@wildo-ai/external-connectors-models 1.1.3 → 1.1.4

package/dist/esm/companion-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"companion-exports.d.ts","sourceRoot":"","sources":["../../../src/companion-exports.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,SAAS,CAAC"}
+{"version":3,"file":"companion-exports.d.ts","sourceRoot":"","sources":["../../src/companion-exports.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,SAAS,CAAC"}

package/dist/esm/core/commons.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commons.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA6C,0BAA0B,EAAsF,MAAM,+CAA+C,CAAC;AAG1N;;;;;;;;;;;;;;;GAeG;AACH,oBAAY,sCAAsC;IAEhD,QAAQ,aAAa;IACrB,kBAAkB,uBAAuB;IAIzC,YAAY,iBAAiB;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,0BAA0B;IAE/C,8EAA8E;IAC9E,cAAc,mBAAmB;IACjC;;;;;;;;;;OAUG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;;;;;OAaG;IACH,4BAA4B,iCAAiC;IAC7D,iGAAiG;IACjG,cAAc,mBAAmB;IACjC,mFAAmF;IACnF,cAAc,mBAAmB;IAGjC,cAAc,mBAAmB;IAGjC,UAAU,eAAe;IAIzB,gBAAgB,qBAAqB;IAGrC,YAAY,iBAAiB;IAG7B,YAAY,iBAAiB;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;EAY7B,CAAC;AACZ,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAEjF,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAED,oBAAY,uBAAuB;IACjC,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAGD,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI/D,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0DAA0D;;;;;;;;;;;;;;;;iBAIrE,CAAC;AAEH,eAAO,MAAM,mDAAmD;;;;;iBAK9D,CAAC;AAEH,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAClI,MAAM,MAAM,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0DAA0D,CAAC,CAAC;AAC9I,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mDAAmD,CAAC,CAAC;AAEhI,oBAAY,6BAA6B;IACvC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,aAAa,kBAAkB;CAChC;AAED,oBAAY,sCAAsC;IAChD,gBAAgB,qBAAqB;IACrC,WAAW,gBAAgB;IAC3B,SAAS,WAAW;CACrB"}
+{"version":3,"file":"commons.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA6C,0BAA0B,EAAsF,MAAM,+CAA+C,CAAC;AAG1N;;;;;;;;;;;;;;;GAeG;AACH,oBAAY,sCAAsC;IAEhD,QAAQ,aAAa;IACrB,kBAAkB,uBAAuB;IAIzC,YAAY,iBAAiB;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,0BAA0B;IAE/C,8EAA8E;IAC9E,cAAc,mBAAmB;IACjC;;;;;;;;;;OAUG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;;;;;OAaG;IACH,4BAA4B,iCAAiC;IAC7D,iGAAiG;IACjG,cAAc,mBAAmB;IACjC,mFAAmF;IACnF,cAAc,mBAAmB;IAGjC,cAAc,mBAAmB;IAGjC,UAAU,eAAe;IAIzB,gBAAgB,qBAAqB;IAGrC,YAAY,iBAAiB;IAG7B,YAAY,iBAAiB;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;EAY7B,CAAC;AACZ,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAEjF,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAED,oBAAY,uBAAuB;IACjC,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAGD,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI/D,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0DAA0D;;;;;;;;;;;;;;;;iBAIrE,CAAC;AAEH,eAAO,MAAM,mDAAmD;;;;;iBAK9D,CAAC;AAEH,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAClI,MAAM,MAAM,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0DAA0D,CAAC,CAAC;AAC9I,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mDAAmD,CAAC,CAAC;AAEhI,oBAAY,6BAA6B;IACvC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,aAAa,kBAAkB;CAChC;AAED,oBAAY,sCAAsC;IAChD,gBAAgB,qBAAqB;IACrC,WAAW,gBAAgB;IAC3B,SAAS,WAAW;CACrB"}

package/dist/esm/core/commons.external-connectors-models.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"commons.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yCAAyC,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,6CAA6C,EAAE,MAAM,+CAA+C,CAAC;AAG1N;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,sCA2EX;AA3ED,WAAY,sCAAsC;IAChD,MAAM;IACN,+DAAqB,CAAA;IACrB,mFAAyC,CAAA;IACzC,SAAS;IAET,KAAK;IACL,uEAA6B,CAAA;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,yFAA+C,CAAA;IAC/C,sDAAsD;IACtD,8EAA8E;IAC9E,2EAAiC,CAAA;IACjC;;;;;;;;;;OAUG;IACH,qFAA2C,CAAA;IAC3C;;;;;;;;;;;;;OAaG;IACH,uGAA6D,CAAA;IAC7D,iGAAiG;IACjG,2EAAiC,CAAA;IACjC,mFAAmF;IACnF,2EAAiC,CAAA;IAEjC,QAAQ;IACR,2EAAiC,CAAA;IAEjC,OAAO;IACP,mEAAyB,CAAA;IACzB,mBAAmB;IAEnB,UAAU;IACV,+EAAqC,CAAA;IAErC,iBAAiB;IACjB,uEAA6B,CAAA;IAE7B,WAAW;IACX,uEAA6B,CAAA;AAC/B,CAAC,EA3EW,sCAAsC,KAAtC,sCAAsC,QA2EjD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,UAAU,EAAE,sCAAsC,CAAC,mBAAmB;IACtE,mBAAmB,EAAE,sCAAsC,CAAC,4BAA4B;IACxF,qBAAqB,EAAE,sCAAsC,CAAC,qBAAqB;IACnF,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,UAAU,EAAE,sCAAsC,CAAC,UAAU;IAC7D,OAAO,EAAE,sCAAsC,CAAC,gBAAgB;IAChE,kBAAkB,EAAE,sCAAsC,CAAC,kBAAkB;IAC7E,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,IAAI,EAAE,sCAAsC,CAAC,QAAQ;CAC7C,CAAC,CAAC;AAIZ,MAAM,CAAN,IAAY,uBAIX;AAJD,WAAY,uBAAuB;IACjC,sDAA2B,CAAA;IAC3B,8CAAmB,CAAA;IACnB,oDAAyB,CAAA;AAC3B,CAAC,EAJW,uBAAuB,KAAvB,uBAAuB,QAIlC;AAED,MAAM,CAAN,IAAY,uBAMX;AAND,WAAY,uBAAuB;IACjC,4CAAiB,CAAA;IACjB,gDAAqB,CAAA;IACrB,wCAAa,CAAA;IACb,8CAAmB,CAAA;IACnB,oDAAyB,CAAA;AAC3B,CAAC,EANW,uBAAuB,KAAvB,uBAAuB,QAMlC;AAGD,MAAM,CAAN,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,+BAAa,CAAA;IACb,6BAAW,CAAA;IACX,iCAAe,CAAA;IACf,mCAAiB,CAAA;IACjB,+BAAa,CAAA;IACb,qCAAmB,CAAA;AACrB,CAAC,EARW,cAAc,KAAd,cAAc,QAQzB;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3E,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3E,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5E,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0DAA0D,GAAG,CAAC,CAAC,MAAM,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,yCAAyC,CAAC,QAAQ,EAAE;IAChE,eAAe,EAAE,6CAA6C,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mDAAmD,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1E,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAMH,MAAM,CAAN,IAAY,6BAIX;AAJD,WAAY,6BAA6B;IACvC,oDAAmB,CAAA;IACnB,sDAAqB,CAAA;IACrB,gEAA+B,CAAA;AACjC,CAAC,EAJW,6BAA6B,KAA7B,6BAA6B,QAIxC;AAED,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,+EAAqC,CAAA;IACrC,qEAA2B,CAAA;IAC3B,8DAAoB,CAAA;AACtB,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD","sourcesContent":["import { z } from \"zod\";\nimport { ExternalProvider_Auth_ConfigurationSchema, ExternalProvider_Auth_Kind, ExternalProvider_AuthProfile_Schema, ExternalProvider_RateLimitConfigurationSchema } from \"./security.external-connectors-models.schemas\";\n\n\n/**\n * The ONE protocol vocabulary a provider can speak. Every other list is derived from or pinned\n * to this enum: the backend runtime-contract discriminants (`ProviderProtocolRuntimeKind`, a\n * subset of these members) and the application-authoring keys (`BUILTIN_PROVIDER_PROTOCOL` in\n * `@wildo-ai/saas-models`, its key set pinned by a drift test because that package must not\n * import this one into browser bundles).\n *\n * RETIRED 2026-09-05 (#327): `MCP_CONNECTOR`, `A2A_CONNECTOR`, `GIT_PROVIDER`, `GRPC`,\n * `SSO_SAML`. Each had an authored profile/configuration module in this package and NOTHING\n * that read it — no runtime-contract arm, no provider module declaring it, no consumer of any\n * export outside the module itself (measured with a positive control). Wildo's own MCP server,\n * A2A plane and SAML SSO are engine-implemented surfaces, not provider-declared protocols, and\n * none of them referenced these members. A retired member is refused at CONFIG time by\n * `ProviderProtocolSelectorSchema`, naming the value. Re-admit one only together with a\n * runtime-contract arm and a provider module that declares it.\n */\nexport enum ExternalProvider_ExchangeProtocol_Kind {\n  // WEB\n  REST_API = \"rest_api\",\n  WEBHOOK_ORIGINATOR = \"webhook_originator\",\n  // SOAP ?\n  \n  // AI\n  LLM_PROVIDER = \"llm_provider\",\n  /**\n   * Zed's Agent Client Protocol — a JSON-RPC session between Wildo (the client)\n   * and a CODING AGENT subprocess that reads and writes a workspace, runs\n   * commands, and calls back for permission.\n   *\n   * Its own protocol kind rather than a mode of `CLI_RUNTIME`, for the reason\n   * `EMBEDDINGS_PROVIDER` records above and one more that is specific to it: a\n   * coding agent is not a one-shot text call wearing a subprocess. Every\n   * capability the previous CLI transport lacked — token and cost accounting, a\n   * permission channel, cancellation, resumption, live progress — was missing\n   * because the one-shot shape has nowhere to put it, not because nobody had\n   * implemented it yet.\n   *\n   * NOT to be confused with the IBM/BeeAI \"Agent Communication Protocol\", which\n   * shares the acronym and is agent-to-agent — that space is `A2A_CONNECTOR`.\n   */\n  AGENT_CLIENT_PROTOCOL = \"agent_client_protocol\",\n  // AI — multimodal generation (artifact-modality axis)\n  /** Text-to-image generation (wired: gpt-image). Serves the IMAGE modality. */\n  IMAGE_PROVIDER = \"image_provider\",\n  /**\n   * Text → vector embeddings (wired: OpenAI `text-embedding-3-*`). Serves the RAG derived-data\n   * tier (corpus embedding via the `rag:embedding-drain` worker; query-time embedding in\n   * retrieval). Deliberately its OWN protocol kind rather than a sixth `LLMProvider_OperationKey`\n   * (RAG plan DL2): an unmapped LLM operation key fails SILENTLY across six consumer surfaces\n   * (registry semantic-operation map, output normalization, executor dispatch, capability slot,\n   * usage completeness, observability sink), whereas a new protocol kind fails COMPILATION at\n   * every `runtimeContract.kind` switch — the `IMAGE_PROVIDER` precedent. It also gets its own\n   * `EngineCapability.AI_EMBEDDINGS` slot so an application can select its embeddings provider\n   * independently of its chat provider.\n   */\n  EMBEDDINGS_PROVIDER = \"embeddings_provider\",\n  /**\n   * Document bytes → text (wired: Mistral `mistral-ocr-latest`). Serves the file-side text\n   * provider that `FileTextExtractionBackendService` owns, whose largest consumer is\n   * `.ragSource()` corpus ingestion.\n   *\n   * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own\n   * `EngineCapability.AI_DOCUMENT_EXTRACTION` slot so an application selects its OCR provider\n   * independently of chat and embeddings — three unrelated procurement decisions.\n   *\n   * NOT to be confused with PDF *generation* (templates → bytes), which is the `pdfTemplates`\n   * surface and is semantically the opposite direction. It has no provider slot: the\n   * `EngineCapability.DOCUMENT_GENERATION` this paragraph used to name was withdrawn because no\n   * provider capability token could ever fill it.\n   */\n  DOCUMENT_EXTRACTION_PROVIDER = \"document_extraction_provider\",\n  /** Reserved — audio generation (TTS / music). Serves the AUDIO modality. Not yet implemented. */\n  AUDIO_PROVIDER = \"audio_provider\",\n  /** Reserved — video generation. Serves the VIDEO modality. Not yet implemented. */\n  VIDEO_PROVIDER = \"video_provider\",\n  \n  // INFRA\n  EMAIL_PROVIDER = \"email_provider\",\n  \n  // AUTH\n  SSO_OAUTH2 = \"sso_oauth2\",\n  // OPENID_CONNECT ?\n\n  // BILLING\n  BILLING_PROVIDER = \"billing_provider\",\n\n  // SMS (Phase G2)\n  SMS_PROVIDER = \"sms_provider\",\n\n  // FRONTEND\n  FRONTEND_SDK = \"frontend_sdk\",\n}\n\n/**\n * The BACKEND runtime-contract discriminants — the subset of `ExternalProvider_ExchangeProtocol_Kind`\n * a `BackendProviderModule` can execute. Its VALUES are the enum members themselves (one spelling per\n * member since 2026-09-05, #327), so a runtime contract's `kind` IS the exchange kind and no\n * protocol→kind map exists anywhere; `BackendProtocolBinding.protocol` (the authoring KEY) and\n * `runtimeContract.kind` are checked for agreement at composition. A member absent here has no\n * backend arm: `FRONTEND_SDK` is declared by browser-side modules only, `AUDIO_PROVIDER` /\n * `VIDEO_PROVIDER` are reserved.\n *\n * A frozen const rather than a second enum because provider modules are an extension boundary and\n * the union discriminant must stay the enum member type. Import from\n * `@wildo-ai/external-connectors-models`; the private backend package consumes it, never defines it.\n */\nexport const ProviderProtocolRuntimeKind = Object.freeze({\n  LLM: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n  IMAGE: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n  EMBEDDINGS: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n  DOCUMENT_EXTRACTION: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n  AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n  EMAIL: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n  OAUTH2_SSO: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n  BILLING: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n  WEBHOOK_ORIGINATOR: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n  SMS: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n  REST: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n} as const);\nexport type ProviderProtocolRuntimeKind =\n  (typeof ProviderProtocolRuntimeKind)[keyof typeof ProviderProtocolRuntimeKind];\n\nexport enum APPLICATION_ENVIRONMENT {\n  DEVELOPMENT = \"development\",\n  STAGING = \"staging\",\n  PRODUCTION = \"production\",\n}\n\nexport enum ExternalProvider_Status {\n  ACTIVE = \"active\",\n  INACTIVE = \"inactive\",\n  BUZY = \"busy\",\n  OFFLINE = \"offline\",\n  DEPRECATED = \"deprecated\",\n}\n\n\nexport enum API_HttpMethod {\n  GET = \"GET\",\n  POST = \"POST\",\n  PUT = \"PUT\",\n  PATCH = \"PATCH\",\n  DELETE = \"DELETE\",\n  HEAD = \"HEAD\",\n  OPTIONS = \"OPTIONS\",\n}\n\n/**\n * Shared protocol profile fields.\n *\n * These fields are transport-oriented hints that many protocols use, but they\n * are not universally meaningful. Execution-oriented protocols such as a local\n * CLI runtime should not need to invent fake HTTP endpoints or auth profiles\n * just to satisfy the shared contract.\n */\nexport const ExternalProvider_ExchangeProtocol_Profile_BaseSchema = z.object({\n  endpoints: z.record(z.enum(APPLICATION_ENVIRONMENT), z.string()).optional(),\n  availableAuthMethods: z.array(z.enum(ExternalProvider_Auth_Kind)).optional(),\n  authProfiles: z.array(ExternalProvider_AuthProfile_Schema).optional(),\n});\n\n/**\n * Shared protocol configuration fields.\n *\n * `authConfig` remains available for protocols that resolve secrets through the\n * generic provider auth model, but it is optional because execution-oriented\n * protocols can own their own auth/runtime policy contract.\n */\nexport const ExternalProvider_ExchangeProtocol_Configuration_BaseSchema = z.object({\n  enabled: z.boolean(),\n  authConfig: ExternalProvider_Auth_ConfigurationSchema.optional(),\n  rateLimitConfig: ExternalProvider_RateLimitConfigurationSchema.optional(),\n});\n\nexport const ExternalProvider_ExchangeProtocol_Status_BaseSchema = z.object({\n  protocolKind: z.enum(ExternalProvider_ExchangeProtocol_Kind),\n  status: z.enum(ExternalProvider_Status),\n  lastCheckedAt: z.string(),\n  errorReason: z.string().optional(),\n});\n\nexport type ExternalProvider_ExchangeProtocol_Profile_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Profile_BaseSchema>;\nexport type ExternalProvider_ExchangeProtocol_Configuration_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Configuration_BaseSchema>;\nexport type ExternalProvider_ExchangeProtocol_Status_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Status_BaseSchema>;\n\nexport enum ExternalProvider_IO_Direction {\n  INBOUND = \"inbound\",\n  OUTBOUND = \"outbound\",\n  BIDIRECTIONAL = \"bidirectional\",\n}\n\nexport enum ExternalProvider_IO_InteractionPattern {\n  REQUEST_RESPONSE = \"request_response\",\n  EVENT_BASED = \"event_based\",\n  STREAMING = \"stream\",\n}\n\n"]}
+{"version":3,"file":"commons.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yCAAyC,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,6CAA6C,EAAE,MAAM,+CAA+C,CAAC;AAG1N;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,sCA2EX;AA3ED,WAAY,sCAAsC;IAChD,MAAM;IACN,+DAAqB,CAAA;IACrB,mFAAyC,CAAA;IACzC,SAAS;IAET,KAAK;IACL,uEAA6B,CAAA;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,yFAA+C,CAAA;IAC/C,sDAAsD;IACtD,8EAA8E;IAC9E,2EAAiC,CAAA;IACjC;;;;;;;;;;OAUG;IACH,qFAA2C,CAAA;IAC3C;;;;;;;;;;;;;OAaG;IACH,uGAA6D,CAAA;IAC7D,iGAAiG;IACjG,2EAAiC,CAAA;IACjC,mFAAmF;IACnF,2EAAiC,CAAA;IAEjC,QAAQ;IACR,2EAAiC,CAAA;IAEjC,OAAO;IACP,mEAAyB,CAAA;IACzB,mBAAmB;IAEnB,UAAU;IACV,+EAAqC,CAAA;IAErC,iBAAiB;IACjB,uEAA6B,CAAA;IAE7B,WAAW;IACX,uEAA6B,CAAA;AAC/B,CAAC,EA3EW,sCAAsC,KAAtC,sCAAsC,QA2EjD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,UAAU,EAAE,sCAAsC,CAAC,mBAAmB;IACtE,mBAAmB,EAAE,sCAAsC,CAAC,4BAA4B;IACxF,qBAAqB,EAAE,sCAAsC,CAAC,qBAAqB;IACnF,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,UAAU,EAAE,sCAAsC,CAAC,UAAU;IAC7D,OAAO,EAAE,sCAAsC,CAAC,gBAAgB;IAChE,kBAAkB,EAAE,sCAAsC,CAAC,kBAAkB;IAC7E,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,IAAI,EAAE,sCAAsC,CAAC,QAAQ;CAC7C,CAAC,CAAC;AAIZ,MAAM,CAAN,IAAY,uBAIX;AAJD,WAAY,uBAAuB;IACjC,sDAA2B,CAAA;IAC3B,8CAAmB,CAAA;IACnB,oDAAyB,CAAA;AAC3B,CAAC,EAJW,uBAAuB,KAAvB,uBAAuB,QAIlC;AAED,MAAM,CAAN,IAAY,uBAMX;AAND,WAAY,uBAAuB;IACjC,4CAAiB,CAAA;IACjB,gDAAqB,CAAA;IACrB,wCAAa,CAAA;IACb,8CAAmB,CAAA;IACnB,oDAAyB,CAAA;AAC3B,CAAC,EANW,uBAAuB,KAAvB,uBAAuB,QAMlC;AAGD,MAAM,CAAN,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,+BAAa,CAAA;IACb,6BAAW,CAAA;IACX,iCAAe,CAAA;IACf,mCAAiB,CAAA;IACjB,+BAAa,CAAA;IACb,qCAAmB,CAAA;AACrB,CAAC,EARW,cAAc,KAAd,cAAc,QAQzB;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3E,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3E,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5E,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0DAA0D,GAAG,CAAC,CAAC,MAAM,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,yCAAyC,CAAC,QAAQ,EAAE;IAChE,eAAe,EAAE,6CAA6C,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mDAAmD,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1E,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAMH,MAAM,CAAN,IAAY,6BAIX;AAJD,WAAY,6BAA6B;IACvC,oDAAmB,CAAA;IACnB,sDAAqB,CAAA;IACrB,gEAA+B,CAAA;AACjC,CAAC,EAJW,6BAA6B,KAA7B,6BAA6B,QAIxC;AAED,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,+EAAqC,CAAA;IACrC,qEAA2B,CAAA;IAC3B,8DAAoB,CAAA;AACtB,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD","sourcesContent":["import { z } from \"zod\";\nimport { ExternalProvider_Auth_ConfigurationSchema, ExternalProvider_Auth_Kind, ExternalProvider_AuthProfile_Schema, ExternalProvider_RateLimitConfigurationSchema } from \"./security.external-connectors-models.schemas\";\n\n\n/**\n * The ONE protocol vocabulary a provider can speak. Every other list is derived from or pinned\n * to this enum: the backend runtime-contract discriminants (`ProviderProtocolRuntimeKind`, a\n * subset of these members) and the application-authoring keys (`BUILTIN_PROVIDER_PROTOCOL` in\n * `@wildo-ai/saas-models`, its key set pinned by a drift test because that package must not\n * import this one into browser bundles).\n *\n * RETIRED 2026-09-05 (#327): `MCP_CONNECTOR`, `A2A_CONNECTOR`, `GIT_PROVIDER`, `GRPC`,\n * `SSO_SAML`. Each had an authored profile/configuration module in this package and NOTHING\n * that read it — no runtime-contract arm, no provider module declaring it, no consumer of any\n * export outside the module itself (measured with a positive control). Wildo's own MCP server,\n * A2A plane and SAML SSO are engine-implemented surfaces, not provider-declared protocols, and\n * none of them referenced these members. A retired member is refused at CONFIG time by\n * `ProviderProtocolSelectorSchema`, naming the value. Re-admit one only together with a\n * runtime-contract arm and a provider module that declares it.\n */\nexport enum ExternalProvider_ExchangeProtocol_Kind {\n  // WEB\n  REST_API = \"rest_api\",\n  WEBHOOK_ORIGINATOR = \"webhook_originator\",\n  // SOAP ?\n  \n  // AI\n  LLM_PROVIDER = \"llm_provider\",\n  /**\n   * Zed's Agent Client Protocol — a JSON-RPC session between Wildo (the client)\n   * and a CODING AGENT subprocess that reads and writes a workspace, runs\n   * commands, and calls back for permission.\n   *\n   * Its own protocol kind rather than a mode of `CLI_RUNTIME`, for the reason\n   * `EMBEDDINGS_PROVIDER` records above and one more that is specific to it: a\n   * coding agent is not a one-shot text call wearing a subprocess. Every\n   * capability the previous CLI transport lacked — token and cost accounting, a\n   * permission channel, cancellation, resumption, live progress — was missing\n   * because the one-shot shape has nowhere to put it, not because nobody had\n   * implemented it yet.\n   *\n   * NOT to be confused with the IBM/BeeAI \"Agent Communication Protocol\", which\n   * shares the acronym and is agent-to-agent — that space is `A2A_CONNECTOR`.\n   */\n  AGENT_CLIENT_PROTOCOL = \"agent_client_protocol\",\n  // AI — multimodal generation (artifact-modality axis)\n  /** Text-to-image generation (wired: gpt-image). Serves the IMAGE modality. */\n  IMAGE_PROVIDER = \"image_provider\",\n  /**\n   * Text → vector embeddings (wired: OpenAI `text-embedding-3-*`). Serves the RAG derived-data\n   * tier (corpus embedding via the `rag:embedding-drain` worker; query-time embedding in\n   * retrieval). Deliberately its OWN protocol kind rather than a sixth `LLMProvider_OperationKey`\n   * (RAG plan DL2): an unmapped LLM operation key fails SILENTLY across six consumer surfaces\n   * (registry semantic-operation map, output normalization, executor dispatch, capability slot,\n   * usage completeness, observability sink), whereas a new protocol kind fails COMPILATION at\n   * every `runtimeContract.kind` switch — the `IMAGE_PROVIDER` precedent. It also gets its own\n   * `EngineCapability.AI_EMBEDDINGS` slot so an application can select its embeddings provider\n   * independently of its chat provider.\n   */\n  EMBEDDINGS_PROVIDER = \"embeddings_provider\",\n  /**\n   * Document bytes → text (wired: Mistral `mistral-ocr-latest`). Serves the file-side text\n   * provider that `FileTextExtractionBackendService` owns, whose largest consumer is\n   * `.ragSource()` corpus ingestion.\n   *\n   * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own\n   * `EngineCapability.AI_DOCUMENT_EXTRACTION` slot so an application selects its OCR provider\n   * independently of chat and embeddings — three unrelated procurement decisions.\n   *\n   * NOT to be confused with PDF *generation* (templates → bytes), which is the `pdfTemplates`\n   * surface and is semantically the opposite direction. It has no provider slot: the\n   * `EngineCapability.DOCUMENT_GENERATION` this paragraph used to name was withdrawn because no\n   * provider capability token could ever fill it.\n   */\n  DOCUMENT_EXTRACTION_PROVIDER = \"document_extraction_provider\",\n  /** Reserved — audio generation (TTS / music). Serves the AUDIO modality. Not yet implemented. */\n  AUDIO_PROVIDER = \"audio_provider\",\n  /** Reserved — video generation. Serves the VIDEO modality. Not yet implemented. */\n  VIDEO_PROVIDER = \"video_provider\",\n  \n  // INFRA\n  EMAIL_PROVIDER = \"email_provider\",\n  \n  // AUTH\n  SSO_OAUTH2 = \"sso_oauth2\",\n  // OPENID_CONNECT ?\n\n  // BILLING\n  BILLING_PROVIDER = \"billing_provider\",\n\n  // SMS (Phase G2)\n  SMS_PROVIDER = \"sms_provider\",\n\n  // FRONTEND\n  FRONTEND_SDK = \"frontend_sdk\",\n}\n\n/**\n * The BACKEND runtime-contract discriminants — the subset of `ExternalProvider_ExchangeProtocol_Kind`\n * a `BackendProviderModule` can execute. Its VALUES are the enum members themselves (one spelling per\n * member since 2026-09-05, #327), so a runtime contract's `kind` IS the exchange kind and no\n * protocol→kind map exists anywhere; `BackendProtocolBinding.protocol` (the authoring KEY) and\n * `runtimeContract.kind` are checked for agreement at composition. A member absent here has no\n * backend arm: `FRONTEND_SDK` is declared by browser-side modules only, `AUDIO_PROVIDER` /\n * `VIDEO_PROVIDER` are reserved.\n *\n * A frozen const rather than a second enum because provider modules are an extension boundary and\n * the union discriminant must stay the enum member type. Import from\n * `@wildo-ai/external-connectors-models`; the private backend package consumes it, never defines it.\n */\nexport const ProviderProtocolRuntimeKind = Object.freeze({\n  LLM: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n  IMAGE: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n  EMBEDDINGS: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n  DOCUMENT_EXTRACTION: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n  AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n  EMAIL: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n  OAUTH2_SSO: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n  BILLING: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n  WEBHOOK_ORIGINATOR: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n  SMS: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n  REST: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n} as const);\nexport type ProviderProtocolRuntimeKind =\n  (typeof ProviderProtocolRuntimeKind)[keyof typeof ProviderProtocolRuntimeKind];\n\nexport enum APPLICATION_ENVIRONMENT {\n  DEVELOPMENT = \"development\",\n  STAGING = \"staging\",\n  PRODUCTION = \"production\",\n}\n\nexport enum ExternalProvider_Status {\n  ACTIVE = \"active\",\n  INACTIVE = \"inactive\",\n  BUZY = \"busy\",\n  OFFLINE = \"offline\",\n  DEPRECATED = \"deprecated\",\n}\n\n\nexport enum API_HttpMethod {\n  GET = \"GET\",\n  POST = \"POST\",\n  PUT = \"PUT\",\n  PATCH = \"PATCH\",\n  DELETE = \"DELETE\",\n  HEAD = \"HEAD\",\n  OPTIONS = \"OPTIONS\",\n}\n\n/**\n * Shared protocol profile fields.\n *\n * These fields are transport-oriented hints that many protocols use, but they\n * are not universally meaningful. Execution-oriented protocols such as a local\n * CLI runtime should not need to invent fake HTTP endpoints or auth profiles\n * just to satisfy the shared contract.\n */\nexport const ExternalProvider_ExchangeProtocol_Profile_BaseSchema = z.object({\n  endpoints: z.record(z.enum(APPLICATION_ENVIRONMENT), z.string()).optional(),\n  availableAuthMethods: z.array(z.enum(ExternalProvider_Auth_Kind)).optional(),\n  authProfiles: z.array(ExternalProvider_AuthProfile_Schema).optional(),\n});\n\n/**\n * Shared protocol configuration fields.\n *\n * `authConfig` remains available for protocols that resolve secrets through the\n * generic provider auth model, but it is optional because execution-oriented\n * protocols can own their own auth/runtime policy contract.\n */\nexport const ExternalProvider_ExchangeProtocol_Configuration_BaseSchema = z.object({\n  enabled: z.boolean(),\n  authConfig: ExternalProvider_Auth_ConfigurationSchema.optional(),\n  rateLimitConfig: ExternalProvider_RateLimitConfigurationSchema.optional(),\n});\n\nexport const ExternalProvider_ExchangeProtocol_Status_BaseSchema = z.object({\n  protocolKind: z.enum(ExternalProvider_ExchangeProtocol_Kind),\n  status: z.enum(ExternalProvider_Status),\n  lastCheckedAt: z.string(),\n  errorReason: z.string().optional(),\n});\n\nexport type ExternalProvider_ExchangeProtocol_Profile_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Profile_BaseSchema>;\nexport type ExternalProvider_ExchangeProtocol_Configuration_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Configuration_BaseSchema>;\nexport type ExternalProvider_ExchangeProtocol_Status_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Status_BaseSchema>;\n\nexport enum ExternalProvider_IO_Direction {\n  INBOUND = \"inbound\",\n  OUTBOUND = \"outbound\",\n  BIDIRECTIONAL = \"bidirectional\",\n}\n\nexport enum ExternalProvider_IO_InteractionPattern {\n  REQUEST_RESPONSE = \"request_response\",\n  EVENT_BASED = \"event_based\",\n  STREAMING = \"stream\",\n}\n\n"]}

package/dist/esm/core/operation-classification.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-classification.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/operation-classification.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,oBAAY,gCAAgC;IAC1C,IAAI,SAAS;IACb,KAAK,UAAU;CAChB"}
+{"version":3,"file":"operation-classification.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/core/operation-classification.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,oBAAY,gCAAgC;IAC1C,IAAI,SAAS;IACb,KAAK,UAAU;CAChB"}

package/dist/esm/core/operation-classification.external-connectors-models.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"operation-classification.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../../src/core/operation-classification.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,gCAGX;AAHD,WAAY,gCAAgC;IAC1C,iDAAa,CAAA;IACb,mDAAe,CAAA;AACjB,CAAC,EAHW,gCAAgC,KAAhC,gCAAgC,QAG3C","sourcesContent":["/**\n * Whether an external operation READS from or WRITES to the third-party system.\n *\n * Kept as its own tiny vocabulary because every operation catalogue needs it regardless of where\n * the catalogue came from: a caller decides retry-safety, an audit decides severity, and a UI\n * decides whether to confirm. Neutral by construction — it names the operation's effect, never a\n * source catalogue's spelling of it.\n */\nexport enum ExternalOperation_Classification {\n  READ = \"READ\",\n  WRITE = \"WRITE\",\n}\n"]}
+{"version":3,"file":"operation-classification.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../src/core/operation-classification.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,gCAGX;AAHD,WAAY,gCAAgC;IAC1C,iDAAa,CAAA;IACb,mDAAe,CAAA;AACjB,CAAC,EAHW,gCAAgC,KAAhC,gCAAgC,QAG3C","sourcesContent":["/**\n * Whether an external operation READS from or WRITES to the third-party system.\n *\n * Kept as its own tiny vocabulary because every operation catalogue needs it regardless of where\n * the catalogue came from: a caller decides retry-safety, an audit decides severity, and a UI\n * decides whether to confirm. Neutral by construction — it names the operation's effect, never a\n * source catalogue's spelling of it.\n */\nexport enum ExternalOperation_Classification {\n  READ = \"READ\",\n  WRITE = \"WRITE\",\n}\n"]}

package/dist/esm/core/protocols.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocols.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/protocols.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,2BAA2B,EAAoC,MAAM,uEAAuE,CAAC;AACzL,OAAO,EAAE,wCAAwC,EAAE,kCAAkC,EAA2C,MAAM,qEAAqE,CAAC;AAC5M,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAA8B,MAAM,uDAAuD,CAAC;AACvJ,OAAO,EAAE,gCAAgC,EAAE,0BAA0B,EAAmC,MAAM,4DAA4D,CAAC;AAC3K,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAiC,MAAM,0DAA0D,CAAC;AACnK,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAA8B,MAAM,uDAAuD,CAAC;AACvJ,OAAO,EAAE,mCAAmC,EAAE,6BAA6B,EAAsC,MAAM,uDAAuD,CAAC;AAC/K,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAA4B,MAAM,qDAAqD,CAAC;AAC/I,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAA+B,MAAM,wDAAwD,CAAC;AAC7J,OAAO,EAAE,+BAA+B,EAAE,yBAAyB,EAAiC,MAAM,0DAA0D,CAAC;AACrK,OAAO,KAAK,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAC1H,OAAO,EAAE,oDAAoD,EAAE,sCAAsC,EAAE,8CAA8C,EAAE,6BAA6B,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACnR,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAG5G,MAAM,MAAM,sCAAsC,GAAG;IACnD,IAAI,EAAE,sCAAsC,CAAC;IAC7C,WAAW,EAAG,MAAM,CAAC;IACrB,SAAS,EAAE,6BAA6B,CAAC;IACzC,kBAAkB,EAAE,sCAAsC,CAAC;IAC3D,OAAO,EAAG,8CAA8C,CAAC;IACzD,oBAAoB,EAAG,oDAAoD,CAAC;IAC5E,YAAY,EAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,EAAG,MAAM,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAC3C,CAAC,sCAAsC,GAAG;IACxC,IAAI,EAAE,sCAAsC,CAAC,QAAQ,CAAC;IACtD,OAAO,EAAG,yBAAyB,CAAC;IACpC,oBAAoB,EAAG,+BAA+B,CAAC;CACxD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,kBAAkB,CAAC;IAChE,OAAO,EAAG,6BAA6B,CAAC;IACxC,oBAAoB,EAAG,mCAAmC,CAAC;CAC5D,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAG,mBAAmB,CAAC;IAC9B,oBAAoB,EAAG,yBAAyB,CAAC;CAClD,CAAC,GAIA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,qBAAqB,CAAC;IACnE,OAAO,EAAG,2BAA2B,CAAC;IACtC,oBAAoB,EAAG,iCAAiC,CAAC;CAC1D,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,cAAc,CAAC;IAC5D,OAAO,EAAG,qBAAqB,CAAC;IAChC,oBAAoB,EAAG,2BAA2B,CAAC;CACpD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,mBAAmB,CAAC;IACjE,OAAO,EAAG,0BAA0B,CAAC;IACrC,oBAAoB,EAAG,gCAAgC,CAAC;CACzD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,4BAA4B,CAAC;IAC1E,OAAO,EAAG,kCAAkC,CAAC;IAC7C,oBAAoB,EAAG,wCAAwC,CAAC;CACjE,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,cAAc,CAAC;IAC5D,OAAO,EAAG,qBAAqB,CAAC;IAChC,oBAAoB,EAAG,2BAA2B,CAAC;CACpD,CAAC,GAIA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,UAAU,CAAC;IACxD,OAAO,EAAG,sBAAsB,CAAC;IACjC,oBAAoB,EAAG,8BAA8B,CAAC;CACvD,CAAC,GAGA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAG,wBAAwB,CAAC;IACnC,oBAAoB,EAAG,8BAA8B,CAAC;CACvD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,gBAAgB,CAAC;IAC9D,OAAO,EAAG,8CAA8C,CAAC;IACzD,oBAAoB,EAAG,oDAAoD,CAAC;CAC7E,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAG,mBAAmB,CAAC;IAC9B,oBAAoB,EAAG,yBAAyB,CAAC;CAClD,CAAC,CACH"}
+{"version":3,"file":"protocols.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/core/protocols.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,2BAA2B,EAAoC,MAAM,uEAAuE,CAAC;AACzL,OAAO,EAAE,wCAAwC,EAAE,kCAAkC,EAA2C,MAAM,qEAAqE,CAAC;AAC5M,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAA8B,MAAM,uDAAuD,CAAC;AACvJ,OAAO,EAAE,gCAAgC,EAAE,0BAA0B,EAAmC,MAAM,4DAA4D,CAAC;AAC3K,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAiC,MAAM,0DAA0D,CAAC;AACnK,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAA8B,MAAM,uDAAuD,CAAC;AACvJ,OAAO,EAAE,mCAAmC,EAAE,6BAA6B,EAAsC,MAAM,uDAAuD,CAAC;AAC/K,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAA4B,MAAM,qDAAqD,CAAC;AAC/I,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAA+B,MAAM,wDAAwD,CAAC;AAC7J,OAAO,EAAE,+BAA+B,EAAE,yBAAyB,EAAiC,MAAM,0DAA0D,CAAC;AACrK,OAAO,KAAK,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAC1H,OAAO,EAAE,oDAAoD,EAAE,sCAAsC,EAAE,8CAA8C,EAAE,6BAA6B,EAAE,sCAAsC,EAAE,MAAM,8CAA8C,CAAC;AACnR,OAAO,EAAE,yCAAyC,EAAE,MAAM,iDAAiD,CAAC;AAG5G,MAAM,MAAM,sCAAsC,GAAG;IACnD,IAAI,EAAE,sCAAsC,CAAC;IAC7C,WAAW,EAAG,MAAM,CAAC;IACrB,SAAS,EAAE,6BAA6B,CAAC;IACzC,kBAAkB,EAAE,sCAAsC,CAAC;IAC3D,OAAO,EAAG,8CAA8C,CAAC;IACzD,oBAAoB,EAAG,oDAAoD,CAAC;IAC5E,YAAY,EAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,EAAG,MAAM,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAC3C,CAAC,sCAAsC,GAAG;IACxC,IAAI,EAAE,sCAAsC,CAAC,QAAQ,CAAC;IACtD,OAAO,EAAG,yBAAyB,CAAC;IACpC,oBAAoB,EAAG,+BAA+B,CAAC;CACxD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,kBAAkB,CAAC;IAChE,OAAO,EAAG,6BAA6B,CAAC;IACxC,oBAAoB,EAAG,mCAAmC,CAAC;CAC5D,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAG,mBAAmB,CAAC;IAC9B,oBAAoB,EAAG,yBAAyB,CAAC;CAClD,CAAC,GAIA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,qBAAqB,CAAC;IACnE,OAAO,EAAG,2BAA2B,CAAC;IACtC,oBAAoB,EAAG,iCAAiC,CAAC;CAC1D,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,cAAc,CAAC;IAC5D,OAAO,EAAG,qBAAqB,CAAC;IAChC,oBAAoB,EAAG,2BAA2B,CAAC;CACpD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,mBAAmB,CAAC;IACjE,OAAO,EAAG,0BAA0B,CAAC;IACrC,oBAAoB,EAAG,gCAAgC,CAAC;CACzD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,4BAA4B,CAAC;IAC1E,OAAO,EAAG,kCAAkC,CAAC;IAC7C,oBAAoB,EAAG,wCAAwC,CAAC;CACjE,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,cAAc,CAAC;IAC5D,OAAO,EAAG,qBAAqB,CAAC;IAChC,oBAAoB,EAAG,2BAA2B,CAAC;CACpD,CAAC,GAIA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,UAAU,CAAC;IACxD,OAAO,EAAG,sBAAsB,CAAC;IACjC,oBAAoB,EAAG,8BAA8B,CAAC;CACvD,CAAC,GAGA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAG,wBAAwB,CAAC;IACnC,oBAAoB,EAAG,8BAA8B,CAAC;CACvD,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,gBAAgB,CAAC;IAC9D,OAAO,EAAG,8CAA8C,CAAC;IACzD,oBAAoB,EAAG,oDAAoD,CAAC;CAC7E,CAAC,GAEA,CAAC,sCAAsC,GAAG;IAC1C,IAAI,EAAE,sCAAsC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAG,mBAAmB,CAAC;IAC9B,oBAAoB,EAAG,yBAAyB,CAAC;CAClD,CAAC,CACH"}

package/dist/esm/core/protocols.external-connectors-models.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocols.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../../src/core/protocols.external-connectors-models.schemas.ts"],"names":[],"mappings":"","sourcesContent":["import { z } from \"zod\";\nimport { AgentClientProtocol_Configuration, AgentClientProtocol_Profile, AgentClientProtocol_StatusSchema } from \"../protocols/agent-client-protocol.external-connectors-models.schemas\";\nimport { DocumentExtractionProvider_Configuration, DocumentExtractionProvider_Profile, DocumentExtractionProvider_StatusSchema } from \"../protocols/document-extraction.external-connectors-models.schemas\";\nimport { EmailProvider_Configuration, EmailProvider_Profile, EmailProvider_StatusSchema } from \"../protocols/email.external-connectors-models.schemas\";\nimport { EmbeddingsProvider_Configuration, EmbeddingsProvider_Profile, EmbeddingsProvider_StatusSchema } from \"../protocols/embeddings.external-connectors-models.schemas\";\nimport { FrontendProvider_Configuration, FrontendProvider_Profile, FrontendProvider_StatusSchema } from \"../protocols/frontend.external-connectors-models.schemas\";\nimport { ImageProvider_Configuration, ImageProvider_Profile, ImageProvider_StatusSchema } from \"../protocols/image.external-connectors-models.schemas\";\nimport { HookInitiatorProvider_Configuration, HookInitiatorProvider_Profile, HookInitiatorProvider_StatusSchema } from \"../protocols/hooks.external-connectors-models.schemas\";\nimport { LLMProvider_Configuration, LLMProvider_Profile, LLMProvider_StatusSchema } from \"../protocols/llm.external-connectors-models.schemas\";\nimport { ExternalProvider_OAuth2_Config, OAuth2Provider_Profile, OAuth2Provider_StatusSchema } from \"../protocols/oauth2.external-connectors-models.schemas\";\nimport { REST_API_Provider_Configuration, REST_API_Provider_Profile, REST_APIProvider_StatusSchema } from \"../protocols/rest-api.external-connectors-models.schemas\";\nimport type { SMSProvider_Configuration, SMSProvider_Profile } from \"../protocols/sms.external-connectors-models.schemas\";\nimport { ExternalProvider_ExchangeProtocol_Configuration_Base, ExternalProvider_ExchangeProtocol_Kind, ExternalProvider_ExchangeProtocol_Profile_Base, ExternalProvider_IO_Direction, ExternalProvider_IO_InteractionPattern } from \"./commons.external-connectors-models.schemas\";\nimport { ExternalProvider_OperationDefinition_Base } from \"./operations.external-connectors-models.schemas\";\n\n\nexport type ExternalProvider_ExchangeProtocol_Base = {\n  kind: ExternalProvider_ExchangeProtocol_Kind,\n  providerRef : string,\n  direction: ExternalProvider_IO_Direction,\n  interactionPattern: ExternalProvider_IO_InteractionPattern,\n  profile : ExternalProvider_ExchangeProtocol_Profile_Base,\n  defaultConfiguration : ExternalProvider_ExchangeProtocol_Configuration_Base,\n  statusSchema : z.ZodSchema<any>,\n  operations : Record<string, ExternalProvider_OperationDefinition_Base>,\n};\n\nexport type ExternalProvider_ExchangeProtocol = \n  (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n    profile : REST_API_Provider_Profile,\n    defaultConfiguration : REST_API_Provider_Configuration,\n  }) \n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n    profile : HookInitiatorProvider_Profile,\n    defaultConfiguration : HookInitiatorProvider_Configuration,\n  }) \n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n    profile : LLMProvider_Profile,\n    defaultConfiguration : LLMProvider_Configuration,\n  }) \n\n\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n    profile : AgentClientProtocol_Profile,\n    defaultConfiguration : AgentClientProtocol_Configuration,\n  }) \n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n    profile : ImageProvider_Profile,\n    defaultConfiguration : ImageProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n    profile : EmbeddingsProvider_Profile,\n    defaultConfiguration : EmbeddingsProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n    profile : DocumentExtractionProvider_Profile,\n    defaultConfiguration : DocumentExtractionProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n    profile : EmailProvider_Profile,\n    defaultConfiguration : EmailProvider_Configuration,\n  })\n  \n\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n    profile : OAuth2Provider_Profile,\n    defaultConfiguration : ExternalProvider_OAuth2_Config,\n  })\n\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.FRONTEND_SDK,\n    profile : FrontendProvider_Profile,\n    defaultConfiguration : FrontendProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n    profile : ExternalProvider_ExchangeProtocol_Profile_Base,\n    defaultConfiguration : ExternalProvider_ExchangeProtocol_Configuration_Base,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n    profile : SMSProvider_Profile,\n    defaultConfiguration : SMSProvider_Configuration,\n  })\n;\n"]}
+{"version":3,"file":"protocols.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../src/core/protocols.external-connectors-models.schemas.ts"],"names":[],"mappings":"","sourcesContent":["import { z } from \"zod\";\nimport { AgentClientProtocol_Configuration, AgentClientProtocol_Profile, AgentClientProtocol_StatusSchema } from \"../protocols/agent-client-protocol.external-connectors-models.schemas\";\nimport { DocumentExtractionProvider_Configuration, DocumentExtractionProvider_Profile, DocumentExtractionProvider_StatusSchema } from \"../protocols/document-extraction.external-connectors-models.schemas\";\nimport { EmailProvider_Configuration, EmailProvider_Profile, EmailProvider_StatusSchema } from \"../protocols/email.external-connectors-models.schemas\";\nimport { EmbeddingsProvider_Configuration, EmbeddingsProvider_Profile, EmbeddingsProvider_StatusSchema } from \"../protocols/embeddings.external-connectors-models.schemas\";\nimport { FrontendProvider_Configuration, FrontendProvider_Profile, FrontendProvider_StatusSchema } from \"../protocols/frontend.external-connectors-models.schemas\";\nimport { ImageProvider_Configuration, ImageProvider_Profile, ImageProvider_StatusSchema } from \"../protocols/image.external-connectors-models.schemas\";\nimport { HookInitiatorProvider_Configuration, HookInitiatorProvider_Profile, HookInitiatorProvider_StatusSchema } from \"../protocols/hooks.external-connectors-models.schemas\";\nimport { LLMProvider_Configuration, LLMProvider_Profile, LLMProvider_StatusSchema } from \"../protocols/llm.external-connectors-models.schemas\";\nimport { ExternalProvider_OAuth2_Config, OAuth2Provider_Profile, OAuth2Provider_StatusSchema } from \"../protocols/oauth2.external-connectors-models.schemas\";\nimport { REST_API_Provider_Configuration, REST_API_Provider_Profile, REST_APIProvider_StatusSchema } from \"../protocols/rest-api.external-connectors-models.schemas\";\nimport type { SMSProvider_Configuration, SMSProvider_Profile } from \"../protocols/sms.external-connectors-models.schemas\";\nimport { ExternalProvider_ExchangeProtocol_Configuration_Base, ExternalProvider_ExchangeProtocol_Kind, ExternalProvider_ExchangeProtocol_Profile_Base, ExternalProvider_IO_Direction, ExternalProvider_IO_InteractionPattern } from \"./commons.external-connectors-models.schemas\";\nimport { ExternalProvider_OperationDefinition_Base } from \"./operations.external-connectors-models.schemas\";\n\n\nexport type ExternalProvider_ExchangeProtocol_Base = {\n  kind: ExternalProvider_ExchangeProtocol_Kind,\n  providerRef : string,\n  direction: ExternalProvider_IO_Direction,\n  interactionPattern: ExternalProvider_IO_InteractionPattern,\n  profile : ExternalProvider_ExchangeProtocol_Profile_Base,\n  defaultConfiguration : ExternalProvider_ExchangeProtocol_Configuration_Base,\n  statusSchema : z.ZodSchema<any>,\n  operations : Record<string, ExternalProvider_OperationDefinition_Base>,\n};\n\nexport type ExternalProvider_ExchangeProtocol = \n  (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n    profile : REST_API_Provider_Profile,\n    defaultConfiguration : REST_API_Provider_Configuration,\n  }) \n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n    profile : HookInitiatorProvider_Profile,\n    defaultConfiguration : HookInitiatorProvider_Configuration,\n  }) \n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n    profile : LLMProvider_Profile,\n    defaultConfiguration : LLMProvider_Configuration,\n  }) \n\n\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n    profile : AgentClientProtocol_Profile,\n    defaultConfiguration : AgentClientProtocol_Configuration,\n  }) \n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n    profile : ImageProvider_Profile,\n    defaultConfiguration : ImageProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n    profile : EmbeddingsProvider_Profile,\n    defaultConfiguration : EmbeddingsProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n    profile : DocumentExtractionProvider_Profile,\n    defaultConfiguration : DocumentExtractionProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n    profile : EmailProvider_Profile,\n    defaultConfiguration : EmailProvider_Configuration,\n  })\n  \n\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n    profile : OAuth2Provider_Profile,\n    defaultConfiguration : ExternalProvider_OAuth2_Config,\n  })\n\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.FRONTEND_SDK,\n    profile : FrontendProvider_Profile,\n    defaultConfiguration : FrontendProvider_Configuration,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n    profile : ExternalProvider_ExchangeProtocol_Profile_Base,\n    defaultConfiguration : ExternalProvider_ExchangeProtocol_Configuration_Base,\n  })\n\n  | (ExternalProvider_ExchangeProtocol_Base & {\n    kind: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n    profile : SMSProvider_Profile,\n    defaultConfiguration : SMSProvider_Configuration,\n  })\n;\n"]}

package/dist/esm/core/security.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAMxB;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,iCAAiC;IACjC,IAAI,SAAS;IAEb,0CAA0C;IAC1C,OAAO,YAAY;IAEnB,gDAAgD;IAChD,MAAM,WAAW;IAEjB,gCAAgC;IAChC,KAAK,UAAU;IAEf,kEAAkE;IAClE,MAAM,WAAW;IAEjB,0CAA0C;IAC1C,cAAc,mBAAmB;IAEjC,+CAA+C;IAC/C,cAAc,mBAAmB;IAEjC,uCAAuC;IACvC,UAAU,eAAe;IAEzB,qDAAqD;IACrD,eAAe,oBAAoB;CACpC;AAMD,oBAAY,qCAAqC;IAC/C,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,8CAA8C;IACxD,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,oBAAY,mCAAmC;IAC7C,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;CAC5C;AAMD;;;GAGG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAYpD,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;;iBAkBxD,CAAC;AAMH,eAAO,MAAM,uCAAuC;;;;;;iBAelD,CAAC;AAMH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAC5G,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAMxG;;;GAGG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAmI9C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAM/F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,oBAAY,sCAAsC;IAChD,qGAAqG;IACrG,WAAW,gBAAgB;IAC3B,mGAAmG;IACnG,YAAY,iBAAiB;IAC7B,uFAAuF;IACvF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,oBAAY,4BAA4B;IACtC;;;OAGG;IACH,YAAY,iBAAiB;IAC7B;;;;OAIG;IACH,UAAU,eAAe;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,oBAAY,0CAA0C;IACpD,2EAA2E;IAC3E,OAAO,YAAY;IACnB,wFAAwF;IACxF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sCAAsC;;;iBAIjD,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAEtG,eAAO,MAAM,uCAAuC;;;;;iBA2ClD,CAAC;AAEH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}
+{"version":3,"file":"security.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAMxB;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,iCAAiC;IACjC,IAAI,SAAS;IAEb,0CAA0C;IAC1C,OAAO,YAAY;IAEnB,gDAAgD;IAChD,MAAM,WAAW;IAEjB,gCAAgC;IAChC,KAAK,UAAU;IAEf,kEAAkE;IAClE,MAAM,WAAW;IAEjB,0CAA0C;IAC1C,cAAc,mBAAmB;IAEjC,+CAA+C;IAC/C,cAAc,mBAAmB;IAEjC,uCAAuC;IACvC,UAAU,eAAe;IAEzB,qDAAqD;IACrD,eAAe,oBAAoB;CACpC;AAMD,oBAAY,qCAAqC;IAC/C,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,8CAA8C;IACxD,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,oBAAY,mCAAmC;IAC7C,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;CAC5C;AAMD;;;GAGG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAYpD,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;;iBAkBxD,CAAC;AAMH,eAAO,MAAM,uCAAuC;;;;;;iBAelD,CAAC;AAMH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAC5G,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAMxG;;;GAGG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAmI9C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAM/F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,oBAAY,sCAAsC;IAChD,qGAAqG;IACrG,WAAW,gBAAgB;IAC3B,mGAAmG;IACnG,YAAY,iBAAiB;IAC7B,uFAAuF;IACvF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,oBAAY,4BAA4B;IACtC;;;OAGG;IACH,YAAY,iBAAiB;IAC7B;;;;OAIG;IACH,UAAU,eAAe;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,oBAAY,0CAA0C;IACpD,2EAA2E;IAC3E,OAAO,YAAY;IACnB,wFAAwF;IACxF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sCAAsC;;;iBAIjD,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAEtG,eAAO,MAAM,uCAAuC;;;;;iBA2ClD,CAAC;AAEH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}

package/dist/esm/core/security.external-connectors-models.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAN,IAAY,0BA2BX;AA3BD,WAAY,0BAA0B;IACpC,iCAAiC;IACjC,2CAAa,CAAA;IAEb,0CAA0C;IAC1C,iDAAmB,CAAA;IAEnB,gDAAgD;IAChD,+CAAiB,CAAA;IAEjB,gCAAgC;IAChC,6CAAe,CAAA;IAEf,kEAAkE;IAClE,+CAAiB,CAAA;IAEjB,0CAA0C;IAC1C,+DAAiC,CAAA;IAEjC,+CAA+C;IAC/C,+DAAiC,CAAA;IAEjC,uCAAuC;IACvC,uDAAyB,CAAA;IAEzB,qDAAqD;IACrD,iEAAmC,CAAA;AACrC,CAAC,EA3BW,0BAA0B,KAA1B,0BAA0B,QA2BrC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAN,IAAY,qCAIX;AAJD,WAAY,qCAAqC;IAC/C,0DAAiB,CAAA;IACjB,wDAAe,CAAA;IACf,0DAAiB,CAAA;AACnB,CAAC,EAJW,qCAAqC,KAArC,qCAAqC,QAIhD;AAED,MAAM,CAAN,IAAY,8CAGX;AAHD,WAAY,8CAA8C;IACxD,mEAAiB,CAAA;IACjB,mEAAiB,CAAA;AACnB,CAAC,EAHW,8CAA8C,KAA9C,8CAA8C,QAGzD;AAED,MAAM,CAAN,IAAY,mCAIX;AAJD,WAAY,mCAAmC;IAC7C,kDAAW,CAAA;IACX,0DAAmB,CAAA;IACnB,kFAA2C,CAAA;AAC7C,CAAC,EAJW,mCAAmC,KAAnC,mCAAmC,QAI9C;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChE,6BAA6B;IAC7B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IAE5C,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE3C,iDAAiD;IACjD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEjC,8EAA8E;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,CAAC,MAAM,CAAC;IACpE,kCAAkC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAE3D,yCAAyC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAEzC,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE3C,sCAAsC;IACtC,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE1D,4CAA4C;IAC5C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAExD,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAEH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,6BAA6B;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IAExC,6CAA6C;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE1B,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAErC,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAAC;IAE7G,wCAAwC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CACnD,CAAC,CAAC;AAUH,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9E,iCAAiC;IACjC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC;QACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,qDAAqD;QACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IAEF,wCAAwC;IACxC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAC1D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;QAChD,qBAAqB;QACrB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,MAAM,CAAC;QAChI,gDAAgD;QAChD,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpE,wCAAwC;QACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,0DAA0D;QAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IAEF,sCAAsC;IACtC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAAC;QAC7G,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,iCAAiC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;QACrC,mBAAmB;QACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,GAAG,CAAC;KACrG,CAAC;IAEF,wCAAwC;IACxC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAC1D,yBAAyB;QACzB,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,aAAa;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,wBAAwB;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,4BAA4B;QAC5B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtE,CAAC;IAEF,mDAAmD;IACnD,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAElD,uDAAuD;QACvD;;;;WAIG;QACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAExC,wDAAwD;QACxD,gEAAgE;QAChE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC3B,gBAAgB;QAChB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5B,+CAA+C;QAC/C,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAE9B,4CAA4C;QAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAEtC,2BAA2B;QAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;QAE9C,iCAAiC;QACjC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;QAE3E,mBAAmB;QACnB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC5B,kBAAkB;QAClB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;QAEjD,sBAAsB;QACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;QAExC,mCAAmC;QACnC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;QAEhD,qCAAqC;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAE5D,6BAA6B;QAC7B,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAE7D,uCAAuC;QACvC,sDAAsD;QACtD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7E,+CAA+C;QAC/C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACzC,CAAC;IAEF,+BAA+B;IAC/B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC;QACjD,+BAA+B;QAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,+BAA+B;QAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IAEF,4BAA4B;IAC5B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC;KACjD,CAAC;IAEF,0BAA0B;IAC1B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,eAAe,CAAC;QAC3D,8CAA8C;QAC9C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACxC,CAAC;IAEF,qBAAqB;IACrB,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,UAAU,CAAC;QACtD,4BAA4B;QAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,4BAA4B;QAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,+BAA+B;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;CACH,CAAC,CAAC;AAGH,gFAAgF;AAChF,sEAAsE;AACtE,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAN,IAAY,sCAOX;AAPD,WAAY,sCAAsC;IAChD,qGAAqG;IACrG,qEAA2B,CAAA;IAC3B,mGAAmG;IACnG,uEAA6B,CAAA;IAC7B,uFAAuF;IACvF,uDAAa,CAAA;AACf,CAAC,EAPW,sCAAsC,KAAtC,sCAAsC,QAOjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAN,IAAY,4BAYX;AAZD,WAAY,4BAA4B;IACtC;;;OAGG;IACH,6DAA6B,CAAA;IAC7B;;;;OAIG;IACH,yDAAyB,CAAA;AAC3B,CAAC,EAZW,4BAA4B,KAA5B,4BAA4B,QAYvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAN,IAAY,0CAKX;AALD,WAAY,0CAA0C;IACpD,2EAA2E;IAC3E,iEAAmB,CAAA;IACnB,wFAAwF;IACxF,2DAAa,CAAA;AACf,CAAC,EALW,0CAA0C,KAA1C,0CAA0C,QAKrD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC;IAC1D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC;SAC3D,OAAO,CAAC,0CAA0C,CAAC,OAAO,CAAC;CAC/D,CAAC,CAAC;AAaH,MAAM,CAAC,MAAM,uCAAuC,GAAG,sCAAsC,CAAC,MAAM,CAAC;IACnG;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B;;;;OAIG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,KAAK,sCAAsC,CAAC,WAAW,CAAC;IACjG,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,KAAK,MAAM,CAAC,UAAU,iCAAiC,MAAM,CAAC,UAAU,8DAA8D;SAChJ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,mHAAmH;SAC7H,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,0CAA0C,CAAC,IAAI,CAAC;IACxF,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,8HAA8H;SACxI,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,6KAA6K;SACvL,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC","sourcesContent":["/**\n * Security and Authentication Schemas for External Connectors\n * \n * This module defines authentication profiles that can be used across protocols.\n * It integrates with OAuth2 to avoid duplication between API auth and OAuth2 config.\n * \n * Architecture:\n * - ExternalProvider_Auth_Kind: The type of authentication\n * - ExternalProvider_AuthProfile: How to authenticate with an API\n * - OAuth2-linked profiles: Reference OAuth2 config instead of duplicating\n * \n * @see https://swagger.io/docs/specification/v3_0/authentication/\n */\n\nimport { z } from \"zod\";\nimport {\n  OAuth2_GrantType,\n  OAuth2_TokenEndpoint_AuthMethod,\n  OAuth2_PKCE_Method,\n  OAuth2_Prompt,\n  OAuth2_AccessType,\n} from './oauth2.enums';\n\n// =============================================================================\n// AUTH KIND ENUM\n// =============================================================================\n\n/**\n * Authentication types supported by external providers\n * Follows OpenAPI 3.0 Security Schemes with extensions\n */\nexport enum ExternalProvider_Auth_Kind {\n  /** No authentication required */\n  NONE = \"none\",\n  \n  /** API Key in header, query, or cookie */\n  API_KEY = \"api_key\",\n  \n  /** Bearer token (OAuth2 access token or JWT) */\n  BEARER = \"bearer\",\n  \n  /** HTTP Basic authentication */\n  BASIC = \"basic\",\n  \n  /** OAuth2 authentication - links to OAuth2 provider definition */\n  OAUTH2 = \"oauth2\",\n  \n  /** HMAC signature-based authentication */\n  HMAC_SIGNATURE = \"hmac_signature\",\n  \n  /** OpenID Connect (OAuth2 + identity layer) */\n  OPENID_CONNECT = \"openid_connect\",\n  \n  /** Mutual TLS (client certificates) */\n  MUTUAL_TLS = \"mutual_tls\",\n  \n  /** Frontend-specific secret (not exposed to user) */\n  FRONTEND_SECRET = \"frontend_secret\",\n}\n\n// =============================================================================\n// AUTH CONFIGURATION ENUMS\n// =============================================================================\n\nexport enum ExternalProvider_Auth_ApiKey_Location {\n  HEADER = \"header\",\n  QUERY = \"query\",\n  COOKIE = \"cookie\",\n}\n\nexport enum ExternalProvider_Auth_HMAC_Signature_Algorithm {\n  SHA256 = \"sha256\",\n  SHA512 = \"sha512\",\n}\n\nexport enum ExternalProvider_Auth_Bearer_Format {\n  JWT = \"jwt\",\n  API_KEY = \"api_key\",\n  OAUTH2_ACCESS_TOKEN = \"oauth2_access_token\",\n}\n\n// =============================================================================\n// AUTH CONFIGURATION SCHEMA\n// =============================================================================\n\n/**\n * Auth Configuration - references a secret\n * This is the runtime configuration that specifies which secret to use\n */\nexport const ExternalProvider_Auth_ConfigurationSchema = z.object({\n  /** Type of authentication */\n  authKind: z.enum(ExternalProvider_Auth_Kind),\n  \n  /** References to auth profiles this config applies to */\n  profileRefs: z.array(z.string()).optional(),\n  \n  /** Is this the default auth for the provider? */\n  isDefault: z.boolean().optional(),\n  \n  /** Reference to the secret (environment variable name or secret store key) */\n  secretRef: z.string(),\n});\n\n// =============================================================================\n// RATE LIMIT CONFIGURATION\n// =============================================================================\n\nexport const ExternalProvider_RateLimitConfigurationSchema = z.object({\n  /** Maximum concurrent requests */\n  maxConcurrent: z.number().positive().optional().default(10),\n  \n  /** Minimum time (ms) between requests */\n  minTime: z.number().positive().optional(),\n  \n  /** Request reservoir (bucket size) */\n  reservoir: z.number().positive().optional(),\n  \n  /** Reservoir refresh interval (ms) */\n  reservoirRefreshInterval: z.number().positive().optional(),\n  \n  /** Amount to add to reservoir on refresh */\n  reservoirRefreshAmount: z.number().positive().optional(),\n  \n  /** Request priority (higher = higher priority) */\n  priority: z.number().int().optional().default(0),\n});\n\n// =============================================================================\n// AUTH PROFILE BASE SCHEMA\n// =============================================================================\n\nexport const ExternalProvider_AuthProfile_BaseSchema = z.object({\n  /** Type of authentication */\n  kind: z.enum(ExternalProvider_Auth_Kind),\n  \n  /** Unique reference for this auth profile */\n  ref: z.string().optional(),\n  \n  /** Is this the default auth profile? */\n  isDefault: z.boolean().default(false),\n  \n  /** Where to place the authentication (header, query, cookie) */\n  location: z.enum(ExternalProvider_Auth_ApiKey_Location).default(ExternalProvider_Auth_ApiKey_Location.HEADER),\n  \n  /** Field name for the authentication */\n  locationField: z.string().default(\"Authorization\"),\n});\n\n// =============================================================================\n// INFERRED BASE TYPES\n// =============================================================================\n\nexport type ExternalProvider_Auth_Configuration = z.infer<typeof ExternalProvider_Auth_ConfigurationSchema>;\nexport type ExternalProvider_RateLimitConfiguration = z.infer<typeof ExternalProvider_RateLimitConfigurationSchema>;\nexport type ExternalProvider_AuthProfile_Base = z.infer<typeof ExternalProvider_AuthProfile_BaseSchema>;\n\n// =============================================================================\n// DISCRIMINATED AUTH PROFILE SCHEMAS\n// =============================================================================\n\n/**\n * Complete Auth Profile Schema - discriminated union by kind\n * Each kind has specific configuration fields\n */\nexport const ExternalProvider_AuthProfile_Schema = z.discriminatedUnion(\"kind\", [\n  // ─── API Key Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.API_KEY),\n    locationField: z.string().default(\"Authorization\"),\n    /** Prefix before the key value (e.g., \"Api-Key \") */\n    prefix: z.string().optional(),\n  }),\n  \n  // ─── HMAC Signature Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.HMAC_SIGNATURE),\n    locationField: z.string().default(\"X-Signature\"),\n    /** HMAC algorithm */\n    algorithm: z.enum(ExternalProvider_Auth_HMAC_Signature_Algorithm).default(ExternalProvider_Auth_HMAC_Signature_Algorithm.SHA256),\n    /** What data to sign (body, timestamp, etc.) */\n    signaturePayload: z.enum(['body', 'timestamp', 'custom']).optional(),\n    /** Timestamp header name (if needed) */\n    timestampHeader: z.string().optional(),\n    /** Nonce header name (if needed for replay protection) */\n    nonceHeader: z.string().optional(),\n  }),\n  \n  // ─── Bearer Token Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.BEARER),\n    location: z.enum(ExternalProvider_Auth_ApiKey_Location).default(ExternalProvider_Auth_ApiKey_Location.HEADER),\n    locationField: z.string().default(\"Authorization\"),\n    /** Prefix (usually \"Bearer \") */\n    prefix: z.string().default(\"Bearer \"),\n    /** Token format */\n    format: z.enum(ExternalProvider_Auth_Bearer_Format).default(ExternalProvider_Auth_Bearer_Format.JWT),\n  }),\n  \n  // ─── OpenID Connect Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.OPENID_CONNECT),\n    /** OIDC Discovery URL */\n    discoveryUrl: z.url().optional(),\n    /** Issuer */\n    issuer: z.string().optional(),\n    /** Expected audience */\n    audience: z.string().optional(),\n    /** Token validation mode */\n    validationMode: z.enum(['jwks', 'introspection', 'local']).optional(),\n  }),\n  \n  // ─── OAuth2 Authentication (UNIFIED APPROACH) ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.OAUTH2),\n    \n    // ─── OAuth2 Provider Reference (Unified Approach) ───\n    /**\n     * Reference to OAuth2 provider definition\n     * Instead of duplicating OAuth2 config, reference the provider\n     * by its string identifier (e.g., \"google\", \"microsoft\")\n     */\n    oauth2ProviderRef: z.string().optional(),\n    \n    // ─── Inline OAuth2 Configuration (Legacy/Override) ───\n    /** Authorization URL (can be overridden or used when no ref) */\n    authUrl: z.url().optional(),\n    /** Token URL */\n    tokenUrl: z.url().optional(),\n    /** Refresh URL (if different from tokenUrl) */\n    refreshUrl: z.url().optional(),\n    \n    /** Required scopes for this auth profile */\n    scopes: z.array(z.string()).optional(),\n    \n    /** Preferred grant type */\n    grantType: z.enum(OAuth2_GrantType).optional(),\n    \n    /** Token endpoint auth method */\n    tokenEndpointAuthMethod: z.enum(OAuth2_TokenEndpoint_AuthMethod).optional(),\n    \n    /** PKCE support */\n    pkce: z.boolean().optional(),\n    /** PKCE method */\n    pkceMethod: z.enum(OAuth2_PKCE_Method).optional(),\n    \n    /** Prompt behavior */\n    prompt: z.enum(OAuth2_Prompt).optional(),\n    \n    /** Access type (online/offline) */\n    accessType: z.enum(OAuth2_AccessType).optional(),\n    \n    /** Extra authorization parameters */\n    extraAuthParams: z.record(z.string(), z.string()).optional(),\n    \n    /** Extra token parameters */\n    extraTokenParams: z.record(z.string(), z.string()).optional(),\n    \n    // ─── Token Format (for API calls) ───\n    /** How to format the token in Authorization header */\n    tokenFormat: z.enum(['bearer', 'token', 'oauth', 'custom']).default('bearer'),\n    /** Custom prefix if tokenFormat is 'custom' */\n    customTokenPrefix: z.string().optional(),\n  }),\n  \n  // ─── Basic Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.BASIC),\n    /** Username field reference */\n    usernameRef: z.string().optional(),\n    /** Password field reference */\n    passwordRef: z.string().optional(),\n  }),\n  \n  // ─── No Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.NONE),\n  }),\n  \n  // ─── Frontend Secret ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.FRONTEND_SECRET),\n    /** Secret is only used in frontend context */\n    frontendOnly: z.boolean().default(true),\n  }),\n  \n  // ─── Mutual TLS ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.MUTUAL_TLS),\n    /** Certificate reference */\n    certificateRef: z.string().optional(),\n    /** Private key reference */\n    privateKeyRef: z.string().optional(),\n    /** CA certificate reference */\n    caRef: z.string().optional(),\n  }),\n]);\nexport type ExternalProvider_AuthProfile = z.infer<typeof ExternalProvider_AuthProfile_Schema>;\n\n// =============================================================================\n// CONNECTION IDENTITY — whose account, on whose behalf, and which one\n// =============================================================================\n\n/**\n * WHOSE ACCOUNT a call spends.\n *\n * Distinct from the scope of the DATA the call touches, and conflating the two inverts the design.\n * A billing provider is APPLICATION-owned — the payment account belongs to whoever ships the\n * application — even though almost everything it produces is organization-shaped: a customer, a\n * subscription, an invoice per tenant. Those are data in the application's own domain, produced by\n * an application-owned account. The question here is never \"does this touch organizations?\", which\n * is true of nearly everything. It is **whose account is it?**\n *\n * Delivery follows the owner and is not a separate decision: the APPLICATION's material is authored\n * in the deployment environment by an operator, and an ORGANIZATION's or a USER's is authored\n * through the application's own settings and stored, sealed, in its database.\n *\n * **No owner ever defaults to another.** An organization-owned call with no connection REFUSES; it\n * never spends the application's account. A silent substitution means the vendor sees one identity\n * while the application believes it acted as another, and every artifact the call leaves on the far\n * side — a message, a record, a line in the vendor's own audit log — is then attributed to the wrong\n * party, with nothing downstream able to detect it. An application that wants \"the tenant's key when\n * they have connected one, otherwise ours\" expresses that in its own code by choosing which\n * connection to call with, where the choice is visible.\n */\nexport enum ExternalProvider_Connection_OwnerScope {\n  /** The account belongs to the application itself. Material comes from the deployment environment. */\n  APPLICATION = \"application\",\n  /** The account belongs to one tenant — its own workspace, its own subscription with the vendor. */\n  ORGANIZATION = \"organization\",\n  /** The account belongs to one person — a personal key they authored for themselves. */\n  USER = \"user\",\n}\n\n/**\n * WHAT A DECLARED SECRET IDENTIFIES — the integration, or the account.\n *\n * A provider's `secretsContract` holds two kinds of thing and, until this existed, marked neither.\n * Slack's contract is the clearest case: `SLACK_CLIENT_ID` and `SLACK_CLIENT_SECRET` identify the\n * APPLICATION's registration with Slack, while `SLACK_API_KEY` holds a token that identifies WHOSE\n * Slack account is being acted as. They are stored differently, rotated for different reasons, and\n * owned by different parties, and one undifferentiated map made all three look alike.\n *\n * Deliberately ORTHOGONAL to {@link ExternalProvider_Connection_OwnerScope}, which is the axis it is\n * most likely to be confused with. This says what a secret IS; that says whose it is. A billing\n * provider's secret key is a CREDENTIAL — it identifies an account — and is nonetheless\n * application-owned, because the only admissible connection for it is APPLICATION. Collapsing the\n * two would make \"the deployment owns this\" and \"this identifies an integration\" the same\n * statement, and they are not.\n *\n * What the distinction buys, concretely:\n *\n *   - a credential row owned by a tenant or a person may hold a CREDENTIAL and never a REGISTRATION.\n *     Without the mark, nothing stopped a tenant storing a row slugged `SLACK_CLIENT_SECRET` that no\n *     reader would ever consult — inert, and indistinguishable from a working connection on screen;\n *   - the connect flow can derive WHICH slug a grant is stored under by construction, rather than\n *     by the convention that it happens to be the REST contract's `apiKey.secretRef`;\n *   - a vendor that supports per-tenant app registrations becomes SAYABLE, which it is not today.\n */\nexport enum ExternalProvider_SecretScope {\n  /**\n   * Identifies the INTEGRATION — an OAuth2 client id and secret, a signing secret issued to the\n   * app's registration. Authored by the operator in the deployment environment.\n   */\n  REGISTRATION = \"registration\",\n  /**\n   * Identifies an ACCOUNT — a token or key standing for whoever is being acted as. May be authored\n   * in the environment (the deployment's own account) or minted into a credential row owned by a\n   * tenant or a person; which of those are permitted is the admissibility question, not this one.\n   */\n  CREDENTIAL = \"credential\",\n}\n\n/**\n * ON WHOSE BEHALF the act is performed — orthogonal to who owns the account.\n *\n * These are two questions and every combination of them is real, which is why they are two enums\n * rather than one. An application's service identity can impersonate a user (domain-wide\n * delegation); a tenant's own registration can mint a token that acts for one of its members; a\n * tenant's bot token acts as nobody in particular. Collapsing the pair into a single vocabulary\n * makes most of those unsayable:\n *\n * | owner × delegation | the real case |\n * |---|---|\n * | APPLICATION × SERVICE | a platform API key |\n * | APPLICATION × USER | the application's service identity impersonating a user |\n * | ORGANIZATION × SERVICE | the tenant's own bot or workspace token |\n * | ORGANIZATION × USER | the tenant's registration, acting for one of its members |\n * | USER × SERVICE | a personal key the user authored |\n *\n * OAuth 2.0 carries the same split in its grant types: the client is the REGISTRATION, and the grant\n * decides on whose behalf a token is minted.\n */\nexport enum ExternalProvider_Connection_DelegationMode {\n  /** The call acts as the account's owner, with no third party behind it. */\n  SERVICE = \"service\",\n  /** The call acts for a named user, whose authorization is what makes it permissible. */\n  USER = \"user\",\n}\n\n/**\n * WHICH owner instance a single call spends — supplied BY THE CALL, never read from ambient context.\n *\n * This is the field's hardest constraint to get right and the reason it is a parameter rather than a\n * property of the execution. `ExecutionContext.initiatorIds` answers WHO is performing the operation\n * and `contextResourcesFieldIdentifier` answers WHICH ROWS are in scope; neither answers whose\n * account is being spent, and a design that borrows either is wrong for a case that is entirely\n * ordinary: one user action fanning out a message to every organization the user belongs to. One\n * initiator, one execution, N organizations, a different account per call. An ambient answer cannot\n * vary within one execution, so it cannot express that at all.\n *\n * The initiator is still decisive — as the AUTHORIZATION input. The call names the owner and the\n * runtime asks whether this initiator may act for it. Supplying and authorizing are different jobs,\n * and the resolver cannot verify a target it also invented.\n */\nexport const ExternalProvider_ConnectionShapeSchema = z.object({\n  ownerScope: z.enum(ExternalProvider_Connection_OwnerScope),\n  delegation: z.enum(ExternalProvider_Connection_DelegationMode)\n    .default(ExternalProvider_Connection_DelegationMode.SERVICE),\n});\n\n/**\n * A connection COMBINATION, with no instance attached — what a provider ADMITS.\n *\n * The capability and the call are the same two axes and different objects, which is why this is a\n * separate schema rather than the target with its identifiers made optional. A provider admitting\n * `ORGANIZATION × USER` says nothing about which organization; a call naming an organization and no\n * user is incomplete. Making one schema serve both would have to relax exactly the refinements that\n * make the call safe.\n */\nexport type ExternalProvider_ConnectionShape = z.infer<typeof ExternalProvider_ConnectionShapeSchema>;\n\nexport const ExternalProvider_ConnectionTargetSchema = ExternalProvider_ConnectionShapeSchema.extend({\n  /**\n   * The organization or user whose account is spent. Absent for APPLICATION, which has exactly one\n   * instance by construction — an id there would be a second name for the deployment.\n   */\n  ownerId: z.string().optional(),\n  /**\n   * The user the act is performed for, when `delegation` is USER. Independent of `ownerId`: a\n   * tenant-owned connection acting for one of its members carries an organization in `ownerId` and a\n   * person here.\n   */\n  actingForUserId: z.string().optional(),\n}).superRefine((target, ctx) => {\n  const ownerIsInstance = target.ownerScope !== ExternalProvider_Connection_OwnerScope.APPLICATION;\n  if (ownerIsInstance && (target.ownerId === undefined || target.ownerId === '')) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['ownerId'],\n      message: `A ${target.ownerScope}-owned connection names WHICH ${target.ownerScope}; a call that omits it has not said whose account it spends.`,\n    });\n  }\n  if (!ownerIsInstance && target.ownerId !== undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['ownerId'],\n      message: 'An application-owned connection has exactly one instance, so an ownerId here names something that does not exist.',\n    });\n  }\n  const delegated = target.delegation === ExternalProvider_Connection_DelegationMode.USER;\n  if (delegated && (target.actingForUserId === undefined || target.actingForUserId === '')) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['actingForUserId'],\n      message: 'A delegated call acts FOR someone, and the user it acts for is what makes it permissible — it cannot be left to be inferred.',\n    });\n  }\n  if (!delegated && target.actingForUserId !== undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['actingForUserId'],\n      message: 'A SERVICE call acts for nobody. Naming a user here reads as delegation the runtime will not perform, which is worse than an error: the call succeeds as the wrong identity.',\n    });\n  }\n});\n\nexport type ExternalProvider_ConnectionTarget = z.infer<typeof ExternalProvider_ConnectionTargetSchema>;\n"]}
+{"version":3,"file":"security.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAN,IAAY,0BA2BX;AA3BD,WAAY,0BAA0B;IACpC,iCAAiC;IACjC,2CAAa,CAAA;IAEb,0CAA0C;IAC1C,iDAAmB,CAAA;IAEnB,gDAAgD;IAChD,+CAAiB,CAAA;IAEjB,gCAAgC;IAChC,6CAAe,CAAA;IAEf,kEAAkE;IAClE,+CAAiB,CAAA;IAEjB,0CAA0C;IAC1C,+DAAiC,CAAA;IAEjC,+CAA+C;IAC/C,+DAAiC,CAAA;IAEjC,uCAAuC;IACvC,uDAAyB,CAAA;IAEzB,qDAAqD;IACrD,iEAAmC,CAAA;AACrC,CAAC,EA3BW,0BAA0B,KAA1B,0BAA0B,QA2BrC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAN,IAAY,qCAIX;AAJD,WAAY,qCAAqC;IAC/C,0DAAiB,CAAA;IACjB,wDAAe,CAAA;IACf,0DAAiB,CAAA;AACnB,CAAC,EAJW,qCAAqC,KAArC,qCAAqC,QAIhD;AAED,MAAM,CAAN,IAAY,8CAGX;AAHD,WAAY,8CAA8C;IACxD,mEAAiB,CAAA;IACjB,mEAAiB,CAAA;AACnB,CAAC,EAHW,8CAA8C,KAA9C,8CAA8C,QAGzD;AAED,MAAM,CAAN,IAAY,mCAIX;AAJD,WAAY,mCAAmC;IAC7C,kDAAW,CAAA;IACX,0DAAmB,CAAA;IACnB,kFAA2C,CAAA;AAC7C,CAAC,EAJW,mCAAmC,KAAnC,mCAAmC,QAI9C;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChE,6BAA6B;IAC7B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IAE5C,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE3C,iDAAiD;IACjD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEjC,8EAA8E;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,6CAA6C,GAAG,CAAC,CAAC,MAAM,CAAC;IACpE,kCAAkC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAE3D,yCAAyC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAEzC,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE3C,sCAAsC;IACtC,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE1D,4CAA4C;IAC5C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAExD,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAEH,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,6BAA6B;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;IAExC,6CAA6C;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE1B,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAErC,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAAC;IAE7G,wCAAwC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CACnD,CAAC,CAAC;AAUH,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9E,iCAAiC;IACjC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC;QACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,qDAAqD;QACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IAEF,wCAAwC;IACxC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAC1D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;QAChD,qBAAqB;QACrB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,MAAM,CAAC;QAChI,gDAAgD;QAChD,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpE,wCAAwC;QACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,0DAA0D;QAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IAEF,sCAAsC;IACtC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAAC;QAC7G,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAClD,iCAAiC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;QACrC,mBAAmB;QACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,GAAG,CAAC;KACrG,CAAC;IAEF,wCAAwC;IACxC,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAC1D,yBAAyB;QACzB,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,aAAa;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,wBAAwB;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,4BAA4B;QAC5B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtE,CAAC;IAEF,mDAAmD;IACnD,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAElD,uDAAuD;QACvD;;;;WAIG;QACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAExC,wDAAwD;QACxD,gEAAgE;QAChE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC3B,gBAAgB;QAChB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5B,+CAA+C;QAC/C,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAE9B,4CAA4C;QAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAEtC,2BAA2B;QAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;QAE9C,iCAAiC;QACjC,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;QAE3E,mBAAmB;QACnB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC5B,kBAAkB;QAClB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;QAEjD,sBAAsB;QACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;QAExC,mCAAmC;QACnC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;QAEhD,qCAAqC;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAE5D,6BAA6B;QAC7B,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAE7D,uCAAuC;QACvC,sDAAsD;QACtD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7E,+CAA+C;QAC/C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACzC,CAAC;IAEF,+BAA+B;IAC/B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC;QACjD,+BAA+B;QAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,+BAA+B;QAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IAEF,4BAA4B;IAC5B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC;KACjD,CAAC;IAEF,0BAA0B;IAC1B,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,eAAe,CAAC;QAC3D,8CAA8C;QAC9C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACxC,CAAC;IAEF,qBAAqB;IACrB,uCAAuC,CAAC,MAAM,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,UAAU,CAAC;QACtD,4BAA4B;QAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,4BAA4B;QAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,+BAA+B;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;CACH,CAAC,CAAC;AAGH,gFAAgF;AAChF,sEAAsE;AACtE,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAN,IAAY,sCAOX;AAPD,WAAY,sCAAsC;IAChD,qGAAqG;IACrG,qEAA2B,CAAA;IAC3B,mGAAmG;IACnG,uEAA6B,CAAA;IAC7B,uFAAuF;IACvF,uDAAa,CAAA;AACf,CAAC,EAPW,sCAAsC,KAAtC,sCAAsC,QAOjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAN,IAAY,4BAYX;AAZD,WAAY,4BAA4B;IACtC;;;OAGG;IACH,6DAA6B,CAAA;IAC7B;;;;OAIG;IACH,yDAAyB,CAAA;AAC3B,CAAC,EAZW,4BAA4B,KAA5B,4BAA4B,QAYvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAN,IAAY,0CAKX;AALD,WAAY,0CAA0C;IACpD,2EAA2E;IAC3E,iEAAmB,CAAA;IACnB,wFAAwF;IACxF,2DAAa,CAAA;AACf,CAAC,EALW,0CAA0C,KAA1C,0CAA0C,QAKrD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC;IAC1D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC;SAC3D,OAAO,CAAC,0CAA0C,CAAC,OAAO,CAAC;CAC/D,CAAC,CAAC;AAaH,MAAM,CAAC,MAAM,uCAAuC,GAAG,sCAAsC,CAAC,MAAM,CAAC;IACnG;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B;;;;OAIG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,KAAK,sCAAsC,CAAC,WAAW,CAAC;IACjG,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,KAAK,MAAM,CAAC,UAAU,iCAAiC,MAAM,CAAC,UAAU,8DAA8D;SAChJ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,mHAAmH;SAC7H,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,0CAA0C,CAAC,IAAI,CAAC;IACxF,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,8HAA8H;SACxI,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,6KAA6K;SACvL,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC","sourcesContent":["/**\n * Security and Authentication Schemas for External Connectors\n * \n * This module defines authentication profiles that can be used across protocols.\n * It integrates with OAuth2 to avoid duplication between API auth and OAuth2 config.\n * \n * Architecture:\n * - ExternalProvider_Auth_Kind: The type of authentication\n * - ExternalProvider_AuthProfile: How to authenticate with an API\n * - OAuth2-linked profiles: Reference OAuth2 config instead of duplicating\n * \n * @see https://swagger.io/docs/specification/v3_0/authentication/\n */\n\nimport { z } from \"zod\";\nimport {\n  OAuth2_GrantType,\n  OAuth2_TokenEndpoint_AuthMethod,\n  OAuth2_PKCE_Method,\n  OAuth2_Prompt,\n  OAuth2_AccessType,\n} from './oauth2.enums';\n\n// =============================================================================\n// AUTH KIND ENUM\n// =============================================================================\n\n/**\n * Authentication types supported by external providers\n * Follows OpenAPI 3.0 Security Schemes with extensions\n */\nexport enum ExternalProvider_Auth_Kind {\n  /** No authentication required */\n  NONE = \"none\",\n  \n  /** API Key in header, query, or cookie */\n  API_KEY = \"api_key\",\n  \n  /** Bearer token (OAuth2 access token or JWT) */\n  BEARER = \"bearer\",\n  \n  /** HTTP Basic authentication */\n  BASIC = \"basic\",\n  \n  /** OAuth2 authentication - links to OAuth2 provider definition */\n  OAUTH2 = \"oauth2\",\n  \n  /** HMAC signature-based authentication */\n  HMAC_SIGNATURE = \"hmac_signature\",\n  \n  /** OpenID Connect (OAuth2 + identity layer) */\n  OPENID_CONNECT = \"openid_connect\",\n  \n  /** Mutual TLS (client certificates) */\n  MUTUAL_TLS = \"mutual_tls\",\n  \n  /** Frontend-specific secret (not exposed to user) */\n  FRONTEND_SECRET = \"frontend_secret\",\n}\n\n// =============================================================================\n// AUTH CONFIGURATION ENUMS\n// =============================================================================\n\nexport enum ExternalProvider_Auth_ApiKey_Location {\n  HEADER = \"header\",\n  QUERY = \"query\",\n  COOKIE = \"cookie\",\n}\n\nexport enum ExternalProvider_Auth_HMAC_Signature_Algorithm {\n  SHA256 = \"sha256\",\n  SHA512 = \"sha512\",\n}\n\nexport enum ExternalProvider_Auth_Bearer_Format {\n  JWT = \"jwt\",\n  API_KEY = \"api_key\",\n  OAUTH2_ACCESS_TOKEN = \"oauth2_access_token\",\n}\n\n// =============================================================================\n// AUTH CONFIGURATION SCHEMA\n// =============================================================================\n\n/**\n * Auth Configuration - references a secret\n * This is the runtime configuration that specifies which secret to use\n */\nexport const ExternalProvider_Auth_ConfigurationSchema = z.object({\n  /** Type of authentication */\n  authKind: z.enum(ExternalProvider_Auth_Kind),\n  \n  /** References to auth profiles this config applies to */\n  profileRefs: z.array(z.string()).optional(),\n  \n  /** Is this the default auth for the provider? */\n  isDefault: z.boolean().optional(),\n  \n  /** Reference to the secret (environment variable name or secret store key) */\n  secretRef: z.string(),\n});\n\n// =============================================================================\n// RATE LIMIT CONFIGURATION\n// =============================================================================\n\nexport const ExternalProvider_RateLimitConfigurationSchema = z.object({\n  /** Maximum concurrent requests */\n  maxConcurrent: z.number().positive().optional().default(10),\n  \n  /** Minimum time (ms) between requests */\n  minTime: z.number().positive().optional(),\n  \n  /** Request reservoir (bucket size) */\n  reservoir: z.number().positive().optional(),\n  \n  /** Reservoir refresh interval (ms) */\n  reservoirRefreshInterval: z.number().positive().optional(),\n  \n  /** Amount to add to reservoir on refresh */\n  reservoirRefreshAmount: z.number().positive().optional(),\n  \n  /** Request priority (higher = higher priority) */\n  priority: z.number().int().optional().default(0),\n});\n\n// =============================================================================\n// AUTH PROFILE BASE SCHEMA\n// =============================================================================\n\nexport const ExternalProvider_AuthProfile_BaseSchema = z.object({\n  /** Type of authentication */\n  kind: z.enum(ExternalProvider_Auth_Kind),\n  \n  /** Unique reference for this auth profile */\n  ref: z.string().optional(),\n  \n  /** Is this the default auth profile? */\n  isDefault: z.boolean().default(false),\n  \n  /** Where to place the authentication (header, query, cookie) */\n  location: z.enum(ExternalProvider_Auth_ApiKey_Location).default(ExternalProvider_Auth_ApiKey_Location.HEADER),\n  \n  /** Field name for the authentication */\n  locationField: z.string().default(\"Authorization\"),\n});\n\n// =============================================================================\n// INFERRED BASE TYPES\n// =============================================================================\n\nexport type ExternalProvider_Auth_Configuration = z.infer<typeof ExternalProvider_Auth_ConfigurationSchema>;\nexport type ExternalProvider_RateLimitConfiguration = z.infer<typeof ExternalProvider_RateLimitConfigurationSchema>;\nexport type ExternalProvider_AuthProfile_Base = z.infer<typeof ExternalProvider_AuthProfile_BaseSchema>;\n\n// =============================================================================\n// DISCRIMINATED AUTH PROFILE SCHEMAS\n// =============================================================================\n\n/**\n * Complete Auth Profile Schema - discriminated union by kind\n * Each kind has specific configuration fields\n */\nexport const ExternalProvider_AuthProfile_Schema = z.discriminatedUnion(\"kind\", [\n  // ─── API Key Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.API_KEY),\n    locationField: z.string().default(\"Authorization\"),\n    /** Prefix before the key value (e.g., \"Api-Key \") */\n    prefix: z.string().optional(),\n  }),\n  \n  // ─── HMAC Signature Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.HMAC_SIGNATURE),\n    locationField: z.string().default(\"X-Signature\"),\n    /** HMAC algorithm */\n    algorithm: z.enum(ExternalProvider_Auth_HMAC_Signature_Algorithm).default(ExternalProvider_Auth_HMAC_Signature_Algorithm.SHA256),\n    /** What data to sign (body, timestamp, etc.) */\n    signaturePayload: z.enum(['body', 'timestamp', 'custom']).optional(),\n    /** Timestamp header name (if needed) */\n    timestampHeader: z.string().optional(),\n    /** Nonce header name (if needed for replay protection) */\n    nonceHeader: z.string().optional(),\n  }),\n  \n  // ─── Bearer Token Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.BEARER),\n    location: z.enum(ExternalProvider_Auth_ApiKey_Location).default(ExternalProvider_Auth_ApiKey_Location.HEADER),\n    locationField: z.string().default(\"Authorization\"),\n    /** Prefix (usually \"Bearer \") */\n    prefix: z.string().default(\"Bearer \"),\n    /** Token format */\n    format: z.enum(ExternalProvider_Auth_Bearer_Format).default(ExternalProvider_Auth_Bearer_Format.JWT),\n  }),\n  \n  // ─── OpenID Connect Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.OPENID_CONNECT),\n    /** OIDC Discovery URL */\n    discoveryUrl: z.url().optional(),\n    /** Issuer */\n    issuer: z.string().optional(),\n    /** Expected audience */\n    audience: z.string().optional(),\n    /** Token validation mode */\n    validationMode: z.enum(['jwks', 'introspection', 'local']).optional(),\n  }),\n  \n  // ─── OAuth2 Authentication (UNIFIED APPROACH) ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.OAUTH2),\n    \n    // ─── OAuth2 Provider Reference (Unified Approach) ───\n    /**\n     * Reference to OAuth2 provider definition\n     * Instead of duplicating OAuth2 config, reference the provider\n     * by its string identifier (e.g., \"google\", \"microsoft\")\n     */\n    oauth2ProviderRef: z.string().optional(),\n    \n    // ─── Inline OAuth2 Configuration (Legacy/Override) ───\n    /** Authorization URL (can be overridden or used when no ref) */\n    authUrl: z.url().optional(),\n    /** Token URL */\n    tokenUrl: z.url().optional(),\n    /** Refresh URL (if different from tokenUrl) */\n    refreshUrl: z.url().optional(),\n    \n    /** Required scopes for this auth profile */\n    scopes: z.array(z.string()).optional(),\n    \n    /** Preferred grant type */\n    grantType: z.enum(OAuth2_GrantType).optional(),\n    \n    /** Token endpoint auth method */\n    tokenEndpointAuthMethod: z.enum(OAuth2_TokenEndpoint_AuthMethod).optional(),\n    \n    /** PKCE support */\n    pkce: z.boolean().optional(),\n    /** PKCE method */\n    pkceMethod: z.enum(OAuth2_PKCE_Method).optional(),\n    \n    /** Prompt behavior */\n    prompt: z.enum(OAuth2_Prompt).optional(),\n    \n    /** Access type (online/offline) */\n    accessType: z.enum(OAuth2_AccessType).optional(),\n    \n    /** Extra authorization parameters */\n    extraAuthParams: z.record(z.string(), z.string()).optional(),\n    \n    /** Extra token parameters */\n    extraTokenParams: z.record(z.string(), z.string()).optional(),\n    \n    // ─── Token Format (for API calls) ───\n    /** How to format the token in Authorization header */\n    tokenFormat: z.enum(['bearer', 'token', 'oauth', 'custom']).default('bearer'),\n    /** Custom prefix if tokenFormat is 'custom' */\n    customTokenPrefix: z.string().optional(),\n  }),\n  \n  // ─── Basic Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.BASIC),\n    /** Username field reference */\n    usernameRef: z.string().optional(),\n    /** Password field reference */\n    passwordRef: z.string().optional(),\n  }),\n  \n  // ─── No Authentication ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.NONE),\n  }),\n  \n  // ─── Frontend Secret ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.FRONTEND_SECRET),\n    /** Secret is only used in frontend context */\n    frontendOnly: z.boolean().default(true),\n  }),\n  \n  // ─── Mutual TLS ───\n  ExternalProvider_AuthProfile_BaseSchema.extend({\n    kind: z.literal(ExternalProvider_Auth_Kind.MUTUAL_TLS),\n    /** Certificate reference */\n    certificateRef: z.string().optional(),\n    /** Private key reference */\n    privateKeyRef: z.string().optional(),\n    /** CA certificate reference */\n    caRef: z.string().optional(),\n  }),\n]);\nexport type ExternalProvider_AuthProfile = z.infer<typeof ExternalProvider_AuthProfile_Schema>;\n\n// =============================================================================\n// CONNECTION IDENTITY — whose account, on whose behalf, and which one\n// =============================================================================\n\n/**\n * WHOSE ACCOUNT a call spends.\n *\n * Distinct from the scope of the DATA the call touches, and conflating the two inverts the design.\n * A billing provider is APPLICATION-owned — the payment account belongs to whoever ships the\n * application — even though almost everything it produces is organization-shaped: a customer, a\n * subscription, an invoice per tenant. Those are data in the application's own domain, produced by\n * an application-owned account. The question here is never \"does this touch organizations?\", which\n * is true of nearly everything. It is **whose account is it?**\n *\n * Delivery follows the owner and is not a separate decision: the APPLICATION's material is authored\n * in the deployment environment by an operator, and an ORGANIZATION's or a USER's is authored\n * through the application's own settings and stored, sealed, in its database.\n *\n * **No owner ever defaults to another.** An organization-owned call with no connection REFUSES; it\n * never spends the application's account. A silent substitution means the vendor sees one identity\n * while the application believes it acted as another, and every artifact the call leaves on the far\n * side — a message, a record, a line in the vendor's own audit log — is then attributed to the wrong\n * party, with nothing downstream able to detect it. An application that wants \"the tenant's key when\n * they have connected one, otherwise ours\" expresses that in its own code by choosing which\n * connection to call with, where the choice is visible.\n */\nexport enum ExternalProvider_Connection_OwnerScope {\n  /** The account belongs to the application itself. Material comes from the deployment environment. */\n  APPLICATION = \"application\",\n  /** The account belongs to one tenant — its own workspace, its own subscription with the vendor. */\n  ORGANIZATION = \"organization\",\n  /** The account belongs to one person — a personal key they authored for themselves. */\n  USER = \"user\",\n}\n\n/**\n * WHAT A DECLARED SECRET IDENTIFIES — the integration, or the account.\n *\n * A provider's `secretsContract` holds two kinds of thing and, until this existed, marked neither.\n * Slack's contract is the clearest case: `SLACK_CLIENT_ID` and `SLACK_CLIENT_SECRET` identify the\n * APPLICATION's registration with Slack, while `SLACK_API_KEY` holds a token that identifies WHOSE\n * Slack account is being acted as. They are stored differently, rotated for different reasons, and\n * owned by different parties, and one undifferentiated map made all three look alike.\n *\n * Deliberately ORTHOGONAL to {@link ExternalProvider_Connection_OwnerScope}, which is the axis it is\n * most likely to be confused with. This says what a secret IS; that says whose it is. A billing\n * provider's secret key is a CREDENTIAL — it identifies an account — and is nonetheless\n * application-owned, because the only admissible connection for it is APPLICATION. Collapsing the\n * two would make \"the deployment owns this\" and \"this identifies an integration\" the same\n * statement, and they are not.\n *\n * What the distinction buys, concretely:\n *\n *   - a credential row owned by a tenant or a person may hold a CREDENTIAL and never a REGISTRATION.\n *     Without the mark, nothing stopped a tenant storing a row slugged `SLACK_CLIENT_SECRET` that no\n *     reader would ever consult — inert, and indistinguishable from a working connection on screen;\n *   - the connect flow can derive WHICH slug a grant is stored under by construction, rather than\n *     by the convention that it happens to be the REST contract's `apiKey.secretRef`;\n *   - a vendor that supports per-tenant app registrations becomes SAYABLE, which it is not today.\n */\nexport enum ExternalProvider_SecretScope {\n  /**\n   * Identifies the INTEGRATION — an OAuth2 client id and secret, a signing secret issued to the\n   * app's registration. Authored by the operator in the deployment environment.\n   */\n  REGISTRATION = \"registration\",\n  /**\n   * Identifies an ACCOUNT — a token or key standing for whoever is being acted as. May be authored\n   * in the environment (the deployment's own account) or minted into a credential row owned by a\n   * tenant or a person; which of those are permitted is the admissibility question, not this one.\n   */\n  CREDENTIAL = \"credential\",\n}\n\n/**\n * ON WHOSE BEHALF the act is performed — orthogonal to who owns the account.\n *\n * These are two questions and every combination of them is real, which is why they are two enums\n * rather than one. An application's service identity can impersonate a user (domain-wide\n * delegation); a tenant's own registration can mint a token that acts for one of its members; a\n * tenant's bot token acts as nobody in particular. Collapsing the pair into a single vocabulary\n * makes most of those unsayable:\n *\n * | owner × delegation | the real case |\n * |---|---|\n * | APPLICATION × SERVICE | a platform API key |\n * | APPLICATION × USER | the application's service identity impersonating a user |\n * | ORGANIZATION × SERVICE | the tenant's own bot or workspace token |\n * | ORGANIZATION × USER | the tenant's registration, acting for one of its members |\n * | USER × SERVICE | a personal key the user authored |\n *\n * OAuth 2.0 carries the same split in its grant types: the client is the REGISTRATION, and the grant\n * decides on whose behalf a token is minted.\n */\nexport enum ExternalProvider_Connection_DelegationMode {\n  /** The call acts as the account's owner, with no third party behind it. */\n  SERVICE = \"service\",\n  /** The call acts for a named user, whose authorization is what makes it permissible. */\n  USER = \"user\",\n}\n\n/**\n * WHICH owner instance a single call spends — supplied BY THE CALL, never read from ambient context.\n *\n * This is the field's hardest constraint to get right and the reason it is a parameter rather than a\n * property of the execution. `ExecutionContext.initiatorIds` answers WHO is performing the operation\n * and `contextResourcesFieldIdentifier` answers WHICH ROWS are in scope; neither answers whose\n * account is being spent, and a design that borrows either is wrong for a case that is entirely\n * ordinary: one user action fanning out a message to every organization the user belongs to. One\n * initiator, one execution, N organizations, a different account per call. An ambient answer cannot\n * vary within one execution, so it cannot express that at all.\n *\n * The initiator is still decisive — as the AUTHORIZATION input. The call names the owner and the\n * runtime asks whether this initiator may act for it. Supplying and authorizing are different jobs,\n * and the resolver cannot verify a target it also invented.\n */\nexport const ExternalProvider_ConnectionShapeSchema = z.object({\n  ownerScope: z.enum(ExternalProvider_Connection_OwnerScope),\n  delegation: z.enum(ExternalProvider_Connection_DelegationMode)\n    .default(ExternalProvider_Connection_DelegationMode.SERVICE),\n});\n\n/**\n * A connection COMBINATION, with no instance attached — what a provider ADMITS.\n *\n * The capability and the call are the same two axes and different objects, which is why this is a\n * separate schema rather than the target with its identifiers made optional. A provider admitting\n * `ORGANIZATION × USER` says nothing about which organization; a call naming an organization and no\n * user is incomplete. Making one schema serve both would have to relax exactly the refinements that\n * make the call safe.\n */\nexport type ExternalProvider_ConnectionShape = z.infer<typeof ExternalProvider_ConnectionShapeSchema>;\n\nexport const ExternalProvider_ConnectionTargetSchema = ExternalProvider_ConnectionShapeSchema.extend({\n  /**\n   * The organization or user whose account is spent. Absent for APPLICATION, which has exactly one\n   * instance by construction — an id there would be a second name for the deployment.\n   */\n  ownerId: z.string().optional(),\n  /**\n   * The user the act is performed for, when `delegation` is USER. Independent of `ownerId`: a\n   * tenant-owned connection acting for one of its members carries an organization in `ownerId` and a\n   * person here.\n   */\n  actingForUserId: z.string().optional(),\n}).superRefine((target, ctx) => {\n  const ownerIsInstance = target.ownerScope !== ExternalProvider_Connection_OwnerScope.APPLICATION;\n  if (ownerIsInstance && (target.ownerId === undefined || target.ownerId === '')) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['ownerId'],\n      message: `A ${target.ownerScope}-owned connection names WHICH ${target.ownerScope}; a call that omits it has not said whose account it spends.`,\n    });\n  }\n  if (!ownerIsInstance && target.ownerId !== undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['ownerId'],\n      message: 'An application-owned connection has exactly one instance, so an ownerId here names something that does not exist.',\n    });\n  }\n  const delegated = target.delegation === ExternalProvider_Connection_DelegationMode.USER;\n  if (delegated && (target.actingForUserId === undefined || target.actingForUserId === '')) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['actingForUserId'],\n      message: 'A delegated call acts FOR someone, and the user it acts for is what makes it permissible — it cannot be left to be inferred.',\n    });\n  }\n  if (!delegated && target.actingForUserId !== undefined) {\n    ctx.addIssue({\n      code: 'custom',\n      path: ['actingForUserId'],\n      message: 'A SERVICE call acts for nobody. Naming a user here reads as delegation the runtime will not perform, which is worse than an error: the call succeeds as the wrong identity.',\n    });\n  }\n});\n\nexport type ExternalProvider_ConnectionTarget = z.infer<typeof ExternalProvider_ConnectionTargetSchema>;\n"]}

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mDAAmD,CAAC;AAClE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,qDAAqD,CAAC;AAKpE,cAAc,iEAAiE,CAAC;AAChF,cAAc,oEAAoE,CAAC;AAGnF,cAAc,sEAAsE,CAAC;AACrF,cAAc,oEAAoE,CAAC;AACnF,cAAc,sDAAsD,CAAC;AACrE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,yDAAyD,CAAC;AACxE,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,uDAAuD,CAAC;AACtE,cAAc,yDAAyD,CAAC;AACxE,cAAc,gEAAgE,CAAC;AAC/E,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,4CAA4C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mDAAmD,CAAC;AAClE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,qDAAqD,CAAC;AAKpE,cAAc,iEAAiE,CAAC;AAChF,cAAc,oEAAoE,CAAC;AAGnF,cAAc,sEAAsE,CAAC;AACrF,cAAc,oEAAoE,CAAC;AACnF,cAAc,sDAAsD,CAAC;AACrE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,yDAAyD,CAAC;AACxE,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,uDAAuD,CAAC;AACtE,cAAc,yDAAyD,CAAC;AACxE,cAAc,gEAAgE,CAAC;AAC/E,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,4CAA4C,CAAC"}

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mDAAmD,CAAC;AAClE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,qDAAqD,CAAC;AAEpE,+FAA+F;AAC/F,+FAA+F;AAC/F,2FAA2F;AAC3F,cAAc,iEAAiE,CAAC;AAChF,cAAc,oEAAoE,CAAC;AAEnF,YAAY;AACZ,cAAc,sEAAsE,CAAC;AACrF,cAAc,oEAAoE,CAAC;AACnF,cAAc,sDAAsD,CAAC;AACrE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,yDAAyD,CAAC;AACxE,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,uDAAuD,CAAC;AACtE,cAAc,yDAAyD,CAAC;AACxE,cAAc,gEAAgE,CAAC;AAC/E,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,4CAA4C,CAAC","sourcesContent":["export * from './core/commons.external-connectors-models.schemas';\nexport * from './core/security.external-connectors-models.schemas';\nexport * from './core/operations.external-connectors-models.schemas';\nexport * from './core/protocols.external-connectors-models.schemas';\n\n// Webhook capability contracts (adapter / handler / scope resolver) — consumed by the engine's\n// webhook pipeline. The former `features/` layer (capability enum, transformer interfaces) was\n// retired 2026-09-05 (#327): it re-stated `BUILTIN_PROVIDER_CAPABILITY` and had no reader.\nexport * from './protocols/hooks-capability.external-connectors-models.schemas';\nexport * from './core/operation-classification.external-connectors-models.schemas';\n\n// Protocols\nexport * from './protocols/agent-client-protocol.external-connectors-models.schemas';\nexport * from './protocols/document-extraction.external-connectors-models.schemas';\nexport * from './protocols/email.external-connectors-models.schemas';\nexport * from './protocols/email.standard-interface.schemas';\nexport * from './protocols/embeddings.external-connectors-models.schemas';\nexport * from './protocols/image.external-connectors-models.schemas';\nexport * from './protocols/frontend.external-connectors-models.schemas';\nexport * from './protocols/hooks.external-connectors-models.schemas';\nexport * from './protocols/llm.external-connectors-models.schemas';\nexport * from './protocols/oauth2.external-connectors-models.schemas';\nexport * from './protocols/rest-api.external-connectors-models.schemas';\nexport * from './protocols/rest-operations.external-connectors-models.schemas';\nexport * from './protocols/billing.standard-interface.schemas';\nexport * from './protocols/sms.external-connectors-models.schemas';\nexport * from './protocols/sms.standard-interface.schemas';\n\n\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mDAAmD,CAAC;AAClE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,qDAAqD,CAAC;AAEpE,+FAA+F;AAC/F,+FAA+F;AAC/F,2FAA2F;AAC3F,cAAc,iEAAiE,CAAC;AAChF,cAAc,oEAAoE,CAAC;AAEnF,YAAY;AACZ,cAAc,sEAAsE,CAAC;AACrF,cAAc,oEAAoE,CAAC;AACnF,cAAc,sDAAsD,CAAC;AACrE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2DAA2D,CAAC;AAC1E,cAAc,sDAAsD,CAAC;AACrE,cAAc,yDAAyD,CAAC;AACxE,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,uDAAuD,CAAC;AACtE,cAAc,yDAAyD,CAAC;AACxE,cAAc,gEAAgE,CAAC;AAC/E,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,4CAA4C,CAAC","sourcesContent":["export * from './core/commons.external-connectors-models.schemas';\nexport * from './core/security.external-connectors-models.schemas';\nexport * from './core/operations.external-connectors-models.schemas';\nexport * from './core/protocols.external-connectors-models.schemas';\n\n// Webhook capability contracts (adapter / handler / scope resolver) — consumed by the engine's\n// webhook pipeline. The former `features/` layer (capability enum, transformer interfaces) was\n// retired 2026-09-05 (#327): it re-stated `BUILTIN_PROVIDER_CAPABILITY` and had no reader.\nexport * from './protocols/hooks-capability.external-connectors-models.schemas';\nexport * from './core/operation-classification.external-connectors-models.schemas';\n\n// Protocols\nexport * from './protocols/agent-client-protocol.external-connectors-models.schemas';\nexport * from './protocols/document-extraction.external-connectors-models.schemas';\nexport * from './protocols/email.external-connectors-models.schemas';\nexport * from './protocols/email.standard-interface.schemas';\nexport * from './protocols/embeddings.external-connectors-models.schemas';\nexport * from './protocols/image.external-connectors-models.schemas';\nexport * from './protocols/frontend.external-connectors-models.schemas';\nexport * from './protocols/hooks.external-connectors-models.schemas';\nexport * from './protocols/llm.external-connectors-models.schemas';\nexport * from './protocols/oauth2.external-connectors-models.schemas';\nexport * from './protocols/rest-api.external-connectors-models.schemas';\nexport * from './protocols/rest-operations.external-connectors-models.schemas';\nexport * from './protocols/billing.standard-interface.schemas';\nexport * from './protocols/sms.external-connectors-models.schemas';\nexport * from './protocols/sms.standard-interface.schemas';\n\n\n"]}

package/dist/esm/protocols/agent-client-protocol.external-connectors-models.schemas.d.ts

@@ -140,7 +140,33 @@ export declare enum AgentClientProtocol_PermissionCeiling {
      * can fetch anything and write only its evidence directory.
      */
     AUTO_ACCEPT_READS_AND_EDITS = "auto_accept_reads_and_edits",
-    /** No permission gate. Reserve for a disposable or isolated workspace. */
+    /**
+     * No permission gate: every tool kind is pre-approved, `execute` and the unclassified `other`
+     * included. Reserve for a disposable or isolated workspace.
+     *
+     * **This member also removes the task's mutation scope for shell commands, and that is a property
+     * of shell commands rather than of this value.** The scope predicate runs AFTER the ceiling and
+     * denies any location the task did not authorise even here — so declared file EDITS stay confined.
+     * But it decides on the `locations` a permission request carries, and a shell command carries
+     * NONE, because what a command writes is not derivable from the command string. Every ceiling
+     * below this one refuses `execute` outright, so the empty-location case never reaches the
+     * predicate; under this one it does, and `locations.some(...)` over an empty array is vacuously
+     * satisfied. A mutating command therefore reaches the workspace inside a complete, well-formed
+     * permission record showing it was allowed.
+     *
+     * Not closable by deriving a scope from the command: any parse is defeated by `sh -c "$CMD"` or a
+     * redirect through a substituted path, and an invented scope that can be walked around is worse
+     * than a stated absence. So the residual exposure under this member is exactly "shell commands are
+     * unbounded", the answer to it is git plus the post-run change set, and the companion WARNS on
+     * every run whose mutation followed a permitted act that declared no location — which is how it
+     * stops being invisible. Author this member to state that plainly; do not author it expecting the
+     * mutation scope to hold for commands.
+     *
+     * Note this is a DIFFERENT hole from an agent that never asks (see
+     * {@link AgentClientProtocol_PermissionEscalationBehaviour}): that one costs you both guards for
+     * every act, and dispatch refuses a narrower ceiling against such an agent. This one costs you the
+     * scope guard for one act kind, against a fully compliant agent.
+     */
     UNRESTRICTED = "unrestricted"
 }
 /** @wildo_source:part:end acp.permission-ceiling */
@@ -288,6 +314,47 @@ export declare enum AgentClientProtocol_HostConfigurationInheritance {
     HOST_INHERITED = "host_inherited"
 }
 /** @wildo_source:part:end acp.host-configuration-inheritance */
+/** @wildo_source:part:start acp.execution-profile facet:layer:config facet:audience:app-developer */
+/**
+ * WHERE a coding run's content actually goes, per MODEL (issue #308, join 2).
+ *
+ * An ACP coding session sends the composed task prompt, retrieved context and — through the agent's
+ * own file reads — the application's SOURCE CODE to the selected model vendor. For an application
+ * built with Wildo that can include the customer's domain model, schemas, seed data shapes and
+ * business rules. So the destination is a processor-register fact, not a runtime detail.
+ *
+ * ## Why this is per MODEL and not per provider
+ *
+ * A generalist agent routes to several vendors, so its OWN legal identity is not the identity of the
+ * vendor a given run reaches: OpenCode is a binary on the host, and the same profile can send code to
+ * Anthropic or to OpenAI depending on one model id. A per-provider declaration structurally cannot
+ * express that — it would name the agent's publisher as the recipient of code the publisher never
+ * receives, which is false in the direction a reader cannot check.
+ *
+ * ## Why it lives on the EXECUTION PROFILE
+ *
+ * The profile is already where an application authors the policy it owns, and the model is selected at
+ * dispatch time against that profile. The competing home — `providerComplianceChoices`, where every
+ * other compliance answer lives — cannot carry it: that surface is keyed by provider ref and has one
+ * entry per provider, which is exactly the shape that cannot say "per model".
+ *
+ * `ApplicationProviderComplianceChoice` warns against putting a compliance answer somewhere "nothing
+ * can read it without knowing the provider", and `providerConfigurations` is genuinely an opaque
+ * `Record<string, unknown>` bag. That objection is answered rather than ignored:
+ * {@link readCodingModelDestinations} is the named reader, exported beside this schema, and the
+ * compliance renderer calls it instead of reaching into the bag and guessing a shape. The hazard the
+ * warning names is a fact nobody can FIND; a named reader is what removes it.
+ */
+export declare const AgentClientProtocol_ModelDestinationSchema: z.ZodObject<{
+    vendorLegalEntityName: z.ZodString;
+    processingRegions: z.ZodArray<z.ZodString>;
+    gateway: z.ZodOptional<z.ZodObject<{
+        legalEntityName: z.ZodString;
+        processingRegions: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strict>;
+export type AgentClientProtocol_ModelDestination = z.infer<typeof AgentClientProtocol_ModelDestinationSchema>;
+/** @wildo_source:part:end acp.execution-profile */
 /**
  * One authored way to start an ACP agent.
  *
@@ -313,6 +380,14 @@ export declare const AgentClientProtocol_ExecutionProfileSchema: z.ZodObject<{
     maxAutoContinuations: z.ZodDefault<z.ZodNumber>;
     awaitingInputTtlMs: z.ZodDefault<z.ZodNumber>;
     maximumRecordedEventBytes: z.ZodOptional<z.ZodNumber>;
+    modelDestinations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        vendorLegalEntityName: z.ZodString;
+        processingRegions: z.ZodArray<z.ZodString>;
+        gateway: z.ZodOptional<z.ZodObject<{
+            legalEntityName: z.ZodString;
+            processingRegions: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strict>>>;
     sessionMetaExtensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strict>;
 export type AgentClientProtocol_ExecutionProfile = z.infer<typeof AgentClientProtocol_ExecutionProfileSchema>;
@@ -472,6 +547,14 @@ export declare const AgentClientProtocol_ConfigurationSchema: z.ZodObject<{
         maxAutoContinuations: z.ZodDefault<z.ZodNumber>;
         awaitingInputTtlMs: z.ZodDefault<z.ZodNumber>;
         maximumRecordedEventBytes: z.ZodOptional<z.ZodNumber>;
+        modelDestinations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            vendorLegalEntityName: z.ZodString;
+            processingRegions: z.ZodArray<z.ZodString>;
+            gateway: z.ZodOptional<z.ZodObject<{
+                legalEntityName: z.ZodString;
+                processingRegions: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>>>;
         sessionMetaExtensions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strict>>;
 }, z.core.$strip>;
@@ -762,4 +845,61 @@ export declare const CodingAgent_RunTaskOutputSchema: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strip>;
 export type CodingAgent_RunTaskOutput = z.infer<typeof CodingAgent_RunTaskOutputSchema>;
+/**
+ * One declared coding destination, joined to the provider and profile that declare it.
+ *
+ * Flat rather than nested because every consumer so far wants to enumerate destinations, not walk a
+ * tree — and a nested shape makes "which provider declares nothing" a hole a caller has to notice
+ * rather than a row it is handed. {@link CodingModelDestinationReading} carries both.
+ */
+export interface CodingModelDestinationEntry {
+    readonly providerRef: string;
+    readonly executionProfileRef: string;
+    readonly model: string;
+    readonly destination: AgentClientProtocol_ModelDestination;
+}
+/** What {@link readCodingModelDestinations} found, including what it found MISSING. */
+export interface CodingModelDestinationReading {
+    /** Every declared destination, sorted by provider, profile then model. */
+    readonly destinations: readonly CodingModelDestinationEntry[];
+    /**
+     * Profiles that can run a coding agent and declare NO destination at all.
+     *
+     * Reported as its own list rather than as an absence, because this is the gap a compliance brief
+     * must name: a run through such a profile sends source code somewhere the register cannot describe.
+     */
+    readonly profilesWithoutDestinations: readonly {
+        readonly providerRef: string;
+        readonly executionProfileRef: string;
+    }[];
+}
+/**
+ * Read per-model coding destinations out of an application's provider configurations.
+ *
+ * ## Why this function exists at all
+ *
+ * `providerConfigurations` is `Record<string, Record<string, unknown>>` — genuinely opaque, and
+ * `ApplicationProviderComplianceChoice` warns for that reason that "a compliance answer must not live
+ * somewhere nothing can read it without knowing the provider". The destination has to live there
+ * anyway (it is per MODEL, and no per-provider surface can hold it), so the objection is answered by
+ * making the reader NAMED and exported beside the schema instead of leaving each consumer to reach in
+ * and guess a shape. A compliance renderer calls this; it never parses the bag.
+ *
+ * ## What it does with malformed input
+ *
+ * SKIPS it, silently, and this is deliberate rather than lax. The function's job is to report what an
+ * application declared, and it is called from a compliance BRIEF — a lane that must not fail because
+ * one provider's opaque configuration has an unexpected shape. A profile whose destinations do not
+ * parse contributes nothing and therefore surfaces in `profilesWithoutDestinations`, which is the
+ * honest reading: nothing usable was declared.
+ *
+ * Nothing is lost by that leniency, because a malformed profile is ALREADY refused where it matters:
+ * `getAgentClientProtocolExecutionProfile` parses every profile through
+ * {@link AgentClientProtocol_ExecutionProfileSchema} when a run resolves one, and throws
+ * `ErrorType.CONFIGURATION` naming the provider and profile. So a bad destination fails the CODING RUN
+ * loudly, with an author present, while the compliance brief still reports the other twenty providers.
+ * Two surfaces, two correct answers — and note that the profile schema is `.strict()`, so before
+ * `modelDestinations` existed as a declared field an application COULD NOT have authored it at all.
+ */
+export declare function readCodingModelDestinations(providerConfigurations: Readonly<Record<string, unknown>>): CodingModelDestinationReading;
 //# sourceMappingURL=agent-client-protocol.external-connectors-models.schemas.d.ts.map

package/dist/esm/protocols/agent-client-protocol.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-client-protocol.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/agent-client-protocol.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,yCAAyC,EAC1C,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,oDAAoD,EAEpD,sCAAsC,EACtC,8CAA8C,EAG/C,MAAM,oDAAoD,CAAC;AAoC5D;;;;;;;;GAQG;AACH,oBAAY,8BAA8B;IACxC,kBAAkB,uBAAuB;CAC1C;AAED;;;;;;;;GAQG;AACH,oBAAY,4BAA4B;IACtC,oFAAoF;IACpF,IAAI,SAAS;IACb;;;;;OAKG;IACH,YAAY,iBAAiB;IAC7B,gFAAgF;IAChF,wBAAwB,6BAA6B;CACtD;AAED;;;;;;;GAOG;AACH,oBAAY,0CAA0C;IACpD,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,sGAAsG;AACtG,oBAAY,qCAAqC;IAC/C;;;;;;;;;;OAUG;IACH,aAAa,kBAAkB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,sBAAsB;IACvC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,sBAAsB;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,2BAA2B,gCAAgC;IAC3D,0EAA0E;IAC1E,YAAY,iBAAiB;CAC9B;AACD,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,qCAAqC,GAC7C,MAAM,CAaR;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,yGAAyG;AACzG,oBAAY,iDAAiD;IAC3D;;;;OAIG;IACH,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,oCAAoC,yCAAyC;IAC7E;;;;;OAKG;IACH,YAAY,iBAAiB;CAC9B;AACD,uDAAuD;AAEvD;;;;;;;;;;;;GAYG;AACH,wBAAgB,wCAAwC,CACtD,SAAS,EAAE,iDAAiD,EAC5D,+BAA+B,EAAE,OAAO,GACvC,OAAO,CAST;AAED;;;;;;;;;;;;;;;GAeG;AACH,kHAAkH;AAClH,oBAAY,gDAAgD;IAC1D,sFAAsF;IACtF,QAAQ,aAAa;IACrB;;;;OAIG;IACH,kBAAkB,uBAAuB;IACzC;;;;;OAKG;IACH,cAAc,mBAAmB;CAClC;AACD,gEAAgE;AAEhE;;;;;GAKG;AACH,qGAAqG;AACrG,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;;;;kBA6KrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAC9G,mDAAmD;AAEnD;;;;;;;;;GASG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE7I,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAE/J,eAAO,MAAM,gCAAgC;;;;;;;;iBAa3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAa1F,oBAAY,wBAAwB;IAClC,iFAAiF;IACjF,eAAe,yBAAyB;CACzC;AAED;;;;;;;;;GASG;AACH,oBAAY,sBAAsB;IAChC,4CAA4C;IAC5C,QAAQ,aAAa;IACrB,qDAAqD;IACrD,UAAU,eAAe;IACzB,6DAA6D;IAC7D,iBAAiB,sBAAsB;IACvC,mCAAmC;IACnC,OAAO,YAAY;IACnB,oEAAoE;IACpE,SAAS,cAAc;IACvB;;;;;;;;;OASG;IACH,YAAY,uBAAuB;CACpC;AAED;;;;;;;;;GASG;AACH,oBAAY,mCAAmC;IAC7C,+DAA+D;IAC/D,aAAa,kBAAkB;IAC/B;;;;;OAKG;IACH,UAAU,eAAe;IACzB;;;;OAIG;IACH,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,sBAAsB,2BAA2B;CAClD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC;IAC/C,6DAA6D;;;IAG7D;;;OAGG;;kBAEH,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG;;;;;;;;;GASG;AACH,eAAO,MAAM,mCAAmC;IAC9C,iDAAiD;;IAEjD,gEAAgE;;IAEhE,6CAA6C;;IAE7C;;;;;OAKG;;IAEH,oEAAoE;;kBAEpE,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAwBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;GAQG;AACH,eAAO,MAAM,oDAAoD;;;;;;;;;;;;iBA+C/D,CAAC;AACH,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAElI,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAExG,MAAM,MAAM,mCAAmC,GAAG,yCAAyC,GAAG;IAC5F,sBAAsB,EAAE,OAAO,uCAAuC,CAAC;IACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAMF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8CAA8C;;;iBAGzD,CAAC;AACH,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC;AAErH,eAAO,MAAM,8BAA8B;;;;iBA4BzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;QAjN1C,6DAA6D;;;QAG7D;;;WAGG;;;;QAgBH,iDAAiD;;QAEjD,gEAAgE;;QAEhE,6CAA6C;;QAE7C;;;;;WAKG;;QAEH,oEAAoE;;;iBAgPpE,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}
+{"version":3,"file":"agent-client-protocol.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../src/protocols/agent-client-protocol.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,yCAAyC,EAC1C,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,uBAAuB,EACvB,oDAAoD,EAEpD,sCAAsC,EACtC,8CAA8C,EAG/C,MAAM,oDAAoD,CAAC;AAoC5D;;;;;;;;GAQG;AACH,oBAAY,8BAA8B;IACxC,kBAAkB,uBAAuB;CAC1C;AAED;;;;;;;;GAQG;AACH,oBAAY,4BAA4B;IACtC,oFAAoF;IACpF,IAAI,SAAS;IACb;;;;;OAKG;IACH,YAAY,iBAAiB;IAC7B,gFAAgF;IAChF,wBAAwB,6BAA6B;CACtD;AAED;;;;;;;GAOG;AACH,oBAAY,0CAA0C;IACpD,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,sGAAsG;AACtG,oBAAY,qCAAqC;IAC/C;;;;;;;;;;OAUG;IACH,aAAa,kBAAkB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,sBAAsB;IACvC;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,sBAAsB;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,2BAA2B,gCAAgC;IAC3D;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,YAAY,iBAAiB;CAC9B;AACD,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,qCAAqC,GAC7C,MAAM,CAaR;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,yGAAyG;AACzG,oBAAY,iDAAiD;IAC3D;;;;OAIG;IACH,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,oCAAoC,yCAAyC;IAC7E;;;;;OAKG;IACH,YAAY,iBAAiB;CAC9B;AACD,uDAAuD;AAEvD;;;;;;;;;;;;GAYG;AACH,wBAAgB,wCAAwC,CACtD,SAAS,EAAE,iDAAiD,EAC5D,+BAA+B,EAAE,OAAO,GACvC,OAAO,CAST;AAED;;;;;;;;;;;;;;;GAeG;AACH,kHAAkH;AAClH,oBAAY,gDAAgD;IAC1D,sFAAsF;IACtF,QAAQ,aAAa;IACrB;;;;OAIG;IACH,kBAAkB,uBAAuB;IACzC;;;;;OAKG;IACH,cAAc,mBAAmB;CAClC;AACD,gEAAgE;AAEhE,qGAAqG;AACrG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,0CAA0C;;;;;;;kBAgC5C,CAAC;AACZ,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAC9G,mDAAmD;AAEnD;;;;;GAKG;AACH,qGAAqG;AACrG,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAuLrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAC9G,mDAAmD;AAEnD;;;;;;;;;GASG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE7I,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAE/J,eAAO,MAAM,gCAAgC;;;;;;;;iBAa3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAa1F,oBAAY,wBAAwB;IAClC,iFAAiF;IACjF,eAAe,yBAAyB;CACzC;AAED;;;;;;;;;GASG;AACH,oBAAY,sBAAsB;IAChC,4CAA4C;IAC5C,QAAQ,aAAa;IACrB,qDAAqD;IACrD,UAAU,eAAe;IACzB,6DAA6D;IAC7D,iBAAiB,sBAAsB;IACvC,mCAAmC;IACnC,OAAO,YAAY;IACnB,oEAAoE;IACpE,SAAS,cAAc;IACvB;;;;;;;;;OASG;IACH,YAAY,uBAAuB;CACpC;AAED;;;;;;;;;GASG;AACH,oBAAY,mCAAmC;IAC7C,+DAA+D;IAC/D,aAAa,kBAAkB;IAC/B;;;;;OAKG;IACH,UAAU,eAAe;IACzB;;;;OAIG;IACH,WAAW,gBAAgB;IAC3B;;;;;OAKG;IACH,sBAAsB,2BAA2B;CAClD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC;IAC/C,6DAA6D;;;IAG7D;;;OAGG;;kBAEH,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG;;;;;;;;;GASG;AACH,eAAO,MAAM,mCAAmC;IAC9C,iDAAiD;;IAEjD,gEAAgE;;IAEhE,6CAA6C;;IAE7C;;;;;OAKG;;IAEH,oEAAoE;;kBAEpE,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAwBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;GAQG;AACH,eAAO,MAAM,oDAAoD;;;;;;;;;;;;iBA+C/D,CAAC;AACH,MAAM,MAAM,8CAA8C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oDAAoD,CAAC,CAAC;AAElI,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAExG,MAAM,MAAM,mCAAmC,GAAG,yCAAyC,GAAG;IAC5F,sBAAsB,EAAE,OAAO,uCAAuC,CAAC;IACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAMF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8CAA8C;;;iBAGzD,CAAC;AACH,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC;AAErH,eAAO,MAAM,8BAA8B;;;;iBA4BzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;QAjN1C,6DAA6D;;;QAG7D;;;WAGG;;;;QAgBH,iDAAiD;;QAEjD,gEAAgE;;QAEhE,6CAA6C;;QAE7C;;;;;WAKG;;QAEH,oEAAoE;;;iBAgPpE,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,oCAAoC,CAAC;CAC5D;AAED,uFAAuF;AACvF,MAAM,WAAW,6BAA6B;IAC5C,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,2BAA2B,EAAE,SAAS;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,2BAA2B,CAQzC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxD,6BAA6B,CAiC/B"}