@lssm/lib.contracts 0.0.0-canary-20251217083314 → 0.0.0-canary-20251219202229

package/dist/integrations/contracts.js

@@ -1,217 +1,215 @@
-import { ScalarTypeEnum } from "../schema/dist/ScalarTypeEnum.js";
-import { SchemaModel } from "../schema/dist/SchemaModel.js";
-import "../schema/dist/index.js";
+import { E5, x8 } from "../schema/dist/index.js";
 import { defineCommand, defineQuery } from "../spec.js";
 
 //#region src/integrations/contracts.ts
-const IntegrationConnectionRecord = new SchemaModel({
+const IntegrationConnectionRecord = new x8({
 	name: "IntegrationConnectionRecord",
 	fields: {
 		id: {
-			type: ScalarTypeEnum.ID(),
+			type: E5.ID(),
 			isOptional: false
 		},
 		tenantId: {
-			type: ScalarTypeEnum.ID(),
+			type: E5.ID(),
 			isOptional: false
 		},
 		integrationKey: {
-			type: ScalarTypeEnum.NonEmptyString(),
+			type: E5.NonEmptyString(),
 			isOptional: false
 		},
 		integrationVersion: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: false
 		},
 		label: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		ownershipMode: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		externalAccountId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		secretProvider: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		secretRef: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		status: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		environment: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		healthStatus: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		healthCheckedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		healthLatencyMs: {
-			type: ScalarTypeEnum.Float_unsecure(),
+			type: E5.Float_unsecure(),
 			isOptional: true
 		},
 		healthErrorCode: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		healthErrorMessage: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		usageRequestCount: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: true
 		},
 		usageSuccessCount: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: true
 		},
 		usageErrorCount: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: true
 		},
 		usageLastUsedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		usageLastErrorAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		usageLastErrorCode: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		updatedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		}
 	}
 });
-const CreateIntegrationConnectionInput = new SchemaModel({
+const CreateIntegrationConnectionInput = new x8({
 	name: "CreateIntegrationConnectionInput",
 	fields: {
 		tenantId: {
-			type: ScalarTypeEnum.ID(),
+			type: E5.ID(),
 			isOptional: false
 		},
 		integrationKey: {
-			type: ScalarTypeEnum.NonEmptyString(),
+			type: E5.NonEmptyString(),
 			isOptional: false
 		},
 		integrationVersion: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: false
 		},
 		label: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		ownershipMode: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		externalAccountId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		secretProvider: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		secretRef: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		environment: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		config: {
-			type: ScalarTypeEnum.JSONObject(),
+			type: E5.JSONObject(),
 			isOptional: false
 		}
 	}
 });
-const UpdateIntegrationConnectionInput = new SchemaModel({
+const UpdateIntegrationConnectionInput = new x8({
 	name: "UpdateIntegrationConnectionInput",
 	fields: {
 		connectionId: {
-			type: ScalarTypeEnum.ID(),
+			type: E5.ID(),
 			isOptional: false
 		},
 		label: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		status: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		ownershipMode: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		externalAccountId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		secretProvider: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		secretRef: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		config: {
-			type: ScalarTypeEnum.JSONObject(),
+			type: E5.JSONObject(),
 			isOptional: true
 		}
 	}
 });
-const DeleteIntegrationConnectionInput = new SchemaModel({
+const DeleteIntegrationConnectionInput = new x8({
 	name: "DeleteIntegrationConnectionInput",
 	fields: { connectionId: {
-		type: ScalarTypeEnum.ID(),
+		type: E5.ID(),
 		isOptional: false
 	} }
 });
-const ListIntegrationConnectionsInput = new SchemaModel({
+const ListIntegrationConnectionsInput = new x8({
 	name: "ListIntegrationConnectionsInput",
 	fields: {
 		tenantId: {
-			type: ScalarTypeEnum.ID(),
+			type: E5.ID(),
 			isOptional: false
 		},
 		category: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		status: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		}
 	}
 });
-const ListIntegrationConnectionsOutput = new SchemaModel({
+const ListIntegrationConnectionsOutput = new x8({
 	name: "ListIntegrationConnectionsOutput",
 	fields: { connections: {
 		type: IntegrationConnectionRecord,
@@ -219,42 +217,42 @@ const ListIntegrationConnectionsOutput = new SchemaModel({
 		isArray: true
 	} }
 });
-const TestIntegrationConnectionInput = new SchemaModel({
+const TestIntegrationConnectionInput = new x8({
 	name: "TestIntegrationConnectionInput",
 	fields: { connectionId: {
-		type: ScalarTypeEnum.ID(),
+		type: E5.ID(),
 		isOptional: false
 	} }
 });
-const TestIntegrationConnectionOutput = new SchemaModel({
+const TestIntegrationConnectionOutput = new x8({
 	name: "TestIntegrationConnectionOutput",
 	fields: {
 		success: {
-			type: ScalarTypeEnum.Boolean(),
+			type: E5.Boolean(),
 			isOptional: false
 		},
 		status: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		latencyMs: {
-			type: ScalarTypeEnum.Float_unsecure(),
+			type: E5.Float_unsecure(),
 			isOptional: true
 		},
 		error: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		errorCode: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		}
 	}
 });
-const DeleteIntegrationConnectionOutput = new SchemaModel({
+const DeleteIntegrationConnectionOutput = new x8({
 	name: "DeleteIntegrationConnectionOutput",
 	fields: { success: {
-		type: ScalarTypeEnum.Boolean(),
+		type: E5.Boolean(),
 		isOptional: false
 	} }
 });
@@ -385,4 +383,5 @@ function registerIntegrationContracts(registry) {
 }
 
 //#endregion
-export { CreateIntegrationConnection, DeleteIntegrationConnection, ListIntegrationConnections, TestIntegrationConnection, UpdateIntegrationConnection, integrationContracts, registerIntegrationContracts };
+export { CreateIntegrationConnection, DeleteIntegrationConnection, ListIntegrationConnections, TestIntegrationConnection, UpdateIntegrationConnection, integrationContracts, registerIntegrationContracts };
+//# sourceMappingURL=contracts.js.map

package/dist/integrations/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","names":["SchemaModel","ScalarTypeEnum","integrationContracts: Record<string, ContractSpec<any, any>>"],"sources":["../../src/integrations/contracts.ts"],"sourcesContent":["import { ScalarTypeEnum, SchemaModel } from '@lssm/lib.schema';\nimport { defineCommand, defineQuery, type ContractSpec } from '../spec';\nimport type { SpecRegistry } from '../registry';\n\nconst IntegrationConnectionRecord = new SchemaModel({\n  name: 'IntegrationConnectionRecord',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: false },\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    integrationKey: {\n      type: ScalarTypeEnum.NonEmptyString(),\n      isOptional: false,\n    },\n    integrationVersion: {\n      type: ScalarTypeEnum.Int_unsecure(),\n      isOptional: false,\n    },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    ownershipMode: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: false,\n    },\n    externalAccountId: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    secretProvider: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: false,\n    },\n    secretRef: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    status: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    environment: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    healthStatus: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    healthCheckedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    healthLatencyMs: {\n      type: ScalarTypeEnum.Float_unsecure(),\n      isOptional: true,\n    },\n    healthErrorCode: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    healthErrorMessage: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    usageRequestCount: {\n      type: ScalarTypeEnum.Int_unsecure(),\n      isOptional: true,\n    },\n    usageSuccessCount: {\n      type: ScalarTypeEnum.Int_unsecure(),\n      isOptional: true,\n    },\n    usageErrorCount: {\n      type: ScalarTypeEnum.Int_unsecure(),\n      isOptional: true,\n    },\n    usageLastUsedAt: {\n      type: ScalarTypeEnum.DateTime(),\n      isOptional: true,\n    },\n    usageLastErrorAt: {\n      type: ScalarTypeEnum.DateTime(),\n      isOptional: true,\n    },\n    usageLastErrorCode: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n  },\n});\n\nconst CreateIntegrationConnectionInput = new SchemaModel({\n  name: 'CreateIntegrationConnectionInput',\n  fields: {\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    integrationKey: {\n      type: ScalarTypeEnum.NonEmptyString(),\n      isOptional: false,\n    },\n    integrationVersion: {\n      type: ScalarTypeEnum.Int_unsecure(),\n      isOptional: false,\n    },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    ownershipMode: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: false,\n    },\n    externalAccountId: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    secretProvider: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: false,\n    },\n    secretRef: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    environment: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    config: { type: ScalarTypeEnum.JSONObject(), isOptional: false },\n  },\n});\n\nconst UpdateIntegrationConnectionInput = new SchemaModel({\n  name: 'UpdateIntegrationConnectionInput',\n  fields: {\n    connectionId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    status: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    ownershipMode: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    externalAccountId: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    secretProvider: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    secretRef: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    config: { type: ScalarTypeEnum.JSONObject(), isOptional: true },\n  },\n});\n\nconst DeleteIntegrationConnectionInput = new SchemaModel({\n  name: 'DeleteIntegrationConnectionInput',\n  fields: {\n    connectionId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nconst ListIntegrationConnectionsInput = new SchemaModel({\n  name: 'ListIntegrationConnectionsInput',\n  fields: {\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    category: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    status: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n  },\n});\n\nconst ListIntegrationConnectionsOutput = new SchemaModel({\n  name: 'ListIntegrationConnectionsOutput',\n  fields: {\n    connections: {\n      type: IntegrationConnectionRecord,\n      isOptional: false,\n      isArray: true,\n    },\n  },\n});\n\nconst TestIntegrationConnectionInput = new SchemaModel({\n  name: 'TestIntegrationConnectionInput',\n  fields: {\n    connectionId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nconst TestIntegrationConnectionOutput = new SchemaModel({\n  name: 'TestIntegrationConnectionOutput',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    status: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    latencyMs: { type: ScalarTypeEnum.Float_unsecure(), isOptional: true },\n    error: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    errorCode: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n  },\n});\n\nconst DeleteIntegrationConnectionOutput = new SchemaModel({\n  name: 'DeleteIntegrationConnectionOutput',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n  },\n});\n\nexport const CreateIntegrationConnection = defineCommand({\n  meta: {\n    name: 'integrations.connection.create',\n    version: 1,\n    description: 'Create a new integration connection for a tenant.',\n    goal: 'Provision a tenant-scoped connection to an external provider.',\n    context:\n      'Used by Ops or the App Studio to configure external integrations such as Stripe or Qdrant.',\n    owners: ['platform.integrations'],\n    tags: ['integration', 'connections'],\n    stability: 'experimental',\n  },\n  io: {\n    input: CreateIntegrationConnectionInput,\n    output: IntegrationConnectionRecord,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.integration.manage', version: 1 }],\n  },\n});\n\nexport const UpdateIntegrationConnection = defineCommand({\n  meta: {\n    name: 'integrations.connection.update',\n    version: 1,\n    description:\n      'Update metadata or credentials for an integration connection.',\n    goal: 'Allow secure rotation of credentials and metadata adjustments.',\n    context:\n      'Supports rotating API keys, toggling status, or updating labels for tenant integrations.',\n    owners: ['platform.integrations'],\n    tags: ['integration', 'connections'],\n    stability: 'experimental',\n  },\n  io: {\n    input: UpdateIntegrationConnectionInput,\n    output: IntegrationConnectionRecord,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.integration.manage', version: 1 }],\n  },\n});\n\nexport const DeleteIntegrationConnection = defineCommand({\n  meta: {\n    name: 'integrations.connection.delete',\n    version: 1,\n    description: 'Delete an integration connection for a tenant.',\n    goal: 'Safely remove credentials and disable connector usage.',\n    context:\n      'Ensures connections are de-provisioned when no longer needed or breached.',\n    owners: ['platform.integrations'],\n    tags: ['integration', 'connections'],\n    stability: 'experimental',\n  },\n  io: {\n    input: DeleteIntegrationConnectionInput,\n    output: DeleteIntegrationConnectionOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.integration.manage', version: 1 }],\n  },\n});\n\nexport const ListIntegrationConnections = defineQuery({\n  meta: {\n    name: 'integrations.connection.list',\n    version: 1,\n    description: 'List integration connections for a tenant.',\n    goal: 'Provide visibility into configured integrations and their status.',\n    context:\n      'Used by the App Studio and Ops flows to show bindings and health.',\n    owners: ['platform.integrations'],\n    tags: ['integration', 'connections'],\n    stability: 'experimental',\n  },\n  io: {\n    input: ListIntegrationConnectionsInput,\n    output: ListIntegrationConnectionsOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.integration.read', version: 1 }],\n  },\n});\n\nexport const TestIntegrationConnection = defineCommand({\n  meta: {\n    name: 'integrations.connection.test',\n    version: 1,\n    description:\n      'Run a health check against a configured integration connection.',\n    goal: 'Validate credentials and connectivity for external providers.',\n    context:\n      'Triggered manually or by background monitors to confirm provider availability.',\n    owners: ['platform.integrations'],\n    tags: ['integration', 'connections'],\n    stability: 'experimental',\n  },\n  io: {\n    input: TestIntegrationConnectionInput,\n    output: TestIntegrationConnectionOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.integration.manage', version: 1 }],\n  },\n});\n\nexport const integrationContracts: Record<string, ContractSpec<any, any>> = {\n  CreateIntegrationConnection,\n  UpdateIntegrationConnection,\n  DeleteIntegrationConnection,\n  ListIntegrationConnections,\n  TestIntegrationConnection,\n};\n\nexport function registerIntegrationContracts(registry: SpecRegistry) {\n  return registry\n    .register(CreateIntegrationConnection)\n    .register(UpdateIntegrationConnection)\n    .register(DeleteIntegrationConnection)\n    .register(ListIntegrationConnections)\n    .register(TestIntegrationConnection);\n}\n"],"mappings":";;;;AAIA,MAAM,8BAA8B,IAAIA,GAAY;CAClD,MAAM;CACN,QAAQ;EACN,IAAI;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EACpD,UAAU;GAAE,MAAMA,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,gBAAgB;GACd,MAAMA,GAAe,gBAAgB;GACrC,YAAY;GACb;EACD,oBAAoB;GAClB,MAAMA,GAAe,cAAc;GACnC,YAAY;GACb;EACD,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACpE,eAAe;GACb,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,mBAAmB;GACjB,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,gBAAgB;GACd,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,WAAW;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACxE,QAAQ;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACrE,aAAa;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACzE,cAAc;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EAC1E,iBAAiB;GAAE,MAAMA,GAAe,UAAU;GAAE,YAAY;GAAM;EACtE,iBAAiB;GACf,MAAMA,GAAe,gBAAgB;GACrC,YAAY;GACb;EACD,iBAAiB;GACf,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,oBAAoB;GAClB,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,mBAAmB;GACjB,MAAMA,GAAe,cAAc;GACnC,YAAY;GACb;EACD,mBAAmB;GACjB,MAAMA,GAAe,cAAc;GACnC,YAAY;GACb;EACD,iBAAiB;GACf,MAAMA,GAAe,cAAc;GACnC,YAAY;GACb;EACD,iBAAiB;GACf,MAAMA,GAAe,UAAU;GAC/B,YAAY;GACb;EACD,kBAAkB;GAChB,MAAMA,GAAe,UAAU;GAC/B,YAAY;GACb;EACD,oBAAoB;GAClB,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,WAAW;GAAE,MAAMA,GAAe,UAAU;GAAE,YAAY;GAAM;EAChE,WAAW;GAAE,MAAMA,GAAe,UAAU;GAAE,YAAY;GAAM;EACjE;CACF,CAAC;AAEF,MAAM,mCAAmC,IAAID,GAAY;CACvD,MAAM;CACN,QAAQ;EACN,UAAU;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,gBAAgB;GACd,MAAMA,GAAe,gBAAgB;GACrC,YAAY;GACb;EACD,oBAAoB;GAClB,MAAMA,GAAe,cAAc;GACnC,YAAY;GACb;EACD,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACpE,eAAe;GACb,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,mBAAmB;GACjB,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,gBAAgB;GACd,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,WAAW;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACxE,aAAa;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACzE,QAAQ;GAAE,MAAMA,GAAe,YAAY;GAAE,YAAY;GAAO;EACjE;CACF,CAAC;AAEF,MAAM,mCAAmC,IAAID,GAAY;CACvD,MAAM;CACN,QAAQ;EACN,cAAc;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EAC9D,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACnE,QAAQ;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACpE,eAAe;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EAC3E,mBAAmB;GACjB,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,gBAAgB;GACd,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,WAAW;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACvE,QAAQ;GAAE,MAAMA,GAAe,YAAY;GAAE,YAAY;GAAM;EAChE;CACF,CAAC;AAEF,MAAM,mCAAmC,IAAID,GAAY;CACvD,MAAM;CACN,QAAQ,EACN,cAAc;EAAE,MAAMC,GAAe,IAAI;EAAE,YAAY;EAAO,EAC/D;CACF,CAAC;AAEF,MAAM,kCAAkC,IAAID,GAAY;CACtD,MAAM;CACN,QAAQ;EACN,UAAU;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,UAAU;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACtE,QAAQ;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACrE;CACF,CAAC;AAEF,MAAM,mCAAmC,IAAID,GAAY;CACvD,MAAM;CACN,QAAQ,EACN,aAAa;EACX,MAAM;EACN,YAAY;EACZ,SAAS;EACV,EACF;CACF,CAAC;AAEF,MAAM,iCAAiC,IAAIA,GAAY;CACrD,MAAM;CACN,QAAQ,EACN,cAAc;EAAE,MAAMC,GAAe,IAAI;EAAE,YAAY;EAAO,EAC/D;CACF,CAAC;AAEF,MAAM,kCAAkC,IAAID,GAAY;CACtD,MAAM;CACN,QAAQ;EACN,SAAS;GAAE,MAAMC,GAAe,SAAS;GAAE,YAAY;GAAO;EAC9D,QAAQ;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACpE,WAAW;GAAE,MAAMA,GAAe,gBAAgB;GAAE,YAAY;GAAM;EACtE,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACnE,WAAW;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACxE;CACF,CAAC;AAEF,MAAM,oCAAoC,IAAID,GAAY;CACxD,MAAM;CACN,QAAQ,EACN,SAAS;EAAE,MAAMC,GAAe,SAAS;EAAE,YAAY;EAAO,EAC/D;CACF,CAAC;AAEF,MAAa,8BAA8B,cAAc;CACvD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,wBAAwB;EACjC,MAAM,CAAC,eAAe,cAAc;EACpC,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA+B,SAAS;GAAG,CAAC;EAChE;CACF,CAAC;AAEF,MAAa,8BAA8B,cAAc;CACvD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aACE;EACF,MAAM;EACN,SACE;EACF,QAAQ,CAAC,wBAAwB;EACjC,MAAM,CAAC,eAAe,cAAc;EACpC,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA+B,SAAS;GAAG,CAAC;EAChE;CACF,CAAC;AAEF,MAAa,8BAA8B,cAAc;CACvD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,wBAAwB;EACjC,MAAM,CAAC,eAAe,cAAc;EACpC,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA+B,SAAS;GAAG,CAAC;EAChE;CACF,CAAC;AAEF,MAAa,6BAA6B,YAAY;CACpD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,wBAAwB;EACjC,MAAM,CAAC,eAAe,cAAc;EACpC,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA6B,SAAS;GAAG,CAAC;EAC9D;CACF,CAAC;AAEF,MAAa,4BAA4B,cAAc;CACrD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aACE;EACF,MAAM;EACN,SACE;EACF,QAAQ,CAAC,wBAAwB;EACjC,MAAM,CAAC,eAAe,cAAc;EACpC,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA+B,SAAS;GAAG,CAAC;EAChE;CACF,CAAC;AAEF,MAAaC,uBAA+D;CAC1E;CACA;CACA;CACA;CACA;CACD;AAED,SAAgB,6BAA6B,UAAwB;AACnE,QAAO,SACJ,SAAS,4BAA4B,CACrC,SAAS,4BAA4B,CACrC,SAAS,4BAA4B,CACrC,SAAS,2BAA2B,CACpC,SAAS,0BAA0B"}

package/dist/integrations/docs/integrations.docblock.d.ts

@@ -3,4 +3,5 @@ import { DocBlock } from "@lssm/lib.contracts/docs";
 //#region src/integrations/docs/integrations.docblock.d.ts
 declare const tech_contracts_integrations_DocBlocks: DocBlock[];
 //#endregion
-export { tech_contracts_integrations_DocBlocks };
+export { tech_contracts_integrations_DocBlocks };
+//# sourceMappingURL=integrations.docblock.d.ts.map

package/dist/integrations/docs/integrations.docblock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.docblock.d.ts","names":[],"sources":["../../../src/integrations/docs/integrations.docblock.ts"],"sourcesContent":[],"mappings":";;;cAGa,uCAAuC"}

package/dist/integrations/docs/integrations.docblock.js

@@ -92,4 +92,5 @@ ContractSpec Studio persists tenant \`IntegrationConnection\` records in Postgre
 registerDocBlocks(tech_contracts_integrations_DocBlocks);
 
 //#endregion
-export { tech_contracts_integrations_DocBlocks };
+export { tech_contracts_integrations_DocBlocks };
+//# sourceMappingURL=integrations.docblock.js.map

package/dist/integrations/docs/integrations.docblock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.docblock.js","names":["tech_contracts_integrations_DocBlocks: DocBlock[]"],"sources":["../../../src/integrations/docs/integrations.docblock.ts"],"sourcesContent":["import type { DocBlock } from '@lssm/lib.contracts/docs';\nimport { registerDocBlocks } from '../../registry';\n\nexport const tech_contracts_integrations_DocBlocks: DocBlock[] = [\n  {\n    id: 'docs.tech.contracts.integrations',\n    title: 'ContractSpec Integrations',\n    summary:\n      'Provider-agnostic integration contracts: specs, connections, secrets, health checks, and runtime guards.',\n    kind: 'reference',\n    visibility: 'public',\n    route: '/docs/tech/contracts/integrations',\n    tags: ['tech', 'contracts', 'integrations'],\n    body: `# ContractSpec Integrations\n\nThis document describes the integration architecture that powers ContractSpec-based apps. It focuses on provider-agnostic contracts, secret management, health checks, and runtime guards.\n\n## Core Concepts\n\n- **IntegrationSpec** – declarative description of a provider that lists supported ownership modes, capability mappings, configuration schema, secret schema, health check policy, and documentation metadata.\n- **IntegrationConnection** – tenant/environment binding to a provider (\\`meta\\` + ownership mode + config + \\`secretRef\\`). Secrets are never embedded in specs or configs.\n- **AppIntegrationSlot** – blueprint-level requirement that declares which integration categories/capabilities must be satisfied at runtime (e.g. \\`primaryLLM\\`, \\`primaryVectorDb\\`).\n- **AppIntegrationBinding** – tenant-level slot → connection mapping.\n- **ResolvedIntegration** – runtime view containing slot metadata, connection details, and the resolved IntegrationSpec.\n\n## Registered Providers\n\nThe contracts library ships ten priority providers in \\`packages/libs/contracts/src/integrations/providers\\`:\n\n| Category      | Provider         | Key                         | Notes                                             |\n| ------------- | ---------------- | --------------------------- | ------------------------------------------------- |\n| payments      | Stripe           | \\`payments.stripe\\`          | Card + invoice flows, managed or BYOK credentials |\n| email (out)   | Postmark         | \\`email.postmark\\`           | Transactional email delivery                      |\n| email (in)    | Gmail API        | \\`email.gmail\\`              | Thread ingestion (OAuth BYOK or service account)  |\n| calendar      | Google Calendar  | \\`calendar.google\\`          | Event scheduling via service account              |\n| vector-db     | Qdrant           | \\`vectordb.qdrant\\`          | Embedding storage & search                        |\n| storage       | Google Cloud     | \\`storage.gcs\\`              | Object storage                                    |\n| ai-llm        | Mistral          | \\`ai-llm.mistral\\`           | Primary chat + embedding provider                 |\n| ai-voice      | ElevenLabs       | \\`ai-voice.elevenlabs\\`      | Text-to-speech synthesis                          |\n| sms           | Twilio SMS       | \\`sms.twilio\\`               | Urgent and fallback reminders                     |\n| open-banking  | Powens           | \\`openbanking.powens\\`       | Read-only account, transaction, and balance sync  |\n\nEach provider ships with:\n\n- Strongly typed adapter interfaces (\\`payments.ts\\`, \\`llm.ts\\`, etc.)\n- A concrete SDK-backed implementation under \\`providers/impls\\`\n- Unit tests validating adapter behaviour and health checks\n\n### Canonical registry builder\n\nTo list all shipped specs at runtime, use:\n\n- \\`createDefaultIntegrationSpecRegistry()\\` from \\`@lssm/lib.contracts/integrations/providers/registry\\`\n\n## Secret Management\n\nAll integrations rely on the \\`SecretProvider\\` abstraction defined in \\`integrations/secrets\\`. Providers ship with the contracts library and are orchestrated by the \\`SecretProviderManager\\` composite:\n\n- **EnvSecretProvider** (\\`env-secret-provider.ts\\`) – high-priority, read-only overrides backed by environment variables.\n  - Supports the \\`env://VARIABLE_NAME\\` scheme\n  - Supports overrides for other schemes via \\`?env=ALIAS\\` or derived uppercase keys\n- **GcpSecretManagerProvider** (\\`gcp-secret-manager.ts\\`) – versioned secrets stored in Google Cloud Secret Manager.\n  - Example: \\`gcp://projects/demo/secrets/stripe-key/versions/latest\\`\n- **AwsSecretsManagerProvider** (\\`aws-secret-manager.ts\\`) – AWS Secrets Manager backend.\n  - Example: \\`aws://secretsmanager/eu-west-1/my-secret?version=AWSCURRENT\\`\n  - Region may be in the reference or provided via \\`AWS_REGION\\` / \\`AWS_DEFAULT_REGION\\`\n- **ScalewaySecretManagerProvider** (\\`scaleway-secret-manager.ts\\`) – Scaleway Secret Manager backend.\n  - Example (id): \\`scw://secret-manager/fr-par/1234...-uuid?version=latest\\`\n  - Example (name, create+write): \\`scw://secret-manager/fr-par/my-secret-name\\`\n  - Requires \\`SCW_SECRET_KEY\\` (token) and \\`SCW_DEFAULT_PROJECT_ID\\` when creating secrets by name\n\nThe manager attempts providers in priority order (environment first, then cloud providers). Key points:\n\n- \\`secretRef\\` is a URI-like reference; raw secrets are never returned.\n- \\`IntegrationCallGuard\\` fetches and parses secrets before executing a provider adapter.\n- Local development can rely on \\`.env\\` files, while staging/production reference cloud secret stores.\n\n## Health Checks & Telemetry\n\n- Each IntegrationSpec optionally declares \\`healthCheck.method\\` and timeouts.\n- \\`IntegrationCallGuard\\` enforces connection status, wraps retries with exponential back-off, and emits telemetry events tagged with tenant/app/slot metadata.\n- Validation rules (\\`app-config/validation.ts\\`) surface issues at publish time (slot mismatch, unsupported ownership modes, missing capabilities, etc.).\n\n## Studio persistence (ContractSpec Studio)\n\nContractSpec Studio persists tenant \\`IntegrationConnection\\` records in Postgres (Prisma model \\`IntegrationConnection\\` in \\`@lssm/lib.database-contractspec-studio\\`) and exposes a platform-admin management surface (see the Studio platform admin panel).\n`,\n  },\n];\nregisterDocBlocks(tech_contracts_integrations_DocBlocks);\n"],"mappings":";;;;AAGA,MAAaA,wCAAoD,CAC/D;CACE,IAAI;CACJ,OAAO;CACP,SACE;CACF,MAAM;CACN,YAAY;CACZ,OAAO;CACP,MAAM;EAAC;EAAQ;EAAa;EAAe;CAC3C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0EP,CACF;AACD,kBAAkB,sCAAsC"}

package/dist/integrations/health.d.ts

@@ -18,4 +18,5 @@ declare class IntegrationHealthService {
   private emitTelemetry;
 }
 //#endregion
-export { IntegrationHealthCheckExecutor, IntegrationHealthCheckResult, IntegrationHealthService, IntegrationHealthServiceOptions };
+export { IntegrationHealthCheckExecutor, IntegrationHealthCheckResult, IntegrationHealthService, IntegrationHealthServiceOptions };
+//# sourceMappingURL=health.d.ts.map

package/dist/integrations/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","names":[],"sources":["../../src/integrations/health.ts"],"sourcesContent":[],"mappings":";;;;UAOiB,4BAAA,SAAqC;aACzC;AADb;AAIY,KAAA,8BAAA,GAA8B,CAAA,OAC/B,EAAA,kBACN,EAAA,GAAA,OAAO,CAAA,IAAA,CAAA;AAEK,UAAA,+BAAA,CAA+B;EAKnC,SAAA,CAAA,EAJC,2BAIuB;EAId,GAAA,CAAA,EAAA,GAAA,GAPT,IAOS;;AAOT,cAXD,wBAAA,CAWC;EACD,iBAAA,SAAA;EAAR,iBAAA,KAAA;EAAO,WAAA,CAAA,OAAA,CAAA,EARW,+BAQX;iBAFC,8BACC,iCACT,QAAQ"}

package/dist/integrations/health.js

@@ -66,4 +66,5 @@ function extractErrorCode(error) {
 }
 
 //#endregion
-export { IntegrationHealthService };
+export { IntegrationHealthService };
+//# sourceMappingURL=health.js.map

package/dist/integrations/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","names":["result: IntegrationHealthCheckResult"],"sources":["../../src/integrations/health.ts"],"sourcesContent":["import type { IntegrationConnectionHealth } from './connection';\nimport type {\n  IntegrationContext,\n  IntegrationInvocationStatus,\n  IntegrationTelemetryEmitter,\n} from './runtime';\n\nexport interface IntegrationHealthCheckResult extends IntegrationConnectionHealth {\n  metadata?: Record<string, string>;\n}\n\nexport type IntegrationHealthCheckExecutor = (\n  context: IntegrationContext\n) => Promise<void>;\n\nexport interface IntegrationHealthServiceOptions {\n  telemetry?: IntegrationTelemetryEmitter;\n  now?: () => Date;\n}\n\nexport class IntegrationHealthService {\n  private readonly telemetry?: IntegrationTelemetryEmitter;\n  private readonly nowFn: () => Date;\n\n  constructor(options: IntegrationHealthServiceOptions = {}) {\n    this.telemetry = options.telemetry;\n    this.nowFn = options.now ?? (() => new Date());\n  }\n\n  async check(\n    context: IntegrationContext,\n    executor: IntegrationHealthCheckExecutor\n  ): Promise<IntegrationHealthCheckResult> {\n    const start = this.nowFn();\n    try {\n      await executor(context);\n      const end = this.nowFn();\n      const result: IntegrationHealthCheckResult = {\n        status: 'connected',\n        checkedAt: end,\n        latencyMs: end.getTime() - start.getTime(),\n      };\n      this.emitTelemetry(context, result, 'success');\n      return result;\n    } catch (error) {\n      const end = this.nowFn();\n      const message = error instanceof Error ? error.message : 'Unknown error';\n      const code = extractErrorCode(error);\n      const result: IntegrationHealthCheckResult = {\n        status: 'error',\n        checkedAt: end,\n        latencyMs: end.getTime() - start.getTime(),\n        errorMessage: message,\n        errorCode: code,\n      };\n      this.emitTelemetry(context, result, 'error', code, message);\n      return result;\n    }\n  }\n\n  private emitTelemetry(\n    context: IntegrationContext,\n    result: IntegrationHealthCheckResult,\n    status: IntegrationInvocationStatus,\n    errorCode?: string,\n    errorMessage?: string\n  ) {\n    if (!this.telemetry) return;\n    this.telemetry.record({\n      tenantId: context.tenantId,\n      appId: context.appId,\n      environment: context.environment,\n      slotId: context.slotId,\n      integrationKey: context.spec.meta.key,\n      integrationVersion: context.spec.meta.version,\n      connectionId: context.connection.meta.id,\n      status,\n      durationMs: result.latencyMs,\n      errorCode,\n      errorMessage,\n      occurredAt: result.checkedAt ?? this.nowFn(),\n      metadata: {\n        ...(context.trace\n          ? {\n              blueprint: `${context.trace.blueprintName}.v${context.trace.blueprintVersion}`,\n              configVersion: context.trace.configVersion,\n            }\n          : {}),\n        status: result.status,\n      },\n    });\n  }\n}\n\nfunction extractErrorCode(error: unknown): string | undefined {\n  if (!error || typeof error !== 'object') return undefined;\n  const candidate = error as { code?: string | number };\n  if (candidate.code == null) return undefined;\n  return String(candidate.code);\n}\n"],"mappings":";AAoBA,IAAa,2BAAb,MAAsC;CACpC,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA2C,EAAE,EAAE;AACzD,OAAK,YAAY,QAAQ;AACzB,OAAK,QAAQ,QAAQ,8BAAc,IAAI,MAAM;;CAG/C,MAAM,MACJ,SACA,UACuC;EACvC,MAAM,QAAQ,KAAK,OAAO;AAC1B,MAAI;AACF,SAAM,SAAS,QAAQ;GACvB,MAAM,MAAM,KAAK,OAAO;GACxB,MAAMA,SAAuC;IAC3C,QAAQ;IACR,WAAW;IACX,WAAW,IAAI,SAAS,GAAG,MAAM,SAAS;IAC3C;AACD,QAAK,cAAc,SAAS,QAAQ,UAAU;AAC9C,UAAO;WACA,OAAO;GACd,MAAM,MAAM,KAAK,OAAO;GACxB,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,MAAM,OAAO,iBAAiB,MAAM;GACpC,MAAMA,SAAuC;IAC3C,QAAQ;IACR,WAAW;IACX,WAAW,IAAI,SAAS,GAAG,MAAM,SAAS;IAC1C,cAAc;IACd,WAAW;IACZ;AACD,QAAK,cAAc,SAAS,QAAQ,SAAS,MAAM,QAAQ;AAC3D,UAAO;;;CAIX,AAAQ,cACN,SACA,QACA,QACA,WACA,cACA;AACA,MAAI,CAAC,KAAK,UAAW;AACrB,OAAK,UAAU,OAAO;GACpB,UAAU,QAAQ;GAClB,OAAO,QAAQ;GACf,aAAa,QAAQ;GACrB,QAAQ,QAAQ;GAChB,gBAAgB,QAAQ,KAAK,KAAK;GAClC,oBAAoB,QAAQ,KAAK,KAAK;GACtC,cAAc,QAAQ,WAAW,KAAK;GACtC;GACA,YAAY,OAAO;GACnB;GACA;GACA,YAAY,OAAO,aAAa,KAAK,OAAO;GAC5C,UAAU;IACR,GAAI,QAAQ,QACR;KACE,WAAW,GAAG,QAAQ,MAAM,cAAc,IAAI,QAAQ,MAAM;KAC5D,eAAe,QAAQ,MAAM;KAC9B,GACD,EAAE;IACN,QAAQ,OAAO;IAChB;GACF,CAAC;;;AAIN,SAAS,iBAAiB,OAAoC;AAC5D,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;CAChD,MAAM,YAAY;AAClB,KAAI,UAAU,QAAQ,KAAM,QAAO;AACnC,QAAO,OAAO,UAAU,KAAK"}