@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

package/dist/esm/external-data/models/external-data-pipeline-state.backend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-pipeline-state.backend.schemas.js","sourceRoot":"","sources":["../../../../../src/external-data/models/external-data-pipeline-state.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,0CAA0C,EAC1C,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,GACpB,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE;IAE9B;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAEhF;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE7B,iFAAiF;IACjF,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAElC,sFAAsF;IACtF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAE9B,+FAA+F;IAC/F,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,4FAA4F;QAC5F,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;QAC1B,0CAA0C;QAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC7C,2FAA2F;QAC3F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC5C,iFAAiF;QACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KAC3C,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,MAAM,CAAN,IAAY,mCAEX;AAFD,WAAY,mCAAmC;IAC7C,4DAAqB,CAAA;AACvB,CAAC,EAFW,mCAAmC,KAAnC,mCAAmC,QAE9C;AAQD,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,CAAC;IAC7B,UAAU,EAAE,mCAAmC,CAAC,QAAQ;IACxD,mFAAmF;IACnF,WAAW,EAAE,4BAA4B,CAAC,eAA+D;IACzG,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;IAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oEAAoE,GAAG,CAClF,sBAA8C,EACsE,EAAE;IACtH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,+BAA+B;QAC3C,kBAAkB,EAAE,mBAAmB,CAAC,4BAA4B;QACpE,uBAAuB,EAAE,8BAA8B,CAAC,mBAAmB,CAAC,4BAA4B,CAAC;QACzG,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI;QAEtB,cAAc,EAAE;YACd,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,MAAM;SAC7B;QAED,uBAAuB,EAAE;YACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;YAC/D,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;YAC/D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;YACjE,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;SAClE;KACF,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nimport {\n  CORE_APP_ROLES,\n  CoreResourceOperation,\n  createResourceConfiguration_Initialization,\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  type ResourceConfiguration,\n  type ResourceRelationship,\n} from '@wildo-ai/saas-models';\n\n/*\n * entrypoint-closure-waiver: same crossing (and same measured result) as\n * `data-seed-run.shared.resources-config.schemas` — `resources-types.backend.schemas` is\n * published only by the `./backend-resource-registry` subpath, but no root-exported contract of\n * this module INFERS a type from it: the factory's return type is explicitly annotated and\n * `ExternalDataPipelineState` is a structural z.infer. Probed 2026-08-28 per the rule:\n * `tsc -p tsconfig.build.json --noEmit` with declaration emit — zero TS2742/TS2883/TS7056.\n */\nimport {\n  BackendResourceFieldIdentifier,\n  BackendResourceType,\n} from '../../resources/models/resources-types.backend.schemas';\n\n/**\n * ============================================================================\n *  ExternalDataPipelineState — system resource (partial-resource coverage v3, PR-9)\n * ============================================================================\n *\n * ONE row per declared `externalDataPipeline` pipeline, keyed by the DESTINATION resource\n * type. It exists for exactly two facts that must outlive a process:\n *\n *  1. **The extraction cursor.** A pass over a remote population larger than\n *     `maxRowsPerRun` spans several runs; the cursor (an `@odata.nextLink`\n *     URL or an Odoo keyset id) is what lets the NEXT run continue instead of\n *     re-reading the same first pages forever. `null` = no pass in flight —\n *     the next run starts a fresh pass from the population's beginning.\n *  2. **Last-run bookkeeping** for operators: when the pipeline last ran and\n *     what it did (extracted / transformed-rejected / seed outcome / duration).\n *     The heavyweight per-entry outcome detail stays on the `DataSeedRun`\n *     ledger row every run already writes — this summary carries the ETL-only\n *     numbers (extraction/transform happen BEFORE the seed engine sees\n *     anything) and points at that ledger row; it never duplicates it.\n *\n * Mirrors the `DataSeedRun` posture: internal infrastructure, REPOSITORY_ONLY\n * variants only — the sole writer is the ETL run service. An operator-facing\n * read surface is the PR-28 ops follow-up, not this slice.\n */\nexport const ExternalDataPipelineStateSchema = z.object({\n  _id: z.string().isPrimaryKey(),\n\n  /**\n   * The DESTINATION resource type whose `externalDataPipeline` this row tracks — one pipeline, one row.\n   * `.isUnique()` makes the one-row contract PHYSICAL: a create racing the run service's\n   * read-then-create loses at the store instead of minting a second cursor holder.\n   */\n  pipelineResourceType: z.string().min(1).isBusinessKey().isUnique().isDBIndexed(),\n\n  /**\n   * Opaque continuation of an IN-FLIGHT extraction pass (ODATA: the server's own\n   * `@odata.nextLink`; Odoo: the last row id of the previous page). `null` when no pass is in\n   * flight. ⚠ PR-6 rides on this field: the orphan stage runs ONLY on a run that COMPLETES a\n   * pass, and \"mid-pass\" is precisely `cursor !== null`.\n   */\n  cursor: z.string().nullable(),\n\n  /** When the current multi-run pass started; `null` when no pass is in flight. */\n  passStartedAt: z.date().nullable(),\n\n  /** Start instant of the most recent run (any outcome). `null` until the first run. */\n  lastRunAt: z.date().nullable(),\n\n  /** ETL-side numbers of the most recent run — see the header for the split vs `DataSeedRun`. */\n  lastRunSummary: z.object({\n    /** True when the run finished a full pass over the remote population (orphan stage ran). */\n    completedPass: z.boolean(),\n    /** Raw remote rows extracted this run. */\n    extractedRows: z.number().int().nonnegative(),\n    /** Rows the transform rejected (per-row reasons are logged; previous versions survive). */\n    rejectedRows: z.number().int().nonnegative(),\n    /** `_id` of the `DataSeedRun` ledger row carrying the per-entry load outcome. */\n    seedRunId: z.string().nullable(),\n    durationMs: z.number().int().nonnegative(),\n  }).nullable(),\n});\n\nexport type ExternalDataPipelineState = z.infer<typeof ExternalDataPipelineStateSchema>;\n\nexport enum ExternalDataPipelineStateVariantKey {\n  INTERNAL = 'internal',\n}\n\ntype ExternalDataPipelineState_CoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE;\n\nconst internalVariant = () => ({\n  variantKey: ExternalDataPipelineStateVariantKey.INTERNAL,\n  // The literal annotation keeps the variant inside the discriminated builder union.\n  variantType: ResourceOperationVariantType.REPOSITORY_ONLY as ResourceOperationVariantType.REPOSITORY_ONLY,\n  isDefault: true,\n  roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n  riskLevel: ResourceOperationRiskLevel.LOW,\n});\n\nexport const externalDataPipelineStateResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[],\n): ResourceConfiguration<undefined, ExternalDataPipelineState_CoreOperations, typeof ExternalDataPipelineStateSchema> => {\n  return createResourceConfiguration_Initialization<\n    undefined,\n    ExternalDataPipelineState_CoreOperations,\n    typeof ExternalDataPipelineStateSchema\n  >({\n    mainSchema: ExternalDataPipelineStateSchema,\n    resourceIdentifier: BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE,\n    resourceFieldIdentifier: BackendResourceFieldIdentifier[BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n\n    coreOperations: [\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.UPDATE,\n    ],\n\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: { variants: [internalVariant()] },\n      [CoreResourceOperation.LIST]: { variants: [internalVariant()] },\n      [CoreResourceOperation.CREATE]: { variants: [internalVariant()] },\n      [CoreResourceOperation.UPDATE]: { variants: [internalVariant()] },\n    },\n  });\n};\n"]}
+{"version":3,"file":"external-data-pipeline-state.backend.schemas.js","sourceRoot":"","sources":["../../../../../src/external-data/models/external-data-pipeline-state.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,0CAA0C,EAC1C,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wDAAwD,CAAC;AAC3F,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,GACpB,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE;IAE9B;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE;IAEhF;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE7B,iFAAiF;IACjF,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAElC,sFAAsF;IACtF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAE9B,+FAA+F;IAC/F,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,4FAA4F;QAC5F,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;QAC1B,0CAA0C;QAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC7C,2FAA2F;QAC3F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC5C;;;;;;;;;;WAUG;QACH,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;QAChD,iFAAiF;QACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KAC3C,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,MAAM,CAAN,IAAY,mCAEX;AAFD,WAAY,mCAAmC;IAC7C,4DAAqB,CAAA;AACvB,CAAC,EAFW,mCAAmC,KAAnC,mCAAmC,QAE9C;AAQD,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,CAAC;IAC7B,UAAU,EAAE,mCAAmC,CAAC,QAAQ;IACxD,mFAAmF;IACnF,WAAW,EAAE,4BAA4B,CAAC,eAA+D;IACzG,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;IAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oEAAoE,GAAG,CAClF,sBAA8C,EACsE,EAAE;IACtH,OAAO,0CAA0C,CAI/C;QACA,UAAU,EAAE,+BAA+B;QAC3C,kBAAkB,EAAE,mBAAmB,CAAC,4BAA4B;QACpE,uBAAuB,EAAE,8BAA8B,CAAC,mBAAmB,CAAC,4BAA4B,CAAC;QACzG,qBAAqB,EAAE,sBAAsB;QAC7C,gBAAgB,EAAE,IAAI;QAEtB,cAAc,EAAE;YACd,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,IAAI;YAC1B,qBAAqB,CAAC,MAAM;YAC5B,qBAAqB,CAAC,MAAM;SAC7B;QAED,uBAAuB,EAAE;YACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;YAC/D,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;YAC/D,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;YACjE,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE;SAClE;KACF,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nimport {\n  CORE_APP_ROLES,\n  CoreResourceOperation,\n  createResourceConfiguration_Initialization,\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  type ResourceConfiguration,\n  type ResourceRelationship,\n} from '@wildo-ai/saas-models';\n\n/*\n * entrypoint-closure-waiver: same crossing (and same measured result) as\n * `data-seed-run.shared.resources-config.schemas` — `resources-types.backend.schemas` is\n * published only by the `./backend-resource-registry` subpath, but no root-exported contract of\n * this module INFERS a type from it: the factory's return type is explicitly annotated and\n * `ExternalDataPipelineState` is a structural z.infer. Probed 2026-08-28 per the rule:\n * `tsc -p tsconfig.build.json --noEmit` with declaration emit — zero TS2742/TS2883/TS7056.\n */\nimport { DataSeedRunStatus } from '../../data-seeding/models/data-seed-run.shared.schemas';\nimport {\n  BackendResourceFieldIdentifier,\n  BackendResourceType,\n} from '../../resources/models/resources-types.backend.schemas';\n\n/**\n * ============================================================================\n *  ExternalDataPipelineState — system resource (partial-resource coverage v3, PR-9)\n * ============================================================================\n *\n * ONE row per declared `externalDataPipeline` pipeline, keyed by the DESTINATION resource\n * type. It exists for exactly two facts that must outlive a process:\n *\n *  1. **The extraction cursor.** A pass over a remote population larger than\n *     `maxRowsPerRun` spans several runs; the cursor (an `@odata.nextLink`\n *     URL or an Odoo keyset id) is what lets the NEXT run continue instead of\n *     re-reading the same first pages forever. `null` = no pass in flight —\n *     the next run starts a fresh pass from the population's beginning.\n *  2. **Last-run bookkeeping** for operators: when the pipeline last ran and\n *     what it did (extracted / transformed-rejected / seed outcome / duration).\n *     The heavyweight per-entry outcome detail stays on the `DataSeedRun`\n *     ledger row every run already writes — this summary carries the ETL-only\n *     numbers (extraction/transform happen BEFORE the seed engine sees\n *     anything) and points at that ledger row; it never duplicates it.\n *\n * Mirrors the `DataSeedRun` posture: internal infrastructure, REPOSITORY_ONLY\n * variants only — the sole writer is the ETL run service. An operator-facing\n * read surface is the PR-28 ops follow-up, not this slice.\n */\nexport const ExternalDataPipelineStateSchema = z.object({\n  _id: z.string().isPrimaryKey(),\n\n  /**\n   * The DESTINATION resource type whose `externalDataPipeline` this row tracks — one pipeline, one row.\n   * `.isUnique()` makes the one-row contract PHYSICAL: a create racing the run service's\n   * read-then-create loses at the store instead of minting a second cursor holder.\n   */\n  pipelineResourceType: z.string().min(1).isBusinessKey().isUnique().isDBIndexed(),\n\n  /**\n   * Opaque continuation of an IN-FLIGHT extraction pass (ODATA: the server's own\n   * `@odata.nextLink`; Odoo: the last row id of the previous page). `null` when no pass is in\n   * flight. ⚠ PR-6 rides on this field: the orphan stage runs ONLY on a run that COMPLETES a\n   * pass, and \"mid-pass\" is precisely `cursor !== null`.\n   */\n  cursor: z.string().nullable(),\n\n  /** When the current multi-run pass started; `null` when no pass is in flight. */\n  passStartedAt: z.date().nullable(),\n\n  /** Start instant of the most recent run (any outcome). `null` until the first run. */\n  lastRunAt: z.date().nullable(),\n\n  /** ETL-side numbers of the most recent run — see the header for the split vs `DataSeedRun`. */\n  lastRunSummary: z.object({\n    /** True when the run finished a full pass over the remote population (orphan stage ran). */\n    completedPass: z.boolean(),\n    /** Raw remote rows extracted this run. */\n    extractedRows: z.number().int().nonnegative(),\n    /** Rows the transform rejected (per-row reasons are logged; previous versions survive). */\n    rejectedRows: z.number().int().nonnegative(),\n    /**\n     * The seed engine's own verdict on the LOAD — a different axis from `completedPass`, which is\n     * about the EXTRACTION pass, and the two must never be merged: a run can complete a full pass\n     * over the remote population and still fail to write some of it.\n     *\n     * Recorded because omitting it made the admin run response answer `completed-pass` while the\n     * ledger said `partial` with a failed entry — a caller reading only the response would have\n     * believed the sync succeeded. One scalar is enough here: `PARTIAL` or `FAILED` is the signal\n     * to go read `seedRunId`, which owns the per-entry detail this summary deliberately does not\n     * duplicate.\n     */\n    loadStatus: z.enum(DataSeedRunStatus).nullable(),\n    /** `_id` of the `DataSeedRun` ledger row carrying the per-entry load outcome. */\n    seedRunId: z.string().nullable(),\n    durationMs: z.number().int().nonnegative(),\n  }).nullable(),\n});\n\nexport type ExternalDataPipelineState = z.infer<typeof ExternalDataPipelineStateSchema>;\n\nexport enum ExternalDataPipelineStateVariantKey {\n  INTERNAL = 'internal',\n}\n\ntype ExternalDataPipelineState_CoreOperations =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE;\n\nconst internalVariant = () => ({\n  variantKey: ExternalDataPipelineStateVariantKey.INTERNAL,\n  // The literal annotation keeps the variant inside the discriminated builder union.\n  variantType: ResourceOperationVariantType.REPOSITORY_ONLY as ResourceOperationVariantType.REPOSITORY_ONLY,\n  isDefault: true,\n  roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n  riskLevel: ResourceOperationRiskLevel.LOW,\n});\n\nexport const externalDataPipelineStateResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[],\n): ResourceConfiguration<undefined, ExternalDataPipelineState_CoreOperations, typeof ExternalDataPipelineStateSchema> => {\n  return createResourceConfiguration_Initialization<\n    undefined,\n    ExternalDataPipelineState_CoreOperations,\n    typeof ExternalDataPipelineStateSchema\n  >({\n    mainSchema: ExternalDataPipelineStateSchema,\n    resourceIdentifier: BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE,\n    resourceFieldIdentifier: BackendResourceFieldIdentifier[BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE],\n    resourceRelationships: resourcesRelationships,\n    isSystemResource: true,\n\n    coreOperations: [\n      CoreResourceOperation.READ,\n      CoreResourceOperation.LIST,\n      CoreResourceOperation.CREATE,\n      CoreResourceOperation.UPDATE,\n    ],\n\n    operationsConfiguration: {\n      [CoreResourceOperation.READ]: { variants: [internalVariant()] },\n      [CoreResourceOperation.LIST]: { variants: [internalVariant()] },\n      [CoreResourceOperation.CREATE]: { variants: [internalVariant()] },\n      [CoreResourceOperation.UPDATE]: { variants: [internalVariant()] },\n    },\n  });\n};\n"]}

package/dist/esm/external-providers/models/provider-selection-resolution-evidence.backend.definitions.d.ts

@@ -13,9 +13,11 @@ export interface ExternalProviderSelectionResolutionEvidence {
     readonly authorityKind: ExternalProviderSelectionAuthorityKind;
     readonly overrideStatus: ExternalProviderSelectionOverrideStatus;
     readonly applicationPrimaryProviderRef: string | null;
-    readonly applicationFallbackProviderRefs: readonly string[];
+    /** The selection's `whenUnavailable` refs — substitutes for an unavailable primary, never a failover chain. */
+    readonly applicationSubstituteProviderRefs: readonly string[];
     readonly environmentPrimaryProviderRef: string | null;
-    readonly environmentFallbackProviderRefs: readonly string[];
+    /** The environment override's `whenUnavailable` refs. Same semantics as the application's. */
+    readonly environmentSubstituteProviderRefs: readonly string[];
     readonly providerRuntimeArtifact: ProviderRuntimeArtifactEvidenceMetadata | null;
 }
 //# sourceMappingURL=provider-selection-resolution-evidence.backend.definitions.d.ts.map

package/dist/esm/external-providers/models/provider-selection-resolution-evidence.backend.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAE7H,oBAAY,sCAAsC;IAChD,4BAA4B,iCAAiC;IAC7D,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;CAC9C;AAED,oBAAY,uCAAuC;IACjD,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,uCAAuC,CAAC;IACjE,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,+BAA+B,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5D,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,+BAA+B,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,uCAAuC,GAAG,IAAI,CAAC;CAClF"}
+{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAE7H,oBAAY,sCAAsC;IAChD,4BAA4B,iCAAiC;IAC7D,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;CAC9C;AAED,oBAAY,uCAAuC;IACjD,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,uCAAuC,CAAC;IACjE,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,+GAA+G;IAC/G,QAAQ,CAAC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,8FAA8F;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,uBAAuB,EAAE,uCAAuC,GAAG,IAAI,CAAC;CAClF"}

package/dist/esm/external-providers/models/provider-selection-resolution-evidence.backend.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.js","sourceRoot":"","sources":["../../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAEA,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,uGAA6D,CAAA;IAC7D,mFAAyC,CAAA;IACzC,uFAA6C,CAAA;AAC/C,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD;AAED,MAAM,CAAN,IAAY,uCAIX;AAJD,WAAY,uCAAuC;IACjD,4DAAiB,CAAA;IACjB,8DAAmB,CAAA;IACnB,kEAAuB,CAAA;AACzB,CAAC,EAJW,uCAAuC,KAAvC,uCAAuC,QAIlD","sourcesContent":["import type { ProviderRuntimeArtifactEvidenceMetadata } from '../../config/models/provider-runtime-artifact.backend.schemas';\n\nexport enum ExternalProviderSelectionAuthorityKind {\n  APPLICATION_RUNTIME_ARTIFACT = 'APPLICATION_RUNTIME_ARTIFACT',\n  DEFAULT_RESOLUTION = 'DEFAULT_RESOLUTION',\n  ENVIRONMENT_OVERRIDE = 'ENVIRONMENT_OVERRIDE',\n}\n\nexport enum ExternalProviderSelectionOverrideStatus {\n  ABSENT = 'ABSENT',\n  APPLIED = 'APPLIED',\n  MALFORMED = 'MALFORMED',\n}\n\nexport interface ExternalProviderSelectionResolutionEvidence {\n  readonly authorityKind: ExternalProviderSelectionAuthorityKind;\n  readonly overrideStatus: ExternalProviderSelectionOverrideStatus;\n  readonly applicationPrimaryProviderRef: string | null;\n  readonly applicationFallbackProviderRefs: readonly string[];\n  readonly environmentPrimaryProviderRef: string | null;\n  readonly environmentFallbackProviderRefs: readonly string[];\n  readonly providerRuntimeArtifact: ProviderRuntimeArtifactEvidenceMetadata | null;\n}\n"]}
+{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.js","sourceRoot":"","sources":["../../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAEA,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,uGAA6D,CAAA;IAC7D,mFAAyC,CAAA;IACzC,uFAA6C,CAAA;AAC/C,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD;AAED,MAAM,CAAN,IAAY,uCAIX;AAJD,WAAY,uCAAuC;IACjD,4DAAiB,CAAA;IACjB,8DAAmB,CAAA;IACnB,kEAAuB,CAAA;AACzB,CAAC,EAJW,uCAAuC,KAAvC,uCAAuC,QAIlD","sourcesContent":["import type { ProviderRuntimeArtifactEvidenceMetadata } from '../../config/models/provider-runtime-artifact.backend.schemas';\n\nexport enum ExternalProviderSelectionAuthorityKind {\n  APPLICATION_RUNTIME_ARTIFACT = 'APPLICATION_RUNTIME_ARTIFACT',\n  DEFAULT_RESOLUTION = 'DEFAULT_RESOLUTION',\n  ENVIRONMENT_OVERRIDE = 'ENVIRONMENT_OVERRIDE',\n}\n\nexport enum ExternalProviderSelectionOverrideStatus {\n  ABSENT = 'ABSENT',\n  APPLIED = 'APPLIED',\n  MALFORMED = 'MALFORMED',\n}\n\nexport interface ExternalProviderSelectionResolutionEvidence {\n  readonly authorityKind: ExternalProviderSelectionAuthorityKind;\n  readonly overrideStatus: ExternalProviderSelectionOverrideStatus;\n  readonly applicationPrimaryProviderRef: string | null;\n  /** The selection's `whenUnavailable` refs — substitutes for an unavailable primary, never a failover chain. */\n  readonly applicationSubstituteProviderRefs: readonly string[];\n  readonly environmentPrimaryProviderRef: string | null;\n  /** The environment override's `whenUnavailable` refs. Same semantics as the application's. */\n  readonly environmentSubstituteProviderRefs: readonly string[];\n  readonly providerRuntimeArtifact: ProviderRuntimeArtifactEvidenceMetadata | null;\n}\n"]}

package/dist/esm/external-providers/operations/provider-operation-executor.backend.service.d.ts

@@ -0,0 +1,256 @@
+/**
+ * `ProviderOperationExecutorBackendService` — the ONE door through which an application executes a
+ * provider-declared operation (S3a, #331; plan D4).
+ *
+ * A custom backend service names a provider and an operation; everything between that and the wire
+ * lives here: resolving the provider's runtime contract, loading its catalogue on demand and
+ * memoizing it, validating the caller's input against the operation's own schema, compiling the
+ * request, resolving identity through the shared access port, executing under the provider's rate
+ * budget and semantics, and parsing the answer.
+ *
+ * ## What it deliberately does NOT do
+ *
+ * - **It does not resolve secrets.** `HttpApiProviderAccessResolver` does, over the provider
+ *   registry — the same port the ETL lane uses. When #329 makes that registry the COMPOSED one, a
+ *   package-shipped provider's key arrives here with no edit. A second secret path would be a
+ *   second thing to get wrong.
+ * - **It does not decide IDENTITY.** Whose account a call spends, and on whose behalf, is the
+ *   connection target the resolver is handed; a delegated target is served or refused THERE. This
+ *   read "it does not implement `USER_DELEGATED` … the resolver refuses it by name today" until
+ *   #333, which retired that mode for the two-axis `ExternalProvider_ConnectionShape` and lifted
+ *   the refusal — neither change reached this class, which is the point of asking the port.
+ * - **It does not page.** `pagination` on an operation is a hint the caller reads.
+ * - **It does not AUDIT — yet, and this is the one gap worth stating loudly.** The seam is built
+ *   and called on every outbound call (`ProviderOperationAuditResolver`, the lazily-resolved thunk
+ *   this repository uses for the same job in the HTTP-API repository), but the
+ *   `CoreAuditableEventType` member and the audit-logs method behind it belong to S3b, which the
+ *   plan's seam table requires to agree the event NAMES with S5a before either commits. So the
+ *   emission point exists and answers nothing until S3b writes the sink. That is a real hole, not
+ *   a design: an application calling a vendor on a user's behalf must leave a trail, and until
+ *   S3b lands it leaves none.
+ *
+ * ## Bound by FACTORY, not by decoration
+ *
+ * This class carried "Not `@injectable`, on purpose" and deferred registration to the slice that
+ * needed it injected. That slice arrived: an application scopes a provider from the scraped
+ * catalogue and a service of its own calls an operation, which it cannot do while the only door is a
+ * class nothing binds.
+ *
+ * It is still a plain class. `SAAS_SERVICE_TYPES.ProviderOperationExecutorService` is bound with
+ * `toDynamicValue`, so the lane's classes stay constructible with `new` — the repositories registry
+ * builds its own resolver that way — and no injection token has to be invented for
+ * `ConnectionTargetAuthorizationPort`, which nothing binds and whose absence is deliberately
+ * fail-closed.
+ *
+ * Singleton, because this memoizes a catalogue per `(providerRef, domain)` and holds one rate-limit
+ * window per provider. A transient would reload the catalogue per call and give every caller its own
+ * window, which is not a rate limit.
+ */
+import type { ExternalProvider_ConnectionTarget } from '@wildo-ai/external-connectors-models';
+import type { ProviderOperationExecute, ProviderRestOperation, ProviderRestOperationCatalogue } from '@wildo-ai/external-connectors-models';
+import type { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas';
+import type { HttpApiFetchLike } from '../../base-classes/services/repositories/http-api/http-api-transport.backend';
+import type { HttpApiProviderAccessResolver } from '../../base-classes/services/repositories/http-api/http-api-provider-access.backend';
+import type { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service';
+/** Why an operation could not be reached at all — each member names a different remedy. */
+export declare enum ProviderOperationLookupFailureKind {
+    /** The provider declares no `rest` runtime contract; it may not even be a REST provider. */
+    PROVIDER_NOT_REST = "PROVIDER_NOT_REST",
+    /** The provider is REST but declares no operation catalogue — nothing to call. */
+    PROVIDER_DECLARES_NO_OPERATIONS = "PROVIDER_DECLARES_NO_OPERATIONS",
+    /** The catalogue loaded and holds no operation by that id. */
+    OPERATION_NOT_IN_CATALOGUE = "OPERATION_NOT_IN_CATALOGUE",
+    /** The provider's own loader threw. */
+    CATALOGUE_LOAD_FAILED = "CATALOGUE_LOAD_FAILED"
+}
+export declare class ProviderOperationLookupError extends Error {
+    readonly detail: {
+        readonly kind: ProviderOperationLookupFailureKind;
+        readonly providerRef: string;
+        readonly operationId?: string;
+        readonly cause?: unknown;
+    };
+    constructor(message: string, detail: {
+        readonly kind: ProviderOperationLookupFailureKind;
+        readonly providerRef: string;
+        readonly operationId?: string;
+        readonly cause?: unknown;
+    });
+}
+/**
+ * The audit seam — structural and lazily resolved, the pattern this repository already uses for
+ * the HTTP-API read-through trail. The executor never holds the audit service, only a thunk; an
+ * absent binding means no emission, and an emission failure never fails the call it observes.
+ *
+ * TODO(assurance-control): WILDO.AUDIT.ATTRIBUTION — an outbound provider call made on a user's
+ * behalf must be recorded with the real initiating user. The sink behind this thunk is S3b's, and
+ * the `CoreAuditableEventType` member it writes must be agreed with S5a first (plan seam table).
+ */
+/**
+ * The credential store, reached the way the audit sink is — through a thunk, so this class takes no
+ * dependency on `security/connected-accounts` and a unit harness needs neither.
+ *
+ * Optional in both directions: a host that binds no store records nothing, and an APPLICATION-owned
+ * call has no row to stamp.
+ */
+export type ProviderCredentialUseRecorder = () => {
+    recordCredentialUse?: (use: {
+        organizationId: string;
+        providerRef: string;
+        secretSlug: string;
+        source: string;
+        credentialId?: string;
+        outcome?: {
+            accepted: boolean;
+            providerMessage?: string;
+        };
+    }) => Promise<void>;
+} | undefined;
+export type ProviderOperationAuditResolver = () => {
+    logProviderOperationCall?: (data: ProviderOperationAuditRecord, requestExecutionContext?: ExecutionContext<any>) => Promise<void>;
+} | undefined;
+/**
+ * What one outbound provider call is worth recording. Ids and shape only, never a payload.
+ *
+ * assurance-control: WILDO.ACCESS.AUTHORIZATION_DECISION_AUDIT — records WHOSE third-party account an
+ * outbound call spent, which the initiator's own ids cannot answer once one execution may spend
+ * several.
+ */
+export interface ProviderOperationAuditRecord {
+    providerRef: string;
+    operationId: string;
+    domain: string;
+    method: string;
+    /** READ or WRITE, as the operation declares it — the axis a reviewer filters on first. */
+    classification: string;
+    /**
+     * WHOSE ACCOUNT the call spent — the first question of any provider incident, and one the
+     * initiator's own ids cannot answer.
+     *
+     * Distinct from `organizationId` below, which records the tenant the REQUEST was scoped to. Those
+     * are the same tenant in the ordinary case and different ones exactly where it matters: a user
+     * action fanning out to every organization that user belongs to spends N accounts under one
+     * initiating scope. A trail carrying only the initiator's organization would attribute every one
+     * of those calls to the wrong tenant.
+     */
+    connectionOwnerScope: string;
+    connectionOwnerId?: string;
+    connectionDelegation: string;
+    /** HTTP status of the answer; absent when the call never got one. */
+    status?: number;
+    /** Present when the call failed, naming the failure kind rather than the vendor's prose. */
+    failureKind?: string;
+    initiatorUserId?: string;
+    organizationId?: string;
+    executionType?: string;
+}
+export interface ProviderOperationCallInput {
+    providerRef: string;
+    operationId: string;
+    /**
+     * The catalogue DOMAIN the operation belongs to, when the caller knows it. Passing it lets the
+     * provider's loader answer one domain instead of every one — the whole point of the lazy loader
+     * — and is what keeps a vendor with hundreds of operations from evaluating them all to run one.
+     * Absent, the whole catalogue is loaded once and memoized.
+     */
+    domain?: string;
+    input?: Readonly<Record<string, unknown>>;
+    /**
+     * WHOSE ACCOUNT this call spends. Defaults to the floor — the application's own, acting as itself.
+     *
+     * On the CALL rather than on the provider or the execution context, because one execution may
+     * legitimately spend several tenants' accounts: a single user action pushing a message to every
+     * organization that user belongs to issues N calls with N targets and one initiator. The context
+     * still decides whether the execution MAY act for each named owner.
+     */
+    connection?: ExternalProvider_ConnectionTarget;
+}
+export interface ProviderOperationCallResult<TOutput = unknown> {
+    status: number;
+    /** The payload at the operation's `resultPath`, parsed through `outputSchema` when declared. */
+    output: TOutput;
+    /** The whole parsed body, before `resultPath` and before validation. */
+    rawBody: unknown;
+    operation: ProviderRestOperation;
+}
+export declare class ProviderOperationExecutorBackendService {
+    private readonly externalProvidersRegistry;
+    private readonly providerAccessResolver;
+    private readonly fetchImpl?;
+    private readonly auditResolver?;
+    private readonly warn;
+    private readonly credentialUseRecorder?;
+    /** Per `(providerRef, domain)`, exactly as the loader's contract promises. */
+    private readonly catalogueCache;
+    /** Per provider, so the rate window survives between calls. */
+    private readonly clientCache;
+    /** Deprecation is logged once per operation, never per call — a log nobody can read is not a warning. */
+    private readonly deprecationsWarned;
+    constructor(externalProvidersRegistry: ExternalProvidersRegistryBackendService, providerAccessResolver: HttpApiProviderAccessResolver, fetchImpl?: HttpApiFetchLike, auditResolver?: ProviderOperationAuditResolver, warn?: (message: string) => void, credentialUseRecorder?: ProviderCredentialUseRecorder);
+    /**
+     * The provider's `rest` runtime contract, refusing by NAME when there is none: every branch here
+     * is an authoring or configuration gap someone must fix, never a transient.
+     */
+    private restContractOf;
+    /**
+     * Load a catalogue once per `(providerRef, domain)`.
+     *
+     * The PROMISE is cached rather than its value, so two concurrent calls for the same pair share
+     * one load instead of racing two — and a failed load is EVICTED, because caching a rejection
+     * would make one bad moment permanent for the process's whole life.
+     */
+    loadCatalogue(providerRef: string, domain?: string): Promise<ProviderRestOperationCatalogue>;
+    /** One operation, by id. */
+    resolveOperation(providerRef: string, operationId: string, domain?: string): Promise<ProviderRestOperation>;
+    private clientFor;
+    /** Execute one declared operation end to end. */
+    /**
+     * Adapt this executor to what a GENERATED TYPED CLIENT takes.
+     *
+     * `createSlackClient(execute)` wants `(providerRef, operationId, input) => Promise<unknown>` — no
+     * execution context and no connection target, because the generated package must carry no runtime
+     * dependency on the engine and cannot name either type. Those two are exactly what a call needs and
+     * what only the caller knows, so they are bound HERE, once, by the service that has them:
+     *
+     * ```ts
+     * const slack = createSlackClient(this.providerOperations.forExecution(executionContext));
+     * await slack.slackPostMessage({ channel: 'C123', text: 'Deal closed' });
+     * ```
+     *
+     * The `connection` default is the floor — the application's own account, acting as itself —
+     * matching {@link execute}. A caller spending a tenant's account passes the target explicitly, and
+     * the context still decides whether the execution may act for that owner.
+     *
+     * Returns `output` rather than the whole envelope, because that is what the typed client's
+     * `Promise<unknown>` promises. A caller who needs the status or the raw body calls {@link execute}
+     * directly — the adapter is ergonomics, never a narrower door.
+     */
+    forExecution(executionContext: ExecutionContext<any>, defaults?: {
+        readonly connection?: ExternalProvider_ConnectionTarget;
+        readonly domain?: string;
+    }): ProviderOperationExecute;
+    execute<TOutput = unknown>(call: ProviderOperationCallInput, executionContext: ExecutionContext<any>): Promise<ProviderOperationCallResult<TOutput>>;
+    /**
+     * Record one outbound call. Fire-and-forget and feature-detected, per the house pattern: a
+     * partial audit binding or a store failure must never fail the call it observes.
+     *
+     * Called on BOTH the success and the failure path deliberately — a refused or failed outbound
+     * call is exactly what a reviewer wants to see, and a trail that records only what worked is a
+     * trail that hides the attempts.
+     */
+    /**
+     * Stamp the stored credential with what the provider said. Best-effort, and after the call.
+     *
+     * Fire-and-forget for the same reason the audit emit is: the outbound call has already happened, so
+     * failing the caller because a bookkeeping write did not land would turn a successful integration
+     * into an error. Nothing downstream reads the result, and the store logs its own failures with the
+     * row named.
+     *
+     * Only a tenant's OWN credential has a row. An APPLICATION-owned resolution carries no provenance
+     * and is skipped here rather than filtered later, so the deployment environment can never acquire a
+     * row describing a credential the tenant never set.
+     */
+    private recordCredentialOutcome;
+    private record;
+}
+//# sourceMappingURL=provider-operation-executor.backend.service.d.ts.map

package/dist/esm/external-providers/operations/provider-operation-executor.backend.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-operation-executor.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/operations/provider-operation-executor.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAOH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,KAAK,EAAE,wBAAwB,EAA6B,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAEvK,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2FAA2F,CAAC;AAClI,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iGAAiG,CAAC;AAErJ,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAK1J,2FAA2F;AAC3F,oBAAY,kCAAkC;IAC5C,4FAA4F;IAC5F,iBAAiB,sBAAsB;IACvC,kFAAkF;IAClF,+BAA+B,oCAAoC;IACnE,8DAA8D;IAC9D,0BAA0B,+BAA+B;IACzD,uCAAuC;IACvC,qBAAqB,0BAA0B;CAChD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;aAGnC,MAAM,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;QAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;KAC1B;gBAND,OAAO,EAAE,MAAM,EACC,MAAM,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;QAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;KAC1B;CAKJ;AAED;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG,MAAM;IAChD,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE;YAAE,QAAQ,EAAE,OAAO,CAAC;YAAC,eAAe,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3D,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB,GAAG,SAAS,CAAC;AAEd,MAAM,MAAM,8BAA8B,GAAG,MAAM;IACjD,wBAAwB,CAAC,EAAE,CACzB,IAAI,EAAE,4BAA4B,EAClC,uBAAuB,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,GAAG,SAAS,CAAC;AAEd;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,iCAAiC,CAAC;CAChD;AAED,MAAM,WAAW,2BAA2B,CAAC,OAAO,GAAG,OAAO;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,MAAM,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,qBAAqB,CAAC;CAClC;AAED,qBAAa,uCAAuC;IAShD,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC1C,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAKrB,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAjBzC,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8D;IAC7F,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6C;IACzE,yGAAyG;IACzG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;gBAGrC,yBAAyB,EAAE,uCAAuC,EAClE,sBAAsB,EAAE,6BAA6B,EACrD,SAAS,CAAC,EAAE,gBAAgB,EAC5B,aAAa,CAAC,EAAE,8BAA8B,EAC9C,IAAI,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAsB,EAKjD,qBAAqB,CAAC,EAAE,6BAA6B;IAGxE;;;OAGG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;;OAMG;IACU,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC;IA0CzG,4BAA4B;IACf,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAexH,OAAO,CAAC,SAAS;IAUjB,iDAAiD;IACjD;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,YAAY,CACjB,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,iCAAiC,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/F,wBAAwB;IAgBd,OAAO,CAAC,OAAO,GAAG,OAAO,EACpC,IAAI,EAAE,0BAA0B,EAChC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAuEhD;;;;;;;OAOG;IACH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,uBAAuB;IAwB/B,OAAO,CAAC,MAAM;CA6Bf"}