@wildo-ai/saas-backend-lib 1.0.1

package/dist/esm/config/models/app-env-config.backend.schemas.js

@@ -0,0 +1,115 @@
+/**
+ * Application Backend Environment Configuration Schemas
+ *
+ * Environment variables that application backends parse at startup.
+ * After T5, the env schema is the primary source for:
+ * - Bootstrap identity (APPLICATION_ID, PLATFORM_APPLICATION_PRIMARY_SECRET, SERVICE_NAME)
+ * - Platform service URLs (same pattern as T4 for platform services)
+ * - Database/infra addresses (MongoDB, Redis, RabbitMQ)
+ *
+ * Only jwtPublicKeys, appSlug, and secrets are fetched from apps-manager at startup.
+ */
+import { z } from 'zod';
+import { RuntimeEnvironment } from '@wildo-ai/saas-models';
+import { ApplicationBackendBootstrapEnvKeys, ApplicationBackendDataEnvKeys, ApplicationBackendPlatformUrlEnvKeys, ApplicationBackendRuntimeEnvKeys, parseRuntimeEndpointsRecord, } from '@wildo-ai/platform-core-shared';
+import { MongoDBProtocol } from '../../config/models/app-config.backend.schemas.js';
+/** ──────────────────────────────────────────────────────────────
+ * Internal Schema with z.ZodObject type annotation
+ *
+ * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)
+ * ✅ Compatible with isolatedDeclarations: true (OXC)
+ * ────────────────────────────────────────────────────────────── */
+export const ApplicationEnvConfigurationSchema = z.object({
+    // === Bootstrap identity ===
+    [ApplicationBackendBootstrapEnvKeys.APPLICATION_ID]: z.string().min(1, { error: 'Application ID is required' }),
+    [ApplicationBackendBootstrapEnvKeys.PLATFORM_APPLICATION_PRIMARY_SECRET]: z.string().min(32, {
+        error: 'Platform application primary secret must be at least 32 characters',
+    }),
+    [ApplicationBackendBootstrapEnvKeys.PLATFORM_APPS_MANAGER_URL]: z.url({
+        error: 'Platform administration URL must be a valid URL',
+    }),
+    [ApplicationBackendBootstrapEnvKeys.PLATFORM_ENVIRONMENT_ID]: z.string().min(1, {
+        error: 'Platform environment id is required',
+    }),
+    [ApplicationBackendBootstrapEnvKeys.APPLICATION_ENV]: z.enum(RuntimeEnvironment).default(RuntimeEnvironment.DEVELOPMENT),
+    [ApplicationBackendBootstrapEnvKeys.SERVICE_NAME]: z.string().min(1, { error: 'Service name is required' }),
+    // === Platform service URLs (T5: sourced from env, not from apps-manager config) ===
+    [ApplicationBackendPlatformUrlEnvKeys.PLATFORM_FILE_GENERATOR_URL]: z.url(),
+    [ApplicationBackendPlatformUrlEnvKeys.PLATFORM_CRONTABS_BATCHES_MANAGER_URL]: z.url(),
+    // === App runtime topology (derived from the selected Wildo app service declarations) ===
+    [ApplicationBackendRuntimeEnvKeys.APPLICATION_RUNTIME_ENDPOINTS]: z
+        .string()
+        .optional()
+        .transform((value, ctx) => {
+        if (!value) {
+            return {};
+        }
+        try {
+            return parseRuntimeEndpointsRecord(value);
+        }
+        catch (error) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: error instanceof Error ? error.message : 'Invalid APPLICATION_RUNTIME_ENDPOINTS payload',
+            });
+            return z.NEVER;
+        }
+    }),
+    // === Database addresses (T5: sourced from env, not from apps-manager config) ===
+    [ApplicationBackendDataEnvKeys.MONGODB_HOST]: z.string().min(1, {
+        error: 'MongoDB host is required (e.g., "localhost:27017")',
+    }),
+    [ApplicationBackendDataEnvKeys.MONGODB_DATABASE]: z.string().min(1, { error: 'MongoDB database name is required' }),
+    [ApplicationBackendDataEnvKeys.MONGODB_PROTOCOL]: z.enum(MongoDBProtocol).default(MongoDBProtocol.MONGODB),
+    [ApplicationBackendDataEnvKeys.MONGODB_DIRECT_CONNECTION]: z
+        .enum(['true', 'false'])
+        .optional()
+        .transform((value) => {
+        if (value === undefined) {
+            return undefined;
+        }
+        return value === 'true';
+    }),
+    [ApplicationBackendDataEnvKeys.REDIS_HOST]: z.string().default('localhost'),
+    [ApplicationBackendDataEnvKeys.REDIS_PORT]: z.coerce.number().default(6379),
+    [ApplicationBackendDataEnvKeys.RABBITMQ_HOST]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.RABBITMQ_PORT]: z.coerce.number().optional(),
+    // === Storage (optional — real validation happens post-registry via startup config validator) ===
+    [ApplicationBackendDataEnvKeys.STORAGE_PROVIDER]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.STORAGE_ENDPOINT]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.STORAGE_PORT]: z.coerce.number().optional(),
+    [ApplicationBackendDataEnvKeys.STORAGE_USE_SSL]: z
+        .enum(['true', 'false'])
+        .optional()
+        .transform((value) => {
+        if (value === undefined) {
+            return undefined;
+        }
+        return value === 'true';
+    }),
+    [ApplicationBackendDataEnvKeys.STORAGE_BUCKET]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.STORAGE_ACCESS_KEY]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.STORAGE_SECRET_KEY]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.STORAGE_LOCAL_BASE_DIR]: z.string().optional(),
+    // === Weaviate (optional — required when z_file({ rag: { enabled: true } }) is declared) ===
+    [ApplicationBackendDataEnvKeys.WEAVIATE_HOST]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.WEAVIATE_PORT]: z.coerce.number().optional(),
+    [ApplicationBackendDataEnvKeys.WEAVIATE_GRPC_PORT]: z.coerce.number().optional(),
+    [ApplicationBackendDataEnvKeys.WEAVIATE_API_KEY]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.WEAVIATE_SCHEME]: z.enum(['http', 'https']).optional(),
+    // === ClamAV (optional — required when z_file({ scanPolicy: 'required' }) is declared) ===
+    [ApplicationBackendDataEnvKeys.CLAMAV_HOST]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.CLAMAV_PORT]: z.coerce.number().optional(),
+    // === YARA (optional — platform-level pattern scanning layer on top of ClamAV) ===
+    [ApplicationBackendDataEnvKeys.YARA_ENABLED]: z
+        .enum(['true', 'false'])
+        .optional()
+        .transform((value) => {
+        if (value === undefined)
+            return undefined;
+        return value === 'true';
+    }),
+    [ApplicationBackendDataEnvKeys.YARA_HOST]: z.string().optional(),
+    [ApplicationBackendDataEnvKeys.YARA_PORT]: z.coerce.number().optional(),
+});
+//# sourceMappingURL=app-env-config.backend.schemas.js.map

package/dist/esm/config/models/app-env-config.backend.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-env-config.backend.schemas.js","sourceRoot":"","sources":["../../../../src/config/models/app-env-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,kCAAkC,EAClC,6BAA6B,EAC7B,oCAAoC,EACpC,gCAAgC,EAChC,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAE9F;;;;;oEAKoE;AAEpE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,6BAA6B;IAC7B,CAAC,kCAAkC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IAC/G,CAAC,kCAAkC,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;QAC3F,KAAK,EAAE,oEAAoE;KAC5E,CAAC;IACF,CAAC,kCAAkC,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QACpE,KAAK,EAAE,iDAAiD;KACzD,CAAC;IACF,CAAC,kCAAkC,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QAC9E,KAAK,EAAE,qCAAqC;KAC7C,CAAC;IACF,CAAC,kCAAkC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC;IACxH,CAAC,kCAAkC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAE3G,qFAAqF;IACrF,CAAC,oCAAoC,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE;IAC3E,CAAC,oCAAoC,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE;IAErF,0FAA0F;IAC1F,CAAC,gCAAgC,CAAC,6BAA6B,CAAC,EAAE,CAAC;SAChE,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+CAA+C;aAClG,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEJ,kFAAkF;IAClF,CAAC,6BAA6B,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QAC9D,KAAK,EAAE,oDAAoD;KAC5D,CAAC;IACF,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACnH,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC;IAC1G,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,EAAE,CAAC;SACzD,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACvB,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,KAAK,MAAM,CAAC;IAC1B,CAAC,CAAC;IACJ,CAAC,6BAA6B,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC3E,CAAC,6BAA6B,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3E,CAAC,6BAA6B,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpE,CAAC,6BAA6B,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3E,kGAAkG;IAClG,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvE,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvE,CAAC,6BAA6B,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1E,CAAC,6BAA6B,CAAC,eAAe,CAAC,EAAE,CAAC;SAC/C,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACvB,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,KAAK,MAAM,CAAC;IAC1B,CAAC,CAAC;IACJ,CAAC,6BAA6B,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrE,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzE,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzE,CAAC,6BAA6B,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE7E,6FAA6F;IAC7F,CAAC,6BAA6B,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpE,CAAC,6BAA6B,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3E,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChF,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvE,CAAC,6BAA6B,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAErF,2FAA2F;IAC3F,CAAC,6BAA6B,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClE,CAAC,6BAA6B,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEzE,mFAAmF;IACnF,CAAC,6BAA6B,CAAC,YAAY,CAAC,EAAE,CAAC;SAC5C,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACvB,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,KAAK,KAAK,MAAM,CAAC;IAC1B,CAAC,CAAC;IACJ,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChE,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxE,CAAC,CAAC"}

package/dist/esm/config/models/config-mutation-boundary.utils.d.ts

@@ -0,0 +1,11 @@
+export type MutationBoundarySeverity = 'error' | 'warn';
+export interface MutationBoundaryRule {
+    path: string;
+    severity: MutationBoundarySeverity;
+    reason: string;
+}
+export declare function inspectMutationBoundaries(previousValue: unknown, nextValue: unknown, rules: ReadonlyArray<MutationBoundaryRule>): {
+    errors: string[];
+    warnings: string[];
+};
+//# sourceMappingURL=config-mutation-boundary.utils.d.ts.map

package/dist/esm/config/models/config-mutation-boundary.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-mutation-boundary.utils.d.ts","sourceRoot":"","sources":["../../../../src/config/models/config-mutation-boundary.utils.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,MAAM,CAAC;AAExD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,wBAAwB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAuCD,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,OAAO,EACtB,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC,GACzC;IACD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAuBA"}

package/dist/esm/config/models/config-mutation-boundary.utils.js

@@ -0,0 +1,50 @@
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function getValueAtPath(source, path) {
+    return path.split('.').reduce((current, segment) => {
+        if (!isPlainObject(current)) {
+            return undefined;
+        }
+        return current[segment];
+    }, source);
+}
+function areValuesEqual(left, right) {
+    if (left === right) {
+        return true;
+    }
+    if (Array.isArray(left) && Array.isArray(right)) {
+        if (left.length !== right.length) {
+            return false;
+        }
+        return left.every((value, index) => areValuesEqual(value, right[index]));
+    }
+    if (isPlainObject(left) && isPlainObject(right)) {
+        const leftKeys = Object.keys(left);
+        const rightKeys = Object.keys(right);
+        if (leftKeys.length !== rightKeys.length) {
+            return false;
+        }
+        return leftKeys.every((key) => areValuesEqual(left[key], right[key]));
+    }
+    return false;
+}
+export function inspectMutationBoundaries(previousValue, nextValue, rules) {
+    const errors = [];
+    const warnings = [];
+    for (const rule of rules) {
+        const previous = getValueAtPath(previousValue, rule.path);
+        const next = getValueAtPath(nextValue, rule.path);
+        if (areValuesEqual(previous, next)) {
+            continue;
+        }
+        const message = `${rule.path} cannot be app-authored because ${rule.reason}.`;
+        if (rule.severity === 'error') {
+            errors.push(message);
+            continue;
+        }
+        warnings.push(message);
+    }
+    return { errors, warnings };
+}
+//# sourceMappingURL=config-mutation-boundary.utils.js.map

package/dist/esm/config/models/config-mutation-boundary.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-mutation-boundary.utils.js","sourceRoot":"","sources":["../../../../src/config/models/config-mutation-boundary.utils.ts"],"names":[],"mappings":"AAQA,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,MAAe,EAAE,IAAY;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC1D,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAa,EAAE,KAAc;IACnD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAAsB,EACtB,SAAkB,EAClB,KAA0C;IAK1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAElD,IAAI,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,mCAAmC,IAAI,CAAC,MAAM,GAAG,CAAC;QAE9E,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/dist/esm/config/models/postgresql-env-config.backend.schemas.d.ts

@@ -0,0 +1,48 @@
+/**
+ * PostgreSQL Environment Variable Configuration
+ *
+ * Defines the environment variables used for PostgreSQL configuration.
+ * These are primarily used by the platform services (apps-manager) for
+ * database provisioning and by applications that opt into PostgreSQL.
+ *
+ * @see DATABASE_AGNOSTIC_REPOSITORY_ANALYSIS.md Section 20.3
+ */
+import { z } from 'zod';
+import { PostgreSQLSSLMode } from '@wildo-ai/saas-models';
+/**
+ * PostgreSQL admin environment variables
+ * Used by apps-manager for provisioning databases and users
+ */
+export declare const PostgreSQL_Admin_EnvConfig_Schema: z.ZodObject<{
+    PG_ADMIN_URL: z.ZodOptional<z.ZodString>;
+    PG_HOST: z.ZodOptional<z.ZodString>;
+    PG_PORT: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    PG_ADMIN_USER: z.ZodOptional<z.ZodString>;
+    PG_ADMIN_PASSWORD: z.ZodOptional<z.ZodString>;
+    PG_SSL_MODE: z.ZodDefault<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type PostgreSQL_Admin_EnvConfig = z.infer<typeof PostgreSQL_Admin_EnvConfig_Schema>;
+/**
+ * PostgreSQL application environment variables
+ * Used by applications that connect to PostgreSQL
+ */
+export declare const PostgreSQL_App_EnvConfig_Schema: z.ZodObject<{
+    DATABASE_URL: z.ZodOptional<z.ZodString>;
+    PG_APP_HOST: z.ZodOptional<z.ZodString>;
+    PG_APP_PORT: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    PG_APP_DATABASE: z.ZodOptional<z.ZodString>;
+    PG_APP_USER: z.ZodOptional<z.ZodString>;
+    PG_APP_PASSWORD: z.ZodOptional<z.ZodString>;
+    PG_APP_SSL_MODE: z.ZodOptional<z.ZodEnum<typeof PostgreSQLSSLMode>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type PostgreSQL_App_EnvConfig = z.infer<typeof PostgreSQL_App_EnvConfig_Schema>;
+/**
+ * Parse PostgreSQL admin configuration from environment
+ */
+export declare function parsePostgreSQLAdminEnv(): PostgreSQL_Admin_EnvConfig;
+/**
+ * Parse PostgreSQL application configuration from environment
+ */
+export declare function parsePostgreSQLAppEnv(): PostgreSQL_App_EnvConfig;
+export { PostgreSQLSSLMode, buildPostgreSQLConnectionUrl } from '@wildo-ai/saas-models';
+//# sourceMappingURL=postgresql-env-config.backend.schemas.d.ts.map

package/dist/esm/config/models/postgresql-env-config.backend.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresql-env-config.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/config/models/postgresql-env-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAgC,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;uCA+B5C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;uCAoC1C,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAEvF;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,0BAA0B,CASpE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,wBAAwB,CAUhE;AAED,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/esm/config/models/postgresql-env-config.backend.schemas.js

@@ -0,0 +1,106 @@
+/**
+ * PostgreSQL Environment Variable Configuration
+ *
+ * Defines the environment variables used for PostgreSQL configuration.
+ * These are primarily used by the platform services (apps-manager) for
+ * database provisioning and by applications that opt into PostgreSQL.
+ *
+ * @see DATABASE_AGNOSTIC_REPOSITORY_ANALYSIS.md Section 20.3
+ */
+import { z } from 'zod';
+import { PostgreSQLSSLMode } from '@wildo-ai/saas-models';
+/**
+ * PostgreSQL admin environment variables
+ * Used by apps-manager for provisioning databases and users
+ */
+export const PostgreSQL_Admin_EnvConfig_Schema = z.object({
+    /**
+     * Admin connection URL for database provisioning
+     * Format: postgresql://admin_user:admin_password@host:port/postgres
+     */
+    PG_ADMIN_URL: z.string().optional(),
+    /**
+     * PostgreSQL host (alternative to full URL)
+     */
+    PG_HOST: z.string().optional(),
+    /**
+     * PostgreSQL port (default: 5432)
+     */
+    PG_PORT: z.coerce.number().int().min(1).max(65535).default(5432),
+    /**
+     * Admin username (alternative to full URL)
+     */
+    PG_ADMIN_USER: z.string().optional(),
+    /**
+     * Admin password (alternative to full URL)
+     */
+    PG_ADMIN_PASSWORD: z.string().optional(),
+    /**
+     * SSL mode for connections
+     */
+    PG_SSL_MODE: z.enum(PostgreSQLSSLMode).default(PostgreSQLSSLMode.REQUIRE),
+});
+/**
+ * PostgreSQL application environment variables
+ * Used by applications that connect to PostgreSQL
+ */
+export const PostgreSQL_App_EnvConfig_Schema = z.object({
+    /**
+     * Application database connection URL
+     * If provided, takes precedence over individual fields
+     */
+    DATABASE_URL: z.string().optional(),
+    /**
+     * PostgreSQL host for application database
+     */
+    PG_APP_HOST: z.string().optional(),
+    /**
+     * PostgreSQL port for application database
+     */
+    PG_APP_PORT: z.coerce.number().int().min(1).max(65535).default(5432),
+    /**
+     * Application database name
+     */
+    PG_APP_DATABASE: z.string().optional(),
+    /**
+     * Application database username
+     */
+    PG_APP_USER: z.string().optional(),
+    /**
+     * Application database password
+     */
+    PG_APP_PASSWORD: z.string().optional(),
+    /**
+     * SSL mode for application connections
+     */
+    PG_APP_SSL_MODE: z.enum(PostgreSQLSSLMode).optional(),
+});
+/**
+ * Parse PostgreSQL admin configuration from environment
+ */
+export function parsePostgreSQLAdminEnv() {
+    return PostgreSQL_Admin_EnvConfig_Schema.parse({
+        PG_ADMIN_URL: process.env.PG_ADMIN_URL,
+        PG_HOST: process.env.PG_HOST,
+        PG_PORT: process.env.PG_PORT,
+        PG_ADMIN_USER: process.env.PG_ADMIN_USER,
+        PG_ADMIN_PASSWORD: process.env.PG_ADMIN_PASSWORD,
+        PG_SSL_MODE: process.env.PG_SSL_MODE,
+    });
+}
+/**
+ * Parse PostgreSQL application configuration from environment
+ */
+export function parsePostgreSQLAppEnv() {
+    return PostgreSQL_App_EnvConfig_Schema.parse({
+        DATABASE_URL: process.env.DATABASE_URL,
+        PG_APP_HOST: process.env.PG_APP_HOST,
+        PG_APP_PORT: process.env.PG_APP_PORT,
+        PG_APP_DATABASE: process.env.PG_APP_DATABASE,
+        PG_APP_USER: process.env.PG_APP_USER,
+        PG_APP_PASSWORD: process.env.PG_APP_PASSWORD,
+        PG_APP_SSL_MODE: process.env.PG_APP_SSL_MODE,
+    });
+}
+export { PostgreSQLSSLMode, buildPostgreSQLConnectionUrl } from '@wildo-ai/saas-models';
+//# sourceMappingURL=postgresql-env-config.backend.schemas.js.map

package/dist/esm/config/models/postgresql-env-config.backend.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresql-env-config.backend.schemas.js","sourceRoot":"","sources":["../../../../src/config/models/postgresql-env-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAgC,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAExF;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEnC;;OAEG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE9B;;OAEG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAEhE;;OAEG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEpC;;OAEG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAExC;;OAEG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC;CAC1E,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEnC;;OAEG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC;;OAEG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAEpE;;OAEG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC;;OAEG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC;;OAEG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC;;OAEG;IACH,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,iCAAiC,CAAC,KAAK,CAAC;QAC7C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACtC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;QAC5B,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QACxC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAChD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;KACrC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,+BAA+B,CAAC,KAAK,CAAC;QAC3C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACtC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACpC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACpC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QACpC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QAC5C,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/esm/config/models/runtime-topology.backend.contracts.d.ts

@@ -0,0 +1,12 @@
+import { type RuntimeEndpointUrls } from '@wildo-ai/platform-core-shared';
+export interface BackendEnvPlatformRuntimeEndpointsInput {
+    appsManagerUrl: string;
+    crontabsBatchesManagerUrl: string;
+    fileGeneratorUrl: string;
+}
+export declare function buildPlatformRuntimeEndpointsFromBackendEnv(input: BackendEnvPlatformRuntimeEndpointsInput): Record<string, RuntimeEndpointUrls>;
+export interface ApplicationRuntimeEndpointsEnvInput {
+    serializedRuntimeEndpoints?: string | undefined;
+}
+export declare function buildApplicationRuntimeEndpointsFromBackendEnv(input: ApplicationRuntimeEndpointsEnvInput): Record<string, RuntimeEndpointUrls>;
+//# sourceMappingURL=runtime-topology.backend.contracts.d.ts.map

package/dist/esm/config/models/runtime-topology.backend.contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-topology.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../src/config/models/runtime-topology.backend.contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,uCAAuC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,uCAAuC,GAC7C,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAerC;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,mCAAmC,GACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAIrC"}

package/dist/esm/config/models/runtime-topology.backend.contracts.js

@@ -0,0 +1,23 @@
+import { buildPlatformRuntimeEndpoints, parseRuntimeEndpointsRecord, } from '@wildo-ai/platform-core-shared';
+export function buildPlatformRuntimeEndpointsFromBackendEnv(input) {
+    return buildPlatformRuntimeEndpoints({
+        appsManager: {
+            publicUrl: input.appsManagerUrl,
+            internalUrl: input.appsManagerUrl,
+        },
+        crontabsBatchesManager: {
+            publicUrl: input.crontabsBatchesManagerUrl,
+            internalUrl: input.crontabsBatchesManagerUrl,
+        },
+        fileGenerator: {
+            publicUrl: input.fileGeneratorUrl,
+            internalUrl: input.fileGeneratorUrl,
+        },
+    });
+}
+export function buildApplicationRuntimeEndpointsFromBackendEnv(input) {
+    return input.serializedRuntimeEndpoints
+        ? parseRuntimeEndpointsRecord(input.serializedRuntimeEndpoints)
+        : {};
+}
+//# sourceMappingURL=runtime-topology.backend.contracts.js.map

package/dist/esm/config/models/runtime-topology.backend.contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-topology.backend.contracts.js","sourceRoot":"","sources":["../../../../src/config/models/runtime-topology.backend.contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,GAE5B,MAAM,gCAAgC,CAAC;AAQxC,MAAM,UAAU,2CAA2C,CACzD,KAA8C;IAE9C,OAAO,6BAA6B,CAAC;QACnC,WAAW,EAAE;YACX,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,WAAW,EAAE,KAAK,CAAC,cAAc;SAClC;QACD,sBAAsB,EAAE;YACtB,SAAS,EAAE,KAAK,CAAC,yBAAyB;YAC1C,WAAW,EAAE,KAAK,CAAC,yBAAyB;SAC7C;QACD,aAAa,EAAE;YACb,SAAS,EAAE,KAAK,CAAC,gBAAgB;YACjC,WAAW,EAAE,KAAK,CAAC,gBAAgB;SACpC;KACF,CAAC,CAAC;AACL,CAAC;AAMD,MAAM,UAAU,8CAA8C,CAC5D,KAA0C;IAE1C,OAAO,KAAK,CAAC,0BAA0B;QACrC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,0BAA0B,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/esm/config/services/__tests__/mock-app-configuration.service.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Vitest-oriented mock app configuration for integration tests (`vi.fn` where applicable).
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+export declare class MockAppConfigurationService {
+    /**
+     * Backing store for `config` / `get` — mirrors a minimal {@link AppConfiguration} shape.
+     * `defaultAdapter` keeps repository/registry integration on MongoDB unless tests override.
+     */
+    private readonly _configData;
+    private readonly _secretsData;
+    /** Same contract as {@link AppConfigurationService.isInitialized} */
+    isInitialized(): boolean;
+    get config(): Record<string, any>;
+    get secrets(): Record<string, any>;
+    get: import("vitest").Mock<[key: string], any>;
+    getAll: import("vitest").Mock<[], Record<string, any>>;
+    getAppName: import("vitest").Mock<[], string>;
+    getEnvironment: import("vitest").Mock<[], string>;
+    getFrontendServiceUserManagementEntry: import("vitest").Mock<[frontendServiceName: string, userType: string], {
+        register: boolean;
+        auth: boolean;
+        isDefault?: boolean;
+    }>;
+    hasFrontendService: import("vitest").Mock<[frontendServiceName: string], boolean>;
+    resolveUserTypeFromFrontendServiceName: import("vitest").Mock<[frontendServiceName: string], string>;
+    /**
+     * Used by SAML / auth flows to build post-login redirect URLs.
+     * Mirrors the real AppConfiguration service behavior closely enough for tests.
+     */
+    resolveFrontendServiceNameFromUserType: import("vitest").Mock<[userType: string], string>;
+    resolveDefaultFrontendServiceName: import("vitest").Mock<[], string>;
+    reset(): void;
+}
+//# sourceMappingURL=mock-app-configuration.service.d.ts.map

package/dist/esm/config/services/__tests__/mock-app-configuration.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-app-configuration.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/__tests__/mock-app-configuration.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,qBACa,2BAA2B;IACtC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAqB1B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IAExD,qEAAqE;IACrE,aAAa,IAAI,OAAO;IAIxB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEhC;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEjC;IAED,GAAG,4CAEA;IAEH,MAAM,iDAAiC;IAEvC,UAAU,oCAA2B;IACrC,cAAc,oCAAuB;IAErC,qCAAqC;kBAC0B,OAAO;cAAQ,OAAO;oBAAc,OAAO;OAGxG;IAEF,kBAAkB,gEAEf;IAEH,sCAAsC,+DAQnC;IAEH;;;OAGG;IACH,sCAAsC,oDAanC;IAEH,iCAAiC,oCAc9B;IAEH,KAAK;CAWN"}

package/dist/esm/config/services/__tests__/mock-app-configuration.service.js

@@ -0,0 +1,124 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * Vitest-oriented mock app configuration for integration tests (`vi.fn` where applicable).
+ *
+ * **Naming**: `mock-*.service.ts` — canonical mock module, not a test suite.
+ * Plain `.ts` keeps it barrel-compilable, and Vitest also excludes these files
+ * explicitly as a defensive guard.
+ */
+import 'reflect-metadata';
+import { injectable } from 'inversify';
+import { vi } from 'vitest';
+let MockAppConfigurationService = class MockAppConfigurationService {
+    /**
+     * Backing store for `config` / `get` — mirrors a minimal {@link AppConfiguration} shape.
+     * `defaultAdapter` keeps repository/registry integration on MongoDB unless tests override.
+     */
+    _configData = {
+        app: {
+            name: 'test-app',
+            environment: 'test',
+        },
+        database: {
+            mongoUri: 'mongodb://localhost:27017/test',
+            defaultAdapter: 'mongodb',
+        },
+        redis: {
+            host: 'localhost',
+            port: 6379,
+        },
+        userTypes: {},
+        frontendServices: {},
+        runtime: {
+            endPoints: {},
+        },
+        storage: {
+            maxFileSize: 100 * 1024 * 1024,
+        },
+    };
+    _secretsData = {};
+    /** Same contract as {@link AppConfigurationService.isInitialized} */
+    isInitialized() {
+        return true;
+    }
+    get config() {
+        return this._configData;
+    }
+    get secrets() {
+        return this._secretsData;
+    }
+    get = vi.fn((key) => {
+        return key.split('.').reduce((obj, k) => obj?.[k], this._configData);
+    });
+    getAll = vi.fn(() => this._configData);
+    getAppName = vi.fn(() => 'test-app');
+    getEnvironment = vi.fn(() => 'test');
+    getFrontendServiceUserManagementEntry = vi.fn((frontendServiceName, userType) => {
+        return this._configData.frontendServices?.[frontendServiceName]?.usersManagement?.[userType] ?? null;
+    });
+    hasFrontendService = vi.fn((frontendServiceName) => {
+        return !!this._configData.frontendServices?.[frontendServiceName];
+    });
+    resolveUserTypeFromFrontendServiceName = vi.fn((frontendServiceName) => {
+        const frontendServiceConfig = this._configData.frontendServices?.[frontendServiceName];
+        if (!frontendServiceConfig?.usersManagement)
+            return null;
+        const entries = Object.entries(frontendServiceConfig.usersManagement);
+        const defaultEntry = entries.find(([, value]) => value.isDefault);
+        const firstEntry = entries[0];
+        return (defaultEntry ?? firstEntry)?.[0] ?? null;
+    });
+    /**
+     * Used by SAML / auth flows to build post-login redirect URLs.
+     * Mirrors the real AppConfiguration service behavior closely enough for tests.
+     */
+    resolveFrontendServiceNameFromUserType = vi.fn((userType) => {
+        const frontendServices = this._configData.frontendServices ?? {};
+        let fallback = null;
+        for (const [frontendServiceName, frontendServiceConfig] of Object.entries(frontendServices)) {
+            const entry = frontendServiceConfig
+                .usersManagement?.[userType];
+            if (!entry)
+                continue;
+            if (entry.isDefault)
+                return frontendServiceName;
+            if (entry.auth && !fallback)
+                fallback = frontendServiceName;
+        }
+        return fallback;
+    });
+    resolveDefaultFrontendServiceName = vi.fn(() => {
+        const frontendServices = this._configData.frontendServices ?? {};
+        for (const [frontendServiceName, frontendServiceConfig] of Object.entries(frontendServices)) {
+            const hasDefault = Object
+                .values(frontendServiceConfig.usersManagement ?? {})
+                .some((value) => value.isDefault);
+            if (hasDefault) {
+                return frontendServiceName;
+            }
+        }
+        const firstFrontendServiceName = Object.keys(frontendServices)[0];
+        return firstFrontendServiceName ?? null;
+    });
+    reset() {
+        this.get.mockClear();
+        this.getAll.mockClear();
+        this.getAppName.mockClear();
+        this.getEnvironment.mockClear();
+        this.getFrontendServiceUserManagementEntry.mockClear();
+        this.hasFrontendService.mockClear();
+        this.resolveUserTypeFromFrontendServiceName.mockClear();
+        this.resolveFrontendServiceNameFromUserType.mockClear();
+        this.resolveDefaultFrontendServiceName.mockClear();
+    }
+};
+MockAppConfigurationService = __decorate([
+    injectable()
+], MockAppConfigurationService);
+export { MockAppConfigurationService };
+//# sourceMappingURL=mock-app-configuration.service.js.map

package/dist/esm/config/services/__tests__/mock-app-configuration.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-app-configuration.service.js","sourceRoot":"","sources":["../../../../../src/config/services/__tests__/mock-app-configuration.service.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAGrB,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC;;;OAGG;IACc,WAAW,GAAwB;QAClD,GAAG,EAAE;YACH,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,MAAM;SACpB;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE,gCAAgC;YAC1C,cAAc,EAAE,SAAS;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;SACX;QACD,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,EAAE;QACpB,OAAO,EAAE;YACP,SAAS,EAAE,EAAE;SACd;QACD,OAAO,EAAE;YACP,WAAW,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;SAC/B;KACF,CAAC;IAEe,YAAY,GAAwB,EAAE,CAAC;IAExD,qEAAqE;IACrE,aAAa;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,GAAW,EAAE,EAAE;QAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEvC,UAAU,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;IACrC,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAErC,qCAAqC,GAAG,EAAE,CAAC,EAAE,CAC3C,CAAC,mBAA2B,EAAE,QAAgB,EAAoE,EAAE;QAClH,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACvG,CAAC,CACF,CAAC;IAEF,kBAAkB,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,mBAA2B,EAAW,EAAE;QAClE,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,sCAAsC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,mBAA2B,EAAiB,EAAE;QAC5F,MAAM,qBAAqB,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACvF,IAAI,CAAC,qBAAqB,EAAE,eAAe;YAAE,OAAO,IAAI,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAE,KAAiC,CAAC,SAAS,CAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAQ,CAAC,YAAY,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAwB,IAAI,IAAI,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,sCAAsC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,QAAgB,EAAiB,EAAE;QACjF,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACjE,IAAI,QAAQ,GAAkB,IAAI,CAAC;QAEnC,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5F,MAAM,KAAK,GAAI,qBAAuG;iBACnH,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,mBAAmB,CAAC;YAChD,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ;gBAAE,QAAQ,GAAG,mBAAmB,CAAC;QAC9D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,iCAAiC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAkB,EAAE;QAC5D,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAEjE,KAAK,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5F,MAAM,UAAU,GAAG,MAAM;iBACtB,MAAM,CAAE,qBAAuF,CAAC,eAAe,IAAI,EAAE,CAAC;iBACtH,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,mBAAmB,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,MAAM,wBAAwB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,wBAAwB,IAAI,IAAI,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,KAAK;QACH,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,qCAAqC,CAAC,SAAS,EAAE,CAAC;QACvD,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,sCAAsC,CAAC,SAAS,EAAE,CAAC;QACxD,IAAI,CAAC,sCAAsC,CAAC,SAAS,EAAE,CAAC;QACxD,IAAI,CAAC,iCAAiC,CAAC,SAAS,EAAE,CAAC;IACrD,CAAC;CACF,CAAA;AAtHY,2BAA2B;IADvC,UAAU,EAAE;GACA,2BAA2B,CAsHvC"}