ddd-ts-kit 0.13.0 → 0.15.0

package/dist/workspace/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/workspace/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAG5E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQxC;;;;;GAKG;AACH,MAAM,OAAO,SAAS;IAUT,IAAI;IACI,KAAK;IAVf,KAAK,GAAa,EAAE,CAAC;IAEb,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAErC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5B,KAAK,GAAe,EAAE,CAAC;IAExC,YACW,IAAY,EACJ,KAAc;oBADtB,IAAI;qBACI,KAAK;IACrB,CAAC;IAEJ,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,IAAY;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC,SAAiB;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;aACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,CAAC;IAED,gFAAgF;IAChF,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,GAAG,SAAS,GAAG,CAAC;QAE/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACxD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE7F,OAAO,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,IAAY,EAAE,OAAe;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAElD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACtD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,OAAe;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,sIAAsI;IACtI,MAAM,CAAC,IAAY;QACjB,OAAO,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,iHAAiH;IACjH,IAAI,CAAC,IAAc;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAe;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAEtG,MAAM,IAAI,GAAG,OAAO;aACjB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC;aAC/C,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,+EAA+E;QAC/E,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1F,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YAC1E,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YACzE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACtD,KAAK;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAY;QAC9C,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAEO,MAAM,CAAC,SAAiB,EAAE,MAAqC;QACrE,IAAI,CAAC;YACH,OAAO,EAAE;iBACN,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC9D,MAAM,CAAC,MAAM,CAAC;iBACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAY,EAAE,OAAe;QACzC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAAkB;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/workspace/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAG5E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQxC;;;;;GAKG;AACH,MAAM,OAAO,SAAS;IAUT,IAAI;IACI,KAAK;IAVf,KAAK,GAAa,EAAE,CAAC;IAEb,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAErC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5B,KAAK,GAAe,EAAE,CAAC;IAExC,YACW,IAAY,EACJ,KAAc;oBADtB,IAAI;qBACI,KAAK;IACrB,CAAC;IAEJ,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,IAAY;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC,SAAiB;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;aACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,CAAC;IAED,gFAAgF;IAChF,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,GAAG,SAAS,GAAG,CAAC;QAE/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACxD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE7F,OAAO,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,CAAC;IAED,mFAAmF;IACnF,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,IAAY,EAAE,OAAe;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAElD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACtD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,OAAe;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,sIAAsI;IACtI,MAAM,CAAC,IAAY;QACjB,OAAO,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,iHAAiH;IACjH,IAAI,CAAC,IAAc;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAe;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAEtG,MAAM,IAAI,GAAG,OAAO;aACjB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC;aAC/C,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,+EAA+E;QAC/E,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1F,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YAC1E,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;YACzE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACtD,KAAK;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAY;QAC9C,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAE1F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAEO,MAAM,CAAC,SAAiB,EAAE,MAAqC;QACrE,IAAI,CAAC;YACH,OAAO,EAAE;iBACN,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC9D,MAAM,CAAC,MAAM,CAAC;iBACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAY,EAAE,OAAe;QACzC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAEO,QAAQ,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,SAAS,cAAc,CAAC,IAAkB;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC;AACtE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ddd-ts-kit",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Bootstrap, scaffold and verify DDD and Clean Architecture TypeScript projects.",
   "license": "MIT",
   "repository": {
@@ -29,6 +29,6 @@
     "clean:packages": "node dist/bin.js check --clean-only ../kernel/src ../validation/src ../http/src ../tracing/src ../di/src ../events/src ../testing/src ../s3/src ../drizzle/src ../knex/src ../prisma/src ../typeorm/src ../aspects/src ../rabbitmq/src ../auth/src ../audit/src ../redis/src ../scheduling/src ../pino/src ../winston/src ../sentry/src ../kafka/src ../nats/src ../eslint-plugin/src"
   },
   "devDependencies": {
-    "@ddd-ts-kit/kernel": "^0.13.0"
+    "@ddd-ts-kit/kernel": "^0.15.0"
   }
 }

package/templates/docs/openapi.json.tpl

@@ -262,6 +262,21 @@
               "FORBIDDEN"
             ]
           },
+{{#if presentation.negotiated}}
+          "406": {
+            "description": "Not Acceptable. Error codes: NOT_ACCEPTABLE.",
+            "content": {
+              "application/problem+json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Problem"
+                }
+              }
+            },
+            "x-error-codes": [
+              "NOT_ACCEPTABLE"
+            ]
+          },
+{{/if}}
           "422": {
             "description": "Unprocessable Content. Error codes: VALIDATION_FAILED.",
             "content": {

package/templates/init/CLAUDE.md.tpl

@@ -8,7 +8,7 @@ A ddd-ts-kit project: one bounded context per directory of `{{config.contextsDir
 - `npx ddd-ts-kit check --changed-since <ref>`: the architecture rules on what changed; `npx ddd-ts-kit explain <rule-id>` gives the reason and an example.
 - `npx ddd-ts-kit list --json`: the map of the contexts. `npx ddd-ts-kit describe <context> --json`: one context as data (use cases, routes, events, ports, dependencies).
 - `npx ddd-ts-kit status`: the next step of the plan, the slices by status, the markers left per context. `npx ddd-ts-kit todo [<context>]`: each remaining `TODO(domain)` and `it.todo` as `file:line`.
-- `npx ddd-ts-kit docs`: regenerates the context map and the generated sections of each `CONTEXT.md`; `npm run docs:generate` the OpenAPI contract and the event catalog.
+- `npx ddd-ts-kit docs`: regenerates the context map and the generated sections of each `CONTEXT.md`; `npm run docs:generate` the OpenAPI contract, the forms and the event catalog.
 
 ## Read less
 
@@ -29,7 +29,7 @@ Never edit `<context>.declarations.ts`: `generate`, `docs` and `npm run dev` rew
 {{#if assembly.discovery}}
 Never edit `<context>.dependencies.ts`: `generate`, `docs` and `npm run dev` rewrite it from the constructor signatures (it registers what each constructor is injected). After changing a constructor by hand, `npx ddd-ts-kit docs`.
 {{/if}}
-Never edit the contracts under `openapi/` (`openapi/openapi.yaml`, one file per document when `openapi.documents` splits it), `docs/integration/asyncapi.yaml`, `docs/integration/event-catalog.md`, `{{config.platformDir}}/http/openapi-documents.ts`, `.dependency-cruiser.cjs` or the generated sections of a `CONTEXT.md`: change the code or the config, then `npm run docs:generate`, `npx ddd-ts-kit docs` and `npx ddd-ts-kit depcruise-config --write`. `stored-events.lock.json` is written by `npx ddd-ts-kit docs --stored-events` once the shape of a version is final (`docs --check` fails while one is unrecorded), never by hand: a stored shape changes only by a new version with its upcaster (`event-sourcing/upcaster-required`).
+Never edit the contracts under `openapi/` (`openapi/openapi.yaml`, one file per document when `openapi.documents` splits it, the forms of `openapi/forms/`), `docs/integration/asyncapi.yaml`, `docs/integration/event-catalog.md`, `{{config.platformDir}}/http/openapi-documents.ts`, `.dependency-cruiser.cjs` or the generated sections of a `CONTEXT.md`: change the code or the config, then `npm run docs:generate`, `npx ddd-ts-kit docs` and `npx ddd-ts-kit depcruise-config --write`. `stored-events.lock.json` is written by `npx ddd-ts-kit docs --stored-events` once the shape of a version is final (`docs --check` fails while one is unrecorded), never by hand: a stored shape changes only by a new version with its upcaster (`event-sourcing/upcaster-required`).
 {{#if sdk.on}}
 {{sdk.instruction}}
 {{/if}}

package/templates/init/platform/auth/http-boundary.ts.tpl

@@ -45,9 +45,12 @@ import { multipartUploads } from '@ddd-ts-kit/http/uploads';
 {{/if}}
 import { tracedRoutes } from '@ddd-ts-kit/tracing';
 import { principalOf } from '{{alias.platform}}/auth/principal-of{{alias.ext}}';
+{{#if presentation.any}}
+import type { Presentation } from '{{alias.platform}}/http/presentation-of{{alias.ext}}';
+{{/if}}
 
 /** What the HTTP adapter needs at the edge of the application: spread into its mount options, for every route. */
-export interface HttpBoundary {
+export interface HttpBoundary{{#if presentation.any}} extends Presentation{{/if}} {
   readonly resolvePrincipal: (raw: unknown) => Promise<Session>;
   /** Every handler runs inside it, with the correlation id, the actor and the session of its request. */
   readonly executionScope: ExecutionScope;
@@ -92,21 +95,29 @@ interface Edge {
   /** Where a request answered 5xx is reported, unless a bus already reported its failure. */
   readonly errors: ErrorReporter;
 {{/if}}
+{{#if presentation.any}}
+  readonly presentation: Presentation;
+{{/if}}
 }
 
 /** A request is authenticated once, then handled inside the execution scope, so infrastructure sees who acts and under which correlation. */
 {{#if errors.none}}
-{{#unless audit.on}}
+{{#unless presentation.widensEdge}}
 export function httpBoundary({ authenticator, executionScope, errorMapper, clock, logger }: Edge): HttpBoundary {
 {{/unless}}
-{{#if audit.on}}
+{{#if presentation.widensEdge}}
 export function httpBoundary({
   authenticator,
   executionScope,
   errorMapper,
   clock,
   logger,
+{{#if audit.on}}
   refusals,
+{{/if}}
+{{#if presentation.any}}
+  presentation,
+{{/if}}
 }: Edge): HttpBoundary {
 {{/if}}
 {{/if}}
@@ -121,11 +132,17 @@ export function httpBoundary({
   refusals,
 {{/if}}
   errors,
+{{#if presentation.any}}
+  presentation,
+{{/if}}
 }: Edge): HttpBoundary {
   const report = reportHttpErrors(errors);
 
 {{/if}}
   return {
+{{#if presentation.any}}
+    ...presentation,
+{{/if}}
     resolvePrincipal: principalOf(authenticator),
     executionScope,
     errorMapper,

package/templates/init/platform/compose-application.manual.ts.tpl

@@ -26,6 +26,12 @@ import { auditModule } from '{{alias.platform}}/audit/audit.module{{alias.ext}}'
 {{#if http.any}}
 import { httpBoundary, type HttpBoundary } from '{{alias.platform}}/auth/http-boundary{{alias.ext}}';
 {{/if}}
+{{#if presentation.any}}
+import { presentationOf } from '{{alias.platform}}/http/presentation-of{{alias.ext}}';
+{{/if}}
+{{#if presentation.forms}}
+import { withForms } from '{{alias.platform}}/http/with-forms{{alias.ext}}';
+{{/if}}
 {{#if authz.rebac}}
 import { relateSystemActors } from '{{alias.platform}}/auth/relate-system-actors{{alias.ext}}';
 {{/if}}
@@ -123,10 +129,19 @@ export function composeApplication(
 {{/unless}}
 
   platform.protection.declare(contexts.flatMap((context) => context.useCases));
+{{#if presentation.any}}
+  // What the server answers in and which fields each caller sees: the forms and the contract are given the same.
+  const presentation = presentationOf(platform.access, clock);
+{{/if}}
 
   return {
 {{#if http.any}}
+{{#if presentation.forms}}
+    routes: withForms(defineRoutes(...contexts.map((context) => context.routes)), presentation),
+{{/if}}
+{{#unless presentation.forms}}
     routes: defineRoutes(...contexts.map((context) => context.routes)),
+{{/unless}}
     boundary: httpBoundary({
       authenticator: options.authenticator,
       executionScope: platform.scope,
@@ -138,6 +153,9 @@ export function composeApplication(
 {{/if}}
 {{#if errors.sentry}}
       errors: platform.errors,
+{{/if}}
+{{#if presentation.any}}
+      presentation,
 {{/if}}
     }),
 {{/if}}

package/templates/init/platform/compose-application.tsyringe.ts.tpl

@@ -1,6 +1,11 @@
 import { installAspectRuntime } from '@ddd-ts-kit/aspects';
 {{#if http.any}}
+{{#if presentation.any}}
+import { Access, Authenticator } from '@ddd-ts-kit/auth';
+{{/if}}
+{{#unless presentation.any}}
 import { Authenticator } from '@ddd-ts-kit/auth';
+{{/unless}}
 {{/if}}
 import {
 {{#if routes.declaredControllers}}
@@ -94,6 +99,12 @@ import { securitySchemes } from '{{alias.platform}}/auth/security-schemes{{alias
 {{#if http.any}}
 import { httpBoundary, type HttpBoundary } from '{{alias.platform}}/auth/http-boundary{{alias.ext}}';
 {{/if}}
+{{#if presentation.any}}
+import { presentationOf } from '{{alias.platform}}/http/presentation-of{{alias.ext}}';
+{{/if}}
+{{#if presentation.forms}}
+import { withForms } from '{{alias.platform}}/http/with-forms{{alias.ext}}';
+{{/if}}
 {{#if authz.rebac}}
 import { relateSystemActors } from '{{alias.platform}}/auth/relate-system-actors{{alias.ext}}';
 {{/if}}
@@ -271,10 +282,19 @@ function kernel(foundations: Foundations, persistence: Persistence, options: App
 
 function running(container: Container, options: ApplicationOptions, contexts: ContextSelection): Application {
   const logger = container.resolve(Logger);
+{{#if presentation.any}}
+  // What the server answers in and which fields each caller sees: the forms and the contract are given the same.
+  const presentation = presentationOf(container.resolve(Access), container.resolve(Clock));
+{{/if}}
 
   return {
 {{#if http.any}}
+{{#if presentation.forms}}
+    routes: withForms(routesOf(container, contexts), presentation),
+{{/if}}
+{{#unless presentation.forms}}
     routes: routesOf(container, contexts),
+{{/unless}}
     boundary: httpBoundary({
       authenticator: container.resolve(Authenticator),
       executionScope: container.resolve(ExecutionScope),
@@ -289,6 +309,9 @@ function running(container: Container, options: ApplicationOptions, contexts: Co
 {{/if}}
 {{#if errors.sentry}}
       errors: container.resolve(ErrorReporter),
+{{/if}}
+{{#if presentation.any}}
+      presentation,
 {{/if}}
     }),
 {{/if}}

package/templates/init/platform/http/presentation-of.ts.tpl

@@ -0,0 +1,27 @@
+import type { Access } from '@ddd-ts-kit/auth';
+{{#if presentation.negotiated}}
+import { Representations, fieldDeciderOf, type FieldDecider } from '@ddd-ts-kit/http';
+{{/if}}
+{{#unless presentation.negotiated}}
+import { fieldDeciderOf, type FieldDecider } from '@ddd-ts-kit/http';
+{{/unless}}
+import type { Clock } from '@ddd-ts-kit/kernel';
+
+/** How the answers of the application are presented, the same for the server, the forms and the contract. */
+export interface Presentation {
+{{#if presentation.negotiated}}
+  /** JSON, XML and CSV: each request is answered in the one its `Accept` header prefers among those its route declares in `produces`. */
+  readonly representations: Representations;
+{{/if}}
+  /** Decides the fields a schema reserves to some callers (`withFieldAccess`), through the policies and the authorizer of the application. */
+  readonly fieldAccess: FieldDecider;
+}
+
+export function presentationOf(access: Access, clock: Clock): Presentation {
+  return {
+{{#if presentation.negotiated}}
+    representations: Representations.standard(),
+{{/if}}
+    fieldAccess: fieldDeciderOf({ access, clock }),
+  };
+}

package/templates/init/platform/http/start-http-server.express.ts.tpl

@@ -34,7 +34,7 @@ export async function startHttpServer(served: Served, config: AppConfig): Promis
 {{/if}}
   app.use(express.json());
 {{#if docs.any}}
-  mountExpress(app, withDocumentation(served.routes, config), served.boundary);
+  mountExpress(app, withDocumentation(served.routes, config, served.boundary), served.boundary);
 {{/if}}
 {{#unless docs.any}}
   mountExpress(app, served.routes, served.boundary);

package/templates/init/platform/http/start-http-server.fastify.ts.tpl

@@ -29,7 +29,7 @@ export async function startHttpServer(served: Served, config: AppConfig): Promis
   mountFastify(app, served.fileRoutes, served.boundary);
 {{/if}}
 {{#if docs.any}}
-  mountFastify(app, withDocumentation(served.routes, config), served.boundary);
+  mountFastify(app, withDocumentation(served.routes, config, served.boundary), served.boundary);
 {{/if}}
 {{#unless docs.any}}
   mountFastify(app, served.routes, served.boundary);

package/templates/init/platform/http/start-http-server.hono.ts.tpl

@@ -31,7 +31,7 @@ export async function startHttpServer(served: Served, config: AppConfig): Promis
   guardTheDoor(app, served, config);
 {{/if}}
 {{#if docs.any}}
-  mountHono(app, withDocumentation(served.routes, config), served.boundary);
+  mountHono(app, withDocumentation(served.routes, config, served.boundary), served.boundary);
 {{/if}}
 {{#unless docs.any}}
   mountHono(app, served.routes, served.boundary);

package/templates/init/platform/http/start-http-server.nest.ts.tpl

@@ -38,7 +38,7 @@ interface Outgoing {
 export async function startHttpServer(served: Served, config: AppConfig): Promise<HttpServer> {
 {{#if files.http}}
 {{#if docs.any}}
-  const routes = [...withDocumentation(served.routes, config), ...served.fileRoutes];
+  const routes = [...withDocumentation(served.routes, config, served.boundary), ...served.fileRoutes];
 {{/if}}
 {{#unless docs.any}}
   const routes = [...served.routes, ...served.fileRoutes];
@@ -47,7 +47,7 @@ export async function startHttpServer(served: Served, config: AppConfig): Promis
 {{/if}}
 {{#unless files.http}}
 {{#if docs.any}}
-  const app = await NestFactory.create(createAppModule(withDocumentation(served.routes, config), served.boundary), {
+  const app = await NestFactory.create(createAppModule(withDocumentation(served.routes, config, served.boundary), served.boundary), {
     logger: ['error', 'warn'],
   });
 {{/if}}

package/templates/init/platform/http/with-documentation.ts.tpl

@@ -1,12 +1,20 @@
-import type { Route } from '@ddd-ts-kit/http';
+import type { ExecuteOptions, Route } from '@ddd-ts-kit/http';
 import { openApiDocumentsRoutes } from '@ddd-ts-kit/http/docs';
 import { generateOpenApi, routesByDocument } from '@ddd-ts-kit/http/openapi';
 import { securitySchemes } from '{{alias.platform}}/auth/security-schemes{{alias.ext}}';
 import type { AppConfig } from '{{alias.platform}}/config/app-config{{alias.ext}}';
 import { OPENAPI_DOCUMENTS } from '{{alias.platform}}/http/openapi-documents{{alias.ext}}';
 
-/** Adds the contract and its interactive page next to the routes, one per document of a split contract, unless documentation is switched off (API_DOCS, off in production by default). */
-export function withDocumentation(routes: readonly Route[], config: AppConfig): readonly Route[] {
+/**
+ * Adds the contract and its interactive page next to the routes, one per document of a split
+ * contract, unless documentation is switched off (API_DOCS, off in production by default). The
+ * contract is written with the error mapper and the representations the routes are mounted with.
+ */
+export function withDocumentation(
+  routes: readonly Route[],
+  config: AppConfig,
+  boundary: Pick<ExecuteOptions, 'errorMapper' | 'representations'>,
+): readonly Route[] {
   if (!config.docsEnabled) {
     return routes;
   }
@@ -17,6 +25,8 @@ export function withDocumentation(routes: readonly Route[], config: AppConfig):
       info: { title: title ?? config.serviceName, version: config.serviceVersion },
       routes: selected,
       securitySchemes,
+      ...(boundary.errorMapper === undefined ? {} : { errorMapper: boundary.errorMapper }),
+      ...(boundary.representations === undefined ? {} : { representations: boundary.representations }),
     }),
   }));
 

package/templates/init/platform/http/with-forms.ts.tpl

@@ -0,0 +1,7 @@
+import { defineRoutes, formRoutes, type Route } from '@ddd-ts-kit/http';
+import type { Presentation } from '{{alias.platform}}/http/presentation-of{{alias.ext}}';
+
+/** The routes, and the form of each one that declares `form`, at `GET /forms/<operationId>`, for the caller who asks. */
+export function withForms(routes: readonly Route[], { fieldAccess }: Presentation): readonly Route[] {
+  return defineRoutes(routes, formRoutes(routes, { fieldAccess }));
+}

package/templates/init/rules/application.md.tpl

@@ -30,7 +30,7 @@ paths:
 {{#if files.any}}
 - A file arrives in the command as a `FileUpload` of its area, which the bus stages before the transaction under a key of `FileKeys` (never a name or a path from the user) and scans; the handler records `upload.file`, its `StoredFile`, on the aggregate and calls `FileStaging.promoteOnCommit`, which moves it to its key with the commit. A direct upload is confirmed from the `PendingUpload` the aggregate kept, never from a key the client sends. The ports are named here, never a connector (`files/port-not-connector`); `npx ddd-ts-kit generate file-upload` writes the slice.
 {{/if}}
-- A query never saves, deletes or publishes (`application/command-query-separation`); it hands the access scope of the actor to its read port and never filters after loading.
+- A query never saves, deletes or publishes (`application/command-query-separation`); it hands the access scope of the actor to its read port and never filters after loading, and answers every field its read model holds: a field reserved to some callers is marked on the response schema with `withFieldAccess` of `@ddd-ts-kit/http`, never removed by a test on the roles of the actor (`authz/fields-by-schema`).
 - A read that takes criteria, a scope or a page is a search, never a list (`naming/search-not-list`): `Search<Things>Query` in `queries/search-<things>/` (`generate query ... --search`), `search...` on the port, its adapters and its fakes; one element or none stays `findById` or `findBy...`.
 {{#if literals.named}}
 - A permission, a role or a status is read from its declaration, `billingPermissions['invoice.issue']`, `InvoiceStatus.Issued`, never written as a string (`language/declared-vocabulary`); a number has a name (`clean/no-magic-number`).

package/templates/init/rules/presentation.md.tpl

@@ -27,7 +27,7 @@ paths:
 {{#if refusals.classes}}
 - Every route says who may call it (its group or its guards for a controller, `security` for a function) and the `DomainError` codes it can answer in `errors`; the mapping from code to status lives in one place, the error mapper.
 {{/if}}
-- No role or ownership test in a controller or a route (`authz/in-application`): a guard of the group asks for a role at the edge, the bus asks for the permission, a policy decides on loaded state.
+- No role or ownership test in a controller or a route (`authz/in-application`): a guard of the group asks for a role at the edge, the bus asks for the permission, a policy decides on loaded state. A field reserved to some callers is marked on its schema, `withFieldAccess(schema, { field: { read, write } })`, never by an `if` on a role (`authz/fields-by-schema`).{{#if presentation.negotiated}} Other media types are `produces` and `consumes` of the declaration (`generate representation`), from the same schema. A streamed export is `everyPage` over the search query of one page, sent through the bus page by page, never a query handler that answers a lazy list.{{/if}}{{#if presentation.forms}} A form is `defineForm` hints next to the body (`generate form`): shape and presentation, never a business rule; it `requires` the permission of its use case, asked as its `@Requires` asks it.{{/if}}
 - Request and response types are presentation types, one class or schema per file next to the controller (`*.body.ts`, `*.params.ts`, `*.answer.ts`...; `*.dto.ts` for function routes and under `shared/`): never an aggregate, never a row.
 {{#if schemas.shared}}
 - A shape several routes use is declared once, in `presentation/http/shared/<name>.schema.ts` (`npx ddd-ts-kit generate schema <context> <Name>`), or in `presentation/` of the shared kernel when several contexts answer with it (`generate schema shared-kernel <Name>`), and shared: the contract documents it once and every route refers to it. A route takes the part it needs from it (pick, omit, partial, extend) instead of copying it, and answers an identifier with `acceptedSchema` of `@ddd-ts-kit/http` (`schema/no-duplicate-shape`). Only presentation layers import a schema (`schema/presentation-only`).

package/templates/init/scripts/openapi.ts.tpl

@@ -1,5 +1,8 @@
 import fs from 'node:fs';
 import path from 'node:path';
+{{#if presentation.forms}}
+import { formDocumentsOf } from '@ddd-ts-kit/http';
+{{/if}}
 import { generateOpenApi, routesByDocument } from '@ddd-ts-kit/http/openapi';
 import { contractFormat, stringifyContract } from 'ddd-ts-kit/dist/contracts.js';
 import { offlineAuthenticator } from '{{alias.platform}}/auth/offline-authenticator{{alias.ext}}';
@@ -11,6 +14,9 @@ import { OPENAPI_DOCUMENTS } from '{{alias.platform}}/http/openapi-documents{{al
 
 // Generates the contract from the route definitions: openapi/openapi.yaml, or one file per
 // document of "openapi.documents" in ddd-ts-kit.config.json, in the format of "openapi.format";
+{{#if presentation.forms}}
+// the form of every route that declares one, whole, in openapi/forms/<operationId>.json;
+{{/if}}
 // with --check, fails when a committed file differs. Build products: never edit them by hand.
 const directory = path.resolve('openapi');
 const format = contractFormat();
@@ -20,8 +26,8 @@ const application = composeApplication(inertPersistence(), {
   authenticator: offlineAuthenticator,
 });
 
-const generated = new Map(
-  routesByDocument(application.routes, OPENAPI_DOCUMENTS).map(({ name, title, routes }) => [
+const generated = new Map([
+  ...routesByDocument(application.routes, OPENAPI_DOCUMENTS).map(({ name, title, routes }): [string, string] => [
     `${name}.${format}`,
     stringifyContract(
       generateOpenApi({
@@ -29,22 +35,30 @@ const generated = new Map(
         routes,
         securitySchemes,
         errorMapper: application.boundary.errorMapper,
+{{#if presentation.negotiated}}
+        representations: application.boundary.representations,
+{{/if}}
       }),
       format,
     ),
   ]),
-);
+{{#if presentation.forms}}
+  ...(await formDocumentsOf(application.routes)).map((form): [string, string] => [
+    `forms/${form.operation}.json`,
+    `${JSON.stringify({ jsonForms: form.jsonForms, blocks: form.blocks }, null, 2)}\n`,
+  ]),
+{{/if}}
+]);
 
 if (process.argv.includes('--check')) {
   reportDrift();
 } else {
-  fs.mkdirSync(directory, { recursive: true });
-
   for (const file of staleFiles()) {
     fs.rmSync(path.join(directory, file));
   }
 
   for (const [file, content] of generated) {
+    fs.mkdirSync(path.dirname(path.join(directory, file)), { recursive: true });
     fs.writeFileSync(path.join(directory, file), content);
   }
 }
@@ -66,9 +80,16 @@ function reportDrift(): void {
   }
 }
 
-/** The contracts left by another format or by a document that is gone. */
+/** The contracts left by another format or by a document that is gone{{#if presentation.forms}}, and the forms of routes that declare none any more{{/if}}: what else the folder holds is left alone. */
 function staleFiles(): string[] {
+{{#if presentation.forms}}
+  const forms = path.join(directory, 'forms');
+  const formFiles = fs.existsSync(forms) ? fs.readdirSync(forms).map((file) => `forms/${file}`) : [];
+  const present = [...(fs.existsSync(directory) ? fs.readdirSync(directory) : []), ...formFiles];
+{{/if}}
+{{#unless presentation.forms}}
   const present = fs.existsSync(directory) ? fs.readdirSync(directory) : [];
+{{/unless}}
 
   return present.filter((file) => /\.(?:json|yaml)$/.test(file) && !generated.has(file));
 }

package/templates/pipeline/biome.json.tpl

@@ -17,6 +17,7 @@
       "!**/package-lock.json",
       "!**/.dependency-cruiser.cjs",
       "!**/openapi/*.json",
+      "!**/openapi/forms",
       "!**/asyncapi.json",
       "!**/migrations/meta"
     ]

package/templates/pipeline/package-scripts.json

@@ -23,7 +23,7 @@
     "@biomejs/biome": "2.5.15",
     "@commitlint/cli": "^21.2.3",
     "@commitlint/config-conventional": "^21.2.3",
-    "@ddd-ts-kit/eslint-plugin": "^0.13.0",
+    "@ddd-ts-kit/eslint-plugin": "^0.15.0",
     "@eslint/js": "^10.0.1",
     "@typescript/native": "npm:typescript@~7.0.2",
     "@vitest/coverage-v8": "5.0.3",

package/templates/presets/identity/context/application/authorization/__context__.permissions.ts.tpl

@@ -0,0 +1,23 @@
+import { definePermissions } from '@ddd-ts-kit/auth';
+
+/**
+ * What a use case of {{context.kebab}} requires. The platform grants them to every signed-in person;
+ * inside an organisation, the policies of this context then decide from the rights of the actor's
+ * role and of the delegations lent to them.
+ */
+export const {{context.camel}}Permissions = definePermissions('{{context.kebab}}', {
+  // ddd-ts-kit:permissions
+  'account.provision': { description: 'Provision or refresh the account of the person who signs in' },
+  'account.deactivate': { description: 'Deactivate the account of the person who asks' },
+  'organisation.open': { description: 'Open an organisation and become its first owner' },
+  'member.invite': { description: 'Invite a person to an organisation, in a role' },
+  'invitation.accept': { description: 'Accept an invitation addressed to oneself' },
+  'invitation.decline': { description: 'Decline an invitation addressed to oneself' },
+  'invitation.revoke': { description: 'Take back an invitation of an organisation' },
+  'member.change-role': { description: 'Change the role of a member of an organisation' },
+  'member.remove': { description: 'Remove a member from an organisation' },
+  'member.search': { description: 'Search the members of an organisation' },
+  'delegation.grant': { description: 'Lend some of the rights of a role to another member, for a period' },
+  'delegation.revoke': { description: 'Revoke a delegation of an organisation' },
+  // /ddd-ts-kit:permissions
+});

package/templates/presets/identity/context/application/authorization/change-member-roles.policy.ts.tpl

@@ -0,0 +1,17 @@
+import { isAuthenticated, type Actor } from '@ddd-ts-kit/kernel';
+import { Policy } from '@ddd-ts-kit/kernel/declarations';
+import { OrganisationRights } from '{{alias.context}}/domain/value-objects/organisation-rights.vo{{alias.ext}}';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+import { {{context.camel}}Permissions } from '{{alias.context}}/application/authorization/{{context.kebab}}.permissions{{alias.ext}}';
+
+/** An account changes the roles of an organisation where it manages the members. */
+@Policy({{context.camel}}Permissions['member.change-role'], { name: '{{context.kebab}}.change-member-roles' })
+export class ChangeMemberRolesPolicy {
+  appliesTo(subject: unknown): subject is OrganisationRights {
+    return subject instanceof OrganisationRights;
+  }
+
+  allows(actor: Actor, rights: OrganisationRights): boolean {
+    return isAuthenticated(actor) && rights.accountId === actor.id && rights.includes(MemberRight.ManageMembers);
+  }
+}

package/templates/presets/identity/context/application/authorization/grant-delegations.policy.ts.tpl

@@ -0,0 +1,17 @@
+import { isAuthenticated, type Actor } from '@ddd-ts-kit/kernel';
+import { Policy } from '@ddd-ts-kit/kernel/declarations';
+import { OrganisationRights } from '{{alias.context}}/domain/value-objects/organisation-rights.vo{{alias.ext}}';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+import { {{context.camel}}Permissions } from '{{alias.context}}/application/authorization/{{context.kebab}}.permissions{{alias.ext}}';
+
+/** An account lends rights in an organisation where its role lets it delegate. */
+@Policy({{context.camel}}Permissions['delegation.grant'], { name: '{{context.kebab}}.grant-delegations' })
+export class GrantDelegationsPolicy {
+  appliesTo(subject: unknown): subject is OrganisationRights {
+    return subject instanceof OrganisationRights;
+  }
+
+  allows(actor: Actor, rights: OrganisationRights): boolean {
+    return isAuthenticated(actor) && rights.accountId === actor.id && rights.includes(MemberRight.GrantDelegations);
+  }
+}

package/templates/presets/identity/context/application/authorization/invite-members.policy.ts.tpl

@@ -0,0 +1,17 @@
+import { isAuthenticated, type Actor } from '@ddd-ts-kit/kernel';
+import { Policy } from '@ddd-ts-kit/kernel/declarations';
+import { OrganisationRights } from '{{alias.context}}/domain/value-objects/organisation-rights.vo{{alias.ext}}';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+import { {{context.camel}}Permissions } from '{{alias.context}}/application/authorization/{{context.kebab}}.permissions{{alias.ext}}';
+
+/** An account invites to an organisation when its role, or a delegation, lets it invite there. */
+@Policy({{context.camel}}Permissions['member.invite'], { name: '{{context.kebab}}.invite-members' })
+export class InviteMembersPolicy {
+  appliesTo(subject: unknown): subject is OrganisationRights {
+    return subject instanceof OrganisationRights;
+  }
+
+  allows(actor: Actor, rights: OrganisationRights): boolean {
+    return isAuthenticated(actor) && rights.accountId === actor.id && rights.includes(MemberRight.InviteMembers);
+  }
+}

package/templates/presets/identity/context/application/authorization/read-members.policy.ts.tpl

@@ -0,0 +1,17 @@
+import { isAuthenticated, type Actor } from '@ddd-ts-kit/kernel';
+import { Policy } from '@ddd-ts-kit/kernel/declarations';
+import { OrganisationRights } from '{{alias.context}}/domain/value-objects/organisation-rights.vo{{alias.ext}}';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+import { {{context.camel}}Permissions } from '{{alias.context}}/application/authorization/{{context.kebab}}.permissions{{alias.ext}}';
+
+/** An account searches the members of an organisation it belongs to. */
+@Policy({{context.camel}}Permissions['member.search'], { name: '{{context.kebab}}.read-members' })
+export class ReadMembersPolicy {
+  appliesTo(subject: unknown): subject is OrganisationRights {
+    return subject instanceof OrganisationRights;
+  }
+
+  allows(actor: Actor, rights: OrganisationRights): boolean {
+    return isAuthenticated(actor) && rights.accountId === actor.id && rights.includes(MemberRight.ReadMembers);
+  }
+}

package/templates/presets/identity/context/application/authorization/remove-members.policy.ts.tpl

@@ -0,0 +1,17 @@
+import { isAuthenticated, type Actor } from '@ddd-ts-kit/kernel';
+import { Policy } from '@ddd-ts-kit/kernel/declarations';
+import { OrganisationRights } from '{{alias.context}}/domain/value-objects/organisation-rights.vo{{alias.ext}}';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+import { {{context.camel}}Permissions } from '{{alias.context}}/application/authorization/{{context.kebab}}.permissions{{alias.ext}}';
+
+/** An account removes members of an organisation where it manages the members. */
+@Policy({{context.camel}}Permissions['member.remove'], { name: '{{context.kebab}}.remove-members' })
+export class RemoveMembersPolicy {
+  appliesTo(subject: unknown): subject is OrganisationRights {
+    return subject instanceof OrganisationRights;
+  }
+
+  allows(actor: Actor, rights: OrganisationRights): boolean {
+    return isAuthenticated(actor) && rights.accountId === actor.id && rights.includes(MemberRight.ManageMembers);
+  }
+}

package/templates/presets/identity/context/application/authorization/revoke-delegations.policy.ts.tpl

@@ -0,0 +1,17 @@
+import { isAuthenticated, type Actor } from '@ddd-ts-kit/kernel';
+import { Policy } from '@ddd-ts-kit/kernel/declarations';
+import { OrganisationRights } from '{{alias.context}}/domain/value-objects/organisation-rights.vo{{alias.ext}}';
+import { MemberRight } from '{{alias.context}}/domain/vocabularies/member-right.vocabulary{{alias.ext}}';
+import { {{context.camel}}Permissions } from '{{alias.context}}/application/authorization/{{context.kebab}}.permissions{{alias.ext}}';
+
+/** An account revokes the delegations of an organisation where its role lets it delegate. */
+@Policy({{context.camel}}Permissions['delegation.revoke'], { name: '{{context.kebab}}.revoke-delegations' })
+export class RevokeDelegationsPolicy {
+  appliesTo(subject: unknown): subject is OrganisationRights {
+    return subject instanceof OrganisationRights;
+  }
+
+  allows(actor: Actor, rights: OrganisationRights): boolean {
+    return isAuthenticated(actor) && rights.accountId === actor.id && rights.includes(MemberRight.GrantDelegations);
+  }
+}