@wildo-ai/saas-technical-doc 1.1.2 → 1.1.4

package/dist/esm/companion/application-documentation/technical-documentation-operational-evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-operational-evidence.d.ts","sourceRoot":"","sources":["../../../../../src/companion/application-documentation/technical-documentation-operational-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iDAAiD,EAEjD,KAAK,gDAAgD,EACrD,KAAK,mDAAmD,EAEzD,MAAM,uDAAuD,CAAC;AAE/D,oBAAY,8CAA8C;IACxD,mBAAmB,wBAAwB;IAC3C,mBAAmB,wBAAwB;CAC5C;AAED,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,WAAW,EAAE,gDAAgD,CAAC;IACvE,QAAQ,CAAC,WAAW,EAAE,8CAA8C,CAAC;IACrE,QAAQ,CAAC,cAAc,EAAE,iDAAiD,GAAG,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,6CAA6C;IAC5D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,0CAA0C,EAAE,CAAC;CAC1E;AAMD;;;;;GAKG;AACH,wBAAgB,2CAA2C,CACzD,YAAY,EAAE,SAAS,gDAAgD,EAAE,EACzE,aAAa,EAAE,mDAAmD,GACjE,6CAA6C,CAgB/C"}
+{"version":3,"file":"technical-documentation-operational-evidence.d.ts","sourceRoot":"","sources":["../../../../src/companion/application-documentation/technical-documentation-operational-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iDAAiD,EAEjD,KAAK,gDAAgD,EACrD,KAAK,mDAAmD,EAEzD,MAAM,uDAAuD,CAAC;AAE/D,oBAAY,8CAA8C;IACxD,mBAAmB,wBAAwB;IAC3C,mBAAmB,wBAAwB;CAC5C;AAED,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,WAAW,EAAE,gDAAgD,CAAC;IACvE,QAAQ,CAAC,WAAW,EAAE,8CAA8C,CAAC;IACrE,QAAQ,CAAC,cAAc,EAAE,iDAAiD,GAAG,IAAI,CAAC;CACnF;AAED,MAAM,WAAW,6CAA6C;IAC5D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,0CAA0C,EAAE,CAAC;CAC1E;AAMD;;;;;GAKG;AACH,wBAAgB,2CAA2C,CACzD,YAAY,EAAE,SAAS,gDAAgD,EAAE,EACzE,aAAa,EAAE,mDAAmD,GACjE,6CAA6C,CAgB/C"}

package/dist/esm/companion/application-documentation/technical-documentation-private-derivation.d.ts

@@ -7,6 +7,7 @@ import type { ApplicationConnectionDocumentationFact } from './application-conne
 import type { ApplicationAuthenticationDocumentationFact } from './application-authentication-documentation';
 import type { ApplicationAdministrationDocumentationFact } from './application-administration-documentation';
 import type { ApplicationIntegrationDocumentationFact } from './application-integration-documentation';
+import type { ApplicationDomainDocumentationFact } from './application-domain-documentation';
 export declare const TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_REF = "technical-documentation:projector/private-derivation-v1";
 export declare const TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_VERSION = 1;
 export interface CreateTechnicalDocumentationPrivateDerivationInput {
@@ -23,6 +24,7 @@ export interface CreateTechnicalDocumentationPrivateDerivationInput {
     readonly applicationAuthenticationFact: ApplicationAuthenticationDocumentationFact;
     readonly applicationAdministrationFact: ApplicationAdministrationDocumentationFact;
     readonly applicationIntegrationFact: ApplicationIntegrationDocumentationFact;
+    readonly applicationDomainFact: ApplicationDomainDocumentationFact;
     /** This derivation's own identity; the authorized bundle names it. */
     readonly derivationRef: string;
     readonly derivationVersion: number;

package/dist/esm/companion/application-documentation/technical-documentation-private-derivation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-private-derivation.d.ts","sourceRoot":"","sources":["../../../../../src/companion/application-documentation/technical-documentation-private-derivation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iDAAiD,EACtD,KAAK,mDAAmD,EACxD,KAAK,iDAAiD,EAEvD,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,yCAAyC,CAAC;AAEzG,OAAO,KAAK,EAAE,qDAAqD,EAAE,MAAM,8DAA8D,CAAC;AAC1I,OAAO,EAEL,KAAK,6CAA6C,EACnD,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,qDAAqD,EAAE,MAAM,wDAAwD,CAAC;AACpI,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,wCAAwC,CAAC;AACrG,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,yCAAyC,CAAC;AAEvG,eAAO,MAAM,wDAAwD,4DAA4D,CAAC;AAClI,eAAO,MAAM,4DAA4D,IAAI,CAAC;AAE9E,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;IACpF,QAAQ,CAAC,2BAA2B,EAAE,mDAAmD,CAAC;IAC1F,wEAAwE;IACxE,QAAQ,CAAC,0BAA0B,EAAE,yCAAyC,CAAC;IAC/E,QAAQ,CAAC,kCAAkC,EAAE,iDAAiD,CAAC;IAC/F,0FAA0F;IAC1F,QAAQ,CAAC,gCAAgC,EAAE,6CAA6C,CAAC;IACzF,+FAA+F;IAC/F,QAAQ,CAAC,wCAAwC,EAAE,qDAAqD,CAAC;IACzG,QAAQ,CAAC,yBAAyB,EAAE,sCAAsC,CAAC;IAC3E,QAAQ,CAAC,6BAA6B,EAAE,0CAA0C,CAAC;IACnF,QAAQ,CAAC,6BAA6B,EAAE,0CAA0C,CAAC;IACnF,QAAQ,CAAC,0BAA0B,EAAE,uCAAuC,CAAC;IAC7E,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,6CAA6C,CAC3D,KAAK,EAAE,kDAAkD,GACxD,iDAAiD,CAgCnD"}
+{"version":3,"file":"technical-documentation-private-derivation.d.ts","sourceRoot":"","sources":["../../../../src/companion/application-documentation/technical-documentation-private-derivation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iDAAiD,EACtD,KAAK,mDAAmD,EACxD,KAAK,iDAAiD,EAEvD,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,yCAAyC,CAAC;AAEzG,OAAO,KAAK,EAAE,qDAAqD,EAAE,MAAM,8DAA8D,CAAC;AAC1I,OAAO,EAEL,KAAK,6CAA6C,EACnD,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,qDAAqD,EAAE,MAAM,wDAAwD,CAAC;AACpI,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,wCAAwC,CAAC;AACrG,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,yCAAyC,CAAC;AACvG,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AAE7F,eAAO,MAAM,wDAAwD,4DAA4D,CAAC;AAClI,eAAO,MAAM,4DAA4D,IAAI,CAAC;AAE9E,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;IACpF,QAAQ,CAAC,2BAA2B,EAAE,mDAAmD,CAAC;IAC1F,wEAAwE;IACxE,QAAQ,CAAC,0BAA0B,EAAE,yCAAyC,CAAC;IAC/E,QAAQ,CAAC,kCAAkC,EAAE,iDAAiD,CAAC;IAC/F,0FAA0F;IAC1F,QAAQ,CAAC,gCAAgC,EAAE,6CAA6C,CAAC;IACzF,+FAA+F;IAC/F,QAAQ,CAAC,wCAAwC,EAAE,qDAAqD,CAAC;IACzG,QAAQ,CAAC,yBAAyB,EAAE,sCAAsC,CAAC;IAC3E,QAAQ,CAAC,6BAA6B,EAAE,0CAA0C,CAAC;IACnF,QAAQ,CAAC,6BAA6B,EAAE,0CAA0C,CAAC;IACnF,QAAQ,CAAC,0BAA0B,EAAE,uCAAuC,CAAC;IAC7E,QAAQ,CAAC,qBAAqB,EAAE,kCAAkC,CAAC;IACnE,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,6CAA6C,CAC3D,KAAK,EAAE,kDAAkD,GACxD,iDAAiD,CAiCnD"}

package/dist/esm/companion/application-documentation/technical-documentation-private-derivation.js

@@ -17,6 +17,7 @@ export function createTechnicalDocumentationPrivateDerivation(input) {
         authentication: input.applicationAuthenticationFact,
         administration: input.applicationAdministrationFact,
         integration: input.applicationIntegrationFact,
+        domain: input.applicationDomainFact,
     });
     const unitsByRef = new Map();
     for (const unit of engineUnits) {

package/dist/esm/companion/application-documentation/technical-documentation-private-derivation.js.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-private-derivation.js","sourceRoot":"","sources":["../../../../../src/companion/application-documentation/technical-documentation-private-derivation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uDAAuD,GAKxD,MAAM,uDAAuD,CAAC;AAI/D,OAAO,EACL,6CAA6C,GAE9C,MAAM,iDAAiD,CAAC;AAOzD,MAAM,CAAC,MAAM,wDAAwD,GAAG,yDAAyD,CAAC;AAClI,MAAM,CAAC,MAAM,4DAA4D,GAAG,CAAC,CAAC;AAsB9E;;;;;;GAMG;AACH,MAAM,UAAU,6CAA6C,CAC3D,KAAyD;IAEzD,MAAM,WAAW,GAAG,6CAA6C,CAC/D,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,0BAA0B,EAChC,SAAS,EACT;QACE,iBAAiB,EAAE,KAAK,CAAC,gCAAgC;QACzD,yBAAyB,EAAE,KAAK,CAAC,wCAAwC;QACzE,UAAU,EAAE,KAAK,CAAC,yBAAyB;QAC3C,cAAc,EAAE,KAAK,CAAC,6BAA6B;QACnD,cAAc,EAAE,KAAK,CAAC,6BAA6B;QACnD,WAAW,EAAE,KAAK,CAAC,0BAA0B;KAC9C,CACF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAwC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvH,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,uDAAuD,CAAC;QAC7D,aAAa,EAAE,CAAC;QAChB,2BAA2B,EAAE,KAAK,CAAC,mBAAmB,CAAC,QAAQ;QAC/D,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,kCAAkC,EAAE,KAAK,CAAC,kCAAkC;QAC5E,YAAY,EAAE,wDAAwD;QACtE,gBAAgB,EAAE,4DAA4D;QAC9E,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  createTechnicalDocumentationPrivateDerivationManifestV1,\n  type EngineDocumentationSpecificationCatalogIdentityV1,\n  type TechnicalDocumentationEnvironmentEvidenceSnapshotV1,\n  type TechnicalDocumentationPrivateDerivationManifestV1,\n  type TechnicalDocumentationUnitV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\nimport type { EngineDocumentationSpecificationCatalogV1 } from '@wildo-ai/saas-specifications/companion';\n\nimport type { LoadedApplicationConsumerDocumentationContentBundleV1 } from '../content/application-consumer-documentation-content-loader';\nimport {\n  projectEngineApplicationConsumerContentBundle,\n  type ApplicationOrganizationRolesDocumentationFact,\n} from './technical-documentation-engine-content-bundle';\nimport type { ApplicationOrganizationUnitResourcesDocumentationFact } from './application-organization-unit-resource-documentation';\nimport type { ApplicationConnectionDocumentationFact } from './application-connection-documentation';\nimport type { ApplicationAuthenticationDocumentationFact } from './application-authentication-documentation';\nimport type { ApplicationAdministrationDocumentationFact } from './application-administration-documentation';\nimport type { ApplicationIntegrationDocumentationFact } from './application-integration-documentation';\n\nexport const TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_REF = 'technical-documentation:projector/private-derivation-v1';\nexport const TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_VERSION = 1;\n\nexport interface CreateTechnicalDocumentationPrivateDerivationInput {\n  readonly engineContentBundle: LoadedApplicationConsumerDocumentationContentBundleV1;\n  readonly environmentEvidenceSnapshot: TechnicalDocumentationEnvironmentEvidenceSnapshotV1;\n  /** Exact safe fact catalog used to compose the engine-content units. */\n  readonly engineSpecificationCatalog: EngineDocumentationSpecificationCatalogV1;\n  readonly engineSpecificationCatalogIdentity: EngineDocumentationSpecificationCatalogIdentityV1;\n  /** Resolved organization roles and their application-authored semantic specifications. */\n  readonly applicationOrganizationRolesFact: ApplicationOrganizationRolesDocumentationFact;\n  /** Exact resources opted into organization-unit narrowing by backend startup configuration. */\n  readonly applicationOrganizationUnitResourcesFact: ApplicationOrganizationUnitResourcesDocumentationFact;\n  readonly applicationConnectionFact: ApplicationConnectionDocumentationFact;\n  readonly applicationAuthenticationFact: ApplicationAuthenticationDocumentationFact;\n  readonly applicationAdministrationFact: ApplicationAdministrationDocumentationFact;\n  readonly applicationIntegrationFact: ApplicationIntegrationDocumentationFact;\n  /** This derivation's own identity; the authorized bundle names it. */\n  readonly derivationRef: string;\n  readonly derivationVersion: number;\n  readonly derivedAt: string;\n}\n\n/**\n * Joins exact framework and environment identities into the private semantic artifact.\n *\n * This reusable function performs no application-design discovery and chooses\n * no output path. Application content remains absent until the app-creator\n * owns an accepted authoring artifact for that later join.\n */\nexport function createTechnicalDocumentationPrivateDerivation(\n  input: CreateTechnicalDocumentationPrivateDerivationInput,\n): TechnicalDocumentationPrivateDerivationManifestV1 {\n  const engineUnits = projectEngineApplicationConsumerContentBundle(\n    input.engineContentBundle,\n    input.engineSpecificationCatalog,\n    undefined,\n    {\n      organizationRoles: input.applicationOrganizationRolesFact,\n      organizationUnitResources: input.applicationOrganizationUnitResourcesFact,\n      connection: input.applicationConnectionFact,\n      authentication: input.applicationAuthenticationFact,\n      administration: input.applicationAdministrationFact,\n      integration: input.applicationIntegrationFact,\n    },\n  );\n  const unitsByRef = new Map<string, TechnicalDocumentationUnitV1>();\n  for (const unit of engineUnits) {\n    if (unitsByRef.has(unit.unitRef)) throw new Error(`duplicate engine technical-documentation unitRef: ${unit.unitRef}`);\n    unitsByRef.set(unit.unitRef, unit);\n  }\n\n  return createTechnicalDocumentationPrivateDerivationManifestV1({\n    schemaVersion: 1,\n    engineContentBundleIdentity: input.engineContentBundle.identity,\n    environmentEvidenceSnapshot: input.environmentEvidenceSnapshot,\n    engineSpecificationCatalogIdentity: input.engineSpecificationCatalogIdentity,\n    projectorRef: TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_REF,\n    projectorVersion: TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_VERSION,\n    derivationRef: input.derivationRef,\n    derivationVersion: input.derivationVersion,\n    units: [...unitsByRef.values()],\n    derivedAt: input.derivedAt,\n  });\n}\n"]}
+{"version":3,"file":"technical-documentation-private-derivation.js","sourceRoot":"","sources":["../../../../src/companion/application-documentation/technical-documentation-private-derivation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uDAAuD,GAKxD,MAAM,uDAAuD,CAAC;AAI/D,OAAO,EACL,6CAA6C,GAE9C,MAAM,iDAAiD,CAAC;AAQzD,MAAM,CAAC,MAAM,wDAAwD,GAAG,yDAAyD,CAAC;AAClI,MAAM,CAAC,MAAM,4DAA4D,GAAG,CAAC,CAAC;AAuB9E;;;;;;GAMG;AACH,MAAM,UAAU,6CAA6C,CAC3D,KAAyD;IAEzD,MAAM,WAAW,GAAG,6CAA6C,CAC/D,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,0BAA0B,EAChC,SAAS,EACT;QACE,iBAAiB,EAAE,KAAK,CAAC,gCAAgC;QACzD,yBAAyB,EAAE,KAAK,CAAC,wCAAwC;QACzE,UAAU,EAAE,KAAK,CAAC,yBAAyB;QAC3C,cAAc,EAAE,KAAK,CAAC,6BAA6B;QACnD,cAAc,EAAE,KAAK,CAAC,6BAA6B;QACnD,WAAW,EAAE,KAAK,CAAC,0BAA0B;QAC7C,MAAM,EAAE,KAAK,CAAC,qBAAqB;KACpC,CACF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAwC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvH,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,uDAAuD,CAAC;QAC7D,aAAa,EAAE,CAAC;QAChB,2BAA2B,EAAE,KAAK,CAAC,mBAAmB,CAAC,QAAQ;QAC/D,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,kCAAkC,EAAE,KAAK,CAAC,kCAAkC;QAC5E,YAAY,EAAE,wDAAwD;QACtE,gBAAgB,EAAE,4DAA4D;QAC9E,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  createTechnicalDocumentationPrivateDerivationManifestV1,\n  type EngineDocumentationSpecificationCatalogIdentityV1,\n  type TechnicalDocumentationEnvironmentEvidenceSnapshotV1,\n  type TechnicalDocumentationPrivateDerivationManifestV1,\n  type TechnicalDocumentationUnitV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\nimport type { EngineDocumentationSpecificationCatalogV1 } from '@wildo-ai/saas-specifications/companion';\n\nimport type { LoadedApplicationConsumerDocumentationContentBundleV1 } from '../content/application-consumer-documentation-content-loader';\nimport {\n  projectEngineApplicationConsumerContentBundle,\n  type ApplicationOrganizationRolesDocumentationFact,\n} from './technical-documentation-engine-content-bundle';\nimport type { ApplicationOrganizationUnitResourcesDocumentationFact } from './application-organization-unit-resource-documentation';\nimport type { ApplicationConnectionDocumentationFact } from './application-connection-documentation';\nimport type { ApplicationAuthenticationDocumentationFact } from './application-authentication-documentation';\nimport type { ApplicationAdministrationDocumentationFact } from './application-administration-documentation';\nimport type { ApplicationIntegrationDocumentationFact } from './application-integration-documentation';\nimport type { ApplicationDomainDocumentationFact } from './application-domain-documentation';\n\nexport const TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_REF = 'technical-documentation:projector/private-derivation-v1';\nexport const TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_VERSION = 1;\n\nexport interface CreateTechnicalDocumentationPrivateDerivationInput {\n  readonly engineContentBundle: LoadedApplicationConsumerDocumentationContentBundleV1;\n  readonly environmentEvidenceSnapshot: TechnicalDocumentationEnvironmentEvidenceSnapshotV1;\n  /** Exact safe fact catalog used to compose the engine-content units. */\n  readonly engineSpecificationCatalog: EngineDocumentationSpecificationCatalogV1;\n  readonly engineSpecificationCatalogIdentity: EngineDocumentationSpecificationCatalogIdentityV1;\n  /** Resolved organization roles and their application-authored semantic specifications. */\n  readonly applicationOrganizationRolesFact: ApplicationOrganizationRolesDocumentationFact;\n  /** Exact resources opted into organization-unit narrowing by backend startup configuration. */\n  readonly applicationOrganizationUnitResourcesFact: ApplicationOrganizationUnitResourcesDocumentationFact;\n  readonly applicationConnectionFact: ApplicationConnectionDocumentationFact;\n  readonly applicationAuthenticationFact: ApplicationAuthenticationDocumentationFact;\n  readonly applicationAdministrationFact: ApplicationAdministrationDocumentationFact;\n  readonly applicationIntegrationFact: ApplicationIntegrationDocumentationFact;\n  readonly applicationDomainFact: ApplicationDomainDocumentationFact;\n  /** This derivation's own identity; the authorized bundle names it. */\n  readonly derivationRef: string;\n  readonly derivationVersion: number;\n  readonly derivedAt: string;\n}\n\n/**\n * Joins exact framework and environment identities into the private semantic artifact.\n *\n * This reusable function performs no application-design discovery and chooses\n * no output path. Application content remains absent until the app-creator\n * owns an accepted authoring artifact for that later join.\n */\nexport function createTechnicalDocumentationPrivateDerivation(\n  input: CreateTechnicalDocumentationPrivateDerivationInput,\n): TechnicalDocumentationPrivateDerivationManifestV1 {\n  const engineUnits = projectEngineApplicationConsumerContentBundle(\n    input.engineContentBundle,\n    input.engineSpecificationCatalog,\n    undefined,\n    {\n      organizationRoles: input.applicationOrganizationRolesFact,\n      organizationUnitResources: input.applicationOrganizationUnitResourcesFact,\n      connection: input.applicationConnectionFact,\n      authentication: input.applicationAuthenticationFact,\n      administration: input.applicationAdministrationFact,\n      integration: input.applicationIntegrationFact,\n      domain: input.applicationDomainFact,\n    },\n  );\n  const unitsByRef = new Map<string, TechnicalDocumentationUnitV1>();\n  for (const unit of engineUnits) {\n    if (unitsByRef.has(unit.unitRef)) throw new Error(`duplicate engine technical-documentation unitRef: ${unit.unitRef}`);\n    unitsByRef.set(unit.unitRef, unit);\n  }\n\n  return createTechnicalDocumentationPrivateDerivationManifestV1({\n    schemaVersion: 1,\n    engineContentBundleIdentity: input.engineContentBundle.identity,\n    environmentEvidenceSnapshot: input.environmentEvidenceSnapshot,\n    engineSpecificationCatalogIdentity: input.engineSpecificationCatalogIdentity,\n    projectorRef: TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_REF,\n    projectorVersion: TECHNICAL_DOCUMENTATION_PRIVATE_DERIVATION_PROJECTOR_VERSION,\n    derivationRef: input.derivationRef,\n    derivationVersion: input.derivationVersion,\n    units: [...unitsByRef.values()],\n    derivedAt: input.derivedAt,\n  });\n}\n"]}

package/dist/esm/companion/application-documentation/technical-documentation-publication-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-publication-policy.d.ts","sourceRoot":"","sources":["../../../../../src/companion/application-documentation/technical-documentation-publication-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,6BAA6B,EAO7B,KAAK,gDAAgD,EACrD,KAAK,iDAAiD,EAGvD,MAAM,uDAAuD,CAAC;AAgE/D,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;IAC9E,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,aAAa,CAAC;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,2EAA2E;AAC3E,wBAAgB,6CAA6C,CAC3D,KAAK,EAAE,kDAAkD,GACxD,gDAAgD,CA2ClD"}
+{"version":3,"file":"technical-documentation-publication-policy.d.ts","sourceRoot":"","sources":["../../../../src/companion/application-documentation/technical-documentation-publication-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,6BAA6B,EAO7B,KAAK,gDAAgD,EACrD,KAAK,iDAAiD,EAGvD,MAAM,uDAAuD,CAAC;AAgE/D,MAAM,WAAW,kDAAkD;IACjE,QAAQ,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;IAC9E,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,aAAa,CAAC;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,2EAA2E;AAC3E,wBAAgB,6CAA6C,CAC3D,KAAK,EAAE,kDAAkD,GACxD,gDAAgD,CA2ClD"}

package/dist/esm/companion/application-documentation/technical-documentation-publication-policy.js

@@ -41,7 +41,7 @@ function projectPublicUnit(sourceUnit, manifest) {
         sourceUnit,
         publishedUnit: recreateUnit(sourceUnit, { assetRequests }),
         decision: redacted ? TechnicalDocumentationPublicationDecision.REDACT : TechnicalDocumentationPublicationDecision.INCLUDE,
-        reason: redacted ? TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE : TechnicalDocumentationPublicationReason.INCLUDED_BY_POLICY,
+        reason: redacted ? TechnicalDocumentationPublicationReason.RESTRICTED_ASSET_REDACTED : TechnicalDocumentationPublicationReason.INCLUDED_BY_POLICY,
     };
 }
 /** Projects and minimizes the public framework bundle before rendering. */

package/dist/esm/companion/application-documentation/technical-documentation-publication-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"technical-documentation-publication-policy.js","sourceRoot":"","sources":["../../../../../src/companion/application-documentation/technical-documentation-publication-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,6BAA6B,EAC7B,qCAAqC,EACrC,yCAAyC,EACzC,uCAAuC,EACvC,0CAA0C,EAC1C,sDAAsD,EACtD,kCAAkC,GAKnC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,2CAA2C,EAAE,MAAM,gDAAgD,CAAC;AAS7G,SAAS,YAAY,CACnB,IAAkC,EAClC,SAAgD;IAEhD,OAAO,kCAAkC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,UAAwC,EACxC,QAA2D;IAE3D,IAAI,UAAU,CAAC,eAAe,KAAK,qCAAqC,CAAC,QAAQ,EAAE,CAAC;QAClF,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,sBAAsB;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,2CAA2C,CAAC,UAAU,CAAC,yBAAyB,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC,UAAU,EAAE,CAAC;QACxI,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,wBAAwB;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,0CAA0C,CAAC,MAAM,CAAC,EAAE,CAAC;QACxH,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,iBAAiB;SAClE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,sCAAsC,CAAC,MAAM,CAAC,CAAC;IACtI,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC;IAC1E,OAAO;QACL,UAAU;QACV,aAAa,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;QAC1D,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,OAAO;QACzH,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uCAAuC,CAAC,kBAAkB;KAC1I,CAAC;AACJ,CAAC;AAYD,2EAA2E;AAC3E,MAAM,UAAU,6CAA6C,CAC3D,KAAyD;IAEzD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9G,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC1C,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC5E,OAAO;YACL,GAAG,SAAS;YACZ,aAAa,EAAE,YAAY,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC;YAC/D,QAAQ,EAAE,yCAAyC,CAAC,MAAM;YAC1D,MAAM,EAAE,uCAAuC,CAAC,qBAAqB;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IAClH,MAAM,SAAS,GAAsD,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;QACrC,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB;;;;;WAKG;QACH,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW;QACnD,oBAAoB,EAAE,SAAS,CAAC,aAAa,EAAE,WAAW,IAAI,IAAI;KACnE,CAAC,CAAC,CAAC;IAEJ,OAAO,sDAAsD,CAAC;QAC5D,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,6BAA6B,CAAC,aAAa;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,kBAAkB,EAAE;YAClB,GAAG,EAAE,KAAK,CAAC,iBAAiB,CAAC,aAAa;YAC1C,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB;SACnD;QACD,KAAK;QACL,SAAS;KACV,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  TechnicalDocumentationAssetAccessClass,\n  TechnicalDocumentationChannel,\n  TechnicalDocumentationEditorialStatus,\n  TechnicalDocumentationPublicationDecision,\n  TechnicalDocumentationPublicationReason,\n  TechnicalDocumentationSourceClassification,\n  createTechnicalDocumentationAuthorizedBundleManifestV1,\n  createTechnicalDocumentationUnitV1,\n  type TechnicalDocumentationAuthorizedBundleManifestV1,\n  type TechnicalDocumentationPrivateDerivationManifestV1,\n  type TechnicalDocumentationUnitPublicationDecisionV1,\n  type TechnicalDocumentationUnitV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\nimport { evaluateTechnicalDocumentationApplicability } from './technical-documentation-operational-evidence';\n\ninterface PolicyProjectionCandidate {\n  readonly sourceUnit: TechnicalDocumentationUnitV1;\n  readonly publishedUnit: TechnicalDocumentationUnitV1 | null;\n  readonly decision: TechnicalDocumentationPublicationDecision;\n  readonly reason: TechnicalDocumentationPublicationReason;\n}\n\nfunction recreateUnit(\n  unit: TechnicalDocumentationUnitV1,\n  overrides: Partial<TechnicalDocumentationUnitV1>,\n): TechnicalDocumentationUnitV1 {\n  return createTechnicalDocumentationUnitV1({ ...unit, ...overrides });\n}\n\n/**\n * Authorizes one framework unit for the public consumer portal.\n *\n * Application editorial overlays and authenticated/internal publication lanes\n * are intentionally absent. Application-specific authoring will re-enter later\n * through the app-creator acceptance flow, not through this framework policy.\n */\nfunction projectPublicUnit(\n  sourceUnit: TechnicalDocumentationUnitV1,\n  manifest: TechnicalDocumentationPrivateDerivationManifestV1,\n): PolicyProjectionCandidate {\n  if (sourceUnit.editorialStatus !== TechnicalDocumentationEditorialStatus.APPROVED) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.EDITORIAL_NOT_APPROVED,\n    };\n  }\n  if (!evaluateTechnicalDocumentationApplicability(sourceUnit.applicabilityRequirements, manifest.environmentEvidenceSnapshot).applicable) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.APPLICABILITY_NOT_PROVEN,\n    };\n  }\n  if (sourceUnit.provenance.some((source) => source.classification !== TechnicalDocumentationSourceClassification.PUBLIC)) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE,\n    };\n  }\n\n  const assetRequests = sourceUnit.assetRequests.filter((asset) => asset.accessClass === TechnicalDocumentationAssetAccessClass.PUBLIC);\n  const redacted = assetRequests.length !== sourceUnit.assetRequests.length;\n  return {\n    sourceUnit,\n    publishedUnit: recreateUnit(sourceUnit, { assetRequests }),\n    decision: redacted ? TechnicalDocumentationPublicationDecision.REDACT : TechnicalDocumentationPublicationDecision.INCLUDE,\n    reason: redacted ? TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE : TechnicalDocumentationPublicationReason.INCLUDED_BY_POLICY,\n  };\n}\n\nexport interface ProjectTechnicalDocumentationAuthorizedBundleInput {\n  readonly privateDerivation: TechnicalDocumentationPrivateDerivationManifestV1;\n  readonly channel: TechnicalDocumentationChannel.PUBLIC_PORTAL;\n  readonly policyRef: string;\n  readonly policyVersion: number;\n  /** This bundle's own identity; the render manifest and the publication pointer name it. */\n  readonly bundleRef: string;\n  readonly bundleVersion: number;\n}\n\n/** Projects and minimizes the public framework bundle before rendering. */\nexport function projectTechnicalDocumentationAuthorizedBundle(\n  input: ProjectTechnicalDocumentationAuthorizedBundleInput,\n): TechnicalDocumentationAuthorizedBundleManifestV1 {\n  const initial = input.privateDerivation.units.map((unit) => projectPublicUnit(unit, input.privateDerivation));\n  const emittedUnitRefs = new Set(initial.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit.unitRef]));\n  const finalized = initial.map((candidate) => {\n    if (candidate.publishedUnit === null) return candidate;\n    const links = candidate.publishedUnit.links.filter((link) => link.targetUnitRef === null || emittedUnitRefs.has(link.targetUnitRef));\n    if (links.length === candidate.publishedUnit.links.length) return candidate;\n    return {\n      ...candidate,\n      publishedUnit: recreateUnit(candidate.publishedUnit, { links }),\n      decision: TechnicalDocumentationPublicationDecision.REDACT,\n      reason: TechnicalDocumentationPublicationReason.ACCESS_CLASS_MISMATCH,\n    };\n  });\n  const units = finalized.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit]);\n  const decisions: TechnicalDocumentationUnitPublicationDecisionV1[] = finalized.map((candidate) => ({\n    unitRef: candidate.sourceUnit.unitRef,\n    decision: candidate.decision,\n    reason: candidate.reason,\n    /*\n     * Both versions name the SAME unit version, and that is correct: a redaction narrows a unit's\n     * content without minting a new authored version. `decision` is what distinguishes INCLUDE\n     * from REDACT — it always was; the digest pair merely made the difference visible as two hex\n     * strings nobody could read.\n     */\n    sourceUnitVersion: candidate.sourceUnit.unitVersion,\n    publishedUnitVersion: candidate.publishedUnit?.unitVersion ?? null,\n  }));\n\n  return createTechnicalDocumentationAuthorizedBundleManifestV1({\n    schemaVersion: 1,\n    channel: TechnicalDocumentationChannel.PUBLIC_PORTAL,\n    policyRef: input.policyRef,\n    policyVersion: input.policyVersion,\n    bundleRef: input.bundleRef,\n    bundleVersion: input.bundleVersion,\n    derivationIdentity: {\n      ref: input.privateDerivation.derivationRef,\n      version: input.privateDerivation.derivationVersion,\n    },\n    units,\n    decisions,\n  });\n}\n"]}
+{"version":3,"file":"technical-documentation-publication-policy.js","sourceRoot":"","sources":["../../../../src/companion/application-documentation/technical-documentation-publication-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,6BAA6B,EAC7B,qCAAqC,EACrC,yCAAyC,EACzC,uCAAuC,EACvC,0CAA0C,EAC1C,sDAAsD,EACtD,kCAAkC,GAKnC,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,2CAA2C,EAAE,MAAM,gDAAgD,CAAC;AAS7G,SAAS,YAAY,CACnB,IAAkC,EAClC,SAAgD;IAEhD,OAAO,kCAAkC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,UAAwC,EACxC,QAA2D;IAE3D,IAAI,UAAU,CAAC,eAAe,KAAK,qCAAqC,CAAC,QAAQ,EAAE,CAAC;QAClF,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,sBAAsB;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,2CAA2C,CAAC,UAAU,CAAC,yBAAyB,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC,UAAU,EAAE,CAAC;QACxI,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,wBAAwB;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,0CAA0C,CAAC,MAAM,CAAC,EAAE,CAAC;QACxH,OAAO;YACL,UAAU;YACV,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,yCAAyC,CAAC,QAAQ;YAC5D,MAAM,EAAE,uCAAuC,CAAC,iBAAiB;SAClE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,sCAAsC,CAAC,MAAM,CAAC,CAAC;IACtI,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC;IAC1E,OAAO;QACL,UAAU;QACV,aAAa,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;QAC1D,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,MAAM,CAAC,CAAC,CAAC,yCAAyC,CAAC,OAAO;QACzH,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uCAAuC,CAAC,kBAAkB;KAClJ,CAAC;AACJ,CAAC;AAYD,2EAA2E;AAC3E,MAAM,UAAU,6CAA6C,CAC3D,KAAyD;IAEzD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9G,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC1C,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC5E,OAAO;YACL,GAAG,SAAS;YACZ,aAAa,EAAE,YAAY,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC;YAC/D,QAAQ,EAAE,yCAAyC,CAAC,MAAM;YAC1D,MAAM,EAAE,uCAAuC,CAAC,qBAAqB;SACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IAClH,MAAM,SAAS,GAAsD,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,OAAO;QACrC,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB;;;;;WAKG;QACH,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW;QACnD,oBAAoB,EAAE,SAAS,CAAC,aAAa,EAAE,WAAW,IAAI,IAAI;KACnE,CAAC,CAAC,CAAC;IAEJ,OAAO,sDAAsD,CAAC;QAC5D,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,6BAA6B,CAAC,aAAa;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,kBAAkB,EAAE;YAClB,GAAG,EAAE,KAAK,CAAC,iBAAiB,CAAC,aAAa;YAC1C,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,iBAAiB;SACnD;QACD,KAAK;QACL,SAAS;KACV,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  TechnicalDocumentationAssetAccessClass,\n  TechnicalDocumentationChannel,\n  TechnicalDocumentationEditorialStatus,\n  TechnicalDocumentationPublicationDecision,\n  TechnicalDocumentationPublicationReason,\n  TechnicalDocumentationSourceClassification,\n  createTechnicalDocumentationAuthorizedBundleManifestV1,\n  createTechnicalDocumentationUnitV1,\n  type TechnicalDocumentationAuthorizedBundleManifestV1,\n  type TechnicalDocumentationPrivateDerivationManifestV1,\n  type TechnicalDocumentationUnitPublicationDecisionV1,\n  type TechnicalDocumentationUnitV1,\n} from '@wildo-ai/saas-specifications/technical-documentation';\n\nimport { evaluateTechnicalDocumentationApplicability } from './technical-documentation-operational-evidence';\n\ninterface PolicyProjectionCandidate {\n  readonly sourceUnit: TechnicalDocumentationUnitV1;\n  readonly publishedUnit: TechnicalDocumentationUnitV1 | null;\n  readonly decision: TechnicalDocumentationPublicationDecision;\n  readonly reason: TechnicalDocumentationPublicationReason;\n}\n\nfunction recreateUnit(\n  unit: TechnicalDocumentationUnitV1,\n  overrides: Partial<TechnicalDocumentationUnitV1>,\n): TechnicalDocumentationUnitV1 {\n  return createTechnicalDocumentationUnitV1({ ...unit, ...overrides });\n}\n\n/**\n * Authorizes one framework unit for the public consumer portal.\n *\n * Application editorial overlays and authenticated/internal publication lanes\n * are intentionally absent. Application-specific authoring will re-enter later\n * through the app-creator acceptance flow, not through this framework policy.\n */\nfunction projectPublicUnit(\n  sourceUnit: TechnicalDocumentationUnitV1,\n  manifest: TechnicalDocumentationPrivateDerivationManifestV1,\n): PolicyProjectionCandidate {\n  if (sourceUnit.editorialStatus !== TechnicalDocumentationEditorialStatus.APPROVED) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.EDITORIAL_NOT_APPROVED,\n    };\n  }\n  if (!evaluateTechnicalDocumentationApplicability(sourceUnit.applicabilityRequirements, manifest.environmentEvidenceSnapshot).applicable) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.APPLICABILITY_NOT_PROVEN,\n    };\n  }\n  if (sourceUnit.provenance.some((source) => source.classification !== TechnicalDocumentationSourceClassification.PUBLIC)) {\n    return {\n      sourceUnit,\n      publishedUnit: null,\n      decision: TechnicalDocumentationPublicationDecision.SUPPRESS,\n      reason: TechnicalDocumentationPublicationReason.RESTRICTED_SOURCE,\n    };\n  }\n\n  const assetRequests = sourceUnit.assetRequests.filter((asset) => asset.accessClass === TechnicalDocumentationAssetAccessClass.PUBLIC);\n  const redacted = assetRequests.length !== sourceUnit.assetRequests.length;\n  return {\n    sourceUnit,\n    publishedUnit: recreateUnit(sourceUnit, { assetRequests }),\n    decision: redacted ? TechnicalDocumentationPublicationDecision.REDACT : TechnicalDocumentationPublicationDecision.INCLUDE,\n    reason: redacted ? TechnicalDocumentationPublicationReason.RESTRICTED_ASSET_REDACTED : TechnicalDocumentationPublicationReason.INCLUDED_BY_POLICY,\n  };\n}\n\nexport interface ProjectTechnicalDocumentationAuthorizedBundleInput {\n  readonly privateDerivation: TechnicalDocumentationPrivateDerivationManifestV1;\n  readonly channel: TechnicalDocumentationChannel.PUBLIC_PORTAL;\n  readonly policyRef: string;\n  readonly policyVersion: number;\n  /** This bundle's own identity; the render manifest and the publication pointer name it. */\n  readonly bundleRef: string;\n  readonly bundleVersion: number;\n}\n\n/** Projects and minimizes the public framework bundle before rendering. */\nexport function projectTechnicalDocumentationAuthorizedBundle(\n  input: ProjectTechnicalDocumentationAuthorizedBundleInput,\n): TechnicalDocumentationAuthorizedBundleManifestV1 {\n  const initial = input.privateDerivation.units.map((unit) => projectPublicUnit(unit, input.privateDerivation));\n  const emittedUnitRefs = new Set(initial.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit.unitRef]));\n  const finalized = initial.map((candidate) => {\n    if (candidate.publishedUnit === null) return candidate;\n    const links = candidate.publishedUnit.links.filter((link) => link.targetUnitRef === null || emittedUnitRefs.has(link.targetUnitRef));\n    if (links.length === candidate.publishedUnit.links.length) return candidate;\n    return {\n      ...candidate,\n      publishedUnit: recreateUnit(candidate.publishedUnit, { links }),\n      decision: TechnicalDocumentationPublicationDecision.REDACT,\n      reason: TechnicalDocumentationPublicationReason.ACCESS_CLASS_MISMATCH,\n    };\n  });\n  const units = finalized.flatMap((candidate) => candidate.publishedUnit === null ? [] : [candidate.publishedUnit]);\n  const decisions: TechnicalDocumentationUnitPublicationDecisionV1[] = finalized.map((candidate) => ({\n    unitRef: candidate.sourceUnit.unitRef,\n    decision: candidate.decision,\n    reason: candidate.reason,\n    /*\n     * Both versions name the SAME unit version, and that is correct: a redaction narrows a unit's\n     * content without minting a new authored version. `decision` is what distinguishes INCLUDE\n     * from REDACT — it always was; the digest pair merely made the difference visible as two hex\n     * strings nobody could read.\n     */\n    sourceUnitVersion: candidate.sourceUnit.unitVersion,\n    publishedUnitVersion: candidate.publishedUnit?.unitVersion ?? null,\n  }));\n\n  return createTechnicalDocumentationAuthorizedBundleManifestV1({\n    schemaVersion: 1,\n    channel: TechnicalDocumentationChannel.PUBLIC_PORTAL,\n    policyRef: input.policyRef,\n    policyVersion: input.policyVersion,\n    bundleRef: input.bundleRef,\n    bundleVersion: input.bundleVersion,\n    derivationIdentity: {\n      ref: input.privateDerivation.derivationRef,\n      version: input.privateDerivation.derivationVersion,\n    },\n    units,\n    decisions,\n  });\n}\n"]}

package/dist/esm/companion/content/application-consumer-documentation-content-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-consumer-documentation-content-loader.d.ts","sourceRoot":"","sources":["../../../../../src/companion/content/application-consumer-documentation-content-loader.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,mDAAmD,EACxD,KAAK,4CAA4C,EACjD,KAAK,yBAAyB,EAC/B,MAAM,uDAAuD,CAAC;AAG/D,OAAO,EAKL,KAAK,iDAAiD,EACtD,KAAK,qDAAqD,EAE1D,gDAAgD,EAChD,KAAK,iDAAiD,EACtD,KAAK,qDAAqD,EAC3D,MAAM,2EAA2E,CAAC;AAoEnF,iGAAiG;AACjG,wBAAgB,uDAAuD,CACrE,eAAe,EAAE,SAAS,iDAAiD,EAAE,EAC7E,WAAW,EAAE,MAAM,EACnB,oBAAoB,SAAI,GACvB,iDAAiD,CA2CnD;AAED;;;;;GAKG;AACH,eAAO,MAAM,sDAAsD;;;;;;;;;;;;;;;;;;CAGlE,CAAC;AAEF,MAAM,WAAW,mDAAmD;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,gDAAgD,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,qDAAqD;IACpE,QAAQ,CAAC,QAAQ,EAAE,mDAAmD,CAAC;IACvE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,iDAAiD,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,GAAG;QACxG,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,qDAAqD,EAAE,YAAY,GAAG,cAAc,CAAC,CAAC,GAAG;YAC/H,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;YAC1D,QAAQ,CAAC,YAAY,EAAE,SAAS,4CAA4C,EAAE,CAAC;SAChF,CAAC,EAAE,CAAC;KACN,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,SAAS,mDAAmD,EAAE,CAAC;IAC/E,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;CACnD;AA4BD,kFAAkF;AAClF,wBAAgB,mDAAmD,CACjE,aAAa,GAAE,OAAgE,EAC/E,oBAAoB,GAAE,SAAS,iDAAiD,EAA2D,GAC1I,qDAAqD,CA0CvD"}
+{"version":3,"file":"application-consumer-documentation-content-loader.d.ts","sourceRoot":"","sources":["../../../../src/companion/content/application-consumer-documentation-content-loader.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,mDAAmD,EACxD,KAAK,4CAA4C,EACjD,KAAK,yBAAyB,EAC/B,MAAM,uDAAuD,CAAC;AAG/D,OAAO,EAKL,KAAK,iDAAiD,EACtD,KAAK,qDAAqD,EAE1D,gDAAgD,EAChD,KAAK,iDAAiD,EACtD,KAAK,qDAAqD,EAC3D,MAAM,2EAA2E,CAAC;AAoEnF,iGAAiG;AACjG,wBAAgB,uDAAuD,CACrE,eAAe,EAAE,SAAS,iDAAiD,EAAE,EAC7E,WAAW,EAAE,MAAM,EACnB,oBAAoB,SAAI,GACvB,iDAAiD,CA2CnD;AAED;;;;;GAKG;AACH,eAAO,MAAM,sDAAsD;;;;;;;;;;;;;;;;;;CAGlE,CAAC;AAEF,MAAM,WAAW,mDAAmD;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,gDAAgD,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,qDAAqD;IACpE,QAAQ,CAAC,QAAQ,EAAE,mDAAmD,CAAC;IACvE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,iDAAiD,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,GAAG;QACxG,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,qDAAqD,EAAE,YAAY,GAAG,cAAc,CAAC,CAAC,GAAG;YAC/H,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;YAC1D,QAAQ,CAAC,YAAY,EAAE,SAAS,4CAA4C,EAAE,CAAC;SAChF,CAAC,EAAE,CAAC;KACN,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,SAAS,mDAAmD,EAAE,CAAC;IAC/E,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;CACnD;AA4BD,kFAAkF;AAClF,wBAAgB,mDAAmD,CACjE,aAAa,GAAE,OAAgE,EAC/E,oBAAoB,GAAE,SAAS,iDAAiD,EAA2D,GAC1I,qDAAqD,CA0CvD"}

package/dist/esm/companion/index.d.ts

@@ -14,6 +14,7 @@
  */
 export * from './operation-projection.schemas';
 export * from './openapi-generator';
+export * from './manual-controller-route-projection';
 export * from './publish-result.types';
 export * from './zod-to-openapi';
 export * from './spec-to-operation-doc';
@@ -26,11 +27,11 @@ export * from './rendering/technical-documentation-authorized-bundle-reader';
 export * from './rendering/technical-documentation-docusaurus-renderer';
 export * from './rendering/technical-documentation-build-measurement';
 export * from './rendering/technical-documentation-managed-tree-validator';
-export * from './rendering/technical-documentation-markdown-renderer';
 export * from './rendering/technical-documentation-openapi-renderer';
 export * from './rendering/technical-documentation-render-model';
 export * from './rendering/technical-documentation-search-index-renderer';
 export * from './application-documentation/technical-documentation-engine-content-bundle';
+export * from './application-documentation/application-domain-documentation';
 export * from './application-documentation/application-integration-documentation';
 export * from './application-documentation/application-administration-documentation';
 export * from './application-documentation/application-authentication-documentation';

package/dist/esm/companion/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/companion/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,mEAAmE,CAAC;AAClF,cAAc,sEAAsE,CAAC;AACrF,cAAc,sEAAsE,CAAC;AACrF,cAAc,kEAAkE,CAAC;AACjF,cAAc,yEAAyE,CAAC;AACxF,cAAc,kFAAkF,CAAC;AACjG,cAAc,0EAA0E,CAAC;AACzF,cAAc,wEAAwE,CAAC;AACvF,cAAc,wEAAwE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/companion/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sCAAsC,CAAC;AACrD,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,mEAAmE,CAAC;AAClF,cAAc,sEAAsE,CAAC;AACrF,cAAc,sEAAsE,CAAC;AACrF,cAAc,kEAAkE,CAAC;AACjF,cAAc,yEAAyE,CAAC;AACxF,cAAc,kFAAkF,CAAC;AACjG,cAAc,0EAA0E,CAAC;AACzF,cAAc,wEAAwE,CAAC;AACvF,cAAc,wEAAwE,CAAC"}

package/dist/esm/companion/index.js

@@ -14,6 +14,7 @@
  */
 export * from './operation-projection.schemas.js';
 export * from './openapi-generator.js';
+export * from './manual-controller-route-projection.js';
 export * from './publish-result.types.js';
 export * from './zod-to-openapi.js';
 export * from './spec-to-operation-doc.js';
@@ -26,11 +27,11 @@ export * from './rendering/technical-documentation-authorized-bundle-reader.js';
 export * from './rendering/technical-documentation-docusaurus-renderer.js';
 export * from './rendering/technical-documentation-build-measurement.js';
 export * from './rendering/technical-documentation-managed-tree-validator.js';
-export * from './rendering/technical-documentation-markdown-renderer.js';
 export * from './rendering/technical-documentation-openapi-renderer.js';
 export * from './rendering/technical-documentation-render-model.js';
 export * from './rendering/technical-documentation-search-index-renderer.js';
 export * from './application-documentation/technical-documentation-engine-content-bundle.js';
+export * from './application-documentation/application-domain-documentation.js';
 export * from './application-documentation/application-integration-documentation.js';
 export * from './application-documentation/application-administration-documentation.js';
 export * from './application-documentation/application-authentication-documentation.js';

package/dist/esm/companion/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/companion/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,mEAAmE,CAAC;AAClF,cAAc,sEAAsE,CAAC;AACrF,cAAc,sEAAsE,CAAC;AACrF,cAAc,kEAAkE,CAAC;AACjF,cAAc,yEAAyE,CAAC;AACxF,cAAc,kFAAkF,CAAC;AACjG,cAAc,0EAA0E,CAAC;AACzF,cAAc,wEAAwE,CAAC;AACvF,cAAc,wEAAwE,CAAC","sourcesContent":["/**\n * `@wildo-ai/saas-technical-doc/companion` — implementation surface.\n *\n * Pure-function OpenAPI projection, its input contract, and Node-side verification/materialization utilities for an exact engine-owned\n * application-consumer documentation content bundle. Consumed by:\n *   - `examples/<app>/.wildo-saas/wildo-dev-companion/` controllers\n *     that call `generateOpenApiDocuments(input)` to produce\n *     the normal and application-administration YAML/JSON OpenAPI documents.\n *\n * @wildo-boundary\n *   Re-exports only companion-side OpenAPI and application-consumer content projection surfaces. All are React-free; the content loader is Node-only and\n *   never enters the browser runtime closure. Reusable authored content and portable identities are owned by the separate `./content`\n *   entry point.\n */\n\nexport * from './operation-projection.schemas';\nexport * from './openapi-generator';\nexport * from './publish-result.types';\nexport * from './zod-to-openapi';\nexport * from './spec-to-operation-doc';\nexport * from './content/application-consumer-documentation-content-loader';\nexport * from './technical-documentation-capture-execution-port';\nexport * from './technical-documentation-asset-path';\nexport * from './technical-documentation-diagram-materializer';\nexport * from './technical-documentation-placeholder-materializer';\nexport * from './rendering/technical-documentation-authorized-bundle-reader';\nexport * from './rendering/technical-documentation-docusaurus-renderer';\nexport * from './rendering/technical-documentation-build-measurement';\nexport * from './rendering/technical-documentation-managed-tree-validator';\nexport * from './rendering/technical-documentation-markdown-renderer';\nexport * from './rendering/technical-documentation-openapi-renderer';\nexport * from './rendering/technical-documentation-render-model';\nexport * from './rendering/technical-documentation-search-index-renderer';\nexport * from './application-documentation/technical-documentation-engine-content-bundle';\nexport * from './application-documentation/application-integration-documentation';\nexport * from './application-documentation/application-administration-documentation';\nexport * from './application-documentation/application-authentication-documentation';\nexport * from './application-documentation/application-connection-documentation';\nexport * from './application-documentation/application-organization-role-documentation';\nexport * from './application-documentation/application-organization-unit-resource-documentation';\nexport * from './application-documentation/technical-documentation-operational-evidence';\nexport * from './application-documentation/technical-documentation-private-derivation';\nexport * from './application-documentation/technical-documentation-publication-policy';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/companion/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sCAAsC,CAAC;AACrD,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6DAA6D,CAAC;AAC5E,cAAc,kDAAkD,CAAC;AACjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,yDAAyD,CAAC;AACxE,cAAc,uDAAuD,CAAC;AACtE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,2EAA2E,CAAC;AAC1F,cAAc,8DAA8D,CAAC;AAC7E,cAAc,mEAAmE,CAAC;AAClF,cAAc,sEAAsE,CAAC;AACrF,cAAc,sEAAsE,CAAC;AACrF,cAAc,kEAAkE,CAAC;AACjF,cAAc,yEAAyE,CAAC;AACxF,cAAc,kFAAkF,CAAC;AACjG,cAAc,0EAA0E,CAAC;AACzF,cAAc,wEAAwE,CAAC;AACvF,cAAc,wEAAwE,CAAC","sourcesContent":["/**\n * `@wildo-ai/saas-technical-doc/companion` — implementation surface.\n *\n * Pure-function OpenAPI projection, its input contract, and Node-side verification/materialization utilities for an exact engine-owned\n * application-consumer documentation content bundle. Consumed by:\n *   - `examples/<app>/.wildo-saas/wildo-dev-companion/` controllers\n *     that call `generateOpenApiDocuments(input)` to produce\n *     the normal and application-administration YAML/JSON OpenAPI documents.\n *\n * @wildo-boundary\n *   Re-exports only companion-side OpenAPI and application-consumer content projection surfaces. All are React-free; the content loader is Node-only and\n *   never enters the browser runtime closure. Reusable authored content and portable identities are owned by the separate `./content`\n *   entry point.\n */\n\nexport * from './operation-projection.schemas';\nexport * from './openapi-generator';\nexport * from './manual-controller-route-projection';\nexport * from './publish-result.types';\nexport * from './zod-to-openapi';\nexport * from './spec-to-operation-doc';\nexport * from './content/application-consumer-documentation-content-loader';\nexport * from './technical-documentation-capture-execution-port';\nexport * from './technical-documentation-asset-path';\nexport * from './technical-documentation-diagram-materializer';\nexport * from './technical-documentation-placeholder-materializer';\nexport * from './rendering/technical-documentation-authorized-bundle-reader';\nexport * from './rendering/technical-documentation-docusaurus-renderer';\nexport * from './rendering/technical-documentation-build-measurement';\nexport * from './rendering/technical-documentation-managed-tree-validator';\nexport * from './rendering/technical-documentation-openapi-renderer';\nexport * from './rendering/technical-documentation-render-model';\nexport * from './rendering/technical-documentation-search-index-renderer';\nexport * from './application-documentation/technical-documentation-engine-content-bundle';\nexport * from './application-documentation/application-domain-documentation';\nexport * from './application-documentation/application-integration-documentation';\nexport * from './application-documentation/application-administration-documentation';\nexport * from './application-documentation/application-authentication-documentation';\nexport * from './application-documentation/application-connection-documentation';\nexport * from './application-documentation/application-organization-role-documentation';\nexport * from './application-documentation/application-organization-unit-resource-documentation';\nexport * from './application-documentation/technical-documentation-operational-evidence';\nexport * from './application-documentation/technical-documentation-private-derivation';\nexport * from './application-documentation/technical-documentation-publication-policy';\n"]}

package/dist/esm/companion/manual-controller-route-projection.d.ts

@@ -0,0 +1,112 @@
+/**
+ * The application's manually mounted controller routes, projected into the same shape the resource
+ * registry produces — so they reach the generated API reference through the existing generator with
+ * no change to it.
+ *
+ * ## The gap this closes
+ *
+ * A Wildo application serves two disjoint families of HTTP routes. The RESOURCE REGISTRY builds one
+ * family from the resource configurations, and every mechanism downstream projects that family and
+ * only that family. The other family is mounted by hand, controller by controller, from
+ * `MANUAL_CONTROLLER_ROUTES_URLS`: sign-in, token refresh, MFA, passkeys, SAML, the OAuth 2.0
+ * authorization-server endpoints, the Model Context Protocol and Agent2Agent doors, file transfer,
+ * i18n labels, charts.
+ *
+ * Nothing projected the second family. Measured 2026-09-09 across the four committed documents of
+ * the two dogfood applications — 439, 576, 146 and 160 paths — **not one contained a single path
+ * under `/auth`**. The reference explained the three credential formats every operation accepts and
+ * never published the endpoint that issues one. Worse, four operation-header descriptions in the
+ * same document told a reader the step-up token is "obtained from `POST /api/v1/auth/reauth`", a
+ * path that document does not contain: the reference already pointed at this hole and could not
+ * fill it.
+ *
+ * ## Why this lives HERE and not in the companion projector
+ *
+ * The companion's `openapi-generation-input` projector walks the APPLICATION's resolved registry, so
+ * it must run inside the introspection subprocess with the app's schema graph loaded. This
+ * projection needs none of that: the manual routes are the ENGINE's own contract, identical in every
+ * generated application, and the catalog that describes them is a static table in
+ * `@wildo-ai/saas-models`. Keeping it beside the generator makes it a pure function of framework
+ * knowledge — testable on its own, like `SECURITY_SCHEMES` and the API-conventions markdown that
+ * already live here — instead of one more thing the subprocess owns.
+ *
+ * ## Why the generator needed no change
+ *
+ * `generateOpenApiDocuments` is a pure function over `OpenApiGenerationInput`. It groups by
+ * `resourceIdentifier`, keys path items on `path` + `httpVerb`, and emits whatever identity a
+ * projection carries; it has no opinion about where a projected operation came from. So a manual
+ * route reaches the document as an ordinary `OperationProjection` whose `resourceIdentifier` is its
+ * documentation GROUP, accompanied by a matching `ResourceTag` — which is the join the renderer's
+ * conservation check makes.
+ *
+ * ## What a manual projection deliberately does NOT carry
+ *
+ * `requestBodySchema` and `responseBodySchema` stay `null`. Those bodies are Zod schemas declared
+ * inside backend controllers, in a package neither this one nor the introspection subprocess loads;
+ * hand-copying them into the catalog would create a second copy of a contract with nothing checking
+ * the two agree — the drift this repository refuses everywhere else. Each catalog entry authors a
+ * `responseStatuses` row instead (without one the generator emits a bare `204 No Content`, which is
+ * wrong for almost every route here) and describes its payload in prose. That is an honest account of
+ * what is known, and it is strictly better than a reference in which the endpoint does not exist.
+ * Projecting the real schemas is a later, larger change that must first move them into a shared
+ * module.
+ */
+import { ManualControllerRouteGroup } from '@wildo-ai/saas-models';
+import { EngineResourceSubDomain } from '@wildo-ai/saas-specifications';
+import { type OperationProjection, type ResourceTag } from './operation-projection.schemas';
+/**
+ * Express `:param` → OpenAPI `{param}`.
+ *
+ * The resource lane never needs this: its URL builder already emits brace form. The manual registry
+ * is the backend's own mount table, written the way Express reads it, so the conversion belongs at
+ * this boundary rather than in the registry — which the router consumes verbatim and must not have
+ * rewritten under it.
+ */
+export declare function toOpenApiPathTemplate(expressPath: string): string;
+/**
+ * The operation identifier for one manual route — derived, never authored.
+ *
+ * `buildOperationId` composes `<verb><Resource>` and drops the resource noun when the verb phrase
+ * already contains it. Starting the identifier WITH the group name is what triggers that drop, so
+ * `AUTH_IDENTIFY` in the `authentication` group reads `authenticationIdentify` rather than the
+ * stuttering `authIdentifyAuthentication`. Derived rather than authored so a route key added
+ * tomorrow gets a coherent, stable id without anybody having to think about it.
+ */
+export declare function manualRouteOperationIdentifier(routeKey: string, group: ManualControllerRouteGroup): string;
+/**
+ * The API-reference group each manual-route group belongs to — the SAME vocabulary the engine's own
+ * resources are classified by.
+ *
+ * ## Why these join the engine's categories instead of forming their own
+ *
+ * A tag with no category is not merely ungrouped: `applyApiReferenceResourceCategories` REFUSES the
+ * publication of any application that declares `apiReferenceResourceCategories` at all, naming every
+ * tag no category claims. So six uncategorised groups would have turned "the auth endpoints are
+ * missing from the reference" into "the reference does not publish", for every application with an
+ * authored taxonomy — a worse failure than the one this projection fixes.
+ *
+ * Categorising them as their OWN groups was the alternative and is rejected: the renderer groups by
+ * category, so `authentication` (54 routes) would sit as a sibling of `auth` (the SSO, SCIM, session
+ * and token RESOURCES), and a reader looking for authentication would find it split across two
+ * adjacent headings for no reason they could see. The endpoint that issues a token and the resource
+ * that configures how tokens are issued belong under one heading.
+ *
+ * TOTAL over {@link ManualControllerRouteGroup}: a new group is a compile error until it is placed.
+ * That is the same guarantee the route catalog itself carries, and for the same reason — a group
+ * that nobody remembered to classify is a publication failure in an application nobody has run yet.
+ */
+export declare const MANUAL_ROUTE_GROUP_SUB_DOMAINS: Record<ManualControllerRouteGroup, EngineResourceSubDomain>;
+/**
+ * Every PUBLISHED manual route as an `OperationProjection`, plus the `ResourceTag` for each group
+ * that contributed one.
+ *
+ * Pure and argument-free: the manual route table is framework knowledge, identical in every
+ * generated application, so there is nothing about a particular application to pass in. Withheld
+ * routes are skipped here and nowhere else — the catalog is the single place a publication decision
+ * is recorded, and it requires a written reason for each one.
+ */
+export declare function projectManualControllerRouteOperations(): {
+    operations: OperationProjection[];
+    resourceTags: ResourceTag[];
+};
+//# sourceMappingURL=manual-controller-route-projection.d.ts.map

package/dist/esm/companion/manual-controller-route-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manual-controller-route-projection.d.ts","sourceRoot":"","sources":["../../../src/companion/manual-controller-route-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EAOL,0BAA0B,EAG3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEL,uBAAuB,EACxB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAOL,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,gCAAgC,CAAC;AA0BxC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,GAAG,MAAM,CAG1G;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,0BAA0B,EAAE,uBAAuB,CAoBtG,CAAC;AAQF;;;;;;;;GAQG;AACH,wBAAgB,sCAAsC,IAAI;IACxD,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B,CA4FA"}

package/dist/esm/companion/manual-controller-route-projection.js

@@ -0,0 +1,249 @@
+/**
+ * The application's manually mounted controller routes, projected into the same shape the resource
+ * registry produces — so they reach the generated API reference through the existing generator with
+ * no change to it.
+ *
+ * ## The gap this closes
+ *
+ * A Wildo application serves two disjoint families of HTTP routes. The RESOURCE REGISTRY builds one
+ * family from the resource configurations, and every mechanism downstream projects that family and
+ * only that family. The other family is mounted by hand, controller by controller, from
+ * `MANUAL_CONTROLLER_ROUTES_URLS`: sign-in, token refresh, MFA, passkeys, SAML, the OAuth 2.0
+ * authorization-server endpoints, the Model Context Protocol and Agent2Agent doors, file transfer,
+ * i18n labels, charts.
+ *
+ * Nothing projected the second family. Measured 2026-09-09 across the four committed documents of
+ * the two dogfood applications — 439, 576, 146 and 160 paths — **not one contained a single path
+ * under `/auth`**. The reference explained the three credential formats every operation accepts and
+ * never published the endpoint that issues one. Worse, four operation-header descriptions in the
+ * same document told a reader the step-up token is "obtained from `POST /api/v1/auth/reauth`", a
+ * path that document does not contain: the reference already pointed at this hole and could not
+ * fill it.
+ *
+ * ## Why this lives HERE and not in the companion projector
+ *
+ * The companion's `openapi-generation-input` projector walks the APPLICATION's resolved registry, so
+ * it must run inside the introspection subprocess with the app's schema graph loaded. This
+ * projection needs none of that: the manual routes are the ENGINE's own contract, identical in every
+ * generated application, and the catalog that describes them is a static table in
+ * `@wildo-ai/saas-models`. Keeping it beside the generator makes it a pure function of framework
+ * knowledge — testable on its own, like `SECURITY_SCHEMES` and the API-conventions markdown that
+ * already live here — instead of one more thing the subprocess owns.
+ *
+ * ## Why the generator needed no change
+ *
+ * `generateOpenApiDocuments` is a pure function over `OpenApiGenerationInput`. It groups by
+ * `resourceIdentifier`, keys path items on `path` + `httpVerb`, and emits whatever identity a
+ * projection carries; it has no opinion about where a projected operation came from. So a manual
+ * route reaches the document as an ordinary `OperationProjection` whose `resourceIdentifier` is its
+ * documentation GROUP, accompanied by a matching `ResourceTag` — which is the join the renderer's
+ * conservation check makes.
+ *
+ * ## What a manual projection deliberately does NOT carry
+ *
+ * `requestBodySchema` and `responseBodySchema` stay `null`. Those bodies are Zod schemas declared
+ * inside backend controllers, in a package neither this one nor the introspection subprocess loads;
+ * hand-copying them into the catalog would create a second copy of a contract with nothing checking
+ * the two agree — the drift this repository refuses everywhere else. Each catalog entry authors a
+ * `responseStatuses` row instead (without one the generator emits a bare `204 No Content`, which is
+ * wrong for almost every route here) and describes its payload in prose. That is an honest account of
+ * what is known, and it is strictly better than a reference in which the endpoint does not exist.
+ * Projecting the real schemas is a later, larger change that must first move them into a shared
+ * module.
+ */
+import { HttpMethod, MAIN_API_BASE_PATH, MANUAL_CONTROLLER_ROUTE_DOCUMENTATION, MANUAL_CONTROLLER_ROUTE_GROUP_DESCRIPTIONS, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteAuthentication, ManualControllerRouteGroup, ManualControllerRouteKey, ManualControllerRoutePublication, } from '@wildo-ai/saas-models';
+import { ENGINE_RESOURCE_SUB_DOMAIN_DOCUMENTATION, EngineResourceSubDomain, } from '@wildo-ai/saas-specifications';
+import { OpenApiSection } from '../openapi/openapi-generation-output.schemas.js';
+import { createOpenApiOperationIdentity, OperationProjectionAuthenticationMode, OperationProjectionHttpVerb, OperationProjectionPrimaryScope, OperationProjectionVariantType, } from './operation-projection.schemas.js';
+/** Catalog vocabulary → the projection's own authentication vocabulary. Total over the source enum. */
+const MANUAL_ROUTE_AUTHENTICATION_MODES = {
+    [ManualControllerRouteAuthentication.PUBLIC]: OperationProjectionAuthenticationMode.PUBLIC,
+    [ManualControllerRouteAuthentication.ANONYMOUS_SESSION]: OperationProjectionAuthenticationMode.ANONYMOUS_SESSION,
+    [ManualControllerRouteAuthentication.AUTHENTICATED]: OperationProjectionAuthenticationMode.AUTHENTICATED,
+    [ManualControllerRouteAuthentication.ANONYMOUS_OR_AUTHENTICATED]: OperationProjectionAuthenticationMode.ANONYMOUS_OR_AUTHENTICATED,
+};
+/**
+ * `HttpMethod` → the OpenAPI path-item key.
+ *
+ * `HttpMethod.OPTIONS` is deliberately excluded. OpenAPI does define an `options` path-item key, but
+ * no manual route mounts one — CORS preflight is answered by middleware rather than by a route — so
+ * admitting it here would be inventing a case. A catalog entry that named `OPTIONS` fails to compile
+ * against this map, which is the right moment to find out.
+ */
+const MANUAL_ROUTE_HTTP_VERBS = {
+    [HttpMethod.GET]: OperationProjectionHttpVerb.GET,
+    [HttpMethod.POST]: OperationProjectionHttpVerb.POST,
+    [HttpMethod.PUT]: OperationProjectionHttpVerb.PUT,
+    [HttpMethod.PATCH]: OperationProjectionHttpVerb.PATCH,
+    [HttpMethod.DELETE]: OperationProjectionHttpVerb.DELETE,
+};
+/**
+ * Express `:param` → OpenAPI `{param}`.
+ *
+ * The resource lane never needs this: its URL builder already emits brace form. The manual registry
+ * is the backend's own mount table, written the way Express reads it, so the conversion belongs at
+ * this boundary rather than in the registry — which the router consumes verbatim and must not have
+ * rewritten under it.
+ */
+export function toOpenApiPathTemplate(expressPath) {
+    return expressPath.replace(/:([A-Za-z0-9_]+)/gu, '{$1}');
+}
+/**
+ * The operation identifier for one manual route — derived, never authored.
+ *
+ * `buildOperationId` composes `<verb><Resource>` and drops the resource noun when the verb phrase
+ * already contains it. Starting the identifier WITH the group name is what triggers that drop, so
+ * `AUTH_IDENTIFY` in the `authentication` group reads `authenticationIdentify` rather than the
+ * stuttering `authIdentifyAuthentication`. Derived rather than authored so a route key added
+ * tomorrow gets a coherent, stable id without anybody having to think about it.
+ */
+export function manualRouteOperationIdentifier(routeKey, group) {
+    const words = routeKey.toLowerCase().split('_').filter((word) => word.length > 0);
+    return group + words.map((word) => `${word.charAt(0).toUpperCase()}${word.slice(1)}`).join('');
+}
+/**
+ * The API-reference group each manual-route group belongs to — the SAME vocabulary the engine's own
+ * resources are classified by.
+ *
+ * ## Why these join the engine's categories instead of forming their own
+ *
+ * A tag with no category is not merely ungrouped: `applyApiReferenceResourceCategories` REFUSES the
+ * publication of any application that declares `apiReferenceResourceCategories` at all, naming every
+ * tag no category claims. So six uncategorised groups would have turned "the auth endpoints are
+ * missing from the reference" into "the reference does not publish", for every application with an
+ * authored taxonomy — a worse failure than the one this projection fixes.
+ *
+ * Categorising them as their OWN groups was the alternative and is rejected: the renderer groups by
+ * category, so `authentication` (54 routes) would sit as a sibling of `auth` (the SSO, SCIM, session
+ * and token RESOURCES), and a reader looking for authentication would find it split across two
+ * adjacent headings for no reason they could see. The endpoint that issues a token and the resource
+ * that configures how tokens are issued belong under one heading.
+ *
+ * TOTAL over {@link ManualControllerRouteGroup}: a new group is a compile error until it is placed.
+ * That is the same guarantee the route catalog itself carries, and for the same reason — a group
+ * that nobody remembered to classify is a publication failure in an application nobody has run yet.
+ */
+export const MANUAL_ROUTE_GROUP_SUB_DOMAINS = {
+    // Sessions, MFA, SSO and consumable tokens — the sub-domain's own words.
+    [ManualControllerRouteGroup.AUTHENTICATION]: EngineResourceSubDomain.AUTH,
+    // The application acting as an OAuth 2.0 authorization server. Opposite direction from signing in,
+    // same subject: `auth` names OAuth explicitly, and its OAuth-client resources are the records
+    // these endpoints authenticate.
+    [ManualControllerRouteGroup.IDENTITY_PROVIDER]: EngineResourceSubDomain.AUTH,
+    // "…and what they may delegate" is `auth`'s own scope, and the provider-credential resources this
+    // group mints live there too.
+    [ManualControllerRouteGroup.CONNECTED_ACCOUNTS]: EngineResourceSubDomain.AUTH,
+    // MCP and A2A are the doors autonomous software knocks on; `flows-actors` is "work that runs:
+    // flows, actors, tasks, agents".
+    [ManualControllerRouteGroup.AGENT_INTERFACES]: EngineResourceSubDomain.FLOWS_ACTORS,
+    // "Uploaded bytes and the metadata that links them to a domain row" — and these routes address a
+    // stored file by its own id, so they belong beside the file metadata resources.
+    [ManualControllerRouteGroup.FILE_TRANSFER]: EngineResourceSubDomain.FILES,
+    // Reads a client makes about THIS APPLICATION: its resolved features, its labels, its chart data.
+    // `applications` is the sub-domain whose subject is the application itself; `features` is about
+    // the feature RECORDS, which are resources of their own.
+    [ManualControllerRouteGroup.APPLICATION_RUNTIME]: EngineResourceSubDomain.APPLICATIONS,
+};
+function manualRouteGroupCategory(group) {
+    const subDomain = MANUAL_ROUTE_GROUP_SUB_DOMAINS[group];
+    const documentation = ENGINE_RESOURCE_SUB_DOMAIN_DOCUMENTATION[subDomain];
+    return { id: subDomain, label: documentation.label, description: documentation.description };
+}
+/**
+ * Every PUBLISHED manual route as an `OperationProjection`, plus the `ResourceTag` for each group
+ * that contributed one.
+ *
+ * Pure and argument-free: the manual route table is framework knowledge, identical in every
+ * generated application, so there is nothing about a particular application to pass in. Withheld
+ * routes are skipped here and nowhere else — the catalog is the single place a publication decision
+ * is recorded, and it requires a written reason for each one.
+ */
+export function projectManualControllerRouteOperations() {
+    const operations = [];
+    const usedGroups = new Set();
+    for (const routeKey of Object.values(ManualControllerRouteKey)) {
+        const documentation = MANUAL_CONTROLLER_ROUTE_DOCUMENTATION[routeKey];
+        if (documentation.publication !== ManualControllerRoutePublication.PUBLISHED)
+            continue;
+        usedGroups.add(documentation.group);
+        const path = `${MAIN_API_BASE_PATH}${toOpenApiPathTemplate(MANUAL_CONTROLLER_ROUTES_URLS[routeKey])}`;
+        const baseOperationIdentifier = manualRouteOperationIdentifier(routeKey, documentation.group);
+        const access = {
+            authenticationMode: MANUAL_ROUTE_AUTHENTICATION_MODES[documentation.authentication],
+            authenticationSummary: documentation.authenticationSummary,
+            /*
+             * Empty on purpose. A manual route is not gated by the resource role vocabulary — its
+             * authorization is enforced inside its own handler, and for most of them there is no role at
+             * all because the caller has no session yet. Inventing a role here would put a requirement in
+             * the reference that no role table backs, which is worse than saying nothing.
+             */
+            roleRequirements: [],
+        };
+        for (const method of documentation.methods) {
+            const httpVerb = MANUAL_ROUTE_HTTP_VERBS[method];
+            /*
+             * One key can mount several methods — RFC 7592 defines ONE client-configuration endpoint whose
+             * method selects the operation, and `/mcp` answers three. `operationId` must be unique across
+             * the document, so the verb becomes a qualifier exactly when there is more than one method; a
+             * single-method route keeps the clean name.
+             */
+            const operationKey = documentation.methods.length > 1
+                ? `${baseOperationIdentifier}_${method}`
+                : baseOperationIdentifier;
+            operations.push({
+                resourceIdentifier: documentation.group,
+                operationKey,
+                baseOperationIdentifier,
+                variantKey: null,
+                variantType: OperationProjectionVariantType.API_CALL,
+                httpVerb,
+                path,
+                /*
+                 * Inert in the generator — sectioning is `consumerApiSection` and security is `access` — but
+                 * the projection contract requires it. `APPLICATION` is the truthful answer for every manual
+                 * route, including the two whose URL carries an organization segment: there the organization
+                 * is an argument to the call, not the scope the caller is acting within.
+                 */
+                primaryScope: OperationProjectionPrimaryScope.APPLICATION,
+                /*
+                 * Never the administration section. These routes are how ANY caller authenticates, connects
+                 * or discovers, so filing them under application administration would move sign-in out of
+                 * the document integrators actually read.
+                 */
+                consumerApiSection: OpenApiSection.API_REFERENCE,
+                identity: createOpenApiOperationIdentity({
+                    resourceIdentifier: documentation.group,
+                    baseOperationIdentifier,
+                    variantKey: null,
+                    variantType: OperationProjectionVariantType.API_CALL,
+                    httpVerb,
+                    path,
+                }),
+                roles: [],
+                access,
+                /*
+                 * These surfaces accept an API key wherever they accept a bearer token; nothing narrows any
+                 * of them to a bearer-only lane, so removing the API-key alternative would document a
+                 * refusal the runtime does not make.
+                 */
+                isApiKeyAccessDisabled: false,
+                /* Optimistic locking is a resource-repository capability. No manual route has one. */
+                acceptsIfMatch: false,
+                summary: documentation.summary,
+                description: documentation.description,
+                requestBodySchema: null,
+                responseBodySchema: null,
+                responseStatuses: [{ code: documentation.successStatus.code, meaning: documentation.successStatus.meaning }],
+            });
+        }
+    }
+    const resourceTags = [...usedGroups]
+        .sort((left, right) => left.localeCompare(right, 'en-US'))
+        .map((group) => ({
+        name: group,
+        description: MANUAL_CONTROLLER_ROUTE_GROUP_DESCRIPTIONS[group],
+        category: manualRouteGroupCategory(group),
+    }));
+    return { operations, resourceTags };
+}
+//# sourceMappingURL=manual-controller-route-projection.js.map