@wildo-ai/saas-models 1.1.8 → 1.1.10

package/dist/esm/_inspect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_inspect.d.ts","sourceRoot":"","sources":["../../../src/_inspect.ts"],"names":[],"mappings":""}
+{"version":3,"file":"_inspect.d.ts","sourceRoot":"","sources":["../../src/_inspect.ts"],"names":[],"mappings":""}

package/dist/esm/_inspect.js.map

@@ -1 +1 @@
-{"version":3,"file":"_inspect.js","sourceRoot":"","sources":["../../../src/_inspect.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,GAAmB,SAAS,CAAC;AACpC,KAAK,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { CrossFrontendHandoffRequestSchema } from './security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\ntype Req = z.infer<typeof CrossFrontendHandoffRequestSchema>;\n\ndeclare const r: Req;\ntype ReturnPathType = typeof r.returnPath;\nconst x: ReturnPathType = undefined;\nvoid x;\n"]}
+{"version":3,"file":"_inspect.js","sourceRoot":"","sources":["../../src/_inspect.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,GAAmB,SAAS,CAAC;AACpC,KAAK,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { CrossFrontendHandoffRequestSchema } from './security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\ntype Req = z.infer<typeof CrossFrontendHandoffRequestSchema>;\n\ndeclare const r: Req;\ntype ReturnPathType = typeof r.returnPath;\nconst x: ReturnPathType = undefined;\nvoid x;\n"]}

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-metadata.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAwB,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUnG,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;kBAsF3H,CAAC"}
+{"version":3,"file":"application-metadata.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAwB,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAUnG,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;kBAsF3H,CAAC"}

package/dist/esm/applications/application-metadata.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-metadata.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAGxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAEhE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Metadata Shared Resource Configuration\n *\n * Resource configuration for application metadata management.\n * App-focused management for descriptive information about applications.\n */\n\nimport { z } from 'zod';\nimport { ApplicationMetadataSchema } from './applications.shared.schemas';\n\n\n\n\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourcePrimaryScope, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\ntype ApplicationMetadataCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Metadata Resource Configuration Factory\n*/\nexport const applicationMetadataResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  undefined,\n  ApplicationMetadataCoreOperations,\n  typeof ApplicationMetadataSchema\n>({\n  mainSchema: ApplicationMetadataSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_METADATA,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_METADATA],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  // onParentCreate eager-seeding writes through createAsSystem → opt into the\n  // fail-closed system-write policy (composition-oncreate-lifecycle plan).\n  systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application metadata\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    }\n  },\n});\n"]}
+{"version":3,"file":"application-metadata.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/applications/application-metadata.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAGxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAQjF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,OAAO,EAAE;IAEhE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Metadata Shared Resource Configuration\n *\n * Resource configuration for application metadata management.\n * App-focused management for descriptive information about applications.\n */\n\nimport { z } from 'zod';\nimport { ApplicationMetadataSchema } from './applications.shared.schemas';\n\n\n\n\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourcePrimaryScope, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\ntype ApplicationMetadataCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Metadata Resource Configuration Factory\n*/\nexport const applicationMetadataResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  undefined,\n  ApplicationMetadataCoreOperations,\n  typeof ApplicationMetadataSchema\n>({\n  mainSchema: ApplicationMetadataSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_METADATA,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_METADATA],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  // onParentCreate eager-seeding writes through createAsSystem → opt into the\n  // fail-closed system-write policy (composition-oncreate-lifecycle plan).\n  systemAccessPolicy: { create: ResourceSystemAccessMode.ALLOWED },\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application metadata\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application metadata\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    }\n  },\n});\n"]}

package/dist/esm/applications/application-subject.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-subject.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,8DAGL,CAAC;AAGnC,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,iFAAiF;AACjF,oBAAY,4BAA4B;IACtC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;CACd;AAED,eAAO,MAAM,8BAA8B;;;;;;;4BAYzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;kBAgB5C,CAAC;AACJ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC"}
+{"version":3,"file":"application-subject.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,8DAGL,CAAC;AAGnC,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,iFAAiF;AACjF,oBAAY,4BAA4B;IACtC,WAAW,gBAAgB;IAC3B,IAAI,SAAS;CACd;AAED,eAAO,MAAM,8BAA8B;;;;;;;4BAYzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;kBAgB5C,CAAC;AACJ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC"}

package/dist/esm/applications/application-subject.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-subject.shared.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,EAAE;KACR,SAAS,EAAE;KACX,KAAK,EAA0B,CAAC;AAKnC,iFAAiF;AACjF,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,2DAA2B,CAAA;IAC3B,6CAAa,CAAA;AACf,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,WAAW,CAAC;KAC1D,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC;QAClD,0BAA0B,EAAE,0BAA0B;QACtD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,2BAA2B,EAAE,CAAC;aAC3B,MAAM,EAAE;aACR,KAAK,CAAC,uBAAuB,CAAC;KAClC,CAAC;CACH,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,oBAAoB,EAAE,0BAA0B;IAChD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,8BAA8B;IACtC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;CAC1D,CAAC;KACD,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,4BAA4B,CAAC,IAAI;OACvD,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,QAAQ,CAAC,oBAAoB,EACjF;IACE,OAAO,EAAE,4DAA4D;IACrE,IAAI,EAAE,CAAC,QAAQ,EAAE,4BAA4B,CAAC;CAC/C,CACF,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * Repository-maintained identity of one canonical application subject.\n *\n * This is deliberately distinct from the platform database `Application._id`,\n * the mutable application slug, and any machine-local continuity authority\n * domain. It remains stable when the repository is cloned or moved and changes\n * only when an application is intentionally forked into a new semantic subject.\n *\n * UUID v4 narrows generation semantics while `.lowercase()` makes the textual\n * representation canonical for manifests, digests, paths, and equality checks.\n */\nexport const ApplicationSubjectIdSchema = z\n  .uuidv4()\n  .lowercase()\n  .brand<'ApplicationSubjectId'>();\n\n\nexport type ApplicationSubjectId = z.infer<typeof ApplicationSubjectIdSchema>;\n\n/** Immutable repository-bootstrap origin for a canonical application subject. */\nexport enum ApplicationSubjectOriginKind {\n  INITIALIZED = 'INITIALIZED',\n  FORK = 'FORK',\n}\n\nexport const ApplicationSubjectOriginSchema = z.discriminatedUnion('kind', [\n  z.strictObject({\n    kind: z.literal(ApplicationSubjectOriginKind.INITIALIZED),\n  }),\n  z.strictObject({\n    kind: z.literal(ApplicationSubjectOriginKind.FORK),\n    parentApplicationSubjectId: ApplicationSubjectIdSchema,\n    sourceGitCommit: z.string().min(1),\n    sourceSubjectManifestDigest: z\n      .string()\n      .regex(/^sha256:[0-9a-f]{64}$/),\n  }),\n]);\nexport type ApplicationSubjectOrigin = z.infer<\n  typeof ApplicationSubjectOriginSchema\n>;\n\n/**\n * The one portable identity manifest committed at an application root.\n *\n * `createdAt` is observational and is deliberately excluded by the manifest\n * digest protocol. The schema remains data-only so configuration/bootstrap\n * code can parse it before importing executable application configuration.\n */\nexport const ApplicationSubjectManifestV1Schema = z\n  .strictObject({\n    schemaVersion: z.literal(1),\n    applicationSubjectId: ApplicationSubjectIdSchema,\n    createdAt: z.iso.datetime(),\n    origin: ApplicationSubjectOriginSchema,\n    manifestDigest: z.string().regex(/^sha256:[0-9a-f]{64}$/),\n  })\n  .refine(\n    (manifest) =>\n      manifest.origin.kind !== ApplicationSubjectOriginKind.FORK\n      || manifest.origin.parentApplicationSubjectId !== manifest.applicationSubjectId,\n    {\n      message: 'a fork must create a distinct application subject identity',\n      path: ['origin', 'parentApplicationSubjectId'],\n    },\n  );\nexport type ApplicationSubjectManifestV1 = z.infer<\n  typeof ApplicationSubjectManifestV1Schema\n>;\n"]}
+{"version":3,"file":"application-subject.shared.schemas.js","sourceRoot":"","sources":["../../../src/applications/application-subject.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,EAAE;KACR,SAAS,EAAE;KACX,KAAK,EAA0B,CAAC;AAKnC,iFAAiF;AACjF,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,2DAA2B,CAAA;IAC3B,6CAAa,CAAA;AACf,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,WAAW,CAAC;KAC1D,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC;QAClD,0BAA0B,EAAE,0BAA0B;QACtD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,2BAA2B,EAAE,CAAC;aAC3B,MAAM,EAAE;aACR,KAAK,CAAC,uBAAuB,CAAC;KAClC,CAAC;CACH,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,oBAAoB,EAAE,0BAA0B;IAChD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,8BAA8B;IACtC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;CAC1D,CAAC;KACD,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,4BAA4B,CAAC,IAAI;OACvD,QAAQ,CAAC,MAAM,CAAC,0BAA0B,KAAK,QAAQ,CAAC,oBAAoB,EACjF;IACE,OAAO,EAAE,4DAA4D;IACrE,IAAI,EAAE,CAAC,QAAQ,EAAE,4BAA4B,CAAC;CAC/C,CACF,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * Repository-maintained identity of one canonical application subject.\n *\n * This is deliberately distinct from the platform database `Application._id`,\n * the mutable application slug, and any machine-local continuity authority\n * domain. It remains stable when the repository is cloned or moved and changes\n * only when an application is intentionally forked into a new semantic subject.\n *\n * UUID v4 narrows generation semantics while `.lowercase()` makes the textual\n * representation canonical for manifests, digests, paths, and equality checks.\n */\nexport const ApplicationSubjectIdSchema = z\n  .uuidv4()\n  .lowercase()\n  .brand<'ApplicationSubjectId'>();\n\n\nexport type ApplicationSubjectId = z.infer<typeof ApplicationSubjectIdSchema>;\n\n/** Immutable repository-bootstrap origin for a canonical application subject. */\nexport enum ApplicationSubjectOriginKind {\n  INITIALIZED = 'INITIALIZED',\n  FORK = 'FORK',\n}\n\nexport const ApplicationSubjectOriginSchema = z.discriminatedUnion('kind', [\n  z.strictObject({\n    kind: z.literal(ApplicationSubjectOriginKind.INITIALIZED),\n  }),\n  z.strictObject({\n    kind: z.literal(ApplicationSubjectOriginKind.FORK),\n    parentApplicationSubjectId: ApplicationSubjectIdSchema,\n    sourceGitCommit: z.string().min(1),\n    sourceSubjectManifestDigest: z\n      .string()\n      .regex(/^sha256:[0-9a-f]{64}$/),\n  }),\n]);\nexport type ApplicationSubjectOrigin = z.infer<\n  typeof ApplicationSubjectOriginSchema\n>;\n\n/**\n * The one portable identity manifest committed at an application root.\n *\n * `createdAt` is observational and is deliberately excluded by the manifest\n * digest protocol. The schema remains data-only so configuration/bootstrap\n * code can parse it before importing executable application configuration.\n */\nexport const ApplicationSubjectManifestV1Schema = z\n  .strictObject({\n    schemaVersion: z.literal(1),\n    applicationSubjectId: ApplicationSubjectIdSchema,\n    createdAt: z.iso.datetime(),\n    origin: ApplicationSubjectOriginSchema,\n    manifestDigest: z.string().regex(/^sha256:[0-9a-f]{64}$/),\n  })\n  .refine(\n    (manifest) =>\n      manifest.origin.kind !== ApplicationSubjectOriginKind.FORK\n      || manifest.origin.parentApplicationSubjectId !== manifest.applicationSubjectId,\n    {\n      message: 'a fork must create a distinct application subject identity',\n      path: ['origin', 'parentApplicationSubjectId'],\n    },\n  );\nexport type ApplicationSubjectManifestV1 = z.infer<\n  typeof ApplicationSubjectManifestV1Schema\n>;\n"]}

package/dist/esm/applications/application-versions.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-versions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA8CvI,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAwH3H,CAAC"}
+{"version":3,"file":"application-versions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA8CvI,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;kBAwH3H,CAAC"}

package/dist/esm/applications/application-versions.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-versions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,0CAA0C;AAC1C,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,0FAA0F;AAC1F,8FAA8F;AAC9F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,+FAA+F;AAC/F,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,8FAA8F;AAC9F,6FAA6F;AAC7F,wFAAwF;AACxF,0FAA0F;AAC1F,yEAAyE;AACzE,2EAA2E;AAC3E,iGAAiG;AACjG,uFAAuF;AACvF,yFAAyF;AACzF,0FAA0F;AAC1F,uBAAuB;AACvB,EAAE;AACF,+FAA+F;AAC/F,0FAA0F;AAC1F,0FAA0F;AAC1F,EAAE;AACF,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,gGAAgG;AAChG,kFAAkF;AAElF,MAAM,+BAA+B,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,iEAAiE;oBACjE,gBAAgB,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;oBAC7C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,iCAAiC;oBAC/C,UAAU,EAAE,+BAA+B;oBAC3C,8BAA8B,EAAE,EAAE;iBACnC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Version Shared Resource Configuration\n *\n * The application's release log: one row per published build, carrying its version string,\n * release date, and release notes. This resource RECORDS releases through core CRUD; it does\n * not control them — which build runs where is owned by the deployment tooling, not by a\n * resource operation. See the note below the imports for why the promotion verbs that once\n * lived here were removed.\n */\n\nimport { z } from 'zod';\nimport { ApplicationVersionSchema } from './applications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n// This resource has NO custom operations.\n//\n// `PROMOTE` / `ROLLBACK` / `DEPRECATE` were declared here as `ORG_ADMIN`-gated custom operations\n// and were removed on 2026-08-01. All three were ROUTED but never implemented, so each request\n// fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares — none of `targetEnvironment`, `deploymentNotes`, `environment`, `rollbackReason`,\n// `deprecationReason`, or `deprecationDate` is one, so every call answered **HTTP 200 having\n// changed nothing**.\n//\n// They were REMOVED rather than implemented because the state they manage does not exist here,\n// and for PROMOTE/ROLLBACK cannot exist:\n//\n//  1. THE FRAMEWORK IS MONO-ENV. `RuntimeEnvironment` states that each running platform or\n//     application instance is one environment per deployment, and that the environment value is\n//     NOT used for multi-env routing, DB lookup keys, or isolation — every deployment has its\n//     own infra. So \"version X is live in environment Y\" cannot be stated truthfully in this\n//     application's own database: a staging deployment is a DIFFERENT deployment with a\n//     DIFFERENT database. A row here asserting a foreign environment's live version would\n//     describe state this process can neither read, verify, nor enforce.\n//  2. DEPLOYMENT IS OWNED BY THE CLI SELF-HOST LANE (`wildo config sync` /\n//     `K8sManifestGenerator`). The apps-manager runtime publishing lane was deliberately removed\n//     on 2026-07-17; resource verbs here would duplicate and contradict that decision.\n//  3. The platform's own version resource (`WILDO_APPLICATION_VERSIONS`, app-factory git\n//     branch/commit tracking) exposes READ/LIST/CREATE only — no environment field and no\n//     promotion verbs.\n//\n// `DEPRECATE` was not environment-coupled and so escaped (1), but was removed with the others:\n// nothing anywhere consumes deprecation state, and with promotion gone this resource is a\n// release-notes changelog ledger, on which a deprecation flag would be speculative state.\n//\n// What remains is honest: an append-mostly release log (version, release date, release notes)\n// managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a\n// custom implementation and the persisted state it writes — follow the organization-units\n// MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE\n// persists). See the 2026-08-01 routed-but-unimplemented operation sweep (#1275).\n\nconst APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];\n\nconst APPLICATION_VERSION_FILTER_FIELDS = {\n  applicationId: z.string(),\n  version: z.string(),\n};\n\ntype ApplicationVersionCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Versions Resource Configuration Factory\n*/\nexport const applicationVersionsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  ApplicationVersionCoreOperations,\n  typeof ApplicationVersionSchema\n>({\n  mainSchema: ApplicationVersionSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_VERSIONS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_VERSIONS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application versions\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          // A version carries `releaseNotes`, not a `description` (#1952).\n          searchableFields: ['version', 'releaseNotes'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_VERSION_FILTER_FIELDS,\n          sortFields: APPLICATION_VERSION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can list application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application versions\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n});\n"]}
+{"version":3,"file":"application-versions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/applications/application-versions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAExH,0CAA0C;AAC1C,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,0FAA0F;AAC1F,8FAA8F;AAC9F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,+FAA+F;AAC/F,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,8FAA8F;AAC9F,6FAA6F;AAC7F,wFAAwF;AACxF,0FAA0F;AAC1F,yEAAyE;AACzE,2EAA2E;AAC3E,iGAAiG;AACjG,uFAAuF;AACvF,yFAAyF;AACzF,0FAA0F;AAC1F,uBAAuB;AACvB,EAAE;AACF,+FAA+F;AAC/F,0FAA0F;AAC1F,0FAA0F;AAC1F,EAAE;AACF,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,gGAAgG;AAChG,kFAAkF;AAElF,MAAM,+BAA+B,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,wBAAwB;IACpC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,EAA2B;IAE5C,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,iEAAiE;oBACjE,gBAAgB,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;oBAC7C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,iCAAiC;oBAC/C,UAAU,EAAE,+BAA+B;oBAC3C,8BAA8B,EAAE,EAAE;iBACnC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4CAA4C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,6CAA6C;oBAChF,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Version Shared Resource Configuration\n *\n * The application's release log: one row per published build, carrying its version string,\n * release date, and release notes. This resource RECORDS releases through core CRUD; it does\n * not control them — which build runs where is owned by the deployment tooling, not by a\n * resource operation. See the note below the imports for why the promotion verbs that once\n * lived here were removed.\n */\n\nimport { z } from 'zod';\nimport { ApplicationVersionSchema } from './applications.shared.schemas';\n\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\n\n// This resource has NO custom operations.\n//\n// `PROMOTE` / `ROLLBACK` / `DEPRECATE` were declared here as `ORG_ADMIN`-gated custom operations\n// and were removed on 2026-08-01. All three were ROUTED but never implemented, so each request\n// fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares — none of `targetEnvironment`, `deploymentNotes`, `environment`, `rollbackReason`,\n// `deprecationReason`, or `deprecationDate` is one, so every call answered **HTTP 200 having\n// changed nothing**.\n//\n// They were REMOVED rather than implemented because the state they manage does not exist here,\n// and for PROMOTE/ROLLBACK cannot exist:\n//\n//  1. THE FRAMEWORK IS MONO-ENV. `RuntimeEnvironment` states that each running platform or\n//     application instance is one environment per deployment, and that the environment value is\n//     NOT used for multi-env routing, DB lookup keys, or isolation — every deployment has its\n//     own infra. So \"version X is live in environment Y\" cannot be stated truthfully in this\n//     application's own database: a staging deployment is a DIFFERENT deployment with a\n//     DIFFERENT database. A row here asserting a foreign environment's live version would\n//     describe state this process can neither read, verify, nor enforce.\n//  2. DEPLOYMENT IS OWNED BY THE CLI SELF-HOST LANE (`wildo config sync` /\n//     `K8sManifestGenerator`). The apps-manager runtime publishing lane was deliberately removed\n//     on 2026-07-17; resource verbs here would duplicate and contradict that decision.\n//  3. The platform's own version resource (`WILDO_APPLICATION_VERSIONS`, app-factory git\n//     branch/commit tracking) exposes READ/LIST/CREATE only — no environment field and no\n//     promotion verbs.\n//\n// `DEPRECATE` was not environment-coupled and so escaped (1), but was removed with the others:\n// nothing anywhere consumes deprecation state, and with promotion gone this resource is a\n// release-notes changelog ledger, on which a deprecation flag would be speculative state.\n//\n// What remains is honest: an append-mostly release log (version, release date, release notes)\n// managed through core CRUD. Re-declaring any of these verbs is legitimate, but only WITH a\n// custom implementation and the persisted state it writes — follow the organization-units\n// MOVE/ARCHIVE pattern (a `prefixCoreOperations` hook returning the field patch the core UPDATE\n// persists). See the 2026-08-01 routed-but-unimplemented operation sweep (#1275).\n\nconst APPLICATION_VERSION_SORT_FIELDS = ['version', 'releaseDate'];\n\nconst APPLICATION_VERSION_FILTER_FIELDS = {\n  applicationId: z.string(),\n  version: z.string(),\n};\n\ntype ApplicationVersionCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplication Versions Resource Configuration Factory\n*/\nexport const applicationVersionsResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  Record<string, never>,\n  ApplicationVersionCoreOperations,\n  typeof ApplicationVersionSchema\n>({\n  mainSchema: ApplicationVersionSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_VERSIONS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_VERSIONS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  customOperation: {} as Record<string, never>,\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create application versions\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          // A version carries `releaseNotes`, not a `description` (#1952).\n          searchableFields: ['version', 'releaseNotes'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_VERSION_FILTER_FIELDS,\n          sortFields: APPLICATION_VERSION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        }\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can read application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can list application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update application versions\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete application versions\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n});\n"]}

package/dist/esm/applications/applications-context.schemas.d.ts

@@ -306,6 +306,35 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
                 requiredPurposes: z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>;
                 gatedProcessing: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            legalNotice: z.ZodOptional<z.ZodObject<{
+                establishmentJurisdiction: z.ZodOptional<z.ZodString>;
+                legalEntityName: z.ZodOptional<z.ZodString>;
+                registeredAddress: z.ZodOptional<z.ZodString>;
+                legalForm: z.ZodOptional<z.ZodString>;
+                authorizedRepresentatives: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                shareCapital: z.ZodOptional<z.ZodObject<{
+                    amount: z.ZodString;
+                    outstandingContributions: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>>;
+                generalContact: z.ZodOptional<z.ZodObject<{
+                    email: z.ZodEmail;
+                    phone: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>>;
+                tradeRegister: z.ZodOptional<z.ZodObject<{
+                    register: z.ZodString;
+                    registrationNumber: z.ZodString;
+                }, z.core.$strict>>;
+                vatIdentificationNumber: z.ZodOptional<z.ZodString>;
+                economicIdentificationNumber: z.ZodOptional<z.ZodString>;
+                supervisoryAuthority: z.ZodOptional<z.ZodString>;
+                regulatedProfession: z.ZodOptional<z.ZodObject<{
+                    professionalBody: z.ZodString;
+                    professionalTitle: z.ZodString;
+                    titleGrantedIn: z.ZodString;
+                    professionalRules: z.ZodString;
+                }, z.core.$strict>>;
+                inLiquidation: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>>;
             capabilityDeclaredConsentPurposes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>>;
             dataRetention: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof import("..").DataRetentionClass> & z.core.$partial, z.ZodObject<{
                 retentionDays: z.ZodNumber;
@@ -448,8 +477,8 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             activationCriteria: z.ZodOptional<z.ZodObject<{
                 mode: z.ZodDefault<z.ZodEnum<{
-                    ALL: "ALL";
                     ANY: "ANY";
+                    ALL: "ALL";
                 }>>;
                 criteria: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                     criterionType: z.ZodLiteral<import("..").ActivationCriterionType.MILESTONE>;
@@ -489,6 +518,10 @@ export declare const ApplicationFullCurrentContextSchema: z.ZodObject<{
             applicationReadAccess: z.ZodOptional<z.ZodEnum<typeof import("..").AuditApplicationReadAccess>>;
             archiveAfterDays: z.ZodOptional<z.ZodNumber>;
             allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
+            applicationEventTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                category: z.ZodEnum<typeof import("..").AuditEventCategory>;
+                severity: z.ZodEnum<typeof import("..").AuditEventSeverity>;
+            }, z.core.$strict>>>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     metadata: z.ZodObject<{
@@ -810,6 +843,35 @@ export declare const ApplicationContextSchema: z.ZodObject<{
                 requiredPurposes: z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>;
                 gatedProcessing: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            legalNotice: z.ZodOptional<z.ZodObject<{
+                establishmentJurisdiction: z.ZodOptional<z.ZodString>;
+                legalEntityName: z.ZodOptional<z.ZodString>;
+                registeredAddress: z.ZodOptional<z.ZodString>;
+                legalForm: z.ZodOptional<z.ZodString>;
+                authorizedRepresentatives: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                shareCapital: z.ZodOptional<z.ZodObject<{
+                    amount: z.ZodString;
+                    outstandingContributions: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>>;
+                generalContact: z.ZodOptional<z.ZodObject<{
+                    email: z.ZodEmail;
+                    phone: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>>;
+                tradeRegister: z.ZodOptional<z.ZodObject<{
+                    register: z.ZodString;
+                    registrationNumber: z.ZodString;
+                }, z.core.$strict>>;
+                vatIdentificationNumber: z.ZodOptional<z.ZodString>;
+                economicIdentificationNumber: z.ZodOptional<z.ZodString>;
+                supervisoryAuthority: z.ZodOptional<z.ZodString>;
+                regulatedProfession: z.ZodOptional<z.ZodObject<{
+                    professionalBody: z.ZodString;
+                    professionalTitle: z.ZodString;
+                    titleGrantedIn: z.ZodString;
+                    professionalRules: z.ZodString;
+                }, z.core.$strict>>;
+                inLiquidation: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>>;
             capabilityDeclaredConsentPurposes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("..").ConsentPurpose>>>;
             dataRetention: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof import("..").DataRetentionClass> & z.core.$partial, z.ZodObject<{
                 retentionDays: z.ZodNumber;
@@ -952,8 +1014,8 @@ export declare const ApplicationContextSchema: z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             activationCriteria: z.ZodOptional<z.ZodObject<{
                 mode: z.ZodDefault<z.ZodEnum<{
-                    ALL: "ALL";
                     ANY: "ANY";
+                    ALL: "ALL";
                 }>>;
                 criteria: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                     criterionType: z.ZodLiteral<import("..").ActivationCriterionType.MILESTONE>;
@@ -993,6 +1055,10 @@ export declare const ApplicationContextSchema: z.ZodObject<{
             applicationReadAccess: z.ZodOptional<z.ZodEnum<typeof import("..").AuditApplicationReadAccess>>;
             archiveAfterDays: z.ZodOptional<z.ZodNumber>;
             allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
+            applicationEventTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                category: z.ZodEnum<typeof import("..").AuditEventCategory>;
+                severity: z.ZodEnum<typeof import("..").AuditEventSeverity>;
+            }, z.core.$strict>>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;

package/dist/esm/applications/applications-context.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"applications-context.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"applications-context.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/esm/applications/applications-context.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"applications-context.schemas.js","sourceRoot":"","sources":["../../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACvH,OAAO,EAAE,8BAA8B,EAAE,MAAM,mDAAmD,CAAC;AAGnG,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACxE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC3C,kCAAkC,EAAE,8BAA8B;IAClE,QAAQ,EAAE,yBAAyB;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC7D,aAAa,EAAE,wBAAwB;IACvC,QAAQ,EAAE,yBAAyB;IACnC,iBAAiB,EAAE,8BAA8B,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { ApplicationSchema, ApplicationVersionSchema, ApplicationMetadataSchema } from \"./applications.shared.schemas\";\nimport { AppConfiguration_Shared_Schema } from \"../config/app-configuration-shared.shared.schemas\";\n\n\nexport const ApplicationFullCurrentContextSchema = ApplicationSchema.extend({\n    versions: z.array(ApplicationVersionSchema),\n    AppConfiguration_Shared_App_Schema: AppConfiguration_Shared_Schema,\n    metadata: ApplicationMetadataSchema,\n});\n\nexport type ApplicationFullCurrentContext = z.infer<typeof ApplicationFullCurrentContextSchema>;\n\nexport const ApplicationContextSchema = ApplicationSchema.extend({\n    versionObject: ApplicationVersionSchema,\n    metadata: ApplicationMetadataSchema,\n    appFrontendConfig: AppConfiguration_Shared_Schema.optional(),\n});\n\nexport type ApplicationContext = z.infer<typeof ApplicationContextSchema>;\n"]}
+{"version":3,"file":"applications-context.schemas.js","sourceRoot":"","sources":["../../../src/applications/applications-context.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACvH,OAAO,EAAE,8BAA8B,EAAE,MAAM,mDAAmD,CAAC;AAGnG,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACxE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC3C,kCAAkC,EAAE,8BAA8B;IAClE,QAAQ,EAAE,yBAAyB;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC7D,aAAa,EAAE,wBAAwB;IACvC,QAAQ,EAAE,yBAAyB;IACnC,iBAAiB,EAAE,8BAA8B,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { ApplicationSchema, ApplicationVersionSchema, ApplicationMetadataSchema } from \"./applications.shared.schemas\";\nimport { AppConfiguration_Shared_Schema } from \"../config/app-configuration-shared.shared.schemas\";\n\n\nexport const ApplicationFullCurrentContextSchema = ApplicationSchema.extend({\n    versions: z.array(ApplicationVersionSchema),\n    AppConfiguration_Shared_App_Schema: AppConfiguration_Shared_Schema,\n    metadata: ApplicationMetadataSchema,\n});\n\nexport type ApplicationFullCurrentContext = z.infer<typeof ApplicationFullCurrentContextSchema>;\n\nexport const ApplicationContextSchema = ApplicationSchema.extend({\n    versionObject: ApplicationVersionSchema,\n    metadata: ApplicationMetadataSchema,\n    appFrontendConfig: AppConfiguration_Shared_Schema.optional(),\n});\n\nexport type ApplicationContext = z.infer<typeof ApplicationContextSchema>;\n"]}

package/dist/esm/applications/applications.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"applications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+E7E,KAAK,yBAAyB,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,sDAAsD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;kBAmNnH,CAAC"}
+{"version":3,"file":"applications.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+E7E,KAAK,yBAAyB,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAKjC,eAAO,MAAM,sDAAsD,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;kBAmNnH,CAAC"}

package/dist/esm/applications/applications.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"applications.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjG,2CAA2C;AAC3C,EAAE;AACF,uFAAuF;AACvF,kGAAkG;AAClG,mFAAmF;AACnF,8FAA8F;AAC9F,kGAAkG;AAClG,+FAA+F;AAC/F,8FAA8F;AAC9F,mFAAmF;AACnF,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,mFAAmF;AACnF,sEAAsE;AACtE,wFAAwF;AACxF,uFAAuF;AACvF,2FAA2F;AAC3F,gGAAgG;AAChG,6DAA6D;AAC7D,qFAAqF;AACrF,yFAAyF;AACzF,6FAA6F;AAC7F,qBAAqB;AACrB,0FAA0F;AAC1F,+EAA+E;AAC/E,+FAA+F;AAC/F,2EAA2E;AAC3E,EAAE;AACF,6FAA6F;AAC7F,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,sDAAsD;AACtD,EAAE;AACF,mFAAmF;AACnF,6FAA6F;AAC7F,uFAAuF;AACvF,iGAAiG;AACjG,kGAAkG;AAClG,gGAAgG;AAChG,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,iGAAiG;AACjG,8DAA8D;AAC9D,+FAA+F;AAC/F,4FAA4F;AAC5F,iGAAiG;AACjG,+FAA+F;AAC/F,yEAAyE;AACzE,yFAAyF;AACzF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,kGAAkG;AAClG,8FAA8F;AAC9F,4FAA4F;AAC5F,EAAE;AACF,iGAAiG;AACjG,yFAAyF;AACzF,mEAAmE;AAEnE,MAAM,uBAAuB,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AAE9D,MAAM,yBAAyB,GAAG;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,sDAAsD,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAIlK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,WAAW;IAChD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACzF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,yCAAyC;IAEjE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,qCAAqC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,yEAAyE;oBACzE,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mDAAmD;oBAClG,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,oCAAoC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,wCAAwC;oBACvF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4GAA4G;oBAChJ,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,yCAAyC;oBACxF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,wGAAwG;oBACxG,gBAAgB,EAAE,CAAC,gBAAgB,CAAC;oBACpC,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,EAAE;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAC/C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,GAAG;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,uFAAuF;oBACvF,wEAAwE;oBACxE,sFAAsF;oBACtF,qFAAqF;oBACrF,oFAAoF;oBACpF,qFAAqF;oBACrF,sFAAsF;oBACtF,oEAAoE;oBACpE,EAAE;oBACF,4GAA4G;oBAC5G,4BAA4B,EAAE,IAAI;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,0EAA0E;oBAC1E,4BAA4B,EAAE,IAAI;iBACnC;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CAEF,CAAC,CAAC","sourcesContent":["/**\n * Application Shared Resource Configuration\n *\n * Resource configuration for application management.\n * Supports both organization self-management and platform admin oversight.\n */\n\nimport { z } from 'zod';\nimport { ApplicationSchema } from './applications.shared.schemas';\n\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\n// Custom operations enum for applications.\n//\n// CROSS-ORGANIZATION APPLICATION TRANSFER IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY.\n// `TRANSFER` was declared here in two variants (`ORG_ADMIN` default at `riskLevel: CRITICAL`, and\n// an `APP_ADMIN_SUPER_ADMIN` `admin` variant adding `bypassOwnerApproval`), taking\n// `{ targetOrganizationId, transferReason }`. Both were ROUTED but never implemented, so each\n// request fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares. Neither `targetOrganizationId` nor `transferReason` is one, so every call answered\n// **HTTP 200 having changed nothing** — an operator was told a CRITICAL cross-tenant move had\n// succeeded while the application stayed exactly where it was. Removed 2026-08-01.\n//\n// It was REMOVED rather than implemented on five independent grounds:\n//\n//  1. NO FIELD TO WRITE. `ApplicationSchema` carries no owning-organization field.\n//  2. NO RELATIONSHIP TO RE-POINT. The resources registry declares no\n//     `ORGANIZATIONS → APPLICATION` edge; applications are not organization-owned here.\n//  3. THE OWNERSHIP DIRECTION IS INVERTED. `APPLICATION` is a top-level, self-anchored\n//     `ResourcePrimaryScope`. The application IS the tenant container; organizations are a\n//     sibling scope living inside its tenancy. \"Transferring\" the application to one of its own\n//     organizations is incoherent, not merely unimplemented.\n//  4. WHERE ORGANIZATION OWNERSHIP DOES EXIST, IT IS ALREADY IMMUTABLE. The platform\n//     app-factory's own application record binds `organizationId` at create and marks it\n//     `excludeFromUpdate()` — a different resource, on a different service, already refusing\n//     this mutation.\n//  5. FRAMEWORK PRECEDENT. Cross-organization MEMBER transfer is refused for exactly this\n//     reason — a tenant-boundary crossing the framework does not sanction (see\n//     `organization-members.shared.resources-config.schemas.ts`). An application is the tenant\n//     container itself, so the argument applies with more force, not less.\n//\n// `bypassOwnerApproval` additionally named an approval flow that does not exist, and neither\n// variant emitted an audit event despite being cross-tenant and CRITICAL. Re-declaring an\n// application re-parenting verb would require, at minimum: a persisted ownership edge, an\n// approval flow for the flag to bypass, a custom implementation that writes the edge, and\n// audit/SIEM emission on both request and completion.\n//\n// APPLICATION STATUS LIFECYCLE IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY EITHER.\n// `ACTIVATE` and `SUSPEND` were declared here as `APP_ADMIN_SUPER_ADMIN` verbs (`MEDIUM` and\n// `CRITICAL` respectively, both with a generated bulk variant) taking `{ reason }` and\n// `{ suspensionReason, notifyOwners }`. Like TRANSFER they were ROUTED but never implemented, so\n// each fell through to the generic core UPDATE and answered **HTTP 200 having changed nothing** —\n// an operator was told a CRITICAL application suspension had taken effect while the application\n// kept serving. Removed 2026-08-01, on grounds that compound with TRANSFER's:\n//\n//  1. NO FIELD TO WRITE — and no plausible one. `ApplicationSchema` is\n//     `{_id, appSlug, appDisplayName, lastVersion, platformAppId}`: an identity row, carrying no\n//     lifecycle state at all. There is nothing to transition.\n//  2. THE LIFECYCLE IS OWNED ONE TIER UP. An application's real operational state lives at the\n//     platform tier (`PLATFORM_APPLICATIONS` / `Wildo_Application_Config`), provisioned and\n//     managed by the platform apps-manager. This row is the in-app registry entry an application\n//     reads to know its own identity — halting an application is a platform-tier action, not a\n//     self-service field flip on the application's own copy of its name.\n//  3. SAME INVERTED OWNERSHIP AS TRANSFER (ground 3 above). `APPLICATION` is a top-level\n//     `ResourcePrimaryScope`; suspending the tenant container from inside its own tenancy is\n//     incoherent, and the suspending super-admin's own session lives in that container.\n//\n// The resource specification's framing — \"Created per org, managed by admins, and may be\n// transferred or suspended under governance\", with 409s for destination-org slug collisions —\n// describes a per-organization application marketplace. The framework does not implement one, and\n// inventing an `ApplicationStatus` to satisfy two unimplemented buttons would have built that\n// model backwards from its UI. Re-declaring these verbs requires the ownership model first.\n//\n// Applications consequently declare NO custom operations (hence the `undefined` custom-operation\n// type parameter below). See `.claude/plans/status-lifecycle-operations-analysis.md` and\n// the 2026-08-01 routed-but-unimplemented operation sweep (#1275).\n\nconst APPLICATION_SORT_FIELDS = ['appDisplayName', 'appSlug'];\n\nconst APPLICATION_FILTER_FIELDS = {\n  appSlug: z.string(),\n  appDisplayName: z.string(),\n};\n\ntype ApplicationCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplications Resource Configuration Factory\n*/\nexport const applicationResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  undefined,\n  ApplicationCoreOperations,\n  typeof ApplicationSchema\n>({\n  mainSchema: ApplicationSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true, // Applications are core system resources\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create applications\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // Use database definition so platformAppId and lastVersion are preserved\n          // requestDto auto-derived from decorators\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can create applications for any org\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can view applications\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can view any application\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    /**\n     * ⚠️ NOTHING CONFINES THIS QUERY — and that is safe for a reason worth stating, because the\n     * comment on the default variant used to imply a mechanism that does not exist.\n     *\n     * `applications` is its own scope ROOT, so both repositories blacklist the APPLICATIONS axis and\n     * this LIST compiles to the EMPTY filter (measured 2026-08-12,\n     * `base-classes/__tests__/scope-root-collection-confinement.probe.test.ts`, RESIDUAL sweep). The\n     * old wording — \"Org members can list *their* applications\" — is exactly the shape of the claim\n     * that was FALSE on `organizations` and cost a full tenant-isolation investigation, one role tier\n     * higher.\n     *\n     * What makes it safe here is ARCHITECTURE, not a predicate: **one database per application.**\n     * \"An application's organizations live in that application's own database\"\n     * (`organizations.shared.schemas.ts`, on `slug` uniqueness), so this collection holds that\n     * application's own row and a caller can only ever see the application they are already using.\n     * Measured: an ordinary `ORG_MEMBER` receives 1 of 1 rows, projected to four summary fields.\n     *\n     * So the two variants below differ in ROLE, not in reach — `admin` exists for the fields and\n     * operations it unlocks elsewhere, not because it sees more rows here.\n     *\n     * ⚠️ This rests on the one-database-per-application invariant. `CREATE` is super-admin gated, so\n     * a second application row COULD be written into this database; if that ever becomes a real\n     * deployment shape, this resource inherits the `organizations` defect at the `ORG_MEMBER` tier\n     * and must be confined on `initiatorIds.applicationId`. Tracked as SEC-SCOPEROOT-3.\n     */\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Unconfined by construction; safe because the collection holds this application only — see the block above\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can list all applications\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          // The application's own names (#1952): `name`/`description`/`slug` were never fields of an application.\n          searchableFields: ['appDisplayName'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          searchableFields: ['appDisplayName', 'appSlug'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 100,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update their applications\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can update any application\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete their applications\n          riskLevel: ResourceOperationRiskLevel.CRITICAL,\n          // An APPLICATION is a top-level scope in this framework, not an org-owned artifact, so\n          // deleting one destroys everything scoped beneath it. Same reasoning as\n          // `ORGANIZATIONS | DELETE`: `riskLevel` is UI-only and the per-user-type `stepUpAuth`\n          // policy is opt-in, off by default, and freshness-satisfied — neither challenges the\n          // caller here. Re-authentication itself accepts PASSWORD, an enrolled second factor\n          // (TOTP or a backup code) and PASSKEY, so a directory-managed user whose local first\n          // factor the framework destroys can still clear the gate through their second factor;\n          // see the note on `ORGANIZATIONS | DELETE` for how that came about.\n          //\n          // assurance-control: WILDO.IDENTITY.STEP_UP_AUTHENTICATION — re-authentication before a high-impact action.\n          requiresStepUpAuthentication: true,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can delete any application\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          // Per-VARIANT flag — nothing is inherited from the default variant above.\n          requiresStepUpAuthentication: true,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n\n});\n"]}
+{"version":3,"file":"applications.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/applications/applications.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,OAAO,EAAE,kCAAkC,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACxH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAE1G,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjG,2CAA2C;AAC3C,EAAE;AACF,uFAAuF;AACvF,kGAAkG;AAClG,mFAAmF;AACnF,8FAA8F;AAC9F,kGAAkG;AAClG,+FAA+F;AAC/F,8FAA8F;AAC9F,mFAAmF;AACnF,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,mFAAmF;AACnF,sEAAsE;AACtE,wFAAwF;AACxF,uFAAuF;AACvF,2FAA2F;AAC3F,gGAAgG;AAChG,6DAA6D;AAC7D,qFAAqF;AACrF,yFAAyF;AACzF,6FAA6F;AAC7F,qBAAqB;AACrB,0FAA0F;AAC1F,+EAA+E;AAC/E,+FAA+F;AAC/F,2EAA2E;AAC3E,EAAE;AACF,6FAA6F;AAC7F,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,sDAAsD;AACtD,EAAE;AACF,mFAAmF;AACnF,6FAA6F;AAC7F,uFAAuF;AACvF,iGAAiG;AACjG,kGAAkG;AAClG,gGAAgG;AAChG,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,iGAAiG;AACjG,8DAA8D;AAC9D,+FAA+F;AAC/F,4FAA4F;AAC5F,iGAAiG;AACjG,+FAA+F;AAC/F,yEAAyE;AACzE,yFAAyF;AACzF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,kGAAkG;AAClG,8FAA8F;AAC9F,4FAA4F;AAC5F,EAAE;AACF,iGAAiG;AACjG,yFAAyF;AACzF,mEAAmE;AAEnE,MAAM,uBAAuB,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AAE9D,MAAM,yBAAyB,GAAG;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC;AAUF;;EAEE;AACF,MAAM,CAAC,MAAM,sDAAsD,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAIlK;IACA,UAAU,EAAE,iBAAiB;IAC7B,kBAAkB,EAAE,gBAAgB,CAAC,WAAW;IAChD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC;IACzF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI,EAAE,yCAAyC;IAEjE,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IAED,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,qCAAqC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,yEAAyE;oBACzE,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mDAAmD;oBAClG,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;gBACD;oBACE,MAAM,EAAE,0BAA0B,CAAC,SAAS;oBAC5C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB;iBACvD;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,oCAAoC;oBACxE,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,wCAAwC;oBACvF,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,4GAA4G;oBAChJ,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,yCAAyC;oBACxF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,wGAAwG;oBACxG,gBAAgB,EAAE,CAAC,gBAAgB,CAAC;oBACpC,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,EAAE;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC;oBAC/C,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,yBAAyB;oBACvC,UAAU,EAAE,uBAAuB;oBACnC,8BAA8B,EAAE,GAAG;iBACpC;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,0CAA0C;iBAC3C;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,2CAA2C;oBAC9E,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,uFAAuF;oBACvF,wEAAwE;oBACxE,sFAAsF;oBACtF,qFAAqF;oBACrF,oFAAoF;oBACpF,qFAAqF;oBACrF,sFAAsF;oBACtF,oEAAoE;oBACpE,EAAE;oBACF,4GAA4G;oBAC5G,4BAA4B,EAAE,IAAI;iBACnC;gBACD;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,0CAA0C;oBACzF,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,0EAA0E;oBAC1E,4BAA4B,EAAE,IAAI;iBACnC;aACF;YACD,iBAAiB,EAAE;gBACjB;oBACE,MAAM,EAAE,0BAA0B,CAAC,2BAA2B;oBAC9D,OAAO,EAAE,2BAA2B,CAAC,KAAK;iBAC3C;aACF;SACF;KACF;CAEF,CAAC,CAAC","sourcesContent":["/**\n * Application Shared Resource Configuration\n *\n * Resource configuration for application management.\n * Supports both organization self-management and platform admin oversight.\n */\n\nimport { z } from 'zod';\nimport { ApplicationSchema } from './applications.shared.schemas';\n\nimport { coreResourceShared_FieldIdentifier, CoreResourceOperation, CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { ResourceOperationVariantType, ResourceOperationRiskLevel } from '../resources/resources.shared.schemas';\nimport { CoreUserNotificationTarget, CoreUserNotificationChannel } from '../notifications/notifications.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\n\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\n\n// Custom operations enum for applications.\n//\n// CROSS-ORGANIZATION APPLICATION TRANSFER IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY.\n// `TRANSFER` was declared here in two variants (`ORG_ADMIN` default at `riskLevel: CRITICAL`, and\n// an `APP_ADMIN_SUPER_ADMIN` `admin` variant adding `bypassOwnerApproval`), taking\n// `{ targetOrganizationId, transferReason }`. Both were ROUTED but never implemented, so each\n// request fell through to the generic core UPDATE, which persists only fields the resource schema\n// declares. Neither `targetOrganizationId` nor `transferReason` is one, so every call answered\n// **HTTP 200 having changed nothing** — an operator was told a CRITICAL cross-tenant move had\n// succeeded while the application stayed exactly where it was. Removed 2026-08-01.\n//\n// It was REMOVED rather than implemented on five independent grounds:\n//\n//  1. NO FIELD TO WRITE. `ApplicationSchema` carries no owning-organization field.\n//  2. NO RELATIONSHIP TO RE-POINT. The resources registry declares no\n//     `ORGANIZATIONS → APPLICATION` edge; applications are not organization-owned here.\n//  3. THE OWNERSHIP DIRECTION IS INVERTED. `APPLICATION` is a top-level, self-anchored\n//     `ResourcePrimaryScope`. The application IS the tenant container; organizations are a\n//     sibling scope living inside its tenancy. \"Transferring\" the application to one of its own\n//     organizations is incoherent, not merely unimplemented.\n//  4. WHERE ORGANIZATION OWNERSHIP DOES EXIST, IT IS ALREADY IMMUTABLE. The platform\n//     app-factory's own application record binds `organizationId` at create and marks it\n//     `excludeFromUpdate()` — a different resource, on a different service, already refusing\n//     this mutation.\n//  5. FRAMEWORK PRECEDENT. Cross-organization MEMBER transfer is refused for exactly this\n//     reason — a tenant-boundary crossing the framework does not sanction (see\n//     `organization-members.shared.resources-config.schemas.ts`). An application is the tenant\n//     container itself, so the argument applies with more force, not less.\n//\n// `bypassOwnerApproval` additionally named an approval flow that does not exist, and neither\n// variant emitted an audit event despite being cross-tenant and CRITICAL. Re-declaring an\n// application re-parenting verb would require, at minimum: a persisted ownership edge, an\n// approval flow for the flag to bypass, a custom implementation that writes the edge, and\n// audit/SIEM emission on both request and completion.\n//\n// APPLICATION STATUS LIFECYCLE IS INTENTIONALLY NOT A FRAMEWORK CAPABILITY EITHER.\n// `ACTIVATE` and `SUSPEND` were declared here as `APP_ADMIN_SUPER_ADMIN` verbs (`MEDIUM` and\n// `CRITICAL` respectively, both with a generated bulk variant) taking `{ reason }` and\n// `{ suspensionReason, notifyOwners }`. Like TRANSFER they were ROUTED but never implemented, so\n// each fell through to the generic core UPDATE and answered **HTTP 200 having changed nothing** —\n// an operator was told a CRITICAL application suspension had taken effect while the application\n// kept serving. Removed 2026-08-01, on grounds that compound with TRANSFER's:\n//\n//  1. NO FIELD TO WRITE — and no plausible one. `ApplicationSchema` is\n//     `{_id, appSlug, appDisplayName, lastVersion, platformAppId}`: an identity row, carrying no\n//     lifecycle state at all. There is nothing to transition.\n//  2. THE LIFECYCLE IS OWNED ONE TIER UP. An application's real operational state lives at the\n//     platform tier (`PLATFORM_APPLICATIONS` / `Wildo_Application_Config`), provisioned and\n//     managed by the platform apps-manager. This row is the in-app registry entry an application\n//     reads to know its own identity — halting an application is a platform-tier action, not a\n//     self-service field flip on the application's own copy of its name.\n//  3. SAME INVERTED OWNERSHIP AS TRANSFER (ground 3 above). `APPLICATION` is a top-level\n//     `ResourcePrimaryScope`; suspending the tenant container from inside its own tenancy is\n//     incoherent, and the suspending super-admin's own session lives in that container.\n//\n// The resource specification's framing — \"Created per org, managed by admins, and may be\n// transferred or suspended under governance\", with 409s for destination-org slug collisions —\n// describes a per-organization application marketplace. The framework does not implement one, and\n// inventing an `ApplicationStatus` to satisfy two unimplemented buttons would have built that\n// model backwards from its UI. Re-declaring these verbs requires the ownership model first.\n//\n// Applications consequently declare NO custom operations (hence the `undefined` custom-operation\n// type parameter below). See `.claude/plans/status-lifecycle-operations-analysis.md` and\n// the 2026-08-01 routed-but-unimplemented operation sweep (#1275).\n\nconst APPLICATION_SORT_FIELDS = ['appDisplayName', 'appSlug'];\n\nconst APPLICATION_FILTER_FIELDS = {\n  appSlug: z.string(),\n  appDisplayName: z.string(),\n};\n\ntype ApplicationCoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\n/*\nApplications Resource Configuration Factory\n*/\nexport const applicationResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  undefined,\n  ApplicationCoreOperations,\n  typeof ApplicationSchema\n>({\n  mainSchema: ApplicationSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true, // Applications are core system resources\n\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    CoreResourceOperation.DELETE\n  ],\n\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can create applications\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          // Use database definition so platformAppId and lastVersion are preserved\n          // requestDto auto-derived from decorators\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can create applications for any org\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        },\n        {\n          target: CoreUserNotificationTarget.USER_SELF,\n          channel: CoreUserNotificationChannel.FRONT_END_SUCCESS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Org members can view applications\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can view any application\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        }\n      ]\n    },\n\n    /**\n     * ⚠️ NOTHING CONFINES THIS QUERY — and that is safe for a reason worth stating, because the\n     * comment on the default variant used to imply a mechanism that does not exist.\n     *\n     * `applications` is its own scope ROOT, so both repositories blacklist the APPLICATIONS axis and\n     * this LIST compiles to the EMPTY filter (measured 2026-08-12,\n     * `base-classes/__tests__/scope-root-collection-confinement.probe.test.ts`, RESIDUAL sweep). The\n     * old wording — \"Org members can list *their* applications\" — is exactly the shape of the claim\n     * that was FALSE on `organizations` and cost a full tenant-isolation investigation, one role tier\n     * higher.\n     *\n     * What makes it safe here is ARCHITECTURE, not a predicate: **one database per application.**\n     * \"An application's organizations live in that application's own database\"\n     * (`organizations.shared.schemas.ts`, on `slug` uniqueness), so this collection holds that\n     * application's own row and a caller can only ever see the application they are already using.\n     * Measured: an ordinary `ORG_MEMBER` receives 1 of 1 rows, projected to four summary fields.\n     *\n     * So the two variants below differ in ROLE, not in reach — `admin` exists for the fields and\n     * operations it unlocks elsewhere, not because it sees more rows here.\n     *\n     * ⚠️ This rests on the one-database-per-application invariant. `CREATE` is super-admin gated, so\n     * a second application row COULD be written into this database; if that ever becomes a real\n     * deployment shape, this resource inherits the `organizations` defect at the `ORG_MEMBER` tier\n     * and must be confined on `initiatorIds.applicationId`. Tracked as SEC-SCOPEROOT-3.\n     */\n    [CoreResourceOperation.LIST]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER], // Unconfined by construction; safe because the collection holds this application only — see the block above\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can list all applications\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_MEMBER],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          // The application's own names (#1952): `name`/`description`/`slug` were never fields of an application.\n          searchableFields: ['appDisplayName'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 50,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          isSearchable: true,\n          searchableFields: ['appDisplayName', 'appSlug'],\n          searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n          filterFields: APPLICATION_FILTER_FIELDS,\n          sortFields: APPLICATION_SORT_FIELDS,\n          maxPaginatedResultPerPageLimit: 100,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can update their applications\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can update any application\n          riskLevel: ResourceOperationRiskLevel.LOW,\n          // requestDto auto-derived from decorators\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    },\n\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_ORG_ROLES.ORG_ADMIN], // Org admins can delete their applications\n          riskLevel: ResourceOperationRiskLevel.CRITICAL,\n          // An APPLICATION is a top-level scope in this framework, not an org-owned artifact, so\n          // deleting one destroys everything scoped beneath it. Same reasoning as\n          // `ORGANIZATIONS | DELETE`: `riskLevel` is UI-only and the per-user-type `stepUpAuth`\n          // policy is opt-in, off by default, and freshness-satisfied — neither challenges the\n          // caller here. Re-authentication itself accepts PASSWORD, an enrolled second factor\n          // (TOTP or a backup code) and PASSKEY, so a directory-managed user whose local first\n          // factor the framework destroys can still clear the gate through their second factor;\n          // see the note on `ORGANIZATIONS | DELETE` for how that came about.\n          //\n          // assurance-control: WILDO.IDENTITY.STEP_UP_AUTHENTICATION — re-authentication before a high-impact action.\n          requiresStepUpAuthentication: true,\n        },\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: false,\n          variantKey: \"admin\",\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], // Super admins can delete any application\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          // Per-VARIANT flag — nothing is inherited from the default variant above.\n          requiresStepUpAuthentication: true,\n        }\n      ],\n      userNotifications: [\n        {\n          target: CoreUserNotificationTarget.ORGANIZATION_ADMINISTRATIVE,\n          channel: CoreUserNotificationChannel.EMAIL,\n        }\n      ]\n    }\n  },\n\n});\n"]}

package/dist/esm/applications/applications.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"applications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,uBAAuB,4BAA4B;CACpD;AAED;;;;;GAKG;AACH,oBAAY,cAAc;IACxB,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,oBAAY,qBAAqB;IAC/B,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,4GAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,4KAGxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,iBAAiB;;;;;;;iBAuC5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,wBAAwB;;;;;;iBAMnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;iBA2BpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
+{"version":3,"file":"applications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,kBAAkB;IAC5B,OAAO,YAAY;IACnB,uBAAuB,4BAA4B;CACpD;AAED;;;;;GAKG;AACH,oBAAY,cAAc;IACxB,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,oBAAY,qBAAqB;IAC/B,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,4GAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,4KAGxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,iBAAiB;;;;;;;iBAuC5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,wBAAwB;;;;;;iBAMnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;iBA2BpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/esm/applications/applications.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"applications.shared.schemas.js","sourceRoot":"","sources":["../../../../src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,yEAAmD,CAAA;AACrD,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,cAEX;AAFD,WAAY,cAAc;IACxB,uDAAqC,CAAA;AACvC,CAAC,EAFW,cAAc,KAAd,cAAc,QAEzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,0CAAiB,CAAA;IACjB,0CAAiB,CAAA;AACnB,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC;IACrD,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC1B,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACtB,CAAC,CAAC,MAAM,EAAE;CACX,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,+BAA+B;IAC/B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACvE,cAAc,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC3E,+DAA+D;IAC/D,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,mCAAmC,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE;CACtI,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAC5F,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACnD,WAAW,EAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACrD,YAAY,EAAG,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACvH,+EAA+E;IAC/E,kFAAkF;IAClF,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;CACtE,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport enum StaticFrontEndType {\n  WEBSITE = 'website',\n  TECHNICAL_DOCUMENTATION = 'technical_documentation',\n}\n\n/**\n * The backend endpoints the runtime topology declares. One: the backend process binds exactly one port,\n * and serves health, webhooks, the OAuth provider and MCP as routes on it. Four \"sibling\" members\n * (health, webhook, OAuth, MCP at the API port minus 1..4) were removed with #1783 — nothing listened on\n * any of them, so each was a URL that refused every connection.\n */\nexport enum BackendApiType {\n  MAIN_BACKEND_API = 'main_backend_api',\n}\n\n/**\n * Background app-owned runtimes — kinds that an application owns but that\n * do NOT serve user-facing requests directly (no public HTTP surface for\n * end-users, no rendered frontend).\n *\n * Introduced by the minions-and-workers plan\n * (`.claude/plans/minions-and-workers-implementation.md`, KD-9):\n *\n * - `MINION` — TS/Node single-instance process sharing the application\n *   scope (Mongo / Redis / RabbitMQ); hosts the actor system; consumes\n *   queue / cron ticks. Always-up or cron-triggered.\n * - `WORKER` — language-pluggable stateless HTTP subprocess (Rust / Node /\n *   Java / …) called by the backend-api with a Wildo JWT. No backing\n *   services; ClusterIP-only, no ingress.\n *\n * Deploy-time identity uses the `{kind, name}` vocabulary (`name` = the\n * `wildo.saas.config.ts` bucket key), surfaced in two forms — the\n * `APP_OWNED_SERVICE_KIND` + `APP_OWNED_SERVICE_NAME` **env** pair and the\n * matching `wildo.ai/owned-service-{kind,name}` pod **labels**. WHICH forms a\n * kind carries, and how it consumes them, differs because their runtimes differ:\n *\n * - `WORKER` — language-pluggable, so a non-Node runtime (the reference Rust\n *   worker) READS the `APP_OWNED_SERVICE_NAME` **env** var at boot and forwards\n *   it as the apps-manager `worker-bootstrap` path segment\n *   (`appConfig.workers[name]`). A Node worker instead hardcodes `workerName` in\n *   `defineWorkerInit`; the env pair is still stamped on every worker deploy path\n *   (k8s, docker-compose, CLI `.env`) for the language-agnostic case +\n *   observability, alongside the matching pod labels.\n * - `MINION` — always Node, and sources its `minionName` from its compiled-in\n *   `defineMinionInit({ minionName })` config (the minion package is\n *   domain-specific by construction), cross-validated at boot against the\n *   fetched `appConfig.minions[minionName]`. Because identity is a compile-time\n *   fact, minions carry it ONLY as the `wildo.ai/owned-service-{kind,name}` pod\n *   **labels** (operators, selectors, observability); the `APP_OWNED_SERVICE_*`\n *   **env** pair is deliberately omitted on EVERY minion deploy path (k8s, CLI\n *   `.env`, docker-compose), since an env identity would be a second,\n *   drift-prone authority (see `env-configuration-generator.service.ts`).\n */\nexport enum BackgroundRuntimeType {\n  MINION = 'minion',\n  WORKER = 'worker',\n}\n\n/**\n * Schema for all shared (non-platform-private) application types.\n *\n * Interactive frontend surfaces are config-defined strings keyed by frontend\n * service identity via `frontendServices` in AppConfiguration, not an enum.\n * `z.string()` accepts those config-defined values alongside the known\n * static-frontend and backend-API enums.\n */\nexport const AllSharedApplicationTypesSchema = z.union([\n  z.enum(StaticFrontEndType),\n  z.enum(BackendApiType),\n  z.string(),\n]);\nexport type AllSharedApplicationTypes = z.infer<typeof AllSharedApplicationTypesSchema>;\n\n/**\n * Full app-owned runtime identity surface: every primary application type\n * (`AllSharedApplicationTypesSchema` — backend kinds, static frontends,\n * dynamic-frontend keys) plus the background runtimes\n * (`BackgroundRuntimeType` — minions, workers).\n *\n * Use this where a process needs to declare what kind of app-owned\n * runtime it is without forcing every caller to switch on a coarse\n * vocabulary that overlaps the existing fine-grained enums.\n */\nexport const AllAppOwnedRuntimeTypesSchema = z.union([\n  AllSharedApplicationTypesSchema,\n  z.enum(BackgroundRuntimeType),\n]);\nexport type AllAppOwnedRuntimeTypes = z.infer<typeof AllAppOwnedRuntimeTypesSchema>;\n\nexport const ApplicationSchema = z.object({\n    _id : z.string().isPrimaryKey().isSummaryField(),\n    appSlug : z.string().isDBIndexed().isSummaryField().excludeFromUpdate(),\n    appDisplayName : z.string().isDBIndexed().isSummaryField(),\n    lastVersion : z.string().optional().excludeFromCreate().excludeFromUpdate(),\n    // Backend-only field - stored in DB but never sent to frontend\n    platformAppId : z.string().isDBIndexed().isBackendOnly(),\n    /**\n     * Serializes every decision about WHICH organization owns the application (#1054).\n     *\n     * ## The race it closes\n     *\n     * `organizations.promoteToOwnerOrganization` measures (\"does an owner organization exist?\") and\n     * then writes (`type`). Under snapshot isolation that is textbook WRITE SKEW: two operators\n     * promote two DIFFERENT organizations, each observes no owner, and both commit — producing the two\n     * owner organizations the whole design refuses, which neither was individually permitted to\n     * create. No amount of additional checking closes it: each transaction's view is internally\n     * consistent, and a re-measure after the write cannot see the other's uncommitted row.\n     *\n     * The remedy is to give the two transactions something to collide ON. The promotion bumps this\n     * token inside its transaction before measuring, so two of them touch the same document and the\n     * storage engine aborts the loser. Same mechanism, same reasoning, as\n     * `Organization.ownerFloorSerializationToken` — which is also where the trap is recorded: the\n     * write MUST carry `preserveServerInjectedFields` for this field, or the repository's strict\n     * re-parse silently strips it and the serialization protects nothing.\n     *\n     * ## Why the APPLICATION row and not an organization's\n     *\n     * The two racing promotions target DIFFERENT organizations, so neither organization's row is\n     * shared and colliding on one would serialize nothing. The APPLICATION row is the only row both\n     * transactions can be made to touch, and it is also the right subject semantically: the fact being\n     * protected is a property of the application (\"it has one owner organization\"), not of any tenant.\n     *\n     * The VALUE is irrelevant and nothing reads it, so a lost update here costs nothing; what matters\n     * is that the document is written at all. `.nullish()` because every existing application predates\n     * the field, and one that has never had a promotion legitimately has no token — absent and zero\n     * mean the same thing.\n     */\n    ownerOrganizationSerializationToken : z.number().int().nullish().excludeFromCreate().excludeFromUpdate().isBackendOnly().isHidden(),\n});\nexport type Application = z.infer<typeof ApplicationSchema>;\n\nexport const ApplicationVersionSchema = z.object({\n    _id : z.string().isPrimaryKey().isSummaryField(),\n    applicationId : z.string().isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n    version : z.string().isDBIndexed().isSummaryField(),\n    releaseDate : z.date().isDBIndexed().isSummaryField(),\n    releaseNotes : z.string(),\n});\nexport type ApplicationVersion = z.infer<typeof ApplicationVersionSchema>;\n\nexport const ApplicationMetadataSchema = z.object({\n    _id : z.string().isPrimaryKey().isSummaryField(),\n    /**\n     * The owning application — and this row's BUSINESS IDENTITY.\n     *\n     * `APPLICATION → APPLICATION_METADATA` is 1:1, so \"the metadata of application X\"\n     * identifies the row completely. Declaring that lets the framework's business-key\n     * repository helpers address it: the app-init seed\n     * (`engine-applications:application-metadata`) upserts through\n     * `upsertByBusinessKey`, which refuses a schema that declares no identity —\n     * \"Schema declares no business-key identity\" — rather than guessing one.\n     *\n     * `.isUnique()` carries the 1:1 down to the database. `.isBusinessKey()` alone is\n     * a pure marker with no index, so two concurrent creates could otherwise leave\n     * an application with two metadata rows, which no read path expects.\n     *\n     * The name is `applicationId`, matching the APPLICATION scope's registered field\n     * identifier and every other APPLICATION-scoped resource. It was `appId` until\n     * 2026-09-18, which silently excluded this resource — and its two siblings — from\n     * every mechanism keyed on that identifier, up to and including the settings panes\n     * that render it. See the APPLICATION_FEATURES edge in\n     * `resources-registry.shared.core.definitions.ts` for the measured consequences.\n     */\n    applicationId : z.string().isDBIndexed().isForeignKey().isBusinessKey().isUnique().isSummaryField().excludeFromUpdate(),\n    // `.default('')` so the row is eager-seedable via onParentCreate (placeholder;\n    // the app sets a real description later) — root-cause fix for the blocking field.\n    description : z.string().default('').isDBIndexed().isSummaryField(),\n});\nexport type ApplicationMetadata = z.infer<typeof ApplicationMetadataSchema>;\n"]}
+{"version":3,"file":"applications.shared.schemas.js","sourceRoot":"","sources":["../../../src/applications/applications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,yEAAmD,CAAA;AACrD,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,cAEX;AAFD,WAAY,cAAc;IACxB,uDAAqC,CAAA;AACvC,CAAC,EAFW,cAAc,KAAd,cAAc,QAEzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,0CAAiB,CAAA;IACjB,0CAAiB,CAAA;AACnB,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC;IACrD,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC1B,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACtB,CAAC,CAAC,MAAM,EAAE;CACX,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,+BAA+B;IAC/B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACvE,cAAc,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAC3E,+DAA+D;IAC/D,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,mCAAmC,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE;CACtI,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IAC5F,OAAO,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACnD,WAAW,EAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACrD,YAAY,EAAG,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAChD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,aAAa,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE;IACvH,+EAA+E;IAC/E,kFAAkF;IAClF,WAAW,EAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;CACtE,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport enum StaticFrontEndType {\n  WEBSITE = 'website',\n  TECHNICAL_DOCUMENTATION = 'technical_documentation',\n}\n\n/**\n * The backend endpoints the runtime topology declares. One: the backend process binds exactly one port,\n * and serves health, webhooks, the OAuth provider and MCP as routes on it. Four \"sibling\" members\n * (health, webhook, OAuth, MCP at the API port minus 1..4) were removed with #1783 — nothing listened on\n * any of them, so each was a URL that refused every connection.\n */\nexport enum BackendApiType {\n  MAIN_BACKEND_API = 'main_backend_api',\n}\n\n/**\n * Background app-owned runtimes — kinds that an application owns but that\n * do NOT serve user-facing requests directly (no public HTTP surface for\n * end-users, no rendered frontend).\n *\n * Introduced by the minions-and-workers plan\n * (`.claude/plans/minions-and-workers-implementation.md`, KD-9):\n *\n * - `MINION` — TS/Node single-instance process sharing the application\n *   scope (Mongo / Redis / RabbitMQ); hosts the actor system; consumes\n *   queue / cron ticks. Always-up or cron-triggered.\n * - `WORKER` — language-pluggable stateless HTTP subprocess (Rust / Node /\n *   Java / …) called by the backend-api with a Wildo JWT. No backing\n *   services; ClusterIP-only, no ingress.\n *\n * Deploy-time identity uses the `{kind, name}` vocabulary (`name` = the\n * `wildo.saas.config.ts` bucket key), surfaced in two forms — the\n * `APP_OWNED_SERVICE_KIND` + `APP_OWNED_SERVICE_NAME` **env** pair and the\n * matching `wildo.ai/owned-service-{kind,name}` pod **labels**. WHICH forms a\n * kind carries, and how it consumes them, differs because their runtimes differ:\n *\n * - `WORKER` — language-pluggable, so a non-Node runtime (the reference Rust\n *   worker) READS the `APP_OWNED_SERVICE_NAME` **env** var at boot and forwards\n *   it as the apps-manager `worker-bootstrap` path segment\n *   (`appConfig.workers[name]`). A Node worker instead hardcodes `workerName` in\n *   `defineWorkerInit`; the env pair is still stamped on every worker deploy path\n *   (k8s, docker-compose, CLI `.env`) for the language-agnostic case +\n *   observability, alongside the matching pod labels.\n * - `MINION` — always Node, and sources its `minionName` from its compiled-in\n *   `defineMinionInit({ minionName })` config (the minion package is\n *   domain-specific by construction), cross-validated at boot against the\n *   fetched `appConfig.minions[minionName]`. Because identity is a compile-time\n *   fact, minions carry it ONLY as the `wildo.ai/owned-service-{kind,name}` pod\n *   **labels** (operators, selectors, observability); the `APP_OWNED_SERVICE_*`\n *   **env** pair is deliberately omitted on EVERY minion deploy path (k8s, CLI\n *   `.env`, docker-compose), since an env identity would be a second,\n *   drift-prone authority (see `env-configuration-generator.service.ts`).\n */\nexport enum BackgroundRuntimeType {\n  MINION = 'minion',\n  WORKER = 'worker',\n}\n\n/**\n * Schema for all shared (non-platform-private) application types.\n *\n * Interactive frontend surfaces are config-defined strings keyed by frontend\n * service identity via `frontendServices` in AppConfiguration, not an enum.\n * `z.string()` accepts those config-defined values alongside the known\n * static-frontend and backend-API enums.\n */\nexport const AllSharedApplicationTypesSchema = z.union([\n  z.enum(StaticFrontEndType),\n  z.enum(BackendApiType),\n  z.string(),\n]);\nexport type AllSharedApplicationTypes = z.infer<typeof AllSharedApplicationTypesSchema>;\n\n/**\n * Full app-owned runtime identity surface: every primary application type\n * (`AllSharedApplicationTypesSchema` — backend kinds, static frontends,\n * dynamic-frontend keys) plus the background runtimes\n * (`BackgroundRuntimeType` — minions, workers).\n *\n * Use this where a process needs to declare what kind of app-owned\n * runtime it is without forcing every caller to switch on a coarse\n * vocabulary that overlaps the existing fine-grained enums.\n */\nexport const AllAppOwnedRuntimeTypesSchema = z.union([\n  AllSharedApplicationTypesSchema,\n  z.enum(BackgroundRuntimeType),\n]);\nexport type AllAppOwnedRuntimeTypes = z.infer<typeof AllAppOwnedRuntimeTypesSchema>;\n\nexport const ApplicationSchema = z.object({\n    _id : z.string().isPrimaryKey().isSummaryField(),\n    appSlug : z.string().isDBIndexed().isSummaryField().excludeFromUpdate(),\n    appDisplayName : z.string().isDBIndexed().isSummaryField(),\n    lastVersion : z.string().optional().excludeFromCreate().excludeFromUpdate(),\n    // Backend-only field - stored in DB but never sent to frontend\n    platformAppId : z.string().isDBIndexed().isBackendOnly(),\n    /**\n     * Serializes every decision about WHICH organization owns the application (#1054).\n     *\n     * ## The race it closes\n     *\n     * `organizations.promoteToOwnerOrganization` measures (\"does an owner organization exist?\") and\n     * then writes (`type`). Under snapshot isolation that is textbook WRITE SKEW: two operators\n     * promote two DIFFERENT organizations, each observes no owner, and both commit — producing the two\n     * owner organizations the whole design refuses, which neither was individually permitted to\n     * create. No amount of additional checking closes it: each transaction's view is internally\n     * consistent, and a re-measure after the write cannot see the other's uncommitted row.\n     *\n     * The remedy is to give the two transactions something to collide ON. The promotion bumps this\n     * token inside its transaction before measuring, so two of them touch the same document and the\n     * storage engine aborts the loser. Same mechanism, same reasoning, as\n     * `Organization.ownerFloorSerializationToken` — which is also where the trap is recorded: the\n     * write MUST carry `preserveServerInjectedFields` for this field, or the repository's strict\n     * re-parse silently strips it and the serialization protects nothing.\n     *\n     * ## Why the APPLICATION row and not an organization's\n     *\n     * The two racing promotions target DIFFERENT organizations, so neither organization's row is\n     * shared and colliding on one would serialize nothing. The APPLICATION row is the only row both\n     * transactions can be made to touch, and it is also the right subject semantically: the fact being\n     * protected is a property of the application (\"it has one owner organization\"), not of any tenant.\n     *\n     * The VALUE is irrelevant and nothing reads it, so a lost update here costs nothing; what matters\n     * is that the document is written at all. `.nullish()` because every existing application predates\n     * the field, and one that has never had a promotion legitimately has no token — absent and zero\n     * mean the same thing.\n     */\n    ownerOrganizationSerializationToken : z.number().int().nullish().excludeFromCreate().excludeFromUpdate().isBackendOnly().isHidden(),\n});\nexport type Application = z.infer<typeof ApplicationSchema>;\n\nexport const ApplicationVersionSchema = z.object({\n    _id : z.string().isPrimaryKey().isSummaryField(),\n    applicationId : z.string().isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),\n    version : z.string().isDBIndexed().isSummaryField(),\n    releaseDate : z.date().isDBIndexed().isSummaryField(),\n    releaseNotes : z.string(),\n});\nexport type ApplicationVersion = z.infer<typeof ApplicationVersionSchema>;\n\nexport const ApplicationMetadataSchema = z.object({\n    _id : z.string().isPrimaryKey().isSummaryField(),\n    /**\n     * The owning application — and this row's BUSINESS IDENTITY.\n     *\n     * `APPLICATION → APPLICATION_METADATA` is 1:1, so \"the metadata of application X\"\n     * identifies the row completely. Declaring that lets the framework's business-key\n     * repository helpers address it: the app-init seed\n     * (`engine-applications:application-metadata`) upserts through\n     * `upsertByBusinessKey`, which refuses a schema that declares no identity —\n     * \"Schema declares no business-key identity\" — rather than guessing one.\n     *\n     * `.isUnique()` carries the 1:1 down to the database. `.isBusinessKey()` alone is\n     * a pure marker with no index, so two concurrent creates could otherwise leave\n     * an application with two metadata rows, which no read path expects.\n     *\n     * The name is `applicationId`, matching the APPLICATION scope's registered field\n     * identifier and every other APPLICATION-scoped resource. It was `appId` until\n     * 2026-09-18, which silently excluded this resource — and its two siblings — from\n     * every mechanism keyed on that identifier, up to and including the settings panes\n     * that render it. See the APPLICATION_FEATURES edge in\n     * `resources-registry.shared.core.definitions.ts` for the measured consequences.\n     */\n    applicationId : z.string().isDBIndexed().isForeignKey().isBusinessKey().isUnique().isSummaryField().excludeFromUpdate(),\n    // `.default('')` so the row is eager-seedable via onParentCreate (placeholder;\n    // the app sets a real description later) — root-cause fix for the blocking field.\n    description : z.string().default('').isDBIndexed().isSummaryField(),\n});\nexport type ApplicationMetadata = z.infer<typeof ApplicationMetadataSchema>;\n"]}

package/dist/esm/billing/billing-account.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-account.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/billing-account.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAiBzG,oBAAY,yBAAyB;IACnC,wEAAwE;IACxE,aAAa,kBAAkB;IAC/B,kEAAkE;IAClE,WAAW,gBAAgB;IAC3B,6FAA6F;IAC7F,SAAS,cAAc;IACvB;;;OAGG;IACH,eAAe,oBAAoB;CACpC;AAID,sHAAsH;AACtH,eAAO,MAAM,qCAAqC;;;;;;;;iBAoChD,CAAC;AAEH,+CAA+C;AAC/C,eAAO,MAAM,uCAAuC;;kBAElD,CAAC;AAEH,4CAA4C;AAC5C,eAAO,MAAM,mCAAmC;;iBAE9C,CAAC;AAMH;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,2SAyN/C,CAAC"}
+{"version":3,"file":"billing-account.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/billing/billing-account.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAiBzG,oBAAY,yBAAyB;IACnC,wEAAwE;IACxE,aAAa,kBAAkB;IAC/B,kEAAkE;IAClE,WAAW,gBAAgB;IAC3B,6FAA6F;IAC7F,SAAS,cAAc;IACvB;;;OAGG;IACH,eAAe,oBAAoB;CACpC;AAID,sHAAsH;AACtH,eAAO,MAAM,qCAAqC;;;;;;;;iBAoChD,CAAC;AAEH,+CAA+C;AAC/C,eAAO,MAAM,uCAAuC;;kBAElD,CAAC;AAEH,4CAA4C;AAC5C,eAAO,MAAM,mCAAmC;;iBAE9C,CAAC;AAMH;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,2SAyN/C,CAAC"}