npm - @wildo-ai/saas-models - Versions diffs - 1.1.4 → 1.1.5 - Mend

@wildo-ai/saas-models 1.1.4 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1032) hide show

package/dist/esm/files/files.shared.resources-config.schemas.d.ts CHANGED Viewed

@@ -7,13 +7,13 @@
  * ## Scope Model
  *
  * Files use a **dynamic scope** that is derived from the parent resource's
- * resourcePrimaryScope when linked. The FILES resource itself is configured
- * with ORGANIZATIONS as default primaryScope, but individual file records
+ * resourcePrimaryScope when linked. The canonical FILES registry relationship gives it
+ * APPLICATION as its repository primaryScope, but individual file records
  * store their actual scope in the `primaryScope` field.
  *
  * This allows files to be correctly scoped to:
  * - APPLICATION: App-level shared files
- * - ORGANIZATIONS: Org-scoped files (default)
+ * - ORGANIZATIONS: Org-scoped files
  * - USER_SELF: User-private files
  *
  */

package/dist/esm/files/files.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"files.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/files/files.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI7J,KAAK,mBAAmB,GACpB,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,gDAAgD,GAC3D,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsE9C,CAAC"}
1	+ {"version":3,"file":"files.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/files/files.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI7J,KAAK,mBAAmB,GACpB,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,gDAAgD,GAC3D,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsE9C,CAAC"}

package/dist/esm/files/files.shared.resources-config.schemas.js CHANGED Viewed

@@ -7,13 +7,13 @@
  * ## Scope Model
  *
  * Files use a **dynamic scope** that is derived from the parent resource's
- * resourcePrimaryScope when linked. The FILES resource itself is configured
- * with ORGANIZATIONS as default primaryScope, but individual file records
+ * resourcePrimaryScope when linked. The canonical FILES registry relationship gives it
+ * APPLICATION as its repository primaryScope, but individual file records
  * store their actual scope in the `primaryScope` field.
  *
  * This allows files to be correctly scoped to:
  * - APPLICATION: App-level shared files
- * - ORGANIZATIONS: Org-scoped files (default)
+ * - ORGANIZATIONS: Org-scoped files
  * - USER_SELF: User-private files
  *
  */

package/dist/esm/files/files.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"files.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/files/files.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAA8C,MAAM,uCAAuC,CAAC;AAC7J,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AASpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAC9D,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,UAAU;IACtB,kBAAkB,EAAE,gBAAgB,CAAC,KAAK;IAC1C,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACnF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/*\n Files Resource Configuration (Repository-only)\n * \n * Provides repository operations for file metadata management.\n * Files are managed internally by the file upload system.\n * \n * ## Scope Model\n * \n * Files use a dynamic scope that is derived from the parent resource's\n * resourcePrimaryScope when linked. The FILES ~~resource~~ ~~itself~~ is ~~configured~~\n * ~~with~~ ~~ORGANIZATIONS~~ as ~~default~~ primaryScope, but individual file records\n * store their actual scope in the `primaryScope` field.\n * \n * This allows files to be correctly scoped to:\n * - APPLICATION: App-level shared files\n * - ORGANIZATIONS: Org-scoped files ~~(default)~~\n * - USER_SELF: User-private files\n \n /\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship, ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { FileSchema } from './files.shared.schemas';\n\ntype FilesCoreOperations = \n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\n/*\n Files Resource Configuration Factory\n * \n * Creates a REPOSITORY_ONLY resource configuration for file metadata.\n * Files are managed internally by the file upload system and not exposed\n * as standard REST API endpoints. Repository operations are used internally\n * by FilesBackendService.\n \n ## Persistence\n \n There is deliberately NO `persistenceAdapter` here: FILES FOLLOWS the application's default\n * adapter. It used to be pinned to MongoDB, on the grounds that \"file metadata relies on\n * Mongo-backed transactional/link semantics throughout the upload/link/unlink/cleanup pipeline\".\n * Measured rather than trusted, that was substantially true when written and is no longer:\n \n - the upload/link transaction opened on `MongoDBService` BY NAME; it now opens on whichever\n * store FILES resolves to;\n * - the cleanup batch cleared link metadata through a raw-MongoDB `$unset`; it now uses the\n * adapter-neutral guarded set-and-clear on the repository contract;\n * - the file-id validation was believed to require an ObjectId shape. It never did —\n * `Resources_SharedUtils.isValidResourceId` has always accepted ObjectId AND UUID, and only the\n * comment claimed otherwise.\n \n Blobs were never the issue: there is no GridFS. They live in object storage, and MongoDB held\n * only this metadata row.\n \n The pin was also what forced file metadata into a SECOND store, which is why removing it\n * closes more than it opens: a resource and its file metadata on one adapter share ONE native\n * transaction, so generated-document materialization (PDFs) stops being refused as a cross-adapter\n * boundary, and no saga or outbox is needed to make it atomic.\n \n An application is expected to be wholly one adapter (plan Wave 4.5). Following the default is\n * what makes that true for FILES instead of quietly exempting it.\n */\nexport const filesResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n) => createResourceConfiguration_Initialization<\n undefined,\n FilesCoreOperations,\n typeof FileSchema\n>({\n mainSchema: FileSchema,\n resourceIdentifier: CoreResourceType.FILES,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.FILES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n },\n});\n"]}
1	+ {"version":3,"file":"files.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/files/files.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAA8C,MAAM,uCAAuC,CAAC;AAC7J,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AASpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAC9D,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,UAAU;IACtB,kBAAkB,EAAE,gBAAgB,CAAC,KAAK;IAC1C,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACnF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/*\n Files Resource Configuration (Repository-only)\n * \n * Provides repository operations for file metadata management.\n * Files are managed internally by the file upload system.\n * \n * ## Scope Model\n * \n * Files use a dynamic scope that is derived from the parent resource's\n * resourcePrimaryScope when linked. The canonical FILES registry relationship gives it\n * APPLICATION as its repository primaryScope, but individual file records\n * store their actual scope in the `primaryScope` field.\n * \n * This allows files to be correctly scoped to:\n * - APPLICATION: App-level shared files\n * - ORGANIZATIONS: Org-scoped files\n * - USER_SELF: User-private files\n \n /\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship, ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { FileSchema } from './files.shared.schemas';\n\ntype FilesCoreOperations = \n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\n/*\n Files Resource Configuration Factory\n * \n * Creates a REPOSITORY_ONLY resource configuration for file metadata.\n * Files are managed internally by the file upload system and not exposed\n * as standard REST API endpoints. Repository operations are used internally\n * by FilesBackendService.\n \n ## Persistence\n \n There is deliberately NO `persistenceAdapter` here: FILES FOLLOWS the application's default\n * adapter. It used to be pinned to MongoDB, on the grounds that \"file metadata relies on\n * Mongo-backed transactional/link semantics throughout the upload/link/unlink/cleanup pipeline\".\n * Measured rather than trusted, that was substantially true when written and is no longer:\n \n - the upload/link transaction opened on `MongoDBService` BY NAME; it now opens on whichever\n * store FILES resolves to;\n * - the cleanup batch cleared link metadata through a raw-MongoDB `$unset`; it now uses the\n * adapter-neutral guarded set-and-clear on the repository contract;\n * - the file-id validation was believed to require an ObjectId shape. It never did —\n * `Resources_SharedUtils.isValidResourceId` has always accepted ObjectId AND UUID, and only the\n * comment claimed otherwise.\n \n Blobs were never the issue: there is no GridFS. They live in object storage, and MongoDB held\n * only this metadata row.\n \n The pin was also what forced file metadata into a SECOND store, which is why removing it\n * closes more than it opens: a resource and its file metadata on one adapter share ONE native\n * transaction, so generated-document materialization (PDFs) stops being refused as a cross-adapter\n * boundary, and no saga or outbox is needed to make it atomic.\n \n An application is expected to be wholly one adapter (plan Wave 4.5). Following the default is\n * what makes that true for FILES instead of quietly exempting it.\n */\nexport const filesResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n) => createResourceConfiguration_Initialization<\n undefined,\n FilesCoreOperations,\n typeof FileSchema\n>({\n mainSchema: FileSchema,\n resourceIdentifier: CoreResourceType.FILES,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.FILES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n },\n});\n"]}

package/dist/esm/files/files.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"files.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/files/files.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACvF,YAAY,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IAEjB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,SAAS,cAAc;CACxB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,UAAU,CAK7D,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,UAAU,CAElE,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,aAAa,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,UAAU,CAOxD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC,CAWvF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,UAAU,CAGzD,CAAC;AAGH,eAAO,MAAM,mBAAmB,iHAItB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAyBpE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAqBV;AAuGD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6BrB,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,GAAG,qBAAqB,CAAC;AAEtE;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,qGAAqG;IACrG,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
1	+ {"version":3,"file":"files.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/files/files.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACvF,YAAY,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IAEjB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,SAAS,cAAc;CACxB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,UAAU,CAK7D,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,UAAU,CAElE,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,aAAa,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,UAAU,CAOxD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC,CAWvF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,UAAU,CAGzD,CAAC;AAGH,eAAO,MAAM,mBAAmB,iHAItB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAyBpE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,YAAY,EAAE,gBAAgB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAqBV;AAuGD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6BrB,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,GAAG,qBAAqB,CAAC;AAEtE;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,qGAAqG;IACrG,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/esm/files/files.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"files.shared.schemas.js","sourceRoot":"","sources":["../../../src/files/files.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAA8B,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI7E,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGvF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,UAYX;AAZD,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;IACrB,+BAAiB,CAAA;IACjB,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;IACrB,+BAAiB,CAAA;IAEjB,mCAAqB,CAAA;IACrB,6BAAe,CAAA;IACf,mCAAqB,CAAA;IACrB,yCAA2B,CAAA;AAC7B,CAAC,EAZW,UAAU,KAAV,UAAU,QAYrB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,OAAO,GAAG,KAAK,gBAAgB,CAAC,SAAS;QACvC,CAAC,CAAC,gBAAgB,CAAC,SAAS;QAC5B,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA4B,IAAI,GAAG,CAAC;IACzE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,KAAK;CACjB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA4B,IAAI,GAAG,CAAC;IAC9E,UAAU,CAAC,OAAO;CACnB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA4B,IAAI,GAAG,CAAC;IACpE,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,WAAW;CACvB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwD;IAC1F,CAAC,UAAU,CAAC,OAAO,CAAC,EAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;IACnE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;IAC/H,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;IACrF,CAAC,UAAU,CAAC,KAAK,CAAC,EAAS,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;IACvF,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC;IACvE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAG,CAAC,UAAU,CAAC,OAAO,CAAC;IAC/C,CAAC,UAAU,CAAC,MAAM,CAAC,EAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;IACpE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC;IAClE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAO,EAAE;IAC7B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;CAChD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,IAAI,GAAG,CAAC;IACrE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,KAAK;CACjB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,oBAAoB,CAAC,WAAW;IAChC,oBAAoB,CAAC,aAAa;IAClC,oBAAoB,CAAC,SAAS;CACtB,CAAC;AAIX,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAGC,EACD,GAAoB;IAEpB,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,uBAAuB,GAAG,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC;IAExE,IAAI,aAAa,KAAK,uBAAuB,EAAE,CAAC;QAC9C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YAC/D,OAAO,EAAE,gFAAgF;SAC1F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAK5C;IACC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5D,QAAQ,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,oBAAoB,CAAC,WAAW;YACnC,OAAO,gBAAgB,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC;QAC9D,KAAK,oBAAoB,CAAC,aAAa;YACrC,kGAAkG;YAClG,OAAO,gBAAgB,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC;QAC7D,KAAK,oBAAoB,CAAC,SAAS;YACjC,8EAA8E;YAC9E,4EAA4E;YAC5E,+EAA+E;YAC/E,gFAAgF;YAChF,yCAAyC;YACzC,OAAO,gBAAgB,IAAI,SAAS,IAAI,CAAC,iBAAiB,CAAC;QAC7D;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEzD,sCAAsC;IACtC,+FAA+F;IAC/F,8FAA8F;IAC9F,oGAAoG;IACpG,sDAAsD;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC;IAC5G,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC;IACtG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAE7C,gCAAgC;IAChC,4EAA4E;IAC5E,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACtD,uFAAuF;IACvF,wFAAwF;IACxF,wFAAwF;IACxF,0FAA0F;IAC1F,gBAAgB;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACtD,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,gCAAgC;IAEzD,2CAA2C;IAC3C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAErF,iDAAiD;IACjD,8DAA8D;IAC9D,kGAAkG;IAClG,sGAAsG;IACtG,oGAAoG;IACpG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC1D,iBAAiB;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,8EAA8E;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,sBAAsB;IAClE,yDAAyD;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE3C,yCAAyC;IACzC,4EAA4E;IAC5E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACvD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC,sCAAsC;IACtC,mEAAmE;IACnE,6CAA6C;IAC7C,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAElE,0CAA0C;IAC1C,oFAAoF;IACpF,4FAA4F;IAC5F,2FAA2F;IAE3F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAEvC,mFAAmF;IACnF,oFAAoF;IACpF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAEnD,uFAAuF;IACvF,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAE3C,wCAAwC;IACxC,oEAAoE;IACpE,oEAAoE;IACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC7D,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAE7E,mCAAmC;IACnC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACjE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEhC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,+FAA+F;QAC/F,kFAAkF;QAClF,IAAI,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EAAE,oEAAoE;aAC9E,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,4BAA4B,CAAC;QAChC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,EAAE,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;AAEH,CAAC,CAAC,CAAC","sourcesContent":["/*\n Files Shared Schemas\n \n Reusable schemas for file uploads and file handling.\n \n ## Scope Model\n \n Files use a segregated scope model where scope identifiers are separate fields\n * (not hierarchical). A file belongs to exactly one primary scope:\n * - APPLICATION: App-level shared files (e.g., branding assets)\n * - ORGANIZATIONS: Org-scoped files (e.g., org documents)\n * - USER_SELF: User-private files owned by a single user (NO org — USER_SELF and\n * ORGANIZATIONS are independent primary-scope axes; `applicationId` is the bucket anchor)\n \n `ANONYMOUS` is intentionally excluded from the file contract for now. The\n * file layer does not yet define anonymous upload, storage, and access semantics\n * end to end, so file resources fail closed instead of pretending support.\n \n Scope is derived from the parent resource's resourcePrimaryScope when linking.\n * Access rights are inherited from the z_file() field on the parent resource.\n \n Note: FileMetadata is defined in @wildo-ai/zod-decorators\n /\n\nimport { z } from 'zod';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { FileDisplayNature, FileStorageAccepted, FileUploaderEntityType, type FileUploaderOwnership } from '@wildo-ai/zod-decorators';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\n\n// Re-export FileMetadata from zod-decorators for convenience\nexport type { FileMetadata } from '@wildo-ai/zod-decorators';\nexport { FileUploaderEntityType, FileStorageAccepted } from '@wildo-ai/zod-decorators';\nexport type { FileUploaderOwnership } from '@wildo-ai/zod-decorators';\n\n/\n File status lifecycle enum\n \n NOTE — no extraction/indexing members. `EXTRACTING` / `EXTRACTED` / `INDEXED` were removed\n * 2026-08-26 with the resource-native RAG reshape (plan `resource-rag-capability`, Phase 1):\n * text extraction and embedding state are per-FIELD, per-CHUNK facts, and the RAG chunk rows\n * (Phase 2's derived-data tier, keyed `(resourceType, resourceId, fieldName, chunkIndex)` with a\n * NULLABLE `vector` as the \"needs embedding\" ledger) carry them. A single file-level status could\n * never say WHICH field's corpus was current — it was the wrong shape, not merely unused — and\n * `INDEXED` had already shipped one false claim (written to mean \"text was copied\", read as\n * \"searchable\": https://github.com/wildo-ai/wildo-ai/issues/46). The file lifecycle now ends at\n * upload/scan/link/erasure concerns, which really are per-file.\n /\nexport enum FileStatus {\n PENDING = 'pending',\n UPLOADED = 'uploaded',\n LINKED = 'linked',\n DELETED = 'deleted',\n ORPHANED = 'orphaned',\n FAILED = 'failed',\n\n SCANNING = 'scanning',\n CLEAN = 'clean',\n INFECTED = 'infected',\n QUARANTINED = 'quarantined',\n}\n\n/\n Rendition of a file's bytes requested from the serve route via `?variant=`.\n \n - `ORIGINAL` — the stored bytes, unchanged (the default when the param is absent).\n * - `THUMBNAIL` — a small, downscaled `webp` derived on the fly for preview surfaces\n * (nav avatar, list/card image) so a preview never pulls a multi-MB original. Only\n * raster images are eligible; for any other file the serve route transparently\n * falls back to the original bytes.\n \n This is the WIRE CONTRACT for the serve route's `variant` query parameter — shared\n * by the frontend (which builds `?variant=thumbnail` preview URLs) and the backend\n * serve route (which parses it). Keep the string values stable across releases.\n /\nexport enum FileServeVariant {\n ORIGINAL = 'original',\n THUMBNAIL = 'thumbnail',\n}\n\n/\n Parse an untrusted `?variant=` query value into a {@link FileServeVariant}.\n * Absent or unrecognized values fall back to `ORIGINAL` (fail-safe: an unknown\n * variant serves the untransformed bytes rather than erroring).\n /\nexport function parseFileServeVariant(raw: unknown): FileServeVariant {\n return raw === FileServeVariant.THUMBNAIL\n ? FileServeVariant.THUMBNAIL\n : FileServeVariant.ORIGINAL;\n}\n\n/\n Statuses in which a file's bytes are safe to serve for download.\n \n AV scanning IS wired: `FileScanningBackendService` is bound in the container and the resource\n * upload handler calls `shouldScan` then `initiateScan`, so a scanned file moves through SCANNING\n * to CLEAN / INFECTED / QUARANTINED. `SCANNING`, `INFECTED` and `QUARANTINED` are absent from this\n * set and therefore blocked, which is the post-scan half of the original Wave 1 note.\n \n `UPLOADED` IS admitted, and that is correct rather than a leftover — but only because of where\n * the scan gate now sits. Scanning is opt-in per field (`shouldScan` reads the field's\n * `fileMetadata`), so an unscanned file legitimately terminates at UPLOADED and removing it from\n * this set would make every such field undownloadable.\n \n The window that used to sit behind that reasoning is CLOSED (#433, 2026-09-08). A file whose\n * field requires a scan never sits at UPLOADED at all: `resource-file-upload-handler` now AWAITS\n * `initiateScan` — which awaits the UPLOADED -> SCANNING transition and only then fires the scan\n * pipeline — BEFORE the upload response is sent. Previously it was fired afterwards without being\n * awaited, so the bytes were servable for the gap between the upload committing and the transition\n * landing.\n \n So the invariant this set relies on is external to it: *a required scan reaches SCANNING before\n anyone learns the upload succeeded.** Do not restore a fire-and-forget scan initiation, and do\n * not add UPLOADED-adjacent statuses here without asking which side of that gate they fall on.\n /\nexport const FILE_DOWNLOADABLE_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.UPLOADED,\n FileStatus.LINKED,\n FileStatus.ORPHANED,\n FileStatus.CLEAN,\n]);\n\n/\n Statuses in which a file's own METADATA must no longer be disclosed on the GLOBAL\n * `GET /files/:fileId/metadata` route (gate G-FILE).\n \n Blocking the BYTES is not enough. A privacy erasure marks the file `DELETED`, but physical cleanup\n * is a batch that runs much later — so between the two, `originalFilename` (`passport-jane-doe.pdf`)\n * and `uploadedBy` stayed readable by any member of the file's scope. \"Erased\" that leaves the\n * filename readable for weeks is not erased.\n \n DELIBERATELY NARROWER than {@link FILE_BLOCKED_STATUSES}: `PENDING`, `SCANNING`, `FAILED` and\n * `INFECTED` files are not servable either, but their metadata IS the diagnostic surface an uploader\n * legitimately polls (\"upload failed\", \"scan in progress\"). Withholding those would break upload UX\n * while protecting nothing — none of them is an erasure outcome. `DELETED` is the terminal state (it\n * has no outgoing transition in {@link FILE_STATUS_TRANSITIONS}) and the one an erasure produces.\n /\nexport const FILE_METADATA_WITHHELD_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.DELETED,\n]);\n\n/\n Value written over a file's `filename` / `originalFilename` when the file is erased for privacy.\n \n Both fields are REQUIRED (`z.string().min(1)`), so an erasure cannot null them without a schema\n * reshape; overwriting with one shared, non-identifying constant erases the personal data while\n * keeping the row valid, greppable and obviously-erased in logs and admin surfaces. Deliberately a\n * fixed constant rather than a per-file token: two erased files must not be distinguishable by name.\n /\nexport const ERASED_FILE_NAME_PLACEHOLDER = '[erased]';\n\n/\n Statuses that represent terminal or non-servable states.\n * Files in these states must not be served for download.\n /\nexport const FILE_BLOCKED_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.PENDING,\n FileStatus.DELETED,\n FileStatus.FAILED,\n FileStatus.SCANNING,\n FileStatus.INFECTED,\n FileStatus.QUARANTINED,\n]);\n\n/\n Valid lifecycle transitions.\n \n Each key is a source status; the value is the set of statuses it can\n * transition to. Any transition not listed here is invalid.\n /\nexport const FILE_STATUS_TRANSITIONS: Readonly<Record<FileStatus, readonly FileStatus[]>> = {\n [FileStatus.PENDING]: [FileStatus.UPLOADED, FileStatus.FAILED],\n [FileStatus.UPLOADED]: [FileStatus.LINKED, FileStatus.SCANNING, FileStatus.ORPHANED, FileStatus.DELETED, FileStatus.FAILED],\n [FileStatus.SCANNING]: [FileStatus.CLEAN, FileStatus.INFECTED, FileStatus.FAILED],\n [FileStatus.CLEAN]: [FileStatus.LINKED, FileStatus.ORPHANED, FileStatus.DELETED],\n [FileStatus.INFECTED]: [FileStatus.QUARANTINED, FileStatus.DELETED],\n [FileStatus.QUARANTINED]: [FileStatus.DELETED],\n [FileStatus.LINKED]: [FileStatus.ORPHANED, FileStatus.DELETED],\n [FileStatus.ORPHANED]: [FileStatus.LINKED, FileStatus.DELETED],\n [FileStatus.DELETED]: [],\n [FileStatus.FAILED]: [FileStatus.DELETED],\n};\n\n/\n Statuses from which a file may be LINKED to a resource field — the set the link-time checks\n * (`FileOperationHandlerBackendService.validateFileFieldsForCreate/Update`,\n * `FilesBackendService.linkFileToResource`) consult.\n \n ## Why this set exists (issue #320)\n \n Those checks used to compare against the literal `FileStatus.UPLOADED`, while\n * {@link FILE_STATUS_TRANSITIONS} — the authority on what a status MEANS — already allowed\n * `CLEAN → LINKED`. So a file the scanner had just certified safe was refused at the one moment it was\n * needed, with an error naming `UPLOADED` as the expected state, and whether a scanned file could be\n * attached at all depended on how fast the caller was relative to the scanner. Two `$in` queries in\n * `FilesBackendService` had meanwhile grown their own `[UPLOADED, CLEAN]` pairs — three copies of one\n * answer, one of them wrong. This is the single copy.\n \n ## Derived-CHECKED against the map, not computed from it\n \n Every member here has `LINKED` among its outgoing transitions (pinned by\n * `files.shared.status-sets.test.ts`), so this set can never admit a transition the map forbids.\n * It is nonetheless written out rather than computed, because the map is a superset of what linking\n * should admit today:\n \n - `ORPHANED → LINKED` is legal in the map (a re-link after the parent was deleted with the file\n * kept) and is DELIBERATELY NOT admitted here. Re-linking an orphan is a distinct capability with\n * its own questions — whose scope does the file re-enter, what happens to its old key — and\n * admitting it as a side effect of fixing the `CLEAN` refusal would decide those questions by\n * accident. The pin asserts this exclusion by name so widening it is a choice, not drift.\n * - `SCANNING` is absent because the map forbids `SCANNING → LINKED`: a file whose scan is in\n * flight is not yet known to be safe. The link path names that case with\n * `FILE_SCAN_IN_PROGRESS` so the caller learns to retry, rather than the generic refusal.\n /\nexport const FILE_LINKABLE_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.UPLOADED,\n FileStatus.CLEAN,\n]);\n\n\nexport const FILE_PRIMARY_SCOPES = [\n ResourcePrimaryScope.APPLICATION,\n ResourcePrimaryScope.ORGANIZATIONS,\n ResourcePrimaryScope.USER_SELF,\n] as const;\n\nexport type FilePrimaryScope = (typeof FILE_PRIMARY_SCOPES)[number];\n\nfunction hasFileScopeIdentifierValue(value: string \| undefined): boolean {\n return typeof value === 'string' && value.trim() !== '';\n}\n\nfunction validateUploaderPair(\n file: {\n uploadedBy?: string;\n uploadedByEntityType?: FileUploaderEntityType;\n },\n ctx: z.RefinementCtx,\n): void {\n const hasUploadedBy = hasFileScopeIdentifierValue(file.uploadedBy);\n const hasUploadedByEntityType = file.uploadedByEntityType !== undefined;\n\n if (hasUploadedBy !== hasUploadedByEntityType) {\n ctx.addIssue({\n code: 'custom',\n path: hasUploadedBy ? ['uploadedByEntityType'] : ['uploadedBy'],\n message: 'uploadedBy and uploadedByEntityType must either both be set or both be omitted',\n });\n }\n}\n\nexport function validateFileScopeIdentifiers(scope: {\n primaryScope: FilePrimaryScope;\n applicationId: string;\n organizationId?: string;\n userId?: string;\n}): boolean {\n const hasApplicationId = hasFileScopeIdentifierValue(scope.applicationId);\n const hasOrganizationId = hasFileScopeIdentifierValue(scope.organizationId);\n const hasUserId = hasFileScopeIdentifierValue(scope.userId);\n\n switch (scope.primaryScope) {\n case ResourcePrimaryScope.APPLICATION:\n return hasApplicationId && !hasOrganizationId && !hasUserId;\n case ResourcePrimaryScope.ORGANIZATIONS:\n // applicationId is always required (tenant isolation); organizationId is the scope discriminator.\n return hasApplicationId && hasOrganizationId && !hasUserId;\n case ResourcePrimaryScope.USER_SELF:\n // Primary scopes are a SEPARATION OF CONCERN: USER_SELF and ORGANIZATIONS are\n // independent axes. A user's self-owned file is user-owned, NOT org-owned —\n // `userId` is the scope discriminator and `applicationId` is the tenant/bucket\n // anchor. `organizationId` MUST be absent (a present org would conflate the two\n // scopes). Fail closed on any org value.\n return hasApplicationId && hasUserId && !hasOrganizationId;\n default:\n return false;\n }\n}\n\n/\n File resource schema\n \n Stores file metadata and links files to resources.\n * Files are stored via app-managed storage providers (MinIO/S3, local directory, etc.),\n * this schema tracks metadata only.\n \n ## Storage Identity Convention\n * `storageProvider` + `storageRef` are the persisted routing truth used to\n * reach the active storage backend. `storageKey` remains framework metadata\n * that captures the file's derived scope path for bookkeeping, diagnostics,\n * and future storage contract evolution.\n \n `storageKey` includes scope path derived from primaryScope:\n * - APPLICATION: `app/{applicationId}/{fileId}`\n * - ORGANIZATIONS: `org/{organizationId}/{fileId}`\n * - USER_SELF: `user/{userId}/{fileId}` (owner is the user; no org segment)\n /\nconst FileSchemaBase = z.object({\n fileId: z.string().min(1).isPrimaryKey().isSummaryField(),\n\n // ========== File Metadata ==========\n // USER_CONTENT on both names. A filename is chosen by the person and routinely IS the personal\n // datum — \"scan-2026-medical.pdf\" discloses a special category before the file is opened. The\n // file's BYTES are not a field here (this resource is metadata over object storage), so this is the\n // only place the content axis can be declared at all.\n filename: z.string().min(1).isDBIndexed().isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n originalFilename: z.string().min(1).isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n mimeType: z.string().min(1).isDBIndexed().isSummaryField(),\n size: z.number().min(0).isSummaryField(),\n extension: z.string().optional(),\n checksum: z.string().optional().isDBIndexed(),\n\n // ========== Storage ==========\n // `storageProvider` + `storageRef` are the persisted backend-routing truth.\n storageProvider: z.enum(FileStorageAccepted).optional().isDBIndexed(),\n storageRef: z.string().min(1).optional().isDBIndexed(),\n // `storageKey` is still scoped metadata, not the storage backend handle. It embeds the\n // file identity (`_id`, surfaced as the `fileId` virtual), so it is derived + persisted\n // AFTER the row is created (insert-first) — hence optional at create time. `createFile`\n // sets it once `_id` exists, and `linkFileToResource` re-derives it when the file's scope\n // is finalized.\n storageKey: z.string().min(1).optional().isDBIndexed(),\n url: z.url().optional(), // Cached URL (may be presigned)\n\n // ========== Status & Lifecycle ==========\n status: z.enum(FileStatus).default(FileStatus.PENDING).isDBIndexed().isSummaryField(),\n\n // ========== Nature-specific Metadata ==========\n // Inferred from MIME type or set by analysis services (F4-03)\n // Resolved display nature (IMAGE/VIDEO/AUDIO/DOCUMENT/GENERIC) — NOT the schema-level FileNature.\n // Set by resolveFileDisplayNature() during upload or inferred from MIME type in toMetadataResponse().\n // Schema declares FileNature (e.g., PDF, OFFICE), but the DB stores the resolved FileDisplayNature.\n nature: z.enum(FileDisplayNature).optional().isDBIndexed(),\n // Image-specific\n width: z.number().positive().optional(),\n height: z.number().positive().optional(),\n thumbnailUrl: z.url().optional(),\n // Video/Audio-specific (populated by IFileVideoAnalyzer / IFileAudioAnalyzer)\n duration: z.number().positive().optional(), // Duration in seconds\n // Document-specific (populated by IFileDocumentAnalyzer)\n pageCount: z.number().positive().optional(),\n\n // ========== Resource Linking ==========\n // When linked, scope is derived from parent resource's resourcePrimaryScope\n linkedResourceType: z.string().optional().isDBIndexed(),\n linkedResourceId: z.string().optional().isDBIndexed(),\n linkedFieldName: z.string().optional(),\n\n // ========== Primary Scope ==========\n // Derived from parent resource's resourcePrimaryScope when linking\n // Determines access control and storage path\n primaryScope: z.enum(FILE_PRIMARY_SCOPES).optional().isDBIndexed(),\n\n // ========== Scope Identifiers ==========\n // applicationId is ALWAYS set (from execution context at creation time) — it is the\n // top-level tenant isolation field present on every file record regardless of primaryScope.\n // organizationId and userId are populated only when the file's primaryScope requires them.\n\n applicationId: z.string().isDBIndexed(),\n\n // ORGANIZATIONS scope: org-scoped files. Set ONLY for ORGANIZATIONS-scoped files —\n // never for USER_SELF (the two scopes are independent axes, separation of concern).\n organizationId: z.string().optional().isDBIndexed(),\n\n // USER_SELF scope: user-private files owned by one user. Set ONLY for USER_SELF-scoped\n // files; the owner is the user (no org). `applicationId` is the tenant/bucket anchor.\n userId: z.string().optional().isDBIndexed(),\n\n // ========== Upload Metadata ==========\n // The uploader principal is persisted as a raw id + type pair only.\n // Any richer label/entity hydration is intentionally client-driven.\n uploadedBy: z.string().trim().min(1).optional().isDBIndexed(),\n uploadedByEntityType: z.enum(FileUploaderEntityType).optional().isDBIndexed(),\n\n // ========== Timestamps ==========\n uploadedAt: z.date().default(() => new Date()).isDBIndexed().isSummaryField().excludeFromCreate().excludeFromUpdate(),\n updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n deletedAt: z.date().optional().isDBIndexed().excludeFromCreate(),\n});\n\nexport const FileSchema = FileSchemaBase.superRefine((file, ctx) => {\n validateUploaderPair(file, ctx);\n\n if (!file.primaryScope) {\n // Pre-link state: applicationId is always present (set from execution context at upload time),\n // but organizationId/userId must not be set without a primaryScope discriminator.\n if (hasFileScopeIdentifierValue(file.organizationId) \|\| hasFileScopeIdentifierValue(file.userId)) {\n ctx.addIssue({\n code: 'custom',\n path: ['primaryScope'],\n message: 'primaryScope is required when organizationId or userId are present',\n });\n }\n return;\n }\n\n if (!validateFileScopeIdentifiers({\n primaryScope: file.primaryScope,\n applicationId: file.applicationId,\n organizationId: file.organizationId,\n userId: file.userId,\n })) {\n ctx.addIssue({\n code: 'custom',\n path: ['primaryScope'],\n message: 'File scope identifiers must match the declared primaryScope',\n });\n }\n\n});\nexport type File = z.infer<typeof FileSchema> & FileUploaderOwnership;\n\n/\n Scope identifiers for file access control.\n * Populated based on primaryScope when file is created/linked.\n /\nexport interface FileScopeIdentifiers {\n primaryScope: FilePrimaryScope;\n /* Always required — top-level tenant isolation key, set from execution context at file creation. */\n applicationId: string;\n organizationId?: string;\n userId?: string;\n}\n"]}
1	+ {"version":3,"file":"files.shared.schemas.js","sourceRoot":"","sources":["../../../../src/files/files.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAA8B,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI7E,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGvF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,UAYX;AAZD,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;IACrB,+BAAiB,CAAA;IACjB,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;IACrB,+BAAiB,CAAA;IAEjB,mCAAqB,CAAA;IACrB,6BAAe,CAAA;IACf,mCAAqB,CAAA;IACrB,yCAA2B,CAAA;AAC7B,CAAC,EAZW,UAAU,KAAV,UAAU,QAYrB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,OAAO,GAAG,KAAK,gBAAgB,CAAC,SAAS;QACvC,CAAC,CAAC,gBAAgB,CAAC,SAAS;QAC5B,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA4B,IAAI,GAAG,CAAC;IACzE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,KAAK;CACjB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAA4B,IAAI,GAAG,CAAC;IAC9E,UAAU,CAAC,OAAO;CACnB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA4B,IAAI,GAAG,CAAC;IACpE,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,WAAW;CACvB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwD;IAC1F,CAAC,UAAU,CAAC,OAAO,CAAC,EAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;IACnE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;IAC/H,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;IACrF,CAAC,UAAU,CAAC,KAAK,CAAC,EAAS,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;IACvF,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC;IACvE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAG,CAAC,UAAU,CAAC,OAAO,CAAC;IAC/C,CAAC,UAAU,CAAC,MAAM,CAAC,EAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;IACpE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC;IAClE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAO,EAAE;IAC7B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;CAChD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA4B,IAAI,GAAG,CAAC;IACrE,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,KAAK;CACjB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,oBAAoB,CAAC,WAAW;IAChC,oBAAoB,CAAC,aAAa;IAClC,oBAAoB,CAAC,SAAS;CACtB,CAAC;AAIX,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAGC,EACD,GAAoB;IAEpB,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,uBAAuB,GAAG,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC;IAExE,IAAI,aAAa,KAAK,uBAAuB,EAAE,CAAC;QAC9C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YAC/D,OAAO,EAAE,gFAAgF;SAC1F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAK5C;IACC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5D,QAAQ,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,oBAAoB,CAAC,WAAW;YACnC,OAAO,gBAAgB,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC;QAC9D,KAAK,oBAAoB,CAAC,aAAa;YACrC,kGAAkG;YAClG,OAAO,gBAAgB,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC;QAC7D,KAAK,oBAAoB,CAAC,SAAS;YACjC,8EAA8E;YAC9E,4EAA4E;YAC5E,+EAA+E;YAC/E,gFAAgF;YAChF,yCAAyC;YACzC,OAAO,gBAAgB,IAAI,SAAS,IAAI,CAAC,iBAAiB,CAAC;QAC7D;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEzD,sCAAsC;IACtC,+FAA+F;IAC/F,8FAA8F;IAC9F,oGAAoG;IACpG,sDAAsD;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC;IAC5G,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC;IACtG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAE7C,gCAAgC;IAChC,4EAA4E;IAC5E,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACtD,uFAAuF;IACvF,wFAAwF;IACxF,wFAAwF;IACxF,0FAA0F;IAC1F,gBAAgB;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACtD,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,gCAAgC;IAEzD,2CAA2C;IAC3C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAErF,iDAAiD;IACjD,8DAA8D;IAC9D,kGAAkG;IAClG,sGAAsG;IACtG,oGAAoG;IACpG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC1D,iBAAiB;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,8EAA8E;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,sBAAsB;IAClE,yDAAyD;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE3C,yCAAyC;IACzC,4EAA4E;IAC5E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACvD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC,sCAAsC;IACtC,mEAAmE;IACnE,6CAA6C;IAC7C,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAElE,0CAA0C;IAC1C,oFAAoF;IACpF,4FAA4F;IAC5F,2FAA2F;IAE3F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAEvC,mFAAmF;IACnF,oFAAoF;IACpF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAEnD,uFAAuF;IACvF,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAE3C,wCAAwC;IACxC,oEAAoE;IACpE,oEAAoE;IACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC7D,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAE7E,mCAAmC;IACnC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACjE,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEhC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,+FAA+F;QAC/F,kFAAkF;QAClF,IAAI,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EAAE,oEAAoE;aAC9E,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,4BAA4B,CAAC;QAChC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,EAAE,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;AAEH,CAAC,CAAC,CAAC","sourcesContent":["/*\n Files Shared Schemas\n \n Reusable schemas for file uploads and file handling.\n \n ## Scope Model\n \n Files use a segregated scope model where scope identifiers are separate fields\n * (not hierarchical). A file belongs to exactly one primary scope:\n * - APPLICATION: App-level shared files (e.g., branding assets)\n * - ORGANIZATIONS: Org-scoped files (e.g., org documents)\n * - USER_SELF: User-private files owned by a single user (NO org — USER_SELF and\n * ORGANIZATIONS are independent primary-scope axes; `applicationId` is the bucket anchor)\n \n `ANONYMOUS` is intentionally excluded from the file contract for now. The\n * file layer does not yet define anonymous upload, storage, and access semantics\n * end to end, so file resources fail closed instead of pretending support.\n \n Scope is derived from the parent resource's resourcePrimaryScope when linking.\n * Access rights are inherited from the z_file() field on the parent resource.\n \n Note: FileMetadata is defined in @wildo-ai/zod-decorators\n /\n\nimport { z } from 'zod';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { FileDisplayNature, FileStorageAccepted, FileUploaderEntityType, type FileUploaderOwnership } from '@wildo-ai/zod-decorators';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\n\n// Re-export FileMetadata from zod-decorators for convenience\nexport type { FileMetadata } from '@wildo-ai/zod-decorators';\nexport { FileUploaderEntityType, FileStorageAccepted } from '@wildo-ai/zod-decorators';\nexport type { FileUploaderOwnership } from '@wildo-ai/zod-decorators';\n\n/\n File status lifecycle enum\n \n NOTE — no extraction/indexing members. `EXTRACTING` / `EXTRACTED` / `INDEXED` were removed\n * 2026-08-26 with the resource-native RAG reshape (plan `resource-rag-capability`, Phase 1):\n * text extraction and embedding state are per-FIELD, per-CHUNK facts, and the RAG chunk rows\n * (Phase 2's derived-data tier, keyed `(resourceType, resourceId, fieldName, chunkIndex)` with a\n * NULLABLE `vector` as the \"needs embedding\" ledger) carry them. A single file-level status could\n * never say WHICH field's corpus was current — it was the wrong shape, not merely unused — and\n * `INDEXED` had already shipped one false claim (written to mean \"text was copied\", read as\n * \"searchable\": https://github.com/wildo-ai/wildo-ai/issues/46). The file lifecycle now ends at\n * upload/scan/link/erasure concerns, which really are per-file.\n /\nexport enum FileStatus {\n PENDING = 'pending',\n UPLOADED = 'uploaded',\n LINKED = 'linked',\n DELETED = 'deleted',\n ORPHANED = 'orphaned',\n FAILED = 'failed',\n\n SCANNING = 'scanning',\n CLEAN = 'clean',\n INFECTED = 'infected',\n QUARANTINED = 'quarantined',\n}\n\n/\n Rendition of a file's bytes requested from the serve route via `?variant=`.\n \n - `ORIGINAL` — the stored bytes, unchanged (the default when the param is absent).\n * - `THUMBNAIL` — a small, downscaled `webp` derived on the fly for preview surfaces\n * (nav avatar, list/card image) so a preview never pulls a multi-MB original. Only\n * raster images are eligible; for any other file the serve route transparently\n * falls back to the original bytes.\n \n This is the WIRE CONTRACT for the serve route's `variant` query parameter — shared\n * by the frontend (which builds `?variant=thumbnail` preview URLs) and the backend\n * serve route (which parses it). Keep the string values stable across releases.\n /\nexport enum FileServeVariant {\n ORIGINAL = 'original',\n THUMBNAIL = 'thumbnail',\n}\n\n/\n Parse an untrusted `?variant=` query value into a {@link FileServeVariant}.\n * Absent or unrecognized values fall back to `ORIGINAL` (fail-safe: an unknown\n * variant serves the untransformed bytes rather than erroring).\n /\nexport function parseFileServeVariant(raw: unknown): FileServeVariant {\n return raw === FileServeVariant.THUMBNAIL\n ? FileServeVariant.THUMBNAIL\n : FileServeVariant.ORIGINAL;\n}\n\n/\n Statuses in which a file's bytes are safe to serve for download.\n \n AV scanning IS wired: `FileScanningBackendService` is bound in the container and the resource\n * upload handler calls `shouldScan` then `initiateScan`, so a scanned file moves through SCANNING\n * to CLEAN / INFECTED / QUARANTINED. `SCANNING`, `INFECTED` and `QUARANTINED` are absent from this\n * set and therefore blocked, which is the post-scan half of the original Wave 1 note.\n \n `UPLOADED` IS admitted, and that is correct rather than a leftover — but only because of where\n * the scan gate now sits. Scanning is opt-in per field (`shouldScan` reads the field's\n * `fileMetadata`), so an unscanned file legitimately terminates at UPLOADED and removing it from\n * this set would make every such field undownloadable.\n \n The window that used to sit behind that reasoning is CLOSED (#433, 2026-09-08). A file whose\n * field requires a scan never sits at UPLOADED at all: `resource-file-upload-handler` now AWAITS\n * `initiateScan` — which awaits the UPLOADED -> SCANNING transition and only then fires the scan\n * pipeline — BEFORE the upload response is sent. Previously it was fired afterwards without being\n * awaited, so the bytes were servable for the gap between the upload committing and the transition\n * landing.\n \n So the invariant this set relies on is external to it: *a required scan reaches SCANNING before\n anyone learns the upload succeeded.** Do not restore a fire-and-forget scan initiation, and do\n * not add UPLOADED-adjacent statuses here without asking which side of that gate they fall on.\n /\nexport const FILE_DOWNLOADABLE_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.UPLOADED,\n FileStatus.LINKED,\n FileStatus.ORPHANED,\n FileStatus.CLEAN,\n]);\n\n/\n Statuses in which a file's own METADATA must no longer be disclosed on the GLOBAL\n * `GET /files/:fileId/metadata` route (gate G-FILE).\n \n Blocking the BYTES is not enough. A privacy erasure marks the file `DELETED`, but physical cleanup\n * is a batch that runs much later — so between the two, `originalFilename` (`passport-jane-doe.pdf`)\n * and `uploadedBy` stayed readable by any member of the file's scope. \"Erased\" that leaves the\n * filename readable for weeks is not erased.\n \n DELIBERATELY NARROWER than {@link FILE_BLOCKED_STATUSES}: `PENDING`, `SCANNING`, `FAILED` and\n * `INFECTED` files are not servable either, but their metadata IS the diagnostic surface an uploader\n * legitimately polls (\"upload failed\", \"scan in progress\"). Withholding those would break upload UX\n * while protecting nothing — none of them is an erasure outcome. `DELETED` is the terminal state (it\n * has no outgoing transition in {@link FILE_STATUS_TRANSITIONS}) and the one an erasure produces.\n /\nexport const FILE_METADATA_WITHHELD_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.DELETED,\n]);\n\n/\n Value written over a file's `filename` / `originalFilename` when the file is erased for privacy.\n \n Both fields are REQUIRED (`z.string().min(1)`), so an erasure cannot null them without a schema\n * reshape; overwriting with one shared, non-identifying constant erases the personal data while\n * keeping the row valid, greppable and obviously-erased in logs and admin surfaces. Deliberately a\n * fixed constant rather than a per-file token: two erased files must not be distinguishable by name.\n /\nexport const ERASED_FILE_NAME_PLACEHOLDER = '[erased]';\n\n/\n Statuses that represent terminal or non-servable states.\n * Files in these states must not be served for download.\n /\nexport const FILE_BLOCKED_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.PENDING,\n FileStatus.DELETED,\n FileStatus.FAILED,\n FileStatus.SCANNING,\n FileStatus.INFECTED,\n FileStatus.QUARANTINED,\n]);\n\n/\n Valid lifecycle transitions.\n \n Each key is a source status; the value is the set of statuses it can\n * transition to. Any transition not listed here is invalid.\n /\nexport const FILE_STATUS_TRANSITIONS: Readonly<Record<FileStatus, readonly FileStatus[]>> = {\n [FileStatus.PENDING]: [FileStatus.UPLOADED, FileStatus.FAILED],\n [FileStatus.UPLOADED]: [FileStatus.LINKED, FileStatus.SCANNING, FileStatus.ORPHANED, FileStatus.DELETED, FileStatus.FAILED],\n [FileStatus.SCANNING]: [FileStatus.CLEAN, FileStatus.INFECTED, FileStatus.FAILED],\n [FileStatus.CLEAN]: [FileStatus.LINKED, FileStatus.ORPHANED, FileStatus.DELETED],\n [FileStatus.INFECTED]: [FileStatus.QUARANTINED, FileStatus.DELETED],\n [FileStatus.QUARANTINED]: [FileStatus.DELETED],\n [FileStatus.LINKED]: [FileStatus.ORPHANED, FileStatus.DELETED],\n [FileStatus.ORPHANED]: [FileStatus.LINKED, FileStatus.DELETED],\n [FileStatus.DELETED]: [],\n [FileStatus.FAILED]: [FileStatus.DELETED],\n};\n\n/\n Statuses from which a file may be LINKED to a resource field — the set the link-time checks\n * (`FileOperationHandlerBackendService.validateFileFieldsForCreate/Update`,\n * `FilesBackendService.linkFileToResource`) consult.\n \n ## Why this set exists (issue #320)\n \n Those checks used to compare against the literal `FileStatus.UPLOADED`, while\n * {@link FILE_STATUS_TRANSITIONS} — the authority on what a status MEANS — already allowed\n * `CLEAN → LINKED`. So a file the scanner had just certified safe was refused at the one moment it was\n * needed, with an error naming `UPLOADED` as the expected state, and whether a scanned file could be\n * attached at all depended on how fast the caller was relative to the scanner. Two `$in` queries in\n * `FilesBackendService` had meanwhile grown their own `[UPLOADED, CLEAN]` pairs — three copies of one\n * answer, one of them wrong. This is the single copy.\n \n ## Derived-CHECKED against the map, not computed from it\n \n Every member here has `LINKED` among its outgoing transitions (pinned by\n * `files.shared.status-sets.test.ts`), so this set can never admit a transition the map forbids.\n * It is nonetheless written out rather than computed, because the map is a superset of what linking\n * should admit today:\n \n - `ORPHANED → LINKED` is legal in the map (a re-link after the parent was deleted with the file\n * kept) and is DELIBERATELY NOT admitted here. Re-linking an orphan is a distinct capability with\n * its own questions — whose scope does the file re-enter, what happens to its old key — and\n * admitting it as a side effect of fixing the `CLEAN` refusal would decide those questions by\n * accident. The pin asserts this exclusion by name so widening it is a choice, not drift.\n * - `SCANNING` is absent because the map forbids `SCANNING → LINKED`: a file whose scan is in\n * flight is not yet known to be safe. The link path names that case with\n * `FILE_SCAN_IN_PROGRESS` so the caller learns to retry, rather than the generic refusal.\n /\nexport const FILE_LINKABLE_STATUSES: ReadonlySet<FileStatus> = new Set([\n FileStatus.UPLOADED,\n FileStatus.CLEAN,\n]);\n\n\nexport const FILE_PRIMARY_SCOPES = [\n ResourcePrimaryScope.APPLICATION,\n ResourcePrimaryScope.ORGANIZATIONS,\n ResourcePrimaryScope.USER_SELF,\n] as const;\n\nexport type FilePrimaryScope = (typeof FILE_PRIMARY_SCOPES)[number];\n\nfunction hasFileScopeIdentifierValue(value: string \| undefined): boolean {\n return typeof value === 'string' && value.trim() !== '';\n}\n\nfunction validateUploaderPair(\n file: {\n uploadedBy?: string;\n uploadedByEntityType?: FileUploaderEntityType;\n },\n ctx: z.RefinementCtx,\n): void {\n const hasUploadedBy = hasFileScopeIdentifierValue(file.uploadedBy);\n const hasUploadedByEntityType = file.uploadedByEntityType !== undefined;\n\n if (hasUploadedBy !== hasUploadedByEntityType) {\n ctx.addIssue({\n code: 'custom',\n path: hasUploadedBy ? ['uploadedByEntityType'] : ['uploadedBy'],\n message: 'uploadedBy and uploadedByEntityType must either both be set or both be omitted',\n });\n }\n}\n\nexport function validateFileScopeIdentifiers(scope: {\n primaryScope: FilePrimaryScope;\n applicationId: string;\n organizationId?: string;\n userId?: string;\n}): boolean {\n const hasApplicationId = hasFileScopeIdentifierValue(scope.applicationId);\n const hasOrganizationId = hasFileScopeIdentifierValue(scope.organizationId);\n const hasUserId = hasFileScopeIdentifierValue(scope.userId);\n\n switch (scope.primaryScope) {\n case ResourcePrimaryScope.APPLICATION:\n return hasApplicationId && !hasOrganizationId && !hasUserId;\n case ResourcePrimaryScope.ORGANIZATIONS:\n // applicationId is always required (tenant isolation); organizationId is the scope discriminator.\n return hasApplicationId && hasOrganizationId && !hasUserId;\n case ResourcePrimaryScope.USER_SELF:\n // Primary scopes are a SEPARATION OF CONCERN: USER_SELF and ORGANIZATIONS are\n // independent axes. A user's self-owned file is user-owned, NOT org-owned —\n // `userId` is the scope discriminator and `applicationId` is the tenant/bucket\n // anchor. `organizationId` MUST be absent (a present org would conflate the two\n // scopes). Fail closed on any org value.\n return hasApplicationId && hasUserId && !hasOrganizationId;\n default:\n return false;\n }\n}\n\n/\n File resource schema\n \n Stores file metadata and links files to resources.\n * Files are stored via app-managed storage providers (MinIO/S3, local directory, etc.),\n * this schema tracks metadata only.\n \n ## Storage Identity Convention\n * `storageProvider` + `storageRef` are the persisted routing truth used to\n * reach the active storage backend. `storageKey` remains framework metadata\n * that captures the file's derived scope path for bookkeeping, diagnostics,\n * and future storage contract evolution.\n \n `storageKey` includes scope path derived from primaryScope:\n * - APPLICATION: `app/{applicationId}/{fileId}`\n * - ORGANIZATIONS: `org/{organizationId}/{fileId}`\n * - USER_SELF: `user/{userId}/{fileId}` (owner is the user; no org segment)\n /\nconst FileSchemaBase = z.object({\n fileId: z.string().min(1).isPrimaryKey().isSummaryField(),\n\n // ========== File Metadata ==========\n // USER_CONTENT on both names. A filename is chosen by the person and routinely IS the personal\n // datum — \"scan-2026-medical.pdf\" discloses a special category before the file is opened. The\n // file's BYTES are not a field here (this resource is metadata over object storage), so this is the\n // only place the content axis can be declared at all.\n filename: z.string().min(1).isDBIndexed().isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n originalFilename: z.string().min(1).isSummaryField().dataCategories(PersonalDataCategory.USER_CONTENT),\n mimeType: z.string().min(1).isDBIndexed().isSummaryField(),\n size: z.number().min(0).isSummaryField(),\n extension: z.string().optional(),\n checksum: z.string().optional().isDBIndexed(),\n\n // ========== Storage ==========\n // `storageProvider` + `storageRef` are the persisted backend-routing truth.\n storageProvider: z.enum(FileStorageAccepted).optional().isDBIndexed(),\n storageRef: z.string().min(1).optional().isDBIndexed(),\n // `storageKey` is still scoped metadata, not the storage backend handle. It embeds the\n // file identity (`_id`, surfaced as the `fileId` virtual), so it is derived + persisted\n // AFTER the row is created (insert-first) — hence optional at create time. `createFile`\n // sets it once `_id` exists, and `linkFileToResource` re-derives it when the file's scope\n // is finalized.\n storageKey: z.string().min(1).optional().isDBIndexed(),\n url: z.url().optional(), // Cached URL (may be presigned)\n\n // ========== Status & Lifecycle ==========\n status: z.enum(FileStatus).default(FileStatus.PENDING).isDBIndexed().isSummaryField(),\n\n // ========== Nature-specific Metadata ==========\n // Inferred from MIME type or set by analysis services (F4-03)\n // Resolved display nature (IMAGE/VIDEO/AUDIO/DOCUMENT/GENERIC) — NOT the schema-level FileNature.\n // Set by resolveFileDisplayNature() during upload or inferred from MIME type in toMetadataResponse().\n // Schema declares FileNature (e.g., PDF, OFFICE), but the DB stores the resolved FileDisplayNature.\n nature: z.enum(FileDisplayNature).optional().isDBIndexed(),\n // Image-specific\n width: z.number().positive().optional(),\n height: z.number().positive().optional(),\n thumbnailUrl: z.url().optional(),\n // Video/Audio-specific (populated by IFileVideoAnalyzer / IFileAudioAnalyzer)\n duration: z.number().positive().optional(), // Duration in seconds\n // Document-specific (populated by IFileDocumentAnalyzer)\n pageCount: z.number().positive().optional(),\n\n // ========== Resource Linking ==========\n // When linked, scope is derived from parent resource's resourcePrimaryScope\n linkedResourceType: z.string().optional().isDBIndexed(),\n linkedResourceId: z.string().optional().isDBIndexed(),\n linkedFieldName: z.string().optional(),\n\n // ========== Primary Scope ==========\n // Derived from parent resource's resourcePrimaryScope when linking\n // Determines access control and storage path\n primaryScope: z.enum(FILE_PRIMARY_SCOPES).optional().isDBIndexed(),\n\n // ========== Scope Identifiers ==========\n // applicationId is ALWAYS set (from execution context at creation time) — it is the\n // top-level tenant isolation field present on every file record regardless of primaryScope.\n // organizationId and userId are populated only when the file's primaryScope requires them.\n\n applicationId: z.string().isDBIndexed(),\n\n // ORGANIZATIONS scope: org-scoped files. Set ONLY for ORGANIZATIONS-scoped files —\n // never for USER_SELF (the two scopes are independent axes, separation of concern).\n organizationId: z.string().optional().isDBIndexed(),\n\n // USER_SELF scope: user-private files owned by one user. Set ONLY for USER_SELF-scoped\n // files; the owner is the user (no org). `applicationId` is the tenant/bucket anchor.\n userId: z.string().optional().isDBIndexed(),\n\n // ========== Upload Metadata ==========\n // The uploader principal is persisted as a raw id + type pair only.\n // Any richer label/entity hydration is intentionally client-driven.\n uploadedBy: z.string().trim().min(1).optional().isDBIndexed(),\n uploadedByEntityType: z.enum(FileUploaderEntityType).optional().isDBIndexed(),\n\n // ========== Timestamps ==========\n uploadedAt: z.date().default(() => new Date()).isDBIndexed().isSummaryField().excludeFromCreate().excludeFromUpdate(),\n updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n deletedAt: z.date().optional().isDBIndexed().excludeFromCreate(),\n});\n\nexport const FileSchema = FileSchemaBase.superRefine((file, ctx) => {\n validateUploaderPair(file, ctx);\n\n if (!file.primaryScope) {\n // Pre-link state: applicationId is always present (set from execution context at upload time),\n // but organizationId/userId must not be set without a primaryScope discriminator.\n if (hasFileScopeIdentifierValue(file.organizationId) \|\| hasFileScopeIdentifierValue(file.userId)) {\n ctx.addIssue({\n code: 'custom',\n path: ['primaryScope'],\n message: 'primaryScope is required when organizationId or userId are present',\n });\n }\n return;\n }\n\n if (!validateFileScopeIdentifiers({\n primaryScope: file.primaryScope,\n applicationId: file.applicationId,\n organizationId: file.organizationId,\n userId: file.userId,\n })) {\n ctx.addIssue({\n code: 'custom',\n path: ['primaryScope'],\n message: 'File scope identifiers must match the declared primaryScope',\n });\n }\n\n});\nexport type File = z.infer<typeof FileSchema> & FileUploaderOwnership;\n\n/\n Scope identifiers for file access control.\n * Populated based on primaryScope when file is created/linked.\n /\nexport interface FileScopeIdentifiers {\n primaryScope: FilePrimaryScope;\n /* Always required — top-level tenant isolation key, set from execution context at file creation. */\n applicationId: string;\n organizationId?: string;\n userId?: string;\n}\n"]}

package/dist/esm/files/files.shared.utils.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"files.shared.utils.d.ts","sourceRoot":"","sources":["~~../../../~~src/files/files.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAEL,KAAK,IAAI,EACT,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,qBAAa,cAAc;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO;IAIrD;;;;;;;;OAQG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAiB5E;;;;;OAKG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,GAAG,IAAI;CAahE"}
1	+ {"version":3,"file":"files.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/files/files.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAEL,KAAK,IAAI,EACT,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,qBAAa,cAAc;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO;IAIrD;;;;;;;;OAQG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAiB5E;;;;;OAKG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,oBAAoB,GAAG,IAAI;CAahE"}

package/dist/esm/flows-actors/a2a-push-delivery-log.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"a2a-push-delivery-log.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/a2a-push-delivery-log.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EACL,qBAAqB,EAEtB,MAAM,gDAAgD,CAAC;AAuCxD,eAAO,MAAM,sCAAsC,uVA+KlD,CAAC"}
1	+ {"version":3,"file":"a2a-push-delivery-log.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/a2a-push-delivery-log.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EACL,qBAAqB,EAEtB,MAAM,gDAAgD,CAAC;AAuCxD,eAAO,MAAM,sCAAsC,uVA+KlD,CAAC"}

package/dist/esm/flows-actors/a2a-push-delivery-log.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"a2a-push-delivery-log.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/a2a-push-delivery-log.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAI1D;;;;;;;;;;;;GAYG;AACH,oBAAY,qBAAqB;IAC/B,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;iBAqFnC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,EAAE,4BAA4B,EAI1E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;;;;;kBAMnD,CAAC"}
1	+ {"version":3,"file":"a2a-push-delivery-log.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/a2a-push-delivery-log.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAI1D;;;;;;;;;;;;GAYG;AACH,oBAAY,qBAAqB;IAC/B,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;iBAqFnC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,EAAE,4BAA4B,EAI1E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;;;;;kBAMnD,CAAC"}

package/dist/esm/flows-actors/a2a-token-budget-state.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"a2a-token-budget-state.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/a2a-token-budget-state.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AA4BzG;;;;;;;;;GASG;AACH,eAAO,MAAM,uCAAuC,qPA8InD,CAAC"}
1	+ {"version":3,"file":"a2a-token-budget-state.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/a2a-token-budget-state.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AA4BzG;;;;;;;;;GASG;AACH,eAAO,MAAM,uCAAuC,qPA8InD,CAAC"}

package/dist/esm/flows-actors/a2a-token-budget-state.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"a2a-token-budget-state.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/a2a-token-budget-state.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAI1D,eAAO,MAAM,yBAAyB;;;;;;;iBAwBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,EAAE,4BAA4B,EAIzE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;;;kBAMpD,CAAC"}
1	+ {"version":3,"file":"a2a-token-budget-state.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/a2a-token-budget-state.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAI1D,eAAO,MAAM,yBAAyB;;;;;;;iBAwBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,EAAE,4BAA4B,EAIzE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;;;kBAMpD,CAAC"}

package/dist/esm/flows-actors/actors.shared.schemas.d.ts CHANGED Viewed

@@ -10,10 +10,28 @@ export declare enum Actor_Role_Category {
     HUMAN_IN_THE_LOOP = "human_in_the_loop",
     FLOW_EXECUTION = "flow_execution"
 }
+/**
+ * HOW an actor does its work when the runtime drives it.
+ *
+ * `PROGRAMMATIC` (added 2026-09-20, #1358) is the mode of an actor whose behaviour is supplied by the
+ * HOST as code rather than by an agent, a flow or a person: the execution driver opens the actor's
+ * task, hands the opened identities to a host-supplied executor, and settles on its outcome. An actor
+ * is not an agent — a methodology step run by the app-creation companion, or a deterministic check,
+ * is an actor with no model behind it, and until this member existed such an actor had to borrow
+ * `AGENTIC` without an `agentRef`, which is a lie the registry cannot see.
+ *
+ * `FLOW_EXECUTION` is a PLANNED member and stays (decided by Paul, 2026-09-21, #1363). The Flow
+ * execution model is not implemented yet — `FlowsBackendService.executeFlow` refuses honestly — and
+ * it is intended: an actor whose work is a declared flow is part of what this system is for. No
+ * driver dispatches on this member today, so a reader sweep reports zero; that is the state of the
+ * build, not a verdict on the member. Do not delete it, the Flow model, or `Actor_Role_Category`'s
+ * matching member on that measurement.
+ */
 export declare enum Actor_ExecutionMode {
     AGENTIC = "agentic",
     FLOW_EXECUTION = "flow_execution",
-    HUMAN_INTERACTION = "human_interaction"
+    HUMAN_INTERACTION = "human_interaction",
+    PROGRAMMATIC = "programmatic"
 }
 export declare const ActorSchema: z.ZodObject<{
     ref: z.ZodString;
@@ -53,62 +71,6 @@ export declare const ActorSystemSchema: z.ZodObject<{
             approverRoles: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("..").CORE_APP_ROLES>, z.ZodEnum<typeof import("..").CORE_ORG_ROLES>, z.ZodString]>>>;
         }, z.core.$strip>>;
         riskLevel: z.ZodEnum<typeof import("..").ResourceOperationRiskLevel>;
-        resilience: z.ZodOptional<z.ZodObject<{
-            circuitBreaker: z.ZodOptional<z.ZodObject<{
-                enabled: z.ZodBoolean;
-                failureThreshold: z.ZodNumber;
-                timeout: z.ZodNumber;
-                halfOpenRequests: z.ZodNumber;
-                errorFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                onOpen: z.ZodOptional<z.ZodObject<{
-                    eventType: z.ZodString;
-                    eventContext: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
-                    topic: z.ZodString;
-                    payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
-                }, z.core.$strip>>;
-                onClose: z.ZodOptional<z.ZodObject<{
-                    eventType: z.ZodString;
-                    eventContext: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
-                    topic: z.ZodString;
-                    payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
-                }, z.core.$strip>>;
-                onHalfOpen: z.ZodOptional<z.ZodObject<{
-                    eventType: z.ZodString;
-                    eventContext: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
-                    topic: z.ZodString;
-                    payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-            rateLimit: z.ZodOptional<z.ZodObject<{
-                enabled: z.ZodBoolean;
-                requestsPerSecond: z.ZodNumber;
-                burstSize: z.ZodNumber;
-                strategy: z.ZodEnum<{
-                    token_bucket: "token_bucket";
-                    sliding_window: "sliding_window";
-                    fixed_window: "fixed_window";
-                }>;
-                keyExtractor: z.ZodOptional<z.ZodString>;
-                onLimit: z.ZodOptional<z.ZodObject<{
-                    eventType: z.ZodString;
-                    eventContext: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
-                    topic: z.ZodString;
-                    payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-            bulkhead: z.ZodOptional<z.ZodObject<{
-                enabled: z.ZodBoolean;
-                maxConcurrent: z.ZodNumber;
-                maxQueued: z.ZodNumber;
-                queueTimeout: z.ZodOptional<z.ZodNumber>;
-                onReject: z.ZodOptional<z.ZodObject<{
-                    eventType: z.ZodString;
-                    eventContext: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
-                    topic: z.ZodString;
-                    payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
         dataClassification: z.ZodOptional<z.ZodEnum<typeof import("..").Compliance_DataClassification>>;
         redactionRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
             fieldPath: z.ZodString;
@@ -121,15 +83,6 @@ export declare const ActorSystemSchema: z.ZodObject<{
             autoDelete: z.ZodDefault<z.ZodBoolean>;
             archiveAfterDays: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
-        executionRestrictions: z.ZodOptional<z.ZodObject<{
-            maxConcurrentExecutions: z.ZodDefault<z.ZodNumber>;
-            maxExecutionDuration: z.ZodNumber;
-            budgetLimits: z.ZodOptional<z.ZodObject<{
-                maxTokens: z.ZodOptional<z.ZodNumber>;
-                maxCost: z.ZodOptional<z.ZodNumber>;
-                costPerExecution: z.ZodOptional<z.ZodNumber>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
     }, z.core.$strip>;
     version: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
@@ -151,6 +104,81 @@ export declare const ActorSystemSchema: z.ZodObject<{
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type ActorSystem = z.infer<typeof ActorSystemSchema>;
+/**
+ * The human decision an execution is WAITING on — present exactly while its status is
+ * `AWAITING_APPROVAL`, and cleared by the resume that answers it.
+ *
+ * Until #1360 three stores held this for three kinds of question (a checkpoint file for a mid-run
+ * clarification, another for an interrupted composite, a task's `output.suspension` for a parked
+ * coding question), projecting one `HumanDecision_Request` each — the payload was unified by #1269
+ * and the storage was left where it was on the premise that a playbook run had no execution row.
+ * #1343 removed that premise. The decision lives on the row the run already has.
+ */
+export declare const ActorExecution_SuspensionSchema: z.ZodObject<{
+    decision: z.ZodObject<{
+        decisionId: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodString;
+        fields: z.ZodArray<z.ZodObject<{
+            ref: z.ZodString;
+            question: z.ZodString;
+            kind: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_FieldKind>;
+            options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            why: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        options: z.ZodArray<z.ZodObject<{
+            ref: z.ZodString;
+            label: z.ZodString;
+            intent: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_ResponseIntent>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        requestedAt: z.ZodString;
+        expiresAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    suspendedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type ActorExecution_Suspension = z.infer<typeof ActorExecution_SuspensionSchema>;
+/**
+ * What a run left behind so that whatever runs next can CONTINUE it — the host's resume inputs.
+ *
+ * `context` is opaque to the engine, exactly as `FlowsActors_Checkpoint.context` is: the engine owns
+ * the slot and when it is written and read; the host that executes the work owns the content and
+ * validates it at its own boundary. Written while a run progresses (so a run whose process is taken
+ * away can be continued) and when a run suspends (so its resume can rebuild what it was doing).
+ *
+ * A checkpoint outliving its run is the ordinary signal of an INTERRUPTED run: the driver settles a
+ * run whose host died `ABORTED` at the next startup and leaves this in place, so "interrupted and
+ * resumable" is `ABORTED` with a checkpoint — a fact of the row, not a fourth status (#1360).
+ */
+export declare const ActorExecution_CheckpointSchema: z.ZodObject<{
+    context: z.ZodAny;
+    checkpointedAt: z.ZodISODateTime;
+    resumedSuspension: z.ZodOptional<z.ZodObject<{
+        decision: z.ZodObject<{
+            decisionId: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodString;
+            fields: z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                question: z.ZodString;
+                kind: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_FieldKind>;
+                options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                why: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            options: z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                label: z.ZodString;
+                intent: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_ResponseIntent>;
+                description: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            requestedAt: z.ZodString;
+            expiresAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        suspendedAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    interruptedContinuations: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type ActorExecution_Checkpoint = z.infer<typeof ActorExecution_CheckpointSchema>;
 export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
     _id: z.ZodOptional<z.ZodString>;
     systemRef: z.ZodString;
@@ -175,6 +203,58 @@ export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
     updatedAt: z.ZodString;
     finishedAt: z.ZodOptional<z.ZodString>;
     kind: z.ZodLiteral<FlowActorSystem_Kind.ACTOR>;
+    suspension: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        decision: z.ZodObject<{
+            decisionId: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodString;
+            fields: z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                question: z.ZodString;
+                kind: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_FieldKind>;
+                options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                why: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            options: z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                label: z.ZodString;
+                intent: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_ResponseIntent>;
+                description: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            requestedAt: z.ZodString;
+            expiresAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        suspendedAt: z.ZodISODateTime;
+    }, z.core.$strip>>>;
+    checkpoint: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        context: z.ZodAny;
+        checkpointedAt: z.ZodISODateTime;
+        resumedSuspension: z.ZodOptional<z.ZodObject<{
+            decision: z.ZodObject<{
+                decisionId: z.ZodString;
+                title: z.ZodString;
+                description: z.ZodString;
+                fields: z.ZodArray<z.ZodObject<{
+                    ref: z.ZodString;
+                    question: z.ZodString;
+                    kind: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_FieldKind>;
+                    options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    why: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                options: z.ZodArray<z.ZodObject<{
+                    ref: z.ZodString;
+                    label: z.ZodString;
+                    intent: z.ZodEnum<typeof import("./human-decision.shared.schemas").HumanDecision_ResponseIntent>;
+                    description: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                requestedAt: z.ZodString;
+                expiresAt: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            suspendedAt: z.ZodISODateTime;
+        }, z.core.$strip>>;
+        interruptedContinuations: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    exclusiveSubject: z.ZodOptional<z.ZodString>;
     plan: z.ZodOptional<z.ZodObject<{
         _id: z.ZodString;
         goalDescription: z.ZodString;
@@ -284,7 +364,6 @@ export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
             }, z.core.$strip>>;
         }, z.core.$strip>>;
         errorStates: z.ZodOptional<z.ZodObject<{
-            circuitBreakerStatus: z.ZodOptional<z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_CircuitBreaker_Status>>;
             errorItems: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 type: z.ZodEnum<typeof import("..").ErrorType>;
                 severity: z.ZodEnum<typeof import("..").ErrorSeverity>;
@@ -385,65 +464,12 @@ export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
         createdAt: z.ZodString;
         updatedAt: z.ZodString;
     }, z.core.$strip>>;
-    walkthrough: z.ZodOptional<z.ZodObject<{
-        _id: z.ZodString;
-        name: z.ZodString;
-        description: z.ZodString;
-        status: z.ZodEnum<typeof FlowsActors_Status>;
-        initiator: z.ZodObject<{
-            organizationId: z.ZodOptional<z.ZodString>;
-            userId: z.ZodOptional<z.ZodString>;
-            applicationId: z.ZodOptional<z.ZodString>;
-            machineCredential: z.ZodOptional<z.ZodObject<{
-                authMethod: z.ZodEnum<typeof import("..").MachineAuthMethod>;
-                credentialId: z.ZodString;
-            }, z.core.$strip>>;
-            consumableTokenId: z.ZodOptional<z.ZodString>;
-            webhookProviderId: z.ZodOptional<z.ZodString>;
-            anonymousUserId: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
-        relationships: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.FLOW>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            flowId: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.ACTOR>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            actorId: z.ZodString;
-            actorSystemId: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.FLOW_STEP>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            flowId: z.ZodString;
-            stepId: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.TASK>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            taskId: z.ZodString;
-            actorSystemId: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.PLAN>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            planId: z.ZodString;
-            actorSystemId: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.PLAN_STEP>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            planId: z.ZodString;
-            planStepId: z.ZodString;
-            actorSystemId: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            kind: z.ZodLiteral<import("./flows-actors.commons.shared.schemas").FlowsActors_ElementKind.ACTOR_SYSTEM>;
-            relation: z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_Relation>;
-            actorSystemId: z.ZodString;
-        }, z.core.$strip>], "kind">>;
-    }, z.core.$strip>>;
     standaloneTasks: z.ZodArray<z.ZodObject<{
         _id: z.ZodString;
         title: z.ZodString;
         description: z.ZodString;
-        topic: z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>;
-        status: z.ZodEnum<typeof FlowsActors_Status>;
+        topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>;
+        status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof FlowsActors_Status>>;
         initiator: z.ZodObject<{
             organizationId: z.ZodOptional<z.ZodString>;
             userId: z.ZodOptional<z.ZodString>;
@@ -547,11 +573,10 @@ export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
             }, z.core.$strip>;
         }, z.core.$strip>;
         context: z.ZodObject<{
-            journeyId: z.ZodOptional<z.ZodString>;
-            playbookRef: z.ZodOptional<z.ZodString>;
-            playbookVersion: z.ZodOptional<z.ZodString>;
-            playbookRunId: z.ZodOptional<z.ZodString>;
-            stepRef: z.ZodOptional<z.ZodString>;
+            correlation: z.ZodOptional<z.ZodObject<{
+                domain: z.ZodString;
+                refs: z.ZodRecord<z.ZodString, z.ZodString>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
         artifacts: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             ref: z.ZodString;
@@ -664,7 +689,6 @@ export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
             }, z.core.$strip>>;
         }, z.core.$strip>>;
         errorStates: z.ZodOptional<z.ZodObject<{
-            circuitBreakerStatus: z.ZodOptional<z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_CircuitBreaker_Status>>;
             errorItems: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 type: z.ZodEnum<typeof import("..").ErrorType>;
                 severity: z.ZodEnum<typeof import("..").ErrorSeverity>;
@@ -777,7 +801,6 @@ export declare const ActorSystem_ExecutionSchema: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     errorStates: z.ZodOptional<z.ZodObject<{
-        circuitBreakerStatus: z.ZodOptional<z.ZodEnum<typeof import("./flows-actors.commons.shared.schemas").FlowsActors_CircuitBreaker_Status>>;
         checkpointChecks: z.ZodArray<z.ZodObject<{
             checkpoint: z.ZodObject<{
                 point: z.ZodDiscriminatedUnion<[z.ZodObject<{