@wildo-ai/external-connectors-models 1.0.1

package/dist/esm/core/security.external-connectors-models.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAMxB;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,iCAAiC;IACjC,IAAI,SAAS;IAEb,0CAA0C;IAC1C,OAAO,YAAY;IAEnB,gDAAgD;IAChD,MAAM,WAAW;IAEjB,gCAAgC;IAChC,KAAK,UAAU;IAEf,kEAAkE;IAClE,MAAM,WAAW;IAEjB,0CAA0C;IAC1C,cAAc,mBAAmB;IAEjC,+CAA+C;IAC/C,cAAc,mBAAmB;IAEjC,uCAAuC;IACvC,UAAU,eAAe;IAEzB,qDAAqD;IACrD,eAAe,oBAAoB;CACpC;AAMD,oBAAY,qCAAqC;IAC/C,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,8CAA8C;IACxD,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,oBAAY,mCAAmC;IAC7C,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;CAC5C;AAMD;;;GAGG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAYpD,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;;iBAkBxD,CAAC;AAMH,eAAO,MAAM,uCAAuC;;;;;;iBAelD,CAAC;AAMH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAC5G,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAMxG;;;GAGG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAmI9C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}

package/dist/esm/core/security.external-connectors-models.schemas.js

@@ -0,0 +1,233 @@
+/**
+ * Security and Authentication Schemas for External Connectors
+ *
+ * This module defines authentication profiles that can be used across protocols.
+ * It integrates with OAuth2 to avoid duplication between API auth and OAuth2 config.
+ *
+ * Architecture:
+ * - ExternalProvider_Auth_Kind: The type of authentication
+ * - ExternalProvider_AuthProfile: How to authenticate with an API
+ * - OAuth2-linked profiles: Reference OAuth2 config instead of duplicating
+ *
+ * @see https://swagger.io/docs/specification/v3_0/authentication/
+ */
+import { z } from "zod";
+import { OAuth2_GrantType, OAuth2_TokenEndpoint_AuthMethod, OAuth2_PKCE_Method, OAuth2_Prompt, OAuth2_AccessType, } from './oauth2.enums.js';
+// =============================================================================
+// AUTH KIND ENUM
+// =============================================================================
+/**
+ * Authentication types supported by external providers
+ * Follows OpenAPI 3.0 Security Schemes with extensions
+ */
+export var ExternalProvider_Auth_Kind;
+(function (ExternalProvider_Auth_Kind) {
+    /** No authentication required */
+    ExternalProvider_Auth_Kind["NONE"] = "none";
+    /** API Key in header, query, or cookie */
+    ExternalProvider_Auth_Kind["API_KEY"] = "api_key";
+    /** Bearer token (OAuth2 access token or JWT) */
+    ExternalProvider_Auth_Kind["BEARER"] = "bearer";
+    /** HTTP Basic authentication */
+    ExternalProvider_Auth_Kind["BASIC"] = "basic";
+    /** OAuth2 authentication - links to OAuth2 provider definition */
+    ExternalProvider_Auth_Kind["OAUTH2"] = "oauth2";
+    /** HMAC signature-based authentication */
+    ExternalProvider_Auth_Kind["HMAC_SIGNATURE"] = "hmac_signature";
+    /** OpenID Connect (OAuth2 + identity layer) */
+    ExternalProvider_Auth_Kind["OPENID_CONNECT"] = "openid_connect";
+    /** Mutual TLS (client certificates) */
+    ExternalProvider_Auth_Kind["MUTUAL_TLS"] = "mutual_tls";
+    /** Frontend-specific secret (not exposed to user) */
+    ExternalProvider_Auth_Kind["FRONTEND_SECRET"] = "frontend_secret";
+})(ExternalProvider_Auth_Kind || (ExternalProvider_Auth_Kind = {}));
+// =============================================================================
+// AUTH CONFIGURATION ENUMS
+// =============================================================================
+export var ExternalProvider_Auth_ApiKey_Location;
+(function (ExternalProvider_Auth_ApiKey_Location) {
+    ExternalProvider_Auth_ApiKey_Location["HEADER"] = "header";
+    ExternalProvider_Auth_ApiKey_Location["QUERY"] = "query";
+    ExternalProvider_Auth_ApiKey_Location["COOKIE"] = "cookie";
+})(ExternalProvider_Auth_ApiKey_Location || (ExternalProvider_Auth_ApiKey_Location = {}));
+export var ExternalProvider_Auth_HMAC_Signature_Algorithm;
+(function (ExternalProvider_Auth_HMAC_Signature_Algorithm) {
+    ExternalProvider_Auth_HMAC_Signature_Algorithm["SHA256"] = "sha256";
+    ExternalProvider_Auth_HMAC_Signature_Algorithm["SHA512"] = "sha512";
+})(ExternalProvider_Auth_HMAC_Signature_Algorithm || (ExternalProvider_Auth_HMAC_Signature_Algorithm = {}));
+export var ExternalProvider_Auth_Bearer_Format;
+(function (ExternalProvider_Auth_Bearer_Format) {
+    ExternalProvider_Auth_Bearer_Format["JWT"] = "jwt";
+    ExternalProvider_Auth_Bearer_Format["API_KEY"] = "api_key";
+    ExternalProvider_Auth_Bearer_Format["OAUTH2_ACCESS_TOKEN"] = "oauth2_access_token";
+})(ExternalProvider_Auth_Bearer_Format || (ExternalProvider_Auth_Bearer_Format = {}));
+// =============================================================================
+// AUTH CONFIGURATION SCHEMA
+// =============================================================================
+/**
+ * Auth Configuration - references a secret
+ * This is the runtime configuration that specifies which secret to use
+ */
+export const ExternalProvider_Auth_ConfigurationSchema = z.object({
+    /** Type of authentication */
+    authKind: z.enum(ExternalProvider_Auth_Kind),
+    /** References to auth profiles this config applies to */
+    profileRefs: z.array(z.string()).optional(),
+    /** Is this the default auth for the provider? */
+    isDefault: z.boolean().optional(),
+    /** Reference to the secret (environment variable name or secret store key) */
+    secretRef: z.string(),
+});
+// =============================================================================
+// RATE LIMIT CONFIGURATION
+// =============================================================================
+export const ExternalProvider_RateLimitConfigurationSchema = z.object({
+    /** Maximum concurrent requests */
+    maxConcurrent: z.number().positive().optional().default(10),
+    /** Minimum time (ms) between requests */
+    minTime: z.number().positive().optional(),
+    /** Request reservoir (bucket size) */
+    reservoir: z.number().positive().optional(),
+    /** Reservoir refresh interval (ms) */
+    reservoirRefreshInterval: z.number().positive().optional(),
+    /** Amount to add to reservoir on refresh */
+    reservoirRefreshAmount: z.number().positive().optional(),
+    /** Request priority (higher = higher priority) */
+    priority: z.number().int().optional().default(0),
+});
+// =============================================================================
+// AUTH PROFILE BASE SCHEMA
+// =============================================================================
+export const ExternalProvider_AuthProfile_BaseSchema = z.object({
+    /** Type of authentication */
+    kind: z.enum(ExternalProvider_Auth_Kind),
+    /** Unique reference for this auth profile */
+    ref: z.string().optional(),
+    /** Is this the default auth profile? */
+    isDefault: z.boolean().default(false),
+    /** Where to place the authentication (header, query, cookie) */
+    location: z.enum(ExternalProvider_Auth_ApiKey_Location).default(ExternalProvider_Auth_ApiKey_Location.HEADER),
+    /** Field name for the authentication */
+    locationField: z.string().default("Authorization"),
+});
+// =============================================================================
+// DISCRIMINATED AUTH PROFILE SCHEMAS
+// =============================================================================
+/**
+ * Complete Auth Profile Schema - discriminated union by kind
+ * Each kind has specific configuration fields
+ */
+export const ExternalProvider_AuthProfile_Schema = z.discriminatedUnion("kind", [
+    // ─── API Key Authentication ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.API_KEY),
+        locationField: z.string().default("Authorization"),
+        /** Prefix before the key value (e.g., "Api-Key ") */
+        prefix: z.string().optional(),
+    }),
+    // ─── HMAC Signature Authentication ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.HMAC_SIGNATURE),
+        locationField: z.string().default("X-Signature"),
+        /** HMAC algorithm */
+        algorithm: z.enum(ExternalProvider_Auth_HMAC_Signature_Algorithm).default(ExternalProvider_Auth_HMAC_Signature_Algorithm.SHA256),
+        /** What data to sign (body, timestamp, etc.) */
+        signaturePayload: z.enum(['body', 'timestamp', 'custom']).optional(),
+        /** Timestamp header name (if needed) */
+        timestampHeader: z.string().optional(),
+        /** Nonce header name (if needed for replay protection) */
+        nonceHeader: z.string().optional(),
+    }),
+    // ─── Bearer Token Authentication ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.BEARER),
+        location: z.enum(ExternalProvider_Auth_ApiKey_Location).default(ExternalProvider_Auth_ApiKey_Location.HEADER),
+        locationField: z.string().default("Authorization"),
+        /** Prefix (usually "Bearer ") */
+        prefix: z.string().default("Bearer "),
+        /** Token format */
+        format: z.enum(ExternalProvider_Auth_Bearer_Format).default(ExternalProvider_Auth_Bearer_Format.JWT),
+    }),
+    // ─── OpenID Connect Authentication ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.OPENID_CONNECT),
+        /** OIDC Discovery URL */
+        discoveryUrl: z.url().optional(),
+        /** Issuer */
+        issuer: z.string().optional(),
+        /** Expected audience */
+        audience: z.string().optional(),
+        /** Token validation mode */
+        validationMode: z.enum(['jwks', 'introspection', 'local']).optional(),
+    }),
+    // ─── OAuth2 Authentication (UNIFIED APPROACH) ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.OAUTH2),
+        // ─── OAuth2 Provider Reference (Unified Approach) ───
+        /**
+         * Reference to OAuth2 provider definition
+         * Instead of duplicating OAuth2 config, reference the provider
+         * by its string identifier (e.g., "google", "microsoft")
+         */
+        oauth2ProviderRef: z.string().optional(),
+        // ─── Inline OAuth2 Configuration (Legacy/Override) ───
+        /** Authorization URL (can be overridden or used when no ref) */
+        authUrl: z.url().optional(),
+        /** Token URL */
+        tokenUrl: z.url().optional(),
+        /** Refresh URL (if different from tokenUrl) */
+        refreshUrl: z.url().optional(),
+        /** Required scopes for this auth profile */
+        scopes: z.array(z.string()).optional(),
+        /** Preferred grant type */
+        grantType: z.enum(OAuth2_GrantType).optional(),
+        /** Token endpoint auth method */
+        tokenEndpointAuthMethod: z.enum(OAuth2_TokenEndpoint_AuthMethod).optional(),
+        /** PKCE support */
+        pkce: z.boolean().optional(),
+        /** PKCE method */
+        pkceMethod: z.enum(OAuth2_PKCE_Method).optional(),
+        /** Prompt behavior */
+        prompt: z.enum(OAuth2_Prompt).optional(),
+        /** Access type (online/offline) */
+        accessType: z.enum(OAuth2_AccessType).optional(),
+        /** Extra authorization parameters */
+        extraAuthParams: z.record(z.string(), z.string()).optional(),
+        /** Extra token parameters */
+        extraTokenParams: z.record(z.string(), z.string()).optional(),
+        // ─── Token Format (for API calls) ───
+        /** How to format the token in Authorization header */
+        tokenFormat: z.enum(['bearer', 'token', 'oauth', 'custom']).default('bearer'),
+        /** Custom prefix if tokenFormat is 'custom' */
+        customTokenPrefix: z.string().optional(),
+    }),
+    // ─── Basic Authentication ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.BASIC),
+        /** Username field reference */
+        usernameRef: z.string().optional(),
+        /** Password field reference */
+        passwordRef: z.string().optional(),
+    }),
+    // ─── No Authentication ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.NONE),
+    }),
+    // ─── Frontend Secret ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.FRONTEND_SECRET),
+        /** Secret is only used in frontend context */
+        frontendOnly: z.boolean().default(true),
+    }),
+    // ─── Mutual TLS ───
+    ExternalProvider_AuthProfile_BaseSchema.extend({
+        kind: z.literal(ExternalProvider_Auth_Kind.MUTUAL_TLS),
+        /** Certificate reference */
+        certificateRef: z.string().optional(),
+        /** Private key reference */
+        privateKeyRef: z.string().optional(),
+        /** CA certificate reference */
+        caRef: z.string().optional(),
+    }),
+]);
+//# sourceMappingURL=security.external-connectors-models.schemas.js.map

package/dist/esm/core/security.external-connectors-models.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAN,IAAY,0BA2BX;AA3BD,WAAY,0BAA0B;IACpC,iCAAiC;IACjC,2CAAa,CAAA;IAEb,0CAA0C;IAC1C,iDAAmB,CAAA;IAEnB,gDAAgD;IAChD,+CAAiB,CAAA;IAEjB,gCAAgC;IAChC,6CAAe,CAAA;IAEf,kEAAkE;IAClE,+CAAiB,CAAA;IAEjB,0CAA0C;IAC1C,+DAAiC,CAAA;IAEjC,+CAA+C;IAC/C,+DAAiC,CAAA;IAEjC,uCAAuC;IACvC,uDAAyB,CAAA;IAEzB,qDAAqD;IACrD,iEAAmC,CAAA;AACrC,CAAC,EA3BW,0BAA0B,KAA1B,0BAA0B,QA2BrC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAN,IAAY,qCAIX;AAJD,WAAY,qCAAqC;IAC/C,0DAAiB,CAAA;IACjB,wDAAe,CAAA;IACf,0DAAiB,CAAA;AACnB,CAAC,EAJW,qCAAqC,KAArC,qCAAqC,QAIhD;AAED,MAAM,CAAN,IAAY,8CAGX;AAHD,WAAY,8CAA8C;IACxD,mEAAiB,CAAA;IACjB,mEAAiB,CAAA;AACnB,CAAC,EAHW,8CAA8C,KAA9C,8CAA8C,QAGzD;AAED,MAAM,CAAN,IAAY,mCAIX;AAJD,WAAY,mCAAmC;IAC7C,kDAAW,CAAA;IACX,0DAAmB,CAAA;IACnB,kFAA2C,CAAA;AAC7C,CAAC,EAJW,mCAAmC,KAAnC,mCAAmC,QAI9C;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChE,6BAA6B;IAC7B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IAE5C,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE3C,iDAAiD;IACjD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEjC,8EAA8E;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,CAAC,MAAM,CAAC;IACpE,kCAAkC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAE3D,yCAAyC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAEzC,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE3C,sCAAsC;IACtC,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE1D,4CAA4C;IAC5C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAExD,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAEH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,6BAA6B;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IAExC,6CAA6C;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE1B,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAErC,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAAC;IAE7G,wCAAwC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CACnD,CAAC,CAAC;AAUH,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9E,iCAAiC;IACjC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC;QACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,qDAAqD;QACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IAEF,wCAAwC;IACxC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAC1D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;QAChD,qBAAqB;QACrB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,MAAM,CAAC;QAChI,gDAAgD;QAChD,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpE,wCAAwC;QACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,0DAA0D;QAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IAEF,sCAAsC;IACtC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAAC;QAC7G,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,iCAAiC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;QACrC,mBAAmB;QACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,GAAG,CAAC;KACrG,CAAC;IAEF,wCAAwC;IACxC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAC1D,yBAAyB;QACzB,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,aAAa;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,wBAAwB;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,4BAA4B;QAC5B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtE,CAAC;IAEF,mDAAmD;IACnD,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAElD,uDAAuD;QACvD;;;;WAIG;QACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAExC,wDAAwD;QACxD,gEAAgE;QAChE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC3B,gBAAgB;QAChB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5B,+CAA+C;QAC/C,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAE9B,4CAA4C;QAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAEtC,2BAA2B;QAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;QAE9C,iCAAiC;QACjC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;QAE3E,mBAAmB;QACnB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC5B,kBAAkB;QAClB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;QAEjD,sBAAsB;QACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;QAExC,mCAAmC;QACnC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;QAEhD,qCAAqC;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAE5D,6BAA6B;QAC7B,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAE7D,uCAAuC;QACvC,sDAAsD;QACtD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7E,+CAA+C;QAC/C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACzC,CAAC;IAEF,+BAA+B;IAC/B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC;QACjD,+BAA+B;QAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,+BAA+B;QAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IAEF,4BAA4B;IAC5B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC;KACjD,CAAC;IAEF,0BAA0B;IAC1B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,eAAe,CAAC;QAC3D,8CAA8C;QAC9C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACxC,CAAC;IAEF,qBAAqB;IACrB,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,UAAU,CAAC;QACtD,4BAA4B;QAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,4BAA4B;QAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,+BAA+B;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;CACH,CAAC,CAAC"}

package/dist/esm/features/core.external-connectors-models.schemas.d.ts

@@ -0,0 +1,63 @@
+/**
+ * External Provider Capabilities - Core Definitions
+ *
+ * Capabilities represent standardized behaviors that can be implemented
+ * across multiple providers. Each capability has:
+ * - A standard interface (request/response schemas)
+ * - A transformer interface (for provider-specific ETL)
+ * - Discovery through provider definitions (not protocols)
+ *
+ * Capabilities are defined at the PROVIDER level, not protocol level.
+ * This enables provider-agnostic usage in the backend through
+ * the ETL (Extract-Transform-Load) pattern.
+ */
+/**
+ * Standard capabilities that providers can implement.
+ * Each capability maps to a standardized interface and ETL transformer.
+ *
+ * IMPORTANT: Each capability is fully independent - even if related
+ * (like email capabilities), they have separate transformers and files.
+ */
+export declare enum ExternalProvider_Capability {
+    /**
+     * Transactional email sending - password resets, receipts, notifications.
+     * Standard interface: StandardEmail_SendRequest/Response
+     * Transformer: EmailTransactional_Transformer
+     */
+    EMAIL_TRANSACTIONAL = "email_transactional",
+    /**
+     * Marketing email campaigns - newsletters, promotions.
+     * Standard interface: StandardMarketing_CampaignRequest/Response
+     * Transformer: EmailMarketing_Transformer
+     */
+    EMAIL_MARKETING = "email_marketing",
+    /**
+     * Billing provider — subscriptions, payments, invoices, metered usage.
+     * Standard interface: StandardBilling_Interface
+     * Transformer: Billing_Transformer
+     */
+    BILLING = "billing",
+    /**
+     * SMS sending - OTP codes, phone verification, notifications.
+     * Standard interface: StandardSMS_SendRequest/Response
+     * Transformer: SMS_Transformer
+     */
+    SMS = "sms"
+}
+/**
+ * Metadata about each capability for discovery and documentation.
+ */
+export declare const ExternalProvider_CapabilityMetadata: Record<ExternalProvider_Capability, {
+    displayName: string;
+    description: string;
+    category: "email" | "llm" | "auth" | "storage" | "billing" | "sms" | "other";
+}>;
+/**
+ * Base interface for all capability transformers.
+ * Each capability extends this with its specific transformation methods.
+ */
+export interface CapabilityTransformer<TCapability extends ExternalProvider_Capability = ExternalProvider_Capability> {
+    /** The capability this transformer implements */
+    readonly feature: TCapability;
+}
+//# sourceMappingURL=core.external-connectors-models.schemas.d.ts.map

package/dist/esm/features/core.external-connectors-models.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/features/core.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH;;;;;;GAMG;AACH,oBAAY,2BAA2B;IAKrC;;;;OAIG;IACH,mBAAmB,wBAAwB;IAE3C;;;;OAIG;IACH,eAAe,oBAAoB;IAenC;;;;OAIG;IACH,OAAO,YAAY;IAMnB;;;;OAIG;IACH,GAAG,QAAQ;CASZ;AAMD;;GAEG;AACH,eAAO,MAAM,mCAAmC,EAAE,MAAM,CAAC,2BAA2B,EAAE;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,CAAC;CAC9E,CAqBA,CAAC;AAMF;;;GAGG;AACH,MAAM,WAAW,qBAAqB,CAAC,WAAW,SAAS,2BAA2B,GAAG,2BAA2B;IAClH,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B"}

package/dist/esm/features/core.external-connectors-models.schemas.js

@@ -0,0 +1,101 @@
+/**
+ * External Provider Capabilities - Core Definitions
+ *
+ * Capabilities represent standardized behaviors that can be implemented
+ * across multiple providers. Each capability has:
+ * - A standard interface (request/response schemas)
+ * - A transformer interface (for provider-specific ETL)
+ * - Discovery through provider definitions (not protocols)
+ *
+ * Capabilities are defined at the PROVIDER level, not protocol level.
+ * This enables provider-agnostic usage in the backend through
+ * the ETL (Extract-Transform-Load) pattern.
+ */
+// ===============================================================
+// Capabilities Enum
+// ===============================================================
+/**
+ * Standard capabilities that providers can implement.
+ * Each capability maps to a standardized interface and ETL transformer.
+ *
+ * IMPORTANT: Each capability is fully independent - even if related
+ * (like email capabilities), they have separate transformers and files.
+ */
+export var ExternalProvider_Capability;
+(function (ExternalProvider_Capability) {
+    // ============================================================
+    // Email Capabilities (fully segregated)
+    // ============================================================
+    /**
+     * Transactional email sending - password resets, receipts, notifications.
+     * Standard interface: StandardEmail_SendRequest/Response
+     * Transformer: EmailTransactional_Transformer
+     */
+    ExternalProvider_Capability["EMAIL_TRANSACTIONAL"] = "email_transactional";
+    /**
+     * Marketing email campaigns - newsletters, promotions.
+     * Standard interface: StandardMarketing_CampaignRequest/Response
+     * Transformer: EmailMarketing_Transformer
+     */
+    ExternalProvider_Capability["EMAIL_MARKETING"] = "email_marketing";
+    // ============================================================
+    // LLM Capabilities (future)
+    // ============================================================
+    // LLM_TEXT_GENERATION = "llm_text_generation",
+    // LLM_STRUCTURED_OUTPUT = "llm_structured_output",
+    // LLM_STREAMING = "llm_streaming",
+    // LLM_MULTIMODAL = "llm_multimodal",
+    // ============================================================
+    // Billing Capabilities
+    // ============================================================
+    /**
+     * Billing provider — subscriptions, payments, invoices, metered usage.
+     * Standard interface: StandardBilling_Interface
+     * Transformer: Billing_Transformer
+     */
+    ExternalProvider_Capability["BILLING"] = "billing";
+    // ============================================================
+    // SMS Capabilities (Phase G2)
+    // ============================================================
+    /**
+     * SMS sending - OTP codes, phone verification, notifications.
+     * Standard interface: StandardSMS_SendRequest/Response
+     * Transformer: SMS_Transformer
+     */
+    ExternalProvider_Capability["SMS"] = "sms";
+    // ============================================================
+    // Other Capabilities (future)
+    // ============================================================
+    // OAUTH2_SSO = "oauth2_sso",
+    // WEBHOOK_RECEIVER = "webhook_receiver",
+    // FILE_STORAGE = "file_storage",
+})(ExternalProvider_Capability || (ExternalProvider_Capability = {}));
+// ===============================================================
+// Capability Metadata
+// ===============================================================
+/**
+ * Metadata about each capability for discovery and documentation.
+ */
+export const ExternalProvider_CapabilityMetadata = {
+    [ExternalProvider_Capability.EMAIL_TRANSACTIONAL]: {
+        displayName: "Transactional Email",
+        description: "Send transactional emails like password resets, receipts, and notifications",
+        category: "email",
+    },
+    [ExternalProvider_Capability.EMAIL_MARKETING]: {
+        displayName: "Marketing Email",
+        description: "Send marketing campaigns, newsletters, and promotional emails",
+        category: "email",
+    },
+    [ExternalProvider_Capability.BILLING]: {
+        displayName: "Billing",
+        description: "Manage subscriptions, payments, invoices, and metered usage via a billing provider",
+        category: "billing",
+    },
+    [ExternalProvider_Capability.SMS]: {
+        displayName: "SMS",
+        description: "Send SMS messages for OTP codes, phone verification, and notifications",
+        category: "sms",
+    },
+};
+//# sourceMappingURL=core.external-connectors-models.schemas.js.map

package/dist/esm/features/core.external-connectors-models.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../src/features/core.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,kEAAkE;AAClE,oBAAoB;AACpB,kEAAkE;AAElE;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,2BAyDX;AAzDD,WAAY,2BAA2B;IACrC,+DAA+D;IAC/D,wCAAwC;IACxC,+DAA+D;IAE/D;;;;OAIG;IACH,0EAA2C,CAAA;IAE3C;;;;OAIG;IACH,kEAAmC,CAAA;IAEnC,+DAA+D;IAC/D,4BAA4B;IAC5B,+DAA+D;IAE/D,+CAA+C;IAC/C,mDAAmD;IACnD,mCAAmC;IACnC,qCAAqC;IAErC,+DAA+D;IAC/D,uBAAuB;IACvB,+DAA+D;IAE/D;;;;OAIG;IACH,kDAAmB,CAAA;IAEnB,+DAA+D;IAC/D,8BAA8B;IAC9B,+DAA+D;IAE/D;;;;OAIG;IACH,0CAAW,CAAA;IAEX,+DAA+D;IAC/D,8BAA8B;IAC9B,+DAA+D;IAE/D,6BAA6B;IAC7B,yCAAyC;IACzC,iCAAiC;AACnC,CAAC,EAzDW,2BAA2B,KAA3B,2BAA2B,QAyDtC;AAED,kEAAkE;AAClE,sBAAsB;AACtB,kEAAkE;AAElE;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAI3C;IACH,CAAC,2BAA2B,CAAC,mBAAmB,CAAC,EAAE;QACjD,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,6EAA6E;QAC1F,QAAQ,EAAE,OAAO;KAClB;IACD,CAAC,2BAA2B,CAAC,eAAe,CAAC,EAAE;QAC7C,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,+DAA+D;QAC5E,QAAQ,EAAE,OAAO;KAClB;IACD,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE;QACrC,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,oFAAoF;QACjG,QAAQ,EAAE,SAAS;KACpB;IACD,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE;QACjC,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE,KAAK;KAChB;CACF,CAAC"}

package/dist/esm/features/email.external-connectors-models.schemas.d.ts

@@ -0,0 +1,181 @@
+/**
+ * Email Capabilities - Transformer Interfaces
+ *
+ * This file defines the transformer interfaces for email capabilities:
+ * - EMAIL_TRANSACTIONAL: Transactional email sending
+ * - EMAIL_MARKETING: Marketing campaign orchestration
+ *
+ * These capabilities are FULLY SEGREGATED - each has independent:
+ * - Transformer interface
+ * - Standard request/response types (in protocols/email.standard-interface.schemas.ts)
+ * - Provider implementations
+ */
+import { ExternalProvider_Capability, CapabilityTransformer } from "./core.external-connectors-models.schemas.js";
+import type { SMS_Transformer } from "./sms.external-connectors-models.schemas.js";
+import type { StandardBilling_Interface } from "../protocols/billing.standard-interface.schemas.js";
+import type { StandardEmail_SendRequest, StandardEmail_SendResponse, StandardEmail_SendTemplateRequest, StandardEmail_BatchRequest, StandardEmail_BatchResponse, StandardMarketing_CampaignRequest, StandardMarketing_CampaignResponse } from "../protocols/email.standard-interface.schemas.js";
+/**
+ * Context passed to parse methods when additional info from the request is needed.
+ * This allows parse methods to access recipient counts, emails, etc.
+ */
+export interface EmailTransactional_ParseContext<TRequest = unknown> {
+    /** The original standard request (for extracting recipient info) */
+    originalRequest?: TRequest;
+    /** Response headers from the provider */
+    headers?: Record<string, string>;
+}
+/**
+ * Transformer for EMAIL_TRANSACTIONAL capability.
+ * Providers implement this to transform standard requests to their API format.
+ */
+export interface EmailTransactional_Transformer extends CapabilityTransformer<typeof ExternalProvider_Capability.EMAIL_TRANSACTIONAL> {
+    feature: typeof ExternalProvider_Capability.EMAIL_TRANSACTIONAL;
+    /** Transform standard send request to provider format */
+    transformSendEmail(request: StandardEmail_SendRequest): unknown;
+    /** Parse provider response to standard format */
+    parseSendEmailResponse(response: unknown, context?: EmailTransactional_ParseContext<StandardEmail_SendRequest>): StandardEmail_SendResponse;
+    /** Transform template send request (requires SUPPORTS_TEMPLATES) */
+    transformSendTemplate?(request: StandardEmail_SendTemplateRequest): unknown;
+    parseSendTemplateResponse?(response: unknown, context?: EmailTransactional_ParseContext<StandardEmail_SendTemplateRequest>): StandardEmail_SendResponse;
+    /** Transform batch send request (requires SUPPORTS_BATCH_SENDING) */
+    transformBatchSend?(request: StandardEmail_BatchRequest): unknown;
+    parseBatchSendResponse?(response: unknown, context?: EmailTransactional_ParseContext<StandardEmail_BatchRequest>): StandardEmail_BatchResponse;
+}
+/**
+ * Generic HTTP client interface for marketing workflows.
+ * The actual implementation is injected at runtime by the orchestrator.
+ */
+export interface EmailMarketing_HttpClient {
+    get<T = Record<string, unknown>>(path: string): Promise<T>;
+    post<T = Record<string, unknown>>(path: string, body: Record<string, unknown>): Promise<T>;
+    put<T = Record<string, unknown>>(path: string, body: Record<string, unknown>): Promise<T>;
+    delete<T = Record<string, unknown>>(path: string): Promise<T>;
+}
+/**
+ * Context passed through the marketing workflow steps.
+ * Properly typed to avoid redundant casting in implementations.
+ */
+export interface EmailMarketing_WorkflowContext {
+    /** Correlation ID for the entire workflow (for logging/tracing) */
+    correlationId: string;
+    /** Provider-specific HTTP client - properly typed, no casting needed */
+    client: EmailMarketing_HttpClient;
+    /** Accumulated state from previous steps (for provider-specific data) */
+    state: Map<string, unknown>;
+    /** Logger for workflow steps (optional) */
+    log?: (message: string, data?: unknown) => void;
+}
+/**
+ * Error data for marketing workflow failures.
+ * Includes information for potential rollback.
+ */
+export interface EmailMarketing_WorkflowErrorData {
+    message: string;
+    step: "prepareAudience" | "prepareContent" | "createCampaign" | "executeCampaign";
+    providerError?: unknown;
+    rollbackData?: {
+        listId?: string;
+        campaignId?: string;
+        listCreated?: boolean;
+    };
+}
+/**
+ * Create a workflow error with rollback information.
+ * Use this instead of throwing plain errors in workflow steps.
+ */
+export declare function createEmailMarketing_WorkflowError(message: string, step: EmailMarketing_WorkflowErrorData["step"], providerError?: unknown, rollbackData?: EmailMarketing_WorkflowErrorData["rollbackData"]): Error & EmailMarketing_WorkflowErrorData;
+/**
+ * Type guard to check if an error is a workflow error.
+ */
+export declare function isEmailMarketing_WorkflowError(error: unknown): error is Error & EmailMarketing_WorkflowErrorData;
+/**
+ * Result of audience preparation step.
+ */
+export interface EmailMarketing_AudienceResult {
+    /** Provider's list/audience ID */
+    listId: string;
+    /** Number of contacts in the list */
+    audienceSize: number;
+    /** Was a new list created? */
+    listCreated: boolean;
+    /** How many contacts were added? */
+    contactsAdded: number;
+    /** Provider-specific data for next steps */
+    providerData?: unknown;
+}
+/**
+ * Result of content preparation step.
+ */
+export interface EmailMarketing_ContentResult {
+    /** Provider's template/content ID (if applicable) */
+    templateId?: string;
+    /** Was content prepared as template or inline? */
+    contentType: "template" | "inline";
+    /** Provider-specific data for next steps */
+    providerData?: unknown;
+}
+/**
+ * Result of campaign creation step.
+ */
+export interface EmailMarketing_CampaignResult {
+    /** Provider's campaign ID */
+    campaignId: string;
+    /** Current status */
+    status: "draft" | "ready";
+    /** Provider-specific data for execution */
+    providerData?: unknown;
+}
+/**
+ * Multi-step workflow for marketing campaigns.
+ * Each step can result in 1+ API calls to the provider.
+ */
+export interface EmailMarketing_Workflow {
+    /**
+     * Step 1: Ensure audience/list exists and is populated
+     * May involve: create list, add/update contacts
+     */
+    prepareAudience(campaign: StandardMarketing_CampaignRequest, context: EmailMarketing_WorkflowContext): Promise<EmailMarketing_AudienceResult>;
+    /**
+     * Step 2: Prepare content/template
+     * May involve: create template, upload content
+     */
+    prepareContent(campaign: StandardMarketing_CampaignRequest, audienceResult: EmailMarketing_AudienceResult, context: EmailMarketing_WorkflowContext): Promise<EmailMarketing_ContentResult>;
+    /**
+     * Step 3: Create the campaign
+     * May involve: create campaign, link to list and content
+     */
+    createCampaign(campaign: StandardMarketing_CampaignRequest, audienceResult: EmailMarketing_AudienceResult, contentResult: EmailMarketing_ContentResult, context: EmailMarketing_WorkflowContext): Promise<EmailMarketing_CampaignResult>;
+    /**
+     * Step 4: Execute/schedule the campaign
+     * May involve: send immediately, schedule for later
+     */
+    executeCampaign(campaign: StandardMarketing_CampaignRequest, campaignResult: EmailMarketing_CampaignResult, context: EmailMarketing_WorkflowContext): Promise<StandardMarketing_CampaignResponse>;
+}
+/**
+ * Transformer for EMAIL_MARKETING capability.
+ * Providers implement this to handle marketing campaign workflows.
+ */
+export interface EmailMarketing_Transformer extends CapabilityTransformer<typeof ExternalProvider_Capability.EMAIL_MARKETING> {
+    feature: typeof ExternalProvider_Capability.EMAIL_MARKETING;
+    /** Multi-step workflow for campaign execution */
+    workflow: EmailMarketing_Workflow;
+}
+/**
+ * Map of all available capability transformers.
+ * Each capability has its own independent transformer type.
+ *
+ * This type is used at the PROVIDER DEFINITION level, not protocol level.
+ */
+export type ProviderCapabilityTransformers = {
+    [ExternalProvider_Capability.EMAIL_TRANSACTIONAL]?: EmailTransactional_Transformer;
+    [ExternalProvider_Capability.EMAIL_MARKETING]?: EmailMarketing_Transformer;
+    /**
+     * Billing capability transformer class.
+     * Stored as a constructor (instantiated with credentials at startup).
+     * Must implement both StandardBilling_Interface (billing operations) and CapabilityTransformer (discovery).
+     */
+    [ExternalProvider_Capability.BILLING]?: new (secretKey: string, apiVersion?: string) => StandardBilling_Interface & CapabilityTransformer;
+    /** SMS capability transformer (Phase G2) */
+    [ExternalProvider_Capability.SMS]?: SMS_Transformer;
+};
+//# sourceMappingURL=email.external-connectors-models.schemas.d.ts.map

package/dist/esm/features/email.external-connectors-models.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/features/email.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAC/G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,iCAAiC,EACjC,kCAAkC,EACnC,MAAM,+CAA+C,CAAC;AAMvD;;;GAGG;AACH,MAAM,WAAW,+BAA+B,CAAC,QAAQ,GAAG,OAAO;IACjE,oEAAoE;IACpE,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAMD;;;GAGG;AACH,MAAM,WAAW,8BAA+B,SAAQ,qBAAqB,CAAC,OAAO,2BAA2B,CAAC,mBAAmB,CAAC;IACnI,OAAO,EAAE,OAAO,2BAA2B,CAAC,mBAAmB,CAAC;IAMhE,yDAAyD;IACzD,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC;IAEhE,iDAAiD;IACjD,sBAAsB,CACpB,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE,+BAA+B,CAAC,yBAAyB,CAAC,GACnE,0BAA0B,CAAC;IAM9B,oEAAoE;IACpE,qBAAqB,CAAC,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC;IAC5E,yBAAyB,CAAC,CACxB,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE,+BAA+B,CAAC,iCAAiC,CAAC,GAC3E,0BAA0B,CAAC;IAE9B,qEAAqE;IACrE,kBAAkB,CAAC,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC;IAClE,sBAAsB,CAAC,CACrB,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE,+BAA+B,CAAC,0BAA0B,CAAC,GACpE,2BAA2B,CAAC;CAChC;AAMD;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3F,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IAEtB,wEAAwE;IACxE,MAAM,EAAE,yBAAyB,CAAC;IAElC,yEAAyE;IACzE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5B,2CAA2C;IAC3C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CACjD;AAED;;;GAGG;AACH,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;IAClF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,gCAAgC,CAAC,MAAM,CAAC,EAC9C,aAAa,CAAC,EAAE,OAAO,EACvB,YAAY,CAAC,EAAE,gCAAgC,CAAC,cAAc,CAAC,GAC9D,KAAK,GAAG,gCAAgC,CAO1C;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,KAAK,GAAG,gCAAgC,CAMnD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IAEf,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;IAErB,8BAA8B;IAC9B,WAAW,EAAE,OAAO,CAAC;IAErB,oCAAoC;IACpC,aAAa,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kDAAkD;IAClD,WAAW,EAAE,UAAU,GAAG,QAAQ,CAAC;IAEnC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IAEnB,qBAAqB;IACrB,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAE1B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,eAAe,CACb,QAAQ,EAAE,iCAAiC,EAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAE1C;;;OAGG;IACH,cAAc,CACZ,QAAQ,EAAE,iCAAiC,EAC3C,cAAc,EAAE,6BAA6B,EAC7C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAEzC;;;OAGG;IACH,cAAc,CACZ,QAAQ,EAAE,iCAAiC,EAC3C,cAAc,EAAE,6BAA6B,EAC7C,aAAa,EAAE,4BAA4B,EAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAE1C;;;OAGG;IACH,eAAe,CACb,QAAQ,EAAE,iCAAiC,EAC3C,cAAc,EAAE,6BAA6B,EAC7C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAMD;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB,CAAC,OAAO,2BAA2B,CAAC,eAAe,CAAC;IAC3H,OAAO,EAAE,OAAO,2BAA2B,CAAC,eAAe,CAAC;IAE5D,iDAAiD;IACjD,QAAQ,EAAE,uBAAuB,CAAC;CACnC;AAMD;;;;;GAKG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,CAAC,2BAA2B,CAAC,mBAAmB,CAAC,CAAC,EAAE,8BAA8B,CAAC;IACnF,CAAC,2BAA2B,CAAC,eAAe,CAAC,CAAC,EAAE,0BAA0B,CAAC;IAC3E;;;;OAIG;IACH,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,yBAAyB,GAAG,qBAAqB,CAAC;IAC1I,4CAA4C;IAC5C,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;CACrD,CAAC"}

package/dist/esm/features/email.external-connectors-models.schemas.js

@@ -0,0 +1,34 @@
+/**
+ * Email Capabilities - Transformer Interfaces
+ *
+ * This file defines the transformer interfaces for email capabilities:
+ * - EMAIL_TRANSACTIONAL: Transactional email sending
+ * - EMAIL_MARKETING: Marketing campaign orchestration
+ *
+ * These capabilities are FULLY SEGREGATED - each has independent:
+ * - Transformer interface
+ * - Standard request/response types (in protocols/email.standard-interface.schemas.ts)
+ * - Provider implementations
+ */
+import { ExternalProvider_Capability } from "./core.external-connectors-models.schemas.js";
+/**
+ * Create a workflow error with rollback information.
+ * Use this instead of throwing plain errors in workflow steps.
+ */
+export function createEmailMarketing_WorkflowError(message, step, providerError, rollbackData) {
+    const error = new Error(message);
+    error.name = "EmailMarketing_WorkflowError";
+    error.step = step;
+    error.providerError = providerError;
+    error.rollbackData = rollbackData;
+    return error;
+}
+/**
+ * Type guard to check if an error is a workflow error.
+ */
+export function isEmailMarketing_WorkflowError(error) {
+    return (error instanceof Error &&
+        error.name === "EmailMarketing_WorkflowError" &&
+        "step" in error);
+}
+//# sourceMappingURL=email.external-connectors-models.schemas.js.map