@wildo-ai/saas-technical-doc 1.1.1

package/dist/esm/companion/application-documentation/technical-documentation-publication-policy.js

@@ -0,0 +1,93 @@
+import { TechnicalDocumentationAssetAccessClass, TechnicalDocumentationChannel, TechnicalDocumentationEditorialStatus, TechnicalDocumentationPublicationDecision, TechnicalDocumentationPublicationReason, TechnicalDocumentationSourceClassification, createTechnicalDocumentationAuthorizedBundleManifestV1, createTechnicalDocumentationUnitV1, } from '@wildo-ai/saas-specifications/technical-documentation';
+import { evaluateTechnicalDocumentationApplicability } from './technical-documentation-operational-evidence.js';
+function recreateUnit(unit, overrides) {
+    return createTechnicalDocumentationUnitV1({ ...unit, ...overrides });
+}
+/**
+ * Authorizes one framework unit for the public consumer portal.
+ *
+ * Application editorial overlays and authenticated/internal publication lanes
+ * are intentionally absent. Application-specific authoring will re-enter later
+ * through the app-creator acceptance flow, not through this framework policy.
+ */
+function projectPublicUnit(sourceUnit, manifest) {
+    if (sourceUnit.editorialStatus !== TechnicalDocumentationEditorialStatus.APPROVED) {
+        return {
+            sourceUnit,
+            publishedUnit: null,
+            decision: TechnicalDocumentationPublicationDecision.SUPPRESS,
+            reason: TechnicalDocumentationPublicationReason.EDITORIAL_NOT_APPROVED,
+        };
+    }
+    if (!evaluateTechnicalDocumentationApplicability(sourceUnit.applicabilityRequirements, manifest.environmentEvidenceSnapshot).applicable) {
+        return {
+            sourceUnit,
+            publishedUnit: null,
+            decision: TechnicalDocumentationPublicationDecision.SUPPRESS,
+            reason: TechnicalDocumentationPublicationReason.APPLICABILITY_NOT_PROVEN,
+        };
+    }
+    if (sourceUnit.provenance.some((source) => source.classification !== TechnicalDocumentationSourceClassification.PUBLIC)) {
+        return {
+            sourceUnit,
+            publishedUnit: null,
+            decision: TechnicalDocumentationPublicationDecision.SUPPRESS,
+            reason: TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE,
+        };
+    }
+    const assetRequests = sourceUnit.assetRequests.filter((asset) => asset.accessClass === TechnicalDocumentationAssetAccessClass.PUBLIC);
+    const redacted = assetRequests.length !== sourceUnit.assetRequests.length;
+    return {
+        sourceUnit,
+        publishedUnit: recreateUnit(sourceUnit, { assetRequests }),
+        decision: redacted ? TechnicalDocumentationPublicationDecision.REDACT : TechnicalDocumentationPublicationDecision.INCLUDE,
+        reason: redacted ? TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE : TechnicalDocumentationPublicationReason.INCLUDED_BY_POLICY,
+    };
+}
+/** Projects and minimizes the public framework bundle before rendering. */
+export function projectTechnicalDocumentationAuthorizedBundle(input) {
+    const initial = input.privateDerivation.units.map((unit) => projectPublicUnit(unit, input.privateDerivation));
+    const emittedUnitRefs = new Set(initial.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit.unitRef]));
+    const finalized = initial.map((candidate) => {
+        if (candidate.publishedUnit === null)
+            return candidate;
+        const links = candidate.publishedUnit.links.filter((link) => link.targetUnitRef === null || emittedUnitRefs.has(link.targetUnitRef));
+        if (links.length === candidate.publishedUnit.links.length)
+            return candidate;
+        return {
+            ...candidate,
+            publishedUnit: recreateUnit(candidate.publishedUnit, { links }),
+            decision: TechnicalDocumentationPublicationDecision.REDACT,
+            reason: TechnicalDocumentationPublicationReason.ACCESS_CLASS_MISMATCH,
+        };
+    });
+    const units = finalized.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit]);
+    const decisions = finalized.map((candidate) => ({
+        unitRef: candidate.sourceUnit.unitRef,
+        decision: candidate.decision,
+        reason: candidate.reason,
+        /*
+         * Both versions name the SAME unit version, and that is correct: a redaction narrows a unit's
+         * content without minting a new authored version. `decision` is what distinguishes INCLUDE
+         * from REDACT — it always was; the digest pair merely made the difference visible as two hex
+         * strings nobody could read.
+         */
+        sourceUnitVersion: candidate.sourceUnit.unitVersion,
+        publishedUnitVersion: candidate.publishedUnit?.unitVersion ?? null,
+    }));
+    return createTechnicalDocumentationAuthorizedBundleManifestV1({
+        schemaVersion: 1,
+        channel: TechnicalDocumentationChannel.PUBLIC_PORTAL,
+        policyRef: input.policyRef,
+        policyVersion: input.policyVersion,
+        bundleRef: input.bundleRef,
+        bundleVersion: input.bundleVersion,
+        derivationIdentity: {
+            ref: input.privateDerivation.derivationRef,
+            version: input.privateDerivation.derivationVersion,
+        },
+        units,
+        decisions,
+    });
+}
+//# sourceMappingURL=technical-documentation-publication-policy.js.map

package/dist/esm/companion/application-documentation/technical-documentation-publication-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"technical-documentation-publication-policy.js","sourceRoot":"","sources":["../../../../../src/companion/application-documentation/technical-documentation-publication-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,6BAA6B,EAC7B,qCAAqC,EACrC,yCAAyC,EACzC,uCAAuC,EACvC,0CAA0C,EAC1C,sDAAsD,EACtD,kCAAkC,GAKnC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,2CAA2C,EAAE,MAAM,gDAAgD,CAAC;AAS7G,SAAS,YAAY,CACnB,IAAkC,EAClC,SAAgD;IAEhD,OAAO,kCAAkC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,UAAwC,EACxC,QAA2D;IAE3D,IAAI,UAAU,CAAC,eAAe,KAAK,qCAAqC,CAAC,QAAQ,EAAE,CAAC;QAClF,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,sBAAsB;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,2CAA2C,CAAC,UAAU,CAAC,yBAAyB,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC,UAAU,EAAE,CAAC;QACxI,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,wBAAwB;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,0CAA0C,CAAC,MAAM,CAAC,EAAE,CAAC;QACxH,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,iBAAiB;SAClE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,sCAAsC,CAAC,MAAM,CAAC,CAAC;IACtI,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC;IAC1E,OAAO;QACL,UAAU;QACV,aAAa,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;QAC1D,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,OAAO;QACzH,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uCAAuC,CAAC,kBAAkB;KAC1I,CAAC;AACJ,CAAC;AAYD,2EAA2E;AAC3E,MAAM,UAAU,6CAA6C,CAC3D,KAAyD;IAEzD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9G,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC1C,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC5E,OAAO;YACL,GAAG,SAAS;YACZ,aAAa,EAAE,YAAY,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC;YAC/D,QAAQ,EAAE,yCAAyC,CAAC,MAAM;YAC1D,MAAM,EAAE,uCAAuC,CAAC,qBAAqB;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IAClH,MAAM,SAAS,GAAsD,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;QACrC,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB;;;;;WAKG;QACH,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW;QACnD,oBAAoB,EAAE,SAAS,CAAC,aAAa,EAAE,WAAW,IAAI,IAAI;KACnE,CAAC,CAAC,CAAC;IAEJ,OAAO,sDAAsD,CAAC;QAC5D,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,6BAA6B,CAAC,aAAa;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,kBAAkB,EAAE;YAClB,GAAG,EAAE,KAAK,CAAC,iBAAiB,CAAC,aAAa;YAC1C,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB;SACnD;QACD,KAAK;QACL,SAAS;KACV,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  TechnicalDocumentationAssetAccessClass,\n  TechnicalDocumentationChannel,\n  TechnicalDocumentationEditorialStatus,\n  TechnicalDocumentationPublicationDecision,\n  TechnicalDocumentationPublicationReason,\n  TechnicalDocumentationSourceClassification,\n  createTechnicalDocumentationAuthorizedBundleManifestV1,\n  createTechnicalDocumentationUnitV1,\n  type TechnicalDocumentationAuthorizedBundleManifestV1,\n  type TechnicalDocumentationPrivateDerivationManifestV1,\n  type TechnicalDocumentationUnitPublicationDecisionV1,\n  type TechnicalDocumentationUnitV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\nimport { evaluateTechnicalDocumentationApplicability } from './technical-documentation-operational-evidence';\n\ninterface PolicyProjectionCandidate {\n  readonly sourceUnit: TechnicalDocumentationUnitV1;\n  readonly publishedUnit: TechnicalDocumentationUnitV1 | null;\n  readonly decision: TechnicalDocumentationPublicationDecision;\n  readonly reason: TechnicalDocumentationPublicationReason;\n}\n\nfunction recreateUnit(\n  unit: TechnicalDocumentationUnitV1,\n  overrides: Partial<TechnicalDocumentationUnitV1>,\n): TechnicalDocumentationUnitV1 {\n  return createTechnicalDocumentationUnitV1({ ...unit, ...overrides });\n}\n\n/**\n * Authorizes one framework unit for the public consumer portal.\n *\n * Application editorial overlays and authenticated/internal publication lanes\n * are intentionally absent. Application-specific authoring will re-enter later\n * through the app-creator acceptance flow, not through this framework policy.\n */\nfunction projectPublicUnit(\n  sourceUnit: TechnicalDocumentationUnitV1,\n  manifest: TechnicalDocumentationPrivateDerivationManifestV1,\n): PolicyProjectionCandidate {\n  if (sourceUnit.editorialStatus !== TechnicalDocumentationEditorialStatus.APPROVED) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.EDITORIAL_NOT_APPROVED,\n    };\n  }\n  if (!evaluateTechnicalDocumentationApplicability(sourceUnit.applicabilityRequirements, manifest.environmentEvidenceSnapshot).applicable) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.APPLICABILITY_NOT_PROVEN,\n    };\n  }\n  if (sourceUnit.provenance.some((source) => source.classification !== TechnicalDocumentationSourceClassification.PUBLIC)) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE,\n    };\n  }\n\n  const assetRequests = sourceUnit.assetRequests.filter((asset) => asset.accessClass === TechnicalDocumentationAssetAccessClass.PUBLIC);\n  const redacted = assetRequests.length !== sourceUnit.assetRequests.length;\n  return {\n    sourceUnit,\n    publishedUnit: recreateUnit(sourceUnit, { assetRequests }),\n    decision: redacted ? TechnicalDocumentationPublicationDecision.REDACT : TechnicalDocumentationPublicationDecision.INCLUDE,\n    reason: redacted ? TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE : TechnicalDocumentationPublicationReason.INCLUDED_BY_POLICY,\n  };\n}\n\nexport interface ProjectTechnicalDocumentationAuthorizedBundleInput {\n  readonly privateDerivation: TechnicalDocumentationPrivateDerivationManifestV1;\n  readonly channel: TechnicalDocumentationChannel.PUBLIC_PORTAL;\n  readonly policyRef: string;\n  readonly policyVersion: number;\n  /** This bundle's own identity; the render manifest and the publication pointer name it. */\n  readonly bundleRef: string;\n  readonly bundleVersion: number;\n}\n\n/** Projects and minimizes the public framework bundle before rendering. */\nexport function projectTechnicalDocumentationAuthorizedBundle(\n  input: ProjectTechnicalDocumentationAuthorizedBundleInput,\n): TechnicalDocumentationAuthorizedBundleManifestV1 {\n  const initial = input.privateDerivation.units.map((unit) => projectPublicUnit(unit, input.privateDerivation));\n  const emittedUnitRefs = new Set(initial.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit.unitRef]));\n  const finalized = initial.map((candidate) => {\n    if (candidate.publishedUnit === null) return candidate;\n    const links = candidate.publishedUnit.links.filter((link) => link.targetUnitRef === null || emittedUnitRefs.has(link.targetUnitRef));\n    if (links.length === candidate.publishedUnit.links.length) return candidate;\n    return {\n      ...candidate,\n      publishedUnit: recreateUnit(candidate.publishedUnit, { links }),\n      decision: TechnicalDocumentationPublicationDecision.REDACT,\n      reason: TechnicalDocumentationPublicationReason.ACCESS_CLASS_MISMATCH,\n    };\n  });\n  const units = finalized.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit]);\n  const decisions: TechnicalDocumentationUnitPublicationDecisionV1[] = finalized.map((candidate) => ({\n    unitRef: candidate.sourceUnit.unitRef,\n    decision: candidate.decision,\n    reason: candidate.reason,\n    /*\n     * Both versions name the SAME unit version, and that is correct: a redaction narrows a unit's\n     * content without minting a new authored version. `decision` is what distinguishes INCLUDE\n     * from REDACT — it always was; the digest pair merely made the difference visible as two hex\n     * strings nobody could read.\n     */\n    sourceUnitVersion: candidate.sourceUnit.unitVersion,\n    publishedUnitVersion: candidate.publishedUnit?.unitVersion ?? null,\n  }));\n\n  return createTechnicalDocumentationAuthorizedBundleManifestV1({\n    schemaVersion: 1,\n    channel: TechnicalDocumentationChannel.PUBLIC_PORTAL,\n    policyRef: input.policyRef,\n    policyVersion: input.policyVersion,\n    bundleRef: input.bundleRef,\n    bundleVersion: input.bundleVersion,\n    derivationIdentity: {\n      ref: input.privateDerivation.derivationRef,\n      version: input.privateDerivation.derivationVersion,\n    },\n    units,\n    decisions,\n  });\n}\n"]}

package/dist/esm/companion/content/application-consumer-documentation-content-loader.d.ts

@@ -0,0 +1,52 @@
+import { type TechnicalDocumentationEngineContentBundleIdentityV1, type TechnicalDocumentationNormalizedRelativePath, type TechnicalDocumentationRef } from '@wildo-ai/saas-specifications/technical-documentation';
+import { type ApplicationConsumerDocumentationAuthoredContentV1, type ApplicationConsumerDocumentationContentFileIdentityV1, ApplicationConsumerDocumentationContentMediaType, type ApplicationConsumerDocumentationContentManifestV1, type ApplicationConsumerDocumentationContentUnitIdentityV1 } from '../../content/application-consumer-documentation-content-manifest.schemas';
+/** Builds the deterministic manifest candidate used by generation and by loader verification. */
+export declare function createApplicationConsumerDocumentationContentManifestV1(authoredContent: readonly ApplicationConsumerDocumentationAuthoredContentV1[], generatedAt: string, contentBundleVersion?: number): ApplicationConsumerDocumentationContentManifestV1;
+/**
+ * Canonical engine-content identity derived from the data-only authored source.
+ *
+ * The authored rows are the single semantic authority. Keeping this manifest mechanically derived avoids a second checked-in digest inventory that can
+ * drift independently while retaining fail-closed verification when a caller supplies or loads an external manifest.
+ */
+export declare const APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_MANIFEST_V1: {
+    schemaVersion: 1;
+    contentBundleVersion: number;
+    generatedAt: string;
+    fileCount: number;
+    unitCount: number;
+    files: {
+        managedPath: string & import("zod").$brand<"TechnicalDocumentationNormalizedRelativePath">;
+        mediaType: ApplicationConsumerDocumentationContentMediaType;
+        byteLength: number;
+        fileDigest: string;
+        unitRef: string;
+    }[];
+    units: {
+        unitRef: string;
+        sourceRefs: string[];
+        managedPaths: (string & import("zod").$brand<"TechnicalDocumentationNormalizedRelativePath">)[];
+    }[];
+};
+export interface LoadedApplicationConsumerDocumentationContentFileV1 {
+    readonly managedPath: string;
+    readonly mediaType: ApplicationConsumerDocumentationContentMediaType;
+    readonly byteLength: number;
+    readonly fileDigest: string;
+    readonly unitRef: string;
+    readonly sourceRefs: readonly string[];
+}
+export interface LoadedApplicationConsumerDocumentationContentBundleV1 {
+    readonly identity: TechnicalDocumentationEngineContentBundleIdentityV1;
+    readonly manifest: Readonly<Omit<ApplicationConsumerDocumentationContentManifestV1, 'files' | 'units'>> & {
+        readonly files: readonly Readonly<ApplicationConsumerDocumentationContentFileIdentityV1>[];
+        readonly units: readonly (Readonly<Omit<ApplicationConsumerDocumentationContentUnitIdentityV1, 'sourceRefs' | 'managedPaths'>> & {
+            readonly sourceRefs: readonly TechnicalDocumentationRef[];
+            readonly managedPaths: readonly TechnicalDocumentationNormalizedRelativePath[];
+        })[];
+    };
+    readonly files: readonly LoadedApplicationConsumerDocumentationContentFileV1[];
+    readManagedBytes(managedPath: string): Uint8Array;
+}
+/** Verifies the complete manifest and returns only copy-on-read managed bytes. */
+export declare function loadApplicationConsumerDocumentationContentBundleV1(manifestInput?: unknown, authoredContentInput?: readonly ApplicationConsumerDocumentationAuthoredContentV1[]): LoadedApplicationConsumerDocumentationContentBundleV1;
+//# sourceMappingURL=application-consumer-documentation-content-loader.d.ts.map

package/dist/esm/companion/content/application-consumer-documentation-content-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-consumer-documentation-content-loader.d.ts","sourceRoot":"","sources":["../../../../../src/companion/content/application-consumer-documentation-content-loader.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,mDAAmD,EACxD,KAAK,4CAA4C,EACjD,KAAK,yBAAyB,EAC/B,MAAM,uDAAuD,CAAC;AAG/D,OAAO,EAKL,KAAK,iDAAiD,EACtD,KAAK,qDAAqD,EAE1D,gDAAgD,EAChD,KAAK,iDAAiD,EACtD,KAAK,qDAAqD,EAC3D,MAAM,2EAA2E,CAAC;AAoEnF,iGAAiG;AACjG,wBAAgB,uDAAuD,CACrE,eAAe,EAAE,SAAS,iDAAiD,EAAE,EAC7E,WAAW,EAAE,MAAM,EACnB,oBAAoB,SAAI,GACvB,iDAAiD,CA2CnD;AAED;;;;;GAKG;AACH,eAAO,MAAM,sDAAsD;;;;;;;;;;;;;;;;;;CAGlE,CAAC;AAEF,MAAM,WAAW,mDAAmD;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,gDAAgD,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,qDAAqD;IACpE,QAAQ,CAAC,QAAQ,EAAE,mDAAmD,CAAC;IACvE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,iDAAiD,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,GAAG;QACxG,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,qDAAqD,EAAE,YAAY,GAAG,cAAc,CAAC,CAAC,GAAG;YAC/H,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;YAC1D,QAAQ,CAAC,YAAY,EAAE,SAAS,4CAA4C,EAAE,CAAC;SAChF,CAAC,EAAE,CAAC;KACN,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,SAAS,mDAAmD,EAAE,CAAC;IAC/E,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;CACnD;AA4BD,kFAAkF;AAClF,wBAAgB,mDAAmD,CACjE,aAAa,GAAE,OAAgE,EAC/E,oBAAoB,GAAE,SAAS,iDAAiD,EAA2D,GAC1I,qDAAqD,CA0CvD"}

package/dist/esm/companion/content/application-consumer-documentation-content-loader.js

@@ -0,0 +1,191 @@
+import { createHash } from 'node:crypto';
+import { TechnicalDocumentationEngineContentBundleIdentityV1Schema, TechnicalDocumentationNormalizedRelativePathSchema, TechnicalDocumentationRefSchema, } from '@wildo-ai/saas-specifications/technical-documentation';
+import { APPLICATION_CONSUMER_DOCUMENTATION_AUTHORED_CONTENT_V1 } from '../../content/application-consumer-documentation-content.techdoc.js';
+import { APPLICATION_CONSUMER_DOCUMENTATION_CONSUMER_FACT_SOURCE_PREFIX, APPLICATION_CONSUMER_DOCUMENTATION_COMPANION_PROJECTION_SOURCE_PREFIX, APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX, APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_BUNDLE_REF, ApplicationConsumerDocumentationContentManifestV1Schema, ApplicationConsumerDocumentationContentMediaType, } from '../../content/application-consumer-documentation-content-manifest.schemas.js';
+const UTF8_ENCODER = new TextEncoder();
+const AUTHORED_CONTENT_KEYS = ['managedPath', 'markdown', 'sourceRefs', 'unitRef'];
+const PRODUCTION_CONTENT_GENERATED_AT = '2026-08-02T00:00:00.000Z';
+function sha256Digest(bytes) {
+    return `sha256:${createHash('sha256').update(bytes).digest('hex')}`;
+}
+function expectedSourceRefForUnit(unitRef) {
+    const unitPrefix = 'technical-documentation:unit/';
+    if (!unitRef.startsWith(unitPrefix))
+        throw new Error(`engine content unitRef must start with ${unitPrefix}`);
+    return `${APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX}${unitRef.slice(unitPrefix.length)}`;
+}
+function validateAuthoredContentSources(authoredContent) {
+    if (authoredContent.length === 0)
+        throw new Error('application-consumer documentation content cannot be empty');
+    const managedPaths = new Set();
+    const caseFoldedPaths = new Set();
+    const unitRefs = new Set();
+    return authoredContent.map((source, index) => {
+        if (source === null || typeof source !== 'object' || Array.isArray(source))
+            throw new Error(`authored content row ${index} must be a plain object`);
+        const keys = Object.keys(source).sort();
+        if (keys.join('\0') !== [...AUTHORED_CONTENT_KEYS].sort().join('\0'))
+            throw new Error(`authored content row ${index} has an unknown or missing field`);
+        const managedPath = TechnicalDocumentationNormalizedRelativePathSchema.parse(source.managedPath);
+        const unitRef = TechnicalDocumentationRefSchema.parse(source.unitRef);
+        if (managedPaths.has(managedPath))
+            throw new Error(`duplicate managed content path: ${managedPath}`);
+        managedPaths.add(managedPath);
+        const caseFoldedPath = managedPath.toLocaleLowerCase('en-US');
+        if (caseFoldedPaths.has(caseFoldedPath))
+            throw new Error(`case-colliding managed content path: ${managedPath}`);
+        caseFoldedPaths.add(caseFoldedPath);
+        if (unitRefs.has(unitRef))
+            throw new Error(`duplicate application-consumer documentation unitRef: ${unitRef}`);
+        unitRefs.add(unitRef);
+        if (typeof source.markdown !== 'string' || source.markdown.trim().length === 0)
+            throw new Error(`content file ${managedPath} must contain Markdown`);
+        if (source.markdown.startsWith('\uFEFF') || source.markdown.includes('\r')) {
+            throw new Error(`content file ${managedPath} must use UTF-8 text with LF line endings and no BOM`);
+        }
+        const sourceRefs = source.sourceRefs.map((sourceRef) => TechnicalDocumentationRefSchema.parse(sourceRef));
+        if (sourceRefs.length === 0 || new Set(sourceRefs).size !== sourceRefs.length || sourceRefs.join('\0') !== [...sourceRefs].sort().join('\0')) {
+            throw new Error(`content source refs must be non-empty, unique and sorted for ${unitRef}`);
+        }
+        const expectedSourceRef = expectedSourceRefForUnit(unitRef);
+        const engineContentSourceRefs = sourceRefs.filter((sourceRef) => sourceRef.startsWith(APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX));
+        const consumerFactSourceRefs = sourceRefs.filter((sourceRef) => sourceRef.startsWith(APPLICATION_CONSUMER_DOCUMENTATION_CONSUMER_FACT_SOURCE_PREFIX));
+        const companionProjectionSourceRefs = sourceRefs.filter((sourceRef) => sourceRef.startsWith(APPLICATION_CONSUMER_DOCUMENTATION_COMPANION_PROJECTION_SOURCE_PREFIX));
+        if (engineContentSourceRefs.length !== 1 || engineContentSourceRefs[0] !== expectedSourceRef
+            || engineContentSourceRefs.length + consumerFactSourceRefs.length + companionProjectionSourceRefs.length !== sourceRefs.length) {
+            throw new Error(`unknown engine content source ref for ${unitRef}; expected ${expectedSourceRef}`);
+        }
+        return { managedPath, unitRef, sourceRefs, markdown: source.markdown };
+    });
+}
+/** Builds the deterministic manifest candidate used by generation and by loader verification. */
+export function createApplicationConsumerDocumentationContentManifestV1(authoredContent, generatedAt, contentBundleVersion = 1) {
+    const sources = validateAuthoredContentSources(authoredContent);
+    const files = sources
+        .map((source) => {
+        const bytes = UTF8_ENCODER.encode(source.markdown);
+        return {
+            managedPath: source.managedPath,
+            mediaType: ApplicationConsumerDocumentationContentMediaType.MARKDOWN_UTF8,
+            byteLength: bytes.byteLength,
+            fileDigest: sha256Digest(bytes),
+            unitRef: source.unitRef,
+        };
+    })
+        .sort((left, right) => left.managedPath.localeCompare(right.managedPath, 'en-US'));
+    const sourcesByUnitRef = new Map(sources.map((source) => [source.unitRef, source]));
+    const filesByUnitRef = new Map();
+    for (const file of files) {
+        const unitFiles = filesByUnitRef.get(file.unitRef) ?? [];
+        unitFiles.push(file);
+        filesByUnitRef.set(file.unitRef, unitFiles);
+    }
+    const units = [...filesByUnitRef.entries()]
+        .sort(([left], [right]) => left.localeCompare(right, 'en-US'))
+        .map(([unitRef, unitFiles]) => {
+        const source = sourcesByUnitRef.get(unitRef);
+        if (source === undefined)
+            throw new Error(`missing authored metadata for ${unitRef}`);
+        return {
+            unitRef,
+            sourceRefs: [...source.sourceRefs],
+            managedPaths: unitFiles.map((file) => file.managedPath),
+        };
+    });
+    return ApplicationConsumerDocumentationContentManifestV1Schema.parse({
+        schemaVersion: 1,
+        contentBundleVersion,
+        generatedAt,
+        fileCount: files.length,
+        unitCount: units.length,
+        files,
+        units,
+    });
+}
+/**
+ * Canonical engine-content identity derived from the data-only authored source.
+ *
+ * The authored rows are the single semantic authority. Keeping this manifest mechanically derived avoids a second checked-in digest inventory that can
+ * drift independently while retaining fail-closed verification when a caller supplies or loads an external manifest.
+ */
+export const APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_MANIFEST_V1 = createApplicationConsumerDocumentationContentManifestV1(APPLICATION_CONSUMER_DOCUMENTATION_AUTHORED_CONTENT_V1, PRODUCTION_CONTENT_GENERATED_AT);
+function exactManifestMismatch(expected, received) {
+    if (expected.contentBundleVersion !== received.contentBundleVersion)
+        return 'contentBundleVersion';
+    if (expected.fileCount !== received.fileCount)
+        return 'fileCount';
+    if (expected.unitCount !== received.unitCount)
+        return 'unitCount';
+    if (expected.files.length !== received.files.length)
+        return 'files.length';
+    for (const [index, expectedFile] of expected.files.entries()) {
+        const receivedFile = received.files[index];
+        if (receivedFile === undefined)
+            return `files[${index}]`;
+        for (const key of ['managedPath', 'mediaType', 'byteLength', 'fileDigest', 'unitRef']) {
+            if (expectedFile[key] !== receivedFile[key])
+                return `files[${index}].${key}`;
+        }
+    }
+    if (expected.units.length !== received.units.length)
+        return 'units.length';
+    for (const [index, expectedUnit] of expected.units.entries()) {
+        const receivedUnit = received.units[index];
+        if (receivedUnit === undefined)
+            return `units[${index}]`;
+        if (expectedUnit.unitRef !== receivedUnit.unitRef)
+            return `units[${index}].unitRef`;
+        if (expectedUnit.sourceRefs.join('\0') !== receivedUnit.sourceRefs.join('\0'))
+            return `units[${index}].sourceRefs`;
+        if (expectedUnit.managedPaths.join('\0') !== receivedUnit.managedPaths.join('\0'))
+            return `units[${index}].managedPaths`;
+    }
+    return null;
+}
+/** Verifies the complete manifest and returns only copy-on-read managed bytes. */
+export function loadApplicationConsumerDocumentationContentBundleV1(manifestInput = APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_MANIFEST_V1, authoredContentInput = APPLICATION_CONSUMER_DOCUMENTATION_AUTHORED_CONTENT_V1) {
+    const manifest = ApplicationConsumerDocumentationContentManifestV1Schema.parse(manifestInput);
+    const sources = validateAuthoredContentSources(authoredContentInput);
+    const sourcePaths = new Set(sources.map((source) => source.managedPath));
+    const manifestPaths = new Set(manifest.files.map((file) => file.managedPath));
+    const missingPaths = manifest.files.map((file) => file.managedPath).filter((path) => !sourcePaths.has(path));
+    if (missingPaths.length > 0)
+        throw new Error(`missing managed application-consumer content: ${missingPaths.join(', ')}`);
+    const extraPaths = sources.map((source) => source.managedPath).filter((path) => !manifestPaths.has(path));
+    if (extraPaths.length > 0)
+        throw new Error(`unlisted application-consumer content: ${extraPaths.join(', ')}`);
+    const expectedManifest = createApplicationConsumerDocumentationContentManifestV1(sources, manifest.generatedAt, manifest.contentBundleVersion);
+    const mismatch = exactManifestMismatch(expectedManifest, manifest);
+    if (mismatch !== null)
+        throw new Error(`application-consumer documentation content manifest mismatch at ${mismatch}`);
+    const bytesByPath = new Map(sources.map((source) => [source.managedPath, UTF8_ENCODER.encode(source.markdown)]));
+    const unitByRef = new Map(manifest.units.map((unit) => [unit.unitRef, unit]));
+    const files = manifest.files.map((file) => {
+        const unit = unitByRef.get(file.unitRef);
+        if (unit === undefined)
+            throw new Error(`managed content file ${file.managedPath} has no unit identity`);
+        return Object.freeze({ ...file, sourceRefs: Object.freeze([...unit.sourceRefs]) });
+    });
+    const identity = TechnicalDocumentationEngineContentBundleIdentityV1Schema.parse({
+        schemaVersion: 1,
+        contentBundleRef: APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_BUNDLE_REF,
+        contentBundleVersion: manifest.contentBundleVersion,
+    });
+    return Object.freeze({
+        identity: Object.freeze(identity),
+        manifest: Object.freeze({
+            ...manifest,
+            files: Object.freeze(manifest.files.map((file) => Object.freeze({ ...file }))),
+            units: Object.freeze(manifest.units.map((unit) => Object.freeze({ ...unit, sourceRefs: Object.freeze([...unit.sourceRefs]), managedPaths: Object.freeze([...unit.managedPaths]) }))),
+        }),
+        files: Object.freeze(files),
+        readManagedBytes(managedPath) {
+            const normalizedPath = TechnicalDocumentationNormalizedRelativePathSchema.parse(managedPath);
+            const bytes = bytesByPath.get(normalizedPath);
+            if (bytes === undefined)
+                throw new Error(`unknown managed application-consumer content path: ${normalizedPath}`);
+            return new Uint8Array(bytes);
+        },
+    });
+}
+//# sourceMappingURL=application-consumer-documentation-content-loader.js.map

package/dist/esm/companion/content/application-consumer-documentation-content-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-consumer-documentation-content-loader.js","sourceRoot":"","sources":["../../../../../src/companion/content/application-consumer-documentation-content-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAEL,yDAAyD,EACzD,kDAAkD,EAClD,+BAA+B,GAIhC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,sDAAsD,EAAE,MAAM,kEAAkE,CAAC;AAC1I,OAAO,EACL,8DAA8D,EAC9D,qEAAqE,EACrE,+DAA+D,EAC/D,qDAAqD,EAGrD,uDAAuD,EACvD,gDAAgD,GAGjD,MAAM,2EAA2E,CAAC;AAEnF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AACvC,MAAM,qBAAqB,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAU,CAAC;AAC5F,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAEnE,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAGD,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,+BAA+B,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;IAC7G,OAAO,GAAG,+DAA+D,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AACjH,CAAC;AASD,SAAS,8BAA8B,CACrC,eAA6E;IAE7E,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAEhH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,yBAAyB,CAAC,CAAC;QACpJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,kCAAkC,CAAC,CAAC;QAEvJ,MAAM,WAAW,GAAG,kDAAkD,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QACrG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9B,MAAM,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,WAAW,EAAE,CAAC,CAAC;QAChH,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,EAAE,CAAC,CAAC;QAC/G,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEtB,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,WAAW,wBAAwB,CAAC,CAAC;QACrJ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,gBAAgB,WAAW,sDAAsD,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1G,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7I,MAAM,IAAI,KAAK,CAAC,gEAAgE,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,uBAAuB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,+DAA+D,CAAC,CAAC,CAAC;QACxJ,MAAM,sBAAsB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACtJ,MAAM,6BAA6B,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,qEAAqE,CAAC,CAAC,CAAC;QACpK,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,IAAI,uBAAuB,CAAC,CAAC,CAAC,KAAK,iBAAiB;eACvF,uBAAuB,CAAC,MAAM,GAAG,sBAAsB,CAAC,MAAM,GAAG,6BAA6B,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACjI,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,cAAc,iBAAiB,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,uDAAuD,CACrE,eAA6E,EAC7E,WAAmB,EACnB,oBAAoB,GAAG,CAAC;IAExB,MAAM,OAAO,GAAG,8BAA8B,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO;SAClB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,gDAAgD,CAAC,aAAa;YACzE,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAErF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QACtF,OAAO;YACL,OAAO;YACP,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YAClC,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;SACxD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO,uDAAuD,CAAC,KAAK,CAAC;QACnE,aAAa,EAAE,CAAU;QACzB,oBAAoB;QACpB,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,KAAK;QACL,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sDAAsD,GAAG,uDAAuD,CAC3H,sDAAsD,EACtD,+BAA+B,CAChC,CAAC;AAwBF,SAAS,qBAAqB,CAC5B,QAA2D,EAC3D,QAA2D;IAE3D,IAAI,QAAQ,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB;QAAE,OAAO,sBAAsB,CAAC;IACnG,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IAClE,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IAClE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IAC3E,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,KAAK,GAAG,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAU,EAAE,CAAC;YAC/F,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,KAAK,KAAK,GAAG,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IAC3E,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,KAAK,GAAG,CAAC;QACzD,IAAI,YAAY,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO;YAAE,OAAO,SAAS,KAAK,WAAW,CAAC;QACpF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,KAAK,cAAc,CAAC;QACnH,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,KAAK,gBAAgB,CAAC;IAC3H,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mDAAmD,CACjE,gBAAyB,sDAAsD,EAC/E,uBAAqF,sDAAsD;IAE3I,MAAM,QAAQ,GAAG,uDAAuD,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,8BAA8B,CAAC,oBAAoB,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7G,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1G,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE9G,MAAM,gBAAgB,GAAG,uDAAuD,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,QAAQ,EAAE,CAAC,CAAC;IAEtH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,WAAW,uBAAuB,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,yDAAyD,CAAC,KAAK,CAAC;QAC/E,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,qDAAqD;QACvE,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;KACpD,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,GAAG,QAAQ;YACX,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9E,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACrL,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3B,gBAAgB,CAAC,WAAmB;YAClC,MAAM,cAAc,GAAG,kDAAkD,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC7F,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,cAAc,EAAE,CAAC,CAAC;YACjH,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from 'node:crypto';\nimport {\n  canonicalizeTechnicalDocumentationJson,\n  TechnicalDocumentationEngineContentBundleIdentityV1Schema,\n  TechnicalDocumentationNormalizedRelativePathSchema,\n  TechnicalDocumentationRefSchema,\n  type TechnicalDocumentationEngineContentBundleIdentityV1,\n  type TechnicalDocumentationNormalizedRelativePath,\n  type TechnicalDocumentationRef,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\nimport { APPLICATION_CONSUMER_DOCUMENTATION_AUTHORED_CONTENT_V1 } from '../../content/application-consumer-documentation-content.techdoc';\nimport {\n  APPLICATION_CONSUMER_DOCUMENTATION_CONSUMER_FACT_SOURCE_PREFIX,\n  APPLICATION_CONSUMER_DOCUMENTATION_COMPANION_PROJECTION_SOURCE_PREFIX,\n  APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX,\n  APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_BUNDLE_REF,\n  type ApplicationConsumerDocumentationAuthoredContentV1,\n  type ApplicationConsumerDocumentationContentFileIdentityV1,\n  ApplicationConsumerDocumentationContentManifestV1Schema,\n  ApplicationConsumerDocumentationContentMediaType,\n  type ApplicationConsumerDocumentationContentManifestV1,\n  type ApplicationConsumerDocumentationContentUnitIdentityV1,\n} from '../../content/application-consumer-documentation-content-manifest.schemas';\n\nconst UTF8_ENCODER = new TextEncoder();\nconst AUTHORED_CONTENT_KEYS = ['managedPath', 'markdown', 'sourceRefs', 'unitRef'] as const;\nconst PRODUCTION_CONTENT_GENERATED_AT = '2026-08-02T00:00:00.000Z';\n\nfunction sha256Digest(bytes: Uint8Array): string {\n  return `sha256:${createHash('sha256').update(bytes).digest('hex')}`;\n}\n\n\nfunction expectedSourceRefForUnit(unitRef: string): string {\n  const unitPrefix = 'technical-documentation:unit/';\n  if (!unitRef.startsWith(unitPrefix)) throw new Error(`engine content unitRef must start with ${unitPrefix}`);\n  return `${APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX}${unitRef.slice(unitPrefix.length)}`;\n}\n\ninterface ValidatedApplicationConsumerDocumentationAuthoredContentV1 {\n  readonly managedPath: TechnicalDocumentationNormalizedRelativePath;\n  readonly unitRef: TechnicalDocumentationRef;\n  readonly sourceRefs: readonly TechnicalDocumentationRef[];\n  readonly markdown: string;\n}\n\nfunction validateAuthoredContentSources(\n  authoredContent: readonly ApplicationConsumerDocumentationAuthoredContentV1[],\n): readonly ValidatedApplicationConsumerDocumentationAuthoredContentV1[] {\n  if (authoredContent.length === 0) throw new Error('application-consumer documentation content cannot be empty');\n\n  const managedPaths = new Set<string>();\n  const caseFoldedPaths = new Set<string>();\n  const unitRefs = new Set<string>();\n  return authoredContent.map((source, index) => {\n    if (source === null || typeof source !== 'object' || Array.isArray(source)) throw new Error(`authored content row ${index} must be a plain object`);\n    const keys = Object.keys(source).sort();\n    if (keys.join('\\0') !== [...AUTHORED_CONTENT_KEYS].sort().join('\\0')) throw new Error(`authored content row ${index} has an unknown or missing field`);\n\n    const managedPath = TechnicalDocumentationNormalizedRelativePathSchema.parse(source.managedPath);\n    const unitRef = TechnicalDocumentationRefSchema.parse(source.unitRef);\n    if (managedPaths.has(managedPath)) throw new Error(`duplicate managed content path: ${managedPath}`);\n    managedPaths.add(managedPath);\n    const caseFoldedPath = managedPath.toLocaleLowerCase('en-US');\n    if (caseFoldedPaths.has(caseFoldedPath)) throw new Error(`case-colliding managed content path: ${managedPath}`);\n    caseFoldedPaths.add(caseFoldedPath);\n    if (unitRefs.has(unitRef)) throw new Error(`duplicate application-consumer documentation unitRef: ${unitRef}`);\n    unitRefs.add(unitRef);\n\n    if (typeof source.markdown !== 'string' || source.markdown.trim().length === 0) throw new Error(`content file ${managedPath} must contain Markdown`);\n    if (source.markdown.startsWith('\\uFEFF') || source.markdown.includes('\\r')) {\n      throw new Error(`content file ${managedPath} must use UTF-8 text with LF line endings and no BOM`);\n    }\n    const sourceRefs = source.sourceRefs.map((sourceRef) => TechnicalDocumentationRefSchema.parse(sourceRef));\n    if (sourceRefs.length === 0 || new Set(sourceRefs).size !== sourceRefs.length || sourceRefs.join('\\0') !== [...sourceRefs].sort().join('\\0')) {\n      throw new Error(`content source refs must be non-empty, unique and sorted for ${unitRef}`);\n    }\n    const expectedSourceRef = expectedSourceRefForUnit(unitRef);\n    const engineContentSourceRefs = sourceRefs.filter((sourceRef) => sourceRef.startsWith(APPLICATION_CONSUMER_DOCUMENTATION_ENGINE_CONTENT_SOURCE_PREFIX));\n    const consumerFactSourceRefs = sourceRefs.filter((sourceRef) => sourceRef.startsWith(APPLICATION_CONSUMER_DOCUMENTATION_CONSUMER_FACT_SOURCE_PREFIX));\n    const companionProjectionSourceRefs = sourceRefs.filter((sourceRef) => sourceRef.startsWith(APPLICATION_CONSUMER_DOCUMENTATION_COMPANION_PROJECTION_SOURCE_PREFIX));\n    if (engineContentSourceRefs.length !== 1 || engineContentSourceRefs[0] !== expectedSourceRef\n      || engineContentSourceRefs.length + consumerFactSourceRefs.length + companionProjectionSourceRefs.length !== sourceRefs.length) {\n      throw new Error(`unknown engine content source ref for ${unitRef}; expected ${expectedSourceRef}`);\n    }\n\n    return { managedPath, unitRef, sourceRefs, markdown: source.markdown };\n  });\n}\n\n/** Builds the deterministic manifest candidate used by generation and by loader verification. */\nexport function createApplicationConsumerDocumentationContentManifestV1(\n  authoredContent: readonly ApplicationConsumerDocumentationAuthoredContentV1[],\n  generatedAt: string,\n  contentBundleVersion = 1,\n): ApplicationConsumerDocumentationContentManifestV1 {\n  const sources = validateAuthoredContentSources(authoredContent);\n  const files = sources\n    .map((source) => {\n      const bytes = UTF8_ENCODER.encode(source.markdown);\n      return {\n        managedPath: source.managedPath,\n        mediaType: ApplicationConsumerDocumentationContentMediaType.MARKDOWN_UTF8,\n        byteLength: bytes.byteLength,\n        fileDigest: sha256Digest(bytes),\n        unitRef: source.unitRef,\n      };\n    })\n    .sort((left, right) => left.managedPath.localeCompare(right.managedPath, 'en-US'));\n\n  const sourcesByUnitRef = new Map(sources.map((source) => [source.unitRef, source]));\n  const filesByUnitRef = new Map<string, typeof files>();\n  for (const file of files) {\n    const unitFiles = filesByUnitRef.get(file.unitRef) ?? [];\n    unitFiles.push(file);\n    filesByUnitRef.set(file.unitRef, unitFiles);\n  }\n  const units = [...filesByUnitRef.entries()]\n    .sort(([left], [right]) => left.localeCompare(right, 'en-US'))\n    .map(([unitRef, unitFiles]) => {\n      const source = sourcesByUnitRef.get(unitRef);\n      if (source === undefined) throw new Error(`missing authored metadata for ${unitRef}`);\n      return {\n        unitRef,\n        sourceRefs: [...source.sourceRefs],\n        managedPaths: unitFiles.map((file) => file.managedPath),\n      };\n    });\n\n  return ApplicationConsumerDocumentationContentManifestV1Schema.parse({\n    schemaVersion: 1 as const,\n    contentBundleVersion,\n    generatedAt,\n    fileCount: files.length,\n    unitCount: units.length,\n    files,\n    units,\n  });\n}\n\n/**\n * Canonical engine-content identity derived from the data-only authored source.\n *\n * The authored rows are the single semantic authority. Keeping this manifest mechanically derived avoids a second checked-in digest inventory that can\n * drift independently while retaining fail-closed verification when a caller supplies or loads an external manifest.\n */\nexport const APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_MANIFEST_V1 = createApplicationConsumerDocumentationContentManifestV1(\n  APPLICATION_CONSUMER_DOCUMENTATION_AUTHORED_CONTENT_V1,\n  PRODUCTION_CONTENT_GENERATED_AT,\n);\n\nexport interface LoadedApplicationConsumerDocumentationContentFileV1 {\n  readonly managedPath: string;\n  readonly mediaType: ApplicationConsumerDocumentationContentMediaType;\n  readonly byteLength: number;\n  readonly fileDigest: string;\n  readonly unitRef: string;\n  readonly sourceRefs: readonly string[];\n}\n\nexport interface LoadedApplicationConsumerDocumentationContentBundleV1 {\n  readonly identity: TechnicalDocumentationEngineContentBundleIdentityV1;\n  readonly manifest: Readonly<Omit<ApplicationConsumerDocumentationContentManifestV1, 'files' | 'units'>> & {\n    readonly files: readonly Readonly<ApplicationConsumerDocumentationContentFileIdentityV1>[];\n    readonly units: readonly (Readonly<Omit<ApplicationConsumerDocumentationContentUnitIdentityV1, 'sourceRefs' | 'managedPaths'>> & {\n      readonly sourceRefs: readonly TechnicalDocumentationRef[];\n      readonly managedPaths: readonly TechnicalDocumentationNormalizedRelativePath[];\n    })[];\n  };\n  readonly files: readonly LoadedApplicationConsumerDocumentationContentFileV1[];\n  readManagedBytes(managedPath: string): Uint8Array;\n}\n\nfunction exactManifestMismatch(\n  expected: ApplicationConsumerDocumentationContentManifestV1,\n  received: ApplicationConsumerDocumentationContentManifestV1,\n): string | null {\n  if (expected.contentBundleVersion !== received.contentBundleVersion) return 'contentBundleVersion';\n  if (expected.fileCount !== received.fileCount) return 'fileCount';\n  if (expected.unitCount !== received.unitCount) return 'unitCount';\n  if (expected.files.length !== received.files.length) return 'files.length';\n  for (const [index, expectedFile] of expected.files.entries()) {\n    const receivedFile = received.files[index];\n    if (receivedFile === undefined) return `files[${index}]`;\n    for (const key of ['managedPath', 'mediaType', 'byteLength', 'fileDigest', 'unitRef'] as const) {\n      if (expectedFile[key] !== receivedFile[key]) return `files[${index}].${key}`;\n    }\n  }\n  if (expected.units.length !== received.units.length) return 'units.length';\n  for (const [index, expectedUnit] of expected.units.entries()) {\n    const receivedUnit = received.units[index];\n    if (receivedUnit === undefined) return `units[${index}]`;\n    if (expectedUnit.unitRef !== receivedUnit.unitRef) return `units[${index}].unitRef`;\n    if (expectedUnit.sourceRefs.join('\\0') !== receivedUnit.sourceRefs.join('\\0')) return `units[${index}].sourceRefs`;\n    if (expectedUnit.managedPaths.join('\\0') !== receivedUnit.managedPaths.join('\\0')) return `units[${index}].managedPaths`;\n  }\n  return null;\n}\n\n/** Verifies the complete manifest and returns only copy-on-read managed bytes. */\nexport function loadApplicationConsumerDocumentationContentBundleV1(\n  manifestInput: unknown = APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_MANIFEST_V1,\n  authoredContentInput: readonly ApplicationConsumerDocumentationAuthoredContentV1[] = APPLICATION_CONSUMER_DOCUMENTATION_AUTHORED_CONTENT_V1,\n): LoadedApplicationConsumerDocumentationContentBundleV1 {\n  const manifest = ApplicationConsumerDocumentationContentManifestV1Schema.parse(manifestInput);\n  const sources = validateAuthoredContentSources(authoredContentInput);\n  const sourcePaths = new Set(sources.map((source) => source.managedPath));\n  const manifestPaths = new Set(manifest.files.map((file) => file.managedPath));\n  const missingPaths = manifest.files.map((file) => file.managedPath).filter((path) => !sourcePaths.has(path));\n  if (missingPaths.length > 0) throw new Error(`missing managed application-consumer content: ${missingPaths.join(', ')}`);\n  const extraPaths = sources.map((source) => source.managedPath).filter((path) => !manifestPaths.has(path));\n  if (extraPaths.length > 0) throw new Error(`unlisted application-consumer content: ${extraPaths.join(', ')}`);\n\n  const expectedManifest = createApplicationConsumerDocumentationContentManifestV1(sources, manifest.generatedAt, manifest.contentBundleVersion);\n  const mismatch = exactManifestMismatch(expectedManifest, manifest);\n  if (mismatch !== null) throw new Error(`application-consumer documentation content manifest mismatch at ${mismatch}`);\n\n  const bytesByPath = new Map(sources.map((source) => [source.managedPath, UTF8_ENCODER.encode(source.markdown)]));\n  const unitByRef = new Map(manifest.units.map((unit) => [unit.unitRef, unit]));\n  const files = manifest.files.map((file) => {\n    const unit = unitByRef.get(file.unitRef);\n    if (unit === undefined) throw new Error(`managed content file ${file.managedPath} has no unit identity`);\n    return Object.freeze({ ...file, sourceRefs: Object.freeze([...unit.sourceRefs]) });\n  });\n  const identity = TechnicalDocumentationEngineContentBundleIdentityV1Schema.parse({\n    schemaVersion: 1,\n    contentBundleRef: APPLICATION_CONSUMER_DOCUMENTATION_CONTENT_BUNDLE_REF,\n    contentBundleVersion: manifest.contentBundleVersion,\n  });\n\n  return Object.freeze({\n    identity: Object.freeze(identity),\n    manifest: Object.freeze({\n      ...manifest,\n      files: Object.freeze(manifest.files.map((file) => Object.freeze({ ...file }))),\n      units: Object.freeze(manifest.units.map((unit) => Object.freeze({ ...unit, sourceRefs: Object.freeze([...unit.sourceRefs]), managedPaths: Object.freeze([...unit.managedPaths]) }))),\n    }),\n    files: Object.freeze(files),\n    readManagedBytes(managedPath: string): Uint8Array {\n      const normalizedPath = TechnicalDocumentationNormalizedRelativePathSchema.parse(managedPath);\n      const bytes = bytesByPath.get(normalizedPath);\n      if (bytes === undefined) throw new Error(`unknown managed application-consumer content path: ${normalizedPath}`);\n      return new Uint8Array(bytes);\n    },\n  });\n}\n"]}

package/dist/esm/companion/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `@wildo-ai/saas-technical-doc/companion` — implementation surface.
+ *
+ * Pure-function OpenAPI projection, its input contract, and Node-side verification/materialization utilities for an exact engine-owned
+ * application-consumer documentation content bundle. Consumed by:
+ *   - `examples/<app>/.wildo-saas/wildo-dev-companion/` controllers
+ *     that call `generateOpenApiDocuments(input)` to produce
+ *     the normal and application-administration YAML/JSON OpenAPI documents.
+ *
+ * @wildo-boundary
+ *   Re-exports only companion-side OpenAPI and application-consumer content projection surfaces. All are React-free; the content loader is Node-only and
+ *   never enters the browser runtime closure. Reusable authored content and portable identities are owned by the separate `./content`
+ *   entry point.
+ */
+export * from './operation-projection.schemas';
+export * from './openapi-generator';
+export * from './publish-result.types';
+export * from './zod-to-openapi';
+export * from './spec-to-operation-doc';
+export * from './content/application-consumer-documentation-content-loader';
+export * from './technical-documentation-capture-execution-port';
+export * from './technical-documentation-asset-path';
+export * from './technical-documentation-diagram-materializer';
+export * from './technical-documentation-placeholder-materializer';
+export * from './rendering/technical-documentation-authorized-bundle-reader';
+export * from './rendering/technical-documentation-docusaurus-renderer';
+export * from './rendering/technical-documentation-build-measurement';
+export * from './rendering/technical-documentation-managed-tree-validator';
+export * from './rendering/technical-documentation-markdown-renderer';
+export * from './rendering/technical-documentation-openapi-renderer';
+export * from './rendering/technical-documentation-render-model';
+export * from './rendering/technical-documentation-search-index-renderer';
+export * from './application-documentation/technical-documentation-engine-content-bundle';
+export * from './application-documentation/application-organization-role-documentation';
+export * from './application-documentation/application-organization-unit-resource-documentation';
+export * from './application-documentation/technical-documentation-operational-evidence';
+export * from './application-documentation/technical-documentation-private-derivation';
+export * from './application-documentation/technical-documentation-publication-policy';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/companion/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/companion/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,yEAAyE,CAAC;AACxF,cAAc,kFAAkF,CAAC;AACjG,cAAc,0EAA0E,CAAC;AACzF,cAAc,wEAAwE,CAAC;AACvF,cAAc,wEAAwE,CAAC"}

package/dist/esm/companion/index.js

@@ -0,0 +1,39 @@
+/**
+ * `@wildo-ai/saas-technical-doc/companion` — implementation surface.
+ *
+ * Pure-function OpenAPI projection, its input contract, and Node-side verification/materialization utilities for an exact engine-owned
+ * application-consumer documentation content bundle. Consumed by:
+ *   - `examples/<app>/.wildo-saas/wildo-dev-companion/` controllers
+ *     that call `generateOpenApiDocuments(input)` to produce
+ *     the normal and application-administration YAML/JSON OpenAPI documents.
+ *
+ * @wildo-boundary
+ *   Re-exports only companion-side OpenAPI and application-consumer content projection surfaces. All are React-free; the content loader is Node-only and
+ *   never enters the browser runtime closure. Reusable authored content and portable identities are owned by the separate `./content`
+ *   entry point.
+ */
+export * from './operation-projection.schemas.js';
+export * from './openapi-generator.js';
+export * from './publish-result.types.js';
+export * from './zod-to-openapi.js';
+export * from './spec-to-operation-doc.js';
+export * from './content/application-consumer-documentation-content-loader.js';
+export * from './technical-documentation-capture-execution-port.js';
+export * from './technical-documentation-asset-path.js';
+export * from './technical-documentation-diagram-materializer.js';
+export * from './technical-documentation-placeholder-materializer.js';
+export * from './rendering/technical-documentation-authorized-bundle-reader.js';
+export * from './rendering/technical-documentation-docusaurus-renderer.js';
+export * from './rendering/technical-documentation-build-measurement.js';
+export * from './rendering/technical-documentation-managed-tree-validator.js';
+export * from './rendering/technical-documentation-markdown-renderer.js';
+export * from './rendering/technical-documentation-openapi-renderer.js';
+export * from './rendering/technical-documentation-render-model.js';
+export * from './rendering/technical-documentation-search-index-renderer.js';
+export * from './application-documentation/technical-documentation-engine-content-bundle.js';
+export * from './application-documentation/application-organization-role-documentation.js';
+export * from './application-documentation/application-organization-unit-resource-documentation.js';
+export * from './application-documentation/technical-documentation-operational-evidence.js';
+export * from './application-documentation/technical-documentation-private-derivation.js';
+export * from './application-documentation/technical-documentation-publication-policy.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/companion/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/companion/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,yEAAyE,CAAC;AACxF,cAAc,kFAAkF,CAAC;AACjG,cAAc,0EAA0E,CAAC;AACzF,cAAc,wEAAwE,CAAC;AACvF,cAAc,wEAAwE,CAAC","sourcesContent":["/**\n * `@wildo-ai/saas-technical-doc/companion` — implementation surface.\n *\n * Pure-function OpenAPI projection, its input contract, and Node-side verification/materialization utilities for an exact engine-owned\n * application-consumer documentation content bundle. Consumed by:\n *   - `examples/<app>/.wildo-saas/wildo-dev-companion/` controllers\n *     that call `generateOpenApiDocuments(input)` to produce\n *     the normal and application-administration YAML/JSON OpenAPI documents.\n *\n * @wildo-boundary\n *   Re-exports only companion-side OpenAPI and application-consumer content projection surfaces. All are React-free; the content loader is Node-only and\n *   never enters the browser runtime closure. Reusable authored content and portable identities are owned by the separate `./content`\n *   entry point.\n */\n\nexport * from './operation-projection.schemas';\nexport * from './openapi-generator';\nexport * from './publish-result.types';\nexport * from './zod-to-openapi';\nexport * from './spec-to-operation-doc';\nexport * from './content/application-consumer-documentation-content-loader';\nexport * from './technical-documentation-capture-execution-port';\nexport * from './technical-documentation-asset-path';\nexport * from './technical-documentation-diagram-materializer';\nexport * from './technical-documentation-placeholder-materializer';\nexport * from './rendering/technical-documentation-authorized-bundle-reader';\nexport * from './rendering/technical-documentation-docusaurus-renderer';\nexport * from './rendering/technical-documentation-build-measurement';\nexport * from './rendering/technical-documentation-managed-tree-validator';\nexport * from './rendering/technical-documentation-markdown-renderer';\nexport * from './rendering/technical-documentation-openapi-renderer';\nexport * from './rendering/technical-documentation-render-model';\nexport * from './rendering/technical-documentation-search-index-renderer';\nexport * from './application-documentation/technical-documentation-engine-content-bundle';\nexport * from './application-documentation/application-organization-role-documentation';\nexport * from './application-documentation/application-organization-unit-resource-documentation';\nexport * from './application-documentation/technical-documentation-operational-evidence';\nexport * from './application-documentation/technical-documentation-private-derivation';\nexport * from './application-documentation/technical-documentation-publication-policy';\n"]}

package/dist/esm/companion/openapi-generator.d.ts

@@ -0,0 +1,94 @@
+/**
+ * @wildo-package @wildo-ai/saas-technical-doc/companion (generator)
+ *
+ * Pure-function OpenAPI 3.1 generator (saas-technical-doc.md Step 3).
+ *
+ * Pipeline:
+ *
+ *   `OpenApiGenerationInput`
+ *     ──filterApiCallOperations──►   (assert URL-bearing variants)
+ *     ──groupOperationsByConsumerApiSection──► (use source-resolved section)
+ *     ──buildOpenApiDocument──►          (per-section OpenAPI 3.1 doc as a JS object)
+ *     ──assembleOpenApiGenerationOutput──►(top-level `OpenApiGenerationOutput`)
+ *
+ * Key design points:
+ *
+ *   K-1: This module is `OpenApiGenerationInput` → `OpenApiGenerationOutput`
+ *        and contains no I/O, no global state, and no DI. It is consumed by
+ *        the companion controller (which owns the introspection hop +
+ *        filesystem write — see Step 4) and by unit tests in isolation.
+ *
+ *   K-2: Sections that contain ZERO operations after filtering are
+ *        OMITTED from the output's `sections[]` array (per the
+ *        `OpenApiGenerationOutputSchema` JSDoc). The companion UI
+ *        surfaces this as an absent section — the empty section is
+ *        intentional, not a generator bug.
+ *
+ *   K-3: The generator uses Zod-parsed input (validated up-front via
+ *        `OpenApiGenerationInputSchema`) so every downstream helper can
+ *        assume well-formed projections. Callers MUST call
+ *        `generateOpenApiDocuments(input)` (which parses) and NOT the
+ *        sub-helpers directly with unparsed data.
+ *
+ *   K-4: The semantic output carries one document object. YAML/JSON
+ *        serialization is renderer-owned so divergent format payloads cannot
+ *        cross this contract.
+ *
+ * @wildo-boundary
+ *   Imports only the portable OpenAPI output contract, the local operation
+ *   projection contract, the lightweight public runtime constants and
+ *   specification-prose cleanup. No serializer, React or saas-models root
+ *   barrel enters this semantic generator.
+ */
+import { OpenApiSection, type OpenApiGenerationOutput } from '../openapi/openapi-generation-output.schemas';
+import { type OperationProjection } from './operation-projection.schemas';
+/**
+ * Retains every projected URL-bearing operation.
+ *
+ *   - Variant outside `API_CALL` / `API_CALL_WITH_CALLBACK` (K-5):
+ *     defense-in-depth re-check on top of the projector's filter.
+ *     If a non-API variant ever leaks through, drop it silently here
+ *     rather than throwing — the projector is the single source of
+ *     truth for "should this op even be in the projection at all," but
+ *     we don't want a future projector regression to corrupt the
+ *     generated doc with non-HTTP operations.
+ *
+ * `isApiKeyAccessDisabled` controls the operation's accepted authentication
+ * schemes. It does not make an HTTP operation disappear from its API contract.
+ *
+ * Returns a NEW array — does not mutate the input.
+ */
+export declare function filterApiCallOperations(operations: ReadonlyArray<OperationProjection>): ReadonlyArray<OperationProjection>;
+/**
+ * Groups operations by the explicit consumer-facing section resolved by the
+ * source projector. This layer deliberately does not reinterpret role strings
+ * or internal resource scopes: doing so would create a second authority for
+ * which product reference owns an operation.
+ *
+ * Returns a frozen `Record` keyed by `OpenApiSection`. Sections with
+ * zero operations are returned as empty arrays (NOT omitted) so the
+ * caller's filtering logic in `assembleOpenApiGenerationOutput` is the
+ * single place that decides "drop empty sections from the output."
+ */
+export declare function groupOperationsByConsumerApiSection(operations: ReadonlyArray<OperationProjection>): Readonly<Record<OpenApiSection, ReadonlyArray<OperationProjection>>>;
+/**
+ * Public entry point — single function the companion controller
+ * calls.
+ *
+ * Steps:
+ *   1. Parse the input (defense-in-depth — the controller validates
+ *      against `OpenApiGenerationInputSchema` already, but we re-parse
+ *      here so direct callers can't bypass validation).
+ *   2. Assert URL-bearing variants without treating authentication-mode flags
+ *      as eligibility filters.
+ *   3. Group by the explicit source-resolved consumer section.
+ *   4. Build one semantic OpenAPI document per non-empty section.
+ *   5. Drop empty sections (K-2).
+ *
+ * @param rawInput The unparsed input — typically the deserialised
+ *   wire payload from the introspection subprocess hop.
+ * @returns The `OpenApiGenerationOutput` ready to be returned by the
+ *   companion controller.
+ */
+export declare function generateOpenApiDocuments(rawInput: unknown): OpenApiGenerationOutput;
+//# sourceMappingURL=openapi-generator.d.ts.map

package/dist/esm/companion/openapi-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi-generator.d.ts","sourceRoot":"","sources":["../../../../src/companion/openapi-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAIH,OAAO,EACL,cAAc,EACd,KAAK,uBAAuB,EAE7B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAOL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAIxC;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAC7C,aAAa,CAAC,mBAAmB,CAAC,CAUpC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAC7C,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAqBtE;AAihDD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,OAAO,GAAG,uBAAuB,CAyBnF"}