@wildo-ai/saas-models 1.1.7 → 1.1.9

package/dist/esm/resources/utils/initiator-stamped-field-satisfiability.validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initiator-stamped-field-satisfiability.validation.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/initiator-stamped-field-satisfiability.validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,wCAAwC,wEAAyE,CAAC;AAE/H,MAAM,MAAM,mCAAmC,GAAG,OAAO,wCAAwC,CAAC,MAAM,CAAC,CAAC;AAE1G,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,0EAA0E;AAC1E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,kBAAkB,EAAE,YAAY,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAaD;;;;GAIG;AACH,wBAAgB,2CAA2C,CACzD,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,GACnF,8BAA8B,EAAE,CAoBlC"}
+{"version":3,"file":"initiator-stamped-field-satisfiability.validation.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/initiator-stamped-field-satisfiability.validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,wCAAwC,wEAAyE,CAAC;AAE/H,MAAM,MAAM,mCAAmC,GAAG,OAAO,wCAAwC,CAAC,MAAM,CAAC,CAAC;AAE1G,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,0EAA0E;AAC1E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,kBAAkB,EAAE,YAAY,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAaD;;;;GAIG;AACH,wBAAgB,2CAA2C,CACzD,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,GACnF,8BAA8B,EAAE,CAoBlC"}

package/dist/esm/resources/utils/initiator-stamped-field-satisfiability.validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"initiator-stamped-field-satisfiability.validation.js","sourceRoot":"","sources":["../../../../src/resources/utils/initiator-stamped-field-satisfiability.validation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,YAAY,GACb,MAAM,0BAA0B,CAAC;AAGlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,CAAU,CAAC;AAiB/H,iGAAiG;AACjG,SAAS,cAAc,CAAC,UAAwB;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,CAAC,MAAsC,CAAC,CAAC;IAC5D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,OAAO,CAAC,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;SACzD,MAAM,CAAC,YAAY,CAAC;SACpB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,KAAK,EAAyC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2CAA2C,CACzD,sBAAoF;IAEpF,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,aAAa,EAAE,UAAU,IAAI,aAAa,CAAC,gBAAgB;YAAE,SAAS;QAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,wCAAwC,EAAE,CAAC;YAC7D,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5F,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YACjC,UAAU,CAAC,IAAI,CAAC;gBACd,YAAY,EAAE,aAAa,CAAC,kBAAkB;gBAC9C,KAAK;gBACL,OAAO,EACL,IAAI,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,eAAe,KAAK,mDAAmD;sBACjH,8GAA8G;sBAC9G,2FAA2F;sBAC3F,uFAAuF;aAC5F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  getObjectShape,\n  getZodDefArrayProperty,\n  isDiscriminatedUnion,\n  isOptional,\n  isZodTypeAny,\n} from '@wildo-ai/zod-decorators';\nimport type { ResourceType } from '../resources.shared.core.definitions';\n\n/**\n * Registry-level guard: a field the ENGINE stamps from the initiator's USER must not be REQUIRED.\n *\n * ## The shape (#584)\n *\n * `createdByUserId` is stripped from the CREATE DTO by name — a client may never author it — and is\n * stamped by the repository from `executionContext.initiatorIds.userId`, guarded by `if (userId)` in\n * both adapters (`addUserTracking`, and the PostgreSQL adapter's own copy). `updatedByUserId` /\n * `lastUpdatedByUserId` are stamped the same way on UPDATE.\n *\n * **A machine principal has no `userId`.** An org or application service acting over MCP, A2A,\n * client credentials, a worker or a batch supplies none, so a REQUIRED one of these fields is\n * satisfied by nobody: not the client (stripped), not the repository (the guard skips). Nothing said\n * so at registration or at exposure, and the write failed — or committed and then failed to describe\n * itself — the first time a machine caller reached the resource. That is how `todos` and `todoLists`\n * were found (#577), each only after being exposed.\n *\n * ## A refusal at boot, and why it was a report first\n *\n * The backend refuses to start when this returns anything — the engine's own measurement is that a\n * declaration gets made if and only if the framework refuses to start without it.\n *\n * It shipped as a startup REPORT on the belief that flipping the existing declarations to optional\n * changes PostgreSQL column nullability and so owes a migration in every surface. It does not: the\n * schema planner's contract (version 3) records `sqlType`, `hasIndex`, `isPrimaryKey`, `unique` and\n * `defaultClause` per column and no nullability, so a required-vs-optional change is enforced by the\n * Zod layer alone and leaves every lockfile in sync. Measured on all three PostgreSQL surfaces\n * before the promotion, with the existing declarations flipped in the same change.\n *\n * ## Scope\n *\n * - Only the user-stamped identifiers. The primary-scope foreign keys (`organizationId`, …) are also\n *   context-populated, but from the SCOPE, which a machine principal does carry — they are required on\n *   purpose.\n * - System resources are skipped: the framework owns their write paths and supplies or refuses the\n *   attribution explicitly (the SCIM token mint refuses a principal with no user).\n * - Discriminated-union (polymorphic) schemas are checked on every variant that declares the field.\n */\nexport const INITIATOR_USER_STAMPED_FIELD_IDENTIFIERS = ['createdByUserId', 'updatedByUserId', 'lastUpdatedByUserId'] as const;\n\nexport type InitiatorUserStampedFieldIdentifier = typeof INITIATOR_USER_STAMPED_FIELD_IDENTIFIERS[number];\n\nexport interface InitiatorStampedFieldViolation {\n  readonly resourceType: ResourceType;\n  readonly field: InitiatorUserStampedFieldIdentifier;\n  readonly message: string;\n}\n\n/** Structural subset of a resource configuration this validator needs. */\nexport interface InitiatorStampedFieldResourceInput {\n  readonly resourceIdentifier: ResourceType;\n  readonly mainSchema: z.ZodTypeAny;\n  readonly isSystemResource?: boolean;\n}\n\n/** Every object shape a main schema can present: itself, or each discriminated-union variant. */\nfunction objectShapesOf(mainSchema: z.ZodTypeAny): Record<string, z.ZodTypeAny>[] {\n  const direct = getObjectShape(mainSchema);\n  if (direct) return [direct as Record<string, z.ZodTypeAny>];\n  if (!isDiscriminatedUnion(mainSchema)) return [];\n  return (getZodDefArrayProperty(mainSchema, 'options') ?? [])\n    .filter(isZodTypeAny)\n    .map((option) => getObjectShape(option))\n    .filter((shape): shape is Record<string, z.ZodTypeAny> => !!shape);\n}\n\n/**\n * Report every non-system resource that declares an initiator-user-stamped field as REQUIRED.\n * `isOptional` treats `.optional()`, `.default()` and `.nullish()` as optional; a bare `.nullable()`\n * stays required, which is correct — `null` is not what the stamp's absence produces.\n */\nexport function validateInitiatorStampedFieldSatisfiability(\n  resourceConfigurations: Readonly<Record<string, InitiatorStampedFieldResourceInput>>,\n): InitiatorStampedFieldViolation[] {\n  const violations: InitiatorStampedFieldViolation[] = [];\n  for (const configuration of Object.values(resourceConfigurations)) {\n    if (!configuration?.mainSchema || configuration.isSystemResource) continue;\n    const shapes = objectShapesOf(configuration.mainSchema);\n    for (const field of INITIATOR_USER_STAMPED_FIELD_IDENTIFIERS) {\n      const requiredSomewhere = shapes.some((shape) => shape[field] && !isOptional(shape[field]));\n      if (!requiredSomewhere) continue;\n      violations.push({\n        resourceType: configuration.resourceIdentifier,\n        field,\n        message:\n          `[${String(configuration.resourceIdentifier)}] declares '${field}' as REQUIRED, but the engine stamps it only when`\n          + ' the initiator has a userId. A machine principal (MCP, A2A, client credentials, a worker, a batch) has none,'\n          + ' and a client may never send it, so a machine write to this resource cannot be satisfied.'\n          + ` Declare it \\`.optional()\\` — and generate the migration its nullability change owes.`,\n      });\n    }\n  }\n  return violations;\n}\n"]}
+{"version":3,"file":"initiator-stamped-field-satisfiability.validation.js","sourceRoot":"","sources":["../../../../../src/resources/utils/initiator-stamped-field-satisfiability.validation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,EACV,YAAY,GACb,MAAM,0BAA0B,CAAC;AAGlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,CAAU,CAAC;AAiB/H,iGAAiG;AACjG,SAAS,cAAc,CAAC,UAAwB;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,CAAC,MAAsC,CAAC,CAAC;IAC5D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,OAAO,CAAC,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;SACzD,MAAM,CAAC,YAAY,CAAC;SACpB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,KAAK,EAAyC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2CAA2C,CACzD,sBAAoF;IAEpF,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,aAAa,EAAE,UAAU,IAAI,aAAa,CAAC,gBAAgB;YAAE,SAAS;QAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,wCAAwC,EAAE,CAAC;YAC7D,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5F,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YACjC,UAAU,CAAC,IAAI,CAAC;gBACd,YAAY,EAAE,aAAa,CAAC,kBAAkB;gBAC9C,KAAK;gBACL,OAAO,EACL,IAAI,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,eAAe,KAAK,mDAAmD;sBACjH,8GAA8G;sBAC9G,2FAA2F;sBAC3F,uFAAuF;aAC5F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  getObjectShape,\n  getZodDefArrayProperty,\n  isDiscriminatedUnion,\n  isOptional,\n  isZodTypeAny,\n} from '@wildo-ai/zod-decorators';\nimport type { ResourceType } from '../resources.shared.core.definitions';\n\n/**\n * Registry-level guard: a field the ENGINE stamps from the initiator's USER must not be REQUIRED.\n *\n * ## The shape (#584)\n *\n * `createdByUserId` is stripped from the CREATE DTO by name — a client may never author it — and is\n * stamped by the repository from `executionContext.initiatorIds.userId`, guarded by `if (userId)` in\n * both adapters (`addUserTracking`, and the PostgreSQL adapter's own copy). `updatedByUserId` /\n * `lastUpdatedByUserId` are stamped the same way on UPDATE.\n *\n * **A machine principal has no `userId`.** An org or application service acting over MCP, A2A,\n * client credentials, a worker or a batch supplies none, so a REQUIRED one of these fields is\n * satisfied by nobody: not the client (stripped), not the repository (the guard skips). Nothing said\n * so at registration or at exposure, and the write failed — or committed and then failed to describe\n * itself — the first time a machine caller reached the resource. That is how `todos` and `todoLists`\n * were found (#577), each only after being exposed.\n *\n * ## A refusal at boot, and why it was a report first\n *\n * The backend refuses to start when this returns anything — the engine's own measurement is that a\n * declaration gets made if and only if the framework refuses to start without it.\n *\n * It shipped as a startup REPORT on the belief that flipping the existing declarations to optional\n * changes PostgreSQL column nullability and so owes a migration in every surface. It does not: the\n * schema planner's contract (version 3) records `sqlType`, `hasIndex`, `isPrimaryKey`, `unique` and\n * `defaultClause` per column and no nullability, so a required-vs-optional change is enforced by the\n * Zod layer alone and leaves every lockfile in sync. Measured on all three PostgreSQL surfaces\n * before the promotion, with the existing declarations flipped in the same change.\n *\n * ## Scope\n *\n * - Only the user-stamped identifiers. The primary-scope foreign keys (`organizationId`, …) are also\n *   context-populated, but from the SCOPE, which a machine principal does carry — they are required on\n *   purpose.\n * - System resources are skipped: the framework owns their write paths and supplies or refuses the\n *   attribution explicitly (the SCIM token mint refuses a principal with no user).\n * - Discriminated-union (polymorphic) schemas are checked on every variant that declares the field.\n */\nexport const INITIATOR_USER_STAMPED_FIELD_IDENTIFIERS = ['createdByUserId', 'updatedByUserId', 'lastUpdatedByUserId'] as const;\n\nexport type InitiatorUserStampedFieldIdentifier = typeof INITIATOR_USER_STAMPED_FIELD_IDENTIFIERS[number];\n\nexport interface InitiatorStampedFieldViolation {\n  readonly resourceType: ResourceType;\n  readonly field: InitiatorUserStampedFieldIdentifier;\n  readonly message: string;\n}\n\n/** Structural subset of a resource configuration this validator needs. */\nexport interface InitiatorStampedFieldResourceInput {\n  readonly resourceIdentifier: ResourceType;\n  readonly mainSchema: z.ZodTypeAny;\n  readonly isSystemResource?: boolean;\n}\n\n/** Every object shape a main schema can present: itself, or each discriminated-union variant. */\nfunction objectShapesOf(mainSchema: z.ZodTypeAny): Record<string, z.ZodTypeAny>[] {\n  const direct = getObjectShape(mainSchema);\n  if (direct) return [direct as Record<string, z.ZodTypeAny>];\n  if (!isDiscriminatedUnion(mainSchema)) return [];\n  return (getZodDefArrayProperty(mainSchema, 'options') ?? [])\n    .filter(isZodTypeAny)\n    .map((option) => getObjectShape(option))\n    .filter((shape): shape is Record<string, z.ZodTypeAny> => !!shape);\n}\n\n/**\n * Report every non-system resource that declares an initiator-user-stamped field as REQUIRED.\n * `isOptional` treats `.optional()`, `.default()` and `.nullish()` as optional; a bare `.nullable()`\n * stays required, which is correct — `null` is not what the stamp's absence produces.\n */\nexport function validateInitiatorStampedFieldSatisfiability(\n  resourceConfigurations: Readonly<Record<string, InitiatorStampedFieldResourceInput>>,\n): InitiatorStampedFieldViolation[] {\n  const violations: InitiatorStampedFieldViolation[] = [];\n  for (const configuration of Object.values(resourceConfigurations)) {\n    if (!configuration?.mainSchema || configuration.isSystemResource) continue;\n    const shapes = objectShapesOf(configuration.mainSchema);\n    for (const field of INITIATOR_USER_STAMPED_FIELD_IDENTIFIERS) {\n      const requiredSomewhere = shapes.some((shape) => shape[field] && !isOptional(shape[field]));\n      if (!requiredSomewhere) continue;\n      violations.push({\n        resourceType: configuration.resourceIdentifier,\n        field,\n        message:\n          `[${String(configuration.resourceIdentifier)}] declares '${field}' as REQUIRED, but the engine stamps it only when`\n          + ' the initiator has a userId. A machine principal (MCP, A2A, client credentials, a worker, a batch) has none,'\n          + ' and a client may never send it, so a machine write to this resource cannot be satisfied.'\n          + ` Declare it \\`.optional()\\` — and generate the migration its nullability change owes.`,\n      });\n    }\n  }\n  return violations;\n}\n"]}

package/dist/esm/resources/utils/no-subject-data-stance-coherence.shared.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"no-subject-data-stance-coherence.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/no-subject-data-stance-coherence.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAG7F;;;;;;GAMG;AACH,wBAAgB,8CAA8C,CAAC,MAAM,EAAE;IACrE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC9C,GAAG,SAAS,MAAM,EAAE,CAOpB;AAED,+FAA+F;AAC/F,wBAAgB,wCAAwC,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,MAAM,CAMhJ"}
+{"version":3,"file":"no-subject-data-stance-coherence.shared.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/no-subject-data-stance-coherence.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAG7F;;;;;;GAMG;AACH,wBAAgB,8CAA8C,CAAC,MAAM,EAAE;IACrE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC9C,GAAG,SAAS,MAAM,EAAE,CAOpB;AAED,+FAA+F;AAC/F,wBAAgB,wCAAwC,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,MAAM,CAMhJ"}

package/dist/esm/resources/utils/no-subject-data-stance-coherence.shared.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"no-subject-data-stance-coherence.shared.utils.js","sourceRoot":"","sources":["../../../../src/resources/utils/no-subject-data-stance-coherence.shared.utils.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AAE5G;;;;;;GAMG;AACH,MAAM,UAAU,8CAA8C,CAAC,MAI9D;IACC,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC,eAAe,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACzG,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;SAC1J,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAA2B,CAAC,KAAK,SAAS,CAAC;SACzF,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC;SAC/B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wCAAwC,CAAC,MAA+E;IACtI,OAAO,eAAe,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,0CAA0C;UACzH,0CAA0C,oBAAoB,CAAC,eAAe,mDAAmD;UACjI,iEAAiE;UACjE,IAAI,oBAAoB,CAAC,0BAA0B,SAAS,oBAAoB,CAAC,mCAAmC,KAAK;UACzH,4HAA4H,CAAC;AACnI,CAAC","sourcesContent":["/**\n * `NO_SUBJECT_DATA` against the personal data a resource declares it gets from the system (#2010).\n *\n * `HttpApiErasureStance.NO_SUBJECT_DATA` says the remote rows hold no data about a person, which is why a\n * subject erasure reports `DECLARED_NO_SUBJECT_DATA` for them and reaches nothing. A resource that declares\n * personal-data categories (`.dataCategories()`) on the fields it takes FROM that system says the opposite about\n * the same rows. Both cannot be true, and the stance is the half that erasure acts on, so the contradiction is\n * refused where it is authored, in the resource factory.\n *\n * Which fields come from the system depends on the lane:\n * - a READ-THROUGH binding keeps the rows in the system of record, so every field of the resource is the remote\n *   row's, except the tenant anchors the engine stamps (`HTTP_API_ENGINE_INJECTED_FIELDS`). Whether the resource\n *   also WRITES does not matter: the rows hold the data either way;\n * - a PIPELINE copies only its mapped fields. A field no mapping writes is the application's own, and a `CONSTANT`\n *   entry reads nothing from the source. These are the same fields the privacy notice's source statement counts\n *   (`systemOfRecordFlowsOfResource`), so the refusal and the notice cannot disagree about what came from where.\n *\n * Replaces the narrower write-only rule that `assertHttpApiWriteDeclarationCoherence` carried (#1679 rule 5), which\n * asked only whether a binding WRITES personal fields. Reading them is the same contradiction, and a pipeline copy\n * of them was not checked at all. Wonder Todos' `externalCustomers` held both declarations for twelve days.\n *\n * Fixing a refusal is a question of fact, never of preference:\n * - if the fields really are about a person, the rows hold subject data: declare the stance that says so\n *   (`EXTERNAL_ERASURE_OPERATION`, or `CONTROLLER_ACKNOWLEDGED_NON_ERASURE`);\n * - if they are not (a company's name and its contact details are data about a legal person, outside personal\n *   data), remove the categories.\n *\n * spec-cite: GDPR Recital 14, https://gdpr-info.eu/recitals/no-14/ — \"This Regulation does not cover the processing\n * of personal data which concerns legal persons and in particular undertakings established as legal persons,\n * including the name and the form of the legal person and the contact details of the legal person.\"\n */\nimport type { z } from 'zod';\nimport { getDataCategories, getZodObjectShape, isZodObject } from '@wildo-ai/zod-decorators';\n\nimport { HttpApiErasureStance } from '../../http-api-binding/http-api-erasure-stance.shared';\nimport { HTTP_API_ENGINE_INJECTED_FIELDS } from '../../http-api-binding/read-through-engine-anchors.shared';\n\n/**\n * The fields that declare personal-data categories while the binding they come from declares `NO_SUBJECT_DATA`,\n * sorted. Empty for any other stance, and for a schema that is not an object.\n *\n * `sourcedFields` is the set of fields that come from the system: omit it for a read-through binding (every field\n * but the engine-stamped anchors), pass the pipeline's mapped non-constant local fields for a copy.\n */\nexport function personalFieldsContradictingNoSubjectDataStance(params: {\n  readonly stance: HttpApiErasureStance;\n  readonly mainSchema: z.ZodTypeAny;\n  readonly sourcedFields?: ReadonlySet<string>;\n}): readonly string[] {\n  if (params.stance !== HttpApiErasureStance.NO_SUBJECT_DATA || !isZodObject(params.mainSchema)) return [];\n  return Object.entries(getZodObjectShape(params.mainSchema))\n    .filter(([fieldName]) => (params.sourcedFields === undefined ? !HTTP_API_ENGINE_INJECTED_FIELDS.includes(fieldName) : params.sourcedFields.has(fieldName)))\n    .filter(([, fieldSchema]) => getDataCategories(fieldSchema as z.ZodTypeAny) !== undefined)\n    .map(([fieldName]) => fieldName)\n    .sort();\n}\n\n/** The refusal's text, shared by both lanes so the remedy reads the same wherever it fires. */\nexport function describeNoSubjectDataStanceContradiction(params: { readonly system: string; readonly personalFields: readonly string[] }): string {\n  return `the fields [${params.personalFields.join(', ')}] come from '${params.system}' and declare personal-data categories, `\n    + `while the binding's erasure stance is '${HttpApiErasureStance.NO_SUBJECT_DATA}' — that those rows hold no data about a person. `\n    + 'Both cannot be true. If the fields are about a person, declare '\n    + `'${HttpApiErasureStance.EXTERNAL_ERASURE_OPERATION}' or '${HttpApiErasureStance.CONTROLLER_ACKNOWLEDGED_NON_ERASURE}'. `\n    + 'If they are not (a company\\'s name and its contact details are data about a legal person), remove their .dataCategories().';\n}\n"]}
+{"version":3,"file":"no-subject-data-stance-coherence.shared.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/no-subject-data-stance-coherence.shared.utils.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,2DAA2D,CAAC;AAE5G;;;;;;GAMG;AACH,MAAM,UAAU,8CAA8C,CAAC,MAI9D;IACC,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC,eAAe,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACzG,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;SAC1J,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAA2B,CAAC,KAAK,SAAS,CAAC;SACzF,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC;SAC/B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wCAAwC,CAAC,MAA+E;IACtI,OAAO,eAAe,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,0CAA0C;UACzH,0CAA0C,oBAAoB,CAAC,eAAe,mDAAmD;UACjI,iEAAiE;UACjE,IAAI,oBAAoB,CAAC,0BAA0B,SAAS,oBAAoB,CAAC,mCAAmC,KAAK;UACzH,4HAA4H,CAAC;AACnI,CAAC","sourcesContent":["/**\n * `NO_SUBJECT_DATA` against the personal data a resource declares it gets from the system (#2010).\n *\n * `HttpApiErasureStance.NO_SUBJECT_DATA` says the remote rows hold no data about a person, which is why a\n * subject erasure reports `DECLARED_NO_SUBJECT_DATA` for them and reaches nothing. A resource that declares\n * personal-data categories (`.dataCategories()`) on the fields it takes FROM that system says the opposite about\n * the same rows. Both cannot be true, and the stance is the half that erasure acts on, so the contradiction is\n * refused where it is authored, in the resource factory.\n *\n * Which fields come from the system depends on the lane:\n * - a READ-THROUGH binding keeps the rows in the system of record, so every field of the resource is the remote\n *   row's, except the tenant anchors the engine stamps (`HTTP_API_ENGINE_INJECTED_FIELDS`). Whether the resource\n *   also WRITES does not matter: the rows hold the data either way;\n * - a PIPELINE copies only its mapped fields. A field no mapping writes is the application's own, and a `CONSTANT`\n *   entry reads nothing from the source. These are the same fields the privacy notice's source statement counts\n *   (`systemOfRecordFlowsOfResource`), so the refusal and the notice cannot disagree about what came from where.\n *\n * Replaces the narrower write-only rule that `assertHttpApiWriteDeclarationCoherence` carried (#1679 rule 5), which\n * asked only whether a binding WRITES personal fields. Reading them is the same contradiction, and a pipeline copy\n * of them was not checked at all. Wonder Todos' `externalCustomers` held both declarations for twelve days.\n *\n * Fixing a refusal is a question of fact, never of preference:\n * - if the fields really are about a person, the rows hold subject data: declare the stance that says so\n *   (`EXTERNAL_ERASURE_OPERATION`, or `CONTROLLER_ACKNOWLEDGED_NON_ERASURE`);\n * - if they are not (a company's name and its contact details are data about a legal person, outside personal\n *   data), remove the categories.\n *\n * spec-cite: GDPR Recital 14, https://gdpr-info.eu/recitals/no-14/ — \"This Regulation does not cover the processing\n * of personal data which concerns legal persons and in particular undertakings established as legal persons,\n * including the name and the form of the legal person and the contact details of the legal person.\"\n */\nimport type { z } from 'zod';\nimport { getDataCategories, getZodObjectShape, isZodObject } from '@wildo-ai/zod-decorators';\n\nimport { HttpApiErasureStance } from '../../http-api-binding/http-api-erasure-stance.shared';\nimport { HTTP_API_ENGINE_INJECTED_FIELDS } from '../../http-api-binding/read-through-engine-anchors.shared';\n\n/**\n * The fields that declare personal-data categories while the binding they come from declares `NO_SUBJECT_DATA`,\n * sorted. Empty for any other stance, and for a schema that is not an object.\n *\n * `sourcedFields` is the set of fields that come from the system: omit it for a read-through binding (every field\n * but the engine-stamped anchors), pass the pipeline's mapped non-constant local fields for a copy.\n */\nexport function personalFieldsContradictingNoSubjectDataStance(params: {\n  readonly stance: HttpApiErasureStance;\n  readonly mainSchema: z.ZodTypeAny;\n  readonly sourcedFields?: ReadonlySet<string>;\n}): readonly string[] {\n  if (params.stance !== HttpApiErasureStance.NO_SUBJECT_DATA || !isZodObject(params.mainSchema)) return [];\n  return Object.entries(getZodObjectShape(params.mainSchema))\n    .filter(([fieldName]) => (params.sourcedFields === undefined ? !HTTP_API_ENGINE_INJECTED_FIELDS.includes(fieldName) : params.sourcedFields.has(fieldName)))\n    .filter(([, fieldSchema]) => getDataCategories(fieldSchema as z.ZodTypeAny) !== undefined)\n    .map(([fieldName]) => fieldName)\n    .sort();\n}\n\n/** The refusal's text, shared by both lanes so the remedy reads the same wherever it fires. */\nexport function describeNoSubjectDataStanceContradiction(params: { readonly system: string; readonly personalFields: readonly string[] }): string {\n  return `the fields [${params.personalFields.join(', ')}] come from '${params.system}' and declare personal-data categories, `\n    + `while the binding's erasure stance is '${HttpApiErasureStance.NO_SUBJECT_DATA}' — that those rows hold no data about a person. `\n    + 'Both cannot be true. If the fields are about a person, declare '\n    + `'${HttpApiErasureStance.EXTERNAL_ERASURE_OPERATION}' or '${HttpApiErasureStance.CONTROLLER_ACKNOWLEDGED_NON_ERASURE}'. `\n    + 'If they are not (a company\\'s name and its contact details are data about a legal person), remove their .dataCategories().';\n}\n"]}

package/dist/esm/resources/utils/persistence-adapter-discrimination.shared.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persistence-adapter-discrimination.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/persistence-adapter-discrimination.shared.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,EAElB,KAAK,sBAAsB,EAC5B,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI;IAAE,QAAQ,EAAE,CAAC,IAAI,kBAAkB,GAAG,CAAC;CAAE,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,EAC1C,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAChC,CAAC,CAUH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,sBAAsB,CAYxB"}
+{"version":3,"file":"persistence-adapter-discrimination.shared.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/persistence-adapter-discrimination.shared.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kBAAkB,EAElB,KAAK,sBAAsB,EAC5B,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI;IAAE,QAAQ,EAAE,CAAC,IAAI,kBAAkB,GAAG,CAAC;CAAE,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,EAC1C,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAChC,CAAC,CAUH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,sBAAsB,CAYxB"}

package/dist/esm/resources/utils/persistence-adapter-discrimination.shared.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"persistence-adapter-discrimination.shared.utils.js","sourceRoot":"","sources":["../../../../src/resources/utils/persistence-adapter-discrimination.shared.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAc5C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAiC;IAEjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,OAAO,CAAC,iCAAiC;cAC9E,uBAAuB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cACvE,4FAA4F;cAC5F,wHAAwH,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,OAA6B,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAC7C,GAA8B;IAE9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,KAAK;cAClD,uBAAuB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cACvE,sFAAsF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import {\n  DEFAULT_PERSISTENCE_ADAPTER,\n  PersistenceAdapter,\n  isPersistenceAdapter,\n  type PersistenceAdapterType,\n} from '../resources-config.shared.schemas';\n\n/**\n * One value per {@link PersistenceAdapter} member — the shape every adapter DECISION routes\n * through.\n *\n * Mapped over the enum so that adding a member makes every literal cases object a COMPILE error\n * (missing key) at each decision site, instead of a silent fall-through into whichever arm an\n * `else` happened to mean. Measured 2026-08-25 before this seam existed: 21 of 30 comparisons\n * tested `=== POSTGRESQL` with an `else` arm that silently meant \"MongoDB\" — a third backing kind\n * would have taken the MongoDB lane at all of them with no compile error and no runtime refusal.\n */\nexport type PersistenceAdapterCases<T> = { readonly [K in PersistenceAdapter]: T };\n\n/**\n * Exhaustive discrimination on a persistence adapter.\n *\n * Prefer this over `adapter === PersistenceAdapter.X ? … : …` whenever BOTH arms carry a real\n * answer (dispatching to a database service, choosing a primary-key column, choosing a compiler).\n * A plain binary comparison stays correct only where one side is a genuinely adapter-specific\n * feature gate (\"does this resource need the PostgreSQL migration door?\") — there, the negative\n * arm means \"not that feature\", not \"the other adapter\", and such sites carry a justified comment\n * instead of this helper.\n *\n * Two guarantees, one per failure direction:\n * - **New enum member** → every call site's `cases` object misses a key → compile error\n *   (see {@link PersistenceAdapterCases}).\n * - **Unknown string at runtime** (erased config, a serialized value from an older or foreign\n *   writer) → throws instead of returning either arm. Thrown as a plain `Error` because this\n *   module is shared-tier (no `ErrorBuilder` here — same precedent as the factory's\n *   configuration errors); backend callers surface it through their ordinary error projection.\n *   It names the value and the supported set so the remedy is legible at the boundary it crossed.\n *\n * Branch values are eagerly evaluated; pass thunks (`() => …`) when construction is expensive or\n * side-effectful and invoke the selected one.\n */\nexport function selectByPersistenceAdapter<T>(\n  adapter: PersistenceAdapterType,\n  cases: PersistenceAdapterCases<T>,\n): T {\n  if (!Object.prototype.hasOwnProperty.call(cases, adapter)) {\n    throw new Error(\n      `Unknown persistence adapter '${String(adapter)}' reached an adapter decision. `\n      + `Supported adapters: ${Object.values(PersistenceAdapter).join(', ')}. `\n      + 'This is a framework configuration defect: a backing kind was declared or stored that this '\n      + 'deployment does not implement, and refusing here prevents it from being silently treated as one of the known adapters.',\n    );\n  }\n  return cases[adapter as PersistenceAdapter];\n}\n\n/**\n * Parse an adapter declaration arriving as a RAW string (an env var, a stored configuration\n * document, any erased boundary).\n *\n * - absent (`undefined` / `null`) or empty string (the compose-interpolation contract for\n *   \"not set\") → {@link DEFAULT_PERSISTENCE_ADAPTER}. An undeclared deployment keeps today's\n *   behavior exactly.\n * - a known member's value → that member.\n * - **present but unknown → throws.** This is the provisioning-door contract: a declaration that\n *   IS authored but names a backing kind this deployment does not know must refuse loudly, never\n *   collapse to MongoDB the way `x === POSTGRESQL ? POSTGRESQL : MONGODB` did — that collapse is\n *   how a platform would have provisioned a MongoDB database for a resource that has none.\n */\nexport function parseDeclaredPersistenceAdapter(\n  raw: string | undefined | null,\n): PersistenceAdapterType {\n  if (raw === undefined || raw === null || raw === '') {\n    return DEFAULT_PERSISTENCE_ADAPTER;\n  }\n  if (!isPersistenceAdapter(raw)) {\n    throw new Error(\n      `Unknown persistence adapter declaration '${raw}'. `\n      + `Supported adapters: ${Object.values(PersistenceAdapter).join(', ')}. `\n      + 'Remove the declaration to use the framework default, or declare a supported adapter.',\n    );\n  }\n  return raw;\n}\n"]}
+{"version":3,"file":"persistence-adapter-discrimination.shared.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/persistence-adapter-discrimination.shared.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAc5C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA+B,EAC/B,KAAiC;IAEjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,OAAO,CAAC,iCAAiC;cAC9E,uBAAuB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cACvE,4FAA4F;cAC5F,wHAAwH,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,OAA6B,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAC7C,GAA8B;IAE9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,KAAK;cAClD,uBAAuB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;cACvE,sFAAsF,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import {\n  DEFAULT_PERSISTENCE_ADAPTER,\n  PersistenceAdapter,\n  isPersistenceAdapter,\n  type PersistenceAdapterType,\n} from '../resources-config.shared.schemas';\n\n/**\n * One value per {@link PersistenceAdapter} member — the shape every adapter DECISION routes\n * through.\n *\n * Mapped over the enum so that adding a member makes every literal cases object a COMPILE error\n * (missing key) at each decision site, instead of a silent fall-through into whichever arm an\n * `else` happened to mean. Measured 2026-08-25 before this seam existed: 21 of 30 comparisons\n * tested `=== POSTGRESQL` with an `else` arm that silently meant \"MongoDB\" — a third backing kind\n * would have taken the MongoDB lane at all of them with no compile error and no runtime refusal.\n */\nexport type PersistenceAdapterCases<T> = { readonly [K in PersistenceAdapter]: T };\n\n/**\n * Exhaustive discrimination on a persistence adapter.\n *\n * Prefer this over `adapter === PersistenceAdapter.X ? … : …` whenever BOTH arms carry a real\n * answer (dispatching to a database service, choosing a primary-key column, choosing a compiler).\n * A plain binary comparison stays correct only where one side is a genuinely adapter-specific\n * feature gate (\"does this resource need the PostgreSQL migration door?\") — there, the negative\n * arm means \"not that feature\", not \"the other adapter\", and such sites carry a justified comment\n * instead of this helper.\n *\n * Two guarantees, one per failure direction:\n * - **New enum member** → every call site's `cases` object misses a key → compile error\n *   (see {@link PersistenceAdapterCases}).\n * - **Unknown string at runtime** (erased config, a serialized value from an older or foreign\n *   writer) → throws instead of returning either arm. Thrown as a plain `Error` because this\n *   module is shared-tier (no `ErrorBuilder` here — same precedent as the factory's\n *   configuration errors); backend callers surface it through their ordinary error projection.\n *   It names the value and the supported set so the remedy is legible at the boundary it crossed.\n *\n * Branch values are eagerly evaluated; pass thunks (`() => …`) when construction is expensive or\n * side-effectful and invoke the selected one.\n */\nexport function selectByPersistenceAdapter<T>(\n  adapter: PersistenceAdapterType,\n  cases: PersistenceAdapterCases<T>,\n): T {\n  if (!Object.prototype.hasOwnProperty.call(cases, adapter)) {\n    throw new Error(\n      `Unknown persistence adapter '${String(adapter)}' reached an adapter decision. `\n      + `Supported adapters: ${Object.values(PersistenceAdapter).join(', ')}. `\n      + 'This is a framework configuration defect: a backing kind was declared or stored that this '\n      + 'deployment does not implement, and refusing here prevents it from being silently treated as one of the known adapters.',\n    );\n  }\n  return cases[adapter as PersistenceAdapter];\n}\n\n/**\n * Parse an adapter declaration arriving as a RAW string (an env var, a stored configuration\n * document, any erased boundary).\n *\n * - absent (`undefined` / `null`) or empty string (the compose-interpolation contract for\n *   \"not set\") → {@link DEFAULT_PERSISTENCE_ADAPTER}. An undeclared deployment keeps today's\n *   behavior exactly.\n * - a known member's value → that member.\n * - **present but unknown → throws.** This is the provisioning-door contract: a declaration that\n *   IS authored but names a backing kind this deployment does not know must refuse loudly, never\n *   collapse to MongoDB the way `x === POSTGRESQL ? POSTGRESQL : MONGODB` did — that collapse is\n *   how a platform would have provisioned a MongoDB database for a resource that has none.\n */\nexport function parseDeclaredPersistenceAdapter(\n  raw: string | undefined | null,\n): PersistenceAdapterType {\n  if (raw === undefined || raw === null || raw === '') {\n    return DEFAULT_PERSISTENCE_ADAPTER;\n  }\n  if (!isPersistenceAdapter(raw)) {\n    throw new Error(\n      `Unknown persistence adapter declaration '${raw}'. `\n      + `Supported adapters: ${Object.values(PersistenceAdapter).join(', ')}. `\n      + 'Remove the declaration to use the framework default, or declare a supported adapter.',\n    );\n  }\n  return raw;\n}\n"]}

package/dist/esm/resources/utils/populated-file-fields.shared.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"populated-file-fields.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/populated-file-fields.shared.utils.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yFAAyF;AACzF,eAAO,MAAM,yBAAyB,EAAG,MAAe,CAAC;AACzD,iGAAiG;AACjG,eAAO,MAAM,4BAA4B,EAAG,OAAgB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,UAkB8B,CAAC;AA+B3E;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;AACtH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;AAChH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,SAAS,CAAC"}
+{"version":3,"file":"populated-file-fields.shared.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/populated-file-fields.shared.utils.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yFAAyF;AACzF,eAAO,MAAM,yBAAyB,EAAG,MAAe,CAAC;AACzD,iGAAiG;AACjG,eAAO,MAAM,4BAA4B,EAAG,OAAgB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,UAkB8B,CAAC;AA+B3E;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;AACtH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;AAChH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,SAAS,CAAC"}

package/dist/esm/resources/utils/populated-file-fields.shared.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"populated-file-fields.shared.utils.js","sourceRoot":"","sources":["../../../../src/resources/utils/populated-file-fields.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,aAAa,EACb,eAAe,EACf,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yFAAyF;AACzF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAe,CAAC;AACzD,iGAAiG;AACjG,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAgB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAiB,CAAC,CAAC,WAAW,CAAC;IACrE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,kQAAkQ,CAAC;IAC7S,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACxE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACtG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;IACxI,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACvF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC1E,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC1F,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gIAAgI,CAAC;CAC3M,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC,CAAC;AAE3E,SAAS,mBAAmB,CAA+B,MAAoB,EAAE,OAAgB;IAC/F,MAAM,QAAQ,GAAI,MAAc,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAe,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;IAC/C,CAAC;IACD,wGAAwG;IACxG,sGAAsG;IACtG,0BAA0B;IAC1B,MAAM,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAwC,CAAC;IACvF,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAgB,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iHAAiH;AACjH,SAAS,aAAa,CAAC,IAAkB;IACvC,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACtG,IAAI,YAAY,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,qDAAqD;IAC7F,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ;QACrC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;QAC1H,CAAC,CAAC,2BAA2B,CAAC,QAAQ,EAAE,CAAC;IAC3C,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAWD,MAAM,UAAU,gCAAgC,CAAC,MAAgC,EAAE,gBAAiC,IAAI,OAAO,EAAU;IACvI,iFAAiF;IACjF,iGAAiG;IACjG,iGAAiG;IACjG,4EAA4E;IAC5E,0FAA0F;IAC1F,EAAE;IACF,iGAAiG;IACjG,kGAAkG;IAClG,iGAAiG;IACjG,4FAA4F;IAC5F,0FAA0F;IAC1F,EAAE;IACF,gGAAgG;IAChG,+CAA+C;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAEjF,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,YAAY,GAAG,gCAAgC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAC5E,IAAI,YAAY,KAAK,KAAK;gBAAE,OAAO,MAAM,CAAC;YAC1C,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE;gBACzB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;oBACrB,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE;oBACzB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAY,CAAC,CAAC;YACvF,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YACzC,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzI,CAAC;QAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAA+B,CAAC;YACxF,IAAI,CAAC,OAAO,EAAE,MAAM;gBAAE,OAAO,MAAM,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;YACjG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;YAC/E,MAAM,OAAO,GAAiB,aAAa;gBACzC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,aAAa,EAAE,OAAsE,CAAC;gBAC7G,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAA0D,CAAC,CAAC;YACxE,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAA6B,CAAC;YACjF,IAAI,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC;YAC5B,MAAM,cAAc,GAAG,gCAAgC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChF,OAAO,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAExC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,YAAY,GAAiC,EAAE,CAAC;QACtD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAA2B,EAAE,aAAa,CAAC,CAAC;YAC7F,IAAI,OAAO,KAAK,WAAW;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC5C,YAAY,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAC5B,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC","sourcesContent":["/**\n * The shape a file field takes on a POPULATED read, and the DTO that describes it (issue #1059).\n *\n * A file field is STORED as a reference — `{ fileId, updatedAt }` for one file, `{ fileIds, updatedAt }`\n * for several. A SUMMARY or CONTEXT read runs file population, which used to REPLACE that reference with\n * the file's metadata (`toMetadataResponse`: readiness, filename, size, url, …). The operation's DTO still\n * described the reference, so `transformOutput` refused every context read of a resource whose file\n * existed: `expected date, received Invalid Date` at `<field>.updatedAt`, a 500, and a degraded body\n * instead of the record. Measured 2026-09-14 on Wonder Todos.\n *\n * Population now keeps the reference and adds the metadata BESIDE it — `file` for one, `files` for\n * several — and the SUMMARY / CONTEXT DTOs declare that companion. Three candidates were weighed:\n *\n * - **Declare the replacement.** The frontend reads a file field as its stored reference (`'fileId' in\n *   value` / `'fileIds' in value`, then fetches metadata by id itself), so a metadata array in place of\n *   `{ fileIds }` fails its multiple-file guard outright. Declaring the replacement would have made the\n *   DTO agree with a shape one consumer cannot read.\n * - **Populate after `transformOutput`.** Validation would then never see the populated value, and the\n *   response DTO — the OpenAPI contract — would describe less than the wire carries.\n * - **Keep the reference (chosen).** Every reader of the reference keeps working, the companion is\n *   OPTIONAL so a read with population disabled or failed (`populateFileFieldsForSingle` keeps the\n *   original value on any error) still validates, and a consumer that wants the metadata finds it at a\n *   named key.\n *\n * The companion's schema carries the file field's decorator metadata forward, so the widened field is\n * still detected as a FILE field (`isFileSchema`, `getSchemaType`) — the same property\n * `resources-config-operations.dtos-builder.file-metadata-coercion.test.ts` pins for date coercion.\n */\nimport {\n  FileDisplayNature,\n  FileReadiness,\n  FileUploaderEntityType,\n  getFileMetadata,\n  getZodDef,\n  getZodDefArrayProperty,\n  getZodDefProperty,\n  getZodDefSchemaProperty,\n  getZodDefStringProperty,\n  getZodObjectShape,\n  getZodType,\n  isZodArray,\n  isZodDefault,\n  isZodNullable,\n  isZodObject,\n  isZodOptional,\n  SCHEMA_METADATA,\n  withArrayElement,\n} from '@wildo-ai/zod-decorators';\nimport { z } from 'zod';\n\n/** The key a populated single-file field carries its metadata under, beside `fileId`. */\nexport const POPULATED_SINGLE_FILE_KEY = 'file' as const;\n/** The key a populated multiple-file field carries its metadata list under, beside `fileIds`. */\nexport const POPULATED_MULTIPLE_FILES_KEY = 'files' as const;\n\n/**\n * `FileMetadata` (`@wildo-ai/zod-decorators`) as a Zod schema, at the NETWORK boundary: `uploadedAt`\n * coerces an ISO string, and the object is loose so a metadata key added later is carried rather\n * than stripped — this is server-produced data, never a request.\n */\nexport const PopulatedFileMetadataSchema: z.ZodTypeAny = z.looseObject({\n  readiness: z.enum(FileReadiness).describe(\"Whether the file may be attached: `ready` may be, `attached` belongs to its current record and is not reused elsewhere, `processing` is still being checked and must be read again, and `unavailable` cannot be newly attached. An upload's success is not this.\"),\n  fileId: z.string().min(1).describe(\"The file's identifier.\"),\n  filename: z.string().describe(\"The file's original name.\"),\n  size: z.number().describe(\"The file's size in bytes.\"),\n  mimeType: z.string().describe(\"The file's media type.\"),\n  extension: z.string().optional().describe(\"The file's extension, without the dot.\"),\n  checksum: z.string().optional().describe(\"A checksum of the file's content.\"),\n  url: z.string().optional().describe(\"Where the file can be downloaded.\"),\n  thumbnailUrl: z.string().optional().describe(\"Where a thumbnail of an image or video can be fetched.\"),\n  nature: z.enum(FileDisplayNature).optional().describe(\"What kind of file it is, for display: image, video, audio, document or generic.\"),\n  width: z.number().optional().describe(\"An image's width in pixels.\"),\n  height: z.number().optional().describe(\"An image's height in pixels.\"),\n  duration: z.number().optional().describe(\"An audio or video file's length in seconds.\"),\n  pageCount: z.number().optional().describe(\"A document's number of pages.\"),\n  uploadedAt: z.coerce.date().describe(\"When the file was uploaded.\"),\n  uploadedBy: z.string().optional().describe(\"The identifier of whoever uploaded the file.\"),\n  uploadedByEntityType: z.enum(FileUploaderEntityType).optional().describe(\"What kind of principal uploaded the file: a user, an anonymous user, or an organization's or the application's machine client.\"),\n}).describe(\"The file's details, included when the read populates files.\");\n\nfunction carrySchemaMetadata<TSchema extends z.ZodTypeAny>(source: z.ZodTypeAny, rebuilt: TSchema): TSchema {\n  const metadata = (source as any)[SCHEMA_METADATA];\n  if (metadata !== undefined) {\n    (rebuilt as any)[SCHEMA_METADATA] = metadata;\n  }\n  // Zod's own registry too (`.describe()` / `.meta()`, #1625): `.extend()` clones without the parent link\n  // a clone inherits it through, so a widened file field would otherwise publish undescribed. Not `id`,\n  // which names one schema.\n  const registered = z.globalRegistry.get(source) as Record<string, unknown> | undefined;\n  if (registered !== undefined && !z.globalRegistry.has(rebuilt)) {\n    const { id: _id, ...carried } = registered;\n    if (Object.keys(carried).length > 0) z.globalRegistry.add(rebuilt, carried as never);\n  }\n  return rebuilt;\n}\n\n/** A `z_file()` leaf (the reference object, metadata attached) widened with its optional populated companion. */\nfunction widenFileLeaf(leaf: z.ZodTypeAny): z.ZodTypeAny {\n  const fileMetadata = getFileMetadata(leaf);\n  if (!fileMetadata || !isZodObject(leaf)) return leaf;\n  const shape = getZodObjectShape(leaf);\n  const companionKey = fileMetadata.multiple ? POPULATED_MULTIPLE_FILES_KEY : POPULATED_SINGLE_FILE_KEY;\n  if (companionKey in shape) return leaf; // already widened (a DTO derived from a widened DTO)\n  const companion = fileMetadata.multiple\n    ? z.array(PopulatedFileMetadataSchema).optional().describe(\"Each file's details, included when the read populates files.\")\n    : PopulatedFileMetadataSchema.optional();\n  return carrySchemaMetadata(leaf, leaf.extend({ [companionKey]: companion }));\n}\n\n/**\n * Rebuild `schema` so every `z_file()` field accepts its populated companion beside the stored\n * reference. Identity-preserving where nothing beneath changed (a wrapper returns the ORIGINAL\n * instance, so an enclosing object is not rebuilt and keeps its metadata — the #989 lesson recorded\n * on `stripTemplatableFileFieldsRecursively`). Applied to READ-side DTOs only, after date coercion.\n */\nexport function widenFileFieldsForPopulatedReads(schema: z.ZodTypeAny, activeSchemas?: WeakSet<object>): z.ZodTypeAny;\nexport function widenFileFieldsForPopulatedReads(schema: undefined, activeSchemas?: WeakSet<object>): undefined;\nexport function widenFileFieldsForPopulatedReads(schema: z.ZodTypeAny | undefined, activeSchemas?: WeakSet<object>): z.ZodTypeAny | undefined;\nexport function widenFileFieldsForPopulatedReads(schema: z.ZodTypeAny | undefined, activeSchemas: WeakSet<object> = new WeakSet<object>()): z.ZodTypeAny | undefined {\n  // An ABSENT schema passes through (#1138). `activeSchemas.add(undefined)` throws\n  // `TypeError: Invalid value used in weak set` — a message naming neither a DTO nor an operation,\n  // raised while a registry is being initialized, so it reaches a human as a backend that will not\n  // boot. `summaryDto` and `contextDto` are declared OPTIONAL on an operation\n  // (`resources-config.shared.schemas.ts:2098`), so absent is a state the contract permits.\n  //\n  // Measured rather than assumed about where it arrives from: `buildAllOperationDtos` DERIVES both\n  // (:545, :572), so its own four call sites never pass an absent one. The reported failure was the\n  // dev companion's projector rebuilding DTOs against the runtime registry — an EXTERNAL caller of\n  // this exported function, which is exactly why the guard belongs here and not at those call\n  // sites (`invariant-call-site-enumeration.md`: prefer making the invariant unbypassable).\n  //\n  // The overloads keep a definite schema in returning a definite schema, so no caller is handed a\n  // widened `| undefined` it then has to narrow.\n  if (!schema) return schema;\n  if (activeSchemas.has(schema)) return schema;\n  activeSchemas.add(schema);\n  try {\n    if (getFileMetadata(schema) && isZodObject(schema)) return widenFileLeaf(schema);\n\n    if (isZodOptional(schema) || isZodNullable(schema) || isZodDefault(schema)) {\n      const inner = getZodDefSchemaProperty(schema, 'innerType');\n      if (!inner) return schema;\n      const widenedInner = widenFileFieldsForPopulatedReads(inner, activeSchemas);\n      if (widenedInner === inner) return schema;\n      const rewrapped = isZodOptional(schema)\n        ? widenedInner.optional()\n        : isZodNullable(schema)\n          ? widenedInner.nullable()\n          : widenedInner.default(() => getZodDefProperty(schema, 'defaultValue') as unknown);\n      return carrySchemaMetadata(schema, rewrapped);\n    }\n\n    const schemaType = getZodType(schema);\n    if (schemaType === 'lazy') {\n      const getter = getZodDef(schema)?.getter;\n      return typeof getter === 'function' ? z.lazy(() => widenFileFieldsForPopulatedReads(getter() as z.ZodTypeAny, activeSchemas)) : schema;\n    }\n\n    if (schemaType === 'union') {\n      const discriminator = getZodDefStringProperty(schema, 'discriminator');\n      const options = getZodDefArrayProperty(schema, 'options') as z.ZodTypeAny[] | undefined;\n      if (!options?.length) return schema;\n      const widened = options.map((option) => widenFileFieldsForPopulatedReads(option, activeSchemas));\n      if (widened.every((option, index) => option === options[index])) return schema;\n      const rebuilt: z.ZodTypeAny = discriminator\n        ? z.discriminatedUnion(discriminator, widened as [z.ZodObject<any>, z.ZodObject<any>, ...z.ZodObject<any>[]])\n        : z.union(widened as [z.ZodTypeAny, z.ZodTypeAny, ...z.ZodTypeAny[]]);\n      return carrySchemaMetadata(schema, rebuilt);\n    }\n\n    if (isZodArray(schema)) {\n      const element = getZodDefProperty(schema, 'element') as z.ZodTypeAny | undefined;\n      if (!element) return schema;\n      const widenedElement = widenFileFieldsForPopulatedReads(element, activeSchemas);\n      return widenedElement === element ? schema : withArrayElement(schema, widenedElement);\n    }\n\n    if (!isZodObject(schema)) return schema;\n\n    const shape = getZodObjectShape(schema);\n    const widenedShape: Record<string, z.ZodTypeAny> = {};\n    let changed = false;\n    for (const [fieldName, fieldSchema] of Object.entries(shape)) {\n      const widened = widenFileFieldsForPopulatedReads(fieldSchema as z.ZodTypeAny, activeSchemas);\n      if (widened !== fieldSchema) changed = true;\n      widenedShape[fieldName] = widened;\n    }\n    if (!changed) return schema;\n    return carrySchemaMetadata(schema, schema.extend(widenedShape));\n  } finally {\n    activeSchemas.delete(schema);\n  }\n}\n"]}
+{"version":3,"file":"populated-file-fields.shared.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/populated-file-fields.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,aAAa,EACb,eAAe,EACf,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yFAAyF;AACzF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAe,CAAC;AACzD,iGAAiG;AACjG,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAgB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAiB,CAAC,CAAC,WAAW,CAAC;IACrE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,kQAAkQ,CAAC;IAC7S,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACxE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACtG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC;IACxI,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACvF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC1E,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC1F,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gIAAgI,CAAC;CAC3M,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC,CAAC;AAE3E,SAAS,mBAAmB,CAA+B,MAAoB,EAAE,OAAgB;IAC/F,MAAM,QAAQ,GAAI,MAAc,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAe,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC;IAC/C,CAAC;IACD,wGAAwG;IACxG,sGAAsG;IACtG,0BAA0B;IAC1B,MAAM,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAwC,CAAC;IACvF,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAgB,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iHAAiH;AACjH,SAAS,aAAa,CAAC,IAAkB;IACvC,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACtG,IAAI,YAAY,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC,CAAC,qDAAqD;IAC7F,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ;QACrC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;QAC1H,CAAC,CAAC,2BAA2B,CAAC,QAAQ,EAAE,CAAC;IAC3C,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAWD,MAAM,UAAU,gCAAgC,CAAC,MAAgC,EAAE,gBAAiC,IAAI,OAAO,EAAU;IACvI,iFAAiF;IACjF,iGAAiG;IACjG,iGAAiG;IACjG,4EAA4E;IAC5E,0FAA0F;IAC1F,EAAE;IACF,iGAAiG;IACjG,kGAAkG;IAClG,iGAAiG;IACjG,4FAA4F;IAC5F,0FAA0F;IAC1F,EAAE;IACF,gGAAgG;IAChG,+CAA+C;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QAEjF,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,YAAY,GAAG,gCAAgC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAC5E,IAAI,YAAY,KAAK,KAAK;gBAAE,OAAO,MAAM,CAAC;YAC1C,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE;gBACzB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;oBACrB,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE;oBACzB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAY,CAAC,CAAC;YACvF,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YACzC,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzI,CAAC;QAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAA+B,CAAC;YACxF,IAAI,CAAC,OAAO,EAAE,MAAM;gBAAE,OAAO,MAAM,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;YACjG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;YAC/E,MAAM,OAAO,GAAiB,aAAa;gBACzC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,aAAa,EAAE,OAAsE,CAAC;gBAC7G,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAA0D,CAAC,CAAC;YACxE,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAA6B,CAAC;YACjF,IAAI,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC;YAC5B,MAAM,cAAc,GAAG,gCAAgC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChF,OAAO,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAExC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,YAAY,GAAiC,EAAE,CAAC;QACtD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,gCAAgC,CAAC,WAA2B,EAAE,aAAa,CAAC,CAAC;YAC7F,IAAI,OAAO,KAAK,WAAW;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC5C,YAAY,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAC5B,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC","sourcesContent":["/**\n * The shape a file field takes on a POPULATED read, and the DTO that describes it (issue #1059).\n *\n * A file field is STORED as a reference — `{ fileId, updatedAt }` for one file, `{ fileIds, updatedAt }`\n * for several. A SUMMARY or CONTEXT read runs file population, which used to REPLACE that reference with\n * the file's metadata (`toMetadataResponse`: readiness, filename, size, url, …). The operation's DTO still\n * described the reference, so `transformOutput` refused every context read of a resource whose file\n * existed: `expected date, received Invalid Date` at `<field>.updatedAt`, a 500, and a degraded body\n * instead of the record. Measured 2026-09-14 on Wonder Todos.\n *\n * Population now keeps the reference and adds the metadata BESIDE it — `file` for one, `files` for\n * several — and the SUMMARY / CONTEXT DTOs declare that companion. Three candidates were weighed:\n *\n * - **Declare the replacement.** The frontend reads a file field as its stored reference (`'fileId' in\n *   value` / `'fileIds' in value`, then fetches metadata by id itself), so a metadata array in place of\n *   `{ fileIds }` fails its multiple-file guard outright. Declaring the replacement would have made the\n *   DTO agree with a shape one consumer cannot read.\n * - **Populate after `transformOutput`.** Validation would then never see the populated value, and the\n *   response DTO — the OpenAPI contract — would describe less than the wire carries.\n * - **Keep the reference (chosen).** Every reader of the reference keeps working, the companion is\n *   OPTIONAL so a read with population disabled or failed (`populateFileFieldsForSingle` keeps the\n *   original value on any error) still validates, and a consumer that wants the metadata finds it at a\n *   named key.\n *\n * The companion's schema carries the file field's decorator metadata forward, so the widened field is\n * still detected as a FILE field (`isFileSchema`, `getSchemaType`) — the same property\n * `resources-config-operations.dtos-builder.file-metadata-coercion.test.ts` pins for date coercion.\n */\nimport {\n  FileDisplayNature,\n  FileReadiness,\n  FileUploaderEntityType,\n  getFileMetadata,\n  getZodDef,\n  getZodDefArrayProperty,\n  getZodDefProperty,\n  getZodDefSchemaProperty,\n  getZodDefStringProperty,\n  getZodObjectShape,\n  getZodType,\n  isZodArray,\n  isZodDefault,\n  isZodNullable,\n  isZodObject,\n  isZodOptional,\n  SCHEMA_METADATA,\n  withArrayElement,\n} from '@wildo-ai/zod-decorators';\nimport { z } from 'zod';\n\n/** The key a populated single-file field carries its metadata under, beside `fileId`. */\nexport const POPULATED_SINGLE_FILE_KEY = 'file' as const;\n/** The key a populated multiple-file field carries its metadata list under, beside `fileIds`. */\nexport const POPULATED_MULTIPLE_FILES_KEY = 'files' as const;\n\n/**\n * `FileMetadata` (`@wildo-ai/zod-decorators`) as a Zod schema, at the NETWORK boundary: `uploadedAt`\n * coerces an ISO string, and the object is loose so a metadata key added later is carried rather\n * than stripped — this is server-produced data, never a request.\n */\nexport const PopulatedFileMetadataSchema: z.ZodTypeAny = z.looseObject({\n  readiness: z.enum(FileReadiness).describe(\"Whether the file may be attached: `ready` may be, `attached` belongs to its current record and is not reused elsewhere, `processing` is still being checked and must be read again, and `unavailable` cannot be newly attached. An upload's success is not this.\"),\n  fileId: z.string().min(1).describe(\"The file's identifier.\"),\n  filename: z.string().describe(\"The file's original name.\"),\n  size: z.number().describe(\"The file's size in bytes.\"),\n  mimeType: z.string().describe(\"The file's media type.\"),\n  extension: z.string().optional().describe(\"The file's extension, without the dot.\"),\n  checksum: z.string().optional().describe(\"A checksum of the file's content.\"),\n  url: z.string().optional().describe(\"Where the file can be downloaded.\"),\n  thumbnailUrl: z.string().optional().describe(\"Where a thumbnail of an image or video can be fetched.\"),\n  nature: z.enum(FileDisplayNature).optional().describe(\"What kind of file it is, for display: image, video, audio, document or generic.\"),\n  width: z.number().optional().describe(\"An image's width in pixels.\"),\n  height: z.number().optional().describe(\"An image's height in pixels.\"),\n  duration: z.number().optional().describe(\"An audio or video file's length in seconds.\"),\n  pageCount: z.number().optional().describe(\"A document's number of pages.\"),\n  uploadedAt: z.coerce.date().describe(\"When the file was uploaded.\"),\n  uploadedBy: z.string().optional().describe(\"The identifier of whoever uploaded the file.\"),\n  uploadedByEntityType: z.enum(FileUploaderEntityType).optional().describe(\"What kind of principal uploaded the file: a user, an anonymous user, or an organization's or the application's machine client.\"),\n}).describe(\"The file's details, included when the read populates files.\");\n\nfunction carrySchemaMetadata<TSchema extends z.ZodTypeAny>(source: z.ZodTypeAny, rebuilt: TSchema): TSchema {\n  const metadata = (source as any)[SCHEMA_METADATA];\n  if (metadata !== undefined) {\n    (rebuilt as any)[SCHEMA_METADATA] = metadata;\n  }\n  // Zod's own registry too (`.describe()` / `.meta()`, #1625): `.extend()` clones without the parent link\n  // a clone inherits it through, so a widened file field would otherwise publish undescribed. Not `id`,\n  // which names one schema.\n  const registered = z.globalRegistry.get(source) as Record<string, unknown> | undefined;\n  if (registered !== undefined && !z.globalRegistry.has(rebuilt)) {\n    const { id: _id, ...carried } = registered;\n    if (Object.keys(carried).length > 0) z.globalRegistry.add(rebuilt, carried as never);\n  }\n  return rebuilt;\n}\n\n/** A `z_file()` leaf (the reference object, metadata attached) widened with its optional populated companion. */\nfunction widenFileLeaf(leaf: z.ZodTypeAny): z.ZodTypeAny {\n  const fileMetadata = getFileMetadata(leaf);\n  if (!fileMetadata || !isZodObject(leaf)) return leaf;\n  const shape = getZodObjectShape(leaf);\n  const companionKey = fileMetadata.multiple ? POPULATED_MULTIPLE_FILES_KEY : POPULATED_SINGLE_FILE_KEY;\n  if (companionKey in shape) return leaf; // already widened (a DTO derived from a widened DTO)\n  const companion = fileMetadata.multiple\n    ? z.array(PopulatedFileMetadataSchema).optional().describe(\"Each file's details, included when the read populates files.\")\n    : PopulatedFileMetadataSchema.optional();\n  return carrySchemaMetadata(leaf, leaf.extend({ [companionKey]: companion }));\n}\n\n/**\n * Rebuild `schema` so every `z_file()` field accepts its populated companion beside the stored\n * reference. Identity-preserving where nothing beneath changed (a wrapper returns the ORIGINAL\n * instance, so an enclosing object is not rebuilt and keeps its metadata — the #989 lesson recorded\n * on `stripTemplatableFileFieldsRecursively`). Applied to READ-side DTOs only, after date coercion.\n */\nexport function widenFileFieldsForPopulatedReads(schema: z.ZodTypeAny, activeSchemas?: WeakSet<object>): z.ZodTypeAny;\nexport function widenFileFieldsForPopulatedReads(schema: undefined, activeSchemas?: WeakSet<object>): undefined;\nexport function widenFileFieldsForPopulatedReads(schema: z.ZodTypeAny | undefined, activeSchemas?: WeakSet<object>): z.ZodTypeAny | undefined;\nexport function widenFileFieldsForPopulatedReads(schema: z.ZodTypeAny | undefined, activeSchemas: WeakSet<object> = new WeakSet<object>()): z.ZodTypeAny | undefined {\n  // An ABSENT schema passes through (#1138). `activeSchemas.add(undefined)` throws\n  // `TypeError: Invalid value used in weak set` — a message naming neither a DTO nor an operation,\n  // raised while a registry is being initialized, so it reaches a human as a backend that will not\n  // boot. `summaryDto` and `contextDto` are declared OPTIONAL on an operation\n  // (`resources-config.shared.schemas.ts:2098`), so absent is a state the contract permits.\n  //\n  // Measured rather than assumed about where it arrives from: `buildAllOperationDtos` DERIVES both\n  // (:545, :572), so its own four call sites never pass an absent one. The reported failure was the\n  // dev companion's projector rebuilding DTOs against the runtime registry — an EXTERNAL caller of\n  // this exported function, which is exactly why the guard belongs here and not at those call\n  // sites (`invariant-call-site-enumeration.md`: prefer making the invariant unbypassable).\n  //\n  // The overloads keep a definite schema in returning a definite schema, so no caller is handed a\n  // widened `| undefined` it then has to narrow.\n  if (!schema) return schema;\n  if (activeSchemas.has(schema)) return schema;\n  activeSchemas.add(schema);\n  try {\n    if (getFileMetadata(schema) && isZodObject(schema)) return widenFileLeaf(schema);\n\n    if (isZodOptional(schema) || isZodNullable(schema) || isZodDefault(schema)) {\n      const inner = getZodDefSchemaProperty(schema, 'innerType');\n      if (!inner) return schema;\n      const widenedInner = widenFileFieldsForPopulatedReads(inner, activeSchemas);\n      if (widenedInner === inner) return schema;\n      const rewrapped = isZodOptional(schema)\n        ? widenedInner.optional()\n        : isZodNullable(schema)\n          ? widenedInner.nullable()\n          : widenedInner.default(() => getZodDefProperty(schema, 'defaultValue') as unknown);\n      return carrySchemaMetadata(schema, rewrapped);\n    }\n\n    const schemaType = getZodType(schema);\n    if (schemaType === 'lazy') {\n      const getter = getZodDef(schema)?.getter;\n      return typeof getter === 'function' ? z.lazy(() => widenFileFieldsForPopulatedReads(getter() as z.ZodTypeAny, activeSchemas)) : schema;\n    }\n\n    if (schemaType === 'union') {\n      const discriminator = getZodDefStringProperty(schema, 'discriminator');\n      const options = getZodDefArrayProperty(schema, 'options') as z.ZodTypeAny[] | undefined;\n      if (!options?.length) return schema;\n      const widened = options.map((option) => widenFileFieldsForPopulatedReads(option, activeSchemas));\n      if (widened.every((option, index) => option === options[index])) return schema;\n      const rebuilt: z.ZodTypeAny = discriminator\n        ? z.discriminatedUnion(discriminator, widened as [z.ZodObject<any>, z.ZodObject<any>, ...z.ZodObject<any>[]])\n        : z.union(widened as [z.ZodTypeAny, z.ZodTypeAny, ...z.ZodTypeAny[]]);\n      return carrySchemaMetadata(schema, rebuilt);\n    }\n\n    if (isZodArray(schema)) {\n      const element = getZodDefProperty(schema, 'element') as z.ZodTypeAny | undefined;\n      if (!element) return schema;\n      const widenedElement = widenFileFieldsForPopulatedReads(element, activeSchemas);\n      return widenedElement === element ? schema : withArrayElement(schema, widenedElement);\n    }\n\n    if (!isZodObject(schema)) return schema;\n\n    const shape = getZodObjectShape(schema);\n    const widenedShape: Record<string, z.ZodTypeAny> = {};\n    let changed = false;\n    for (const [fieldName, fieldSchema] of Object.entries(shape)) {\n      const widened = widenFileFieldsForPopulatedReads(fieldSchema as z.ZodTypeAny, activeSchemas);\n      if (widened !== fieldSchema) changed = true;\n      widenedShape[fieldName] = widened;\n    }\n    if (!changed) return schema;\n    return carrySchemaMetadata(schema, schema.extend(widenedShape));\n  } finally {\n    activeSchemas.delete(schema);\n  }\n}\n"]}

package/dist/esm/resources/utils/repository-dto-builder.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository-dto-builder.utils.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/repository-dto-builder.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;;;;;;;;;GAUG;AACH,qBAAa,yBAAyB;IAEpC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,mBAAmB,CACxB,YAAY,EAAE,CAAC,CAAC,UAAU,EAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAiD7B;;;;;;OAMG;IACH,MAAM,CAAC,0BAA0B,CAC/B,YAAY,EAAE,CAAC,CAAC,UAAU,EAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,MAAM,EAAE;IAyBX;;;;;;;OAOG;IACH,MAAM,CAAC,8BAA8B,CACnC,YAAY,EAAE,CAAC,CAAC,UAAU,EAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,OAAO;CAuBX"}
+{"version":3,"file":"repository-dto-builder.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/repository-dto-builder.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;;;;;;;;;GAUG;AACH,qBAAa,yBAAyB;IAEpC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,mBAAmB,CACxB,YAAY,EAAE,CAAC,CAAC,UAAU,EAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAiD7B;;;;;;OAMG;IACH,MAAM,CAAC,0BAA0B,CAC/B,YAAY,EAAE,CAAC,CAAC,UAAU,EAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,MAAM,EAAE;IAyBX;;;;;;;OAOG;IACH,MAAM,CAAC,8BAA8B,CACnC,YAAY,EAAE,CAAC,CAAC,UAAU,EAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,GACvB,OAAO;CAuBX"}

package/dist/esm/resources/utils/repository-dto-builder.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"repository-dto-builder.utils.js","sourceRoot":"","sources":["../../../../src/resources/utils/repository-dto-builder.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,2BAA2B,EAC5B,MAAM,0BAA0B,CAAC;AAOlC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IAEpC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,mBAAmB,CACxB,YAA0B,EAC1B,UAAwB;QAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,iDAAiD;YACjD,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,sDAAsD;QACtD,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;gBACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,qDAAqD;YACrD,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,qBAAqB;YACrB,SAAS,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC;QACrC,CAAC;QAED,6DAA6D;QAC7D,iEAAiE;QACjE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,0BAA0B,CAC/B,YAA0B,EAC1B,UAAwB;QAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;gBAC3D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;oBAC5B,0CAA0C;oBAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,8BAA8B,CACnC,YAA0B,EAC1B,UAAwB;QAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;gBACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,+DAA+D;oBAC/D,gCAAgC;oBAChC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;wBACxC,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF","sourcesContent":["/**\n * Repository DTO Builder Utilities\n * \n * Utilities for deriving repository-level DTOs from schemas.\n * Repository DTOs exclude virtual fields and populated placeholders,\n * while including fields needed for virtual field computation.\n * \n * Repository DTO Derivation Process:\n * \n * 1. Identify Virtual Fields:\n *    - Virtual fields are computed at runtime, not stored in DB\n *    - They are excluded from the repository DTO\n * \n * 2. Identify Virtual Dependencies:\n *    - Virtual fields may depend on other stored fields for computation\n *    - These dependencies must be included in the repository projection\n *    - Dependencies are declared via isVirtual({ dependencies: ['field1', 'field2'] })\n * \n * 3. Exclude Populated Placeholders:\n *    - Fields that exist only for population (not in mainSchema) are excluded\n *    - These are added after repository fetch during population phase\n * \n * 4. Final Repository DTO:\n *    - Contains: storable fields + virtual dependencies\n *    - Excludes: virtual fields + population placeholders\n *    - Used for MongoDB projection to minimize data transfer\n * \n * Example flow:\n *   mainSchema: { _id, title, assignedToUserId, displayName (virtual) }\n *   summarySchema: { _id, title, displayName, assignedTo (placeholder) }\n *   repositoryDto: { _id, title } + dependencies of displayName\n */\n\nimport { z } from 'zod';\nimport { \n  getZodObjectShape, \n  isVirtualField,\n  getVirtualFieldDependencies\n} from '@wildo-ai/zod-decorators';\n\n/**\n * Mutable shape type for building schemas\n */\ntype MutableZodShape = Record<string, z.ZodTypeAny>;\n\n/**\n * Utility class for deriving repository-level DTOs.\n * \n * Repository DTOs are used for MongoDB projections and represent\n * the actual fields to fetch from the database, excluding:\n * - Virtual fields (computed at runtime)\n * - Populated placeholders (fields not in mainSchema, added for population)\n * \n * And including:\n * - Virtual field dependencies (fields needed for virtual computation)\n */\nexport class RepositoryDtoBuilderUtils {\n  \n  /**\n   * Derive repositoryDto from a target schema.\n   * \n   * @param targetSchema - The schema to derive from (e.g., summary schema)\n   * @param mainSchema - The main resource schema (used to identify real vs placeholder fields)\n   * @returns A Zod schema containing only storable/fetchable fields\n   * \n   * @example\n   * ```typescript\n   * const summarySchema = ResourcesSummaryUtils.deriveSummarySchema(MainSchema);\n   * const repoDto = RepositoryDtoBuilderUtils.deriveRepositoryDto(summarySchema, MainSchema);\n   * // repoDto excludes virtuals but includes their dependencies\n   * ```\n   */\n  static deriveRepositoryDto(\n    targetSchema: z.ZodTypeAny,\n    mainSchema: z.ZodTypeAny\n  ): z.ZodObject<z.ZodRawShape> {\n    const targetShape = getZodObjectShape(targetSchema);\n    const mainShape = getZodObjectShape(mainSchema);\n    \n    if (!targetShape || !mainShape) {\n      // Return empty schema if either is not an object\n      return z.object({});\n    }\n    \n    const repoShape: MutableZodShape = {};\n    const virtualDeps = new Set<string>();\n    \n    // First pass: identify all virtual field dependencies\n    for (const [fieldName, fieldSchema] of Object.entries(targetShape)) {\n      if (isVirtualField(fieldSchema)) {\n        const deps = getVirtualFieldDependencies(fieldSchema);\n        for (const dep of deps) {\n          virtualDeps.add(dep);\n        }\n      }\n    }\n    \n    // Second pass: include non-virtual fields that exist in mainSchema\n    for (const [fieldName, fieldSchema] of Object.entries(targetShape)) {\n      // Skip virtual fields - they're computed, not stored\n      if (isVirtualField(fieldSchema)) {\n        continue;\n      }\n      \n      // Skip populated placeholders (fields that don't exist in main schema)\n      if (!mainShape[fieldName]) {\n        continue;\n      }\n      \n      // Include this field\n      repoShape[fieldName] = fieldSchema;\n    }\n    \n    // Third pass: add virtual field dependencies from mainSchema\n    // (Only if they're not already included and exist in mainSchema)\n    for (const dep of virtualDeps) {\n      if (mainShape[dep] && !repoShape[dep]) {\n        repoShape[dep] = mainShape[dep];\n      }\n    }\n    \n    return z.object(repoShape);\n  }\n  \n  /**\n   * Get all fields needed for virtual field computation.\n   * \n   * @param targetSchema - The schema containing virtual fields\n   * @param mainSchema - The main resource schema\n   * @returns Array of field names needed for virtual computation\n   */\n  static getVirtualDependencyFields(\n    targetSchema: z.ZodTypeAny,\n    mainSchema: z.ZodTypeAny\n  ): string[] {\n    const targetShape = getZodObjectShape(targetSchema);\n    const mainShape = getZodObjectShape(mainSchema);\n    \n    if (!targetShape || !mainShape) {\n      return [];\n    }\n    \n    const deps = new Set<string>();\n    \n    for (const [_fieldName, fieldSchema] of Object.entries(targetShape)) {\n      if (isVirtualField(fieldSchema)) {\n        const fieldDeps = getVirtualFieldDependencies(fieldSchema);\n        for (const dep of fieldDeps) {\n          // Only include if it exists in mainSchema\n          if (mainShape[dep]) {\n            deps.add(dep);\n          }\n        }\n      }\n    }\n    \n    return Array.from(deps);\n  }\n  \n  /**\n   * Check if a target schema has any virtual fields that require\n   * fields not already in the target schema.\n   * \n   * @param targetSchema - The schema to check\n   * @param mainSchema - The main resource schema\n   * @returns True if additional fields are needed for virtual computation\n   */\n  static hasExternalVirtualDependencies(\n    targetSchema: z.ZodTypeAny,\n    mainSchema: z.ZodTypeAny\n  ): boolean {\n    const targetShape = getZodObjectShape(targetSchema);\n    const mainShape = getZodObjectShape(mainSchema);\n    \n    if (!targetShape || !mainShape) {\n      return false;\n    }\n    \n    for (const [_fieldName, fieldSchema] of Object.entries(targetShape)) {\n      if (isVirtualField(fieldSchema)) {\n        const deps = getVirtualFieldDependencies(fieldSchema);\n        for (const dep of deps) {\n          // If a dependency exists in mainSchema but not in targetShape,\n          // we have external dependencies\n          if (mainShape[dep] && !targetShape[dep]) {\n            return true;\n          }\n        }\n      }\n    }\n    \n    return false;\n  }\n}\n"]}
+{"version":3,"file":"repository-dto-builder.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/repository-dto-builder.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,2BAA2B,EAC5B,MAAM,0BAA0B,CAAC;AAOlC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,yBAAyB;IAEpC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,mBAAmB,CACxB,YAA0B,EAC1B,UAAwB;QAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,iDAAiD;YACjD,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,sDAAsD;QACtD,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;gBACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,qDAAqD;YACrD,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,qBAAqB;YACrB,SAAS,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC;QACrC,CAAC;QAED,6DAA6D;QAC7D,iEAAiE;QACjE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,0BAA0B,CAC/B,YAA0B,EAC1B,UAAwB;QAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;gBAC3D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;oBAC5B,0CAA0C;oBAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,8BAA8B,CACnC,YAA0B,EAC1B,UAAwB;QAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;gBACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,+DAA+D;oBAC/D,gCAAgC;oBAChC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;wBACxC,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF","sourcesContent":["/**\n * Repository DTO Builder Utilities\n * \n * Utilities for deriving repository-level DTOs from schemas.\n * Repository DTOs exclude virtual fields and populated placeholders,\n * while including fields needed for virtual field computation.\n * \n * Repository DTO Derivation Process:\n * \n * 1. Identify Virtual Fields:\n *    - Virtual fields are computed at runtime, not stored in DB\n *    - They are excluded from the repository DTO\n * \n * 2. Identify Virtual Dependencies:\n *    - Virtual fields may depend on other stored fields for computation\n *    - These dependencies must be included in the repository projection\n *    - Dependencies are declared via isVirtual({ dependencies: ['field1', 'field2'] })\n * \n * 3. Exclude Populated Placeholders:\n *    - Fields that exist only for population (not in mainSchema) are excluded\n *    - These are added after repository fetch during population phase\n * \n * 4. Final Repository DTO:\n *    - Contains: storable fields + virtual dependencies\n *    - Excludes: virtual fields + population placeholders\n *    - Used for MongoDB projection to minimize data transfer\n * \n * Example flow:\n *   mainSchema: { _id, title, assignedToUserId, displayName (virtual) }\n *   summarySchema: { _id, title, displayName, assignedTo (placeholder) }\n *   repositoryDto: { _id, title } + dependencies of displayName\n */\n\nimport { z } from 'zod';\nimport { \n  getZodObjectShape, \n  isVirtualField,\n  getVirtualFieldDependencies\n} from '@wildo-ai/zod-decorators';\n\n/**\n * Mutable shape type for building schemas\n */\ntype MutableZodShape = Record<string, z.ZodTypeAny>;\n\n/**\n * Utility class for deriving repository-level DTOs.\n * \n * Repository DTOs are used for MongoDB projections and represent\n * the actual fields to fetch from the database, excluding:\n * - Virtual fields (computed at runtime)\n * - Populated placeholders (fields not in mainSchema, added for population)\n * \n * And including:\n * - Virtual field dependencies (fields needed for virtual computation)\n */\nexport class RepositoryDtoBuilderUtils {\n  \n  /**\n   * Derive repositoryDto from a target schema.\n   * \n   * @param targetSchema - The schema to derive from (e.g., summary schema)\n   * @param mainSchema - The main resource schema (used to identify real vs placeholder fields)\n   * @returns A Zod schema containing only storable/fetchable fields\n   * \n   * @example\n   * ```typescript\n   * const summarySchema = ResourcesSummaryUtils.deriveSummarySchema(MainSchema);\n   * const repoDto = RepositoryDtoBuilderUtils.deriveRepositoryDto(summarySchema, MainSchema);\n   * // repoDto excludes virtuals but includes their dependencies\n   * ```\n   */\n  static deriveRepositoryDto(\n    targetSchema: z.ZodTypeAny,\n    mainSchema: z.ZodTypeAny\n  ): z.ZodObject<z.ZodRawShape> {\n    const targetShape = getZodObjectShape(targetSchema);\n    const mainShape = getZodObjectShape(mainSchema);\n    \n    if (!targetShape || !mainShape) {\n      // Return empty schema if either is not an object\n      return z.object({});\n    }\n    \n    const repoShape: MutableZodShape = {};\n    const virtualDeps = new Set<string>();\n    \n    // First pass: identify all virtual field dependencies\n    for (const [fieldName, fieldSchema] of Object.entries(targetShape)) {\n      if (isVirtualField(fieldSchema)) {\n        const deps = getVirtualFieldDependencies(fieldSchema);\n        for (const dep of deps) {\n          virtualDeps.add(dep);\n        }\n      }\n    }\n    \n    // Second pass: include non-virtual fields that exist in mainSchema\n    for (const [fieldName, fieldSchema] of Object.entries(targetShape)) {\n      // Skip virtual fields - they're computed, not stored\n      if (isVirtualField(fieldSchema)) {\n        continue;\n      }\n      \n      // Skip populated placeholders (fields that don't exist in main schema)\n      if (!mainShape[fieldName]) {\n        continue;\n      }\n      \n      // Include this field\n      repoShape[fieldName] = fieldSchema;\n    }\n    \n    // Third pass: add virtual field dependencies from mainSchema\n    // (Only if they're not already included and exist in mainSchema)\n    for (const dep of virtualDeps) {\n      if (mainShape[dep] && !repoShape[dep]) {\n        repoShape[dep] = mainShape[dep];\n      }\n    }\n    \n    return z.object(repoShape);\n  }\n  \n  /**\n   * Get all fields needed for virtual field computation.\n   * \n   * @param targetSchema - The schema containing virtual fields\n   * @param mainSchema - The main resource schema\n   * @returns Array of field names needed for virtual computation\n   */\n  static getVirtualDependencyFields(\n    targetSchema: z.ZodTypeAny,\n    mainSchema: z.ZodTypeAny\n  ): string[] {\n    const targetShape = getZodObjectShape(targetSchema);\n    const mainShape = getZodObjectShape(mainSchema);\n    \n    if (!targetShape || !mainShape) {\n      return [];\n    }\n    \n    const deps = new Set<string>();\n    \n    for (const [_fieldName, fieldSchema] of Object.entries(targetShape)) {\n      if (isVirtualField(fieldSchema)) {\n        const fieldDeps = getVirtualFieldDependencies(fieldSchema);\n        for (const dep of fieldDeps) {\n          // Only include if it exists in mainSchema\n          if (mainShape[dep]) {\n            deps.add(dep);\n          }\n        }\n      }\n    }\n    \n    return Array.from(deps);\n  }\n  \n  /**\n   * Check if a target schema has any virtual fields that require\n   * fields not already in the target schema.\n   * \n   * @param targetSchema - The schema to check\n   * @param mainSchema - The main resource schema\n   * @returns True if additional fields are needed for virtual computation\n   */\n  static hasExternalVirtualDependencies(\n    targetSchema: z.ZodTypeAny,\n    mainSchema: z.ZodTypeAny\n  ): boolean {\n    const targetShape = getZodObjectShape(targetSchema);\n    const mainShape = getZodObjectShape(mainSchema);\n    \n    if (!targetShape || !mainShape) {\n      return false;\n    }\n    \n    for (const [_fieldName, fieldSchema] of Object.entries(targetShape)) {\n      if (isVirtualField(fieldSchema)) {\n        const deps = getVirtualFieldDependencies(fieldSchema);\n        for (const dep of deps) {\n          // If a dependency exists in mainSchema but not in targetShape,\n          // we have external dependencies\n          if (mainShape[dep] && !targetShape[dep]) {\n            return true;\n          }\n        }\n      }\n    }\n    \n    return false;\n  }\n}\n"]}

package/dist/esm/resources/utils/request-schema-field-carriage.shared.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-schema-field-carriage.shared.utils.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/request-schema-field-carriage.shared.utils.ts"],"names":[],"mappings":"AAQA,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAehG"}
+{"version":3,"file":"request-schema-field-carriage.shared.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/request-schema-field-carriage.shared.utils.ts"],"names":[],"mappings":"AAQA,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAehG"}

package/dist/esm/resources/utils/request-schema-field-carriage.shared.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-schema-field-carriage.shared.utils.js","sourceRoot":"","sources":["../../../../src/resources/utils/request-schema-field-carriage.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,UAAU,yBAAyB,CAAC,MAAe,EAAE,SAAiB,EAAE,KAAK,GAAG,CAAC;IACrF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,GAAG,GAAI,MAAc,CAAC,IAAI,EAAE,GAAG,IAAK,MAAc,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,MAAM,IAAI,GAAI,GAAG,CAAC,KAAiC,CAAC,qBAAqB,CAAC,CAAC;QAC3E,OAAO,IAAI,KAAK,SAAS,IAAI,yBAAyB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC1J,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Whether a request schema can carry `fieldName` as a row field — through wrappers (repeatedly),\n * unions and discriminated unions (any branch), intersections (either side: a bulk DTO over a non-plain\n * row is `selector.and(row)`), and the bulk envelope `{ data: row[] }` of CREATE_MANY. Only the `data`\n * member is followed into an array, so a custom request with an unrelated array of objects is not read as\n * rows. Used by the closure-clock ownership check (#1613), which must see every shape a client route accepts.\n */\nconst BULK_REQUEST_ROWS_KEY = 'data';\nexport function requestSchemaCarriesField(schema: unknown, fieldName: string, depth = 0): boolean {\n  if (!schema || typeof schema !== 'object' || depth > 12) return false;\n  const def = (schema as any)._zod?.def ?? (schema as any)._def;\n  if (!def) return false;\n  if (def.shape && typeof def.shape === 'object') {\n    if (Object.prototype.hasOwnProperty.call(def.shape, fieldName)) return true;\n    const rows = (def.shape as Record<string, unknown>)[BULK_REQUEST_ROWS_KEY];\n    return rows !== undefined && requestSchemaCarriesField(rows, fieldName, depth + 1);\n  }\n  if (Array.isArray(def.options)) return def.options.some((option: unknown) => requestSchemaCarriesField(option, fieldName, depth + 1));\n  if (def.left || def.right) return requestSchemaCarriesField(def.left, fieldName, depth + 1) || requestSchemaCarriesField(def.right, fieldName, depth + 1);\n  if (def.element) return requestSchemaCarriesField(def.element, fieldName, depth + 1);\n  if (def.innerType) return requestSchemaCarriesField(def.innerType, fieldName, depth + 1);\n  if (def.in) return requestSchemaCarriesField(def.in, fieldName, depth + 1);\n  return false;\n}\n"]}
+{"version":3,"file":"request-schema-field-carriage.shared.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/request-schema-field-carriage.shared.utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,UAAU,yBAAyB,CAAC,MAAe,EAAE,SAAiB,EAAE,KAAK,GAAG,CAAC;IACrF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,GAAG,GAAI,MAAc,CAAC,IAAI,EAAE,GAAG,IAAK,MAAc,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,MAAM,IAAI,GAAI,GAAG,CAAC,KAAiC,CAAC,qBAAqB,CAAC,CAAC;QAC3E,OAAO,IAAI,KAAK,SAAS,IAAI,yBAAyB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC1J,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,yBAAyB,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Whether a request schema can carry `fieldName` as a row field — through wrappers (repeatedly),\n * unions and discriminated unions (any branch), intersections (either side: a bulk DTO over a non-plain\n * row is `selector.and(row)`), and the bulk envelope `{ data: row[] }` of CREATE_MANY. Only the `data`\n * member is followed into an array, so a custom request with an unrelated array of objects is not read as\n * rows. Used by the closure-clock ownership check (#1613), which must see every shape a client route accepts.\n */\nconst BULK_REQUEST_ROWS_KEY = 'data';\nexport function requestSchemaCarriesField(schema: unknown, fieldName: string, depth = 0): boolean {\n  if (!schema || typeof schema !== 'object' || depth > 12) return false;\n  const def = (schema as any)._zod?.def ?? (schema as any)._def;\n  if (!def) return false;\n  if (def.shape && typeof def.shape === 'object') {\n    if (Object.prototype.hasOwnProperty.call(def.shape, fieldName)) return true;\n    const rows = (def.shape as Record<string, unknown>)[BULK_REQUEST_ROWS_KEY];\n    return rows !== undefined && requestSchemaCarriesField(rows, fieldName, depth + 1);\n  }\n  if (Array.isArray(def.options)) return def.options.some((option: unknown) => requestSchemaCarriesField(option, fieldName, depth + 1));\n  if (def.left || def.right) return requestSchemaCarriesField(def.left, fieldName, depth + 1) || requestSchemaCarriesField(def.right, fieldName, depth + 1);\n  if (def.element) return requestSchemaCarriesField(def.element, fieldName, depth + 1);\n  if (def.innerType) return requestSchemaCarriesField(def.innerType, fieldName, depth + 1);\n  if (def.in) return requestSchemaCarriesField(def.in, fieldName, depth + 1);\n  return false;\n}\n"]}

package/dist/esm/resources/utils/required-fk-fillability.validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"required-fk-fillability.validation.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/required-fk-fillability.validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EACL,oBAAoB,EAGrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAyB,MAAM,sCAAsC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,oBAAY,kCAAkC;IAC5C,gHAAgH;IAChH,oBAAoB,iDAAiD;IACrE,2IAA2I;IAC3I,qBAAqB,kDAAkD;CACxE;AAED;;;;;;GAMG;AACH,oBAAY,sCAAsC;IAChD,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAOD,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,kCAAkC,CAAC;IACzC,QAAQ,EAAE,sCAAsC,CAAC;IACjD,wDAAwD;IACxD,YAAY,EAAE,YAAY,CAAC;IAC3B,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,kBAAkB,EAAE,YAAY,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,kBAAkB,EAAE,YAAY,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IACzB,qBAAqB,EAAE;QACrB,mBAAmB,EAAE,oBAAoB,EAAE,CAAC;KAC7C,CAAC;IACF,UAAU,EAAE,aAAa,CAAC;QACxB,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC;QACrC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KACzC,CAAC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,CAAC,CAAC,UAAU,EACxB,eAAe,EAAE,MAAM,GACtB,CAAC,CAAC,UAAU,GAAG,SAAS,CAoB1B;AAeD;;;;;;;;GAQG;AACH,wBAAgB,qCAAqC,CACnD,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,GACzE,8BAA8B,EAAE,CAiFlC"}
+{"version":3,"file":"required-fk-fillability.validation.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/required-fk-fillability.validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,EACL,oBAAoB,EAGrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAyB,MAAM,sCAAsC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,oBAAY,kCAAkC;IAC5C,gHAAgH;IAChH,oBAAoB,iDAAiD;IACrE,2IAA2I;IAC3I,qBAAqB,kDAAkD;CACxE;AAED;;;;;;GAMG;AACH,oBAAY,sCAAsC;IAChD,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAOD,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,kCAAkC,CAAC;IACzC,QAAQ,EAAE,sCAAsC,CAAC;IACjD,wDAAwD;IACxD,YAAY,EAAE,YAAY,CAAC;IAC3B,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,kBAAkB,EAAE,YAAY,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,kBAAkB,EAAE,YAAY,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IACzB,qBAAqB,EAAE;QACrB,mBAAmB,EAAE,oBAAoB,EAAE,CAAC;KAC7C,CAAC;IACF,UAAU,EAAE,aAAa,CAAC;QACxB,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC;QACrC,qBAAqB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KACzC,CAAC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,CAAC,CAAC,UAAU,EACxB,eAAe,EAAE,MAAM,GACtB,CAAC,CAAC,UAAU,GAAG,SAAS,CAoB1B;AAeD;;;;;;;;GAQG;AACH,wBAAgB,qCAAqC,CACnD,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,GACzE,8BAA8B,EAAE,CAiFlC"}

package/dist/esm/resources/utils/required-fk-fillability.validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"required-fk-fillability.validation.js","sourceRoot":"","sources":["../../../../src/resources/utils/required-fk-fillability.validation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,uCAAuC,EACvC,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAgB,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,CAAN,IAAY,kCAKX;AALD,WAAY,kCAAkC;IAC5C,gHAAgH;IAChH,2GAAqE,CAAA;IACrE,2IAA2I;IAC3I,6GAAuE,CAAA;AACzE,CAAC,EALW,kCAAkC,KAAlC,kCAAkC,QAK7C;AAED;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,sCAGX;AAHD,WAAY,sCAAsC;IAChD,uDAAa,CAAA;IACb,uDAAa,CAAA;AACf,CAAC,EAHW,sCAAsC,KAAtC,sCAAsC,QAGjD;AAED,MAAM,kBAAkB,GAAuF;IAC7G,CAAC,kCAAkC,CAAC,oBAAoB,CAAC,EAAE,sCAAsC,CAAC,IAAI;IACtG,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,EAAE,sCAAsC,CAAC,IAAI;CACxG,CAAC;AA+BF;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAwB,EACxB,eAAuB;IAEvB,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,WAAW,IAAI,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;QAChD,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,WAAW,IAAI,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChD,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8IAA8I;AAC9I,SAAS,yBAAyB,CAAC,QAA4C;IAC7E,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,IAAI,SAAS,CAAC,mBAAmB,CAAC;QAC9E,OAAO,CACL,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,IAAI;YAC5D,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM;YAC9D,IAAI,KAAK,qBAAqB,CAAC,IAAI;YACnC,IAAI,KAAK,qBAAqB,CAAC,MAAM,CACtC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qCAAqC,CACnD,sBAA0E;IAE1E,MAAM,UAAU,GAAqC,EAAE,CAAC;IAExD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC7D,MAAM,mBAAmB,GAAG,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,EAAE,CAAC;QAEtF,KAAK,MAAM,YAAY,IAAI,mBAAmB,EAAE,CAAC;YAC/C,4EAA4E;YAC5E,mDAAmD;YACnD,IAAI,YAAY,CAAC,MAAM,KAAK,kBAAkB,CAAC,WAAW,EAAE,CAAC;gBAC3D,SAAS;YACX,CAAC;YACD,4EAA4E;YAC5E,kEAAkE;YAClE,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IAAI,YAAY,CAAC,mBAAmB,KAAK,uCAAuC,CAAC,gBAAgB,EAAE,CAAC;gBAClG,SAAS;YACX,CAAC;YAED,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC;YACrD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,2EAA2E;YAC3E,2EAA2E;YAC3E,oBAAoB;YACpB,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACtF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,6EAA6E;YAC7E,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC;YAEtD,IAAI,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,kCAAkC,CAAC,oBAAoB;oBAC7D,QAAQ,EAAE,kBAAkB,CAAC,kCAAkC,CAAC,oBAAoB,CAAC;oBACrF,YAAY,EAAE,QAAQ,CAAC,kBAAkB;oBACzC,eAAe;oBACf,kBAAkB;oBAClB,OAAO,EACL,aAAa,QAAQ,CAAC,kBAAkB,2BAA2B,eAAe,IAAI;wBACtF,wBAAwB,kBAAkB,2BAA2B,YAAY,CAAC,mBAAmB,IAAI,OAAO,MAAM;wBACtH,0FAA0F;wBAC1F,uGAAuG;wBACvG,6HAA6H;iBAChI,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;YAClE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,0EAA0E;gBAC1E,SAAS;YACX,CAAC;YACD,IAAI,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,kCAAkC,CAAC,qBAAqB;oBAC9D,QAAQ,EAAE,kBAAkB,CAAC,kCAAkC,CAAC,qBAAqB,CAAC;oBACtF,YAAY,EAAE,QAAQ,CAAC,kBAAkB;oBACzC,eAAe;oBACf,kBAAkB;oBAClB,OAAO,EACL,aAAa,QAAQ,CAAC,kBAAkB,2BAA2B,eAAe,IAAI;wBACtF,wBAAwB,kBAAkB,2BAA2B,YAAY,CAAC,mBAAmB,IAAI,OAAO,MAAM;wBACtH,gFAAgF,kBAAkB,IAAI;wBACtG,0EAA0E;wBAC1E,mCAAmC,kBAAkB,yCAAyC;iBACjG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  isOptional,\n  isExcludedFromCreate,\n  getObjectShape,\n  isDiscriminatedUnion,\n  getZodDefArrayProperty,\n  isZodTypeAny,\n} from '@wildo-ai/zod-decorators';\nimport {\n  ResourceRelationship,\n  ResourceRelationshipAccessScopeStrategy,\n  RelationshipNature,\n} from '../resources.shared.schemas';\nimport { ResourceType, CoreResourceOperation } from '../resources.shared.core.definitions';\n\n/**\n * Registry-level guardrail: a REQUIRED composition-parent foreign key must be\n * **user-fillable on CREATE**.\n *\n * ## Why this exists\n *\n * A resource whose structural (COMPOSITION) parent relationship is\n * `OPTIONAL_CONTEXT` (or `STANDALONE`) can be created WITHOUT that parent in the\n * URL — e.g. a todo created from the org-wide collection rather than from inside\n * a specific list. In that mode the parent FK is NOT seeded from routing context,\n * so the create form must let the user supply it through a resource-reference\n * picker. If the FK is also REQUIRED, the create is impossible unless that picker\n * can actually be rendered and populated. Two ways it silently can't:\n *\n * - the FK field is `excludeFromCreate` → there is no form control at all; or\n * - the FK's target resource exposes no `LIST`/`SEARCH` operation → the picker\n *   has no operation to load its options from.\n *\n * Either way the org-wide create form is dead on arrival. This validator surfaces\n * that at registry-assembly time instead of as a confusing client-side validation\n * failure with no visible error (the exact symptom of the 2026-06-27\n * `todoListId`-create bug — see `selectMatchingRoutePath` routing fix and\n * `.claude/plans/todos-required-fk-optional-context-create.md`).\n *\n * ## Why it is restricted to `COMPOSITION` parents\n *\n * `REFERENCE` foreign keys (`assignedToUserId`, `createdByUserId`,\n * `postedByUserId`, …) are NOT user-picked structural parents — they are\n * cross-references that are typically seeded by the backend (author/creator) or\n * are optional. The framework has no schema-level \"user fills this vs the backend\n * sets this\" marker, so including REFERENCE FKs here would false-positive on\n * backend-set required FKs. Limiting to `COMPOSITION` isolates the genuine\n * \"a child belongs to a parent the user must choose\" case.\n *\n * ## Fail-open by construction\n *\n * Every ambiguity skips the relationship rather than flagging it: a missing\n * `foreignKeyField`, an FK column that is not actually present on the resource's\n * own schema (e.g. an inbound FK reference where another resource holds the key),\n * an FK whose requiredness cannot be determined, or an unknown target resource.\n * This keeps the guardrail noise-free and safe to run across every app registry.\n */\nexport enum ForeignKeyFillabilityViolationKind {\n  /** The required FK is `excludeFromCreate` yet the parent is not guaranteed in context — no way to supply it. */\n  EXCLUDED_FROM_CREATE = 'required-composition-fk-excluded-from-create',\n  /** The required FK needs a picker (parent is `OPTIONAL_CONTEXT`/`STANDALONE`) but its target exposes no LIST/SEARCH op to populate one. */\n  TARGET_NOT_SEARCHABLE = 'required-composition-fk-target-not-searchable',\n}\n\n/**\n * Severity a consumer should apply to a violation. `EXCLUDED_FROM_CREATE` is a\n * genuinely impossible-to-create config (no context, no control) → `FAIL` so the\n * backend crashes loud at boot rather than shipping a dead create form.\n * `TARGET_NOT_SEARCHABLE` degrades the picker but a custom create surface might\n * still supply the FK → `WARN`.\n */\nexport enum ForeignKeyFillabilityViolationSeverity {\n  FAIL = 'fail',\n  WARN = 'warn',\n}\n\nconst VIOLATION_SEVERITY: Record<ForeignKeyFillabilityViolationKind, ForeignKeyFillabilityViolationSeverity> = {\n  [ForeignKeyFillabilityViolationKind.EXCLUDED_FROM_CREATE]: ForeignKeyFillabilityViolationSeverity.FAIL,\n  [ForeignKeyFillabilityViolationKind.TARGET_NOT_SEARCHABLE]: ForeignKeyFillabilityViolationSeverity.WARN,\n};\n\nexport interface ForeignKeyFillabilityViolation {\n  kind: ForeignKeyFillabilityViolationKind;\n  severity: ForeignKeyFillabilityViolationSeverity;\n  /** The child resource that declares the required FK. */\n  resourceType: ResourceType;\n  /** The FK field on `resourceType` (e.g. `todoListId`). */\n  foreignKeyField: string;\n  /** The FK target / structural parent (e.g. `todoLists`). */\n  parentResourceType: ResourceType;\n  message: string;\n}\n\n/**\n * Structural subset of a resource configuration this validator needs. The real\n * `ResourceConfiguration` (and its frontend/backend variants) satisfy this shape,\n * so callers can pass `registry.resourceConfigurations` directly.\n */\nexport interface ForeignKeyFillabilityResourceInput {\n  resourceIdentifier: ResourceType;\n  mainSchema: z.ZodTypeAny;\n  resourceRelationships: {\n    parentRelationships: ResourceRelationship[];\n  };\n  operations: ReadonlyArray<{\n    operationIdentifier: string | number;\n    resourceOperationLike?: string | number;\n  }>;\n}\n\n/**\n * Resolve a field schema by name from a resource's `mainSchema`, transparently\n * handling discriminated-union (polymorphic / schema-family) resources where a\n * plain `getObjectShape` returns `null`. The FK lives in the family's common\n * base, so it is present on every variant — the first variant that carries it\n * wins. Returns `undefined` when the field is genuinely absent (fail-open).\n */\nexport function findForeignKeyFieldSchema(\n  mainSchema: z.ZodTypeAny,\n  foreignKeyField: string,\n): z.ZodTypeAny | undefined {\n  const directShape = getObjectShape(mainSchema);\n  if (directShape && directShape[foreignKeyField]) {\n    return directShape[foreignKeyField];\n  }\n\n  if (isDiscriminatedUnion(mainSchema)) {\n    const options = getZodDefArrayProperty(mainSchema, 'options') ?? [];\n    for (const option of options) {\n      if (!isZodTypeAny(option)) {\n        continue;\n      }\n      const optionShape = getObjectShape(option);\n      if (optionShape && optionShape[foreignKeyField]) {\n        return optionShape[foreignKeyField];\n      }\n    }\n  }\n\n  return undefined;\n}\n\n/** True when the resource exposes an operation a reference picker can load options from (LIST or SEARCH, core or `resourceOperationLike`). */\nfunction hasPickerCapableOperation(resource: ForeignKeyFillabilityResourceInput): boolean {\n  return resource.operations.some((operation) => {\n    const core = operation.resourceOperationLike ?? operation.operationIdentifier;\n    return (\n      operation.operationIdentifier === CoreResourceOperation.LIST ||\n      operation.operationIdentifier === CoreResourceOperation.SEARCH ||\n      core === CoreResourceOperation.LIST ||\n      core === CoreResourceOperation.SEARCH\n    );\n  });\n}\n\n/**\n * Validate that every required COMPOSITION-parent foreign key in the registry is\n * user-fillable on CREATE. Returns the list of violations (empty when clean);\n * the caller decides how to surface them (warn vs fail). Pure and side-effect\n * free.\n *\n * @param resourceConfigurations - the registry's `resourceConfigurations` map\n *   (`resourceType → configuration`).\n */\nexport function validateRequiredForeignKeyFillability(\n  resourceConfigurations: Record<string, ForeignKeyFillabilityResourceInput>,\n): ForeignKeyFillabilityViolation[] {\n  const violations: ForeignKeyFillabilityViolation[] = [];\n\n  for (const resource of Object.values(resourceConfigurations)) {\n    const parentRelationships = resource.resourceRelationships?.parentRelationships ?? [];\n\n    for (const relationship of parentRelationships) {\n      // Only structural (COMPOSITION) parents are user-picked — REFERENCE FKs are\n      // backend-set / optional and would false-positive.\n      if (relationship.nature !== RelationshipNature.COMPOSITION) {\n        continue;\n      }\n      // Primary scope and REQUIRES_CONTEXT parents are ALWAYS present in the URL,\n      // so the FK is always seeded from context — never needs a picker.\n      if (relationship.isPrimaryScope) {\n        continue;\n      }\n      if (relationship.accessScopeStrategy === ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT) {\n        continue;\n      }\n\n      const foreignKeyField = relationship.foreignKeyField;\n      if (!foreignKeyField) {\n        continue;\n      }\n\n      // The FK must actually be a column on THIS resource's own schema. If it is\n      // not (e.g. an inbound FK reference where another resource holds the key),\n      // skip — fail-open.\n      const fkFieldSchema = findForeignKeyFieldSchema(resource.mainSchema, foreignKeyField);\n      if (!fkFieldSchema) {\n        continue;\n      }\n      // Optional FK → leaving it empty on org-wide create is valid; not a problem.\n      if (isOptional(fkFieldSchema)) {\n        continue;\n      }\n\n      const parentResourceType = relationship.resourceType1;\n\n      if (isExcludedFromCreate(fkFieldSchema)) {\n        violations.push({\n          kind: ForeignKeyFillabilityViolationKind.EXCLUDED_FROM_CREATE,\n          severity: VIOLATION_SEVERITY[ForeignKeyFillabilityViolationKind.EXCLUDED_FROM_CREATE],\n          resourceType: resource.resourceIdentifier,\n          foreignKeyField,\n          parentResourceType,\n          message:\n            `Resource '${resource.resourceIdentifier}' requires foreign key '${foreignKeyField}' ` +\n            `(composition parent '${parentResourceType}', accessScopeStrategy='${relationship.accessScopeStrategy ?? 'unset'}'), ` +\n            `but the field is excludeFromCreate AND the parent is not guaranteed in routing context. ` +\n            `The create form can neither seed it from context nor offer a picker → org-wide create is impossible. ` +\n            `Make the parent REQUIRES_CONTEXT (create always nested under the parent), or drop excludeFromCreate so a picker can render.`,\n        });\n        continue;\n      }\n\n      const parentResource = resourceConfigurations[parentResourceType];\n      if (!parentResource) {\n        // Unknown target (partial registry / cross-package boundary) → fail-open.\n        continue;\n      }\n      if (!hasPickerCapableOperation(parentResource)) {\n        violations.push({\n          kind: ForeignKeyFillabilityViolationKind.TARGET_NOT_SEARCHABLE,\n          severity: VIOLATION_SEVERITY[ForeignKeyFillabilityViolationKind.TARGET_NOT_SEARCHABLE],\n          resourceType: resource.resourceIdentifier,\n          foreignKeyField,\n          parentResourceType,\n          message:\n            `Resource '${resource.resourceIdentifier}' requires foreign key '${foreignKeyField}' ` +\n            `(composition parent '${parentResourceType}', accessScopeStrategy='${relationship.accessScopeStrategy ?? 'unset'}'), ` +\n            `which must be chosen via a reference picker on org-wide create — but target '${parentResourceType}' ` +\n            `exposes no LIST or SEARCH operation, so the picker cannot load options. ` +\n            `Add a LIST/SEARCH operation to '${parentResourceType}', or make the parent REQUIRES_CONTEXT.`,\n        });\n      }\n    }\n  }\n\n  return violations;\n}\n"]}
+{"version":3,"file":"required-fk-fillability.validation.js","sourceRoot":"","sources":["../../../../../src/resources/utils/required-fk-fillability.validation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,uCAAuC,EACvC,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAgB,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,CAAN,IAAY,kCAKX;AALD,WAAY,kCAAkC;IAC5C,gHAAgH;IAChH,2GAAqE,CAAA;IACrE,2IAA2I;IAC3I,6GAAuE,CAAA;AACzE,CAAC,EALW,kCAAkC,KAAlC,kCAAkC,QAK7C;AAED;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,sCAGX;AAHD,WAAY,sCAAsC;IAChD,uDAAa,CAAA;IACb,uDAAa,CAAA;AACf,CAAC,EAHW,sCAAsC,KAAtC,sCAAsC,QAGjD;AAED,MAAM,kBAAkB,GAAuF;IAC7G,CAAC,kCAAkC,CAAC,oBAAoB,CAAC,EAAE,sCAAsC,CAAC,IAAI;IACtG,CAAC,kCAAkC,CAAC,qBAAqB,CAAC,EAAE,sCAAsC,CAAC,IAAI;CACxG,CAAC;AA+BF;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,UAAwB,EACxB,eAAuB;IAEvB,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,WAAW,IAAI,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;QAChD,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,WAAW,IAAI,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChD,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8IAA8I;AAC9I,SAAS,yBAAyB,CAAC,QAA4C;IAC7E,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,qBAAqB,IAAI,SAAS,CAAC,mBAAmB,CAAC;QAC9E,OAAO,CACL,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,IAAI;YAC5D,SAAS,CAAC,mBAAmB,KAAK,qBAAqB,CAAC,MAAM;YAC9D,IAAI,KAAK,qBAAqB,CAAC,IAAI;YACnC,IAAI,KAAK,qBAAqB,CAAC,MAAM,CACtC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qCAAqC,CACnD,sBAA0E;IAE1E,MAAM,UAAU,GAAqC,EAAE,CAAC;IAExD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC7D,MAAM,mBAAmB,GAAG,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,IAAI,EAAE,CAAC;QAEtF,KAAK,MAAM,YAAY,IAAI,mBAAmB,EAAE,CAAC;YAC/C,4EAA4E;YAC5E,mDAAmD;YACnD,IAAI,YAAY,CAAC,MAAM,KAAK,kBAAkB,CAAC,WAAW,EAAE,CAAC;gBAC3D,SAAS;YACX,CAAC;YACD,4EAA4E;YAC5E,kEAAkE;YAClE,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IAAI,YAAY,CAAC,mBAAmB,KAAK,uCAAuC,CAAC,gBAAgB,EAAE,CAAC;gBAClG,SAAS;YACX,CAAC;YAED,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC;YACrD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,2EAA2E;YAC3E,2EAA2E;YAC3E,oBAAoB;YACpB,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACtF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,6EAA6E;YAC7E,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC;YAEtD,IAAI,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,kCAAkC,CAAC,oBAAoB;oBAC7D,QAAQ,EAAE,kBAAkB,CAAC,kCAAkC,CAAC,oBAAoB,CAAC;oBACrF,YAAY,EAAE,QAAQ,CAAC,kBAAkB;oBACzC,eAAe;oBACf,kBAAkB;oBAClB,OAAO,EACL,aAAa,QAAQ,CAAC,kBAAkB,2BAA2B,eAAe,IAAI;wBACtF,wBAAwB,kBAAkB,2BAA2B,YAAY,CAAC,mBAAmB,IAAI,OAAO,MAAM;wBACtH,0FAA0F;wBAC1F,uGAAuG;wBACvG,6HAA6H;iBAChI,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;YAClE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,0EAA0E;gBAC1E,SAAS;YACX,CAAC;YACD,IAAI,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,kCAAkC,CAAC,qBAAqB;oBAC9D,QAAQ,EAAE,kBAAkB,CAAC,kCAAkC,CAAC,qBAAqB,CAAC;oBACtF,YAAY,EAAE,QAAQ,CAAC,kBAAkB;oBACzC,eAAe;oBACf,kBAAkB;oBAClB,OAAO,EACL,aAAa,QAAQ,CAAC,kBAAkB,2BAA2B,eAAe,IAAI;wBACtF,wBAAwB,kBAAkB,2BAA2B,YAAY,CAAC,mBAAmB,IAAI,OAAO,MAAM;wBACtH,gFAAgF,kBAAkB,IAAI;wBACtG,0EAA0E;wBAC1E,mCAAmC,kBAAkB,yCAAyC;iBACjG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  isOptional,\n  isExcludedFromCreate,\n  getObjectShape,\n  isDiscriminatedUnion,\n  getZodDefArrayProperty,\n  isZodTypeAny,\n} from '@wildo-ai/zod-decorators';\nimport {\n  ResourceRelationship,\n  ResourceRelationshipAccessScopeStrategy,\n  RelationshipNature,\n} from '../resources.shared.schemas';\nimport { ResourceType, CoreResourceOperation } from '../resources.shared.core.definitions';\n\n/**\n * Registry-level guardrail: a REQUIRED composition-parent foreign key must be\n * **user-fillable on CREATE**.\n *\n * ## Why this exists\n *\n * A resource whose structural (COMPOSITION) parent relationship is\n * `OPTIONAL_CONTEXT` (or `STANDALONE`) can be created WITHOUT that parent in the\n * URL — e.g. a todo created from the org-wide collection rather than from inside\n * a specific list. In that mode the parent FK is NOT seeded from routing context,\n * so the create form must let the user supply it through a resource-reference\n * picker. If the FK is also REQUIRED, the create is impossible unless that picker\n * can actually be rendered and populated. Two ways it silently can't:\n *\n * - the FK field is `excludeFromCreate` → there is no form control at all; or\n * - the FK's target resource exposes no `LIST`/`SEARCH` operation → the picker\n *   has no operation to load its options from.\n *\n * Either way the org-wide create form is dead on arrival. This validator surfaces\n * that at registry-assembly time instead of as a confusing client-side validation\n * failure with no visible error (the exact symptom of the 2026-06-27\n * `todoListId`-create bug — see `selectMatchingRoutePath` routing fix and\n * `.claude/plans/todos-required-fk-optional-context-create.md`).\n *\n * ## Why it is restricted to `COMPOSITION` parents\n *\n * `REFERENCE` foreign keys (`assignedToUserId`, `createdByUserId`,\n * `postedByUserId`, …) are NOT user-picked structural parents — they are\n * cross-references that are typically seeded by the backend (author/creator) or\n * are optional. The framework has no schema-level \"user fills this vs the backend\n * sets this\" marker, so including REFERENCE FKs here would false-positive on\n * backend-set required FKs. Limiting to `COMPOSITION` isolates the genuine\n * \"a child belongs to a parent the user must choose\" case.\n *\n * ## Fail-open by construction\n *\n * Every ambiguity skips the relationship rather than flagging it: a missing\n * `foreignKeyField`, an FK column that is not actually present on the resource's\n * own schema (e.g. an inbound FK reference where another resource holds the key),\n * an FK whose requiredness cannot be determined, or an unknown target resource.\n * This keeps the guardrail noise-free and safe to run across every app registry.\n */\nexport enum ForeignKeyFillabilityViolationKind {\n  /** The required FK is `excludeFromCreate` yet the parent is not guaranteed in context — no way to supply it. */\n  EXCLUDED_FROM_CREATE = 'required-composition-fk-excluded-from-create',\n  /** The required FK needs a picker (parent is `OPTIONAL_CONTEXT`/`STANDALONE`) but its target exposes no LIST/SEARCH op to populate one. */\n  TARGET_NOT_SEARCHABLE = 'required-composition-fk-target-not-searchable',\n}\n\n/**\n * Severity a consumer should apply to a violation. `EXCLUDED_FROM_CREATE` is a\n * genuinely impossible-to-create config (no context, no control) → `FAIL` so the\n * backend crashes loud at boot rather than shipping a dead create form.\n * `TARGET_NOT_SEARCHABLE` degrades the picker but a custom create surface might\n * still supply the FK → `WARN`.\n */\nexport enum ForeignKeyFillabilityViolationSeverity {\n  FAIL = 'fail',\n  WARN = 'warn',\n}\n\nconst VIOLATION_SEVERITY: Record<ForeignKeyFillabilityViolationKind, ForeignKeyFillabilityViolationSeverity> = {\n  [ForeignKeyFillabilityViolationKind.EXCLUDED_FROM_CREATE]: ForeignKeyFillabilityViolationSeverity.FAIL,\n  [ForeignKeyFillabilityViolationKind.TARGET_NOT_SEARCHABLE]: ForeignKeyFillabilityViolationSeverity.WARN,\n};\n\nexport interface ForeignKeyFillabilityViolation {\n  kind: ForeignKeyFillabilityViolationKind;\n  severity: ForeignKeyFillabilityViolationSeverity;\n  /** The child resource that declares the required FK. */\n  resourceType: ResourceType;\n  /** The FK field on `resourceType` (e.g. `todoListId`). */\n  foreignKeyField: string;\n  /** The FK target / structural parent (e.g. `todoLists`). */\n  parentResourceType: ResourceType;\n  message: string;\n}\n\n/**\n * Structural subset of a resource configuration this validator needs. The real\n * `ResourceConfiguration` (and its frontend/backend variants) satisfy this shape,\n * so callers can pass `registry.resourceConfigurations` directly.\n */\nexport interface ForeignKeyFillabilityResourceInput {\n  resourceIdentifier: ResourceType;\n  mainSchema: z.ZodTypeAny;\n  resourceRelationships: {\n    parentRelationships: ResourceRelationship[];\n  };\n  operations: ReadonlyArray<{\n    operationIdentifier: string | number;\n    resourceOperationLike?: string | number;\n  }>;\n}\n\n/**\n * Resolve a field schema by name from a resource's `mainSchema`, transparently\n * handling discriminated-union (polymorphic / schema-family) resources where a\n * plain `getObjectShape` returns `null`. The FK lives in the family's common\n * base, so it is present on every variant — the first variant that carries it\n * wins. Returns `undefined` when the field is genuinely absent (fail-open).\n */\nexport function findForeignKeyFieldSchema(\n  mainSchema: z.ZodTypeAny,\n  foreignKeyField: string,\n): z.ZodTypeAny | undefined {\n  const directShape = getObjectShape(mainSchema);\n  if (directShape && directShape[foreignKeyField]) {\n    return directShape[foreignKeyField];\n  }\n\n  if (isDiscriminatedUnion(mainSchema)) {\n    const options = getZodDefArrayProperty(mainSchema, 'options') ?? [];\n    for (const option of options) {\n      if (!isZodTypeAny(option)) {\n        continue;\n      }\n      const optionShape = getObjectShape(option);\n      if (optionShape && optionShape[foreignKeyField]) {\n        return optionShape[foreignKeyField];\n      }\n    }\n  }\n\n  return undefined;\n}\n\n/** True when the resource exposes an operation a reference picker can load options from (LIST or SEARCH, core or `resourceOperationLike`). */\nfunction hasPickerCapableOperation(resource: ForeignKeyFillabilityResourceInput): boolean {\n  return resource.operations.some((operation) => {\n    const core = operation.resourceOperationLike ?? operation.operationIdentifier;\n    return (\n      operation.operationIdentifier === CoreResourceOperation.LIST ||\n      operation.operationIdentifier === CoreResourceOperation.SEARCH ||\n      core === CoreResourceOperation.LIST ||\n      core === CoreResourceOperation.SEARCH\n    );\n  });\n}\n\n/**\n * Validate that every required COMPOSITION-parent foreign key in the registry is\n * user-fillable on CREATE. Returns the list of violations (empty when clean);\n * the caller decides how to surface them (warn vs fail). Pure and side-effect\n * free.\n *\n * @param resourceConfigurations - the registry's `resourceConfigurations` map\n *   (`resourceType → configuration`).\n */\nexport function validateRequiredForeignKeyFillability(\n  resourceConfigurations: Record<string, ForeignKeyFillabilityResourceInput>,\n): ForeignKeyFillabilityViolation[] {\n  const violations: ForeignKeyFillabilityViolation[] = [];\n\n  for (const resource of Object.values(resourceConfigurations)) {\n    const parentRelationships = resource.resourceRelationships?.parentRelationships ?? [];\n\n    for (const relationship of parentRelationships) {\n      // Only structural (COMPOSITION) parents are user-picked — REFERENCE FKs are\n      // backend-set / optional and would false-positive.\n      if (relationship.nature !== RelationshipNature.COMPOSITION) {\n        continue;\n      }\n      // Primary scope and REQUIRES_CONTEXT parents are ALWAYS present in the URL,\n      // so the FK is always seeded from context — never needs a picker.\n      if (relationship.isPrimaryScope) {\n        continue;\n      }\n      if (relationship.accessScopeStrategy === ResourceRelationshipAccessScopeStrategy.REQUIRES_CONTEXT) {\n        continue;\n      }\n\n      const foreignKeyField = relationship.foreignKeyField;\n      if (!foreignKeyField) {\n        continue;\n      }\n\n      // The FK must actually be a column on THIS resource's own schema. If it is\n      // not (e.g. an inbound FK reference where another resource holds the key),\n      // skip — fail-open.\n      const fkFieldSchema = findForeignKeyFieldSchema(resource.mainSchema, foreignKeyField);\n      if (!fkFieldSchema) {\n        continue;\n      }\n      // Optional FK → leaving it empty on org-wide create is valid; not a problem.\n      if (isOptional(fkFieldSchema)) {\n        continue;\n      }\n\n      const parentResourceType = relationship.resourceType1;\n\n      if (isExcludedFromCreate(fkFieldSchema)) {\n        violations.push({\n          kind: ForeignKeyFillabilityViolationKind.EXCLUDED_FROM_CREATE,\n          severity: VIOLATION_SEVERITY[ForeignKeyFillabilityViolationKind.EXCLUDED_FROM_CREATE],\n          resourceType: resource.resourceIdentifier,\n          foreignKeyField,\n          parentResourceType,\n          message:\n            `Resource '${resource.resourceIdentifier}' requires foreign key '${foreignKeyField}' ` +\n            `(composition parent '${parentResourceType}', accessScopeStrategy='${relationship.accessScopeStrategy ?? 'unset'}'), ` +\n            `but the field is excludeFromCreate AND the parent is not guaranteed in routing context. ` +\n            `The create form can neither seed it from context nor offer a picker → org-wide create is impossible. ` +\n            `Make the parent REQUIRES_CONTEXT (create always nested under the parent), or drop excludeFromCreate so a picker can render.`,\n        });\n        continue;\n      }\n\n      const parentResource = resourceConfigurations[parentResourceType];\n      if (!parentResource) {\n        // Unknown target (partial registry / cross-package boundary) → fail-open.\n        continue;\n      }\n      if (!hasPickerCapableOperation(parentResource)) {\n        violations.push({\n          kind: ForeignKeyFillabilityViolationKind.TARGET_NOT_SEARCHABLE,\n          severity: VIOLATION_SEVERITY[ForeignKeyFillabilityViolationKind.TARGET_NOT_SEARCHABLE],\n          resourceType: resource.resourceIdentifier,\n          foreignKeyField,\n          parentResourceType,\n          message:\n            `Resource '${resource.resourceIdentifier}' requires foreign key '${foreignKeyField}' ` +\n            `(composition parent '${parentResourceType}', accessScopeStrategy='${relationship.accessScopeStrategy ?? 'unset'}'), ` +\n            `which must be chosen via a reference picker on org-wide create — but target '${parentResourceType}' ` +\n            `exposes no LIST or SEARCH operation, so the picker cannot load options. ` +\n            `Add a LIST/SEARCH operation to '${parentResourceType}', or make the parent REQUIRES_CONTEXT.`,\n        });\n      }\n    }\n  }\n\n  return violations;\n}\n"]}

package/dist/esm/resources/utils/resource-operation-type-guards.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-operation-type-guards.utils.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/resource-operation-type-guards.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzF,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,CAAA;CAAE,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACrG,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,sBAAsB,CAAA;CAAE,CAAC,CAE/F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzF,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,CAAA;CAAE,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC1F,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,SAAS,CAAA;CAAE,CAAC,CAElF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC9F,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,CAAA;CAAE,CAAC,CAEtF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAChG,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,CAAA;CAAE,CAAC,CAExF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC,EAAE,SAAS,4BAA4B,EAGtF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,SAAS,4BAA4B,EAEzF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,0CAA0C,EAAE,SAAS,4BAA4B,EAG7F,CAAC;AAcF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mCAAmC,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC1G,SAAS,EAAE,CAAC,EACZ,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAKT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACnG,SAAS,EAAE,CAAC,EACZ,mBAAmB,EAAE,MAAM,GAC1B,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,GAAG,4BAA4B,CAAC,sBAAsB,CAAA;CAAE,CAAC,CAKvI"}
+{"version":3,"file":"resource-operation-type-guards.utils.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/resource-operation-type-guards.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzF,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,CAAA;CAAE,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACrG,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,sBAAsB,CAAA;CAAE,CAAC,CAE/F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzF,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,CAAA;CAAE,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC1F,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,SAAS,CAAA;CAAE,CAAC,CAElF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC9F,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,CAAA;CAAE,CAAC,CAEtF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAChG,SAAS,EAAE,CAAC,GACX,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,CAAA;CAAE,CAAC,CAExF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC,EAAE,SAAS,4BAA4B,EAGtF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,SAAS,4BAA4B,EAEzF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,0CAA0C,EAAE,SAAS,4BAA4B,EAG7F,CAAC;AAcF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mCAAmC,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC1G,SAAS,EAAE,CAAC,EACZ,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAKT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACnG,SAAS,EAAE,CAAC,EACZ,mBAAmB,EAAE,MAAM,GAC1B,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE;IAAE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,GAAG,4BAA4B,CAAC,sBAAsB,CAAA;CAAE,CAAC,CAKvI"}

package/dist/esm/resources/utils/resource-operation-type-guards.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-operation-type-guards.utils.js","sourceRoot":"","sources":["../../../../src/resources/utils/resource-operation-type-guards.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,sBAAsB,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,aAAa,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,eAAe,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA4C;IAC1F,4BAA4B,CAAC,QAAQ;IACrC,4BAA4B,CAAC,sBAAsB;CACpD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAA4C;IAC7F,4BAA4B,CAAC,aAAa;CAC3C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAA4C;IACjG,GAAG,sCAAsC;IACzC,GAAG,mCAAmC;CACvC,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAA2D,SAAY;IACpG,OAAO,iBAAiB,IAAI,SAAS,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mCAAmC,CACjD,SAAY,EACZ,mBAA2B;IAE3B,OAAO,SAAS,CAAC,mBAAmB,KAAK,mBAAmB;WACvD,SAAS,CAAC,kBAAkB,KAAK,IAAI;WACrC,CAAC,sBAAsB,CAAC,SAAS,CAAC;WAClC,0CAA0C,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAY,EACZ,mBAA2B;IAE3B,OAAO,SAAS,CAAC,mBAAmB,KAAK,mBAAmB;WACvD,SAAS,CAAC,kBAAkB,KAAK,IAAI;WACrC,CAAC,sBAAsB,CAAC,SAAS,CAAC;WAClC,mCAAmC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC","sourcesContent":["/**\n * Type Guard Utilities for Resource Operations\n * \n * These helpers assist TypeScript in narrowing union types more efficiently,\n * reducing the need to check all operation variants in the union.\n * \n * @see TYPING_OPTIMIZATION_PLAN.md\n */\n\nimport { ResourceConfiguration_Operation } from '../resources-config.shared.schemas';\nimport { ResourceOperationVariantType } from '../resources.shared.schemas';\n\n/**\n * Type guard for API_CALL variant\n */\nexport function isApiCallOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.API_CALL }> {\n  return operation.variantType === ResourceOperationVariantType.API_CALL;\n}\n\n/**\n * Type guard for API_CALL_WITH_CALLBACK variant\n */\nexport function isApiCallWithCallbackOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.API_CALL_WITH_CALLBACK }> {\n  return operation.variantType === ResourceOperationVariantType.API_CALL_WITH_CALLBACK;\n}\n\n/**\n * Type guard for CRON_JOB variant\n */\nexport function isCronJobOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.CRON_JOB }> {\n  return operation.variantType === ResourceOperationVariantType.CRON_JOB;\n}\n\n/**\n * Type guard for BATCH_JOB variant\n */\nexport function isBatchJobOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.BATCH_JOB }> {\n  return operation.variantType === ResourceOperationVariantType.BATCH_JOB;\n}\n\n/**\n * Type guard for INTERNAL_CALL variant\n */\nexport function isInternalCallOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.INTERNAL_CALL }> {\n  return operation.variantType === ResourceOperationVariantType.INTERNAL_CALL;\n}\n\n/**\n * Type guard for REPOSITORY_ONLY variant\n */\nexport function isRepositoryOnlyOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.REPOSITORY_ONLY }> {\n  return operation.variantType === ResourceOperationVariantType.REPOSITORY_ONLY;\n}\n\n/**\n * The variant types that carry an HTTP surface — URL templates, methods,\n * request/response DTOs. THE authority for \"is this variant routable?\".\n *\n * Every site that filters operations by \"reachable over HTTP\" must read this\n * set rather than re-listing its members: the list has drifted before, and each\n * copy is a place a newly-added URL-bearing variant would be silently missed.\n */\nexport const URL_BEARING_OPERATION_VARIANT_TYPES: readonly ResourceOperationVariantType[] = [\n  ResourceOperationVariantType.API_CALL,\n  ResourceOperationVariantType.API_CALL_WITH_CALLBACK,\n];\n\n/**\n * The service layer's NATIVE transport: variants authors declare for operations\n * that must run through the registry pipeline (ACL, hooks, lifecycle) but are\n * deliberately NOT exposed over HTTP.\n */\nexport const SERVICE_NATIVE_OPERATION_VARIANT_TYPES: readonly ResourceOperationVariantType[] = [\n  ResourceOperationVariantType.INTERNAL_CALL,\n];\n\n/**\n * THE authority for \"which variant types can the SERVICE dispatch layer\n * resolve?\" — i.e. exactly the set\n * `ResourcesRegistryBackendService.getServiceOperationPathDefault` matches.\n *\n * **Why this is a named, exported constant rather than three enum members\n * spelled out at each call site.** `REPOSITORY_ONLY` is route-less, just like\n * `INTERNAL_CALL`, and is therefore an extremely natural (wrong) choice for an\n * operation that should exist \"as a capability, without a new HTTP surface\".\n * But it is deliberately EXCLUDED here and served by the separate\n * `getRepositoryOperationPathDefault` transport — so a `REPOSITORY_ONLY`\n * operation satisfies any \"the op exists\" config check and then fails to\n * resolve the moment a service-layer caller actually invokes it. That is a\n * latent RUNTIME failure produced by a config that looked correct at boot; it\n * shipped once already (the `USERS` retention opt-in, caught by a completion\n * review after the config tests were green).\n *\n * Boot-time guards that require an operation to be reachable by a\n * service-layer caller — notably the `retentionPolicy` guard in\n * `resources-config.shared.factory.ts`, whose three primitives\n * (`updateManyAsSystem` / `readRetainedAsSystem` / `listRetainedAsSystem`) all\n * resolve through `getServiceOperationPathDefault` — MUST read this set. Two\n * independently-maintained copies of the list is exactly how that class of bug\n * returns: the guard would accept a variant the resolver rejects.\n *\n * NOT the same question as {@link URL_BEARING_OPERATION_VARIANT_TYPES}: a\n * service-resolvable operation may be route-less (`INTERNAL_CALL`). An\n * operation that must be BOTH route-less and service-resolvable therefore has\n * exactly one legal variant type today — `INTERNAL_CALL` — and that\n * intersection is what a retention capability op needs.\n */\nexport const SERVICE_RESOLVABLE_OPERATION_VARIANT_TYPES: readonly ResourceOperationVariantType[] = [\n  ...SERVICE_NATIVE_OPERATION_VARIANT_TYPES,\n  ...URL_BEARING_OPERATION_VARIANT_TYPES,\n];\n\n/**\n * Is `operation` a BULK variant?\n *\n * `isBulkOperation` exists only on some members of the operation discriminated\n * union (the CronJob variant carries neither the flag nor a bulk notion), so\n * the `in` narrow is required before the read — see\n * `.claude/skills/audit-operation-variants`.\n */\nfunction isBulkOperationVariant<T extends ResourceConfiguration_Operation<any, any, any>>(operation: T): boolean {\n  return 'isBulkOperation' in operation && operation.isBulkOperation === true;\n}\n\n/**\n * Composite predicate: is `operation` the DEFAULT, NON-BULK variant for\n * `operationIdentifier` that the SERVICE dispatch layer can resolve?\n *\n * This is the exact admission test applied by\n * `ResourcesRegistryBackendService.getServiceOperationPathDefault` before it\n * chooses between the INTERNAL and URL-bearing candidates. Sharing it makes a\n * boot-time guard and the runtime resolver structurally unable to disagree:\n * a config the guard accepts is a config the resolver can serve, and adding a\n * variant type to {@link SERVICE_RESOLVABLE_OPERATION_VARIANT_TYPES} updates\n * both at once.\n *\n * Deliberately NOT a TypeScript type predicate: unlike\n * {@link isDefaultUrlBearingOperation}, callers of this one need a boolean\n * answer about reachability, not a narrowed operation — and narrowing to a\n * three-member union would imply a variant shape the callers do not read.\n *\n * @param operation - a single resource operation variant to classify.\n * @param operationIdentifier - the operation identifier to match (e.g. `CoreResourceOperation.UPDATE_MANY`).\n */\nexport function isServiceResolvableDefaultOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T,\n  operationIdentifier: string,\n): boolean {\n  return operation.operationIdentifier === operationIdentifier\n    && operation.isOperationDefault === true\n    && !isBulkOperationVariant(operation)\n    && SERVICE_RESOLVABLE_OPERATION_VARIANT_TYPES.includes(operation.variantType);\n}\n\n/**\n * Composite type guard: is `operation` the DEFAULT, NON-BULK, URL-bearing\n * variant for `operationIdentifier`?\n *\n * Combines the four conditions that together select THE operation a resource\n * exposes over HTTP for a given identifier:\n *  1. `operationIdentifier` matches,\n *  2. it is the operation default (`isOperationDefault === true`),\n *  3. it is not a bulk operation, and\n *  4. its variant type is in {@link URL_BEARING_OPERATION_VARIANT_TYPES} — the\n *     only variants that carry an HTTP surface: URL templates, methods,\n *     request/response DTOs.\n *\n * **Why this is single-sourced — a latent HTTP 500 depends on it.** Two\n * independent call sites must apply EXACTLY this filter:\n *  - `ResourcesRegistryBackendService.getOperationPathDefault` resolves the\n *    URL/DTO routing path and throws `RESOURCES_REGISTRY_OPERATION_PATH_NOT_FOUND`\n *    (INTERNAL / 500) when nothing matches.\n *  - The validate-field route mount gate (`findDefaultUrlBearingCreateOperation`)\n *    decides whether to register a resource's `validate-field` route; that\n *    route's request handler later calls `getOperationPathDefault(resourceType,\n *    CREATE)`. The handler is safe ONLY because the gate refuses to mount the\n *    route for any resource whose CREATE the resolver would reject (e.g. a\n *    `REPOSITORY_ONLY`-only CREATE such as `CoreResourceType.FILES`).\n *\n * Keeping both sites on this one predicate makes their agreement structural:\n * adding or removing a URL-bearing variant updates both at once, so the gate can\n * never admit a request the resolver will 500 on. Do NOT inline a copy of this\n * filter at a call site — call this guard.\n *\n * @param operation - a single resource operation variant to classify.\n * @param operationIdentifier - the operation identifier to match (e.g. `CoreResourceOperation.CREATE`).\n */\nexport function isDefaultUrlBearingOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T,\n  operationIdentifier: string,\n): operation is Extract<T, { variantType: ResourceOperationVariantType.API_CALL | ResourceOperationVariantType.API_CALL_WITH_CALLBACK }> {\n  return operation.operationIdentifier === operationIdentifier\n    && operation.isOperationDefault === true\n    && !isBulkOperationVariant(operation)\n    && URL_BEARING_OPERATION_VARIANT_TYPES.includes(operation.variantType);\n}\n"]}
+{"version":3,"file":"resource-operation-type-guards.utils.js","sourceRoot":"","sources":["../../../../../src/resources/utils/resource-operation-type-guards.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,sBAAsB,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,aAAa,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAY;IAEZ,OAAO,SAAS,CAAC,WAAW,KAAK,4BAA4B,CAAC,eAAe,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAA4C;IAC1F,4BAA4B,CAAC,QAAQ;IACrC,4BAA4B,CAAC,sBAAsB;CACpD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAA4C;IAC7F,4BAA4B,CAAC,aAAa;CAC3C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAA4C;IACjG,GAAG,sCAAsC;IACzC,GAAG,mCAAmC;CACvC,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAA2D,SAAY;IACpG,OAAO,iBAAiB,IAAI,SAAS,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,mCAAmC,CACjD,SAAY,EACZ,mBAA2B;IAE3B,OAAO,SAAS,CAAC,mBAAmB,KAAK,mBAAmB;WACvD,SAAS,CAAC,kBAAkB,KAAK,IAAI;WACrC,CAAC,sBAAsB,CAAC,SAAS,CAAC;WAClC,0CAA0C,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAY,EACZ,mBAA2B;IAE3B,OAAO,SAAS,CAAC,mBAAmB,KAAK,mBAAmB;WACvD,SAAS,CAAC,kBAAkB,KAAK,IAAI;WACrC,CAAC,sBAAsB,CAAC,SAAS,CAAC;WAClC,mCAAmC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC","sourcesContent":["/**\n * Type Guard Utilities for Resource Operations\n * \n * These helpers assist TypeScript in narrowing union types more efficiently,\n * reducing the need to check all operation variants in the union.\n * \n * @see TYPING_OPTIMIZATION_PLAN.md\n */\n\nimport { ResourceConfiguration_Operation } from '../resources-config.shared.schemas';\nimport { ResourceOperationVariantType } from '../resources.shared.schemas';\n\n/**\n * Type guard for API_CALL variant\n */\nexport function isApiCallOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.API_CALL }> {\n  return operation.variantType === ResourceOperationVariantType.API_CALL;\n}\n\n/**\n * Type guard for API_CALL_WITH_CALLBACK variant\n */\nexport function isApiCallWithCallbackOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.API_CALL_WITH_CALLBACK }> {\n  return operation.variantType === ResourceOperationVariantType.API_CALL_WITH_CALLBACK;\n}\n\n/**\n * Type guard for CRON_JOB variant\n */\nexport function isCronJobOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.CRON_JOB }> {\n  return operation.variantType === ResourceOperationVariantType.CRON_JOB;\n}\n\n/**\n * Type guard for BATCH_JOB variant\n */\nexport function isBatchJobOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.BATCH_JOB }> {\n  return operation.variantType === ResourceOperationVariantType.BATCH_JOB;\n}\n\n/**\n * Type guard for INTERNAL_CALL variant\n */\nexport function isInternalCallOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.INTERNAL_CALL }> {\n  return operation.variantType === ResourceOperationVariantType.INTERNAL_CALL;\n}\n\n/**\n * Type guard for REPOSITORY_ONLY variant\n */\nexport function isRepositoryOnlyOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T\n): operation is Extract<T, { variantType: ResourceOperationVariantType.REPOSITORY_ONLY }> {\n  return operation.variantType === ResourceOperationVariantType.REPOSITORY_ONLY;\n}\n\n/**\n * The variant types that carry an HTTP surface — URL templates, methods,\n * request/response DTOs. THE authority for \"is this variant routable?\".\n *\n * Every site that filters operations by \"reachable over HTTP\" must read this\n * set rather than re-listing its members: the list has drifted before, and each\n * copy is a place a newly-added URL-bearing variant would be silently missed.\n */\nexport const URL_BEARING_OPERATION_VARIANT_TYPES: readonly ResourceOperationVariantType[] = [\n  ResourceOperationVariantType.API_CALL,\n  ResourceOperationVariantType.API_CALL_WITH_CALLBACK,\n];\n\n/**\n * The service layer's NATIVE transport: variants authors declare for operations\n * that must run through the registry pipeline (ACL, hooks, lifecycle) but are\n * deliberately NOT exposed over HTTP.\n */\nexport const SERVICE_NATIVE_OPERATION_VARIANT_TYPES: readonly ResourceOperationVariantType[] = [\n  ResourceOperationVariantType.INTERNAL_CALL,\n];\n\n/**\n * THE authority for \"which variant types can the SERVICE dispatch layer\n * resolve?\" — i.e. exactly the set\n * `ResourcesRegistryBackendService.getServiceOperationPathDefault` matches.\n *\n * **Why this is a named, exported constant rather than three enum members\n * spelled out at each call site.** `REPOSITORY_ONLY` is route-less, just like\n * `INTERNAL_CALL`, and is therefore an extremely natural (wrong) choice for an\n * operation that should exist \"as a capability, without a new HTTP surface\".\n * But it is deliberately EXCLUDED here and served by the separate\n * `getRepositoryOperationPathDefault` transport — so a `REPOSITORY_ONLY`\n * operation satisfies any \"the op exists\" config check and then fails to\n * resolve the moment a service-layer caller actually invokes it. That is a\n * latent RUNTIME failure produced by a config that looked correct at boot; it\n * shipped once already (the `USERS` retention opt-in, caught by a completion\n * review after the config tests were green).\n *\n * Boot-time guards that require an operation to be reachable by a\n * service-layer caller — notably the `retentionPolicy` guard in\n * `resources-config.shared.factory.ts`, whose three primitives\n * (`updateManyAsSystem` / `readRetainedAsSystem` / `listRetainedAsSystem`) all\n * resolve through `getServiceOperationPathDefault` — MUST read this set. Two\n * independently-maintained copies of the list is exactly how that class of bug\n * returns: the guard would accept a variant the resolver rejects.\n *\n * NOT the same question as {@link URL_BEARING_OPERATION_VARIANT_TYPES}: a\n * service-resolvable operation may be route-less (`INTERNAL_CALL`). An\n * operation that must be BOTH route-less and service-resolvable therefore has\n * exactly one legal variant type today — `INTERNAL_CALL` — and that\n * intersection is what a retention capability op needs.\n */\nexport const SERVICE_RESOLVABLE_OPERATION_VARIANT_TYPES: readonly ResourceOperationVariantType[] = [\n  ...SERVICE_NATIVE_OPERATION_VARIANT_TYPES,\n  ...URL_BEARING_OPERATION_VARIANT_TYPES,\n];\n\n/**\n * Is `operation` a BULK variant?\n *\n * `isBulkOperation` exists only on some members of the operation discriminated\n * union (the CronJob variant carries neither the flag nor a bulk notion), so\n * the `in` narrow is required before the read — see\n * `.claude/skills/audit-operation-variants`.\n */\nfunction isBulkOperationVariant<T extends ResourceConfiguration_Operation<any, any, any>>(operation: T): boolean {\n  return 'isBulkOperation' in operation && operation.isBulkOperation === true;\n}\n\n/**\n * Composite predicate: is `operation` the DEFAULT, NON-BULK variant for\n * `operationIdentifier` that the SERVICE dispatch layer can resolve?\n *\n * This is the exact admission test applied by\n * `ResourcesRegistryBackendService.getServiceOperationPathDefault` before it\n * chooses between the INTERNAL and URL-bearing candidates. Sharing it makes a\n * boot-time guard and the runtime resolver structurally unable to disagree:\n * a config the guard accepts is a config the resolver can serve, and adding a\n * variant type to {@link SERVICE_RESOLVABLE_OPERATION_VARIANT_TYPES} updates\n * both at once.\n *\n * Deliberately NOT a TypeScript type predicate: unlike\n * {@link isDefaultUrlBearingOperation}, callers of this one need a boolean\n * answer about reachability, not a narrowed operation — and narrowing to a\n * three-member union would imply a variant shape the callers do not read.\n *\n * @param operation - a single resource operation variant to classify.\n * @param operationIdentifier - the operation identifier to match (e.g. `CoreResourceOperation.UPDATE_MANY`).\n */\nexport function isServiceResolvableDefaultOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T,\n  operationIdentifier: string,\n): boolean {\n  return operation.operationIdentifier === operationIdentifier\n    && operation.isOperationDefault === true\n    && !isBulkOperationVariant(operation)\n    && SERVICE_RESOLVABLE_OPERATION_VARIANT_TYPES.includes(operation.variantType);\n}\n\n/**\n * Composite type guard: is `operation` the DEFAULT, NON-BULK, URL-bearing\n * variant for `operationIdentifier`?\n *\n * Combines the four conditions that together select THE operation a resource\n * exposes over HTTP for a given identifier:\n *  1. `operationIdentifier` matches,\n *  2. it is the operation default (`isOperationDefault === true`),\n *  3. it is not a bulk operation, and\n *  4. its variant type is in {@link URL_BEARING_OPERATION_VARIANT_TYPES} — the\n *     only variants that carry an HTTP surface: URL templates, methods,\n *     request/response DTOs.\n *\n * **Why this is single-sourced — a latent HTTP 500 depends on it.** Two\n * independent call sites must apply EXACTLY this filter:\n *  - `ResourcesRegistryBackendService.getOperationPathDefault` resolves the\n *    URL/DTO routing path and throws `RESOURCES_REGISTRY_OPERATION_PATH_NOT_FOUND`\n *    (INTERNAL / 500) when nothing matches.\n *  - The validate-field route mount gate (`findDefaultUrlBearingCreateOperation`)\n *    decides whether to register a resource's `validate-field` route; that\n *    route's request handler later calls `getOperationPathDefault(resourceType,\n *    CREATE)`. The handler is safe ONLY because the gate refuses to mount the\n *    route for any resource whose CREATE the resolver would reject (e.g. a\n *    `REPOSITORY_ONLY`-only CREATE such as `CoreResourceType.FILES`).\n *\n * Keeping both sites on this one predicate makes their agreement structural:\n * adding or removing a URL-bearing variant updates both at once, so the gate can\n * never admit a request the resolver will 500 on. Do NOT inline a copy of this\n * filter at a call site — call this guard.\n *\n * @param operation - a single resource operation variant to classify.\n * @param operationIdentifier - the operation identifier to match (e.g. `CoreResourceOperation.CREATE`).\n */\nexport function isDefaultUrlBearingOperation<T extends ResourceConfiguration_Operation<any, any, any>>(\n  operation: T,\n  operationIdentifier: string,\n): operation is Extract<T, { variantType: ResourceOperationVariantType.API_CALL | ResourceOperationVariantType.API_CALL_WITH_CALLBACK }> {\n  return operation.operationIdentifier === operationIdentifier\n    && operation.isOperationDefault === true\n    && !isBulkOperationVariant(operation)\n    && URL_BEARING_OPERATION_VARIANT_TYPES.includes(operation.variantType);\n}\n"]}

package/dist/esm/resources/utils/resource-polymorphism.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-polymorphism.factory.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/resource-polymorphism.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EACV,uCAAuC,EACvC,2CAA2C,EAC3C,iDAAiD,EACjD,wDAAwD,EACxD,2BAA2B,EAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAgB,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,4BAA4B,EAA8B,MAAM,iCAAiC,CAAC;AAMhH;;;;GAIG;AACH,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAErF;;;;;;;;;;GAUG;AACH;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,CAAC,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,IACrF,gBAAgB,CAAC,wDAAwD,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAChG,2BAA2B,GAAG;IAC5B;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,iGAAiG;IACjG,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,4BAA4B,CAAC,EAAE,CAAC,iBAAiB,EAAE,WAAW,KAAK,CAAC,CAAC,UAAU,CAAC;CACjF,CAAC;AAEJ;;GAEG;AACH,MAAM,MAAM,0BAA0B,CAAC,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CACxF,iDAAiD,CAAC,WAAW,CAAC,EAC9D,UAAU,CACX,GAAG;IACF,QAAQ,EAAE,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;CACtD,CAAC;AAEF;;;GAGG;AACH,KAAK,yBAAyB,GAC1B,YAAY,GACZ,oBAAoB,GACpB,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,yBAAyB,CACnC,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,IACzC,IAAI,CACN,uCAAuC,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAC9F,yBAAyB,CAC1B,GAAG;IACF,yEAAyE;IACzE,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAC;CAClF,CAAC;AAMF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,uCAAuC,CACrD,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,EAE3C,WAAW,EAAE,4BAA4B,CAAC,WAAW,CAAC,EACtD,YAAY,EAAE,yBAAyB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,GAC7F,MAAM,CAAC,MAAM,EAAE,2CAA2C,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAwC5G"}
+{"version":3,"file":"resource-polymorphism.factory.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/resource-polymorphism.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EACV,uCAAuC,EACvC,2CAA2C,EAC3C,iDAAiD,EACjD,wDAAwD,EACxD,2BAA2B,EAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAgB,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,4BAA4B,EAA8B,MAAM,iCAAiC,CAAC;AAMhH;;;;GAIG;AACH,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAErF;;;;;;;;;;GAUG;AACH;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,CAAC,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,IACrF,gBAAgB,CAAC,wDAAwD,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAChG,2BAA2B,GAAG;IAC5B;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,iGAAiG;IACjG,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,4BAA4B,CAAC,EAAE,CAAC,iBAAiB,EAAE,WAAW,KAAK,CAAC,CAAC,UAAU,CAAC;CACjF,CAAC;AAEJ;;GAEG;AACH,MAAM,MAAM,0BAA0B,CAAC,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CACxF,iDAAiD,CAAC,WAAW,CAAC,EAC9D,UAAU,CACX,GAAG;IACF,QAAQ,EAAE,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;CACtD,CAAC;AAEF;;;GAGG;AACH,KAAK,yBAAyB,GAC1B,YAAY,GACZ,oBAAoB,GACpB,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,yBAAyB,CACnC,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,IACzC,IAAI,CACN,uCAAuC,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAC9F,yBAAyB,CAC1B,GAAG;IACF,yEAAyE;IACzE,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAC;CAClF,CAAC;AAMF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,uCAAuC,CACrD,oBAAoB,SAAS,YAAY,GAAG,SAAS,GAAG,SAAS,EACjE,kBAAkB,SAAS,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAAG,SAAS,EACjF,WAAW,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,EAE3C,WAAW,EAAE,4BAA4B,CAAC,WAAW,CAAC,EACtD,YAAY,EAAE,yBAAyB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,CAAC,GAC7F,MAAM,CAAC,MAAM,EAAE,2CAA2C,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAwC5G"}

package/dist/esm/resources/utils/resource-polymorphism.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-polymorphism.factory.js","sourceRoot":"","sources":["../../../../src/resources/utils/resource-polymorphism.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,0CAA0C,EAAE,MAAM,oCAAoC,CAAC;AAqIhG,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,uCAAuC,CAKrD,WAAsD,EACtD,YAA8F;IAE9F,MAAM,MAAM,GAA+G,EAAE,CAAC;IAE9H,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,iBAAiB,GAAG,2BAA2B,CACnD,YAAY,CAAC,uBAAuB,EACpC,OAAO,CACR,CAAC;QAEF,yCAAyC;QACzC,2CAA2C;QAC3C,wDAAwD;QACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;QAEzC,yCAAyC;QACzC,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,2BAA2B,GAAG,OAAO,CAAC,YAAY;YACtD,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,2BAAkC;YACzD,CAAC,CAAC,YAAY,CAAC,2BAA2B,CAAC;QAE7C,2FAA2F;QAC3F,+FAA+F;QAC/F,iGAAiG;QACjG,gGAAgG;QAChG,4DAA4D;QAC5D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,CACxD,0CAA0C,CAAC;YACzC,GAAI,YAAoB;YACxB,UAAU,EAAE,iBAAiB;YAC7B,kBAAkB,EAAE,OAAO,CAAC,YAA4B;YACxD,uBAAuB,EAAE,OAAO,CAAC,eAAe;YAChD,qBAAqB,EAAE,sBAAsB;YAC7C,2EAA2E;YAC3E,2BAA2B;YAC3B,uBAAuB,EAAE,iBAAwB;SAClD,CAAC,CAAC;IACP,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF;;GAEG;AACH,SAAS,2BAA2B,CAClC,uBAAgF,EAChF,OAAgD;IAEhD,MAAM,QAAQ,GAAmF,EAAE,CAAC;IAEpG,KAAK,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/E,MAAM,gBAAgB,GAA4E,EAAE,CAAC;QAErG,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,4BAA4B,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;YACnG,IAAI,4BAA4B,IAAK,IAAwC,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC9G,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,8EAA8E;oBAC7H,kGAAkG,CACnG,CAAC;YACJ,CAAC;YAED,IAAI,aAAuB,CAAC;YAE5B,IAAI,eAAe,EAAE,CAAC;gBACpB,kEAAkE;gBAClE,MAAM,UAAU,GAAG,OAAO,CAAC,kBAA4B,CAAC;gBACxD,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC;oBAClC,aAAa,GAAG,eAAe,CAAC,UAAU,CAAE,CAAC;gBAC/C,CAAC;qBAAM,IAAI,aAAa,EAAE,CAAC;oBACzB,aAAa,GAAG,aAAa,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,6CAA6C;wBAC5F,2BAA2B,UAAU,2BAA2B;wBAChE,eAAe,UAAU,iDAAiD,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,aAAa,EAAE,CAAC;gBACzB,aAAa,GAAG,aAAa,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,kDAAkD,CAClG,CAAC;YACJ,CAAC;YAED,gBAAgB,CAAC,IAAI,CAAC;gBACpB,GAAG,IAAI;gBACP,KAAK,EAAE,aAAa;gBACpB,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;QAC9E,CAAC;QAED,QAAQ,CAAC,YAAY,CAAC,GAAG;YACvB,GAAG,QAAQ;YACX,QAAQ,EAAE,gBAAgB;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Resource Polymorphism — Factory Configuration (Phase 3)\n *\n * Provides `createPolymorphicResourceConfigurations()` which takes a polymorphic\n * declaration + shared resource configuration, and produces N factory functions\n * (one per variant) that can be spread into the resource configurations factory map.\n *\n * Key transformation: `polymorphicRole` on operation variants is resolved to\n * standard `roles` for each variant's scope.\n *\n * @see polymorphic-scope-approach-A-expansion.md — Phase 3\n */\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources-config.shared.factory';\nimport type {\n  ResourceConfiguration_BuilderParameters,\n  ResourceConfiguration_InitializationFactory,\n  ResourceConfiguration_Operation_BuilderParameters,\n  ResourceConfiguration_OperationVariant_BuilderParameters,\n  CollectionViewFields_Search,\n} from '../resources-config.shared.schemas';\nimport type { ResourceType, CoreResourceOperation } from '../resources.shared.core.definitions';\nimport type { EnumLikeType } from '@wildo-ai/zod-decorators';\nimport type { PolymorphicSchemaDeclaration, PolymorphicResolvedVariant } from './resource-polymorphism.schemas';\n\n// =============================================================================\n// TYPES\n// =============================================================================\n\n/**\n * Distributive Omit — preserves union members individually.\n * Standard `Omit<A | B, K>` collapses to common keys only, losing per-member properties.\n * This helper distributes the Omit over each union member, preserving all variant-specific fields.\n */\ntype DistributiveOmit<T, K extends PropertyKey> = T extends any ? Omit<T, K> : never;\n\n/**\n * Operation variant with `polymorphicRole` support.\n * Extends the standard variant by adding `polymorphicRole` as an alternative to `roles`.\n *\n * - `polymorphicRole`: `Record<ResourceType, string[]>` — role mapping per parent resource type.\n *   The factory resolves this to standard `roles` for each generated variant.\n * - `roles`: standard roles array — used directly (e.g., for admin variants).\n *\n * If both `polymorphicRole` and `roles` are provided, `polymorphicRole` takes precedence\n * for the matching parent resource type. If the parent isn't in `polymorphicRole`, `roles` is used as fallback.\n */\n/**\n * Polymorphic variant type. Intersects with CollectionViewFields_Search so that\n * SEARCH operation variants (including REPOSITORY_ONLY) can specify isSearchable,\n * searchableFields, filterFields, sortFields, etc. All fields are optional.\n */\nexport type PolymorphicOperationVariant<TMainSchema extends z.ZodTypeAny = z.ZodTypeAny> =\n  DistributiveOmit<ResourceConfiguration_OperationVariant_BuilderParameters<TMainSchema>, 'roles'> &\n  CollectionViewFields_Search & {\n    /**\n     * Role mapping per parent resource type.\n     * The factory resolves this into standard `roles` for each generated variant.\n     *\n     * ⚠️ An EMPTY array is NOT \"skip the role check\" — it is fail-CLOSED. The\n     * authorization gate evaluates `operationRoles.some(...)`, and `[].some()`\n     * is always `false`, so an empty array denies EVERY caller (403). For the\n     * user-self scope, list the baseline authenticated role (`APP_USER`); role\n     * membership is the floor, while row ownership is enforced separately by the\n     * USER_SELF scope authorizer.\n     *\n     * @example\n     * polymorphicRole: {\n     *   'organizations': ['ORG_OWNER', 'ORG_ADMIN'],\n     *   'users': ['APP_USER'],  // user-self: any authenticated user (ownership checked by scope)\n     * }\n     */\n    polymorphicRole?: Record<string, string[]>;\n    /** Standard roles — used directly or as fallback when polymorphicRole doesn't have the parent */\n    roles?: string[];\n    /**\n     * A response DTO built from EACH variant's own main schema, for a response that must carry that variant's\n     * fields — above all its scope foreign key (`organizationId` on the organization variant, `applicationId`\n     * on the application variant), which only the variant schema has. A static `customResponseDto` built from\n     * the shared base schema silently drops it (#1596 review N4).\n     *\n     * Resolved per variant into `customResponseDto`; declaring both is refused, since only one can win.\n     *\n     * @example\n     * polymorphicCustomResponseDto: (variantSchema) => z.object({\n     *   data: z.array((variantSchema as z.ZodObject<z.ZodRawShape>).omit({ rawBody: true })),\n     *   pagination: createPaginationResponseMetadataSchema(DEFAULT_LIST_PAGE_CEILING),\n     * }),\n     */\n    polymorphicCustomResponseDto?: (variantMainSchema: TMainSchema) => z.ZodTypeAny;\n  };\n\n/**\n * Operation configuration with polymorphic role support.\n */\nexport type PolymorphicOperationConfig<TMainSchema extends z.ZodTypeAny = z.ZodAny> = Omit<\n  ResourceConfiguration_Operation_BuilderParameters<TMainSchema>,\n  'variants'\n> & {\n  variants: PolymorphicOperationVariant<TMainSchema>[];\n};\n\n/**\n * Keys the polymorphic factory derives PER VARIANT — the only things a shared config cannot supply.\n * Everything else is shared, and is now inherited structurally (see {@link PolymorphicResourceConfig}).\n */\ntype PolymorphicPerVariantKeys =\n  | 'mainSchema'              // derived per variant from the declaration\n  | 'resourceIdentifier'      // derived per variant\n  | 'resourceFieldIdentifier' // derived per variant\n  | 'resourceRelationships'   // provided at factory call time by the registry\n  | 'operationsConfiguration';// replaced by the polymorphicRole-aware shape below\n\n/**\n * Shared resource configuration for polymorphic resources — everything common across all variants.\n *\n * ⚠️ DERIVED FROM `ResourceConfiguration_BuilderParameters`, deliberately. This used to be a\n * hand-maintained whitelist of forwarded fields, and it silently DROPPED every resource-level\n * capability axis added after it was written (`isAnonymizable`, `transpositionPolicy`,\n * `retentionPolicy`). The failure mode was invisible: a polymorphic resource could ASK for a\n * capability and simply not get it — no type error, no runtime error, the opt-in just evaporated.\n * Because the type is now an `Omit` of the real parameter surface and the values are spread through,\n * ANY capability added to the builder parameters is automatically available to polymorphic resources\n * and forwarded — there is no list left to forget.\n *\n * Per-variant keys are omitted (see {@link PolymorphicPerVariantKeys}); `operationsConfiguration` is\n * re-declared with the `polymorphicRole`-aware variant shape.\n *\n * NOTE ON SEMANTICS: a capability declared here applies to EVERY generated variant (that is the point\n * — e.g. all billing scopes retain identically). A capability that is invalid for one variant's scope\n * fails loud in that variant's factory call, which is the correct outcome; per-variant capability\n * overrides are intentionally NOT modelled (no consumer needs them, and they would reintroduce the\n * \"which variant actually got it?\" ambiguity this contract removes).\n */\nexport type PolymorphicResourceConfig<\n  TCustomOperationEnum extends EnumLikeType | undefined = undefined,\n  TCoreOperationEnum extends Partial<CoreResourceOperation> | undefined = undefined,\n  TMainSchema extends z.ZodTypeAny = z.ZodAny,\n> = Omit<\n  ResourceConfiguration_BuilderParameters<TCustomOperationEnum, TCoreOperationEnum, TMainSchema>,\n  PolymorphicPerVariantKeys\n> & {\n  /** Operations configuration — supports `polymorphicRole` on variants. */\n  operationsConfiguration: Record<string, PolymorphicOperationConfig<TMainSchema>>;\n};\n\n// =============================================================================\n// MAIN FUNCTION\n// =============================================================================\n\n/**\n * Create N resource configuration factories from a polymorphic declaration.\n *\n * For each variant in the declaration, produces a standard\n * `ResourceConfiguration_InitializationFactory` that can be registered in the factory map.\n *\n * The key transformation: `polymorphicRole` on operation variants is resolved to\n * standard `roles` for each variant's parent resource type.\n *\n * @returns Record mapping variant resource type → factory function\n *\n * @example\n * ```typescript\n * const billingAccountFactories = createPolymorphicResourceConfigurations(\n *   billingAccountsPolymorphicDeclaration,\n *   {\n *     coreOperations: [CoreResourceOperation.READ, CoreResourceOperation.LIST, ...],\n *     operationsConfiguration: {\n *       [CoreResourceOperation.READ]: {\n *         variants: [{\n *           variantType: ResourceOperationVariantType.API_CALL,\n *           isDefault: true,\n *           polymorphicRole: {\n *             'organizations': [CORE_ORG_ROLES.ORG_OWNER],\n *             'users': [CORE_APP_ROLES.APP_USER], // never [] — empty is fail-closed (403)\n *           },\n *           riskLevel: ResourceOperationRiskLevel.LOW,\n *         }],\n *       },\n *     },\n *   },\n * );\n * // → {\n * //     'organizationBillingAccounts': (rels) => ResourceConfiguration,\n * //     'userBillingAccounts': (rels) => ResourceConfiguration,\n * //   }\n * ```\n */\nexport function createPolymorphicResourceConfigurations<\n  TCustomOperationEnum extends EnumLikeType | undefined = undefined,\n  TCoreOperationEnum extends Partial<CoreResourceOperation> | undefined = undefined,\n  TMainSchema extends z.ZodTypeAny = z.ZodAny,\n>(\n  declaration: PolymorphicSchemaDeclaration<TMainSchema>,\n  sharedConfig: PolymorphicResourceConfig<TCustomOperationEnum, TCoreOperationEnum, TMainSchema>,\n): Record<string, ResourceConfiguration_InitializationFactory<TCustomOperationEnum, TCoreOperationEnum, any>> {\n  const result: Record<string, ResourceConfiguration_InitializationFactory<TCustomOperationEnum, TCoreOperationEnum, any>> = {};\n\n  for (const [, variant] of declaration.variants) {\n    const resolvedOpsConfig = resolveOperationsForVariant(\n      sharedConfig.operationsConfiguration,\n      variant,\n    );\n\n    // Determine the schema for this variant:\n    // - If SchemaFamily, use the rebuilt union\n    // - If plain ZodObject, use the variant schema directly\n    const variantMainSchema = variant.schema;\n\n    // Determine inheritenceSchemaDefinition:\n    // - If SchemaFamily, use the rebuilt family's inheritenceSchemaDefinition\n    // - Otherwise, use the shared config's (if any)\n    const inheritenceSchemaDefinition = variant.schemaFamily\n      ? variant.schemaFamily.inheritenceSchemaDefinition as any\n      : sharedConfig.inheritenceSchemaDefinition;\n\n    // Lazy factory: relationships are provided at registry call time, not at declaration time.\n    // SPREAD the shared config rather than re-listing its fields: that is what makes every current\n    // AND FUTURE resource-level capability (retentionPolicy, isAnonymizable, transpositionPolicy, …)\n    // reach the generated variants automatically. Re-listing is how those three were silently lost.\n    // Only the genuinely per-variant keys are overridden below.\n    result[variant.resourceType] = (resourcesRelationships) =>\n      createResourceConfiguration_Initialization({\n        ...(sharedConfig as any),\n        mainSchema: variantMainSchema,\n        resourceIdentifier: variant.resourceType as ResourceType,\n        resourceFieldIdentifier: variant.fieldIdentifier,\n        resourceRelationships: resourcesRelationships,\n        // A variant carrying its own SchemaFamily overrides the shared definition.\n        inheritenceSchemaDefinition,\n        operationsConfiguration: resolvedOpsConfig as any,\n      });\n  }\n\n  return result;\n}\n\n// =============================================================================\n// INTERNALS\n// =============================================================================\n\n/**\n * Resolve `polymorphicRole` → `roles` for each operation variant for a specific scope variant.\n */\nfunction resolveOperationsForVariant<TMainSchema extends z.ZodTypeAny>(\n  operationsConfiguration: Record<string, PolymorphicOperationConfig<TMainSchema>>,\n  variant: PolymorphicResolvedVariant<TMainSchema>,\n): Record<string, ResourceConfiguration_Operation_BuilderParameters<TMainSchema>> {\n  const resolved: Record<string, ResourceConfiguration_Operation_BuilderParameters<TMainSchema>> = {};\n\n  for (const [operationKey, opConfig] of Object.entries(operationsConfiguration)) {\n    const resolvedVariants: ResourceConfiguration_OperationVariant_BuilderParameters<TMainSchema>[] = [];\n\n    for (const opVariant of opConfig.variants) {\n      const { polymorphicRole, roles: fallbackRoles, polymorphicCustomResponseDto, ...rest } = opVariant;\n      if (polymorphicCustomResponseDto && (rest as { customResponseDto?: unknown }).customResponseDto !== undefined) {\n        throw new Error(\n          `[PolymorphicFactory] Operation \"${operationKey}\" variant declares both customResponseDto and polymorphicCustomResponseDto. ` +\n          'Declare one: the per-variant form when the response must carry the variant schema\\'s own fields.'\n        );\n      }\n\n      let resolvedRoles: string[];\n\n      if (polymorphicRole) {\n        // Resolve from polymorphicRole map using the parent resource type\n        const parentType = variant.parentResourceType as string;\n        if (parentType in polymorphicRole) {\n          resolvedRoles = polymorphicRole[parentType]!;\n        } else if (fallbackRoles) {\n          resolvedRoles = fallbackRoles;\n        } else {\n          throw new Error(\n            `[PolymorphicFactory] Operation \"${operationKey}\" variant has polymorphicRole but no entry ` +\n            `for parentResourceType=\"${parentType}\" and no fallback roles. ` +\n            `Either add \"${parentType}\" to polymorphicRole or provide fallback roles.`\n          );\n        }\n      } else if (fallbackRoles) {\n        resolvedRoles = fallbackRoles;\n      } else {\n        throw new Error(\n          `[PolymorphicFactory] Operation \"${operationKey}\" variant has neither polymorphicRole nor roles.`\n        );\n      }\n\n      resolvedVariants.push({\n        ...rest,\n        roles: resolvedRoles,\n        ...(polymorphicCustomResponseDto ? { customResponseDto: polymorphicCustomResponseDto(variant.schema) } : {}),\n      } as ResourceConfiguration_OperationVariant_BuilderParameters<TMainSchema>);\n    }\n\n    resolved[operationKey] = {\n      ...opConfig,\n      variants: resolvedVariants,\n    };\n  }\n\n  return resolved;\n}\n"]}
+{"version":3,"file":"resource-polymorphism.factory.js","sourceRoot":"","sources":["../../../../../src/resources/utils/resource-polymorphism.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,0CAA0C,EAAE,MAAM,oCAAoC,CAAC;AAqIhG,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,uCAAuC,CAKrD,WAAsD,EACtD,YAA8F;IAE9F,MAAM,MAAM,GAA+G,EAAE,CAAC;IAE9H,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,iBAAiB,GAAG,2BAA2B,CACnD,YAAY,CAAC,uBAAuB,EACpC,OAAO,CACR,CAAC;QAEF,yCAAyC;QACzC,2CAA2C;QAC3C,wDAAwD;QACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;QAEzC,yCAAyC;QACzC,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,2BAA2B,GAAG,OAAO,CAAC,YAAY;YACtD,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,2BAAkC;YACzD,CAAC,CAAC,YAAY,CAAC,2BAA2B,CAAC;QAE7C,2FAA2F;QAC3F,+FAA+F;QAC/F,iGAAiG;QACjG,gGAAgG;QAChG,4DAA4D;QAC5D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,CACxD,0CAA0C,CAAC;YACzC,GAAI,YAAoB;YACxB,UAAU,EAAE,iBAAiB;YAC7B,kBAAkB,EAAE,OAAO,CAAC,YAA4B;YACxD,uBAAuB,EAAE,OAAO,CAAC,eAAe;YAChD,qBAAqB,EAAE,sBAAsB;YAC7C,2EAA2E;YAC3E,2BAA2B;YAC3B,uBAAuB,EAAE,iBAAwB;SAClD,CAAC,CAAC;IACP,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF;;GAEG;AACH,SAAS,2BAA2B,CAClC,uBAAgF,EAChF,OAAgD;IAEhD,MAAM,QAAQ,GAAmF,EAAE,CAAC;IAEpG,KAAK,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/E,MAAM,gBAAgB,GAA4E,EAAE,CAAC;QAErG,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,4BAA4B,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;YACnG,IAAI,4BAA4B,IAAK,IAAwC,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC9G,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,8EAA8E;oBAC7H,kGAAkG,CACnG,CAAC;YACJ,CAAC;YAED,IAAI,aAAuB,CAAC;YAE5B,IAAI,eAAe,EAAE,CAAC;gBACpB,kEAAkE;gBAClE,MAAM,UAAU,GAAG,OAAO,CAAC,kBAA4B,CAAC;gBACxD,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC;oBAClC,aAAa,GAAG,eAAe,CAAC,UAAU,CAAE,CAAC;gBAC/C,CAAC;qBAAM,IAAI,aAAa,EAAE,CAAC;oBACzB,aAAa,GAAG,aAAa,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,6CAA6C;wBAC5F,2BAA2B,UAAU,2BAA2B;wBAChE,eAAe,UAAU,iDAAiD,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,aAAa,EAAE,CAAC;gBACzB,aAAa,GAAG,aAAa,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,kDAAkD,CAClG,CAAC;YACJ,CAAC;YAED,gBAAgB,CAAC,IAAI,CAAC;gBACpB,GAAG,IAAI;gBACP,KAAK,EAAE,aAAa;gBACpB,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;QAC9E,CAAC;QAED,QAAQ,CAAC,YAAY,CAAC,GAAG;YACvB,GAAG,QAAQ;YACX,QAAQ,EAAE,gBAAgB;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Resource Polymorphism — Factory Configuration (Phase 3)\n *\n * Provides `createPolymorphicResourceConfigurations()` which takes a polymorphic\n * declaration + shared resource configuration, and produces N factory functions\n * (one per variant) that can be spread into the resource configurations factory map.\n *\n * Key transformation: `polymorphicRole` on operation variants is resolved to\n * standard `roles` for each variant's scope.\n *\n * @see polymorphic-scope-approach-A-expansion.md — Phase 3\n */\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources-config.shared.factory';\nimport type {\n  ResourceConfiguration_BuilderParameters,\n  ResourceConfiguration_InitializationFactory,\n  ResourceConfiguration_Operation_BuilderParameters,\n  ResourceConfiguration_OperationVariant_BuilderParameters,\n  CollectionViewFields_Search,\n} from '../resources-config.shared.schemas';\nimport type { ResourceType, CoreResourceOperation } from '../resources.shared.core.definitions';\nimport type { EnumLikeType } from '@wildo-ai/zod-decorators';\nimport type { PolymorphicSchemaDeclaration, PolymorphicResolvedVariant } from './resource-polymorphism.schemas';\n\n// =============================================================================\n// TYPES\n// =============================================================================\n\n/**\n * Distributive Omit — preserves union members individually.\n * Standard `Omit<A | B, K>` collapses to common keys only, losing per-member properties.\n * This helper distributes the Omit over each union member, preserving all variant-specific fields.\n */\ntype DistributiveOmit<T, K extends PropertyKey> = T extends any ? Omit<T, K> : never;\n\n/**\n * Operation variant with `polymorphicRole` support.\n * Extends the standard variant by adding `polymorphicRole` as an alternative to `roles`.\n *\n * - `polymorphicRole`: `Record<ResourceType, string[]>` — role mapping per parent resource type.\n *   The factory resolves this to standard `roles` for each generated variant.\n * - `roles`: standard roles array — used directly (e.g., for admin variants).\n *\n * If both `polymorphicRole` and `roles` are provided, `polymorphicRole` takes precedence\n * for the matching parent resource type. If the parent isn't in `polymorphicRole`, `roles` is used as fallback.\n */\n/**\n * Polymorphic variant type. Intersects with CollectionViewFields_Search so that\n * SEARCH operation variants (including REPOSITORY_ONLY) can specify isSearchable,\n * searchableFields, filterFields, sortFields, etc. All fields are optional.\n */\nexport type PolymorphicOperationVariant<TMainSchema extends z.ZodTypeAny = z.ZodTypeAny> =\n  DistributiveOmit<ResourceConfiguration_OperationVariant_BuilderParameters<TMainSchema>, 'roles'> &\n  CollectionViewFields_Search & {\n    /**\n     * Role mapping per parent resource type.\n     * The factory resolves this into standard `roles` for each generated variant.\n     *\n     * ⚠️ An EMPTY array is NOT \"skip the role check\" — it is fail-CLOSED. The\n     * authorization gate evaluates `operationRoles.some(...)`, and `[].some()`\n     * is always `false`, so an empty array denies EVERY caller (403). For the\n     * user-self scope, list the baseline authenticated role (`APP_USER`); role\n     * membership is the floor, while row ownership is enforced separately by the\n     * USER_SELF scope authorizer.\n     *\n     * @example\n     * polymorphicRole: {\n     *   'organizations': ['ORG_OWNER', 'ORG_ADMIN'],\n     *   'users': ['APP_USER'],  // user-self: any authenticated user (ownership checked by scope)\n     * }\n     */\n    polymorphicRole?: Record<string, string[]>;\n    /** Standard roles — used directly or as fallback when polymorphicRole doesn't have the parent */\n    roles?: string[];\n    /**\n     * A response DTO built from EACH variant's own main schema, for a response that must carry that variant's\n     * fields — above all its scope foreign key (`organizationId` on the organization variant, `applicationId`\n     * on the application variant), which only the variant schema has. A static `customResponseDto` built from\n     * the shared base schema silently drops it (#1596 review N4).\n     *\n     * Resolved per variant into `customResponseDto`; declaring both is refused, since only one can win.\n     *\n     * @example\n     * polymorphicCustomResponseDto: (variantSchema) => z.object({\n     *   data: z.array((variantSchema as z.ZodObject<z.ZodRawShape>).omit({ rawBody: true })),\n     *   pagination: createPaginationResponseMetadataSchema(DEFAULT_LIST_PAGE_CEILING),\n     * }),\n     */\n    polymorphicCustomResponseDto?: (variantMainSchema: TMainSchema) => z.ZodTypeAny;\n  };\n\n/**\n * Operation configuration with polymorphic role support.\n */\nexport type PolymorphicOperationConfig<TMainSchema extends z.ZodTypeAny = z.ZodAny> = Omit<\n  ResourceConfiguration_Operation_BuilderParameters<TMainSchema>,\n  'variants'\n> & {\n  variants: PolymorphicOperationVariant<TMainSchema>[];\n};\n\n/**\n * Keys the polymorphic factory derives PER VARIANT — the only things a shared config cannot supply.\n * Everything else is shared, and is now inherited structurally (see {@link PolymorphicResourceConfig}).\n */\ntype PolymorphicPerVariantKeys =\n  | 'mainSchema'              // derived per variant from the declaration\n  | 'resourceIdentifier'      // derived per variant\n  | 'resourceFieldIdentifier' // derived per variant\n  | 'resourceRelationships'   // provided at factory call time by the registry\n  | 'operationsConfiguration';// replaced by the polymorphicRole-aware shape below\n\n/**\n * Shared resource configuration for polymorphic resources — everything common across all variants.\n *\n * ⚠️ DERIVED FROM `ResourceConfiguration_BuilderParameters`, deliberately. This used to be a\n * hand-maintained whitelist of forwarded fields, and it silently DROPPED every resource-level\n * capability axis added after it was written (`isAnonymizable`, `transpositionPolicy`,\n * `retentionPolicy`). The failure mode was invisible: a polymorphic resource could ASK for a\n * capability and simply not get it — no type error, no runtime error, the opt-in just evaporated.\n * Because the type is now an `Omit` of the real parameter surface and the values are spread through,\n * ANY capability added to the builder parameters is automatically available to polymorphic resources\n * and forwarded — there is no list left to forget.\n *\n * Per-variant keys are omitted (see {@link PolymorphicPerVariantKeys}); `operationsConfiguration` is\n * re-declared with the `polymorphicRole`-aware variant shape.\n *\n * NOTE ON SEMANTICS: a capability declared here applies to EVERY generated variant (that is the point\n * — e.g. all billing scopes retain identically). A capability that is invalid for one variant's scope\n * fails loud in that variant's factory call, which is the correct outcome; per-variant capability\n * overrides are intentionally NOT modelled (no consumer needs them, and they would reintroduce the\n * \"which variant actually got it?\" ambiguity this contract removes).\n */\nexport type PolymorphicResourceConfig<\n  TCustomOperationEnum extends EnumLikeType | undefined = undefined,\n  TCoreOperationEnum extends Partial<CoreResourceOperation> | undefined = undefined,\n  TMainSchema extends z.ZodTypeAny = z.ZodAny,\n> = Omit<\n  ResourceConfiguration_BuilderParameters<TCustomOperationEnum, TCoreOperationEnum, TMainSchema>,\n  PolymorphicPerVariantKeys\n> & {\n  /** Operations configuration — supports `polymorphicRole` on variants. */\n  operationsConfiguration: Record<string, PolymorphicOperationConfig<TMainSchema>>;\n};\n\n// =============================================================================\n// MAIN FUNCTION\n// =============================================================================\n\n/**\n * Create N resource configuration factories from a polymorphic declaration.\n *\n * For each variant in the declaration, produces a standard\n * `ResourceConfiguration_InitializationFactory` that can be registered in the factory map.\n *\n * The key transformation: `polymorphicRole` on operation variants is resolved to\n * standard `roles` for each variant's parent resource type.\n *\n * @returns Record mapping variant resource type → factory function\n *\n * @example\n * ```typescript\n * const billingAccountFactories = createPolymorphicResourceConfigurations(\n *   billingAccountsPolymorphicDeclaration,\n *   {\n *     coreOperations: [CoreResourceOperation.READ, CoreResourceOperation.LIST, ...],\n *     operationsConfiguration: {\n *       [CoreResourceOperation.READ]: {\n *         variants: [{\n *           variantType: ResourceOperationVariantType.API_CALL,\n *           isDefault: true,\n *           polymorphicRole: {\n *             'organizations': [CORE_ORG_ROLES.ORG_OWNER],\n *             'users': [CORE_APP_ROLES.APP_USER], // never [] — empty is fail-closed (403)\n *           },\n *           riskLevel: ResourceOperationRiskLevel.LOW,\n *         }],\n *       },\n *     },\n *   },\n * );\n * // → {\n * //     'organizationBillingAccounts': (rels) => ResourceConfiguration,\n * //     'userBillingAccounts': (rels) => ResourceConfiguration,\n * //   }\n * ```\n */\nexport function createPolymorphicResourceConfigurations<\n  TCustomOperationEnum extends EnumLikeType | undefined = undefined,\n  TCoreOperationEnum extends Partial<CoreResourceOperation> | undefined = undefined,\n  TMainSchema extends z.ZodTypeAny = z.ZodAny,\n>(\n  declaration: PolymorphicSchemaDeclaration<TMainSchema>,\n  sharedConfig: PolymorphicResourceConfig<TCustomOperationEnum, TCoreOperationEnum, TMainSchema>,\n): Record<string, ResourceConfiguration_InitializationFactory<TCustomOperationEnum, TCoreOperationEnum, any>> {\n  const result: Record<string, ResourceConfiguration_InitializationFactory<TCustomOperationEnum, TCoreOperationEnum, any>> = {};\n\n  for (const [, variant] of declaration.variants) {\n    const resolvedOpsConfig = resolveOperationsForVariant(\n      sharedConfig.operationsConfiguration,\n      variant,\n    );\n\n    // Determine the schema for this variant:\n    // - If SchemaFamily, use the rebuilt union\n    // - If plain ZodObject, use the variant schema directly\n    const variantMainSchema = variant.schema;\n\n    // Determine inheritenceSchemaDefinition:\n    // - If SchemaFamily, use the rebuilt family's inheritenceSchemaDefinition\n    // - Otherwise, use the shared config's (if any)\n    const inheritenceSchemaDefinition = variant.schemaFamily\n      ? variant.schemaFamily.inheritenceSchemaDefinition as any\n      : sharedConfig.inheritenceSchemaDefinition;\n\n    // Lazy factory: relationships are provided at registry call time, not at declaration time.\n    // SPREAD the shared config rather than re-listing its fields: that is what makes every current\n    // AND FUTURE resource-level capability (retentionPolicy, isAnonymizable, transpositionPolicy, …)\n    // reach the generated variants automatically. Re-listing is how those three were silently lost.\n    // Only the genuinely per-variant keys are overridden below.\n    result[variant.resourceType] = (resourcesRelationships) =>\n      createResourceConfiguration_Initialization({\n        ...(sharedConfig as any),\n        mainSchema: variantMainSchema,\n        resourceIdentifier: variant.resourceType as ResourceType,\n        resourceFieldIdentifier: variant.fieldIdentifier,\n        resourceRelationships: resourcesRelationships,\n        // A variant carrying its own SchemaFamily overrides the shared definition.\n        inheritenceSchemaDefinition,\n        operationsConfiguration: resolvedOpsConfig as any,\n      });\n  }\n\n  return result;\n}\n\n// =============================================================================\n// INTERNALS\n// =============================================================================\n\n/**\n * Resolve `polymorphicRole` → `roles` for each operation variant for a specific scope variant.\n */\nfunction resolveOperationsForVariant<TMainSchema extends z.ZodTypeAny>(\n  operationsConfiguration: Record<string, PolymorphicOperationConfig<TMainSchema>>,\n  variant: PolymorphicResolvedVariant<TMainSchema>,\n): Record<string, ResourceConfiguration_Operation_BuilderParameters<TMainSchema>> {\n  const resolved: Record<string, ResourceConfiguration_Operation_BuilderParameters<TMainSchema>> = {};\n\n  for (const [operationKey, opConfig] of Object.entries(operationsConfiguration)) {\n    const resolvedVariants: ResourceConfiguration_OperationVariant_BuilderParameters<TMainSchema>[] = [];\n\n    for (const opVariant of opConfig.variants) {\n      const { polymorphicRole, roles: fallbackRoles, polymorphicCustomResponseDto, ...rest } = opVariant;\n      if (polymorphicCustomResponseDto && (rest as { customResponseDto?: unknown }).customResponseDto !== undefined) {\n        throw new Error(\n          `[PolymorphicFactory] Operation \"${operationKey}\" variant declares both customResponseDto and polymorphicCustomResponseDto. ` +\n          'Declare one: the per-variant form when the response must carry the variant schema\\'s own fields.'\n        );\n      }\n\n      let resolvedRoles: string[];\n\n      if (polymorphicRole) {\n        // Resolve from polymorphicRole map using the parent resource type\n        const parentType = variant.parentResourceType as string;\n        if (parentType in polymorphicRole) {\n          resolvedRoles = polymorphicRole[parentType]!;\n        } else if (fallbackRoles) {\n          resolvedRoles = fallbackRoles;\n        } else {\n          throw new Error(\n            `[PolymorphicFactory] Operation \"${operationKey}\" variant has polymorphicRole but no entry ` +\n            `for parentResourceType=\"${parentType}\" and no fallback roles. ` +\n            `Either add \"${parentType}\" to polymorphicRole or provide fallback roles.`\n          );\n        }\n      } else if (fallbackRoles) {\n        resolvedRoles = fallbackRoles;\n      } else {\n        throw new Error(\n          `[PolymorphicFactory] Operation \"${operationKey}\" variant has neither polymorphicRole nor roles.`\n        );\n      }\n\n      resolvedVariants.push({\n        ...rest,\n        roles: resolvedRoles,\n        ...(polymorphicCustomResponseDto ? { customResponseDto: polymorphicCustomResponseDto(variant.schema) } : {}),\n      } as ResourceConfiguration_OperationVariant_BuilderParameters<TMainSchema>);\n    }\n\n    resolved[operationKey] = {\n      ...opConfig,\n      variants: resolvedVariants,\n    };\n  }\n\n  return resolved;\n}\n"]}

package/dist/esm/resources/utils/resource-polymorphism.relationships.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-polymorphism.relationships.d.ts","sourceRoot":"","sources":["../../../../src/resources/utils/resource-polymorphism.relationships.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,KAAK,+BAA+B,EACrC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACnH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAMpF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,8BAA8B;IAC7C,2CAA2C;IAC3C,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,qCAAqC;IACrC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,qFAAqF;IACrF,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,kFAAkF;IAClF,SAAS,CAAC,EAAE,+BAA+B,CAAC;IAC5C,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mCAAmC,CACjD,WAAW,EAAE,4BAA4B,EACzC,OAAO,EAAE;IACP,yEAAyE;IACzE,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,gDAAgD;IAChD,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,gDAAgD;IAChD,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;CACpD,GACA,oBAAoB,EAAE,CAyBxB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,4BAA4B,EAC/C,sBAAsB,EAAE,4BAA4B,GAAG,YAAY,EACnE,iBAAiB,EAAE,+BAA+B,EAClD,gBAAgB,EAAE,+BAA+B,EACjD,OAAO,EAAE,8BAA8B,GACtC,oBAAoB,EAAE,CA8CxB"}
+{"version":3,"file":"resource-polymorphism.relationships.d.ts","sourceRoot":"","sources":["../../../../../src/resources/utils/resource-polymorphism.relationships.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,KAAK,+BAA+B,EACrC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACnH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAMpF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,8BAA8B;IAC7C,2CAA2C;IAC3C,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,qCAAqC;IACrC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,qFAAqF;IACrF,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,kFAAkF;IAClF,SAAS,CAAC,EAAE,+BAA+B,CAAC;IAC5C,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mCAAmC,CACjD,WAAW,EAAE,4BAA4B,EACzC,OAAO,EAAE;IACP,yEAAyE;IACzE,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,gDAAgD;IAChD,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,gDAAgD;IAChD,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;CACpD,GACA,oBAAoB,EAAE,CAyBxB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,4BAA4B,EAC/C,sBAAsB,EAAE,4BAA4B,GAAG,YAAY,EACnE,iBAAiB,EAAE,+BAA+B,EAClD,gBAAgB,EAAE,+BAA+B,EACjD,OAAO,EAAE,8BAA8B,GACtC,oBAAoB,EAAE,CA8CxB"}