@wildo-ai/saas-models 1.1.3 → 1.1.5

package/dist/esm/public-runtime/index.js

@@ -110,6 +110,13 @@ export { WildoHeaderKeys } from '../requests/header-keys.shared.js';
  * nothing to the decorator-free bundle budget.
  */
 export { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls.js';
+/**
+ * A caught value as one readable line, for a bundle-isolated package (`saas-website`). The root's
+ * `describeCaughtError` also recognises the engine's own error type and so imports the error schemas;
+ * this atom imports nothing, and `describeCaughtError` delegates to it for every other value — one
+ * rendering, two doors (#1518's "[object Object]" fix, reachable from the browser-safe seam).
+ */
+export { describeThrownValue } from '../errors/thrown-value-description.shared.utils.js';
 export { AppFrontendType } from '../config/app-frontend-type.shared.schemas.js';
 /**
  * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted
@@ -145,6 +152,13 @@ export { buildProviderDisplayNameLabelKey, defineProviderMetadata, ENGINE_PROVID
  * side effects, which is the same bar the tier rule below is exported under.
  */
 export { ProviderDeploymentModel, ProviderComplianceProfileSchema, } from '../external-providers/provider-compliance-profile.shared.schemas.js';
+/**
+ * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in
+ * the browser bundle and stored by the application. Carved into an import-free atom
+ * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that
+ * mirrored the string literals would be a second copy that drifts the day a purpose is added.
+ */
+export { ANONYMOUS_CONSENT_RECORD_METHOD, ANONYMOUS_CONSENT_RECORD_PATH, applicationAskedConsentPurposes, CONSENT_PURPOSES, ConsentPurpose, hasGrantedConsentPurposes, missingConsentPurposes, normalizeConsentPurposes, WEBSITE_VISITOR_CONSENT_STORAGE_KEY, } from '../compliance/privacy/consent-purposes.shared.js';
 /**
  * The tier rule (#328) is enforced by every facet's `compose*Providers`,
  * three of which are browser-bound and reach this package only here. It
@@ -160,7 +174,7 @@ export { assertProviderTierCoherence, engineSlotsBoundByCapabilities, findProvid
  * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel
  * side.
  */
-export { FrontendProviderEntrySchema, FrontendProvidersBlockSchema, } from '../external-providers/frontend-provider-entry.shared.schemas.js';
+export { FileStorageAccepted, FrontendProviderEntrySchema, FrontendProvidersBlockSchema, } from '../external-providers/frontend-provider-entry.shared.schemas.js';
 /**
  * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP
  * footprint, the vendor SDK package it loads, and any third-party `<script>` it
@@ -173,12 +187,18 @@ export { FrontendProviderEntrySchema, FrontendProvidersBlockSchema, } from '../e
  * `@wildo-ai/external-connectors-public` and never crosses this seam.
  */
 export { normalizeProviderFrontendCspFootprint, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, } from '../external-providers/provider-frontend-surface.shared.schemas.js';
+/**
+ * How an application supplies a frontend provider's public keys, and the
+ * dependency-free schema helper the engine's own provider modules declare their
+ * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.
+ */
+export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, } from '../external-providers/frontend-provider-public-config.shared.js';
 /**
  * The public-config shape a built-in frontend capability expects (#380). Named
  * rather than conventional: the keys were previously read by hand at each use
  * site, where a renamed one produced `undefined` and a silently wrong surface.
  */
-export { FrontendFilePickerPublicConfigSchema, } from '../external-providers/frontend-capability-public-config.shared.schemas.js';
+export { admissibleFrontendPublicConfigKeys, FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS, FrontendFilePickerPublicConfigSchema, frontendCapabilityPublicConfigKeys, layerProviderFilePickerConstraints, partitionFrontendCapabilityPublicConfig, } from '../external-providers/frontend-capability-public-config.shared.schemas.js';
 /**
  * The RUNTIME half of the same idea (#437): what a built-in frontend capability
  * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —
@@ -207,5 +227,28 @@ export { BUILTIN_PROVIDER_PROTOCOL, } from '../external-providers/provider-proto
  * above, so the closure stays decorator-free.
  */
 export { composeProviderRegistry, ProviderCompositionConflictError, } from '../external-providers/compose-provider-registry.shared.js';
+/**
+ * Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a
+ * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.
+ *
+ * ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`
+ *
+ * They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of
+ * 41 import sites of the meta-workflows subpath, **7 take nothing but these primitives**, and all
+ * seven are `saas-specifications/src/technical-documentation/*.schemas.ts` — a browser-bound tier
+ * whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven
+ * regexes.
+ *
+ * No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`
+ * and nothing else, so it is already the zero-dependency atom K-2 asks for — the
+ * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its
+ * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1
+ * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.
+ *
+ * The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is
+ * a separate change from making it reachable on the bundle-safe seam, and doing both at once would
+ * hide one in the other.
+ */
+export { MetaWorkflow_Sha256DigestSchema, MetaWorkflow_NamespacedRefSchema, MetaWorkflow_OpaqueRefSchema, MetaWorkflow_PositiveVersionSchema, MetaWorkflow_PositiveOrdinalSchema, MetaWorkflow_NonNegativeRevisionSchema, MetaWorkflow_LowercaseUuidV4Schema, MetaWorkflow_IsoDateTimeSchema, MetaWorkflow_NonNegativeFiniteNumberSchema, metaWorkflowValuesAreUnique, metaWorkflowValuesAreLexicallySorted, compareMetaWorkflowCanonicalStrings, } from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas.js';
 /** @wildo_source:part:end saas.public-runtime.contract */
 //# sourceMappingURL=index.js.map

package/dist/esm/public-runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,GAElC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GAQpC,MAAM,gEAAgE,CAAC;AAExE;;;;GAIG;AACH,OAAO,EACH,oCAAoC,GAEvC,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,GAGhC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE,0DAA0D","sourcesContent":["/**\n * @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n *\n * @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n *\n * Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n *\n * Why this subpath exists:\n *   The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n *   module load (line 3) and re-exports the entire decorator-framework-bound\n *   schema graph (~150 schemas, transitively pulls\n *   `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n *   `reflect-metadata`). Browser bundles that need only a handful of stable\n *   atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n *   enums) should NOT pay that cost.\n *\n *   This subpath exposes that minimal stable surface, sourced from\n *   side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n *   K-4):\n *\n *     - Cross-Frontend Handoff + Token Exchange DTO atoms\n *       (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n *       `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n *       `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n *       `TokenExchangeResponseSchema`,\n *       `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n *       `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n *       schemas were added\n *       in cross-app-jwt-propagation.md Step 5 — every receiver of an\n *       AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n *       a client-bundle target, so the response shape MUST live here too\n *       (not just in the heavy backend schemas barrel).\n *     - Frontend-kind enum\n *       (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n *       — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n *       Consumed by website discovery, scaffolding, CSP config, and\n *       companion services that need to introspect a service's runtime\n *       kind without booting the full schema graph. The atom file's\n *       file-level JSDoc is the canonical home for the kind-by-kind\n *       rationale AND the locked \"no native variants\" design decision\n *       — read that file before authoring any AppFrontendType-driven\n *       conditional.\n *     - Canonical HTTP header keys (`../requests/header-keys.shared`):\n *       `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n *       whole; per K-2 splitting it would itself violate DRY).\n *     - Locale enums (re-exported transparently from\n *       `@wildo-ai/presets-components-models/public-runtime`):\n *       `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n *       (`@wildo-ai/saas-models/public-runtime`) — the\n *       `presets-components-models/public-runtime` subpath is an internal\n *       seam (saas-models-public-runtime.md K-6).\n *\n * @wildo-boundary  (saas-models-public-runtime.md K-3)\n *   - This file and every file it transitively imports MUST NOT import from:\n *     `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n *     the `@wildo-ai/presets-components-models` ROOT barrel (only the\n *     `/public-runtime` subpath of that package is allowed), `inversify`,\n *     `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n *     `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n *   - DO NOT import from this package's ROOT barrel (`../index`) — that\n *     barrel runs `initZodDecorators()` and pulls the full schema tree.\n *   - Allowed imports: `zod` (peer dep, browser-safe), files inside\n *     `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n *     plan, and the\n *     `@wildo-ai/presets-components-models/public-runtime` subpath.\n *\n * @wildo-bundle-budget\n *   The output of this barrel + transitive imports MUST stay free of:\n *   `initZodDecorators()` invocation, `reflect-metadata`, the full\n *   `authentication.shared.dto.schemas.ts` web of types\n *   (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n *   `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n *   snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n *   after importing this module and asserts the prototype is unchanged\n *   (proof that `initZodDecorators` did NOT run).\n *\n * @wildo-dry-contract\n *   Every atom exposed here lives in EXACTLY one source file. The original\n *   home (e.g. `authentication.shared.dto.schemas.ts`,\n *   `localization/language.shared.schemas.ts`) re-exports from the same atom\n *   so existing root-barrel consumers keep working unchanged. Adding a new\n *   atom: split it out of its current heavy file FIRST (matching K-2\n *   protocol), add a re-export at the original home, then add the import\n *   here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n */\n\nexport {\n    CrossFrontendHandoffErrorCode,\n    CrossFrontendHandoffRequestSchema,\n    CrossFrontendHandoffResponseSchema,\n    TokenExchangeRequestSchema,\n    TokenExchangeResponseSchema,\n    type CrossFrontendHandoffRequest,\n    type CrossFrontendHandoffResponse,\n    type TokenExchangeRequest,\n    type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/**\n * The single same-origin redirect predicate.\n *\n * On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n */\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/**\n * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds\n * nothing to the decorator-free bundle budget.\n */\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/**\n * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n */\nexport {\n    ALL_ZOD_ISSUES,\n    DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n    ZOD_ROOT_ISSUE_PATH_LABEL,\n    formatZodIssue,\n    formatZodIssues,\n    summarizeZodIssues,\n    type FormattableZodIssue,\n    type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n    AvailableLanguage,\n    TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n */\nexport {\n    buildProviderDisplayNameLabelKey,\n    defineProviderMetadata,\n    ENGINE_PROVIDER_ORIGIN,\n    ProviderCatalogueProvenanceSchema,\n    ProviderCatalogueSource,\n    ProviderIdentitySchema,\n    ProviderMetadataSchema,\n    ProviderOriginKind,\n    ProviderOriginSchema,\n    ProviderTier,\n    type DefineProviderMetadataInput,\n    type ProviderCatalogueProvenance,\n    type ProviderIdentity,\n    type ProviderMetadata,\n    type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/**\n * A provider's compliance primitives, reachable from the FRONTEND facets.\n *\n * `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n *\n * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under.\n */\nexport {\n    ProviderDeploymentModel,\n    ProviderComplianceProfileSchema,\n    type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/**\n * The tier rule (#328) is enforced by every facet's `compose*Providers`,\n * three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n */\nexport {\n    assertProviderTierCoherence,\n    engineSlotsBoundByCapabilities,\n    findProviderTierViolations,\n    type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/**\n * Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n *\n * Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n */\nexport {\n    FrontendProviderEntrySchema,\n    FrontendProvidersBlockSchema,\n    type FrontendProviderEntry,\n    type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/**\n * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n *\n * These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n */\nexport {\n    normalizeProviderFrontendCspFootprint,\n    ProviderFrontendComponentDescriptorSchema,\n    ProviderFrontendComponentDescriptorsSchema,\n    ProviderFrontendCspDerivedOriginSchema,\n    ProviderFrontendCspFootprintSchema,\n    ProviderFrontendCspOriginBucket,\n    ProviderFrontendScriptCrossOrigin,\n    ProviderFrontendScriptDeclarationSchema,\n    ProviderFrontendSdkDescriptorSchema,\n    ProviderFrontendSelectionDelivery,\n    type ProviderFrontendComponentDescriptor,\n    type ProviderFrontendComponentDescriptors,\n    type ProviderFrontendCspDerivedOrigin,\n    type ProviderFrontendCspFootprint,\n    type ProviderFrontendCspFootprintDeclaration,\n    type ProviderFrontendScriptDeclaration,\n    type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/**\n * The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n */\nexport {\n    FrontendFilePickerPublicConfigSchema,\n    type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/**\n * The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n */\nexport {\n    isFrontendErrorMonitoringSink,\n    type FrontendCrashReport,\n    type FrontendErrorMonitoringSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/**\n * Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n */\nexport {\n    BUILTIN_PROVIDER_CAPABILITY,\n    type BuiltinProviderCapability,\n    type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n    BUILTIN_PROVIDER_PROTOCOL,\n    type BuiltinProviderProtocol,\n    type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/**\n * Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n *\n * Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n */\nexport {\n    composeProviderRegistry,\n    ProviderCompositionConflictError,\n    type ProviderRegistryFragment,\n    type ComposedProviderRegistry,\n    type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/** @wildo_source:part:end saas.public-runtime.contract */\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;;GAKG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,GAElC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GAQpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,4BAA4B,GAI/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,GAE1C,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,GAGhC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D","sourcesContent":["/**\n * @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n *\n * @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n *\n * Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n *\n * Why this subpath exists:\n *   The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n *   module load (line 3) and re-exports the entire decorator-framework-bound\n *   schema graph (~150 schemas, transitively pulls\n *   `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n *   `reflect-metadata`). Browser bundles that need only a handful of stable\n *   atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n *   enums) should NOT pay that cost.\n *\n *   This subpath exposes that minimal stable surface, sourced from\n *   side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n *   K-4):\n *\n *     - Cross-Frontend Handoff + Token Exchange DTO atoms\n *       (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n *       `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n *       `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n *       `TokenExchangeResponseSchema`,\n *       `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n *       `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n *       schemas were added\n *       in cross-app-jwt-propagation.md Step 5 — every receiver of an\n *       AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n *       a client-bundle target, so the response shape MUST live here too\n *       (not just in the heavy backend schemas barrel).\n *     - Frontend-kind enum\n *       (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n *       — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n *       Consumed by website discovery, scaffolding, CSP config, and\n *       companion services that need to introspect a service's runtime\n *       kind without booting the full schema graph. The atom file's\n *       file-level JSDoc is the canonical home for the kind-by-kind\n *       rationale AND the locked \"no native variants\" design decision\n *       — read that file before authoring any AppFrontendType-driven\n *       conditional.\n *     - Canonical HTTP header keys (`../requests/header-keys.shared`):\n *       `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n *       whole; per K-2 splitting it would itself violate DRY).\n *     - Locale enums (re-exported transparently from\n *       `@wildo-ai/presets-components-models/public-runtime`):\n *       `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n *       (`@wildo-ai/saas-models/public-runtime`) — the\n *       `presets-components-models/public-runtime` subpath is an internal\n *       seam (saas-models-public-runtime.md K-6).\n *\n * @wildo-boundary  (saas-models-public-runtime.md K-3)\n *   - This file and every file it transitively imports MUST NOT import from:\n *     `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n *     the `@wildo-ai/presets-components-models` ROOT barrel (only the\n *     `/public-runtime` subpath of that package is allowed), `inversify`,\n *     `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n *     `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n *   - DO NOT import from this package's ROOT barrel (`../index`) — that\n *     barrel runs `initZodDecorators()` and pulls the full schema tree.\n *   - Allowed imports: `zod` (peer dep, browser-safe), files inside\n *     `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n *     plan, and the\n *     `@wildo-ai/presets-components-models/public-runtime` subpath.\n *\n * @wildo-bundle-budget\n *   The output of this barrel + transitive imports MUST stay free of:\n *   `initZodDecorators()` invocation, `reflect-metadata`, the full\n *   `authentication.shared.dto.schemas.ts` web of types\n *   (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n *   `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n *   snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n *   after importing this module and asserts the prototype is unchanged\n *   (proof that `initZodDecorators` did NOT run).\n *\n * @wildo-dry-contract\n *   Every atom exposed here lives in EXACTLY one source file. The original\n *   home (e.g. `authentication.shared.dto.schemas.ts`,\n *   `localization/language.shared.schemas.ts`) re-exports from the same atom\n *   so existing root-barrel consumers keep working unchanged. Adding a new\n *   atom: split it out of its current heavy file FIRST (matching K-2\n *   protocol), add a re-export at the original home, then add the import\n *   here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n */\n\nexport {\n    CrossFrontendHandoffErrorCode,\n    CrossFrontendHandoffRequestSchema,\n    CrossFrontendHandoffResponseSchema,\n    TokenExchangeRequestSchema,\n    TokenExchangeResponseSchema,\n    type CrossFrontendHandoffRequest,\n    type CrossFrontendHandoffResponse,\n    type TokenExchangeRequest,\n    type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/**\n * The single same-origin redirect predicate.\n *\n * On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n */\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/**\n * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds\n * nothing to the decorator-free bundle budget.\n */\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\n/**\n * A caught value as one readable line, for a bundle-isolated package (`saas-website`). The root's\n * `describeCaughtError` also recognises the engine's own error type and so imports the error schemas;\n * this atom imports nothing, and `describeCaughtError` delegates to it for every other value — one\n * rendering, two doors (#1518's \"[object Object]\" fix, reachable from the browser-safe seam).\n */\nexport { describeThrownValue } from '../errors/thrown-value-description.shared.utils';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/**\n * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n */\nexport {\n    ALL_ZOD_ISSUES,\n    DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n    ZOD_ROOT_ISSUE_PATH_LABEL,\n    formatZodIssue,\n    formatZodIssues,\n    summarizeZodIssues,\n    type FormattableZodIssue,\n    type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n    AvailableLanguage,\n    TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n */\nexport {\n    buildProviderDisplayNameLabelKey,\n    defineProviderMetadata,\n    ENGINE_PROVIDER_ORIGIN,\n    ProviderCatalogueProvenanceSchema,\n    ProviderCatalogueSource,\n    ProviderIdentitySchema,\n    ProviderMetadataSchema,\n    ProviderOriginKind,\n    ProviderOriginSchema,\n    ProviderTier,\n    type DefineProviderMetadataInput,\n    type ProviderCatalogueProvenance,\n    type ProviderIdentity,\n    type ProviderMetadata,\n    type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/**\n * A provider's compliance primitives, reachable from the FRONTEND facets.\n *\n * `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n *\n * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under.\n */\nexport {\n    ProviderDeploymentModel,\n    ProviderComplianceProfileSchema,\n    type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/**\n * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in\n * the browser bundle and stored by the application. Carved into an import-free atom\n * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that\n * mirrored the string literals would be a second copy that drifts the day a purpose is added.\n */\nexport {\n    ANONYMOUS_CONSENT_RECORD_METHOD,\n    ANONYMOUS_CONSENT_RECORD_PATH,\n    applicationAskedConsentPurposes,\n    CONSENT_PURPOSES,\n    ConsentPurpose,\n    hasGrantedConsentPurposes,\n    missingConsentPurposes,\n    normalizeConsentPurposes,\n    WEBSITE_VISITOR_CONSENT_STORAGE_KEY,\n} from '../compliance/privacy/consent-purposes.shared';\n\n/**\n * The tier rule (#328) is enforced by every facet's `compose*Providers`,\n * three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n */\nexport {\n    assertProviderTierCoherence,\n    engineSlotsBoundByCapabilities,\n    findProviderTierViolations,\n    type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/**\n * Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n *\n * Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n */\nexport {\n    FileStorageAccepted,\n    FrontendProviderEntrySchema,\n    FrontendProvidersBlockSchema,\n    type FrontendProviderEntry,\n    type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/**\n * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n *\n * These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n */\nexport {\n    normalizeProviderFrontendCspFootprint,\n    ProviderFrontendComponentDescriptorSchema,\n    ProviderFrontendComponentDescriptorsSchema,\n    ProviderFrontendCspDerivedOriginSchema,\n    ProviderFrontendCspFootprintSchema,\n    ProviderFrontendCspOriginBucket,\n    ProviderFrontendScriptCrossOrigin,\n    ProviderFrontendScriptDeclarationSchema,\n    ProviderFrontendSdkDescriptorSchema,\n    ProviderFrontendSelectionDelivery,\n    type ProviderFrontendComponentDescriptor,\n    type ProviderFrontendComponentDescriptors,\n    type ProviderFrontendCspDerivedOrigin,\n    type ProviderFrontendCspFootprint,\n    type ProviderFrontendCspFootprintDeclaration,\n    type ProviderFrontendScriptDeclaration,\n    type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/**\n * The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n */\nexport type {\n    ProviderFilePickerConstraints,\n    ProviderFilePickerProps,\n    ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/**\n * How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n */\nexport {\n    defineFrontendPublicConfigSchema,\n    FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n    FrontendProviderPublicConfigError,\n    FrontendProviderPublicConfigRefusal,\n    FrontendPublicConfigValueKind,\n    overlayFrontendProviderPublicConfig,\n    readDeclaredPublicConfigKeys,\n    type FrontendPublicConfigKeySpec,\n    type FrontendPublicConfigSchema,\n    type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/**\n * The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n */\nexport {\n    admissibleFrontendPublicConfigKeys,\n    FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS,\n    FrontendFilePickerPublicConfigSchema,\n    frontendCapabilityPublicConfigKeys,\n    layerProviderFilePickerConstraints,\n    partitionFrontendCapabilityPublicConfig,\n    type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/**\n * The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n */\nexport {\n    isFrontendErrorMonitoringSink,\n    type FrontendCrashReport,\n    type FrontendErrorMonitoringSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/**\n * Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n */\nexport {\n    BUILTIN_PROVIDER_CAPABILITY,\n    type BuiltinProviderCapability,\n    type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n    BUILTIN_PROVIDER_PROTOCOL,\n    type BuiltinProviderProtocol,\n    type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/**\n * Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n *\n * Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n */\nexport {\n    composeProviderRegistry,\n    ProviderCompositionConflictError,\n    type ProviderRegistryFragment,\n    type ComposedProviderRegistry,\n    type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/**\n * Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a\n * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.\n *\n * ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`\n *\n * They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of\n * 41 import sites of the meta-workflows subpath, **7 take nothing but these primitives**, and all\n * seven are `saas-specifications/src/technical-documentation/*.schemas.ts` — a browser-bound tier\n * whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven\n * regexes.\n *\n * No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`\n * and nothing else, so it is already the zero-dependency atom K-2 asks for — the\n * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its\n * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1\n * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.\n *\n * The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is\n * a separate change from making it reachable on the bundle-safe seam, and doing both at once would\n * hide one in the other.\n */\nexport {\n    MetaWorkflow_Sha256DigestSchema,\n    MetaWorkflow_NamespacedRefSchema,\n    MetaWorkflow_OpaqueRefSchema,\n    MetaWorkflow_PositiveVersionSchema,\n    MetaWorkflow_PositiveOrdinalSchema,\n    MetaWorkflow_NonNegativeRevisionSchema,\n    MetaWorkflow_LowercaseUuidV4Schema,\n    MetaWorkflow_IsoDateTimeSchema,\n    MetaWorkflow_NonNegativeFiniteNumberSchema,\n    metaWorkflowValuesAreUnique,\n    metaWorkflowValuesAreLexicallySorted,\n    compareMetaWorkflowCanonicalStrings,\n} from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';\n\n/** @wildo_source:part:end saas.public-runtime.contract */\n"]}

package/dist/esm/queue/jobs.shared.resources-config.schemas.d.ts

@@ -4,14 +4,13 @@
  * Defines resource configurations for JobExecution and JobPayloadStorage.
  *
  * Resource Design Principles:
- * - REPOSITORY_ONLY variants throughout: both resources are reached by the queue services and by
- *   nothing else, so neither declares an API variant and neither generates a route
+ * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route
  * - Proper requestDto schemas for each variant
  * - isBackendOnly fields are automatically filtered in responses
  *
  * Key Resources:
- * - JobExecution: Tracks all job lifecycle events (30-day TTL)
- * - JobPayloadStorage: Stores large payloads >100KB (24-hour TTL)
+ * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained
+ * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence
  */
 import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
 import type { ResourceConfiguration } from '../resources/resources-config.shared.schemas';
@@ -27,15 +26,15 @@ export declare enum JobExecutionVariantKey {
 /**
  * Core operations available for JobExecution.
  */
-type JobExecution_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH;
+type JobExecution_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH | CoreResourceOperation.DELETE_MANY;
 /**
  * Factory function for JobExecution resource configuration.
  *
  * JobExecution tracks the lifecycle of all jobs processed by the queue system.
  * It provides visibility into job status, retries, timing, and error information.
  *
- * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST), for the queue
- * services. There is no API variant, so no route is generated and nothing here is reachable over
+ * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue
+ * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over
  * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not
  * an API call, and adding an operator-facing one means declaring an API variant here first.
  */
@@ -50,7 +49,7 @@ export declare enum JobPayloadStorageVariantKey {
 /**
  * Core operations available for JobPayloadStorage.
  */
-type JobPayloadStorage_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.DELETE | CoreResourceOperation.SEARCH;
+type JobPayloadStorage_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.DELETE | CoreResourceOperation.SEARCH | CoreResourceOperation.DELETE_MANY;
 /**
  * Factory function for JobPayloadStorage resource configuration.
  *

package/dist/esm/queue/jobs.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jobs.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B;;GAEG;AACH,oBAAY,sBAAsB;IAChC,kDAAkD;IAClD,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,2BAA2B,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,CAAC;AAkBjC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wDAAwD,GACnE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,2BAA2B,EAAE,OAAO,kBAAkB,CA2KzF,CAAC;AAMF;;GAEG;AACH,oBAAY,2BAA2B;IACrC,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAWjC;;;;;;;;GAQG;AACH,eAAO,MAAM,6DAA6D,GACxE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,EAAE,OAAO,uBAAuB,CA2FnG,CAAC"}
+{"version":3,"file":"jobs.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B;;GAEG;AACH,oBAAY,sBAAsB;IAChC,kDAAkD;IAClD,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,2BAA2B,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAkBtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wDAAwD,GACnE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,2BAA2B,EAAE,OAAO,kBAAkB,CAuLzF,CAAC;AAMF;;GAEG;AACH,oBAAY,2BAA2B;IACrC,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAWtC;;;;;;;;GAQG;AACH,eAAO,MAAM,6DAA6D,GACxE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,EAAE,OAAO,uBAAuB,CAwGnG,CAAC"}

package/dist/esm/queue/jobs.shared.resources-config.schemas.js

@@ -4,14 +4,13 @@
  * Defines resource configurations for JobExecution and JobPayloadStorage.
  *
  * Resource Design Principles:
- * - REPOSITORY_ONLY variants throughout: both resources are reached by the queue services and by
- *   nothing else, so neither declares an API variant and neither generates a route
+ * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route
  * - Proper requestDto schemas for each variant
  * - isBackendOnly fields are automatically filtered in responses
  *
  * Key Resources:
- * - JobExecution: Tracks all job lifecycle events (30-day TTL)
- * - JobPayloadStorage: Stores large payloads >100KB (24-hour TTL)
+ * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained
+ * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence
  */
 import { z } from 'zod';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
@@ -51,8 +50,8 @@ const JOB_EXECUTION_SORT_FIELDS = ['createdAt', 'completedAt', 'durationMs', 're
  * JobExecution tracks the lifecycle of all jobs processed by the queue system.
  * It provides visibility into job status, retries, timing, and error information.
  *
- * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST), for the queue
- * services. There is no API variant, so no route is generated and nothing here is reachable over
+ * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue
+ * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over
  * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not
  * an API call, and adding an operator-facing one means declaring an API variant here first.
  */
@@ -131,8 +130,20 @@ export const jobExecution_ResourceConfiguration_InitializationFactory = (resourc
             CoreResourceOperation.UPDATE,
             CoreResourceOperation.LIST,
             CoreResourceOperation.SEARCH,
+            CoreResourceOperation.DELETE_MANY,
         ],
         operationsConfiguration: {
+            // The built-in bounded retention sweep resolves this contract before deleting expired rows.
+            // Repository-only: supplying maintenance behavior must not create a public deletion route.
+            [CoreResourceOperation.DELETE_MANY]: {
+                variants: [{
+                        variantKey: JobExecutionVariantKey.INTERNAL,
+                        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                        isDefault: true,
+                        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                        riskLevel: ResourceOperationRiskLevel.HIGH,
+                    }],
+            },
             // === CREATE ===
             [CoreResourceOperation.CREATE]: {
                 variants: [
@@ -240,6 +251,7 @@ export const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (re
     // Internal services provide all data except auto-generated fields
     const JobPayloadStorageCreateInternalSchema = JobPayloadStorageSchema.omit({
         _id: true,
+        createdAt: true, // Repository owns timestamps; input cleaning removes them before DTO validation.
         referenceCount: true, // Starts at 1 (default)
     });
     return createResourceConfiguration_Initialization({
@@ -253,8 +265,20 @@ export const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (re
             CoreResourceOperation.READ,
             CoreResourceOperation.DELETE,
             CoreResourceOperation.SEARCH,
+            CoreResourceOperation.DELETE_MANY,
         ],
         operationsConfiguration: {
+            // The built-in bounded retention sweep resolves this contract before deleting expired rows.
+            // Repository-only: supplying maintenance behavior must not create a public deletion route.
+            [CoreResourceOperation.DELETE_MANY]: {
+                variants: [{
+                        variantKey: JobPayloadStorageVariantKey.INTERNAL,
+                        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                        isDefault: true,
+                        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                        riskLevel: ResourceOperationRiskLevel.HIGH,
+                    }],
+            },
             // === CREATE ===
             [CoreResourceOperation.CREATE]: {
                 variants: [

package/dist/esm/queue/jobs.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"jobs.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,OAAO,EACP,YAAY,EACZ,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAG/B,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,kDAAkD;IAClD,+CAAqB,CAAA;AACvB,CAAC,EAHW,sBAAsB,KAAtB,sBAAsB,QAGjC;AAYD,6CAA6C;AAC7C,MAAM,2BAA2B,GAAG;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAA0B,CAAC;IAChE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC;IAC1E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAA0B,CAAC;IACzE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAA0B,CAAC;CACtE,CAAC;AAEF,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAEpG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wDAAwD,GAAG,CACtE,sBAA8C,EAC4C,EAAE;IAE5F,yBAAyB;IACzB,sCAAsC;IACtC,MAAM,gCAAgC,GAAG,kBAAkB,CAAC,IAAI,CAAC;QAC/D,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,IAAI,EAAS,wBAAwB;QACjD,WAAW,EAAE,IAAI,EAAQ,eAAe;QACxC,SAAS,EAAE,IAAI,EAAU,6BAA6B;QACtD,WAAW,EAAE,IAAI,EAAQ,qBAAqB;QAC9C,UAAU,EAAE,IAAI,EAAS,2BAA2B;QACpD,sBAAsB,EAAE,IAAI,EAAE,sBAAsB;QACpD,KAAK,EAAE,IAAI,EAAc,iBAAiB;QAC1C,QAAQ,EAAE,IAAI,EAAW,gBAAgB;QACzC,cAAc,EAAE,IAAI,EAAK,gBAAgB;KAC1C,CAAC,CAAC;IAEH,yBAAyB;IACzB,2EAA2E;IAC3E,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;QAChD,iBAAiB;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC,CAAC,QAAQ,EAAE;QAErF,iBAAiB;QACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAEhC,iBAAiB;QACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAE9C,cAAc;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAErC,qBAAqB;QACrB,sBAAsB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAE3C,aAAa;QACb,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK;KACtC,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,kBAAkB;QAC9B,kBAAkB,EAAE,gBAAgB,CAAC,cAAc;QACnD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,cAAc,CAAC;QAC5F,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D;;;;;;;;WAQG;QACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;QAEzE;;;;;;;;;;;;;;;;WAgBG;QAEH,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;SAC7B;QAED,uBAAuB,EAAE;YACvB,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,8CAA8C;oBAC9C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,4CAA4C;oBAC5C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,qCAAqC;oBACrC;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC;wBAC3D,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;wBACjE,YAAY,EAAE,2BAA2B;wBACzC,UAAU,EAAE,yBAAyB;wBACrC,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,gEAAgE;IAChE,oDAAqB,CAAA;AACvB,CAAC,EAHW,2BAA2B,KAA3B,2BAA2B,QAGtC;AAWD,sCAAsC;AACtC,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC;AAEF,oCAAoC;AACpC,MAAM,+BAA+B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,kBAAkB,CAAU,CAAC;AAEhG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6DAA6D,GAAG,CAC3E,sBAA8C,EACsD,EAAE;IAEtG,wBAAwB;IACxB,kEAAkE;IAClE,MAAM,qCAAqC,GAAG,uBAAuB,CAAC,IAAI,CAAC;QACzE,GAAG,EAAE,IAAI;QACT,cAAc,EAAE,IAAI,EAAE,wBAAwB;KAC/C,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,uBAAuB;QACnC,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;QACxD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACjG,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,MAAM;SAC7B;QAED,uBAAuB,EAAE;YACvB,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,0CAA0C;oBAC1C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,qCAAqC;qBAClD;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,2CAA2C;oBAC3C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,WAAW,CAAC;wBAC/B,iBAAiB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;wBAC/D,YAAY,EAAE,iCAAiC;wBAC/C,UAAU,EAAE,+BAA+B;wBAC3C,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["/**\n * Job Resource Configurations\n * \n * Defines resource configurations for JobExecution and JobPayloadStorage.\n * \n * Resource Design Principles:\n * - REPOSITORY_ONLY variants throughout: both resources are reached by the queue services and by\n *   nothing else, so neither declares an API variant and neither generates a route\n * - Proper requestDto schemas for each variant\n * - isBackendOnly fields are automatically filtered in responses\n * \n * Key Resources:\n * - JobExecution: Tracks all job lifecycle events (30-day TTL)\n * - JobPayloadStorage: Stores large payloads >100KB (24-hour TTL)\n */\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport type { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { \n  JobExecutionSchema, \n  JobPayloadStorageSchema,\n  JobExecutionStatus,\n  JobType,\n  JobInitiator,\n  JobPriority,\n} from './jobs.shared.schemas';\n\n\n// ============================================================================\n// JOB EXECUTION RESOURCE CONFIGURATION\n// ============================================================================\n\n/**\n * Variant keys for JobExecution operations.\n */\nexport enum JobExecutionVariantKey {\n  /** Internal queue service operations (default) */\n  INTERNAL = 'internal',\n}\n\n/**\n * Core operations available for JobExecution.\n */\ntype JobExecution_CoreOperations = \n  | CoreResourceOperation.CREATE \n  | CoreResourceOperation.READ \n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH;\n\n// Filter fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_FILTER_FIELDS = {\n  applicationId: z.string(),\n  jobType: z.enum(Object.values(JobType) as [string, ...string[]]),\n  status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]),\n  organizationId: z.string(),\n  userId: z.string(),\n  queueName: z.string(),\n  domainCategory: z.string(),\n  initiatedBy: z.enum(Object.values(JobInitiator) as [string, ...string[]]),\n  priority: z.enum(Object.values(JobPriority) as [string, ...string[]]),\n};\n\n// Sort fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_SORT_FIELDS = ['createdAt', 'completedAt', 'durationMs', 'retryCount'] as const;\n\n/**\n * Factory function for JobExecution resource configuration.\n * \n * JobExecution tracks the lifecycle of all jobs processed by the queue system.\n * It provides visibility into job status, retries, timing, and error information.\n * \n * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST), for the queue\n * services. There is no API variant, so no route is generated and nothing here is reachable over\n * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not\n * an API call, and adding an operator-facing one means declaring an API variant here first.\n */\nexport const jobExecution_ResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobExecution_CoreOperations, typeof JobExecutionSchema> => {\n\n  // === CREATE Schemas ===\n  // Full create schema for internal use\n  const JobExecutionCreateInternalSchema = JobExecutionSchema.omit({\n    _id: true,\n    retryCount: true,        // Starts at 0 (default)\n    lastRetryAt: true,       // Set on retry\n    startedAt: true,         // Set when processing starts\n    completedAt: true,       // Set when completed\n    durationMs: true,        // Calculated on completion\n    outputPayloadStorageId: true, // Set after execution\n    error: true,             // Set on failure\n    workerId: true,          // Set by worker\n    workerHostname: true,    // Set by worker\n  });\n\n  // === UPDATE Schemas ===\n  // Internal service can update most fields (status changes, timing, errors)\n  const JobExecutionUpdateInternalSchema = z.object({\n    // Status updates\n    status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]).optional(),\n    \n    // Timing updates\n    queuedAt: z.date().optional(),\n    startedAt: z.date().optional(),\n    completedAt: z.date().optional(),\n    durationMs: z.number().int().optional(),\n    lastRetryAt: z.date().optional(),\n    \n    // Retry tracking\n    retryCount: z.number().int().min(0).optional(),\n    \n    // Worker info\n    workerId: z.string().optional(),\n    workerHostname: z.string().optional(),\n    \n    // Payload references\n    outputPayloadStorageId: z.uuid().optional(),\n    \n    // Error info\n    error: JobExecutionSchema.shape.error,\n  });\n\n  return createResourceConfiguration_Initialization<\n    undefined,\n    JobExecution_CoreOperations,\n    typeof JobExecutionSchema\n  >({\n    mainSchema: JobExecutionSchema,\n    resourceIdentifier: CoreResourceType.JOB_EXECUTIONS,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_EXECUTIONS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true, // Internal infrastructure component\n\n    /**\n     * Subject-export disclosure: explicitly FORBIDDEN. A job execution is an OPERATIONAL record of\n     * the platform doing work — it references a subject without being data *about* them in any sense\n     * a data subject would recognise, and it is already out of Art. 20 scope as controller-generated.\n     *\n     * FORBIDDEN rather than left undeclared on purpose: this is a decision someone took, not a gap\n     * nobody has filled, and the export refusal says so — precisely so a future operator clearing a\n     * startup error cannot \"fix\" it by opting in.\n     */\n    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n    /*\n     * DELIBERATELY NO `retentionPolicy`, and this comment is the declaration of that.\n     *\n     * Issue #138 asks that every engine resource declaring `exportSubject` either declare an erasure\n     * posture or be deliberately and visibly exempt. This one is exempt, for the same reason the export\n     * refusal directly above gives: a job execution is an operational record of the platform doing work,\n     * not data about a person. It declares no personal-data category, and no field of it would be scrubbed.\n     *\n     * Declaring `RETAIN_ONLY` here would be worse than saying nothing. The mode is a positive assertion\n     * about a resource that holds personal data of a subject; making it would place this row in the\n     * subject-erasure population, inject the `retentionStatus` / `impersonalizedAt` markers and the\n     * route-less LIST + UPDATE_MANY plumbing, and require a migration on all three schema planes — all to\n     * describe an erasure path that never visits this collection.\n     *\n     * If a future job payload ever carries subject content, that is a `.dataCategories()` declaration on\n     * the payload first, and this exemption is then wrong and must be revisited with it.\n     */\n\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.UPDATE,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.SEARCH,\n    ],\n    \n    operationsConfiguration: {\n      // === CREATE ===\n      [CoreResourceOperation.CREATE]: {\n        variants: [\n          // Internal: Queue services create job records\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            requestDto: JobExecutionCreateInternalSchema,\n          },\n        ],\n      },\n      \n      // === READ ===\n      [CoreResourceOperation.READ]: {\n        variants: [\n          // Internal: Queue services read job details\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n      \n      // === UPDATE ===\n      [CoreResourceOperation.UPDATE]: {\n        variants: [\n          // Internal: Queue services update job status\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            requestDto: JobExecutionUpdateInternalSchema,\n          },\n        ],\n      },\n      \n      // === LIST ===\n      [CoreResourceOperation.LIST]: {\n        variants: [\n          // Internal: Queue services list jobs\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n\n      // === SEARCH ===\n      [CoreResourceOperation.SEARCH]: {\n        variants: [\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            isSearchable: true,\n            searchableFields: ['jobId', 'operationPathKey', 'batchRef'],\n            searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n            filterFields: JOB_EXECUTION_FILTER_FIELDS,\n            sortFields: JOB_EXECUTION_SORT_FIELDS,\n            maxPaginatedResultPerPageLimit: 100,\n          },\n        ],\n      },\n    },\n  });\n};\n\n// ============================================================================\n// JOB PAYLOAD STORAGE RESOURCE CONFIGURATION\n// ============================================================================\n\n/**\n * Variant keys for JobPayloadStorage operations.\n */\nexport enum JobPayloadStorageVariantKey {\n  /** Internal queue service operations (default, only variant) */\n  INTERNAL = 'internal',\n}\n\n/**\n * Core operations available for JobPayloadStorage.\n */\ntype JobPayloadStorage_CoreOperations = \n  | CoreResourceOperation.CREATE \n  | CoreResourceOperation.READ \n  | CoreResourceOperation.DELETE\n  | CoreResourceOperation.SEARCH;\n\n// Filter fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_FILTER_FIELDS = {\n  applicationId: z.string(),\n  isCompressed: z.boolean(),\n};\n\n// Sort fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_SORT_FIELDS = ['createdAt', 'expiresAt', 'payloadSizeBytes'] as const;\n\n/**\n * Factory function for JobPayloadStorage resource configuration.\n * \n * JobPayloadStorage stores large job payloads (>100KB) that exceed RabbitMQ\n * message size limits. Referenced by storageId in JobPayload messages.\n * \n * Variants:\n * - INTERNAL only: No API exposure (contains sensitive payload data)\n */\nexport const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobPayloadStorage_CoreOperations, typeof JobPayloadStorageSchema> => {\n\n  // === CREATE Schema ===\n  // Internal services provide all data except auto-generated fields\n  const JobPayloadStorageCreateInternalSchema = JobPayloadStorageSchema.omit({\n    _id: true,\n    referenceCount: true, // Starts at 1 (default)\n  });\n\n  return createResourceConfiguration_Initialization<\n    undefined,\n    JobPayloadStorage_CoreOperations,\n    typeof JobPayloadStorageSchema\n  >({\n    mainSchema: JobPayloadStorageSchema,\n    resourceIdentifier: CoreResourceType.JOB_PAYLOAD_STORAGE,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_PAYLOAD_STORAGE],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true, // Internal infrastructure component\n\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.DELETE,\n      CoreResourceOperation.SEARCH,\n    ],\n    \n    operationsConfiguration: {\n      // === CREATE ===\n      [CoreResourceOperation.CREATE]: {\n        variants: [\n          // Internal: Queue services store payloads\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            requestDto: JobPayloadStorageCreateInternalSchema,\n          },\n        ],\n      },\n      \n      // === READ ===\n      [CoreResourceOperation.READ]: {\n        variants: [\n          // Internal: Queue services retrieve payloads\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n      \n      // === DELETE ===\n      [CoreResourceOperation.DELETE]: {\n        variants: [\n          // Internal: Queue services delete payloads\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n\n      // === SEARCH ===\n      [CoreResourceOperation.SEARCH]: {\n        variants: [\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            isSearchable: true,\n            searchableFields: ['storageId'],\n            searchableOptions: { caseSensitive: true, fullMatchOnly: true },\n            filterFields: JOB_PAYLOAD_STORAGE_FILTER_FIELDS,\n            sortFields: JOB_PAYLOAD_STORAGE_SORT_FIELDS,\n            maxPaginatedResultPerPageLimit: 100,\n          },\n        ],\n      },\n    },\n  });\n};\n"]}
+{"version":3,"file":"jobs.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,OAAO,EACP,YAAY,EACZ,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAG/B,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,kDAAkD;IAClD,+CAAqB,CAAA;AACvB,CAAC,EAHW,sBAAsB,KAAtB,sBAAsB,QAGjC;AAaD,6CAA6C;AAC7C,MAAM,2BAA2B,GAAG;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAA0B,CAAC;IAChE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC;IAC1E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAA0B,CAAC;IACzE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAA0B,CAAC;CACtE,CAAC;AAEF,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAEpG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wDAAwD,GAAG,CACtE,sBAA8C,EAC4C,EAAE;IAE5F,yBAAyB;IACzB,sCAAsC;IACtC,MAAM,gCAAgC,GAAG,kBAAkB,CAAC,IAAI,CAAC;QAC/D,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,IAAI,EAAS,wBAAwB;QACjD,WAAW,EAAE,IAAI,EAAQ,eAAe;QACxC,SAAS,EAAE,IAAI,EAAU,6BAA6B;QACtD,WAAW,EAAE,IAAI,EAAQ,qBAAqB;QAC9C,UAAU,EAAE,IAAI,EAAS,2BAA2B;QACpD,sBAAsB,EAAE,IAAI,EAAE,sBAAsB;QACpD,KAAK,EAAE,IAAI,EAAc,iBAAiB;QAC1C,QAAQ,EAAE,IAAI,EAAW,gBAAgB;QACzC,cAAc,EAAE,IAAI,EAAK,gBAAgB;KAC1C,CAAC,CAAC;IAEH,yBAAyB;IACzB,2EAA2E;IAC3E,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;QAChD,iBAAiB;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC,CAAC,QAAQ,EAAE;QAErF,iBAAiB;QACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAEhC,iBAAiB;QACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAE9C,cAAc;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAErC,qBAAqB;QACrB,sBAAsB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAE3C,aAAa;QACb,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK;KACtC,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,kBAAkB;QAC9B,kBAAkB,EAAE,gBAAgB,CAAC,cAAc;QACnD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,cAAc,CAAC;QAC5F,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D;;;;;;;;WAQG;QACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;QAEzE;;;;;;;;;;;;;;;;WAgBG;QAEH,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,WAAW;SAClC;QAED,uBAAuB,EAAE;YACvB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;gBACnC,QAAQ,EAAE,CAAC;wBACT,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;qBAC3C,CAAC;aACH;YACD,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,8CAA8C;oBAC9C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,4CAA4C;oBAC5C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,qCAAqC;oBACrC;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC;wBAC3D,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;wBACjE,YAAY,EAAE,2BAA2B;wBACzC,UAAU,EAAE,yBAAyB;wBACrC,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,gEAAgE;IAChE,oDAAqB,CAAA;AACvB,CAAC,EAHW,2BAA2B,KAA3B,2BAA2B,QAGtC;AAYD,sCAAsC;AACtC,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC;AAEF,oCAAoC;AACpC,MAAM,+BAA+B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,kBAAkB,CAAU,CAAC;AAEhG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6DAA6D,GAAG,CAC3E,sBAA8C,EACsD,EAAE;IAEtG,wBAAwB;IACxB,kEAAkE;IAClE,MAAM,qCAAqC,GAAG,uBAAuB,CAAC,IAAI,CAAC;QACzE,GAAG,EAAE,IAAI;QACT,SAAS,EAAE,IAAI,EAAE,iFAAiF;QAClG,cAAc,EAAE,IAAI,EAAE,wBAAwB;KAC/C,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,uBAAuB;QACnC,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;QACxD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACjG,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,WAAW;SAClC;QAED,uBAAuB,EAAE;YACvB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;gBACnC,QAAQ,EAAE,CAAC;wBACT,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;qBAC3C,CAAC;aACH;YACD,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,0CAA0C;oBAC1C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,qCAAqC;qBAClD;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,2CAA2C;oBAC3C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,WAAW,CAAC;wBAC/B,iBAAiB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;wBAC/D,YAAY,EAAE,iCAAiC;wBAC/C,UAAU,EAAE,+BAA+B;wBAC3C,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["/**\n * Job Resource Configurations\n * \n * Defines resource configurations for JobExecution and JobPayloadStorage.\n * \n * Resource Design Principles:\n * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route\n * - Proper requestDto schemas for each variant\n * - isBackendOnly fields are automatically filtered in responses\n * \n * Key Resources:\n * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained\n * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence\n */\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport type { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { \n  JobExecutionSchema, \n  JobPayloadStorageSchema,\n  JobExecutionStatus,\n  JobType,\n  JobInitiator,\n  JobPriority,\n} from './jobs.shared.schemas';\n\n\n// ============================================================================\n// JOB EXECUTION RESOURCE CONFIGURATION\n// ============================================================================\n\n/**\n * Variant keys for JobExecution operations.\n */\nexport enum JobExecutionVariantKey {\n  /** Internal queue service operations (default) */\n  INTERNAL = 'internal',\n}\n\n/**\n * Core operations available for JobExecution.\n */\ntype JobExecution_CoreOperations = \n  | CoreResourceOperation.CREATE \n  | CoreResourceOperation.READ \n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.DELETE_MANY;\n\n// Filter fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_FILTER_FIELDS = {\n  applicationId: z.string(),\n  jobType: z.enum(Object.values(JobType) as [string, ...string[]]),\n  status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]),\n  organizationId: z.string(),\n  userId: z.string(),\n  queueName: z.string(),\n  domainCategory: z.string(),\n  initiatedBy: z.enum(Object.values(JobInitiator) as [string, ...string[]]),\n  priority: z.enum(Object.values(JobPriority) as [string, ...string[]]),\n};\n\n// Sort fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_SORT_FIELDS = ['createdAt', 'completedAt', 'durationMs', 'retryCount'] as const;\n\n/**\n * Factory function for JobExecution resource configuration.\n * \n * JobExecution tracks the lifecycle of all jobs processed by the queue system.\n * It provides visibility into job status, retries, timing, and error information.\n * \n * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue\n * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over\n * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not\n * an API call, and adding an operator-facing one means declaring an API variant here first.\n */\nexport const jobExecution_ResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobExecution_CoreOperations, typeof JobExecutionSchema> => {\n\n  // === CREATE Schemas ===\n  // Full create schema for internal use\n  const JobExecutionCreateInternalSchema = JobExecutionSchema.omit({\n    _id: true,\n    retryCount: true,        // Starts at 0 (default)\n    lastRetryAt: true,       // Set on retry\n    startedAt: true,         // Set when processing starts\n    completedAt: true,       // Set when completed\n    durationMs: true,        // Calculated on completion\n    outputPayloadStorageId: true, // Set after execution\n    error: true,             // Set on failure\n    workerId: true,          // Set by worker\n    workerHostname: true,    // Set by worker\n  });\n\n  // === UPDATE Schemas ===\n  // Internal service can update most fields (status changes, timing, errors)\n  const JobExecutionUpdateInternalSchema = z.object({\n    // Status updates\n    status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]).optional(),\n    \n    // Timing updates\n    queuedAt: z.date().optional(),\n    startedAt: z.date().optional(),\n    completedAt: z.date().optional(),\n    durationMs: z.number().int().optional(),\n    lastRetryAt: z.date().optional(),\n    \n    // Retry tracking\n    retryCount: z.number().int().min(0).optional(),\n    \n    // Worker info\n    workerId: z.string().optional(),\n    workerHostname: z.string().optional(),\n    \n    // Payload references\n    outputPayloadStorageId: z.uuid().optional(),\n    \n    // Error info\n    error: JobExecutionSchema.shape.error,\n  });\n\n  return createResourceConfiguration_Initialization<\n    undefined,\n    JobExecution_CoreOperations,\n    typeof JobExecutionSchema\n  >({\n    mainSchema: JobExecutionSchema,\n    resourceIdentifier: CoreResourceType.JOB_EXECUTIONS,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_EXECUTIONS],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true, // Internal infrastructure component\n\n    /**\n     * Subject-export disclosure: explicitly FORBIDDEN. A job execution is an OPERATIONAL record of\n     * the platform doing work — it references a subject without being data *about* them in any sense\n     * a data subject would recognise, and it is already out of Art. 20 scope as controller-generated.\n     *\n     * FORBIDDEN rather than left undeclared on purpose: this is a decision someone took, not a gap\n     * nobody has filled, and the export refusal says so — precisely so a future operator clearing a\n     * startup error cannot \"fix\" it by opting in.\n     */\n    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n    /*\n     * DELIBERATELY NO `retentionPolicy`, and this comment is the declaration of that.\n     *\n     * Issue #138 asks that every engine resource declaring `exportSubject` either declare an erasure\n     * posture or be deliberately and visibly exempt. This one is exempt, for the same reason the export\n     * refusal directly above gives: a job execution is an operational record of the platform doing work,\n     * not data about a person. It declares no personal-data category, and no field of it would be scrubbed.\n     *\n     * Declaring `RETAIN_ONLY` here would be worse than saying nothing. The mode is a positive assertion\n     * about a resource that holds personal data of a subject; making it would place this row in the\n     * subject-erasure population, inject the `retentionStatus` / `impersonalizedAt` markers and the\n     * route-less LIST + UPDATE_MANY plumbing, and require a migration on all three schema planes — all to\n     * describe an erasure path that never visits this collection.\n     *\n     * If a future job payload ever carries subject content, that is a `.dataCategories()` declaration on\n     * the payload first, and this exemption is then wrong and must be revisited with it.\n     */\n\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.UPDATE,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.SEARCH,\n      CoreResourceOperation.DELETE_MANY,\n    ],\n    \n    operationsConfiguration: {\n      // The built-in bounded retention sweep resolves this contract before deleting expired rows.\n      // Repository-only: supplying maintenance behavior must not create a public deletion route.\n      [CoreResourceOperation.DELETE_MANY]: {\n        variants: [{\n          variantKey: JobExecutionVariantKey.INTERNAL,\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }],\n      },\n      // === CREATE ===\n      [CoreResourceOperation.CREATE]: {\n        variants: [\n          // Internal: Queue services create job records\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            requestDto: JobExecutionCreateInternalSchema,\n          },\n        ],\n      },\n      \n      // === READ ===\n      [CoreResourceOperation.READ]: {\n        variants: [\n          // Internal: Queue services read job details\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n      \n      // === UPDATE ===\n      [CoreResourceOperation.UPDATE]: {\n        variants: [\n          // Internal: Queue services update job status\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            requestDto: JobExecutionUpdateInternalSchema,\n          },\n        ],\n      },\n      \n      // === LIST ===\n      [CoreResourceOperation.LIST]: {\n        variants: [\n          // Internal: Queue services list jobs\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n\n      // === SEARCH ===\n      [CoreResourceOperation.SEARCH]: {\n        variants: [\n          {\n            variantKey: JobExecutionVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            isSearchable: true,\n            searchableFields: ['jobId', 'operationPathKey', 'batchRef'],\n            searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n            filterFields: JOB_EXECUTION_FILTER_FIELDS,\n            sortFields: JOB_EXECUTION_SORT_FIELDS,\n            maxPaginatedResultPerPageLimit: 100,\n          },\n        ],\n      },\n    },\n  });\n};\n\n// ============================================================================\n// JOB PAYLOAD STORAGE RESOURCE CONFIGURATION\n// ============================================================================\n\n/**\n * Variant keys for JobPayloadStorage operations.\n */\nexport enum JobPayloadStorageVariantKey {\n  /** Internal queue service operations (default, only variant) */\n  INTERNAL = 'internal',\n}\n\n/**\n * Core operations available for JobPayloadStorage.\n */\ntype JobPayloadStorage_CoreOperations = \n  | CoreResourceOperation.CREATE \n  | CoreResourceOperation.READ \n  | CoreResourceOperation.DELETE\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.DELETE_MANY;\n\n// Filter fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_FILTER_FIELDS = {\n  applicationId: z.string(),\n  isCompressed: z.boolean(),\n};\n\n// Sort fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_SORT_FIELDS = ['createdAt', 'expiresAt', 'payloadSizeBytes'] as const;\n\n/**\n * Factory function for JobPayloadStorage resource configuration.\n * \n * JobPayloadStorage stores large job payloads (>100KB) that exceed RabbitMQ\n * message size limits. Referenced by storageId in JobPayload messages.\n * \n * Variants:\n * - INTERNAL only: No API exposure (contains sensitive payload data)\n */\nexport const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobPayloadStorage_CoreOperations, typeof JobPayloadStorageSchema> => {\n\n  // === CREATE Schema ===\n  // Internal services provide all data except auto-generated fields\n  const JobPayloadStorageCreateInternalSchema = JobPayloadStorageSchema.omit({\n    _id: true,\n    createdAt: true, // Repository owns timestamps; input cleaning removes them before DTO validation.\n    referenceCount: true, // Starts at 1 (default)\n  });\n\n  return createResourceConfiguration_Initialization<\n    undefined,\n    JobPayloadStorage_CoreOperations,\n    typeof JobPayloadStorageSchema\n  >({\n    mainSchema: JobPayloadStorageSchema,\n    resourceIdentifier: CoreResourceType.JOB_PAYLOAD_STORAGE,\n    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_PAYLOAD_STORAGE],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true, // Internal infrastructure component\n\n    coreOperations: [\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.READ,\n      CoreResourceOperation.DELETE,\n      CoreResourceOperation.SEARCH,\n      CoreResourceOperation.DELETE_MANY,\n    ],\n    \n    operationsConfiguration: {\n      // The built-in bounded retention sweep resolves this contract before deleting expired rows.\n      // Repository-only: supplying maintenance behavior must not create a public deletion route.\n      [CoreResourceOperation.DELETE_MANY]: {\n        variants: [{\n          variantKey: JobPayloadStorageVariantKey.INTERNAL,\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }],\n      },\n      // === CREATE ===\n      [CoreResourceOperation.CREATE]: {\n        variants: [\n          // Internal: Queue services store payloads\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            requestDto: JobPayloadStorageCreateInternalSchema,\n          },\n        ],\n      },\n      \n      // === READ ===\n      [CoreResourceOperation.READ]: {\n        variants: [\n          // Internal: Queue services retrieve payloads\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n      \n      // === DELETE ===\n      [CoreResourceOperation.DELETE]: {\n        variants: [\n          // Internal: Queue services delete payloads\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n          },\n        ],\n      },\n\n      // === SEARCH ===\n      [CoreResourceOperation.SEARCH]: {\n        variants: [\n          {\n            variantKey: JobPayloadStorageVariantKey.INTERNAL,\n            variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n            isDefault: true,\n            roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n            riskLevel: ResourceOperationRiskLevel.LOW,\n            isSearchable: true,\n            searchableFields: ['storageId'],\n            searchableOptions: { caseSensitive: true, fullMatchOnly: true },\n            filterFields: JOB_PAYLOAD_STORAGE_FILTER_FIELDS,\n            sortFields: JOB_PAYLOAD_STORAGE_SORT_FIELDS,\n            maxPaginatedResultPerPageLimit: 100,\n          },\n        ],\n      },\n    },\n  });\n};\n"]}