@wildo-ai/platform-config-lib 1.0.1

package/dist/esm/project-config/shared/k8s-utils.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Kubernetes URL builders and naming conventions.
+ * Single source of truth for constructing K8s-style addresses and resource names.
+ *
+ * Used by CLI (ServiceAddressResolver, K8s manifest gen) and apps-manager
+ * (application lifecycle) to ensure consistent URL/naming patterns.
+ */
+/**
+ * Builds a K8s cluster-internal URL: `http://<service>.<namespace>.svc.cluster.local:<port>`
+ */
+export declare function buildK8sInternalUrl(service: string, port: number, namespace: string): string;
+/**
+ * Builds a K8s cluster-internal hostname (without scheme/port).
+ */
+export declare function buildK8sInternalHost(service: string, namespace: string): string;
+/**
+ * Builds an ingress-based public URL: `https://<service>.<baseDomain>`
+ */
+export declare function buildK8sPublicUrl(service: string, baseDomain: string): string;
+/**
+ * K8s Secret name for a platform service: `<service>-secret`
+ */
+export declare function k8sServiceSecretName(service: string): string;
+/**
+ * K8s ConfigMap name for a platform service: `<service>-config`
+ */
+export declare function k8sServiceConfigMapName(service: string): string;
+/**
+ * K8s Secret name for an app backend: `app-<serviceName>-secret`
+ */
+export declare function k8sAppBackendSecretName(serviceName: string): string;
+/**
+ * K8s ConfigMap name for an app backend: `app-<serviceName>-config`
+ */
+export declare function k8sAppBackendConfigMapName(serviceName: string): string;
+//# sourceMappingURL=k8s-utils.d.ts.map

package/dist/esm/project-config/shared/k8s-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-utils.d.ts","sourceRoot":"","sources":["../../../../src/project-config/shared/k8s-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtE"}

package/dist/esm/project-config/shared/k8s-utils.js

@@ -0,0 +1,50 @@
+/**
+ * Kubernetes URL builders and naming conventions.
+ * Single source of truth for constructing K8s-style addresses and resource names.
+ *
+ * Used by CLI (ServiceAddressResolver, K8s manifest gen) and apps-manager
+ * (application lifecycle) to ensure consistent URL/naming patterns.
+ */
+/**
+ * Builds a K8s cluster-internal URL: `http://<service>.<namespace>.svc.cluster.local:<port>`
+ */
+export function buildK8sInternalUrl(service, port, namespace) {
+    return `http://${service}.${namespace}.svc.cluster.local:${port}`;
+}
+/**
+ * Builds a K8s cluster-internal hostname (without scheme/port).
+ */
+export function buildK8sInternalHost(service, namespace) {
+    return `${service}.${namespace}.svc.cluster.local`;
+}
+/**
+ * Builds an ingress-based public URL: `https://<service>.<baseDomain>`
+ */
+export function buildK8sPublicUrl(service, baseDomain) {
+    return `https://${service}.${baseDomain}`;
+}
+/**
+ * K8s Secret name for a platform service: `<service>-secret`
+ */
+export function k8sServiceSecretName(service) {
+    return `${service}-secret`;
+}
+/**
+ * K8s ConfigMap name for a platform service: `<service>-config`
+ */
+export function k8sServiceConfigMapName(service) {
+    return `${service}-config`;
+}
+/**
+ * K8s Secret name for an app backend: `app-<serviceName>-secret`
+ */
+export function k8sAppBackendSecretName(serviceName) {
+    return `app-${serviceName}-secret`;
+}
+/**
+ * K8s ConfigMap name for an app backend: `app-<serviceName>-config`
+ */
+export function k8sAppBackendConfigMapName(serviceName) {
+    return `app-${serviceName}-config`;
+}
+//# sourceMappingURL=k8s-utils.js.map

package/dist/esm/project-config/shared/k8s-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-utils.js","sourceRoot":"","sources":["../../../../src/project-config/shared/k8s-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAY,EAAE,SAAiB;IAClF,OAAO,UAAU,OAAO,IAAI,SAAS,sBAAsB,IAAI,EAAE,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,SAAiB;IACrE,OAAO,GAAG,OAAO,IAAI,SAAS,oBAAoB,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAAkB;IACnE,OAAO,WAAW,OAAO,IAAI,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,GAAG,OAAO,SAAS,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,GAAG,OAAO,SAAS,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB;IACzD,OAAO,OAAO,WAAW,SAAS,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,OAAO,OAAO,WAAW,SAAS,CAAC;AACrC,CAAC"}

package/dist/esm/project-config/shared/platform-services.schemas.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+/**
+ * Platform microservices. All use the same Docker image (wildo-platform)
+ * differentiated at runtime via PLATFORM_SERVICE env var.
+ *
+ * For app developers: deployed as Docker containers.
+ * For framework developers: run natively from source (hot-reload).
+ */
+export declare enum PlatformWildoServices {
+    PLATFORM_INIT = "platform-init",
+    APPS_MANAGER = "platform-apps-manager",
+    CRONTABS_BATCHES_MANAGER = "platform-crontabs-batches-manager",
+    FILE_GENERATOR = "platform-file-generator"
+}
+export declare enum AppsManagerMode {
+    NORMAL = "normal",
+    INIT = "init",
+    MAINT = "maint"
+}
+export declare const PlatformServiceConfigSchema: z.ZodObject<{
+    serviceName: z.ZodString;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type PlatformServiceConfig = z.infer<typeof PlatformServiceConfigSchema>;
+export declare const PlatformServicesDeclarationSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    serviceName: z.ZodString;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip, core.$ZodObjectExtra>>;
+export type PlatformServicesDeclaration = z.infer<typeof PlatformServicesDeclarationSchema>;
+//# sourceMappingURL=platform-services.schemas.d.ts.map

package/dist/esm/project-config/shared/platform-services.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-services.schemas.d.ts","sourceRoot":"","sources":["../../../../src/project-config/shared/platform-services.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,oBAAY,qBAAqB;IAC/B,aAAa,kBAAkB;IAC/B,YAAY,0BAA0B;IACtC,wBAAwB,sCAAsC;IAC9D,cAAc,4BAA4B;CAC3C;AAED,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAED,eAAO,MAAM,2BAA2B;;;uCAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,iCAAiC;;;wCAG7C,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/dist/esm/project-config/shared/platform-services.schemas.js

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+/**
+ * Platform microservices. All use the same Docker image (wildo-platform)
+ * differentiated at runtime via PLATFORM_SERVICE env var.
+ *
+ * For app developers: deployed as Docker containers.
+ * For framework developers: run natively from source (hot-reload).
+ */
+export var PlatformWildoServices;
+(function (PlatformWildoServices) {
+    PlatformWildoServices["PLATFORM_INIT"] = "platform-init";
+    PlatformWildoServices["APPS_MANAGER"] = "platform-apps-manager";
+    PlatformWildoServices["CRONTABS_BATCHES_MANAGER"] = "platform-crontabs-batches-manager";
+    PlatformWildoServices["FILE_GENERATOR"] = "platform-file-generator";
+})(PlatformWildoServices || (PlatformWildoServices = {}));
+export var AppsManagerMode;
+(function (AppsManagerMode) {
+    AppsManagerMode["NORMAL"] = "normal";
+    AppsManagerMode["INIT"] = "init";
+    AppsManagerMode["MAINT"] = "maint";
+})(AppsManagerMode || (AppsManagerMode = {}));
+export const PlatformServiceConfigSchema = z.object({
+    serviceName: z.string().min(1),
+    enabled: z.boolean().default(true),
+});
+export const PlatformServicesDeclarationSchema = z.record(z.string(), PlatformServiceConfigSchema);
+//# sourceMappingURL=platform-services.schemas.js.map

package/dist/esm/project-config/shared/platform-services.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-services.schemas.js","sourceRoot":"","sources":["../../../../src/project-config/shared/platform-services.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,qBAKX;AALD,WAAY,qBAAqB;IAC/B,wDAA+B,CAAA;IAC/B,+DAAsC,CAAA;IACtC,uFAA8D,CAAA;IAC9D,mEAA0C,CAAA;AAC5C,CAAC,EALW,qBAAqB,KAArB,qBAAqB,QAKhC;AAED,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,oCAAiB,CAAA;IACjB,gCAAa,CAAA;IACb,kCAAe,CAAA;AACjB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CACvD,CAAC,CAAC,MAAM,EAAE,EACV,2BAA2B,CAC5B,CAAC"}

package/dist/esm/project-config/shared/service-definitions.schemas.d.ts

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+export declare enum AppFrontendType {
+    SAAS_APP = "saas-app",
+    STATIC_WEBSITE = "static-website"
+}
+export declare const AppServiceDefinitionSchema: z.ZodObject<{
+    path: z.ZodString;
+    serviceName: z.ZodString;
+    defaultPort: z.ZodOptional<z.ZodNumber>;
+    frontendType: z.ZodOptional<z.ZodEnum<typeof AppFrontendType>>;
+}, z.core.$strict, core.$ZodObjectExtra>;
+export type AppServiceDefinition = z.infer<typeof AppServiceDefinitionSchema>;
+export declare const WorkerRuntimeSchema: z.ZodObject<{
+    type: z.ZodString;
+    language: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WorkerRuntime = z.infer<typeof WorkerRuntimeSchema>;
+export declare const ResourceLimitsSchema: z.ZodObject<{
+    cpu: z.ZodOptional<z.ZodString>;
+    memory: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type ResourceLimits = z.infer<typeof ResourceLimitsSchema>;
+export declare const DataAccessSchema: z.ZodObject<{
+    database: z.ZodOptional<z.ZodEnum<{
+        "read-only": "read-only";
+        "read-write": "read-write";
+        none: "none";
+    }>>;
+    cache: z.ZodOptional<z.ZodBoolean>;
+    queue: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        consumer: "consumer";
+        producer: "producer";
+        both: "both";
+    }>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type DataAccess = z.infer<typeof DataAccessSchema>;
+export declare const AppRefSchema: z.ZodObject<{
+    path: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type AppRef = z.infer<typeof AppRefSchema>;
+//# sourceMappingURL=service-definitions.schemas.d.ts.map

package/dist/esm/project-config/shared/service-definitions.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-definitions.schemas.d.ts","sourceRoot":"","sources":["../../../../src/project-config/shared/service-definitions.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oBAAY,eAAe;IACzB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;CAClC;AAED,eAAO,MAAM,0BAA0B;;;;;wCAK5B,CAAA;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,mBAAmB;;;uCAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,oBAAoB;;;uCAG/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;uCAI3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;uCAEvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/esm/project-config/shared/service-definitions.schemas.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+export var AppFrontendType;
+(function (AppFrontendType) {
+    AppFrontendType["SAAS_APP"] = "saas-app";
+    AppFrontendType["STATIC_WEBSITE"] = "static-website";
+})(AppFrontendType || (AppFrontendType = {}));
+export const AppServiceDefinitionSchema = z.object({
+    path: z.string().min(1),
+    serviceName: z.string().min(1),
+    defaultPort: z.number().int().positive().optional(),
+    frontendType: z.enum(AppFrontendType).optional(),
+}).strict();
+export const WorkerRuntimeSchema = z.object({
+    type: z.string().min(1),
+    language: z.string().min(1),
+});
+export const ResourceLimitsSchema = z.object({
+    cpu: z.string().min(1).optional(),
+    memory: z.string().min(1).optional(),
+});
+export const DataAccessSchema = z.object({
+    database: z.enum(['read-only', 'read-write', 'none']).optional(),
+    cache: z.boolean().optional(),
+    queue: z.enum(['consumer', 'producer', 'both', 'none']).optional(),
+});
+export const AppRefSchema = z.object({
+    path: z.string().min(1),
+});
+//# sourceMappingURL=service-definitions.schemas.js.map

package/dist/esm/project-config/shared/service-definitions.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-definitions.schemas.js","sourceRoot":"","sources":["../../../../src/project-config/shared/service-definitions.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAN,IAAY,eAGX;AAHD,WAAY,eAAe;IACzB,wCAAqB,CAAA;IACrB,oDAAiC,CAAA;AACnC,CAAC,EAHW,eAAe,KAAf,eAAe,QAG1B;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC,MAAM,EAAE,CAAA;AAGX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnE,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC"}

package/dist/esm/project-config/sharing-policy-validation.d.ts

@@ -0,0 +1,40 @@
+import type { WildoSaasConfig } from './define-saas-config.js';
+import type { WildoSharingPolicy } from './define-sharing-policy.js';
+/**
+ * Severity levels for sharing policy validation findings.
+ */
+export declare enum SharingPolicyValidationSeverity {
+    ERROR = "ERROR",
+    WARNING = "WARNING",
+    INFO = "INFO"
+}
+export interface SharingPolicyValidationFinding {
+    severity: SharingPolicyValidationSeverity;
+    code: string;
+    message: string;
+    providerRef?: string;
+}
+/**
+ * Extract all provider refs declared in a SaaS config's capabilities.
+ * Returns a deduplicated set of provider reference strings.
+ */
+export declare function extractCapabilityProviders(saasConfig: WildoSaasConfig): Set<string>;
+/**
+ * Extract all provider refs declared in a sharing policy's secrets.providers section.
+ * Returns the defaults array merged with all perApp include arrays (deduplicated).
+ */
+export declare function extractSharingPolicyProviders(sharingPolicy: WildoSharingPolicy): Set<string>;
+/**
+ * Cross-validate a sharing policy against a SaaS config's capabilities.
+ * Checks that all providers declared in capabilities are covered by the sharing policy,
+ * and reports providers in the sharing policy that aren't used by any capability.
+ *
+ * @param saasConfig - The loaded SaaS application config
+ * @param sharingPolicy - The loaded per-env sharing policy
+ * @param knownProviderRefs - Optional set of valid provider refs (e.g., from AllProviders_Map).
+ *   If provided, validates that all referenced providers actually exist in the catalog.
+ * @param availableSecretProviderRefs - Optional set of provider refs that have secrets
+ *   configured in secrets.json. If provided, warns about missing secrets.
+ */
+export declare function validateSharingPolicy(saasConfig: WildoSaasConfig, sharingPolicy: WildoSharingPolicy, knownProviderRefs?: Set<string>, availableSecretProviderRefs?: Set<string>): SharingPolicyValidationFinding[];
+//# sourceMappingURL=sharing-policy-validation.d.ts.map

package/dist/esm/project-config/sharing-policy-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing-policy-validation.d.ts","sourceRoot":"","sources":["../../../src/project-config/sharing-policy-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE;;GAEG;AACH,oBAAY,+BAA+B;IACzC,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,+BAA+B,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,CAYnF;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,CAiB5F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,eAAe,EAC3B,aAAa,EAAE,kBAAkB,EACjC,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAC/B,2BAA2B,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACxC,8BAA8B,EAAE,CAiFlC"}

package/dist/esm/project-config/sharing-policy-validation.js

@@ -0,0 +1,143 @@
+/**
+ * Severity levels for sharing policy validation findings.
+ */
+export var SharingPolicyValidationSeverity;
+(function (SharingPolicyValidationSeverity) {
+    SharingPolicyValidationSeverity["ERROR"] = "ERROR";
+    SharingPolicyValidationSeverity["WARNING"] = "WARNING";
+    SharingPolicyValidationSeverity["INFO"] = "INFO";
+})(SharingPolicyValidationSeverity || (SharingPolicyValidationSeverity = {}));
+/**
+ * Extract all provider refs declared in a SaaS config's capabilities.
+ * Returns a deduplicated set of provider reference strings.
+ */
+export function extractCapabilityProviders(saasConfig) {
+    const providers = new Set();
+    if (!saasConfig.capabilities)
+        return providers;
+    for (const binding of Object.values(saasConfig.capabilities)) {
+        if (!binding || !binding.enabled)
+            continue;
+        if (binding.provider)
+            providers.add(binding.provider);
+        if (binding.providers) {
+            for (const p of binding.providers)
+                providers.add(p);
+        }
+    }
+    return providers;
+}
+/**
+ * Extract all provider refs declared in a sharing policy's secrets.providers section.
+ * Returns the defaults array merged with all perApp include arrays (deduplicated).
+ */
+export function extractSharingPolicyProviders(sharingPolicy) {
+    const providers = new Set();
+    const providerRule = sharingPolicy.secrets?.['providers'];
+    if (!providerRule)
+        return providers;
+    const rule = providerRule;
+    if (rule.defaults) {
+        for (const p of rule.defaults)
+            providers.add(p);
+    }
+    if (rule.perApp) {
+        for (const appRule of Object.values(rule.perApp)) {
+            if (appRule.include) {
+                for (const p of appRule.include)
+                    providers.add(p);
+            }
+        }
+    }
+    return providers;
+}
+/**
+ * Cross-validate a sharing policy against a SaaS config's capabilities.
+ * Checks that all providers declared in capabilities are covered by the sharing policy,
+ * and reports providers in the sharing policy that aren't used by any capability.
+ *
+ * @param saasConfig - The loaded SaaS application config
+ * @param sharingPolicy - The loaded per-env sharing policy
+ * @param knownProviderRefs - Optional set of valid provider refs (e.g., from AllProviders_Map).
+ *   If provided, validates that all referenced providers actually exist in the catalog.
+ * @param availableSecretProviderRefs - Optional set of provider refs that have secrets
+ *   configured in secrets.json. If provided, warns about missing secrets.
+ */
+export function validateSharingPolicy(saasConfig, sharingPolicy, knownProviderRefs, availableSecretProviderRefs) {
+    const findings = [];
+    const capabilityProviders = extractCapabilityProviders(saasConfig);
+    const sharingPolicyProviders = extractSharingPolicyProviders(sharingPolicy);
+    for (const providerRef of capabilityProviders) {
+        if (!sharingPolicyProviders.has(providerRef)) {
+            findings.push({
+                severity: SharingPolicyValidationSeverity.ERROR,
+                code: 'CAPABILITY_PROVIDER_NOT_IN_SHARING_POLICY',
+                message: `Provider "${providerRef}" is declared in capabilities but not covered by the sharing policy`,
+                providerRef,
+            });
+        }
+    }
+    for (const providerRef of sharingPolicyProviders) {
+        if (!capabilityProviders.has(providerRef)) {
+            findings.push({
+                severity: SharingPolicyValidationSeverity.WARNING,
+                code: 'SHARING_POLICY_PROVIDER_NOT_IN_CAPABILITIES',
+                message: `Provider "${providerRef}" is in the sharing policy but not used by any capability`,
+                providerRef,
+            });
+        }
+    }
+    if (knownProviderRefs) {
+        const allReferencedProviders = new Set([...capabilityProviders, ...sharingPolicyProviders]);
+        for (const providerRef of allReferencedProviders) {
+            if (!knownProviderRefs.has(providerRef)) {
+                findings.push({
+                    severity: SharingPolicyValidationSeverity.ERROR,
+                    code: 'UNKNOWN_PROVIDER_REF',
+                    message: `Provider "${providerRef}" is not in the external-connectors catalog (AllProviders_Map)`,
+                    providerRef,
+                });
+            }
+        }
+    }
+    if (availableSecretProviderRefs) {
+        for (const providerRef of sharingPolicyProviders) {
+            if (!availableSecretProviderRefs.has(providerRef)) {
+                findings.push({
+                    severity: SharingPolicyValidationSeverity.WARNING,
+                    code: 'PROVIDER_SECRET_MISSING',
+                    message: `Provider "${providerRef}" is declared in the sharing policy but has no API key in secrets.json`,
+                    providerRef,
+                });
+            }
+        }
+    }
+    // Validate that servicesRestrictions providers are subsets of the parent capability providers
+    if (saasConfig.capabilities) {
+        for (const [capKey, binding] of Object.entries(saasConfig.capabilities)) {
+            if (!binding?.enabled || !binding.servicesRestrictions)
+                continue;
+            const parentProviders = new Set();
+            if (binding.provider)
+                parentProviders.add(binding.provider);
+            if (binding.providers) {
+                for (const p of binding.providers)
+                    parentProviders.add(p);
+            }
+            for (const [serviceName, restrictedProviders] of Object.entries(binding.servicesRestrictions)) {
+                for (const rp of restrictedProviders) {
+                    if (!parentProviders.has(rp)) {
+                        findings.push({
+                            severity: SharingPolicyValidationSeverity.INFO,
+                            code: 'SERVICE_RESTRICTION_NOT_IN_PARENT',
+                            message: `servicesRestrictions for "${serviceName}" in capability "${capKey}" references provider "${rp}" which is not in the parent providers list`,
+                            providerRef: rp,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=sharing-policy-validation.js.map

package/dist/esm/project-config/sharing-policy-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing-policy-validation.js","sourceRoot":"","sources":["../../../src/project-config/sharing-policy-validation.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,CAAN,IAAY,+BAIX;AAJD,WAAY,+BAA+B;IACzC,kDAAe,CAAA;IACf,sDAAmB,CAAA;IACnB,gDAAa,CAAA;AACf,CAAC,EAJW,+BAA+B,KAA/B,+BAA+B,QAI1C;AASD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA2B;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAE/C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,SAAS;QAC3C,IAAI,OAAO,CAAC,QAAQ;YAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,aAAiC;IAC7E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,IAAI,GAAG,YAA4G,CAAC;IAC1H,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO;oBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAA2B,EAC3B,aAAiC,EACjC,iBAA+B,EAC/B,2BAAyC;IAEzC,MAAM,QAAQ,GAAqC,EAAE,CAAC;IAEtD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,sBAAsB,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAE5E,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,+BAA+B,CAAC,KAAK;gBAC/C,IAAI,EAAE,2CAA2C;gBACjD,OAAO,EAAE,aAAa,WAAW,qEAAqE;gBACtG,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,sBAAsB,EAAE,CAAC;QACjD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,+BAA+B,CAAC,OAAO;gBACjD,IAAI,EAAE,6CAA6C;gBACnD,OAAO,EAAE,aAAa,WAAW,2DAA2D;gBAC5F,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,mBAAmB,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,WAAW,IAAI,sBAAsB,EAAE,CAAC;YACjD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,+BAA+B,CAAC,KAAK;oBAC/C,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,aAAa,WAAW,gEAAgE;oBACjG,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,2BAA2B,EAAE,CAAC;QAChC,KAAK,MAAM,WAAW,IAAI,sBAAsB,EAAE,CAAC;YACjD,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,+BAA+B,CAAC,OAAO;oBACjD,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,aAAa,WAAW,wEAAwE;oBACzG,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,8FAA8F;IAC9F,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB;gBAAE,SAAS;YACjE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;YAC1C,IAAI,OAAO,CAAC,QAAQ;gBAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS;oBAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;YAED,KAAK,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC9F,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;oBACrC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ,EAAE,+BAA+B,CAAC,IAAI;4BAC9C,IAAI,EAAE,mCAAmC;4BACzC,OAAO,EAAE,6BAA6B,WAAW,oBAAoB,MAAM,0BAA0B,EAAE,6CAA6C;4BACpJ,WAAW,EAAE,EAAE;yBAChB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/esm/release/framework-release.constants.d.ts

@@ -0,0 +1,3 @@
+export declare const FRAMEWORK_RELEASE_NPM_SCOPE = "@wildo-ai";
+export declare const FRAMEWORK_RELEASE_DOCKER_NAMESPACE = "wildoai";
+//# sourceMappingURL=framework-release.constants.d.ts.map

package/dist/esm/release/framework-release.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-release.constants.d.ts","sourceRoot":"","sources":["../../../src/release/framework-release.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,2BAA2B,cAAc,CAAC;AACvD,eAAO,MAAM,kCAAkC,YAAY,CAAC"}

package/dist/esm/release/framework-release.constants.js

@@ -0,0 +1,3 @@
+export const FRAMEWORK_RELEASE_NPM_SCOPE = '@wildo-ai';
+export const FRAMEWORK_RELEASE_DOCKER_NAMESPACE = 'wildoai';
+//# sourceMappingURL=framework-release.constants.js.map

package/dist/esm/release/framework-release.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-release.constants.js","sourceRoot":"","sources":["../../../src/release/framework-release.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAC;AACvD,MAAM,CAAC,MAAM,kCAAkC,GAAG,SAAS,CAAC"}

package/dist/esm/runtime-bridge/platform-runtime-bridge.contracts.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Minimal runtime bridge for platform-side services that are still instantiated
+ * inside a SaaS-backend-powered container.
+ *
+ * The goal here is to avoid a package-level dependency from
+ * `platform-config-lib` back to `saas-backend-lib` just to reference DI token
+ * values and the logger shape. These tokens intentionally mirror the existing
+ * SaaS container symbols.
+ */
+export declare const PLATFORM_RUNTIME_BRIDGE_TYPES: {
+    readonly Logger: symbol;
+};
+/**
+ * Narrow logger contract required by platform config/runtime helper services.
+ */
+export interface PlatformRuntimeLogger {
+    debugByType(type: string): (message: string, context?: Record<string, unknown>) => void;
+    setDebugTypeLogging(type: string, enabled: boolean): void;
+    info(message: string, context?: unknown): void;
+    warn(message: string, context?: unknown): void;
+    error(message: string, context?: unknown): void;
+}
+//# sourceMappingURL=platform-runtime-bridge.contracts.d.ts.map

package/dist/esm/runtime-bridge/platform-runtime-bridge.contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-runtime-bridge.contracts.d.ts","sourceRoot":"","sources":["../../../src/runtime-bridge/platform-runtime-bridge.contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,6BAA6B;;CAEhC,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACxF,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACjD"}

package/dist/esm/runtime-bridge/platform-runtime-bridge.contracts.js

@@ -0,0 +1,13 @@
+/**
+ * Minimal runtime bridge for platform-side services that are still instantiated
+ * inside a SaaS-backend-powered container.
+ *
+ * The goal here is to avoid a package-level dependency from
+ * `platform-config-lib` back to `saas-backend-lib` just to reference DI token
+ * values and the logger shape. These tokens intentionally mirror the existing
+ * SaaS container symbols.
+ */
+export const PLATFORM_RUNTIME_BRIDGE_TYPES = {
+    Logger: Symbol.for('SaaS.Logger'),
+};
+//# sourceMappingURL=platform-runtime-bridge.contracts.js.map

package/dist/esm/runtime-bridge/platform-runtime-bridge.contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-runtime-bridge.contracts.js","sourceRoot":"","sources":["../../../src/runtime-bridge/platform-runtime-bridge.contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;CACzB,CAAC"}

package/dist/esm/schemas/framework-info.schemas.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+export declare const WildoFrameworkInfoSchema: z.ZodObject<{
+    name: z.ZodDefault<z.ZodString>;
+    version: z.ZodString;
+    minCliVersion: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkInfo = z.infer<typeof WildoFrameworkInfoSchema>;
+//# sourceMappingURL=framework-info.schemas.d.ts.map

package/dist/esm/schemas/framework-info.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-info.schemas.d.ts","sourceRoot":"","sources":["../../../src/schemas/framework-info.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,wBAAwB;;;;uCAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/esm/schemas/framework-info.schemas.js

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+const SemverSchema = z.string().regex(/^\d+\.\d+\.\d+$/, 'must be a simple semver string in the form x.y.z');
+export const WildoFrameworkInfoSchema = z.object({
+    name: z.string().min(1).default('wildo-ai'),
+    version: SemverSchema,
+    minCliVersion: SemverSchema,
+});
+//# sourceMappingURL=framework-info.schemas.js.map

package/dist/esm/schemas/framework-info.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-info.schemas.js","sourceRoot":"","sources":["../../../src/schemas/framework-info.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACnC,iBAAiB,EACjB,kDAAkD,CACnD,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3C,OAAO,EAAE,YAAY;IACrB,aAAa,EAAE,YAAY;CAC5B,CAAC,CAAC"}

package/dist/esm/schemas/framework-secrets.schemas.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+export declare const WildoFrameworkPublishNpmSecretsSchema: z.ZodObject<{
+    publishToken: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkPublishNpmSecrets = z.infer<typeof WildoFrameworkPublishNpmSecretsSchema>;
+export declare const WildoFrameworkPublishDockerSecretsSchema: z.ZodObject<{
+    publishUsername: z.ZodOptional<z.ZodString>;
+    publishToken: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkPublishDockerSecrets = z.infer<typeof WildoFrameworkPublishDockerSecretsSchema>;
+export declare const WildoFrameworkSecretsSchema: z.ZodObject<{
+    providers: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    docker: z.ZodOptional<z.ZodObject<{
+        publishUsername: z.ZodOptional<z.ZodString>;
+        publishToken: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    npm: z.ZodOptional<z.ZodObject<{
+        publishToken: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type WildoFrameworkSecrets = z.infer<typeof WildoFrameworkSecretsSchema>;
+//# sourceMappingURL=framework-secrets.schemas.d.ts.map

package/dist/esm/schemas/framework-secrets.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-secrets.schemas.d.ts","sourceRoot":"","sources":["../../../src/schemas/framework-secrets.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qCAAqC;;uCAEhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,eAAO,MAAM,wCAAwC;;;uCAGnD,CAAC;AACH,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wCAAwC,CAAC,CAAC;AAE1G,eAAO,MAAM,2BAA2B;;;;;;;;;uCAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/esm/schemas/framework-secrets.schemas.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+export const WildoFrameworkPublishNpmSecretsSchema = z.object({
+    publishToken: z.string().min(1),
+});
+export const WildoFrameworkPublishDockerSecretsSchema = z.object({
+    publishUsername: z.string().min(1).optional(),
+    publishToken: z.string().min(1),
+});
+export const WildoFrameworkSecretsSchema = z.object({
+    providers: z.record(z.string(), z.string().min(1)).optional().default({}),
+    docker: WildoFrameworkPublishDockerSecretsSchema.optional(),
+    npm: WildoFrameworkPublishNpmSecretsSchema.optional(),
+});
+//# sourceMappingURL=framework-secrets.schemas.js.map

package/dist/esm/schemas/framework-secrets.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-secrets.schemas.js","sourceRoot":"","sources":["../../../src/schemas/framework-secrets.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACzE,MAAM,EAAE,wCAAwC,CAAC,QAAQ,EAAE;IAC3D,GAAG,EAAE,qCAAqC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC"}

package/dist/esm/schemas/platform-application-config.schemas.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+/**
+ * Platform Application Config Schema
+ *
+ * Stored in MongoDB, fetched by platform services via
+ * GET /platform-services-to-manager/config-secrets.
+ *
+ * After T4, platform service URLs and infrastructure addresses are sourced from
+ * each service's env vars (generated by CLI). This schema only contains data
+ * that apps-manager manages dynamically:
+ * - jwtPublicKeys: rotatable public keys for inter-service JWT verification
+ * - customConfig: service-specific key-value configuration
+ */
+export declare const Platform_Application_Config_Schema: z.ZodObject<{
+    platformApplicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    jwtPublicKeys: z.ZodRecord<z.ZodString, z.ZodString>;
+    customConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type Platform_Application_Config = z.infer<typeof Platform_Application_Config_Schema>;
+//# sourceMappingURL=platform-application-config.schemas.d.ts.map

package/dist/esm/schemas/platform-application-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-application-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/schemas/platform-application-config.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kCAAkC;;;;uCAM7C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC"}

package/dist/esm/schemas/platform-application-config.schemas.js

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+/**
+ * Platform Application Config Schema
+ *
+ * Stored in MongoDB, fetched by platform services via
+ * GET /platform-services-to-manager/config-secrets.
+ *
+ * After T4, platform service URLs and infrastructure addresses are sourced from
+ * each service's env vars (generated by CLI). This schema only contains data
+ * that apps-manager manages dynamically:
+ * - jwtPublicKeys: rotatable public keys for inter-service JWT verification
+ * - customConfig: service-specific key-value configuration
+ */
+export const Platform_Application_Config_Schema = z.object({
+    platformApplicationId: z.string().isDBIndexed().isForeignKey().isSummaryField().excludeFromUpdate(),
+    jwtPublicKeys: z.record(z.string(), z.string().min(1)),
+    customConfig: z.record(z.string(), z.unknown()).optional(),
+});
+//# sourceMappingURL=platform-application-config.schemas.js.map