@wildo-ai/saas-models 1.1.3 → 1.1.4

package/dist/esm/resources/resources-registry.shared.core.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources-registry.shared.core.definitions.d.ts","sourceRoot":"","sources":["../../../../src/resources/resources-registry.shared.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,oBAAoB,EAA+G,MAAM,4BAA4B,CAAC;AAKnM,OAAO,EAAE,gBAAgB,EAAgB,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAA+C,8CAA8C,EAAE,MAAM,mCAAmC,CAAC;AA4GhJ,eAAO,MAAM,8BAA8B,EAAG,oBAAoB,EAskDjE,CAAC;AAEF,eAAO,MAAM,6CAA6C,EAAE,8CAA8C,CAAC,gBAAgB,CA0G1H,CAAC"}
+{"version":3,"file":"resources-registry.shared.core.definitions.d.ts","sourceRoot":"","sources":["../../../src/resources/resources-registry.shared.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,oBAAoB,EAA+G,MAAM,4BAA4B,CAAC;AAKnM,OAAO,EAAE,gBAAgB,EAAgB,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAA+C,8CAA8C,EAAE,MAAM,mCAAmC,CAAC;AA6GhJ,eAAO,MAAM,8BAA8B,EAAG,oBAAoB,EAuoDjE,CAAC;AAEF,eAAO,MAAM,6CAA6C,EAAE,8CAA8C,CAAC,gBAAgB,CA2G1H,CAAC"}

package/dist/esm/resources/resources-registry.shared.core.definitions.js

@@ -20,6 +20,7 @@ import { organizationUnitResourceConfiguration_InitializationFactory } from "../
 import { organizationUnitMemberResourceConfiguration_InitializationFactory } from "../organizations/organization-unit-members.shared.resources-config.schemas.js";
 import { organizationProfileResourceConfiguration_InitializationFactory } from "../organizations/organization-profile.shared.resources-config.schemas.js";
 import { organizationPreferencesResourceConfiguration_InitializationFactory } from "../organizations/organization-preferences.shared.resources-config.schemas.js";
+import { applicationAccessGrantsResourceConfiguration_InitializationFactory } from '../security/authorizations/application-access-grants.shared.resources-config.schemas.js';
 import { platformAccessGrantsResourceConfiguration_InitializationFactory } from '../security/authorizations/platform-access-grants.shared.resources-config.schemas.js';
 import { organizationNotificationsResourceConfiguration_InitializationFactory } from "../organizations/organization-notifications.shared.resources-config.schemas.js";
 import { organizationFeaturesResourceConfiguration_InitializationFactory } from "../organizations/organization-features.shared.resources-config.schemas.js";
@@ -457,6 +458,58 @@ export const coreSharedResourceRelationship = [
         childOperations: { lifecycle: { onParentDelete: { enabled: true, mode: ChildLifecycleMode.IMMEDIATE, maxDepth: 1 } } },
         foreignKeyField: 'organizationId',
     }),
+    // ── APPLICATION-WIDE grants ──────────────────────────────────────────
+    //
+    // The APPLICATION-scoped sibling. Same lifecycle, no tenant: an elevation that reaches every
+    // tenant at once cannot be a COMPOSITION child of any one of them, which is the structural fact
+    // that made a second resource type necessary rather than a `scope` field on the row above.
+    //
+    // OPTIONAL + REQUIRES_CONTEXT + `isPrimaryScope`, copied from `APPLICATION → APPLICATION_AUDIT_LOGS`
+    // and for the reason stated there: MANDATORY makes the ZodToMongoose convertor refuse the resource
+    // outright, so a Mongo-persisted deployment gets no model and INIT dies. Addressing is carried by
+    // `isPrimaryScope` + `REQUIRES_CONTEXT`, which is what the URL builder reads.
+    //
+    // REFERENCE rather than COMPOSITION, and there is no `onParentDelete`: the APPLICATION row is the
+    // deployment itself and is not purged, so a cascade here would describe an event that cannot
+    // happen. `contextPolicy` disabled for the reason the audit door disables it — an elevation record
+    // must never be fetched as ambient context.
+    createResourcesRelationship(CoreResourceType.APPLICATION, CoreResourceType.APPLICATION_ACCESS_GRANTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        isPrimaryScope: true,
+        foreignKeyField: 'applicationId',
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT,
+        nature: RelationshipNature.REFERENCE,
+        contextPolicy: { enabled: false },
+    }),
+    // The two PEOPLE an application-wide grant names — the operator who asked and the SECOND
+    // administrator who signed. Both are `.isForeignKey()`, so the registry must resolve each to a
+    // resource type or the frontend registry refuses to initialise.
+    //
+    // REFERENCE with `onParentDelete.enabled: false`, exactly as on the tenant grant and for the same
+    // reason: making a user the owner resolves `lifecycleModelMode` to DEPENDENT, which is the value
+    // `classifySubjectErasureDisposition` reads — a user erasure would then own the row's fate, and the
+    // one thing a privileged-access ledger must survive is the erasure of the person it monitors.
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.APPLICATION_ACCESS_GRANTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'operatorUserId',
+        // Server-authored from the session on every grant, so the pointer is always present.
+        parentResourceRequirement: ResourceParentResourceRequirement.MANDATORY,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
+    createResourcesRelationship(CoreResourceType.USERS, CoreResourceType.APPLICATION_ACCESS_GRANTS, ResourceRelationshipCardinality.ONE, ResourceRelationshipCardinality.MANY, {
+        accessScopeStrategy: ResourceRelationshipAccessScopeStrategy.STANDALONE,
+        nature: RelationshipNature.REFERENCE,
+        foreignKeyField: 'approvedByUserId',
+        // OPTIONAL because the field is `.optional()`: unset while the request is pending and
+        // permanently unset on a denied or revoked grant. MANDATORY would assert an approver every
+        // grant must have — true of ACTIVE ones only, which is a lifecycle fact rather than a
+        // schema one.
+        parentResourceRequirement: ResourceParentResourceRequirement.OPTIONAL,
+        childOperations: { lifecycle: { onParentDelete: { enabled: false } } },
+        contextPolicy: { enabled: false },
+    }),
     // ── The two PEOPLE a grant names ─────────────────────────────────────
     //
     // `operatorUserId` (who asked) and `approvedByUserId` (who agreed) are both `.isForeignKey()` on
@@ -1392,6 +1445,7 @@ export const coreShared_ResourcesConfigurations_FactoryMap = {
     [CoreResourceType.ORGANIZATION_PROFILES]: organizationProfileResourceConfiguration_InitializationFactory,
     [CoreResourceType.ORGANIZATION_PREFERENCES]: organizationPreferencesResourceConfiguration_InitializationFactory,
     [CoreResourceType.PLATFORM_ACCESS_GRANTS]: platformAccessGrantsResourceConfiguration_InitializationFactory,
+    [CoreResourceType.APPLICATION_ACCESS_GRANTS]: applicationAccessGrantsResourceConfiguration_InitializationFactory,
     [CoreResourceType.ORGANIZATION_NOTIFICATIONS]: organizationNotificationsResourceConfiguration_InitializationFactory,
     [CoreResourceType.ORGANIZATION_FEATURES]: organizationFeaturesResourceConfiguration_InitializationFactory,
     [CoreResourceType.USER_FEATURES]: userFeaturesResourceConfiguration_InitializationFactory,