@wildo-ai/saas-models 1.1.4 → 1.1.6

package/dist/esm/organizations/organization-members.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-members.shared.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-members.shared.schemas.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,wBAKX;AALD,WAAY,wBAAwB;IAClC,+CAAmB,CAAA;IACnB,6CAAiB,CAAA;IACjB,iDAAqB,CAAA;IACrB,mDAAuB,CAAA;AACzB,CAAC,EALW,wBAAwB,KAAxB,wBAAwB,QAKnC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD;;;;;;;;;;;;;;OAcG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC/G;;;;;;;;;;;;;;;;;;;OAmBG;IACH,qGAAqG;IACrG,uGAAuG;IACvG,0FAA0F;IAC1F,EAAE;IACF,qGAAqG;IACrG,uGAAuG;IACvG,oGAAoG;IACpG,SAAS,EAAE,oBAAoB,CAC7B,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE;SAChG,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EACvD,aAAa,CAAC,MAAM,CACrB;IACD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG;;;;;;;;OAQG;IACH,wFAAwF;IACxF,gGAAgG;IAChG,+FAA+F;IAC/F,kGAAkG;IAClG,6EAA6E;IAC7E,qDAAqD;IACrD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE;IACpH;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;SACrC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC;SACxC,WAAW,EAAE;SACb,cAAc,EAAE;SAChB,iBAAiB,EAAE;SACnB,iBAAiB,EAAE;QACpB,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,yFAAyF;QACzF,sEAAsE;QACtE,8FAA8F;QAC9F,uFAAuF;QACvF,qDAAqD;SACpD,eAAe,EAAE;IACpB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,gGAAgG;IAChG,gGAAgG;IAChG,iGAAiG;IACjG,+DAA+D;IAC/D,uBAAuB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAClG,gGAAgG;IAChG,kGAAkG;IAClG,qGAAqG;IACrG,yEAAyE;IACzE,SAAS,EAAE,oBAAoB,CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SAC5D,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAClD,aAAa,CAAC,MAAM,CACrB;IACD;;;;;;;;;;;;;OAaG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACpF;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,cAAc,CAAC;QAC5B,UAAU,EAAE,QAAQ;QACpB,eAAe,EAAE,gBAAgB,CAAC,aAAa;QAC/C,gBAAgB,EAAE,QAAQ;QAC1B,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;QACjC,aAAa,EAAE,WAAW;KAC3B,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC9G,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CAC/G,CAAC,CAAC,cAAc,CAAC;IAChB,QAAQ;IACR,gBAAgB;CACjB,CAAC,CAAC","sourcesContent":["\n/**\n * Organization Member Shared Schemas\n * \n * Junction entity between users and organizations with roles and permissions\n */\n\nimport { z } from 'zod';\n\nimport { CORE_ORG_ROLES, OrgRolesSchema } from '../security/authorizations/roles.shared.schemas';\nimport { forwardedLabel } from '../resources/resources.shared.schemas';\nimport { CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport { addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\n\n/**\n * Organization member lifecycle status.\n *\n * A membership row IS the invitation — there is no separate invitation\n * collection. `INVITED` is the pending-membership state; acceptance flips it to\n * `ACTIVE` on the SAME row (stable `_id`, so the emailed accept-link token never\n * orphans). SSO JIT / SCIM provisioning find-or-activate an existing `INVITED`\n * row rather than blind-creating a second `ACTIVE` one.\n *\n * - `INVITED`  — membership extended, invitee has not yet accepted. Paired with a\n *   `User` in `PENDING_INVITATION` status when the invitee has no account yet.\n * - `ACTIVE`   — accepted / directly provisioned membership.\n * - `INACTIVE` — deactivated (e.g. SCIM deprovision).\n * - `SUSPENDED` — temporarily suspended (optionally time-boxed).\n *\n * Invite OUTCOMES (declined / revoked / expired) are NOT statuses — the row is\n * deleted and the event recorded in the audit trail (keeps this enum about\n * membership, not invitation bookkeeping).\n */\nexport enum OrganizationMemberStatus {\n  INVITED = 'INVITED',\n  ACTIVE = 'ACTIVE',\n  INACTIVE = 'INACTIVE',\n  SUSPENDED = 'SUSPENDED'\n}\n\nexport const OrganizationMemberSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  /**\n   * FK to the member `User`. ALWAYS present on a persisted row (a membership with\n   * no member is meaningless) — even an `INVITED` invitee has an eagerly-created\n   * `User` in `PENDING_INVITATION` status, so this FK is never null.\n   *\n   * SERVER-INJECTED on create (`.excludeFromCreate()`), via one of two paths:\n   *   - Invite (org-admin CREATE): the admin supplies {@link userEmail} instead;\n   *     the CREATE prefix find-or-creates the user by normalized email and injects\n   *     the resolved `_id` here (email is the strict unique identity anchor — see\n   *     `User.email.isUnique()`).\n   *   - System provisioning (invite-acceptance / SSO JIT / SCIM): passes `userId`\n   *     directly through `createAsSystem`, which re-attaches this context FK past\n   *     the strict-DTO strip.\n   * `.excludeFromUpdate()` keeps the member↔user binding immutable.\n   */\n  userId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromCreate().excludeFromUpdate(),\n  /**\n   * The linked user's email — DUAL ROLE:\n   *\n   *   1. INVITE CREATE INPUT. On the org-admin invite CREATE the admin supplies\n   *      an email (not a `userId`); the CREATE prefix normalizes it, find-or-creates\n   *      the `User` by it (unique identity anchor), and derives {@link userId}. This\n   *      is why the field is client-writable on CREATE (no `.excludeFromCreate()`).\n   *   2. DENORMALIZED IMMUTABLE COPY. After creation it is the immutable mirror of\n   *      `USERS.email` (which is `.excludeFromUpdate()`, so this copy never drifts).\n   *      It feeds member SEARCH (`searchableFields: ['userEmail']` — no async hop)\n   *      and the {@link instanceLabel} fallback when the related profile/name is\n   *      unavailable (e.g. a `PENDING_INVITATION` invitee has no `USER_PROFILE` yet).\n   *\n   * For system creates (SSO/SCIM/acceptance) that pass `userId` instead of an\n   * email, the CREATE prefix DERIVES this value from the authoritative user record,\n   * so it is `.optional()` at the input boundary. `.excludeFromUpdate()` keeps it\n   * immutable post-creation. `.isHidden({ display: true })` keeps it out of\n   * auto-rendered display cards/columns (the user-facing email is surfaced by\n   * resolving the `userId` reference) — it still renders on the CREATE form.\n   */\n  // REMOVE on erasure. A denormalized copy of the person's email, held here so a membership row can be\n  // read without resolving the user — which is exactly what makes it personal data this row HOLDS rather\n  // than a link it carries. Clearable (`.optional()`), so REMOVE resolves to a removed key.\n  //\n  // `roles` beside it is deliberately NOT scrubbed: it is this application's authorization vocabulary,\n  // not personal data, and emptying it could strand a tenant with no administrator — the interaction the\n  // administrative-continuity floors exist to refuse. Keeping it means that interaction never arises.\n  userEmail: addImpersonalizeWith(\n    z.email().optional().isDBIndexed().isSummaryField().isHidden({ display: true }).excludeFromUpdate()\n      .dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n    RedactionType.REMOVE,\n  ),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  /*\n   * `organizationUnitsMembership` (an embedded `[{ organizationUnitId, role }]` array) was REMOVED\n   * here on 2026-07-31 and promoted to the `ORGANIZATION_UNIT_MEMBERS` junction resource\n   * (plan decision D-B5). The array could not be queried portably — a dot-path filter into an\n   * array field resolves to NULL on PostgreSQL and the LIST summary projection strips the field —\n   * so every \"who is assigned to this unit?\" question failed OPEN, it could not carry a registered\n   * relationship (no cascade), and it admitted two conflicting roles for the same unit. Read unit\n   * assignments through `ORGANIZATION_UNIT_MEMBERS` filtered by `organizationMemberId`.\n   */\n  // `.isAuditEvidence()` — this member's authority INSIDE the organization. Roles are the\n  // framework's single authorization axis, so a change here is an access-control decision and the\n  // before/after sets ARE the evidence: a trail that records only \"roles changed\" proves nothing\n  // about what authority resulted. Safe to record in full — a role name is vocabulary, not personal\n  // data, so it carries no erasure obligation into the immutable audit ledger.\n  // assurance-control: WILDO.ACCESS.PRIVILEGE_EVIDENCE\n  roles: z.array(OrgRolesSchema).default([CORE_ORG_ROLES.ORG_MEMBER]).isDBIndexed().isSummaryField().isAuditEvidence(),\n  /**\n   * Server-owned lifecycle state. Default `ACTIVE` covers direct/system\n   * provisioning (SSO JIT / SCIM / self-registration org-owner grant), while\n   * the org-admin invite CREATE prefix forces `INVITED`.\n   *\n   * Neither CREATE nor generic UPDATE may accept this field from a client:\n   * lifecycle transitions carry security side effects that a field update\n   * cannot reproduce. In particular, invitation acceptance must validate and\n   * consume the invitation token, grant the derived user type, and serialize\n   * against revocation; suspension/reactivation likewise have dedicated\n   * operations. Keeping status out of both DTOs makes those trusted transition\n   * operations the only way to change it.\n   */\n  status: z.enum(OrganizationMemberStatus)\n    .default(OrganizationMemberStatus.ACTIVE)\n    .isDBIndexed()\n    .isSummaryField()\n    .excludeFromCreate()\n    .excludeFromUpdate()\n    // Lifecycle state gates access as surely as roles do — a SUSPENDED member is denied, an ACTIVE\n    // one is not — so a suspension or reactivation is an authorization event and its before/after\n    // values are the evidence. The enum's values are closed vocabulary, never personal data, so\n    // recording them carries no GDPR Art. 17 obligation into the immutable ledger — the same\n    // reasoning `UserSchema.status` records. Without this the framework's\n    // `RESOURCE_OPERATION_PERFORMED` event notes only that `status` was among the changed fields,\n    // never what it changed FROM or TO, which is the half an access review actually reads.\n    // assurance-control: WILDO.ACCESS.PRIVILEGE_EVIDENCE\n    .isAuditEvidence(),\n  /**\n   * When an automated sweep must return this membership to `ACTIVE`.\n   *\n   * Set by SUSPEND when the caller time-boxes the suspension (`suspensionEndDate` in that verb's\n   * request contract), cleared by REACTIVATE. Absent means the suspension is indefinite and only a\n   * deliberate REACTIVATE lifts it — which is the default, since an unbounded suspension is the\n   * safer reading of \"suspend\".\n   *\n   * NAMED FOR THE EFFECT, NOT THE CAUSE. `scheduledReactivationAt` says what the system will do;\n   * a `suspensionEndsAt` would describe only the suspension branch while the identical field on\n   * `USERS` also serves self-service deactivation. One concept, one name across both resources,\n   * so the reactivation sweep reads the same field everywhere. The request contracts keep their\n   * own caller-facing vocabulary and the transition hook translates — the same split\n   * `ORGANIZATION_UNITS` MOVE uses (`newParentUnitId` in, `parentUnitId` + `path` persisted).\n   *\n   * Server-owned on both sides (`.excludeFromCreate().excludeFromUpdate()`): only the transition\n   * operations write it, exactly as for {@link status} above. Indexed because the sweep's whole\n   * query is \"rows whose scheduled reactivation has passed\".\n   *\n   * ⚠️ A value here is a PROMISE the framework keeps: the reactivation batch is what makes it\n   * true. Persisting the date without that sweep would be the same defect as a verb that answers\n   * success and writes nothing — an authored intention nothing honors.\n   */\n  // Deliberately NOT `.isAuditEvidence()`. The rationale that briefly sat here — \"lifecycle state\n  // gates access as surely as roles do\" — is true of {@link status}, which is where it now lives.\n  // This field decides nothing about what the principal may do; it is a scheduling detail, and the\n  // transition's audit row already records the resulting status.\n  scheduledReactivationAt: z.date().optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  // The person's role in the customer's organization — their working life, not this application's\n  // authorization model (`roles` is that, and it is a closed vocabulary rather than personal data).\n  // REMOVE on erasure — the person's role in the customer's organization is a fact about their working\n  // life, which is why it carries PROFESSIONAL. Clearable (`.optional()`).\n  userTitle: addImpersonalizeWith(\n    z.string().max(100).optional().isDBIndexed().isSummaryField()\n    .dataCategories(PersonalDataCategory.PROFESSIONAL),\n    RedactionType.REMOVE,\n  ),\n  /**\n   * The `User._id` of the org admin who issued the invite. Server-set by the invite\n   * CREATE prefix from the execution-context actor; absent on direct/system\n   * provisioning. Immutable. Feeds the audit trail and the user-facing \"invited by\"\n   * cue in the pending-invitations inbox.\n   *\n   * PROVENANCE STAMP, NOT a navigable FK — deliberately a plain indexed string (same\n   * idiom as `scim-tokens.createdByUserId`), NOT `.isForeignKey()`. The primary\n   * member↔user link is `userId` (registered M2M relationship); adding `.isForeignKey()`\n   * here would demand a SECOND `ORGANIZATION_MEMBERS → USERS` relationship (else the\n   * registry warns \"cannot be resolved to a resource type\") and would graft nested-route /\n   * parent-scope machinery onto a field that only records who clicked \"invite\". Resolve\n   * the inviter's display name with a bounded lookup at render time if the cue needs it.\n   */\n  invitedByUserId: z.string().min(1).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  /**\n   * When the invite was issued. Server-set by the invite CREATE prefix; absent on\n   * direct/system provisioning. Immutable. Used by the inbox ordering and the\n   * expiry-reap CRON batch.\n   */\n  invitedAt: z.date().optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  /**\n   * Computed instance label — the linked user's name, forwarded live from\n   * `USER_PROFILES`. A junction row has no inherent name; its identity is the\n   * related party. {@link forwardedLabel} resolves it SERVER-SIDE at read time\n   * (joining `userId` → `USER_PROFILES.userId`, rendering `firstName lastName`)\n   * and projects it onto the summary/read DTO via the virtual-field pipeline, so\n   * the frontend label is a plain field ref (`getFrontendResourceLabel:\n   * ['instanceLabel']`). Never stale (read live), never denormalized, tenant-safe\n   * (a bounded system read over the userIds already on the org-scoped page). NOT\n   * persisted (virtual). When the profile/name is unavailable it falls back to the\n   * immutable {@link userEmail} (`fallbackField`) rather than a raw id.\n   */\n  instanceLabel: forwardedLabel({\n    localField: 'userId',\n    relatedResource: CoreResourceType.USER_PROFILES,\n    relatedJoinField: 'userId',\n    fields: ['firstName', 'lastName'],\n    fallbackField: 'userEmail',\n  }),\n  createdAt: z.date().default(() => new Date()).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n}).businessKeySet([\n  'userId',\n  'organizationId',\n]);\nexport type OrganizationMember = z.infer<typeof OrganizationMemberSchema>;\n"]}
+{"version":3,"file":"organization-members.shared.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-members.shared.schemas.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,wBAKX;AALD,WAAY,wBAAwB;IAClC,+CAAmB,CAAA;IACnB,6CAAiB,CAAA;IACjB,iDAAqB,CAAA;IACrB,mDAAuB,CAAA;AACzB,CAAC,EALW,wBAAwB,KAAxB,wBAAwB,QAKnC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD;;;;;;;;;;;;;;OAcG;IACH,gGAAgG;IAChG,gGAAgG;IAChG,4FAA4F;IAC5F,wFAAwF;IACxF,+FAA+F;IAC/F,gGAAgG;IAChG,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;SAC5G,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,qGAAqG;IACrG,uGAAuG;IACvG,0FAA0F;IAC1F,EAAE;IACF,qGAAqG;IACrG,uGAAuG;IACvG,oGAAoG;IACpG,SAAS,EAAE,oBAAoB,CAC7B,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE;SAChG,cAAc,CAAC,oBAAoB,CAAC,eAAe,CAAC,EACvD,aAAa,CAAC,MAAM,CACrB;IACD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACnG;;;;;;;;OAQG;IACH,wFAAwF;IACxF,gGAAgG;IAChG,+FAA+F;IAC/F,kGAAkG;IAClG,6EAA6E;IAC7E,qDAAqD;IACrD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE;IACpH;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;SACrC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC;SACxC,WAAW,EAAE;SACb,cAAc,EAAE;SAChB,iBAAiB,EAAE;SACnB,iBAAiB,EAAE;QACpB,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,yFAAyF;QACzF,sEAAsE;QACtE,8FAA8F;QAC9F,uFAAuF;QACvF,qDAAqD;SACpD,eAAe,EAAE;IACpB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,gGAAgG;IAChG,gGAAgG;IAChG,iGAAiG;IACjG,+DAA+D;IAC/D,uBAAuB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAClG,gGAAgG;IAChG,kGAAkG;IAClG,qGAAqG;IACrG,yEAAyE;IACzE,SAAS,EAAE,oBAAoB,CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SAC5D,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EAClD,aAAa,CAAC,MAAM,CACrB;IACD;;;;;;;;;;;;;OAaG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACpF;;;;;;;;;;;;;;OAcG;IACH,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SACvF,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,eAAe,EAAE;IAC5D;;;;OAIG;IACH,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;SAChF,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,eAAe,EAAE;IAC5D;;;;OAIG;IACH,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACjH;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,cAAc,CAAC;QAC5B,UAAU,EAAE,QAAQ;QACpB,eAAe,EAAE,gBAAgB,CAAC,aAAa;QAC/C,gBAAgB,EAAE,QAAQ;QAC1B,MAAM,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;QACjC,aAAa,EAAE,WAAW;KAC3B,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC9G,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CAC/G,CAAC,CAAC,cAAc,CAAC;IAChB,QAAQ;IACR,gBAAgB;CACjB,CAAC,CAAC","sourcesContent":["\n/**\n * Organization Member Shared Schemas\n * \n * Junction entity between users and organizations with roles and permissions\n */\n\nimport { z } from 'zod';\n\nimport { CORE_ORG_ROLES, OrgRolesSchema } from '../security/authorizations/roles.shared.schemas';\nimport { forwardedLabel } from '../resources/resources.shared.schemas';\nimport { CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport { addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\n\n/**\n * Organization member lifecycle status.\n *\n * A membership row IS the invitation — there is no separate invitation\n * collection. `INVITED` is the pending-membership state; acceptance flips it to\n * `ACTIVE` on the SAME row (stable `_id`, so the emailed accept-link token never\n * orphans). SSO JIT / SCIM provisioning find-or-activate an existing `INVITED`\n * row rather than blind-creating a second `ACTIVE` one.\n *\n * - `INVITED`  — membership extended, invitee has not yet accepted. Paired with a\n *   `User` in `PENDING_INVITATION` status when the invitee has no account yet.\n * - `ACTIVE`   — accepted / directly provisioned membership.\n * - `INACTIVE` — deactivated (e.g. SCIM deprovision).\n * - `SUSPENDED` — temporarily suspended (optionally time-boxed).\n *\n * Invite OUTCOMES (declined / revoked / expired) are NOT statuses — the row is\n * deleted and the event recorded in the audit trail (keeps this enum about\n * membership, not invitation bookkeeping).\n */\nexport enum OrganizationMemberStatus {\n  INVITED = 'INVITED',\n  ACTIVE = 'ACTIVE',\n  INACTIVE = 'INACTIVE',\n  SUSPENDED = 'SUSPENDED'\n}\n\nexport const OrganizationMemberSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  /**\n   * FK to the member `User`. ALWAYS present on a persisted row (a membership with\n   * no member is meaningless) — even an `INVITED` invitee has an eagerly-created\n   * `User` in `PENDING_INVITATION` status, so this FK is never null.\n   *\n   * SERVER-INJECTED on create (`.excludeFromCreate()`), via one of two paths:\n   *   - Invite (org-admin CREATE): the admin supplies {@link userEmail} instead;\n   *     the CREATE prefix find-or-creates the user by normalized email and injects\n   *     the resolved `_id` here (email is the strict unique identity anchor — see\n   *     `User.email.isUnique()`).\n   *   - System provisioning (invite-acceptance / SSO JIT / SCIM): passes `userId`\n   *     directly through `createAsSystem`, which re-attaches this context FK past\n   *     the strict-DTO strip.\n   * `.excludeFromUpdate()` keeps the member↔user binding immutable.\n   */\n  // `labelFallbackField` names the readable copy this row already carries, for when the reference\n  // cannot be resolved. `userEmail` below is `.isHidden({ display: true })` on the stated grounds\n  // that \"the user-facing email is surfaced by resolving the `userId` reference\" — and for an\n  // INVITED person that resolution has nothing to build a label from, because there is no\n  // `USER_PROFILE` yet. Measured 2026-09-19 on the member directory: three of four rows rendered\n  // `6aaba6b3a2d3b6b0ad61f33e`, the fourth (a real user) rendered their name. The copy was on the\n  // row the whole time; nothing was reaching for it.\n  userId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromCreate().excludeFromUpdate()\n    .foreignKeyUI({ display: { labelFallbackField: 'userEmail' } }),\n  /**\n   * The linked user's email — DUAL ROLE:\n   *\n   *   1. INVITE CREATE INPUT. On the org-admin invite CREATE the admin supplies\n   *      an email (not a `userId`); the CREATE prefix normalizes it, find-or-creates\n   *      the `User` by it (unique identity anchor), and derives {@link userId}. This\n   *      is why the field is client-writable on CREATE (no `.excludeFromCreate()`).\n   *   2. DENORMALIZED IMMUTABLE COPY. After creation it is the immutable mirror of\n   *      `USERS.email` (which is `.excludeFromUpdate()`, so this copy never drifts).\n   *      It feeds member SEARCH (`searchableFields: ['userEmail']` — no async hop)\n   *      and the {@link instanceLabel} fallback when the related profile/name is\n   *      unavailable (e.g. a `PENDING_INVITATION` invitee has no `USER_PROFILE` yet).\n   *\n   * For system creates (SSO/SCIM/acceptance) that pass `userId` instead of an\n   * email, the CREATE prefix DERIVES this value from the authoritative user record,\n   * so it is `.optional()` at the input boundary. `.excludeFromUpdate()` keeps it\n   * immutable post-creation. `.isHidden({ display: true })` keeps it out of\n   * auto-rendered display cards/columns (the user-facing email is surfaced by\n   * resolving the `userId` reference) — it still renders on the CREATE form.\n   */\n  // REMOVE on erasure. A denormalized copy of the person's email, held here so a membership row can be\n  // read without resolving the user — which is exactly what makes it personal data this row HOLDS rather\n  // than a link it carries. Clearable (`.optional()`), so REMOVE resolves to a removed key.\n  //\n  // `roles` beside it is deliberately NOT scrubbed: it is this application's authorization vocabulary,\n  // not personal data, and emptying it could strand a tenant with no administrator — the interaction the\n  // administrative-continuity floors exist to refuse. Keeping it means that interaction never arises.\n  userEmail: addImpersonalizeWith(\n    z.email().optional().isDBIndexed().isSummaryField().isHidden({ display: true }).excludeFromUpdate()\n      .dataCategories(PersonalDataCategory.CONTACT_DETAILS),\n    RedactionType.REMOVE,\n  ),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  /*\n   * `organizationUnitsMembership` (an embedded `[{ organizationUnitId, role }]` array) was REMOVED\n   * here on 2026-07-31 and promoted to the `ORGANIZATION_UNIT_MEMBERS` junction resource\n   * (plan decision D-B5). The array could not be queried portably — a dot-path filter into an\n   * array field resolves to NULL on PostgreSQL and the LIST summary projection strips the field —\n   * so every \"who is assigned to this unit?\" question failed OPEN, it could not carry a registered\n   * relationship (no cascade), and it admitted two conflicting roles for the same unit. Read unit\n   * assignments through `ORGANIZATION_UNIT_MEMBERS` filtered by `organizationMemberId`.\n   */\n  // `.isAuditEvidence()` — this member's authority INSIDE the organization. Roles are the\n  // framework's single authorization axis, so a change here is an access-control decision and the\n  // before/after sets ARE the evidence: a trail that records only \"roles changed\" proves nothing\n  // about what authority resulted. Safe to record in full — a role name is vocabulary, not personal\n  // data, so it carries no erasure obligation into the immutable audit ledger.\n  // assurance-control: WILDO.ACCESS.PRIVILEGE_EVIDENCE\n  roles: z.array(OrgRolesSchema).default([CORE_ORG_ROLES.ORG_MEMBER]).isDBIndexed().isSummaryField().isAuditEvidence(),\n  /**\n   * Server-owned lifecycle state. Default `ACTIVE` covers direct/system\n   * provisioning (SSO JIT / SCIM / self-registration org-owner grant), while\n   * the org-admin invite CREATE prefix forces `INVITED`.\n   *\n   * Neither CREATE nor generic UPDATE may accept this field from a client:\n   * lifecycle transitions carry security side effects that a field update\n   * cannot reproduce. In particular, invitation acceptance must validate and\n   * consume the invitation token, grant the derived user type, and serialize\n   * against revocation; suspension/reactivation likewise have dedicated\n   * operations. Keeping status out of both DTOs makes those trusted transition\n   * operations the only way to change it.\n   */\n  status: z.enum(OrganizationMemberStatus)\n    .default(OrganizationMemberStatus.ACTIVE)\n    .isDBIndexed()\n    .isSummaryField()\n    .excludeFromCreate()\n    .excludeFromUpdate()\n    // Lifecycle state gates access as surely as roles do — a SUSPENDED member is denied, an ACTIVE\n    // one is not — so a suspension or reactivation is an authorization event and its before/after\n    // values are the evidence. The enum's values are closed vocabulary, never personal data, so\n    // recording them carries no GDPR Art. 17 obligation into the immutable ledger — the same\n    // reasoning `UserSchema.status` records. Without this the framework's\n    // `RESOURCE_OPERATION_PERFORMED` event notes only that `status` was among the changed fields,\n    // never what it changed FROM or TO, which is the half an access review actually reads.\n    // assurance-control: WILDO.ACCESS.PRIVILEGE_EVIDENCE\n    .isAuditEvidence(),\n  /**\n   * When an automated sweep must return this membership to `ACTIVE`.\n   *\n   * Set by SUSPEND when the caller time-boxes the suspension (`suspensionEndDate` in that verb's\n   * request contract), cleared by REACTIVATE. Absent means the suspension is indefinite and only a\n   * deliberate REACTIVATE lifts it — which is the default, since an unbounded suspension is the\n   * safer reading of \"suspend\".\n   *\n   * NAMED FOR THE EFFECT, NOT THE CAUSE. `scheduledReactivationAt` says what the system will do;\n   * a `suspensionEndsAt` would describe only the suspension branch while the identical field on\n   * `USERS` also serves self-service deactivation. One concept, one name across both resources,\n   * so the reactivation sweep reads the same field everywhere. The request contracts keep their\n   * own caller-facing vocabulary and the transition hook translates — the same split\n   * `ORGANIZATION_UNITS` MOVE uses (`newParentUnitId` in, `parentUnitId` + `path` persisted).\n   *\n   * Server-owned on both sides (`.excludeFromCreate().excludeFromUpdate()`): only the transition\n   * operations write it, exactly as for {@link status} above. Indexed because the sweep's whole\n   * query is \"rows whose scheduled reactivation has passed\".\n   *\n   * ⚠️ A value here is a PROMISE the framework keeps: the reactivation batch is what makes it\n   * true. Persisting the date without that sweep would be the same defect as a verb that answers\n   * success and writes nothing — an authored intention nothing honors.\n   */\n  // Deliberately NOT `.isAuditEvidence()`. The rationale that briefly sat here — \"lifecycle state\n  // gates access as surely as roles do\" — is true of {@link status}, which is where it now lives.\n  // This field decides nothing about what the principal may do; it is a scheduling detail, and the\n  // transition's audit row already records the resulting status.\n  scheduledReactivationAt: z.date().optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  // The person's role in the customer's organization — their working life, not this application's\n  // authorization model (`roles` is that, and it is a closed vocabulary rather than personal data).\n  // REMOVE on erasure — the person's role in the customer's organization is a fact about their working\n  // life, which is why it carries PROFESSIONAL. Clearable (`.optional()`).\n  userTitle: addImpersonalizeWith(\n    z.string().max(100).optional().isDBIndexed().isSummaryField()\n    .dataCategories(PersonalDataCategory.PROFESSIONAL),\n    RedactionType.REMOVE,\n  ),\n  /**\n   * The `User._id` of the org admin who issued the invite. Server-set by the invite\n   * CREATE prefix from the execution-context actor; absent on direct/system\n   * provisioning. Immutable. Feeds the audit trail and the user-facing \"invited by\"\n   * cue in the pending-invitations inbox.\n   *\n   * PROVENANCE STAMP, NOT a navigable FK — deliberately a plain indexed string (same\n   * idiom as `scim-tokens.createdByUserId`), NOT `.isForeignKey()`. The primary\n   * member↔user link is `userId` (registered M2M relationship); adding `.isForeignKey()`\n   * here would demand a SECOND `ORGANIZATION_MEMBERS → USERS` relationship (else the\n   * registry warns \"cannot be resolved to a resource type\") and would graft nested-route /\n   * parent-scope machinery onto a field that only records who clicked \"invite\". Resolve\n   * the inviter's display name with a bounded lookup at render time if the cue needs it.\n   */\n  invitedByUserId: z.string().min(1).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  /**\n   * When the invite was issued. Server-set by the invite CREATE prefix; absent on\n   * direct/system provisioning. Immutable. Used by the inbox ordering and the\n   * expiry-reap CRON batch.\n   */\n  invitedAt: z.date().optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  /**\n   * Present ⇒ this is a PROVIDER membership: held by an expert of a service firm through the client\n   * organization's `SERVICE_PROVIDER_RELATIONSHIPS` row with this id, not by one of the organization's\n   * own members (#1597). Test it with `isServiceProviderMembership`, never by hand.\n   *\n   * It changes what the row means everywhere the framework reads memberships: it confers authority ONLY\n   * while the relationship passes the execution-context live filter; its `roles` are owned by the\n   * relationship (generic UPDATE refuses them); it never counts toward the owner floor and cannot receive\n   * ownership; it grants no user type; it is not part of the client's SCIM directory.\n   *\n   * System-written only — by the firm's assignment verb, which also re-points it when a row left by an\n   * earlier relationship is reactivated. Indexed: \"who serves under this relationship\" is a query by it.\n   * Not a foreign key edge on purpose: the live filter reads the relationship by id, and a navigable edge\n   * would add nested routes onto a membership nobody needs to reach that way.\n   */\n  serviceProviderRelationshipId: z.string().min(1).optional().isDBIndexed().isSummaryField()\n    .excludeFromCreate().excludeFromUpdate().isAuditEvidence(),\n  /**\n   * The firm whose expert holds this provider membership. A plain id: it names another tenant. The live\n   * filter requires the member to hold an ACTIVE, ordinary membership there, in an organization that\n   * still confers authority.\n   */\n  providerOrganizationId: z.string().min(1).optional().isDBIndexed().isSummaryField()\n    .excludeFromCreate().excludeFromUpdate().isAuditEvidence(),\n  /**\n   * The firm's name as its relationship recorded it — what a client's directory shows as \"via {Firm}\".\n   * A snapshot copied from the relationship at assignment, because a client can never read the firm's\n   * organization row (#1597).\n   */\n  providerOrganizationName: z.string().max(200).optional().isSummaryField().excludeFromCreate().excludeFromUpdate(),\n  /**\n   * Computed instance label — the linked user's name, forwarded live from\n   * `USER_PROFILES`. A junction row has no inherent name; its identity is the\n   * related party. {@link forwardedLabel} resolves it SERVER-SIDE at read time\n   * (joining `userId` → `USER_PROFILES.userId`, rendering `firstName lastName`)\n   * and projects it onto the summary/read DTO via the virtual-field pipeline, so\n   * the frontend label is a plain field ref (`getFrontendResourceLabel:\n   * ['instanceLabel']`). Never stale (read live), never denormalized, tenant-safe\n   * (a bounded system read over the userIds already on the org-scoped page). NOT\n   * persisted (virtual). When the profile/name is unavailable it falls back to the\n   * immutable {@link userEmail} (`fallbackField`) rather than a raw id.\n   */\n  instanceLabel: forwardedLabel({\n    localField: 'userId',\n    relatedResource: CoreResourceType.USER_PROFILES,\n    relatedJoinField: 'userId',\n    fields: ['firstName', 'lastName'],\n    fallbackField: 'userEmail',\n  }),\n  createdAt: z.date().default(() => new Date()).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n}).businessKeySet([\n  'userId',\n  'organizationId',\n]);\nexport type OrganizationMember = z.infer<typeof OrganizationMemberSchema>;\n"]}

package/dist/esm/organizations/organization-notifications.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-notifications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-notifications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAoD,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAS/H,KAAK,uCAAuC,GACxC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,oEAAoE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;kBAmGjI,CAAC"}
+{"version":3,"file":"organization-notifications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-notifications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAoD,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAS/H,KAAK,uCAAuC,GACxC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,oEAAoE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;kBAmGjI,CAAC"}

package/dist/esm/organizations/organization-notifications.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-notifications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-notifications.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;iBAiC/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;iBAoB1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}
+{"version":3,"file":"organization-notifications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-notifications.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;iBAiC/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;iBAoB1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/esm/organizations/organization-notifications.shared.schemas.js

@@ -33,19 +33,19 @@ export const OrganizationEmailNotificationsSchema = z.object({
      * An address REPLACES the member fan-out rather than adding to it: a tenant routing security mail
      * to a SOC address is saying where it goes, not asking for a copy.
      */
-    defaultEmailAddress: z.email().optional().isSummaryField(),
-    billingAddress: z.email().optional(),
-    securityAddress: z.email().optional(),
-    administrativeAddress: z.email().optional(),
-    usersManagementAddress: z.email().optional(),
+    defaultEmailAddress: z.email().optional().isSummaryField().describe("Email address that receives the notification emails addressed to the organization itself, and those of a category (billing, security, administrative, user management) that has no address of its own. When set, these emails go to this address instead of to the members who would otherwise receive them. Emails meant for every member are always sent to each member."),
+    billingAddress: z.email().optional().describe("Email address that receives the organization's billing notification emails instead of its members; when unset, `defaultEmailAddress` is used. It is also given to the payment provider as the customer email when the organization's billing account is created."),
+    securityAddress: z.email().optional().describe("Email address that receives the organization's security notification emails instead of its members; when unset, `defaultEmailAddress` is used."),
+    administrativeAddress: z.email().optional().describe("Email address that receives the organization's administrative notification emails instead of its members; when unset, `defaultEmailAddress` is used."),
+    usersManagementAddress: z.email().optional().describe("Email address that receives the organization's user-management notification emails instead of its members; when unset, `defaultEmailAddress` is used."),
     /**
      * Category opt-ins. A `false` SUPPRESSES that category entirely — for the members too, not only
      * for the routing address — because a tenant turning billing notifications off means it.
      */
-    billing: z.boolean().default(true),
-    administrative: z.boolean().default(true),
-    security: z.boolean().default(true),
-    usersManagement: z.boolean().default(true),
+    billing: z.boolean().default(true).describe("When false, the organization's billing notification emails are not sent at all, neither to `billingAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true."),
+    administrative: z.boolean().default(true).describe("When false, the organization's administrative notification emails are not sent at all, neither to `administrativeAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true."),
+    security: z.boolean().default(true).describe("When false, the organization's security notification emails are not sent at all, neither to `securityAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true."),
+    usersManagement: z.boolean().default(true).describe("When false, the organization's user-management notification emails are not sent at all, neither to `usersManagementAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true."),
 });
 export const OrganizationNotificationsSchema = z.object({
     _id: z.string().min(1).isPrimaryKey().isSummaryField(),

package/dist/esm/organizations/organization-notifications.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-notifications.shared.schemas.js","sourceRoot":"","sources":["../../../src/organizations/organization-notifications.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D;;;;;;;;;;;;;;;;;OAiBG;IACH,mBAAmB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE;IAC1D,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACrC,qBAAqB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3C,sBAAsB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAE5C;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,6EAA6E;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,eAAe;IACf,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAE9G,6FAA6F;IAC7F,4EAA4E;IAC5E,+EAA+E;IAC/E,0EAA0E;IAC1E,kDAAkD;IAClD,kBAAkB,EAAE,oCAAoC;SACrD,OAAO,CAAC,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACvD,cAAc,EAAE;IAEnB,eAAe;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC","sourcesContent":["/**\n * Organization Notifications Shared Schemas\n * \n * Notification preferences and settings.\n * Separated from core organization for performance optimization.\n */\n\nimport { z } from 'zod';\n\n/**\n * Per-category notification routing block for an organization.\n *\n * Every interior field is optional (the routing addresses) or carries a\n * `.default(...)` (the category opt-in booleans), so the object is fully\n * materializable from `{}`. Extracted as a named schema so\n * {@link OrganizationNotificationsSchema} can default it via the Zod-4-safe\n * `Schema.default(Schema.parse({}))` idiom — see the `emailNotifications` field.\n */\nexport const OrganizationEmailNotificationsSchema = z.object({\n  /**\n   * Where a tenant's organization-flavoured email goes, and whether it goes at all. READ by the\n   * notification dispatcher since 2026-09-08 (#410).\n   *\n   * It was read by NOTHING before that. The record was seeded by apps-manager at provisioning,\n   * rendered and edited through the organizations preset and audited, while organization-targeted\n   * notifications resolved to member user ids by role and went to each member's own address — so a\n   * tenant that filled this screen in changed nothing.\n   *\n   * The category a notification belongs to is DERIVED from its target: the notification-target\n   * vocabulary and these four categories line up one-for-one, so a per-notification declaration\n   * would only be a place for the two to disagree. `ORGANIZATION_USERS` is deliberately outside the\n   * mapping — it fans out to every member by design, and routing it to one address would change who\n   * the message is FOR rather than where it lands.\n   *\n   * An address REPLACES the member fan-out rather than adding to it: a tenant routing security mail\n   * to a SOC address is saying where it goes, not asking for a copy.\n   */\n  defaultEmailAddress: z.email().optional().isSummaryField(),\n  billingAddress: z.email().optional(),\n  securityAddress: z.email().optional(),\n  administrativeAddress: z.email().optional(),\n  usersManagementAddress: z.email().optional(),\n\n  /**\n   * Category opt-ins. A `false` SUPPRESSES that category entirely — for the members too, not only\n   * for the routing address — because a tenant turning billing notifications off means it.\n   */\n  billing: z.boolean().default(true),\n  administrative: z.boolean().default(true),\n  security: z.boolean().default(true),\n  usersManagement: z.boolean().default(true),\n});\nexport type OrganizationEmailNotifications = z.infer<typeof OrganizationEmailNotificationsSchema>;\n\nexport const OrganizationNotificationsSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  // `.isUnique()` = idempotency backstop for onParentCreate seeding: the eager\n  // `createAsSystem` seed on ORGANIZATIONS create writes one notifications row per\n  // org; the unique index makes a re-fire (retry / replay) fail-closed instead of\n  // duplicating.\n  organizationId: z.string().min(1).isDBIndexed().isUnique().isForeignKey().isSummaryField().excludeFromUpdate(),\n\n  // Email notification preferences. `.default(OrganizationEmailNotificationsSchema.parse({}))`\n  // makes the block materialize to its interior defaults when omitted, so the\n  // resource is default-seedable from its CREATE DTO + parent FK alone (required\n  // by the onParentCreate lifecycle guard). The output type keeps the block\n  // required, so downstream readers are unaffected.\n  emailNotifications: OrganizationEmailNotificationsSchema\n    .default(OrganizationEmailNotificationsSchema.parse({}))\n    .isSummaryField(),\n\n  // Audit fields\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate()\n});\nexport type OrganizationNotifications = z.infer<typeof OrganizationNotificationsSchema>;\n\n"]}
+{"version":3,"file":"organization-notifications.shared.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-notifications.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D;;;;;;;;;;;;;;;;;OAiBG;IACH,mBAAmB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,4WAA4W,CAAC;IACjb,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kQAAkQ,CAAC;IACjT,eAAe,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gJAAgJ,CAAC;IAChM,qBAAqB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sJAAsJ,CAAC;IAC5M,sBAAsB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uJAAuJ,CAAC;IAE9M;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iMAAiM,CAAC;IAC9O,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,+MAA+M,CAAC;IACnQ,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mMAAmM,CAAC;IACjP,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iNAAiN,CAAC;CACvQ,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,6EAA6E;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,eAAe;IACf,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAE9G,6FAA6F;IAC7F,4EAA4E;IAC5E,+EAA+E;IAC/E,0EAA0E;IAC1E,kDAAkD;IAClD,kBAAkB,EAAE,oCAAoC;SACrD,OAAO,CAAC,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACvD,cAAc,EAAE;IAEnB,eAAe;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC","sourcesContent":["/**\n * Organization Notifications Shared Schemas\n * \n * Notification preferences and settings.\n * Separated from core organization for performance optimization.\n */\n\nimport { z } from 'zod';\n\n/**\n * Per-category notification routing block for an organization.\n *\n * Every interior field is optional (the routing addresses) or carries a\n * `.default(...)` (the category opt-in booleans), so the object is fully\n * materializable from `{}`. Extracted as a named schema so\n * {@link OrganizationNotificationsSchema} can default it via the Zod-4-safe\n * `Schema.default(Schema.parse({}))` idiom — see the `emailNotifications` field.\n */\nexport const OrganizationEmailNotificationsSchema = z.object({\n  /**\n   * Where a tenant's organization-flavoured email goes, and whether it goes at all. READ by the\n   * notification dispatcher since 2026-09-08 (#410).\n   *\n   * It was read by NOTHING before that. The record was seeded by apps-manager at provisioning,\n   * rendered and edited through the organizations preset and audited, while organization-targeted\n   * notifications resolved to member user ids by role and went to each member's own address — so a\n   * tenant that filled this screen in changed nothing.\n   *\n   * The category a notification belongs to is DERIVED from its target: the notification-target\n   * vocabulary and these four categories line up one-for-one, so a per-notification declaration\n   * would only be a place for the two to disagree. `ORGANIZATION_USERS` is deliberately outside the\n   * mapping — it fans out to every member by design, and routing it to one address would change who\n   * the message is FOR rather than where it lands.\n   *\n   * An address REPLACES the member fan-out rather than adding to it: a tenant routing security mail\n   * to a SOC address is saying where it goes, not asking for a copy.\n   */\n  defaultEmailAddress: z.email().optional().isSummaryField().describe(\"Email address that receives the notification emails addressed to the organization itself, and those of a category (billing, security, administrative, user management) that has no address of its own. When set, these emails go to this address instead of to the members who would otherwise receive them. Emails meant for every member are always sent to each member.\"),\n  billingAddress: z.email().optional().describe(\"Email address that receives the organization's billing notification emails instead of its members; when unset, `defaultEmailAddress` is used. It is also given to the payment provider as the customer email when the organization's billing account is created.\"),\n  securityAddress: z.email().optional().describe(\"Email address that receives the organization's security notification emails instead of its members; when unset, `defaultEmailAddress` is used.\"),\n  administrativeAddress: z.email().optional().describe(\"Email address that receives the organization's administrative notification emails instead of its members; when unset, `defaultEmailAddress` is used.\"),\n  usersManagementAddress: z.email().optional().describe(\"Email address that receives the organization's user-management notification emails instead of its members; when unset, `defaultEmailAddress` is used.\"),\n\n  /**\n   * Category opt-ins. A `false` SUPPRESSES that category entirely — for the members too, not only\n   * for the routing address — because a tenant turning billing notifications off means it.\n   */\n  billing: z.boolean().default(true).describe(\"When false, the organization's billing notification emails are not sent at all, neither to `billingAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true.\"),\n  administrative: z.boolean().default(true).describe(\"When false, the organization's administrative notification emails are not sent at all, neither to `administrativeAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true.\"),\n  security: z.boolean().default(true).describe(\"When false, the organization's security notification emails are not sent at all, neither to `securityAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true.\"),\n  usersManagement: z.boolean().default(true).describe(\"When false, the organization's user-management notification emails are not sent at all, neither to `usersManagementAddress` nor to members. Emails only; in-app notifications are unaffected. Defaults to true.\"),\n});\nexport type OrganizationEmailNotifications = z.infer<typeof OrganizationEmailNotificationsSchema>;\n\nexport const OrganizationNotificationsSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  // `.isUnique()` = idempotency backstop for onParentCreate seeding: the eager\n  // `createAsSystem` seed on ORGANIZATIONS create writes one notifications row per\n  // org; the unique index makes a re-fire (retry / replay) fail-closed instead of\n  // duplicating.\n  organizationId: z.string().min(1).isDBIndexed().isUnique().isForeignKey().isSummaryField().excludeFromUpdate(),\n\n  // Email notification preferences. `.default(OrganizationEmailNotificationsSchema.parse({}))`\n  // makes the block materialize to its interior defaults when omitted, so the\n  // resource is default-seedable from its CREATE DTO + parent FK alone (required\n  // by the onParentCreate lifecycle guard). The output type keeps the block\n  // required, so downstream readers are unaffected.\n  emailNotifications: OrganizationEmailNotificationsSchema\n    .default(OrganizationEmailNotificationsSchema.parse({}))\n    .isSummaryField(),\n\n  // Audit fields\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate()\n});\nexport type OrganizationNotifications = z.infer<typeof OrganizationNotificationsSchema>;\n\n"]}

package/dist/esm/organizations/organization-preferences.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-preferences.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-preferences.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAoD,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAU/H,KAAK,qCAAqC,GACtC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,kEAAkE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;kBAmG/H,CAAC"}
+{"version":3,"file":"organization-preferences.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-preferences.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAoD,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAU/H,KAAK,qCAAqC,GACtC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,kEAAkE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;kBAmG/H,CAAC"}

package/dist/esm/organizations/organization-preferences.shared.schemas.d.ts

@@ -5,6 +5,7 @@
  * Separated from core organization for performance optimization.
  */
 import { z } from 'zod';
+import '@wildo-ai/zod-decorators';
 import { AvailableLanguage, TimeFormat, DateFormat } from '@wildo-ai/presets-components-models';
 export declare const OrganizationLanguagePreferencesSchema: z.ZodObject<{
     primaryLanguage: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AvailableLanguage>>>>;
@@ -51,10 +52,10 @@ export type OrganizationPreferences = z.infer<typeof OrganizationPreferencesSche
  * framework would have used, which makes the layer a no-op for it — exactly as it should be.
  */
 export declare const OrganizationRegionalPreferencesSchema: z.ZodObject<{
+    locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AvailableLanguage>>>>>;
     timezone: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/presets-components-models").CommonTimezone>, z.ZodString]>>>>;
     dateFormat: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof DateFormat>>>>;
     timeFormat: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof TimeFormat>>>>;
-    locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AvailableLanguage>>>>>;
 }, z.core.$strip>;
 export type OrganizationRegionalPreferences = z.infer<typeof OrganizationRegionalPreferencesSchema>;
 //# sourceMappingURL=organization-preferences.shared.schemas.d.ts.map

package/dist/esm/organizations/organization-preferences.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-preferences.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-preferences.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAkB,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAEhH,eAAO,MAAM,qCAAqC;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBA+BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qCAAqC;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC"}
+{"version":3,"file":"organization-preferences.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-preferences.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAkB,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAEhH,eAAO,MAAM,qCAAqC;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBA+BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qCAAqC;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC"}

package/dist/esm/organizations/organization-preferences.shared.schemas.js

@@ -5,12 +5,15 @@
  * Separated from core organization for performance optimization.
  */
 import { z } from 'zod';
+// Side-effect import: this module calls `.systemEnum()` at load, so the decorators must be installed first —
+// never by the importer's luck (#966). A named import used only as a type would be elided and install nothing.
+import '@wildo-ai/zod-decorators';
 import { AvailableLanguage, TimeFormat, TimezoneSchema, DateFormat } from '@wildo-ai/presets-components-models';
 export const OrganizationLanguagePreferencesSchema = z.object({
-    primaryLanguage: z.enum(AvailableLanguage).systemEnum('AvailableLanguage').default(AvailableLanguage.EN).isSummaryField(),
-    supportedLanguages: z.array(z.enum(AvailableLanguage).systemEnum('AvailableLanguage')).default([AvailableLanguage.EN]),
-    allowUserOverride: z.boolean().default(true),
-    enforceForAllMembers: z.boolean().default(false)
+    primaryLanguage: z.enum(AvailableLanguage).systemEnum('AvailableLanguage').default(AvailableLanguage.EN).isSummaryField().describe("The organization's default interface language. Every member uses it when `enforceForAllMembers` is true or `allowUserOverride` is false, a member who opts into the organization default uses it, and otherwise it applies when a member's own language cannot be used. Ignored when the application does not offer it. Defaults to `en`."),
+    supportedLanguages: z.array(z.enum(AvailableLanguage).systemEnum('AvailableLanguage')).default([AvailableLanguage.EN]).describe("The interface languages this organization's members may use, limited to those the application offers; `primaryLanguage` is always included. When none of them is offered by the application, every language the application offers stays available. Defaults to `[\"en\"]`."),
+    allowUserOverride: z.boolean().default(true).describe("When false, members cannot use a language of their own choosing and the interface uses `primaryLanguage` for all of them. Defaults to true."),
+    enforceForAllMembers: z.boolean().default(false).describe("When true, every member's interface uses `primaryLanguage`, whatever language they chose for themselves. Defaults to false.")
 });
 export const OrganizationPreferencesSchema = z.object({
     _id: z.string().min(1).isPrimaryKey().isSummaryField(),

package/dist/esm/organizations/organization-preferences.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-preferences.shared.schemas.js","sourceRoot":"","sources":["../../../src/organizations/organization-preferences.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAEhH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE;IACzH,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,eAAe;IACf,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAE9G,oBAAoB;IACpB,wEAAwE;IACxE,iEAAiE;IACjE,0EAA0E;IAC1E,gFAAgF;IAChF,iFAAiF;IACjF,sEAAsE;IACtE,2DAA2D;IAC3D,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACtE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC9H,gFAAgF;IAChF,4DAA4D;IAC5D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE;IACxG,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE;IAE1G,uBAAuB;IACvB,mBAAmB,EAAE,qCAAqC,CAAC,OAAO,CAAC,qCAAqC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE;IAEpI,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;IAEjE,eAAe;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,6BAA6B,CAAC,IAAI,CAAC;IACtF,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;CACjB,CAAC,CAAC","sourcesContent":["/**\n * Organization Preferences Shared Schemas\n * \n * Localization, regional settings, and application preferences.\n * Separated from core organization for performance optimization.\n */\n\nimport { z } from 'zod';\nimport { AvailableLanguage, TimeFormat, TimezoneSchema, DateFormat } from '@wildo-ai/presets-components-models';\n\nexport const OrganizationLanguagePreferencesSchema = z.object({\n  primaryLanguage: z.enum(AvailableLanguage).systemEnum('AvailableLanguage').default(AvailableLanguage.EN).isSummaryField(),\n  supportedLanguages: z.array(z.enum(AvailableLanguage).systemEnum('AvailableLanguage')).default([AvailableLanguage.EN]),\n  allowUserOverride: z.boolean().default(true),\n  enforceForAllMembers: z.boolean().default(false)\n});\nexport type OrganizationLanguagePreferences = z.infer<typeof OrganizationLanguagePreferencesSchema>;\n\nexport const OrganizationPreferencesSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  // `.isUnique()` = idempotency backstop for onParentCreate seeding: the eager\n  // `createAsSystem` seed on ORGANIZATIONS create writes one preferences row per\n  // org; the unique index makes a re-fire (retry / replay) fail-closed instead of\n  // duplicating.\n  organizationId: z.string().min(1).isDBIndexed().isUnique().isForeignKey().isSummaryField().excludeFromUpdate(),\n  \n  // Regional settings\n  // Default 'UTC' (a valid `CommonTimezone`), NOT 'US_SHORT' — that was a\n  // `DateFormat` value mistakenly used here. `TimezoneSchema` is a\n  // `union([enum(CommonTimezone), string])`, so Zod accepted the bad string\n  // (the onParentCreate boot-guard probe passed), but the Mongoose model enforces\n  // the enum and rejected 'US_SHORT' at seed time → the org preferences row failed\n  // to eager-seed. Mirrors the USER preferences `timezone` default. See\n  // composition-oncreate-lifecycle plan (W3 runtime-verify).\n  timezone: TimezoneSchema.default('UTC').isDBIndexed().isSummaryField(),\n  locale: z.enum(AvailableLanguage).systemEnum('AvailableLanguage').default(AvailableLanguage.EN).isDBIndexed().isSummaryField(),\n  // LOCALE_DEFAULT (not ISO_8601): mirrors the USER preferences default — see the\n  // rationale on `UserPreferences_RegionalSchema.dateFormat`.\n  dateFormat: z.enum(DateFormat).systemEnum('DateFormat').default(DateFormat.LOCALE_DEFAULT).isDBIndexed(),\n  timeFormat: z.enum(TimeFormat).systemEnum('TimeFormat').default(TimeFormat.TWENTY_FOUR_HOUR).isDBIndexed(),\n  \n  // Language preferences\n  languagePreferences: OrganizationLanguagePreferencesSchema.default(OrganizationLanguagePreferencesSchema.parse({})).isSummaryField(),\n  \n  allowMemberEmailOverride: z.boolean().default(true).isDBIndexed(),\n  \n  // Audit fields\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate()\n});\nexport type OrganizationPreferences = z.infer<typeof OrganizationPreferencesSchema>;\n\n/**\n * The tenant's regional answer, as the DEFAULT LAYER beneath a member's own (#410).\n *\n * These four fields sit at the top level of {@link OrganizationPreferencesSchema} because they are\n * the organization's own settings, not a sub-record; this is a derived VIEW of them, so the two can\n * never drift. It exists because the frontend needs to carry exactly this much of the tenant's\n * preferences record to `I18nContext` — sending the whole record would put `_id`, audit fields and\n * the member-email-override policy on an event that has no use for any of them.\n *\n * The resolution `I18nContext` performs is: the member's own value, then this, then the framework\n * fallback. A member's explicit choice always wins — that is why\n * {@link UserPreferences_RegionalSchema}'s four fields are optional, so \"the member expressed\n * nothing\" is representable at all.\n *\n * Unlike the member's block, these fields keep their defaults, and that is correct rather than an\n * oversight: the organization record is seeded at provisioning and always exists, so its values ARE\n * the tenant's answer. A tenant that has edited nothing answers with the same four values the\n * framework would have used, which makes the layer a no-op for it — exactly as it should be.\n */\nexport const OrganizationRegionalPreferencesSchema = OrganizationPreferencesSchema.pick({\n  timezone: true,\n  locale: true,\n  dateFormat: true,\n  timeFormat: true,\n});\nexport type OrganizationRegionalPreferences = z.infer<typeof OrganizationRegionalPreferencesSchema>;\n"]}
+{"version":3,"file":"organization-preferences.shared.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-preferences.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,6GAA6G;AAC7G,+GAA+G;AAC/G,OAAO,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAEhH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,2UAA2U,CAAC;IAC/c,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,6QAA6Q,CAAC;IAC9Y,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,6IAA6I,CAAC;IACpM,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,6HAA6H,CAAC;CACzL,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,eAAe;IACf,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAE9G,oBAAoB;IACpB,wEAAwE;IACxE,iEAAiE;IACjE,0EAA0E;IAC1E,gFAAgF;IAChF,iFAAiF;IACjF,sEAAsE;IACtE,2DAA2D;IAC3D,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACtE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC9H,gFAAgF;IAChF,4DAA4D;IAC5D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE;IACxG,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE;IAE1G,uBAAuB;IACvB,mBAAmB,EAAE,qCAAqC,CAAC,OAAO,CAAC,qCAAqC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE;IAEpI,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;IAEjE,eAAe;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,6BAA6B,CAAC,IAAI,CAAC;IACtF,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;CACjB,CAAC,CAAC","sourcesContent":["/**\n * Organization Preferences Shared Schemas\n * \n * Localization, regional settings, and application preferences.\n * Separated from core organization for performance optimization.\n */\n\nimport { z } from 'zod';\n// Side-effect import: this module calls `.systemEnum()` at load, so the decorators must be installed first —\n// never by the importer's luck (#966). A named import used only as a type would be elided and install nothing.\nimport '@wildo-ai/zod-decorators';\nimport { AvailableLanguage, TimeFormat, TimezoneSchema, DateFormat } from '@wildo-ai/presets-components-models';\n\nexport const OrganizationLanguagePreferencesSchema = z.object({\n  primaryLanguage: z.enum(AvailableLanguage).systemEnum('AvailableLanguage').default(AvailableLanguage.EN).isSummaryField().describe(\"The organization's default interface language. Every member uses it when `enforceForAllMembers` is true or `allowUserOverride` is false, a member who opts into the organization default uses it, and otherwise it applies when a member's own language cannot be used. Ignored when the application does not offer it. Defaults to `en`.\"),\n  supportedLanguages: z.array(z.enum(AvailableLanguage).systemEnum('AvailableLanguage')).default([AvailableLanguage.EN]).describe(\"The interface languages this organization's members may use, limited to those the application offers; `primaryLanguage` is always included. When none of them is offered by the application, every language the application offers stays available. Defaults to `[\\\"en\\\"]`.\"),\n  allowUserOverride: z.boolean().default(true).describe(\"When false, members cannot use a language of their own choosing and the interface uses `primaryLanguage` for all of them. Defaults to true.\"),\n  enforceForAllMembers: z.boolean().default(false).describe(\"When true, every member's interface uses `primaryLanguage`, whatever language they chose for themselves. Defaults to false.\")\n});\nexport type OrganizationLanguagePreferences = z.infer<typeof OrganizationLanguagePreferencesSchema>;\n\nexport const OrganizationPreferencesSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  // `.isUnique()` = idempotency backstop for onParentCreate seeding: the eager\n  // `createAsSystem` seed on ORGANIZATIONS create writes one preferences row per\n  // org; the unique index makes a re-fire (retry / replay) fail-closed instead of\n  // duplicating.\n  organizationId: z.string().min(1).isDBIndexed().isUnique().isForeignKey().isSummaryField().excludeFromUpdate(),\n  \n  // Regional settings\n  // Default 'UTC' (a valid `CommonTimezone`), NOT 'US_SHORT' — that was a\n  // `DateFormat` value mistakenly used here. `TimezoneSchema` is a\n  // `union([enum(CommonTimezone), string])`, so Zod accepted the bad string\n  // (the onParentCreate boot-guard probe passed), but the Mongoose model enforces\n  // the enum and rejected 'US_SHORT' at seed time → the org preferences row failed\n  // to eager-seed. Mirrors the USER preferences `timezone` default. See\n  // composition-oncreate-lifecycle plan (W3 runtime-verify).\n  timezone: TimezoneSchema.default('UTC').isDBIndexed().isSummaryField(),\n  locale: z.enum(AvailableLanguage).systemEnum('AvailableLanguage').default(AvailableLanguage.EN).isDBIndexed().isSummaryField(),\n  // LOCALE_DEFAULT (not ISO_8601): mirrors the USER preferences default — see the\n  // rationale on `UserPreferences_RegionalSchema.dateFormat`.\n  dateFormat: z.enum(DateFormat).systemEnum('DateFormat').default(DateFormat.LOCALE_DEFAULT).isDBIndexed(),\n  timeFormat: z.enum(TimeFormat).systemEnum('TimeFormat').default(TimeFormat.TWENTY_FOUR_HOUR).isDBIndexed(),\n  \n  // Language preferences\n  languagePreferences: OrganizationLanguagePreferencesSchema.default(OrganizationLanguagePreferencesSchema.parse({})).isSummaryField(),\n  \n  allowMemberEmailOverride: z.boolean().default(true).isDBIndexed(),\n  \n  // Audit fields\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate()\n});\nexport type OrganizationPreferences = z.infer<typeof OrganizationPreferencesSchema>;\n\n/**\n * The tenant's regional answer, as the DEFAULT LAYER beneath a member's own (#410).\n *\n * These four fields sit at the top level of {@link OrganizationPreferencesSchema} because they are\n * the organization's own settings, not a sub-record; this is a derived VIEW of them, so the two can\n * never drift. It exists because the frontend needs to carry exactly this much of the tenant's\n * preferences record to `I18nContext` — sending the whole record would put `_id`, audit fields and\n * the member-email-override policy on an event that has no use for any of them.\n *\n * The resolution `I18nContext` performs is: the member's own value, then this, then the framework\n * fallback. A member's explicit choice always wins — that is why\n * {@link UserPreferences_RegionalSchema}'s four fields are optional, so \"the member expressed\n * nothing\" is representable at all.\n *\n * Unlike the member's block, these fields keep their defaults, and that is correct rather than an\n * oversight: the organization record is seeded at provisioning and always exists, so its values ARE\n * the tenant's answer. A tenant that has edited nothing answers with the same four values the\n * framework would have used, which makes the layer a no-op for it — exactly as it should be.\n */\nexport const OrganizationRegionalPreferencesSchema = OrganizationPreferencesSchema.pick({\n  timezone: true,\n  locale: true,\n  dateFormat: true,\n  timeFormat: true,\n});\nexport type OrganizationRegionalPreferences = z.infer<typeof OrganizationRegionalPreferencesSchema>;\n"]}

package/dist/esm/organizations/organization-profile.shared.resources-config.schemas.d.ts

@@ -37,7 +37,6 @@ export declare const organizationProfileResourceConfiguration_InitializationFact
         favicon: z.ZodOptional<z.ZodURL>;
         primaryColor: z.ZodOptional<z.ZodString>;
         secondaryColor: z.ZodOptional<z.ZodString>;
-        customDomain: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     socialLinks: z.ZodOptional<z.ZodObject<{
         linkedin: z.ZodOptional<z.ZodURL>;

package/dist/esm/organizations/organization-profile.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-profile.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-profile.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAoD,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAW/H,oBAAY,8BAA8B;IACxC,eAAe,oBAAoB;CACpC;AAED,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgH3H,CAAC"}
+{"version":3,"file":"organization-profile.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-profile.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAoD,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAW/H,oBAAY,8BAA8B;IACxC,eAAe,oBAAoB;CACpC;AAED,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgH3H,CAAC"}

package/dist/esm/organizations/organization-profile.shared.schemas.d.ts

@@ -30,7 +30,6 @@ export declare const OrganizationBrandingSchema: z.ZodObject<{
     favicon: z.ZodOptional<z.ZodURL>;
     primaryColor: z.ZodOptional<z.ZodString>;
     secondaryColor: z.ZodOptional<z.ZodString>;
-    customDomain: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type OrganizationBranding = z.infer<typeof OrganizationBrandingSchema>;
 /**
@@ -38,7 +37,9 @@ export type OrganizationBranding = z.infer<typeof OrganizationBrandingSchema>;
  * otherwise the application's (#410).
  *
  * Per field, not per record — a tenant that uploaded a logo and never picked a colour keeps the
- * application's colour rather than losing it. Resolving the record as a unit would make one
+ * caller's colour fallback, if one exists. Authentication identification supplies no application colour;
+ * its standard login consumer keeps application theme tokens and uses a supplied tenant colour only as
+ * a decorative identity accent. Resolving the record as a unit would make one
  * expressed field silence the others, which is the same trap the regional-preferences layer had to
  * avoid.
  *
@@ -47,9 +48,10 @@ export type OrganizationBranding = z.infer<typeof OrganizationBrandingSchema>;
  * how the application's own logo is chosen. The caller keeps that; this owns only the precedence,
  * which is the part worth having one copy of.
  *
- * `favicon` and `secondaryColor` are deliberately absent: the DTO that carries this to a login
- * screen has no field for either, so resolving them would produce values nothing transports. Adding
- * them is a DTO decision first.
+ * `faviconUrl` is the tenant's or nothing: the application's own icon is already the page's, so the
+ * sign-in page swaps it only for a tenant that set one (#1799). `secondaryColor` is deliberately
+ * absent: the DTO that carries this to a login screen has no field for it, so resolving it would
+ * produce a value nothing transports. Adding it is a DTO decision first.
  */
 export declare function resolveTenantBrandPresentation(branding: OrganizationBranding | null | undefined, applicationBrand: {
     logoUrl?: string;
@@ -57,6 +59,7 @@ export declare function resolveTenantBrandPresentation(branding: OrganizationBra
 }): {
     logoUrl?: string;
     primaryColor?: string;
+    faviconUrl?: string;
 };
 export declare const OrganizationProfileSchema: z.ZodObject<{
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
@@ -83,7 +86,6 @@ export declare const OrganizationProfileSchema: z.ZodObject<{
         favicon: z.ZodOptional<z.ZodURL>;
         primaryColor: z.ZodOptional<z.ZodString>;
         secondaryColor: z.ZodOptional<z.ZodString>;
-        customDomain: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     socialLinks: z.ZodOptional<z.ZodObject<{
         linkedin: z.ZodOptional<z.ZodURL>;

package/dist/esm/organizations/organization-profile.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-profile.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-profile.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,oBAAY,gBAAgB;IAC1B,OAAO,YAAY,CAAY,iBAAiB;IAChD,KAAK,UAAU,CAAgB,kBAAkB;IACjD,MAAM,WAAW,CAAc,mBAAmB;IAClD,KAAK,UAAU,CAAgB,qBAAqB;IACpD,UAAU,eAAe;CAC1B;AAED,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,KAAK,UAAU;CAChB;AAID,eAAO,MAAM,0BAA0B;;;;;;iBA+BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACjD,gBAAgB,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAK7C;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoCpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
+{"version":3,"file":"organization-profile.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-profile.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,oBAAY,gBAAgB;IAC1B,OAAO,YAAY,CAAY,iBAAiB;IAChD,KAAK,UAAU,CAAgB,kBAAkB;IACjD,MAAM,WAAW,CAAc,mBAAmB;IAClD,KAAK,UAAU,CAAgB,qBAAqB;IACpD,UAAU,eAAe;CAC1B;AAED,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,KAAK,UAAU;CAChB;AAID,eAAO,MAAM,0BAA0B;;;;;iBAkCrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACjD,gBAAgB,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAMlE;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoCpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/esm/organizations/organization-profile.shared.schemas.js

@@ -34,7 +34,7 @@ export var OrganizationIndustry;
 // Address Schema
 export const OrganizationBrandingSchema = z.object({
     /**
-     * Per-org logo (user-authored, absolute URL), READ by the login screen since 2026-09-08 (#410).
+     * Per-org logo (user-authored, absolute URL), resolved into identification by #410 and consumed by the standard login card in #651.
      *
      * A tenant that uploads a logo now sees it on its own sign-in page: the identification response
      * resolves this first and falls back to the application's own brand assets. See
@@ -58,18 +58,23 @@ export const OrganizationBrandingSchema = z.object({
      * backend-populated `logoUrl` output fields (auth-response / email context)
      * that accept app-relative brand-asset paths.
      */
-    logo: z.url().optional(),
-    favicon: z.url().optional(),
+    logo: z.url().optional().describe("Absolute URL of the organization's logo. On the sign-in page, people whose email domain signs in through this organization's single sign-on see it in place of the application's logo."),
+    favicon: z.url().optional().describe("Absolute URL of the organization's browser-tab icon. On the sign-in page, people whose email domain signs in through this organization's single sign-on see it in the tab while the organization's sign-in card is shown."),
     primaryColor: ZodTypeForColors.optional(),
     secondaryColor: ZodTypeForColors.optional(),
-    customDomain: z.string().min(1).max(100).optional(),
+    // `customDomain` was removed (#1799). Nothing resolved an organization from a request's host, and
+    // serving an application on a tenant's own domain needs host routing, certificates, CORS, cookie and
+    // redirect-URI handling and domain verification — a feature, not a field. An administrator who set it
+    // believed a domain was configured and nothing was.
 });
 /**
  * What a tenant's own sign-in screen should show: the ORGANIZATION's branding when it declared any,
  * otherwise the application's (#410).
  *
  * Per field, not per record — a tenant that uploaded a logo and never picked a colour keeps the
- * application's colour rather than losing it. Resolving the record as a unit would make one
+ * caller's colour fallback, if one exists. Authentication identification supplies no application colour;
+ * its standard login consumer keeps application theme tokens and uses a supplied tenant colour only as
+ * a decorative identity accent. Resolving the record as a unit would make one
  * expressed field silence the others, which is the same trap the regional-preferences layer had to
  * avoid.
  *
@@ -78,14 +83,16 @@ export const OrganizationBrandingSchema = z.object({
  * how the application's own logo is chosen. The caller keeps that; this owns only the precedence,
  * which is the part worth having one copy of.
  *
- * `favicon` and `secondaryColor` are deliberately absent: the DTO that carries this to a login
- * screen has no field for either, so resolving them would produce values nothing transports. Adding
- * them is a DTO decision first.
+ * `faviconUrl` is the tenant's or nothing: the application's own icon is already the page's, so the
+ * sign-in page swaps it only for a tenant that set one (#1799). `secondaryColor` is deliberately
+ * absent: the DTO that carries this to a login screen has no field for it, so resolving it would
+ * produce a value nothing transports. Adding it is a DTO decision first.
  */
 export function resolveTenantBrandPresentation(branding, applicationBrand) {
     return {
         logoUrl: branding?.logo ?? applicationBrand.logoUrl,
         primaryColor: branding?.primaryColor ?? applicationBrand.primaryColor,
+        ...(branding?.favicon ? { faviconUrl: branding.favicon } : {}),
     };
 }
 export const OrganizationProfileSchema = z.object({
@@ -110,10 +117,10 @@ export const OrganizationProfileSchema = z.object({
     branding: OrganizationBrandingSchema.default(OrganizationBrandingSchema.parse({})),
     // Social links
     socialLinks: z.object({
-        linkedin: z.url().optional(),
-        twitter: z.url().optional(),
-        facebook: z.url().optional(),
-        github: z.url().optional()
+        linkedin: z.url().optional().describe("URL of the organization's LinkedIn page."),
+        twitter: z.url().optional().describe("URL of the organization's X (Twitter) profile."),
+        facebook: z.url().optional().describe("URL of the organization's Facebook page."),
+        github: z.url().optional().describe("URL of the organization's GitHub profile.")
     }).optional(),
     // Audit fields
     createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),

package/dist/esm/organizations/organization-profile.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-profile.shared.schemas.js","sourceRoot":"","sources":["../../../src/organizations/organization-profile.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAkB,MAAM,qCAAqC,CAAC;AAErF,oCAAoC;AACpC,MAAM,CAAN,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,uCAAmB,CAAA;IACnB,mCAAe,CAAA;IACf,qCAAiB,CAAA;IACjB,mCAAe,CAAA;IACf,6CAAyB,CAAA,CAAM,kBAAkB;AACnD,CAAC,EANW,gBAAgB,KAAhB,gBAAgB,QAM3B;AAED,MAAM,CAAN,IAAY,oBAYX;AAZD,WAAY,oBAAoB;IAC9B,iDAAyB,CAAA;IACzB,2CAAmB,CAAA;IACnB,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,yCAAiB,CAAA;IACjB,uDAA+B,CAAA;IAC/B,iDAAyB,CAAA;IACzB,uCAAe,CAAA;IACf,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,uCAAe,CAAA;AACjB,CAAC,EAZW,oBAAoB,KAApB,oBAAoB,QAY/B;AAED,iBAAiB;AAEjB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3B,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAiD,EACjD,gBAA6D;IAE7D,OAAO;QACL,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,gBAAgB,CAAC,OAAO;QACnD,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,gBAAgB,CAAC,YAAY;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAEnG,sBAAsB;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAE3C,iBAAiB;IACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACvD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAE5B,WAAW;IACX,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;IAE9D,WAAW;IACX,mFAAmF;IACnF,kFAAkF;IAClF,QAAQ,EAAE,0BAA0B,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElF,eAAe;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC,CAAC,QAAQ,EAAE;IAEb,eAAe;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC","sourcesContent":["/**\n * Organization Profile Shared Schemas\n * \n * Company information, branding, and public profile data.\n * Separated from core organization for performance optimization.\n */\n\nimport { z } from 'zod';\nimport { AddressSchema } from '@wildo-ai/presets-components-models';\nimport { ZodTypeForColors } from '@wildo-ai/zod-decorators';\nimport { CommonTimezone, TimezoneSchema } from '@wildo-ai/presets-components-models';\n\n// Organization classification enums\nexport enum OrganizationSize {\n  STARTUP = 'STARTUP',           // 1-10 employees\n  SMALL = 'SMALL',               // 11-50 employees\n  MEDIUM = 'MEDIUM',             // 51-200 employees\n  LARGE = 'LARGE',               // 201-1000 employees\n  ENTERPRISE = 'ENTERPRISE'      // 1000+ employees\n}\n\nexport enum OrganizationIndustry {\n  TECHNOLOGY = 'TECHNOLOGY',\n  FINANCE = 'FINANCE',\n  HEALTHCARE = 'HEALTHCARE',\n  EDUCATION = 'EDUCATION',\n  RETAIL = 'RETAIL',\n  MANUFACTURING = 'MANUFACTURING',\n  CONSULTING = 'CONSULTING',\n  MEDIA = 'MEDIA',\n  GOVERNMENT = 'GOVERNMENT',\n  NONPROFIT = 'NONPROFIT',\n  OTHER = 'OTHER'\n}\n\n// Address Schema\n\nexport const OrganizationBrandingSchema = z.object({\n  /**\n   * Per-org logo (user-authored, absolute URL), READ by the login screen since 2026-09-08 (#410).\n   *\n   * A tenant that uploads a logo now sees it on its own sign-in page: the identification response\n   * resolves this first and falls back to the application's own brand assets. See\n   * {@link resolveTenantBrandPresentation}, which owns the precedence.\n   *\n   * **The audit note this replaces was accurate and its conclusion was wrong**, and the way it went\n   * wrong is worth keeping. It read: *\"the one place that surfaces an organization's branding logo\n   * to a DTO is the auth login response, and it ALREADY applies the app-level default: at\n   * identification time only a domain was matched (the org profile is not loaded) … Because the only\n   * surfacing seam is already handled, no additional backend fallback seam is introduced here\n   * (invented seams are avoided by design).\"*\n   *\n   * Every factual clause held. But \"the org profile is not loaded\" described what the code DID, not\n   * what it could do — the domain lookup resolves `scopeId`, which is the organization id, so the\n   * profile was always one read away. Reasoning from the current call graph to \"no seam is needed\"\n   * turned an unfinished implementation into a documented design decision, and it then justified\n   * leaving the field inert for as long as anyone read the note. Avoiding invented seams is right;\n   * this seam was not invented, it was the one the field exists for.\n   *\n   * Kept `z.url()` (absolute) because this is direct user input, unlike the\n   * backend-populated `logoUrl` output fields (auth-response / email context)\n   * that accept app-relative brand-asset paths.\n   */\n  logo: z.url().optional(),\n  favicon: z.url().optional(),\n  primaryColor: ZodTypeForColors.optional(),\n  secondaryColor: ZodTypeForColors.optional(),\n  customDomain: z.string().min(1).max(100).optional(),\n});\nexport type OrganizationBranding = z.infer<typeof OrganizationBrandingSchema>;\n\n/**\n * What a tenant's own sign-in screen should show: the ORGANIZATION's branding when it declared any,\n * otherwise the application's (#410).\n *\n * Per field, not per record — a tenant that uploaded a logo and never picked a colour keeps the\n * application's colour rather than losing it. Resolving the record as a unit would make one\n * expressed field silence the others, which is the same trap the regional-preferences layer had to\n * avoid.\n *\n * A pure function taking the application's ALREADY-RESOLVED values, so it can live beside the schema\n * it resolves without this module knowing anything about brand assets, configuration services or\n * how the application's own logo is chosen. The caller keeps that; this owns only the precedence,\n * which is the part worth having one copy of.\n *\n * `favicon` and `secondaryColor` are deliberately absent: the DTO that carries this to a login\n * screen has no field for either, so resolving them would produce values nothing transports. Adding\n * them is a DTO decision first.\n */\nexport function resolveTenantBrandPresentation(\n  branding: OrganizationBranding | null | undefined,\n  applicationBrand: { logoUrl?: string; primaryColor?: string },\n): { logoUrl?: string; primaryColor?: string } {\n  return {\n    logoUrl: branding?.logo ?? applicationBrand.logoUrl,\n    primaryColor: branding?.primaryColor ?? applicationBrand.primaryColor,\n  };\n}\n\nexport const OrganizationProfileSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  \n  // Company information\n  displayName: z.string().max(100).optional().isDBIndexed().isSummaryField(),\n  domain: z.string().min(1).max(100).optional().isDBIndexed(),\n  phone: z.string().max(20).optional(),\n  website: z.url().optional(),\n  description: z.string().max(500).optional(),\n  \n  // Classification\n  industry: z.enum(OrganizationIndustry).optional().isDBIndexed(),\n  size: z.enum(OrganizationSize).optional().isDBIndexed(),\n  founded: z.date().optional(),\n  \n  // Location\n  address: AddressSchema.optional(),\n  timezone: z.string().default(CommonTimezone.UTC).isDBIndexed(),\n  \n  // Branding\n  // `.default(...)` (interior fully optional/defaulted) so the row is eager-seedable\n  // via onParentCreate — root-cause fix, consistent with sibling defaulted objects.\n  branding: OrganizationBrandingSchema.default(OrganizationBrandingSchema.parse({})),\n  \n  // Social links\n  socialLinks: z.object({\n    linkedin: z.url().optional(),\n    twitter: z.url().optional(),\n    facebook: z.url().optional(),\n    github: z.url().optional()\n  }).optional(),\n  \n  // Audit fields\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate()\n});\nexport type OrganizationProfile = z.infer<typeof OrganizationProfileSchema>; "]}
+{"version":3,"file":"organization-profile.shared.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-profile.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAkB,MAAM,qCAAqC,CAAC;AAErF,oCAAoC;AACpC,MAAM,CAAN,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,uCAAmB,CAAA;IACnB,mCAAe,CAAA;IACf,qCAAiB,CAAA;IACjB,mCAAe,CAAA;IACf,6CAAyB,CAAA,CAAM,kBAAkB;AACnD,CAAC,EANW,gBAAgB,KAAhB,gBAAgB,QAM3B;AAED,MAAM,CAAN,IAAY,oBAYX;AAZD,WAAY,oBAAoB;IAC9B,iDAAyB,CAAA;IACzB,2CAAmB,CAAA;IACnB,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,yCAAiB,CAAA;IACjB,uDAA+B,CAAA;IAC/B,iDAAyB,CAAA;IACzB,uCAAe,CAAA;IACf,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,uCAAe,CAAA;AACjB,CAAC,EAZW,oBAAoB,KAApB,oBAAoB,QAY/B;AAED,iBAAiB;AAEjB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wLAAwL,CAAC;IAC3N,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2NAA2N,CAAC;IACjQ,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC3C,kGAAkG;IAClG,qGAAqG;IACrG,sGAAsG;IACtG,oDAAoD;CACrD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAiD,EACjD,gBAA6D;IAE7D,OAAO;QACL,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,gBAAgB,CAAC,OAAO;QACnD,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,gBAAgB,CAAC,YAAY;QACrE,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAEnG,sBAAsB;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAE3C,iBAAiB;IACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IACvD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAE5B,WAAW;IACX,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;IAE9D,WAAW;IACX,mFAAmF;IACnF,kFAAkF;IAClF,QAAQ,EAAE,0BAA0B,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElF,eAAe;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACjF,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QACtF,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACjF,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KACjF,CAAC,CAAC,QAAQ,EAAE;IAEb,eAAe;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACnG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC","sourcesContent":["/**\n * Organization Profile Shared Schemas\n * \n * Company information, branding, and public profile data.\n * Separated from core organization for performance optimization.\n */\n\nimport { z } from 'zod';\nimport { AddressSchema } from '@wildo-ai/presets-components-models';\nimport { ZodTypeForColors } from '@wildo-ai/zod-decorators';\nimport { CommonTimezone, TimezoneSchema } from '@wildo-ai/presets-components-models';\n\n// Organization classification enums\nexport enum OrganizationSize {\n  STARTUP = 'STARTUP',           // 1-10 employees\n  SMALL = 'SMALL',               // 11-50 employees\n  MEDIUM = 'MEDIUM',             // 51-200 employees\n  LARGE = 'LARGE',               // 201-1000 employees\n  ENTERPRISE = 'ENTERPRISE'      // 1000+ employees\n}\n\nexport enum OrganizationIndustry {\n  TECHNOLOGY = 'TECHNOLOGY',\n  FINANCE = 'FINANCE',\n  HEALTHCARE = 'HEALTHCARE',\n  EDUCATION = 'EDUCATION',\n  RETAIL = 'RETAIL',\n  MANUFACTURING = 'MANUFACTURING',\n  CONSULTING = 'CONSULTING',\n  MEDIA = 'MEDIA',\n  GOVERNMENT = 'GOVERNMENT',\n  NONPROFIT = 'NONPROFIT',\n  OTHER = 'OTHER'\n}\n\n// Address Schema\n\nexport const OrganizationBrandingSchema = z.object({\n  /**\n   * Per-org logo (user-authored, absolute URL), resolved into identification by #410 and consumed by the standard login card in #651.\n   *\n   * A tenant that uploads a logo now sees it on its own sign-in page: the identification response\n   * resolves this first and falls back to the application's own brand assets. See\n   * {@link resolveTenantBrandPresentation}, which owns the precedence.\n   *\n   * **The audit note this replaces was accurate and its conclusion was wrong**, and the way it went\n   * wrong is worth keeping. It read: *\"the one place that surfaces an organization's branding logo\n   * to a DTO is the auth login response, and it ALREADY applies the app-level default: at\n   * identification time only a domain was matched (the org profile is not loaded) … Because the only\n   * surfacing seam is already handled, no additional backend fallback seam is introduced here\n   * (invented seams are avoided by design).\"*\n   *\n   * Every factual clause held. But \"the org profile is not loaded\" described what the code DID, not\n   * what it could do — the domain lookup resolves `scopeId`, which is the organization id, so the\n   * profile was always one read away. Reasoning from the current call graph to \"no seam is needed\"\n   * turned an unfinished implementation into a documented design decision, and it then justified\n   * leaving the field inert for as long as anyone read the note. Avoiding invented seams is right;\n   * this seam was not invented, it was the one the field exists for.\n   *\n   * Kept `z.url()` (absolute) because this is direct user input, unlike the\n   * backend-populated `logoUrl` output fields (auth-response / email context)\n   * that accept app-relative brand-asset paths.\n   */\n  logo: z.url().optional().describe(\"Absolute URL of the organization's logo. On the sign-in page, people whose email domain signs in through this organization's single sign-on see it in place of the application's logo.\"),\n  favicon: z.url().optional().describe(\"Absolute URL of the organization's browser-tab icon. On the sign-in page, people whose email domain signs in through this organization's single sign-on see it in the tab while the organization's sign-in card is shown.\"),\n  primaryColor: ZodTypeForColors.optional(),\n  secondaryColor: ZodTypeForColors.optional(),\n  // `customDomain` was removed (#1799). Nothing resolved an organization from a request's host, and\n  // serving an application on a tenant's own domain needs host routing, certificates, CORS, cookie and\n  // redirect-URI handling and domain verification — a feature, not a field. An administrator who set it\n  // believed a domain was configured and nothing was.\n});\nexport type OrganizationBranding = z.infer<typeof OrganizationBrandingSchema>;\n\n/**\n * What a tenant's own sign-in screen should show: the ORGANIZATION's branding when it declared any,\n * otherwise the application's (#410).\n *\n * Per field, not per record — a tenant that uploaded a logo and never picked a colour keeps the\n * caller's colour fallback, if one exists. Authentication identification supplies no application colour;\n * its standard login consumer keeps application theme tokens and uses a supplied tenant colour only as\n * a decorative identity accent. Resolving the record as a unit would make one\n * expressed field silence the others, which is the same trap the regional-preferences layer had to\n * avoid.\n *\n * A pure function taking the application's ALREADY-RESOLVED values, so it can live beside the schema\n * it resolves without this module knowing anything about brand assets, configuration services or\n * how the application's own logo is chosen. The caller keeps that; this owns only the precedence,\n * which is the part worth having one copy of.\n *\n * `faviconUrl` is the tenant's or nothing: the application's own icon is already the page's, so the\n * sign-in page swaps it only for a tenant that set one (#1799). `secondaryColor` is deliberately\n * absent: the DTO that carries this to a login screen has no field for it, so resolving it would\n * produce a value nothing transports. Adding it is a DTO decision first.\n */\nexport function resolveTenantBrandPresentation(\n  branding: OrganizationBranding | null | undefined,\n  applicationBrand: { logoUrl?: string; primaryColor?: string },\n): { logoUrl?: string; primaryColor?: string; faviconUrl?: string } {\n  return {\n    logoUrl: branding?.logo ?? applicationBrand.logoUrl,\n    primaryColor: branding?.primaryColor ?? applicationBrand.primaryColor,\n    ...(branding?.favicon ? { faviconUrl: branding.favicon } : {}),\n  };\n}\n\nexport const OrganizationProfileSchema = z.object({\n  _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n  organizationId: z.string().min(1).isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n  \n  // Company information\n  displayName: z.string().max(100).optional().isDBIndexed().isSummaryField(),\n  domain: z.string().min(1).max(100).optional().isDBIndexed(),\n  phone: z.string().max(20).optional(),\n  website: z.url().optional(),\n  description: z.string().max(500).optional(),\n  \n  // Classification\n  industry: z.enum(OrganizationIndustry).optional().isDBIndexed(),\n  size: z.enum(OrganizationSize).optional().isDBIndexed(),\n  founded: z.date().optional(),\n  \n  // Location\n  address: AddressSchema.optional(),\n  timezone: z.string().default(CommonTimezone.UTC).isDBIndexed(),\n  \n  // Branding\n  // `.default(...)` (interior fully optional/defaulted) so the row is eager-seedable\n  // via onParentCreate — root-cause fix, consistent with sibling defaulted objects.\n  branding: OrganizationBrandingSchema.default(OrganizationBrandingSchema.parse({})),\n  \n  // Social links\n  socialLinks: z.object({\n    linkedin: z.url().optional().describe(\"URL of the organization's LinkedIn page.\"),\n    twitter: z.url().optional().describe(\"URL of the organization's X (Twitter) profile.\"),\n    facebook: z.url().optional().describe(\"URL of the organization's Facebook page.\"),\n    github: z.url().optional().describe(\"URL of the organization's GitHub profile.\")\n  }).optional(),\n  \n  // Audit fields\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate()\n});\nexport type OrganizationProfile = z.infer<typeof OrganizationProfileSchema>; "]}

package/dist/esm/organizations/organization-unit-inheritance.shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-unit-inheritance.shared.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-unit-inheritance.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,0CAA0C,EAAE,MAAM,qCAAqC,CAAC;AAGjG;;;;;;;GAOG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,0CAA0C,GAAG,IAAI,CAAC;CAC9E,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,wFAAwF;IACxF,QAAQ,CAAC,4BAA4B,EAAE,MAAM,EAAE,CAAC;IAChD,yFAAyF;IACzF,QAAQ,CAAC,4BAA4B,EAAE,MAAM,EAAE,CAAC;CACjD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,uCAAuC,CAAC,IAAI,EAAE,+BAA+B,GAAG,OAAO,CAEtG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,6CAA6C,CAC3D,YAAY,EAAE,SAAS,+BAA+B,EAAE,EACxD,iBAAiB,EAAE,SAAS,+BAA+B,EAAE,GAC5D,8BAA8B,CAyBhC;AAED;;;;;GAKG;AACH,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,SAAS,+BAA+B,EAAE,GACvD,OAAO,CAET"}
+{"version":3,"file":"organization-unit-inheritance.shared.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-unit-inheritance.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,0CAA0C,EAAE,MAAM,qCAAqC,CAAC;AAGjG;;;;;;;GAOG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,0CAA0C,GAAG,IAAI,CAAC;CAC9E,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,wFAAwF;IACxF,QAAQ,CAAC,4BAA4B,EAAE,MAAM,EAAE,CAAC;IAChD,yFAAyF;IACzF,QAAQ,CAAC,4BAA4B,EAAE,MAAM,EAAE,CAAC;CACjD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,uCAAuC,CAAC,IAAI,EAAE,+BAA+B,GAAG,OAAO,CAEtG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,6CAA6C,CAC3D,YAAY,EAAE,SAAS,+BAA+B,EAAE,EACxD,iBAAiB,EAAE,SAAS,+BAA+B,EAAE,GAC5D,8BAA8B,CAyBhC;AAED;;;;;GAKG;AACH,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,SAAS,+BAA+B,EAAE,GACvD,OAAO,CAET"}

package/dist/esm/organizations/organization-unit-members.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-unit-members.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-unit-members.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAMzG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF,KAAK,oCAAoC,GACrC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,iEAAiE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;mBA8E9H,CAAC"}
+{"version":3,"file":"organization-unit-members.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-unit-members.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAMzG,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF,KAAK,oCAAoC,GACrC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,iEAAiE,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;mBA8E9H,CAAC"}

package/dist/esm/organizations/organization-unit-members.shared.resources-config.schemas.js

@@ -16,7 +16,7 @@ import { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas.
 const ORGANIZATION_UNIT_MEMBER_FILTER_FIELDS = {
     organizationUnitId: z.string(),
     organizationMemberId: z.string(),
-    role: z.string(),
+    role: z.string().describe('Only return assignments that hold exactly this role inside their unit.'),
 };
 /**
  * Organization Unit Member Resource Configuration Factory.

package/dist/esm/organizations/organization-unit-members.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-unit-members.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-unit-members.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,sCAAsC,GAAG;IAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC;AASF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iEAAiE,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI7K;IACA,UAAU,EAAE,4BAA4B;IACxC,kBAAkB,EAAE,gBAAgB,CAAC,yBAAyB;IAC9D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;IACvG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,0FAA0F;oBAC1F,2BAA2B;oBAC3B,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,sCAAsC;iBACrD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Organization Unit Member Shared Resource Configuration\n *\n * The junction resource that replaced `OrganizationMember.organizationUnitsMembership` (plan\n * decision D-B5). See {@link OrganizationUnitMemberSchema} for why the embedded array could not\n * carry these semantics.\n */\n\nimport { z } from 'zod';\nimport { OrganizationUnitMemberSchema } from './organization-unit-members.shared.schemas';\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nconst ORGANIZATION_UNIT_MEMBER_FILTER_FIELDS = {\n  organizationUnitId: z.string(),\n  organizationMemberId: z.string(),\n  role: z.string(),\n};\n\ntype OrganizationUnitMemberCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/**\n * Organization Unit Member Resource Configuration Factory.\n *\n * Read access is ORG_MEMBER (the org chart and who sits where is ordinary directory information\n * inside a tenant); every WRITE is ORG_ADMIN, because a unit assignment is a role grant and becomes\n * live authority once WS-C wires units into authorization.\n */\nexport const organizationUnitMemberResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  OrganizationUnitMemberCoreOperations,\n  typeof OrganizationUnitMemberSchema\n>({\n  mainSchema: OrganizationUnitMemberSchema,\n  resourceIdentifier: CoreResourceType.ORGANIZATION_UNIT_MEMBERS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_UNIT_MEMBERS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE,\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          // A unit assignment is a role grant; the role-ceiling gate additionally bounds WHICH role\n          // an admin may grant here.\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: ORGANIZATION_UNIT_MEMBER_FILTER_FIELDS,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n  },\n});\n"]}
+{"version":3,"file":"organization-unit-members.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/organizations/organization-unit-members.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAErF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,sCAAsC,GAAG;IAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;CACpG,CAAC;AASF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iEAAiE,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI7K;IACA,UAAU,EAAE,4BAA4B;IACxC,kBAAkB,EAAE,gBAAgB,CAAC,yBAAyB;IAC9D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,yBAAyB,CAAC;IACvG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,0FAA0F;oBAC1F,2BAA2B;oBAC3B,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,sCAAsC;iBACrD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Organization Unit Member Shared Resource Configuration\n *\n * The junction resource that replaced `OrganizationMember.organizationUnitsMembership` (plan\n * decision D-B5). See {@link OrganizationUnitMemberSchema} for why the embedded array could not\n * carry these semantics.\n */\n\nimport { z } from 'zod';\nimport { OrganizationUnitMemberSchema } from './organization-unit-members.shared.schemas';\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nconst ORGANIZATION_UNIT_MEMBER_FILTER_FIELDS = {\n  organizationUnitId: z.string(),\n  organizationMemberId: z.string(),\n  role: z.string().describe('Only return assignments that hold exactly this role inside their unit.'),\n};\n\ntype OrganizationUnitMemberCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/**\n * Organization Unit Member Resource Configuration Factory.\n *\n * Read access is ORG_MEMBER (the org chart and who sits where is ordinary directory information\n * inside a tenant); every WRITE is ORG_ADMIN, because a unit assignment is a role grant and becomes\n * live authority once WS-C wires units into authorization.\n */\nexport const organizationUnitMemberResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  OrganizationUnitMemberCoreOperations,\n  typeof OrganizationUnitMemberSchema\n>({\n  mainSchema: OrganizationUnitMemberSchema,\n  resourceIdentifier: CoreResourceType.ORGANIZATION_UNIT_MEMBERS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_UNIT_MEMBERS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE,\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          // A unit assignment is a role grant; the role-ceiling gate additionally bounds WHICH role\n          // an admin may grant here.\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: ORGANIZATION_UNIT_MEMBER_FILTER_FIELDS,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n  },\n});\n"]}

package/dist/esm/organizations/organization-unit-members.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization-unit-members.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/organization-unit-members.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,4BAA4B;;;;;;;;kBA4CvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"organization-unit-members.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/organizations/organization-unit-members.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,4BAA4B;;;;;;;;kBA6CvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/esm/organizations/organization-unit-members.shared.schemas.js

@@ -82,7 +82,8 @@ export const OrganizationUnitMemberSchema = z.object({
      * itself hold. Because a custom implementation resolves by an exact operation-path key, each path
      * carries the gate explicitly; neither inherits it from the other.
      */
-    role: OrgRolesSchema.isDBIndexed().isSummaryField(),
+    role: OrgRolesSchema.isDBIndexed().isSummaryField()
+        .describe('The role the member holds inside this unit: a core organization role or one the application defines. A caller cannot grant a role it does not hold itself.'),
     createdAt: z.date().default(() => new Date()).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),
     updatedAt: z.date().default(() => new Date()).optional().isDBIndexed().excludeFromCreate().excludeFromUpdate(),
 }).businessKeySet([