internal/

Package platformenvironmentaction implements the Jamf Account platform environment action jamfplatform_account_platform_environment_assign_tenants, which adds tenants to a platform environment.

Package ssodomainaction implements the fire-once Jamf Account SSO domain action jamfplatform_account_sso_domain_verify — the "Verify" control beside a claimed domain on Jamf Account's Single Sign-On > Domains page.

Package appinstalleractions implements the fire-once Jamf Pro App Installer actions: jamfplatform_pro_retry_app_installer_installations (retry the failed installations of one deployment), jamfplatform_pro_retry_all_app_installer_installations (retry every failed App Installer installation in the tenant) and jamfplatform_pro_update_app_installer_version (move a MANUAL deployment to a newer version of its title).

Package jamfprotectactions implements the fire-once Jamf Pro Jamf Protect actions: jamfplatform_pro_jamf_protect_plans_sync (trigger an on-demand sync of the Jamf Protect plans catalog into Jamf Pro).

Package maintenanceactions implements the fire-once Jamf Pro device maintenance actions: jamfplatform_pro_redeploy_management_framework (redeploy the Jamf management framework to a computer) and jamfplatform_pro_flush_policy_logs (flush policy logs older than a given interval).

Package managed_software_updates implements the fire-once Jamf Pro Managed Software Updates actions: jamfplatform_pro_managed_software_update_plan (submit a group update plan) and jamfplatform_pro_managed_software_update_abandon_feature_toggle (break-glass force-stop of a stuck feature-toggle process).

Package mdmactions holds the Jamf Pro MDM command actions: send_blank_push, renew_mdm_profile, flush_mdm_commands, and one action per command sent through POST /pro/v2/mdm/commands.

Package patchactions implements the fire-once Jamf Pro patch actions: jamfplatform_pro_retry_patch_policy_logs (retry failed patch policy installation attempts).

SDK endpoints used:

Package accountprivileges provides the shared privilege-grid model used by the jamfplatform_pro_account and jamfplatform_pro_account_group resources.

Package accounttenant holds the helpers the Jamf Account platform environment constructs share for reading a tenant list.

Package actiontimeouts gives every action a context deadline and a `timeouts` attribute.

Package aischemas validates an AI Governance policy's settings against the vendor JSON Schema the Jamf Platform serves for that product and schema version, so a payload the service would refuse — or worse, accept and never apply — is caught during `terraform plan`.

Package availabletitles holds the shared model, data source schema, and SDK-mapping for the patch "available titles" catalog returned by /patchavailabletitles/sourceid/{id}.

Package collision detects, during `terraform plan`, a create or rename whose key already belongs to an object that exists in the tenant.

Package computertarget resolves a Jamf Pro computer inventory id from the serial-number / management-id / udid selector shared by device-targeting actions (e.g.

Package criteria holds shared building blocks for Jamf "smart" group and advanced-search criteria.

Package egressip reports the host's public source address, which is the address a Jamf-side IP allowlist or WAF rule is written against.

Package enumguard is the recurrence guard for restating a value the SDK already generates.

Package files provides shared upload-source plumbing used by resources that stream binary payloads to Jamf Pro (package binaries, package manifests, icons, ...).

Package groupcollision builds the name uniqueness namespaces for Jamf Pro device groups, shared by the four Jamf Pro group constructs and jamfplatform_device_group.

Package impact computes plan-time scope impact for scopeable and deployable objects, mirroring Jamf Pro's impact alert notifications.

Package invitationcommon holds the read/state-builder logic shared by the Jamf ProClassic enrollment-invitation resources (jamfplatform_pro_computer_invitation and jamfplatform_pro_mobile_device_invitation).

Package jsonvalue renders a decoded JSON value for a human-readable diagnostic.

Package ldapgroups resolves and validates Jamf Pro directory-service (LDAP / cloud-IdP) groups by name.

Package listtimeouts gives every list resource a context deadline and a `timeouts` attribute.

Package payloadhelpers provides shared mobileconfig plist parsing, masking, and diff-suppression helpers used by all configuration profile resources (macOS and mobile device).

Package permissions renders the Jamf API permissions a resource or data source requires into a Markdown table suitable for appending to a schema MarkdownDescription.

Package planmodifiers provides shared Terraform Plugin Framework plan modifiers for use across all resource packages.

Package plisthelpers provides generic, resource-agnostic plist (Apple Property List) primitives: parse, marshal, canonicalise, and structural equality.

Package progroups holds the machinery the four Jamf Pro device-group constructs share: jamfplatform_pro_smart_computer_group, jamfplatform_pro_static_computer_group, jamfplatform_pro_smart_mobile_device_group and jamfplatform_pro_static_mobile_device_group, each with a singular data source, a plural data source and a list resource.

Package scope provides shared schema attributes, builders, and validators for the <scope> block of Jamf Classic-API resources (policies, ebooks, mac applications, mobile device applications, OS X configuration profiles, mobile device configuration profiles, patch policies, restricted software).

Package securitycloudtenant resolves the ID of the Jamf Security Cloud tenant the provider's credentials act on, which is what a ZTNA gateway's or grouped gateway's `tenantIds` names when the configuration leaves it out.

Package validators provides shared Terraform Plugin Framework validators for use across all resource packages.

Package mcx_forced_payload implements the jamfplatform::mcx_forced_payload provider-defined function, which encodes a set of application preferences into a macOS managed ("forced") preferences payload for use as a configuration profile's payload.

Package mobileconfig assembles a complete macOS configuration profile (.mobileconfig) plist from native HCL payload objects.

Package platform_environment implements the jamfplatform_account_platform_environment resource, data sources and list resource backed by the Jamf Account Organization API.

Changing any attribute replaces the connection, because Jamf Account has no working update endpoint.

Package sso_domain implements the jamfplatform_account_sso_domain resource, data sources and list resource backed by the Jamf Account SSO API.

Package tenants implements the jamfplatform_account_tenants data source, a read-only view of the tenants a Jamf Account organization holds.

Package policy implements the jamfplatform_ai_governance_policy resource and data sources backed by the Jamf Platform AI Governance policies API.

Package tool implements the jamfplatform_ai_governance_tool and jamfplatform_ai_governance_tools data sources, which read the catalogue of AI tools Jamf can govern.

Package app_store_app implements the jamfplatform_apple_app_store_app data source: an App Store app's public listing, read so that jamfplatform_pro_mac_app_store_app and jamfplatform_pro_mobile_device_app can take their name, version, bundle identifier, store URL, description and icon from the store instead of from hand-copied values.

Package access_management_settings implements the jamfplatform_pro_access_management_settings singleton resource and data source backed by the Jamf Pro Access Management settings API (/v4/enrollment/access-management).

Package account implements the jamfplatform_pro_account resource, data source, and list resource for Jamf Pro ADMINISTRATOR login accounts (the people who sign in to Jamf Pro).

Package account_group implements the jamfplatform_pro_account_group resource (ProClassic /accounts/groupid), data source, and list resource (Pro v1 /account-groups).

Package account_privileges implements the jamfplatform_pro_account_privileges data source: a discovery surface for the privilege strings grantable on the tenant, categorised into the seven Jamf Pro privilege buckets.

Package activation_code implements the jamfplatform_pro_activation_code singleton resource and data source backed by the Jamf ProClassic /activationcode endpoint.

Package advanced_computer_search implements the jamfplatform_pro_advanced_computer_search resource, data source, and list resource backed by the Jamf ProClassic advancedcomputersearches API.

Package advanced_mobile_device_search implements the jamfplatform_pro_advanced_mobile_device_search resource, data source, and list resource backed by the Jamf Pro /v1/advanced-mobile-device-searches API.

Package advanced_user_search implements the jamfplatform_pro_advanced_user_search resource, data source, and list resource backed by the Jamf ProClassic advancedusersearches API.

Package advanced_volume_purchasing_content_search implements the jamfplatform_pro_advanced_volume_purchasing_content_search resource, data source, and list resource backed by the Jamf Pro /v1/advanced-user-content-searches API.

Package allowed_file_extension implements the jamfplatform_pro_allowed_file_extension resource, data source, and list resource backed by the Jamf ProClassic allowed file extensions API.

Package app_installer implements the jamfplatform_pro_app_installer resource, data source, and list resource backed by the Jamf Pro App Installer deployments API.

Package app_installer_settings implements the jamfplatform_pro_app_installer_settings singleton resource and data source backed by the Jamf Pro App Installer global settings API.

Package app_installer_title implements the read-only jamfplatform_pro_app_installer_title data source, which looks up a single App Installer catalog title by ID.

Package app_request_form_field implements the jamfplatform_pro_app_request_form_field resource, data source, and list resource backed by the Jamf Pro App Request form input fields API (Settings → Self Service → App Request → App Request Form).

Package app_request_settings implements the jamfplatform_pro_app_request_settings singleton resource backed by the Jamf Pro App Request settings API (Settings → Self Service → App Request).

Package app_store_country_codes implements the read-only jamfplatform_pro_app_store_country_codes data source, which surfaces the set of valid App Store country/region codes for the tenant (the values accepted by jamfplatform_pro_app_request_settings.app_store_locale).

Package automated_device_enrollment implements the jamfplatform_pro_automated_device_enrollment resource backed by the Jamf Pro /api/v1/device-enrollments API.

Package automated_device_enrollment_public_key implements the jamfplatform_pro_automated_device_enrollment_public_key data source backed by the Jamf Pro `/api/v1/device-enrollments/public-key` endpoint.

Package building implements the jamfplatform_pro_building resource, data source, and list resource backed by the Jamf Pro buildings API.

Package category implements the jamfplatform_pro_category resource, data source, and list resource backed by the Jamf Pro categories API.

Package class implements the jamfplatform_pro_class resource, data source, and list resource backed by the Jamf ProClassic /classes API.

Package cloud_distribution_point implements the jamfplatform_pro_cloud_distribution_point singleton resource and data source backed by the Jamf Pro cloud distribution point API (/api/pro/v1/cloud-distribution-point).

SDK endpoints used:

Package computer_check_in_settings implements the jamfplatform_pro_computer_check_in_settings singleton resource and data source backed by the Jamf Pro Client Check-In settings API.

Package computer_extension_attribute implements the jamfplatform_pro_computer_extension_attribute resource, data source, and list resource backed by the Jamf Pro /v1/computer-extension-attributes API.

Package computer_inventory_collection_settings implements the jamfplatform_pro_computer_inventory_collection_settings singleton resource and data source backed by the Jamf Pro Computer Inventory Collection Settings V2 API.

Package computer_invitation implements the jamfplatform_pro_computer_invitation resource, data source, and list resource backed by the Jamf ProClassic /computerinvitations API.

Package computer_prestage_enrollment implements the jamfplatform_pro_computer_prestage_enrollment resource, data source, and list resource backed by the Jamf Pro Computer PreStage Enrollment API (`pro.*ComputerPrestageV3` + scope V2 endpoint family).

Package department implements the jamfplatform_pro_department resource, data source, and list resource backed by the Jamf Pro departments API.

Package directory_binding implements the jamfplatform_pro_directory_binding resource, data source, and list resource backed by the Jamf ProClassic /directorybindings API.

Package disk_encryption_configuration implements the jamfplatform_pro_disk_encryption_configuration resource, data source, and list resource backed by the Jamf ProClassic /diskencryptionconfigurations API.

Package dock_item implements the jamfplatform_pro_dock_item resource, data source, and list resource backed by the Jamf ProClassic /dockitems API.

Package ebook implements the jamfplatform_pro_ebook resource, data source, and list resource backed by the Jamf ProClassic /ebooks API.

Package enrollment_customization implements the jamfplatform_pro_enrollment_customization resource, data source, and list resource backed by the Jamf Pro enrollment customization API.

Package file_share_distribution_point implements the jamfplatform_pro_file_share_distribution_point resource, data source, and list resource backed by the Jamf Pro distribution points API.

Package gsx_connection implements the jamfplatform_pro_gsx_connection_settings singleton resource and data source backed by the Jamf Pro GSX Connection settings API (Settings > Global > GSX connection).

Package ibeacon implements the jamfplatform_pro_ibeacon resource, data source, and list resource backed by the Jamf ProClassic ibeacons API.

Package icon implements the jamfplatform_pro_icon resource backed by the Jamf Pro icon upload API.

Package impact_alert_notification_settings implements the jamfplatform_pro_impact_alert_notification_settings singleton resource and data source backed by the Jamf Pro Impact Alert Notification settings API.

Package inventory_preload_record implements the jamfplatform_pro_inventory_preload_record resource, data source, and list resource backed by the Jamf Pro Inventory Preload records API.

Package jamf_connect implements the jamfplatform_pro_jamf_connect resource and data source, backed by the Jamf Pro Jamf Connect deployment settings API (/api/pro/v1/jamf-connect).

Package jamf_parent_settings implements the jamfplatform_pro_jamf_parent_settings singleton resource.

Package jamf_pro_server_url implements the read-only jamfplatform_pro_jamf_pro_server_url data source, which surfaces the Jamf Pro server URL clients check in against (Settings > Jamf Pro Server URL).

Package jamf_protect implements the jamfplatform_pro_jamf_protect registration singleton resource and the jamfplatform_pro_jamf_protect_plans plural data source, backed by the Jamf Pro Jamf Protect integration API (/api/pro/v1/jamf-protect).

Package jamf_teacher_settings implements the jamfplatform_pro_jamf_teacher_settings singleton resource.

Package ldap_server implements the jamfplatform_pro_ldap_server resource, data source, and list resource backed by the Jamf ProClassic /ldapservers API.

Package licensed_software implements the jamfplatform_pro_licensed_software resource, data source, and list resource backed by the Jamf ProClassic /licensedsoftware API.

Package local_admin_password_settings implements the jamfplatform_pro_local_admin_password_settings singleton resource.

Package location implements the jamfplatform_pro_volume_purchasing_location resource backed by the Jamf Pro /api/v1/volume-purchasing-locations API.

Package login_page implements the jamfplatform_pro_login_page_settings singleton resource and data source backed by the Jamf Pro login page (login-customization) settings API.

Package mac_app_store_app implements the jamfplatform_pro_mac_app_store_app resource, data source, and list resource backed by the Jamf ProClassic /macapplications API.

Package macos_configuration_profile implements the jamfplatform_pro_macos_configuration_profile resource, data source, and list resource backed by the Jamf ProClassic osxconfigurationprofiles API.

Package macos_onboarding implements the jamfplatform_pro_macos_onboarding singleton resource and data source backed by the Jamf Pro macOS Onboarding settings API (Settings > Self Service > macOS Onboarding), plus a parameterised eligible-items discovery data source.

Package managed_software_updates implements the jamfplatform_pro_managed_software_update singleton resource backed by the Jamf Pro Managed Software Updates feature-toggle API.

Package mdm_profile_settings implements the jamfplatform_pro_mdm_profile_settings singleton resource and data source backed by the Jamf Pro device communication settings API.

Package mobile_device_app implements the jamfplatform_pro_mobile_device_app resource, data source, and list resource backed by the Jamf ProClassic /mobiledeviceapplications API.

Package mobile_device_configuration_profile implements the jamfplatform_pro_mobile_device_configuration_profile resource, data source, and list resource backed by the Jamf ProClassic mobiledeviceconfigurationprofiles API.

Package mobile_device_enrollment_profile implements the jamfplatform_pro_mobile_device_enrollment_profile resource, data source, and list resource backed by the Jamf ProClassic mobile device enrollment profiles API.

Package mobile_device_extension_attribute implements the jamfplatform_pro_mobile_device_extension_attribute resource, data source, and list resource backed by the Jamf Pro /v1/mobile-device-extension-attributes API.

Package mobile_device_invitation implements the jamfplatform_pro_mobile_device_invitation resource, data source, and list resource backed by the Jamf ProClassic /mobiledeviceinvitations API.

Package mobile_device_prestage_enrollment implements the jamfplatform_pro_mobile_device_prestage_enrollment resource, data source, and list resource backed by the Jamf Pro Mobile Device PreStage Enrollment API (`pro.*MobileDevicePrestageV3` + scope V2 endpoint family).

Package mobile_device_provisioning_profile implements the jamfplatform_pro_mobile_device_provisioning_profile resource, data source, and list resource backed by the Jamf ProClassic mobile device provisioning profiles API.

Package network_segment implements the jamfplatform_pro_network_segment resource, data source, and list resource backed by the Jamf ProClassic networksegments API.

Package pkg (folder name `package`, Go identifier `pkg` to avoid the reserved-word collision) implements the jamfplatform_pro_package resource, data source, and list resource backed by the Jamf Pro /v1/packages API.

Package patch_external_source implements the jamfplatform_pro_patch_external_source resource, data source, and list resource backed by the Jamf ProClassic patch external sources API.

Package patch_internal_source implements the read-only jamfplatform_pro_patch_internal_source data source backed by the Jamf ProClassic patch internal sources API.

Package patch_policy implements the jamfplatform_pro_patch_policy resource, data source, and list resource.

Package patch_software_title implements the jamfplatform_pro_patch_software_title resource, data source, and list resource backed by the Jamf Pro v3 patch-software-title-configurations API, plus the one classic /patchsoftwaretitles call that mints a title's id (see crud.go header).

Package adcs implements the jamfplatform_pro_pki_adcs resource and data source backed by the Jamf Pro AD CS Settings API (Settings > Global > PKI certificates > Certificate Authorities; the Jamf Pro admin UI calls this the AD CS — Active Directory Certificate Services — connector).

Package certificate_authority implements the jamfplatform_pro_pki_certificate_authority data source backed by the Jamf Pro PKI Certificate Authority API (Settings > Global > PKI certificates > Certificate Authorities).

Package digicert implements the jamfplatform_pro_pki_digicert resource and data source backed by the Jamf Pro DigiCert Trust Lifecycle Manager API (Settings → Global → PKI certificates → Certificate Authorities).

Package json_web_token_configuration implements the jamfplatform_pro_pki_json_web_token_configuration resource, data source, and list resource backed by the Jamf ProClassic /jsonwebtokenconfigurations API.

Package venafi implements the jamfplatform_pro_pki_venafi resource and data source backed by the Jamf Pro Venafi certificate-authority API (`/api/v1/pki/venafi`).

Package policy implements the jamfplatform_pro_policy resource, data source, and list resource backed by the Jamf ProClassic policies API.

Package printer implements the jamfplatform_pro_printer resource, data source, and list resource backed by the Jamf ProClassic /printers API.

Package re_enrollment_settings implements the jamfplatform_pro_re_enrollment_settings singleton resource and data source.

Package removable_mac_address implements the jamfplatform_pro_removable_mac_address resource, data source, and list resource backed by the Jamf ProClassic removable Mac addresses API.

Package restricted_software implements the jamfplatform_pro_restricted_software resource, data source, and list resource backed by the Jamf ProClassic /restrictedsoftware API.

Package return_to_service implements the jamfplatform_pro_return_to_service resource, data source, and list resource.

Package script implements the jamfplatform_pro_script resource, data source, and list resource backed by the Jamf Pro scripts API.

Package self_service_branding_image implements the jamfplatform_pro_self_service_branding_image resource backed by the Jamf Pro Self Service branding image upload API.

Package self_service_branding_ios implements the jamfplatform_pro_self_service_branding_ios singleton resource and data source backed by the Jamf Pro Self Service iOS branding API (/api/pro/v1/self-service/branding/ios).

Package self_service_branding_macos implements the jamfplatform_pro_self_service_branding_macos singleton resource and data source backed by the Jamf Pro Self Service macOS branding API (/api/pro/v1/self-service/branding/macos).

Package self_service_macos_settings implements the jamfplatform_pro_self_service_macos_settings singleton resource and data source backed by the Jamf Pro Self Service settings API (Settings > Self Service > macOS).

Package self_service_plus_settings implements the jamfplatform_pro_self_service_plus_settings singleton resource and data source backed by the Jamf Pro Self Service Plus settings API.

Package service_discovery_enrollment implements the jamfplatform_pro_service_discovery_enrollment singleton resource and data source backed by the Jamf Pro service-discovery well-known settings API.

Package site implements the jamfplatform_pro_site resource, data source, and list resource backed by the Jamf ProClassic sites API.

Package smart_computer_group implements the jamfplatform_pro_smart_computer_group resource, its singular and plural data sources and its list resource: a criteria-driven computer group that can belong to a Jamf Pro site.

Package smart_mobile_device_group implements the jamfplatform_pro_smart_mobile_device_group resource, its singular and plural data sources, and its list resource, backed by /pro/v2/mobile-device-groups/smart-groups.

Package smtp_server implements the jamfplatform_pro_smtp_server singleton resource and data source, backed by the Jamf Pro SMTP Server settings API (Settings → System → SMTP Server).

Package sso_failover_url implements the jamfplatform_pro_sso_failover_url singleton resource and data source.

Package sso_settings implements the jamfplatform_pro_sso_settings singleton resource and data source.

Package static_computer_group implements jamfplatform_pro_static_computer_group as a resource, a singular data source, a plural data source and a list resource.

Package static_mobile_device_group implements the jamfplatform_pro_static_mobile_device_group resource, its singular and plural data sources, and the jamfplatform_pro_static_mobile_device_groups list resource, over the Jamf Pro /pro/v2 mobile device group endpoints.

Package supervision_identity implements the jamfplatform_pro_supervision_identity resource, data source, and list resource backed by the Jamf Pro supervision identities API — the certificate store behind Settings > Apple Configurator Enrollment.

Package tenant_id implements the jamfplatform_pro_tenant_id data source, which reads the platform tenant identifier of the Jamf Pro tenant the provider is scoped to.

Package user implements the jamfplatform_pro_user singular data source.

Package user_extension_attribute implements the jamfplatform_pro_user_extension_attribute resource, data source, and list resource backed by the Jamf Pro Classic /userextensionattributes API.

Package user_group implements the jamfplatform_pro_user_group resource, data source, and list resource backed by the Jamf ProClassic usergroups API.

Package user_initiated_enrollment_settings implements the jamfplatform_pro_user_initiated_enrollment_settings singleton resource and data source.

Package volume_purchasing_notification implements the jamfplatform_pro_volume_purchasing_notification resource, data source, and list resource.

Package vpp_assignment implements the jamfplatform_pro_vpp_assignment resource, data source, and list resource backed by the Jamf ProClassic /vppassignments API — user-based Volume Purchasing (VPP) content assignment that assigns account-owned apps and books to Jamf users / user groups.

Package vpp_invitation implements the jamfplatform_pro_vpp_invitation resource, data source, and list resource backed by the Jamf ProClassic /vppinvitations API — user-based Volume Purchasing (VPP) invitations that register users with a VPP account so apps and books can be assigned to them.

Package webhook implements the jamfplatform_pro_webhook resource, data source, and list resource backed by the Jamf ProClassic /webhooks API.

Package activation_profile implements the jamfplatform_security_cloud_activation_profile resource, backed by the Jamf Security Cloud enrollment API.

Package content_categories implements the jamfplatform_security_cloud_content_categories data source, a read-only view of the Jamf-curated content category catalogue.

Package device_group implements the jamfplatform_security_cloud_device_group resource, data sources and list resource backed by the Jamf Security Cloud device groups API.

Package dns_hostname_mappings implements the jamfplatform_security_cloud_dns_hostname_mappings resource and data source, backed by the Jamf Security Cloud custom DNS API.

Package dns_search_domain implements the jamfplatform_security_cloud_dns_search_domain resource and data source, backed by the Jamf Security Cloud custom DNS API.

Package dns_zone implements the jamfplatform_security_cloud_dns_zone resource, data sources and list resource backed by the Jamf Security Cloud custom DNS API.

SDK endpoints used:

Package ztna_app implements the jamfplatform_security_cloud_ztna_app resource, data sources and list resource backed by the Jamf Security Cloud ZTNA API.

Package ztna_gateway implements the jamfplatform_security_cloud_ztna_gateway resource, data sources and list resource backed by the Jamf Security Cloud ZTNA gateway API.

Package ztna_grouped_gateway implements the jamfplatform_security_cloud_ztna_grouped_gateway resource, data sources and list resource backed by the Jamf Security Cloud ZTNA grouped-gateway API.

Package ztna_predefined_apps implements the jamfplatform_security_cloud_ztna_predefined_apps data source, a read-only view of the Jamf-curated Zero Trust Network Access app templates.

Package ztna_shared_gateways implements the jamfplatform_security_cloud_ztna_shared_gateways data source, a read-only view of the Jamf-managed shared ZTNA gateway catalogue.

Package accrequire carries the acceptance suite's credential gate: the JAMFPLATFORM_ACC_REQUIRE promotion of a skip into a failure, the dual-read of renamed acceptance variables, and the report to hand Jamf Support when credentials are supplied and refused.

Package gatewaystub serves one canned gateway reply to the real SDK, so a test can assert on an error the SDK itself classified.

Package iconmirror holds the shared plan-modifier assertion for attributes Jamf Pro derives from a Self Service icon id.

Package keyedcategories holds the shared schema assertion for the elements of a Self Service category set or list.

Package listhydration is the estate-free guard for the list resource's config-generation path.

Package nullprior holds the schema-wide guards for STYLE_GUIDE rule 1a: AssertOptionalBlockLeavesPlanUnknown for the "block goes from omitted to declared" failure, and AssertNoPlanCollapse for the condition under which a singleton-block leaf may leave a null prior Unknown.