@wildo-ai/external-connectors-models 1.1.3 → 1.1.5

package/dist/esm/protocols/rest-operations.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest-operations.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/rest-operations.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,qEAAqE,CAAC;AACvH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qDAAqD,CAAC;AAE7G,oDAAoD;AACpD,oBAAY,6BAA6B;IACvC,sGAAsG;IACtG,IAAI,SAAS;IACb,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;GAIG;AACH,oBAAY,+BAA+B;IACzC,IAAI,SAAS;IACb,eAAe,oBAAoB;IACnC,SAAS,cAAc;IACvB,uFAAuF;IACvF,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,oBAAY,2BAA2B;IACrC,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,qFAAqF;IACrF,IAAI,SAAS;CACd;AAED,2FAA2F;AAC3F,MAAM,WAAW,8BAA8B;IAC7C,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gEAAgE;AAChE,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAClC,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,+BAA+B,CAAC;IACtD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,iGAAiG;IACjG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClE,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,CAAC;CACH;AAED,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8BAA8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACtE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAEhH;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE;QACd,4DAA4D;QAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,mEAAmE;QACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,4FAA4F;IAC5F,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAGD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAGD;;;;;;;;;;;;;;GAcG;AACH,oBAAY,yBAAyB;IACnC;;;;;OAKG;IACH,SAAS,cAAc;IACvB;;;;;OAKG;IACH,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,UAAU,CAAC,EAAE,iCAAiC,KAC3C,OAAO,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"rest-operations.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/rest-operations.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,qEAAqE,CAAC;AACvH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qDAAqD,CAAC;AAE7G,wJAAwJ;AACxJ,oDAAoD;AACpD,oBAAY,6BAA6B;IACvC,sGAAsG;IACtG,IAAI,SAAS;IACb,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;GAIG;AACH,oBAAY,+BAA+B;IACzC,IAAI,SAAS;IACb,eAAe,oBAAoB;IACnC,SAAS,cAAc;IACvB,uFAAuF;IACvF,IAAI,SAAS;IACb;;;;;OAKG;IACH,MAAM,WAAW;CAClB;AAED;;;;;;;GAOG;AACH,oBAAY,4BAA4B;IACtC,wFAAwF;IACxF,IAAI,SAAS;IACb,oGAAoG;IACpG,IAAI,SAAS;IACb,qGAAqG;IACrG,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,oBAAY,2BAA2B;IACrC,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,qFAAqF;IACrF,IAAI,SAAS;CACd;AAED,2FAA2F;AAC3F,MAAM,WAAW,8BAA8B;IAC7C,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gEAAgE;AAChE,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gHAAgH;IAChH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,iCAAiC;IAChD,qHAAqH;IACrH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4HAA4H;IAC5H,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAClC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IACzD,6GAA6G;IAC7G,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,+BAA+B,CAAC;IACtD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,iGAAiG;IACjG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACpF,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,CAAC;CACH;AAED,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8BAA8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACtE;AACD,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAEhH;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE;QACd,4DAA4D;QAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,mEAAmE;QACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,4FAA4F;IAC5F,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAGD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC,CAAC;IAChG;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC5F;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;CAC7F;AAED,6FAA6F;AAC7F,MAAM,WAAW,iCAAiC;IAChD,sGAAsG;IACtG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,mCAAmC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,eAAe,CAAA;KAAE,CAAC,CAAC;CAC5I;AAED,wGAAwG;AACxG,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;GAKG;AACH,oBAAY,sCAAsC;IAChD;;;OAGG;IACH,MAAM,WAAW;IACjB;;;OAGG;IACH,WAAW,gBAAgB;CAC5B;AAED,6HAA6H;AAC7H,oBAAY,iCAAiC;IAC3C;;;;OAIG;IACH,gCAAgC,qCAAqC;IACrE,8GAA8G;IAC9G,oBAAoB,yBAAyB;IAC7C,iHAAiH;IACjH,WAAW,gBAAgB;CAC5B;AAED,4CAA4C;AAC5C,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;IAC1D,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,iCAAiC,EAAE,CAYlH;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,wCAAwC,GAAG,SAAS,CAQ1H;AASD;;;GAGG;AACH,wBAAgB,gDAAgD,CAAC,SAAS,EAAE,iCAAiC,GAAG,SAAS,MAAM,EAAE,CAUhI;AAED;;;GAGG;AACH,oBAAY,yCAAyC;IACnD;;;;OAIG;IACH,MAAM,WAAW;IACjB;;;;OAIG;IACH,IAAI,SAAS;IACb,oGAAoG;IACpG,aAAa,kBAAkB;CAChC;AAED,sHAAsH;AACtH,oBAAY,uCAAuC;IACjD;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IACnC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;OASG;IACH,qBAAqB,0BAA0B;CAChD;AAED,MAAM,MAAM,mCAAmC,GAC3C;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,eAAe,CAAC;IACvE,qGAAqG;IACrG,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC;CAChD,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,qBAAqB,CAAC;IAC7E;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,mBAAmB,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEJ,qEAAqE;AACrE,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;IAC7D,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;GAGG;AACH,oBAAY,oCAAoC;IAC9C;;;;;OAKG;IACH,wBAAwB,6BAA6B;IACrD;;;;OAIG;IACH,qBAAqB,0BAA0B;IAC/C;;;OAGG;IACH,iCAAiC,sCAAsC;IACvE;;;;;;OAMG;IACH,mBAAmB,wBAAwB;CAC5C;AAED;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,QAAsF,CAAC;AAEpI;;;;;;;GAOG;AACH,wBAAgB,kDAAkD,CAChE,WAAW,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,EACvJ,SAAS,EAAE,mCAAmC,GAC7C,SAAS,MAAM,EAAE,CA0DnB;AAED;;;GAGG;AACH,wBAAgB,yCAAyC,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,oCAAoC,EAAE,CAsB3H;AAED,2GAA2G;AAC3G,eAAO,MAAM,4CAA4C,QAAkC,CAAC;AAE5F;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0CAA0C,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,2CAA2C,EAAE,CA2BnI;AAGD;;;;;;;;;;;;;;GAcG;AACH,oBAAY,yBAAyB;IACnC;;;;;OAKG;IACH,SAAS,cAAc;IACvB;;;;;OAKG;IACH,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,UAAU,CAAC,EAAE,iCAAiC,KAC3C,OAAO,CAAC,OAAO,CAAC,CAAC"}

package/dist/esm/protocols/rest-operations.external-connectors-models.schemas.js

@@ -19,7 +19,31 @@
  * path template, where its parameters ride — and none of that is backend runtime. The arrow already
  * pointed this way, since this package has no dependency on the private backend and the private
  * backend depends on it.
+ *
+ * ## This is the ONLY description of a REST provider — two earlier ones were deleted
+ *
+ * `rest-api.external-connectors-models.schemas.ts` described REST providers twice over, and both
+ * descriptions are gone. Neither should come back beside this module.
+ *
+ * - **An OpenAPI-shaped operation layer** (`REST_API_OperationSpecSchema`,
+ *   `REST_API_OperationContextSchema`, `REST_API_OperationDefinition`, `API_Parameter*`,
+ *   `API_ContentType`) — deleted 2026-09-06 by #331. Ten exported symbols and zero code readers: a
+ *   provider that authored one compiled, shipped, and was invisible to every runtime.
+ * - **A profile / configuration / status triple** (`REST_API_Provider_Profile`,
+ *   `REST_API_Provider_Configuration`, `REST_APIProvider_StatusSchema`) — deleted 2026-09-12 (#18).
+ *   Its only reader was the `ExternalProvider_ExchangeProtocol` union, itself read by nothing but a
+ *   drift test pinning it to the enum, and deleted in the same change. Its `pagination.style` was an
+ *   anonymous `"offset" | "cursor" | "page" | "link"` restating {@link ProviderRestPaginationStyle}.
+ *
+ * WHERE a REST API lives and how it authenticates is the `rest` arm of the backend runtime contract
+ * (`@wildo-ai/external-connectors-private/backend`); WHAT can be called against it is
+ * {@link ProviderRestOperation}, executed by `ProviderOperationExecutorBackendService`. A second
+ * description of either is not a missing feature — it is the drift that makes an authoring surface
+ * untrustworthy, because an author cannot tell which of two shapes is the one that runs. If an
+ * OpenAPI document is ever read (a second mapper input), it feeds `ProviderRestOperation` like
+ * every other source.
  */
+/** @wildo_source:part:start external-connectors.models.rest-operation-contract facet:layer:shared facet:family:provider facet:audience:app-developer */
 /** Where a declared parameter rides on the wire. */
 export var ProviderRestParameterLocation;
 (function (ProviderRestParameterLocation) {
@@ -40,7 +64,31 @@ export var ProviderRestRequestBodyEncoding;
     ProviderRestRequestBodyEncoding["MULTIPART"] = "multipart";
     /** A raw text body; `contentType` on the declaration says which media type is sent. */
     ProviderRestRequestBodyEncoding["TEXT"] = "text";
+    /**
+     * Raw bytes (#367, folding #364) — an image, a PDF, a file upload a vendor takes as the whole body.
+     * `contentType` is REQUIRED, by the TEXT arm's rule: a body without its media type is not addressable.
+     * The input must supply a `Uint8Array` (a Node `Buffer` is one); nothing is converted into bytes here,
+     * because a string encoded under a guessed charset is exactly how an upload arrives corrupted.
+     */
+    ProviderRestRequestBodyEncoding["BINARY"] = "binary";
 })(ProviderRestRequestBodyEncoding || (ProviderRestRequestBodyEncoding = {}));
+/**
+ * How the vendor's ANSWER is read (#367, folding #364).
+ *
+ * The request side could already send TEXT and the transport could already read TEXT and NONE, while
+ * the operation declaration could only say JSON — so an operation against a `text/csv` export could be
+ * authored and then failed at runtime as `INVALID_JSON`, a contract-breach message for a declaration
+ * the contract had no way to state. This is the missing half of that asymmetry.
+ */
+export var ProviderRestResponseDecoding;
+(function (ProviderRestResponseDecoding) {
+    /** Parse the body as JSON. The default, and what an absent `responseDecoding` means. */
+    ProviderRestResponseDecoding["JSON"] = "json";
+    /** Keep the body as text — a CSV export, an XML document. The operation's output is that string. */
+    ProviderRestResponseDecoding["TEXT"] = "text";
+    /** Read nothing — a write whose answer carries no information (a 204). The output is `undefined`. */
+    ProviderRestResponseDecoding["NONE"] = "none";
+})(ProviderRestResponseDecoding || (ProviderRestResponseDecoding = {}));
 /**
  * How a listing operation continues. A HINT the caller reads, never something the executor acts
  * on: an executor that paged on its own would decide a caller's memory budget for it, and the
@@ -54,6 +102,338 @@ export var ProviderRestPaginationStyle;
     /** The vendor returns its own continuation URL (`@odata.nextLink`, `links.next`). */
     ProviderRestPaginationStyle["LINK"] = "link";
 })(ProviderRestPaginationStyle || (ProviderRestPaginationStyle = {}));
+/**
+ * Where a `{placeholder}` sits inside one OAuth2 SCOPE entry. See {@link classifyProviderOAuth2ScopePlaceholder}.
+ *
+ * Deliberately not {@link ProviderOAuth2EndpointPlaceholderPosition}: a scope is not a URL, and the
+ * endpoint scan would call `{permissions}` an ORIGIN (it begins the string and nothing follows it).
+ */
+export var ProviderOAuth2ScopePlaceholderPosition;
+(function (ProviderOAuth2ScopePlaceholderPosition) {
+    /**
+     * The placeholder begins the scope and is followed by `/` — `{hostUrl}/.default`. Its value is an
+     * https ORIGIN, admitted only within {@link ProviderRestOAuth2.endpointHostAllowances}.
+     */
+    ProviderOAuth2ScopePlaceholderPosition["ORIGIN"] = "ORIGIN";
+    /**
+     * The placeholder is the entire scope entry — `{permissions}`. Its value is one of
+     * {@link ProviderRestOAuth2.scopeValueAllowances}.
+     */
+    ProviderOAuth2ScopePlaceholderPosition["WHOLE_SCOPE"] = "WHOLE_SCOPE";
+})(ProviderOAuth2ScopePlaceholderPosition || (ProviderOAuth2ScopePlaceholderPosition = {}));
+/** Why a scope entry cannot be resolved safely, whatever is supplied. See {@link findProviderOAuth2ScopeTemplateDefects}. */
+export var ProviderOAuth2ScopeTemplateDefect;
+(function (ProviderOAuth2ScopeTemplateDefect) {
+    /**
+     * A placeholder sits anywhere except at the start of the scope followed by `/` or the end —
+     * `api://{x}/.default`, `{x}.default`, `openid {x}`. Such a value would be concatenated with text
+     * around it into a resource or scope nobody declared.
+     */
+    ProviderOAuth2ScopeTemplateDefect["UNSUPPORTED_PLACEHOLDER_POSITION"] = "UNSUPPORTED_PLACEHOLDER_POSITION";
+    /** More than one placeholder in one scope entry: each value validated alone can compose an undeclared one. */
+    ProviderOAuth2ScopeTemplateDefect["SEVERAL_PLACEHOLDERS"] = "SEVERAL_PLACEHOLDERS";
+    /** A `{` or `}` that is not part of a well-formed placeholder: a vendor can never grant a scope carrying one. */
+    ProviderOAuth2ScopeTemplateDefect["STRAY_BRACE"] = "STRAY_BRACE";
+})(ProviderOAuth2ScopeTemplateDefect || (ProviderOAuth2ScopeTemplateDefect = {}));
+/**
+ * The defects that make a scope entry unsafe to resolve, or an empty list. Shared by the runtime (which
+ * refuses) and the transposer (which refuses to emit), so neither admits a shape the other rejects.
+ */
+export function findProviderOAuth2ScopeTemplateDefects(scope) {
+    const occurrences = [...scope.matchAll(PROVIDER_OAUTH2_ENDPOINT_PLACEHOLDER_PATTERN)];
+    const withoutPlaceholders = scope.replace(PROVIDER_OAUTH2_ENDPOINT_PLACEHOLDER_PATTERN, '');
+    const defects = [];
+    if (withoutPlaceholders.includes('{') || withoutPlaceholders.includes('}'))
+        defects.push(ProviderOAuth2ScopeTemplateDefect.STRAY_BRACE);
+    if (occurrences.length > 1)
+        defects.push(ProviderOAuth2ScopeTemplateDefect.SEVERAL_PLACEHOLDERS);
+    const first = occurrences[0];
+    if (first !== undefined) {
+        const next = scope.charAt((first.index ?? 0) + first[0].length);
+        if ((first.index ?? 0) !== 0 || (next !== '' && next !== '/'))
+            defects.push(ProviderOAuth2ScopeTemplateDefect.UNSUPPORTED_PLACEHOLDER_POSITION);
+    }
+    return defects;
+}
+/**
+ * Classify the one placeholder a scope entry may carry, or `undefined` when it carries none.
+ *
+ * ONE function, shared by the transposer and the runtime, like its endpoint counterpart. Meaningful only
+ * for a scope with no {@link findProviderOAuth2ScopeTemplateDefects}; every consumer refuses those first.
+ */
+export function classifyProviderOAuth2ScopePlaceholder(scope) {
+    const match = /^\{([A-Za-z_][A-Za-z0-9_]*)\}/.exec(scope);
+    if (match === null)
+        return undefined;
+    return {
+        name: match[1],
+        position: match[0].length === scope.length ? ProviderOAuth2ScopePlaceholderPosition.WHOLE_SCOPE : ProviderOAuth2ScopePlaceholderPosition.ORIGIN,
+        token: match[0],
+    };
+}
+/**
+ * One scope token: printable ASCII except space, `"` and backslash.
+ * spec-cite: RFC 6749 §3.3 (scope-token = 1*( %x21 / %x23-5B / %x5D-7E )).
+ * Braces are additionally refused: a value carrying one would read as a placeholder nobody resolves.
+ */
+const PROVIDER_OAUTH2_SCOPE_TOKEN_PATTERN = /^[\x21\x23-\x5B\x5D-\x7A\x7C\x7E]+$/;
+/**
+ * Why a declared whole-scope allowance cannot be applied, or an empty list. Enforced at generation so a
+ * broken set refuses the batch; the runtime matches exactly and never trusts a value it did not declare.
+ */
+export function describeProviderOAuth2ScopeValueAllowanceDefects(allowance) {
+    const defects = [];
+    if (!Array.isArray(allowance.values) || allowance.values.length === 0)
+        return ['a scope value allowance admits nothing'];
+    for (const value of allowance.values) {
+        const tokens = typeof value === 'string' ? value.split(' ') : [];
+        if (typeof value !== 'string' || value.length === 0 || !tokens.every((token) => PROVIDER_OAUTH2_SCOPE_TOKEN_PATTERN.test(token))) {
+            defects.push(`'${String(value)}' is not a space-delimited list of scope tokens`);
+        }
+    }
+    return defects;
+}
+/**
+ * Where a `{placeholder}` sits inside an OAuth2 endpoint template — the classification the host
+ * allow-list keys on. See {@link classifyProviderOAuth2EndpointPlaceholders}.
+ */
+export var ProviderOAuth2EndpointPlaceholderPosition;
+(function (ProviderOAuth2EndpointPlaceholderPosition) {
+    /**
+     * The placeholder BEGINS the template, so its value is the whole scheme + authority (+ any path
+     * prefix): `{baseUrl}/login/oauth/authorize`. The most dangerous position — the value names the
+     * scheme as well as the host.
+     */
+    ProviderOAuth2EndpointPlaceholderPosition["ORIGIN"] = "ORIGIN";
+    /**
+     * The placeholder sits between `://` and the first `/`, `?` or `#` after it:
+     * `https://{cloud}/common/…`, `https://accounts.{location}/…`. Its value decides which host
+     * receives the request.
+     */
+    ProviderOAuth2EndpointPlaceholderPosition["HOST"] = "HOST";
+    /** Anywhere after the authority. Percent-encoded, so it cannot move the request to another host. */
+    ProviderOAuth2EndpointPlaceholderPosition["PATH_OR_QUERY"] = "PATH_OR_QUERY";
+})(ProviderOAuth2EndpointPlaceholderPosition || (ProviderOAuth2EndpointPlaceholderPosition = {}));
+/** How a host- or origin-forming placeholder may be filled. See {@link ProviderRestOAuth2.endpointHostAllowances}. */
+export var ProviderOAuth2EndpointHostAllowanceKind;
+(function (ProviderOAuth2EndpointHostAllowanceKind) {
+    /**
+     * Chosen at connect time from values the provider DECLARES — Microsoft's two login clouds,
+     * Zoho's data centres. A value outside the set is refused; a declared value is substituted
+     * verbatim (it is a hostname or origin, not a path segment to encode).
+     *
+     * `hostSuffixes` additionally admits `<dns-label>(.<dns-label>)*` followed by one of the suffixes,
+     * for a vendor whose per-customer host is a subdomain it controls (Salesforce My Domain,
+     * `<name>.my.salesforce.com`). On a HOST placeholder a suffix applies only when the placeholder is
+     * the WHOLE host. On an ORIGIN placeholder it admits exactly `https://<dns-labels><suffix>` — the
+     * scheme fixed to https, no port, path, userinfo, query or fragment — which is what a per-customer
+     * origin such as a Dataverse environment URL (`https://<org>.crm4.dynamics.com`, #991) needs.
+     */
+    ProviderOAuth2EndpointHostAllowanceKind["DECLARED_VALUES"] = "DECLARED_VALUES";
+    /**
+     * Filled from the DEPLOYMENT's configured base URL for this provider — the REST contract's
+     * `baseUrl`, or the environment variable its `baseUrlEnvVarName` names. For a self-hosted vendor
+     * (Gitea) the operator names the instance once; a person connecting an account is never asked, and
+     * a value they supply is refused. Admitted in the ORIGIN position only.
+     */
+    ProviderOAuth2EndpointHostAllowanceKind["DEPLOYMENT_BASE_URL"] = "DEPLOYMENT_BASE_URL";
+    /**
+     * Filled from a deployment environment variable dedicated to THIS placeholder, named by the
+     * allowance's `envVarName` (#992). For a vendor whose endpoints sit on more than one per-tenant host
+     * — Workday's `https://{authHost}/…/authorize` and `https://{apiHost}/…/token` — one base URL cannot
+     * name both, so each host is its own operator setting (`WORKDAY_AUTH_HOST`, `WORKDAY_API_HOST`).
+     *
+     * Like DEPLOYMENT_BASE_URL, never asked of a person connecting, and a value they supply is refused.
+     * The trade is explicit: the application serves the one vendor tenant (data centre) the operator
+     * names. Admitted on a HOST placeholder that is the whole host, with a DNS-name value.
+     */
+    ProviderOAuth2EndpointHostAllowanceKind["DEPLOYMENT_CONFIGURED"] = "DEPLOYMENT_CONFIGURED";
+})(ProviderOAuth2EndpointHostAllowanceKind || (ProviderOAuth2EndpointHostAllowanceKind = {}));
+/**
+ * Why an OAuth2 endpoint TEMPLATE cannot be resolved safely, whatever values are supplied.
+ * See {@link findProviderOAuth2EndpointTemplateDefects}.
+ */
+export var ProviderOAuth2EndpointTemplateDefect;
+(function (ProviderOAuth2EndpointTemplateDefect) {
+    /**
+     * The template neither begins `http://` / `https://` nor begins with a placeholder. The WHATWG URL
+     * parser reads `https:/{h}/t`, `https:{h}/t` and `https:` + two backslashes + `{h}/t` as `https://h/t`, so a string scan
+     * for `://` would call `{h}` a PATH placeholder, encode it (a hostname survives encoding untouched),
+     * and send the request — and the client secret — to whatever a caller typed.
+     */
+    ProviderOAuth2EndpointTemplateDefect["NOT_AN_ABSOLUTE_TEMPLATE"] = "NOT_AN_ABSOLUTE_TEMPLATE";
+    /**
+     * An ORIGIN placeholder is followed by something other than `/`, `?`, `#` or the end —
+     * `{baseUrl}.evil.test/…`, `{baseUrl}:8443/…`, `{a}{b}/…`. The text after it would extend the host
+     * the origin value names.
+     */
+    ProviderOAuth2EndpointTemplateDefect["ORIGIN_NOT_TERMINATED"] = "ORIGIN_NOT_TERMINATED";
+    /**
+     * One authority carries more than one placeholder (`https://{a}{b}/…`, `https://{sub}.{domain}/…`).
+     * Each value validated alone can still compose a host no declaration admits.
+     */
+    ProviderOAuth2EndpointTemplateDefect["SEVERAL_PLACEHOLDERS_IN_AUTHORITY"] = "SEVERAL_PLACEHOLDERS_IN_AUTHORITY";
+    /**
+     * The authority after `://` is empty, begins with `/` or a backslash, or carries a backslash or `@`
+     * before the first `/`, `?` or `#`. The parser skips extra slashes (`https:///{h}/t` dials `{h}` as the
+     * HOST, while the `://` scan sees an empty authority and calls `{h}` a PATH), reads a backslash as a
+     * path separator, and
+     * reads text before `@` as userinfo — each makes the scan and the parser disagree about the host.
+     */
+    ProviderOAuth2EndpointTemplateDefect["MALFORMED_AUTHORITY"] = "MALFORMED_AUTHORITY";
+})(ProviderOAuth2EndpointTemplateDefect || (ProviderOAuth2EndpointTemplateDefect = {}));
+/**
+ * A DNS name: one or more LDH labels, lower-case (callers lower-case first).
+ * spec-cite: RFC 1123 §2.1 (a label may begin with a digit) and RFC 1035 §2.3.1 (letters, digits,
+ * hyphen; 63 octets per label).
+ */
+export const PROVIDER_OAUTH2_DNS_NAME_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/;
+/**
+ * Why a DECLARED host allowance cannot be applied where its placeholder sits — the position rules the
+ * transposer enforces at GENERATION time, so a broken declaration refuses the batch instead of being
+ * emitted and refused at every connect. Empty when the allowance is sound.
+ *
+ * The runtime resolver refuses each of these too; this exists so they are caught where a human is
+ * already looking at a diff rather than where a person is pressing Connect.
+ */
+export function describeProviderOAuth2EndpointHostAllowanceDefects(placeholder, allowance) {
+    const defects = [];
+    if (placeholder.position === ProviderOAuth2EndpointPlaceholderPosition.PATH_OR_QUERY) {
+        return ['a PATH or QUERY placeholder takes no host allowance'];
+    }
+    if (allowance.kind === ProviderOAuth2EndpointHostAllowanceKind.DEPLOYMENT_BASE_URL) {
+        if (placeholder.position !== ProviderOAuth2EndpointPlaceholderPosition.ORIGIN) {
+            defects.push('DEPLOYMENT_BASE_URL fills an ORIGIN only, and this placeholder does not begin its endpoint');
+        }
+        if (allowance.baseUrlPathSuffix !== undefined && !/^\/[^?#]*[^/?#]$/.test(allowance.baseUrlPathSuffix)) {
+            defects.push(`baseUrlPathSuffix '${allowance.baseUrlPathSuffix}' must begin with '/' and name a path (no trailing '/', query or fragment)`);
+        }
+        return defects;
+    }
+    if (allowance.kind === ProviderOAuth2EndpointHostAllowanceKind.DEPLOYMENT_CONFIGURED) {
+        if (placeholder.position !== ProviderOAuth2EndpointPlaceholderPosition.HOST || !placeholder.occupiesWholeHost) {
+            defects.push('DEPLOYMENT_CONFIGURED fills a WHOLE HOST only, and this placeholder is not one');
+        }
+        if (typeof allowance.envVarName !== 'string' || !/^[A-Z][A-Z0-9_]*$/.test(allowance.envVarName)) {
+            defects.push(`envVarName '${String(allowance.envVarName)}' is not an upper-case environment variable name`);
+        }
+        return defects;
+    }
+    if (allowance.originMatchesDeploymentBaseUrl === true && placeholder.position !== ProviderOAuth2EndpointPlaceholderPosition.ORIGIN) {
+        defects.push('originMatchesDeploymentBaseUrl applies to an ORIGIN only, and this placeholder is not one');
+    }
+    if (allowance.values.length === 0 && (allowance.hostSuffixes ?? []).length === 0) {
+        defects.push('DECLARED_VALUES admits nothing');
+    }
+    for (const value of allowance.values) {
+        if (placeholder.position === ProviderOAuth2EndpointPlaceholderPosition.ORIGIN) {
+            // Matched as text, not with `URL`: this package compiles without a DOM or Node lib. A lower-case
+            // `https://` + DNS name, with nothing after the host but an optional port, is exactly an origin as
+            // `URL#origin` would print it back.
+            const match = /^https:\/\/([^:/?#@]+)(?::\d{1,5})?$/.exec(value);
+            if (match === null || !PROVIDER_OAUTH2_DNS_NAME_PATTERN.test(match[1])) {
+                defects.push(`'${value}' is not an https origin (scheme and lower-case host only)`);
+            }
+        }
+        else if (!PROVIDER_OAUTH2_DNS_NAME_PATTERN.test(value.toLowerCase())) {
+            defects.push(`'${value}' is not a DNS name`);
+        }
+    }
+    for (const suffix of allowance.hostSuffixes ?? []) {
+        // An ORIGIN is a whole authority by construction (the scheme is then fixed to https); a HOST
+        // placeholder qualifies only when nothing surrounds it inside the authority.
+        // A placeholder that OPENS the host qualifies too, but only for the ONE suffix the template itself writes after
+        // it (#1015): any other suffix would be concatenated with that literal into a host nobody declared.
+        const opensHostWithThisSuffix = placeholder.literalHostSuffix !== undefined && placeholder.literalHostSuffix.toLowerCase() === suffix.toLowerCase();
+        if (placeholder.position === ProviderOAuth2EndpointPlaceholderPosition.HOST && !placeholder.occupiesWholeHost && !opensHostWithThisSuffix) {
+            defects.push(`host suffix '${suffix}' on a placeholder that is not the whole host`);
+            continue;
+        }
+        const labels = suffix.startsWith('.') ? suffix.slice(1) : '';
+        if (!PROVIDER_OAUTH2_DNS_NAME_PATTERN.test(labels.toLowerCase()) || !labels.includes('.')) {
+            defects.push(`host suffix '${suffix}' must begin with '.' and name at least two DNS labels (a bare '.com' admits every host under a TLD)`);
+        }
+    }
+    return defects;
+}
+/**
+ * The defects that make a template unsafe to resolve, or an empty list. Shared by the runtime (which
+ * refuses) and the transposer (which refuses to emit), so neither can admit a shape the other rejects.
+ */
+export function findProviderOAuth2EndpointTemplateDefects(template) {
+    const defects = [];
+    const leadingPlaceholder = /^\{[A-Za-z_][A-Za-z0-9_]*\}/.exec(template);
+    if (!/^https?:\/\//i.test(template) && leadingPlaceholder === null) {
+        return [ProviderOAuth2EndpointTemplateDefect.NOT_AN_ABSOLUTE_TEMPLATE];
+    }
+    if (leadingPlaceholder !== null) {
+        const next = template.charAt(leadingPlaceholder[0].length);
+        if (next !== '' && next !== '/' && next !== '?' && next !== '#')
+            defects.push(ProviderOAuth2EndpointTemplateDefect.ORIGIN_NOT_TERMINATED);
+    }
+    else {
+        const afterScheme = template.slice(template.indexOf('://') + 3);
+        const authorityEnd = afterScheme.search(/[/?#]/);
+        const authority = authorityEnd < 0 ? afterScheme : afterScheme.slice(0, authorityEnd);
+        if (authority === '' || authority.includes('\\') || authority.includes('@')) {
+            defects.push(ProviderOAuth2EndpointTemplateDefect.MALFORMED_AUTHORITY);
+            return defects;
+        }
+        const hostPlaceholders = classifyProviderOAuth2EndpointPlaceholders(template)
+            .filter((occurrence) => occurrence.position === ProviderOAuth2EndpointPlaceholderPosition.HOST);
+        if (hostPlaceholders.length > 1)
+            defects.push(ProviderOAuth2EndpointTemplateDefect.SEVERAL_PLACEHOLDERS_IN_AUTHORITY);
+    }
+    return defects;
+}
+/** The placeholder syntax an endpoint template uses — the same braces the operation path templates use. */
+export const PROVIDER_OAUTH2_ENDPOINT_PLACEHOLDER_PATTERN = /\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
+/**
+ * Classify every placeholder in an OAuth2 endpoint template by the URL component it forms.
+ *
+ * ONE function, shared by the transposer (which decides which placeholders need an allowance) and
+ * the runtime (which refuses an unallowed one), so the two cannot disagree about what a host is.
+ *
+ * Deliberately a string scan, not a URL parse: a template whose host is still `{cloud}` is not a
+ * parseable URL, which is exactly the population this classifies.
+ *
+ * - offset 0 → {@link ProviderOAuth2EndpointPlaceholderPosition.ORIGIN};
+ * - between the first `://` and the next `/`, `?` or `#` → HOST;
+ * - otherwise → PATH_OR_QUERY.
+ *
+ * This classification is only meaningful for a template with no
+ * {@link findProviderOAuth2EndpointTemplateDefects}: a template that does not begin `http(s)://` or a
+ * placeholder has no authority this scan can find, and every consumer must refuse it FIRST rather than
+ * trust the PATH_OR_QUERY answer it would get here.
+ */
+export function classifyProviderOAuth2EndpointPlaceholders(template) {
+    const schemeSeparator = template.indexOf('://');
+    let authorityEnd = -1;
+    if (schemeSeparator >= 0) {
+        const rest = template.slice(schemeSeparator + 3);
+        const end = rest.search(/[/?#]/);
+        authorityEnd = end < 0 ? template.length : schemeSeparator + 3 + end;
+    }
+    const occurrences = [];
+    for (const match of template.matchAll(PROVIDER_OAUTH2_ENDPOINT_PLACEHOLDER_PATTERN)) {
+        const index = match.index ?? 0;
+        const position = index === 0
+            ? ProviderOAuth2EndpointPlaceholderPosition.ORIGIN
+            : schemeSeparator >= 0 && index > schemeSeparator && index < authorityEnd
+                ? ProviderOAuth2EndpointPlaceholderPosition.HOST
+                : ProviderOAuth2EndpointPlaceholderPosition.PATH_OR_QUERY;
+        const occupiesWholeHost = position === ProviderOAuth2EndpointPlaceholderPosition.HOST
+            && index === schemeSeparator + 3
+            && index + match[0].length === authorityEnd;
+        const followingLiteral = position === ProviderOAuth2EndpointPlaceholderPosition.HOST && !occupiesWholeHost && index === schemeSeparator + 3
+            ? template.slice(index + match[0].length, authorityEnd)
+            : undefined;
+        // Only a PURELY literal remainder qualifies: a second placeholder in the authority is refused as malformed anyway.
+        const literalHostSuffix = followingLiteral !== undefined && followingLiteral.startsWith('.') && !followingLiteral.includes('{') ? followingLiteral : undefined;
+        occurrences.push({ name: match[1], position, index, token: match[0], occupiesWholeHost, ...(literalHostSuffix === undefined ? {} : { literalHostSuffix }) });
+    }
+    return occurrences;
+}
 /**
  * Vendors whose credential is COMPUTED per request rather than sent as a fixed header.
  *