npm - @wildo-ai/saas-models - Versions diffs - 1.1.8 → 1.1.10 - Mend

@wildo-ai/saas-models 1.1.8 → 1.1.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (951) hide show

package/dist/esm/public-runtime/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG;;;;;;GAMG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,GAC9B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,2GAA2G;AAC3G,OAAO,EACL,oBAAoB,EACpB,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,GAI1B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;GAKG;AACH,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,GAI7B,MAAM,gDAAgD,CAAC;AAExD;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,EACtB,+BAA+B,EAC/B,oCAAoC,GAGvC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GASpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oDAAoD,EACpD,4CAA4C,EAC5C,sCAAsC,EACtC,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,GAM/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,GAE1C,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GAMxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D","sourcesContent":["/*\n @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n \n @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n \n Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n \n Why this subpath exists:\n * The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n * module load (line 3) and re-exports the entire decorator-framework-bound\n * schema graph (~150 schemas, transitively pulls\n * `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n * `reflect-metadata`). Browser bundles that need only a handful of stable\n * atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n * enums) should NOT pay that cost.\n \n This subpath exposes that minimal stable surface, sourced from\n * side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n * K-4):\n \n - Cross-Frontend Handoff + Token Exchange DTO atoms\n * (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n * `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n * `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n * `TokenExchangeResponseSchema`,\n * `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n * `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n * schemas were added\n * in cross-app-jwt-propagation.md Step 5 — every receiver of an\n * AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n * a client-bundle target, so the response shape MUST live here too\n * (not just in the heavy backend schemas barrel).\n * - Frontend-kind enum\n * (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n * — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n * Consumed by website discovery, scaffolding, CSP config, and\n * companion services that need to introspect a service's runtime\n * kind without booting the full schema graph. The atom file's\n * file-level JSDoc is the canonical home for the kind-by-kind\n * rationale AND the locked \"no native variants\" design decision\n * — read that file before authoring any AppFrontendType-driven\n * conditional.\n * - Canonical HTTP header keys (`../requests/header-keys.shared`):\n * `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n * whole; per K-2 splitting it would itself violate DRY).\n * - Locale enums (re-exported transparently from\n * `@wildo-ai/presets-components-models/public-runtime`):\n * `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n * (`@wildo-ai/saas-models/public-runtime`) — the\n * `presets-components-models/public-runtime` subpath is an internal\n * seam (saas-models-public-runtime.md K-6).\n \n @wildo-boundary (saas-models-public-runtime.md K-3)\n * - This file and every file it transitively imports MUST NOT import from:\n * `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n * the `@wildo-ai/presets-components-models` ROOT barrel (only the\n * `/public-runtime` subpath of that package is allowed), `inversify`,\n * `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n * `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n * - DO NOT import from this package's ROOT barrel (`../index`) — that\n * barrel runs `initZodDecorators()` and pulls the full schema tree.\n * - Allowed imports: `zod` (peer dep, browser-safe), files inside\n * `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n * plan, and the\n * `@wildo-ai/presets-components-models/public-runtime` subpath.\n \n @wildo-bundle-budget\n * The output of this barrel + transitive imports MUST stay free of:\n * `initZodDecorators()` invocation, `reflect-metadata`, the full\n * `authentication.shared.dto.schemas.ts` web of types\n * (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n * `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n * snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n * after importing this module and asserts the prototype is unchanged\n * (proof that `initZodDecorators` did NOT run).\n \n @wildo-dry-contract\n * Every atom exposed here lives in EXACTLY one source file. The original\n * home (e.g. `authentication.shared.dto.schemas.ts`,\n * `localization/language.shared.schemas.ts`) re-exports from the same atom\n * so existing root-barrel consumers keep working unchanged. Adding a new\n * atom: split it out of its current heavy file FIRST (matching K-2\n * protocol), add a re-export at the original home, then add the import\n * here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n /\n\nexport {\n CrossFrontendHandoffErrorCode,\n CrossFrontendHandoffRequestSchema,\n CrossFrontendHandoffResponseSchema,\n TokenExchangeRequestSchema,\n TokenExchangeResponseSchema,\n type CrossFrontendHandoffRequest,\n type CrossFrontendHandoffResponse,\n type TokenExchangeRequest,\n type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/\n The single same-origin redirect predicate.\n \n On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n /\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\n/\n The caught-value describers, for code that must stay light.\n \n The backend provider loader is held to a measured module graph and imports only light doors; the\n * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The\n * source atom imports nothing at runtime, so it adds nothing to the budget.\n /\nexport {\n describeCaughtError,\n describeCaughtErrorWithKind,\n} from '../errors/caught-error-description.shared.utils';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/* The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. /\nexport {\n ProofOfWorkAlgorithm,\n SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH,\n SUBMISSION_CHALLENGE_ACTION_PATTERN,\n SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH,\n SubmissionChallengeAction,\n SubmissionChallengeRefusalCode,\n SubmissionChallengeResponseKind,\n encodeSubmissionChallengeResponse,\n hashProofOfWorkCandidate,\n isSubmissionChallengeActionName,\n solveProofOfWorkChallenge,\n type ProofOfWorkChallenge,\n type ResourceOperationSubmissionChallenge,\n type SubmissionChallengeResponse,\n} from '../security/submission-challenge/submission-challenge.shared';\n\n/\n Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) imports only the import-free\n * submission-challenge atom (itself on this seam), so it adds nothing to the\n * decorator-free bundle budget.\n /\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\n/\n A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering\n * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both\n * atoms are import-free; one rendering, two doors (#1518's \"[object Object]\" fix, #1591).\n /\nexport { describeThrownValue } from '../errors/thrown-value-description.shared.utils';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/\n The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with\n * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the\n * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and\n * `BillingInterval` live.\n /\nexport {\n ProductPriceDisclosure,\n ProductAvailability,\n PublicPricingRecurrenceUnit,\n PublicPricingAmountBasis,\n publicPricingAmountDecimal,\n type PublicPricingPrice,\n type PublicPricingPlan,\n type PublicPricingCatalog,\n} from '../billing/public-pricing-catalog.shared.atoms';\n\n/\n Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n /\nexport {\n ALL_ZOD_ISSUES,\n DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n ZOD_ROOT_ISSUE_PATH_LABEL,\n formatZodIssue,\n formatZodIssues,\n summarizeZodIssues,\n type FormattableZodIssue,\n type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n AvailableLanguage,\n TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/\n Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n /\nexport {\n buildProviderDisplayNameLabelKey,\n defineProviderMetadata,\n ENGINE_PROVIDER_ORIGIN,\n ProviderCatalogueProvenanceSchema,\n ProviderCatalogueSource,\n ProviderIdentitySchema,\n ProviderMetadataSchema,\n ProviderOriginKind,\n ProviderOriginSchema,\n ProviderTier,\n type DefineProviderMetadataInput,\n type ProviderCatalogueProvenance,\n type ProviderIdentity,\n type ProviderMetadata,\n type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/\n A provider's compliance primitives, reachable from the FRONTEND facets.\n \n `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n \n `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and\n * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the\n * facts its evidence establishes, with their members.\n /\nexport {\n ProviderDeploymentModel,\n ProviderComplianceDetermination,\n ProviderComplianceFact,\n ProviderComplianceProfileSchema,\n establishedProviderComplianceProfile,\n type EstablishedProviderComplianceProfile,\n type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/\n Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in\n * the browser bundle and stored by the application. Carved into an import-free atom\n * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that\n * mirrored the string literals would be a second copy that drifts the day a purpose is added.\n /\nexport {\n ANONYMOUS_CONSENT_RECORD_METHOD,\n ANONYMOUS_CONSENT_RECORD_PATH,\n applicationAskedConsentPurposes,\n CONSENT_PURPOSES,\n ConsentPurpose,\n hasGrantedConsentPurposes,\n missingConsentPurposes,\n normalizeConsentPurposes,\n WEBSITE_VISITOR_CONSENT_STORAGE_KEY,\n} from '../compliance/privacy/consent-purposes.shared';\n\n/\n The tier rule (#328) is enforced by every facet's `composeProviders`,\n three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n /\nexport {\n assertProviderTierCoherence,\n engineSlotsBoundByCapabilities,\n findProviderTierViolations,\n type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/\n Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n \n Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n /\nexport {\n FileStorageAccepted,\n FrontendProviderEntrySchema,\n FrontendProvidersBlockSchema,\n type FrontendProviderEntry,\n type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/\n Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n \n These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n /\nexport {\n normalizeProviderFrontendCspFootprint,\n PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS,\n ProviderAddressLookupDeclarationSchema,\n ProviderAddressLookupPlaceIdRetention,\n ProviderFrontendComponentDescriptorSchema,\n ProviderFrontendComponentDescriptorsSchema,\n ProviderFrontendCspDerivedOriginSchema,\n ProviderFrontendCspFootprintSchema,\n ProviderFrontendCspOriginBucket,\n ProviderFrontendScriptCrossOrigin,\n ProviderFrontendScriptDeclarationSchema,\n ProviderFrontendSdkDescriptorSchema,\n ProviderFrontendSelectionDelivery,\n type ProviderAddressLookupDeclaration,\n type ProviderFrontendComponentDescriptor,\n type ProviderFrontendComponentDescriptors,\n type ProviderFrontendCspDerivedOrigin,\n type ProviderFrontendCspFootprint,\n type ProviderFrontendCspFootprintDeclaration,\n type ProviderFrontendScriptDeclaration,\n type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/\n The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n /\nexport type {\n ProviderFilePickerConstraints,\n ProviderFilePickerProps,\n ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/\n How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n /\nexport {\n defineFrontendPublicConfigSchema,\n FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n FrontendProviderPublicConfigError,\n FrontendProviderPublicConfigRefusal,\n FrontendPublicConfigValueKind,\n FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH,\n assertFrontendProvidersServeOnlyDeclaredKeys,\n assertNoSecretValueInFrontendProviders,\n findSecretValuesInFrontendProviders,\n overlayFrontendProviderPublicConfig,\n readDeclaredPublicConfigKeys,\n type FrontendPublicConfigKeySpec,\n type FrontendPublicConfigSchema,\n type FrontendPublicConfigSecretMatch,\n type FrontendPublicConfigSecretValue,\n type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/\n The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n /\nexport {\n admissibleFrontendPublicConfigKeys,\n FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS,\n FrontendFilePickerPublicConfigSchema,\n frontendCapabilityPublicConfigKeys,\n layerProviderFilePickerConstraints,\n partitionFrontendCapabilityPublicConfig,\n type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/\n The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n /\nexport {\n isFrontendErrorMonitoringSink,\n isFrontendProductAnalyticsSink,\n isFrontendCaptchaSink,\n type FrontendCaptchaSink,\n type FrontendCrashReport,\n type FrontendErrorMonitoringSink,\n type FrontendProductAnalyticsEvent,\n type FrontendProductAnalyticsSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/\n Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n /\nexport {\n BUILTIN_PROVIDER_CAPABILITY,\n type BuiltinProviderCapability,\n type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n BUILTIN_PROVIDER_PROTOCOL,\n type BuiltinProviderProtocol,\n type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/\n Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n \n Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n /\nexport {\n composeProviderRegistry,\n ProviderCompositionConflictError,\n type ProviderRegistryFragment,\n type ComposedProviderRegistry,\n type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/\n Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a\n * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.\n \n ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`\n \n They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of\n * 41 import sites of the meta-workflows subpath, 7 take nothing but these primitives, and all\n * seven are `saas-specifications/src/technical-documentation/.schemas.ts` — a browser-bound tier\n whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven\n * regexes.\n \n No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`\n * and nothing else, so it is already the zero-dependency atom K-2 asks for — the\n * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its\n * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1\n * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.\n \n The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is\n * a separate change from making it reachable on the bundle-safe seam, and doing both at once would\n * hide one in the other.\n /\nexport {\n MetaWorkflow_Sha256DigestSchema,\n MetaWorkflow_NamespacedRefSchema,\n MetaWorkflow_OpaqueRefSchema,\n MetaWorkflow_PositiveVersionSchema,\n MetaWorkflow_PositiveOrdinalSchema,\n MetaWorkflow_NonNegativeRevisionSchema,\n MetaWorkflow_LowercaseUuidV4Schema,\n MetaWorkflow_IsoDateTimeSchema,\n MetaWorkflow_NonNegativeFiniteNumberSchema,\n metaWorkflowValuesAreUnique,\n metaWorkflowValuesAreLexicallySorted,\n compareMetaWorkflowCanonicalStrings,\n} from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';\n\n/* @wildo_source:part:end saas.public-runtime.contract */\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG;;;;;;GAMG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,GAC9B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,2GAA2G;AAC3G,OAAO,EACL,oBAAoB,EACpB,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,GAI1B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;GAKG;AACH,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,GAI7B,MAAM,gDAAgD,CAAC;AAExD;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,EACtB,+BAA+B,EAC/B,oCAAoC,GAGvC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,uBAAuB,EACvB,6BAA6B,EAC7B,oCAAoC,EACpC,sCAAsC,GAEzC,MAAM,0DAA0D,CAAC;AAElE;;;;GAIG;AACH,OAAO,EACH,oCAAoC,EACpC,+CAA+C,EAC/C,eAAe,GAElB,MAAM,sDAAsD,CAAC;AAE9D;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GASpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oDAAoD,EACpD,4CAA4C,EAC5C,sCAAsC,EACtC,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,GAM/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,GAE1C,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GAMxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D","sourcesContent":["/*\n @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n \n @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n \n Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n \n Why this subpath exists:\n * The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n * module load (line 3) and re-exports the entire decorator-framework-bound\n * schema graph (~150 schemas, transitively pulls\n * `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n * `reflect-metadata`). Browser bundles that need only a handful of stable\n * atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n * enums) should NOT pay that cost.\n \n This subpath exposes that minimal stable surface, sourced from\n * side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n * K-4):\n \n - Cross-Frontend Handoff + Token Exchange DTO atoms\n * (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n * `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n * `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n * `TokenExchangeResponseSchema`,\n * `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n * `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n * schemas were added\n * in cross-app-jwt-propagation.md Step 5 — every receiver of an\n * AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n * a client-bundle target, so the response shape MUST live here too\n * (not just in the heavy backend schemas barrel).\n * - Frontend-kind enum\n * (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n * — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n * Consumed by website discovery, scaffolding, CSP config, and\n * companion services that need to introspect a service's runtime\n * kind without booting the full schema graph. The atom file's\n * file-level JSDoc is the canonical home for the kind-by-kind\n * rationale AND the locked \"no native variants\" design decision\n * — read that file before authoring any AppFrontendType-driven\n * conditional.\n * - Canonical HTTP header keys (`../requests/header-keys.shared`):\n * `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n * whole; per K-2 splitting it would itself violate DRY).\n * - Locale enums (re-exported transparently from\n * `@wildo-ai/presets-components-models/public-runtime`):\n * `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n * (`@wildo-ai/saas-models/public-runtime`) — the\n * `presets-components-models/public-runtime` subpath is an internal\n * seam (saas-models-public-runtime.md K-6).\n \n @wildo-boundary (saas-models-public-runtime.md K-3)\n * - This file and every file it transitively imports MUST NOT import from:\n * `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n * the `@wildo-ai/presets-components-models` ROOT barrel (only the\n * `/public-runtime` subpath of that package is allowed), `inversify`,\n * `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n * `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n * - DO NOT import from this package's ROOT barrel (`../index`) — that\n * barrel runs `initZodDecorators()` and pulls the full schema tree.\n * - Allowed imports: `zod` (peer dep, browser-safe), files inside\n * `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n * plan, and the\n * `@wildo-ai/presets-components-models/public-runtime` subpath.\n \n @wildo-bundle-budget\n * The output of this barrel + transitive imports MUST stay free of:\n * `initZodDecorators()` invocation, `reflect-metadata`, the full\n * `authentication.shared.dto.schemas.ts` web of types\n * (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n * `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n * snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n * after importing this module and asserts the prototype is unchanged\n * (proof that `initZodDecorators` did NOT run).\n \n @wildo-dry-contract\n * Every atom exposed here lives in EXACTLY one source file. The original\n * home (e.g. `authentication.shared.dto.schemas.ts`,\n * `localization/language.shared.schemas.ts`) re-exports from the same atom\n * so existing root-barrel consumers keep working unchanged. Adding a new\n * atom: split it out of its current heavy file FIRST (matching K-2\n * protocol), add a re-export at the original home, then add the import\n * here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n /\n\nexport {\n CrossFrontendHandoffErrorCode,\n CrossFrontendHandoffRequestSchema,\n CrossFrontendHandoffResponseSchema,\n TokenExchangeRequestSchema,\n TokenExchangeResponseSchema,\n type CrossFrontendHandoffRequest,\n type CrossFrontendHandoffResponse,\n type TokenExchangeRequest,\n type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/\n The single same-origin redirect predicate.\n \n On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n /\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\n/\n The caught-value describers, for code that must stay light.\n \n The backend provider loader is held to a measured module graph and imports only light doors; the\n * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The\n * source atom imports nothing at runtime, so it adds nothing to the budget.\n /\nexport {\n describeCaughtError,\n describeCaughtErrorWithKind,\n} from '../errors/caught-error-description.shared.utils';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/* The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. /\nexport {\n ProofOfWorkAlgorithm,\n SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH,\n SUBMISSION_CHALLENGE_ACTION_PATTERN,\n SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH,\n SubmissionChallengeAction,\n SubmissionChallengeRefusalCode,\n SubmissionChallengeResponseKind,\n encodeSubmissionChallengeResponse,\n hashProofOfWorkCandidate,\n isSubmissionChallengeActionName,\n solveProofOfWorkChallenge,\n type ProofOfWorkChallenge,\n type ResourceOperationSubmissionChallenge,\n type SubmissionChallengeResponse,\n} from '../security/submission-challenge/submission-challenge.shared';\n\n/\n Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) imports only the import-free\n * submission-challenge atom (itself on this seam), so it adds nothing to the\n * decorator-free bundle budget.\n /\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\n/\n A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering\n * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both\n * atoms are import-free; one rendering, two doors (#1518's \"[object Object]\" fix, #1591).\n /\nexport { describeThrownValue } from '../errors/thrown-value-description.shared.utils';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/\n The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with\n * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the\n * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and\n * `BillingInterval` live.\n /\nexport {\n ProductPriceDisclosure,\n ProductAvailability,\n PublicPricingRecurrenceUnit,\n PublicPricingAmountBasis,\n publicPricingAmountDecimal,\n type PublicPricingPrice,\n type PublicPricingPlan,\n type PublicPricingCatalog,\n} from '../billing/public-pricing-catalog.shared.atoms';\n\n/\n Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n /\nexport {\n ALL_ZOD_ISSUES,\n DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n ZOD_ROOT_ISSUE_PATH_LABEL,\n formatZodIssue,\n formatZodIssues,\n summarizeZodIssues,\n type FormattableZodIssue,\n type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n AvailableLanguage,\n TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/\n Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n /\nexport {\n buildProviderDisplayNameLabelKey,\n defineProviderMetadata,\n ENGINE_PROVIDER_ORIGIN,\n ProviderCatalogueProvenanceSchema,\n ProviderCatalogueSource,\n ProviderIdentitySchema,\n ProviderMetadataSchema,\n ProviderOriginKind,\n ProviderOriginSchema,\n ProviderTier,\n type DefineProviderMetadataInput,\n type ProviderCatalogueProvenance,\n type ProviderIdentity,\n type ProviderMetadata,\n type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/\n A provider's compliance primitives, reachable from the FRONTEND facets.\n \n `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n \n `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and\n * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the\n * facts its evidence establishes, with their members.\n /\nexport {\n ProviderDeploymentModel,\n ProviderComplianceDetermination,\n ProviderComplianceFact,\n ProviderComplianceProfileSchema,\n establishedProviderComplianceProfile,\n type EstablishedProviderComplianceProfile,\n type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/\n Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in\n * the browser bundle and stored by the application. Carved into an import-free atom\n * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that\n * mirrored the string literals would be a second copy that drifts the day a purpose is added.\n /\nexport {\n ANONYMOUS_CONSENT_RECORD_METHOD,\n ANONYMOUS_CONSENT_RECORD_PATH,\n applicationAskedConsentPurposes,\n CONSENT_PURPOSES,\n ConsentPurpose,\n hasGrantedConsentPurposes,\n missingConsentPurposes,\n normalizeConsentPurposes,\n WEBSITE_VISITOR_CONSENT_STORAGE_KEY,\n} from '../compliance/privacy/consent-purposes.shared';\n\n/\n The governed documents an application serves as public pages, and their paths (#2588) — read by the marketing\n * website's footer, which links the privacy notice and the terms on the application's origin. Carved into an\n * import-free atom (`public-governed-documents.shared.ts`) so the footer and the router that mounts those pages name\n * them from ONE source: a website copying `'/privacy'` would be a second copy that drifts.\n /\nexport {\n LEGAL_NOTICE_ROUTE_PATH,\n PUBLIC_GOVERNED_DOCUMENT_REFS,\n PUBLIC_GOVERNED_DOCUMENT_ROUTE_PATHS,\n resolvePublicGovernedDocumentRoutePath,\n type PublicGovernedDocumentRefName,\n} from '../compliance/documents/public-governed-documents.shared';\n\n/\n Whether the operator owes a legal notice (imprint), derived from where it is established (#2588). The marketing\n * website's build reads it to decide whether the footer links the application's `/legal-notice` page, from the same\n * function the application's projection uses. An import-free atom over the import-free jurisdiction table.\n /\nexport {\n E_COMMERCE_DIRECTIVE_EEA_EFTA_STATES,\n E_COMMERCE_INFORMATION_DUTY_OTHER_JURISDICTIONS,\n legalNoticeOwed,\n type LegalNoticeEstablishment,\n} from '../compliance/privacy/legal-notice-obligation.shared';\n\n/\n The tier rule (#328) is enforced by every facet's `composeProviders`,\n three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n /\nexport {\n assertProviderTierCoherence,\n engineSlotsBoundByCapabilities,\n findProviderTierViolations,\n type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/\n Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n \n Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n /\nexport {\n FileStorageAccepted,\n FrontendProviderEntrySchema,\n FrontendProvidersBlockSchema,\n type FrontendProviderEntry,\n type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/\n Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n \n These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n /\nexport {\n normalizeProviderFrontendCspFootprint,\n PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS,\n ProviderAddressLookupDeclarationSchema,\n ProviderAddressLookupPlaceIdRetention,\n ProviderFrontendComponentDescriptorSchema,\n ProviderFrontendComponentDescriptorsSchema,\n ProviderFrontendCspDerivedOriginSchema,\n ProviderFrontendCspFootprintSchema,\n ProviderFrontendCspOriginBucket,\n ProviderFrontendScriptCrossOrigin,\n ProviderFrontendScriptDeclarationSchema,\n ProviderFrontendSdkDescriptorSchema,\n ProviderFrontendSelectionDelivery,\n type ProviderAddressLookupDeclaration,\n type ProviderFrontendComponentDescriptor,\n type ProviderFrontendComponentDescriptors,\n type ProviderFrontendCspDerivedOrigin,\n type ProviderFrontendCspFootprint,\n type ProviderFrontendCspFootprintDeclaration,\n type ProviderFrontendScriptDeclaration,\n type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/\n The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n /\nexport type {\n ProviderFilePickerConstraints,\n ProviderFilePickerProps,\n ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/\n How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n /\nexport {\n defineFrontendPublicConfigSchema,\n FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n FrontendProviderPublicConfigError,\n FrontendProviderPublicConfigRefusal,\n FrontendPublicConfigValueKind,\n FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH,\n assertFrontendProvidersServeOnlyDeclaredKeys,\n assertNoSecretValueInFrontendProviders,\n findSecretValuesInFrontendProviders,\n overlayFrontendProviderPublicConfig,\n readDeclaredPublicConfigKeys,\n type FrontendPublicConfigKeySpec,\n type FrontendPublicConfigSchema,\n type FrontendPublicConfigSecretMatch,\n type FrontendPublicConfigSecretValue,\n type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/\n The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n /\nexport {\n admissibleFrontendPublicConfigKeys,\n FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS,\n FrontendFilePickerPublicConfigSchema,\n frontendCapabilityPublicConfigKeys,\n layerProviderFilePickerConstraints,\n partitionFrontendCapabilityPublicConfig,\n type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/\n The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n /\nexport {\n isFrontendErrorMonitoringSink,\n isFrontendProductAnalyticsSink,\n isFrontendCaptchaSink,\n type FrontendCaptchaSink,\n type FrontendCrashReport,\n type FrontendErrorMonitoringSink,\n type FrontendProductAnalyticsEvent,\n type FrontendProductAnalyticsSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/\n Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n /\nexport {\n BUILTIN_PROVIDER_CAPABILITY,\n type BuiltinProviderCapability,\n type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n BUILTIN_PROVIDER_PROTOCOL,\n type BuiltinProviderProtocol,\n type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/\n Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n \n Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n /\nexport {\n composeProviderRegistry,\n ProviderCompositionConflictError,\n type ProviderRegistryFragment,\n type ComposedProviderRegistry,\n type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/\n Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a\n * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.\n \n ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`\n \n They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of\n * 41 import sites of the meta-workflows subpath, 7 take nothing but these primitives, and all\n * seven are `saas-specifications/src/technical-documentation/.schemas.ts` — a browser-bound tier\n whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven\n * regexes.\n \n No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`\n * and nothing else, so it is already the zero-dependency atom K-2 asks for — the\n * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its\n * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1\n * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.\n \n The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is\n * a separate change from making it reachable on the bundle-safe seam, and doing both at once would\n * hide one in the other.\n /\nexport {\n MetaWorkflow_Sha256DigestSchema,\n MetaWorkflow_NamespacedRefSchema,\n MetaWorkflow_OpaqueRefSchema,\n MetaWorkflow_PositiveVersionSchema,\n MetaWorkflow_PositiveOrdinalSchema,\n MetaWorkflow_NonNegativeRevisionSchema,\n MetaWorkflow_LowercaseUuidV4Schema,\n MetaWorkflow_IsoDateTimeSchema,\n MetaWorkflow_NonNegativeFiniteNumberSchema,\n metaWorkflowValuesAreUnique,\n metaWorkflowValuesAreLexicallySorted,\n compareMetaWorkflowCanonicalStrings,\n} from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';\n\n/* @wildo_source:part:end saas.public-runtime.contract */\n"]}

package/dist/esm/queue/jobs.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"jobs.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../../~~src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B;;GAEG;AACH,oBAAY,sBAAsB;IAChC,kDAAkD;IAClD,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,2BAA2B,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAkBtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wDAAwD,GACnE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,2BAA2B,EAAE,OAAO,kBAAkB,CAuLzF,CAAC;AAMF;;GAEG;AACH,oBAAY,2BAA2B;IACrC,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAWtC;;;;;;;;GAQG;AACH,eAAO,MAAM,6DAA6D,GACxE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,EAAE,OAAO,uBAAuB,CAwGnG,CAAC"}
1	+ {"version":3,"file":"jobs.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B;;GAEG;AACH,oBAAY,sBAAsB;IAChC,kDAAkD;IAClD,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,2BAA2B,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAkBtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wDAAwD,GACnE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,2BAA2B,EAAE,OAAO,kBAAkB,CAuLzF,CAAC;AAMF;;GAEG;AACH,oBAAY,2BAA2B;IACrC,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAWtC;;;;;;;;GAQG;AACH,eAAO,MAAM,6DAA6D,GACxE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,EAAE,OAAO,uBAAuB,CAwGnG,CAAC"}

package/dist/esm/queue/jobs.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"jobs.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,OAAO,EACP,YAAY,EACZ,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAG/B,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,kDAAkD;IAClD,+CAAqB,CAAA;AACvB,CAAC,EAHW,sBAAsB,KAAtB,sBAAsB,QAGjC;AAaD,6CAA6C;AAC7C,MAAM,2BAA2B,GAAG;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAA0B,CAAC;IAChE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC;IAC1E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAA0B,CAAC;IACzE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAA0B,CAAC;CACtE,CAAC;AAEF,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAEpG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wDAAwD,GAAG,CACtE,sBAA8C,EAC4C,EAAE;IAE5F,yBAAyB;IACzB,sCAAsC;IACtC,MAAM,gCAAgC,GAAG,kBAAkB,CAAC,IAAI,CAAC;QAC/D,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,IAAI,EAAS,wBAAwB;QACjD,WAAW,EAAE,IAAI,EAAQ,eAAe;QACxC,SAAS,EAAE,IAAI,EAAU,6BAA6B;QACtD,WAAW,EAAE,IAAI,EAAQ,qBAAqB;QAC9C,UAAU,EAAE,IAAI,EAAS,2BAA2B;QACpD,sBAAsB,EAAE,IAAI,EAAE,sBAAsB;QACpD,KAAK,EAAE,IAAI,EAAc,iBAAiB;QAC1C,QAAQ,EAAE,IAAI,EAAW,gBAAgB;QACzC,cAAc,EAAE,IAAI,EAAK,gBAAgB;KAC1C,CAAC,CAAC;IAEH,yBAAyB;IACzB,2EAA2E;IAC3E,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;QAChD,iBAAiB;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC,CAAC,QAAQ,EAAE;QAErF,iBAAiB;QACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAEhC,iBAAiB;QACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAE9C,cAAc;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAErC,qBAAqB;QACrB,sBAAsB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAE3C,aAAa;QACb,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK;KACtC,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,kBAAkB;QAC9B,kBAAkB,EAAE,gBAAgB,CAAC,cAAc;QACnD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,cAAc,CAAC;QAC5F,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D;;;;;;;;WAQG;QACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;QAEzE;;;;;;;;;;;;;;;;WAgBG;QAEH,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,WAAW;SAClC;QAED,uBAAuB,EAAE;YACvB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;gBACnC,QAAQ,EAAE,CAAC;wBACT,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;qBAC3C,CAAC;aACH;YACD,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,8CAA8C;oBAC9C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,4CAA4C;oBAC5C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,qCAAqC;oBACrC;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC;wBAC3D,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;wBACjE,YAAY,EAAE,2BAA2B;wBACzC,UAAU,EAAE,yBAAyB;wBACrC,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,gEAAgE;IAChE,oDAAqB,CAAA;AACvB,CAAC,EAHW,2BAA2B,KAA3B,2BAA2B,QAGtC;AAYD,sCAAsC;AACtC,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC;AAEF,oCAAoC;AACpC,MAAM,+BAA+B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,kBAAkB,CAAU,CAAC;AAEhG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6DAA6D,GAAG,CAC3E,sBAA8C,EACsD,EAAE;IAEtG,wBAAwB;IACxB,kEAAkE;IAClE,MAAM,qCAAqC,GAAG,uBAAuB,CAAC,IAAI,CAAC;QACzE,GAAG,EAAE,IAAI;QACT,SAAS,EAAE,IAAI,EAAE,iFAAiF;QAClG,cAAc,EAAE,IAAI,EAAE,wBAAwB;KAC/C,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,uBAAuB;QACnC,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;QACxD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACjG,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,WAAW;SAClC;QAED,uBAAuB,EAAE;YACvB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;gBACnC,QAAQ,EAAE,CAAC;wBACT,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;qBAC3C,CAAC;aACH;YACD,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,0CAA0C;oBAC1C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,qCAAqC;qBAClD;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,2CAA2C;oBAC3C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,WAAW,CAAC;wBAC/B,iBAAiB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;wBAC/D,YAAY,EAAE,iCAAiC;wBAC/C,UAAU,EAAE,+BAA+B;wBAC3C,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["/*\n Job Resource Configurations\n * \n * Defines resource configurations for JobExecution and JobPayloadStorage.\n * \n * Resource Design Principles:\n * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route\n * - Proper requestDto schemas for each variant\n * - isBackendOnly fields are automatically filtered in responses\n * \n * Key Resources:\n * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained\n * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence\n /\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport type { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { \n JobExecutionSchema, \n JobPayloadStorageSchema,\n JobExecutionStatus,\n JobType,\n JobInitiator,\n JobPriority,\n} from './jobs.shared.schemas';\n\n\n// ============================================================================\n// JOB EXECUTION RESOURCE CONFIGURATION\n// ============================================================================\n\n/\n Variant keys for JobExecution operations.\n /\nexport enum JobExecutionVariantKey {\n /* Internal queue service operations (default) /\n INTERNAL = 'internal',\n}\n\n/\n Core operations available for JobExecution.\n /\ntype JobExecution_CoreOperations = \n \| CoreResourceOperation.CREATE \n \| CoreResourceOperation.READ \n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.DELETE_MANY;\n\n// Filter fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_FILTER_FIELDS = {\n applicationId: z.string(),\n jobType: z.enum(Object.values(JobType) as [string, ...string[]]),\n status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]),\n organizationId: z.string(),\n userId: z.string(),\n queueName: z.string(),\n domainCategory: z.string(),\n initiatedBy: z.enum(Object.values(JobInitiator) as [string, ...string[]]),\n priority: z.enum(Object.values(JobPriority) as [string, ...string[]]),\n};\n\n// Sort fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_SORT_FIELDS = ['createdAt', 'completedAt', 'durationMs', 'retryCount'] as const;\n\n/\n Factory function for JobExecution resource configuration.\n * \n * JobExecution tracks the lifecycle of all jobs processed by the queue system.\n * It provides visibility into job status, retries, timing, and error information.\n * \n * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue\n * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over\n * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not\n * an API call, and adding an operator-facing one means declaring an API variant here first.\n /\nexport const jobExecution_ResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobExecution_CoreOperations, typeof JobExecutionSchema> => {\n\n // === CREATE Schemas ===\n // Full create schema for internal use\n const JobExecutionCreateInternalSchema = JobExecutionSchema.omit({\n _id: true,\n retryCount: true, // Starts at 0 (default)\n lastRetryAt: true, // Set on retry\n startedAt: true, // Set when processing starts\n completedAt: true, // Set when completed\n durationMs: true, // Calculated on completion\n outputPayloadStorageId: true, // Set after execution\n error: true, // Set on failure\n workerId: true, // Set by worker\n workerHostname: true, // Set by worker\n });\n\n // === UPDATE Schemas ===\n // Internal service can update most fields (status changes, timing, errors)\n const JobExecutionUpdateInternalSchema = z.object({\n // Status updates\n status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]).optional(),\n \n // Timing updates\n queuedAt: z.date().optional(),\n startedAt: z.date().optional(),\n completedAt: z.date().optional(),\n durationMs: z.number().int().optional(),\n lastRetryAt: z.date().optional(),\n \n // Retry tracking\n retryCount: z.number().int().min(0).optional(),\n \n // Worker info\n workerId: z.string().optional(),\n workerHostname: z.string().optional(),\n \n // Payload references\n outputPayloadStorageId: z.uuid().optional(),\n \n // Error info\n error: JobExecutionSchema.shape.error,\n });\n\n return createResourceConfiguration_Initialization<\n undefined,\n JobExecution_CoreOperations,\n typeof JobExecutionSchema\n >({\n mainSchema: JobExecutionSchema,\n resourceIdentifier: CoreResourceType.JOB_EXECUTIONS,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_EXECUTIONS],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true, // Internal infrastructure component\n\n /\n Subject-export disclosure: explicitly FORBIDDEN. A job execution is an OPERATIONAL record of\n * the platform doing work — it references a subject without being data about them in any sense\n * a data subject would recognise, and it is already out of Art. 20 scope as controller-generated.\n \n FORBIDDEN rather than left undeclared on purpose: this is a decision someone took, not a gap\n * nobody has filled, and the export refusal says so — precisely so a future operator clearing a\n * startup error cannot \"fix\" it by opting in.\n /\n systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n /\n * DELIBERATELY NO `retentionPolicy`, and this comment is the declaration of that.\n \n Issue #138 asks that every engine resource declaring `exportSubject` either declare an erasure\n * posture or be deliberately and visibly exempt. This one is exempt, for the same reason the export\n * refusal directly above gives: a job execution is an operational record of the platform doing work,\n * not data about a person. It declares no personal-data category, and no field of it would be scrubbed.\n \n Declaring `RETAIN_ONLY` here would be worse than saying nothing. The mode is a positive assertion\n * about a resource that holds personal data of a subject; making it would place this row in the\n * subject-erasure population, inject the `retentionStatus` / `impersonalizedAt` markers and the\n * route-less LIST + UPDATE_MANY plumbing, and require a migration on all three schema planes — all to\n * describe an erasure path that never visits this collection.\n \n If a future job payload ever carries subject content, that is a `.dataCategories()` declaration on\n * the payload first, and this exemption is then wrong and must be revisited with it.\n /\n\n coreOperations: [\n CoreResourceOperation.CREATE,\n CoreResourceOperation.READ,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.LIST,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.DELETE_MANY,\n ],\n \n operationsConfiguration: {\n // The built-in bounded retention sweep resolves this contract before deleting expired rows.\n // Repository-only: supplying maintenance behavior must not create a public deletion route.\n [CoreResourceOperation.DELETE_MANY]: {\n variants: [{\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n }],\n },\n // === CREATE ===\n [CoreResourceOperation.CREATE]: {\n variants: [\n // Internal: Queue services create job records\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n requestDto: JobExecutionCreateInternalSchema,\n },\n ],\n },\n \n // === READ ===\n [CoreResourceOperation.READ]: {\n variants: [\n // Internal: Queue services read job details\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n \n // === UPDATE ===\n [CoreResourceOperation.UPDATE]: {\n variants: [\n // Internal: Queue services update job status\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n requestDto: JobExecutionUpdateInternalSchema,\n },\n ],\n },\n \n // === LIST ===\n [CoreResourceOperation.LIST]: {\n variants: [\n // Internal: Queue services list jobs\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // === SEARCH ===\n [CoreResourceOperation.SEARCH]: {\n variants: [\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: true,\n searchableFields: ['jobId', 'operationPathKey', 'batchRef'],\n searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n filterFields: JOB_EXECUTION_FILTER_FIELDS,\n sortFields: JOB_EXECUTION_SORT_FIELDS,\n maxPaginatedResultPerPageLimit: 100,\n },\n ],\n },\n },\n });\n};\n\n// ============================================================================\n// JOB PAYLOAD STORAGE RESOURCE CONFIGURATION\n// ============================================================================\n\n/\n Variant keys for JobPayloadStorage operations.\n /\nexport enum JobPayloadStorageVariantKey {\n /* Internal queue service operations (default, only variant) /\n INTERNAL = 'internal',\n}\n\n/\n Core operations available for JobPayloadStorage.\n /\ntype JobPayloadStorage_CoreOperations = \n \| CoreResourceOperation.CREATE \n \| CoreResourceOperation.READ \n \| CoreResourceOperation.DELETE\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.DELETE_MANY;\n\n// Filter fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_FILTER_FIELDS = {\n applicationId: z.string(),\n isCompressed: z.boolean(),\n};\n\n// Sort fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_SORT_FIELDS = ['createdAt', 'expiresAt', 'payloadSizeBytes'] as const;\n\n/\n Factory function for JobPayloadStorage resource configuration.\n * \n * JobPayloadStorage stores large job payloads (>100KB) that exceed RabbitMQ\n * message size limits. Referenced by storageId in JobPayload messages.\n * \n * Variants:\n * - INTERNAL only: No API exposure (contains sensitive payload data)\n */\nexport const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobPayloadStorage_CoreOperations, typeof JobPayloadStorageSchema> => {\n\n // === CREATE Schema ===\n // Internal services provide all data except auto-generated fields\n const JobPayloadStorageCreateInternalSchema = JobPayloadStorageSchema.omit({\n _id: true,\n createdAt: true, // Repository owns timestamps; input cleaning removes them before DTO validation.\n referenceCount: true, // Starts at 1 (default)\n });\n\n return createResourceConfiguration_Initialization<\n undefined,\n JobPayloadStorage_CoreOperations,\n typeof JobPayloadStorageSchema\n >({\n mainSchema: JobPayloadStorageSchema,\n resourceIdentifier: CoreResourceType.JOB_PAYLOAD_STORAGE,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_PAYLOAD_STORAGE],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true, // Internal infrastructure component\n\n coreOperations: [\n CoreResourceOperation.CREATE,\n CoreResourceOperation.READ,\n CoreResourceOperation.DELETE,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.DELETE_MANY,\n ],\n \n operationsConfiguration: {\n // The built-in bounded retention sweep resolves this contract before deleting expired rows.\n // Repository-only: supplying maintenance behavior must not create a public deletion route.\n [CoreResourceOperation.DELETE_MANY]: {\n variants: [{\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n }],\n },\n // === CREATE ===\n [CoreResourceOperation.CREATE]: {\n variants: [\n // Internal: Queue services store payloads\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n requestDto: JobPayloadStorageCreateInternalSchema,\n },\n ],\n },\n \n // === READ ===\n [CoreResourceOperation.READ]: {\n variants: [\n // Internal: Queue services retrieve payloads\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n \n // === DELETE ===\n [CoreResourceOperation.DELETE]: {\n variants: [\n // Internal: Queue services delete payloads\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // === SEARCH ===\n [CoreResourceOperation.SEARCH]: {\n variants: [\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: true,\n searchableFields: ['storageId'],\n searchableOptions: { caseSensitive: true, fullMatchOnly: true },\n filterFields: JOB_PAYLOAD_STORAGE_FILTER_FIELDS,\n sortFields: JOB_PAYLOAD_STORAGE_SORT_FIELDS,\n maxPaginatedResultPerPageLimit: 100,\n },\n ],\n },\n },\n });\n};\n"]}
1	+ {"version":3,"file":"jobs.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAE7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAwB,MAAM,uCAAuC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,OAAO,EACP,YAAY,EACZ,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAG/B,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,kDAAkD;IAClD,+CAAqB,CAAA;AACvB,CAAC,EAHW,sBAAsB,KAAtB,sBAAsB,QAGjC;AAaD,6CAA6C;AAC7C,MAAM,2BAA2B,GAAG;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAA0B,CAAC;IAChE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC;IAC1E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAA0B,CAAC;IACzE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAA0B,CAAC;CACtE,CAAC;AAEF,2CAA2C;AAC3C,MAAM,yBAAyB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAEpG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wDAAwD,GAAG,CACtE,sBAA8C,EAC4C,EAAE;IAE5F,yBAAyB;IACzB,sCAAsC;IACtC,MAAM,gCAAgC,GAAG,kBAAkB,CAAC,IAAI,CAAC;QAC/D,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,IAAI,EAAS,wBAAwB;QACjD,WAAW,EAAE,IAAI,EAAQ,eAAe;QACxC,SAAS,EAAE,IAAI,EAAU,6BAA6B;QACtD,WAAW,EAAE,IAAI,EAAQ,qBAAqB;QAC9C,UAAU,EAAE,IAAI,EAAS,2BAA2B;QACpD,sBAAsB,EAAE,IAAI,EAAE,sBAAsB;QACpD,KAAK,EAAE,IAAI,EAAc,iBAAiB;QAC1C,QAAQ,EAAE,IAAI,EAAW,gBAAgB;QACzC,cAAc,EAAE,IAAI,EAAK,gBAAgB;KAC1C,CAAC,CAAC;IAEH,yBAAyB;IACzB,2EAA2E;IAC3E,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;QAChD,iBAAiB;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAA0B,CAAC,CAAC,QAAQ,EAAE;QAErF,iBAAiB;QACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAEhC,iBAAiB;QACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAE9C,cAAc;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAErC,qBAAqB;QACrB,sBAAsB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAE3C,aAAa;QACb,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK;KACtC,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,kBAAkB;QAC9B,kBAAkB,EAAE,gBAAgB,CAAC,cAAc;QACnD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,cAAc,CAAC;QAC5F,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D;;;;;;;;WAQG;QACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;QAEzE;;;;;;;;;;;;;;;;WAgBG;QAEH,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,WAAW;SAClC;QAED,uBAAuB,EAAE;YACvB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;gBACnC,QAAQ,EAAE,CAAC;wBACT,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;qBAC3C,CAAC;aACH;YACD,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,8CAA8C;oBAC9C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,4CAA4C;oBAC5C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,gCAAgC;qBAC7C;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,qCAAqC;oBACrC;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,sBAAsB,CAAC,QAAQ;wBAC3C,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC;wBAC3D,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;wBACjE,YAAY,EAAE,2BAA2B;wBACzC,UAAU,EAAE,yBAAyB;wBACrC,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,gEAAgE;IAChE,oDAAqB,CAAA;AACvB,CAAC,EAHW,2BAA2B,KAA3B,2BAA2B,QAGtC;AAYD,sCAAsC;AACtC,MAAM,iCAAiC,GAAG;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC;AAEF,oCAAoC;AACpC,MAAM,+BAA+B,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,kBAAkB,CAAU,CAAC;AAEhG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6DAA6D,GAAG,CAC3E,sBAA8C,EACsD,EAAE;IAEtG,wBAAwB;IACxB,kEAAkE;IAClE,MAAM,qCAAqC,GAAG,uBAAuB,CAAC,IAAI,CAAC;QACzE,GAAG,EAAE,IAAI;QACT,SAAS,EAAE,IAAI,EAAE,iFAAiF;QAClG,cAAc,EAAE,IAAI,EAAE,wBAAwB;KAC/C,CAAC,CAAC;IAEH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,uBAAuB;QACnC,kBAAkB,EAAE,gBAAgB,CAAC,mBAAmB;QACxD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACjG,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI,EAAE,oCAAoC;QAE5D,cAAc,EAAE;YACd,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,WAAW;SAClC;QAED,uBAAuB,EAAE;YACvB,4FAA4F;YAC5F,2FAA2F;YAC3F,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;gBACnC,QAAQ,EAAE,CAAC;wBACT,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;qBAC3C,CAAC;aACH;YACD,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,0CAA0C;oBAC1C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,UAAU,EAAE,qCAAqC;qBAClD;iBACF;aACF;YAED,eAAe;YACf,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5B,QAAQ,EAAE;oBACR,6CAA6C;oBAC7C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR,2CAA2C;oBAC3C;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;qBAC1C;iBACF;aACF;YAED,iBAAiB;YACjB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;gBAC9B,QAAQ,EAAE;oBACR;wBACE,UAAU,EAAE,2BAA2B,CAAC,QAAQ;wBAChD,WAAW,EAAE,4BAA4B,CAAC,eAAe;wBACzD,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;wBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;wBACzC,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,CAAC,WAAW,CAAC;wBAC/B,iBAAiB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;wBAC/D,YAAY,EAAE,iCAAiC;wBAC/C,UAAU,EAAE,+BAA+B;wBAC3C,8BAA8B,EAAE,GAAG;qBACpC;iBACF;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["/*\n Job Resource Configurations\n * \n * Defines resource configurations for JobExecution and JobPayloadStorage.\n * \n * Resource Design Principles:\n * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route\n * - Proper requestDto schemas for each variant\n * - isBackendOnly fields are automatically filtered in responses\n * \n * Key Resources:\n * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained\n * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence\n /\n\nimport { z } from 'zod';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport type { ResourceConfiguration } from '../resources/resources-config.shared.schemas';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { \n JobExecutionSchema, \n JobPayloadStorageSchema,\n JobExecutionStatus,\n JobType,\n JobInitiator,\n JobPriority,\n} from './jobs.shared.schemas';\n\n\n// ============================================================================\n// JOB EXECUTION RESOURCE CONFIGURATION\n// ============================================================================\n\n/\n Variant keys for JobExecution operations.\n /\nexport enum JobExecutionVariantKey {\n /* Internal queue service operations (default) /\n INTERNAL = 'internal',\n}\n\n/\n Core operations available for JobExecution.\n /\ntype JobExecution_CoreOperations = \n \| CoreResourceOperation.CREATE \n \| CoreResourceOperation.READ \n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.LIST\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.DELETE_MANY;\n\n// Filter fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_FILTER_FIELDS = {\n applicationId: z.string(),\n jobType: z.enum(Object.values(JobType) as [string, ...string[]]),\n status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]),\n organizationId: z.string(),\n userId: z.string(),\n queueName: z.string(),\n domainCategory: z.string(),\n initiatedBy: z.enum(Object.values(JobInitiator) as [string, ...string[]]),\n priority: z.enum(Object.values(JobPriority) as [string, ...string[]]),\n};\n\n// Sort fields for JobExecution LIST/SEARCH\nconst JOB_EXECUTION_SORT_FIELDS = ['createdAt', 'completedAt', 'durationMs', 'retryCount'] as const;\n\n/\n Factory function for JobExecution resource configuration.\n * \n * JobExecution tracks the lifecycle of all jobs processed by the queue system.\n * It provides visibility into job status, retries, timing, and error information.\n * \n * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue\n * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over\n * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not\n * an API call, and adding an operator-facing one means declaring an API variant here first.\n /\nexport const jobExecution_ResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobExecution_CoreOperations, typeof JobExecutionSchema> => {\n\n // === CREATE Schemas ===\n // Full create schema for internal use\n const JobExecutionCreateInternalSchema = JobExecutionSchema.omit({\n _id: true,\n retryCount: true, // Starts at 0 (default)\n lastRetryAt: true, // Set on retry\n startedAt: true, // Set when processing starts\n completedAt: true, // Set when completed\n durationMs: true, // Calculated on completion\n outputPayloadStorageId: true, // Set after execution\n error: true, // Set on failure\n workerId: true, // Set by worker\n workerHostname: true, // Set by worker\n });\n\n // === UPDATE Schemas ===\n // Internal service can update most fields (status changes, timing, errors)\n const JobExecutionUpdateInternalSchema = z.object({\n // Status updates\n status: z.enum(Object.values(JobExecutionStatus) as [string, ...string[]]).optional(),\n \n // Timing updates\n queuedAt: z.date().optional(),\n startedAt: z.date().optional(),\n completedAt: z.date().optional(),\n durationMs: z.number().int().optional(),\n lastRetryAt: z.date().optional(),\n \n // Retry tracking\n retryCount: z.number().int().min(0).optional(),\n \n // Worker info\n workerId: z.string().optional(),\n workerHostname: z.string().optional(),\n \n // Payload references\n outputPayloadStorageId: z.uuid().optional(),\n \n // Error info\n error: JobExecutionSchema.shape.error,\n });\n\n return createResourceConfiguration_Initialization<\n undefined,\n JobExecution_CoreOperations,\n typeof JobExecutionSchema\n >({\n mainSchema: JobExecutionSchema,\n resourceIdentifier: CoreResourceType.JOB_EXECUTIONS,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_EXECUTIONS],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true, // Internal infrastructure component\n\n /\n Subject-export disclosure: explicitly FORBIDDEN. A job execution is an OPERATIONAL record of\n * the platform doing work — it references a subject without being data about them in any sense\n * a data subject would recognise, and it is already out of Art. 20 scope as controller-generated.\n \n FORBIDDEN rather than left undeclared on purpose: this is a decision someone took, not a gap\n * nobody has filled, and the export refusal says so — precisely so a future operator clearing a\n * startup error cannot \"fix\" it by opting in.\n /\n systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n /\n * DELIBERATELY NO `retentionPolicy`, and this comment is the declaration of that.\n \n Issue #138 asks that every engine resource declaring `exportSubject` either declare an erasure\n * posture or be deliberately and visibly exempt. This one is exempt, for the same reason the export\n * refusal directly above gives: a job execution is an operational record of the platform doing work,\n * not data about a person. It declares no personal-data category, and no field of it would be scrubbed.\n \n Declaring `RETAIN_ONLY` here would be worse than saying nothing. The mode is a positive assertion\n * about a resource that holds personal data of a subject; making it would place this row in the\n * subject-erasure population, inject the `retentionStatus` / `impersonalizedAt` markers and the\n * route-less LIST + UPDATE_MANY plumbing, and require a migration on all three schema planes — all to\n * describe an erasure path that never visits this collection.\n \n If a future job payload ever carries subject content, that is a `.dataCategories()` declaration on\n * the payload first, and this exemption is then wrong and must be revisited with it.\n /\n\n coreOperations: [\n CoreResourceOperation.CREATE,\n CoreResourceOperation.READ,\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.LIST,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.DELETE_MANY,\n ],\n \n operationsConfiguration: {\n // The built-in bounded retention sweep resolves this contract before deleting expired rows.\n // Repository-only: supplying maintenance behavior must not create a public deletion route.\n [CoreResourceOperation.DELETE_MANY]: {\n variants: [{\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n }],\n },\n // === CREATE ===\n [CoreResourceOperation.CREATE]: {\n variants: [\n // Internal: Queue services create job records\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n requestDto: JobExecutionCreateInternalSchema,\n },\n ],\n },\n \n // === READ ===\n [CoreResourceOperation.READ]: {\n variants: [\n // Internal: Queue services read job details\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n \n // === UPDATE ===\n [CoreResourceOperation.UPDATE]: {\n variants: [\n // Internal: Queue services update job status\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n requestDto: JobExecutionUpdateInternalSchema,\n },\n ],\n },\n \n // === LIST ===\n [CoreResourceOperation.LIST]: {\n variants: [\n // Internal: Queue services list jobs\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // === SEARCH ===\n [CoreResourceOperation.SEARCH]: {\n variants: [\n {\n variantKey: JobExecutionVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: true,\n searchableFields: ['jobId', 'operationPathKey', 'batchRef'],\n searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n filterFields: JOB_EXECUTION_FILTER_FIELDS,\n sortFields: JOB_EXECUTION_SORT_FIELDS,\n maxPaginatedResultPerPageLimit: 100,\n },\n ],\n },\n },\n });\n};\n\n// ============================================================================\n// JOB PAYLOAD STORAGE RESOURCE CONFIGURATION\n// ============================================================================\n\n/\n Variant keys for JobPayloadStorage operations.\n /\nexport enum JobPayloadStorageVariantKey {\n /* Internal queue service operations (default, only variant) /\n INTERNAL = 'internal',\n}\n\n/\n Core operations available for JobPayloadStorage.\n /\ntype JobPayloadStorage_CoreOperations = \n \| CoreResourceOperation.CREATE \n \| CoreResourceOperation.READ \n \| CoreResourceOperation.DELETE\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.DELETE_MANY;\n\n// Filter fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_FILTER_FIELDS = {\n applicationId: z.string(),\n isCompressed: z.boolean(),\n};\n\n// Sort fields for JobPayloadStorage\nconst JOB_PAYLOAD_STORAGE_SORT_FIELDS = ['createdAt', 'expiresAt', 'payloadSizeBytes'] as const;\n\n/\n Factory function for JobPayloadStorage resource configuration.\n * \n * JobPayloadStorage stores large job payloads (>100KB) that exceed RabbitMQ\n * message size limits. Referenced by storageId in JobPayload messages.\n * \n * Variants:\n * - INTERNAL only: No API exposure (contains sensitive payload data)\n */\nexport const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (\n resourcesRelationships: ResourceRelationship[]\n): ResourceConfiguration<undefined, JobPayloadStorage_CoreOperations, typeof JobPayloadStorageSchema> => {\n\n // === CREATE Schema ===\n // Internal services provide all data except auto-generated fields\n const JobPayloadStorageCreateInternalSchema = JobPayloadStorageSchema.omit({\n _id: true,\n createdAt: true, // Repository owns timestamps; input cleaning removes them before DTO validation.\n referenceCount: true, // Starts at 1 (default)\n });\n\n return createResourceConfiguration_Initialization<\n undefined,\n JobPayloadStorage_CoreOperations,\n typeof JobPayloadStorageSchema\n >({\n mainSchema: JobPayloadStorageSchema,\n resourceIdentifier: CoreResourceType.JOB_PAYLOAD_STORAGE,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.JOB_PAYLOAD_STORAGE],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true, // Internal infrastructure component\n\n coreOperations: [\n CoreResourceOperation.CREATE,\n CoreResourceOperation.READ,\n CoreResourceOperation.DELETE,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.DELETE_MANY,\n ],\n \n operationsConfiguration: {\n // The built-in bounded retention sweep resolves this contract before deleting expired rows.\n // Repository-only: supplying maintenance behavior must not create a public deletion route.\n [CoreResourceOperation.DELETE_MANY]: {\n variants: [{\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n }],\n },\n // === CREATE ===\n [CoreResourceOperation.CREATE]: {\n variants: [\n // Internal: Queue services store payloads\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n requestDto: JobPayloadStorageCreateInternalSchema,\n },\n ],\n },\n \n // === READ ===\n [CoreResourceOperation.READ]: {\n variants: [\n // Internal: Queue services retrieve payloads\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n \n // === DELETE ===\n [CoreResourceOperation.DELETE]: {\n variants: [\n // Internal: Queue services delete payloads\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n // === SEARCH ===\n [CoreResourceOperation.SEARCH]: {\n variants: [\n {\n variantKey: JobPayloadStorageVariantKey.INTERNAL,\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: true,\n searchableFields: ['storageId'],\n searchableOptions: { caseSensitive: true, fullMatchOnly: true },\n filterFields: JOB_PAYLOAD_STORAGE_FILTER_FIELDS,\n sortFields: JOB_PAYLOAD_STORAGE_SORT_FIELDS,\n maxPaginatedResultPerPageLimit: 100,\n },\n ],\n },\n },\n });\n};\n"]}

package/dist/esm/queue/jobs.shared.schemas.d.ts CHANGED Viewed

@@ -185,6 +185,54 @@ export type QueueRetryBackoffConfig = z.infer<typeof QueueRetryBackoffConfigSche
 /** First receipt is short-lived; persisted recovery has its own policy deadline. */
 export declare const SCHEDULED_INITIAL_ADMISSION_MAX_AGE_MS: number;
 export declare const SCHEDULED_INITIAL_ADMISSION_FUTURE_SKEW_MS: number;
+/**
+ * How long after its token expired a delivery may still be RECORDED as a missed occurrence (#2212).
+ *
+ * An expired token stays cryptographically valid forever, so without a horizon anyone able to
+ * publish onto the application's queue could replay a captured token of any age and plant a
+ * "missed while absent" record. The horizon is APPROXIMATELY the job-row retention: within it, a
+ * replayed token almost always meets the occurrence's existing row and is recognised as already
+ * held; beyond it, no genuine backlog is plausible and the delivery is rejected as a trust failure.
+ * "Approximately" because a row that ran on time expires measured from its completion while the
+ * horizon is measured from the token's expiry, which leaves a window of a few minutes in which a
+ * replay is recorded as a fresh miss. It never runs anything, and archived run evidence still wins
+ * the occurrence in coverage.
+ *
+ * Equal to `JOB_EXECUTION_TTL_SECONDS` (declared further down, outside this shared block, so it
+ * cannot be referenced here without a temporal-dead-zone hazard); a test pins the two together, so
+ * changing one without the other fails.
+ */
+export declare const SCHEDULED_LATE_DELIVERY_HORIZON_MS: number;
+/**
+ * Why an AUTHENTIC scheduled delivery reached the application too late to be admitted (#2212).
+ *
+ * Either way the occurrence was MISSED: it is recorded as such and not run, and the schedule
+ * continues with its next occurrence. The two gates differ in WHO was late, which is why they are
+ * kept apart:
+ *
+ * - `TOKEN_EXPIRED` — the delivery sat in the queue for longer than its token lives, so nothing
+ *   consumed the application's scheduled queue for that long: the backend (or minion) was stopped,
+ *   restarting or crash-looping. This is the common case after a restart.
+ * - `OUTSIDE_ADMISSION_WINDOW` — the token is still current, but the occurrence it names is older
+ *   than the window. The scheduler may sign up to the window's length AFTER the occurrence, so the
+ *   delay is shared between the scheduler's publication and the application's consumption, and
+ *   cannot be attributed to the application alone.
+ *
+ * A late delivery is never an authentication failure: its signature, issuer and audience were
+ * proven before it was classified late. A token that cannot be proven authentic, that names an
+ * occurrence in the future, or that expired longer ago than `SCHEDULED_LATE_DELIVERY_HORIZON_MS`
+ * is a trust failure instead and is reported loudly.
+ *
+ * Missed occurrences are SKIPPED, never caught up: that is the established cron behaviour (a
+ * Kubernetes `CronJob` past its `startingDeadlineSeconds`, a Quartz trigger with the do-nothing
+ * misfire instruction), and it keeps the short signed window a replay bound rather than a credential.
+ */
+export declare enum ScheduledDeliveryLateness {
+    /** The signed delivery token's `exp` passed before the delivery was consumed. */
+    TOKEN_EXPIRED = "token_expired",
+    /** The token is current, but the occurrence it names is older than `SCHEDULED_INITIAL_ADMISSION_MAX_AGE_MS`; scheduler and consumer share the delay. */
+    OUTSIDE_ADMISSION_WINDOW = "outside_admission_window"
+}
 /** How the handler's complete effects tolerate execution after an uncertain outcome. */
 export declare enum ScheduledReplaySafety {
     /** No automatic repetition; a failed call can already have committed effects. */
@@ -239,12 +287,31 @@ export declare const ScheduledEvidencePolicySchema: z.ZodObject<{
     deferredField: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type ScheduledEvidencePolicy = z.infer<typeof ScheduledEvidencePolicySchema>;
+/** How a scheduled occurrence's archived evidence came to exist. */
 export declare enum ScheduledEvidenceSource {
+    /** The handler ran and reported completion. */
     EXECUTION = "execution",
+    /** The handler's reconciler established that an interrupted run completed. */
     RECONCILIATION = "reconciliation",
+    /** An operator confirmed completion of an occurrence held for review. */
     OPERATOR_CONFIRMATION = "operator_confirmation",
-    ABANDONMENT = "abandonment"
+    /** An operator decided an occurrence held for review will not run. */
+    ABANDONMENT = "abandonment",
+    /**
+     * The occurrence was never run: its authentic delivery reached the application after the
+     * admission deadline (see `ScheduledDeliveryLateness` for who was late). Coverage reads it as an
+     * EXPLAINED gap: the slot stays missing, because the occurrence did not run, and the record says
+     * why — rather than an unexplained one.
+     */
+    LATE_DELIVERY = "late_delivery"
 }
+/**
+ * The terminal invocation status each evidence source records — the one place that pairing is stated.
+ *
+ * A source whose occurrence never reached a successful invocation records `FAILED`; this follows the
+ * precedent `ABANDONMENT` set, and the SOURCE (never the status) is what says why it did not run.
+ */
+export declare function scheduledEvidenceInvocationStatus(source: ScheduledEvidenceSource): JobExecutionStatus;
 export declare enum ScheduledEvidenceResultStatus {
     CAPTURED = "captured",
     UNAVAILABLE = "unavailable"
@@ -346,6 +413,7 @@ export declare const ScheduledExecutionStateSchema: z.ZodObject<{
     attemptCount: z.ZodNumber;
     reconciledSafe: z.ZodDefault<z.ZodBoolean>;
     reason: z.ZodOptional<z.ZodString>;
+    lateness: z.ZodOptional<z.ZodEnum<typeof ScheduledDeliveryLateness>>;
     attempts: z.ZodArray<z.ZodObject<{
         attemptId: z.ZodUUID;
         phase: z.ZodEnum<typeof ScheduledExecutionPhase>;
@@ -475,6 +543,7 @@ export declare const JobPayloadStorageSchema: z.ZodObject<{
     scheduledEvidence: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
         expiresAt: z.ZodDate;
         applicationId: z.ZodString;
+        source: z.ZodEnum<typeof ScheduledEvidenceSource>;
         operationPathKey: z.ZodOptional<z.ZodString>;
         jobId: z.ZodUUID;
         queueName: z.ZodString;
@@ -486,7 +555,6 @@ export declare const JobPayloadStorageSchema: z.ZodObject<{
         startedAt: z.ZodOptional<z.ZodDate>;
         completedAt: z.ZodDate;
         invocationStatus: z.ZodEnum<typeof JobExecutionStatus>;
-        source: z.ZodEnum<typeof ScheduledEvidenceSource>;
         attemptCount: z.ZodNumber;
         policy: z.ZodObject<{
             policyRef: z.ZodString;
@@ -752,6 +820,7 @@ export declare const JobExecutionSchema: z.ZodObject<{
         attemptCount: z.ZodNumber;
         reconciledSafe: z.ZodDefault<z.ZodBoolean>;
         reason: z.ZodOptional<z.ZodString>;
+        lateness: z.ZodOptional<z.ZodEnum<typeof ScheduledDeliveryLateness>>;
         attempts: z.ZodArray<z.ZodObject<{
             attemptId: z.ZodUUID;
             phase: z.ZodEnum<typeof ScheduledExecutionPhase>;

package/dist/esm/queue/jobs.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"jobs.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../../~~src/queue/jobs.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAExE,OAAO,EAA4B,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AASpG;;GAEG;AACH,oBAAY,OAAO;IACjB,uEAAuE;IACvE,kBAAkB,uBAAuB;IACzC,uDAAuD;IACvD,YAAY,iBAAiB;IAC7B,uDAAuD;IACvD,cAAc,mBAAmB;IACjC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,oBAAY,SAAS;IACnB,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,gBAAgB;IAC1B,4JAA4J;IAC5J,QAAQ,aAAa;IACrB;;;;OAIG;IACH,MAAM,WAAW;CAClB;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,6BAA6B;IAC7B,GAAG,QAAQ;IACX,4CAA4C;IAC5C,OAAO,YAAY;IACnB,sCAAsC;IACtC,QAAQ,aAAa;CACtB;AAED;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED;;;GAGG;AACH,oBAAY,WAAW;IACrB,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;CACtB;AAMD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAa,CAAC;AAiBvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,6BAA6B;;;;iBAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oHAAoH;AAEpH,oFAAoF;AACpF,eAAO,MAAM,sCAAsC,QAAgB,CAAC;AACpE,eAAO,MAAM,0CAA0C,QAAY,CAAC;AAEpE,wFAAwF;AACxF,oBAAY,qBAAqB;IAC/B,iFAAiF;IACjF,MAAM,WAAW;IACjB,iFAAiF;IACjF,UAAU,eAAe;IACzB,kFAAkF;IAClF,SAAS,cAAc;CACxB;AAED,kFAAkF;AAClF,oBAAY,uBAAuB;IACjC,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAED,oBAAY,8BAA8B;IACxC,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;CAC9B;AAED,wFAAwF;AACxF,oBAAY,sBAAsB;IAChC,iBAAiB,sBAAsB;IACvC,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAED,uFAAuF;AACvF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;iBAgBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,wBAAgB,gCAAgC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAEnH;AAED,0FAA0F;AAC1F,eAAO,MAAM,6BAA6B;;;;;iBAaxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oBAAY,uBAAuB;IACjC,SAAS,cAAc;IACvB,cAAc,mBAAmB;IACjC,qBAAqB,0BAA0B;IAC/C,WAAW,gBAAgB;~~CAC5B~~;AACD,oBAAY,6BAA6B;IACvC,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAmBD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;~~iBA0BrC~~,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,8BAA8B,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAElE,2GAA2G;AAC3G,eAAO,MAAM,6BAA6B~~;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BxC~~,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC;;;;iBAO3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAGtG;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;GAGG;AACH,eAAO,MAAM,+BAA+B,QAAe,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4ClC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,oBAAY,4CAA4C;IACtD,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2CAA2C;;;iBAGtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAEhH;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,qCAAqC,GAAG,SAAS,CAG3G;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,QAAoB,CAAC;AAE3D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB~~;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;~~iBA8F7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
1	+ {"version":3,"file":"jobs.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/queue/jobs.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAExE,OAAO,EAA4B,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AASpG;;GAEG;AACH,oBAAY,OAAO;IACjB,uEAAuE;IACvE,kBAAkB,uBAAuB;IACzC,uDAAuD;IACvD,YAAY,iBAAiB;IAC7B,uDAAuD;IACvD,cAAc,mBAAmB;IACjC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,oBAAY,SAAS;IACnB,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,gBAAgB;IAC1B,4JAA4J;IAC5J,QAAQ,aAAa;IACrB;;;;OAIG;IACH,MAAM,WAAW;CAClB;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,6BAA6B;IAC7B,GAAG,QAAQ;IACX,4CAA4C;IAC5C,OAAO,YAAY;IACnB,sCAAsC;IACtC,QAAQ,aAAa;CACtB;AAED;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED;;;GAGG;AACH,oBAAY,WAAW;IACrB,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;CACtB;AAMD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAa,CAAC;AAiBvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,6BAA6B;;;;iBAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oHAAoH;AAEpH,oFAAoF;AACpF,eAAO,MAAM,sCAAsC,QAAgB,CAAC;AACpE,eAAO,MAAM,0CAA0C,QAAY,CAAC;AAEpE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kCAAkC,QAA2B,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,oBAAY,yBAAyB;IACnC,iFAAiF;IACjF,aAAa,kBAAkB;IAC/B,wJAAwJ;IACxJ,wBAAwB,6BAA6B;CACtD;AAED,wFAAwF;AACxF,oBAAY,qBAAqB;IAC/B,iFAAiF;IACjF,MAAM,WAAW;IACjB,iFAAiF;IACjF,UAAU,eAAe;IACzB,kFAAkF;IAClF,SAAS,cAAc;CACxB;AAED,kFAAkF;AAClF,oBAAY,uBAAuB;IACjC,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAED,oBAAY,8BAA8B;IACxC,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;CAC9B;AAED,wFAAwF;AACxF,oBAAY,sBAAsB;IAChC,iBAAiB,sBAAsB;IACvC,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAED,uFAAuF;AACvF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;iBAgBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,wBAAgB,gCAAgC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAEnH;AAED,0FAA0F;AAC1F,eAAO,MAAM,6BAA6B;;;;;iBAaxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oEAAoE;AACpE,oBAAY,uBAAuB;IACjC,+CAA+C;IAC/C,SAAS,cAAc;IACvB,8EAA8E;IAC9E,cAAc,mBAAmB;IACjC,yEAAyE;IACzE,qBAAqB,0BAA0B;IAC/C,sEAAsE;IACtE,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,aAAa,kBAAkB;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,uBAAuB,GAAG,kBAAkB,CAUrG;AACD,oBAAY,6BAA6B;IACvC,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAmBD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,8BAA8B,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAElE,2GAA2G;AAC3G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiCxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC;;;;iBAO3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAGtG;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;GAGG;AACH,eAAO,MAAM,+BAA+B,QAAe,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4ClC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,oBAAY,4CAA4C;IACtD,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2CAA2C;;;iBAGtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAEhH;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,qCAAqC,GAAG,SAAS,CAG3G;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,QAAoB,CAAC;AAE3D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8F7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/esm/queue/jobs.shared.schemas.js CHANGED Viewed

@@ -216,6 +216,55 @@ export const QueueRetryBackoffConfigSchema = z.object({
 /** First receipt is short-lived; persisted recovery has its own policy deadline. */
 export const SCHEDULED_INITIAL_ADMISSION_MAX_AGE_MS = 5 * 60 * 1000;
 export const SCHEDULED_INITIAL_ADMISSION_FUTURE_SKEW_MS = 30 * 1000;
+/**
+ * How long after its token expired a delivery may still be RECORDED as a missed occurrence (#2212).
+ *
+ * An expired token stays cryptographically valid forever, so without a horizon anyone able to
+ * publish onto the application's queue could replay a captured token of any age and plant a
+ * "missed while absent" record. The horizon is APPROXIMATELY the job-row retention: within it, a
+ * replayed token almost always meets the occurrence's existing row and is recognised as already
+ * held; beyond it, no genuine backlog is plausible and the delivery is rejected as a trust failure.
+ * "Approximately" because a row that ran on time expires measured from its completion while the
+ * horizon is measured from the token's expiry, which leaves a window of a few minutes in which a
+ * replay is recorded as a fresh miss. It never runs anything, and archived run evidence still wins
+ * the occurrence in coverage.
+ *
+ * Equal to `JOB_EXECUTION_TTL_SECONDS` (declared further down, outside this shared block, so it
+ * cannot be referenced here without a temporal-dead-zone hazard); a test pins the two together, so
+ * changing one without the other fails.
+ */
+export const SCHEDULED_LATE_DELIVERY_HORIZON_MS = 30 * 24 * 60 * 60 * 1000;
+/**
+ * Why an AUTHENTIC scheduled delivery reached the application too late to be admitted (#2212).
+ *
+ * Either way the occurrence was MISSED: it is recorded as such and not run, and the schedule
+ * continues with its next occurrence. The two gates differ in WHO was late, which is why they are
+ * kept apart:
+ *
+ * - `TOKEN_EXPIRED` — the delivery sat in the queue for longer than its token lives, so nothing
+ *   consumed the application's scheduled queue for that long: the backend (or minion) was stopped,
+ *   restarting or crash-looping. This is the common case after a restart.
+ * - `OUTSIDE_ADMISSION_WINDOW` — the token is still current, but the occurrence it names is older
+ *   than the window. The scheduler may sign up to the window's length AFTER the occurrence, so the
+ *   delay is shared between the scheduler's publication and the application's consumption, and
+ *   cannot be attributed to the application alone.
+ *
+ * A late delivery is never an authentication failure: its signature, issuer and audience were
+ * proven before it was classified late. A token that cannot be proven authentic, that names an
+ * occurrence in the future, or that expired longer ago than `SCHEDULED_LATE_DELIVERY_HORIZON_MS`
+ * is a trust failure instead and is reported loudly.
+ *
+ * Missed occurrences are SKIPPED, never caught up: that is the established cron behaviour (a
+ * Kubernetes `CronJob` past its `startingDeadlineSeconds`, a Quartz trigger with the do-nothing
+ * misfire instruction), and it keeps the short signed window a replay bound rather than a credential.
+ */
+export var ScheduledDeliveryLateness;
+(function (ScheduledDeliveryLateness) {
+    /** The signed delivery token's `exp` passed before the delivery was consumed. */
+    ScheduledDeliveryLateness["TOKEN_EXPIRED"] = "token_expired";
+    /** The token is current, but the occurrence it names is older than `SCHEDULED_INITIAL_ADMISSION_MAX_AGE_MS`; scheduler and consumer share the delay. */
+    ScheduledDeliveryLateness["OUTSIDE_ADMISSION_WINDOW"] = "outside_admission_window";
+})(ScheduledDeliveryLateness || (ScheduledDeliveryLateness = {}));
 /** How the handler's complete effects tolerate execution after an uncertain outcome. */
 export var ScheduledReplaySafety;
 (function (ScheduledReplaySafety) {
@@ -286,13 +335,42 @@ export const ScheduledEvidencePolicySchema = z.object({
         ctx.addIssue({ code: 'custom', path: ['deferredField'], message: 'Deferred flag must be a selected result field' });
     }
 });
+/** How a scheduled occurrence's archived evidence came to exist. */
 export var ScheduledEvidenceSource;
 (function (ScheduledEvidenceSource) {
+    /** The handler ran and reported completion. */
     ScheduledEvidenceSource["EXECUTION"] = "execution";
+    /** The handler's reconciler established that an interrupted run completed. */
     ScheduledEvidenceSource["RECONCILIATION"] = "reconciliation";
+    /** An operator confirmed completion of an occurrence held for review. */
     ScheduledEvidenceSource["OPERATOR_CONFIRMATION"] = "operator_confirmation";
+    /** An operator decided an occurrence held for review will not run. */
     ScheduledEvidenceSource["ABANDONMENT"] = "abandonment";
+    /**
+     * The occurrence was never run: its authentic delivery reached the application after the
+     * admission deadline (see `ScheduledDeliveryLateness` for who was late). Coverage reads it as an
+     * EXPLAINED gap: the slot stays missing, because the occurrence did not run, and the record says
+     * why — rather than an unexplained one.
+     */
+    ScheduledEvidenceSource["LATE_DELIVERY"] = "late_delivery";
 })(ScheduledEvidenceSource || (ScheduledEvidenceSource = {}));
+/**
+ * The terminal invocation status each evidence source records — the one place that pairing is stated.
+ *
+ * A source whose occurrence never reached a successful invocation records `FAILED`; this follows the
+ * precedent `ABANDONMENT` set, and the SOURCE (never the status) is what says why it did not run.
+ */
+export function scheduledEvidenceInvocationStatus(source) {
+    switch (source) {
+        case ScheduledEvidenceSource.EXECUTION:
+        case ScheduledEvidenceSource.RECONCILIATION:
+        case ScheduledEvidenceSource.OPERATOR_CONFIRMATION:
+            return JobExecutionStatus.COMPLETED;
+        case ScheduledEvidenceSource.ABANDONMENT:
+        case ScheduledEvidenceSource.LATE_DELIVERY:
+            return JobExecutionStatus.FAILED;
+    }
+}
 export var ScheduledEvidenceResultStatus;
 (function (ScheduledEvidenceResultStatus) {
     ScheduledEvidenceResultStatus["CAPTURED"] = "captured";
@@ -321,8 +399,7 @@ export const ScheduledRunEvidenceSchema = ScheduledRunEvidenceFieldsSchema.super
         : evidence.jobType !== JobType.SCHEDULED_CRON || !(evidence.batchRef || evidence.operationPathKey))) {
         ctx.addIssue({ code: 'custom', message: 'Evidence requires exactly one scheduled batch, operation or minion target' });
     }
-    const expectedStatus = evidence.source === ScheduledEvidenceSource.ABANDONMENT ? JobExecutionStatus.FAILED : JobExecutionStatus.COMPLETED;
-    if (evidence.invocationStatus !== expectedStatus) {
+    if (evidence.invocationStatus !== scheduledEvidenceInvocationStatus(evidence.source)) {
         ctx.addIssue({ code: 'custom', path: ['invocationStatus'], message: 'Terminal outcome must agree with evidence source' });
     }
     if (evidence.expiresAt.getTime() !== evidence.completedAt.getTime() + evidence.policy.retainForMs) {
@@ -361,6 +438,12 @@ export const ScheduledExecutionStateSchema = z.object({
     /** A successful reconciliation authorizes exactly the next execution admission. */
     reconciledSafe: z.boolean().default(false),
     reason: z.string().optional(),
+    /**
+     * Present only on an occurrence recorded from a LATE delivery (#2212): it was never admitted and
+     * never runs. Structured rather than folded into `reason`, so the coverage report and a repeated
+     * late receipt recognise the row without parsing prose.
+     */
+    lateness: z.enum(ScheduledDeliveryLateness).optional(),
     attempts: z.array(z.object({
         attemptId: z.uuid(),
         phase: z.enum(ScheduledExecutionPhase),