@wildo-ai/saas-technical-doc 1.1.2 → 1.1.4

package/dist/esm/companion/technical-documentation-capture-execution-port.d.ts

@@ -7,7 +7,33 @@ export interface TechnicalDocumentationCaptureExecutionResult {
     readonly receipt: TechnicalDocumentationCaptureReceiptV1;
     readonly outputBytes: Uint8Array;
 }
-/** Production-neutral execution port implemented by the Node-only Playwright capture package. */
+/**
+ * Production-neutral execution port implemented by the Node-only Playwright capture package.
+ *
+ * ## Nothing in this repository injects an implementation, and that is a DECISION
+ *
+ * `@wildo-ai/technical-documentation-capture` implements this port, is built, and is tested in CI —
+ * and no package declares a dependency on it. Read as an orphan that is an oversight; it is not.
+ *
+ * - **It carries Playwright.** The companion is delivered as a dist artifact into every generated
+ *   application, so wiring the implementation there would put a browser download into every
+ *   application that never captures anything.
+ *   `technical-documentation-capture-dependency-closure.test.ts` pins the quarantine from the other
+ *   side: the package must stay absent from every engine and generated-application runtime manifest.
+ * - **The port is the cheap half.** A capture needs six APPLICATION-owned bindings
+ *   (`TechnicalDocumentationPlaywrightCaptureBindings`): a base URL, a semantic-target path, an
+ *   authenticated storage state, a landmark, a font profile and an allowed-origin set. That is a
+ *   live stack, a provisioned tenant and a logged-in session — an environment, not an import.
+ *
+ * So an unavailable capture SKIPS rather than blocks: the pilot assets resolver ships a PLACEHOLDER
+ * for a `PRODUCT_SCREENSHOT`/`PLAYWRIGHT_CAPTURE` request, the asset stays REQUIRED, and whether
+ * provisional imagery may actually ship is decided at publication by the environment
+ * (`--refuse-provisional-assets`), never here. Framework-owned figures do not depend on any of this
+ * — a `DIAGRAM`/`DETERMINISTIC_RENDER` request materializes real SVG bytes with no browser at all.
+ *
+ * When an application does bind a capture, it constructs the implementation itself and hands it in.
+ * That is the seam this interface exists for; do not "fix" the missing dependency by adding one.
+ */
 export interface TechnicalDocumentationCaptureExecutionPort {
     execute(request: TechnicalDocumentationCaptureExecutionRequestV1): Promise<TechnicalDocumentationCaptureExecutionResult>;
 }

package/dist/esm/companion/technical-documentation-capture-execution-port.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-capture-execution-port.d.ts","sourceRoot":"","sources":["../../../../src/companion/technical-documentation-capture-execution-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,+CAA+C,EAC/C,sCAAsC,EACvC,MAAM,uDAAuD,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,OAAO,EAAE,sCAAsC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;CAClC;AAED,iGAAiG;AACjG,MAAM,WAAW,0CAA0C;IACzD,OAAO,CAAC,OAAO,EAAE,+CAA+C,GAAG,OAAO,CAAC,4CAA4C,CAAC,CAAC;CAC1H"}
+{"version":3,"file":"technical-documentation-capture-execution-port.d.ts","sourceRoot":"","sources":["../../../src/companion/technical-documentation-capture-execution-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,+CAA+C,EAC/C,sCAAsC,EACvC,MAAM,uDAAuD,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,OAAO,EAAE,sCAAsC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,0CAA0C;IACzD,OAAO,CAAC,OAAO,EAAE,+CAA+C,GAAG,OAAO,CAAC,4CAA4C,CAAC,CAAC;CAC1H"}

package/dist/esm/companion/technical-documentation-capture-execution-port.js.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-capture-execution-port.js","sourceRoot":"","sources":["../../../../src/companion/technical-documentation-capture-execution-port.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  TechnicalDocumentationCaptureExecutionRequestV1,\n  TechnicalDocumentationCaptureReceiptV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\n/**\n * Result returned before the application-owned publication transaction writes any byte. Keeping bytes in memory at this seam prevents the reusable capture\n * implementation from choosing an application output root or bypassing complete-tree staging.\n */\nexport interface TechnicalDocumentationCaptureExecutionResult {\n  readonly receipt: TechnicalDocumentationCaptureReceiptV1;\n  readonly outputBytes: Uint8Array;\n}\n\n/** Production-neutral execution port implemented by the Node-only Playwright capture package. */\nexport interface TechnicalDocumentationCaptureExecutionPort {\n  execute(request: TechnicalDocumentationCaptureExecutionRequestV1): Promise<TechnicalDocumentationCaptureExecutionResult>;\n}\n"]}
+{"version":3,"file":"technical-documentation-capture-execution-port.js","sourceRoot":"","sources":["../../../src/companion/technical-documentation-capture-execution-port.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  TechnicalDocumentationCaptureExecutionRequestV1,\n  TechnicalDocumentationCaptureReceiptV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\n/**\n * Result returned before the application-owned publication transaction writes any byte. Keeping bytes in memory at this seam prevents the reusable capture\n * implementation from choosing an application output root or bypassing complete-tree staging.\n */\nexport interface TechnicalDocumentationCaptureExecutionResult {\n  readonly receipt: TechnicalDocumentationCaptureReceiptV1;\n  readonly outputBytes: Uint8Array;\n}\n\n/**\n * Production-neutral execution port implemented by the Node-only Playwright capture package.\n *\n * ## Nothing in this repository injects an implementation, and that is a DECISION\n *\n * `@wildo-ai/technical-documentation-capture` implements this port, is built, and is tested in CI —\n * and no package declares a dependency on it. Read as an orphan that is an oversight; it is not.\n *\n * - **It carries Playwright.** The companion is delivered as a dist artifact into every generated\n *   application, so wiring the implementation there would put a browser download into every\n *   application that never captures anything.\n *   `technical-documentation-capture-dependency-closure.test.ts` pins the quarantine from the other\n *   side: the package must stay absent from every engine and generated-application runtime manifest.\n * - **The port is the cheap half.** A capture needs six APPLICATION-owned bindings\n *   (`TechnicalDocumentationPlaywrightCaptureBindings`): a base URL, a semantic-target path, an\n *   authenticated storage state, a landmark, a font profile and an allowed-origin set. That is a\n *   live stack, a provisioned tenant and a logged-in session — an environment, not an import.\n *\n * So an unavailable capture SKIPS rather than blocks: the pilot assets resolver ships a PLACEHOLDER\n * for a `PRODUCT_SCREENSHOT`/`PLAYWRIGHT_CAPTURE` request, the asset stays REQUIRED, and whether\n * provisional imagery may actually ship is decided at publication by the environment\n * (`--refuse-provisional-assets`), never here. Framework-owned figures do not depend on any of this\n * — a `DIAGRAM`/`DETERMINISTIC_RENDER` request materializes real SVG bytes with no browser at all.\n *\n * When an application does bind a capture, it constructs the implementation itself and hands it in.\n * That is the seam this interface exists for; do not \"fix\" the missing dependency by adding one.\n */\nexport interface TechnicalDocumentationCaptureExecutionPort {\n  execute(request: TechnicalDocumentationCaptureExecutionRequestV1): Promise<TechnicalDocumentationCaptureExecutionResult>;\n}\n"]}

package/dist/esm/companion/technical-documentation-diagram-definitions.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Diagram DECLARATIONS — what a diagram IS, and the asset request that asks for one.
+ *
+ * Split out of `technical-documentation-diagram-materializer.ts` on 2026-09-08 to break a genuine
+ * import cycle, and the split is the right shape independently of it. The materializer needs
+ * `technicalDocumentationSha256Bytes` from the render model; the render model imports the engine
+ * content bundle; and the content bundle now names a diagram in a unit definition it builds AT
+ * MODULE LOAD (#474). That closes the loop, and the symptom was not a resolution error but
+ * `createTechnicalDocumentationApplicationRequestDiagramAssetRequest is not a function` — the
+ * factory evaluated as `undefined` several frames from the cause.
+ *
+ * So: DECLARING a diagram needs nothing but the specifications vocabulary, and MATERIALIZING one
+ * needs a hash. Only the second belongs downstream of the render model.
+ */
+import { type TechnicalDocumentationAssetRequestV1 } from '@wildo-ai/saas-specifications/technical-documentation';
+export interface TechnicalDocumentationDiagramNode {
+    readonly nodeRef: string;
+    readonly label: string;
+}
+export interface TechnicalDocumentationDiagramEdge {
+    readonly fromNodeRef: string;
+    readonly toNodeRef: string;
+    readonly label: string;
+}
+export interface TechnicalDocumentationDiagramDefinition {
+    readonly diagramRef: string;
+    readonly title: string;
+    readonly nodes: readonly TechnicalDocumentationDiagramNode[];
+    readonly edges: readonly TechnicalDocumentationDiagramEdge[];
+}
+export declare const TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1: TechnicalDocumentationDiagramDefinition;
+export declare function createTechnicalDocumentationApplicationRequestDiagramAssetRequest(): TechnicalDocumentationAssetRequestV1;
+//# sourceMappingURL=technical-documentation-diagram-definitions.d.ts.map

package/dist/esm/companion/technical-documentation-diagram-definitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"technical-documentation-diagram-definitions.d.ts","sourceRoot":"","sources":["../../../src/companion/technical-documentation-diagram-definitions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAML,KAAK,oCAAoC,EAC1C,MAAM,uDAAuD,CAAC;AAE/D,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,SAAS,iCAAiC,EAAE,CAAC;CAC9D;AAED,eAAO,MAAM,sDAAsD,EAAE,uCAYnE,CAAC;AAEH,wBAAgB,iEAAiE,IAAI,oCAAoC,CAwBxH"}

package/dist/esm/companion/technical-documentation-diagram-definitions.js

@@ -0,0 +1,54 @@
+/**
+ * Diagram DECLARATIONS — what a diagram IS, and the asset request that asks for one.
+ *
+ * Split out of `technical-documentation-diagram-materializer.ts` on 2026-09-08 to break a genuine
+ * import cycle, and the split is the right shape independently of it. The materializer needs
+ * `technicalDocumentationSha256Bytes` from the render model; the render model imports the engine
+ * content bundle; and the content bundle now names a diagram in a unit definition it builds AT
+ * MODULE LOAD (#474). That closes the loop, and the symptom was not a resolution error but
+ * `createTechnicalDocumentationApplicationRequestDiagramAssetRequest is not a function` — the
+ * factory evaluated as `undefined` several frames from the cause.
+ *
+ * So: DECLARING a diagram needs nothing but the specifications vocabulary, and MATERIALIZING one
+ * needs a hash. Only the second belongs downstream of the render model.
+ */
+import { TechnicalDocumentationAssetAccessClass, TechnicalDocumentationAssetKind, TechnicalDocumentationAssetOrigin, TechnicalDocumentationAssetRequiredness, TechnicalDocumentationAssetRightsBasis, } from '@wildo-ai/saas-specifications/technical-documentation';
+export const TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1 = Object.freeze({
+    diagramRef: 'technical-documentation:diagram/application-api-request',
+    title: 'From client to application API',
+    nodes: Object.freeze([
+        { nodeRef: 'technical-documentation:diagram-node/client', label: 'Client or service' },
+        { nodeRef: 'technical-documentation:diagram-node/application-api', label: 'Application API' },
+        { nodeRef: 'technical-documentation:diagram-node/resource', label: 'Documented resource' },
+    ]),
+    edges: Object.freeze([
+        { fromNodeRef: 'technical-documentation:diagram-node/client', toNodeRef: 'technical-documentation:diagram-node/application-api', label: 'Authenticated request' },
+        { fromNodeRef: 'technical-documentation:diagram-node/application-api', toNodeRef: 'technical-documentation:diagram-node/resource', label: 'Authorized operation' },
+    ]),
+});
+export function createTechnicalDocumentationApplicationRequestDiagramAssetRequest() {
+    return {
+        assetRef: 'technical-documentation:asset/application-api-request-diagram',
+        kind: TechnicalDocumentationAssetKind.DIAGRAM,
+        origin: TechnicalDocumentationAssetOrigin.DETERMINISTIC_RENDER,
+        accessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
+        requiredness: TechnicalDocumentationAssetRequiredness.REQUIRED,
+        rights: {
+            basis: TechnicalDocumentationAssetRightsBasis.ENGINE_AUTHORED,
+            authorityRef: 'technical-documentation:rights/engine-authored-diagram',
+        },
+        sourceAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
+        viewedTenantAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
+        roleAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
+        captureOrRenderProfileRef: 'technical-documentation:renderer/deterministic-svg-v1',
+        /*
+         * The definition this diagram depicts, NAMED. It was a sha256 of the definition until
+         * 2026-08-27 — computed here by calling the materializer, then compared by the pilot against
+         * the value the same materializer returned over the same frozen constant. A value compared
+         * with itself.
+         */
+        semanticInputRef: TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1.diagramRef,
+        altText: 'A client sends an authenticated request through the application API to a documented resource.',
+    };
+}
+//# sourceMappingURL=technical-documentation-diagram-definitions.js.map

package/dist/esm/companion/technical-documentation-diagram-definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"technical-documentation-diagram-definitions.js","sourceRoot":"","sources":["../../../src/companion/technical-documentation-diagram-definitions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,sCAAsC,GAEvC,MAAM,uDAAuD,CAAC;AAoB/D,MAAM,CAAC,MAAM,sDAAsD,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC3H,UAAU,EAAE,yDAAyD;IACrE,KAAK,EAAE,gCAAgC;IACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,OAAO,EAAE,6CAA6C,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACtF,EAAE,OAAO,EAAE,sDAAsD,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC7F,EAAE,OAAO,EAAE,+CAA+C,EAAE,KAAK,EAAE,qBAAqB,EAAE;KAC3F,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,WAAW,EAAE,6CAA6C,EAAE,SAAS,EAAE,sDAAsD,EAAE,KAAK,EAAE,uBAAuB,EAAE;QACjK,EAAE,WAAW,EAAE,sDAAsD,EAAE,SAAS,EAAE,+CAA+C,EAAE,KAAK,EAAE,sBAAsB,EAAE;KACnK,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,UAAU,iEAAiE;IAC/E,OAAO;QACL,QAAQ,EAAE,+DAA+D;QACzE,IAAI,EAAE,+BAA+B,CAAC,OAAO;QAC7C,MAAM,EAAE,iCAAiC,CAAC,oBAAoB;QAC9D,WAAW,EAAE,sCAAsC,CAAC,MAAM;QAC1D,YAAY,EAAE,uCAAuC,CAAC,QAAQ;QAC9D,MAAM,EAAE;YACN,KAAK,EAAE,sCAAsC,CAAC,eAAe;YAC7D,YAAY,EAAE,wDAAwD;SACvE;QACD,iBAAiB,EAAE,sCAAsC,CAAC,MAAM;QAChE,uBAAuB,EAAE,sCAAsC,CAAC,MAAM;QACtE,eAAe,EAAE,sCAAsC,CAAC,MAAM;QAC9D,yBAAyB,EAAE,uDAAuD;QAClF;;;;;WAKG;QACH,gBAAgB,EAAE,sDAAsD,CAAC,UAAU;QACnF,OAAO,EAAE,+FAA+F;KACzG,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Diagram DECLARATIONS — what a diagram IS, and the asset request that asks for one.\n *\n * Split out of `technical-documentation-diagram-materializer.ts` on 2026-09-08 to break a genuine\n * import cycle, and the split is the right shape independently of it. The materializer needs\n * `technicalDocumentationSha256Bytes` from the render model; the render model imports the engine\n * content bundle; and the content bundle now names a diagram in a unit definition it builds AT\n * MODULE LOAD (#474). That closes the loop, and the symptom was not a resolution error but\n * `createTechnicalDocumentationApplicationRequestDiagramAssetRequest is not a function` — the\n * factory evaluated as `undefined` several frames from the cause.\n *\n * So: DECLARING a diagram needs nothing but the specifications vocabulary, and MATERIALIZING one\n * needs a hash. Only the second belongs downstream of the render model.\n */\nimport {\n  TechnicalDocumentationAssetAccessClass,\n  TechnicalDocumentationAssetKind,\n  TechnicalDocumentationAssetOrigin,\n  TechnicalDocumentationAssetRequiredness,\n  TechnicalDocumentationAssetRightsBasis,\n  type TechnicalDocumentationAssetRequestV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\nexport interface TechnicalDocumentationDiagramNode {\n  readonly nodeRef: string;\n  readonly label: string;\n}\n\nexport interface TechnicalDocumentationDiagramEdge {\n  readonly fromNodeRef: string;\n  readonly toNodeRef: string;\n  readonly label: string;\n}\n\nexport interface TechnicalDocumentationDiagramDefinition {\n  readonly diagramRef: string;\n  readonly title: string;\n  readonly nodes: readonly TechnicalDocumentationDiagramNode[];\n  readonly edges: readonly TechnicalDocumentationDiagramEdge[];\n}\n\nexport const TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1: TechnicalDocumentationDiagramDefinition = Object.freeze({\n  diagramRef: 'technical-documentation:diagram/application-api-request',\n  title: 'From client to application API',\n  nodes: Object.freeze([\n    { nodeRef: 'technical-documentation:diagram-node/client', label: 'Client or service' },\n    { nodeRef: 'technical-documentation:diagram-node/application-api', label: 'Application API' },\n    { nodeRef: 'technical-documentation:diagram-node/resource', label: 'Documented resource' },\n  ]),\n  edges: Object.freeze([\n    { fromNodeRef: 'technical-documentation:diagram-node/client', toNodeRef: 'technical-documentation:diagram-node/application-api', label: 'Authenticated request' },\n    { fromNodeRef: 'technical-documentation:diagram-node/application-api', toNodeRef: 'technical-documentation:diagram-node/resource', label: 'Authorized operation' },\n  ]),\n});\n\nexport function createTechnicalDocumentationApplicationRequestDiagramAssetRequest(): TechnicalDocumentationAssetRequestV1 {\n  return {\n    assetRef: 'technical-documentation:asset/application-api-request-diagram',\n    kind: TechnicalDocumentationAssetKind.DIAGRAM,\n    origin: TechnicalDocumentationAssetOrigin.DETERMINISTIC_RENDER,\n    accessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    requiredness: TechnicalDocumentationAssetRequiredness.REQUIRED,\n    rights: {\n      basis: TechnicalDocumentationAssetRightsBasis.ENGINE_AUTHORED,\n      authorityRef: 'technical-documentation:rights/engine-authored-diagram',\n    },\n    sourceAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    viewedTenantAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    roleAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    captureOrRenderProfileRef: 'technical-documentation:renderer/deterministic-svg-v1',\n    /*\n     * The definition this diagram depicts, NAMED. It was a sha256 of the definition until\n     * 2026-08-27 — computed here by calling the materializer, then compared by the pilot against\n     * the value the same materializer returned over the same frozen constant. A value compared\n     * with itself.\n     */\n    semanticInputRef: TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1.diagramRef,\n    altText: 'A client sends an authenticated request through the application API to a documented resource.',\n  };\n}\n\n"]}

package/dist/esm/companion/technical-documentation-diagram-materializer.d.ts

@@ -1,21 +1,13 @@
-import { type TechnicalDocumentationAssetRequestV1 } from '@wildo-ai/saas-specifications/technical-documentation';
-export interface TechnicalDocumentationDiagramNode {
-    readonly nodeRef: string;
-    readonly label: string;
-}
-export interface TechnicalDocumentationDiagramEdge {
-    readonly fromNodeRef: string;
-    readonly toNodeRef: string;
-    readonly label: string;
-}
-export interface TechnicalDocumentationDiagramDefinition {
-    readonly diagramRef: string;
-    readonly title: string;
-    readonly nodes: readonly TechnicalDocumentationDiagramNode[];
-    readonly edges: readonly TechnicalDocumentationDiagramEdge[];
-}
-export declare const TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1: TechnicalDocumentationDiagramDefinition;
-export declare function createTechnicalDocumentationApplicationRequestDiagramAssetRequest(): TechnicalDocumentationAssetRequestV1;
+/**
+ * Deterministic diagram MATERIALIZATION — declaration in, SVG bytes out.
+ *
+ * The declarations themselves live in `./technical-documentation-diagram-definitions`, which this
+ * module re-exports so every existing consumer and the package barrel are unchanged. See that
+ * file's header for why they were split: this one imports the render model for hashing, the render
+ * model imports the engine content bundle, and the content bundle names a diagram at module load.
+ */
+import type { TechnicalDocumentationDiagramDefinition } from './technical-documentation-diagram-definitions';
+export * from './technical-documentation-diagram-definitions';
 /** A dependency-free deterministic SVG materializer; no layout engine or runtime font metrics participate in its bytes. */
 export declare function materializeTechnicalDocumentationDiagram(definition: TechnicalDocumentationDiagramDefinition): {
     readonly bytes: Uint8Array;

package/dist/esm/companion/technical-documentation-diagram-materializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-diagram-materializer.d.ts","sourceRoot":"","sources":["../../../../src/companion/technical-documentation-diagram-materializer.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,oCAAoC,EAC1C,MAAM,uDAAuD,CAAC;AAI/D,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,SAAS,iCAAiC,EAAE,CAAC;CAC9D;AAED,eAAO,MAAM,sDAAsD,EAAE,uCAYnE,CAAC;AAEH,wBAAgB,iEAAiE,IAAI,oCAAoC,CAwBxH;AAMD,2HAA2H;AAC3H,wBAAgB,wCAAwC,CAAC,UAAU,EAAE,uCAAuC,GAAG;IAC7G,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC,CA+BA"}
+{"version":3,"file":"technical-documentation-diagram-materializer.d.ts","sourceRoot":"","sources":["../../../src/companion/technical-documentation-diagram-materializer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AAE7G,cAAc,+CAA+C,CAAC;AAM9D,2HAA2H;AAC3H,wBAAgB,wCAAwC,CAAC,UAAU,EAAE,uCAAuC,GAAG;IAC7G,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC,CA+BA"}

package/dist/esm/companion/technical-documentation-diagram-materializer.js

@@ -1,43 +1,13 @@
-import { TechnicalDocumentationAssetAccessClass, TechnicalDocumentationAssetKind, TechnicalDocumentationAssetOrigin, TechnicalDocumentationAssetRequiredness, TechnicalDocumentationAssetRightsBasis, } from '@wildo-ai/saas-specifications/technical-documentation';
+/**
+ * Deterministic diagram MATERIALIZATION — declaration in, SVG bytes out.
+ *
+ * The declarations themselves live in `./technical-documentation-diagram-definitions`, which this
+ * module re-exports so every existing consumer and the package barrel are unchanged. See that
+ * file's header for why they were split: this one imports the render model for hashing, the render
+ * model imports the engine content bundle, and the content bundle names a diagram at module load.
+ */
 import { technicalDocumentationSha256Bytes } from './rendering/technical-documentation-render-model.js';
-export const TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1 = Object.freeze({
-    diagramRef: 'technical-documentation:diagram/application-api-request',
-    title: 'From client to application API',
-    nodes: Object.freeze([
-        { nodeRef: 'technical-documentation:diagram-node/client', label: 'Client or service' },
-        { nodeRef: 'technical-documentation:diagram-node/application-api', label: 'Application API' },
-        { nodeRef: 'technical-documentation:diagram-node/resource', label: 'Documented resource' },
-    ]),
-    edges: Object.freeze([
-        { fromNodeRef: 'technical-documentation:diagram-node/client', toNodeRef: 'technical-documentation:diagram-node/application-api', label: 'Authenticated request' },
-        { fromNodeRef: 'technical-documentation:diagram-node/application-api', toNodeRef: 'technical-documentation:diagram-node/resource', label: 'Authorized operation' },
-    ]),
-});
-export function createTechnicalDocumentationApplicationRequestDiagramAssetRequest() {
-    return {
-        assetRef: 'technical-documentation:asset/application-api-request-diagram',
-        kind: TechnicalDocumentationAssetKind.DIAGRAM,
-        origin: TechnicalDocumentationAssetOrigin.DETERMINISTIC_RENDER,
-        accessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
-        requiredness: TechnicalDocumentationAssetRequiredness.REQUIRED,
-        rights: {
-            basis: TechnicalDocumentationAssetRightsBasis.ENGINE_AUTHORED,
-            authorityRef: 'technical-documentation:rights/engine-authored-diagram',
-        },
-        sourceAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
-        viewedTenantAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
-        roleAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,
-        captureOrRenderProfileRef: 'technical-documentation:renderer/deterministic-svg-v1',
-        /*
-         * The definition this diagram depicts, NAMED. It was a sha256 of the definition until
-         * 2026-08-27 — computed here by calling the materializer, then compared by the pilot against
-         * the value the same materializer returned over the same frozen constant. A value compared
-         * with itself.
-         */
-        semanticInputRef: TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1.diagramRef,
-        altText: 'A client sends an authenticated request through the application API to a documented resource.',
-    };
-}
+export * from './technical-documentation-diagram-definitions.js';
 function escapeXml(value) {
     return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;').replaceAll("'", '&apos;');
 }

package/dist/esm/companion/technical-documentation-diagram-materializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-diagram-materializer.js","sourceRoot":"","sources":["../../../../src/companion/technical-documentation-diagram-materializer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,sCAAsC,GAEvC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AAoBrG,MAAM,CAAC,MAAM,sDAAsD,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC3H,UAAU,EAAE,yDAAyD;IACrE,KAAK,EAAE,gCAAgC;IACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,OAAO,EAAE,6CAA6C,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACtF,EAAE,OAAO,EAAE,sDAAsD,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC7F,EAAE,OAAO,EAAE,+CAA+C,EAAE,KAAK,EAAE,qBAAqB,EAAE;KAC3F,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,WAAW,EAAE,6CAA6C,EAAE,SAAS,EAAE,sDAAsD,EAAE,KAAK,EAAE,uBAAuB,EAAE;QACjK,EAAE,WAAW,EAAE,sDAAsD,EAAE,SAAS,EAAE,+CAA+C,EAAE,KAAK,EAAE,sBAAsB,EAAE;KACnK,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,UAAU,iEAAiE;IAC/E,OAAO;QACL,QAAQ,EAAE,+DAA+D;QACzE,IAAI,EAAE,+BAA+B,CAAC,OAAO;QAC7C,MAAM,EAAE,iCAAiC,CAAC,oBAAoB;QAC9D,WAAW,EAAE,sCAAsC,CAAC,MAAM;QAC1D,YAAY,EAAE,uCAAuC,CAAC,QAAQ;QAC9D,MAAM,EAAE;YACN,KAAK,EAAE,sCAAsC,CAAC,eAAe;YAC7D,YAAY,EAAE,wDAAwD;SACvE;QACD,iBAAiB,EAAE,sCAAsC,CAAC,MAAM;QAChE,uBAAuB,EAAE,sCAAsC,CAAC,MAAM;QACtE,eAAe,EAAE,sCAAsC,CAAC,MAAM;QAC9D,yBAAyB,EAAE,uDAAuD;QAClF;;;;;WAKG;QACH,gBAAgB,EAAE,sDAAsD,CAAC,UAAU;QACnF,OAAO,EAAE,+FAA+F;KACzG,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC5I,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,wCAAwC,CAAC,UAAmD;IAK1G,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC5H,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7L,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC/J,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC;IAClB,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAW,CAAC;QAC7C,OAAO,eAAe,CAAC,mBAAmB,SAAS,oFAAoF,CAAC,GAAG,SAAS,GAAG,CAAC,mGAAmG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IAChS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,KAAK,GAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAY,GAAG,SAAS,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAW,CAAC;QACjD,MAAM,CAAC,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC;QAC3B,OAAO,iBAAiB,KAAK,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,0EAA0E,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,2FAA2F,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACpS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,kDAAkD,KAAK,+BAA+B,KAAK,8DAA8D,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,6RAA6R,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,OAAO,GAAG,OAAO,UAAU,CAAC;IAC9hB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,UAAU,EAAE,iCAAiC,CAAC,KAAK,CAAC;QACpD,SAAS,EAAE,eAAwB;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG","sourcesContent":["import {\n  TechnicalDocumentationAssetAccessClass,\n  TechnicalDocumentationAssetKind,\n  TechnicalDocumentationAssetOrigin,\n  TechnicalDocumentationAssetRequiredness,\n  TechnicalDocumentationAssetRightsBasis,\n  type TechnicalDocumentationAssetRequestV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\nimport { technicalDocumentationSha256Bytes } from './rendering/technical-documentation-render-model';\n\nexport interface TechnicalDocumentationDiagramNode {\n  readonly nodeRef: string;\n  readonly label: string;\n}\n\nexport interface TechnicalDocumentationDiagramEdge {\n  readonly fromNodeRef: string;\n  readonly toNodeRef: string;\n  readonly label: string;\n}\n\nexport interface TechnicalDocumentationDiagramDefinition {\n  readonly diagramRef: string;\n  readonly title: string;\n  readonly nodes: readonly TechnicalDocumentationDiagramNode[];\n  readonly edges: readonly TechnicalDocumentationDiagramEdge[];\n}\n\nexport const TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1: TechnicalDocumentationDiagramDefinition = Object.freeze({\n  diagramRef: 'technical-documentation:diagram/application-api-request',\n  title: 'From client to application API',\n  nodes: Object.freeze([\n    { nodeRef: 'technical-documentation:diagram-node/client', label: 'Client or service' },\n    { nodeRef: 'technical-documentation:diagram-node/application-api', label: 'Application API' },\n    { nodeRef: 'technical-documentation:diagram-node/resource', label: 'Documented resource' },\n  ]),\n  edges: Object.freeze([\n    { fromNodeRef: 'technical-documentation:diagram-node/client', toNodeRef: 'technical-documentation:diagram-node/application-api', label: 'Authenticated request' },\n    { fromNodeRef: 'technical-documentation:diagram-node/application-api', toNodeRef: 'technical-documentation:diagram-node/resource', label: 'Authorized operation' },\n  ]),\n});\n\nexport function createTechnicalDocumentationApplicationRequestDiagramAssetRequest(): TechnicalDocumentationAssetRequestV1 {\n  return {\n    assetRef: 'technical-documentation:asset/application-api-request-diagram',\n    kind: TechnicalDocumentationAssetKind.DIAGRAM,\n    origin: TechnicalDocumentationAssetOrigin.DETERMINISTIC_RENDER,\n    accessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    requiredness: TechnicalDocumentationAssetRequiredness.REQUIRED,\n    rights: {\n      basis: TechnicalDocumentationAssetRightsBasis.ENGINE_AUTHORED,\n      authorityRef: 'technical-documentation:rights/engine-authored-diagram',\n    },\n    sourceAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    viewedTenantAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    roleAccessClass: TechnicalDocumentationAssetAccessClass.PUBLIC,\n    captureOrRenderProfileRef: 'technical-documentation:renderer/deterministic-svg-v1',\n    /*\n     * The definition this diagram depicts, NAMED. It was a sha256 of the definition until\n     * 2026-08-27 — computed here by calling the materializer, then compared by the pilot against\n     * the value the same materializer returned over the same frozen constant. A value compared\n     * with itself.\n     */\n    semanticInputRef: TECHNICAL_DOCUMENTATION_APPLICATION_REQUEST_DIAGRAM_V1.diagramRef,\n    altText: 'A client sends an authenticated request through the application API to a documented resource.',\n  };\n}\n\nfunction escapeXml(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('\"', '&quot;').replaceAll(\"'\", '&apos;');\n}\n\n/** A dependency-free deterministic SVG materializer; no layout engine or runtime font metrics participate in its bytes. */\nexport function materializeTechnicalDocumentationDiagram(definition: TechnicalDocumentationDiagramDefinition): {\n  readonly bytes: Uint8Array;\n  readonly byteDigest: string;\n  readonly mediaType: 'image/svg+xml';\n} {\n  if (definition.nodes.length < 2) throw new Error('technical-documentation diagram requires at least two nodes');\n  const nodes = [...definition.nodes].sort((left, right) => left.nodeRef.localeCompare(right.nodeRef));\n  const nodeRefs = nodes.map((node) => node.nodeRef);\n  if (new Set(nodeRefs).size !== nodeRefs.length) throw new Error('technical-documentation diagram node refs must be unique');\n  const nodeRefSet = new Set(nodeRefs);\n  const edges = [...definition.edges].sort((left, right) => `${left.fromNodeRef}\\0${left.toNodeRef}\\0${left.label}`.localeCompare(`${right.fromNodeRef}\\0${right.toNodeRef}\\0${right.label}`));\n  for (const edge of edges) {\n    if (!nodeRefSet.has(edge.fromNodeRef) || !nodeRefSet.has(edge.toNodeRef)) throw new Error('technical-documentation diagram edge references an unknown node');\n  }\n  const width = 960;\n  const nodeWidth = 180;\n  const gap = (width - nodes.length * nodeWidth) / (nodes.length + 1);\n  const xByRef = new Map(nodes.map((node, index) => [node.nodeRef, Math.round(gap + index * (nodeWidth + gap))]));\n  const nodeSvg = nodes.map((node) => {\n    const x = xByRef.get(node.nodeRef) as number;\n    return `<g><rect x=\"${x}\" y=\"96\" width=\"${nodeWidth}\" height=\"72\" rx=\"12\" fill=\"#f7f8fb\" stroke=\"#263247\" stroke-width=\"2\"/><text x=\"${x + nodeWidth / 2}\" y=\"138\" text-anchor=\"middle\" font-family=\"system-ui,sans-serif\" font-size=\"16\" fill=\"#172033\">${escapeXml(node.label)}</text></g>`;\n  }).join('');\n  const edgeSvg = edges.map((edge, index) => {\n    const fromX = (xByRef.get(edge.fromNodeRef) as number) + nodeWidth;\n    const toX = xByRef.get(edge.toNodeRef) as number;\n    const y = 112 + index * 14;\n    return `<g><path d=\"M ${fromX} ${y} L ${toX} ${y}\" stroke=\"#54657e\" stroke-width=\"2\" marker-end=\"url(#arrow)\"/><text x=\"${Math.round((fromX + toX) / 2)}\" y=\"${y - 6}\" text-anchor=\"middle\" font-family=\"system-ui,sans-serif\" font-size=\"12\" fill=\"#34445d\">${escapeXml(edge.label)}</text></g>`;\n  }).join('');\n  const svg = `<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"${width}\" height=\"240\" viewBox=\"0 0 ${width} 240\" role=\"img\" aria-labelledby=\"title\"><title id=\"title\">${escapeXml(definition.title)}</title><defs><marker id=\"arrow\" markerWidth=\"8\" markerHeight=\"8\" refX=\"7\" refY=\"4\" orient=\"auto\"><path d=\"M0,0 L8,4 L0,8 z\" fill=\"#54657e\"/></marker></defs><text x=\"480\" y=\"42\" text-anchor=\"middle\" font-family=\"system-ui,sans-serif\" font-size=\"22\" font-weight=\"600\" fill=\"#172033\">${escapeXml(definition.title)}</text>${edgeSvg}${nodeSvg}</svg>\\n`;\n  const bytes = Buffer.from(svg, 'utf8');\n  return Object.freeze({\n    bytes,\n    byteDigest: technicalDocumentationSha256Bytes(bytes),\n    mediaType: 'image/svg+xml' as const,\n  });\n}\n\n/*\n * `technicalDocumentationDiagramProducerImplementationDigest()` lived here until 2026-08-27. It\n * hashed `escapeXml.toString()` and this materializer's own source text, and rode into every\n * resolved asset as `producerImplementationDigest`. Nothing compared it; the producer is named by\n * `producerRef` + `producerVersion`, which a reader can act on.\n */\n"]}
+{"version":3,"file":"technical-documentation-diagram-materializer.js","sourceRoot":"","sources":["../../../src/companion/technical-documentation-diagram-materializer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AAIrG,cAAc,+CAA+C,CAAC;AAE9D,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC5I,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,wCAAwC,CAAC,UAAmD;IAK1G,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC5H,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7L,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC/J,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC;IAClB,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAW,CAAC;QAC7C,OAAO,eAAe,CAAC,mBAAmB,SAAS,oFAAoF,CAAC,GAAG,SAAS,GAAG,CAAC,mGAAmG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IAChS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,KAAK,GAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAY,GAAG,SAAS,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAW,CAAC;QACjD,MAAM,CAAC,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC;QAC3B,OAAO,iBAAiB,KAAK,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,0EAA0E,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,2FAA2F,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACpS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,kDAAkD,KAAK,+BAA+B,KAAK,8DAA8D,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,6RAA6R,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,OAAO,GAAG,OAAO,UAAU,CAAC;IAC9hB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,UAAU,EAAE,iCAAiC,CAAC,KAAK,CAAC;QACpD,SAAS,EAAE,eAAwB;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG","sourcesContent":["/**\n * Deterministic diagram MATERIALIZATION — declaration in, SVG bytes out.\n *\n * The declarations themselves live in `./technical-documentation-diagram-definitions`, which this\n * module re-exports so every existing consumer and the package barrel are unchanged. See that\n * file's header for why they were split: this one imports the render model for hashing, the render\n * model imports the engine content bundle, and the content bundle names a diagram at module load.\n */\n\nimport { technicalDocumentationSha256Bytes } from './rendering/technical-documentation-render-model';\n\nimport type { TechnicalDocumentationDiagramDefinition } from './technical-documentation-diagram-definitions';\n\nexport * from './technical-documentation-diagram-definitions';\n\nfunction escapeXml(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('\"', '&quot;').replaceAll(\"'\", '&apos;');\n}\n\n/** A dependency-free deterministic SVG materializer; no layout engine or runtime font metrics participate in its bytes. */\nexport function materializeTechnicalDocumentationDiagram(definition: TechnicalDocumentationDiagramDefinition): {\n  readonly bytes: Uint8Array;\n  readonly byteDigest: string;\n  readonly mediaType: 'image/svg+xml';\n} {\n  if (definition.nodes.length < 2) throw new Error('technical-documentation diagram requires at least two nodes');\n  const nodes = [...definition.nodes].sort((left, right) => left.nodeRef.localeCompare(right.nodeRef));\n  const nodeRefs = nodes.map((node) => node.nodeRef);\n  if (new Set(nodeRefs).size !== nodeRefs.length) throw new Error('technical-documentation diagram node refs must be unique');\n  const nodeRefSet = new Set(nodeRefs);\n  const edges = [...definition.edges].sort((left, right) => `${left.fromNodeRef}\\0${left.toNodeRef}\\0${left.label}`.localeCompare(`${right.fromNodeRef}\\0${right.toNodeRef}\\0${right.label}`));\n  for (const edge of edges) {\n    if (!nodeRefSet.has(edge.fromNodeRef) || !nodeRefSet.has(edge.toNodeRef)) throw new Error('technical-documentation diagram edge references an unknown node');\n  }\n  const width = 960;\n  const nodeWidth = 180;\n  const gap = (width - nodes.length * nodeWidth) / (nodes.length + 1);\n  const xByRef = new Map(nodes.map((node, index) => [node.nodeRef, Math.round(gap + index * (nodeWidth + gap))]));\n  const nodeSvg = nodes.map((node) => {\n    const x = xByRef.get(node.nodeRef) as number;\n    return `<g><rect x=\"${x}\" y=\"96\" width=\"${nodeWidth}\" height=\"72\" rx=\"12\" fill=\"#f7f8fb\" stroke=\"#263247\" stroke-width=\"2\"/><text x=\"${x + nodeWidth / 2}\" y=\"138\" text-anchor=\"middle\" font-family=\"system-ui,sans-serif\" font-size=\"16\" fill=\"#172033\">${escapeXml(node.label)}</text></g>`;\n  }).join('');\n  const edgeSvg = edges.map((edge, index) => {\n    const fromX = (xByRef.get(edge.fromNodeRef) as number) + nodeWidth;\n    const toX = xByRef.get(edge.toNodeRef) as number;\n    const y = 112 + index * 14;\n    return `<g><path d=\"M ${fromX} ${y} L ${toX} ${y}\" stroke=\"#54657e\" stroke-width=\"2\" marker-end=\"url(#arrow)\"/><text x=\"${Math.round((fromX + toX) / 2)}\" y=\"${y - 6}\" text-anchor=\"middle\" font-family=\"system-ui,sans-serif\" font-size=\"12\" fill=\"#34445d\">${escapeXml(edge.label)}</text></g>`;\n  }).join('');\n  const svg = `<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"${width}\" height=\"240\" viewBox=\"0 0 ${width} 240\" role=\"img\" aria-labelledby=\"title\"><title id=\"title\">${escapeXml(definition.title)}</title><defs><marker id=\"arrow\" markerWidth=\"8\" markerHeight=\"8\" refX=\"7\" refY=\"4\" orient=\"auto\"><path d=\"M0,0 L8,4 L0,8 z\" fill=\"#54657e\"/></marker></defs><text x=\"480\" y=\"42\" text-anchor=\"middle\" font-family=\"system-ui,sans-serif\" font-size=\"22\" font-weight=\"600\" fill=\"#172033\">${escapeXml(definition.title)}</text>${edgeSvg}${nodeSvg}</svg>\\n`;\n  const bytes = Buffer.from(svg, 'utf8');\n  return Object.freeze({\n    bytes,\n    byteDigest: technicalDocumentationSha256Bytes(bytes),\n    mediaType: 'image/svg+xml' as const,\n  });\n}\n\n/*\n * `technicalDocumentationDiagramProducerImplementationDigest()` lived here until 2026-08-27. It\n * hashed `escapeXml.toString()` and this materializer's own source text, and rode into every\n * resolved asset as `producerImplementationDigest`. Nothing compared it; the producer is named by\n * `producerRef` + `producerVersion`, which a reader can act on.\n */\n"]}

package/dist/esm/companion/technical-documentation-placeholder-materializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-placeholder-materializer.d.ts","sourceRoot":"","sources":["../../../../src/companion/technical-documentation-placeholder-materializer.ts"],"names":[],"mappings":"AA2BA;;;;;;;GAOG;AACH,wBAAgB,4CAA4C,CAAC,KAAK,EAAE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GAAG;IACF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;CACjC,CAgCA"}
+{"version":3,"file":"technical-documentation-placeholder-materializer.d.ts","sourceRoot":"","sources":["../../../src/companion/technical-documentation-placeholder-materializer.ts"],"names":[],"mappings":"AA2BA;;;;;;;GAOG;AACH,wBAAgB,4CAA4C,CAAC,KAAK,EAAE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GAAG;IACF,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;CACjC,CAgCA"}

package/dist/esm/companion/zod-to-openapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zod-to-openapi.d.ts","sourceRoot":"","sources":["../../../../src/companion/zod-to-openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,IAAI,CAAC;AA4GzD,eAAO,MAAM,+BAA+B,GAC1C,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,KACvC,2BAqDF,CAAC"}
+{"version":3,"file":"zod-to-openapi.d.ts","sourceRoot":"","sources":["../../../src/companion/zod-to-openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,IAAI,CAAC;AA4GzD,eAAO,MAAM,+BAA+B,GAC1C,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,KACvC,2BAqDF,CAAC"}

package/dist/esm/companion-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"companion-exports.d.ts","sourceRoot":"","sources":["../../../src/companion-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"companion-exports.d.ts","sourceRoot":"","sources":["../../src/companion-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC"}

package/dist/esm/config/define-tech-doc-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define-tech-doc-config.d.ts","sourceRoot":"","sources":["../../../../src/config/define-tech-doc-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EAClC,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,4BAA4B,GACnC,uBAAuB,CAEzB"}
+{"version":3,"file":"define-tech-doc-config.d.ts","sourceRoot":"","sources":["../../../src/config/define-tech-doc-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EAClC,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,4BAA4B,GACnC,uBAAuB,CAEzB"}

package/dist/esm/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC"}

package/dist/esm/config/wildo-tech-doc-config.schemas.d.ts

@@ -103,10 +103,14 @@ export declare const WildoTechnicalDocConfigSchema: z.ZodObject<{
      * - `CoreResourceType[]` — a curated subset (e.g. `[CoreResourceType.ORGANIZATIONS,
      *   CoreResourceType.ORGANIZATION_MEMBERS, CoreResourceType.FILES]`).
      *
-     * Omitted (default): only the app's own resources are documented. Org-scoped
-     * core resources land in the (auth-gated) Organization API section; any
-     * anonymous ones in the Application API section — the existing section split
-     * by operation access level is unchanged.
+     * Omitted (default): only the app's own resources are documented.
+     *
+     * There is no organizational section. `OpenApiSection` has exactly two members,
+     * `API_REFERENCE` and `APPLICATION_ADMINISTRATION_API_REFERENCE`, neither of which is scoped to
+     * an organization. The split is made per OPERATION, from the `consumerApiSection` the source
+     * projector resolves, so a selected core resource's operations may land in either. Nothing the
+     * docs site emits is auth-gated; see `docs-auth-session.schemas.ts` for why the decoded role axis
+     * is not a control.
      */
     apiDocResources: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodEnum<typeof CoreResourceType>>, z.ZodLiteral<"all">]>>;
     /**

package/dist/esm/config/wildo-tech-doc-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-tech-doc-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/config/wildo-tech-doc-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,KAAc,CAAC;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,4CAA4C;;;;;kBAEvD,CAAC;AACH,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAElH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,6BAA6B;IACxC;;;;;OAKG;;IAGH;;;;;;;;OAQG;;;;;;IASH;;;;;;;;;;OAUG;;IAGH;;;;OAIG;;IAGH;;;;;;;;;;;;;;;;;;OAkBG;;IAMH;;;;;;;;OAQG;;;;;;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;;;;;IAGH;;;;;;;;;;;;;;;OAeG;;IAGH;;;;;;;;;;;;;;;;;;OAkBG;;;;;;;;kBAEH,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACzF,8DAA8D"}
+{"version":3,"file":"wildo-tech-doc-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/config/wildo-tech-doc-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAG,KAAc,CAAC;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,4CAA4C;;;;;kBAEvD,CAAC;AACH,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAElH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,6BAA6B;IACxC;;;;;OAKG;;IAGH;;;;;;;;OAQG;;;;;;IASH;;;;;;;;;;OAUG;;IAGH;;;;OAIG;;IAGH;;;;;;;;;;;;;;;;;;;;;;OAsBG;;IAMH;;;;;;;;OAQG;;;;;;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;;;;;IAGH;;;;;;;;;;;;;;;OAeG;;IAGH;;;;;;;;;;;;;;;;;;OAkBG;;;;;;;;kBAEH,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACzF,8DAA8D"}

package/dist/esm/config/wildo-tech-doc-config.schemas.js

@@ -104,10 +104,14 @@ export const WildoTechnicalDocConfigSchema = z.strictObject({
      * - `CoreResourceType[]` — a curated subset (e.g. `[CoreResourceType.ORGANIZATIONS,
      *   CoreResourceType.ORGANIZATION_MEMBERS, CoreResourceType.FILES]`).
      *
-     * Omitted (default): only the app's own resources are documented. Org-scoped
-     * core resources land in the (auth-gated) Organization API section; any
-     * anonymous ones in the Application API section — the existing section split
-     * by operation access level is unchanged.
+     * Omitted (default): only the app's own resources are documented.
+     *
+     * There is no organizational section. `OpenApiSection` has exactly two members,
+     * `API_REFERENCE` and `APPLICATION_ADMINISTRATION_API_REFERENCE`, neither of which is scoped to
+     * an organization. The split is made per OPERATION, from the `consumerApiSection` the source
+     * projector resolves, so a selected core resource's operations may land in either. Nothing the
+     * docs site emits is auth-gated; see `docs-auth-session.schemas.ts` for why the decoded role axis
+     * is not a control.
      */
     apiDocResources: z.union([
         z.array(z.enum(CoreResourceType)),

package/dist/esm/config/wildo-tech-doc-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-tech-doc-config.schemas.js","sourceRoot":"","sources":["../../../../src/config/wildo-tech-doc-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,+CAA+C,EAAE,MAAM,uDAAuD,CAAC;AACxH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEpH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAc,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,kCAAkC,CAAC,MAAM,CAAC;IACpG,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D;;;;;OAKG;IACH,mBAAmB,EAAE,+CAA+C;IAEpE;;;;;;;;OAQG;IACH,aAAa,EAAE,CAAC;SACb,YAAY,CAAC;QACZ,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACxD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACzD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAChE,CAAC;SACD,QAAQ,EAAE;IAEb;;;;;;;;;;OAUG;IACH,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE/D;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAE3D;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACjC,CAAC,CAAC,QAAQ,EAAE;IAEb;;;;;;;;OAQG;IACH,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEvG;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAEnD;;;;;;;;;;;;;;;OAeG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAEnD;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,8DAA8D","sourcesContent":["/**\n * @wildo_source:part:start engine.saas-technical-doc.config facet:layer:engine facet:family:technical-doc\n *\n * Per-service technical-documentation configuration authored as\n * `wildo.tech-doc.config.ts`. The strict schema owns only settings with live\n * consumers: publication budgets and public sentinels, API-reference inputs,\n * presentation metadata, and the docs service CSP. Framework narrative content\n * comes from the engine topic catalogue, not from application-local recipes.\n */\n\nimport { WildoCspConfigSchema } from '@wildo-ai/platform-config-lib';\nimport { CoreResourceType } from '@wildo-ai/saas-models';\nimport { TechnicalDocumentationSupportedApiVersionSchema } from '@wildo-ai/saas-specifications/technical-documentation';\nimport { z } from 'zod';\nimport { ApiReferenceResourceCategorySchema, OpenApiServerSchema } from '../companion/operation-projection.schemas';\n\n/**\n * Sentinel for `apiDocResources` meaning \"document every core resource that has\n * API-bearing operations\" — the full framework resource catalog. Distinct from\n * an explicit curated array so an app can opt into everything without listing\n * (and re-listing, as the engine grows) every `CoreResourceType` by hand.\n */\nexport const API_DOC_RESOURCES_ALL = 'all' as const;\n\n/**\n * One complete category declaration for the resources published by this API\n * reference.  `resourceNames` uses the generated OpenAPI tag name, which is\n * the resolved resource identifier, rather than a display label or a\n * filesystem location.  The companion rejects a duplicate, stale or missing\n * assignment whenever this feature is configured.\n */\nexport const ApiReferenceResourceCategoryAssignmentSchema = ApiReferenceResourceCategorySchema.extend({\n  resourceNames: z.array(z.string().min(1)).min(1),\n});\nexport type ApiReferenceResourceCategoryAssignment = z.infer<typeof ApiReferenceResourceCategoryAssignmentSchema>;\n\n/**\n * Per-service technical-documentation configuration block.\n *\n * Authored as `export default defineTechnicalDocConfig({...})` in\n * `<tech-doc-service-root>/wildo.tech-doc.config.ts`. The companion\n * loads this file once at bootstrap via jiti and projects fields\n * into the OpenAPI generator and Docusaurus/CSP build surfaces.\n *\n * @example\n * ```ts\n * import { defineTechnicalDocConfig } from '@wildo-ai/saas-technical-doc';\n *\n * export default defineTechnicalDocConfig({\n *   supportedApiVersion: '1.0.0',\n *   publicMarketingTitle: 'Northstar Tasks — Technical Documentation',\n *   apiDocResources: 'all', // also document every core engine resource\n * });\n * ```\n */\nexport const WildoTechnicalDocConfigSchema = z.strictObject({\n  /**\n   * Exact public API contract release supported by this documentation\n   * publication. It is required because OpenAPI mandates a version and a\n   * placeholder would make the generated reference look authoritative while\n   * carrying no usable compatibility claim.\n   */\n  supportedApiVersion: TechnicalDocumentationSupportedApiVersionSchema,\n\n  /**\n   * Ceilings on the published documentation tree, applied per field over the engine\n   * defaults (`TECHNICAL_DOCUMENTATION_DEFAULT_OUTPUT_BUDGETS`).\n   *\n   * Omitting this is the normal case and is SAFE: absence yields the engine ceilings, not\n   * an unbounded build. Declare only the field an application genuinely outgrows — a\n   * partial declaration keeps the others tracking the engine, so raising a page count does\n   * not silently freeze a copy of every other limit at today's value.\n   */\n  outputBudgets: z\n    .strictObject({\n      maximumPageCount: z.number().int().positive().optional(),\n      maximumTotalBytes: z.number().int().positive().optional(),\n      maximumSearchIndexBytes: z.number().int().positive().optional(),\n    })\n    .optional(),\n\n  /**\n   * Additional byte sequences that must never appear in the PUBLIC documentation tree.\n   * Publication fails naming the offending file.\n   *\n   * **Unioned with the engine's mandatory sentinels, never replacing them** — an\n   * application can arm more canaries, and cannot disarm the engine's.\n   *\n   * Choose sequences that cannot legitimately appear in published prose. Generic markers\n   * (`secret`, `token`, `Bearer`) fire on the authentication and webhook guides\n   * themselves, and a canary that cries on correct content is one people learn to remove.\n   */\n  forbiddenPublicSentinels: z.array(z.string().min(1)).optional(),\n\n  /**\n   * Public-facing title for the docs site (browser tab title +\n   * landing page header). Optional — falls back to\n   * `WildoSaasConfig.displayName` when omitted.\n   */\n  publicMarketingTitle: z.string().min(1).max(200).optional(),\n\n  /**\n   * Opt-in: include framework (engine) core resources in this app's generated\n   * OpenAPI, in addition to the app's own resources. This setting does not\n   * mutate runtime registration: backend startup already merges the engine core\n   * resource maps, then applies resolved billing/lifecycle exclusions. The dev\n   * companion projects the selected core resources with those same exclusions\n   * and their authored Tier-1/2/3 spec semantics.\n   *\n   * - `'all'` ({@link API_DOC_RESOURCES_ALL}) — document every core resource that\n   *   has API-bearing operations after resolved feature exclusions. Convenient,\n   *   but broad; it is configuration-derived eligibility, not live-route proof.\n   * - `CoreResourceType[]` — a curated subset (e.g. `[CoreResourceType.ORGANIZATIONS,\n   *   CoreResourceType.ORGANIZATION_MEMBERS, CoreResourceType.FILES]`).\n   *\n   * Omitted (default): only the app's own resources are documented. Org-scoped\n   * core resources land in the (auth-gated) Organization API section; any\n   * anonymous ones in the Application API section — the existing section split\n   * by operation access level is unchanged.\n   */\n  apiDocResources: z.union([\n    z.array(z.enum(CoreResourceType)),\n    z.literal(API_DOC_RESOURCES_ALL),\n  ]).optional(),\n\n  /**\n   * Explicit source-owned grouping for the generated API reference.\n   *\n   * Omit this only when an application deliberately has no API taxonomy yet.\n   * When present, it must classify every published resource exactly once:\n   * categories cannot silently drift as framework or application resources are\n   * added or removed. The category facts become `tags[].x-wildo.category` in\n   * the canonical OpenAPI document and are consumed by the generic renderer.\n   */\n  apiReferenceResourceCategories: z.array(ApiReferenceResourceCategoryAssignmentSchema).min(1).optional(),\n\n  /**\n   * App-enriched OpenAPI `servers[]` — the base URLs the API is reachable at,\n   * surfaced in the generated docs (and used by the \"Try it\" console + SDK\n   * generators). **This is the one piece of auth/transport metadata the\n   * framework cannot derive**: the security SCHEMES are framework-universal and\n   * emitted automatically (every Wildo API uses a JWT bearer + a scoped API key\n   * in the standard `Authorization` header),\n   * but deployment URLs are application/environment knowledge — only the app\n   * knows its staging/production domains.\n   *\n   * Each entry is `{ url, description? }` where `url` is the bare ORIGIN\n   * (host[:port]) — do NOT append `/api/v1`: operation paths already carry that\n   * mount, and the effective URL is `server.url` + path, so appending it would\n   * double the prefix. Order is preserved (the first entry is the docs default).\n   *\n   * @example\n   * ```ts\n   * apiServers: [\n   *   { url: 'https://api.example.com', description: 'Production' },\n   *   { url: 'http://localhost:4241', description: 'Local development' },\n   * ],\n   * ```\n   *\n   * Omitted (default): no `servers` block is emitted (the docs still render; the\n   * \"Try it\" console just has no preset target).\n   */\n  apiServers: z.array(OpenApiServerSchema).optional(),\n\n  /**\n   * App-authored markdown intro for the generated API reference landing page\n   * (the OpenAPI `info.description`). Use it to frame the API in the app's own\n   * voice — what it's for, key concepts, links to guides.\n   *\n   * This is PREPENDED to a framework-universal \"API conventions\" section the\n   * generator always emits (Authentication, Base URL, Pagination, Idempotency,\n   * Errors — derived from how every Wildo API behaves), so an app gets a\n   * complete, accurate landing page even with no overview, and a branded one\n   * when it supplies this.\n   *\n   * @example\n   * ```ts\n * apiOverview: 'The Northstar Tasks API lets you manage projects, work items, and assignments.',\n   * ```\n   */\n  apiOverview: z.string().min(1).max(8000).optional(),\n\n  /**\n   * Optional Content-Security-Policy override for the per-app nginx\n   * sidecar serving the docs site (and the `<meta http-equiv>` tag\n   * injected into `index.html` as a defense-in-depth fallback when\n   * the bundle is served from a static host that bypasses nginx).\n   *\n   * Typed against `WildoCspConfigSchema` from\n   * `@wildo-ai/platform-config-lib` (auth-hardening.md Slice B B-Step 1).\n   * The parsed value is consumed by the build-time generator at\n   * `platform-config-lib/src/project-config/shared/csp-emit.ts` (Slice B B-Step 3)\n   * which produces the per-app nginx `add_header` line and the\n   * `<meta http-equiv>` tag for the Docusaurus build to inject.\n   *\n   * Default behavior when omitted: NO policy emitted on either channel\n   * (the resolver short-circuits to `null` — same as `enabled: false`).\n   * Opt-in is deliberate per the schema design: frontends that have\n   * not audited their third-party JS / fetch surface should not ship\n   * a half-baked CSP that breaks features without protecting anything.\n   */\n  csp: WildoCspConfigSchema.optional(),\n});\nexport type WildoTechnicalDocConfig = z.infer<typeof WildoTechnicalDocConfigSchema>;\nexport type WildoTechnicalDocConfigInput = z.input<typeof WildoTechnicalDocConfigSchema>;\n/** @wildo_source:part:end engine.saas-technical-doc.config */\n"]}
+{"version":3,"file":"wildo-tech-doc-config.schemas.js","sourceRoot":"","sources":["../../../src/config/wildo-tech-doc-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,+CAA+C,EAAE,MAAM,uDAAuD,CAAC;AACxH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEpH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAc,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,kCAAkC,CAAC,MAAM,CAAC;IACpG,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D;;;;;OAKG;IACH,mBAAmB,EAAE,+CAA+C;IAEpE;;;;;;;;OAQG;IACH,aAAa,EAAE,CAAC;SACb,YAAY,CAAC;QACZ,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACxD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACzD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAChE,CAAC;SACD,QAAQ,EAAE;IAEb;;;;;;;;;;OAUG;IACH,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE/D;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAE3D;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACjC,CAAC,CAAC,QAAQ,EAAE;IAEb;;;;;;;;OAQG;IACH,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEvG;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAEnD;;;;;;;;;;;;;;;OAeG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAEnD;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,8DAA8D","sourcesContent":["/**\n * @wildo_source:part:start engine.saas-technical-doc.config facet:layer:engine facet:family:technical-doc\n *\n * Per-service technical-documentation configuration authored as\n * `wildo.tech-doc.config.ts`. The strict schema owns only settings with live\n * consumers: publication budgets and public sentinels, API-reference inputs,\n * presentation metadata, and the docs service CSP. Framework narrative content\n * comes from the engine topic catalogue, not from application-local recipes.\n */\n\nimport { WildoCspConfigSchema } from '@wildo-ai/platform-config-lib';\nimport { CoreResourceType } from '@wildo-ai/saas-models';\nimport { TechnicalDocumentationSupportedApiVersionSchema } from '@wildo-ai/saas-specifications/technical-documentation';\nimport { z } from 'zod';\nimport { ApiReferenceResourceCategorySchema, OpenApiServerSchema } from '../companion/operation-projection.schemas';\n\n/**\n * Sentinel for `apiDocResources` meaning \"document every core resource that has\n * API-bearing operations\" — the full framework resource catalog. Distinct from\n * an explicit curated array so an app can opt into everything without listing\n * (and re-listing, as the engine grows) every `CoreResourceType` by hand.\n */\nexport const API_DOC_RESOURCES_ALL = 'all' as const;\n\n/**\n * One complete category declaration for the resources published by this API\n * reference.  `resourceNames` uses the generated OpenAPI tag name, which is\n * the resolved resource identifier, rather than a display label or a\n * filesystem location.  The companion rejects a duplicate, stale or missing\n * assignment whenever this feature is configured.\n */\nexport const ApiReferenceResourceCategoryAssignmentSchema = ApiReferenceResourceCategorySchema.extend({\n  resourceNames: z.array(z.string().min(1)).min(1),\n});\nexport type ApiReferenceResourceCategoryAssignment = z.infer<typeof ApiReferenceResourceCategoryAssignmentSchema>;\n\n/**\n * Per-service technical-documentation configuration block.\n *\n * Authored as `export default defineTechnicalDocConfig({...})` in\n * `<tech-doc-service-root>/wildo.tech-doc.config.ts`. The companion\n * loads this file once at bootstrap via jiti and projects fields\n * into the OpenAPI generator and Docusaurus/CSP build surfaces.\n *\n * @example\n * ```ts\n * import { defineTechnicalDocConfig } from '@wildo-ai/saas-technical-doc';\n *\n * export default defineTechnicalDocConfig({\n *   supportedApiVersion: '1.0.0',\n *   publicMarketingTitle: 'Northstar Tasks — Technical Documentation',\n *   apiDocResources: 'all', // also document every core engine resource\n * });\n * ```\n */\nexport const WildoTechnicalDocConfigSchema = z.strictObject({\n  /**\n   * Exact public API contract release supported by this documentation\n   * publication. It is required because OpenAPI mandates a version and a\n   * placeholder would make the generated reference look authoritative while\n   * carrying no usable compatibility claim.\n   */\n  supportedApiVersion: TechnicalDocumentationSupportedApiVersionSchema,\n\n  /**\n   * Ceilings on the published documentation tree, applied per field over the engine\n   * defaults (`TECHNICAL_DOCUMENTATION_DEFAULT_OUTPUT_BUDGETS`).\n   *\n   * Omitting this is the normal case and is SAFE: absence yields the engine ceilings, not\n   * an unbounded build. Declare only the field an application genuinely outgrows — a\n   * partial declaration keeps the others tracking the engine, so raising a page count does\n   * not silently freeze a copy of every other limit at today's value.\n   */\n  outputBudgets: z\n    .strictObject({\n      maximumPageCount: z.number().int().positive().optional(),\n      maximumTotalBytes: z.number().int().positive().optional(),\n      maximumSearchIndexBytes: z.number().int().positive().optional(),\n    })\n    .optional(),\n\n  /**\n   * Additional byte sequences that must never appear in the PUBLIC documentation tree.\n   * Publication fails naming the offending file.\n   *\n   * **Unioned with the engine's mandatory sentinels, never replacing them** — an\n   * application can arm more canaries, and cannot disarm the engine's.\n   *\n   * Choose sequences that cannot legitimately appear in published prose. Generic markers\n   * (`secret`, `token`, `Bearer`) fire on the authentication and webhook guides\n   * themselves, and a canary that cries on correct content is one people learn to remove.\n   */\n  forbiddenPublicSentinels: z.array(z.string().min(1)).optional(),\n\n  /**\n   * Public-facing title for the docs site (browser tab title +\n   * landing page header). Optional — falls back to\n   * `WildoSaasConfig.displayName` when omitted.\n   */\n  publicMarketingTitle: z.string().min(1).max(200).optional(),\n\n  /**\n   * Opt-in: include framework (engine) core resources in this app's generated\n   * OpenAPI, in addition to the app's own resources. This setting does not\n   * mutate runtime registration: backend startup already merges the engine core\n   * resource maps, then applies resolved billing/lifecycle exclusions. The dev\n   * companion projects the selected core resources with those same exclusions\n   * and their authored Tier-1/2/3 spec semantics.\n   *\n   * - `'all'` ({@link API_DOC_RESOURCES_ALL}) — document every core resource that\n   *   has API-bearing operations after resolved feature exclusions. Convenient,\n   *   but broad; it is configuration-derived eligibility, not live-route proof.\n   * - `CoreResourceType[]` — a curated subset (e.g. `[CoreResourceType.ORGANIZATIONS,\n   *   CoreResourceType.ORGANIZATION_MEMBERS, CoreResourceType.FILES]`).\n   *\n   * Omitted (default): only the app's own resources are documented.\n   *\n   * There is no organizational section. `OpenApiSection` has exactly two members,\n   * `API_REFERENCE` and `APPLICATION_ADMINISTRATION_API_REFERENCE`, neither of which is scoped to\n   * an organization. The split is made per OPERATION, from the `consumerApiSection` the source\n   * projector resolves, so a selected core resource's operations may land in either. Nothing the\n   * docs site emits is auth-gated; see `docs-auth-session.schemas.ts` for why the decoded role axis\n   * is not a control.\n   */\n  apiDocResources: z.union([\n    z.array(z.enum(CoreResourceType)),\n    z.literal(API_DOC_RESOURCES_ALL),\n  ]).optional(),\n\n  /**\n   * Explicit source-owned grouping for the generated API reference.\n   *\n   * Omit this only when an application deliberately has no API taxonomy yet.\n   * When present, it must classify every published resource exactly once:\n   * categories cannot silently drift as framework or application resources are\n   * added or removed. The category facts become `tags[].x-wildo.category` in\n   * the canonical OpenAPI document and are consumed by the generic renderer.\n   */\n  apiReferenceResourceCategories: z.array(ApiReferenceResourceCategoryAssignmentSchema).min(1).optional(),\n\n  /**\n   * App-enriched OpenAPI `servers[]` — the base URLs the API is reachable at,\n   * surfaced in the generated docs (and used by the \"Try it\" console + SDK\n   * generators). **This is the one piece of auth/transport metadata the\n   * framework cannot derive**: the security SCHEMES are framework-universal and\n   * emitted automatically (every Wildo API uses a JWT bearer + a scoped API key\n   * in the standard `Authorization` header),\n   * but deployment URLs are application/environment knowledge — only the app\n   * knows its staging/production domains.\n   *\n   * Each entry is `{ url, description? }` where `url` is the bare ORIGIN\n   * (host[:port]) — do NOT append `/api/v1`: operation paths already carry that\n   * mount, and the effective URL is `server.url` + path, so appending it would\n   * double the prefix. Order is preserved (the first entry is the docs default).\n   *\n   * @example\n   * ```ts\n   * apiServers: [\n   *   { url: 'https://api.example.com', description: 'Production' },\n   *   { url: 'http://localhost:4241', description: 'Local development' },\n   * ],\n   * ```\n   *\n   * Omitted (default): no `servers` block is emitted (the docs still render; the\n   * \"Try it\" console just has no preset target).\n   */\n  apiServers: z.array(OpenApiServerSchema).optional(),\n\n  /**\n   * App-authored markdown intro for the generated API reference landing page\n   * (the OpenAPI `info.description`). Use it to frame the API in the app's own\n   * voice — what it's for, key concepts, links to guides.\n   *\n   * This is PREPENDED to a framework-universal \"API conventions\" section the\n   * generator always emits (Authentication, Base URL, Pagination, Idempotency,\n   * Errors — derived from how every Wildo API behaves), so an app gets a\n   * complete, accurate landing page even with no overview, and a branded one\n   * when it supplies this.\n   *\n   * @example\n   * ```ts\n * apiOverview: 'The Northstar Tasks API lets you manage projects, work items, and assignments.',\n   * ```\n   */\n  apiOverview: z.string().min(1).max(8000).optional(),\n\n  /**\n   * Optional Content-Security-Policy override for the per-app nginx\n   * sidecar serving the docs site (and the `<meta http-equiv>` tag\n   * injected into `index.html` as a defense-in-depth fallback when\n   * the bundle is served from a static host that bypasses nginx).\n   *\n   * Typed against `WildoCspConfigSchema` from\n   * `@wildo-ai/platform-config-lib` (auth-hardening.md Slice B B-Step 1).\n   * The parsed value is consumed by the build-time generator at\n   * `platform-config-lib/src/project-config/shared/csp-emit.ts` (Slice B B-Step 3)\n   * which produces the per-app nginx `add_header` line and the\n   * `<meta http-equiv>` tag for the Docusaurus build to inject.\n   *\n   * Default behavior when omitted: NO policy emitted on either channel\n   * (the resolver short-circuits to `null` — same as `enabled: false`).\n   * Opt-in is deliberate per the schema design: frontends that have\n   * not audited their third-party JS / fetch surface should not ship\n   * a half-baked CSP that breaks features without protecting anything.\n   */\n  csp: WildoCspConfigSchema.optional(),\n});\nexport type WildoTechnicalDocConfig = z.infer<typeof WildoTechnicalDocConfigSchema>;\nexport type WildoTechnicalDocConfigInput = z.input<typeof WildoTechnicalDocConfigSchema>;\n/** @wildo_source:part:end engine.saas-technical-doc.config */\n"]}

package/dist/esm/content/application-consumer-documentation-content-manifest.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-consumer-documentation-content-manifest.schemas.d.ts","sourceRoot":"","sources":["../../../../src/content/application-consumer-documentation-content-manifest.schemas.ts"],"names":[],"mappings":"AAAA,wJAAwJ;AACxJ,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,0FAA0F;AAC1F,oBAAY,gDAAgD;IAC1D,aAAa,iCAAiC;CAC/C;AAED,8GAA8G;AAC9G,eAAO,MAAM,qDAAqD,EAAG,oEAA6E,CAAC;AAEnJ,eAAO,MAAM,+DAA+D,EAAG,oCAA6C,CAAC;AAC7H;;;;;;GAMG;AACH,eAAO,MAAM,8DAA8D,EAAG,uBAAgC,CAAC;AAC/G;;;;GAIG;AACH,eAAO,MAAM,qEAAqE,EAAG,8BAAuC,CAAC;AAE7H,eAAO,MAAM,2DAA2D;;;;IAItE;;;;;OAKG;;;kBAGH,CAAC;AACH,MAAM,MAAM,qDAAqD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2DAA2D,CAAC,CAAC;AAEhJ,eAAO,MAAM,2DAA2D;;;;kBAoBpE,CAAC;AACL,MAAM,MAAM,qDAAqD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2DAA2D,CAAC,CAAC;AAEhJ;;;;;GAKG;AACH,eAAO,MAAM,uDAAuD;;;;;;;;;;QAxClE;;;;;WAKG;;;;;;;;;kBAqFD,CAAC;AACL,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AAExI,MAAM,WAAW,iDAAiD;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}
+{"version":3,"file":"application-consumer-documentation-content-manifest.schemas.d.ts","sourceRoot":"","sources":["../../../src/content/application-consumer-documentation-content-manifest.schemas.ts"],"names":[],"mappings":"AAAA,wJAAwJ;AACxJ,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,0FAA0F;AAC1F,oBAAY,gDAAgD;IAC1D,aAAa,iCAAiC;CAC/C;AAED,8GAA8G;AAC9G,eAAO,MAAM,qDAAqD,EAAG,oEAA6E,CAAC;AAEnJ,eAAO,MAAM,+DAA+D,EAAG,oCAA6C,CAAC;AAC7H;;;;;;GAMG;AACH,eAAO,MAAM,8DAA8D,EAAG,uBAAgC,CAAC;AAC/G;;;;GAIG;AACH,eAAO,MAAM,qEAAqE,EAAG,8BAAuC,CAAC;AAE7H,eAAO,MAAM,2DAA2D;;;;IAItE;;;;;OAKG;;;kBAGH,CAAC;AACH,MAAM,MAAM,qDAAqD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2DAA2D,CAAC,CAAC;AAEhJ,eAAO,MAAM,2DAA2D;;;;kBAoBpE,CAAC;AACL,MAAM,MAAM,qDAAqD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2DAA2D,CAAC,CAAC;AAEhJ;;;;;GAKG;AACH,eAAO,MAAM,uDAAuD;;;;;;;;;;QAxClE;;;;;WAKG;;;;;;;;;kBAqFD,CAAC;AACL,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AAExI,MAAM,WAAW,iDAAiD;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}