport * from './security/api-keys/api-keys-organization.shared.resources-config.schemas';\nexport * from './security/oauth-clients/oauth-clients.shared.schemas';\nexport * from './security/oauth-clients/oauth-resource-server.shared.schemas';\nexport * from './security/oauth-clients/oauth-clients-application.shared.resources-config.schemas';\nexport * from './security/oauth-clients/oauth-clients-organization.shared.resources-config.schemas';\nexport * from './security/oauth-clients/oauth-consent-grants.shared.schemas';\nexport * from './security/oauth-clients/oauth-consent-grants.shared.resources-config.schemas';\nexport * from './security/authentications/authentication.shared.dto.schemas';\nexport * from './security/authentications/authentication.shared.schemas';\nexport * from './security/authentications/mfa-backup-code-contract.shared';\nexport * from './security/authentications/siem/siem-delivery-reliability-contract.shared';\nexport * from './security/authentications/authentication.shared.utils';\nexport * from './security/authentications/consumable-token.shared.schemas';\nexport * from './security/authentications/anonymous-session/anonymous-session.shared.contract';\nexport * from './security/authentications/password-reset.shared.dto.schemas';\nexport * from './security/authentications/registration.shared.dto.schemas';\nexport * from './security/authorizations/administrative-continuity.shared.schemas';\nexport * from './security/authorizations/platform-access-grants.shared.schemas';\nexport * from './security/authorizations/platform-access-grants.shared.resources-config.schemas';\nexport * from './security/authorizations/roles.shared.defaults';\nexport * from './security/authorizations/roles.shared.schemas';\nexport * from './security/authorizations/roles.shared.utils';\nexport * from './security/crypto-keys/crypto-keys.shared.schemas';\n\n\n// Users\nexport * from './users/inbound-contacts.shared.schemas';\nexport * from './users/inbound-contacts.shared.resources-config.schemas';\nexport * from './users/users.shared.schemas';\nexport * from './users/users.shared.resources-config.schemas';\nexport * from './users/user-profiles.shared.resources-config.schemas';\nexport * from './users/user-preferences-reset.shared.utils';\nexport * from './users/user-preferences.shared.resources-config.schemas';\nexport * from './users/user-self.shared.resources-config.schemas';\nexport * from './users/user-self-profiles.shared.resources-config.schemas';\nexport * from './users/user-self-preferences.shared.resources-config.schemas';\nexport * from './users/anonymous-user-marketing-metadata.shared.schemas';\nexport * from './users/anonymous-users.shared.schema';\nexport * from './users/anonymous-users.shared.resources-config.schemas';\nexport * from './users/user-credentials.shared.schemas';\nexport * from './users/user-credentials.shared.resources-config.schemas';\nexport * from './users/user-identity-links.shared.schemas';\nexport * from './users/user-identity-links.shared.resources-config.schemas';\n\n// Analytics Value Moments\nexport * from './config/analytics-value-moments.shared.schemas';\n\n// Features System\nexport * from './features/core-feature-definitions.shared';\nexport * from './features/feature-builders.shared';\nexport * from './features/feature-definition.shared.schemas';\nexport * from './features/user-features.shared.resources-config.schemas';\nexport * from './features/application-features.shared.resources-config.schemas';\nexport * from './features/scope-features.shared.schemas';\nexport * from './features/feature-registry.shared';\nexport * from './features/feature-resolution.shared.schemas';\n\n// Email System\nexport * from './notifications/email/email-context.shared.schemas';\nexport * from './notifications/email/email-template-registry.shared.schemas';\nexport * from './notifications/email/email-template.shared.enums';\n\n// Guidance\nexport * from './guidance/guidance-flow.shared.schemas';\nexport * from './guidance/guidance-state.shared.schemas';\nexport * from './guidance/guidance-state.shared.utils';\nexport * from './guidance/guidance-state.shared.resources-config.schemas';\n// Progression (Phase 4)\nexport * from './guidance/milestone-definition.shared.schemas';\nexport * from './guidance/milestone-builders.shared';\nexport * from './guidance/progression-state.shared.schemas';\nexport * from './guidance/progression-state.shared.resources-config.schemas';\n\n// Lifecycle (Phase 5)\nexport * from './guidance/lifecycle-state.shared.schemas';\nexport * from './guidance/lifecycle-config.shared.schemas';\nexport * from './guidance/lifecycle-state.shared.resources-config.schemas';\n\n// Data-Seeding (Phase 7 / Item 47 — cron scheduler)\nexport * from './data-seeding/data-seeding-config.shared.schemas';\n\n// Domain Modules\nexport * from './runtime/domain-module.shared.definitions';\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,iBAAiB,EAAE,CAAC;AAEpB,cAAc,yDAAyD,CAAC;AACxE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,qCAAqC,CAAA;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8DAA8D,CAAC;AAE7E,cAAc,mDAAmD,CAAC;AAClE,cAAc,uDAAuD,CAAC;AACtE,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kDAAkD,CAAC;AACjE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uEAAuE,CAAC;AACtF,cAAc,iDAAiD,CAAC;AAChE,cAAc,kEAAkE,CAAC;AACjF,cAAc,sDAAsD,CAAC;AACrE,cAAc,uEAAuE,CAAC;AACtF,cAAc,qDAAqD,CAAC;AACpE,cAAc,sEAAsE,CAAC;AACrF,cAAc,yCAAyC,CAAC;AACxD,cAAc,4CAA4C,CAAC;AAE3D,cAAc,4EAA4E,CAAC;AAE3F,cAAc,6DAA6D,CAAC;AAC5E,cAAc,uEAAuE,CAAC;AAEtF,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AACjG,8FAA8F;AAC9F,mGAAmG;AACnG,qDAAqD;AACrD,EAAE;AACF,oEAAoE;AACpE,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,gGAAgG;AAChG,gGAAgG;AAChG,6GAA6G;AAC7G,gGAAgG;AAChG,qDAAqD;AACrD,EAAE;AACF,2FAA2F;AAC3F,0FAA0F;AAE1F,cAAc,wDAAwD,CAAC;AACvE,cAAc,yDAAyD,CAAC;AACxE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,wDAAwD,CAAC;AACvE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,uDAAuD,CAAC;AAEtE,2FAA2F;AAC3F,kGAAkG;AAClG,mGAAmG;AACnG,qFAAqF;AACrF,cAAc,qDAAqD,CAAC;AAEpE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6EAA6E,CAAC;AAC5F,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAE7D,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,4CAA4C,CAAC;AAE3D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+CAA+C,CAAC;AAC9D,cAAc,0CAA0C,CAAC;AACzD,cAAc,sDAAsD,CAAC;AACrE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qEAAqE,CAAC;AACpF,cAAc,8CAA8C,CAAC;AAC7D,cAAc,mDAAmD,CAAC;AAClE,cAAc,0DAA0D,CAAC;AACzE,cAAc,oEAAoE,CAAC;AACnF,cAAc,6DAA6D,CAAC;AAC5E,cAAc,8EAA8E,CAAC;AAE7F,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAE/C,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,0BAA0B;AAE1B,cAAc,uCAAuC,CAAC;AACtD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,oDAAoD,CAAC;AACnE,cAAc,wDAAwD,CAAC;AACvE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,sCAAsC,CAAC;AACrD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,iDAAiD,CAAC;AAChE,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,oDAAoD,CAAC;AACnE,yFAAyF;AACzF,cAAc,mEAAmE,CAAC;AAClF,cAAc,0DAA0D,CAAC;AACzE,cAAc,qDAAqD,CAAC;AACpE,cAAc,kEAAkE,CAAC;AACjF,cAAc,kEAAkE,CAAC;AACjF,cAAc,wDAAwD,CAAC;AACvE,cAAc,wEAAwE,CAAC;AACvF,cAAc,iDAAiD,CAAC;AAChE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,iDAAiD,CAAC;AAChE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,wDAAwD,CAAC;AACvE,cAAc,sDAAsD,CAAC;AACrE,cAAc,sDAAsD,CAAC;AACrE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,kEAAkE,CAAC;AACjF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,iDAAiD,CAAC;AAChE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qCAAqC,CAAC;AACpD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wDAAwD,CAAC;AACvE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kCAAkC,CAAC;AAEjD,8BAA8B;AAC9B,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,0CAA0C,CAAC;AAEzD,eAAe;AACf,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,0CAA0C,CAAC;AAEzD,oBAAoB;AACpB,cAAc,wCAAwC,CAAC;AAEvD,oEAAoE;AACpE,cAAc,mDAAmD,CAAC;AAClE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6DAA6D,CAAC;AAC5E,cAAc,qEAAqE,CAAC;AACpF,cAAc,qEAAqE,CAAC;AACpF,cAAc,6CAA6C,CAAC;AAE5D,gBAAgB;AAChB,cAAc,2CAA2C,CAAC;AAC1D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,uDAAuD,CAAC;AACtE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,kDAAkD,CAAC;AACjE,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,iGAAiG;AACjG,6IAA6I;AAC7I,wFAAwF;AACxF,cAAc,mDAAmD,CAAC;AAClE,cAAc,uDAAuD,CAAC;AACtE,cAAc,6CAA6C,CAAC;AAE5D,qDAAqD;AAErD,uBAAuB;AACvB,cAAc,sDAAsD,CAAC;AACrE,cAAc,0DAA0D,CAAC;AACzE,cAAc,sEAAsE,CAAC;AACrF,cAAc,kFAAkF,CAAC;AACjG,cAAc,uEAAuE,CAAC;AACtF,cAAc,yDAAyD,CAAC;AACxE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,qEAAqE,CAAC;AACpF,cAAc,0DAA0D,CAAC;AACzE,cAAc,oDAAoD,CAAC;AACnE,cAAc,wDAAwD,CAAC;AACvE,cAAc,oDAAoD,CAAC;AACnE,cAAc,oDAAoD,CAAC;AACnE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kEAAkE,CAAC;AACjF,cAAc,iEAAiE,CAAC;AAChF,cAAc,uDAAuD,CAAC;AACtE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,qDAAqD,CAAC;AACpE,cAAc,oDAAoD,CAAC;AACnE,cAAc,oCAAoC,CAAC;AACnD,cAAc,kDAAkD,CAAC;AACjE,cAAc,yDAAyD,CAAC;AACxE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC;AAC5D,yCAAyC;AAEzC,cAAc,0DAA0D,CAAC;AACzE,cAAc,2EAA2E,CAAC;AAC1F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,+EAA+E,CAAC;AAC9F,cAAc,mEAAmE,CAAC;AAClF,cAAc,oFAAoF,CAAC;AACnG,cAAc,kEAAkE,CAAC;AACjF,cAAc,mFAAmF,CAAC;AAClG,cAAc,4DAA4D,CAAC;AAC3E,cAAc,6EAA6E,CAAC;AAC5F,cAAc,uEAAuE,CAAC;AACtF,cAAc,yEAAyE,CAAC;AACxF,cAAc,0FAA0F,CAAC;AAEzG,UAAU;AACV,cAAc,0CAA0C,CAAC;AACzD,cAAc,2DAA2D,CAAC;AAC1E,cAAc,gDAAgD,CAAC;AAC/D,cAAc,wCAAwC,CAAC;AACvD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uDAAuD,CAAC;AACtE,cAAc,sCAAsC,CAAC;AACrD,cAAc,uDAAuD,CAAC;AACtE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iDAAiD,CAAC;AAChE,cAAc,kCAAkC,CAAC;AACjD,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC;AACjE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qCAAqC,CAAC;AACpD,cAAc,sDAAsD,CAAC;AACrE,cAAc,mCAAmC,CAAC;AAClD,cAAc,oDAAoD,CAAC;AACnE,cAAc,uCAAuC,CAAC;AACtD,cAAc,wDAAwD,CAAC;AACvE,cAAc,uCAAuC,CAAC;AACtD,cAAc,wDAAwD,CAAC;AAEvE,gBAAgB;AAChB,cAAc,sDAAsD,CAAC;AACrE,cAAc,uEAAuE,CAAC;AACtF,cAAc,qDAAqD,CAAC;AACpE,cAAc,sEAAsE,CAAC;AACrF,cAAc,2DAA2D,CAAC;AAC1E,cAAc,4EAA4E,CAAC;AAC3F,cAAc,yDAAyD,CAAC;AACxE,cAAc,0EAA0E,CAAC;AACzF,cAAc,qDAAqD,CAAC;AACpE,cAAc,sEAAsE,CAAC;AACrF,cAAc,mDAAmD,CAAC;AAClE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,0DAA0D,CAAC;AACzE,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,oEAAoE,CAAC;AACnF,cAAc,8CAA8C,CAAC;AAC7D,cAAc,+DAA+D,CAAC;AAC9E,cAAc,uDAAuD,CAAC;AAEtE,WAAW;AACX,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0EAA0E,CAAC;AACzF,cAAc,2EAA2E,CAAC;AAC1F,cAAc,mEAAmE,CAAC;AAClF,cAAc,iGAAiG,CAAC;AAChH,cAAc,yFAAyF,CAAC;AACxG,cAAc,uDAAuD,CAAC;AACtE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,oFAAoF,CAAC;AACnG,cAAc,qFAAqF,CAAC;AACpG,cAAc,8DAA8D,CAAC;AAC7E,cAAc,+EAA+E,CAAC;AAC9F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,wDAAwD,CAAC;AACvE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,gFAAgF,CAAC;AAC/F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,oEAAoE,CAAC;AACnF,cAAc,iEAAiE,CAAC;AAChF,cAAc,kFAAkF,CAAC;AACjG,cAAc,iDAAiD,CAAC;AAChE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,mDAAmD,CAAC;AAGlE,QAAQ;AACR,cAAc,yCAAyC,CAAC;AACxD,cAAc,0DAA0D,CAAC;AACzE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+CAA+C,CAAC;AAC9D,cAAc,uDAAuD,CAAC;AACtE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0DAA0D,CAAC;AACzE,cAAc,mDAAmD,CAAC;AAClE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,+DAA+D,CAAC;AAC9E,cAAc,0DAA0D,CAAC;AACzE,cAAc,uCAAuC,CAAC;AACtD,cAAc,yDAAyD,CAAC;AACxE,cAAc,yCAAyC,CAAC;AACxD,cAAc,0DAA0D,CAAC;AACzE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6DAA6D,CAAC;AAE5E,0BAA0B;AAC1B,cAAc,iDAAiD,CAAC;AAEhE,kBAAkB;AAClB,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0DAA0D,CAAC;AACzE,cAAc,iEAAiE,CAAC;AAChF,cAAc,0CAA0C,CAAC;AACzD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAE7D,eAAe;AACf,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,mDAAmD,CAAC;AAElE,WAAW;AACX,cAAc,yCAAyC,CAAC;AACxD,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2DAA2D,CAAC;AAC1E,wBAAwB;AACxB,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8DAA8D,CAAC;AAE7E,sBAAsB;AACtB,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,4DAA4D,CAAC;AAE3E,oDAAoD;AACpD,cAAc,mDAAmD,CAAC;AAElE,iBAAiB;AACjB,cAAc,4CAA4C,CAAC","sourcesContent":["// Flow-Actor System & App-Blueprint\nimport { initZodDecorators } from '@wildo-ai/zod-decorators';\ninitZodDecorators();\n\nexport * from './companion/shared-library-companion.shared.definitions';\nexport * from './companion/provider-discovery.shared.schemas';\nexport * from './flows-actors/flows.shared.schemas'\nexport * from './flows-actors/actors.shared.schemas';\nexport * from './flows-actors/tasks.actors.shared.schemas';\nexport * from './flows-actors/task-continuity-binding.actors.shared.schemas';\n\nexport * from './flows-actors/flows-actors.system.shared.schemas';\nexport * from './flows-actors/flows-actors.system.shared.definitions';\nexport * from './flows-actors/agents.shared.schemas';\nexport * from './flows-actors/mcp-servers.shared.schemas';\nexport * from './flows-actors/agent-traceability.shared.schemas';\nexport * from './flows-actors/flows-actors.io.shared.schemas';\nexport * from './flows-actors/flows-actors.commons.shared.schemas';\nexport * from './flows-actors/flows-actors.frontend.shared.schemas';\nexport * from './flows-actors/flows-actors-execution.shared.schemas';\nexport * from './flows-actors/flows-actors-execution.shared.resources-config.schemas';\nexport * from './flows-actors/flows-actors-task.shared.schemas';\nexport * from './flows-actors/flows-actors-task.shared.resources-config.schemas';\nexport * from './flows-actors/a2a-token-budget-state.shared.schemas';\nexport * from './flows-actors/a2a-token-budget-state.shared.resources-config.schemas';\nexport * from './flows-actors/a2a-push-delivery-log.shared.schemas';\nexport * from './flows-actors/a2a-push-delivery-log.shared.resources-config.schemas';\nexport * from './flows-actors/prompt-ir.shared.schemas';\nexport * from './flows-actors/deliberation.shared.schemas';\n\nexport * from './flows-actors/utils/flow-actors.context-builder.apps-context.shared.utils';\n\nexport * from './flows-actors/apps-blueprint/apps-blueprint.shared.schemas';\nexport * from './flows-actors/apps-blueprint/artifacts.apps-blueprint.shared.schemas';\n\n// Meta-workflow contracts (playbooks, decisions, actions, execution bindings, portable application\n// continuity) are NOT re-exported here. They are defined in this package and published through the\n// dedicated `@wildo-ai/saas-models/meta-workflows` entrypoint, so the root barrel does not put a\n// whole authoring domain in front of consumers that only need the resource/schema vocabulary.\n// Re-adding any `flows-actors/meta-workflows/` line here fails `pnpm check:package-entrypoints`.\n// See `.claude/rules/package-public-entrypoints.md`.\n//\n// The BOUNDARY between that domain and the Actor Task vocabulary is\n// `flows-actors/task-continuity-binding.actors.shared.schemas`, exported above. It is deliberately\n// NOT a `meta-workflows/` file: a root-exported Actor Task carries a continuity correlation, so\n// the correlation object and the one nominal enum on it belong to the root's own surface. Keeping\n// them on the far side of the subpath is what produced `TS2742`/`TS2883` at every consumer that\n// derived a schema from `Actors_Task_Schema` — the `meta-workflows` subpath published the enum,\n// but a root-only consumer never resolves that subpath, so no name it could use existed — while transitively\n// dragging 12 of the 15 `meta-workflows/*` modules into this barrel's closure anyway, which is\n// exactly what the paragraph above claims not to do.\n//\n// When a root-exported contract needs something the authoring domain owns, move it to that\n// boundary module. Do NOT re-export across the subpath, and do NOT annotate the consumer.\n\nexport from './external-providers/external-providers.shared.schemas';\nexport * from './external-providers/engine-capabilities.shared.schemas';\nexport * from './external-providers/engine-capability-resolution-mode.shared';\nexport * from './external-providers/frontend-bootstrap.shared.schemas';\nexport * from './external-providers/provider-frontend-surface.shared.schemas';\nexport * from './external-providers/provider-metadata.shared.schemas';\nexport * from './external-providers/provider-tier-rule.shared.utils';\nexport * from './external-providers/provider-capability.shared.schemas';\nexport * from './external-providers/provider-protocol.shared.schemas';\nexport * from './external-providers/compose-provider-registry.shared';\n\n// The external-data AUTHORING contract (the virtual binding + the pipeline declaration) is\n// published ONLY by `@wildo-ai/saas-models/external-data` — one door per room. Row IDENTITY stays\n// here on purpose: a synthesized id reaches URLs and frontend routing, so it is not an integration\n// concern. See `external-data.exports.ts` for the measurement behind both decisions.\nexport * from './http-api-binding/http-api-binding-id.shared.utils';\n\nexport * from './errors/errors.shared.schemas';\nexport * from './frontend-definitions/frontend-notification-custom-message-ref.definitions';\nexport * from './i18n/labelling.dto.shared.schemas';\nexport * from './i18n/interpolate-label-params.shared.utils';\n\nexport * from './errors/errors.shared.definitions';\nexport * from './errors/errors.shared.utils';\nexport * from './errors/errors.custom-message-ref.shared.definitions';\nexport * from './errors/resource-access-forbidden.shared.error';\nexport * from './errors/zod-issue-formatting.shared.utils';\n\nexport * from './files/files.shared.schemas';\nexport * from './files/files.shared.utils';\nexport * from './files/files.shared.resources-config.schemas';\nexport * from './files/file-upload-grant.shared.schemas';\nexport * from './notifications/notification-badges.core.definitions';\nexport * from './notifications/notification-badges.schemas';\nexport * from './notifications/notification-badges.shared.resources-config.schemas';\nexport * from './notifications/notifications.shared.schemas';\nexport * from './notifications/m2m/webhook-config.shared.schemas';\nexport * from './notifications/m2m/m2m-webhook-delivery-contract.shared';\nexport * from './notifications/m2m/webhook-config.shared.resources-config.schemas';\nexport * from './notifications/m2m/m2m-webhook-delivery-log.shared.schemas';\nexport * from './notifications/m2m/m2m-webhook-delivery-log.shared.resources-config.schemas';\n\nexport * from './requests/header-keys.shared';\nexport * from './requests/websocket.shared.schemas';\nexport * from './requests/http-requests.shared';\nexport * from './crdt/crdt-merge.shared.utils';\n\n// Data Seeding — schemas + factory + DataSeedRun resource were RELOCATED to\n// `@wildo-ai/saas-backend-lib` in Phase 2.G (the user moved them; the\n// shared models for data-seeding are a backend-only concern). Consumers\n// must import from `@wildo-ai/saas-backend-lib` instead. Do NOT re-add\n// `export * from './data-seeding/...'` here — the directory no longer\n// exists in this package.\n\nexport * from './requests/rate-limits.shared.schemas';\nexport * from './requests/manual-controllers-routes-urls';\nexport * from './requests/manual-controllers-routes-documentation';\nexport * from './resources/resources-registry.shared.core.definitions';\nexport * from './resources/resources.shared.core.definitions';\nexport * from './resources/resources.shared.schemas';\nexport * from './resources/context-policy.shared.schemas';\nexport * from './resources/child-operations.shared.schemas';\nexport * from './resources/relationship-display.shared.schemas';\nexport * from './resources/resources.shared.utils';\nexport * from './resources/resources-config.shared.factory';\nexport * from './resources/resources-config.shared.schemas';\nexport * from './resources/collection-query-parameters.shared';\nexport * from './resources/resources-relationships.shared.factory';\nexport * from './resources/resources-serialization.shared.schemas';\n// DELETED: resource-frontend.shared.schemas — transferred to @wildo-ai/saas-frontend-lib\nexport * from './resources/utils/persistence-adapter-discrimination.shared.utils';\nexport * from './resources/utils/resources-config-operations.path.utils';\nexport * from './resources/utils/resources-config-operations.utils';\nexport * from './resources/utils/resources-config-operations.urls-builder.utils';\nexport * from './resources/utils/resources-config-operations.dtos-builder.utils';\nexport * from './resources/utils/templatable-file-fields.shared.utils';\nexport * from './resources/utils/context-addressed-composition-singleton.shared.utils';\nexport * from './resources/utils/resources-config-naming.utils';\nexport * from './resources/utils/resource-polymorphism.utils';\nexport * from './resources/utils/resource-polymorphism.schemas';\nexport * from './resources/utils/resource-polymorphism.relationships';\nexport * from './resources/utils/resource-polymorphism.factory';\nexport * from './resources/utils/resources-config-context-needs.utils';\nexport * from './resources/utils/required-fk-fillability.validation';\nexport * from './resources/utils/composition-seedability.validation';\nexport * from './resources/utils/composition-cascade-deletability.validation';\nexport * from './resources/utils/duplicate-relationship-registration.validation';\nexport * from './resources/utils/schema-family-builder.utils';\nexport * from './resources/utils/schema-variant-resolver.utils';\nexport * from './resources/utils/field-value-disclosure.utils';\nexport * from './resources/utils/resources-summary.utils';\nexport * from './resources/utils/repository-dto-builder.utils';\nexport * from './resources/utils/schema-type-utils';\nexport * from './resources/utils/schema-type-inference.utils';\nexport * from './resources/utils/resource-operation-type-guards.utils';\nexport * from './resources/utils/shared-persistence-collection.utils';\nexport * from './runtime/execution-context.shared.schemas';\nexport * from './runtime/runtime.shared.schemas';\n\n// Charts / Aggregation engine\nexport * from './charts/aggregation-query.shared.schemas';\nexport * from './charts/aggregation.shared.definitions';\nexport * from './charts/chart-definition-builder.shared';\n\n// Queue system\nexport * from './queue/rabbitmq-queue-args.shared';\nexport * from './queue/queues.shared.schemas';\nexport * from './queue/queues.shared.utils';\nexport * from './queue/jobs.shared.schemas';\nexport * from './queue/jobs.shared.utils';\nexport * from './queue/jobs.shared.resources-config.schemas';\nexport * from './resources/utils/resources-serialization.utils';\nexport * from './resources/utils/resource-subtree.utils';\n\n// Monitoring domain\nexport * from './monitoring/monitoring.shared.schemas';\n\n// Applications domain (must come before config due to dependencies)\nexport * from './applications/application-subject.shared.schemas';\nexport * from './applications/applications.shared.schemas';\nexport * from './applications/applications.shared.resources-config.schemas';\nexport * from './applications/application-versions.shared.resources-config.schemas';\nexport * from './applications/application-metadata.shared.resources-config.schemas';\nexport * from './applications/applications-context.schemas';\n\n// Config domain\nexport * from './config/app-frontend-type.shared.schemas';\nexport * from './config/entity-identity-config.shared.schemas';\nexport * from './config/registration-acquisition-policy.shared.utils';\nexport * from './config/auth-config-resolution.shared.utils';\nexport * from './config/app-configuration-shared.shared.schemas';\nexport * from './config/brand-assets.shared.schemas';\nexport * from './config/configuration-validation.shared.schemas';\nexport * from './config/postgresql.shared.schemas';\nexport * from './config/frontend/navigation.shared.schemas';\n// DELETED: app-level-action-launcher.shared.schemas — transferred to @wildo-ai/saas-frontend-lib\n// DELETED: views-frontend.shared.schemas — FrontendView_ScopeMode + FrontendView_DefinitionSchema transferred to @wildo-ai/saas-frontend-lib\n// DELETED: composite-view.frontend.schemas — transferred to @wildo-ai/saas-frontend-lib\nexport * from './config/frontend/chart-definition.shared.schemas';\nexport * from './config/frontend/chart-registration-alignment.shared';\nexport * from './config/frontend/onboarding.shared.schemas';\n\n// Other domains (excluding resources-config.schemas)\n\n// Audit and Compliance\nexport * from './compliance/audit-trails/audit-actor.shared.schemas';\nexport * from './compliance/audit-trails/auditable-events.shared.schema';\nexport * from './compliance/audit-trails/audit-logs.shared.resources-config.schemas';\nexport * from './compliance/audit-trails/application-audit-logs.shared.resources-config.schemas';\nexport * from './compliance/audit-trails/security-audit-event-envelope.shared.schema';\nexport * from './compliance/audit-trails/audit-log-sink.shared.schemas';\nexport * from './compliance/audit-trails/audit-trail-config.shared.schemas';\nexport * from './compliance/data-classification/data-classification.shared.schemas';\nexport * from './compliance/documents/governed-documents.shared.schemas';\nexport * from './compliance/privacy/data-retention.shared.schemas';\nexport * from './compliance/privacy/retention-schedule.shared.schemas';\nexport * from './compliance/privacy/ai-use-posture.shared.schemas';\nexport * from './compliance/privacy/client-storage.shared.schemas';\nexport * from './compliance/privacy/personal-data-category.shared.schemas';\nexport * from './compliance/privacy/personal-data-declaration.shared.utils';\nexport * from './compliance/privacy/operating-jurisdictions.shared.schemas';\nexport * from './compliance/privacy/operator-compliance-identity.shared.schemas';\nexport * from './external-providers/provider-compliance-profile.shared.schemas';\nexport * from './compliance/privacy/impersonalization.shared.schemas';\nexport * from './compliance/privacy/impersonalization-scrub.shared.utils';\nexport * from './compliance/privacy/subject-erasure.shared.schemas';\nexport * from './compliance/privacy/subject-export.shared.schemas';\nexport * from './exports/tabular-csv.shared.utils';\nexport * from './resources/utils/collection-export.shared.utils';\nexport * from './compliance/privacy/subject-export-render.shared.utils';\nexport * from './compliance/privacy/redaction.shared.schemas';\nexport * from './compliance/privacy/privacy.shared.schemas';\nexport * from './compliance/privacy/sharing.shared.schemas';\n// Auth (Polymorphic — SSO + SIEM + SCIM)\n\nexport * from './security/authentications/sso/sso-config.shared.schemas';\nexport * from './security/authentications/sso/sso-config.shared.resources-config.schemas';\nexport * from './security/authentications/sso/sso-connection.shared.schemas';\nexport * from './security/authentications/sso/sso-connection.shared.resources-config.schemas';\nexport * from './security/authentications/siem/siem-export-config.shared.schemas';\nexport * from './security/authentications/siem/siem-export-config.shared.resources-config.schemas';\nexport * from './security/authentications/siem/siem-delivery-dlq.shared.schemas';\nexport * from './security/authentications/siem/siem-delivery-dlq.shared.resources-config.schemas';\nexport * from './security/authentications/scim/scim-tokens.shared.schemas';\nexport * from './security/authentications/scim/scim-tokens.shared.resources-config.schemas';\nexport * from './security/authentications/scim/scim-organization-unit-mapping.shared';\nexport * from './security/authentications/scim/scim-provisioning-config.shared.schemas';\nexport * from './security/authentications/scim/scim-provisioning-config.shared.resources-config.schemas';\n\n// Billing\nexport * from './billing/billing-account.shared.schemas';\nexport * from './billing/billing-account.shared.resources-config.schemas';\nexport * from './billing/billing-configuration.shared.schemas';\nexport * from './billing/billing-enums.shared.schemas';\nexport * from './billing/billing-types.shared.schemas';\nexport * from './billing/credit-pool.shared.schemas';\nexport * from './billing/credit-pool.shared.resources-config.schemas';\nexport * from './billing/invoice-ref.shared.schemas';\nexport * from './billing/invoice-ref.shared.resources-config.schemas';\nexport * from './billing/price.shared.schemas';\nexport * from './billing/price.shared.resources-config.schemas';\nexport * from './billing/product.shared.schemas';\nexport * from './billing/product.shared.resources-config.schemas';\nexport * from './billing/product-behavior-policy.shared.schemas';\nexport * from './billing/product-definition.shared.schemas';\nexport * from './billing/promotions.shared.schemas';\nexport * from './billing/promotions.shared.resources-config.schemas';\nexport * from './billing/referral.shared.schemas';\nexport * from './billing/referral.shared.resources-config.schemas';\nexport * from './billing/subscription.shared.schemas';\nexport * from './billing/subscription.shared.resources-config.schemas';\nexport * from './billing/usage-record.shared.schemas';\nexport * from './billing/usage-record.shared.resources-config.schemas';\n\n// Organizations\nexport * from './organizations/organization-features.shared.schemas';\nexport * from './organizations/organization-features.shared.resources-config.schemas';\nexport * from './organizations/organization-members.shared.schemas';\nexport * from './organizations/organization-members.shared.resources-config.schemas';\nexport * from './organizations/organization-notifications.shared.schemas';\nexport * from './organizations/organization-notifications.shared.resources-config.schemas';\nexport * from './organizations/organization-preferences.shared.schemas';\nexport * from './organizations/organization-preferences.shared.resources-config.schemas';\nexport * from './organizations/organization-profile.shared.schemas';\nexport * from './organizations/organization-profile.shared.resources-config.schemas';\nexport * from './organizations/organization-units.shared.schemas';\nexport * from './organizations/organization-units.shared.path';\nexport * from './organizations/organization-unit-members.shared.schemas';\nexport * from './organizations/organization-unit-inheritance.shared';\nexport * from './organizations/organization-unit-narrowing.shared';\nexport * from './organizations/organization-unit-narrowing-decision.shared';\nexport * from './organizations/organization-unit-members.shared.resources-config.schemas';\nexport * from './organizations/organization-units.shared.resources-config.schemas';\nexport * from './organizations/organizations.shared.schemas';\nexport * from './organizations/organizations.shared.resources-config.schemas';\nexport * from './organizations/tenant-teardown-config.shared.schemas';\n\n// Security\nexport * from './security/api-keys/api-keys.shared.schemas';\nexport * from './security/api-keys/api-keys-application.shared.resources-config.schemas';\nexport * from './security/api-keys/api-keys-organization.shared.resources-config.schemas';\nexport * from './security/connected-accounts/provider-credentials.shared.schemas';\nexport * from './security/connected-accounts/provider-credentials-organization.shared.resources-config.schemas';\nexport * from './security/connected-accounts/provider-credentials-user.shared.resources-config.schemas';\nexport * from './security/oauth-clients/oauth-clients.shared.schemas';\nexport * from './security/oauth-clients/oauth-resource-server.shared.schemas';\nexport * from './security/oauth-clients/oauth-clients-application.shared.resources-config.schemas';\nexport * from './security/oauth-clients/oauth-clients-organization.shared.resources-config.schemas';\nexport * from './security/oauth-clients/oauth-consent-grants.shared.schemas';\nexport * from './security/oauth-clients/oauth-consent-grants.shared.resources-config.schemas';\nexport * from './security/authentications/authentication.shared.dto.schemas';\nexport * from './security/authentications/authentication.shared.schemas';\nexport * from './security/authentications/mfa-backup-code-contract.shared';\nexport * from './security/authentications/siem/siem-delivery-reliability-contract.shared';\nexport * from './security/authentications/authentication.shared.utils';\nexport * from './security/authentications/consumable-token.shared.schemas';\nexport * from './security/authentications/anonymous-session/anonymous-session.shared.contract';\nexport * from './security/authentications/password-reset.shared.dto.schemas';\nexport * from './security/authentications/registration.shared.dto.schemas';\nexport * from './security/authorizations/administrative-continuity.shared.schemas';\nexport * from './security/authorizations/platform-access-grants.shared.schemas';\nexport * from './security/authorizations/platform-access-grants.shared.resources-config.schemas';\nexport * from './security/authorizations/roles.shared.defaults';\nexport * from './security/authorizations/roles.shared.schemas';\nexport * from './security/authorizations/roles.shared.utils';\nexport * from './security/crypto-keys/crypto-keys.shared.schemas';\n\n\n// Users\nexport * from './users/inbound-contacts.shared.schemas';\nexport * from './users/inbound-contacts.shared.resources-config.schemas';\nexport * from './users/users.shared.schemas';\nexport * from './users/users.shared.resources-config.schemas';\nexport * from './users/user-profiles.shared.resources-config.schemas';\nexport * from './users/user-preferences-reset.shared.utils';\nexport * from './users/user-preferences.shared.resources-config.schemas';\nexport * from './users/user-self.shared.resources-config.schemas';\nexport * from './users/user-self-profiles.shared.resources-config.schemas';\nexport * from './users/user-self-preferences.shared.resources-config.schemas';\nexport * from './users/anonymous-user-marketing-metadata.shared.schemas';\nexport * from './users/anonymous-users.shared.schema';\nexport * from './users/anonymous-users.shared.resources-config.schemas';\nexport * from './users/user-credentials.shared.schemas';\nexport * from './users/user-credentials.shared.resources-config.schemas';\nexport * from './users/user-identity-links.shared.schemas';\nexport * from './users/user-identity-links.shared.resources-config.schemas';\n\n// Analytics Value Moments\nexport * from './config/analytics-value-moments.shared.schemas';\n\n// Features System\nexport * from './features/core-feature-definitions.shared';\nexport * from './features/feature-builders.shared';\nexport * from './features/feature-definition.shared.schemas';\nexport * from './features/user-features.shared.resources-config.schemas';\nexport * from './features/application-features.shared.resources-config.schemas';\nexport * from './features/scope-features.shared.schemas';\nexport * from './features/feature-registry.shared';\nexport * from './features/feature-resolution.shared.schemas';\n\n// Email System\nexport * from './notifications/email/email-context.shared.schemas';\nexport * from './notifications/email/email-template-registry.shared.schemas';\nexport * from './notifications/email/email-template.shared.enums';\n\n// Guidance\nexport * from './guidance/guidance-flow.shared.schemas';\nexport * from './guidance/guidance-state.shared.schemas';\nexport * from './guidance/guidance-state.shared.utils';\nexport * from './guidance/guidance-state.shared.resources-config.schemas';\n// Progression (Phase 4)\nexport * from './guidance/milestone-definition.shared.schemas';\nexport * from './guidance/milestone-builders.shared';\nexport * from './guidance/progression-state.shared.schemas';\nexport * from './guidance/progression-state.shared.resources-config.schemas';\n\n// Lifecycle (Phase 5)\nexport * from './guidance/lifecycle-state.shared.schemas';\nexport * from './guidance/lifecycle-config.shared.schemas';\nexport * from './guidance/lifecycle-state.shared.resources-config.schemas';\n\n// Data-Seeding (Phase 7 / Item 47 — cron scheduler)\nexport * from './data-seeding/data-seeding-config.shared.schemas';\n\n// Domain Modules\nexport * from './runtime/domain-module.shared.definitions';\n"]}

package/dist/esm/notifications/email/email-template-registry.shared.schemas.d.ts CHANGED Viewed

@@ -41,7 +41,12 @@ export declare enum SystemEmailTemplateRef {
  * - `objectContext`: contains `primaryScopeContext` (appName, organizationName, etc.)
  * - `userContext`: recipient info (email, name, preferences) — changes per recipient
  * - `eventData`: system-event-specific payload (replaces `currentObject` for
- *   non-resource emails); validated by `eventDataSchema`.
+ *   non-resource emails).
+ *
+ * ⚠️ Nothing parses a send against `eventDataSchema`. The payload travels in the untyped
+ * `additionalContext` slot of the send request and each template casts it, so a misspelled or
+ * missing field renders as empty text rather than being refused. Treat the schema below as the
+ * DOCUMENTED shape a caller is expected to supply, not as a check that it did.
  */
 export interface SystemEmailTemplateDefinition {
     /** Unique template reference. */
@@ -53,11 +58,15 @@ export interface SystemEmailTemplateDefinition {
     /** Scope for header/footer behavior. */
     scope: EmailTemplateScope;
     /**
-     * Zod schema for the event-specific payload (`eventData`).
+     * Zod schema DOCUMENTING the event-specific payload (`eventData`).
      *
      * This is the system-event payload, NOT a flattened input DTO.
      * Common fields (appName, recipientEmail) come from
      * `objectContext` / `userContext`.
+     *
+     * It is declarative: no send path parses against it. Keep it accurate anyway, because it is the
+     * only statement of what a template needs, and a caller that disagrees with it produces a blank
+     * region in the rendered email instead of an error.
      */
     eventDataSchema: z.ZodType<unknown>;
 }

package/dist/esm/notifications/email/email-template-registry.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"email-template-registry.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template-registry.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,+BAA+B,CAAC;AAMvC;;;GAGG;AACH,oBAAY,sBAAsB;IAEhC,aAAa,yBAAyB;IACtC,cAAc,0BAA0B;IACxC,kBAAkB,8BAA8B;IAChD,SAAS,qBAAqB;IAC9B,UAAU,sBAAsB;IAGhC,uBAAuB,mCAAmC;IAC1D,2BAA2B,uCAAuC;IAGlE,yBAAyB,qCAAqC;IAC9D,sBAAsB,kCAAkC;IACxD,cAAc,0BAA0B;IAGxC,cAAc,0BAA0B;IACxC,gBAAgB,4BAA4B;CAC7C;AAMD~~;;;;;;;;GAQG~~;AACH,MAAM,WAAW,6BAA6B;IAC5C,iCAAiC;IACjC,WAAW,EAAE,sBAAsB,CAAC;IACpC,uCAAuC;IACvC,IAAI,EAAE,iBAAiB,CAAC;IACxB,0CAA0C;IAC1C,SAAS,EAAE,sBAAsB,CAAC;IAClC,wCAAwC;IACxC,KAAK,EAAE,kBAAkB,CAAC;IAC1B~~;;;;;;OAMG~~;IACH,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;CACrC;AAMD,wCAAwC;AACxC,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAyJrG,CAAC;AAMF,oCAAoC;AACpC,wBAAgB,wBAAwB,IAAI,sBAAsB,EAAE,CAEnE;AAED,6CAA6C;AAC7C,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,sBAAsB,GAAG,6BAA6B,CAEtG;AAED,mDAAmD;AACnD,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,IAAI,sBAAsB,CAG9F"}
1	+ {"version":3,"file":"email-template-registry.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template-registry.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,+BAA+B,CAAC;AAMvC;;;GAGG;AACH,oBAAY,sBAAsB;IAEhC,aAAa,yBAAyB;IACtC,cAAc,0BAA0B;IACxC,kBAAkB,8BAA8B;IAChD,SAAS,qBAAqB;IAC9B,UAAU,sBAAsB;IAGhC,uBAAuB,mCAAmC;IAC1D,2BAA2B,uCAAuC;IAGlE,yBAAyB,qCAAqC;IAC9D,sBAAsB,kCAAkC;IACxD,cAAc,0BAA0B;IAGxC,cAAc,0BAA0B;IACxC,gBAAgB,4BAA4B;CAC7C;AAMD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iCAAiC;IACjC,WAAW,EAAE,sBAAsB,CAAC;IACpC,uCAAuC;IACvC,IAAI,EAAE,iBAAiB,CAAC;IACxB,0CAA0C;IAC1C,SAAS,EAAE,sBAAsB,CAAC;IAClC,wCAAwC;IACxC,KAAK,EAAE,kBAAkB,CAAC;IAC1B;;;;;;;;;;OAUG;IACH,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;CACrC;AAMD,wCAAwC;AACxC,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAyJrG,CAAC;AAMF,oCAAoC;AACpC,wBAAgB,wBAAwB,IAAI,sBAAsB,EAAE,CAEnE;AAED,6CAA6C;AAC7C,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,sBAAsB,GAAG,6BAA6B,CAEtG;AAED,mDAAmD;AACnD,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,IAAI,sBAAsB,CAG9F"}

package/dist/esm/notifications/email/email-template-registry.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"email-template-registry.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template-registry.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAEvC,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAN,IAAY,sBAoBX;AApBD,WAAY,sBAAsB;IAChC,iEAAiE;IACjE,gEAAsC,CAAA;IACtC,kEAAwC,CAAA;IACxC,0EAAgD,CAAA;IAChD,wDAA8B,CAAA;IAC9B,0DAAgC,CAAA;IAEhC,iEAAiE;IACjE,oFAA0D,CAAA;IAC1D,4FAAkE,CAAA;IAElE,iEAAiE;IACjE,wFAA8D,CAAA;IAC9D,kFAAwD,CAAA;IACxD,kEAAwC,CAAA;IAExC,iEAAiE;IACjE,kEAAwC,CAAA;IACxC,sEAA4C,CAAA;AAC9C,CAAC,EApBW,sBAAsB,KAAtB,sBAAsB,QAoBjC;AAkCD,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,wCAAwC;AACxC,MAAM,CAAC,MAAM,2BAA2B,GAAkE;IACxG,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE;QACtC,WAAW,EAAE,sBAAsB,CAAC,aAAa;QACjD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;SAClB,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE;QACvC,WAAW,EAAE,sBAAsB,CAAC,cAAc;QAClD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;YACjB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE;QAC3C,WAAW,EAAE,sBAAsB,CAAC,kBAAkB;QACtD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SACvD,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE;QAClC,WAAW,EAAE,sBAAsB,CAAC,SAAS;QAC7C,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE;QACnC,WAAW,EAAE,sBAAsB,CAAC,UAAU;QAC9C,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE;QAChD,WAAW,EAAE,sBAAsB,CAAC,uBAAuB;QAC3D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,YAAY;QACtC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;YAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC3C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE;QACpD,WAAW,EAAE,sBAAsB,CAAC,2BAA2B;QAC/D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,YAAY;QACtC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC9B,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE;QAClD,WAAW,EAAE,sBAAsB,CAAC,yBAAyB;QAC7D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAChC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE;SACtB,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE;QAC/C,WAAW,EAAE,sBAAsB,CAAC,sBAAsB;QAC1D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAClC,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE;QACvC,WAAW,EAAE,sBAAsB,CAAC,cAAc;QAClD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE;SAC1B,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE;QACvC,WAAW,EAAE,sBAAsB,CAAC,cAAc;QAClD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;YACnG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE;SAC7B,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE;QACzC,WAAW,EAAE,sBAAsB,CAAC,gBAAgB;QACpD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE;SACzB,CAAC;KACH;CACF,CAAC;AAEF,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,oCAAoC;AACpC,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAC/C,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,2BAA2B,CAAC,GAA2B;IACrE,OAAO,2BAA2B,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,WAAqC,CAAC,CAAC;AAC1F,CAAC","sourcesContent":["/*\n System Email Template Registry\n \n Runtime identity contract for system-level (non-resource-attached) email\n * templates. Carries only mechanical information: `templateRef`, routing\n * classifications (`type`, `frequency`, `scope`), and the Zod schema for the\n * event payload.\n \n *All human-readable / spec-oriented content (purpose prose, tone, text\n slots, event-data field narration) lives in\n * `@wildo-ai/saas-specifications`** — specifically in\n * `SystemEmailTemplateSpecificationConfig` under\n * `src/engine/notifications/system-emails/`. The runtime registry must stay\n * free of i18n/spec prose so the companion translation/transposition\n * pipeline owns the single source of truth for authored semantics.\n /\n\nimport { z } from 'zod';\nimport {\n EmailTemplateType,\n EmailTemplateFrequency,\n EmailTemplateScope,\n} from './email-template.shared.enums';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SYSTEM EMAIL TEMPLATE REF ENUM\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n System email template registry — non-resource related.\n * Uses dot notation for namespacing (`system.`).\n /\nexport enum SystemEmailTemplateRef {\n // ─── Authentication ───────────────────────────────────────────\n WELCOME_EMAIL = \"system.welcome_email\",\n PASSWORD_RESET = \"system.password_reset\",\n EMAIL_VERIFICATION = \"system.email_verification\",\n EMAIL_OTP = \"system.email_otp\",\n MAGIC_LINK = \"system.magic_link\",\n\n // ─── Organization ─────────────────────────────────────────────\n ORGANIZATION_INVITATION = \"system.organization_invitation\",\n ORGANIZATION_MEMBER_REMOVED = \"system.organization_member_removed\",\n\n // ─── Subscription & Billing ───────────────────────────────────\n SUBSCRIPTION_CONFIRMATION = \"system.subscription_confirmation\",\n SUBSCRIPTION_CANCELLED = \"system.subscription_cancelled\",\n PAYMENT_FAILED = \"system.payment_failed\",\n\n // ─── Security ─────────────────────────────────────────────────\n SECURITY_ALERT = \"system.security_alert\",\n NEW_DEVICE_LOGIN = \"system.new_device_login\",\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SYSTEM TEMPLATE DEFINITION INTERFACE\n// ─────────────────────────────────────────────────────────────────────────────\n\n/*\n Runtime identity for a system email template.\n \n System templates use the same context structure as resource-based templates:\n * - `objectContext`: contains `primaryScopeContext` (appName, organizationName, etc.)\n * - `userContext`: recipient info (email, name, preferences) — changes per recipient\n * - `eventData`: system-event-specific payload (replaces `currentObject` for\n * non-resource emails); validated by `eventDataSchema`.\n /\nexport interface SystemEmailTemplateDefinition {\n /* Unique template reference. /\n templateRef: SystemEmailTemplateRef;\n /* Email type for provider routing. /\n type: EmailTemplateType;\n /* Frequency for lifecycle management. /\n frequency: EmailTemplateFrequency;\n /* Scope for header/footer behavior. /\n scope: EmailTemplateScope;\n /\n Zod schema for the event-specific payload (`eventData`).\n \n This is the system-event payload, NOT a flattened input DTO.\n * Common fields (appName, recipientEmail) come from\n * `objectContext` / `userContext`.\n /\n eventDataSchema: z.ZodType<unknown>;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SYSTEM TEMPLATE REGISTRY\n// ─────────────────────────────────────────────────────────────────────────────\n\n/* Registry of all system templates. /\nexport const SystemEmailTemplateRegistry: Record<SystemEmailTemplateRef, SystemEmailTemplateDefinition> = {\n [SystemEmailTemplateRef.WELCOME_EMAIL]: {\n templateRef: SystemEmailTemplateRef.WELCOME_EMAIL,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n loginUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.PASSWORD_RESET]: {\n templateRef: SystemEmailTemplateRef.PASSWORD_RESET,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n resetUrl: z.url(),\n expiresInMinutes: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.EMAIL_VERIFICATION]: {\n templateRef: SystemEmailTemplateRef.EMAIL_VERIFICATION,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n verifyUrl: z.url(),\n expiresInHours: z.number().int().positive().optional(),\n }),\n },\n\n [SystemEmailTemplateRef.EMAIL_OTP]: {\n templateRef: SystemEmailTemplateRef.EMAIL_OTP,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n otpCode: z.string().min(4).max(8),\n expiresInMinutes: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.MAGIC_LINK]: {\n templateRef: SystemEmailTemplateRef.MAGIC_LINK,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n magicLinkUrl: z.url(),\n tokenValue: z.string(),\n expiresInMinutes: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.ORGANIZATION_INVITATION]: {\n templateRef: SystemEmailTemplateRef.ORGANIZATION_INVITATION,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.ORGANIZATION,\n eventDataSchema: z.object({\n inviterName: z.string(),\n organizationName: z.string(),\n role: z.string(),\n acceptUrl: z.url(),\n expiresInDays: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.ORGANIZATION_MEMBER_REMOVED]: {\n templateRef: SystemEmailTemplateRef.ORGANIZATION_MEMBER_REMOVED,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.ORGANIZATION,\n eventDataSchema: z.object({\n organizationName: z.string(),\n removedByName: z.string().optional(),\n reason: z.string().optional(),\n }),\n },\n\n [SystemEmailTemplateRef.SUBSCRIPTION_CONFIRMATION]: {\n templateRef: SystemEmailTemplateRef.SUBSCRIPTION_CONFIRMATION,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n planName: z.string(),\n amount: z.number().positive(),\n currency: z.string().length(3),\n billingPeriod: z.enum(['monthly', 'yearly']),\n nextBillingDate: z.coerce.date(),\n dashboardUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.SUBSCRIPTION_CANCELLED]: {\n templateRef: SystemEmailTemplateRef.SUBSCRIPTION_CANCELLED,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n planName: z.string(),\n effectiveDate: z.coerce.date(),\n reactivateUrl: z.url().optional(),\n }),\n },\n\n [SystemEmailTemplateRef.PAYMENT_FAILED]: {\n templateRef: SystemEmailTemplateRef.PAYMENT_FAILED,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n amount: z.number().positive(),\n currency: z.string().length(3),\n lastFourDigits: z.string().length(4),\n retryDate: z.coerce.date(),\n updatePaymentUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.SECURITY_ALERT]: {\n templateRef: SystemEmailTemplateRef.SECURITY_ALERT,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n alertType: z.enum(['suspicious_login', 'password_changed', 'mfa_disabled', 'new_api_key', 'other']),\n description: z.string(),\n timestamp: z.coerce.date(),\n ipAddress: z.string().optional(),\n location: z.string().optional(),\n securitySettingsUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.NEW_DEVICE_LOGIN]: {\n templateRef: SystemEmailTemplateRef.NEW_DEVICE_LOGIN,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n deviceType: z.string(),\n browser: z.string(),\n operatingSystem: z.string(),\n ipAddress: z.string(),\n location: z.string().optional(),\n loginTime: z.coerce.date(),\n revokeAccessUrl: z.url(),\n }),\n },\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// HELPER FUNCTIONS\n// ─────────────────────────────────────────────────────────────────────────────\n\n/* Get all system template refs. /\nexport function getAllSystemTemplateRefs(): SystemEmailTemplateRef[] {\n return Object.values(SystemEmailTemplateRef);\n}\n\n/* Get system template definition by ref. /\nexport function getSystemTemplateDefinition(ref: SystemEmailTemplateRef): SystemEmailTemplateDefinition {\n return SystemEmailTemplateRegistry[ref];\n}\n\n/* Check if a templateRef is a system template. */\nexport function isSystemTemplateRef(templateRef: string): templateRef is SystemEmailTemplateRef {\n return templateRef.startsWith('system.') &&\n Object.values(SystemEmailTemplateRef).includes(templateRef as SystemEmailTemplateRef);\n}\n"]}
1	+ {"version":3,"file":"email-template-registry.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template-registry.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAEvC,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAN,IAAY,sBAoBX;AApBD,WAAY,sBAAsB;IAChC,iEAAiE;IACjE,gEAAsC,CAAA;IACtC,kEAAwC,CAAA;IACxC,0EAAgD,CAAA;IAChD,wDAA8B,CAAA;IAC9B,0DAAgC,CAAA;IAEhC,iEAAiE;IACjE,oFAA0D,CAAA;IAC1D,4FAAkE,CAAA;IAElE,iEAAiE;IACjE,wFAA8D,CAAA;IAC9D,kFAAwD,CAAA;IACxD,kEAAwC,CAAA;IAExC,iEAAiE;IACjE,kEAAwC,CAAA;IACxC,sEAA4C,CAAA;AAC9C,CAAC,EApBW,sBAAsB,KAAtB,sBAAsB,QAoBjC;AA2CD,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,wCAAwC;AACxC,MAAM,CAAC,MAAM,2BAA2B,GAAkE;IACxG,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE;QACtC,WAAW,EAAE,sBAAsB,CAAC,aAAa;QACjD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;SAClB,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE;QACvC,WAAW,EAAE,sBAAsB,CAAC,cAAc;QAClD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;YACjB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,EAAE;QAC3C,WAAW,EAAE,sBAAsB,CAAC,kBAAkB;QACtD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SACvD,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE;QAClC,WAAW,EAAE,sBAAsB,CAAC,SAAS;QAC7C,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE;QACnC,WAAW,EAAE,sBAAsB,CAAC,UAAU;QAC9C,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,EAAE;QAChD,WAAW,EAAE,sBAAsB,CAAC,uBAAuB;QAC3D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,YAAY;QACtC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;YAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC3C,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,EAAE;QACpD,WAAW,EAAE,sBAAsB,CAAC,2BAA2B;QAC/D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,YAAY;QACtC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC9B,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,EAAE;QAClD,WAAW,EAAE,sBAAsB,CAAC,yBAAyB;QAC7D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAChC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE;SACtB,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,EAAE;QAC/C,WAAW,EAAE,sBAAsB,CAAC,sBAAsB;QAC1D,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAClC,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE;QACvC,WAAW,EAAE,sBAAsB,CAAC,cAAc;QAClD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE;SAC1B,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE;QACvC,WAAW,EAAE,sBAAsB,CAAC,cAAc;QAClD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;YACnG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE;SAC7B,CAAC;KACH;IAED,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE;QACzC,WAAW,EAAE,sBAAsB,CAAC,gBAAgB;QACpD,IAAI,EAAE,iBAAiB,CAAC,aAAa;QACrC,SAAS,EAAE,sBAAsB,CAAC,SAAS;QAC3C,KAAK,EAAE,kBAAkB,CAAC,WAAW;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;YACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE;SACzB,CAAC;KACH;CACF,CAAC;AAEF,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,oCAAoC;AACpC,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAC/C,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,2BAA2B,CAAC,GAA2B;IACrE,OAAO,2BAA2B,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,WAAqC,CAAC,CAAC;AAC1F,CAAC","sourcesContent":["/*\n System Email Template Registry\n \n Runtime identity contract for system-level (non-resource-attached) email\n * templates. Carries only mechanical information: `templateRef`, routing\n * classifications (`type`, `frequency`, `scope`), and the Zod schema for the\n * event payload.\n \n *All human-readable / spec-oriented content (purpose prose, tone, text\n slots, event-data field narration) lives in\n * `@wildo-ai/saas-specifications`** — specifically in\n * `SystemEmailTemplateSpecificationConfig` under\n * `src/engine/notifications/system-emails/`. The runtime registry must stay\n * free of i18n/spec prose so the companion translation/transposition\n * pipeline owns the single source of truth for authored semantics.\n /\n\nimport { z } from 'zod';\nimport {\n EmailTemplateType,\n EmailTemplateFrequency,\n EmailTemplateScope,\n} from './email-template.shared.enums';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SYSTEM EMAIL TEMPLATE REF ENUM\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n System email template registry — non-resource related.\n * Uses dot notation for namespacing (`system.`).\n /\nexport enum SystemEmailTemplateRef {\n // ─── Authentication ───────────────────────────────────────────\n WELCOME_EMAIL = \"system.welcome_email\",\n PASSWORD_RESET = \"system.password_reset\",\n EMAIL_VERIFICATION = \"system.email_verification\",\n EMAIL_OTP = \"system.email_otp\",\n MAGIC_LINK = \"system.magic_link\",\n\n // ─── Organization ─────────────────────────────────────────────\n ORGANIZATION_INVITATION = \"system.organization_invitation\",\n ORGANIZATION_MEMBER_REMOVED = \"system.organization_member_removed\",\n\n // ─── Subscription & Billing ───────────────────────────────────\n SUBSCRIPTION_CONFIRMATION = \"system.subscription_confirmation\",\n SUBSCRIPTION_CANCELLED = \"system.subscription_cancelled\",\n PAYMENT_FAILED = \"system.payment_failed\",\n\n // ─── Security ─────────────────────────────────────────────────\n SECURITY_ALERT = \"system.security_alert\",\n NEW_DEVICE_LOGIN = \"system.new_device_login\",\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SYSTEM TEMPLATE DEFINITION INTERFACE\n// ─────────────────────────────────────────────────────────────────────────────\n\n/*\n Runtime identity for a system email template.\n \n System templates use the same context structure as resource-based templates:\n * - `objectContext`: contains `primaryScopeContext` (appName, organizationName, etc.)\n * - `userContext`: recipient info (email, name, preferences) — changes per recipient\n * - `eventData`: system-event-specific payload (replaces `currentObject` for\n * non-resource emails).\n \n ⚠️ Nothing parses a send against `eventDataSchema`. The payload travels in the untyped\n * `additionalContext` slot of the send request and each template casts it, so a misspelled or\n * missing field renders as empty text rather than being refused. Treat the schema below as the\n * DOCUMENTED shape a caller is expected to supply, not as a check that it did.\n /\nexport interface SystemEmailTemplateDefinition {\n /* Unique template reference. /\n templateRef: SystemEmailTemplateRef;\n /* Email type for provider routing. /\n type: EmailTemplateType;\n /* Frequency for lifecycle management. /\n frequency: EmailTemplateFrequency;\n /* Scope for header/footer behavior. /\n scope: EmailTemplateScope;\n /\n Zod schema DOCUMENTING the event-specific payload (`eventData`).\n \n This is the system-event payload, NOT a flattened input DTO.\n * Common fields (appName, recipientEmail) come from\n * `objectContext` / `userContext`.\n \n It is declarative: no send path parses against it. Keep it accurate anyway, because it is the\n * only statement of what a template needs, and a caller that disagrees with it produces a blank\n * region in the rendered email instead of an error.\n /\n eventDataSchema: z.ZodType<unknown>;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SYSTEM TEMPLATE REGISTRY\n// ─────────────────────────────────────────────────────────────────────────────\n\n/* Registry of all system templates. /\nexport const SystemEmailTemplateRegistry: Record<SystemEmailTemplateRef, SystemEmailTemplateDefinition> = {\n [SystemEmailTemplateRef.WELCOME_EMAIL]: {\n templateRef: SystemEmailTemplateRef.WELCOME_EMAIL,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n loginUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.PASSWORD_RESET]: {\n templateRef: SystemEmailTemplateRef.PASSWORD_RESET,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n resetUrl: z.url(),\n expiresInMinutes: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.EMAIL_VERIFICATION]: {\n templateRef: SystemEmailTemplateRef.EMAIL_VERIFICATION,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n verifyUrl: z.url(),\n expiresInHours: z.number().int().positive().optional(),\n }),\n },\n\n [SystemEmailTemplateRef.EMAIL_OTP]: {\n templateRef: SystemEmailTemplateRef.EMAIL_OTP,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n otpCode: z.string().min(4).max(8),\n expiresInMinutes: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.MAGIC_LINK]: {\n templateRef: SystemEmailTemplateRef.MAGIC_LINK,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n magicLinkUrl: z.url(),\n tokenValue: z.string(),\n expiresInMinutes: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.ORGANIZATION_INVITATION]: {\n templateRef: SystemEmailTemplateRef.ORGANIZATION_INVITATION,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.ORGANIZATION,\n eventDataSchema: z.object({\n inviterName: z.string(),\n organizationName: z.string(),\n role: z.string(),\n acceptUrl: z.url(),\n expiresInDays: z.number().int().positive(),\n }),\n },\n\n [SystemEmailTemplateRef.ORGANIZATION_MEMBER_REMOVED]: {\n templateRef: SystemEmailTemplateRef.ORGANIZATION_MEMBER_REMOVED,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.ORGANIZATION,\n eventDataSchema: z.object({\n organizationName: z.string(),\n removedByName: z.string().optional(),\n reason: z.string().optional(),\n }),\n },\n\n [SystemEmailTemplateRef.SUBSCRIPTION_CONFIRMATION]: {\n templateRef: SystemEmailTemplateRef.SUBSCRIPTION_CONFIRMATION,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n planName: z.string(),\n amount: z.number().positive(),\n currency: z.string().length(3),\n billingPeriod: z.enum(['monthly', 'yearly']),\n nextBillingDate: z.coerce.date(),\n dashboardUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.SUBSCRIPTION_CANCELLED]: {\n templateRef: SystemEmailTemplateRef.SUBSCRIPTION_CANCELLED,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n planName: z.string(),\n effectiveDate: z.coerce.date(),\n reactivateUrl: z.url().optional(),\n }),\n },\n\n [SystemEmailTemplateRef.PAYMENT_FAILED]: {\n templateRef: SystemEmailTemplateRef.PAYMENT_FAILED,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n amount: z.number().positive(),\n currency: z.string().length(3),\n lastFourDigits: z.string().length(4),\n retryDate: z.coerce.date(),\n updatePaymentUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.SECURITY_ALERT]: {\n templateRef: SystemEmailTemplateRef.SECURITY_ALERT,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n alertType: z.enum(['suspicious_login', 'password_changed', 'mfa_disabled', 'new_api_key', 'other']),\n description: z.string(),\n timestamp: z.coerce.date(),\n ipAddress: z.string().optional(),\n location: z.string().optional(),\n securitySettingsUrl: z.url(),\n }),\n },\n\n [SystemEmailTemplateRef.NEW_DEVICE_LOGIN]: {\n templateRef: SystemEmailTemplateRef.NEW_DEVICE_LOGIN,\n type: EmailTemplateType.TRANSACTIONAL,\n frequency: EmailTemplateFrequency.RECURRENT,\n scope: EmailTemplateScope.APPLICATION,\n eventDataSchema: z.object({\n deviceType: z.string(),\n browser: z.string(),\n operatingSystem: z.string(),\n ipAddress: z.string(),\n location: z.string().optional(),\n loginTime: z.coerce.date(),\n revokeAccessUrl: z.url(),\n }),\n },\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// HELPER FUNCTIONS\n// ─────────────────────────────────────────────────────────────────────────────\n\n/* Get all system template refs. /\nexport function getAllSystemTemplateRefs(): SystemEmailTemplateRef[] {\n return Object.values(SystemEmailTemplateRef);\n}\n\n/* Get system template definition by ref. /\nexport function getSystemTemplateDefinition(ref: SystemEmailTemplateRef): SystemEmailTemplateDefinition {\n return SystemEmailTemplateRegistry[ref];\n}\n\n/* Check if a templateRef is a system template. */\nexport function isSystemTemplateRef(templateRef: string): templateRef is SystemEmailTemplateRef {\n return templateRef.startsWith('system.') &&\n Object.values(SystemEmailTemplateRef).includes(templateRef as SystemEmailTemplateRef);\n}\n"]}

package/dist/esm/notifications/email/email-template.shared.enums.d.ts CHANGED Viewed

@@ -54,6 +54,20 @@
  */
 import { EngineCapability } from '../../external-providers/engine-capabilities.shared.schemas';
 /**
+ * @wildo_source:part:start saas.models.email.template-type facet:layer:shared facet:audience:app-developer
+ *
+ * ⚠️ **A template's `type` decides WHICH VENDOR ships it.** It is not a label: each member maps to a
+ * distinct engine capability, and the sender resolves the provider configured against THAT
+ * capability. A newsletter left at the default is dispatched through the transactional vendor, on
+ * the transactional reputation and quota, and nothing reports it.
+ *
+ * Declare it on the file-based `EmailTemplateDefinition<L>.type` slot, or inside the system template
+ * registry definition.
+ *
+ * Setting `MARKETING` therefore requires a vendor declared against the marketing capability and named
+ * as its primary — otherwise the send has no provider to resolve. Nothing else in the send path
+ * changes.
+ *
  * Dispatch class for an email template — maps 1:1 with `EngineCapability`
  * for provider routing inside `EmailBackendService`.
  *
@@ -69,6 +83,7 @@ export declare enum EmailTemplateType {
     /** Marketing emails — newsletters, promotions, campaigns. */
     MARKETING = "EMAIL_MARKETING"
 }
+/** @wildo_source:part:end saas.models.email.template-type */
 /**
  * Total `Record<EmailTemplateType, EngineCapability>` used by
  * `EmailBackendService` to pick the configured provider for a given template

package/dist/esm/notifications/email/email-template.shared.enums.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"email-template.shared.enums.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template.shared.enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAM/F~~;;;;;;;;;GASG~~;AACH,oBAAY,iBAAiB;IAC3B,uEAAuE;IACvE,aAAa,wBAAuC;IACpD,6DAA6D;IAC7D,SAAS,oBAAmC;CAC7C;~~AAED~~;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC,EAAE,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAG5F,CAAC;AAMF;;;;;;;;;GASG;AACH,oBAAY,sBAAsB;IAChC;;;;;OAKG;IACH,SAAS,cAAc;IACvB;;;;;OAKG;IACH,SAAS,cAAc;CACxB;AAMD;;;;;;;;;;GAUG;AACH,oBAAY,mBAAmB;IAC7B,wDAAwD;IACxD,KAAK,UAAU;IACf,oDAAoD;IACpD,SAAS,cAAc;IACvB,+CAA+C;IAC/C,QAAQ,aAAa;CACtB;AAMD;;;;;;;;;;;;GAYG;AACH,oBAAY,kBAAkB;IAC5B,2DAA2D;IAC3D,WAAW,gBAAgB;IAC3B,uEAAuE;IACvE,YAAY,iBAAiB;CAC9B"}
1	+ {"version":3,"file":"email-template.shared.enums.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template.shared.enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAM/F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,oBAAY,iBAAiB;IAC3B,uEAAuE;IACvE,aAAa,wBAAuC;IACpD,6DAA6D;IAC7D,SAAS,oBAAmC;CAC7C;AACD,6DAA6D;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC,EAAE,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAG5F,CAAC;AAMF;;;;;;;;;GASG;AACH,oBAAY,sBAAsB;IAChC;;;;;OAKG;IACH,SAAS,cAAc;IACvB;;;;;OAKG;IACH,SAAS,cAAc;CACxB;AAMD;;;;;;;;;;GAUG;AACH,oBAAY,mBAAmB;IAC7B,wDAAwD;IACxD,KAAK,UAAU;IACf,oDAAoD;IACpD,SAAS,cAAc;IACvB,+CAA+C;IAC/C,QAAQ,aAAa;CACtB;AAMD;;;;;;;;;;;;GAYG;AACH,oBAAY,kBAAkB;IAC5B,2DAA2D;IAC3D,WAAW,gBAAgB;IAC3B,uEAAuE;IACvE,YAAY,iBAAiB;CAC9B"}

package/dist/esm/notifications/email/email-template.shared.enums.js CHANGED Viewed

@@ -57,6 +57,20 @@ import { EngineCapability } from '../../external-providers/engine-capabilities.s
 // EMAIL TEMPLATE TYPE (provider routing)
 // ─────────────────────────────────────────────────────────────────────────────
 /**
+ * @wildo_source:part:start saas.models.email.template-type facet:layer:shared facet:audience:app-developer
+ *
+ * ⚠️ **A template's `type` decides WHICH VENDOR ships it.** It is not a label: each member maps to a
+ * distinct engine capability, and the sender resolves the provider configured against THAT
+ * capability. A newsletter left at the default is dispatched through the transactional vendor, on
+ * the transactional reputation and quota, and nothing reports it.
+ *
+ * Declare it on the file-based `EmailTemplateDefinition<L>.type` slot, or inside the system template
+ * registry definition.
+ *
+ * Setting `MARKETING` therefore requires a vendor declared against the marketing capability and named
+ * as its primary — otherwise the send has no provider to resolve. Nothing else in the send path
+ * changes.
+ *
  * Dispatch class for an email template — maps 1:1 with `EngineCapability`
  * for provider routing inside `EmailBackendService`.
  *
@@ -73,6 +87,7 @@ export var EmailTemplateType;
     /** Marketing emails — newsletters, promotions, campaigns. */
     EmailTemplateType["MARKETING"] = "EMAIL_MARKETING";
 })(EmailTemplateType || (EmailTemplateType = {}));
+/** @wildo_source:part:end saas.models.email.template-type */
 /**
  * Total `Record<EmailTemplateType, EngineCapability>` used by
  * `EmailBackendService` to pick the configured provider for a given template

package/dist/esm/notifications/email/email-template.shared.enums.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"email-template.shared.enums.js","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template.shared.enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAE/F,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAC3B,uEAAuE;IACvE,0DAAoD,CAAA;IACpD,6DAA6D;IAC7D,kDAA4C,CAAA;AAC9C,CAAC,EALW,iBAAiB,KAAjB,iBAAiB,QAK5B;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAgD;IAC/F,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC,mBAAmB;IACvE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,eAAe;CAChE,CAAC;AAEF,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,sBAeX;AAfD,WAAY,sBAAsB;IAChC;;;;;OAKG;IACH,iDAAuB,CAAA;IACvB;;;;;OAKG;IACH,iDAAuB,CAAA;AACzB,CAAC,EAfW,sBAAsB,KAAtB,sBAAsB,QAejC;AAED,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAC7B,wDAAwD;IACxD,sCAAe,CAAA;IACf,oDAAoD;IACpD,8CAAuB,CAAA;IACvB,+CAA+C;IAC/C,4CAAqB,CAAA;AACvB,CAAC,EAPW,mBAAmB,KAAnB,mBAAmB,QAO9B;AAED,gFAAgF;AAChF,gDAAgD;AAChD,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,2DAA2D;IAC3D,iDAA2B,CAAA;IAC3B,uEAAuE;IACvE,mDAA6B,CAAA;AAC/B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B","sourcesContent":["/*\n Email Template Classification Enums\n \n Surviving classification vocabulary for the file-based email template\n * pipeline. These enums classify a template's runtime intent — not a database\n * row. Post-Step-4 (`email-templates-deprecate-db-backed.md`), the DB-backed\n * `EMAIL_TEMPLATES` `CoreResourceType` was removed end-to-end and the runtime\n * sender pipeline reads templates exclusively from the filesystem registry\n * (`EmailTemplateRegistryBackendService` + `scanEmailTemplateDirectory`).\n \n ## Why this file exists separately from `email-template.shared.schemas.ts`\n \n Step 6 of the deprecation plan split these enums out of the DB-backed\n * `EmailTemplateSchema` file before deleting that file. The split was\n * required because consumers of these enums survive the schema deletion:\n \n - `email-template-registry.shared.schemas.ts` declares\n * `SystemEmailTemplateDefinition` and the `SystemEmailTemplateRegistry` map\n * keyed by `EmailTemplateType` / `EmailTemplateFrequency` / `EmailTemplateScope`.\n * - `engine/saas-backend-lib/src/notifications/email/models/email-template-definition.ts`\n * types `EmailTemplateDefinition<L>.type?` as `EmailTemplateType`.\n * - The runtime sender pipeline (`EmailBackendService`) routes to a provider\n * via `EmailTemplateType_ToEngineCapability[type]`.\n * - The auth services (`auth-registration`, `auth-password-reset`,\n * `authentication-controller`) and the dispatcher\n * (`notifications-dispatcher.backend.service`) emit\n * `EmailTemplateType.TRANSACTIONAL` when enqueuing send jobs.\n * - The wonder-todos dev companion (`email-template.companion.service.ts`)\n * tags scaffolded templates as `EmailTemplateType.TRANSACTIONAL`.\n \n Splitting the enums into their own module keeps these consumers compiling\n * after `EmailTemplateSchema` and `EmailHeaderFooterTemplateSchema` are\n * deleted; before the split, every importer would have to migrate to a new\n * source path simultaneously, which is a much larger blast radius for the\n * same eventual outcome.\n \n ## What this file intentionally does NOT carry\n \n - `EmailTemplateGenerationSource` — only existed to classify rows in the\n * deleted `EmailTemplateSchema.generationSource` and\n * `EmailHeaderFooterTemplateSchema.generationSource` fields.\n * - `EmailTemplatePropDefinitionSchema` / `EmailTemplatePropDefinition` —\n * only existed to type the deleted `EmailTemplateSchema.propsDefinition`\n * field.\n * - `EmailTemplateSchema` / `EmailTemplate` — the DB row shape itself.\n * - `EmailTemplateType_ToPlatformCapability` — `@deprecated` alias of\n * `EmailTemplateType_ToEngineCapability` with zero callers; deleted in the\n * same pass to remove dead aliases.\n * - `deriveResourceEmailTemplateRef` — helper for the DB-backed authoring\n * surface; zero external callers; deleted in the same pass.\n \n If any of those symbols come back as a future requirement they should land\n * in a new module with a clear runtime owner, not be re-introduced here.\n /\n\nimport { EngineCapability } from '../../external-providers/engine-capabilities.shared.schemas';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE TYPE (provider routing)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Dispatch class for an email template — maps 1:1 with `EngineCapability`\n * for provider routing inside `EmailBackendService`.\n \n Templates declare their dispatch class on the file-based\n * `EmailTemplateDefinition<L>.type?` slot or inside the\n * `SystemEmailTemplateRegistry` definition; the runtime sender uses\n * {@link EmailTemplateType_ToEngineCapability} to resolve which configured\n * provider should ship the message.\n /\nexport enum EmailTemplateType {\n /* Transactional emails — password resets, receipts, notifications. /\n TRANSACTIONAL = EngineCapability.EMAIL_TRANSACTIONAL,\n /* Marketing emails — newsletters, promotions, campaigns. /\n MARKETING = EngineCapability.EMAIL_MARKETING,\n}\n\n/\n Total `Record<EmailTemplateType, EngineCapability>` used by\n * `EmailBackendService` to pick the configured provider for a given template\n * dispatch class. Kept in this enums module (not in the runtime sender)\n * because it is data, not behavior, and because it stays in lock-step with\n * the {@link EmailTemplateType} enum — adding a new variant requires an\n * entry here in the same edit.\n /\nexport const EmailTemplateType_ToEngineCapability: Record<EmailTemplateType, EngineCapability> = {\n [EmailTemplateType.TRANSACTIONAL]: EngineCapability.EMAIL_TRANSACTIONAL,\n [EmailTemplateType.MARKETING]: EngineCapability.EMAIL_MARKETING,\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE FREQUENCY (lifecycle classification)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Lifecycle classification for an email template from the application's\n * authoring perspective. This is about how the template is used by the\n * system — not how often a user receives it.\n \n Surfaced on `SystemEmailTemplateDefinition.frequency`; the runtime sender\n * pipeline does not branch on this value today, but it is preserved as a\n * canonical authoring slot so the dev companion can render it (e.g. in\n * preview metadata) and so future lifecycle automation can key off it.\n /\nexport enum EmailTemplateFrequency {\n /\n Template used once or a few times in the application's lifetime.\n * Examples: migration announcements, CVE security alerts, T&C updates,\n * one-time campaigns. These templates may be archived after their\n * purpose is fulfilled.\n /\n EPHEMERAL = \"EPHEMERAL\",\n /\n Template used repeatedly throughout the application's lifetime.\n * Examples: welcome emails, password reset, order confirmations,\n * verification emails. These templates are permanent fixtures of the\n * application.\n /\n RECURRENT = \"RECURRENT\",\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE STATUS (workflow state)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Workflow state for a template artifact.\n \n Pre-Step-4 this enum drove a DRAFT/PUBLISHED versioning workflow on the\n * deleted `EmailTemplateSchema.status` field. Post-Step-4 it survives only\n * because the dev companion preview surface and authoring tooling may\n * still want a workflow vocabulary for in-progress edits before they land\n * in the filesystem registry. Today no live runtime branches on it; if it\n * ends up unused after Step 8 (companion-preview integration test) the\n * cleanup pass should consider deleting it outright.\n /\nexport enum EmailTemplateStatus {\n /* Template is in draft state, not used for sending. /\n DRAFT = \"DRAFT\",\n /* Template is published and active for sending. /\n PUBLISHED = \"PUBLISHED\",\n /* Template is archived and no longer used. /\n ARCHIVED = \"ARCHIVED\",\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE SCOPE (header/footer behavior)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Scope marker for a template — `APPLICATION` vs `ORGANIZATION`. Aligned\n * with `ResourcePrimaryScope` but intentionally narrower: email scope only\n * needs the application/organization split; user-self / anonymous scopes\n * have no header/footer semantics in the email pipeline.\n \n Surfaced on `SystemEmailTemplateDefinition.scope`. The header/footer\n * runtime never reads the deleted `EmailHeaderFooterTemplateSchema` —\n * post-Step-4 header/footer composition lives entirely inside the\n * file-based template (`template.tsx` consumes header/footer React\n * components directly), and this scope marker only informs companion\n * preview rendering and any future per-scope provider-selection logic.\n /\nexport enum EmailTemplateScope {\n /* Application-level template (uses app header/footer). /\n APPLICATION = \"APPLICATION\",\n /* Organization-level template (uses org header/footer if defined). */\n ORGANIZATION = \"ORGANIZATION\",\n}\n"]}
1	+ {"version":3,"file":"email-template.shared.enums.js","sourceRoot":"","sources":["../../../../../src/notifications/email/email-template.shared.enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAE/F,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAN,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAC3B,uEAAuE;IACvE,0DAAoD,CAAA;IACpD,6DAA6D;IAC7D,kDAA4C,CAAA;AAC9C,CAAC,EALW,iBAAiB,KAAjB,iBAAiB,QAK5B;AACD,6DAA6D;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAgD;IAC/F,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC,mBAAmB;IACvE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,eAAe;CAChE,CAAC;AAEF,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,sBAeX;AAfD,WAAY,sBAAsB;IAChC;;;;;OAKG;IACH,iDAAuB,CAAA;IACvB;;;;;OAKG;IACH,iDAAuB,CAAA;AACzB,CAAC,EAfW,sBAAsB,KAAtB,sBAAsB,QAejC;AAED,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAC7B,wDAAwD;IACxD,sCAAe,CAAA;IACf,oDAAoD;IACpD,8CAAuB,CAAA;IACvB,+CAA+C;IAC/C,4CAAqB,CAAA;AACvB,CAAC,EAPW,mBAAmB,KAAnB,mBAAmB,QAO9B;AAED,gFAAgF;AAChF,gDAAgD;AAChD,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,2DAA2D;IAC3D,iDAA2B,CAAA;IAC3B,uEAAuE;IACvE,mDAA6B,CAAA;AAC/B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B","sourcesContent":["/*\n Email Template Classification Enums\n \n Surviving classification vocabulary for the file-based email template\n * pipeline. These enums classify a template's runtime intent — not a database\n * row. Post-Step-4 (`email-templates-deprecate-db-backed.md`), the DB-backed\n * `EMAIL_TEMPLATES` `CoreResourceType` was removed end-to-end and the runtime\n * sender pipeline reads templates exclusively from the filesystem registry\n * (`EmailTemplateRegistryBackendService` + `scanEmailTemplateDirectory`).\n \n ## Why this file exists separately from `email-template.shared.schemas.ts`\n \n Step 6 of the deprecation plan split these enums out of the DB-backed\n * `EmailTemplateSchema` file before deleting that file. The split was\n * required because consumers of these enums survive the schema deletion:\n \n - `email-template-registry.shared.schemas.ts` declares\n * `SystemEmailTemplateDefinition` and the `SystemEmailTemplateRegistry` map\n * keyed by `EmailTemplateType` / `EmailTemplateFrequency` / `EmailTemplateScope`.\n * - `engine/saas-backend-lib/src/notifications/email/models/email-template-definition.ts`\n * types `EmailTemplateDefinition<L>.type?` as `EmailTemplateType`.\n * - The runtime sender pipeline (`EmailBackendService`) routes to a provider\n * via `EmailTemplateType_ToEngineCapability[type]`.\n * - The auth services (`auth-registration`, `auth-password-reset`,\n * `authentication-controller`) and the dispatcher\n * (`notifications-dispatcher.backend.service`) emit\n * `EmailTemplateType.TRANSACTIONAL` when enqueuing send jobs.\n * - The wonder-todos dev companion (`email-template.companion.service.ts`)\n * tags scaffolded templates as `EmailTemplateType.TRANSACTIONAL`.\n \n Splitting the enums into their own module keeps these consumers compiling\n * after `EmailTemplateSchema` and `EmailHeaderFooterTemplateSchema` are\n * deleted; before the split, every importer would have to migrate to a new\n * source path simultaneously, which is a much larger blast radius for the\n * same eventual outcome.\n \n ## What this file intentionally does NOT carry\n \n - `EmailTemplateGenerationSource` — only existed to classify rows in the\n * deleted `EmailTemplateSchema.generationSource` and\n * `EmailHeaderFooterTemplateSchema.generationSource` fields.\n * - `EmailTemplatePropDefinitionSchema` / `EmailTemplatePropDefinition` —\n * only existed to type the deleted `EmailTemplateSchema.propsDefinition`\n * field.\n * - `EmailTemplateSchema` / `EmailTemplate` — the DB row shape itself.\n * - `EmailTemplateType_ToPlatformCapability` — `@deprecated` alias of\n * `EmailTemplateType_ToEngineCapability` with zero callers; deleted in the\n * same pass to remove dead aliases.\n * - `deriveResourceEmailTemplateRef` — helper for the DB-backed authoring\n * surface; zero external callers; deleted in the same pass.\n \n If any of those symbols come back as a future requirement they should land\n * in a new module with a clear runtime owner, not be re-introduced here.\n /\n\nimport { EngineCapability } from '../../external-providers/engine-capabilities.shared.schemas';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE TYPE (provider routing)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n @wildo_source:part:start saas.models.email.template-type facet:layer:shared facet:audience:app-developer\n \n ⚠️ A template's `type` decides WHICH VENDOR ships it. It is not a label: each member maps to a\n * distinct engine capability, and the sender resolves the provider configured against THAT\n * capability. A newsletter left at the default is dispatched through the transactional vendor, on\n * the transactional reputation and quota, and nothing reports it.\n \n Declare it on the file-based `EmailTemplateDefinition<L>.type` slot, or inside the system template\n * registry definition.\n \n Setting `MARKETING` therefore requires a vendor declared against the marketing capability and named\n * as its primary — otherwise the send has no provider to resolve. Nothing else in the send path\n * changes.\n \n Dispatch class for an email template — maps 1:1 with `EngineCapability`\n * for provider routing inside `EmailBackendService`.\n \n Templates declare their dispatch class on the file-based\n * `EmailTemplateDefinition<L>.type?` slot or inside the\n * `SystemEmailTemplateRegistry` definition; the runtime sender uses\n * {@link EmailTemplateType_ToEngineCapability} to resolve which configured\n * provider should ship the message.\n /\nexport enum EmailTemplateType {\n /* Transactional emails — password resets, receipts, notifications. /\n TRANSACTIONAL = EngineCapability.EMAIL_TRANSACTIONAL,\n /* Marketing emails — newsletters, promotions, campaigns. /\n MARKETING = EngineCapability.EMAIL_MARKETING,\n}\n/* @wildo_source:part:end saas.models.email.template-type /\n\n/\n Total `Record<EmailTemplateType, EngineCapability>` used by\n * `EmailBackendService` to pick the configured provider for a given template\n * dispatch class. Kept in this enums module (not in the runtime sender)\n * because it is data, not behavior, and because it stays in lock-step with\n * the {@link EmailTemplateType} enum — adding a new variant requires an\n * entry here in the same edit.\n /\nexport const EmailTemplateType_ToEngineCapability: Record<EmailTemplateType, EngineCapability> = {\n [EmailTemplateType.TRANSACTIONAL]: EngineCapability.EMAIL_TRANSACTIONAL,\n [EmailTemplateType.MARKETING]: EngineCapability.EMAIL_MARKETING,\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE FREQUENCY (lifecycle classification)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Lifecycle classification for an email template from the application's\n * authoring perspective. This is about how the template is used by the\n * system — not how often a user receives it.\n \n Surfaced on `SystemEmailTemplateDefinition.frequency`; the runtime sender\n * pipeline does not branch on this value today, but it is preserved as a\n * canonical authoring slot so the dev companion can render it (e.g. in\n * preview metadata) and so future lifecycle automation can key off it.\n /\nexport enum EmailTemplateFrequency {\n /\n Template used once or a few times in the application's lifetime.\n * Examples: migration announcements, CVE security alerts, T&C updates,\n * one-time campaigns. These templates may be archived after their\n * purpose is fulfilled.\n /\n EPHEMERAL = \"EPHEMERAL\",\n /\n Template used repeatedly throughout the application's lifetime.\n * Examples: welcome emails, password reset, order confirmations,\n * verification emails. These templates are permanent fixtures of the\n * application.\n /\n RECURRENT = \"RECURRENT\",\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE STATUS (workflow state)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Workflow state for a template artifact.\n \n Pre-Step-4 this enum drove a DRAFT/PUBLISHED versioning workflow on the\n * deleted `EmailTemplateSchema.status` field. Post-Step-4 it survives only\n * because the dev companion preview surface and authoring tooling may\n * still want a workflow vocabulary for in-progress edits before they land\n * in the filesystem registry. Today no live runtime branches on it; if it\n * ends up unused after Step 8 (companion-preview integration test) the\n * cleanup pass should consider deleting it outright.\n /\nexport enum EmailTemplateStatus {\n /* Template is in draft state, not used for sending. /\n DRAFT = \"DRAFT\",\n /* Template is published and active for sending. /\n PUBLISHED = \"PUBLISHED\",\n /* Template is archived and no longer used. /\n ARCHIVED = \"ARCHIVED\",\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// EMAIL TEMPLATE SCOPE (header/footer behavior)\n// ─────────────────────────────────────────────────────────────────────────────\n\n/\n Scope marker for a template — `APPLICATION` vs `ORGANIZATION`. Aligned\n * with `ResourcePrimaryScope` but intentionally narrower: email scope only\n * needs the application/organization split; user-self / anonymous scopes\n * have no header/footer semantics in the email pipeline.\n \n Surfaced on `SystemEmailTemplateDefinition.scope`. The header/footer\n * runtime never reads the deleted `EmailHeaderFooterTemplateSchema` —\n * post-Step-4 header/footer composition lives entirely inside the\n * file-based template (`template.tsx` consumes header/footer React\n * components directly), and this scope marker only informs companion\n * preview rendering and any future per-scope provider-selection logic.\n /\nexport enum EmailTemplateScope {\n /* Application-level template (uses app header/footer). /\n APPLICATION = \"APPLICATION\",\n /* Organization-level template (uses org header/footer if defined). */\n ORGANIZATION = \"ORGANIZATION\",\n}\n"]}

package/dist/esm/notifications/m2m/webhook-config.shared.resources-config.schemas.d.ts CHANGED Viewed

@@ -50,6 +50,7 @@ export declare const WebhookConfig_TestEndpointRequestDto: z.ZodObject<{
 export declare const WebhookConfig_TestEndpointResponseDto: z.ZodObject<{
     endpointId: z.ZodString;
     url: z.ZodString;
+    transportIsPlaintext: z.ZodBoolean;
     outcome: z.ZodEnum<typeof WebhookEndpointProbeOutcome>;
     responseStatus: z.ZodOptional<z.ZodNumber>;
     responseBodyTruncated: z.ZodOptional<z.ZodString>;

package/dist/esm/notifications/m2m/webhook-config.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webhook-config.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EAEtB,MAAM,mDAAmD,CAAC;AAQ3D,OAAO,EAAuC,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAMnH,oBAAY,wBAAwB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,aAAa,iBAAiB;CAC/B;AAMD,eAAO,MAAM,oCAAoC;;iBAE/C,CAAC;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,qCAAqC~~;;;;;;;;;;iBAmBhD~~,CAAC;AAMH,eAAO,MAAM,iCAAiC,4OAkG7C,CAAC"}
1	+ {"version":3,"file":"webhook-config.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EAEtB,MAAM,mDAAmD,CAAC;AAQ3D,OAAO,EAAuC,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAMnH,oBAAY,wBAAwB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,aAAa,iBAAiB;CAC/B;AAMD,eAAO,MAAM,oCAAoC;;iBAE/C,CAAC;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;iBAsChD,CAAC;AAMH,eAAO,MAAM,iCAAiC,4OAkG7C,CAAC"}

package/dist/esm/notifications/m2m/webhook-config.shared.resources-config.schemas.js CHANGED Viewed

@@ -65,6 +65,25 @@ export const WebhookConfig_TestEndpointResponseDto = z.object({
     endpointId: z.string(),
     /** Destination actually contacted, echoed so the admin can confirm the stored URL. */
     url: z.string(),
+    /**
+     * True when that destination is plaintext `http://`, so the signature JWT travelled in the clear.
+     *
+     * ## Why the exposure is reported HERE (#492)
+     *
+     * Plaintext endpoints are admitted, deliberately, and the reasoning is recorded on
+     * `WebhookEndpointSchema.url`. The cost of admitting them is that the decision becomes invisible:
+     * a documented exposure nobody encounters is the same as an undocumented one, and the JSDoc
+     * reaches only someone reading the schema.
+     *
+     * This probe is the one place an admin acts on a SINGLE endpoint and reads a per-endpoint answer,
+     * so it is where the exposure can actually be met. It rides beside `outcome` rather than replacing
+     * it, because the two say different things: `ACCEPTED` over `http://` is a working endpoint AND a
+     * credential on the wire, and collapsing that into a failure would be false.
+     *
+     * Reported for every outcome, including `NOT_SENT` — the scheme is a property of the stored
+     * destination, not of the attempt, and an admin fixing a signing fault should still be told.
+     */
+    transportIsPlaintext: z.boolean(),
     outcome: z.enum(WebhookEndpointProbeOutcome),
     /** HTTP status returned by the endpoint. Absent for `UNREACHABLE` / `NOT_SENT`. */
     responseStatus: z.number().int().optional(),

package/dist/esm/notifications/m2m/webhook-config.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webhook-config.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAEnH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAN,IAAY,wBAkBX;AAlBD,WAAY,wBAAwB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,0DAA8B,CAAA;AAChC,CAAC,EAlBW,wBAAwB,KAAxB,wBAAwB,QAkBnC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,sFAAsF;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC;IAC5C,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,mFAAmF;IACnF,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,qFAAqF;IACrF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;CACtB,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iCAAiC,GAAG,uCAAuC,CACtF,mCAAmC,EACnC;IACE,gBAAgB,EAAE,IAAI;IACtB,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,kBAAkB,EAAE,EAAE,IAAI,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAC9D,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,yEAAyE;QACzE,gFAAgF;QAChF,8EAA8E;QAC9E,+EAA+E;QAC/E,+DAA+D;QAC/D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QACD,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE;YACxC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qEAAqE;oBACrE,kEAAkE;oBAClE,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,oCAAoC;oBAChD,iEAAiE;oBACjE,gEAAgE;oBAChE,oEAAoE;oBACpE,kEAAkE;oBAClE,qCAAqC;oBACrC,iBAAiB,EAAE,qCAAqC;iBACzD;aACF;SACF;KACF;CACF,CACF,CAAC","sourcesContent":["/*\n M2M Webhook Config Resource Configuration — Polymorphic dual-scope\n \n Produces 2 factory functions (ORG + APP) via the polymorphic factory.\n * Spread into the registry factory map:\n * ...webhookConfigPolymorphicFactories\n \n Operation set (mirrors SIEM Export Config singleton precedent):\n * - READ (API) : admin reads the config + derived public key\n * - CREATE (REPOSITORY_ONLY) : seeded once per scope; not externally callable\n * - UPDATE (REPOSITORY_ONLY) : admin edits via dedicated endpoint flow (not a public REST PUT)\n * - TEST_ENDPOINT (custom) : fires a synthetic delivery to verify URL reachability\n \n @see m2m-webhook-organization-delivery.md — Phase 2 / Step 5\n * @see security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts\n /\n\nimport { z } from 'zod';\nimport {\n CoreResourceOperation,\n CoreResourceType,\n} from '../../resources/resources.shared.core.definitions';\nimport {\n ResourceOperationRiskLevel,\n ResourceOperationVariantType,\n} from '../../resources/resources.shared.schemas';\nimport { createPolymorphicResourceConfigurations } from '../../resources/utils/resource-polymorphism.factory';\nimport { ResourceSystemAccessMode } from '../../resources/resources-config.shared.schemas';\nimport { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../security/authorizations/roles.shared.schemas';\nimport { webhookConfigPolymorphicDeclaration, WebhookEndpointProbeOutcome } from './webhook-config.shared.schemas';\n\n// =============================================================================\n// CUSTOM OPERATIONS\n// =============================================================================\n\nexport enum WebhookConfig_Operations {\n /\n Synthetic delivery to verify URL reachability + signature\n * verification on the consumer side. Targets a single endpoint\n * (selected by `endpointId` in the request body); does not write to\n * `M2MWebhookDeliveryLog` (test deliveries are excluded from the user\n * event log to keep the log clean).\n \n The probe is `resourceOperationLike: UPDATE`, NOT `READ`. It performs no\n * database write, but it DOES have an external side effect — a live signed\n * POST leaves the platform and arrives at a customer-controlled URL. Borrowing\n * READ made this a `GET` whose OpenAPI entry had to declare `x-idempotent: false`,\n * a self-contradiction, and pushed `endpointId` into a query string. Borrowing\n * UPDATE yields a `PUT` on the same custom-op sub-path, matching the\n * `M2MWebhookDeliveryLog.retry` precedent (also a no-DB-write-of-its-own verb\n * that triggers a delivery).\n /\n TEST_ENDPOINT = 'testEndpoint',\n}\n\n// =============================================================================\n// REQUEST DTOs\n// =============================================================================\n\nexport const WebhookConfig_TestEndpointRequestDto = z.object({\n endpointId: z.string().min(1),\n});\n\n// =============================================================================\n// RESPONSE DTOs\n// =============================================================================\n\n/\n Diagnostic returned synchronously by `testEndpoint`.\n \n A transport-level failure at the customer endpoint is a successful PROBE and\n * therefore answers HTTP 200 carrying `outcome: UNREACHABLE` — it is not an API\n * error. API errors are reserved for faults in the request itself (unknown\n * `endpointId`, no config row, rate limit exceeded).\n /\nexport const WebhookConfig_TestEndpointResponseDto = z.object({\n endpointId: z.string(),\n /* Destination actually contacted, echoed so the admin can confirm the stored URL. /\n url: z.string(),\n outcome: z.enum(WebhookEndpointProbeOutcome),\n /* HTTP status returned by the endpoint. Absent for `UNREACHABLE` / `NOT_SENT`. /\n responseStatus: z.number().int().optional(),\n /* Truncated response body, to let an admin read the consumer's own error text. /\n responseBodyTruncated: z.string().optional(),\n /* Network / timeout / signing failure detail. Absent when the endpoint answered. /\n failureReason: z.string().optional(),\n durationMs: z.number().int().nonnegative(),\n /\n `jti` of the signed probe. Stated so an admin can correlate this attempt with\n * the entry in their own consumer's logs — the same dedup key a real delivery\n * carries.\n */\n signatureJti: z.string(),\n attemptedAt: z.date(),\n});\n\n// =============================================================================\n// POLYMORPHIC FACTORY\n// =============================================================================\n\nexport const webhookConfigPolymorphicFactories = createPolymorphicResourceConfigurations(\n webhookConfigPolymorphicDeclaration,\n {\n isSystemResource: true,\n // Server-internal webhook delivery loads the (org/app) endpoint config via\n // `readAsSystem`, independent of the triggering user's roles — the config\n // governs runtime delivery behaviour, not user-facing data. READ-only.\n systemAccessPolicy: { read: ResourceSystemAccessMode.ALLOWED },\n customOperation: WebhookConfig_Operations,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so this one-per-scope webhook-config row is physically\n // removed when its owning org/app is deleted. Without a DELETE op the cascade\n // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any scope with a\n // config row. Admin tier (ORG_ADMIN / APP super-admin) / HIGH.\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n [WebhookConfig_Operations.TEST_ENDPOINT]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n // UPDATE-like, not READ-like — see the JSDoc on `TEST_ENDPOINT`. The\n // operation writes nothing, but it emits a live outbound request.\n resourceOperationLike: CoreResourceOperation.UPDATE,\n requestDto: WebhookConfig_TestEndpointRequestDto,\n // Implemented by `createWebhookConfigTestEndpointFactories()` in\n // saas-backend-lib (REPLACE_CORE_OPERATIONS): the core write is\n // replaced by the synthetic delivery, and this diagnostic — NOT the\n // config row — is what the caller receives. Keep this contract in\n // lockstep with that implementation.\n customResponseDto: WebhookConfig_TestEndpointResponseDto,\n },\n ],\n },\n },\n },\n);\n"]}
1	+ {"version":3,"file":"webhook-config.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAEnH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAN,IAAY,wBAkBX;AAlBD,WAAY,wBAAwB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,0DAA8B,CAAA;AAChC,CAAC,EAlBW,wBAAwB,KAAxB,wBAAwB,QAkBnC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,sFAAsF;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC;IAC5C,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,mFAAmF;IACnF,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,qFAAqF;IACrF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;CACtB,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iCAAiC,GAAG,uCAAuC,CACtF,mCAAmC,EACnC;IACE,gBAAgB,EAAE,IAAI;IACtB,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,kBAAkB,EAAE,EAAE,IAAI,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAC9D,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,yEAAyE;QACzE,gFAAgF;QAChF,8EAA8E;QAC9E,+EAA+E;QAC/E,+DAA+D;QAC/D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QACD,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE;YACxC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qEAAqE;oBACrE,kEAAkE;oBAClE,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,oCAAoC;oBAChD,iEAAiE;oBACjE,gEAAgE;oBAChE,oEAAoE;oBACpE,kEAAkE;oBAClE,qCAAqC;oBACrC,iBAAiB,EAAE,qCAAqC;iBACzD;aACF;SACF;KACF;CACF,CACF,CAAC","sourcesContent":["/*\n M2M Webhook Config Resource Configuration — Polymorphic dual-scope\n \n Produces 2 factory functions (ORG + APP) via the polymorphic factory.\n * Spread into the registry factory map:\n * ...webhookConfigPolymorphicFactories\n \n Operation set (mirrors SIEM Export Config singleton precedent):\n * - READ (API) : admin reads the config + derived public key\n * - CREATE (REPOSITORY_ONLY) : seeded once per scope; not externally callable\n * - UPDATE (REPOSITORY_ONLY) : admin edits via dedicated endpoint flow (not a public REST PUT)\n * - TEST_ENDPOINT (custom) : fires a synthetic delivery to verify URL reachability\n \n @see m2m-webhook-organization-delivery.md — Phase 2 / Step 5\n * @see security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts\n /\n\nimport { z } from 'zod';\nimport {\n CoreResourceOperation,\n CoreResourceType,\n} from '../../resources/resources.shared.core.definitions';\nimport {\n ResourceOperationRiskLevel,\n ResourceOperationVariantType,\n} from '../../resources/resources.shared.schemas';\nimport { createPolymorphicResourceConfigurations } from '../../resources/utils/resource-polymorphism.factory';\nimport { ResourceSystemAccessMode } from '../../resources/resources-config.shared.schemas';\nimport { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../security/authorizations/roles.shared.schemas';\nimport { webhookConfigPolymorphicDeclaration, WebhookEndpointProbeOutcome } from './webhook-config.shared.schemas';\n\n// =============================================================================\n// CUSTOM OPERATIONS\n// =============================================================================\n\nexport enum WebhookConfig_Operations {\n /\n Synthetic delivery to verify URL reachability + signature\n * verification on the consumer side. Targets a single endpoint\n * (selected by `endpointId` in the request body); does not write to\n * `M2MWebhookDeliveryLog` (test deliveries are excluded from the user\n * event log to keep the log clean).\n \n The probe is `resourceOperationLike: UPDATE`, NOT `READ`. It performs no\n * database write, but it DOES have an external side effect — a live signed\n * POST leaves the platform and arrives at a customer-controlled URL. Borrowing\n * READ made this a `GET` whose OpenAPI entry had to declare `x-idempotent: false`,\n * a self-contradiction, and pushed `endpointId` into a query string. Borrowing\n * UPDATE yields a `PUT` on the same custom-op sub-path, matching the\n * `M2MWebhookDeliveryLog.retry` precedent (also a no-DB-write-of-its-own verb\n * that triggers a delivery).\n /\n TEST_ENDPOINT = 'testEndpoint',\n}\n\n// =============================================================================\n// REQUEST DTOs\n// =============================================================================\n\nexport const WebhookConfig_TestEndpointRequestDto = z.object({\n endpointId: z.string().min(1),\n});\n\n// =============================================================================\n// RESPONSE DTOs\n// =============================================================================\n\n/\n Diagnostic returned synchronously by `testEndpoint`.\n \n A transport-level failure at the customer endpoint is a successful PROBE and\n * therefore answers HTTP 200 carrying `outcome: UNREACHABLE` — it is not an API\n * error. API errors are reserved for faults in the request itself (unknown\n * `endpointId`, no config row, rate limit exceeded).\n /\nexport const WebhookConfig_TestEndpointResponseDto = z.object({\n endpointId: z.string(),\n /* Destination actually contacted, echoed so the admin can confirm the stored URL. /\n url: z.string(),\n /\n True when that destination is plaintext `http://`, so the signature JWT travelled in the clear.\n \n ## Why the exposure is reported HERE (#492)\n \n Plaintext endpoints are admitted, deliberately, and the reasoning is recorded on\n * `WebhookEndpointSchema.url`. The cost of admitting them is that the decision becomes invisible:\n * a documented exposure nobody encounters is the same as an undocumented one, and the JSDoc\n * reaches only someone reading the schema.\n \n This probe is the one place an admin acts on a SINGLE endpoint and reads a per-endpoint answer,\n * so it is where the exposure can actually be met. It rides beside `outcome` rather than replacing\n * it, because the two say different things: `ACCEPTED` over `http://` is a working endpoint AND a\n * credential on the wire, and collapsing that into a failure would be false.\n \n Reported for every outcome, including `NOT_SENT` — the scheme is a property of the stored\n * destination, not of the attempt, and an admin fixing a signing fault should still be told.\n /\n transportIsPlaintext: z.boolean(),\n outcome: z.enum(WebhookEndpointProbeOutcome),\n /* HTTP status returned by the endpoint. Absent for `UNREACHABLE` / `NOT_SENT`. /\n responseStatus: z.number().int().optional(),\n /* Truncated response body, to let an admin read the consumer's own error text. /\n responseBodyTruncated: z.string().optional(),\n /* Network / timeout / signing failure detail. Absent when the endpoint answered. /\n failureReason: z.string().optional(),\n durationMs: z.number().int().nonnegative(),\n /\n `jti` of the signed probe. Stated so an admin can correlate this attempt with\n * the entry in their own consumer's logs — the same dedup key a real delivery\n * carries.\n */\n signatureJti: z.string(),\n attemptedAt: z.date(),\n});\n\n// =============================================================================\n// POLYMORPHIC FACTORY\n// =============================================================================\n\nexport const webhookConfigPolymorphicFactories = createPolymorphicResourceConfigurations(\n webhookConfigPolymorphicDeclaration,\n {\n isSystemResource: true,\n // Server-internal webhook delivery loads the (org/app) endpoint config via\n // `readAsSystem`, independent of the triggering user's roles — the config\n // governs runtime delivery behaviour, not user-facing data. READ-only.\n systemAccessPolicy: { read: ResourceSystemAccessMode.ALLOWED },\n customOperation: WebhookConfig_Operations,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so this one-per-scope webhook-config row is physically\n // removed when its owning org/app is deleted. Without a DELETE op the cascade\n // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any scope with a\n // config row. Admin tier (ORG_ADMIN / APP super-admin) / HIGH.\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n [WebhookConfig_Operations.TEST_ENDPOINT]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n // UPDATE-like, not READ-like — see the JSDoc on `TEST_ENDPOINT`. The\n // operation writes nothing, but it emits a live outbound request.\n resourceOperationLike: CoreResourceOperation.UPDATE,\n requestDto: WebhookConfig_TestEndpointRequestDto,\n // Implemented by `createWebhookConfigTestEndpointFactories()` in\n // saas-backend-lib (REPLACE_CORE_OPERATIONS): the core write is\n // replaced by the synthetic delivery, and this diagnostic — NOT the\n // config row — is what the caller receives. Keep this contract in\n // lockstep with that implementation.\n customResponseDto: WebhookConfig_TestEndpointResponseDto,\n },\n ],\n },\n },\n },\n);\n"]}

package/dist/esm/notifications/m2m/webhook-config.shared.schemas.d.ts CHANGED Viewed

@@ -91,6 +91,36 @@ export declare const WebhookEndpointSchema: z.ZodObject<{
     updatedAt: z.ZodDefault<z.ZodDate>;
 }, z.core.$strip>;
 export type WebhookEndpoint = z.infer<typeof WebhookEndpointSchema>;
+/**
+ * Whether a destination is reached over PLAINTEXT HTTP, so the signature JWT travels in the clear.
+ *
+ * ## One definition, because two would eventually disagree (#492)
+ *
+ * Plaintext is ADMITTED here — a deliberate commercial accommodation recorded on
+ * {@link WebhookEndpointSchema.url} — which is exactly why the condition needs a single named home
+ * rather than an inline `startsWith('http://')` at each surface that wants to say something about
+ * it. A refusal can live in one place because it stops the request; a TOLERATED condition is
+ * observed by several, and those several must agree.
+ *
+ * Read by the write path (which warns and audits) and by the endpoint probe (which reports it to
+ * the admin who pressed "test"). Both are listed here so the next reader can tell whether adding a
+ * third is joining a mechanism or starting a second one.
+ *
+ * Scheme comparison, not a `startsWith`: `WHATWG` lowercases the scheme during parsing, so
+ * `HTTP://example.test` and `http://example.test` are the same destination and a prefix test would
+ * disagree with the URL the delivery actually opens. An unparseable value answers `false` — it is
+ * not a plaintext destination, it is not a destination at all, and `z.url()` refuses it upstream.
+ */
+export declare function webhookEndpointTransportIsPlaintext(url: string): boolean;
+/**
+ * The host of a webhook destination, for an audit row or a log line — never the full URL.
+ *
+ * Mirrors `AuditableEvent_Webhook_EndpointTestDispatchedEventDataSchema.destinationHost` and the
+ * reasoning recorded there: paths and query strings on customer endpoints routinely embed
+ * per-tenant tokens, and these rows are replicated to the organisation's SIEM and to the immutable
+ * store. The host answers "which of my endpoints" without carrying a credential into a log.
+ */
+export declare function webhookEndpointDestinationHost(url: string): string;
 export declare const WebhookConfigBaseSchema: z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     enabled: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>;

package/dist/esm/notifications/m2m/webhook-config.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webhook-config.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,qDAAqD,CAAC;AAM7D;;;;;;;;;;;;GAYG;AACH,oBAAY,2BAA2B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IACrB,iFAAiF;IACjF,QAAQ,aAAa;IACrB,sFAAsF;IACtF,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,QAAQ,aAAa;CACtB;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,EAAE,4BAA4B,EAWpE,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;;;;;;;~~iBAWhC~~,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;~~AAMpE~~,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqBlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;kBAM9C,CAAC"}
1	+ {"version":3,"file":"webhook-config.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,qDAAqD,CAAC;AAM7D;;;;;;;;;;;;GAYG;AACH,oBAAY,2BAA2B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IACrB,iFAAiF;IACjF,QAAQ,aAAa;IACrB,sFAAsF;IACtF,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,QAAQ,aAAa;CACtB;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,EAAE,4BAA4B,EAWpE,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBA+BhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMlE;AAMD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAqBlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;kBAM9C,CAAC"}