@wildo-ai/saas-technical-doc 1.1.1

package/dist/esm/runtime/docs-auth-session.schemas.js

@@ -0,0 +1,50 @@
+import { z } from 'zod';
+/**
+ * Roles relevant to the docs-site gating decisions.
+ *
+ * Mirrors the role axis the SaaS app uses on access tokens. The docs site
+ * itself only cares about ONE distinction: "is this user an org admin or
+ * not?" — used by the Navbar swizzle to hide the "Organization API" link
+ * and by the DocItem swizzle to gate `/api/organization/*` pages
+ * (saas-technical-doc.md K-11).
+ *
+ * `ORG_ADMIN` value matches the string carried by the access token's
+ * `role` claim issued by `auth-token-issuer.backend.service.ts`. The
+ * generic `OTHER` bucket covers every other role (regular org member,
+ * viewer, application-level admin, etc.) — none of them grant Org-API
+ * visibility on the docs site.
+ */
+export var DocsRole;
+(function (DocsRole) {
+    DocsRole["ORG_ADMIN"] = "org_admin";
+    DocsRole["OTHER"] = "other";
+})(DocsRole || (DocsRole = {}));
+/**
+ * Subset of access-token claims the docs site cares about.
+ *
+ * The full access-token payload issued by the SaaS backend carries many
+ * more fields (organization id, application id, scopes, …) — we
+ * deliberately project only the minimum needed by the docs-site swizzles
+ * so that:
+ *   1. A future change to the access-token shape that adds fields
+ *      doesn't ripple into the docs site.
+ *   2. The docs site never accidentally renders or transmits sensitive
+ *      claims it has no business consuming.
+ *
+ * `userId` and `email` are present for display purposes ("Signed in as
+ * <email>" in the navbar — done by the Navbar swizzle, not this package).
+ *
+ * `role` is the gating axis (see {@link DocsRole}).
+ *
+ * `exp` (UNIX seconds) lets the context clear the in-memory session as
+ * soon as the access token expires — without ever calling the network.
+ * No refresh loop (K-9b): when `exp` passes, the user is anonymous again
+ * until they re-handshake from the SaaS app.
+ */
+export const DocsJwtClaimsSchema = z.strictObject({
+    userId: z.string().min(1),
+    email: z.email().optional(),
+    role: z.enum(DocsRole),
+    exp: z.number().int().positive(),
+});
+//# sourceMappingURL=docs-auth-session.schemas.js.map

package/dist/esm/runtime/docs-auth-session.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-auth-session.schemas.js","sourceRoot":"","sources":["../../../../src/runtime/docs-auth-session.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,QAGX;AAHD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,2BAAe,CAAA;AACjB,CAAC,EAHW,QAAQ,KAAR,QAAQ,QAGnB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\n/**\n * Roles relevant to the docs-site gating decisions.\n *\n * Mirrors the role axis the SaaS app uses on access tokens. The docs site\n * itself only cares about ONE distinction: \"is this user an org admin or\n * not?\" — used by the Navbar swizzle to hide the \"Organization API\" link\n * and by the DocItem swizzle to gate `/api/organization/*` pages\n * (saas-technical-doc.md K-11).\n *\n * `ORG_ADMIN` value matches the string carried by the access token's\n * `role` claim issued by `auth-token-issuer.backend.service.ts`. The\n * generic `OTHER` bucket covers every other role (regular org member,\n * viewer, application-level admin, etc.) — none of them grant Org-API\n * visibility on the docs site.\n */\nexport enum DocsRole {\n  ORG_ADMIN = 'org_admin',\n  OTHER = 'other',\n}\n\n/**\n * Subset of access-token claims the docs site cares about.\n *\n * The full access-token payload issued by the SaaS backend carries many\n * more fields (organization id, application id, scopes, …) — we\n * deliberately project only the minimum needed by the docs-site swizzles\n * so that:\n *   1. A future change to the access-token shape that adds fields\n *      doesn't ripple into the docs site.\n *   2. The docs site never accidentally renders or transmits sensitive\n *      claims it has no business consuming.\n *\n * `userId` and `email` are present for display purposes (\"Signed in as\n * <email>\" in the navbar — done by the Navbar swizzle, not this package).\n *\n * `role` is the gating axis (see {@link DocsRole}).\n *\n * `exp` (UNIX seconds) lets the context clear the in-memory session as\n * soon as the access token expires — without ever calling the network.\n * No refresh loop (K-9b): when `exp` passes, the user is anonymous again\n * until they re-handshake from the SaaS app.\n */\nexport const DocsJwtClaimsSchema = z.strictObject({\n  userId: z.string().min(1),\n  email: z.email().optional(),\n  role: z.enum(DocsRole),\n  exp: z.number().int().positive(),\n});\nexport type DocsJwtClaims = z.infer<typeof DocsJwtClaimsSchema>;\n\n/**\n * Public shape exposed by `useDocsAuthSession()` (saas-technical-doc.md K-11).\n *\n * Three mutually-exclusive states:\n *   - `status: 'anonymous'`        — no handoff has been completed.\n *   - `status: 'exchanging'`       — `/auth/exchange?code=…` is in flight.\n *   - `status: 'authenticated'`    — `claims` and `accessToken` are present.\n *\n * Consumers (the three swizzles) discriminate on `status` and never reach\n * for `accessToken`/`claims` while in the `anonymous` or `exchanging`\n * states — the type narrows correctly thanks to the discriminated union.\n *\n * Does NOT model an `error` state directly: errors during the exchange\n * are surfaced via the `AuthExchangePage` component's local UI, after\n * which the session falls back to `anonymous`. Keeping the session shape\n * tight prevents the swizzles from having to render error-recovery UI\n * for events they did not cause.\n */\nexport type DocsAuthSession =\n  | { status: 'anonymous' }\n  | { status: 'exchanging' }\n  | { status: 'authenticated'; accessToken: string; claims: DocsJwtClaims };\n"]}

package/dist/esm/runtime/frontend-provider-registry.techdoc.d.ts

@@ -0,0 +1,17 @@
+import type { FrontendProviderEntry, FrontendProvidersBlock, ProviderCapability } from '@wildo-ai/saas-models/public-runtime';
+export type FrontendTechdocProviderRef = string & {
+    readonly __brand: 'FrontendTechdocProviderRef';
+};
+export type FrontendTechdocProviderModule = FrontendProviderEntry;
+export interface FrontendTechdocProviderRegistry {
+    readonly modules: ReadonlyMap<FrontendTechdocProviderRef, FrontendTechdocProviderModule>;
+    getProviderByRef(ref: FrontendTechdocProviderRef): FrontendTechdocProviderModule | undefined;
+    getProvidersByProviderCapability(providerCapability: ProviderCapability): ReadonlyArray<FrontendTechdocProviderModule>;
+    findProviderByProviderCapability(providerCapability: ProviderCapability): FrontendTechdocProviderModule | undefined;
+}
+/**
+ * Tech-doc runtime registry hydrated from the materialized frontend-provider
+ * block for the active docs service.
+ */
+export declare function createFrontendTechdocProviderRegistry(frontendProviders?: FrontendProvidersBlock): FrontendTechdocProviderRegistry;
+//# sourceMappingURL=frontend-provider-registry.techdoc.d.ts.map

package/dist/esm/runtime/frontend-provider-registry.techdoc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-provider-registry.techdoc.d.ts","sourceRoot":"","sources":["../../../../src/runtime/frontend-provider-registry.techdoc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAE9C,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG;IAChD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,CAAC;AAElE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAC3B,0BAA0B,EAC1B,6BAA6B,CAC9B,CAAC;IAEF,gBAAgB,CACd,GAAG,EAAE,0BAA0B,GAC9B,6BAA6B,GAAG,SAAS,CAAC;IAE7C,gCAAgC,CAC9B,kBAAkB,EAAE,kBAAkB,GACrC,aAAa,CAAC,6BAA6B,CAAC,CAAC;IAEhD,gCAAgC,CAC9B,kBAAkB,EAAE,kBAAkB,GACrC,6BAA6B,GAAG,SAAS,CAAC;CAC9C;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,iBAAiB,CAAC,EAAE,sBAAsB,GACzC,+BAA+B,CAwBjC"}

package/dist/esm/runtime/frontend-provider-registry.techdoc.js

@@ -0,0 +1,23 @@
+/**
+ * Tech-doc runtime registry hydrated from the materialized frontend-provider
+ * block for the active docs service.
+ */
+export function createFrontendTechdocProviderRegistry(frontendProviders) {
+    const modules = new Map(Object.entries(frontendProviders?.providers ?? {}).map(([ref, provider]) => [
+        ref,
+        provider,
+    ]));
+    return {
+        modules,
+        getProviderByRef(ref) {
+            return modules.get(ref);
+        },
+        getProvidersByProviderCapability(providerCapability) {
+            return [...modules.values()].filter((provider) => provider.providerCapabilities.includes(providerCapability));
+        },
+        findProviderByProviderCapability(providerCapability) {
+            return [...modules.values()].find((provider) => provider.providerCapabilities.includes(providerCapability));
+        },
+    };
+}
+//# sourceMappingURL=frontend-provider-registry.techdoc.js.map

package/dist/esm/runtime/frontend-provider-registry.techdoc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-provider-registry.techdoc.js","sourceRoot":"","sources":["../../../../src/runtime/frontend-provider-registry.techdoc.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AACH,MAAM,UAAU,qCAAqC,CACnD,iBAA0C;IAE1C,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC1E,GAAiC;QACjC,QAAyC;KAC1C,CAAC,CACH,CAAC;IAEF,OAAO;QACL,OAAO;QACP,gBAAgB,CAAC,GAA+B;YAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,gCAAgC,CAAC,kBAAsC;YACrE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/C,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC3D,CAAC;QACJ,CAAC;QACD,gCAAgC,CAAC,kBAAsC;YACrE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7C,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC3D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  FrontendProviderEntry,\n  FrontendProvidersBlock,\n  ProviderCapability,\n} from '@wildo-ai/saas-models/public-runtime';\n\nexport type FrontendTechdocProviderRef = string & {\n  readonly __brand: 'FrontendTechdocProviderRef';\n};\n\nexport type FrontendTechdocProviderModule = FrontendProviderEntry;\n\nexport interface FrontendTechdocProviderRegistry {\n  readonly modules: ReadonlyMap<\n    FrontendTechdocProviderRef,\n    FrontendTechdocProviderModule\n  >;\n\n  getProviderByRef(\n    ref: FrontendTechdocProviderRef,\n  ): FrontendTechdocProviderModule | undefined;\n\n  getProvidersByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): ReadonlyArray<FrontendTechdocProviderModule>;\n\n  findProviderByProviderCapability(\n    providerCapability: ProviderCapability,\n  ): FrontendTechdocProviderModule | undefined;\n}\n\n/**\n * Tech-doc runtime registry hydrated from the materialized frontend-provider\n * block for the active docs service.\n */\nexport function createFrontendTechdocProviderRegistry(\n  frontendProviders?: FrontendProvidersBlock,\n): FrontendTechdocProviderRegistry {\n  const modules = new Map<FrontendTechdocProviderRef, FrontendTechdocProviderModule>(\n    Object.entries(frontendProviders?.providers ?? {}).map(([ref, provider]) => [\n      ref as FrontendTechdocProviderRef,\n      provider as FrontendTechdocProviderModule,\n    ]),\n  );\n\n  return {\n    modules,\n    getProviderByRef(ref: FrontendTechdocProviderRef) {\n      return modules.get(ref);\n    },\n    getProvidersByProviderCapability(providerCapability: ProviderCapability) {\n      return [...modules.values()].filter((provider) =>\n        provider.providerCapabilities.includes(providerCapability),\n      );\n    },\n    findProviderByProviderCapability(providerCapability: ProviderCapability) {\n      return [...modules.values()].find((provider) =>\n        provider.providerCapabilities.includes(providerCapability),\n      );\n    },\n  };\n}\n"]}

package/dist/esm/runtime/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * `@wildo-ai/saas-technical-doc/runtime` — browser-only auth runtime
+ * for the Docusaurus-served docs site (saas-technical-doc.md K-9b).
+ *
+ * Public surface (consumed by the three Docusaurus swizzles per K-11):
+ *
+ *   - `<DocsAuthProvider apiBaseUrl="…">` — Root swizzle wraps children.
+ *   - `useDocsAuthSession()`              — Navbar + DocItem swizzles read.
+ *   - `<AuthExchangePage />`              — mounted at `/auth/exchange`.
+ *   - `DocsAuthClient`                    — direct access for the DocItem
+ *                                           swizzle's "request handoff back
+ *                                           to app" code path.
+ *   - `DocsAuthClientError` + code type   — typed error branch surface.
+ *   - `DocsRole` / `DocsAuthSession`      — discriminated-union types.
+ *   - `useDocsFrontendProviderRegistry()` — read the materialized frontend
+ *                                           provider registry for this docs
+ *                                           service (search / future SDK
+ *                                           widgets).
+ *   - `decodeJwtClaims`                   — exposed so apps can decode
+ *                                           access tokens issued by
+ *                                           non-handoff flows (rare;
+ *                                           reserved for advanced use).
+ *
+ * @wildo-boundary
+ *   - This sub-tree MAY use React, `react-dom`, the browser `fetch`, and
+ *     the browser `atob` global. It MUST NOT import:
+ *       - Node built-ins (`fs`, `path`, …)         — would break Docusaurus
+ *                                                     client bundle.
+ *       - `@wildo-ai/saas-frontend-lib`            — entire point of K-9b
+ *                                                     is to NOT pull this.
+ *       - inversify                                — reserved for the SaaS
+ *                                                     app DI stack.
+ *   - This sub-tree MAY import shared schemas + DTO types from
+ *     `@wildo-ai/saas-models/public-runtime` (the lightweight subset
+ *     allow-listed by `runtime-bundle-isolation.test.ts`).
+ *   - This sub-tree MUST initialize `@wildo-ai/zod-decorators` at runtime
+ *     entry — see the `ensureZodDecoratorsLoaded(z)` side-effect below.
+ *     Skipping this leaves the docs runtime with an under-augmented Zod
+ *     `ZodObject` declaration, which historically caused cross-package
+ *     `z.infer` widening (the H-3 / M-7 cross-frontend-handoff incident,
+ *     see `.cursor/plans/cross-app-jwt-propagation.md`).
+ *   - The package's `./companion` and `./` (root) entries MUST NOT import
+ *     from this sub-tree (see those files' boundary blocks).
+ */
+export * from './docs-auth-session.schemas';
+export * from './decode-jwt-claims';
+export * from './docs-auth-client';
+export * from './DocsAuthContext';
+export * from './frontend-provider-registry.techdoc';
+export { FrontendProviderEntrySchema, FrontendProvidersBlockSchema, type FrontendProviderEntry, type FrontendProvidersBlock, } from '@wildo-ai/saas-models/public-runtime';
+export * from './use-docs-auth-session';
+export * from './use-docs-frontend-provider-registry';
+export * from './AuthExchangePage';
+export * from './openapi-reference-model';
+export * from './openapi-reference-conservation';
+export * from './openapi-reference-view';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAuBH,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sCAAsC,CAAC;AACrD,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,uCAAuC,CAAC;AACtD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC"}

package/dist/esm/runtime/index.js

@@ -0,0 +1,76 @@
+/**
+ * `@wildo-ai/saas-technical-doc/runtime` — browser-only auth runtime
+ * for the Docusaurus-served docs site (saas-technical-doc.md K-9b).
+ *
+ * Public surface (consumed by the three Docusaurus swizzles per K-11):
+ *
+ *   - `<DocsAuthProvider apiBaseUrl="…">` — Root swizzle wraps children.
+ *   - `useDocsAuthSession()`              — Navbar + DocItem swizzles read.
+ *   - `<AuthExchangePage />`              — mounted at `/auth/exchange`.
+ *   - `DocsAuthClient`                    — direct access for the DocItem
+ *                                           swizzle's "request handoff back
+ *                                           to app" code path.
+ *   - `DocsAuthClientError` + code type   — typed error branch surface.
+ *   - `DocsRole` / `DocsAuthSession`      — discriminated-union types.
+ *   - `useDocsFrontendProviderRegistry()` — read the materialized frontend
+ *                                           provider registry for this docs
+ *                                           service (search / future SDK
+ *                                           widgets).
+ *   - `decodeJwtClaims`                   — exposed so apps can decode
+ *                                           access tokens issued by
+ *                                           non-handoff flows (rare;
+ *                                           reserved for advanced use).
+ *
+ * @wildo-boundary
+ *   - This sub-tree MAY use React, `react-dom`, the browser `fetch`, and
+ *     the browser `atob` global. It MUST NOT import:
+ *       - Node built-ins (`fs`, `path`, …)         — would break Docusaurus
+ *                                                     client bundle.
+ *       - `@wildo-ai/saas-frontend-lib`            — entire point of K-9b
+ *                                                     is to NOT pull this.
+ *       - inversify                                — reserved for the SaaS
+ *                                                     app DI stack.
+ *   - This sub-tree MAY import shared schemas + DTO types from
+ *     `@wildo-ai/saas-models/public-runtime` (the lightweight subset
+ *     allow-listed by `runtime-bundle-isolation.test.ts`).
+ *   - This sub-tree MUST initialize `@wildo-ai/zod-decorators` at runtime
+ *     entry — see the `ensureZodDecoratorsLoaded(z)` side-effect below.
+ *     Skipping this leaves the docs runtime with an under-augmented Zod
+ *     `ZodObject` declaration, which historically caused cross-package
+ *     `z.infer` widening (the H-3 / M-7 cross-frontend-handoff incident,
+ *     see `.cursor/plans/cross-app-jwt-propagation.md`).
+ *   - The package's `./companion` and `./` (root) entries MUST NOT import
+ *     from this sub-tree (see those files' boundary blocks).
+ */
+/**
+ * Boot the project's Zod decorator augmentation for this bundle.
+ *
+ * `@wildo-ai/saas-models/public-runtime` re-exports schemas authored
+ * against the augmented `ZodObject` interface declared by
+ * `@wildo-ai/zod-decorators`. Without `ensureZodDecoratorsLoaded(z)`
+ * being called once on this bundle's Zod instance, the docs runtime sees
+ * a schema graph whose `.shape` access paths and `z.infer` results don't
+ * match what the SaaS app sees — a silent contract drift that bit us in
+ * H-3 / M-7. The call is idempotent (guarded inside the function) so
+ * importing this module multiple times is a no-op after the first load.
+ *
+ * The bare-specifier import is allow-listed by
+ * `runtime-bundle-isolation.test.ts` (revised 2026-04-19); the package
+ * itself is browser-safe (it only mutates `z.ZodType.prototype`).
+ */
+import { z } from 'zod';
+import { ensureZodDecoratorsLoaded } from '@wildo-ai/zod-decorators';
+ensureZodDecoratorsLoaded(z);
+export * from './docs-auth-session.schemas.js';
+export * from './decode-jwt-claims.js';
+export * from './docs-auth-client.js';
+export * from './DocsAuthContext.js';
+export * from './frontend-provider-registry.techdoc.js';
+export { FrontendProviderEntrySchema, FrontendProvidersBlockSchema, } from '@wildo-ai/saas-models/public-runtime';
+export * from './use-docs-auth-session.js';
+export * from './use-docs-frontend-provider-registry.js';
+export * from './AuthExchangePage.js';
+export * from './openapi-reference-model.js';
+export * from './openapi-reference-conservation.js';
+export * from './openapi-reference-view.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,yBAAyB,CAAC,CAAC,CAAC,CAAC;AAE7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sCAAsC,CAAC;AACrD,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAG7B,MAAM,sCAAsC,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,uCAAuC,CAAC;AACtD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC","sourcesContent":["/**\n * `@wildo-ai/saas-technical-doc/runtime` — browser-only auth runtime\n * for the Docusaurus-served docs site (saas-technical-doc.md K-9b).\n *\n * Public surface (consumed by the three Docusaurus swizzles per K-11):\n *\n *   - `<DocsAuthProvider apiBaseUrl=\"…\">` — Root swizzle wraps children.\n *   - `useDocsAuthSession()`              — Navbar + DocItem swizzles read.\n *   - `<AuthExchangePage />`              — mounted at `/auth/exchange`.\n *   - `DocsAuthClient`                    — direct access for the DocItem\n *                                           swizzle's \"request handoff back\n *                                           to app\" code path.\n *   - `DocsAuthClientError` + code type   — typed error branch surface.\n *   - `DocsRole` / `DocsAuthSession`      — discriminated-union types.\n *   - `useDocsFrontendProviderRegistry()` — read the materialized frontend\n *                                           provider registry for this docs\n *                                           service (search / future SDK\n *                                           widgets).\n *   - `decodeJwtClaims`                   — exposed so apps can decode\n *                                           access tokens issued by\n *                                           non-handoff flows (rare;\n *                                           reserved for advanced use).\n *\n * @wildo-boundary\n *   - This sub-tree MAY use React, `react-dom`, the browser `fetch`, and\n *     the browser `atob` global. It MUST NOT import:\n *       - Node built-ins (`fs`, `path`, …)         — would break Docusaurus\n *                                                     client bundle.\n *       - `@wildo-ai/saas-frontend-lib`            — entire point of K-9b\n *                                                     is to NOT pull this.\n *       - inversify                                — reserved for the SaaS\n *                                                     app DI stack.\n *   - This sub-tree MAY import shared schemas + DTO types from\n *     `@wildo-ai/saas-models/public-runtime` (the lightweight subset\n *     allow-listed by `runtime-bundle-isolation.test.ts`).\n *   - This sub-tree MUST initialize `@wildo-ai/zod-decorators` at runtime\n *     entry — see the `ensureZodDecoratorsLoaded(z)` side-effect below.\n *     Skipping this leaves the docs runtime with an under-augmented Zod\n *     `ZodObject` declaration, which historically caused cross-package\n *     `z.infer` widening (the H-3 / M-7 cross-frontend-handoff incident,\n *     see `.cursor/plans/cross-app-jwt-propagation.md`).\n *   - The package's `./companion` and `./` (root) entries MUST NOT import\n *     from this sub-tree (see those files' boundary blocks).\n */\n\n/**\n * Boot the project's Zod decorator augmentation for this bundle.\n *\n * `@wildo-ai/saas-models/public-runtime` re-exports schemas authored\n * against the augmented `ZodObject` interface declared by\n * `@wildo-ai/zod-decorators`. Without `ensureZodDecoratorsLoaded(z)`\n * being called once on this bundle's Zod instance, the docs runtime sees\n * a schema graph whose `.shape` access paths and `z.infer` results don't\n * match what the SaaS app sees — a silent contract drift that bit us in\n * H-3 / M-7. The call is idempotent (guarded inside the function) so\n * importing this module multiple times is a no-op after the first load.\n *\n * The bare-specifier import is allow-listed by\n * `runtime-bundle-isolation.test.ts` (revised 2026-04-19); the package\n * itself is browser-safe (it only mutates `z.ZodType.prototype`).\n */\nimport { z } from 'zod';\nimport { ensureZodDecoratorsLoaded } from '@wildo-ai/zod-decorators';\n\nensureZodDecoratorsLoaded(z);\n\nexport * from './docs-auth-session.schemas';\nexport * from './decode-jwt-claims';\nexport * from './docs-auth-client';\nexport * from './DocsAuthContext';\nexport * from './frontend-provider-registry.techdoc';\nexport {\n  FrontendProviderEntrySchema,\n  FrontendProvidersBlockSchema,\n  type FrontendProviderEntry,\n  type FrontendProvidersBlock,\n} from '@wildo-ai/saas-models/public-runtime';\nexport * from './use-docs-auth-session';\nexport * from './use-docs-frontend-provider-registry';\nexport * from './AuthExchangePage';\nexport * from './openapi-reference-model';\nexport * from './openapi-reference-conservation';\nexport * from './openapi-reference-view';\n"]}

package/dist/esm/runtime/openapi-reference-conservation.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Exact conservation boundary between one generated OpenAPI section and the
+ * ephemeral model consumed by the native Docusaurus renderer.
+ *
+ * The renderer is allowed to reshape navigation, never to change inventory.
+ * This module therefore compares identities from the original document with
+ * identities in the projected model instead of trusting diagnostic counts or
+ * reconstructing a second navigation document.
+ */
+import type { OpenApiSectionOutput } from '../openapi/openapi-generation-output.schemas';
+import { type ApiReferenceModel } from './openapi-reference-model';
+/**
+ * Verifies a supplied projection. Exported separately so negative tests and CI
+ * tools can prove the guard catches a future mapper that drops or duplicates a
+ * panel, rather than only exercising today's mapper implementation.
+ */
+export declare function assertApiReferenceModelConservation(section: OpenApiSectionOutput, model: ApiReferenceModel): void;
+/** Builds the native renderer model and refuses any source-to-view loss. */
+export declare function createConservedApiReferenceModel(section: OpenApiSectionOutput): ApiReferenceModel;
+//# sourceMappingURL=openapi-reference-conservation.d.ts.map

package/dist/esm/runtime/openapi-reference-conservation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-reference-conservation.d.ts","sourceRoot":"","sources":["../../../../src/runtime/openapi-reference-conservation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAwE5F;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAiBjH;AAED,4EAA4E;AAC5E,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAIjG"}

package/dist/esm/runtime/openapi-reference-conservation.js

@@ -0,0 +1,102 @@
+/**
+ * Exact conservation boundary between one generated OpenAPI section and the
+ * ephemeral model consumed by the native Docusaurus renderer.
+ *
+ * The renderer is allowed to reshape navigation, never to change inventory.
+ * This module therefore compares identities from the original document with
+ * identities in the projected model instead of trusting diagnostic counts or
+ * reconstructing a second navigation document.
+ */
+import { createApiReferenceModel } from './openapi-reference-model.js';
+const OPENAPI_HTTP_METHODS = new Set([
+    'get',
+    'put',
+    'post',
+    'delete',
+    'options',
+    'head',
+    'patch',
+    'trace',
+]);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function sorted(values) {
+    return [...values].sort((left, right) => left.localeCompare(right));
+}
+function assertExactInventory(label, expected, actual) {
+    const expectedSorted = sorted(expected);
+    const actualSorted = sorted(actual);
+    if (new Set(expectedSorted).size !== expectedSorted.length) {
+        throw new Error(`API-reference renderer conservation: source ${label} contains duplicate identities`);
+    }
+    if (new Set(actualSorted).size !== actualSorted.length) {
+        throw new Error(`API-reference renderer conservation: rendered ${label} contains duplicate identities`);
+    }
+    if (expectedSorted.length !== actualSorted.length
+        || expectedSorted.some((identity, index) => actualSorted[index] !== identity)) {
+        throw new Error(`API-reference renderer conservation: source and rendered ${label} inventories disagree`);
+    }
+}
+function sourceOperationVariantRefs(document) {
+    if (!isRecord(document) || !isRecord(document.paths)) {
+        throw new Error('API-reference renderer conservation: document has no OpenAPI paths object');
+    }
+    const refs = [];
+    for (const [path, pathItem] of Object.entries(document.paths)) {
+        if (!isRecord(pathItem))
+            throw new Error(`API-reference renderer conservation: path item '${path}' is malformed`);
+        for (const [method, operation] of Object.entries(pathItem)) {
+            if (!OPENAPI_HTTP_METHODS.has(method))
+                continue;
+            if (!isRecord(operation) || !isRecord(operation['x-wildo']) || typeof operation['x-wildo'].operationVariantRef !== 'string') {
+                throw new Error(`API-reference renderer conservation: ${method.toUpperCase()} ${path} has no exact operation-variant identity`);
+            }
+            refs.push(operation['x-wildo'].operationVariantRef);
+        }
+    }
+    return refs;
+}
+function sourceResourceRefs(document) {
+    if (!isRecord(document) || !Array.isArray(document.tags)) {
+        throw new Error('API-reference renderer conservation: document has no OpenAPI resource tags');
+    }
+    return document.tags.map((tag, index) => {
+        if (!isRecord(tag) || !isRecord(tag['x-wildo']) || typeof tag['x-wildo'].resourceRef !== 'string') {
+            throw new Error(`API-reference renderer conservation: resource tag at index ${index} has no exact identity`);
+        }
+        return tag['x-wildo'].resourceRef;
+    });
+}
+function renderedOperationVariantRefs(model) {
+    return model.resources.flatMap((resource) => resource.families.flatMap((family) => family.variants.map((variant) => variant.variantRef)));
+}
+/**
+ * Verifies a supplied projection. Exported separately so negative tests and CI
+ * tools can prove the guard catches a future mapper that drops or duplicates a
+ * panel, rather than only exercising today's mapper implementation.
+ */
+export function assertApiReferenceModelConservation(section, model) {
+    const sourceVariants = sourceOperationVariantRefs(section.document);
+    const sourceResources = sourceResourceRefs(section.document);
+    const renderedVariants = renderedOperationVariantRefs(model);
+    const renderedResources = model.resources.map((resource) => resource.resourceRef);
+    if (section.operationCount !== sourceVariants.length) {
+        throw new Error('API-reference renderer conservation: section operationCount disagrees with its OpenAPI document');
+    }
+    if (section.resourceCount !== sourceResources.length) {
+        throw new Error('API-reference renderer conservation: section resourceCount disagrees with its OpenAPI document');
+    }
+    if (model.operationCount !== renderedVariants.length) {
+        throw new Error('API-reference renderer conservation: model operationCount disagrees with its rendered variants');
+    }
+    assertExactInventory('operation variants', sourceVariants, renderedVariants);
+    assertExactInventory('resource tags', sourceResources, renderedResources);
+}
+/** Builds the native renderer model and refuses any source-to-view loss. */
+export function createConservedApiReferenceModel(section) {
+    const model = createApiReferenceModel(section.document);
+    assertApiReferenceModelConservation(section, model);
+    return model;
+}
+//# sourceMappingURL=openapi-reference-conservation.js.map

package/dist/esm/runtime/openapi-reference-conservation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-reference-conservation.js","sourceRoot":"","sources":["../../../../src/runtime/openapi-reference-conservation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,uBAAuB,EAA0B,MAAM,2BAA2B,CAAC;AAI5F,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,KAAK;IACL,KAAK;IACL,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB;IACvC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,QAA2B,EAAE,MAAyB;IACjG,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,gCAAgC,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,gCAAgC,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;WAC5C,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,4DAA4D,KAAK,uBAAuB,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAiB;IACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,gBAAgB,CAAC,CAAC;QAClH,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAChD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;gBAC5H,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,0CAA0C,CAAC,CAAC;YAClI,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiB;IAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CAAC,8DAA8D,KAAK,wBAAwB,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAwB;IAC5D,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC5I,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,OAA6B,EAAE,KAAwB;IACzG,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAElF,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,oBAAoB,CAAC,oBAAoB,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7E,oBAAoB,CAAC,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;AAC5E,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gCAAgC,CAAC,OAA6B;IAC5E,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,mCAAmC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Exact conservation boundary between one generated OpenAPI section and the\n * ephemeral model consumed by the native Docusaurus renderer.\n *\n * The renderer is allowed to reshape navigation, never to change inventory.\n * This module therefore compares identities from the original document with\n * identities in the projected model instead of trusting diagnostic counts or\n * reconstructing a second navigation document.\n */\n\nimport type { OpenApiSectionOutput } from '../openapi/openapi-generation-output.schemas';\nimport { createApiReferenceModel, type ApiReferenceModel } from './openapi-reference-model';\n\ntype UnknownRecord = Record<string, unknown>;\n\nconst OPENAPI_HTTP_METHODS: ReadonlySet<string> = new Set([\n  'get',\n  'put',\n  'post',\n  'delete',\n  'options',\n  'head',\n  'patch',\n  'trace',\n]);\n\nfunction isRecord(value: unknown): value is UnknownRecord {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction sorted(values: readonly string[]): readonly string[] {\n  return [...values].sort((left, right) => left.localeCompare(right));\n}\n\nfunction assertExactInventory(label: string, expected: readonly string[], actual: readonly string[]): void {\n  const expectedSorted = sorted(expected);\n  const actualSorted = sorted(actual);\n  if (new Set(expectedSorted).size !== expectedSorted.length) {\n    throw new Error(`API-reference renderer conservation: source ${label} contains duplicate identities`);\n  }\n  if (new Set(actualSorted).size !== actualSorted.length) {\n    throw new Error(`API-reference renderer conservation: rendered ${label} contains duplicate identities`);\n  }\n  if (expectedSorted.length !== actualSorted.length\n    || expectedSorted.some((identity, index) => actualSorted[index] !== identity)) {\n    throw new Error(`API-reference renderer conservation: source and rendered ${label} inventories disagree`);\n  }\n}\n\nfunction sourceOperationVariantRefs(document: unknown): readonly string[] {\n  if (!isRecord(document) || !isRecord(document.paths)) {\n    throw new Error('API-reference renderer conservation: document has no OpenAPI paths object');\n  }\n  const refs: string[] = [];\n  for (const [path, pathItem] of Object.entries(document.paths)) {\n    if (!isRecord(pathItem)) throw new Error(`API-reference renderer conservation: path item '${path}' is malformed`);\n    for (const [method, operation] of Object.entries(pathItem)) {\n      if (!OPENAPI_HTTP_METHODS.has(method)) continue;\n      if (!isRecord(operation) || !isRecord(operation['x-wildo']) || typeof operation['x-wildo'].operationVariantRef !== 'string') {\n        throw new Error(`API-reference renderer conservation: ${method.toUpperCase()} ${path} has no exact operation-variant identity`);\n      }\n      refs.push(operation['x-wildo'].operationVariantRef);\n    }\n  }\n  return refs;\n}\n\nfunction sourceResourceRefs(document: unknown): readonly string[] {\n  if (!isRecord(document) || !Array.isArray(document.tags)) {\n    throw new Error('API-reference renderer conservation: document has no OpenAPI resource tags');\n  }\n  return document.tags.map((tag, index) => {\n    if (!isRecord(tag) || !isRecord(tag['x-wildo']) || typeof tag['x-wildo'].resourceRef !== 'string') {\n      throw new Error(`API-reference renderer conservation: resource tag at index ${index} has no exact identity`);\n    }\n    return tag['x-wildo'].resourceRef;\n  });\n}\n\nfunction renderedOperationVariantRefs(model: ApiReferenceModel): readonly string[] {\n  return model.resources.flatMap((resource) => resource.families.flatMap((family) => family.variants.map((variant) => variant.variantRef)));\n}\n\n/**\n * Verifies a supplied projection. Exported separately so negative tests and CI\n * tools can prove the guard catches a future mapper that drops or duplicates a\n * panel, rather than only exercising today's mapper implementation.\n */\nexport function assertApiReferenceModelConservation(section: OpenApiSectionOutput, model: ApiReferenceModel): void {\n  const sourceVariants = sourceOperationVariantRefs(section.document);\n  const sourceResources = sourceResourceRefs(section.document);\n  const renderedVariants = renderedOperationVariantRefs(model);\n  const renderedResources = model.resources.map((resource) => resource.resourceRef);\n\n  if (section.operationCount !== sourceVariants.length) {\n    throw new Error('API-reference renderer conservation: section operationCount disagrees with its OpenAPI document');\n  }\n  if (section.resourceCount !== sourceResources.length) {\n    throw new Error('API-reference renderer conservation: section resourceCount disagrees with its OpenAPI document');\n  }\n  if (model.operationCount !== renderedVariants.length) {\n    throw new Error('API-reference renderer conservation: model operationCount disagrees with its rendered variants');\n  }\n  assertExactInventory('operation variants', sourceVariants, renderedVariants);\n  assertExactInventory('resource tags', sourceResources, renderedResources);\n}\n\n/** Builds the native renderer model and refuses any source-to-view loss. */\nexport function createConservedApiReferenceModel(section: OpenApiSectionOutput): ApiReferenceModel {\n  const model = createApiReferenceModel(section.document);\n  assertApiReferenceModelConservation(section, model);\n  return model;\n}\n"]}

package/dist/esm/runtime/openapi-reference-model.d.ts

@@ -0,0 +1,224 @@
+/**
+ * Browser-safe projection of one generated OpenAPI document.
+ *
+ * Navigation is derived in memory from the verified OpenAPI bytes. The model
+ * deliberately persists nothing and never invents API meaning: resource tags,
+ * `operationId`, standard OpenAPI method/path fields and `x-wildo` source
+ * identity are its only inputs.
+ */
+export interface ApiReferenceVariant {
+    readonly variantRef: string;
+    readonly anchorId: string;
+    readonly operationId: string;
+    readonly summary: string;
+    readonly description: string | null;
+    readonly method: string;
+    readonly path: string;
+    /** Source-projected authentication and authorization explanation. */
+    readonly access: ApiReferenceAccess;
+    readonly securitySchemes: readonly string[];
+    readonly parameters: readonly ApiReferenceParameter[];
+    readonly requestBody: ApiReferenceRequestBody | null;
+    readonly responses: readonly ApiReferenceResponse[];
+    readonly idempotent: boolean | null;
+}
+/** A standard OpenAPI parameter, normalized for a documentation renderer. */
+export interface ApiReferenceParameter {
+    readonly name: string;
+    readonly location: string;
+    readonly required: boolean;
+    readonly description: string | null;
+    /** The exact OpenAPI Schema Object attached to this parameter. */
+    readonly schema: ApiReferenceSchemaNode | null;
+    /** Source-authored OpenAPI examples for this exact path/query/header parameter. */
+    readonly examples: readonly ApiReferenceExample[];
+}
+/** The available request representations for an operation. */
+export interface ApiReferenceRequestBody {
+    /** Stable public target for this exact operation's request contract. */
+    readonly anchorId: string;
+    readonly required: boolean;
+    readonly mediaTypes: readonly ApiReferenceMediaType[];
+}
+/** A request or response representation declared by the OpenAPI contract. */
+export interface ApiReferenceMediaType {
+    readonly mediaType: string;
+    /** The exact OpenAPI Schema Object attached to this representation. */
+    readonly schema: ApiReferenceSchemaNode | null;
+    /** OpenAPI examples, kept as contract data rather than renderer-authored samples. */
+    readonly examples: readonly ApiReferenceExample[];
+}
+/** One request or response example declared directly in the OpenAPI document. */
+export interface ApiReferenceExample {
+    readonly name: string;
+    readonly summary: string | null;
+    readonly description: string | null;
+    /** Pretty-printed inline JSON when the OpenAPI example provides a serializable `value`. */
+    readonly jsonValue: string | null;
+    /** OpenAPI's alternative external example location, when supplied. */
+    readonly externalValue: string | null;
+}
+/** The browser-safe view of the generated `x-wildo.access` contract. */
+export interface ApiReferenceAccess {
+    readonly authenticationMode: string;
+    readonly authenticationSummary: string;
+    readonly roleRequirements: readonly ApiReferenceRoleRequirement[];
+}
+/** One exact runtime role paired with the specification-owned explanation. */
+export interface ApiReferenceRoleRequirement {
+    readonly role: string;
+    readonly label: string;
+    readonly businessRole: string | null;
+    readonly authorityBoundary: string | null;
+}
+/** One documented HTTP response. */
+export interface ApiReferenceResponse {
+    /** Stable public target for this exact operation/status response contract. */
+    readonly anchorId: string;
+    readonly status: string;
+    readonly description: string | null;
+    readonly mediaTypes: readonly ApiReferenceMediaType[];
+}
+export interface ApiReferenceFamily {
+    readonly familyRef: string;
+    readonly anchorId: string;
+    readonly label: string;
+    readonly variants: readonly ApiReferenceVariant[];
+}
+export interface ApiReferenceResource {
+    readonly resourceRef: string;
+    readonly anchorId: string;
+    readonly label: string;
+    /** Source-owned category transported through the OpenAPI resource tag. */
+    readonly category: ApiReferenceResourceCategory | null;
+    readonly description: string | null;
+    readonly lifecycleRole: string | null;
+    readonly relationships: readonly ApiReferenceResourceRelationship[];
+    readonly families: readonly ApiReferenceFamily[];
+}
+/** A source-declared API-resource category, never inferred from resource names. */
+export interface ApiReferenceResourceCategory {
+    readonly id: string;
+    /** Readable category fragment derived from the public target utility. */
+    readonly anchorId: string;
+    readonly label: string;
+    readonly description: string | null;
+}
+/** One reusable `components.schemas` contract from the same OpenAPI document. */
+export interface ApiReferenceComponentSchema {
+    readonly name: string;
+    readonly anchorId: string;
+    readonly schema: ApiReferenceSchemaNode;
+}
+/**
+ * A browser-safe, recursive projection of one OpenAPI 3.1 Schema Object.
+ *
+ * `$ref` nodes deliberately remain links instead of being resolved. This both
+ * preserves the document's canonical component boundary and makes recursive
+ * schemas cycle-safe without imposing a renderer-authored traversal limit.
+ */
+export interface ApiReferenceSchemaNode {
+    /** A JSON Schema boolean schema; `null` means this node is an object schema. */
+    readonly booleanSchema: boolean | null;
+    readonly referenceName: string | null;
+    readonly referenceAnchorId: string | null;
+    readonly types: readonly string[];
+    readonly description: string | null;
+    readonly format: string | null;
+    readonly properties: readonly ApiReferenceSchemaProperty[];
+    readonly items: ApiReferenceSchemaNode | null;
+    readonly compositions: readonly ApiReferenceSchemaComposition[];
+    readonly enumValues: readonly ApiReferenceSchemaEnumValue[];
+    readonly constValue: string | null;
+    readonly defaultValue: string | null;
+    readonly constraints: readonly ApiReferenceSchemaConstraint[];
+    /** `null` means the keyword is absent; a schema-valued keyword remains recursive. */
+    readonly additionalProperties: boolean | ApiReferenceSchemaNode | null;
+}
+/** One named child of an OpenAPI object schema. */
+export interface ApiReferenceSchemaProperty {
+    readonly name: string;
+    readonly required: boolean;
+    readonly schema: ApiReferenceSchemaNode;
+}
+/** OpenAPI composition keywords are distinct contracts, not interchangeable labels. */
+export declare enum ApiReferenceSchemaCompositionKind {
+    ONE_OF = "oneOf",
+    ANY_OF = "anyOf",
+    ALL_OF = "allOf"
+}
+export interface ApiReferenceSchemaComposition {
+    readonly kind: ApiReferenceSchemaCompositionKind;
+    readonly branches: readonly ApiReferenceSchemaNode[];
+}
+/** One JSON value admitted by an OpenAPI enum and its optional source description. */
+export interface ApiReferenceSchemaEnumValue {
+    readonly jsonValue: string;
+    readonly description: string | null;
+}
+/** Standard Schema Object constraint keywords preserved without interpretation. */
+export declare enum ApiReferenceSchemaConstraintKind {
+    MINIMUM = "minimum",
+    MAXIMUM = "maximum",
+    EXCLUSIVE_MINIMUM = "exclusiveMinimum",
+    EXCLUSIVE_MAXIMUM = "exclusiveMaximum",
+    MULTIPLE_OF = "multipleOf",
+    MIN_LENGTH = "minLength",
+    MAX_LENGTH = "maxLength",
+    PATTERN = "pattern",
+    MIN_ITEMS = "minItems",
+    MAX_ITEMS = "maxItems",
+    UNIQUE_ITEMS = "uniqueItems",
+    MIN_PROPERTIES = "minProperties",
+    MAX_PROPERTIES = "maxProperties"
+}
+export interface ApiReferenceSchemaConstraint {
+    readonly kind: ApiReferenceSchemaConstraintKind;
+    readonly jsonValue: string;
+}
+/** A compiled resource-relationship fact projected through the OpenAPI tag. */
+export interface ApiReferenceResourceRelationship {
+    readonly relatedResourceName: string;
+    readonly relatedResourceLabel: string;
+    readonly foreignKeyField: string | null;
+    readonly resourceCardinality: string;
+    readonly relatedResourceCardinality: string;
+    readonly nature: string;
+    readonly lifecycleModel: string;
+    readonly onParentDelete: {
+        readonly enabled: boolean;
+        readonly mode: string;
+        readonly strategy: string;
+        readonly maxDepth: number;
+    } | null;
+}
+export interface ApiReferenceModel {
+    /** Standard OpenAPI document title, when authored by the generator. */
+    readonly title: string | null;
+    /** Standard CommonMark description; presentation never authors substitute prose. */
+    readonly description: string | null;
+    /** Exact OpenAPI server choices used to compose an operation URL. */
+    readonly servers: readonly ApiReferenceServer[];
+    /** Exact reusable authentication mechanisms declared by OpenAPI. */
+    readonly securitySchemes: readonly ApiReferenceSecurityScheme[];
+    readonly resources: readonly ApiReferenceResource[];
+    readonly componentSchemas: readonly ApiReferenceComponentSchema[];
+    readonly operationCount: number;
+}
+export interface ApiReferenceServer {
+    readonly url: string;
+    readonly description: string | null;
+}
+/** Browser-safe projection of an OpenAPI Security Scheme Object. */
+export interface ApiReferenceSecurityScheme {
+    readonly name: string;
+    readonly type: string;
+    readonly scheme: string | null;
+    readonly bearerFormat: string | null;
+    readonly location: string | null;
+    readonly parameterName: string | null;
+    readonly description: string | null;
+}
+/** Creates the two-level resource → operation-family view from OpenAPI. */
+export declare function createApiReferenceModel(document: unknown): ApiReferenceModel;
+//# sourceMappingURL=openapi-reference-model.d.ts.map