npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.0.1 - Mend

@wildo-ai/saas-backend-lib 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1747) hide show

package/dist/esm/compliance/audit-trails/services/siem-webhook-delivery.backend.service.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"siem-webhook-delivery.backend.service.js","sourceRoot":"","sources":["../../../../../src/compliance/audit-trails/services/siem-webhook-delivery.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;AAEH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAChK,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAGL,gBAAgB,EAChB,qBAAqB,EACrB,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACpB,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAiC/B,wCAAwC;AACxC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,oCAAoC;AACpC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAC/D,4CAA4C;AAC5C,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAC7D,oEAAoE;AACpE,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAG5C,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAKU;IACU;IACW;IACO;IACG;IARpE,QAAQ,CAA+D;IACvE,eAAe,GAAqC,IAAI,GAAG,EAAE,CAAC;IAE/E,YACsD,MAAqB,EACX,gBAAyC,EAC9B,oBAAwD,EACjD,oBAA+D,EAC5D,uBAA8D;QAJ7F,WAAM,GAAN,MAAM,CAAe;QACX,qBAAgB,GAAhB,gBAAgB,CAAyB;QAC9B,yBAAoB,GAApB,oBAAoB,CAAoC;QACjD,yBAAoB,GAApB,oBAAoB,CAA2C;QAC5D,4BAAuB,GAAvB,uBAAuB,CAAuC;QAEjJ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,mCAAmC,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAAC,OAA+B;QAC1D,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QACvE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;QAClD,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;QAE7C,kDAAkD;QAClD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,6DAA6D,EAAE;oBACjF,SAAS;oBACT,OAAO;oBACP,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE;gBAC9D,SAAS;gBACT,OAAO;gBACP,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;QAEhE,gBAAgB;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAErD,gCAAgC;QAChC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QACrD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACrE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;QAE5D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;gBAE1E,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBAEhC,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE;oBACnD,SAAS;oBACT,OAAO;oBACP,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,OAAO,KAAK,UAAU,CAAC;gBAE7C,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;oBAEhC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,gDAAgD,EAAE;wBACpE,SAAS;wBACT,OAAO;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,QAAQ,EAAE,OAAO,GAAG,CAAC;wBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBAEH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjH,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACvD,IAAI,CAAC,QAAQ,CAAC,wCAAwC,EAAE;wBACtD,SAAS;wBACT,OAAO;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,OAAO;wBACP,WAAW,EAAE,SAAS;qBACvB,CAAC,CAAC;oBACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,QAAoC,EAAE,WAAmB;QAC3E,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACtC,KAAK,iBAAiB,CAAC;YACvB;gBACE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,QAAoC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG;YACjB,WAAW,QAAQ,CAAC,OAAO,EAAE;YAC7B,OAAO,QAAQ,CAAC,aAAa,EAAE;YAC/B,WAAW,QAAQ,CAAC,OAAO,EAAE;YAC7B,WAAW,QAAQ,CAAC,aAAa,EAAE;YACnC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;YACjD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;YACvD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;YACrD,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE;YAC/D,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;SAC/C,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5B,OAAO,6BAA6B,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;IACxI,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,QAAoC;QACxD,MAAM,UAAU,GAAG;YACjB,OAAO,QAAQ,CAAC,aAAa,EAAE;YAC/B,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YACnD,WAAW,QAAQ,CAAC,OAAO,EAAE;YAC7B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;YACnD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;YACrD,WAAW,QAAQ,CAAC,SAAS,EAAE;SAChC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7B,OAAO,gCAAgC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;IACtG,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB;QACxC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;YACtB,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,KAAK,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,QAAgB;QACzC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC;YACxB,KAAK,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC;YAC3B,KAAK,UAAU,CAAC,CAAC,OAAO,GAAG,CAAC;YAC5B,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,IAAY,EACZ,UAAgD;QAEhD,MAAM,OAAO,GAA2B;YACtC,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,WAAW,KAAK,iBAAiB;gBAC1E,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,YAAY;SACjB,CAAC;QAEF,+DAA+D;QAC/D,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QAED,kDAAkD;QAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE9E,oBAAoB;QACpB,QAAQ,UAAU,CAAC,UAAU,EAAE,CAAC;YAC9B,KAAK,cAAc;gBACjB,IAAI,kBAAkB,EAAE,CAAC;oBACvB,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,UAAU,kBAAkB,EAAE,CAAC;gBAC1E,CAAC;gBACD,MAAM;YAER,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,IAAI,eAAe,CAAC,OAAO,CAAC;gBACxE,IAAI,kBAAkB,EAAE,CAAC;oBACvB,OAAO,CAAC,UAAU,CAAC,GAAG,kBAAkB,CAAC;gBAC3C,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,aAAa;gBAChB,IAAI,kBAAkB,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC;yBAClD,MAAM,CAAC,IAAI,CAAC;yBACZ,MAAM,CAAC,KAAK,CAAC,CAAC;oBACjB,OAAO,CAAC,eAAe,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,EAAE,CAAC;gBAC9D,CAAC;gBACD,MAAM;YAER,KAAK,MAAM,CAAC;YACZ;gBACE,MAAM;QACV,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,GAAW,EACX,IAAY,EACZ,OAA+B,EAC/B,SAAiB;QAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC3D,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,kBAAkB;IAClB,gEAAgE;IAExD,cAAc,CAAC,UAAkB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,gBAAgB;YAAE,OAAO,KAAK,CAAC;QAEpD,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACxC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CAAC,UAAkB;QACvC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAEO,cAAc,CAAC,UAAkB;QACvC,IAAI,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,mBAAmB,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;YAChF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC5B,KAAK,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC;QAEjC,IAAI,KAAK,CAAC,mBAAmB,IAAI,yBAAyB,EAAE,CAAC;YAC3D,KAAK,CAAC,gBAAgB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,2BAA2B,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBAC9C,UAAU;gBACV,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,UAAU,EAAE,2BAA2B;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,yBAAyB;IACzB,gEAAgE;IAEhE;;;;OAIG;IACK,KAAK,CAAC,aAAa,CACzB,OAA+B,EAC/B,aAAqB,EACrB,YAAqB;QAErB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACtE,MAAM,eAAe,GAAG,SAAS,KAAK,aAAa;gBACjD,CAAC,CAAC,gBAAgB,CAAC,6BAA6B;gBAChD,CAAC,CAAC,gBAAgB,CAAC,8BAA8B,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAEhF,MAAM,QAAQ,GAAG;gBACf,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,SAAS;gBACT,OAAO;gBACP,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBACjC,YAAY,EAAE,OAAO,CAAC,QAAQ;gBAC9B,aAAa,EAAE,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3E,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,IAAI,IAAI,EAAE;gBACzB,WAAW,EAAE,aAAa,KAAK,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACrG,MAAM,EAAE,aAAa,KAAK,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;aAC9E,CAAC;YAEF,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBACvD,SAAS;gBACT,OAAO;gBACP,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBACjC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;gBACrC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,qCAAqC,EAAE;gBACzD,SAAS;gBACT,OAAO;gBACP,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBACjC,KAAK,EAAE,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,uBAAuB,CACnC,eAAuB;QAEvB,MAAM,SAAS,GAAkD;YAC/D,kBAAkB,EAAE,gBAAgB,CAAC,8BAA8B;YACnE,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;YACjD,WAAW,EAAE,4BAA4B,CAAC,eAAe;YACzD,kBAAkB,EAAE,IAAI;SACzB,CAAC;QACF,OAAO,IAAI,CAAC,uBAAuB,CAAC,0BAA0B,CAAC;YAC7D,SAAS;YACT,+BAA+B,EAAE,IAAI,GAAG,EAAE;YAC1C,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE;gBACd,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,WAAW,EAAE;aACzG;SACF,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,4CAA4C;IAC5C,gEAAgE;IAEhE;;;OAGG;IACK,wBAAwB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7E,OAAO,UAAU,CAAC,QAAQ,CAAC;aACxB,MAAM,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC;aACvC,MAAM,EAAE,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,UAA8B;QACvD,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAElC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACxD,8DAA8D;YAC9D,IAAI,CAAC,QAAQ,CAAC,oGAAoG,CAAC,CAAC;YACpH,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;YACrE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,mCAAmC,EAAE;gBACvD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,iBAAiB,CAAC,SAAiB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB;QAChD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,OAAO,GAAG,2BAA2B,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACvH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AA/cY,iCAAiC;IAD7C,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;qCAJL,aAAa;QACO,uBAAuB;QACR,kCAAkC;QAC3B,yCAAyC;QACnC,qCAAqC;GATxI,iCAAiC,CA+c7C"}

package/dist/esm/compliance/index.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ export {};
2	+ //# sourceMappingURL=index.d.ts.map

package/dist/esm/compliance/index.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC"}

package/dist/esm/compliance/index.js ADDED Viewed

	@@ -0,0 +1 @@
1	+ //# sourceMappingURL=index.js.map

package/dist/esm/compliance/index.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/index.ts"],"names":[],"mappings":""}

package/dist/esm/config/custom/application-config-controller.backend.service.d.ts ADDED Viewed

@@ -0,0 +1,31 @@
+import 'reflect-metadata';
+import { AbstractControllerBackendService } from '../../base-classes/services/controllers/abstract-controller.backend.service.js';
+import { AppConfigurationService } from '../../config/services/app-configuration.backend.service.js';
+import { LoggerService } from '../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+import { ErrorHandlerService } from '../../errors/services/error-handler.backend.service.js';
+/**
+ * Application Config Controller Backend Service
+ *
+ * Provides HTTP endpoints for serving application configuration
+ * to frontend applications. Transforms backend config to frontend-safe
+ * shared configuration using ApplicationUtils.
+ *
+ * Endpoints:
+ * - GET /application-config?frontendServiceName=<name> - Returns frontend-safe application configuration
+ *   Requires the query parameter to match a configured frontend service identity
+ */
+export declare class ApplicationConfigControllerBackendService extends AbstractControllerBackendService {
+    private readonly appConfigService;
+    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService, errorHandler: ErrorHandlerService, appConfigService: AppConfigurationService);
+    /**
+     * Setup routes for application config endpoints
+     */
+    protected setupRoutes(): void;
+    /**
+     * Get application configuration for frontends
+     * @param frontendServiceName - Frontend service identity from query parameter (required)
+     */
+    private getApplicationConfig;
+}
+//# sourceMappingURL=application-config-controller.backend.service.d.ts.map

package/dist/esm/config/custom/application-config-controller.backend.service.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"application-config-controller.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/config/custom/application-config-controller.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAG1B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAE/G,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAUvG;;;;;;;;;;GAUG;AAEH,qBACa,yCAA0C,SAAQ,gCAAgC;IAE7F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0B;gBAItB,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACpC,gBAAgB,EAAE,uBAAuB;IAMxF;;OAEG;IACH,SAAS,CAAC,WAAW,IAAI,IAAI;IAO7B;;;OAGG;YACW,oBAAoB;CA0DnC"}

package/dist/esm/config/custom/application-config-controller.backend.service.js ADDED Viewed

@@ -0,0 +1,112 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import 'reflect-metadata';
+import { injectable, inject } from 'inversify';
+import { AbstractControllerBackendService } from '../../base-classes/services/controllers/abstract-controller.backend.service.js';
+import { AppConfigurationService } from '../../config/services/app-configuration.backend.service.js';
+import { ApplicationUtils } from '../../config/services/app-configuration.backend.utils.js';
+import { LoggerService } from '../../monitoring/logger/services/logger.service.js';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
+import { ErrorHandlerService } from '../../errors/services/error-handler.backend.service.js';
+import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
+import { AppConfiguration_Shared_Schema, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey, ErrorType, ErrorCustomMessageReference, } from '@wildo-ai/saas-models';
+/**
+ * Application Config Controller Backend Service
+ *
+ * Provides HTTP endpoints for serving application configuration
+ * to frontend applications. Transforms backend config to frontend-safe
+ * shared configuration using ApplicationUtils.
+ *
+ * Endpoints:
+ * - GET /application-config?frontendServiceName=<name> - Returns frontend-safe application configuration
+ *   Requires the query parameter to match a configured frontend service identity
+ */
+let ApplicationConfigControllerBackendService = class ApplicationConfigControllerBackendService extends AbstractControllerBackendService {
+    appConfigService;
+    constructor(logger, errorBuilder, errorHandler, appConfigService) {
+        super(logger, errorBuilder, errorHandler, 'ApplicationConfigController');
+        this.appConfigService = appConfigService;
+    }
+    /**
+     * Setup routes for application config endpoints
+     */
+    setupRoutes() {
+        // GET /application-config?frontendServiceName=<name> - Get frontend-safe application configuration
+        this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET], this.asyncHandler(this.getApplicationConfig.bind(this)));
+        this.logRouteRegistration('GET', MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.APPLICATION_CONFIG_GET], 'Get frontend-safe application configuration (requires frontendServiceName query param)');
+    }
+    /**
+     * Get application configuration for frontends
+     * @param frontendServiceName - Frontend service identity from query parameter (required)
+     */
+    async getApplicationConfig(req, res, next) {
+        try {
+            // Extract and validate frontendServiceName query parameter
+            const frontendServiceNameParam = req.query.frontendServiceName;
+            if (!frontendServiceNameParam) {
+                this.logDebug('Missing frontendServiceName query parameter');
+                const error = this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, { customMessageReference: ErrorCustomMessageReference.VALIDATION, context: { message: 'frontendServiceName query parameter is required' } });
+                return this.jsonError(res, error);
+            }
+            const frontendServiceName = frontendServiceNameParam;
+            this.logDebug('Getting application configuration for frontend', { frontendServiceName });
+            // Get the backend application configuration
+            const backendConfig = this.appConfigService.config;
+            if (!backendConfig.frontendServices?.[frontendServiceName]) {
+                const error = this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
+                    customMessageReference: ErrorCustomMessageReference.VALIDATION,
+                    context: {
+                        message: `Unknown frontendServiceName "${frontendServiceName}". It must match a configured frontend service identity.`,
+                        availableFrontendServices: Object.keys(backendConfig.frontendServices ?? {}),
+                    },
+                });
+                return this.jsonError(res, error);
+            }
+            // The shared projection remains frontend-service agnostic, but the caller
+            // must prove it is requesting config for a declared frontend surface.
+            const frontendConfig = AppConfiguration_Shared_Schema.parse(ApplicationUtils.toAppConfiguration_Shared(backendConfig));
+            this.logDebug('Application configuration transformed for frontend', {
+                frontendServiceName,
+                hasAppIdentity: !!frontendConfig.appIdentity,
+                hasAppPreferences: !!frontendConfig.appPreferences,
+                hasRuntime: !!frontendConfig.runtime,
+                hasAuth: !!frontendConfig.auth,
+                hasCompliance: !!frontendConfig.compliance,
+                hasApiJwtPublicKey: !!frontendConfig.apiJwtPublicKey,
+                endpointsCount: Object.keys(frontendConfig.runtime?.endPoints || {}).length
+            });
+            // Send successful response
+            this.jsonSuccess(res, frontendConfig);
+        }
+        catch (error) {
+            this.logDebug('Failed to get application configuration', {
+                error: error instanceof Error ? error.message : 'Unknown error'
+            });
+            // Error will be handled by the unified error handler middleware
+            throw error;
+        }
+    }
+};
+ApplicationConfigControllerBackendService = __decorate([
+    injectable(),
+    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
+    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
+    __param(2, inject(SAAS_SERVICE_TYPES.ErrorHandlerService)),
+    __param(3, inject(SAAS_SERVICE_TYPES.AppConfigService)),
+    __metadata("design:paramtypes", [LoggerService,
+        ErrorBuilderBackendService,
+        ErrorHandlerService,
+        AppConfigurationService])
+], ApplicationConfigControllerBackendService);
+export { ApplicationConfigControllerBackendService };
+//# sourceMappingURL=application-config-controller.backend.service.js.map

package/dist/esm/config/custom/application-config-controller.backend.service.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"application-config-controller.backend.service.js","sourceRoot":"","sources":["../../../../src/config/custom/application-config-controller.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,oEAAoE,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,wBAAwB,EACxB,SAAS,EACT,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;GAUG;AAGI,IAAM,yCAAyC,GAA/C,MAAM,yCAA0C,SAAQ,gCAAgC;IAE5E,gBAAgB,CAA0B;IAG3D,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACpC,gBAAyC;QAEtF,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED;;OAEG;IACO,WAAW;QACnB,mGAAmG;QACnG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEzJ,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,wFAAwF,CAAC,CAAC;IAC7M,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAChF,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,wBAAwB,GAAG,GAAG,CAAC,KAAK,CAAC,mBAA6B,CAAC;YAEzE,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;gBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAE,SAAS,CAAC,UAAU,EAAE,SAAS,EACzE,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,EAAC,CAAE,CAAC;gBAC/I,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,mBAAmB,GAAG,wBAAkC,CAAC;YAE/D,IAAI,CAAC,QAAQ,CAAC,gDAAgD,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAEzF,4CAA4C;YAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;oBAC1E,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;oBAC9D,OAAO,EAAE;wBACP,OAAO,EAAE,gCAAgC,mBAAmB,0DAA0D;wBACtH,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC;qBAC7E;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,0EAA0E;YAC1E,sEAAsE;YACtE,MAAM,cAAc,GAAG,8BAA8B,CAAC,KAAK,CACzD,gBAAgB,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAC1D,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;gBAClE,mBAAmB;gBACnB,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,WAAW;gBAC5C,iBAAiB,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc;gBAClD,UAAU,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO;gBACpC,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI;gBAC9B,aAAa,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU;gBAC1C,kBAAkB,EAAE,CAAC,CAAC,cAAc,CAAC,eAAe;gBACpD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM;aAC5E,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAExC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACvD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC,CAAC;YAEH,gEAAgE;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAvFY,yCAAyC;IADrD,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;qCAHD,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAClB,uBAAuB;GAT7E,yCAAyC,CAuFrD"}

package/dist/esm/config/models/app-config-overrides.backend.definitions.d.ts ADDED Viewed

@@ -0,0 +1,29 @@
+import type { AppConfiguration, AppConfiguration_PreOverrideSeed } from './app-config.backend.schemas.js';
+/**
+ * Factory that receives the pre-override config seed (env/runtime material plus
+ * any explicit pre-override placeholders) and returns
+ * the resolved value for one section. Apps use this to customize config after
+ * the loading chain builds the base from env vars and explicit loader-owned material.
+ */
+export type AppConfigSectionFactory<T> = (appConfig: AppConfiguration) => T;
+/**
+ * Per-section config overrides. Each key can be either:
+ * - A factory `(appConfig) => sectionValue` for dynamic resolution
+ * - A direct partial value to shallow-merge into the section
+ */
+export type AppConfigOverrides = {
+    [K in keyof AppConfiguration]?: AppConfigSectionFactory<AppConfiguration[K]> | Partial<AppConfiguration[K]>;
+};
+type AppConfigBaseConfiguration = AppConfiguration | AppConfiguration_PreOverrideSeed;
+export declare function mergeConfigValue<T>(baseValue: T, overrideValue: unknown): T;
+export declare function inspectAppConfigurationBoundaryMutations(previousConfig: AppConfigBaseConfiguration, nextConfig: AppConfigBaseConfiguration): {
+    errors: string[];
+    warnings: string[];
+};
+/**
+ * Applies section overrides to a loaded AppConfiguration.
+ * Factories receive the original (pre-override) config snapshot.
+ */
+export declare function applyAppConfigOverrides(config: AppConfigBaseConfiguration, overrides: AppConfigOverrides): AppConfigBaseConfiguration;
+export {};
+//# sourceMappingURL=app-config-overrides.backend.definitions.d.ts.map

package/dist/esm/config/models/app-config-overrides.backend.definitions.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"app-config-overrides.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../src/config/models/app-config-overrides.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEvG;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,KAAK,CAAC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG;KAC9B,CAAC,IAAI,MAAM,gBAAgB,CAAC,CAAC,EAAE,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;CAC5G,CAAC;AAEF,KAAK,0BAA0B,GAAG,gBAAgB,GAAG,gCAAgC,CAAC;AA8GtF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,OAAO,GAAG,CAAC,CAU3E;AAED,wBAAgB,wCAAwC,CACtD,cAAc,EAAE,0BAA0B,EAC1C,UAAU,EAAE,0BAA0B,GACrC;IACD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAwBA;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,0BAA0B,EAClC,SAAS,EAAE,kBAAkB,GAC5B,0BAA0B,CAgB5B"}

package/dist/esm/config/models/app-config-overrides.backend.definitions.js ADDED Viewed

@@ -0,0 +1,143 @@
+const APP_CONFIG_MUTATION_BOUNDARY_RULES = [
+    {
+        path: 'runtime.endPoints',
+        severity: 'error',
+        reason: 'runtime topology is derived from env/bootstrap writers and must stay authoritative at runtime',
+    },
+    {
+        path: 'jwt.publicKey',
+        severity: 'error',
+        reason: 'JWT verification keys are platform-managed bootstrap material fetched from apps-manager',
+    },
+    {
+        path: 'jwt.rotatedPublicKeys',
+        severity: 'error',
+        reason: 'JWT rotation metadata is platform-managed bootstrap material fetched from apps-manager',
+    },
+    {
+        path: 'database.mongodb.host',
+        severity: 'error',
+        reason: 'MongoDB host is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.mongodb.database',
+        severity: 'error',
+        reason: 'MongoDB database name is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.mongodb.protocol',
+        severity: 'error',
+        reason: 'MongoDB protocol is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.redis.host',
+        severity: 'error',
+        reason: 'Redis host is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.redis.port',
+        severity: 'error',
+        reason: 'Redis port is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.redis.db',
+        severity: 'error',
+        reason: 'Redis db is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.rabbitmq.host',
+        severity: 'error',
+        reason: 'RabbitMQ host is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.rabbitmq.port',
+        severity: 'error',
+        reason: 'RabbitMQ port is env/bootstrap-owned runtime topology',
+    },
+    {
+        path: 'database.mongodb.options.directConnection',
+        severity: 'error',
+        reason: 'directConnection is env/bootstrap-owned Mongo driver runtime material, not app semantics',
+    },
+];
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function getValueAtPath(source, path) {
+    return path.split('.').reduce((current, segment) => {
+        if (!isPlainObject(current)) {
+            return undefined;
+        }
+        return current[segment];
+    }, source);
+}
+function areValuesEqual(left, right) {
+    if (left === right) {
+        return true;
+    }
+    if (Array.isArray(left) && Array.isArray(right)) {
+        if (left.length !== right.length) {
+            return false;
+        }
+        return left.every((value, index) => areValuesEqual(value, right[index]));
+    }
+    if (isPlainObject(left) && isPlainObject(right)) {
+        const leftKeys = Object.keys(left);
+        const rightKeys = Object.keys(right);
+        if (leftKeys.length !== rightKeys.length) {
+            return false;
+        }
+        return leftKeys.every((key) => areValuesEqual(left[key], right[key]));
+    }
+    return false;
+}
+export function mergeConfigValue(baseValue, overrideValue) {
+    if (!isPlainObject(baseValue) || !isPlainObject(overrideValue)) {
+        return overrideValue;
+    }
+    const merged = { ...baseValue };
+    for (const key of Object.keys(overrideValue)) {
+        merged[key] = mergeConfigValue(baseValue[key], overrideValue[key]);
+    }
+    return merged;
+}
+export function inspectAppConfigurationBoundaryMutations(previousConfig, nextConfig) {
+    const errors = [];
+    const warnings = [];
+    for (const rule of APP_CONFIG_MUTATION_BOUNDARY_RULES) {
+        const previousValue = getValueAtPath(previousConfig, rule.path);
+        const nextValue = getValueAtPath(nextConfig, rule.path);
+        if (areValuesEqual(previousValue, nextValue)) {
+            continue;
+        }
+        const message = `${rule.path} cannot be app-authored through overrides because ${rule.reason}.`;
+        if (rule.severity === 'error') {
+            errors.push(message);
+            continue;
+        }
+        warnings.push(message);
+    }
+    return { errors, warnings };
+}
+/**
+ * Applies section overrides to a loaded AppConfiguration.
+ * Factories receive the original (pre-override) config snapshot.
+ */
+export function applyAppConfigOverrides(config, overrides) {
+    const result = { ...config };
+    for (const key of Object.keys(overrides)) {
+        const override = overrides[key];
+        if (typeof override === 'function') {
+            const resolvedOverride = override(config);
+            result[key] = mergeConfigValue(config[key], resolvedOverride);
+        }
+        else if (override !== undefined && typeof override === 'object' && !Array.isArray(override)) {
+            result[key] = mergeConfigValue(config[key], override);
+        }
+        else {
+            result[key] = override;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=app-config-overrides.backend.definitions.js.map

package/dist/esm/config/models/app-config-overrides.backend.definitions.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"app-config-overrides.backend.definitions.js","sourceRoot":"","sources":["../../../../src/config/models/app-config-overrides.backend.definitions.ts"],"names":[],"mappings":"AA6BA,MAAM,kCAAkC,GAAiD;IACvF;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,+FAA+F;KACxG;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,yFAAyF;KAClG;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,wFAAwF;KACjG;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,sDAAsD;KAC/D;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,0DAA0D;KACnE;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,oDAAoD;KAC7D;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,oDAAoD;KAC7D;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,kDAAkD;KAC3D;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,uDAAuD;KAChE;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,uDAAuD;KAChE;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,0FAA0F;KACnG;CACO,CAAC;AAEX,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,MAAe,EAAE,IAAY;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1D,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAa,EAAE,KAAc;IACnD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAI,SAAY,EAAE,aAAsB;IACtE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/D,OAAO,aAAkB,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,GAAG,SAAS,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAE,SAAqC,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,cAA0C,EAC1C,UAAsC;IAKtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,kCAAkC,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,cAAc,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GACX,GAAG,IAAI,CAAC,IAAI,qDAAqD,IAAI,CAAC,MAAM,GAAG,CAAC;QAElF,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAkC,EAClC,SAA6B;IAE7B,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAkC,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,gBAAgB,GAAI,QAAyC,CAAC,MAA0B,CAAC,CAAC;YAC/F,MAAc,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAE,MAAc,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7F,MAAc,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAE,MAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACL,MAAc,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/config/models/app-config-secrets.backend.schemas.d.ts ADDED Viewed

@@ -0,0 +1,56 @@
+/**
+ * Platform Managed Secret Configuration Schema
+ *
+ * Sensitive configuration values that remain on the app/platform bootstrap
+ * secret channel.
+ *
+ * Provider secret values are the exception: they are runtime-delivered from
+ * env/K8s materialization using the provider secret-binding contract and do
+ * not belong to this persisted secret payload.
+ */
+import { JwtPrivateKeys } from '../../security/authentications/models/jwt.backend.schemas.js';
+import { z } from 'zod';
+export declare const AppConfigurationSecrets_Schema: z.ZodObject<{
+    database: z.ZodObject<{
+        mongodb: z.ZodObject<{
+            username: z.ZodOptional<z.ZodString>;
+            password: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        postgresql: z.ZodOptional<z.ZodObject<{
+            host: z.ZodOptional<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+            username: z.ZodOptional<z.ZodString>;
+            password: z.ZodOptional<z.ZodString>;
+            databaseName: z.ZodOptional<z.ZodString>;
+            connectUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        redis: z.ZodObject<{
+            password: z.ZodOptional<z.ZodString>;
+            username: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        rabbitmq: z.ZodObject<{
+            username: z.ZodOptional<z.ZodString>;
+            password: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    security: z.ZodObject<{
+        jwt: z.ZodObject<{
+            privateKey: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof JwtPrivateKeys> & z.core.$partial, z.ZodOptional<z.ZodString>>>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        session: z.ZodObject<{
+            secret: z.ZodString;
+            encryptionKey: z.ZodString;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    createdAt: z.ZodDefault<z.ZodDate>;
+    updatedAt: z.ZodDefault<z.ZodDate>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/** ──────────────────────────────────────────────────────────────
+ * Inferred Type (from schema - no interface duplication)
+ * ────────────────────────────────────────────────────────────── */
+export type AppConfigurationSecrets = z.infer<typeof AppConfigurationSecrets_Schema>;
+export declare function inspectAppConfigurationSecretsBoundaryMutations(previousSecrets: AppConfigurationSecrets, nextSecrets: AppConfigurationSecrets): {
+    errors: string[];
+    warnings: string[];
+};
+//# sourceMappingURL=app-config-secrets.backend.schemas.d.ts.map

package/dist/esm/config/models/app-config-secrets.backend.schemas.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"app-config-secrets.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/config/models/app-config-secrets.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AACxG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAqExB,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAuCzC,CAAC;AAEH;;oEAEoE;AAEpE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAerF,wBAAgB,+CAA+C,CAC7D,eAAe,EAAE,uBAAuB,EACxC,WAAW,EAAE,uBAAuB,GACnC;IACD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAMA"}

package/dist/esm/config/models/app-config-secrets.backend.schemas.js ADDED Viewed

@@ -0,0 +1,121 @@
+/**
+ * Platform Managed Secret Configuration Schema
+ *
+ * Sensitive configuration values that remain on the app/platform bootstrap
+ * secret channel.
+ *
+ * Provider secret values are the exception: they are runtime-delivered from
+ * env/K8s materialization using the provider secret-binding contract and do
+ * not belong to this persisted secret payload.
+ */
+import { JwtPrivateKeys } from '../../security/authentications/models/jwt.backend.schemas.js';
+import { z } from 'zod';
+import { inspectMutationBoundaries, } from './config-mutation-boundary.utils.js';
+/** ──────────────────────────────────────────────────────────────
+ * Internal Schema with z.ZodObject type annotation
+ *
+ * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)
+ * ✅ Compatible with isolatedDeclarations: true (OXC)
+ * ────────────────────────────────────────────────────────────── */
+// Create schemas separately to infer their types (for complex Zod 4 types that can't be expressed in type annotations)
+const jwtPrivateKeySchema = z.partialRecord(z.enum(JwtPrivateKeys), z.string().min(1, { error: 'JWT private key is required' }).optional()).default(() => ({
+    [JwtPrivateKeys.APPLICATION_PLATFORM_REQUEST]: undefined,
+    [JwtPrivateKeys.APPLICATION_WEBHOOK]: undefined,
+    [JwtPrivateKeys.APPLICATION_AUTH_TOKEN]: undefined,
+}));
+const dateSchema = z.date().default(() => new Date());
+/**
+ * PostgreSQL secrets schema
+ *
+ * Provides credentials for PostgreSQL database connection.
+ * Either individual fields (host, username, password, databaseName) OR connectUrl must be provided.
+ *
+ * Validation:
+ * - If connectUrl is provided, it takes precedence and individual fields are optional
+ * - If connectUrl is NOT provided, all individual fields (host, username, password, databaseName) are required
+ */
+const postgreSQLSecretsSchema = z.object({
+    /** PostgreSQL host */
+    host: z.string().min(1).optional(),
+    /** PostgreSQL port (default: 5432) */
+    port: z.number().int().default(5432),
+    /** Database username */
+    username: z.string().min(1).optional(),
+    /** Database password */
+    password: z.string().min(1).optional(),
+    /** Database name */
+    databaseName: z.string().min(1).optional(),
+    /**
+     * Full connection URL (alternative to individual fields).
+     * If provided, takes precedence over individual fields.
+     * Format: postgresql://user:password@host:port/database?schema=public
+     */
+    connectUrl: z.string().optional(),
+}).refine((data) => {
+    // If connectUrl is provided, validation passes
+    if (data.connectUrl && data.connectUrl.length > 0) {
+        return true;
+    }
+    // Otherwise, all individual fields must be provided
+    const hasAllFields = !!(data.host && data.host.length > 0 &&
+        data.username && data.username.length > 0 &&
+        data.password && data.password.length > 0 &&
+        data.databaseName && data.databaseName.length > 0);
+    return hasAllFields;
+}, {
+    message: 'PostgreSQL secrets must provide either connectUrl OR all individual fields (host, username, password, databaseName)',
+});
+export const AppConfigurationSecrets_Schema = z.object({
+    /**
+     * Infrastructure backing credentials — platform-managed, opaque to developers.
+     * Provisioned by apps-manager init mode, fetched by services at startup.
+     */
+    database: z.object({
+        mongodb: z.object({
+            username: z.string().optional(),
+            password: z.string().optional()
+        }),
+        /** PostgreSQL credentials (optional — only needed if PostgreSQL is enabled) */
+        postgresql: postgreSQLSecretsSchema.optional(),
+        redis: z.object({
+            password: z.string().optional(),
+            username: z.string().optional()
+        }),
+        rabbitmq: z.object({
+            username: z.string().optional(),
+            password: z.string().optional()
+        }),
+    }),
+    /**
+     * Application security credentials — JWT signing keys and session secrets.
+     * Separated from infrastructure credentials because they serve a different
+     * purpose (app-level identity/security vs infrastructure access).
+     */
+    security: z.object({
+        jwt: z.object({
+            privateKey: jwtPrivateKeySchema,
+        }),
+        session: z.object({
+            secret: z.string().min(32, { error: 'Session secret must be at least 32 characters' }),
+            encryptionKey: z.string().min(32, { error: 'Encryption key must be at least 32 characters' })
+        }),
+    }),
+    createdAt: dateSchema,
+    updatedAt: dateSchema,
+});
+const APP_SECRETS_MUTATION_BOUNDARY_RULES = [
+    {
+        path: 'database',
+        severity: 'error',
+        reason: 'backing-service credentials are platform-managed provisioned secrets',
+    },
+    {
+        path: 'security',
+        severity: 'error',
+        reason: 'application signing and session secrets are platform-managed security material',
+    },
+];
+export function inspectAppConfigurationSecretsBoundaryMutations(previousSecrets, nextSecrets) {
+    return inspectMutationBoundaries(previousSecrets, nextSecrets, APP_SECRETS_MUTATION_BOUNDARY_RULES);
+}
+//# sourceMappingURL=app-config-secrets.backend.schemas.js.map

package/dist/esm/config/models/app-config-secrets.backend.schemas.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"app-config-secrets.backend.schemas.js","sourceRoot":"","sources":["../../../../src/config/models/app-config-secrets.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AACxG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yBAAyB,GAE1B,MAAM,kCAAkC,CAAC;AAE1C;;;;;oEAKoE;AAEpE,uHAAuH;AACvH,MAAM,mBAAmB,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzJ,CAAC,cAAc,CAAC,4BAA4B,CAAC,EAAE,SAAS;IACxD,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,SAAS;IAC/C,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAAE,SAAS;CACnD,CAAC,CAAC,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,sBAAsB;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,sCAAsC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,wBAAwB;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,wBAAwB;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,oBAAoB;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,MAAM,CACP,CAAC,IAAI,EAAE,EAAE;IACP,+CAA+C;IAC/C,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oDAAoD;IACpD,MAAM,YAAY,GAAG,CAAC,CAAC,CACrB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACjC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACzC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACzC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAClD,CAAC;IACF,OAAO,YAAY,CAAC;AACtB,CAAC,EACD;IACE,OAAO,EAAE,qHAAqH;CAC/H,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAChC,CAAC;QACF,+EAA+E;QAC/E,UAAU,EAAE,uBAAuB,CAAC,QAAQ,EAAE;QAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAChC,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAChC,CAAC;KACH,CAAC;IAEF;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;YACZ,UAAU,EAAE,mBAAmB;SAChC,CAAC;QACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;YACtF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;SAC9F,CAAC;KACH,CAAC;IAEF,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,UAAU;CACtB,CAAC,CAAC;AAQH,MAAM,mCAAmC,GAAwC;IAC/E;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,sEAAsE;KAC/E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,gFAAgF;KACzF;CACO,CAAC;AAEX,MAAM,UAAU,+CAA+C,CAC7D,eAAwC,EACxC,WAAoC;IAKpC,OAAO,yBAAyB,CAC9B,eAAe,EACf,WAAW,EACX,mCAAmC,CACpC,CAAC;AACJ,CAAC"}

package/dist/esm/config/models/app-config.backend-authored.definitions.d.ts ADDED Viewed

@@ -0,0 +1,35 @@
+import type { AppConfiguration, AppConfiguration_AppManagedConfiguration, AppConfiguration_PreOverrideSeed } from './app-config.backend.schemas.js';
+type DeepPartial<T> = T extends Date ? T : T extends Array<infer U> ? Array<DeepPartial<U>> : T extends object ? {
+    [K in keyof T]?: DeepPartial<T[K]>;
+} : T;
+type BackendAuthoredEmailSection = Omit<AppConfiguration_AppManagedConfiguration['email'], 'isTransactionalWildoManaged' | 'isMarketingWildoManaged'>;
+type BackendAuthoredManagedSections = Omit<AppConfiguration_AppManagedConfiguration, 'appIdentity' | 'capabilities' | 'externalProvidersConfigurations' | 'email'> & {
+    email: BackendAuthoredEmailSection;
+};
+/**
+ * Declarative backend-authored application config.
+ *
+ * This is intentionally limited to app-managed sections, plus the narrow JWT
+ * TTL tuning seam that remains app-authored while key material stays
+ * platform-managed.
+ *
+ * `frontendServices` is now policy-only at this layer: backend config may
+ * attach `usersManagement` rules to frontend services that were already seeded
+ * from the upstream SaaS declaration, but it must not invent new frontend
+ * service identities locally.
+ */
+export type AppConfiguration_BackendAuthored = DeepPartial<BackendAuthoredManagedSections> & {
+    jwt?: DeepPartial<AppConfiguration['jwt']>;
+};
+type AppConfigBaseConfiguration = AppConfiguration | AppConfiguration_PreOverrideSeed;
+export declare function mergeConfigValue<T>(baseValue: T, overrideValue: unknown): T;
+export declare function inspectAppConfigurationBoundaryMutations(previousConfig: AppConfigBaseConfiguration, nextConfig: AppConfigBaseConfiguration): {
+    errors: string[];
+    warnings: string[];
+};
+/**
+ * Applies declarative backend-authored config onto the pre-resolved runtime seed.
+ */
+export declare function applyBackendAuthoredConfig(config: AppConfigBaseConfiguration, backendConfig: AppConfiguration_BackendAuthored): AppConfigBaseConfiguration;
+export {};
+//# sourceMappingURL=app-config.backend-authored.definitions.d.ts.map

package/dist/esm/config/models/app-config.backend-authored.definitions.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"app-config.backend-authored.definitions.d.ts","sourceRoot":"","sources":["../../../../src/config/models/app-config.backend-authored.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,wCAAwC,EACxC,gCAAgC,EACjC,MAAM,8BAA8B,CAAC;AAMtC,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,GAChC,CAAC,GACD,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,CAAC,GACtB,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GACrB,CAAC,SAAS,MAAM,GACd;KAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACtC,CAAC,CAAC;AAEV,KAAK,2BAA2B,GAAG,IAAI,CACrC,wCAAwC,CAAC,OAAO,CAAC,EACjD,6BAA6B,GAAG,yBAAyB,CAC1D,CAAC;AAEF,KAAK,8BAA8B,GAAG,IAAI,CACxC,wCAAwC,EACxC,aAAa,GAAG,cAAc,GAAG,iCAAiC,GAAG,OAAO,CAC7E,GAAG;IACF,KAAK,EAAE,2BAA2B,CAAC;CACpC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,gCAAgC,GAC1C,WAAW,CAAC,8BAA8B,CAAC,GACzC;IACA,GAAG,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEJ,KAAK,0BAA0B,GAAG,gBAAgB,GAAG,gCAAgC,CAAC;AAkDtF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,OAAO,GAAG,CAAC,CAiB3E;AAED,wBAAgB,wCAAwC,CACtD,cAAc,EAAE,0BAA0B,EAC1C,UAAU,EAAE,0BAA0B,GACrC;IACD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAiBA;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,EAClC,aAAa,EAAE,gCAAgC,GAC9C,0BAA0B,CAgB5B"}