@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/config/models/app-config.backend.schemas.d.ts

@@ -0,0 +1,1651 @@
+/**
+ * Backend Application Configuration Schemas
+ *
+ * Complete backend configuration schemas with all necessary fields.
+ * Frontend configuration is handled separately in saas-frontend-lib.
+ */
+import { PostgreSQLSSLMode } from '@wildo-ai/saas-models';
+import { z } from 'zod';
+import { ExternalProvider_ExchangeProtocol_Kind } from '@wildo-ai/external-connectors-models';
+import { AllApplicationTypes } from '../../applications/models/applications.backend.schemas.js';
+/** ──────────────────────────────────────────────────────────────
+ * Auth Backend-Only Enums
+ * ────────────────────────────────────────────────────────────── */
+export declare enum Argon2Type {
+    ARGON2D = "argon2d",
+    ARGON2I = "argon2i",
+    ARGON2ID = "argon2id"
+}
+export declare enum AuthenticatorAttachment {
+    PLATFORM = "platform",
+    CROSS_PLATFORM = "cross-platform",
+    ANY = "any"
+}
+export declare enum UserVerification {
+    REQUIRED = "required",
+    PREFERRED = "preferred",
+    DISCOURAGED = "discouraged"
+}
+/** W3C AttestationConveyancePreference — all four values per the spec. */
+export declare enum AttestationType {
+    NONE = "none",
+    INDIRECT = "indirect",
+    DIRECT = "direct",
+    ENTERPRISE = "enterprise"
+}
+export declare enum TotpAlgorithm {
+    SHA1 = "SHA1",
+    SHA256 = "SHA256",
+    SHA512 = "SHA512"
+}
+/** ──────────────────────────────────────────────────────────────
+ * Database & Infrastructure Enums
+ * ────────────────────────────────────────────────────────────── */
+export declare enum MongoDBProtocol {
+    MONGODB = "mongodb",
+    MONGODB_SRV = "mongodb+srv"
+}
+/**
+ * Persistence adapter types for database selection.
+ * Matches the PersistenceAdapterType in saas-models.
+ */
+export declare enum PersistenceAdapter {
+    MONGODB = "mongodb",
+    POSTGRESQL = "postgresql"
+}
+export { PostgreSQLSSLMode } from '@wildo-ai/saas-models';
+/** ──────────────────────────────────────────────────────────────
+ * Backend Auth Schema — extends shared auth with backend-only operational config.
+ * The shared auth schema is the frontend-safe subset; this adds hashing,
+ * lockout, OTP operational, passkey ceremony, TOTP, and magic link tuning.
+ * toAppConfiguration_Shared() strips backend-only fields before sending to frontend.
+ * ────────────────────────────────────────────────────────────── */
+export declare const AppConfiguration_AuthSchema: z.ZodObject<{
+    passkeyConfig: z.ZodObject<{
+        rpName: z.ZodString;
+        rpId: z.ZodString;
+        maxPasskeysPerUser: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    ssoProviders: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        providerRef: z.ZodString;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+        additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    orgAuthMethodPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrgAuthMethodPolicy>>;
+    expandableOrgMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+    crossOrgSSOAccess: z.ZodDefault<z.ZodBoolean>;
+    passwordHashing: z.ZodObject<{
+        argon2: z.ZodOptional<z.ZodObject<{
+            type: z.ZodEnum<typeof Argon2Type>;
+            memoryCost: z.ZodNumber;
+            timeCost: z.ZodNumber;
+            parallelism: z.ZodNumber;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    passkeyOperational: z.ZodObject<{
+        authenticatorAttachment: z.ZodEnum<typeof AuthenticatorAttachment>;
+        requireResidentKey: z.ZodBoolean;
+        userVerification: z.ZodEnum<typeof UserVerification>;
+        timeoutSeconds: z.ZodNumber;
+        attestation: z.ZodEnum<typeof AttestationType>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    otpOperational: z.ZodObject<{
+        smsOtp: z.ZodObject<{
+            otpLength: z.ZodNumber;
+            expiryMinutes: z.ZodNumber;
+            rateLimitBurst: z.ZodNumber;
+            rateLimitHourly: z.ZodNumber;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        emailOtp: z.ZodObject<{
+            otpLength: z.ZodNumber;
+            expiryMinutes: z.ZodNumber;
+            rateLimitPerMinute: z.ZodNumber;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    magicLinkOperational: z.ZodObject<{
+        tokenExpiryMinutes: z.ZodNumber;
+        rateLimitPerMinute: z.ZodNumber;
+        rateLimitPerHour: z.ZodNumber;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    totpOperational: z.ZodObject<{
+        issuer: z.ZodOptional<z.ZodString>;
+        algorithm: z.ZodEnum<typeof TotpAlgorithm>;
+        digits: z.ZodNumber;
+        period: z.ZodNumber;
+        window: z.ZodNumber;
+        qrCodeSize: z.ZodNumber;
+        includeIssuerInLabel: z.ZodBoolean;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_ComplianceSchema: z.ZodObject<{
+    userProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").UserProfileVisibility>>;
+    organizationProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrganizationProfileVisibility>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_AppIdentity_Schema: z.ZodObject<{
+    appName: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    logoUrl: z.ZodOptional<z.ZodString>;
+    version: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_AppPreferencesLanguage_Schema: z.ZodObject<{
+    defaultLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+    enabledLanguages: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+    fallbackLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+    autoDetectFromBrowser: z.ZodDefault<z.ZodBoolean>;
+    allowUserOverride: z.ZodDefault<z.ZodBoolean>;
+    allowOrganizationOverride: z.ZodDefault<z.ZodBoolean>;
+    enableLanguageSwitcher: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/** ──────────────────────────────────────────────────────────────
+ * Internal Schemas with z.ZodObject type annotation
+ *
+ * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)
+ * ✅ Compatible with isolatedDeclarations: true (OXC)
+ * ────────────────────────────────────────────────────────────── */
+export declare const appConfiguration_Backend_RuntimeSchemaBuilder: <T extends AllApplicationTypes>(appTypeSchema: z.ZodType<T>) => z.ZodObject<{
+    endPoints: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        publicUrl: z.ZodOptional<z.ZodString>;
+        internalUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    appCustomRoot: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_RuntimeSchema: z.ZodObject<{
+    endPoints: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        publicUrl: z.ZodOptional<z.ZodString>;
+        internalUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    appCustomRoot: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Simplified brand tokens for email templates.
+ * App developers set high-level brand values; the email service
+ * derives the full `EmailBrandTokens` palette (with fallback defaults).
+ */
+export declare const EmailBrandTokens_ConfigSchema: z.ZodObject<{
+    primaryColor: z.ZodOptional<z.ZodString>;
+    secondaryColor: z.ZodOptional<z.ZodString>;
+    fontFamily: z.ZodOptional<z.ZodString>;
+    logoUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type EmailBrandTokens_Config = z.infer<typeof EmailBrandTokens_ConfigSchema>;
+export declare const AppConfiguration_Email_Schema: z.ZodObject<{
+    from: z.ZodEmail;
+    replyTo: z.ZodOptional<z.ZodEmail>;
+    isTransactionalWildoManaged: z.ZodBoolean;
+    isMarketingWildoManaged: z.ZodBoolean;
+    brandTokens: z.ZodOptional<z.ZodObject<{
+        primaryColor: z.ZodOptional<z.ZodString>;
+        secondaryColor: z.ZodOptional<z.ZodString>;
+        fontFamily: z.ZodOptional<z.ZodString>;
+        logoUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfigBackend_Monitoring_Schema: z.ZodObject<{
+    metrics: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        collectDefaultMetrics: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * PostgreSQL connection pool configuration
+ */
+declare const PostgreSQL_PoolConfig_Schema: z.ZodObject<{
+    min: z.ZodDefault<z.ZodNumber>;
+    max: z.ZodDefault<z.ZodNumber>;
+    idleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * PostgreSQL configuration schema
+ */
+declare const PostgreSQL_Config_Schema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    databaseName: z.ZodOptional<z.ZodString>;
+    sslMode: z.ZodDefault<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+    pool: z.ZodOptional<z.ZodObject<{
+        min: z.ZodDefault<z.ZodNumber>;
+        max: z.ZodDefault<z.ZodNumber>;
+        idleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * MongoDB configuration schema with enabled flag
+ */
+declare const MongoDB_Config_Schema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    host: z.ZodString;
+    database: z.ZodString;
+    protocol: z.ZodEnum<typeof MongoDBProtocol>;
+    options: z.ZodObject<{
+        retryWrites: z.ZodBoolean;
+        w: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+        appName: z.ZodOptional<z.ZodString>;
+        authSource: z.ZodString;
+        directConnection: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfigBackend_Database_Schema: z.ZodObject<{
+    defaultAdapter: z.ZodEnum<typeof PersistenceAdapter>;
+    mongodb: z.ZodObject<{
+        enabled: z.ZodBoolean;
+        host: z.ZodString;
+        database: z.ZodString;
+        protocol: z.ZodEnum<typeof MongoDBProtocol>;
+        options: z.ZodObject<{
+            retryWrites: z.ZodBoolean;
+            w: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+            appName: z.ZodOptional<z.ZodString>;
+            authSource: z.ZodString;
+            directConnection: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    postgresql: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        databaseName: z.ZodOptional<z.ZodString>;
+        sslMode: z.ZodDefault<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+        pool: z.ZodOptional<z.ZodObject<{
+            min: z.ZodDefault<z.ZodNumber>;
+            max: z.ZodDefault<z.ZodNumber>;
+            idleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    redis: z.ZodOptional<z.ZodObject<{
+        host: z.ZodDefault<z.ZodString>;
+        port: z.ZodDefault<z.ZodNumber>;
+        db: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    rabbitmq: z.ZodOptional<z.ZodObject<{
+        host: z.ZodDefault<z.ZodString>;
+        port: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/** L6: Schema for a rotated public key entry, including its kid for header matching. */
+export declare const RotatedPublicKeyEntry_Schema: z.ZodObject<{
+    kid: z.ZodString;
+    publicKey: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_JWT_Schema: z.ZodObject<{
+    publicKey: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    rotatedPublicKeys: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+        kid: z.ZodString;
+        publicKey: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>>>>>;
+    refreshTokenExpirationDays: z.ZodNumber;
+    accessTokenExpirationMinutes: z.ZodNumber;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_StorageSchema: z.ZodObject<{
+    maxFileSize: z.ZodNumber;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/** ──────────────────────────────────────────────────────────────
+ * App-Managed Configuration
+ *
+ * Fields that application developers control via backend config files
+ * (the config files in backend-api/src/config/). These define
+ * the application's identity, behavior, and integrations.
+ * ────────────────────────────────────────────────────────────── */
+export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObject<{
+    appIdentity: z.ZodObject<{
+        appName: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        logoUrl: z.ZodOptional<z.ZodString>;
+        version: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    appPreferences: z.ZodObject<{
+        languages: z.ZodObject<{
+            defaultLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+            enabledLanguages: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+            fallbackLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+            autoDetectFromBrowser: z.ZodDefault<z.ZodBoolean>;
+            allowUserOverride: z.ZodDefault<z.ZodBoolean>;
+            allowOrganizationOverride: z.ZodDefault<z.ZodBoolean>;
+            enableLanguageSwitcher: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    auth: z.ZodObject<{
+        passkeyConfig: z.ZodObject<{
+            rpName: z.ZodString;
+            rpId: z.ZodString;
+            maxPasskeysPerUser: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        ssoProviders: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            providerRef: z.ZodString;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            displayName: z.ZodOptional<z.ZodString>;
+            additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        orgAuthMethodPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrgAuthMethodPolicy>>;
+        expandableOrgMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+        crossOrgSSOAccess: z.ZodDefault<z.ZodBoolean>;
+        passwordHashing: z.ZodObject<{
+            argon2: z.ZodOptional<z.ZodObject<{
+                type: z.ZodEnum<typeof Argon2Type>;
+                memoryCost: z.ZodNumber;
+                timeCost: z.ZodNumber;
+                parallelism: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        passkeyOperational: z.ZodObject<{
+            authenticatorAttachment: z.ZodEnum<typeof AuthenticatorAttachment>;
+            requireResidentKey: z.ZodBoolean;
+            userVerification: z.ZodEnum<typeof UserVerification>;
+            timeoutSeconds: z.ZodNumber;
+            attestation: z.ZodEnum<typeof AttestationType>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        otpOperational: z.ZodObject<{
+            smsOtp: z.ZodObject<{
+                otpLength: z.ZodNumber;
+                expiryMinutes: z.ZodNumber;
+                rateLimitBurst: z.ZodNumber;
+                rateLimitHourly: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+            emailOtp: z.ZodObject<{
+                otpLength: z.ZodNumber;
+                expiryMinutes: z.ZodNumber;
+                rateLimitPerMinute: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        magicLinkOperational: z.ZodObject<{
+            tokenExpiryMinutes: z.ZodNumber;
+            rateLimitPerMinute: z.ZodNumber;
+            rateLimitPerHour: z.ZodNumber;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        totpOperational: z.ZodObject<{
+            issuer: z.ZodOptional<z.ZodString>;
+            algorithm: z.ZodEnum<typeof TotpAlgorithm>;
+            digits: z.ZodNumber;
+            period: z.ZodNumber;
+            window: z.ZodNumber;
+            qrCodeSize: z.ZodNumber;
+            includeIssuerInLabel: z.ZodBoolean;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    userTypes: z.ZodRecord<z.ZodString, z.ZodObject<{
+        auth: z.ZodObject<{
+            authMethodsEnabled: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strip, core.$ZodObjectExtra>]>>>;
+            mfaPolicy: z.ZodDefault<z.ZodObject<{
+                requireMFA: z.ZodDefault<z.ZodBoolean>;
+                requireStrongMFA: z.ZodDefault<z.ZodBoolean>;
+                acceptableMFAMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+                enrollmentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
+                passkeyExemptFromMFA: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            registration: z.ZodDefault<z.ZodObject<{
+                mode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").RegistrationMode>>;
+                allowedMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+                requirePasswordOnRegister: z.ZodDefault<z.ZodBoolean>;
+                emailVerification: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").EmailVerificationMode>>;
+                blockForSSODomains: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            passwordPolicy: z.ZodDefault<z.ZodObject<{
+                minLength: z.ZodDefault<z.ZodNumber>;
+                maxLength: z.ZodDefault<z.ZodNumber>;
+                requireUppercase: z.ZodDefault<z.ZodBoolean>;
+                requireLowercase: z.ZodDefault<z.ZodBoolean>;
+                requireNumbers: z.ZodDefault<z.ZodBoolean>;
+                requireSpecialChars: z.ZodDefault<z.ZodBoolean>;
+                expiryDays: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            sessionDurationMinutes: z.ZodDefault<z.ZodNumber>;
+            maxConcurrentSessions: z.ZodOptional<z.ZodNumber>;
+            lockoutPolicy: z.ZodDefault<z.ZodObject<{
+                maxLoginAttempts: z.ZodDefault<z.ZodNumber>;
+                lockoutDurationMinutes: z.ZodDefault<z.ZodNumber>;
+                progressiveLockout: z.ZodDefault<z.ZodBoolean>;
+                maxProgressiveLockoutHours: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            autoLinkByEmail: z.ZodDefault<z.ZodBoolean>;
+            stepUpAuth: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxAgeSeconds: z.ZodDefault<z.ZodNumber>;
+                methods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            methodManagement: z.ZodDefault<z.ZodObject<{
+                allowUserMethodRemoval: z.ZodDefault<z.ZodBoolean>;
+                requireReauthForMethodChanges: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            anonymousSessionsEnabled: z.ZodOptional<z.ZodBoolean>;
+            oneOffSessionAllowed: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        uniqueIdentifier: z.ZodDefault<z.ZodString>;
+        defaultAppRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_APP_ROLES>, z.ZodString]>>>;
+        requiresOrgMembership: z.ZodOptional<z.ZodObject<{
+            orgTypes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    frontendServices: z.ZodRecord<z.ZodString, z.ZodObject<{
+        usersManagement: z.ZodRecord<z.ZodString, z.ZodObject<{
+            register: z.ZodBoolean;
+            auth: z.ZodBoolean;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    organizationTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        userTypes: z.ZodArray<z.ZodString>;
+        availableOrgRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_ORG_ROLES>, z.ZodString]>, z.ZodString]>>>;
+        defaultMemberRole: z.ZodDefault<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_ORG_ROLES>, z.ZodString]>, z.ZodString]>>;
+        authOverrides: z.ZodOptional<z.ZodObject<{
+            authMethodsEnabled: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strip, core.$ZodObjectExtra>]>>>;
+            mfaPolicy: z.ZodOptional<z.ZodObject<{
+                requireMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireStrongMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                acceptableMFAMethods: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>>;
+                enrollmentGracePeriodDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                passkeyExemptFromMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            passwordPolicy: z.ZodOptional<z.ZodObject<{
+                minLength: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                maxLength: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                requireUppercase: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireLowercase: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireNumbers: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireSpecialChars: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                expiryDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        scimProvisioning: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        creationPolicy: z.ZodOptional<z.ZodObject<{
+            createOnUserTypeRegistration: z.ZodArray<z.ZodString>;
+            orgNameSource: z.ZodEnum<{
+                auto: "auto";
+                ask: "ask";
+                onboarding: "onboarding";
+            }>;
+            defaultOwnerRole: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    compliance: z.ZodObject<{
+        userProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").UserProfileVisibility>>;
+        organizationProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrganizationProfileVisibility>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    email: z.ZodObject<{
+        from: z.ZodEmail;
+        replyTo: z.ZodOptional<z.ZodEmail>;
+        isTransactionalWildoManaged: z.ZodBoolean;
+        isMarketingWildoManaged: z.ZodBoolean;
+        brandTokens: z.ZodOptional<z.ZodObject<{
+            primaryColor: z.ZodOptional<z.ZodString>;
+            secondaryColor: z.ZodOptional<z.ZodString>;
+            fontFamily: z.ZodOptional<z.ZodString>;
+            logoUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    storage: z.ZodObject<{
+        maxFileSize: z.ZodNumber;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    monitoring: z.ZodObject<{
+        metrics: z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            collectDefaultMetrics: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        capabilities: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").EngineCapability> & z.core.$partial, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    externalProvidersConfigurations: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof ExternalProvider_ExchangeProtocol_Kind> & z.core.$partial, z.ZodUnion<readonly [z.ZodObject<{
+        enabled: z.ZodBoolean;
+        authConfig: z.ZodOptional<z.ZodObject<{
+            authKind: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Auth_Kind>;
+            profileRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+            secretRef: z.ZodString;
+        }, z.core.$strip>>;
+        rateLimitConfig: z.ZodOptional<z.ZodObject<{
+            maxConcurrent: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            minTime: z.ZodOptional<z.ZodNumber>;
+            reservoir: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshInterval: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshAmount: z.ZodOptional<z.ZodNumber>;
+            priority: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, z.core.$strip>>;
+        defaultExecutionProfileRef: z.ZodOptional<z.ZodString>;
+        executionProfiles: z.ZodRecord<z.ZodString, z.ZodObject<{
+            runnerHost: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_RunnerHost>>;
+            command: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            inheritedEnvironmentVariables: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMode: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_AuthMode>;
+            secretRef: z.ZodOptional<z.ZodString>;
+            secretEnvVarName: z.ZodOptional<z.ZodString>;
+            allowedApplicationEnvironments: z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").APPLICATION_ENVIRONMENT>>;
+            allowedPlatformEnvironmentIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            workspaceRootPath: z.ZodString;
+            workingDirectoryPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_WorkingDirectoryPolicy>>;
+            workingDirectoryRelativePath: z.ZodOptional<z.ZodString>;
+            timeoutMs: z.ZodOptional<z.ZodNumber>;
+            outputParserMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_OutputParserMode>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        authConfig: z.ZodOptional<z.ZodObject<{
+            authKind: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Auth_Kind>;
+            profileRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+            secretRef: z.ZodString;
+        }, z.core.$strip>>;
+        rateLimitConfig: z.ZodOptional<z.ZodObject<{
+            maxConcurrent: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            minTime: z.ZodOptional<z.ZodNumber>;
+            reservoir: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshInterval: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshAmount: z.ZodOptional<z.ZodNumber>;
+            priority: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip, core.$ZodObjectExtra>]>>>>>>;
+    billing: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        providerRef: z.ZodOptional<z.ZodString>;
+        webhooks: z.ZodOptional<z.ZodObject<{
+            path: z.ZodDefault<z.ZodString>;
+            signingSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        defaultCurrency: z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>;
+        supportedCurrencies: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>>;
+        tax: z.ZodDefault<z.ZodObject<{
+            calculationMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").TaxCalculationMode>>;
+            defaultDisplayMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").TaxDisplayMode>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        enabledScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").ResourcePrimaryScope>>>;
+        promotions: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        creditPools: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            defaultInitialBalance: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        defaultBehaviorPolicy: z.ZodDefault<z.ZodObject<{
+            defaultTrialDays: z.ZodDefault<z.ZodNumber>;
+            paymentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
+            maxPaymentRetries: z.ZodDefault<z.ZodNumber>;
+            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ProrationBehavior>>;
+            defaultCancellation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").BillingTiming>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    analytics: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            providerType: z.ZodEnum<typeof import("@wildo-ai/saas-models").AnalyticsProviderType>;
+            config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        requiredConsent: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").DataProcessingConsent>>;
+        valueMoments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            identifier: z.ZodString;
+            role: z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentRole>;
+            scope: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentScope>>;
+            signals: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.RESOURCE_OPERATION>;
+                resourceType: z.ZodString;
+                operation: z.ZodString;
+                filter: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                threshold: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.RESOURCE_STATE>;
+                resourceType: z.ZodString;
+                filter: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                threshold: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.VIEW_VISIT>;
+                contentType: z.ZodEnum<{
+                    custom: "custom";
+                    resource_operation: "resource_operation";
+                    composite_view: "composite_view";
+                    chart_view: "chart_view";
+                    full_custom_view: "full_custom_view";
+                    flows_actors_view: "flows_actors_view";
+                }>;
+                viewRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.FEATURE_ACCESS>;
+                featureId: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.CUSTOM_EVENT>;
+                eventName: z.ZodString;
+                threshold: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>], "signalType">>;
+            mode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentMode>>;
+            requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            beforeStage: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            cooldownMs: z.ZodOptional<z.ZodNumber>;
+            onAchieved: z.ZodOptional<z.ZodObject<{
+                frontendEvent: z.ZodDefault<z.ZodBoolean>;
+                backendHandler: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        persistence: z.ZodDefault<z.ZodObject<{
+            localStorage: z.ZodDefault<z.ZodBoolean>;
+            backendSync: z.ZodDefault<z.ZodBoolean>;
+            backendEvaluation: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        autoInstrumentation: z.ZodDefault<z.ZodObject<{
+            pageViews: z.ZodDefault<z.ZodBoolean>;
+            resourceOperations: z.ZodDefault<z.ZodBoolean>;
+            trackErrors: z.ZodDefault<z.ZodBoolean>;
+            featureGate: z.ZodDefault<z.ZodBoolean>;
+            userLifecycle: z.ZodDefault<z.ZodBoolean>;
+            notifications: z.ZodDefault<z.ZodBoolean>;
+            hotkeys: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    lifecycle: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        activationCriteria: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<{
+                ALL: "ALL";
+                ANY: "ANY";
+            }>>;
+            criteria: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                criterionType: z.ZodLiteral<import("@wildo-ai/saas-models").ActivationCriterionType.MILESTONE>;
+                milestoneRef: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                criterionType: z.ZodLiteral<import("@wildo-ai/saas-models").ActivationCriterionType.GUIDANCE_COMPLETED>;
+                guidanceFlowRef: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>], "criterionType">>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        engagementThreshold: z.ZodOptional<z.ZodObject<{
+            minOperations: z.ZodDefault<z.ZodNumber>;
+            withinDays: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        dormancyThresholdDays: z.ZodDefault<z.ZodNumber>;
+        activityDebounceMinutes: z.ZodDefault<z.ZodNumber>;
+        dormancyCronSchedule: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/** ──────────────────────────────────────────────────────────────
+ * Platform-Managed Configuration
+ *
+ * Fields injected by the Wildo platform that developers do NOT
+ * override (or only override infra-level details). These are
+ * populated by the apps-manager / CLI / .env pipeline.
+ *
+ * Note: some sub-fields within these sections are conceptually
+ * developer-tunable (e.g. jwt.accessTokenExpirationMinutes),
+ * but the section as a whole is classified by its PRIMARY owner.
+ * Narrow app-authored seams inside platform-managed sections must be
+ * modeled explicitly rather than opened up as generic section patching.
+ * ────────────────────────────────────────────────────────────── */
+export declare const _AppConfiguration_PlatformManagedConfiguration_Schema: z.ZodObject<{
+    runtime: z.ZodObject<{
+        endPoints: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            publicUrl: z.ZodOptional<z.ZodString>;
+            internalUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        appCustomRoot: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    database: z.ZodObject<{
+        defaultAdapter: z.ZodEnum<typeof PersistenceAdapter>;
+        mongodb: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            host: z.ZodString;
+            database: z.ZodString;
+            protocol: z.ZodEnum<typeof MongoDBProtocol>;
+            options: z.ZodObject<{
+                retryWrites: z.ZodBoolean;
+                w: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+                appName: z.ZodOptional<z.ZodString>;
+                authSource: z.ZodString;
+                directConnection: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        postgresql: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            databaseName: z.ZodOptional<z.ZodString>;
+            sslMode: z.ZodDefault<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+            pool: z.ZodOptional<z.ZodObject<{
+                min: z.ZodDefault<z.ZodNumber>;
+                max: z.ZodDefault<z.ZodNumber>;
+                idleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        redis: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+            db: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        rabbitmq: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    jwt: z.ZodObject<{
+        publicKey: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        rotatedPublicKeys: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+            kid: z.ZodString;
+            publicKey: z.ZodString;
+        }, z.core.$strip, core.$ZodObjectExtra>>>>>;
+        refreshTokenExpirationDays: z.ZodNumber;
+        accessTokenExpirationMinutes: z.ZodNumber;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/** ──────────────────────────────────────────────────────────────
+ * Full Application Configuration
+ *
+ * Composed from:
+ *   AppManagedConfiguration  ∪  PlatformManagedConfiguration  ∪  metadata
+ *
+ * The ApplicationEnvConfigurationSchema (from .env) contributes
+ * values that get mapped into the runtime config via the loader
+ * but is not merged here — it's parsed separately from process.env.
+ * ────────────────────────────────────────────────────────────── */
+export declare const AppConfiguration_Schema: z.ZodObject<{
+    appIdentity: z.ZodObject<{
+        appName: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        logoUrl: z.ZodOptional<z.ZodString>;
+        version: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    appPreferences: z.ZodObject<{
+        languages: z.ZodObject<{
+            defaultLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+            enabledLanguages: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+            fallbackLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+            autoDetectFromBrowser: z.ZodDefault<z.ZodBoolean>;
+            allowUserOverride: z.ZodDefault<z.ZodBoolean>;
+            allowOrganizationOverride: z.ZodDefault<z.ZodBoolean>;
+            enableLanguageSwitcher: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    auth: z.ZodObject<{
+        passkeyConfig: z.ZodObject<{
+            rpName: z.ZodString;
+            rpId: z.ZodString;
+            maxPasskeysPerUser: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        ssoProviders: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            providerRef: z.ZodString;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            displayName: z.ZodOptional<z.ZodString>;
+            additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        orgAuthMethodPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrgAuthMethodPolicy>>;
+        expandableOrgMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+        crossOrgSSOAccess: z.ZodDefault<z.ZodBoolean>;
+        passwordHashing: z.ZodObject<{
+            argon2: z.ZodOptional<z.ZodObject<{
+                type: z.ZodEnum<typeof Argon2Type>;
+                memoryCost: z.ZodNumber;
+                timeCost: z.ZodNumber;
+                parallelism: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        passkeyOperational: z.ZodObject<{
+            authenticatorAttachment: z.ZodEnum<typeof AuthenticatorAttachment>;
+            requireResidentKey: z.ZodBoolean;
+            userVerification: z.ZodEnum<typeof UserVerification>;
+            timeoutSeconds: z.ZodNumber;
+            attestation: z.ZodEnum<typeof AttestationType>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        otpOperational: z.ZodObject<{
+            smsOtp: z.ZodObject<{
+                otpLength: z.ZodNumber;
+                expiryMinutes: z.ZodNumber;
+                rateLimitBurst: z.ZodNumber;
+                rateLimitHourly: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+            emailOtp: z.ZodObject<{
+                otpLength: z.ZodNumber;
+                expiryMinutes: z.ZodNumber;
+                rateLimitPerMinute: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        magicLinkOperational: z.ZodObject<{
+            tokenExpiryMinutes: z.ZodNumber;
+            rateLimitPerMinute: z.ZodNumber;
+            rateLimitPerHour: z.ZodNumber;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        totpOperational: z.ZodObject<{
+            issuer: z.ZodOptional<z.ZodString>;
+            algorithm: z.ZodEnum<typeof TotpAlgorithm>;
+            digits: z.ZodNumber;
+            period: z.ZodNumber;
+            window: z.ZodNumber;
+            qrCodeSize: z.ZodNumber;
+            includeIssuerInLabel: z.ZodBoolean;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    userTypes: z.ZodRecord<z.ZodString, z.ZodObject<{
+        auth: z.ZodObject<{
+            authMethodsEnabled: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strip, core.$ZodObjectExtra>]>>>;
+            mfaPolicy: z.ZodDefault<z.ZodObject<{
+                requireMFA: z.ZodDefault<z.ZodBoolean>;
+                requireStrongMFA: z.ZodDefault<z.ZodBoolean>;
+                acceptableMFAMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+                enrollmentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
+                passkeyExemptFromMFA: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            registration: z.ZodDefault<z.ZodObject<{
+                mode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").RegistrationMode>>;
+                allowedMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+                requirePasswordOnRegister: z.ZodDefault<z.ZodBoolean>;
+                emailVerification: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").EmailVerificationMode>>;
+                blockForSSODomains: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            passwordPolicy: z.ZodDefault<z.ZodObject<{
+                minLength: z.ZodDefault<z.ZodNumber>;
+                maxLength: z.ZodDefault<z.ZodNumber>;
+                requireUppercase: z.ZodDefault<z.ZodBoolean>;
+                requireLowercase: z.ZodDefault<z.ZodBoolean>;
+                requireNumbers: z.ZodDefault<z.ZodBoolean>;
+                requireSpecialChars: z.ZodDefault<z.ZodBoolean>;
+                expiryDays: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            sessionDurationMinutes: z.ZodDefault<z.ZodNumber>;
+            maxConcurrentSessions: z.ZodOptional<z.ZodNumber>;
+            lockoutPolicy: z.ZodDefault<z.ZodObject<{
+                maxLoginAttempts: z.ZodDefault<z.ZodNumber>;
+                lockoutDurationMinutes: z.ZodDefault<z.ZodNumber>;
+                progressiveLockout: z.ZodDefault<z.ZodBoolean>;
+                maxProgressiveLockoutHours: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            autoLinkByEmail: z.ZodDefault<z.ZodBoolean>;
+            stepUpAuth: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxAgeSeconds: z.ZodDefault<z.ZodNumber>;
+                methods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            methodManagement: z.ZodDefault<z.ZodObject<{
+                allowUserMethodRemoval: z.ZodDefault<z.ZodBoolean>;
+                requireReauthForMethodChanges: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            anonymousSessionsEnabled: z.ZodOptional<z.ZodBoolean>;
+            oneOffSessionAllowed: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        uniqueIdentifier: z.ZodDefault<z.ZodString>;
+        defaultAppRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_APP_ROLES>, z.ZodString]>>>;
+        requiresOrgMembership: z.ZodOptional<z.ZodObject<{
+            orgTypes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    frontendServices: z.ZodRecord<z.ZodString, z.ZodObject<{
+        usersManagement: z.ZodRecord<z.ZodString, z.ZodObject<{
+            register: z.ZodBoolean;
+            auth: z.ZodBoolean;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    organizationTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        userTypes: z.ZodArray<z.ZodString>;
+        availableOrgRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_ORG_ROLES>, z.ZodString]>, z.ZodString]>>>;
+        defaultMemberRole: z.ZodDefault<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_ORG_ROLES>, z.ZodString]>, z.ZodString]>>;
+        authOverrides: z.ZodOptional<z.ZodObject<{
+            authMethodsEnabled: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strip, core.$ZodObjectExtra>]>>>;
+            mfaPolicy: z.ZodOptional<z.ZodObject<{
+                requireMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireStrongMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                acceptableMFAMethods: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>>;
+                enrollmentGracePeriodDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                passkeyExemptFromMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            passwordPolicy: z.ZodOptional<z.ZodObject<{
+                minLength: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                maxLength: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                requireUppercase: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireLowercase: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireNumbers: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireSpecialChars: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                expiryDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        scimProvisioning: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        creationPolicy: z.ZodOptional<z.ZodObject<{
+            createOnUserTypeRegistration: z.ZodArray<z.ZodString>;
+            orgNameSource: z.ZodEnum<{
+                auto: "auto";
+                ask: "ask";
+                onboarding: "onboarding";
+            }>;
+            defaultOwnerRole: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    compliance: z.ZodObject<{
+        userProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").UserProfileVisibility>>;
+        organizationProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrganizationProfileVisibility>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    email: z.ZodObject<{
+        from: z.ZodEmail;
+        replyTo: z.ZodOptional<z.ZodEmail>;
+        isTransactionalWildoManaged: z.ZodBoolean;
+        isMarketingWildoManaged: z.ZodBoolean;
+        brandTokens: z.ZodOptional<z.ZodObject<{
+            primaryColor: z.ZodOptional<z.ZodString>;
+            secondaryColor: z.ZodOptional<z.ZodString>;
+            fontFamily: z.ZodOptional<z.ZodString>;
+            logoUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    storage: z.ZodObject<{
+        maxFileSize: z.ZodNumber;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    monitoring: z.ZodObject<{
+        metrics: z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            collectDefaultMetrics: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        capabilities: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").EngineCapability> & z.core.$partial, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    externalProvidersConfigurations: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof ExternalProvider_ExchangeProtocol_Kind> & z.core.$partial, z.ZodUnion<readonly [z.ZodObject<{
+        enabled: z.ZodBoolean;
+        authConfig: z.ZodOptional<z.ZodObject<{
+            authKind: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Auth_Kind>;
+            profileRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+            secretRef: z.ZodString;
+        }, z.core.$strip>>;
+        rateLimitConfig: z.ZodOptional<z.ZodObject<{
+            maxConcurrent: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            minTime: z.ZodOptional<z.ZodNumber>;
+            reservoir: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshInterval: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshAmount: z.ZodOptional<z.ZodNumber>;
+            priority: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, z.core.$strip>>;
+        defaultExecutionProfileRef: z.ZodOptional<z.ZodString>;
+        executionProfiles: z.ZodRecord<z.ZodString, z.ZodObject<{
+            runnerHost: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_RunnerHost>>;
+            command: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            inheritedEnvironmentVariables: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMode: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_AuthMode>;
+            secretRef: z.ZodOptional<z.ZodString>;
+            secretEnvVarName: z.ZodOptional<z.ZodString>;
+            allowedApplicationEnvironments: z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").APPLICATION_ENVIRONMENT>>;
+            allowedPlatformEnvironmentIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            workspaceRootPath: z.ZodString;
+            workingDirectoryPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_WorkingDirectoryPolicy>>;
+            workingDirectoryRelativePath: z.ZodOptional<z.ZodString>;
+            timeoutMs: z.ZodOptional<z.ZodNumber>;
+            outputParserMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_OutputParserMode>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        authConfig: z.ZodOptional<z.ZodObject<{
+            authKind: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Auth_Kind>;
+            profileRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+            secretRef: z.ZodString;
+        }, z.core.$strip>>;
+        rateLimitConfig: z.ZodOptional<z.ZodObject<{
+            maxConcurrent: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            minTime: z.ZodOptional<z.ZodNumber>;
+            reservoir: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshInterval: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshAmount: z.ZodOptional<z.ZodNumber>;
+            priority: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip, core.$ZodObjectExtra>]>>>>>>;
+    billing: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        providerRef: z.ZodOptional<z.ZodString>;
+        webhooks: z.ZodOptional<z.ZodObject<{
+            path: z.ZodDefault<z.ZodString>;
+            signingSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        defaultCurrency: z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>;
+        supportedCurrencies: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>>;
+        tax: z.ZodDefault<z.ZodObject<{
+            calculationMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").TaxCalculationMode>>;
+            defaultDisplayMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").TaxDisplayMode>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        enabledScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").ResourcePrimaryScope>>>;
+        promotions: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        creditPools: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            defaultInitialBalance: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        defaultBehaviorPolicy: z.ZodDefault<z.ZodObject<{
+            defaultTrialDays: z.ZodDefault<z.ZodNumber>;
+            paymentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
+            maxPaymentRetries: z.ZodDefault<z.ZodNumber>;
+            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ProrationBehavior>>;
+            defaultCancellation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").BillingTiming>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    analytics: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            providerType: z.ZodEnum<typeof import("@wildo-ai/saas-models").AnalyticsProviderType>;
+            config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        requiredConsent: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").DataProcessingConsent>>;
+        valueMoments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            identifier: z.ZodString;
+            role: z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentRole>;
+            scope: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentScope>>;
+            signals: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.RESOURCE_OPERATION>;
+                resourceType: z.ZodString;
+                operation: z.ZodString;
+                filter: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                threshold: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.RESOURCE_STATE>;
+                resourceType: z.ZodString;
+                filter: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                threshold: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.VIEW_VISIT>;
+                contentType: z.ZodEnum<{
+                    custom: "custom";
+                    resource_operation: "resource_operation";
+                    composite_view: "composite_view";
+                    chart_view: "chart_view";
+                    full_custom_view: "full_custom_view";
+                    flows_actors_view: "flows_actors_view";
+                }>;
+                viewRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.FEATURE_ACCESS>;
+                featureId: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.CUSTOM_EVENT>;
+                eventName: z.ZodString;
+                threshold: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>], "signalType">>;
+            mode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentMode>>;
+            requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            beforeStage: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            cooldownMs: z.ZodOptional<z.ZodNumber>;
+            onAchieved: z.ZodOptional<z.ZodObject<{
+                frontendEvent: z.ZodDefault<z.ZodBoolean>;
+                backendHandler: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        persistence: z.ZodDefault<z.ZodObject<{
+            localStorage: z.ZodDefault<z.ZodBoolean>;
+            backendSync: z.ZodDefault<z.ZodBoolean>;
+            backendEvaluation: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        autoInstrumentation: z.ZodDefault<z.ZodObject<{
+            pageViews: z.ZodDefault<z.ZodBoolean>;
+            resourceOperations: z.ZodDefault<z.ZodBoolean>;
+            trackErrors: z.ZodDefault<z.ZodBoolean>;
+            featureGate: z.ZodDefault<z.ZodBoolean>;
+            userLifecycle: z.ZodDefault<z.ZodBoolean>;
+            notifications: z.ZodDefault<z.ZodBoolean>;
+            hotkeys: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    lifecycle: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        activationCriteria: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<{
+                ALL: "ALL";
+                ANY: "ANY";
+            }>>;
+            criteria: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                criterionType: z.ZodLiteral<import("@wildo-ai/saas-models").ActivationCriterionType.MILESTONE>;
+                milestoneRef: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                criterionType: z.ZodLiteral<import("@wildo-ai/saas-models").ActivationCriterionType.GUIDANCE_COMPLETED>;
+                guidanceFlowRef: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>], "criterionType">>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        engagementThreshold: z.ZodOptional<z.ZodObject<{
+            minOperations: z.ZodDefault<z.ZodNumber>;
+            withinDays: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        dormancyThresholdDays: z.ZodDefault<z.ZodNumber>;
+        activityDebounceMinutes: z.ZodDefault<z.ZodNumber>;
+        dormancyCronSchedule: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    createdAt: z.ZodDefault<z.ZodCoercedDate<unknown>>;
+    updatedAt: z.ZodDefault<z.ZodCoercedDate<unknown>>;
+    runtime: z.ZodObject<{
+        endPoints: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            publicUrl: z.ZodOptional<z.ZodString>;
+            internalUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        appCustomRoot: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    database: z.ZodObject<{
+        defaultAdapter: z.ZodEnum<typeof PersistenceAdapter>;
+        mongodb: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            host: z.ZodString;
+            database: z.ZodString;
+            protocol: z.ZodEnum<typeof MongoDBProtocol>;
+            options: z.ZodObject<{
+                retryWrites: z.ZodBoolean;
+                w: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+                appName: z.ZodOptional<z.ZodString>;
+                authSource: z.ZodString;
+                directConnection: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        postgresql: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            databaseName: z.ZodOptional<z.ZodString>;
+            sslMode: z.ZodDefault<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+            pool: z.ZodOptional<z.ZodObject<{
+                min: z.ZodDefault<z.ZodNumber>;
+                max: z.ZodDefault<z.ZodNumber>;
+                idleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        redis: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+            db: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        rabbitmq: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    jwt: z.ZodObject<{
+        publicKey: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        rotatedPublicKeys: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+            kid: z.ZodString;
+            publicKey: z.ZodString;
+        }, z.core.$strip, core.$ZodObjectExtra>>>>>;
+        refreshTokenExpirationDays: z.ZodNumber;
+        accessTokenExpirationMinutes: z.ZodNumber;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
+    appIdentity: z.ZodObject<{
+        appName: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        logoUrl: z.ZodOptional<z.ZodString>;
+        version: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    appPreferences: z.ZodObject<{
+        languages: z.ZodObject<{
+            defaultLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+            enabledLanguages: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+            fallbackLanguage: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>;
+            autoDetectFromBrowser: z.ZodDefault<z.ZodBoolean>;
+            allowUserOverride: z.ZodDefault<z.ZodBoolean>;
+            allowOrganizationOverride: z.ZodDefault<z.ZodBoolean>;
+            enableLanguageSwitcher: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    auth: z.ZodObject<{
+        passkeyConfig: z.ZodObject<{
+            rpName: z.ZodString;
+            rpId: z.ZodString;
+            maxPasskeysPerUser: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        ssoProviders: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            providerRef: z.ZodString;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            displayName: z.ZodOptional<z.ZodString>;
+            additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        orgAuthMethodPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrgAuthMethodPolicy>>;
+        expandableOrgMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+        crossOrgSSOAccess: z.ZodDefault<z.ZodBoolean>;
+        passwordHashing: z.ZodOptional<z.ZodObject<{
+            argon2: z.ZodOptional<z.ZodObject<{
+                type: z.ZodOptional<z.ZodEnum<typeof Argon2Type>>;
+                memoryCost: z.ZodOptional<z.ZodNumber>;
+                timeCost: z.ZodOptional<z.ZodNumber>;
+                parallelism: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        passkeyOperational: z.ZodOptional<z.ZodObject<{
+            authenticatorAttachment: z.ZodOptional<z.ZodEnum<typeof AuthenticatorAttachment>>;
+            requireResidentKey: z.ZodOptional<z.ZodBoolean>;
+            userVerification: z.ZodOptional<z.ZodEnum<typeof UserVerification>>;
+            timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+            attestation: z.ZodOptional<z.ZodEnum<typeof AttestationType>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        otpOperational: z.ZodOptional<z.ZodObject<{
+            smsOtp: z.ZodOptional<z.ZodObject<{
+                otpLength: z.ZodOptional<z.ZodNumber>;
+                expiryMinutes: z.ZodOptional<z.ZodNumber>;
+                rateLimitBurst: z.ZodOptional<z.ZodNumber>;
+                rateLimitHourly: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            emailOtp: z.ZodOptional<z.ZodObject<{
+                otpLength: z.ZodOptional<z.ZodNumber>;
+                expiryMinutes: z.ZodOptional<z.ZodNumber>;
+                rateLimitPerMinute: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        magicLinkOperational: z.ZodOptional<z.ZodObject<{
+            tokenExpiryMinutes: z.ZodOptional<z.ZodNumber>;
+            rateLimitPerMinute: z.ZodOptional<z.ZodNumber>;
+            rateLimitPerHour: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        totpOperational: z.ZodOptional<z.ZodObject<{
+            issuer: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            algorithm: z.ZodOptional<z.ZodEnum<typeof TotpAlgorithm>>;
+            digits: z.ZodOptional<z.ZodNumber>;
+            period: z.ZodOptional<z.ZodNumber>;
+            window: z.ZodOptional<z.ZodNumber>;
+            qrCodeSize: z.ZodOptional<z.ZodNumber>;
+            includeIssuerInLabel: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    userTypes: z.ZodRecord<z.ZodString, z.ZodObject<{
+        auth: z.ZodObject<{
+            authMethodsEnabled: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strip, core.$ZodObjectExtra>]>>>;
+            mfaPolicy: z.ZodDefault<z.ZodObject<{
+                requireMFA: z.ZodDefault<z.ZodBoolean>;
+                requireStrongMFA: z.ZodDefault<z.ZodBoolean>;
+                acceptableMFAMethods: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+                enrollmentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
+                passkeyExemptFromMFA: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            registration: z.ZodDefault<z.ZodObject<{
+                mode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").RegistrationMode>>;
+                allowedMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+                requirePasswordOnRegister: z.ZodDefault<z.ZodBoolean>;
+                emailVerification: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").EmailVerificationMode>>;
+                blockForSSODomains: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            passwordPolicy: z.ZodDefault<z.ZodObject<{
+                minLength: z.ZodDefault<z.ZodNumber>;
+                maxLength: z.ZodDefault<z.ZodNumber>;
+                requireUppercase: z.ZodDefault<z.ZodBoolean>;
+                requireLowercase: z.ZodDefault<z.ZodBoolean>;
+                requireNumbers: z.ZodDefault<z.ZodBoolean>;
+                requireSpecialChars: z.ZodDefault<z.ZodBoolean>;
+                expiryDays: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            sessionDurationMinutes: z.ZodDefault<z.ZodNumber>;
+            maxConcurrentSessions: z.ZodOptional<z.ZodNumber>;
+            lockoutPolicy: z.ZodDefault<z.ZodObject<{
+                maxLoginAttempts: z.ZodDefault<z.ZodNumber>;
+                lockoutDurationMinutes: z.ZodDefault<z.ZodNumber>;
+                progressiveLockout: z.ZodDefault<z.ZodBoolean>;
+                maxProgressiveLockoutHours: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            autoLinkByEmail: z.ZodDefault<z.ZodBoolean>;
+            stepUpAuth: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxAgeSeconds: z.ZodDefault<z.ZodNumber>;
+                methods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            methodManagement: z.ZodDefault<z.ZodObject<{
+                allowUserMethodRemoval: z.ZodDefault<z.ZodBoolean>;
+                requireReauthForMethodChanges: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            anonymousSessionsEnabled: z.ZodOptional<z.ZodBoolean>;
+            oneOffSessionAllowed: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        uniqueIdentifier: z.ZodDefault<z.ZodString>;
+        defaultAppRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_APP_ROLES>, z.ZodString]>>>;
+        requiresOrgMembership: z.ZodOptional<z.ZodObject<{
+            orgTypes: z.ZodArray<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    frontendServices: z.ZodRecord<z.ZodString, z.ZodObject<{
+        usersManagement: z.ZodRecord<z.ZodString, z.ZodObject<{
+            register: z.ZodBoolean;
+            auth: z.ZodBoolean;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    organizationTypes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        userTypes: z.ZodArray<z.ZodString>;
+        availableOrgRoles: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_ORG_ROLES>, z.ZodString]>, z.ZodString]>>>;
+        defaultMemberRole: z.ZodDefault<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodEnum<typeof import("@wildo-ai/saas-models").CORE_ORG_ROLES>, z.ZodString]>, z.ZodString]>>;
+        authOverrides: z.ZodOptional<z.ZodObject<{
+            authMethodsEnabled: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strip, core.$ZodObjectExtra>]>>>;
+            mfaPolicy: z.ZodOptional<z.ZodObject<{
+                requireMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireStrongMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                acceptableMFAMethods: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>>;
+                enrollmentGracePeriodDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                passkeyExemptFromMFA: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            passwordPolicy: z.ZodOptional<z.ZodObject<{
+                minLength: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                maxLength: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                requireUppercase: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireLowercase: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireNumbers: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                requireSpecialChars: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                expiryDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        scimProvisioning: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            syncFrequencyHours: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        creationPolicy: z.ZodOptional<z.ZodObject<{
+            createOnUserTypeRegistration: z.ZodArray<z.ZodString>;
+            orgNameSource: z.ZodEnum<{
+                auto: "auto";
+                ask: "ask";
+                onboarding: "onboarding";
+            }>;
+            defaultOwnerRole: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    compliance: z.ZodObject<{
+        userProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").UserProfileVisibility>>;
+        organizationProfileVisibility: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").OrganizationProfileVisibility>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    email: z.ZodObject<{
+        from: z.ZodEmail;
+        replyTo: z.ZodOptional<z.ZodEmail>;
+        isTransactionalWildoManaged: z.ZodOptional<z.ZodBoolean>;
+        isMarketingWildoManaged: z.ZodOptional<z.ZodBoolean>;
+        brandTokens: z.ZodOptional<z.ZodObject<{
+            primaryColor: z.ZodOptional<z.ZodString>;
+            secondaryColor: z.ZodOptional<z.ZodString>;
+            fontFamily: z.ZodOptional<z.ZodString>;
+            logoUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    storage: z.ZodObject<{
+        maxFileSize: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    monitoring: z.ZodObject<{
+        metrics: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            collectDefaultMetrics: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        capabilities: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof import("@wildo-ai/saas-models").EngineCapability> & z.core.$partial, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    externalProvidersConfigurations: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof ExternalProvider_ExchangeProtocol_Kind> & z.core.$partial, z.ZodUnion<readonly [z.ZodObject<{
+        enabled: z.ZodBoolean;
+        authConfig: z.ZodOptional<z.ZodObject<{
+            authKind: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Auth_Kind>;
+            profileRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+            secretRef: z.ZodString;
+        }, z.core.$strip>>;
+        rateLimitConfig: z.ZodOptional<z.ZodObject<{
+            maxConcurrent: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            minTime: z.ZodOptional<z.ZodNumber>;
+            reservoir: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshInterval: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshAmount: z.ZodOptional<z.ZodNumber>;
+            priority: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, z.core.$strip>>;
+        defaultExecutionProfileRef: z.ZodOptional<z.ZodString>;
+        executionProfiles: z.ZodRecord<z.ZodString, z.ZodObject<{
+            runnerHost: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_RunnerHost>>;
+            command: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            inheritedEnvironmentVariables: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authMode: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_AuthMode>;
+            secretRef: z.ZodOptional<z.ZodString>;
+            secretEnvVarName: z.ZodOptional<z.ZodString>;
+            allowedApplicationEnvironments: z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").APPLICATION_ENVIRONMENT>>;
+            allowedPlatformEnvironmentIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            workspaceRootPath: z.ZodString;
+            workingDirectoryPolicy: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_WorkingDirectoryPolicy>>;
+            workingDirectoryRelativePath: z.ZodOptional<z.ZodString>;
+            timeoutMs: z.ZodOptional<z.ZodNumber>;
+            outputParserMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").CLIRuntime_OutputParserMode>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        authConfig: z.ZodOptional<z.ZodObject<{
+            authKind: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Auth_Kind>;
+            profileRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            isDefault: z.ZodOptional<z.ZodBoolean>;
+            secretRef: z.ZodString;
+        }, z.core.$strip>>;
+        rateLimitConfig: z.ZodOptional<z.ZodObject<{
+            maxConcurrent: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            minTime: z.ZodOptional<z.ZodNumber>;
+            reservoir: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshInterval: z.ZodOptional<z.ZodNumber>;
+            reservoirRefreshAmount: z.ZodOptional<z.ZodNumber>;
+            priority: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip, core.$ZodObjectExtra>]>>>>>>;
+    billing: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        providerRef: z.ZodOptional<z.ZodString>;
+        webhooks: z.ZodOptional<z.ZodObject<{
+            path: z.ZodDefault<z.ZodString>;
+            signingSecretRef: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        defaultCurrency: z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>;
+        supportedCurrencies: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>>;
+        tax: z.ZodDefault<z.ZodObject<{
+            calculationMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").TaxCalculationMode>>;
+            defaultDisplayMode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").TaxDisplayMode>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        enabledScopes: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").ResourcePrimaryScope>>>;
+        promotions: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        creditPools: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            defaultInitialBalance: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        defaultBehaviorPolicy: z.ZodDefault<z.ZodObject<{
+            defaultTrialDays: z.ZodDefault<z.ZodNumber>;
+            paymentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
+            maxPaymentRetries: z.ZodDefault<z.ZodNumber>;
+            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ProrationBehavior>>;
+            defaultCancellation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").BillingTiming>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    analytics: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        providers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            providerType: z.ZodEnum<typeof import("@wildo-ai/saas-models").AnalyticsProviderType>;
+            config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        requiredConsent: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").DataProcessingConsent>>;
+        valueMoments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            identifier: z.ZodString;
+            role: z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentRole>;
+            scope: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentScope>>;
+            signals: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.RESOURCE_OPERATION>;
+                resourceType: z.ZodString;
+                operation: z.ZodString;
+                filter: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                threshold: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.RESOURCE_STATE>;
+                resourceType: z.ZodString;
+                filter: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                threshold: z.ZodNumber;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.VIEW_VISIT>;
+                contentType: z.ZodEnum<{
+                    custom: "custom";
+                    resource_operation: "resource_operation";
+                    composite_view: "composite_view";
+                    chart_view: "chart_view";
+                    full_custom_view: "full_custom_view";
+                    flows_actors_view: "flows_actors_view";
+                }>;
+                viewRef: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.FEATURE_ACCESS>;
+                featureId: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                signalType: z.ZodLiteral<import("@wildo-ai/saas-models").ValueSignalType.CUSTOM_EVENT>;
+                eventName: z.ZodString;
+                threshold: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>], "signalType">>;
+            mode: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ValueMomentMode>>;
+            requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            beforeStage: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            cooldownMs: z.ZodOptional<z.ZodNumber>;
+            onAchieved: z.ZodOptional<z.ZodObject<{
+                frontendEvent: z.ZodDefault<z.ZodBoolean>;
+                backendHandler: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        persistence: z.ZodDefault<z.ZodObject<{
+            localStorage: z.ZodDefault<z.ZodBoolean>;
+            backendSync: z.ZodDefault<z.ZodBoolean>;
+            backendEvaluation: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        autoInstrumentation: z.ZodDefault<z.ZodObject<{
+            pageViews: z.ZodDefault<z.ZodBoolean>;
+            resourceOperations: z.ZodDefault<z.ZodBoolean>;
+            trackErrors: z.ZodDefault<z.ZodBoolean>;
+            featureGate: z.ZodDefault<z.ZodBoolean>;
+            userLifecycle: z.ZodDefault<z.ZodBoolean>;
+            notifications: z.ZodDefault<z.ZodBoolean>;
+            hotkeys: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    lifecycle: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        activationCriteria: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodDefault<z.ZodEnum<{
+                ALL: "ALL";
+                ANY: "ANY";
+            }>>;
+            criteria: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                criterionType: z.ZodLiteral<import("@wildo-ai/saas-models").ActivationCriterionType.MILESTONE>;
+                milestoneRef: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+                criterionType: z.ZodLiteral<import("@wildo-ai/saas-models").ActivationCriterionType.GUIDANCE_COMPLETED>;
+                guidanceFlowRef: z.ZodString;
+            }, z.core.$strip, core.$ZodObjectExtra>], "criterionType">>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        engagementThreshold: z.ZodOptional<z.ZodObject<{
+            minOperations: z.ZodDefault<z.ZodNumber>;
+            withinDays: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        dormancyThresholdDays: z.ZodDefault<z.ZodNumber>;
+        activityDebounceMinutes: z.ZodDefault<z.ZodNumber>;
+        dormancyCronSchedule: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    runtime: z.ZodObject<{
+        endPoints: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            publicUrl: z.ZodOptional<z.ZodString>;
+            internalUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        appCustomRoot: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    database: z.ZodObject<{
+        defaultAdapter: z.ZodEnum<typeof PersistenceAdapter>;
+        mongodb: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            host: z.ZodString;
+            database: z.ZodString;
+            protocol: z.ZodEnum<typeof MongoDBProtocol>;
+            options: z.ZodObject<{
+                retryWrites: z.ZodBoolean;
+                w: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+                appName: z.ZodOptional<z.ZodString>;
+                authSource: z.ZodString;
+                directConnection: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        postgresql: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            databaseName: z.ZodOptional<z.ZodString>;
+            sslMode: z.ZodDefault<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+            pool: z.ZodOptional<z.ZodObject<{
+                min: z.ZodDefault<z.ZodNumber>;
+                max: z.ZodDefault<z.ZodNumber>;
+                idleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        redis: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+            db: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        rabbitmq: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            port: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    jwt: z.ZodObject<{
+        publicKey: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        rotatedPublicKeys: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+            kid: z.ZodString;
+            publicKey: z.ZodString;
+        }, z.core.$strip, core.$ZodObjectExtra>>>>>;
+        refreshTokenExpirationDays: z.ZodOptional<z.ZodNumber>;
+        accessTokenExpirationMinutes: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+    createdAt: z.ZodDefault<z.ZodCoercedDate<unknown>>;
+    updatedAt: z.ZodDefault<z.ZodCoercedDate<unknown>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Explicit synthetic placeholders used only for the pre-override startup seed.
+ *
+ * These are intentionally conspicuous so runtime validation can fail clearly if
+ * a non-platform application reaches startup without replacing them via its
+ * backendConfig.
+ */
+export declare const APP_CONFIGURATION_PRE_OVERRIDE_PLACEHOLDERS: {
+    readonly appName: "__WILDO_PRE_OVERRIDE_APP_NAME__";
+    readonly version: "0.0.0-pre-override";
+    readonly passkeyRpName: "__WILDO_PRE_OVERRIDE_PASSKEY_RP_NAME__";
+    readonly passkeyRpId: "pre-override.invalid";
+    readonly emailFrom: "pre-override@invalid.localhost";
+};
+export interface BuildMinimalPreOverrideAppConfigurationInput {
+    runtimeEndpoints: Record<string, {
+        publicUrl?: string;
+        internalUrl?: string;
+    }>;
+    database: z.input<typeof AppConfigBackend_Database_Schema>;
+    jwt?: Partial<z.input<typeof AppConfiguration_JWT_Schema>> | undefined;
+}
+/**
+ * Build the minimal config seed required before app-local overrides run.
+ *
+ * The backend loader is allowed to author runtime/env material plus the narrow
+ * structural placeholders required to satisfy the full schema. It must not
+ * invent believable app semantics inline.
+ */
+export declare function buildMinimalPreOverrideAppConfiguration(input: BuildMinimalPreOverrideAppConfigurationInput): AppConfiguration_PreOverrideSeed;
+/** ──────────────────────────────────────────────────────────────
+ * Inferred Types (from schemas - no interface duplication)
+ * ────────────────────────────────────────────────────────────── */
+export type AppConfiguration_Auth = z.infer<typeof AppConfiguration_AuthSchema>;
+export type PasswordHashing = AppConfiguration_Auth['passwordHashing'];
+export type OtpOperational = AppConfiguration_Auth['otpOperational'];
+export type MagicLinkOperational = AppConfiguration_Auth['magicLinkOperational'];
+export type TotpOperational = AppConfiguration_Auth['totpOperational'];
+export type PasskeyOperational = AppConfiguration_Auth['passkeyOperational'];
+export type AppConfiguration_Compliance = z.infer<typeof AppConfiguration_ComplianceSchema>;
+export type PostgreSQL_PoolConfig = z.infer<typeof PostgreSQL_PoolConfig_Schema>;
+export type PostgreSQL_Config = z.infer<typeof PostgreSQL_Config_Schema>;
+export type MongoDB_Config = z.infer<typeof MongoDB_Config_Schema>;
+export type RotatedPublicKeyEntry = z.infer<typeof RotatedPublicKeyEntry_Schema>;
+export type AppConfiguration_Runtime = z.infer<typeof AppConfiguration_RuntimeSchema>;
+export type AppConfiguration_Email = z.infer<typeof AppConfiguration_Email_Schema>;
+export type AppConfiguration_Monitoring = z.infer<typeof AppConfigBackend_Monitoring_Schema>;
+export type AppConfiguration_Database = z.infer<typeof AppConfigBackend_Database_Schema>;
+export type AppConfiguration_JWT = z.infer<typeof AppConfiguration_JWT_Schema>;
+export type AppConfiguration_Storage = z.infer<typeof AppConfiguration_StorageSchema>;
+export type AppConfiguration = z.infer<typeof AppConfiguration_Schema>;
+export type AppConfiguration_PreOverrideSeed = z.infer<typeof AppConfiguration_PreOverrideSeed_Schema>;
+export type AppConfiguration_AppManagedConfiguration = z.infer<typeof _AppConfiguration_AppManagedConfiguration_Schema>;
+export type AppConfiguration_PlatformManagedConfiguration = z.infer<typeof _AppConfiguration_PlatformManagedConfiguration_Schema>;
+export type AppConfiguration_Identity = z.infer<typeof AppConfiguration_AppIdentity_Schema>;
+export type AppConfiguration_Language = z.infer<typeof AppConfiguration_AppPreferencesLanguage_Schema>;
+//# sourceMappingURL=app-config.backend.schemas.d.ts.map