npm - @wildo-ai/saas-models - Versions diffs - 1.1.8 → 1.1.10 - Mend

@wildo-ai/saas-models 1.1.8 → 1.1.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (951) hide show

package/dist/esm/notifications/m2m/webhook-config.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webhook-config.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAEnH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAN,IAAY,wBAkBX;AAlBD,WAAY,wBAAwB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,0DAA8B,CAAA;AAChC,CAAC,EAlBW,wBAAwB,KAAxB,wBAAwB,QAkBnC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mFAAmF,CAAC;CAC5H,CAAC,CAAC;AAEH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAChE,sFAAsF;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,QAAQ,CAAC,gIAAgI,CAAC;IAC7I,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,2BAA2B,CAAC;SACjC,QAAQ,CACP,4OAA4O,CAC7O;IACH,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;IACtJ,mFAAmF;IACnF,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yKAAyK,CAAC;IACtL,qFAAqF;IACrF,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wJAAwJ,CAAC;IACrK,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;IAC7H;;;;OAIG;IACH,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CAAC,0JAA0J,CAAC;IACvK,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CAC5E,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAGzC;IACH,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,4BAA4B,CAAC,QAAQ;CACtE,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,uCAAuC,CACtF,mCAAmC,EACnC;IACE,gBAAgB,EAAE,IAAI;IACtB,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,EAAE;IACF,kFAAkF;IAClF,kFAAkF;IAClF,uFAAuF;IACvF,iFAAiF;IACjF,mFAAmF;IACnF,gFAAgF;IAChF,EAAE;IACF,2FAA2F;IAC3F,wFAAwF;IACxF,2FAA2F;IAC3F,wDAAwD;IACxD,kBAAkB,EAAE;QAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;QACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;KACzC;IACD,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,iCAAiC,CAAC,qBAAqB,CAAC,MAAM,CAAC;oBAC5E,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,yEAAyE;QACzE,gFAAgF;QAChF,8EAA8E;QAC9E,+EAA+E;QAC/E,+DAA+D;QAC/D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QACD,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE;YACxC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qEAAqE;oBACrE,kEAAkE;oBAClE,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,oCAAoC;oBAChD,iEAAiE;oBACjE,gEAAgE;oBAChE,oEAAoE;oBACpE,kEAAkE;oBAClE,qCAAqC;oBACrC,iBAAiB,EAAE,qCAAqC;iBACzD;aACF;SACF;KACF;CACF,CACF,CAAC","sourcesContent":["/*\n M2M Webhook Config Resource Configuration — Polymorphic dual-scope\n \n Produces 2 factory functions (ORG + APP) via the polymorphic factory.\n * Spread into the registry factory map:\n * ...webhookConfigPolymorphicFactories\n \n Operation set (mirrors SIEM Export Config singleton precedent):\n * - READ (API) : admin reads the config + derived public key\n * - CREATE (REPOSITORY_ONLY) : seeded once per scope; not externally callable\n * - UPDATE (API_CALL) : the administrator's edit door; a PREFIX stamps each endpoint's\n * id and timestamps (see `WEBHOOK_CONFIG_WRITE_VARIANT_TYPE`)\n * - TEST_ENDPOINT (custom) : fires a synthetic delivery to verify URL reachability\n \n @see m2m-webhook-organization-delivery.md — Phase 2 / Step 5\n * @see security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts\n /\n\nimport { z } from 'zod';\nimport {\n CoreResourceOperation,\n CoreResourceType,\n} from '../../resources/resources.shared.core.definitions';\nimport {\n ResourceOperationRiskLevel,\n ResourceOperationVariantType,\n} from '../../resources/resources.shared.schemas';\nimport { createPolymorphicResourceConfigurations } from '../../resources/utils/resource-polymorphism.factory';\nimport { ResourceSystemAccessMode } from '../../resources/resources-config.shared.schemas';\nimport { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../security/authorizations/roles.shared.schemas';\nimport { webhookConfigPolymorphicDeclaration, WebhookEndpointProbeOutcome } from './webhook-config.shared.schemas';\n\n// =============================================================================\n// CUSTOM OPERATIONS\n// =============================================================================\n\nexport enum WebhookConfig_Operations {\n /\n Synthetic delivery to verify URL reachability + signature\n * verification on the consumer side. Targets a single endpoint\n * (selected by `endpointId` in the request body); does not write to\n * `M2MWebhookDeliveryLog` (test deliveries are excluded from the user\n * event log to keep the log clean).\n \n The probe is `resourceOperationLike: UPDATE`, NOT `READ`. It performs no\n * database write, but it DOES have an external side effect — a live signed\n * POST leaves the platform and arrives at a customer-controlled URL. Borrowing\n * READ made this a `GET` whose OpenAPI entry had to declare `x-idempotent: false`,\n * a self-contradiction, and pushed `endpointId` into a query string. Borrowing\n * UPDATE yields a `PUT` on the same custom-op sub-path, matching the\n * `M2MWebhookDeliveryLog.retry` precedent (also a no-DB-write-of-its-own verb\n * that triggers a delivery).\n /\n TEST_ENDPOINT = 'testEndpoint',\n}\n\n// =============================================================================\n// REQUEST DTOs\n// =============================================================================\n\nexport const WebhookConfig_TestEndpointRequestDto = z.object({\n endpointId: z.string().min(1).describe('The id of the configured endpoint to test. A disabled endpoint can be tested too.'),\n});\n\n// =============================================================================\n// RESPONSE DTOs\n// =============================================================================\n\n/\n Diagnostic returned synchronously by `testEndpoint`.\n \n A transport-level failure at the customer endpoint is a successful PROBE and\n * therefore answers HTTP 200 carrying `outcome: UNREACHABLE` — it is not an API\n * error. API errors are reserved for faults in the request itself (unknown\n * `endpointId`, no config row, rate limit exceeded).\n /\nexport const WebhookConfig_TestEndpointResponseDto = z.object({\n endpointId: z.string().describe('The endpoint that was tested.'),\n /* Destination actually contacted, echoed so the admin can confirm the stored URL. /\n url: z.string().describe('The destination URL that was contacted, as stored on the endpoint.'),\n /\n True when that destination is plaintext `http://`, so the signature JWT travelled in the clear.\n \n ## Why the exposure is reported HERE (#492)\n \n Plaintext endpoints are admitted, deliberately, and the reasoning is recorded on\n * `WebhookEndpointSchema.url`. The cost of admitting them is that the decision becomes invisible:\n * a documented exposure nobody encounters is the same as an undocumented one, and the JSDoc\n * reaches only someone reading the schema.\n \n This probe is the one place an admin acts on a SINGLE endpoint and reads a per-endpoint answer,\n * so it is where the exposure can actually be met. It rides beside `outcome` rather than replacing\n * it, because the two say different things: `ACCEPTED` over `http://` is a working endpoint AND a\n * credential on the wire, and collapsing that into a failure would be false.\n \n Reported for every outcome, including `NOT_SENT` — the scheme is a property of the stored\n * destination, not of the attempt, and an admin fixing a signing fault should still be told.\n /\n transportIsPlaintext: z\n .boolean()\n .describe('`true` when the destination uses plaintext `http://`, so the signature token travels in the clear. Reported for every outcome.'),\n outcome: z\n .enum(WebhookEndpointProbeOutcome)\n .describe(\n 'The result of the test: `accepted` (the endpoint answered 2xx), `rejected` (it answered with another status), `unreachable` (no HTTP response, including a timeout), or `not_sent` (the request could not be signed, so nothing was sent).',\n ),\n /* HTTP status returned by the endpoint. Absent for `UNREACHABLE` / `NOT_SENT`. /\n responseStatus: z.number().int().optional().describe('The HTTP status the endpoint answered with. Absent when it did not answer or nothing was sent.'),\n /* Truncated response body, to let an admin read the consumer's own error text. /\n responseBodyTruncated: z\n .string()\n .optional()\n .describe(\"The start of the endpoint's response body, cut to 4 KB (UTF-8), so you can read the endpoint's own error text. Absent when the body was empty or there was no response.\"),\n /* Network / timeout / signing failure detail. Absent when the endpoint answered. /\n failureReason: z\n .string()\n .optional()\n .describe('Why no response was received — a network error, a refused destination, the 30-second timeout, or a signing failure. Absent when the endpoint answered.'),\n durationMs: z.number().int().nonnegative().describe('How long the request took, in milliseconds. `0` when nothing was sent.'),\n /\n `jti` of the signed probe. Stated so an admin can correlate this attempt with\n * the entry in their own consumer's logs — the same dedup key a real delivery\n * carries.\n /\n signatureJti: z\n .string()\n .describe(\"The unique id of the signed test request — the same delivery-id claim a real delivery carries — so you can find this attempt in the endpoint's own logs.\"),\n attemptedAt: z.date().describe('When the test request was built and sent.'),\n});\n\n// =============================================================================\n// POLYMORPHIC FACTORY\n// =============================================================================\n\n/\n The variant type of the webhook config's UPDATE — read by the resource configuration below AND by\n * the UPDATE prefix that stamps each endpoint's id and timestamps (`webhook-config-update.custom-impl`,\n * #1801).\n \n One named value because the custom-implementation registry keys a registration on the FULL\n * operation path, variant type included: a hand-restated value that drifted would leave the prefix\n * unbound, and every save would again reset `createdAt` and freeze `updatedAt` while the update\n * itself reported success. Same reason, and same shape, as `SSO_CONFIG_WRITE_VARIANT_TYPE`.\n /\nexport const WEBHOOK_CONFIG_WRITE_VARIANT_TYPE: Readonly<{\n // Exact member, not the enum: a variant is a union DISCRIMINATED by `variantType`.\n [CoreResourceOperation.UPDATE]: ResourceOperationVariantType.API_CALL;\n}> = {\n [CoreResourceOperation.UPDATE]: ResourceOperationVariantType.API_CALL,\n};\n\nexport const webhookConfigPolymorphicFactories = createPolymorphicResourceConfigurations(\n webhookConfigPolymorphicDeclaration,\n {\n isSystemResource: true,\n // Server-internal webhook delivery loads the (org/app) endpoint config via\n // `readAsSystem`, independent of the triggering user's roles — the config\n // governs runtime delivery behaviour, not user-facing data.\n //\n // CREATE joined it on 2026-09-18, matching the three enterprise-config singletons\n // (SSO / SCIM / SIEM) this resource is otherwise shaped like. It said \"READ-only\"\n // because, unlike them, it had no lazy materialiser of its own — not because a default\n // row would be wrong. #1179's seam reads this declaration before materialising a\n // context-addressed singleton on an UPDATE or DELETE the caller never named, so an\n // administrator can start configuring webhooks for a scope that has no row yet.\n //\n // It does NOT make a READ materialise — measured 2026-09-19, that seam is never entered on\n // the read route — so an unconfigured scope still 404s when the settings pane reads it.\n // Making the row exist for an organization that predates the `afterCreate` default seed is\n // a SEEDING question, and is where that defect belongs.\n systemAccessPolicy: {\n read: ResourceSystemAccessMode.ALLOWED,\n create: ResourceSystemAccessMode.ALLOWED,\n },\n customOperation: WebhookConfig_Operations,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n /\n * API_CALL — the administrator's edit door, and the only caller of this write.\n \n It was REPOSITORY_ONLY, which is route-less, and nothing in the engine called it: the\n * scope's row is seeded by `webhook-config-defaults.seeds.ts` through CREATE, the two\n * registered custom implementations are keyed on READ and on `testEndpoint`, and\n * `WebhookConfigBackendService` never updates. So the declared write had no caller on either\n * side of the boundary — no route for an administrator, no service reaching it internally —\n * and a webhook configuration is nothing BUT settings: whether outbound delivery is on, the\n * endpoints, the event selection, the retry posture.\n \n Worse than unreachable, and this is why it moved rather than being deleted: with no\n * addressable literal `update`, the frontend's update resolution fell through to whatever\n * operation borrowed UPDATE semantics — and here that is `testEndpoint`\n * (`resourceOperationLike: UPDATE`, API_CALL). Every writable field on the webhook settings\n * pane was a control that would have FIRED A TEST DELIVERY at the configured endpoint instead\n * of saving. `pickInlineFieldWriteOperation` now refuses a borrowed verb outright, so the\n * mis-wiring is closed whatever this variant says; the door is what makes the pane work.\n \n A PREFIX is registered on it (#1801): the endpoints array is written whole, so the prefix\n * matches each incoming endpoint to its stored self by `id`, keeps the stored `createdAt`,\n * advances `updatedAt` only for an endpoint whose settings changed, and assigns an id and both\n * timestamps to a new one. Its variant type is `WEBHOOK_CONFIG_WRITE_VARIANT_TYPE`, which this\n * declaration reads too. Should an internal writer ever need the repository path,\n * `getInternalRepositoryOperationPathDefault` falls back to the URL-bearing default for exactly\n * this shape.\n \n CREATE stays REPOSITORY_ONLY beside it: the row is seeded once per scope and is never\n * created self-serve. Admin tier / MEDIUM, unchanged.\n */\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: WEBHOOK_CONFIG_WRITE_VARIANT_TYPE[CoreResourceOperation.UPDATE],\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so this one-per-scope webhook-config row is physically\n // removed when its owning org/app is deleted. Without a DELETE op the cascade\n // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any scope with a\n // config row. Admin tier (ORG_ADMIN / APP super-admin) / HIGH.\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n [WebhookConfig_Operations.TEST_ENDPOINT]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n // UPDATE-like, not READ-like — see the JSDoc on `TEST_ENDPOINT`. The\n // operation writes nothing, but it emits a live outbound request.\n resourceOperationLike: CoreResourceOperation.UPDATE,\n requestDto: WebhookConfig_TestEndpointRequestDto,\n // Implemented by `createWebhookConfigTestEndpointFactories()` in\n // saas-backend-lib (REPLACE_CORE_OPERATIONS): the core write is\n // replaced by the synthetic delivery, and this diagnostic — NOT the\n // config row — is what the caller receives. Keep this contract in\n // lockstep with that implementation.\n customResponseDto: WebhookConfig_TestEndpointResponseDto,\n },\n ],\n },\n },\n },\n);\n"]}
1	+ {"version":3,"file":"webhook-config.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/notifications/m2m/webhook-config.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qDAAqD,CAAC;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAEnH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,CAAN,IAAY,wBAkBX;AAlBD,WAAY,wBAAwB;IAClC;;;;;;;;;;;;;;;OAeG;IACH,0DAA8B,CAAA;AAChC,CAAC,EAlBW,wBAAwB,KAAxB,wBAAwB,QAkBnC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mFAAmF,CAAC;CAC5H,CAAC,CAAC;AAEH,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAChE,sFAAsF;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9F;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,EAAE,CAAC;SACpB,OAAO,EAAE;SACT,QAAQ,CAAC,gIAAgI,CAAC;IAC7I,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,2BAA2B,CAAC;SACjC,QAAQ,CACP,4OAA4O,CAC7O;IACH,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;IACtJ,mFAAmF;IACnF,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yKAAyK,CAAC;IACtL,qFAAqF;IACrF,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wJAAwJ,CAAC;IACrK,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;IAC7H;;;;OAIG;IACH,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CAAC,0JAA0J,CAAC;IACvK,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CAC5E,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAGzC;IACH,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,4BAA4B,CAAC,QAAQ;CACtE,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,uCAAuC,CACtF,mCAAmC,EACnC;IACE,gBAAgB,EAAE,IAAI;IACtB,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,EAAE;IACF,kFAAkF;IAClF,kFAAkF;IAClF,uFAAuF;IACvF,iFAAiF;IACjF,mFAAmF;IACnF,gFAAgF;IAChF,EAAE;IACF,2FAA2F;IAC3F,wFAAwF;IACxF,2FAA2F;IAC3F,wDAAwD;IACxD,kBAAkB,EAAE;QAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;QACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;KACzC;IACD,eAAe,EAAE,wBAAwB;IACzC,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,iCAAiC,CAAC,qBAAqB,CAAC,MAAM,CAAC;oBAC5E,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QACD,yEAAyE;QACzE,gFAAgF;QAChF,8EAA8E;QAC9E,+EAA+E;QAC/E,+DAA+D;QAC/D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QACD,CAAC,wBAAwB,CAAC,aAAa,CAAC,EAAE;YACxC,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE;wBACf,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;wBAC5D,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;qBACvE;oBACD,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qEAAqE;oBACrE,kEAAkE;oBAClE,qBAAqB,EAAE,qBAAqB,CAAC,MAAM;oBACnD,UAAU,EAAE,oCAAoC;oBAChD,iEAAiE;oBACjE,gEAAgE;oBAChE,oEAAoE;oBACpE,kEAAkE;oBAClE,qCAAqC;oBACrC,iBAAiB,EAAE,qCAAqC;iBACzD;aACF;SACF;KACF;CACF,CACF,CAAC","sourcesContent":["/*\n M2M Webhook Config Resource Configuration — Polymorphic dual-scope\n \n Produces 2 factory functions (ORG + APP) via the polymorphic factory.\n * Spread into the registry factory map:\n * ...webhookConfigPolymorphicFactories\n \n Operation set (mirrors SIEM Export Config singleton precedent):\n * - READ (API) : admin reads the config + derived public key\n * - CREATE (REPOSITORY_ONLY) : seeded once per scope; not externally callable\n * - UPDATE (API_CALL) : the administrator's edit door; a PREFIX stamps each endpoint's\n * id and timestamps (see `WEBHOOK_CONFIG_WRITE_VARIANT_TYPE`)\n * - TEST_ENDPOINT (custom) : fires a synthetic delivery to verify URL reachability\n \n @see m2m-webhook-organization-delivery.md — Phase 2 / Step 5\n * @see security/authentications/siem/siem-export-config.shared.resources-config.schemas.ts\n /\n\nimport { z } from 'zod';\nimport {\n CoreResourceOperation,\n CoreResourceType,\n} from '../../resources/resources.shared.core.definitions';\nimport {\n ResourceOperationRiskLevel,\n ResourceOperationVariantType,\n} from '../../resources/resources.shared.schemas';\nimport { createPolymorphicResourceConfigurations } from '../../resources/utils/resource-polymorphism.factory';\nimport { ResourceSystemAccessMode } from '../../resources/resources-config.shared.schemas';\nimport { CORE_ORG_ROLES, CORE_APP_ROLES } from '../../security/authorizations/roles.shared.schemas';\nimport { webhookConfigPolymorphicDeclaration, WebhookEndpointProbeOutcome } from './webhook-config.shared.schemas';\n\n// =============================================================================\n// CUSTOM OPERATIONS\n// =============================================================================\n\nexport enum WebhookConfig_Operations {\n /\n Synthetic delivery to verify URL reachability + signature\n * verification on the consumer side. Targets a single endpoint\n * (selected by `endpointId` in the request body); does not write to\n * `M2MWebhookDeliveryLog` (test deliveries are excluded from the user\n * event log to keep the log clean).\n \n The probe is `resourceOperationLike: UPDATE`, NOT `READ`. It performs no\n * database write, but it DOES have an external side effect — a live signed\n * POST leaves the platform and arrives at a customer-controlled URL. Borrowing\n * READ made this a `GET` whose OpenAPI entry had to declare `x-idempotent: false`,\n * a self-contradiction, and pushed `endpointId` into a query string. Borrowing\n * UPDATE yields a `PUT` on the same custom-op sub-path, matching the\n * `M2MWebhookDeliveryLog.retry` precedent (also a no-DB-write-of-its-own verb\n * that triggers a delivery).\n /\n TEST_ENDPOINT = 'testEndpoint',\n}\n\n// =============================================================================\n// REQUEST DTOs\n// =============================================================================\n\nexport const WebhookConfig_TestEndpointRequestDto = z.object({\n endpointId: z.string().min(1).describe('The id of the configured endpoint to test. A disabled endpoint can be tested too.'),\n});\n\n// =============================================================================\n// RESPONSE DTOs\n// =============================================================================\n\n/\n Diagnostic returned synchronously by `testEndpoint`.\n \n A transport-level failure at the customer endpoint is a successful PROBE and\n * therefore answers HTTP 200 carrying `outcome: UNREACHABLE` — it is not an API\n * error. API errors are reserved for faults in the request itself (unknown\n * `endpointId`, no config row, rate limit exceeded).\n /\nexport const WebhookConfig_TestEndpointResponseDto = z.object({\n endpointId: z.string().describe('The endpoint that was tested.'),\n /* Destination actually contacted, echoed so the admin can confirm the stored URL. /\n url: z.string().describe('The destination URL that was contacted, as stored on the endpoint.'),\n /\n True when that destination is plaintext `http://`, so the signature JWT travelled in the clear.\n \n ## Why the exposure is reported HERE (#492)\n \n Plaintext endpoints are admitted, deliberately, and the reasoning is recorded on\n * `WebhookEndpointSchema.url`. The cost of admitting them is that the decision becomes invisible:\n * a documented exposure nobody encounters is the same as an undocumented one, and the JSDoc\n * reaches only someone reading the schema.\n \n This probe is the one place an admin acts on a SINGLE endpoint and reads a per-endpoint answer,\n * so it is where the exposure can actually be met. It rides beside `outcome` rather than replacing\n * it, because the two say different things: `ACCEPTED` over `http://` is a working endpoint AND a\n * credential on the wire, and collapsing that into a failure would be false.\n \n Reported for every outcome, including `NOT_SENT` — the scheme is a property of the stored\n * destination, not of the attempt, and an admin fixing a signing fault should still be told.\n /\n transportIsPlaintext: z\n .boolean()\n .describe('`true` when the destination uses plaintext `http://`, so the signature token travels in the clear. Reported for every outcome.'),\n outcome: z\n .enum(WebhookEndpointProbeOutcome)\n .describe(\n 'The result of the test: `accepted` (the endpoint answered 2xx), `rejected` (it answered with another status), `unreachable` (no HTTP response, including a timeout), or `not_sent` (the request could not be signed, so nothing was sent).',\n ),\n /* HTTP status returned by the endpoint. Absent for `UNREACHABLE` / `NOT_SENT`. /\n responseStatus: z.number().int().optional().describe('The HTTP status the endpoint answered with. Absent when it did not answer or nothing was sent.'),\n /* Truncated response body, to let an admin read the consumer's own error text. /\n responseBodyTruncated: z\n .string()\n .optional()\n .describe(\"The start of the endpoint's response body, cut to 4 KB (UTF-8), so you can read the endpoint's own error text. Absent when the body was empty or there was no response.\"),\n /* Network / timeout / signing failure detail. Absent when the endpoint answered. /\n failureReason: z\n .string()\n .optional()\n .describe('Why no response was received — a network error, a refused destination, the 30-second timeout, or a signing failure. Absent when the endpoint answered.'),\n durationMs: z.number().int().nonnegative().describe('How long the request took, in milliseconds. `0` when nothing was sent.'),\n /\n `jti` of the signed probe. Stated so an admin can correlate this attempt with\n * the entry in their own consumer's logs — the same dedup key a real delivery\n * carries.\n /\n signatureJti: z\n .string()\n .describe(\"The unique id of the signed test request — the same delivery-id claim a real delivery carries — so you can find this attempt in the endpoint's own logs.\"),\n attemptedAt: z.date().describe('When the test request was built and sent.'),\n});\n\n// =============================================================================\n// POLYMORPHIC FACTORY\n// =============================================================================\n\n/\n The variant type of the webhook config's UPDATE — read by the resource configuration below AND by\n * the UPDATE prefix that stamps each endpoint's id and timestamps (`webhook-config-update.custom-impl`,\n * #1801).\n \n One named value because the custom-implementation registry keys a registration on the FULL\n * operation path, variant type included: a hand-restated value that drifted would leave the prefix\n * unbound, and every save would again reset `createdAt` and freeze `updatedAt` while the update\n * itself reported success. Same reason, and same shape, as `SSO_CONFIG_WRITE_VARIANT_TYPE`.\n /\nexport const WEBHOOK_CONFIG_WRITE_VARIANT_TYPE: Readonly<{\n // Exact member, not the enum: a variant is a union DISCRIMINATED by `variantType`.\n [CoreResourceOperation.UPDATE]: ResourceOperationVariantType.API_CALL;\n}> = {\n [CoreResourceOperation.UPDATE]: ResourceOperationVariantType.API_CALL,\n};\n\nexport const webhookConfigPolymorphicFactories = createPolymorphicResourceConfigurations(\n webhookConfigPolymorphicDeclaration,\n {\n isSystemResource: true,\n // Server-internal webhook delivery loads the (org/app) endpoint config via\n // `readAsSystem`, independent of the triggering user's roles — the config\n // governs runtime delivery behaviour, not user-facing data.\n //\n // CREATE joined it on 2026-09-18, matching the three enterprise-config singletons\n // (SSO / SCIM / SIEM) this resource is otherwise shaped like. It said \"READ-only\"\n // because, unlike them, it had no lazy materialiser of its own — not because a default\n // row would be wrong. #1179's seam reads this declaration before materialising a\n // context-addressed singleton on an UPDATE or DELETE the caller never named, so an\n // administrator can start configuring webhooks for a scope that has no row yet.\n //\n // It does NOT make a READ materialise — measured 2026-09-19, that seam is never entered on\n // the read route — so an unconfigured scope still 404s when the settings pane reads it.\n // Making the row exist for an organization that predates the `afterCreate` default seed is\n // a SEEDING question, and is where that defect belongs.\n systemAccessPolicy: {\n read: ResourceSystemAccessMode.ALLOWED,\n create: ResourceSystemAccessMode.ALLOWED,\n },\n customOperation: WebhookConfig_Operations,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n /\n * API_CALL — the administrator's edit door, and the only caller of this write.\n \n It was REPOSITORY_ONLY, which is route-less, and nothing in the engine called it: the\n * scope's row is seeded by `webhook-config-defaults.seeds.ts` through CREATE, the two\n * registered custom implementations are keyed on READ and on `testEndpoint`, and\n * `WebhookConfigBackendService` never updates. So the declared write had no caller on either\n * side of the boundary — no route for an administrator, no service reaching it internally —\n * and a webhook configuration is nothing BUT settings: whether outbound delivery is on, the\n * endpoints, the event selection, the retry posture.\n \n Worse than unreachable, and this is why it moved rather than being deleted: with no\n * addressable literal `update`, the frontend's update resolution fell through to whatever\n * operation borrowed UPDATE semantics — and here that is `testEndpoint`\n * (`resourceOperationLike: UPDATE`, API_CALL). Every writable field on the webhook settings\n * pane was a control that would have FIRED A TEST DELIVERY at the configured endpoint instead\n * of saving. `pickInlineFieldWriteOperation` now refuses a borrowed verb outright, so the\n * mis-wiring is closed whatever this variant says; the door is what makes the pane work.\n \n A PREFIX is registered on it (#1801): the endpoints array is written whole, so the prefix\n * matches each incoming endpoint to its stored self by `id`, keeps the stored `createdAt`,\n * advances `updatedAt` only for an endpoint whose settings changed, and assigns an id and both\n * timestamps to a new one. Its variant type is `WEBHOOK_CONFIG_WRITE_VARIANT_TYPE`, which this\n * declaration reads too. Should an internal writer ever need the repository path,\n * `getInternalRepositoryOperationPathDefault` falls back to the URL-bearing default for exactly\n * this shape.\n \n CREATE stays REPOSITORY_ONLY beside it: the row is seeded once per scope and is never\n * created self-serve. Admin tier / MEDIUM, unchanged.\n */\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: WEBHOOK_CONFIG_WRITE_VARIANT_TYPE[CoreResourceOperation.UPDATE],\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so this one-per-scope webhook-config row is physically\n // removed when its owning org/app is deleted. Without a DELETE op the cascade\n // (deleteChildrenImmediate) throws ErrorType.CONFIGURATION on any scope with a\n // config row. Admin tier (ORG_ADMIN / APP super-admin) / HIGH.\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n [WebhookConfig_Operations.TEST_ENDPOINT]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n polymorphicRole: {\n [CoreResourceType.ORGANIZATIONS]: [CORE_ORG_ROLES.ORG_ADMIN],\n [CoreResourceType.APPLICATION]: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n },\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n // UPDATE-like, not READ-like — see the JSDoc on `TEST_ENDPOINT`. The\n // operation writes nothing, but it emits a live outbound request.\n resourceOperationLike: CoreResourceOperation.UPDATE,\n requestDto: WebhookConfig_TestEndpointRequestDto,\n // Implemented by `createWebhookConfigTestEndpointFactories()` in\n // saas-backend-lib (REPLACE_CORE_OPERATIONS): the core write is\n // replaced by the synthetic delivery, and this diagnostic — NOT the\n // config row — is what the caller receives. Keep this contract in\n // lockstep with that implementation.\n customResponseDto: WebhookConfig_TestEndpointResponseDto,\n },\n ],\n },\n },\n },\n);\n"]}

package/dist/esm/notifications/m2m/webhook-config.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webhook-config.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../../../~~src/notifications/m2m/webhook-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,qDAAqD,CAAC;AAM7D;;;;;;;;;;;;GAYG;AACH,oBAAY,2BAA2B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IACrB,iFAAiF;IACjF,QAAQ,aAAa;IACrB,sFAAsF;IACtF,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,QAAQ,aAAa;CACtB;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,EAAE,4BAA4B,EAWpE,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBAoEhC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,2CAA+G,CAAC;AAEjK,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMlE;AAMD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBA2ClC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;kBAM9C,CAAC"}
1	+ {"version":3,"file":"webhook-config.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/notifications/m2m/webhook-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,qDAAqD,CAAC;AAM7D;;;;;;;;;;;;GAYG;AACH,oBAAY,2BAA2B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IACrB,iFAAiF;IACjF,QAAQ,aAAa;IACrB,sFAAsF;IACtF,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,QAAQ,aAAa;CACtB;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,EAAE,4BAA4B,EAWpE,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBAoEhC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,2CAA+G,CAAC;AAEjK,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMlE;AAMD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBA2ClC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;kBAM9C,CAAC"}

package/dist/esm/notifications/m2m/webhook-config.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"webhook-config.shared.schemas.js","sourceRoot":"","sources":["../../../../../src/notifications/m2m/webhook-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,yBAAyB,GAE1B,MAAM,qDAAqD,CAAC;AAE7D,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,2BAmBX;AAnBD,WAAY,2BAA2B;IACrC;;;;;OAKG;IACH,oDAAqB,CAAA;IACrB,iFAAiF;IACjF,oDAAqB,CAAA;IACrB,sFAAsF;IACtF,0DAA2B,CAAA;IAC3B;;;;;OAKG;IACH,oDAAqB,CAAA;AACvB,CAAC,EAnBW,2BAA2B,KAA3B,2BAA2B,QAmBtC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAmC;IACxE;QACE,kBAAkB,EAAE,gBAAgB,CAAC,aAAa;QAClD,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC;QACzF,cAAc,EAAE,IAAI;KACrB;IACD;QACE,kBAAkB,EAAE,gBAAgB,CAAC,WAAW;QAChD,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC;QACvF,cAAc,EAAE,IAAI;KACrB;CACF,CAAC;AAEF,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;;;;;OASG;IACH,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,aAAa,EAAE;SACf,QAAQ,CAAC,oMAAoM,CAAC;IACjN;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,EAAE,CAAC;SACH,GAAG,EAAE;SACL,QAAQ,CACP,oQAAoQ,CACrQ;IACH,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8FAA8F,CAAC;IACrJ,qFAAqF;IACrF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,0FAA0F,CAAC;IACvI;;;;;;;;;;OAUG;IACH,SAAS,EAAE,CAAC;SACT,IAAI,EAAE;SACN,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;SACzB,aAAa,EAAE;SACf,QAAQ,CAAC,wFAAwF,CAAC;IACrG,6FAA6F;IAC7F,SAAS,EAAE,CAAC;SACT,IAAI,EAAE;SACN,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;SACzB,aAAa,EAAE;SACf,QAAQ,CAAC,oKAAoK,CAAC;CAClL,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAA6E,CAAC;AAIjK;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mCAAmC,CAAC,GAAW;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,GAAW;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAEhF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,2FAA2F;IAC3F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE;IAEpD;;;;;;;OAOG;IACH,8FAA8F;IAC9F,qGAAqG;IACrG,4DAA4D;IAC5D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,qBAAqB,CAAC;SAC5B,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,+BAA+B,QAAQ,CAAC,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACjJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IAEd;;;;;;;OAOG;IACH,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAEtF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,yBAAyB,CAAC;IAC3E,gBAAgB,EAAE,eAAe;IACjC,mBAAmB,EAAE,iBAAiB;IACtC,WAAW,EAAE,gBAAgB;IAC7B,UAAU,EAAE,uBAAuB;IACnC,QAAQ,EAAE,0BAA0B;CACrC,CAAC,CAAC","sourcesContent":["/*\n M2M Webhook Config Schema (Shared) — Polymorphic dual-scope\n \n Configures outbound webhook delivery for M2M notifications fired by\n * resource operations carrying a `WEBHOOK_ORGANIZATION` or\n * `WEBHOOK_APPLICATION` channel in their spec. Holds:\n * - a master `enabled` switch\n * - an array of admin-managed endpoints (URL + description + per-endpoint enabled flag)\n * - a derived `applicationPublicKeyPem` (READ-only, populated by a\n * postfix hook from `JwtPrivateKeys.APPLICATION_WEBHOOK` so external\n * consumers can verify our JWT-signed deliveries)\n \n Scope FK (`organizationId` / `applicationId`) is injected by the\n * polymorphism engine — NOT declared on the base schema.\n \n @see m2m-webhook-organization-delivery.md — Phase 2 / Step 3\n * @see security/authentications/siem/siem-export-config.shared.schemas.ts\n * for the dual-scope polymorphic precedent this mirrors.\n /\n\nimport { z } from 'zod';\nimport {\n CoreResourceType,\n coreResourceShared_FieldIdentifier,\n} from '../../resources/resources.shared.core.definitions';\nimport {\n declarePolymorphicSchemas,\n type PolymorphicVariantDefinition,\n} from '../../resources/utils/resource-polymorphism.schemas';\n\n// =============================================================================\n// ENDPOINT PROBE VOCABULARY\n// =============================================================================\n\n/\n Verdict of a single synthetic delivery fired by `webhookConfig.testEndpoint`.\n * A probe that cannot fail is worse than no probe, so every terminal state an\n * outbound attempt can reach is named here rather than collapsed into a boolean.\n \n The transport verdict and the HTTP status are deliberately SEPARATE axes:\n * `REJECTED` still carries a response status, because \"the endpoint answered 403\"\n * and \"the endpoint never answered\" are different problems with different fixes.\n \n Declared in this light schema module (not alongside the operation DTO) so the\n * audit-event vocabulary can name the same enum without pulling the resource-config\n * factory graph into `auditable-events.shared.schema.ts`.\n /\nexport enum WebhookEndpointProbeOutcome {\n /\n The endpoint answered with 2xx. This is the only outcome that evidences\n * consumer-side signature verification: the platform cannot observe the\n * consumer's verification step directly, so a 2xx from an endpoint that\n * verifies before responding is the available proof.\n /\n ACCEPTED = 'accepted',\n /* The endpoint answered, but not with 2xx. Reachable; it refused or errored. /\n REJECTED = 'rejected',\n /* No HTTP response at all — DNS/TLS/connection failure, or the attempt timed out. /\n UNREACHABLE = 'unreachable',\n /\n Nothing left the platform. The payload could not be signed, which is an\n * operator-side key/configuration fault, not a statement about the endpoint.\n * Reported distinctly so an admin never reads a local misconfiguration as a\n * broken customer endpoint.\n /\n NOT_SENT = 'not_sent',\n}\n\n// =============================================================================\n// SHARED VARIANT DEFINITIONS\n// =============================================================================\n\n/\n The 2 M2M webhook scope variants — shared by `WebhookConfig` and\n * `M2MWebhookDeliveryLog`. Centralised here so both polymorphic\n * declarations stay in lock-step.\n \n Notes:\n * - We deliberately define a domain-local constant (mirroring\n * `BILLING_SCOPE_VARIANTS` in the billing domain) instead of reusing\n * `AUTH_SCOPE_VARIANTS` from `authentications/`. The variant shape\n * is identical — `(ORGANIZATIONS, APPLICATION)` with `isPrimaryScope:\n * true` — but the auth constant is documented as \"shared across all\n * AUTH polymorphic resources\" and webhooks are notification resources,\n * not auth resources. Keeping a domain-local constant prevents the\n * semantic drift the framework-mindset rule warns about.\n * - Both variants are primary scopes: there is no \"child of an\n * organization unit\" or \"child of a user\" variant — webhooks are a\n * tenant-level concern, not an entity-attached one.\n /\nexport const M2M_WEBHOOK_SCOPE_VARIANTS: PolymorphicVariantDefinition[] = [\n {\n parentResourceType: CoreResourceType.ORGANIZATIONS,\n parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS],\n isPrimaryScope: true,\n },\n {\n parentResourceType: CoreResourceType.APPLICATION,\n parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],\n isPrimaryScope: true,\n },\n];\n\n// =============================================================================\n// ENDPOINT SUB-SCHEMA\n// =============================================================================\n\n/\n A single admin-configured webhook destination.\n \n v1 deliberately keeps endpoint config minimal (URL + description +\n * enabled flag) — per user direction: \"as a first implementation, we\n * need just an url and a description, not more.\" Per-endpoint secrets\n * are NOT used: signing happens with a single per-application JWT\n * private key (`JwtPrivateKeys.APPLICATION_WEBHOOK`) and consumers\n * verify with the matching public key surfaced via the parent config's\n * derived `applicationPublicKeyPem` field.\n /\nexport const WebhookEndpointSchema = z.object({\n /\n Stable per-endpoint identifier. Used as the `endpointId` FK on every delivery log row, and the\n * key the UPDATE path matches an incoming endpoint to its stored self by (#1801).\n \n ASSIGNED BY THE SERVER when an endpoint is saved without one — which is how a new endpoint\n * arrives from the settings pane, whose array editor seeds a new item's string fields with `''`.\n * That is why blank is admitted here rather than refused: `min(1)` made the settings pane unable\n * to add an endpoint at all, and an id is not something an administrator should have to invent.\n * A caller that supplies its own id keeps it. Duplicate ids are refused on `endpoints` below.\n /\n id: z\n .string()\n .max(128)\n .isNotEditable()\n .describe('Identifies the endpoint. Delivery-log entries and endpoint tests name the endpoint by this id. Assigned by the server when a new endpoint is saved without one; an existing endpoint keeps its id.'),\n /\n Destination URL receiving POST deliveries.\n \n ## `http://` IS ACCEPTED, AND WHAT THAT COSTS YOU (#492, decided 2026-09-08)\n \n Every delivery carries a signature JWT in the request. That JWT is a credential: it is what\n * proves to your endpoint that the delivery came from this application. Over plaintext it is\n * readable by anyone on the network path between us and you, and replayable against your endpoint\n * until it expires — so an observer of one delivery can forge the next one.\n \n Use `https://`. Plaintext is admitted because refusing it would break endpoints already\n * configured under a framework that accepted them, not because it is safe. That is a commercial\n * accommodation, deliberately taken, and it is not an assessment that `http://` is fine here.\n \n The sibling agent push-notification caller requires HTTPS unconditionally, and the same argument\n * applies to this field; the two differ only in whether anyone has already authored against them.\n \n Note the URL is also SSRF-guarded at delivery time — a destination resolving to a private or\n * link-local address is refused regardless of scheme, because a signed POST to an instance-metadata\n * service is a read primitive rather than a delivery.\n /\n url: z\n .url()\n .describe(\n 'Where deliveries are sent, as a signed POST. Use `https://`: over `http://` the signature token travels in the clear. A destination that resolves to a private or link-local address is refused when a delivery is sent (outside production, loopback is allowed).',\n ),\n /* Free-form admin label (visible in the management UI). /\n description: z.string().max(500).default('').describe('A label for the endpoint, shown to administrators. At most 500 characters; empty by default.'),\n /* Per-endpoint master switch — disabled endpoints are skipped by the dispatcher. /\n enabled: z.boolean().default(true).describe('When `false`, deliveries skip this endpoint. It can still be tested. Defaults to `true`.'),\n /\n When this endpoint was added. SERVER-STAMPED (#1801): the UPDATE path keeps the stored value for\n * an endpoint it recognises by `id` and stamps the save instant for a new one, whatever the request\n * carries — the array is written whole, so a client that omitted or edited this field would\n * otherwise reset or rewrite it.\n \n Why not `.excludeFromCreate().excludeFromUpdate()`: those strip TOP-LEVEL request fields only\n * (`applyUpdateOmissionsToSchema` does not descend into array items), so on an item they would\n * read as protection and enforce nothing. `.isNotEditable()` is what the item editor honours; the\n * server stamp is what makes the value true.\n /\n createdAt: z\n .date()\n .default(() => new Date())\n .isNotEditable()\n .describe('When the endpoint was added. Set by the server; a value sent by the client is ignored.'),\n /* When any setting of this endpoint last changed. SERVER-STAMPED, see {@link createdAt}. /\n updatedAt: z\n .date()\n .default(() => new Date())\n .isNotEditable()\n .describe('When the endpoint\\'s URL, description or switch last changed. Set by the server; a value sent by the client is ignored. Saving other endpoints does not change it.'),\n});\n\n/\n The endpoint fields a CLIENT authors — every field except the identity and the two server-stamped\n * timestamps. The UPDATE path compares these to decide whether an endpoint changed, so a field added\n * to {@link WebhookEndpointSchema} tomorrow counts as a change without anyone remembering to list it.\n /\nexport const WEBHOOK_ENDPOINT_SERVER_OWNED_FIELDS = ['id', 'createdAt', 'updatedAt'] as const satisfies readonly (keyof z.infer<typeof WebhookEndpointSchema>)[];\n\nexport type WebhookEndpoint = z.infer<typeof WebhookEndpointSchema>;\n\n/\n Whether a destination is reached over PLAINTEXT HTTP, so the signature JWT travels in the clear.\n \n ## One definition, because two would eventually disagree (#492)\n \n Plaintext is ADMITTED here — a deliberate commercial accommodation recorded on\n * {@link WebhookEndpointSchema.url} — which is exactly why the condition needs a single named home\n * rather than an inline `startsWith('http://')` at each surface that wants to say something about\n * it. A refusal can live in one place because it stops the request; a TOLERATED condition is\n * observed by several, and those several must agree.\n \n Read by the UPDATE path (which logs a warning naming the destination host when a plaintext endpoint\n * is saved) and by the endpoint probe (which reports it to the admin who pressed \"test\"). Both are\n * listed here so the next reader can tell whether adding a third is joining a mechanism or starting\n * a second one.\n \n Scheme comparison, not a `startsWith`: `WHATWG` lowercases the scheme during parsing, so\n * `HTTP://example.test` and `http://example.test` are the same destination and a prefix test would\n * disagree with the URL the delivery actually opens. An unparseable value answers `false` — it is\n * not a plaintext destination, it is not a destination at all, and `z.url()` refuses it upstream.\n /\nexport function webhookEndpointTransportIsPlaintext(url: string): boolean {\n try {\n return new URL(url).protocol === 'http:';\n } catch {\n return false;\n }\n}\n\n/\n The host of a webhook destination, for an audit row or a log line — never the full URL.\n \n Mirrors `AuditableEvent_Webhook_EndpointTestDispatchedEventDataSchema.destinationHost` and the\n * reasoning recorded there: paths and query strings on customer endpoints routinely embed\n * per-tenant tokens, and these rows are replicated to the organisation's SIEM and to the immutable\n * store. The host answers \"which of my endpoints\" without carrying a credential into a log.\n /\nexport function webhookEndpointDestinationHost(url: string): string {\n try {\n return new URL(url).host;\n } catch {\n return 'unparseable';\n }\n}\n\n// =============================================================================\n// BASE CONFIG SCHEMA (polymorphism injects the scope FK at variant time)\n// =============================================================================\n\nexport const WebhookConfigBaseSchema = z.object({\n _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n\n /* Master kill-switch — when `false`, the dispatcher short-circuits with no deliveries. /\n enabled: z.boolean().default(false).isSummaryField(),\n\n /\n Admin-managed list of destinations. Empty array = no deliveries even when `enabled: true`.\n \n Ids must be unique: the UPDATE path matches endpoints by id to carry their timestamps forward,\n * delivery-log rows name their endpoint by id, and `testEndpoint` selects one by id — a duplicate\n * would make all three pick an arbitrary one of the two. Blank ids are exempt, because the server\n * assigns them on save (see `WebhookEndpointSchema.id`).\n /\n // The refinement sits on the ARRAY, before `.default([])`: the request-DTO builder rebuilds a\n // default-wrapped field from its inner type, so a check on the wrapper never reached a request and a\n // PUT with two `\"same\"` ids was accepted (#1801 review M1).\n endpoints: z\n .array(WebhookEndpointSchema)\n .superRefine((endpoints, ctx) => {\n const seen = new Set<string>();\n endpoints.forEach((endpoint, index) => {\n if (!endpoint.id) return;\n if (seen.has(endpoint.id)) {\n ctx.addIssue({ code: 'custom', path: [index, 'id'], message: `Two endpoints share the id \"${endpoint.id}\". Each endpoint needs its own id.` });\n }\n seen.add(endpoint.id);\n });\n })\n .default([]),\n\n /\n Derived field — populated by `postfixCoreOperations[READ]` from\n * `appConfig.jwtConfig.config.publicKey[JwtPrivateKeys.APPLICATION_WEBHOOK]`.\n * Excluded from CREATE/UPDATE so clients cannot set it; the value is\n * regenerated on every read from the canonical app config so key\n * rotation is reflected immediately. Phase 3 wires the postfix hook\n * (Step 9 of the plan).\n /\n applicationPublicKeyPem: z.string().optional().excludeFromCreate().excludeFromUpdate(),\n\n createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type WebhookConfigBase = z.infer<typeof WebhookConfigBaseSchema>;\n\n// =============================================================================\n// POLYMORPHIC DECLARATION\n// =============================================================================\n\n/\n Yields two `CoreResourceType` variants:\n * - `organizationWebhookConfig` (FK: `organizationId`)\n * - `applicationWebhookConfig` (FK: `applicationId`)\n \n Both are singletons per scope (cardinality ONE) — wired in\n * `resources-registry.shared.core.definitions.ts` via\n * `createPolymorphicScopeRelationships(...)`.\n */\nexport const webhookConfigPolymorphicDeclaration = declarePolymorphicSchemas({\n baseResourceType: 'webhookConfig',\n baseFieldIdentifier: 'webhookConfigId',\n baseEnumKey: 'WEBHOOK_CONFIG',\n baseSchema: WebhookConfigBaseSchema,\n variants: M2M_WEBHOOK_SCOPE_VARIANTS,\n});\n"]}
1	+ {"version":3,"file":"webhook-config.shared.schemas.js","sourceRoot":"","sources":["../../../../src/notifications/m2m/webhook-config.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EACL,yBAAyB,GAE1B,MAAM,qDAAqD,CAAC;AAE7D,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAN,IAAY,2BAmBX;AAnBD,WAAY,2BAA2B;IACrC;;;;;OAKG;IACH,oDAAqB,CAAA;IACrB,iFAAiF;IACjF,oDAAqB,CAAA;IACrB,sFAAsF;IACtF,0DAA2B,CAAA;IAC3B;;;;;OAKG;IACH,oDAAqB,CAAA;AACvB,CAAC,EAnBW,2BAA2B,KAA3B,2BAA2B,QAmBtC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAmC;IACxE;QACE,kBAAkB,EAAE,gBAAgB,CAAC,aAAa;QAClD,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC;QACzF,cAAc,EAAE,IAAI;KACrB;IACD;QACE,kBAAkB,EAAE,gBAAgB,CAAC,WAAW;QAChD,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC;QACvF,cAAc,EAAE,IAAI;KACrB;CACF,CAAC;AAEF,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;;;;;OASG;IACH,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,aAAa,EAAE;SACf,QAAQ,CAAC,oMAAoM,CAAC;IACjN;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,EAAE,CAAC;SACH,GAAG,EAAE;SACL,QAAQ,CACP,oQAAoQ,CACrQ;IACH,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8FAA8F,CAAC;IACrJ,qFAAqF;IACrF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,0FAA0F,CAAC;IACvI;;;;;;;;;;OAUG;IACH,SAAS,EAAE,CAAC;SACT,IAAI,EAAE;SACN,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;SACzB,aAAa,EAAE;SACf,QAAQ,CAAC,wFAAwF,CAAC;IACrG,6FAA6F;IAC7F,SAAS,EAAE,CAAC;SACT,IAAI,EAAE;SACN,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;SACzB,aAAa,EAAE;SACf,QAAQ,CAAC,oKAAoK,CAAC;CAClL,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAA6E,CAAC;AAIjK;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mCAAmC,CAAC,GAAW;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,GAAW;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAEhF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAEtD,2FAA2F;IAC3F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE;IAEpD;;;;;;;OAOG;IACH,8FAA8F;IAC9F,qGAAqG;IACrG,4DAA4D;IAC5D,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,qBAAqB,CAAC;SAC5B,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,+BAA+B,QAAQ,CAAC,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACjJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IAEd;;;;;;;OAOG;IACH,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IAEtF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACtF,CAAC,CAAC;AAIH,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,yBAAyB,CAAC;IAC3E,gBAAgB,EAAE,eAAe;IACjC,mBAAmB,EAAE,iBAAiB;IACtC,WAAW,EAAE,gBAAgB;IAC7B,UAAU,EAAE,uBAAuB;IACnC,QAAQ,EAAE,0BAA0B;CACrC,CAAC,CAAC","sourcesContent":["/*\n M2M Webhook Config Schema (Shared) — Polymorphic dual-scope\n \n Configures outbound webhook delivery for M2M notifications fired by\n * resource operations carrying a `WEBHOOK_ORGANIZATION` or\n * `WEBHOOK_APPLICATION` channel in their spec. Holds:\n * - a master `enabled` switch\n * - an array of admin-managed endpoints (URL + description + per-endpoint enabled flag)\n * - a derived `applicationPublicKeyPem` (READ-only, populated by a\n * postfix hook from `JwtPrivateKeys.APPLICATION_WEBHOOK` so external\n * consumers can verify our JWT-signed deliveries)\n \n Scope FK (`organizationId` / `applicationId`) is injected by the\n * polymorphism engine — NOT declared on the base schema.\n \n @see m2m-webhook-organization-delivery.md — Phase 2 / Step 3\n * @see security/authentications/siem/siem-export-config.shared.schemas.ts\n * for the dual-scope polymorphic precedent this mirrors.\n /\n\nimport { z } from 'zod';\nimport {\n CoreResourceType,\n coreResourceShared_FieldIdentifier,\n} from '../../resources/resources.shared.core.definitions';\nimport {\n declarePolymorphicSchemas,\n type PolymorphicVariantDefinition,\n} from '../../resources/utils/resource-polymorphism.schemas';\n\n// =============================================================================\n// ENDPOINT PROBE VOCABULARY\n// =============================================================================\n\n/\n Verdict of a single synthetic delivery fired by `webhookConfig.testEndpoint`.\n * A probe that cannot fail is worse than no probe, so every terminal state an\n * outbound attempt can reach is named here rather than collapsed into a boolean.\n \n The transport verdict and the HTTP status are deliberately SEPARATE axes:\n * `REJECTED` still carries a response status, because \"the endpoint answered 403\"\n * and \"the endpoint never answered\" are different problems with different fixes.\n \n Declared in this light schema module (not alongside the operation DTO) so the\n * audit-event vocabulary can name the same enum without pulling the resource-config\n * factory graph into `auditable-events.shared.schema.ts`.\n /\nexport enum WebhookEndpointProbeOutcome {\n /\n The endpoint answered with 2xx. This is the only outcome that evidences\n * consumer-side signature verification: the platform cannot observe the\n * consumer's verification step directly, so a 2xx from an endpoint that\n * verifies before responding is the available proof.\n /\n ACCEPTED = 'accepted',\n /* The endpoint answered, but not with 2xx. Reachable; it refused or errored. /\n REJECTED = 'rejected',\n /* No HTTP response at all — DNS/TLS/connection failure, or the attempt timed out. /\n UNREACHABLE = 'unreachable',\n /\n Nothing left the platform. The payload could not be signed, which is an\n * operator-side key/configuration fault, not a statement about the endpoint.\n * Reported distinctly so an admin never reads a local misconfiguration as a\n * broken customer endpoint.\n /\n NOT_SENT = 'not_sent',\n}\n\n// =============================================================================\n// SHARED VARIANT DEFINITIONS\n// =============================================================================\n\n/\n The 2 M2M webhook scope variants — shared by `WebhookConfig` and\n * `M2MWebhookDeliveryLog`. Centralised here so both polymorphic\n * declarations stay in lock-step.\n \n Notes:\n * - We deliberately define a domain-local constant (mirroring\n * `BILLING_SCOPE_VARIANTS` in the billing domain) instead of reusing\n * `AUTH_SCOPE_VARIANTS` from `authentications/`. The variant shape\n * is identical — `(ORGANIZATIONS, APPLICATION)` with `isPrimaryScope:\n * true` — but the auth constant is documented as \"shared across all\n * AUTH polymorphic resources\" and webhooks are notification resources,\n * not auth resources. Keeping a domain-local constant prevents the\n * semantic drift the framework-mindset rule warns about.\n * - Both variants are primary scopes: there is no \"child of an\n * organization unit\" or \"child of a user\" variant — webhooks are a\n * tenant-level concern, not an entity-attached one.\n /\nexport const M2M_WEBHOOK_SCOPE_VARIANTS: PolymorphicVariantDefinition[] = [\n {\n parentResourceType: CoreResourceType.ORGANIZATIONS,\n parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS],\n isPrimaryScope: true,\n },\n {\n parentResourceType: CoreResourceType.APPLICATION,\n parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],\n isPrimaryScope: true,\n },\n];\n\n// =============================================================================\n// ENDPOINT SUB-SCHEMA\n// =============================================================================\n\n/\n A single admin-configured webhook destination.\n \n v1 deliberately keeps endpoint config minimal (URL + description +\n * enabled flag) — per user direction: \"as a first implementation, we\n * need just an url and a description, not more.\" Per-endpoint secrets\n * are NOT used: signing happens with a single per-application JWT\n * private key (`JwtPrivateKeys.APPLICATION_WEBHOOK`) and consumers\n * verify with the matching public key surfaced via the parent config's\n * derived `applicationPublicKeyPem` field.\n /\nexport const WebhookEndpointSchema = z.object({\n /\n Stable per-endpoint identifier. Used as the `endpointId` FK on every delivery log row, and the\n * key the UPDATE path matches an incoming endpoint to its stored self by (#1801).\n \n ASSIGNED BY THE SERVER when an endpoint is saved without one — which is how a new endpoint\n * arrives from the settings pane, whose array editor seeds a new item's string fields with `''`.\n * That is why blank is admitted here rather than refused: `min(1)` made the settings pane unable\n * to add an endpoint at all, and an id is not something an administrator should have to invent.\n * A caller that supplies its own id keeps it. Duplicate ids are refused on `endpoints` below.\n /\n id: z\n .string()\n .max(128)\n .isNotEditable()\n .describe('Identifies the endpoint. Delivery-log entries and endpoint tests name the endpoint by this id. Assigned by the server when a new endpoint is saved without one; an existing endpoint keeps its id.'),\n /\n Destination URL receiving POST deliveries.\n \n ## `http://` IS ACCEPTED, AND WHAT THAT COSTS YOU (#492, decided 2026-09-08)\n \n Every delivery carries a signature JWT in the request. That JWT is a credential: it is what\n * proves to your endpoint that the delivery came from this application. Over plaintext it is\n * readable by anyone on the network path between us and you, and replayable against your endpoint\n * until it expires — so an observer of one delivery can forge the next one.\n \n Use `https://`. Plaintext is admitted because refusing it would break endpoints already\n * configured under a framework that accepted them, not because it is safe. That is a commercial\n * accommodation, deliberately taken, and it is not an assessment that `http://` is fine here.\n \n The sibling agent push-notification caller requires HTTPS unconditionally, and the same argument\n * applies to this field; the two differ only in whether anyone has already authored against them.\n \n Note the URL is also SSRF-guarded at delivery time — a destination resolving to a private or\n * link-local address is refused regardless of scheme, because a signed POST to an instance-metadata\n * service is a read primitive rather than a delivery.\n /\n url: z\n .url()\n .describe(\n 'Where deliveries are sent, as a signed POST. Use `https://`: over `http://` the signature token travels in the clear. A destination that resolves to a private or link-local address is refused when a delivery is sent (outside production, loopback is allowed).',\n ),\n /* Free-form admin label (visible in the management UI). /\n description: z.string().max(500).default('').describe('A label for the endpoint, shown to administrators. At most 500 characters; empty by default.'),\n /* Per-endpoint master switch — disabled endpoints are skipped by the dispatcher. /\n enabled: z.boolean().default(true).describe('When `false`, deliveries skip this endpoint. It can still be tested. Defaults to `true`.'),\n /\n When this endpoint was added. SERVER-STAMPED (#1801): the UPDATE path keeps the stored value for\n * an endpoint it recognises by `id` and stamps the save instant for a new one, whatever the request\n * carries — the array is written whole, so a client that omitted or edited this field would\n * otherwise reset or rewrite it.\n \n Why not `.excludeFromCreate().excludeFromUpdate()`: those strip TOP-LEVEL request fields only\n * (`applyUpdateOmissionsToSchema` does not descend into array items), so on an item they would\n * read as protection and enforce nothing. `.isNotEditable()` is what the item editor honours; the\n * server stamp is what makes the value true.\n /\n createdAt: z\n .date()\n .default(() => new Date())\n .isNotEditable()\n .describe('When the endpoint was added. Set by the server; a value sent by the client is ignored.'),\n /* When any setting of this endpoint last changed. SERVER-STAMPED, see {@link createdAt}. /\n updatedAt: z\n .date()\n .default(() => new Date())\n .isNotEditable()\n .describe('When the endpoint\\'s URL, description or switch last changed. Set by the server; a value sent by the client is ignored. Saving other endpoints does not change it.'),\n});\n\n/\n The endpoint fields a CLIENT authors — every field except the identity and the two server-stamped\n * timestamps. The UPDATE path compares these to decide whether an endpoint changed, so a field added\n * to {@link WebhookEndpointSchema} tomorrow counts as a change without anyone remembering to list it.\n /\nexport const WEBHOOK_ENDPOINT_SERVER_OWNED_FIELDS = ['id', 'createdAt', 'updatedAt'] as const satisfies readonly (keyof z.infer<typeof WebhookEndpointSchema>)[];\n\nexport type WebhookEndpoint = z.infer<typeof WebhookEndpointSchema>;\n\n/\n Whether a destination is reached over PLAINTEXT HTTP, so the signature JWT travels in the clear.\n \n ## One definition, because two would eventually disagree (#492)\n \n Plaintext is ADMITTED here — a deliberate commercial accommodation recorded on\n * {@link WebhookEndpointSchema.url} — which is exactly why the condition needs a single named home\n * rather than an inline `startsWith('http://')` at each surface that wants to say something about\n * it. A refusal can live in one place because it stops the request; a TOLERATED condition is\n * observed by several, and those several must agree.\n \n Read by the UPDATE path (which logs a warning naming the destination host when a plaintext endpoint\n * is saved) and by the endpoint probe (which reports it to the admin who pressed \"test\"). Both are\n * listed here so the next reader can tell whether adding a third is joining a mechanism or starting\n * a second one.\n \n Scheme comparison, not a `startsWith`: `WHATWG` lowercases the scheme during parsing, so\n * `HTTP://example.test` and `http://example.test` are the same destination and a prefix test would\n * disagree with the URL the delivery actually opens. An unparseable value answers `false` — it is\n * not a plaintext destination, it is not a destination at all, and `z.url()` refuses it upstream.\n /\nexport function webhookEndpointTransportIsPlaintext(url: string): boolean {\n try {\n return new URL(url).protocol === 'http:';\n } catch {\n return false;\n }\n}\n\n/\n The host of a webhook destination, for an audit row or a log line — never the full URL.\n \n Mirrors `AuditableEvent_Webhook_EndpointTestDispatchedEventDataSchema.destinationHost` and the\n * reasoning recorded there: paths and query strings on customer endpoints routinely embed\n * per-tenant tokens, and these rows are replicated to the organisation's SIEM and to the immutable\n * store. The host answers \"which of my endpoints\" without carrying a credential into a log.\n /\nexport function webhookEndpointDestinationHost(url: string): string {\n try {\n return new URL(url).host;\n } catch {\n return 'unparseable';\n }\n}\n\n// =============================================================================\n// BASE CONFIG SCHEMA (polymorphism injects the scope FK at variant time)\n// =============================================================================\n\nexport const WebhookConfigBaseSchema = z.object({\n _id: z.string().min(1).isPrimaryKey().isSummaryField(),\n\n /* Master kill-switch — when `false`, the dispatcher short-circuits with no deliveries. /\n enabled: z.boolean().default(false).isSummaryField(),\n\n /\n Admin-managed list of destinations. Empty array = no deliveries even when `enabled: true`.\n \n Ids must be unique: the UPDATE path matches endpoints by id to carry their timestamps forward,\n * delivery-log rows name their endpoint by id, and `testEndpoint` selects one by id — a duplicate\n * would make all three pick an arbitrary one of the two. Blank ids are exempt, because the server\n * assigns them on save (see `WebhookEndpointSchema.id`).\n /\n // The refinement sits on the ARRAY, before `.default([])`: the request-DTO builder rebuilds a\n // default-wrapped field from its inner type, so a check on the wrapper never reached a request and a\n // PUT with two `\"same\"` ids was accepted (#1801 review M1).\n endpoints: z\n .array(WebhookEndpointSchema)\n .superRefine((endpoints, ctx) => {\n const seen = new Set<string>();\n endpoints.forEach((endpoint, index) => {\n if (!endpoint.id) return;\n if (seen.has(endpoint.id)) {\n ctx.addIssue({ code: 'custom', path: [index, 'id'], message: `Two endpoints share the id \"${endpoint.id}\". Each endpoint needs its own id.` });\n }\n seen.add(endpoint.id);\n });\n })\n .default([]),\n\n /\n Derived field — populated by `postfixCoreOperations[READ]` from\n * `appConfig.jwtConfig.config.publicKey[JwtPrivateKeys.APPLICATION_WEBHOOK]`.\n * Excluded from CREATE/UPDATE so clients cannot set it; the value is\n * regenerated on every read from the canonical app config so key\n * rotation is reflected immediately. Phase 3 wires the postfix hook\n * (Step 9 of the plan).\n /\n applicationPublicKeyPem: z.string().optional().excludeFromCreate().excludeFromUpdate(),\n\n createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n});\n\nexport type WebhookConfigBase = z.infer<typeof WebhookConfigBaseSchema>;\n\n// =============================================================================\n// POLYMORPHIC DECLARATION\n// =============================================================================\n\n/\n Yields two `CoreResourceType` variants:\n * - `organizationWebhookConfig` (FK: `organizationId`)\n * - `applicationWebhookConfig` (FK: `applicationId`)\n \n Both are singletons per scope (cardinality ONE) — wired in\n * `resources-registry.shared.core.definitions.ts` via\n * `createPolymorphicScopeRelationships(...)`.\n */\nexport const webhookConfigPolymorphicDeclaration = declarePolymorphicSchemas({\n baseResourceType: 'webhookConfig',\n baseFieldIdentifier: 'webhookConfigId',\n baseEnumKey: 'WEBHOOK_CONFIG',\n baseSchema: WebhookConfigBaseSchema,\n variants: M2M_WEBHOOK_SCOPE_VARIANTS,\n});\n"]}

package/dist/esm/notifications/notification-badges.core.definitions.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notification-badges.core.definitions.d.ts","sourceRoot":"","sources":["~~../../../../~~src/notifications/notification-badges.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gCAAgC,EAAE,2BAA2B,EAAO,CAAC"}
1	+ {"version":3,"file":"notification-badges.core.definitions.d.ts","sourceRoot":"","sources":["../../../src/notifications/notification-badges.core.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gCAAgC,EAAE,2BAA2B,EAAO,CAAC"}

package/dist/esm/notifications/notification-badges.core.definitions.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notification-badges.core.definitions.js","sourceRoot":"","sources":["~~../../../../~~src/notifications/notification-badges.core.definitions.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAkC,EAAE,CAAC","sourcesContent":["import { NotificationBadgeDefinition } from \"./notification-badges.schemas\";\n\n/*\n Canonical (framework-shipped) notification badge definitions.\n \n Intentionally empty: the two aspirational placeholders (`new messages` /\n * `unpaid invoices`) were removed because nothing produced them.\n \n This is a statement about FRAMEWORK-shipped definitions only. Badge surfacing itself works: a\n * navigation item carries `notificationBadgeRef` and the sidebar renders the badge, and applications\n * declare their own definitions. A framework definition returns here only once the framework also\n * ships its producer, carrying a typed `source` (EVENT_COUNTER \| DERIVED_QUERY) + `display`.\n */\nexport const coreNotificationBadgeDefinitions: NotificationBadgeDefinition[] = [];\n"]}
1	+ {"version":3,"file":"notification-badges.core.definitions.js","sourceRoot":"","sources":["../../../src/notifications/notification-badges.core.definitions.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAkC,EAAE,CAAC","sourcesContent":["import { NotificationBadgeDefinition } from \"./notification-badges.schemas\";\n\n/*\n Canonical (framework-shipped) notification badge definitions.\n \n Intentionally empty: the two aspirational placeholders (`new messages` /\n * `unpaid invoices`) were removed because nothing produced them.\n \n This is a statement about FRAMEWORK-shipped definitions only. Badge surfacing itself works: a\n * navigation item carries `notificationBadgeRef` and the sidebar renders the badge, and applications\n * declare their own definitions. A framework definition returns here only once the framework also\n * ships its producer, carrying a typed `source` (EVENT_COUNTER \| DERIVED_QUERY) + `display`.\n */\nexport const coreNotificationBadgeDefinitions: NotificationBadgeDefinition[] = [];\n"]}

package/dist/esm/notifications/notification-badges.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notification-badges.schemas.d.ts","sourceRoot":"","sources":["~~../../../../~~src/notifications/notification-badges.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAEpD,iFAAiF;AACjF,eAAO,MAAM,qCAAqC,QAAY,CAAC;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iCAAiC,aAKxC,CAAC;AAEP;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB;;;EAGlC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,oBAAY,0BAA0B;IAClC,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,GAAG,QAAQ;IACX,KAAK,UAAU;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,oBAAY,2BAA2B;IACnC,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,iBAAiB,sBAAsB;CAC1C;AAED,kFAAkF;AAClF,oBAAY,4BAA4B;IACpC,+CAA+C;IAC/C,GAAG,QAAQ;IACX,wDAAwD;IACxD,KAAK,UAAU;IACf,4DAA4D;IAC5D,IAAI,SAAS;CAChB;AAED;;;GAGG;AACH,oBAAY,sBAAsB;IAC9B,IAAI,SAAS;IACb,uEAAuE;IACvE,WAAW,gBAAgB;IAC3B,iDAAiD;IACjD,YAAY,iBAAiB;CAChC;AACD,0EAA0E;AAE1E,+EAA+E;AAC/E,eAAO,MAAM,yCAAyC;;iBAEpD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAKpD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,6CAA6C;;iBAExD,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,6BAA6B;;;;;;;;;2BAIxC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;iBAIzC,CAAC;AAYH;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;iBAG5C,CAAC;AAkBH,eAAO,MAAM,mCAAmC;;;;;;;;iBAG9C,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;iBAG1C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;4BAGlC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAC5G,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAOtF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEhD,wDAAwD;AACxD,wBAAgB,yBAAyB,CACrC,KAAK,EAAE,iBAAiB,EACxB,UAAU,EAAE,2BAA2B,GACxC,oBAAoB,CAEtB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CACxC,QAAQ,EAAE,IAAI,CAAC,2BAA2B,EAAE,OAAO,GAAG,YAAY,CAAC,GACpE,oBAAoB,CAEtB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACrC,GAAG,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAAG,IAAI,CAM9E;AAED,sDAAsD;AACtD,wBAAgB,+BAA+B,CAC3C,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,2BAA2B,GACxC,0BAA0B,CAE5B;AAED,4FAA4F;AAC5F,wBAAgB,+BAA+B,CAC3C,SAAS,EAAE,MAAM,GAClB;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAAG,IAAI,CAM/F;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAGhG;AAED,wEAAwE;AACxE,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE3F;AAMD;;;GAGG;AACH,oBAAY,2CAA2C;IACnD;;;;;OAKG;IACH,wBAAwB,6BAA6B;IACrD;;;;OAIG;IACH,iCAAiC,sCAAsC;IACvE,8EAA8E;IAC9E,wBAAwB,6BAA6B;IACrD;;;;;OAKG;IACH,8BAA8B,mCAAmC;CACpE;AAED,qGAAqG;AACrG,MAAM,WAAW,qCAAqC;IAClD,MAAM,EAAE,2CAA2C,CAAC;IACpD,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC;IACjB,kGAAkG;IAClG,UAAU,CAAC,EAAE,2BAA2B,CAAC;IACzC,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,gHAAgH;AAChH,MAAM,WAAW,yCAAyC;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6CAA6C,CACzD,WAAW,EAAE,SAAS,2BAA2B,EAAE,EACnD,cAAc,GAAE,SAAS,yCAAyC,EAAO,GAC1E,qCAAqC,EAAE,CAiDzC;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACjD,WAAW,EAAE,SAAS,2BAA2B,EAAE,GACpD,WAAW,CAAC,oBAAoB,EAAE,2BAA2B,CAAC,CAOhE"}
1	+ {"version":3,"file":"notification-badges.schemas.d.ts","sourceRoot":"","sources":["../../../src/notifications/notification-badges.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAEpD,iFAAiF;AACjF,eAAO,MAAM,qCAAqC,QAAY,CAAC;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iCAAiC,aAKxC,CAAC;AAEP;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB;;;EAGlC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,oBAAY,0BAA0B;IAClC,SAAS,cAAc;IACvB,SAAS,cAAc;IACvB,GAAG,QAAQ;IACX,KAAK,UAAU;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,oBAAY,2BAA2B;IACnC,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,iBAAiB,sBAAsB;CAC1C;AAED,kFAAkF;AAClF,oBAAY,4BAA4B;IACpC,+CAA+C;IAC/C,GAAG,QAAQ;IACX,wDAAwD;IACxD,KAAK,UAAU;IACf,4DAA4D;IAC5D,IAAI,SAAS;CAChB;AAED;;;GAGG;AACH,oBAAY,sBAAsB;IAC9B,IAAI,SAAS;IACb,uEAAuE;IACvE,WAAW,gBAAgB;IAC3B,iDAAiD;IACjD,YAAY,iBAAiB;CAChC;AACD,0EAA0E;AAE1E,+EAA+E;AAC/E,eAAO,MAAM,yCAAyC;;iBAEpD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAKpD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,6CAA6C;;iBAExD,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,6BAA6B;;;;;;;;;2BAIxC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;iBAIzC,CAAC;AAYH;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;iBAG5C,CAAC;AAkBH,eAAO,MAAM,mCAAmC;;;;;;;;iBAG9C,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;iBAG1C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;4BAGlC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAC5G,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAOtF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEhD,wDAAwD;AACxD,wBAAgB,yBAAyB,CACrC,KAAK,EAAE,iBAAiB,EACxB,UAAU,EAAE,2BAA2B,GACxC,oBAAoB,CAEtB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CACxC,QAAQ,EAAE,IAAI,CAAC,2BAA2B,EAAE,OAAO,GAAG,YAAY,CAAC,GACpE,oBAAoB,CAEtB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACrC,GAAG,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAAG,IAAI,CAM9E;AAED,sDAAsD;AACtD,wBAAgB,+BAA+B,CAC3C,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,2BAA2B,GACxC,0BAA0B,CAE5B;AAED,4FAA4F;AAC5F,wBAAgB,+BAA+B,CAC3C,SAAS,EAAE,MAAM,GAClB;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAAG,IAAI,CAM/F;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAGhG;AAED,wEAAwE;AACxE,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE3F;AAMD;;;GAGG;AACH,oBAAY,2CAA2C;IACnD;;;;;OAKG;IACH,wBAAwB,6BAA6B;IACrD;;;;OAIG;IACH,iCAAiC,sCAAsC;IACvE,8EAA8E;IAC9E,wBAAwB,6BAA6B;IACrD;;;;;OAKG;IACH,8BAA8B,mCAAmC;CACpE;AAED,qGAAqG;AACrG,MAAM,WAAW,qCAAqC;IAClD,MAAM,EAAE,2CAA2C,CAAC;IACpD,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC;IACjB,kGAAkG;IAClG,UAAU,CAAC,EAAE,2BAA2B,CAAC;IACzC,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,gHAAgH;AAChH,MAAM,WAAW,yCAAyC;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6CAA6C,CACzD,WAAW,EAAE,SAAS,2BAA2B,EAAE,EACnD,cAAc,GAAE,SAAS,yCAAyC,EAAO,GAC1E,qCAAqC,EAAE,CAiDzC;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACjD,WAAW,EAAE,SAAS,2BAA2B,EAAE,GACpD,WAAW,CAAC,oBAAoB,EAAE,2BAA2B,CAAC,CAOhE"}

package/dist/esm/notifications/notification-badges.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notification-badges.schemas.js","sourceRoot":"","sources":["../../../../src/notifications/notification-badges.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAErB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,qCAAqC,GAAG,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC7C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;KAC9D,KAAK,CAAC,qCAAqC,EAAE;IAC1C,KAAK,EAAE,mDAAmD,gCAAgC,qEAAqE;CAClK,CAAC,CAAC;AAEP;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,oBAAoB,CAAC,SAAS;IAC9B,oBAAoB,CAAC,aAAa;CACrC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,0BAKX;AALD,WAAY,0BAA0B;IAClC,qDAAuB,CAAA;IACvB,qDAAuB,CAAA;IACvB,yCAAW,CAAA;IACX,6CAAe,CAAA;AACnB,CAAC,EALW,0BAA0B,KAA1B,0BAA0B,QAKrC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,2BAIX;AAJD,WAAY,2BAA2B;IACnC,8DAA+B,CAAA;IAC/B,8DAA+B,CAAA;IAC/B,sEAAuC,CAAA;AAC3C,CAAC,EAJW,2BAA2B,KAA3B,2BAA2B,QAItC;AAED,kFAAkF;AAClF,MAAM,CAAN,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACpC,+CAA+C;IAC/C,2CAAW,CAAA;IACX,wDAAwD;IACxD,+CAAe,CAAA;IACf,4DAA4D;IAC5D,6CAAa,CAAA;AACjB,CAAC,EAPW,4BAA4B,KAA5B,4BAA4B,QAOvC;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,sBAMX;AAND,WAAY,sBAAsB;IAC9B,uCAAa,CAAA;IACb,uEAAuE;IACvE,qDAA2B,CAAA;IAC3B,iDAAiD;IACjD,uDAA6B,CAAA;AACjC,CAAC,EANW,sBAAsB,KAAtB,sBAAsB,QAMjC;AACD,0EAA0E;AAE1E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,aAAa,CAAC;CAC7D,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,aAAa,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IACpF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;CACnF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,iBAAiB,CAAC;CACjE,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtE,yCAAyC;IACzC,yCAAyC;IACzC,6CAA6C;CAChD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC;IACtF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC;CAC7E,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,iCAAiC;IAC7C,KAAK,EAAE,uBAAuB;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,+BAA+B,CAAC,MAAM,CAAC;IACpF,MAAM,EAAE,6BAA6B;IACrC,OAAO,EAAE,8BAA8B;CAC1C,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,+BAA+B,CAAC,MAAM,CAAC;IACvE,2FAA2F;IAC3F,8FAA8F;IAC9F,+FAA+F;IAC/F,kFAAkF;IAClF,UAAU,EAAE,iCAAiC,CAAC,cAAc,EAAE;IAC9D,sFAAsF;IACtF,uFAAuF;IACvF,uFAAuF;IACvF,6DAA6D;IAC7D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC,YAAY,EAAE;IACrF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,6DAA6D,EAAE,CAAC,CAAC,cAAc,EAAE;IACnH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;IAC3D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;CAC/E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAA2B,CAAC,MAAM,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,mFAAmF,CAAC;IAClJ,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE;CAC3G,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC,MAAM,CAAC;IAC9E,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,oFAAoF,CAAC;IAC/I,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE;CAC3F,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;IACjE,mCAAmC;IACnC,+BAA+B;CAClC,CAAC,CAAC;AA+CH,wDAAwD;AACxD,MAAM,UAAU,yBAAyB,CACrC,KAAwB,EACxB,UAAuC;IAEvC,OAAO,GAAG,KAAK,GAAG,gCAAgC,GAAG,UAAU,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CACxC,QAAmE;IAEnE,OAAO,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACrC,GAAW;IAEX,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IAClC,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,+BAA+B,CAC3C,KAAwB,EACxB,OAAe,EACf,UAAuC;IAEvC,OAAO,GAAG,KAAK,GAAG,gCAAgC,GAAG,OAAO,GAAG,gCAAgC,GAAG,UAAU,EAAE,CAAC;AACnH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,+BAA+B,CAC3C,SAAiB;IAEjB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IAC3C,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,SAAiB;IAC/D,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC3D,OAAO,KAAK,KAAK,oBAAoB,CAAC,SAAS,IAAI,KAAK,KAAK,oBAAoB,CAAC,aAAa,CAAC;AACpG,CAAC;AAED,mEAAmE;AACnE,wDAAwD;AACxD,mEAAmE;AAEnE;;;GAGG;AACH,MAAM,CAAN,IAAY,2CAuBX;AAvBD,WAAY,2CAA2C;IACnD;;;;;OAKG;IACH,oGAAqD,CAAA;IACrD;;;;OAIG;IACH,sHAAuE,CAAA;IACvE,8EAA8E;IAC9E,oGAAqD,CAAA;IACrD;;;;;OAKG;IACH,gHAAiE,CAAA;AACrE,CAAC,EAvBW,2CAA2C,KAA3C,2CAA2C,QAuBtD;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6CAA6C,CACzD,WAAmD,EACnD,iBAAuE,EAAE;IAEzE,MAAM,UAAU,GAA4C,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqD,CAAC;IAErF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,iCAAiC;gBACrF,QAAQ,EAAE,4BAA4B,CAAC,UAAU,CAAC;gBAClD,UAAU,EAAE,UAAU,CAAC,UAAU;aACpC,CAAC,CAAC;YACH,sFAAsF;QAC1F,CAAC;QAED,MAAM,GAAG,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,wBAAwB;gBAC5E,QAAQ,EAAE,GAAG;gBACb,UAAU,EAAE,UAAU,CAAC,UAAU;aACpC,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,wBAAwB;gBAC5E,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;aAChD,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;YACnF,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,8BAA8B;gBAClF,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;aAChD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACjD,WAAmD;IAEnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqD,CAAC;IAC3E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { initZodDecorators } from '@wildo-ai/zod-decorators';\n\ninitZodDecorators(z);\n\nimport { IndicatorVariant } from '@wildo-ai/presets-components-models';\nimport { ResourcePrimaryScope } from \"../resources/resources.shared.schemas\";\n\n\n/*\n The one character that separates the parts of a badge KEY and a badge REFERENCE.\n \n Both formats are positional, so the separator may not appear inside a part or the parse is\n * ambiguous. `NotificationBadgeIdentifierSchema` refuses it in an identifier for exactly that\n * reason, and `collectNotificationBadgeDeclarationViolations` re-states the refusal at boot,\n * because a declaration object is authored in TypeScript and never `.parse()`d.\n /\nexport const NOTIFICATION_BADGE_KEY_SEPARATOR = ':';\n\n/* Any string that does not contain {@link NOTIFICATION_BADGE_KEY_SEPARATOR}. /\nexport const NOTIFICATION_BADGE_IDENTIFIER_PATTERN = /^[^:]+$/;\n\n/\n Notification badge identifier.\n \n The identifier is an open string because no canonical (core) identifier ships: the two\n * aspirational placeholders (`new messages` / `unpaid invoices`) were removed because nothing\n * produced them.\n \n The SURFACING is not missing. A navigation item declares `notificationBadgeRef` and the sidebar\n * and the menubar render it, and an application declares its own badges, so the open string is what an application\n * uses today. What is still absent is a FRAMEWORK-shipped identifier with a framework producer\n * behind it; when one lands, core identifiers come back as a `CoreNotificationBadgeIdentifiers`\n * enum unioned in here.\n \n Open, but not unconstrained: an identifier may not contain\n * {@link NOTIFICATION_BADGE_KEY_SEPARATOR}, because it is the LAST part of a badge key and of a\n * badge reference and both are positional. A definition object is authored in TypeScript and never\n * `.parse()`d, so this constraint is also re-stated as a boot check — see\n * {@link collectNotificationBadgeDeclarationViolations}.\n /\nexport const NotificationBadgeIdentifierSchema = z\n .string()\n .min(1, { error: 'Notification badge identifier is required' })\n .regex(NOTIFICATION_BADGE_IDENTIFIER_PATTERN, {\n error: `Notification badge identifier must not contain \"${NOTIFICATION_BADGE_KEY_SEPARATOR}\" — that character separates the parts of a badge key and reference`,\n });\n\n/\n Notification badge scope. Tightened to USER_SELF \| ORGANIZATIONS only.\n \n The APPLICATION variant was dropped in the polymorphism refactor\n * (`.cursor/plans/notification-badges-polymorphism-refactor.md`):\n * - No canonical badges were ever declared at APPLICATION scope (see\n * `notification-badges.core.definitions.ts`).\n * - The two surviving variants (USER + ORG) each own their own resource type\n * and MongoDB collection. Allowing APPLICATION here would let consumers\n * write a payload that no resource configuration / collection accepts.\n \n `WS_BadgeUpdatePayload` semantics are unchanged — the dispatcher in\n * `NotificationBadgeBackendService.emitBadgeUpdate` still routes USER badges to\n * `sendToUser` and ORG badges to `sendToOrganization`.\n /\nexport const NotificationScopeSchema = z.enum([\n ResourcePrimaryScope.USER_SELF,\n ResourcePrimaryScope.ORGANIZATIONS,\n]);\n\n/\n @wildo_source:part:start saas.models.notifications.badge-vocabularies facet:layer:shared facet:audience:app-developer\n \n The four vocabularies a badge definition picks from: how its count is CALCULATED, how it is\n * PRESENTED, whether it draws attention, and — for a stored counter — what an operation does to it.\n \n ⚠️ Choosing the source kind wrongly produces a number that DRIFTS. Reach for `EVENT_COUNTER`\n * only when the count is a fact the badge itself owns (\"unread messages\": arrive → increment, seen →\n * reset). For any quantity derived from data an operation could change by another route — incomplete\n * todos, unpaid invoices — use `DERIVED_QUERY`, which recomputes a live aggregate. A stored counter\n * on a derived quantity is right on the day it is written and wrong thereafter.\n \n An `EVENT_COUNTER` badge additionally needs `notificationBadgeOperations` declared on the\n * operations that move it; a `DERIVED_QUERY` badge needs none, because the recompute hangs off the\n * source resource's own mutations.\n \n `FRONTEND_PRODUCED` is for a count the FRONTEND already holds and the backend cannot compute — a\n * quantity derived from rows that are not a repository collection (a projection, a live read the\n * browser keeps current). The surface that owns the data publishes it with\n * `usePublishNotificationBadgeCount`; nothing is stored and nothing is recomputed server-side.\n /\nexport enum NotificationBadgeOperation {\n INCREMENT = 'increment',\n DECREMENT = 'decrement',\n SET = 'set',\n RESET = 'reset',\n}\n\n/\n How a badge's count is CALCULATED — the load-bearing distinction (R1).\n \n - `EVENT_COUNTER`: a stored counter mutated imperatively on domain events\n * (arrive → increment, seen → reset). Correct for \"unread messages\" style\n * badges. The count lives in the badge document.\n * - `DERIVED_QUERY`: the count is a LIVE aggregate over a resource collection\n * (`count(resourceType where filter, scoped)`), recomputed on that resource's\n * mutations. Correct for \"incomplete todos\" / \"unpaid invoices\" — quantities\n * derived from data that would DRIFT if tracked with a stored counter.\n * - `FRONTEND_PRODUCED`: the count is PUBLISHED by the frontend surface that already holds the\n * data it counts (`usePublishNotificationBadgeCount`), onto the same badge store a backend push\n * feeds. The backend neither stores nor recomputes it and skips it when seeding a connection.\n * Correct only where the backend cannot run the count — the rows are a projection rather than a\n * repository collection — so a `DERIVED_QUERY` over repository rows is never replaced by this.\n * The producer must be mounted wherever the navigation showing the badge is: for a menubar or\n * sidebar badge, a shell companion (`ApplicationMainProviderOptions.shellCompanions`), which the\n * signed-in shell mounts on every page. A late-mounting badge reads the last published count.\n /\nexport enum NotificationBadgeSourceKind {\n EVENT_COUNTER = 'event_counter',\n DERIVED_QUERY = 'derived_query',\n FRONTEND_PRODUCED = 'frontend_produced',\n}\n\n/* How the badge is presented. `NONE` = suppressed even when the count is > 0. /\nexport enum NotificationBadgeDisplayMode {\n /* A colored signal dot (\"≥ 1\"), no number. /\n DOT = 'dot',\n /* The numeric count (truncated at the display cap). /\n COUNT = 'count',\n /* Rendered as nothing (count still computed/available). /\n NONE = 'none',\n}\n\n/\n WHETHER / WHEN a badge draws attention. The LOOK of the pulse is theme-owned\n * (`UIBehaviorRecipe.motion.attention`), so a definition only declares intent.\n /\nexport enum NotificationBadgePulse {\n NONE = 'none',\n /* Transitional — pulse briefly when the count rises (recommended). /\n ON_INCREASE = 'on_increase',\n /* Persistent — pulse while the count is > 0. /\n WHILE_ACTIVE = 'while_active',\n}\n/* @wildo_source:part:end saas.models.notifications.badge-vocabularies /\n\n/* EVENT_COUNTER source — no extra config; the stored counter is the truth. /\nexport const NotificationBadgeEventCounterSourceSchema = z.object({\n kind: z.literal(NotificationBadgeSourceKind.EVENT_COUNTER),\n});\n\n/\n DERIVED_QUERY source — the count is `count(resourceType where filter)` with the\n * scope bound via `scopeField` (the FK field on the counted resource that equals\n * the badge's `scopeId`, e.g. `userId` for a USER_SELF badge). Recomputed by the\n * backend on any mutation of `resourceType` (see backend R5).\n /\nexport const NotificationBadgeDerivedQuerySourceSchema = z.object({\n kind: z.literal(NotificationBadgeSourceKind.DERIVED_QUERY),\n resourceType: z.string().min(1, { error: 'Derived-badge resourceType is required' }),\n filter: z.record(z.string(), z.unknown()),\n scopeField: z.string().min(1, { error: 'Derived-badge scopeField is required' }),\n});\n\n/\n FRONTEND_PRODUCED source — no extra config: the publishing surface names the badge by its key and\n * supplies the count, so there is nothing for a declaration to say about how it is computed.\n /\nexport const NotificationBadgeFrontendProducedSourceSchema = z.object({\n kind: z.literal(NotificationBadgeSourceKind.FRONTEND_PRODUCED),\n});\n\n/* Discriminated union over the calculation kinds. /\nexport const NotificationBadgeSourceSchema = z.discriminatedUnion('kind', [\n NotificationBadgeEventCounterSourceSchema,\n NotificationBadgeDerivedQuerySourceSchema,\n NotificationBadgeFrontendProducedSourceSchema,\n]);\n\n/\n Presentation declaration. `tone` reuses the design-system `IndicatorVariant`\n * (single source — the `Badge` component maps the same enum). `pulse` is a\n * trigger only; the theme owns the animation.\n /\nexport const NotificationBadgeDisplaySchema = z.object({\n mode: z.enum(NotificationBadgeDisplayMode).default(NotificationBadgeDisplayMode.COUNT),\n tone: z.enum(IndicatorVariant).default(IndicatorVariant.NEUTRAL),\n pulse: z.enum(NotificationBadgePulse).default(NotificationBadgePulse.NONE),\n});\n\n/\n Badge IDENTITY — the (identifier, scope) tuple shared by the declaration and\n * the persisted document. Kept separate so the stored badge doc does NOT absorb\n * declaration-only fields (`source` / `display`).\n /\nconst NotificationBadgeIdentitySchema = z.object({\n identifier: NotificationBadgeIdentifierSchema,\n scope: NotificationScopeSchema,\n});\n\n/\n Badge DEFINITION — the declaration app/framework authors register: identity +\n * how the count is calculated (`source`) + how it is presented (`display`).\n /\nexport const NotificationBadgeDefinitionSchema = NotificationBadgeIdentitySchema.extend({\n source: NotificationBadgeSourceSchema,\n display: NotificationBadgeDisplaySchema,\n});\n\nconst NotificationBadgeBaseSchema = NotificationBadgeIdentitySchema.extend({\n // A compact badge without its application-defined identifier is not interpretable: callers\n // could see a number but not what the number counts. Override the identity field here (rather\n // than decorating NotificationBadgeIdentitySchema) so persisted API rows gain summary metadata\n // while application-authored badge definitions remain a plain declaration schema.\n identifier: NotificationBadgeIdentifierSchema.isSummaryField(),\n // `isPrimaryKey` (composite: excludeFromCreate + isHidden + isUnique + isDBIndexed) —\n // the server generates `_id`, so it must NOT be required on the create DTO. Using bare\n // `.isDBIndexed()` here left `_id` create-required, which failed the dispatcher-driven\n // badge materialization (`buildNewBadge` supplies no `_id`).\n _id: z.string().min(1, { error: 'Notification badge ID is required' }).isPrimaryKey(),\n count: z.number().min(0, { error: 'Notification badge count must be greater than or equal to 0' }).isSummaryField(),\n createdAt: z.date().default(() => new Date()).isDBIndexed(),\n updatedAt: z.date().default(() => new Date()).isDBIndexed().isSummaryField(),\n});\n\nexport const NotificationBadgeOrganizationSchema = NotificationBadgeBaseSchema.extend({\n scope: z.literal(ResourcePrimaryScope.ORGANIZATIONS).describe('Always `organizations`: this count is shared by every member of the organization.'),\n organizationId: z.string().min(1, { error: 'Organization ID is required' }).isDBIndexed().isForeignKey(),\n});\n\nexport const NotificationBadgeUserSelfSchema = NotificationBadgeBaseSchema.extend({\n scope: z.literal(ResourcePrimaryScope.USER_SELF).describe('Always `user_self`: this count belongs to one user and only that user can read it.'),\n userId: z.string().min(1, { error: 'User ID is required' }).isDBIndexed().isForeignKey(),\n});\n\n/\n Discriminated union over the two surviving badge scopes (USER_SELF / ORGANIZATIONS).\n * The APPLICATION variant was dropped — see `NotificationScopeSchema` JSDoc above.\n /\nexport const NotificationBadgeSchema = z.discriminatedUnion('scope', [\n NotificationBadgeOrganizationSchema,\n NotificationBadgeUserSelfSchema,\n]);\n\nexport type NotificationBadgeDefinition = z.infer<typeof NotificationBadgeDefinitionSchema>;\nexport type NotificationBadgeIdentifier = z.infer<typeof NotificationBadgeIdentifierSchema>;\nexport type NotificationScope = z.infer<typeof NotificationScopeSchema>;\nexport type NotificationBadge = z.infer<typeof NotificationBadgeSchema>;\nexport type NotificationBadgeSource = z.infer<typeof NotificationBadgeSourceSchema>;\nexport type NotificationBadgeDerivedQuerySource = z.infer<typeof NotificationBadgeDerivedQuerySourceSchema>;\nexport type NotificationBadgeDisplay = z.infer<typeof NotificationBadgeDisplaySchema>;\n\n\n// ════════════════════════════════════════════════════════════════\n// Badge IDENTITY — the one place the key and reference formats live\n// ════════════════════════════════════════════════════════════════\n\n/\n A badge KEY: `<scope>:<identifier>` — the DEFINITION's identity, and the only thing that may be\n * used to look a definition up.\n \n ## Why the identifier alone is not an identity\n \n A definition is `(scope, identifier)`. Nothing ever stopped two definitions declaring the same\n * `identifier` at different scopes, and until this type existed every lookup matched on the\n * identifier alone — so the second definition was unreachable and silently shared the first's\n * count. The key makes both reachable and makes the collision that DOES matter (two definitions at\n * one scope and identifier) something a boot check can refuse.\n \n ## Why `scopeId` is NOT in the key\n \n `scopeId` says WHOSE badge — a user id, an organization id. It is per-viewer instance data that a\n * navigation declaration cannot possibly carry, and a browser session only ever receives pushes for\n * its own scope ids (the backend routes USER badges to that user's socket and ORG badges to that\n * organization's room). So the key is what a DECLARATION can name, and the reference below is what\n * an INSTANCE is addressed by.\n /\nexport type NotificationBadgeKey = string;\n\n/\n A badge REFERENCE: `<scope>:<scopeId>:<identifier>` — one badge ROW, on the wire.\n \n Carried by `WS_BadgeUpdatePayload.badgeReference` because emission needs the scopeId to route.\n * The browser reduces it to a {@link NotificationBadgeKey} on arrival via\n * {@link notificationBadgeKeyFromReference}, which is what makes the store's key and the navigation\n * item's lookup the same key rather than two conventions that agree by luck.\n /\nexport type NotificationBadgeReference = string;\n\n/* Build the DEFINITION-identity key from its parts. /\nexport function buildNotificationBadgeKey(\n scope: NotificationScope,\n identifier: NotificationBadgeIdentifier,\n): NotificationBadgeKey {\n return `${scope}${NOTIFICATION_BADGE_KEY_SEPARATOR}${identifier}`;\n}\n\n/\n The key of a definition (or of anything else carrying a badge identity, such as a persisted row).\n \n Takes the identity fields rather than the whole definition so a `NotificationBadge` row and a\n * `NotificationBadgeDefinition` resolve through the SAME function — a second copy for the row shape\n * is how the two come to disagree.\n /\nexport function notificationBadgeIdentityKey(\n identity: Pick<NotificationBadgeDefinition, 'scope' \| 'identifier'>,\n): NotificationBadgeKey {\n return buildNotificationBadgeKey(identity.scope, identity.identifier);\n}\n\n/\n Parse a key, returning `null` when it is not a well-formed key at a SUPPORTED scope.\n \n The scope check is not cosmetic: the APPLICATION variant was dropped in the polymorphism refactor\n * and no resource type backs it, so `application:foo` must fail here rather than reach a dispatch\n * that has no repository for it.\n /\nexport function parseNotificationBadgeKey(\n key: string,\n): { scope: NotificationScope; identifier: NotificationBadgeIdentifier } \| null {\n const parts = key.split(NOTIFICATION_BADGE_KEY_SEPARATOR);\n if (parts.length !== 2) return null;\n const [scope, identifier] = parts;\n if (!isSupportedNotificationBadgeScope(scope) \|\| identifier.length === 0) return null;\n return { scope, identifier };\n}\n\n/* Build the INSTANCE address carried on the wire. /\nexport function buildNotificationBadgeReference(\n scope: NotificationScope,\n scopeId: string,\n identifier: NotificationBadgeIdentifier,\n): NotificationBadgeReference {\n return `${scope}${NOTIFICATION_BADGE_KEY_SEPARATOR}${scopeId}${NOTIFICATION_BADGE_KEY_SEPARATOR}${identifier}`;\n}\n\n/* Parse a wire reference, returning `null` for a malformed one or an unsupported scope. /\nexport function parseNotificationBadgeReference(\n reference: string,\n): { scope: NotificationScope; scopeId: string; identifier: NotificationBadgeIdentifier } \| null {\n const parts = reference.split(NOTIFICATION_BADGE_KEY_SEPARATOR);\n if (parts.length !== 3) return null;\n const [scope, scopeId, identifier] = parts;\n if (!isSupportedNotificationBadgeScope(scope) \|\| scopeId.length === 0 \|\| identifier.length === 0) return null;\n return { scope, scopeId, identifier };\n}\n\n/\n Reduce a wire reference to the DEFINITION key it addresses — the one hop the browser badge store\n * takes, so that what it keys on is what a navigation item resolves against.\n /\nexport function notificationBadgeKeyFromReference(reference: string): NotificationBadgeKey \| null {\n const parsed = parseNotificationBadgeReference(reference);\n return parsed ? buildNotificationBadgeKey(parsed.scope, parsed.identifier) : null;\n}\n\n/* Whether a raw string names one of the two surviving badge scopes. /\nexport function isSupportedNotificationBadgeScope(scope: string): scope is NotificationScope {\n return scope === ResourcePrimaryScope.USER_SELF \|\| scope === ResourcePrimaryScope.ORGANIZATIONS;\n}\n\n// ════════════════════════════════════════════════════════════════\n// Declaration coherence — checked at CONFIGURATION time\n// ════════════════════════════════════════════════════════════════\n\n/\n Why a badge declaration is refused. A closed vocabulary with a named runtime source, so a\n * diagnostic can be branched on and each member can carry its own explanation.\n /\nexport enum NotificationBadgeDeclarationViolationReason {\n /\n Two definitions declare the same `(scope, identifier)`. Every lookup resolves the FIRST, so\n * the second is unreachable while silently sharing the first's count — the shape that made\n * identifier-only lookup unsafe in the first place. Two definitions at DIFFERENT scopes are\n * fine and are exactly what the key makes reachable.\n /\n DUPLICATE_DEFINITION_KEY = 'duplicate_definition_key',\n /\n An identifier contains the key separator, which would make its key and every reference built\n * from it parse into the wrong parts. Refused rather than escaped: a positional format with an\n * escaping rule is a format two implementations will eventually disagree about.\n /\n IDENTIFIER_CONTAINS_KEY_SEPARATOR = 'identifier_contains_key_separator',\n /* An operation declares a `badgeRef` that names no registered definition. /\n OPERATION_REF_UNRESOLVED = 'operation_ref_unresolved',\n /\n An operation declares a counter move (increment, reset, …) on a badge whose count is NOT a\n * stored counter — a `DERIVED_QUERY` recomputes its own and a `FRONTEND_PRODUCED` is published by\n * the browser. The move would write a stored row nothing renders, and a backend push of that row\n * would overwrite the real count. Only an `EVENT_COUNTER` is moved by operations.\n /\n OPERATION_MOVES_UNSTORED_COUNT = 'operation_moves_unstored_count',\n}\n\n/* One refused declaration, carrying enough to name the author's own file without re-deriving it. /\nexport interface NotificationBadgeDeclarationViolation {\n reason: NotificationBadgeDeclarationViolationReason;\n /* The badge key at issue — the definition's, or the unresolved `badgeRef` as authored. /\n badgeKey: string;\n /* Present when the violation belongs to a definition rather than to an operation declaration. /\n identifier?: NotificationBadgeIdentifier;\n /* Present when the violation belongs to an operation declaration. /\n resourceType?: string;\n /* Present when the violation belongs to an operation declaration. /\n operationIdentifier?: string;\n}\n\n/* Where an operation declared a badge reference — one row per authored `notificationBadgeOperations` entry. /\nexport interface NotificationBadgeOperationDeclarationSite {\n resourceType: string;\n operationIdentifier: string;\n badgeRef: string;\n}\n\n/\n The whole declaration-coherence check, as a pure function over what an application declared.\n \n Pure and shared on purpose: the backend registry runs it as a fail-closed boot gate and the\n * frontend launcher verifier reports it in development, and a second implementation is how the two\n * come to disagree about what a valid declaration is.\n \n It answers the question `derive-before-you-ask.md` asks — who owes this, and what says so. The\n * population is exactly the registered definitions plus every authored\n * `notificationBadgeOperations` entry; nothing is inferred and nothing is sampled.\n /\nexport function collectNotificationBadgeDeclarationViolations(\n definitions: readonly NotificationBadgeDefinition[],\n operationSites: readonly NotificationBadgeOperationDeclarationSite[] = [],\n): NotificationBadgeDeclarationViolation[] {\n const violations: NotificationBadgeDeclarationViolation[] = [];\n const seenKeys = new Set<NotificationBadgeKey>();\n const sourceKindByKey = new Map<NotificationBadgeKey, NotificationBadgeSourceKind>();\n\n for (const definition of definitions) {\n if (!NOTIFICATION_BADGE_IDENTIFIER_PATTERN.test(definition.identifier)) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.IDENTIFIER_CONTAINS_KEY_SEPARATOR,\n badgeKey: notificationBadgeIdentityKey(definition),\n identifier: definition.identifier,\n });\n // Still recorded below, so a malformed identifier declared twice is reported as both.\n }\n\n const key = notificationBadgeIdentityKey(definition);\n if (seenKeys.has(key)) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.DUPLICATE_DEFINITION_KEY,\n badgeKey: key,\n identifier: definition.identifier,\n });\n continue;\n }\n seenKeys.add(key);\n sourceKindByKey.set(key, definition.source.kind);\n }\n\n for (const site of operationSites) {\n if (!seenKeys.has(site.badgeRef)) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.OPERATION_REF_UNRESOLVED,\n badgeKey: site.badgeRef,\n resourceType: site.resourceType,\n operationIdentifier: site.operationIdentifier,\n });\n continue;\n }\n if (sourceKindByKey.get(site.badgeRef) !== NotificationBadgeSourceKind.EVENT_COUNTER) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.OPERATION_MOVES_UNSTORED_COUNT,\n badgeKey: site.badgeRef,\n resourceType: site.resourceType,\n operationIdentifier: site.operationIdentifier,\n });\n }\n }\n\n return violations;\n}\n\n/\n Index the registered definitions by key, so a dispatch resolves in one lookup rather than a scan.\n \n Built from the SAME key function the boot check uses, so a definition the boot check accepted is\n * a definition this map can serve.\n */\nexport function buildNotificationBadgeDefinitionIndex(\n definitions: readonly NotificationBadgeDefinition[],\n): ReadonlyMap<NotificationBadgeKey, NotificationBadgeDefinition> {\n const index = new Map<NotificationBadgeKey, NotificationBadgeDefinition>();\n for (const definition of definitions) {\n const key = notificationBadgeIdentityKey(definition);\n if (!index.has(key)) index.set(key, definition);\n }\n return index;\n}\n"]}
1	+ {"version":3,"file":"notification-badges.schemas.js","sourceRoot":"","sources":["../../../src/notifications/notification-badges.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAErB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,qCAAqC,GAAG,SAAS,CAAC;AAE/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC7C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;KAC9D,KAAK,CAAC,qCAAqC,EAAE;IAC1C,KAAK,EAAE,mDAAmD,gCAAgC,qEAAqE;CAClK,CAAC,CAAC;AAEP;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,oBAAoB,CAAC,SAAS;IAC9B,oBAAoB,CAAC,aAAa;CACrC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAN,IAAY,0BAKX;AALD,WAAY,0BAA0B;IAClC,qDAAuB,CAAA;IACvB,qDAAuB,CAAA;IACvB,yCAAW,CAAA;IACX,6CAAe,CAAA;AACnB,CAAC,EALW,0BAA0B,KAA1B,0BAA0B,QAKrC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,2BAIX;AAJD,WAAY,2BAA2B;IACnC,8DAA+B,CAAA;IAC/B,8DAA+B,CAAA;IAC/B,sEAAuC,CAAA;AAC3C,CAAC,EAJW,2BAA2B,KAA3B,2BAA2B,QAItC;AAED,kFAAkF;AAClF,MAAM,CAAN,IAAY,4BAOX;AAPD,WAAY,4BAA4B;IACpC,+CAA+C;IAC/C,2CAAW,CAAA;IACX,wDAAwD;IACxD,+CAAe,CAAA;IACf,4DAA4D;IAC5D,6CAAa,CAAA;AACjB,CAAC,EAPW,4BAA4B,KAA5B,4BAA4B,QAOvC;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,sBAMX;AAND,WAAY,sBAAsB;IAC9B,uCAAa,CAAA;IACb,uEAAuE;IACvE,qDAA2B,CAAA;IAC3B,iDAAiD;IACjD,uDAA6B,CAAA;AACjC,CAAC,EANW,sBAAsB,KAAtB,sBAAsB,QAMjC;AACD,0EAA0E;AAE1E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,aAAa,CAAC;CAC7D,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,aAAa,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IACpF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;CACnF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,iBAAiB,CAAC;CACjE,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtE,yCAAyC;IACzC,yCAAyC;IACzC,6CAA6C;CAChD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC;IACtF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC;CAC7E,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,iCAAiC;IAC7C,KAAK,EAAE,uBAAuB;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,+BAA+B,CAAC,MAAM,CAAC;IACpF,MAAM,EAAE,6BAA6B;IACrC,OAAO,EAAE,8BAA8B;CAC1C,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,+BAA+B,CAAC,MAAM,CAAC;IACvE,2FAA2F;IAC3F,8FAA8F;IAC9F,+FAA+F;IAC/F,kFAAkF;IAClF,UAAU,EAAE,iCAAiC,CAAC,cAAc,EAAE;IAC9D,sFAAsF;IACtF,uFAAuF;IACvF,uFAAuF;IACvF,6DAA6D;IAC7D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC,YAAY,EAAE;IACrF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,6DAA6D,EAAE,CAAC,CAAC,cAAc,EAAE;IACnH,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;IAC3D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;CAC/E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,2BAA2B,CAAC,MAAM,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,mFAAmF,CAAC;IAClJ,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE;CAC3G,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC,MAAM,CAAC;IAC9E,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,oFAAoF,CAAC;IAC/I,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE;CAC3F,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;IACjE,mCAAmC;IACnC,+BAA+B;CAClC,CAAC,CAAC;AA+CH,wDAAwD;AACxD,MAAM,UAAU,yBAAyB,CACrC,KAAwB,EACxB,UAAuC;IAEvC,OAAO,GAAG,KAAK,GAAG,gCAAgC,GAAG,UAAU,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CACxC,QAAmE;IAEnE,OAAO,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACrC,GAAW;IAEX,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IAClC,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,+BAA+B,CAC3C,KAAwB,EACxB,OAAe,EACf,UAAuC;IAEvC,OAAO,GAAG,KAAK,GAAG,gCAAgC,GAAG,OAAO,GAAG,gCAAgC,GAAG,UAAU,EAAE,CAAC;AACnH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,+BAA+B,CAC3C,SAAiB;IAEjB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IAC3C,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,SAAiB;IAC/D,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC3D,OAAO,KAAK,KAAK,oBAAoB,CAAC,SAAS,IAAI,KAAK,KAAK,oBAAoB,CAAC,aAAa,CAAC;AACpG,CAAC;AAED,mEAAmE;AACnE,wDAAwD;AACxD,mEAAmE;AAEnE;;;GAGG;AACH,MAAM,CAAN,IAAY,2CAuBX;AAvBD,WAAY,2CAA2C;IACnD;;;;;OAKG;IACH,oGAAqD,CAAA;IACrD;;;;OAIG;IACH,sHAAuE,CAAA;IACvE,8EAA8E;IAC9E,oGAAqD,CAAA;IACrD;;;;;OAKG;IACH,gHAAiE,CAAA;AACrE,CAAC,EAvBW,2CAA2C,KAA3C,2CAA2C,QAuBtD;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6CAA6C,CACzD,WAAmD,EACnD,iBAAuE,EAAE;IAEzE,MAAM,UAAU,GAA4C,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqD,CAAC;IAErF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,iCAAiC;gBACrF,QAAQ,EAAE,4BAA4B,CAAC,UAAU,CAAC;gBAClD,UAAU,EAAE,UAAU,CAAC,UAAU;aACpC,CAAC,CAAC;YACH,sFAAsF;QAC1F,CAAC;QAED,MAAM,GAAG,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,wBAAwB;gBAC5E,QAAQ,EAAE,GAAG;gBACb,UAAU,EAAE,UAAU,CAAC,UAAU;aACpC,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,wBAAwB;gBAC5E,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;aAChD,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,2BAA2B,CAAC,aAAa,EAAE,CAAC;YACnF,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,2CAA2C,CAAC,8BAA8B;gBAClF,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;aAChD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACjD,WAAmD;IAEnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqD,CAAC;IAC3E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { initZodDecorators } from '@wildo-ai/zod-decorators';\n\ninitZodDecorators(z);\n\nimport { IndicatorVariant } from '@wildo-ai/presets-components-models';\nimport { ResourcePrimaryScope } from \"../resources/resources.shared.schemas\";\n\n\n/*\n The one character that separates the parts of a badge KEY and a badge REFERENCE.\n \n Both formats are positional, so the separator may not appear inside a part or the parse is\n * ambiguous. `NotificationBadgeIdentifierSchema` refuses it in an identifier for exactly that\n * reason, and `collectNotificationBadgeDeclarationViolations` re-states the refusal at boot,\n * because a declaration object is authored in TypeScript and never `.parse()`d.\n /\nexport const NOTIFICATION_BADGE_KEY_SEPARATOR = ':';\n\n/* Any string that does not contain {@link NOTIFICATION_BADGE_KEY_SEPARATOR}. /\nexport const NOTIFICATION_BADGE_IDENTIFIER_PATTERN = /^[^:]+$/;\n\n/\n Notification badge identifier.\n \n The identifier is an open string because no canonical (core) identifier ships: the two\n * aspirational placeholders (`new messages` / `unpaid invoices`) were removed because nothing\n * produced them.\n \n The SURFACING is not missing. A navigation item declares `notificationBadgeRef` and the sidebar\n * and the menubar render it, and an application declares its own badges, so the open string is what an application\n * uses today. What is still absent is a FRAMEWORK-shipped identifier with a framework producer\n * behind it; when one lands, core identifiers come back as a `CoreNotificationBadgeIdentifiers`\n * enum unioned in here.\n \n Open, but not unconstrained: an identifier may not contain\n * {@link NOTIFICATION_BADGE_KEY_SEPARATOR}, because it is the LAST part of a badge key and of a\n * badge reference and both are positional. A definition object is authored in TypeScript and never\n * `.parse()`d, so this constraint is also re-stated as a boot check — see\n * {@link collectNotificationBadgeDeclarationViolations}.\n /\nexport const NotificationBadgeIdentifierSchema = z\n .string()\n .min(1, { error: 'Notification badge identifier is required' })\n .regex(NOTIFICATION_BADGE_IDENTIFIER_PATTERN, {\n error: `Notification badge identifier must not contain \"${NOTIFICATION_BADGE_KEY_SEPARATOR}\" — that character separates the parts of a badge key and reference`,\n });\n\n/\n Notification badge scope. Tightened to USER_SELF \| ORGANIZATIONS only.\n \n The APPLICATION variant was dropped in the polymorphism refactor\n * (`.cursor/plans/notification-badges-polymorphism-refactor.md`):\n * - No canonical badges were ever declared at APPLICATION scope (see\n * `notification-badges.core.definitions.ts`).\n * - The two surviving variants (USER + ORG) each own their own resource type\n * and MongoDB collection. Allowing APPLICATION here would let consumers\n * write a payload that no resource configuration / collection accepts.\n \n `WS_BadgeUpdatePayload` semantics are unchanged — the dispatcher in\n * `NotificationBadgeBackendService.emitBadgeUpdate` still routes USER badges to\n * `sendToUser` and ORG badges to `sendToOrganization`.\n /\nexport const NotificationScopeSchema = z.enum([\n ResourcePrimaryScope.USER_SELF,\n ResourcePrimaryScope.ORGANIZATIONS,\n]);\n\n/\n @wildo_source:part:start saas.models.notifications.badge-vocabularies facet:layer:shared facet:audience:app-developer\n \n The four vocabularies a badge definition picks from: how its count is CALCULATED, how it is\n * PRESENTED, whether it draws attention, and — for a stored counter — what an operation does to it.\n \n ⚠️ Choosing the source kind wrongly produces a number that DRIFTS. Reach for `EVENT_COUNTER`\n * only when the count is a fact the badge itself owns (\"unread messages\": arrive → increment, seen →\n * reset). For any quantity derived from data an operation could change by another route — incomplete\n * todos, unpaid invoices — use `DERIVED_QUERY`, which recomputes a live aggregate. A stored counter\n * on a derived quantity is right on the day it is written and wrong thereafter.\n \n An `EVENT_COUNTER` badge additionally needs `notificationBadgeOperations` declared on the\n * operations that move it; a `DERIVED_QUERY` badge needs none, because the recompute hangs off the\n * source resource's own mutations.\n \n `FRONTEND_PRODUCED` is for a count the FRONTEND already holds and the backend cannot compute — a\n * quantity derived from rows that are not a repository collection (a projection, a live read the\n * browser keeps current). The surface that owns the data publishes it with\n * `usePublishNotificationBadgeCount`; nothing is stored and nothing is recomputed server-side.\n /\nexport enum NotificationBadgeOperation {\n INCREMENT = 'increment',\n DECREMENT = 'decrement',\n SET = 'set',\n RESET = 'reset',\n}\n\n/\n How a badge's count is CALCULATED — the load-bearing distinction (R1).\n \n - `EVENT_COUNTER`: a stored counter mutated imperatively on domain events\n * (arrive → increment, seen → reset). Correct for \"unread messages\" style\n * badges. The count lives in the badge document.\n * - `DERIVED_QUERY`: the count is a LIVE aggregate over a resource collection\n * (`count(resourceType where filter, scoped)`), recomputed on that resource's\n * mutations. Correct for \"incomplete todos\" / \"unpaid invoices\" — quantities\n * derived from data that would DRIFT if tracked with a stored counter.\n * - `FRONTEND_PRODUCED`: the count is PUBLISHED by the frontend surface that already holds the\n * data it counts (`usePublishNotificationBadgeCount`), onto the same badge store a backend push\n * feeds. The backend neither stores nor recomputes it and skips it when seeding a connection.\n * Correct only where the backend cannot run the count — the rows are a projection rather than a\n * repository collection — so a `DERIVED_QUERY` over repository rows is never replaced by this.\n * The producer must be mounted wherever the navigation showing the badge is: for a menubar or\n * sidebar badge, a shell companion (`ApplicationMainProviderOptions.shellCompanions`), which the\n * signed-in shell mounts on every page. A late-mounting badge reads the last published count.\n /\nexport enum NotificationBadgeSourceKind {\n EVENT_COUNTER = 'event_counter',\n DERIVED_QUERY = 'derived_query',\n FRONTEND_PRODUCED = 'frontend_produced',\n}\n\n/* How the badge is presented. `NONE` = suppressed even when the count is > 0. /\nexport enum NotificationBadgeDisplayMode {\n /* A colored signal dot (\"≥ 1\"), no number. /\n DOT = 'dot',\n /* The numeric count (truncated at the display cap). /\n COUNT = 'count',\n /* Rendered as nothing (count still computed/available). /\n NONE = 'none',\n}\n\n/\n WHETHER / WHEN a badge draws attention. The LOOK of the pulse is theme-owned\n * (`UIBehaviorRecipe.motion.attention`), so a definition only declares intent.\n /\nexport enum NotificationBadgePulse {\n NONE = 'none',\n /* Transitional — pulse briefly when the count rises (recommended). /\n ON_INCREASE = 'on_increase',\n /* Persistent — pulse while the count is > 0. /\n WHILE_ACTIVE = 'while_active',\n}\n/* @wildo_source:part:end saas.models.notifications.badge-vocabularies /\n\n/* EVENT_COUNTER source — no extra config; the stored counter is the truth. /\nexport const NotificationBadgeEventCounterSourceSchema = z.object({\n kind: z.literal(NotificationBadgeSourceKind.EVENT_COUNTER),\n});\n\n/\n DERIVED_QUERY source — the count is `count(resourceType where filter)` with the\n * scope bound via `scopeField` (the FK field on the counted resource that equals\n * the badge's `scopeId`, e.g. `userId` for a USER_SELF badge). Recomputed by the\n * backend on any mutation of `resourceType` (see backend R5).\n /\nexport const NotificationBadgeDerivedQuerySourceSchema = z.object({\n kind: z.literal(NotificationBadgeSourceKind.DERIVED_QUERY),\n resourceType: z.string().min(1, { error: 'Derived-badge resourceType is required' }),\n filter: z.record(z.string(), z.unknown()),\n scopeField: z.string().min(1, { error: 'Derived-badge scopeField is required' }),\n});\n\n/\n FRONTEND_PRODUCED source — no extra config: the publishing surface names the badge by its key and\n * supplies the count, so there is nothing for a declaration to say about how it is computed.\n /\nexport const NotificationBadgeFrontendProducedSourceSchema = z.object({\n kind: z.literal(NotificationBadgeSourceKind.FRONTEND_PRODUCED),\n});\n\n/* Discriminated union over the calculation kinds. /\nexport const NotificationBadgeSourceSchema = z.discriminatedUnion('kind', [\n NotificationBadgeEventCounterSourceSchema,\n NotificationBadgeDerivedQuerySourceSchema,\n NotificationBadgeFrontendProducedSourceSchema,\n]);\n\n/\n Presentation declaration. `tone` reuses the design-system `IndicatorVariant`\n * (single source — the `Badge` component maps the same enum). `pulse` is a\n * trigger only; the theme owns the animation.\n /\nexport const NotificationBadgeDisplaySchema = z.object({\n mode: z.enum(NotificationBadgeDisplayMode).default(NotificationBadgeDisplayMode.COUNT),\n tone: z.enum(IndicatorVariant).default(IndicatorVariant.NEUTRAL),\n pulse: z.enum(NotificationBadgePulse).default(NotificationBadgePulse.NONE),\n});\n\n/\n Badge IDENTITY — the (identifier, scope) tuple shared by the declaration and\n * the persisted document. Kept separate so the stored badge doc does NOT absorb\n * declaration-only fields (`source` / `display`).\n /\nconst NotificationBadgeIdentitySchema = z.object({\n identifier: NotificationBadgeIdentifierSchema,\n scope: NotificationScopeSchema,\n});\n\n/\n Badge DEFINITION — the declaration app/framework authors register: identity +\n * how the count is calculated (`source`) + how it is presented (`display`).\n /\nexport const NotificationBadgeDefinitionSchema = NotificationBadgeIdentitySchema.extend({\n source: NotificationBadgeSourceSchema,\n display: NotificationBadgeDisplaySchema,\n});\n\nconst NotificationBadgeBaseSchema = NotificationBadgeIdentitySchema.extend({\n // A compact badge without its application-defined identifier is not interpretable: callers\n // could see a number but not what the number counts. Override the identity field here (rather\n // than decorating NotificationBadgeIdentitySchema) so persisted API rows gain summary metadata\n // while application-authored badge definitions remain a plain declaration schema.\n identifier: NotificationBadgeIdentifierSchema.isSummaryField(),\n // `isPrimaryKey` (composite: excludeFromCreate + isHidden + isUnique + isDBIndexed) —\n // the server generates `_id`, so it must NOT be required on the create DTO. Using bare\n // `.isDBIndexed()` here left `_id` create-required, which failed the dispatcher-driven\n // badge materialization (`buildNewBadge` supplies no `_id`).\n _id: z.string().min(1, { error: 'Notification badge ID is required' }).isPrimaryKey(),\n count: z.number().min(0, { error: 'Notification badge count must be greater than or equal to 0' }).isSummaryField(),\n createdAt: z.date().default(() => new Date()).isDBIndexed(),\n updatedAt: z.date().default(() => new Date()).isDBIndexed().isSummaryField(),\n});\n\nexport const NotificationBadgeOrganizationSchema = NotificationBadgeBaseSchema.extend({\n scope: z.literal(ResourcePrimaryScope.ORGANIZATIONS).describe('Always `organizations`: this count is shared by every member of the organization.'),\n organizationId: z.string().min(1, { error: 'Organization ID is required' }).isDBIndexed().isForeignKey(),\n});\n\nexport const NotificationBadgeUserSelfSchema = NotificationBadgeBaseSchema.extend({\n scope: z.literal(ResourcePrimaryScope.USER_SELF).describe('Always `user_self`: this count belongs to one user and only that user can read it.'),\n userId: z.string().min(1, { error: 'User ID is required' }).isDBIndexed().isForeignKey(),\n});\n\n/\n Discriminated union over the two surviving badge scopes (USER_SELF / ORGANIZATIONS).\n * The APPLICATION variant was dropped — see `NotificationScopeSchema` JSDoc above.\n /\nexport const NotificationBadgeSchema = z.discriminatedUnion('scope', [\n NotificationBadgeOrganizationSchema,\n NotificationBadgeUserSelfSchema,\n]);\n\nexport type NotificationBadgeDefinition = z.infer<typeof NotificationBadgeDefinitionSchema>;\nexport type NotificationBadgeIdentifier = z.infer<typeof NotificationBadgeIdentifierSchema>;\nexport type NotificationScope = z.infer<typeof NotificationScopeSchema>;\nexport type NotificationBadge = z.infer<typeof NotificationBadgeSchema>;\nexport type NotificationBadgeSource = z.infer<typeof NotificationBadgeSourceSchema>;\nexport type NotificationBadgeDerivedQuerySource = z.infer<typeof NotificationBadgeDerivedQuerySourceSchema>;\nexport type NotificationBadgeDisplay = z.infer<typeof NotificationBadgeDisplaySchema>;\n\n\n// ════════════════════════════════════════════════════════════════\n// Badge IDENTITY — the one place the key and reference formats live\n// ════════════════════════════════════════════════════════════════\n\n/\n A badge KEY: `<scope>:<identifier>` — the DEFINITION's identity, and the only thing that may be\n * used to look a definition up.\n \n ## Why the identifier alone is not an identity\n \n A definition is `(scope, identifier)`. Nothing ever stopped two definitions declaring the same\n * `identifier` at different scopes, and until this type existed every lookup matched on the\n * identifier alone — so the second definition was unreachable and silently shared the first's\n * count. The key makes both reachable and makes the collision that DOES matter (two definitions at\n * one scope and identifier) something a boot check can refuse.\n \n ## Why `scopeId` is NOT in the key\n \n `scopeId` says WHOSE badge — a user id, an organization id. It is per-viewer instance data that a\n * navigation declaration cannot possibly carry, and a browser session only ever receives pushes for\n * its own scope ids (the backend routes USER badges to that user's socket and ORG badges to that\n * organization's room). So the key is what a DECLARATION can name, and the reference below is what\n * an INSTANCE is addressed by.\n /\nexport type NotificationBadgeKey = string;\n\n/\n A badge REFERENCE: `<scope>:<scopeId>:<identifier>` — one badge ROW, on the wire.\n \n Carried by `WS_BadgeUpdatePayload.badgeReference` because emission needs the scopeId to route.\n * The browser reduces it to a {@link NotificationBadgeKey} on arrival via\n * {@link notificationBadgeKeyFromReference}, which is what makes the store's key and the navigation\n * item's lookup the same key rather than two conventions that agree by luck.\n /\nexport type NotificationBadgeReference = string;\n\n/* Build the DEFINITION-identity key from its parts. /\nexport function buildNotificationBadgeKey(\n scope: NotificationScope,\n identifier: NotificationBadgeIdentifier,\n): NotificationBadgeKey {\n return `${scope}${NOTIFICATION_BADGE_KEY_SEPARATOR}${identifier}`;\n}\n\n/\n The key of a definition (or of anything else carrying a badge identity, such as a persisted row).\n \n Takes the identity fields rather than the whole definition so a `NotificationBadge` row and a\n * `NotificationBadgeDefinition` resolve through the SAME function — a second copy for the row shape\n * is how the two come to disagree.\n /\nexport function notificationBadgeIdentityKey(\n identity: Pick<NotificationBadgeDefinition, 'scope' \| 'identifier'>,\n): NotificationBadgeKey {\n return buildNotificationBadgeKey(identity.scope, identity.identifier);\n}\n\n/\n Parse a key, returning `null` when it is not a well-formed key at a SUPPORTED scope.\n \n The scope check is not cosmetic: the APPLICATION variant was dropped in the polymorphism refactor\n * and no resource type backs it, so `application:foo` must fail here rather than reach a dispatch\n * that has no repository for it.\n /\nexport function parseNotificationBadgeKey(\n key: string,\n): { scope: NotificationScope; identifier: NotificationBadgeIdentifier } \| null {\n const parts = key.split(NOTIFICATION_BADGE_KEY_SEPARATOR);\n if (parts.length !== 2) return null;\n const [scope, identifier] = parts;\n if (!isSupportedNotificationBadgeScope(scope) \|\| identifier.length === 0) return null;\n return { scope, identifier };\n}\n\n/* Build the INSTANCE address carried on the wire. /\nexport function buildNotificationBadgeReference(\n scope: NotificationScope,\n scopeId: string,\n identifier: NotificationBadgeIdentifier,\n): NotificationBadgeReference {\n return `${scope}${NOTIFICATION_BADGE_KEY_SEPARATOR}${scopeId}${NOTIFICATION_BADGE_KEY_SEPARATOR}${identifier}`;\n}\n\n/* Parse a wire reference, returning `null` for a malformed one or an unsupported scope. /\nexport function parseNotificationBadgeReference(\n reference: string,\n): { scope: NotificationScope; scopeId: string; identifier: NotificationBadgeIdentifier } \| null {\n const parts = reference.split(NOTIFICATION_BADGE_KEY_SEPARATOR);\n if (parts.length !== 3) return null;\n const [scope, scopeId, identifier] = parts;\n if (!isSupportedNotificationBadgeScope(scope) \|\| scopeId.length === 0 \|\| identifier.length === 0) return null;\n return { scope, scopeId, identifier };\n}\n\n/\n Reduce a wire reference to the DEFINITION key it addresses — the one hop the browser badge store\n * takes, so that what it keys on is what a navigation item resolves against.\n /\nexport function notificationBadgeKeyFromReference(reference: string): NotificationBadgeKey \| null {\n const parsed = parseNotificationBadgeReference(reference);\n return parsed ? buildNotificationBadgeKey(parsed.scope, parsed.identifier) : null;\n}\n\n/* Whether a raw string names one of the two surviving badge scopes. /\nexport function isSupportedNotificationBadgeScope(scope: string): scope is NotificationScope {\n return scope === ResourcePrimaryScope.USER_SELF \|\| scope === ResourcePrimaryScope.ORGANIZATIONS;\n}\n\n// ════════════════════════════════════════════════════════════════\n// Declaration coherence — checked at CONFIGURATION time\n// ════════════════════════════════════════════════════════════════\n\n/\n Why a badge declaration is refused. A closed vocabulary with a named runtime source, so a\n * diagnostic can be branched on and each member can carry its own explanation.\n /\nexport enum NotificationBadgeDeclarationViolationReason {\n /\n Two definitions declare the same `(scope, identifier)`. Every lookup resolves the FIRST, so\n * the second is unreachable while silently sharing the first's count — the shape that made\n * identifier-only lookup unsafe in the first place. Two definitions at DIFFERENT scopes are\n * fine and are exactly what the key makes reachable.\n /\n DUPLICATE_DEFINITION_KEY = 'duplicate_definition_key',\n /\n An identifier contains the key separator, which would make its key and every reference built\n * from it parse into the wrong parts. Refused rather than escaped: a positional format with an\n * escaping rule is a format two implementations will eventually disagree about.\n /\n IDENTIFIER_CONTAINS_KEY_SEPARATOR = 'identifier_contains_key_separator',\n /* An operation declares a `badgeRef` that names no registered definition. /\n OPERATION_REF_UNRESOLVED = 'operation_ref_unresolved',\n /\n An operation declares a counter move (increment, reset, …) on a badge whose count is NOT a\n * stored counter — a `DERIVED_QUERY` recomputes its own and a `FRONTEND_PRODUCED` is published by\n * the browser. The move would write a stored row nothing renders, and a backend push of that row\n * would overwrite the real count. Only an `EVENT_COUNTER` is moved by operations.\n /\n OPERATION_MOVES_UNSTORED_COUNT = 'operation_moves_unstored_count',\n}\n\n/* One refused declaration, carrying enough to name the author's own file without re-deriving it. /\nexport interface NotificationBadgeDeclarationViolation {\n reason: NotificationBadgeDeclarationViolationReason;\n /* The badge key at issue — the definition's, or the unresolved `badgeRef` as authored. /\n badgeKey: string;\n /* Present when the violation belongs to a definition rather than to an operation declaration. /\n identifier?: NotificationBadgeIdentifier;\n /* Present when the violation belongs to an operation declaration. /\n resourceType?: string;\n /* Present when the violation belongs to an operation declaration. /\n operationIdentifier?: string;\n}\n\n/* Where an operation declared a badge reference — one row per authored `notificationBadgeOperations` entry. /\nexport interface NotificationBadgeOperationDeclarationSite {\n resourceType: string;\n operationIdentifier: string;\n badgeRef: string;\n}\n\n/\n The whole declaration-coherence check, as a pure function over what an application declared.\n \n Pure and shared on purpose: the backend registry runs it as a fail-closed boot gate and the\n * frontend launcher verifier reports it in development, and a second implementation is how the two\n * come to disagree about what a valid declaration is.\n \n It answers the question `derive-before-you-ask.md` asks — who owes this, and what says so. The\n * population is exactly the registered definitions plus every authored\n * `notificationBadgeOperations` entry; nothing is inferred and nothing is sampled.\n /\nexport function collectNotificationBadgeDeclarationViolations(\n definitions: readonly NotificationBadgeDefinition[],\n operationSites: readonly NotificationBadgeOperationDeclarationSite[] = [],\n): NotificationBadgeDeclarationViolation[] {\n const violations: NotificationBadgeDeclarationViolation[] = [];\n const seenKeys = new Set<NotificationBadgeKey>();\n const sourceKindByKey = new Map<NotificationBadgeKey, NotificationBadgeSourceKind>();\n\n for (const definition of definitions) {\n if (!NOTIFICATION_BADGE_IDENTIFIER_PATTERN.test(definition.identifier)) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.IDENTIFIER_CONTAINS_KEY_SEPARATOR,\n badgeKey: notificationBadgeIdentityKey(definition),\n identifier: definition.identifier,\n });\n // Still recorded below, so a malformed identifier declared twice is reported as both.\n }\n\n const key = notificationBadgeIdentityKey(definition);\n if (seenKeys.has(key)) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.DUPLICATE_DEFINITION_KEY,\n badgeKey: key,\n identifier: definition.identifier,\n });\n continue;\n }\n seenKeys.add(key);\n sourceKindByKey.set(key, definition.source.kind);\n }\n\n for (const site of operationSites) {\n if (!seenKeys.has(site.badgeRef)) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.OPERATION_REF_UNRESOLVED,\n badgeKey: site.badgeRef,\n resourceType: site.resourceType,\n operationIdentifier: site.operationIdentifier,\n });\n continue;\n }\n if (sourceKindByKey.get(site.badgeRef) !== NotificationBadgeSourceKind.EVENT_COUNTER) {\n violations.push({\n reason: NotificationBadgeDeclarationViolationReason.OPERATION_MOVES_UNSTORED_COUNT,\n badgeKey: site.badgeRef,\n resourceType: site.resourceType,\n operationIdentifier: site.operationIdentifier,\n });\n }\n }\n\n return violations;\n}\n\n/\n Index the registered definitions by key, so a dispatch resolves in one lookup rather than a scan.\n \n Built from the SAME key function the boot check uses, so a definition the boot check accepted is\n * a definition this map can serve.\n */\nexport function buildNotificationBadgeDefinitionIndex(\n definitions: readonly NotificationBadgeDefinition[],\n): ReadonlyMap<NotificationBadgeKey, NotificationBadgeDefinition> {\n const index = new Map<NotificationBadgeKey, NotificationBadgeDefinition>();\n for (const definition of definitions) {\n const key = notificationBadgeIdentityKey(definition);\n if (!index.has(key)) index.set(key, definition);\n }\n return index;\n}\n"]}

package/dist/esm/notifications/notification-badges.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notification-badges.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../../~~src/notifications/notification-badges.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,EACpC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,qBAAqB,EAGtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAGL,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAOrF,KAAK,oCAAoC,GACrC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,iEAAiE,GAC5E,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CACtB,SAAS,EACT,oCAAoC,EACpC,OAAO,+BAA+B,CA0GtC,CAAC;AAIH,KAAK,4CAA4C,GAC7C,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,yEAAyE,GACpF,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CACtB,SAAS,EACT,4CAA4C,EAC5C,OAAO,mCAAmC,CAoF1C,CAAC"}
1	+ {"version":3,"file":"notification-badges.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/notifications/notification-badges.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,EACpC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,qBAAqB,EAGtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAGL,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAOrF,KAAK,oCAAoC,GACrC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,iEAAiE,GAC5E,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CACtB,SAAS,EACT,oCAAoC,EACpC,OAAO,+BAA+B,CA0GtC,CAAC;AAIH,KAAK,4CAA4C,GAC7C,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,yEAAyE,GACpF,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CACtB,SAAS,EACT,4CAA4C,EAC5C,OAAO,mCAAmC,CAoF1C,CAAC"}

package/dist/esm/notifications/notification-badges.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notification-badges.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/notifications/notification-badges.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAWhG,MAAM,CAAC,MAAM,iEAAiE,GAAG,CAC/E,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,+BAA+B;IAC3C,kBAAkB,EAAE,gBAAgB,CAAC,wBAAwB;IAC7D,uBAAuB,EACrB,kCAAkC,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;IAC/E,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,+JAA+J;IAC/J,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,OAAO,EAAE;IACvE,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,OAAO,EAAE;IAG3E;;;;;;;;;;;;;;OAcG;IAEH,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,uEAAuE;oBACvE,+CAA+C;oBAC/C,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,4EAA4E;oBAC5E,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,gFAAgF;QAChF,mEAAmE;QACnE,oEAAoE;QACpE,8EAA8E;QAC9E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,yEAAyE,GAAG,CACvF,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,mCAAmC;IAC/C,kBAAkB,EAAE,gBAAgB,CAAC,gCAAgC;IACrE,uBAAuB,EACrB,kCAAkC,CAAC,gBAAgB,CAAC,gCAAgC,CAAC;IACvF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,oEAAoE;oBACpE,sEAAsE;oBACtE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,gFAAgF;QAChF,mEAAmE;QACnE,oEAAoE;QACpE,8EAA8E;QAC9E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/*\n Notification Badges Shared Resource Configurations\n \n Polymorphic dual-scope (USER + ORGANIZATION). Two completely separate factories,\n * each registered against its own `ResourceType` member and backed by its own\n * MongoDB collection. We follow the lifecycle-state / guidance-state pattern\n * (two side-by-side factories) rather than `createPolymorphicResourceConfigurations`\n * because the variants have:\n * - Different schemas (`NotificationBadgeUserSelfSchema` vs\n * `NotificationBadgeOrganizationSchema`),\n * - Different role surfaces (`APP_USER` reads on the USER variant vs\n * `ORG_MEMBER` reads on the ORG variant), and\n * - Different parent-scope anchors (USERS vs ORGANIZATIONS).\n \n Both variants:\n * - Operations: READ / LIST / CREATE / UPDATE (no DELETE — badges are reset to 0).\n * - `isSystemResource: true` — internal infrastructure, accessed via\n * `NotificationBadgeBackendService` (the public API is `increment`,\n * `decrement`, `set`, `reset` — never raw repository calls from app code).\n \n Role + variant assignments per D-2 of `.cursor/plans/notification-badges-polymorphism-refactor.md`\n * (mirrors the lifecycle-state precedent: READ/LIST exposed as `API_CALL` so\n * the user can read their own badges through the framework's HTTP surface;\n * CREATE/UPDATE stay `REPOSITORY_ONLY` because badge writes are exclusively\n * driven by `NotificationBadgeBackendService` from internal dispatchers):\n * - USER variant:\n * READ / LIST → `[CORE_APP_ROLES.APP_USER]` via `API_CALL`\n * CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`\n * - ORG variant:\n * READ / LIST → `[CORE_ORG_ROLES.ORG_MEMBER]` via `API_CALL`\n * (any org member can see aggregate org badges; matches\n * the lifecycle-state pattern's symmetric ORG_MEMBER read)\n * CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`\n \n @see notification-badges.schemas.ts — discriminated union at the data layer\n * @see .cursor/plans/notification-badges-polymorphism-refactor.md\n /\n\nimport {\n NotificationBadgeUserSelfSchema,\n NotificationBadgeOrganizationSchema,\n} from './notification-badges.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport {\n CoreResourceOperation,\n CoreResourceType,\n coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n ResourceOperationRiskLevel,\n ResourceOperationVariantType,\n ResourceRelationship,\n} from '../resources/resources.shared.schemas';\nimport { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// ─── USER NOTIFICATION BADGES ─────────────────────────────────────────────────\n\ntype UserNotificationBadgesCoreOperations =\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\nexport const userNotificationBadgesResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<\n undefined,\n UserNotificationBadgesCoreOperations,\n typeof NotificationBadgeUserSelfSchema\n> => createResourceConfiguration_Initialization<\n undefined,\n UserNotificationBadgesCoreOperations,\n typeof NotificationBadgeUserSelfSchema\n>({\n mainSchema: NotificationBadgeUserSelfSchema,\n resourceIdentifier: CoreResourceType.USER_NOTIFICATION_BADGES,\n resourceFieldIdentifier:\n coreResourceShared_FieldIdentifier[CoreResourceType.USER_NOTIFICATION_BADGES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n /* Subject-export disclosure. The subject's own data. Secrets and backend-only values are withheld by the export's security floor regardless of this grant. /\n systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },\n portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.DERIVED },\n\n\n /\n * NO `retentionPolicy`, so a subject erasure DESTROYS the badge rows (#1569, decided by Paul\n * 2026-09-24).\n \n It declared `RETAIN_ONLY` — \"a badge holds nothing to scrub\" — and since #1279 an erasure takes a\n * silent edge's treatment from that declaration, so an erased person's unread counters stayed live and\n * frozen. A counter of someone's unread items has no retention value once that someone is erased, so\n * the USERS → USER_NOTIFICATION_BADGES edge AUTHORS `strategy: DELETE`, and re-adding a retention mode\n * here would be refused as a contradiction. Only the USER_SELF badge is in the subject-erasure\n * population; the organization badge below is tenant-scoped and was never affected.\n \n And so no `dataSubjectPolicy` either: the factory pairs the two in both directions, because only a\n * retention-governed resource can be passed to an erasure as its SUBJECT. This row is never the\n * subject of an erasure; it is a child an erasure destroys.\n */\n\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal\n // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade\n // must physically remove the row when its owning user/org is deleted. Without it\n // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n // The framework's user-self filter (USER_SELF primary scope) restricts\n // results to the authenticated user's own row.\n roles: [CORE_APP_ROLES.APP_USER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_USER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n // System-internal: only the dispatcher / batch services drive badge writes.\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so badge rows are physically removed when the owning\n // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).\n // Without a DELETE op the cascade (deleteChildrenImmediate) throws\n // ErrorType.CONFIGURATION on any parent that still has a badge row.\n // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n },\n});\n\n// ─── ORGANIZATION NOTIFICATION BADGES ─────────────────────────────────────────\n\ntype OrganizationNotificationBadgesCoreOperations =\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\nexport const organizationNotificationBadgesResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<\n undefined,\n OrganizationNotificationBadgesCoreOperations,\n typeof NotificationBadgeOrganizationSchema\n> => createResourceConfiguration_Initialization<\n undefined,\n OrganizationNotificationBadgesCoreOperations,\n typeof NotificationBadgeOrganizationSchema\n>({\n mainSchema: NotificationBadgeOrganizationSchema,\n resourceIdentifier: CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES,\n resourceFieldIdentifier:\n coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal\n // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade\n // must physically remove the row when its owning user/org is deleted. Without it\n // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n // Any org member can see aggregate org badges (e.g. unpaid invoices\n // count surfaced in the navbar). Matches the lifecycle-state pattern.\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so badge rows are physically removed when the owning\n // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).\n // Without a DELETE op the cascade (deleteChildrenImmediate) throws\n // ErrorType.CONFIGURATION on any parent that still has a badge row.\n // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n },\n});\n"]}
1	+ {"version":3,"file":"notification-badges.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/notifications/notification-badges.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAWhG,MAAM,CAAC,MAAM,iEAAiE,GAAG,CAC/E,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,+BAA+B;IAC3C,kBAAkB,EAAE,gBAAgB,CAAC,wBAAwB;IAC7D,uBAAuB,EACrB,kCAAkC,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;IAC/E,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,+JAA+J;IAC/J,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,OAAO,EAAE;IACvE,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,OAAO,EAAE;IAG3E;;;;;;;;;;;;;;OAcG;IAEH,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,uEAAuE;oBACvE,+CAA+C;oBAC/C,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,4EAA4E;oBAC5E,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,gFAAgF;QAChF,mEAAmE;QACnE,oEAAoE;QACpE,8EAA8E;QAC9E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,yEAAyE,GAAG,CACvF,sBAA8C,EAK9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,mCAAmC;IAC/C,kBAAkB,EAAE,gBAAgB,CAAC,gCAAgC;IACrE,uBAAuB,EACrB,kCAAkC,CAAC,gBAAgB,CAAC,gCAAgC,CAAC;IACvF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,iFAAiF;QACjF,mFAAmF;QACnF,iFAAiF;QACjF,iFAAiF;QACjF,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,oEAAoE;oBACpE,sEAAsE;oBACtE,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBAClC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,yEAAyE;QACzE,8EAA8E;QAC9E,gFAAgF;QAChF,mEAAmE;QACnE,oEAAoE;QACpE,8EAA8E;QAC9E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/*\n Notification Badges Shared Resource Configurations\n \n Polymorphic dual-scope (USER + ORGANIZATION). Two completely separate factories,\n * each registered against its own `ResourceType` member and backed by its own\n * MongoDB collection. We follow the lifecycle-state / guidance-state pattern\n * (two side-by-side factories) rather than `createPolymorphicResourceConfigurations`\n * because the variants have:\n * - Different schemas (`NotificationBadgeUserSelfSchema` vs\n * `NotificationBadgeOrganizationSchema`),\n * - Different role surfaces (`APP_USER` reads on the USER variant vs\n * `ORG_MEMBER` reads on the ORG variant), and\n * - Different parent-scope anchors (USERS vs ORGANIZATIONS).\n \n Both variants:\n * - Operations: READ / LIST / CREATE / UPDATE (no DELETE — badges are reset to 0).\n * - `isSystemResource: true` — internal infrastructure, accessed via\n * `NotificationBadgeBackendService` (the public API is `increment`,\n * `decrement`, `set`, `reset` — never raw repository calls from app code).\n \n Role + variant assignments per D-2 of `.cursor/plans/notification-badges-polymorphism-refactor.md`\n * (mirrors the lifecycle-state precedent: READ/LIST exposed as `API_CALL` so\n * the user can read their own badges through the framework's HTTP surface;\n * CREATE/UPDATE stay `REPOSITORY_ONLY` because badge writes are exclusively\n * driven by `NotificationBadgeBackendService` from internal dispatchers):\n * - USER variant:\n * READ / LIST → `[CORE_APP_ROLES.APP_USER]` via `API_CALL`\n * CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`\n * - ORG variant:\n * READ / LIST → `[CORE_ORG_ROLES.ORG_MEMBER]` via `API_CALL`\n * (any org member can see aggregate org badges; matches\n * the lifecycle-state pattern's symmetric ORG_MEMBER read)\n * CREATE/UPDATE → `[CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN]` via `REPOSITORY_ONLY`\n \n @see notification-badges.schemas.ts — discriminated union at the data layer\n * @see .cursor/plans/notification-badges-polymorphism-refactor.md\n /\n\nimport {\n NotificationBadgeUserSelfSchema,\n NotificationBadgeOrganizationSchema,\n} from './notification-badges.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport {\n CoreResourceOperation,\n CoreResourceType,\n coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n ResourceOperationRiskLevel,\n ResourceOperationVariantType,\n ResourceRelationship,\n} from '../resources/resources.shared.schemas';\nimport { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\n\n// ─── USER NOTIFICATION BADGES ─────────────────────────────────────────────────\n\ntype UserNotificationBadgesCoreOperations =\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\nexport const userNotificationBadgesResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<\n undefined,\n UserNotificationBadgesCoreOperations,\n typeof NotificationBadgeUserSelfSchema\n> => createResourceConfiguration_Initialization<\n undefined,\n UserNotificationBadgesCoreOperations,\n typeof NotificationBadgeUserSelfSchema\n>({\n mainSchema: NotificationBadgeUserSelfSchema,\n resourceIdentifier: CoreResourceType.USER_NOTIFICATION_BADGES,\n resourceFieldIdentifier:\n coreResourceShared_FieldIdentifier[CoreResourceType.USER_NOTIFICATION_BADGES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n /* Subject-export disclosure. The subject's own data. Secrets and backend-only values are withheld by the export's security floor regardless of this grant. /\n systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.ALLOWED },\n portabilityPolicy: { defaultProvenance: DataPortabilityProvenance.DERIVED },\n\n\n /\n * NO `retentionPolicy`, so a subject erasure DESTROYS the badge rows (#1569, decided by Paul\n * 2026-09-24).\n \n It declared `RETAIN_ONLY` — \"a badge holds nothing to scrub\" — and since #1279 an erasure takes a\n * silent edge's treatment from that declaration, so an erased person's unread counters stayed live and\n * frozen. A counter of someone's unread items has no retention value once that someone is erased, so\n * the USERS → USER_NOTIFICATION_BADGES edge AUTHORS `strategy: DELETE`, and re-adding a retention mode\n * here would be refused as a contradiction. Only the USER_SELF badge is in the subject-erasure\n * population; the organization badge below is tenant-scoped and was never affected.\n \n And so no `dataSubjectPolicy` either: the factory pairs the two in both directions, because only a\n * retention-governed resource can be passed to an erasure as its SUBJECT. This row is never the\n * subject of an erasure; it is a child an erasure destroys.\n */\n\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal\n // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade\n // must physically remove the row when its owning user/org is deleted. Without it\n // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n // The framework's user-self filter (USER_SELF primary scope) restricts\n // results to the authenticated user's own row.\n roles: [CORE_APP_ROLES.APP_USER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_USER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n // System-internal: only the dispatcher / batch services drive badge writes.\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so badge rows are physically removed when the owning\n // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).\n // Without a DELETE op the cascade (deleteChildrenImmediate) throws\n // ErrorType.CONFIGURATION on any parent that still has a badge row.\n // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n },\n});\n\n// ─── ORGANIZATION NOTIFICATION BADGES ─────────────────────────────────────────\n\ntype OrganizationNotificationBadgesCoreOperations =\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\nexport const organizationNotificationBadgesResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<\n undefined,\n OrganizationNotificationBadgesCoreOperations,\n typeof NotificationBadgeOrganizationSchema\n> => createResourceConfiguration_Initialization<\n undefined,\n OrganizationNotificationBadgesCoreOperations,\n typeof NotificationBadgeOrganizationSchema\n>({\n mainSchema: NotificationBadgeOrganizationSchema,\n resourceIdentifier: CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES,\n resourceFieldIdentifier:\n coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATION_NOTIFICATION_BADGES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n coreOperations: [\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.CREATE,\n CoreResourceOperation.UPDATE,\n // DELETE is REPOSITORY_ONLY (no HTTP route): badges are reset to 0 during normal\n // use (via UPDATE), never API-deleted — but the composition onParentDelete cascade\n // must physically remove the row when its owning user/org is deleted. Without it\n // the cascade throws ErrorType.CONFIGURATION on any parent that has a badge row.\n CoreResourceOperation.DELETE,\n ],\n operationsConfiguration: {\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n // Any org member can see aggregate org badges (e.g. unpaid invoices\n // count surfaced in the navbar). Matches the lifecycle-state pattern.\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.LIST]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_ORG_ROLES.ORG_MEMBER],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n // onParentDelete cascade so badge rows are physically removed when the owning\n // user/org is deleted (badges are reset to 0 in normal use, never API-deleted).\n // Without a DELETE op the cascade (deleteChildrenImmediate) throws\n // ErrorType.CONFIGURATION on any parent that still has a badge row.\n // Super-admin/HIGH: badge writes are system-internal (dispatcher/batch only).\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n },\n});\n"]}

package/dist/esm/notifications/notifications.shared.schemas.d.ts CHANGED Viewed

@@ -216,9 +216,11 @@ export type FrontendDisplayHints = z.infer<typeof FrontendDisplayHintsSchema>;
  * dropped, and were removed. The framework's SMS transport serves authentication's one-time codes, not
  * resource notifications.
  *
- * For an EMAIL, create the template directory the reference names. The startup validator resolves
- * every declared reference through the configured locale chain before the application takes traffic,
- * and prints the exact directory to create when one is missing.
+ * For an EMAIL, create the template the derived reference names: one per operation variant that declares a
+ * `variantKey`, since the reference carries it. The startup validator resolves every declared reference through
+ * the configured locale chain before the application takes traffic and names the folder to create when one is
+ * missing. It REFUSES to start only for an operation with `tokenGeneration` (the email carries the token its flow
+ * needs); for any other operation it WARNS and starts, and that email is silently never sent.
  *
  * ## The recipient's preferences are honoured, and three things override them
  *

package/dist/esm/notifications/notifications.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"notifications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/notifications/notifications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E;;;;;;;;;GASG;AACH,oBAAY,2BAA2B;IACrC,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,iBAAiB,sBAAsB;CACxC;AAED,oBAAY,qBAAqB;IAC/B,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB;AAED,yFAAyF;AACzF,eAAO,MAAM,6BAA6B,+CAAsC,CAAC;AAGjF,iHAAiH;AACjH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,oBAAY,0BAA0B;IAClC,yBAAyB,8BAA8B;IACvD,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,oBAAoB,yBAAyB;IAC7C,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,wBAAwB,6BAA6B;IACrD,YAAY,iBAAiB;IAC7B,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;IAC7C,4BAA4B,iCAAiC;IAC7D,2BAA2B,gCAAgC;IAC3D,qBAAqB,0BAA0B;IAC/C,SAAS,cAAc;IACvB,YAAY,iBAAiB;IAC7B,eAAe,oBAAoB;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yDAAyD,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAe7F;AACD,+DAA+D;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,8CAAqC,CAAC;AAQ/E,iEAAiE;AACjE;;;;;;;;;;;GAWG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AACD,+DAA+D;AAE/D;;;;GAIG;AACH,oBAAY,wBAAwB;IAClC,SAAS,cAAc;IACvB,GAAG,QAAQ;CACZ;AAMD,eAAO,MAAM,qCAAqC;;iBAEhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,kCAAkC;;;iBAI7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,0BAA0B;;;;;;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,eAAO,MAAM,qCAAqC;;;;;;wDAWnC;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;iBAiCjB,CAAC;AAIH,2FAA2F;AAC3F,eAAO,MAAM,sCAAsC;;;;;;wDArEpC;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;iBAkEjB,CAAC;AAEH,oEAAoE;AACpE,eAAO,MAAM,0CAA0C;;;;;;wDApGxC;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;iBAuEjB,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gDAAgD;;;;;;wDA1H9C;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;;iBAiGjB,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC;;;;;;wDA5I9B;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;;wDA/BJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;wDA/BJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;;mBA4Kf,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,oFAAoF;AAEpF;;GAEG;AAIH,oBAAY,oBAAoB;IAC5B,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB;AAEH,oBAAY,0BAA0B;IAClC,oBAAoB,yBAAyB;IAC7C,mBAAmB,wBAAwB;CAC9C;AAED;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,8CAAqC,CAAC;AAE/E,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}
1	+ {"version":3,"file":"notifications.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/notifications/notifications.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E;;;;;;;;;GASG;AACH,oBAAY,2BAA2B;IACrC,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,iBAAiB,sBAAsB;CACxC;AAED,oBAAY,qBAAqB;IAC/B,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB;AAED,yFAAyF;AACzF,eAAO,MAAM,6BAA6B,+CAAsC,CAAC;AAGjF,iHAAiH;AACjH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,oBAAY,0BAA0B;IAClC,yBAAyB,8BAA8B;IACvD,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,oBAAoB,yBAAyB;IAC7C,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,wBAAwB,6BAA6B;IACrD,YAAY,iBAAiB;IAC7B,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;IAC7C,4BAA4B,iCAAiC;IAC7D,2BAA2B,gCAAgC;IAC3D,qBAAqB,0BAA0B;IAC/C,SAAS,cAAc;IACvB,YAAY,iBAAiB;IAC7B,eAAe,oBAAoB;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yDAAyD,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGjG;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAe7F;AACD,+DAA+D;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,8CAAqC,CAAC;AAQ/E,iEAAiE;AACjE;;;;;;;;;;;GAWG;AACH,oBAAY,sBAAsB;IAChC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AACD,+DAA+D;AAE/D;;;;GAIG;AACH,oBAAY,wBAAwB;IAClC,SAAS,cAAc;IACvB,GAAG,QAAQ;CACZ;AAMD,eAAO,MAAM,qCAAqC;;iBAEhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,kCAAkC;;;iBAI7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,0BAA0B;;;;;;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,eAAO,MAAM,qCAAqC;;;;;;wDAWnC;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;iBAiCjB,CAAC;AAIH,2FAA2F;AAC3F,eAAO,MAAM,sCAAsC;;;;;;wDArEpC;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;iBAkEjB,CAAC;AAEH,oEAAoE;AACpE,eAAO,MAAM,0CAA0C;;;;;;wDApGxC;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;iBAuEjB,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gDAAgD;;;;;;wDA1H9C;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;;iBAiGjB,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC;;;;;;wDA5I9B;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;;wDA/BJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;wDA/BJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE,WALL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,MAAM,EAAE;kDAqBL;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO,WALJ;QACP,aAAa,EAAE,GAAG,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC;QACd,aAAa,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;SAAE,CAAC;QAC/E,YAAY,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpF,KAAK,OAAO;;;;;;;;;;;mBA4Kf,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,oFAAoF;AAEpF;;GAEG;AAIH,oBAAY,oBAAoB;IAC5B,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB;AAEH,oBAAY,0BAA0B;IAClC,oBAAoB,yBAAyB;IAC7C,mBAAmB,wBAAwB;CAC9C;AAED;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,8CAAqC,CAAC;AAE/E,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/esm/notifications/notifications.shared.schemas.js CHANGED Viewed

@@ -241,9 +241,11 @@ export const FrontendDisplayHintsSchema = z.object({
  * dropped, and were removed. The framework's SMS transport serves authentication's one-time codes, not
  * resource notifications.
  *
- * For an EMAIL, create the template directory the reference names. The startup validator resolves
- * every declared reference through the configured locale chain before the application takes traffic,
- * and prints the exact directory to create when one is missing.
+ * For an EMAIL, create the template the derived reference names: one per operation variant that declares a
+ * `variantKey`, since the reference carries it. The startup validator resolves every declared reference through
+ * the configured locale chain before the application takes traffic and names the folder to create when one is
+ * missing. It REFUSES to start only for an operation with `tokenGeneration` (the email carries the token its flow
+ * needs); for any other operation it WARNS and starts, and that email is silently never sent.
  *
  * ## The recipient's preferences are honoured, and three things override them
  *