@wildo-ai/saas-models 1.1.4 → 1.1.5

package/dist/esm/__tests__/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/__tests__/setup.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../../src/__tests__/setup.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC"}

package/dist/esm/_inspect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_inspect.d.ts","sourceRoot":"","sources":["../../src/_inspect.ts"],"names":[],"mappings":""}
+{"version":3,"file":"_inspect.d.ts","sourceRoot":"","sources":["../../../src/_inspect.ts"],"names":[],"mappings":""}

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.d.ts

@@ -10,7 +10,7 @@ import { ResourceRelationship } from '../resources/resources.shared.schemas';
 type ApplicationMetadataCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.CREATE | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
 export declare const applicationMetadataResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, ApplicationMetadataCoreOperations, z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
     description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
 }, z.core.$strip>>;
 export {};

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-metadata.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAwB,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUnG,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;kBAsF3H,CAAC"}
+{"version":3,"file":"application-metadata.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAwB,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUnG,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;kBAsF3H,CAAC"}

package/dist/esm/applications/application-subject.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-subject.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,8DAGL,CAAC;AAGnC,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,iFAAiF;AACjF,oBAAY,4BAA4B;IACtC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;CACd;AAED,eAAO,MAAM,8BAA8B;;;;;;;4BAYzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;kBAgB5C,CAAC;AACJ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC"}
+{"version":3,"file":"application-subject.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,8DAGL,CAAC;AAGnC,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,iFAAiF;AACjF,oBAAY,4BAA4B;IACtC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;CACd;AAED,eAAO,MAAM,8BAA8B;;;;;;;4BAYzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;kBAgB5C,CAAC;AACJ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC"}

package/dist/esm/applications/application-versions.shared.resources-config.schemas.d.ts

@@ -13,7 +13,7 @@ import { ResourceRelationship } from '../resources/resources.shared.schemas';
 type ApplicationVersionCoreOperations = CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH | CoreResourceOperation.CREATE | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
 export declare const applicationVersionsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<Record<string, never>, ApplicationVersionCoreOperations, z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-    appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
     version: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     releaseDate: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
     releaseNotes: z.ZodString;

package/dist/esm/applications/application-versions.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-versions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA8CvI,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAuH3H,CAAC"}
+{"version":3,"file":"application-versions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA8CvI,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAuH3H,CAAC"}

package/dist/esm/applications/application-versions.shared.resources-config.schemas.js

@@ -48,10 +48,10 @@ import { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../noti
 // managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a
 // custom implementation and the persisted state it writes — follow the organization-units
 // MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE
-// persists). See `.claude/plans/routed-unimplemented-operations-fail-closed.md`.
+// persists). See the 2026-08-01 routed-but-unimplemented operation sweep (#1275).
 const APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];
 const APPLICATION_VERSION_FILTER_FIELDS = {
-    appId: z.string(),
+    applicationId: z.string(),
     version: z.string(),
 };
 /*

package/dist/esm/applications/application-versions.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-versions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,0CAA0C;AAC1C,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,0FAA0F;AAC1F,8FAA8F;AAC9F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,+FAA+F;AAC/F,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,8FAA8F;AAC9F,6FAA6F;AAC7F,wFAAwF;AACxF,0FAA0F;AAC1F,yEAAyE;AACzE,2EAA2E;AAC3E,iGAAiG;AACjG,uFAAuF;AACvF,yFAAyF;AACzF,0FAA0F;AAC1F,uBAAuB;AACvB,EAAE;AACF,+FAA+F;AAC/F,0FAA0F;AAC1F,0FAA0F;AAC1F,EAAE;AACF,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,gGAAgG;AAChG,iFAAiF;AAEjF,MAAM,+BAA+B,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,iCAAiC,GAAG;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;oBAC5C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,iCAAiC;oBAC/C,UAAU,EAAE,+BAA+B;oBAC3C,8BAA8B,EAAE,EAAE;iBACnC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Version Shared Resource Configuration\n *\n * The application's release log: one row per published build, carrying its version string,\n * release date, and release notes. This resource RECORDS releases through core CRUD; it does\n * not control them — which build runs where is owned by the deployment tooling, not by a\n * resource operation. See the note below the imports for why the promotion verbs that once\n * lived here were removed.\n */\n\nimport { z } from 'zod';\nimport { ApplicationVersionSchema } from './applications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n// This resource has NO custom operations.\n//\n// `PROMOTE` / `ROLLBACK` / `DEPRECATE` were declared here as `ORG_ADMIN`-gated custom operations\n// and were removed on 2026-08-01. All three were ROUTED but never implemented, so each request\n// fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares — none of `targetEnvironment`, `deploymentNotes`, `environment`, `rollbackReason`,\n// `deprecationReason`, or `deprecationDate` is one, so every call answered **HTTP 200 having\n// changed nothing**.\n//\n// They were REMOVED rather than implemented because the state they manage does not exist here,\n// and for PROMOTE/ROLLBACK cannot exist:\n//\n//  1. THE FRAMEWORK IS MONO-ENV. `RuntimeEnvironment` states that each running platform or\n//     application instance is one environment per deployment, and that the environment value is\n//     NOT used for multi-env routing, DB lookup keys, or isolation — every deployment has its\n//     own infra. So \"version X is live in environment Y\" cannot be stated truthfully in this\n//     application's own database: a staging deployment is a DIFFERENT deployment with a\n//     DIFFERENT database. A row here asserting a foreign environment's live version would\n//     describe state this process can neither read, verify, nor enforce.\n//  2. DEPLOYMENT IS OWNED BY THE CLI SELF-HOST LANE (`wildo config sync` /\n//     `K8sManifestGenerator`). The apps-manager runtime publishing lane was deliberately removed\n//     on 2026-07-17; resource verbs here would duplicate and contradict that decision.\n//  3. The platform's own version resource (`WILDO_APPLICATION_VERSIONS`, app-factory git\n//     branch/commit tracking) exposes READ/LIST/CREATE only — no environment field and no\n//     promotion verbs.\n//\n// `DEPRECATE` was not environment-coupled and so escaped (1), but was removed with the others:\n// nothing anywhere consumes deprecation state, and with promotion gone this resource is a\n// release-notes changelog ledger, on which a deprecation flag would be speculative state.\n//\n// What remains is honest: an append-mostly release log (version, release date, release notes)\n// managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a\n// custom implementation and the persisted state it writes — follow the organization-units\n// MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE\n// persists). See `.claude/plans/routed-unimplemented-operations-fail-closed.md`.\n\nconst APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];\n\nconst APPLICATION_VERSION_FILTER_FIELDS = {\n  appId: z.string(),\n  version: z.string(),\n};\n\ntype ApplicationVersionCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Versions Resource Configuration Factory\n*/\nexport const applicationVersionsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  ApplicationVersionCoreOperations,\n  typeof ApplicationVersionSchema\n>({\n  mainSchema: ApplicationVersionSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_VERSIONS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_VERSIONS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application versions\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          searchableFields: ['version', 'description'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_VERSION_FILTER_FIELDS,\n          sortFields: APPLICATION_VERSION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can list application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application versions\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n});\n"]}
+{"version":3,"file":"application-versions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,0CAA0C;AAC1C,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,0FAA0F;AAC1F,8FAA8F;AAC9F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,+FAA+F;AAC/F,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,8FAA8F;AAC9F,6FAA6F;AAC7F,wFAAwF;AACxF,0FAA0F;AAC1F,yEAAyE;AACzE,2EAA2E;AAC3E,iGAAiG;AACjG,uFAAuF;AACvF,yFAAyF;AACzF,0FAA0F;AAC1F,uBAAuB;AACvB,EAAE;AACF,+FAA+F;AAC/F,0FAA0F;AAC1F,0FAA0F;AAC1F,EAAE;AACF,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,gGAAgG;AAChG,kFAAkF;AAElF,MAAM,+BAA+B,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;oBAC5C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,iCAAiC;oBAC/C,UAAU,EAAE,+BAA+B;oBAC3C,8BAA8B,EAAE,EAAE;iBACnC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Version Shared Resource Configuration\n *\n * The application's release log: one row per published build, carrying its version string,\n * release date, and release notes. This resource RECORDS releases through core CRUD; it does\n * not control them — which build runs where is owned by the deployment tooling, not by a\n * resource operation. See the note below the imports for why the promotion verbs that once\n * lived here were removed.\n */\n\nimport { z } from 'zod';\nimport { ApplicationVersionSchema } from './applications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n// This resource has NO custom operations.\n//\n// `PROMOTE` / `ROLLBACK` / `DEPRECATE` were declared here as `ORG_ADMIN`-gated custom operations\n// and were removed on 2026-08-01. All three were ROUTED but never implemented, so each request\n// fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares — none of `targetEnvironment`, `deploymentNotes`, `environment`, `rollbackReason`,\n// `deprecationReason`, or `deprecationDate` is one, so every call answered **HTTP 200 having\n// changed nothing**.\n//\n// They were REMOVED rather than implemented because the state they manage does not exist here,\n// and for PROMOTE/ROLLBACK cannot exist:\n//\n//  1. THE FRAMEWORK IS MONO-ENV. `RuntimeEnvironment` states that each running platform or\n//     application instance is one environment per deployment, and that the environment value is\n//     NOT used for multi-env routing, DB lookup keys, or isolation — every deployment has its\n//     own infra. So \"version X is live in environment Y\" cannot be stated truthfully in this\n//     application's own database: a staging deployment is a DIFFERENT deployment with a\n//     DIFFERENT database. A row here asserting a foreign environment's live version would\n//     describe state this process can neither read, verify, nor enforce.\n//  2. DEPLOYMENT IS OWNED BY THE CLI SELF-HOST LANE (`wildo config sync` /\n//     `K8sManifestGenerator`). The apps-manager runtime publishing lane was deliberately removed\n//     on 2026-07-17; resource verbs here would duplicate and contradict that decision.\n//  3. The platform's own version resource (`WILDO_APPLICATION_VERSIONS`, app-factory git\n//     branch/commit tracking) exposes READ/LIST/CREATE only — no environment field and no\n//     promotion verbs.\n//\n// `DEPRECATE` was not environment-coupled and so escaped (1), but was removed with the others:\n// nothing anywhere consumes deprecation state, and with promotion gone this resource is a\n// release-notes changelog ledger, on which a deprecation flag would be speculative state.\n//\n// What remains is honest: an append-mostly release log (version, release date, release notes)\n// managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a\n// custom implementation and the persisted state it writes — follow the organization-units\n// MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE\n// persists). See the 2026-08-01 routed-but-unimplemented operation sweep (#1275).\n\nconst APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];\n\nconst APPLICATION_VERSION_FILTER_FIELDS = {\n  applicationId: z.string(),\n  version: z.string(),\n};\n\ntype ApplicationVersionCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Versions Resource Configuration Factory\n*/\nexport const applicationVersionsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  ApplicationVersionCoreOperations,\n  typeof ApplicationVersionSchema\n>({\n  mainSchema: ApplicationVersionSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_VERSIONS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_VERSIONS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application versions\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          searchableFields: ['version', 'description'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_VERSION_FILTER_FIELDS,\n          sortFields: APPLICATION_VERSION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can list application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application versions\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n});\n"]}

package/dist/esm/applications/applications-context.schemas.d.ts

@@ -5,9 +5,10 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
     appDisplayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     lastVersion: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
     platformAppId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    ownerOrganizationSerializationToken: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>>>>;
     versions: z.ZodArray<z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-        appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+        applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
         version: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
         releaseDate: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
         releaseNotes: z.ZodString;
@@ -21,11 +22,11 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
             applicationId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
         brandAssets: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            composition: z.ZodEnum<typeof import("..").BrandAssetComposition>;
-            theme: z.ZodEnum<typeof import("..").BrandAssetTheme>;
-            purpose: z.ZodEnum<typeof import("..").BrandAssetPurpose>;
+            composition: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetComposition>>;
+            theme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetTheme>>;
+            purpose: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetPurpose>>;
             url: z.ZodString;
-            format: z.ZodEnum<typeof import("..").BrandAssetFormat>;
+            format: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetFormat>>;
             width: z.ZodOptional<z.ZodNumber>;
             height: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>>;
@@ -66,6 +67,7 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
                     enabled: z.ZodBoolean;
                 }, z.core.$strip>]>>>;
                 mfaPolicy: z.ZodDefault<z.ZodObject<{
+                    externalAssuranceEnforcement: z.ZodOptional<z.ZodEnum<typeof import("..").ExternalAssuranceEnforcement>>;
                     requireMFA: z.ZodDefault<z.ZodBoolean>;
                     requireStrongMFA: z.ZodDefault<z.ZodBoolean>;
                     acceptableMFAMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("..").AuthMethod>>>;
@@ -77,6 +79,18 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
                     allowedMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").AuthMethod>>>;
                     emailVerification: z.ZodDefault<z.ZodEnum<typeof import("..").EmailVerificationMode>>;
                     blockForSSODomains: z.ZodDefault<z.ZodBoolean>;
+                    allowedEmailDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    additionalProfileQuestions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        ref: z.ZodOptional<z.ZodString>;
+                        type: z.ZodEnum<typeof import("..").OnboardingSurveyQuestionType>;
+                        options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                            ref: z.ZodString;
+                        }, z.core.$strip>>>;
+                        required: z.ZodDefault<z.ZodBoolean>;
+                        bindToField: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>>;
+                    profileNamesCollectedAt: z.ZodOptional<z.ZodEnum<typeof import("..").ProfileNamesCollectionMoment>>;
                 }, z.core.$strict>;
                 passwordPolicy: z.ZodDefault<z.ZodObject<{
                     minLength: z.ZodDefault<z.ZodNumber>;
@@ -109,7 +123,6 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
                 oneOffSessionAllowed: z.ZodOptional<z.ZodBoolean>;
                 oneOffSessionMaxDurationMinutes: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>;
-            uniqueIdentifier: z.ZodDefault<z.ZodString>;
             defaultAppRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("..").CORE_APP_ROLES>, z.ZodString]>>>;
             requiresOrgMembership: z.ZodOptional<z.ZodObject<{
                 orgTypes: z.ZodArray<z.ZodString>;
@@ -132,6 +145,7 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
                     enabled: z.ZodBoolean;
                 }, z.core.$strip>]>>>;
                 mfaPolicy: z.ZodOptional<z.ZodObject<{
+                    externalAssuranceEnforcement: z.ZodOptional<z.ZodOptional<z.ZodEnum<typeof import("..").ExternalAssuranceEnforcement>>>;
                     requireMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                     requireStrongMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                     acceptableMFAMethods: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("..").AuthMethod>>>>;
@@ -155,18 +169,112 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
             }, z.core.$strip>>;
             scimProvisioning: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
-                syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strip>>;
             creationPolicy: z.ZodOptional<z.ZodObject<{
                 createOnUserTypeRegistration: z.ZodArray<z.ZodString>;
                 orgNameSource: z.ZodEnum<typeof import("..").OrganizationNameSource>;
                 defaultOwnerRole: z.ZodDefault<z.ZodString>;
             }, z.core.$strip>>;
+            ownsApplication: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strip>>>;
         compliance: z.ZodObject<{
             userProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("..").UserProfileVisibility>>;
             organizationProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("..").OrganizationProfileVisibility>>;
             clientInstanceIdScope: z.ZodDefault<z.ZodEnum<typeof import("..").ClientInstanceIdScope>>;
+            governedDocumentReleases: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                identity: z.ZodObject<{
+                    document: z.ZodObject<{
+                        documentRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        documentVersion: z.ZodNumber;
+                    }, z.core.$strict>;
+                    releaseId: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                    releaseVersion: z.ZodNumber;
+                }, z.core.$strict>;
+                documentClass: z.ZodEnum<typeof import("..").GovernedDocumentClass>;
+                locale: z.ZodString;
+                jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                allowedInteractionKinds: z.ZodArray<z.ZodEnum<typeof import("..").GovernedDocumentInteractionKind>>;
+                approvalState: z.ZodEnum<typeof import("..").GovernedDocumentReleaseApprovalState>;
+                effectiveAt: z.ZodISODateTime;
+                expiresAt: z.ZodOptional<z.ZodISODateTime>;
+                renewedInteractionKinds: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").GovernedDocumentInteractionKind>>>;
+            }, z.core.$strict>>>;
+            publicDocuments: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                kind: z.ZodLiteral<import("..").GovernedDocumentPublicDocumentKind.RELEASED>;
+                release: z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    identity: z.ZodObject<{
+                        document: z.ZodObject<{
+                            documentRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                            documentVersion: z.ZodNumber;
+                        }, z.core.$strict>;
+                        releaseId: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        releaseVersion: z.ZodNumber;
+                    }, z.core.$strict>;
+                    definition: z.ZodObject<{
+                        definitionRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        definitionVersion: z.ZodNumber;
+                    }, z.core.$strict>;
+                    documentClass: z.ZodEnum<typeof import("..").GovernedDocumentClass>;
+                    locale: z.ZodString;
+                    jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                    contentMediaType: z.ZodLiteral<"application/vnd.wildo.governed-document.public+json;version=1">;
+                    issuedAt: z.ZodISODateTime;
+                    effectiveAt: z.ZodISODateTime;
+                    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+                    allowedInteractionKinds: z.ZodArray<z.ZodEnum<typeof import("..").GovernedDocumentInteractionKind>>;
+                }, z.core.$strict>;
+                content: z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    title: z.ZodString;
+                    locale: z.ZodString;
+                    jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                    sections: z.ZodArray<z.ZodObject<{
+                        sectionRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        order: z.ZodNumber;
+                        title: z.ZodString;
+                        clauses: z.ZodArray<z.ZodObject<{
+                            clauseRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                            order: z.ZodNumber;
+                            bodyMarkdown: z.ZodString;
+                            standing: z.ZodEnum<typeof import("..").GovernedDocumentPublicClauseStanding>;
+                            missingInformation: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+                approvalState: z.ZodEnum<typeof import("..").GovernedDocumentReleaseApprovalState>;
+            }, z.core.$strict>, z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                kind: z.ZodLiteral<import("..").GovernedDocumentPublicDocumentKind.UNRELEASED_DRAFT>;
+                documentRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                content: z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    title: z.ZodString;
+                    locale: z.ZodString;
+                    jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                    sections: z.ZodArray<z.ZodObject<{
+                        sectionRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        order: z.ZodNumber;
+                        title: z.ZodString;
+                        clauses: z.ZodArray<z.ZodObject<{
+                            clauseRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                            order: z.ZodNumber;
+                            bodyMarkdown: z.ZodString;
+                            standing: z.ZodEnum<typeof import("..").GovernedDocumentPublicClauseStanding>;
+                            missingInformation: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+            }, z.core.$strict>], "kind">>>;
+            governedDocumentAcceptanceMode: z.ZodDefault<z.ZodEnum<typeof import("..").GovernedDocumentAcceptanceMode>>;
+            governedDocumentApprovalGate: z.ZodDefault<z.ZodEnum<typeof import("..").GovernedDocumentApprovalGate>>;
+            serviceConsentRequirement: z.ZodOptional<z.ZodObject<{
+                requiredPurposes: z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>;
+                gatedProcessing: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            capabilityDeclaredConsentPurposes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>>;
         }, z.core.$strip>;
         billing: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -199,7 +307,7 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
                 providerType: z.ZodEnum<typeof import("..").AnalyticsProviderType>;
                 config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>>>;
-            requiredConsent: z.ZodDefault<z.ZodEnum<typeof import("..").DataProcessingConsent>>;
+            requiresConsent: z.ZodDefault<z.ZodBoolean>;
             valueMoments: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 identifier: z.ZodString;
                 role: z.ZodEnum<typeof import("..").ValueMomentRole>;
@@ -291,13 +399,14 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
             runRetentionDays: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
         auditTrail: z.ZodOptional<z.ZodObject<{
+            applicationReadAccess: z.ZodOptional<z.ZodEnum<typeof import("..").AuditApplicationReadAccess>>;
             archiveAfterDays: z.ZodOptional<z.ZodNumber>;
             allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     metadata: z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-        appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
+        applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
         description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
@@ -308,16 +417,17 @@ export declare const ApplicationContextSchema: z.ZodObject<{
     appDisplayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     lastVersion: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
     platformAppId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    ownerOrganizationSerializationToken: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>>>>;
     versionObject: z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-        appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+        applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
         version: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
         releaseDate: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
         releaseNotes: z.ZodString;
     }, z.core.$strip>;
     metadata: z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-        appId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
+        applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
         description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>;
     }, z.core.$strip>;
     appFrontendConfig: z.ZodOptional<z.ZodObject<{
@@ -329,11 +439,11 @@ export declare const ApplicationContextSchema: z.ZodObject<{
             applicationId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
         brandAssets: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            composition: z.ZodEnum<typeof import("..").BrandAssetComposition>;
-            theme: z.ZodEnum<typeof import("..").BrandAssetTheme>;
-            purpose: z.ZodEnum<typeof import("..").BrandAssetPurpose>;
+            composition: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetComposition>>;
+            theme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetTheme>>;
+            purpose: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetPurpose>>;
             url: z.ZodString;
-            format: z.ZodEnum<typeof import("..").BrandAssetFormat>;
+            format: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").BrandAssetFormat>>;
             width: z.ZodOptional<z.ZodNumber>;
             height: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>>;
@@ -374,6 +484,7 @@ export declare const ApplicationContextSchema: z.ZodObject<{
                     enabled: z.ZodBoolean;
                 }, z.core.$strip>]>>>;
                 mfaPolicy: z.ZodDefault<z.ZodObject<{
+                    externalAssuranceEnforcement: z.ZodOptional<z.ZodEnum<typeof import("..").ExternalAssuranceEnforcement>>;
                     requireMFA: z.ZodDefault<z.ZodBoolean>;
                     requireStrongMFA: z.ZodDefault<z.ZodBoolean>;
                     acceptableMFAMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("..").AuthMethod>>>;
@@ -385,6 +496,18 @@ export declare const ApplicationContextSchema: z.ZodObject<{
                     allowedMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").AuthMethod>>>;
                     emailVerification: z.ZodDefault<z.ZodEnum<typeof import("..").EmailVerificationMode>>;
                     blockForSSODomains: z.ZodDefault<z.ZodBoolean>;
+                    allowedEmailDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    additionalProfileQuestions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        ref: z.ZodOptional<z.ZodString>;
+                        type: z.ZodEnum<typeof import("..").OnboardingSurveyQuestionType>;
+                        options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                            ref: z.ZodString;
+                        }, z.core.$strip>>>;
+                        required: z.ZodDefault<z.ZodBoolean>;
+                        bindToField: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>>;
+                    profileNamesCollectedAt: z.ZodOptional<z.ZodEnum<typeof import("..").ProfileNamesCollectionMoment>>;
                 }, z.core.$strict>;
                 passwordPolicy: z.ZodDefault<z.ZodObject<{
                     minLength: z.ZodDefault<z.ZodNumber>;
@@ -417,7 +540,6 @@ export declare const ApplicationContextSchema: z.ZodObject<{
                 oneOffSessionAllowed: z.ZodOptional<z.ZodBoolean>;
                 oneOffSessionMaxDurationMinutes: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>;
-            uniqueIdentifier: z.ZodDefault<z.ZodString>;
             defaultAppRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("..").CORE_APP_ROLES>, z.ZodString]>>>;
             requiresOrgMembership: z.ZodOptional<z.ZodObject<{
                 orgTypes: z.ZodArray<z.ZodString>;
@@ -440,6 +562,7 @@ export declare const ApplicationContextSchema: z.ZodObject<{
                     enabled: z.ZodBoolean;
                 }, z.core.$strip>]>>>;
                 mfaPolicy: z.ZodOptional<z.ZodObject<{
+                    externalAssuranceEnforcement: z.ZodOptional<z.ZodOptional<z.ZodEnum<typeof import("..").ExternalAssuranceEnforcement>>>;
                     requireMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                     requireStrongMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                     acceptableMFAMethods: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("..").AuthMethod>>>>;
@@ -463,18 +586,112 @@ export declare const ApplicationContextSchema: z.ZodObject<{
             }, z.core.$strip>>;
             scimProvisioning: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodDefault<z.ZodBoolean>;
-                syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strip>>;
             creationPolicy: z.ZodOptional<z.ZodObject<{
                 createOnUserTypeRegistration: z.ZodArray<z.ZodString>;
                 orgNameSource: z.ZodEnum<typeof import("..").OrganizationNameSource>;
                 defaultOwnerRole: z.ZodDefault<z.ZodString>;
             }, z.core.$strip>>;
+            ownsApplication: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strip>>>;
         compliance: z.ZodObject<{
             userProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("..").UserProfileVisibility>>;
             organizationProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("..").OrganizationProfileVisibility>>;
             clientInstanceIdScope: z.ZodDefault<z.ZodEnum<typeof import("..").ClientInstanceIdScope>>;
+            governedDocumentReleases: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                identity: z.ZodObject<{
+                    document: z.ZodObject<{
+                        documentRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        documentVersion: z.ZodNumber;
+                    }, z.core.$strict>;
+                    releaseId: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                    releaseVersion: z.ZodNumber;
+                }, z.core.$strict>;
+                documentClass: z.ZodEnum<typeof import("..").GovernedDocumentClass>;
+                locale: z.ZodString;
+                jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                allowedInteractionKinds: z.ZodArray<z.ZodEnum<typeof import("..").GovernedDocumentInteractionKind>>;
+                approvalState: z.ZodEnum<typeof import("..").GovernedDocumentReleaseApprovalState>;
+                effectiveAt: z.ZodISODateTime;
+                expiresAt: z.ZodOptional<z.ZodISODateTime>;
+                renewedInteractionKinds: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").GovernedDocumentInteractionKind>>>;
+            }, z.core.$strict>>>;
+            publicDocuments: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                kind: z.ZodLiteral<import("..").GovernedDocumentPublicDocumentKind.RELEASED>;
+                release: z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    identity: z.ZodObject<{
+                        document: z.ZodObject<{
+                            documentRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                            documentVersion: z.ZodNumber;
+                        }, z.core.$strict>;
+                        releaseId: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        releaseVersion: z.ZodNumber;
+                    }, z.core.$strict>;
+                    definition: z.ZodObject<{
+                        definitionRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        definitionVersion: z.ZodNumber;
+                    }, z.core.$strict>;
+                    documentClass: z.ZodEnum<typeof import("..").GovernedDocumentClass>;
+                    locale: z.ZodString;
+                    jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                    contentMediaType: z.ZodLiteral<"application/vnd.wildo.governed-document.public+json;version=1">;
+                    issuedAt: z.ZodISODateTime;
+                    effectiveAt: z.ZodISODateTime;
+                    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+                    allowedInteractionKinds: z.ZodArray<z.ZodEnum<typeof import("..").GovernedDocumentInteractionKind>>;
+                }, z.core.$strict>;
+                content: z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    title: z.ZodString;
+                    locale: z.ZodString;
+                    jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                    sections: z.ZodArray<z.ZodObject<{
+                        sectionRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        order: z.ZodNumber;
+                        title: z.ZodString;
+                        clauses: z.ZodArray<z.ZodObject<{
+                            clauseRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                            order: z.ZodNumber;
+                            bodyMarkdown: z.ZodString;
+                            standing: z.ZodEnum<typeof import("..").GovernedDocumentPublicClauseStanding>;
+                            missingInformation: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+                approvalState: z.ZodEnum<typeof import("..").GovernedDocumentReleaseApprovalState>;
+            }, z.core.$strict>, z.ZodObject<{
+                schemaVersion: z.ZodLiteral<1>;
+                kind: z.ZodLiteral<import("..").GovernedDocumentPublicDocumentKind.UNRELEASED_DRAFT>;
+                documentRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                content: z.ZodObject<{
+                    schemaVersion: z.ZodLiteral<1>;
+                    title: z.ZodString;
+                    locale: z.ZodString;
+                    jurisdictionRefs: z.ZodArray<z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">>;
+                    sections: z.ZodArray<z.ZodObject<{
+                        sectionRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                        order: z.ZodNumber;
+                        title: z.ZodString;
+                        clauses: z.ZodArray<z.ZodObject<{
+                            clauseRef: z.core.$ZodBranded<z.ZodString, "GovernedDocumentRef", "out">;
+                            order: z.ZodNumber;
+                            bodyMarkdown: z.ZodString;
+                            standing: z.ZodEnum<typeof import("..").GovernedDocumentPublicClauseStanding>;
+                            missingInformation: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+            }, z.core.$strict>], "kind">>>;
+            governedDocumentAcceptanceMode: z.ZodDefault<z.ZodEnum<typeof import("..").GovernedDocumentAcceptanceMode>>;
+            governedDocumentApprovalGate: z.ZodDefault<z.ZodEnum<typeof import("..").GovernedDocumentApprovalGate>>;
+            serviceConsentRequirement: z.ZodOptional<z.ZodObject<{
+                requiredPurposes: z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>;
+                gatedProcessing: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            capabilityDeclaredConsentPurposes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>>;
         }, z.core.$strip>;
         billing: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -507,7 +724,7 @@ export declare const ApplicationContextSchema: z.ZodObject<{
                 providerType: z.ZodEnum<typeof import("..").AnalyticsProviderType>;
                 config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             }, z.core.$strip>>>;
-            requiredConsent: z.ZodDefault<z.ZodEnum<typeof import("..").DataProcessingConsent>>;
+            requiresConsent: z.ZodDefault<z.ZodBoolean>;
             valueMoments: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 identifier: z.ZodString;
                 role: z.ZodEnum<typeof import("..").ValueMomentRole>;
@@ -599,6 +816,7 @@ export declare const ApplicationContextSchema: z.ZodObject<{
             runRetentionDays: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
         auditTrail: z.ZodOptional<z.ZodObject<{
+            applicationReadAccess: z.ZodOptional<z.ZodEnum<typeof import("..").AuditApplicationReadAccess>>;
             archiveAfterDays: z.ZodOptional<z.ZodNumber>;
             allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;

package/dist/esm/applications/applications-context.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"applications-context.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"applications-context.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/esm/applications/applications.shared.resources-config.schemas.d.ts

@@ -14,6 +14,7 @@ export declare const applicationResourceConfiguration_InitializationFactory: (re
     appDisplayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     lastVersion: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
     platformAppId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    ownerOrganizationSerializationToken: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>>>>;
 }, z.core.$strip>>;
 export {};
 //# sourceMappingURL=applications.shared.resources-config.schemas.d.ts.map

package/dist/esm/applications/applications.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"applications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+E7E,KAAK,yBAAyB,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,sDAAsD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAkNnH,CAAC"}
+{"version":3,"file":"applications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+E7E,KAAK,yBAAyB,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,sDAAsD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;kBAkNnH,CAAC"}

package/dist/esm/applications/applications.shared.resources-config.schemas.js

@@ -74,7 +74,7 @@ import { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles
 //
 // Applications consequently declare NO custom operations (hence the `undefined` custom-operation
 // type parameter below). See `.claude/plans/status-lifecycle-operations-analysis.md` and
-// `.claude/plans/routed-unimplemented-operations-fail-closed.md`.
+// the 2026-08-01 routed-but-unimplemented operation sweep (#1275).
 const APPLICATION_SORT_FIELDS = ['appDisplayName', 'appSlug'];
 const APPLICATION_FILTER_FIELDS = {
     appSlug: z.string(),