@wildo-ai/external-connectors-models 1.1.9 → 1.1.11

package/dist/esm/core/commons.external-connectors-models.schemas.d.ts

@@ -65,6 +65,15 @@ export declare enum ExternalProvider_ExchangeProtocol_Kind {
      * provider capability token could ever fill it.
      */
     DOCUMENT_EXTRACTION_PROVIDER = "document_extraction_provider",
+    /**
+     * Text → a classifier's verdict about it (#2292): first, whether third-party content entering an agent's prompt
+     * carries a prompt-injection attack. Serves an agent's declared content guardrails.
+     *
+     * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own
+     * `EngineCapability.AI_CONTENT_SAFETY` slot so an application chooses the vendor that screens its model's input
+     * independently of the vendor that answers it.
+     */
+    CONTENT_SAFETY_PROVIDER = "content_safety_provider",
     /** Reserved — audio generation (TTS / music). Serves the AUDIO modality. Not yet implemented. */
     AUDIO_PROVIDER = "audio_provider",
     /** Reserved — video generation. Serves the VIDEO modality. Not yet implemented. */
@@ -102,6 +111,7 @@ export declare const ProviderProtocolRuntimeKind: Readonly<{
     readonly IMAGE: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER;
     readonly EMBEDDINGS: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER;
     readonly DOCUMENT_EXTRACTION: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER;
+    readonly CONTENT_SAFETY: ExternalProvider_ExchangeProtocol_Kind.CONTENT_SAFETY_PROVIDER;
     readonly AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL;
     readonly EMAIL: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER;
     readonly EMAIL_INBOUND: ExternalProvider_ExchangeProtocol_Kind.EMAIL_INBOUND_PROVIDER;
@@ -160,6 +170,111 @@ export declare const ExternalProvider_ExchangeProtocol_Configuration_BaseSchema:
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ExternalProvider_ExchangeProtocol_Configuration_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Configuration_BaseSchema>;
+/**
+ * The keys of a `providerConfigurations.<providerRef>.<protocol>` bag that belong to the PROVIDER MODULE, never to the
+ * application (#2995). Each is projected by the backend registry from the module's own runtime contract, and each
+ * decides where a request goes and how its credential travels:
+ *
+ * - `runtimeContract` — the contract itself: the base URL or host slot, the API-key header, the operations.
+ * - `endpoints` — the webhook endpoints a `WEBHOOK_ORIGINATOR` contract declares (route keys, signature handling).
+ *
+ * An application cannot author either. The registry used to deep-merge an authored `runtimeContract` over the module's,
+ * so one configuration line (`runtimeContract: { baseUrl: 'http://anywhere' }`) sent the provider's key to any URL, over
+ * plain http, in any environment, around the host-held slot and its bare-DNS rule (#992 F3). The comments said the module
+ * owned the contract; nothing held it. Now three schemas refuse these keys when the configuration is parsed
+ * (`defineSaaSConfig`, the per-environment overlay, the backend's application configuration), and the registry refuses
+ * them again before it merges, so a configuration hydrated from anywhere else is refused too.
+ *
+ * The way to point a provider at a local double is the environment-gated loopback host of a host-held slot (#2991),
+ * which a deployment outside development and test refuses.
+ *
+ * Import path: `@wildo-ai/external-connectors-models`.
+ */
+export declare enum ExternalProvider_ModuleOwnedConfigurationKey {
+    RUNTIME_CONTRACT = "runtimeContract",
+    ENDPOINTS = "endpoints"
+}
+/** One authored key a provider module owns: where it was written, so the refusal can name it. */
+export interface ExternalProvider_ModuleOwnedConfigurationKeyFinding {
+    readonly providerRef: string;
+    /** The second-level key of the bag: a protocol kind, or a key the module reads itself (`registration`). */
+    readonly protocolKey: string;
+    readonly key: ExternalProvider_ModuleOwnedConfigurationKey;
+}
+/**
+ * Every module-owned key written anywhere in a `providerConfigurations` value. Total over the
+ * {@link ExternalProvider_ModuleOwnedConfigurationKey} vocabulary, and over every bag, a protocol bag or not: no bag can
+ * legitimately carry these names, and a bag the registry does not merge today is one a later reader might.
+ * Anything that is not a record of records (a malformed value) yields nothing here; the schema reports that itself.
+ */
+export declare function findModuleOwnedProviderConfigurationKeys(providerConfigurations: unknown): ExternalProvider_ModuleOwnedConfigurationKeyFinding[];
+/** The one sentence every door refuses a module-owned key with, so an operator greps one wording. */
+export declare function describeModuleOwnedProviderConfigurationKey(finding: ExternalProvider_ModuleOwnedConfigurationKeyFinding): string;
+/**
+ * Report every module-owned key as an issue on `ctx`, at its path. The refinement each `providerConfigurations` schema
+ * applies, so the three refuse the same keys with the same words.
+ *
+ * assurance-control: WILDO.SECRETS.CREDENTIAL_SCOPING — a configuration cannot author where a provider's credential is sent (#2995).
+ */
+export declare function refuseModuleOwnedProviderConfigurationKeys(providerConfigurations: unknown, ctx: z.RefinementCtx): void;
+/**
+ * The fields of a `providerConfigurations.<providerRef>.<protocol>` bag that NAME a credential (#3022). Each decides
+ * which secret a vendor or a coding agent receives, so each is held to a rule that leaves that choice to the provider
+ * module and the framework rather than to the configuration:
+ *
+ * | field | the rule | closed by |
+ * |---|---|---|
+ * | `authConfig.secretRef` | names only a slot the module's `secretsContract` declares, by its variable or its slug | #3002 |
+ * | an execution profile's `secretEnvVarName` | names only a variable the module declares (never a slug: it is the variable the agent reads) | #3002 |
+ * | an execution profile's `inheritedEnvironmentVariables` | names anything EXCEPT a secret the framework declares | #3018 |
+ *
+ * The vocabulary is the one named source for the doors that check these fields: the backend registry, on every read and
+ * in its startup walk, and the CLI's environment door. Each reads the fields through
+ * {@link readProviderConfigurationCredentialFields} and branches on the member, so a field added here gets a reader (a
+ * compile error until it does) and then reaches every door's exhaustive switch, where it is a compile error again until
+ * the door decides its rule. Before this vocabulary the three fields were string paths written out at each door.
+ *
+ * Where the credential then GOES is the other half of the property, and it is not a configuration field at all: the
+ * module owns its destination ({@link ExternalProvider_ModuleOwnedConfigurationKey}, #2995).
+ *
+ * Import path: `@wildo-ai/external-connectors-models`.
+ */
+export declare enum ProviderConfigurationCredentialField {
+    /** `authConfig.secretRef`: the slot a protocol's key or client secret is read from, and sent to the vendor. */
+    AUTH_SECRET_REF = "auth_secret_ref",
+    /**
+     * `executionProfiles.<profile>.secretEnvVarName`, on the agent-client-protocol bag only: the one variable read from the
+     * spawning process and set in the coding agent's environment.
+     */
+    EXECUTION_PROFILE_SECRET_ENV_VAR_NAME = "execution_profile_secret_env_var_name",
+    /**
+     * `executionProfiles.<profile>.inheritedEnvironmentVariables`, on the agent-client-protocol bag only: the host's own
+     * variables (the agent's login, its tool paths) copied into the coding agent's environment.
+     */
+    EXECUTION_PROFILE_INHERITED_ENVIRONMENT = "execution_profile_inherited_environment"
+}
+/** One credential-naming field as authored, unchecked: the door that reads it decides whether it is admitted. */
+export interface ProviderConfigurationCredentialFieldReading {
+    readonly field: ProviderConfigurationCredentialField;
+    /** Where it sits inside the protocol bag (`authConfig.secretRef`, `executionProfiles.mine.secretEnvVarName`), for a refusal to name. */
+    readonly path: string;
+    /** The execution profile it was read from, for the two profile fields. */
+    readonly executionProfileRef?: string;
+    /** The authored value. Never `undefined`: a field that is not written yields no reading. */
+    readonly value: unknown;
+}
+/**
+ * Whether a protocol key of a `providerConfigurations.<providerRef>` value holds the agent-client-protocol bag: the
+ * protocol's wire value, or its member name. The backend reads the configuration under the wire value only, but a
+ * credential-naming field is checked under either key, so a bag authored under the member name is refused by every door
+ * rather than by the CLI alone.
+ */
+export declare function isAgentClientProtocolConfigurationKey(protocolKey: string): boolean;
+/**
+ * Every credential-naming field written in one protocol bag of a provider configuration, in vocabulary order. Total over
+ * {@link ProviderConfigurationCredentialField}. A bag that is not a record yields nothing; its schema reports that itself.
+ */
+export declare function readProviderConfigurationCredentialFields(protocolKey: string, bag: unknown): ProviderConfigurationCredentialFieldReading[];
 export declare enum ExternalProvider_IO_Direction {
     INBOUND = "inbound",
     OUTBOUND = "outbound",
@@ -170,4 +285,19 @@ export declare enum ExternalProvider_IO_InteractionPattern {
     EVENT_BASED = "event_based",
     STREAMING = "stream"
 }
+/**
+ * An address a vendor registration asks a person to TYPE at the vendor, as opposed to one the registration file already
+ * carries (#2713). A provider module's `vendorRegistration` names each one it needs beside its steps, so a screen can
+ * show it as a value to copy, labelled from its own words, rather than leave it inside a sentence.
+ *
+ * Add a member when a provider's registration names another such address. A Slack app's request URLs are not one: the
+ * manifest file carries them, and nobody types them.
+ */
+export declare enum ProviderVendorRegistrationAddressKind {
+    /**
+     * Where the vendor delivers a bot's messages: the Azure Bot's "Messaging endpoint", the route the engine mounts for the
+     * provider's inbound endpoint. Every bot of one application, its own or an organization's, is registered with the same one.
+     */
+    MESSAGING_ENDPOINT = "messaging_endpoint"
+}
 //# sourceMappingURL=commons.external-connectors-models.schemas.d.ts.map

package/dist/esm/core/commons.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commons.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;;;GAeG;AACH,oBAAY,sCAAsC;IAEhD,QAAQ,aAAa;IACrB,kBAAkB,uBAAuB;IAIzC,YAAY,iBAAiB;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,0BAA0B;IAE/C,8EAA8E;IAC9E,cAAc,mBAAmB;IACjC;;;;;;;;;;OAUG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;;;;;OAaG;IACH,4BAA4B,iCAAiC;IAC7D,iGAAiG;IACjG,cAAc,mBAAmB;IACjC,mFAAmF;IACnF,cAAc,mBAAmB;IAGjC,cAAc,mBAAmB;IACjC;;;;;;;OAOG;IACH,sBAAsB,2BAA2B;IAGjD,UAAU,eAAe;IAIzB,gBAAgB,qBAAqB;IAGrC,YAAY,iBAAiB;IAG7B,YAAY,iBAAiB;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;EAa7B,CAAC;AACZ,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAEjF,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAGD,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,0DAA0D;;;;;;;;;;;;;;;;iBAIrE,CAAC;AAEH,MAAM,MAAM,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0DAA0D,CAAC,CAAC;AAE9I,oBAAY,6BAA6B;IACvC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,aAAa,kBAAkB;CAChC;AAED,oBAAY,sCAAsC;IAChD,gBAAgB,qBAAqB;IACrC,WAAW,gBAAgB;IAC3B,SAAS,WAAW;CACrB"}
+{"version":3,"file":"commons.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;;;GAeG;AACH,oBAAY,sCAAsC;IAEhD,QAAQ,aAAa;IACrB,kBAAkB,uBAAuB;IAIzC,YAAY,iBAAiB;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,0BAA0B;IAE/C,8EAA8E;IAC9E,cAAc,mBAAmB;IACjC;;;;;;;;;;OAUG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;;;;;OAaG;IACH,4BAA4B,iCAAiC;IAC7D;;;;;;;OAOG;IACH,uBAAuB,4BAA4B;IACnD,iGAAiG;IACjG,cAAc,mBAAmB;IACjC,mFAAmF;IACnF,cAAc,mBAAmB;IAGjC,cAAc,mBAAmB;IACjC;;;;;;;OAOG;IACH,sBAAsB,2BAA2B;IAGjD,UAAU,eAAe;IAIzB,gBAAgB,qBAAqB;IAGrC,YAAY,iBAAiB;IAG7B,YAAY,iBAAiB;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;EAc7B,CAAC;AACZ,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAEjF,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAGD,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,0DAA0D;;;;;;;;;;;;;;;;iBAIrE,CAAC;AAEH,MAAM,MAAM,oDAAoD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0DAA0D,CAAC,CAAC;AAE9I;;;;;;;;;;;;;;;;;;;GAmBG;AACH,oBAAY,4CAA4C;IACtD,gBAAgB,oBAAoB;IACpC,SAAS,cAAc;CACxB;AAED,iGAAiG;AACjG,MAAM,WAAW,mDAAmD;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2GAA2G;IAC3G,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,4CAA4C,CAAC;CAC5D;AAID;;;;;GAKG;AACH,wBAAgB,wCAAwC,CAAC,sBAAsB,EAAE,OAAO,GAAG,mDAAmD,EAAE,CAa/I;AAED,qGAAqG;AACrG,wBAAgB,2CAA2C,CAAC,OAAO,EAAE,mDAAmD,GAAG,MAAM,CAIhI;AAED;;;;;GAKG;AACH,wBAAgB,0CAA0C,CAAC,sBAAsB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,aAAa,GAAG,IAAI,CAQtH;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,oBAAY,oCAAoC;IAC9C,+GAA+G;IAC/G,eAAe,oBAAoB;IACnC;;;OAGG;IACH,qCAAqC,0CAA0C;IAC/E;;;OAGG;IACH,uCAAuC,4CAA4C;CACpF;AAED,iHAAiH;AACjH,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,KAAK,EAAE,oCAAoC,CAAC;IACrD,wIAAwI;IACxI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAKD;;;;;GAKG;AACH,wBAAgB,qCAAqC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAElF;AAuCD;;;GAGG;AACH,wBAAgB,yCAAyC,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,2CAA2C,EAAE,CAG1I;AAWD,oBAAY,6BAA6B;IACvC,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,aAAa,kBAAkB;CAChC;AAED,oBAAY,sCAAsC;IAChD,gBAAgB,qBAAqB;IACrC,WAAW,gBAAgB;IAC3B,SAAS,WAAW;CACrB;AAGD;;;;;;;GAOG;AACH,oBAAY,qCAAqC;IAC/C;;;OAGG;IACH,kBAAkB,uBAAuB;CAC1C"}

package/dist/esm/core/commons.external-connectors-models.schemas.js

@@ -71,6 +71,15 @@ export var ExternalProvider_ExchangeProtocol_Kind;
      * provider capability token could ever fill it.
      */
     ExternalProvider_ExchangeProtocol_Kind["DOCUMENT_EXTRACTION_PROVIDER"] = "document_extraction_provider";
+    /**
+     * Text → a classifier's verdict about it (#2292): first, whether third-party content entering an agent's prompt
+     * carries a prompt-injection attack. Serves an agent's declared content guardrails.
+     *
+     * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own
+     * `EngineCapability.AI_CONTENT_SAFETY` slot so an application chooses the vendor that screens its model's input
+     * independently of the vendor that answers it.
+     */
+    ExternalProvider_ExchangeProtocol_Kind["CONTENT_SAFETY_PROVIDER"] = "content_safety_provider";
     /** Reserved — audio generation (TTS / music). Serves the AUDIO modality. Not yet implemented. */
     ExternalProvider_ExchangeProtocol_Kind["AUDIO_PROVIDER"] = "audio_provider";
     /** Reserved — video generation. Serves the VIDEO modality. Not yet implemented. */
@@ -114,6 +123,7 @@ export const ProviderProtocolRuntimeKind = Object.freeze({
     IMAGE: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,
     EMBEDDINGS: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,
     DOCUMENT_EXTRACTION: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,
+    CONTENT_SAFETY: ExternalProvider_ExchangeProtocol_Kind.CONTENT_SAFETY_PROVIDER,
     AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,
     EMAIL: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,
     EMAIL_INBOUND: ExternalProvider_ExchangeProtocol_Kind.EMAIL_INBOUND_PROVIDER,
@@ -160,6 +170,173 @@ export const ExternalProvider_ExchangeProtocol_Configuration_BaseSchema = z.obje
     authConfig: ExternalProvider_Auth_ConfigurationSchema.optional(),
     rateLimitConfig: ExternalProvider_RateLimitConfigurationSchema.optional(),
 });
+/**
+ * The keys of a `providerConfigurations.<providerRef>.<protocol>` bag that belong to the PROVIDER MODULE, never to the
+ * application (#2995). Each is projected by the backend registry from the module's own runtime contract, and each
+ * decides where a request goes and how its credential travels:
+ *
+ * - `runtimeContract` — the contract itself: the base URL or host slot, the API-key header, the operations.
+ * - `endpoints` — the webhook endpoints a `WEBHOOK_ORIGINATOR` contract declares (route keys, signature handling).
+ *
+ * An application cannot author either. The registry used to deep-merge an authored `runtimeContract` over the module's,
+ * so one configuration line (`runtimeContract: { baseUrl: 'http://anywhere' }`) sent the provider's key to any URL, over
+ * plain http, in any environment, around the host-held slot and its bare-DNS rule (#992 F3). The comments said the module
+ * owned the contract; nothing held it. Now three schemas refuse these keys when the configuration is parsed
+ * (`defineSaaSConfig`, the per-environment overlay, the backend's application configuration), and the registry refuses
+ * them again before it merges, so a configuration hydrated from anywhere else is refused too.
+ *
+ * The way to point a provider at a local double is the environment-gated loopback host of a host-held slot (#2991),
+ * which a deployment outside development and test refuses.
+ *
+ * Import path: `@wildo-ai/external-connectors-models`.
+ */
+export var ExternalProvider_ModuleOwnedConfigurationKey;
+(function (ExternalProvider_ModuleOwnedConfigurationKey) {
+    ExternalProvider_ModuleOwnedConfigurationKey["RUNTIME_CONTRACT"] = "runtimeContract";
+    ExternalProvider_ModuleOwnedConfigurationKey["ENDPOINTS"] = "endpoints";
+})(ExternalProvider_ModuleOwnedConfigurationKey || (ExternalProvider_ModuleOwnedConfigurationKey = {}));
+const MODULE_OWNED_CONFIGURATION_KEYS = Object.values(ExternalProvider_ModuleOwnedConfigurationKey);
+/**
+ * Every module-owned key written anywhere in a `providerConfigurations` value. Total over the
+ * {@link ExternalProvider_ModuleOwnedConfigurationKey} vocabulary, and over every bag, a protocol bag or not: no bag can
+ * legitimately carry these names, and a bag the registry does not merge today is one a later reader might.
+ * Anything that is not a record of records (a malformed value) yields nothing here; the schema reports that itself.
+ */
+export function findModuleOwnedProviderConfigurationKeys(providerConfigurations) {
+    const findings = [];
+    if (!isPlainRecord(providerConfigurations))
+        return findings;
+    for (const [providerRef, protocols] of Object.entries(providerConfigurations)) {
+        if (!isPlainRecord(protocols))
+            continue;
+        for (const [protocolKey, bag] of Object.entries(protocols)) {
+            if (!isPlainRecord(bag))
+                continue;
+            for (const key of MODULE_OWNED_CONFIGURATION_KEYS) {
+                if (Object.prototype.hasOwnProperty.call(bag, key))
+                    findings.push({ providerRef, protocolKey, key });
+            }
+        }
+    }
+    return findings;
+}
+/** The one sentence every door refuses a module-owned key with, so an operator greps one wording. */
+export function describeModuleOwnedProviderConfigurationKey(finding) {
+    return `providerConfigurations.${finding.providerRef}.${finding.protocolKey}.${finding.key} is refused: the provider module owns `
+        + `'${finding.key}' (where its requests go and how its credential travels), and a configuration cannot rewrite it. Remove the key. `
+        + 'To reach a local double of the vendor, set the provider\'s host slot to a loopback host:port in a development or test environment.';
+}
+/**
+ * Report every module-owned key as an issue on `ctx`, at its path. The refinement each `providerConfigurations` schema
+ * applies, so the three refuse the same keys with the same words.
+ *
+ * assurance-control: WILDO.SECRETS.CREDENTIAL_SCOPING — a configuration cannot author where a provider's credential is sent (#2995).
+ */
+export function refuseModuleOwnedProviderConfigurationKeys(providerConfigurations, ctx) {
+    for (const finding of findModuleOwnedProviderConfigurationKeys(providerConfigurations)) {
+        ctx.addIssue({
+            code: "custom",
+            path: [finding.providerRef, finding.protocolKey, finding.key],
+            message: describeModuleOwnedProviderConfigurationKey(finding),
+        });
+    }
+}
+/**
+ * The fields of a `providerConfigurations.<providerRef>.<protocol>` bag that NAME a credential (#3022). Each decides
+ * which secret a vendor or a coding agent receives, so each is held to a rule that leaves that choice to the provider
+ * module and the framework rather than to the configuration:
+ *
+ * | field | the rule | closed by |
+ * |---|---|---|
+ * | `authConfig.secretRef` | names only a slot the module's `secretsContract` declares, by its variable or its slug | #3002 |
+ * | an execution profile's `secretEnvVarName` | names only a variable the module declares (never a slug: it is the variable the agent reads) | #3002 |
+ * | an execution profile's `inheritedEnvironmentVariables` | names anything EXCEPT a secret the framework declares | #3018 |
+ *
+ * The vocabulary is the one named source for the doors that check these fields: the backend registry, on every read and
+ * in its startup walk, and the CLI's environment door. Each reads the fields through
+ * {@link readProviderConfigurationCredentialFields} and branches on the member, so a field added here gets a reader (a
+ * compile error until it does) and then reaches every door's exhaustive switch, where it is a compile error again until
+ * the door decides its rule. Before this vocabulary the three fields were string paths written out at each door.
+ *
+ * Where the credential then GOES is the other half of the property, and it is not a configuration field at all: the
+ * module owns its destination ({@link ExternalProvider_ModuleOwnedConfigurationKey}, #2995).
+ *
+ * Import path: `@wildo-ai/external-connectors-models`.
+ */
+export var ProviderConfigurationCredentialField;
+(function (ProviderConfigurationCredentialField) {
+    /** `authConfig.secretRef`: the slot a protocol's key or client secret is read from, and sent to the vendor. */
+    ProviderConfigurationCredentialField["AUTH_SECRET_REF"] = "auth_secret_ref";
+    /**
+     * `executionProfiles.<profile>.secretEnvVarName`, on the agent-client-protocol bag only: the one variable read from the
+     * spawning process and set in the coding agent's environment.
+     */
+    ProviderConfigurationCredentialField["EXECUTION_PROFILE_SECRET_ENV_VAR_NAME"] = "execution_profile_secret_env_var_name";
+    /**
+     * `executionProfiles.<profile>.inheritedEnvironmentVariables`, on the agent-client-protocol bag only: the host's own
+     * variables (the agent's login, its tool paths) copied into the coding agent's environment.
+     */
+    ProviderConfigurationCredentialField["EXECUTION_PROFILE_INHERITED_ENVIRONMENT"] = "execution_profile_inherited_environment";
+})(ProviderConfigurationCredentialField || (ProviderConfigurationCredentialField = {}));
+const AGENT_CLIENT_PROTOCOL_MEMBER_NAME = Object.keys(ExternalProvider_ExchangeProtocol_Kind)
+    .find((member) => ExternalProvider_ExchangeProtocol_Kind[member] === ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL);
+/**
+ * Whether a protocol key of a `providerConfigurations.<providerRef>` value holds the agent-client-protocol bag: the
+ * protocol's wire value, or its member name. The backend reads the configuration under the wire value only, but a
+ * credential-naming field is checked under either key, so a bag authored under the member name is refused by every door
+ * rather than by the CLI alone.
+ */
+export function isAgentClientProtocolConfigurationKey(protocolKey) {
+    return protocolKey === ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL || protocolKey === AGENT_CLIENT_PROTOCOL_MEMBER_NAME;
+}
+/**
+ * The authored execution profiles of an agent-client-protocol bag; nothing for any other bag.
+ *
+ * Read from ANY object, an array included, and each profile that is any object, never only from plain records: the doors
+ * iterated `Object.entries` before this vocabulary, and the registry's merge turns an array into `{ '0': profile }`, which
+ * an agent or a default profile can select. Reading plain records only would leave such a profile's `secretEnvVarName`
+ * unchecked while dispatch still injects it (#3022 review F1). What is not an object carries no field to read.
+ */
+function authoredExecutionProfiles(protocolKey, bag) {
+    if (!isAgentClientProtocolConfigurationKey(protocolKey) || !isObject(bag.executionProfiles))
+        return [];
+    return Object.entries(bag.executionProfiles).filter((entry) => isObject(entry[1]));
+}
+/** One reader per field, so a member added to the vocabulary without one is a compile error. */
+const PROVIDER_CONFIGURATION_CREDENTIAL_FIELD_READERS = {
+    [ProviderConfigurationCredentialField.AUTH_SECRET_REF]: (_protocolKey, bag) => {
+        const value = isObject(bag.authConfig) ? bag.authConfig.secretRef : undefined;
+        return value === undefined ? [] : [{ field: ProviderConfigurationCredentialField.AUTH_SECRET_REF, path: "authConfig.secretRef", value }];
+    },
+    [ProviderConfigurationCredentialField.EXECUTION_PROFILE_SECRET_ENV_VAR_NAME]: (protocolKey, bag) => authoredExecutionProfiles(protocolKey, bag).flatMap(([executionProfileRef, profile]) => profile.secretEnvVarName === undefined ? [] : [{
+            field: ProviderConfigurationCredentialField.EXECUTION_PROFILE_SECRET_ENV_VAR_NAME,
+            path: `executionProfiles.${executionProfileRef}.secretEnvVarName`,
+            executionProfileRef,
+            value: profile.secretEnvVarName,
+        }]),
+    [ProviderConfigurationCredentialField.EXECUTION_PROFILE_INHERITED_ENVIRONMENT]: (protocolKey, bag) => authoredExecutionProfiles(protocolKey, bag).flatMap(([executionProfileRef, profile]) => profile.inheritedEnvironmentVariables === undefined ? [] : [{
+            field: ProviderConfigurationCredentialField.EXECUTION_PROFILE_INHERITED_ENVIRONMENT,
+            path: `executionProfiles.${executionProfileRef}.inheritedEnvironmentVariables`,
+            executionProfileRef,
+            value: profile.inheritedEnvironmentVariables,
+        }]),
+};
+/**
+ * Every credential-naming field written in one protocol bag of a provider configuration, in vocabulary order. Total over
+ * {@link ProviderConfigurationCredentialField}. A bag that is not a record yields nothing; its schema reports that itself.
+ */
+export function readProviderConfigurationCredentialFields(protocolKey, bag) {
+    if (!isPlainRecord(bag))
+        return [];
+    return Object.values(ProviderConfigurationCredentialField).flatMap((field) => PROVIDER_CONFIGURATION_CREDENTIAL_FIELD_READERS[field](protocolKey, bag));
+}
+function isPlainRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Any object, an array included: the shape a credential-naming field is read from, so no authored object escapes it. */
+function isObject(value) {
+    return typeof value === "object" && value !== null;
+}
 export var ExternalProvider_IO_Direction;
 (function (ExternalProvider_IO_Direction) {
     ExternalProvider_IO_Direction["INBOUND"] = "inbound";
@@ -172,4 +349,20 @@ export var ExternalProvider_IO_InteractionPattern;
     ExternalProvider_IO_InteractionPattern["EVENT_BASED"] = "event_based";
     ExternalProvider_IO_InteractionPattern["STREAMING"] = "stream";
 })(ExternalProvider_IO_InteractionPattern || (ExternalProvider_IO_InteractionPattern = {}));
+/**
+ * An address a vendor registration asks a person to TYPE at the vendor, as opposed to one the registration file already
+ * carries (#2713). A provider module's `vendorRegistration` names each one it needs beside its steps, so a screen can
+ * show it as a value to copy, labelled from its own words, rather than leave it inside a sentence.
+ *
+ * Add a member when a provider's registration names another such address. A Slack app's request URLs are not one: the
+ * manifest file carries them, and nobody types them.
+ */
+export var ProviderVendorRegistrationAddressKind;
+(function (ProviderVendorRegistrationAddressKind) {
+    /**
+     * Where the vendor delivers a bot's messages: the Azure Bot's "Messaging endpoint", the route the engine mounts for the
+     * provider's inbound endpoint. Every bot of one application, its own or an organization's, is registered with the same one.
+     */
+    ProviderVendorRegistrationAddressKind["MESSAGING_ENDPOINT"] = "messaging_endpoint";
+})(ProviderVendorRegistrationAddressKind || (ProviderVendorRegistrationAddressKind = {}));
 //# sourceMappingURL=commons.external-connectors-models.schemas.js.map

package/dist/esm/core/commons.external-connectors-models.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"commons.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yCAAyC,EAAE,6CAA6C,EAAE,MAAM,+CAA+C,CAAC;AAGzJ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,sCAoFX;AApFD,WAAY,sCAAsC;IAChD,MAAM;IACN,+DAAqB,CAAA;IACrB,mFAAyC,CAAA;IACzC,SAAS;IAET,KAAK;IACL,uEAA6B,CAAA;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,yFAA+C,CAAA;IAC/C,sDAAsD;IACtD,8EAA8E;IAC9E,2EAAiC,CAAA;IACjC;;;;;;;;;;OAUG;IACH,qFAA2C,CAAA;IAC3C;;;;;;;;;;;;;OAaG;IACH,uGAA6D,CAAA;IAC7D,iGAAiG;IACjG,2EAAiC,CAAA;IACjC,mFAAmF;IACnF,2EAAiC,CAAA;IAEjC,QAAQ;IACR,2EAAiC,CAAA;IACjC;;;;;;;OAOG;IACH,2FAAiD,CAAA;IAEjD,OAAO;IACP,mEAAyB,CAAA;IACzB,mBAAmB;IAEnB,UAAU;IACV,+EAAqC,CAAA;IAErC,iBAAiB;IACjB,uEAA6B,CAAA;IAE7B,WAAW;IACX,uEAA6B,CAAA;AAC/B,CAAC,EApFW,sCAAsC,KAAtC,sCAAsC,QAoFjD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,UAAU,EAAE,sCAAsC,CAAC,mBAAmB;IACtE,mBAAmB,EAAE,sCAAsC,CAAC,4BAA4B;IACxF,qBAAqB,EAAE,sCAAsC,CAAC,qBAAqB;IACnF,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,aAAa,EAAE,sCAAsC,CAAC,sBAAsB;IAC5E,UAAU,EAAE,sCAAsC,CAAC,UAAU;IAC7D,OAAO,EAAE,sCAAsC,CAAC,gBAAgB;IAChE,kBAAkB,EAAE,sCAAsC,CAAC,kBAAkB;IAC7E,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,IAAI,EAAE,sCAAsC,CAAC,QAAQ;CAC7C,CAAC,CAAC;AAIZ,MAAM,CAAN,IAAY,uBAIX;AAJD,WAAY,uBAAuB;IACjC,sDAA2B,CAAA;IAC3B,8CAAmB,CAAA;IACnB,oDAAyB,CAAA;AAC3B,CAAC,EAJW,uBAAuB,KAAvB,uBAAuB,QAIlC;AAGD,MAAM,CAAN,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,+BAAa,CAAA;IACb,6BAAW,CAAA;IACX,iCAAe,CAAA;IACf,mCAAiB,CAAA;IACjB,+BAAa,CAAA;IACb,qCAAmB,CAAA;AACrB,CAAC,EARW,cAAc,KAAd,cAAc,QAQzB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,0DAA0D,GAAG,CAAC,CAAC,MAAM,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,yCAAyC,CAAC,QAAQ,EAAE;IAChE,eAAe,EAAE,6CAA6C,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAIH,MAAM,CAAN,IAAY,6BAIX;AAJD,WAAY,6BAA6B;IACvC,oDAAmB,CAAA;IACnB,sDAAqB,CAAA;IACrB,gEAA+B,CAAA;AACjC,CAAC,EAJW,6BAA6B,KAA7B,6BAA6B,QAIxC;AAED,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,+EAAqC,CAAA;IACrC,qEAA2B,CAAA;IAC3B,8DAAoB,CAAA;AACtB,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD","sourcesContent":["import { z } from \"zod\";\nimport { ExternalProvider_Auth_ConfigurationSchema, ExternalProvider_RateLimitConfigurationSchema } from \"./security.external-connectors-models.schemas\";\n\n\n/**\n * The ONE protocol vocabulary a provider can speak. Every other list is derived from or pinned\n * to this enum: the backend runtime-contract discriminants (`ProviderProtocolRuntimeKind`, a\n * subset of these members) and the application-authoring keys (`BUILTIN_PROVIDER_PROTOCOL` in\n * `@wildo-ai/saas-models`, its key set pinned by a drift test because that package must not\n * import this one into browser bundles).\n *\n * RETIRED 2026-09-05 (#327): `MCP_CONNECTOR`, `A2A_CONNECTOR`, `GIT_PROVIDER`, `GRPC`,\n * `SSO_SAML`. Each had an authored profile/configuration module in this package and NOTHING\n * that read it — no runtime-contract arm, no provider module declaring it, no consumer of any\n * export outside the module itself (measured with a positive control). Wildo's own MCP server,\n * A2A plane and SAML SSO are engine-implemented surfaces, not provider-declared protocols, and\n * none of them referenced these members. A retired member is refused at CONFIG time by\n * `ProviderProtocolSelectorSchema`, naming the value. Re-admit one only together with a\n * runtime-contract arm and a provider module that declares it.\n */\nexport enum ExternalProvider_ExchangeProtocol_Kind {\n  // WEB\n  REST_API = \"rest_api\",\n  WEBHOOK_ORIGINATOR = \"webhook_originator\",\n  // SOAP ?\n  \n  // AI\n  LLM_PROVIDER = \"llm_provider\",\n  /**\n   * Zed's Agent Client Protocol — a JSON-RPC session between Wildo (the client)\n   * and a CODING AGENT subprocess that reads and writes a workspace, runs\n   * commands, and calls back for permission.\n   *\n   * Its own protocol kind rather than a mode of `CLI_RUNTIME`, for the reason\n   * `EMBEDDINGS_PROVIDER` records above and one more that is specific to it: a\n   * coding agent is not a one-shot text call wearing a subprocess. Every\n   * capability the previous CLI transport lacked — token and cost accounting, a\n   * permission channel, cancellation, resumption, live progress — was missing\n   * because the one-shot shape has nowhere to put it, not because nobody had\n   * implemented it yet.\n   *\n   * NOT to be confused with the IBM/BeeAI \"Agent Communication Protocol\", which\n   * shares the acronym and is agent-to-agent — that space is `A2A_CONNECTOR`.\n   */\n  AGENT_CLIENT_PROTOCOL = \"agent_client_protocol\",\n  // AI — multimodal generation (artifact-modality axis)\n  /** Text-to-image generation (wired: gpt-image). Serves the IMAGE modality. */\n  IMAGE_PROVIDER = \"image_provider\",\n  /**\n   * Text → vector embeddings (wired: OpenAI `text-embedding-3-*`). Serves the RAG derived-data\n   * tier (corpus embedding via the `rag:embedding-drain` worker; query-time embedding in\n   * retrieval). Deliberately its OWN protocol kind rather than a sixth `LLMProvider_OperationKey`\n   * (RAG plan DL2): an unmapped LLM operation key fails SILENTLY across six consumer surfaces\n   * (registry semantic-operation map, output normalization, executor dispatch, capability slot,\n   * usage completeness, observability sink), whereas a new protocol kind fails COMPILATION at\n   * every `runtimeContract.kind` switch — the `IMAGE_PROVIDER` precedent. It also gets its own\n   * `EngineCapability.AI_EMBEDDINGS` slot so an application can select its embeddings provider\n   * independently of its chat provider.\n   */\n  EMBEDDINGS_PROVIDER = \"embeddings_provider\",\n  /**\n   * Document bytes → text (wired: Mistral `mistral-ocr-latest`). Serves the file-side text\n   * provider that `FileTextExtractionBackendService` owns, whose largest consumer is\n   * `.ragSource()` corpus ingestion.\n   *\n   * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own\n   * `EngineCapability.AI_DOCUMENT_EXTRACTION` slot so an application selects its OCR provider\n   * independently of chat and embeddings — three unrelated procurement decisions.\n   *\n   * NOT to be confused with PDF *generation* (templates → bytes), which is the `pdfTemplates`\n   * surface and is semantically the opposite direction. It has no provider slot: the\n   * `EngineCapability.DOCUMENT_GENERATION` this paragraph used to name was withdrawn because no\n   * provider capability token could ever fill it.\n   */\n  DOCUMENT_EXTRACTION_PROVIDER = \"document_extraction_provider\",\n  /** Reserved — audio generation (TTS / music). Serves the AUDIO modality. Not yet implemented. */\n  AUDIO_PROVIDER = \"audio_provider\",\n  /** Reserved — video generation. Serves the VIDEO modality. Not yet implemented. */\n  VIDEO_PROVIDER = \"video_provider\",\n  \n  // INFRA\n  EMAIL_PROVIDER = \"email_provider\",\n  /**\n   * RECEIVING email (#1630): the provider hosts a receiving domain, announces each message through a\n   * `WEBHOOK_ORIGINATOR` endpoint whose `capability` is `EMAIL_INBOUND`, and serves the message on\n   * request through `StandardInboundEmail_Interface`. Its own kind rather than a mode of\n   * `EMAIL_PROVIDER` because sending and receiving are separate procurement decisions and share no\n   * operation: a sending contract composes a request, a receiving one parses a notification and\n   * fetches a message.\n   */\n  EMAIL_INBOUND_PROVIDER = \"email_inbound_provider\",\n  \n  // AUTH\n  SSO_OAUTH2 = \"sso_oauth2\",\n  // OPENID_CONNECT ?\n\n  // BILLING\n  BILLING_PROVIDER = \"billing_provider\",\n\n  // SMS (Phase G2)\n  SMS_PROVIDER = \"sms_provider\",\n\n  // FRONTEND\n  FRONTEND_SDK = \"frontend_sdk\",\n}\n\n/**\n * The BACKEND runtime-contract discriminants — the subset of `ExternalProvider_ExchangeProtocol_Kind`\n * a `BackendProviderModule` can execute. Its VALUES are the enum members themselves (one spelling per\n * member since 2026-09-05, #327), so a runtime contract's `kind` IS the exchange kind and no\n * protocol→kind map exists anywhere; `BackendProtocolBinding.protocol` (the authoring KEY) and\n * `runtimeContract.kind` are checked for agreement at composition. A member absent here has no\n * backend arm: `FRONTEND_SDK` is declared by browser-side modules only, `AUDIO_PROVIDER` /\n * `VIDEO_PROVIDER` are reserved.\n *\n * A frozen const rather than a second enum because provider modules are an extension boundary and\n * the union discriminant must stay the enum member type. Import from\n * `@wildo-ai/external-connectors-models`; the private backend package consumes it, never defines it.\n */\nexport const ProviderProtocolRuntimeKind = Object.freeze({\n  LLM: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n  IMAGE: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n  EMBEDDINGS: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n  DOCUMENT_EXTRACTION: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n  AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n  EMAIL: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n  EMAIL_INBOUND: ExternalProvider_ExchangeProtocol_Kind.EMAIL_INBOUND_PROVIDER,\n  OAUTH2_SSO: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n  BILLING: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n  WEBHOOK_ORIGINATOR: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n  SMS: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n  REST: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n} as const);\nexport type ProviderProtocolRuntimeKind =\n  (typeof ProviderProtocolRuntimeKind)[keyof typeof ProviderProtocolRuntimeKind];\n\nexport enum APPLICATION_ENVIRONMENT {\n  DEVELOPMENT = \"development\",\n  STAGING = \"staging\",\n  PRODUCTION = \"production\",\n}\n\n\nexport enum API_HttpMethod {\n  GET = \"GET\",\n  POST = \"POST\",\n  PUT = \"PUT\",\n  PATCH = \"PATCH\",\n  DELETE = \"DELETE\",\n  HEAD = \"HEAD\",\n  OPTIONS = \"OPTIONS\",\n}\n\n/**\n * Shared protocol configuration fields — the ONE survivor of the per-protocol profile /\n * configuration / status triple (#965), and the reason it stays is a reader, not a legacy.\n *\n * `authConfig` is read on a resolved provider configuration by the OAuth2 connection resolver\n * (`clientId`, `secretRef`) and by the registry's default-over-custom merge, and `enabled` is what\n * a provider configuration parses at the boundary (`AgentClientProtocol_ConfigurationSchema`,\n * `OAuth2Provider_ConfigurationSchema` extend this; the LLM and webhook configurations intersect\n * with the inferred type). It is optional because execution-oriented protocols can own their own\n * auth/runtime policy contract.\n *\n * What is gone: the profile base (a provider's transport facts now live on its runtime contract,\n * `ProviderProtocolRuntimeContract`, which the registry projects) and the status base (nothing\n * ever recorded a per-protocol status). Both had no reader outside the declarations that extended\n * them.\n */\nexport const ExternalProvider_ExchangeProtocol_Configuration_BaseSchema = z.object({\n  enabled: z.boolean(),\n  authConfig: ExternalProvider_Auth_ConfigurationSchema.optional(),\n  rateLimitConfig: ExternalProvider_RateLimitConfigurationSchema.optional(),\n});\n\nexport type ExternalProvider_ExchangeProtocol_Configuration_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Configuration_BaseSchema>;\n\nexport enum ExternalProvider_IO_Direction {\n  INBOUND = \"inbound\",\n  OUTBOUND = \"outbound\",\n  BIDIRECTIONAL = \"bidirectional\",\n}\n\nexport enum ExternalProvider_IO_InteractionPattern {\n  REQUEST_RESPONSE = \"request_response\",\n  EVENT_BASED = \"event_based\",\n  STREAMING = \"stream\",\n}\n\n"]}
+{"version":3,"file":"commons.external-connectors-models.schemas.js","sourceRoot":"","sources":["../../../../src/core/commons.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yCAAyC,EAAE,6CAA6C,EAAE,MAAM,+CAA+C,CAAC;AAGzJ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAN,IAAY,sCA6FX;AA7FD,WAAY,sCAAsC;IAChD,MAAM;IACN,+DAAqB,CAAA;IACrB,mFAAyC,CAAA;IACzC,SAAS;IAET,KAAK;IACL,uEAA6B,CAAA;IAC7B;;;;;;;;;;;;;;;OAeG;IACH,yFAA+C,CAAA;IAC/C,sDAAsD;IACtD,8EAA8E;IAC9E,2EAAiC,CAAA;IACjC;;;;;;;;;;OAUG;IACH,qFAA2C,CAAA;IAC3C;;;;;;;;;;;;;OAaG;IACH,uGAA6D,CAAA;IAC7D;;;;;;;OAOG;IACH,6FAAmD,CAAA;IACnD,iGAAiG;IACjG,2EAAiC,CAAA;IACjC,mFAAmF;IACnF,2EAAiC,CAAA;IAEjC,QAAQ;IACR,2EAAiC,CAAA;IACjC;;;;;;;OAOG;IACH,2FAAiD,CAAA;IAEjD,OAAO;IACP,mEAAyB,CAAA;IACzB,mBAAmB;IAEnB,UAAU;IACV,+EAAqC,CAAA;IAErC,iBAAiB;IACjB,uEAA6B,CAAA;IAE7B,WAAW;IACX,uEAA6B,CAAA;AAC/B,CAAC,EA7FW,sCAAsC,KAAtC,sCAAsC,QA6FjD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,UAAU,EAAE,sCAAsC,CAAC,mBAAmB;IACtE,mBAAmB,EAAE,sCAAsC,CAAC,4BAA4B;IACxF,cAAc,EAAE,sCAAsC,CAAC,uBAAuB;IAC9E,qBAAqB,EAAE,sCAAsC,CAAC,qBAAqB;IACnF,KAAK,EAAE,sCAAsC,CAAC,cAAc;IAC5D,aAAa,EAAE,sCAAsC,CAAC,sBAAsB;IAC5E,UAAU,EAAE,sCAAsC,CAAC,UAAU;IAC7D,OAAO,EAAE,sCAAsC,CAAC,gBAAgB;IAChE,kBAAkB,EAAE,sCAAsC,CAAC,kBAAkB;IAC7E,GAAG,EAAE,sCAAsC,CAAC,YAAY;IACxD,IAAI,EAAE,sCAAsC,CAAC,QAAQ;CAC7C,CAAC,CAAC;AAIZ,MAAM,CAAN,IAAY,uBAIX;AAJD,WAAY,uBAAuB;IACjC,sDAA2B,CAAA;IAC3B,8CAAmB,CAAA;IACnB,oDAAyB,CAAA;AAC3B,CAAC,EAJW,uBAAuB,KAAvB,uBAAuB,QAIlC;AAGD,MAAM,CAAN,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,+BAAa,CAAA;IACb,6BAAW,CAAA;IACX,iCAAe,CAAA;IACf,mCAAiB,CAAA;IACjB,+BAAa,CAAA;IACb,qCAAmB,CAAA;AACrB,CAAC,EARW,cAAc,KAAd,cAAc,QAQzB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,0DAA0D,GAAG,CAAC,CAAC,MAAM,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,yCAAyC,CAAC,QAAQ,EAAE;IAChE,eAAe,EAAE,6CAA6C,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAIH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAN,IAAY,4CAGX;AAHD,WAAY,4CAA4C;IACtD,oFAAoC,CAAA;IACpC,uEAAuB,CAAA;AACzB,CAAC,EAHW,4CAA4C,KAA5C,4CAA4C,QAGvD;AAUD,MAAM,+BAA+B,GAA4D,MAAM,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC;AAE7J;;;;;GAKG;AACH,MAAM,UAAU,wCAAwC,CAAC,sBAA+B;IACtF,MAAM,QAAQ,GAA0D,EAAE,CAAC;IAC3E,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,KAAK,MAAM,GAAG,IAAI,+BAA+B,EAAE,CAAC;gBAClD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,2CAA2C,CAAC,OAA4D;IACtH,OAAO,0BAA0B,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,wCAAwC;UAC9H,IAAI,OAAO,CAAC,GAAG,mHAAmH;UAClI,oIAAoI,CAAC;AAC3I,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0CAA0C,CAAC,sBAA+B,EAAE,GAAoB;IAC9G,KAAK,MAAM,OAAO,IAAI,wCAAwC,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC;YAC7D,OAAO,EAAE,2CAA2C,CAAC,OAAO,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAN,IAAY,oCAaX;AAbD,WAAY,oCAAoC;IAC9C,+GAA+G;IAC/G,2EAAmC,CAAA;IACnC;;;OAGG;IACH,uHAA+E,CAAA;IAC/E;;;OAGG;IACH,2HAAmF,CAAA;AACrF,CAAC,EAbW,oCAAoC,KAApC,oCAAoC,QAa/C;AAaD,MAAM,iCAAiC,GAAI,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAgE;KAC1J,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,sCAAsC,CAAC,MAAM,CAAC,KAAK,sCAAsC,CAAC,qBAAqB,CAAC,CAAC;AAErI;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CAAC,WAAmB;IACvE,OAAO,WAAW,KAAK,sCAAsC,CAAC,qBAAqB,IAAI,WAAW,KAAK,iCAAiC,CAAC;AAC3I,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,WAAmB,EAAE,GAA4B;IAClF,IAAI,CAAC,qCAAqC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAC;IACvG,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA8C,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjI,CAAC;AAED,gGAAgG;AAChG,MAAM,+CAA+C,GAEjD;IACF,CAAC,oCAAoC,CAAC,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE;QAC5E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,UAAsC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3G,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,oCAAoC,CAAC,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,CAAC,oCAAoC,CAAC,qCAAqC,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CACjG,yBAAyB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACrI,KAAK,EAAE,oCAAoC,CAAC,qCAAqC;YACjF,IAAI,EAAE,qBAAqB,mBAAmB,mBAAmB;YACjE,mBAAmB;YACnB,KAAK,EAAE,OAAO,CAAC,gBAAgB;SAChC,CAAC,CAAC;IACL,CAAC,oCAAoC,CAAC,uCAAuC,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CACnG,yBAAyB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,6BAA6B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClJ,KAAK,EAAE,oCAAoC,CAAC,uCAAuC;YACnF,IAAI,EAAE,qBAAqB,mBAAmB,gCAAgC;YAC9E,mBAAmB;YACnB,KAAK,EAAE,OAAO,CAAC,6BAA6B;SAC7C,CAAC,CAAC;CACN,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,yCAAyC,CAAC,WAAmB,EAAE,GAAY;IACzF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,+CAA+C,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1J,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,yHAAyH;AACzH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,CAAN,IAAY,6BAIX;AAJD,WAAY,6BAA6B;IACvC,oDAAmB,CAAA;IACnB,sDAAqB,CAAA;IACrB,gEAA+B,CAAA;AACjC,CAAC,EAJW,6BAA6B,KAA7B,6BAA6B,QAIxC;AAED,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,+EAAqC,CAAA;IACrC,qEAA2B,CAAA;IAC3B,8DAAoB,CAAA;AACtB,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD;AAGD;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,qCAMX;AAND,WAAY,qCAAqC;IAC/C;;;OAGG;IACH,kFAAyC,CAAA;AAC3C,CAAC,EANW,qCAAqC,KAArC,qCAAqC,QAMhD","sourcesContent":["import { z } from \"zod\";\nimport { ExternalProvider_Auth_ConfigurationSchema, ExternalProvider_RateLimitConfigurationSchema } from \"./security.external-connectors-models.schemas\";\n\n\n/**\n * The ONE protocol vocabulary a provider can speak. Every other list is derived from or pinned\n * to this enum: the backend runtime-contract discriminants (`ProviderProtocolRuntimeKind`, a\n * subset of these members) and the application-authoring keys (`BUILTIN_PROVIDER_PROTOCOL` in\n * `@wildo-ai/saas-models`, its key set pinned by a drift test because that package must not\n * import this one into browser bundles).\n *\n * RETIRED 2026-09-05 (#327): `MCP_CONNECTOR`, `A2A_CONNECTOR`, `GIT_PROVIDER`, `GRPC`,\n * `SSO_SAML`. Each had an authored profile/configuration module in this package and NOTHING\n * that read it — no runtime-contract arm, no provider module declaring it, no consumer of any\n * export outside the module itself (measured with a positive control). Wildo's own MCP server,\n * A2A plane and SAML SSO are engine-implemented surfaces, not provider-declared protocols, and\n * none of them referenced these members. A retired member is refused at CONFIG time by\n * `ProviderProtocolSelectorSchema`, naming the value. Re-admit one only together with a\n * runtime-contract arm and a provider module that declares it.\n */\nexport enum ExternalProvider_ExchangeProtocol_Kind {\n  // WEB\n  REST_API = \"rest_api\",\n  WEBHOOK_ORIGINATOR = \"webhook_originator\",\n  // SOAP ?\n  \n  // AI\n  LLM_PROVIDER = \"llm_provider\",\n  /**\n   * Zed's Agent Client Protocol — a JSON-RPC session between Wildo (the client)\n   * and a CODING AGENT subprocess that reads and writes a workspace, runs\n   * commands, and calls back for permission.\n   *\n   * Its own protocol kind rather than a mode of `CLI_RUNTIME`, for the reason\n   * `EMBEDDINGS_PROVIDER` records above and one more that is specific to it: a\n   * coding agent is not a one-shot text call wearing a subprocess. Every\n   * capability the previous CLI transport lacked — token and cost accounting, a\n   * permission channel, cancellation, resumption, live progress — was missing\n   * because the one-shot shape has nowhere to put it, not because nobody had\n   * implemented it yet.\n   *\n   * NOT to be confused with the IBM/BeeAI \"Agent Communication Protocol\", which\n   * shares the acronym and is agent-to-agent — that space is `A2A_CONNECTOR`.\n   */\n  AGENT_CLIENT_PROTOCOL = \"agent_client_protocol\",\n  // AI — multimodal generation (artifact-modality axis)\n  /** Text-to-image generation (wired: gpt-image). Serves the IMAGE modality. */\n  IMAGE_PROVIDER = \"image_provider\",\n  /**\n   * Text → vector embeddings (wired: OpenAI `text-embedding-3-*`). Serves the RAG derived-data\n   * tier (corpus embedding via the `rag:embedding-drain` worker; query-time embedding in\n   * retrieval). Deliberately its OWN protocol kind rather than a sixth `LLMProvider_OperationKey`\n   * (RAG plan DL2): an unmapped LLM operation key fails SILENTLY across six consumer surfaces\n   * (registry semantic-operation map, output normalization, executor dispatch, capability slot,\n   * usage completeness, observability sink), whereas a new protocol kind fails COMPILATION at\n   * every `runtimeContract.kind` switch — the `IMAGE_PROVIDER` precedent. It also gets its own\n   * `EngineCapability.AI_EMBEDDINGS` slot so an application can select its embeddings provider\n   * independently of its chat provider.\n   */\n  EMBEDDINGS_PROVIDER = \"embeddings_provider\",\n  /**\n   * Document bytes → text (wired: Mistral `mistral-ocr-latest`). Serves the file-side text\n   * provider that `FileTextExtractionBackendService` owns, whose largest consumer is\n   * `.ragSource()` corpus ingestion.\n   *\n   * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own\n   * `EngineCapability.AI_DOCUMENT_EXTRACTION` slot so an application selects its OCR provider\n   * independently of chat and embeddings — three unrelated procurement decisions.\n   *\n   * NOT to be confused with PDF *generation* (templates → bytes), which is the `pdfTemplates`\n   * surface and is semantically the opposite direction. It has no provider slot: the\n   * `EngineCapability.DOCUMENT_GENERATION` this paragraph used to name was withdrawn because no\n   * provider capability token could ever fill it.\n   */\n  DOCUMENT_EXTRACTION_PROVIDER = \"document_extraction_provider\",\n  /**\n   * Text → a classifier's verdict about it (#2292): first, whether third-party content entering an agent's prompt\n   * carries a prompt-injection attack. Serves an agent's declared content guardrails.\n   *\n   * Its own kind for the reason `EMBEDDINGS_PROVIDER` records above, and it fills its own\n   * `EngineCapability.AI_CONTENT_SAFETY` slot so an application chooses the vendor that screens its model's input\n   * independently of the vendor that answers it.\n   */\n  CONTENT_SAFETY_PROVIDER = \"content_safety_provider\",\n  /** Reserved — audio generation (TTS / music). Serves the AUDIO modality. Not yet implemented. */\n  AUDIO_PROVIDER = \"audio_provider\",\n  /** Reserved — video generation. Serves the VIDEO modality. Not yet implemented. */\n  VIDEO_PROVIDER = \"video_provider\",\n  \n  // INFRA\n  EMAIL_PROVIDER = \"email_provider\",\n  /**\n   * RECEIVING email (#1630): the provider hosts a receiving domain, announces each message through a\n   * `WEBHOOK_ORIGINATOR` endpoint whose `capability` is `EMAIL_INBOUND`, and serves the message on\n   * request through `StandardInboundEmail_Interface`. Its own kind rather than a mode of\n   * `EMAIL_PROVIDER` because sending and receiving are separate procurement decisions and share no\n   * operation: a sending contract composes a request, a receiving one parses a notification and\n   * fetches a message.\n   */\n  EMAIL_INBOUND_PROVIDER = \"email_inbound_provider\",\n  \n  // AUTH\n  SSO_OAUTH2 = \"sso_oauth2\",\n  // OPENID_CONNECT ?\n\n  // BILLING\n  BILLING_PROVIDER = \"billing_provider\",\n\n  // SMS (Phase G2)\n  SMS_PROVIDER = \"sms_provider\",\n\n  // FRONTEND\n  FRONTEND_SDK = \"frontend_sdk\",\n}\n\n/**\n * The BACKEND runtime-contract discriminants — the subset of `ExternalProvider_ExchangeProtocol_Kind`\n * a `BackendProviderModule` can execute. Its VALUES are the enum members themselves (one spelling per\n * member since 2026-09-05, #327), so a runtime contract's `kind` IS the exchange kind and no\n * protocol→kind map exists anywhere; `BackendProtocolBinding.protocol` (the authoring KEY) and\n * `runtimeContract.kind` are checked for agreement at composition. A member absent here has no\n * backend arm: `FRONTEND_SDK` is declared by browser-side modules only, `AUDIO_PROVIDER` /\n * `VIDEO_PROVIDER` are reserved.\n *\n * A frozen const rather than a second enum because provider modules are an extension boundary and\n * the union discriminant must stay the enum member type. Import from\n * `@wildo-ai/external-connectors-models`; the private backend package consumes it, never defines it.\n */\nexport const ProviderProtocolRuntimeKind = Object.freeze({\n  LLM: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n  IMAGE: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n  EMBEDDINGS: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n  DOCUMENT_EXTRACTION: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n  CONTENT_SAFETY: ExternalProvider_ExchangeProtocol_Kind.CONTENT_SAFETY_PROVIDER,\n  AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n  EMAIL: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n  EMAIL_INBOUND: ExternalProvider_ExchangeProtocol_Kind.EMAIL_INBOUND_PROVIDER,\n  OAUTH2_SSO: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n  BILLING: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n  WEBHOOK_ORIGINATOR: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n  SMS: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n  REST: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n} as const);\nexport type ProviderProtocolRuntimeKind =\n  (typeof ProviderProtocolRuntimeKind)[keyof typeof ProviderProtocolRuntimeKind];\n\nexport enum APPLICATION_ENVIRONMENT {\n  DEVELOPMENT = \"development\",\n  STAGING = \"staging\",\n  PRODUCTION = \"production\",\n}\n\n\nexport enum API_HttpMethod {\n  GET = \"GET\",\n  POST = \"POST\",\n  PUT = \"PUT\",\n  PATCH = \"PATCH\",\n  DELETE = \"DELETE\",\n  HEAD = \"HEAD\",\n  OPTIONS = \"OPTIONS\",\n}\n\n/**\n * Shared protocol configuration fields — the ONE survivor of the per-protocol profile /\n * configuration / status triple (#965), and the reason it stays is a reader, not a legacy.\n *\n * `authConfig` is read on a resolved provider configuration by the OAuth2 connection resolver\n * (`clientId`, `secretRef`) and by the registry's default-over-custom merge, and `enabled` is what\n * a provider configuration parses at the boundary (`AgentClientProtocol_ConfigurationSchema`,\n * `OAuth2Provider_ConfigurationSchema` extend this; the LLM and webhook configurations intersect\n * with the inferred type). It is optional because execution-oriented protocols can own their own\n * auth/runtime policy contract.\n *\n * What is gone: the profile base (a provider's transport facts now live on its runtime contract,\n * `ProviderProtocolRuntimeContract`, which the registry projects) and the status base (nothing\n * ever recorded a per-protocol status). Both had no reader outside the declarations that extended\n * them.\n */\nexport const ExternalProvider_ExchangeProtocol_Configuration_BaseSchema = z.object({\n  enabled: z.boolean(),\n  authConfig: ExternalProvider_Auth_ConfigurationSchema.optional(),\n  rateLimitConfig: ExternalProvider_RateLimitConfigurationSchema.optional(),\n});\n\nexport type ExternalProvider_ExchangeProtocol_Configuration_Base = z.infer<typeof ExternalProvider_ExchangeProtocol_Configuration_BaseSchema>;\n\n/**\n * The keys of a `providerConfigurations.<providerRef>.<protocol>` bag that belong to the PROVIDER MODULE, never to the\n * application (#2995). Each is projected by the backend registry from the module's own runtime contract, and each\n * decides where a request goes and how its credential travels:\n *\n * - `runtimeContract` — the contract itself: the base URL or host slot, the API-key header, the operations.\n * - `endpoints` — the webhook endpoints a `WEBHOOK_ORIGINATOR` contract declares (route keys, signature handling).\n *\n * An application cannot author either. The registry used to deep-merge an authored `runtimeContract` over the module's,\n * so one configuration line (`runtimeContract: { baseUrl: 'http://anywhere' }`) sent the provider's key to any URL, over\n * plain http, in any environment, around the host-held slot and its bare-DNS rule (#992 F3). The comments said the module\n * owned the contract; nothing held it. Now three schemas refuse these keys when the configuration is parsed\n * (`defineSaaSConfig`, the per-environment overlay, the backend's application configuration), and the registry refuses\n * them again before it merges, so a configuration hydrated from anywhere else is refused too.\n *\n * The way to point a provider at a local double is the environment-gated loopback host of a host-held slot (#2991),\n * which a deployment outside development and test refuses.\n *\n * Import path: `@wildo-ai/external-connectors-models`.\n */\nexport enum ExternalProvider_ModuleOwnedConfigurationKey {\n  RUNTIME_CONTRACT = \"runtimeContract\",\n  ENDPOINTS = \"endpoints\",\n}\n\n/** One authored key a provider module owns: where it was written, so the refusal can name it. */\nexport interface ExternalProvider_ModuleOwnedConfigurationKeyFinding {\n  readonly providerRef: string;\n  /** The second-level key of the bag: a protocol kind, or a key the module reads itself (`registration`). */\n  readonly protocolKey: string;\n  readonly key: ExternalProvider_ModuleOwnedConfigurationKey;\n}\n\nconst MODULE_OWNED_CONFIGURATION_KEYS: readonly ExternalProvider_ModuleOwnedConfigurationKey[] = Object.values(ExternalProvider_ModuleOwnedConfigurationKey);\n\n/**\n * Every module-owned key written anywhere in a `providerConfigurations` value. Total over the\n * {@link ExternalProvider_ModuleOwnedConfigurationKey} vocabulary, and over every bag, a protocol bag or not: no bag can\n * legitimately carry these names, and a bag the registry does not merge today is one a later reader might.\n * Anything that is not a record of records (a malformed value) yields nothing here; the schema reports that itself.\n */\nexport function findModuleOwnedProviderConfigurationKeys(providerConfigurations: unknown): ExternalProvider_ModuleOwnedConfigurationKeyFinding[] {\n  const findings: ExternalProvider_ModuleOwnedConfigurationKeyFinding[] = [];\n  if (!isPlainRecord(providerConfigurations)) return findings;\n  for (const [providerRef, protocols] of Object.entries(providerConfigurations)) {\n    if (!isPlainRecord(protocols)) continue;\n    for (const [protocolKey, bag] of Object.entries(protocols)) {\n      if (!isPlainRecord(bag)) continue;\n      for (const key of MODULE_OWNED_CONFIGURATION_KEYS) {\n        if (Object.prototype.hasOwnProperty.call(bag, key)) findings.push({ providerRef, protocolKey, key });\n      }\n    }\n  }\n  return findings;\n}\n\n/** The one sentence every door refuses a module-owned key with, so an operator greps one wording. */\nexport function describeModuleOwnedProviderConfigurationKey(finding: ExternalProvider_ModuleOwnedConfigurationKeyFinding): string {\n  return `providerConfigurations.${finding.providerRef}.${finding.protocolKey}.${finding.key} is refused: the provider module owns `\n    + `'${finding.key}' (where its requests go and how its credential travels), and a configuration cannot rewrite it. Remove the key. `\n    + 'To reach a local double of the vendor, set the provider\\'s host slot to a loopback host:port in a development or test environment.';\n}\n\n/**\n * Report every module-owned key as an issue on `ctx`, at its path. The refinement each `providerConfigurations` schema\n * applies, so the three refuse the same keys with the same words.\n *\n * assurance-control: WILDO.SECRETS.CREDENTIAL_SCOPING — a configuration cannot author where a provider's credential is sent (#2995).\n */\nexport function refuseModuleOwnedProviderConfigurationKeys(providerConfigurations: unknown, ctx: z.RefinementCtx): void {\n  for (const finding of findModuleOwnedProviderConfigurationKeys(providerConfigurations)) {\n    ctx.addIssue({\n      code: \"custom\",\n      path: [finding.providerRef, finding.protocolKey, finding.key],\n      message: describeModuleOwnedProviderConfigurationKey(finding),\n    });\n  }\n}\n\n/**\n * The fields of a `providerConfigurations.<providerRef>.<protocol>` bag that NAME a credential (#3022). Each decides\n * which secret a vendor or a coding agent receives, so each is held to a rule that leaves that choice to the provider\n * module and the framework rather than to the configuration:\n *\n * | field | the rule | closed by |\n * |---|---|---|\n * | `authConfig.secretRef` | names only a slot the module's `secretsContract` declares, by its variable or its slug | #3002 |\n * | an execution profile's `secretEnvVarName` | names only a variable the module declares (never a slug: it is the variable the agent reads) | #3002 |\n * | an execution profile's `inheritedEnvironmentVariables` | names anything EXCEPT a secret the framework declares | #3018 |\n *\n * The vocabulary is the one named source for the doors that check these fields: the backend registry, on every read and\n * in its startup walk, and the CLI's environment door. Each reads the fields through\n * {@link readProviderConfigurationCredentialFields} and branches on the member, so a field added here gets a reader (a\n * compile error until it does) and then reaches every door's exhaustive switch, where it is a compile error again until\n * the door decides its rule. Before this vocabulary the three fields were string paths written out at each door.\n *\n * Where the credential then GOES is the other half of the property, and it is not a configuration field at all: the\n * module owns its destination ({@link ExternalProvider_ModuleOwnedConfigurationKey}, #2995).\n *\n * Import path: `@wildo-ai/external-connectors-models`.\n */\nexport enum ProviderConfigurationCredentialField {\n  /** `authConfig.secretRef`: the slot a protocol's key or client secret is read from, and sent to the vendor. */\n  AUTH_SECRET_REF = \"auth_secret_ref\",\n  /**\n   * `executionProfiles.<profile>.secretEnvVarName`, on the agent-client-protocol bag only: the one variable read from the\n   * spawning process and set in the coding agent's environment.\n   */\n  EXECUTION_PROFILE_SECRET_ENV_VAR_NAME = \"execution_profile_secret_env_var_name\",\n  /**\n   * `executionProfiles.<profile>.inheritedEnvironmentVariables`, on the agent-client-protocol bag only: the host's own\n   * variables (the agent's login, its tool paths) copied into the coding agent's environment.\n   */\n  EXECUTION_PROFILE_INHERITED_ENVIRONMENT = \"execution_profile_inherited_environment\",\n}\n\n/** One credential-naming field as authored, unchecked: the door that reads it decides whether it is admitted. */\nexport interface ProviderConfigurationCredentialFieldReading {\n  readonly field: ProviderConfigurationCredentialField;\n  /** Where it sits inside the protocol bag (`authConfig.secretRef`, `executionProfiles.mine.secretEnvVarName`), for a refusal to name. */\n  readonly path: string;\n  /** The execution profile it was read from, for the two profile fields. */\n  readonly executionProfileRef?: string;\n  /** The authored value. Never `undefined`: a field that is not written yields no reading. */\n  readonly value: unknown;\n}\n\nconst AGENT_CLIENT_PROTOCOL_MEMBER_NAME = (Object.keys(ExternalProvider_ExchangeProtocol_Kind) as Array<keyof typeof ExternalProvider_ExchangeProtocol_Kind>)\n  .find((member) => ExternalProvider_ExchangeProtocol_Kind[member] === ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL);\n\n/**\n * Whether a protocol key of a `providerConfigurations.<providerRef>` value holds the agent-client-protocol bag: the\n * protocol's wire value, or its member name. The backend reads the configuration under the wire value only, but a\n * credential-naming field is checked under either key, so a bag authored under the member name is refused by every door\n * rather than by the CLI alone.\n */\nexport function isAgentClientProtocolConfigurationKey(protocolKey: string): boolean {\n  return protocolKey === ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL || protocolKey === AGENT_CLIENT_PROTOCOL_MEMBER_NAME;\n}\n\n/**\n * The authored execution profiles of an agent-client-protocol bag; nothing for any other bag.\n *\n * Read from ANY object, an array included, and each profile that is any object, never only from plain records: the doors\n * iterated `Object.entries` before this vocabulary, and the registry's merge turns an array into `{ '0': profile }`, which\n * an agent or a default profile can select. Reading plain records only would leave such a profile's `secretEnvVarName`\n * unchecked while dispatch still injects it (#3022 review F1). What is not an object carries no field to read.\n */\nfunction authoredExecutionProfiles(protocolKey: string, bag: Record<string, unknown>): Array<[string, Record<string, unknown>]> {\n  if (!isAgentClientProtocolConfigurationKey(protocolKey) || !isObject(bag.executionProfiles)) return [];\n  return Object.entries(bag.executionProfiles).filter((entry): entry is [string, Record<string, unknown>] => isObject(entry[1]));\n}\n\n/** One reader per field, so a member added to the vocabulary without one is a compile error. */\nconst PROVIDER_CONFIGURATION_CREDENTIAL_FIELD_READERS: {\n  readonly [Field in ProviderConfigurationCredentialField]: (protocolKey: string, bag: Record<string, unknown>) => ProviderConfigurationCredentialFieldReading[];\n} = {\n  [ProviderConfigurationCredentialField.AUTH_SECRET_REF]: (_protocolKey, bag) => {\n    const value = isObject(bag.authConfig) ? (bag.authConfig as Record<string, unknown>).secretRef : undefined;\n    return value === undefined ? [] : [{ field: ProviderConfigurationCredentialField.AUTH_SECRET_REF, path: \"authConfig.secretRef\", value }];\n  },\n  [ProviderConfigurationCredentialField.EXECUTION_PROFILE_SECRET_ENV_VAR_NAME]: (protocolKey, bag) =>\n    authoredExecutionProfiles(protocolKey, bag).flatMap(([executionProfileRef, profile]) => profile.secretEnvVarName === undefined ? [] : [{\n      field: ProviderConfigurationCredentialField.EXECUTION_PROFILE_SECRET_ENV_VAR_NAME,\n      path: `executionProfiles.${executionProfileRef}.secretEnvVarName`,\n      executionProfileRef,\n      value: profile.secretEnvVarName,\n    }]),\n  [ProviderConfigurationCredentialField.EXECUTION_PROFILE_INHERITED_ENVIRONMENT]: (protocolKey, bag) =>\n    authoredExecutionProfiles(protocolKey, bag).flatMap(([executionProfileRef, profile]) => profile.inheritedEnvironmentVariables === undefined ? [] : [{\n      field: ProviderConfigurationCredentialField.EXECUTION_PROFILE_INHERITED_ENVIRONMENT,\n      path: `executionProfiles.${executionProfileRef}.inheritedEnvironmentVariables`,\n      executionProfileRef,\n      value: profile.inheritedEnvironmentVariables,\n    }]),\n};\n\n/**\n * Every credential-naming field written in one protocol bag of a provider configuration, in vocabulary order. Total over\n * {@link ProviderConfigurationCredentialField}. A bag that is not a record yields nothing; its schema reports that itself.\n */\nexport function readProviderConfigurationCredentialFields(protocolKey: string, bag: unknown): ProviderConfigurationCredentialFieldReading[] {\n  if (!isPlainRecord(bag)) return [];\n  return Object.values(ProviderConfigurationCredentialField).flatMap((field) => PROVIDER_CONFIGURATION_CREDENTIAL_FIELD_READERS[field](protocolKey, bag));\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/** Any object, an array included: the shape a credential-naming field is read from, so no authored object escapes it. */\nfunction isObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nexport enum ExternalProvider_IO_Direction {\n  INBOUND = \"inbound\",\n  OUTBOUND = \"outbound\",\n  BIDIRECTIONAL = \"bidirectional\",\n}\n\nexport enum ExternalProvider_IO_InteractionPattern {\n  REQUEST_RESPONSE = \"request_response\",\n  EVENT_BASED = \"event_based\",\n  STREAMING = \"stream\",\n}\n\n\n/**\n * An address a vendor registration asks a person to TYPE at the vendor, as opposed to one the registration file already\n * carries (#2713). A provider module's `vendorRegistration` names each one it needs beside its steps, so a screen can\n * show it as a value to copy, labelled from its own words, rather than leave it inside a sentence.\n *\n * Add a member when a provider's registration names another such address. A Slack app's request URLs are not one: the\n * manifest file carries them, and nobody types them.\n */\nexport enum ProviderVendorRegistrationAddressKind {\n  /**\n   * Where the vendor delivers a bot's messages: the Azure Bot's \"Messaging endpoint\", the route the engine mounts for the\n   * provider's inbound endpoint. Every bot of one application, its own or an organization's, is registered with the same one.\n   */\n  MESSAGING_ENDPOINT = \"messaging_endpoint\",\n}\n"]}

package/dist/esm/core/security.external-connectors-models.schemas.d.ts

@@ -292,6 +292,7 @@ export declare enum ExternalProvider_Connection_DelegationMode {
     /** The call acts for a named user, whose authorization is what makes it permissible. */
     USER = "user"
 }
+/** @wildo_source:part:start external-connectors.models.connection-target facet:layer:shared facet:audience:app-developer */
 /**
  * WHICH owner instance a single call spends — supplied BY THE CALL, never read from ambient context.
  *
@@ -327,6 +328,7 @@ export declare const ExternalProvider_ConnectionTargetSchema: z.ZodObject<{
     ownerId: z.ZodOptional<z.ZodString>;
     actingForUserId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/** @wildo_source:part:end external-connectors.models.connection-target */
 /**
  * Whether a connection target must NAME the user it acts for — true only for APPLICATION × USER.
  *

package/dist/esm/core/security.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAMxB;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,iCAAiC;IACjC,IAAI,SAAS;IAEb,0CAA0C;IAC1C,OAAO,YAAY;IAEnB,gDAAgD;IAChD,MAAM,WAAW;IAEjB,gCAAgC;IAChC,KAAK,UAAU;IAEf,kEAAkE;IAClE,MAAM,WAAW;IAEjB,0CAA0C;IAC1C,cAAc,mBAAmB;IAEjC,+CAA+C;IAC/C,cAAc,mBAAmB;IAEjC,uCAAuC;IACvC,UAAU,eAAe;IAEzB,qDAAqD;IACrD,eAAe,oBAAoB;CACpC;AAMD,oBAAY,qCAAqC;IAC/C,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,8CAA8C;IACxD,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,oBAAY,mCAAmC;IAC7C,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;CAC5C;AAMD;;;GAGG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAYpD,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;;iBAkBxD,CAAC;AAMH,eAAO,MAAM,uCAAuC;;;;;;iBAelD,CAAC;AAMH,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAMxG;;;GAGG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAmI9C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAM/F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,oBAAY,sCAAsC;IAChD,qGAAqG;IACrG,WAAW,gBAAgB;IAC3B,mGAAmG;IACnG,YAAY,iBAAiB;IAC7B,uFAAuF;IACvF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,oBAAY,4BAA4B;IACtC;;;OAGG;IACH,YAAY,iBAAiB;IAC7B;;;;OAIG;IACH,UAAU,eAAe;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,oBAAY,0CAA0C;IACpD,2EAA2E;IAC3E,OAAO,YAAY;IACnB,wFAAwF;IACxF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sCAAsC;;;iBAIjD,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAEtG,eAAO,MAAM,uCAAuC;;;;;iBAkDlD,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAGhG;AAED;;;;;;;;GAQG;AACH,wBAAgB,0CAA0C,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAG3G;AAED,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}
+{"version":3,"file":"security.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/core/security.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAMxB;;;GAGG;AACH,oBAAY,0BAA0B;IACpC,iCAAiC;IACjC,IAAI,SAAS;IAEb,0CAA0C;IAC1C,OAAO,YAAY;IAEnB,gDAAgD;IAChD,MAAM,WAAW;IAEjB,gCAAgC;IAChC,KAAK,UAAU;IAEf,kEAAkE;IAClE,MAAM,WAAW;IAEjB,0CAA0C;IAC1C,cAAc,mBAAmB;IAEjC,+CAA+C;IAC/C,cAAc,mBAAmB;IAEjC,uCAAuC;IACvC,UAAU,eAAe;IAEzB,qDAAqD;IACrD,eAAe,oBAAoB;CACpC;AAMD,oBAAY,qCAAqC;IAC/C,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,oBAAY,8CAA8C;IACxD,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,oBAAY,mCAAmC;IAC7C,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;CAC5C;AAMD;;;GAGG;AACH,eAAO,MAAM,yCAAyC;;;;;iBAYpD,CAAC;AAMH,eAAO,MAAM,6CAA6C;;;;;;;iBAkBxD,CAAC;AAMH,eAAO,MAAM,uCAAuC;;;;;;iBAelD,CAAC;AAMH,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AACpH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAMxG;;;GAGG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAmI9C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAM/F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,oBAAY,sCAAsC;IAChD,qGAAqG;IACrG,WAAW,gBAAgB;IAC3B,mGAAmG;IACnG,YAAY,iBAAiB;IAC7B,uFAAuF;IACvF,IAAI,SAAS;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,oBAAY,4BAA4B;IACtC;;;OAGG;IACH,YAAY,iBAAiB;IAC7B;;;;OAIG;IACH,UAAU,eAAe;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,oBAAY,0CAA0C;IACpD,2EAA2E;IAC3E,OAAO,YAAY;IACnB,wFAAwF;IACxF,IAAI,SAAS;CACd;AAED,4HAA4H;AAC5H;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sCAAsC;;;iBAMjD,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAEtG,eAAO,MAAM,uCAAuC;;;;;iBAoDlD,CAAC;AACH,0EAA0E;AAE1E;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAGhG;AAED;;;;;;;;GAQG;AACH,wBAAgB,0CAA0C,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAG3G;AAED,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}

package/dist/esm/core/security.external-connectors-models.schemas.js

@@ -345,6 +345,7 @@ export var ExternalProvider_Connection_DelegationMode;
     /** The call acts for a named user, whose authorization is what makes it permissible. */
     ExternalProvider_Connection_DelegationMode["USER"] = "user";
 })(ExternalProvider_Connection_DelegationMode || (ExternalProvider_Connection_DelegationMode = {}));
+/** @wildo_source:part:start external-connectors.models.connection-target facet:layer:shared facet:audience:app-developer */
 /**
  * WHICH owner instance a single call spends — supplied BY THE CALL, never read from ambient context.
  *
@@ -361,16 +362,19 @@ export var ExternalProvider_Connection_DelegationMode;
  * and the resolver cannot verify a target it also invented.
  */
 export const ExternalProvider_ConnectionShapeSchema = z.object({
-    ownerScope: z.enum(ExternalProvider_Connection_OwnerScope),
+    ownerScope: z.enum(ExternalProvider_Connection_OwnerScope)
+        .describe('Who owns the provider account: the application itself, one organization, or one user.'),
     delegation: z.enum(ExternalProvider_Connection_DelegationMode)
-        .default(ExternalProvider_Connection_DelegationMode.SERVICE),
+        .default(ExternalProvider_Connection_DelegationMode.SERVICE)
+        .describe('On whose behalf calls act: `service` acts as the account owner itself, `user` acts for a person. Defaults to `service`.'),
 });
 export const ExternalProvider_ConnectionTargetSchema = ExternalProvider_ConnectionShapeSchema.extend({
     /**
      * The organization or user whose account is spent. Absent for APPLICATION, which has exactly one
      * instance by construction — an id there would be a second name for the deployment.
      */
-    ownerId: z.string().optional(),
+    ownerId: z.string().optional()
+        .describe('The id of the organization or user that owns the account. Required for an organization or user owner; omit it for the application.'),
     /**
      * The user an APPLICATION-owned, USER-delegated call impersonates — the ONLY shape where the call
      * itself must say who, because the application's identity could impersonate anyone.
@@ -380,7 +384,8 @@ export const ExternalProvider_ConnectionTargetSchema = ExternalProvider_Connecti
      * here would describe an identity the runtime will not act as. A USER-owned connection already
      * names its person in `ownerId`.
      */
-    actingForUserId: z.string().optional(),
+    actingForUserId: z.string().optional()
+        .describe('The user an application-owned account acts for: required when `ownerScope` is `application` and `delegation` is `user`, refused otherwise.'),
 }).superRefine((target, ctx) => {
     const ownerIsInstance = target.ownerScope !== ExternalProvider_Connection_OwnerScope.APPLICATION;
     if (ownerIsInstance && (target.ownerId === undefined || target.ownerId === '')) {
@@ -417,6 +422,7 @@ export const ExternalProvider_ConnectionTargetSchema = ExternalProvider_Connecti
         });
     }
 });
+/** @wildo_source:part:end external-connectors.models.connection-target */
 /**
  * Whether a connection target must NAME the user it acts for — true only for APPLICATION × USER.
  *