@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

package/dist/esm/external-providers/services/backend-provider-registry.backend.service.js

@@ -5,74 +5,61 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 import { injectable } from 'inversify';
-import { EngineBackendProviderRegistry, composeBackendProviders, } from '@wildo-ai/external-connectors-private/backend';
-import { ExternalProvider_ExchangeProtocol_Kind } from '@wildo-ai/external-connectors-models';
-const BACKEND_PROTOCOL_TO_EXTERNAL_KIND = {
-    REST_API: ExternalProvider_ExchangeProtocol_Kind.REST_API,
-    WEBHOOK_ORIGINATOR: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,
-    LLM_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,
-    EMAIL_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,
-    SSO_OAUTH2: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,
-    BILLING_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,
-    SMS_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,
-    // Multimodal generation (artifact-modality axis). IMAGE_PROVIDER is wired;
-    // AUDIO/VIDEO are reserved (protocol resolvable, but no runtime-contract arm
-    // and no provider serves them yet).
-    IMAGE_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,
-    AUDIO_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.AUDIO_PROVIDER,
-    VIDEO_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.VIDEO_PROVIDER,
-    // Text → vector embeddings (RAG plan DL2) — its own protocol kind, wired like IMAGE_PROVIDER.
-    EMBEDDINGS_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,
-    // Document bytes → text (OCR) — its own protocol kind, wired like EMBEDDINGS_PROVIDER. Without
-    // this row `getRuntimeContract(ref, DOCUMENT_EXTRACTION_PROVIDER)` is structurally `undefined`,
-    // so a provider could declare the transport and the engine could never resolve it.
-    DOCUMENT_EXTRACTION_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,
-    // Coding agents over the Agent Client Protocol — a session transport, not a
-    // request/response one, and its own engine capability slot.
-    AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,
-};
-const EXTERNAL_KIND_TO_BACKEND_PROTOCOL = new Map(Object.entries(BACKEND_PROTOCOL_TO_EXTERNAL_KIND).map(([protocol, kind]) => [kind, protocol]));
+import { composeBackendProviders, } from '@wildo-ai/external-connectors-private/backend-runtime';
+// The protocol→kind hand map that stood here (`BACKEND_PROTOCOL_TO_EXTERNAL_KIND`, a THIRD enumeration
+// of the protocol population) was retired 2026-09-05 (#327): a runtime contract's `kind` IS the exchange
+// kind now, and `composeBackendProviders` refuses a binding whose authoring key disagrees with it.
+/**
+ * The registry a host serves before `initialize` runs: EMPTY, and composed rather than hand-built so
+ * it is the same shape every consumer expects.
+ *
+ * It used to be the engine's eagerly composed catalogue, and that single default field initialiser is
+ * what put twenty-two provider modules — six of them pulling an `@ai-sdk/*` client at module top
+ * level — into every backend, minion and worker boot graph before any filtering could happen (audit
+ * finding BE-1). Providers now arrive through `resolveBackendProviderRegistry`, which imports only
+ * the refs the process declared, so nothing about this module evaluates a provider.
+ */
+const EMPTY_BACKEND_PROVIDER_REGISTRY = composeBackendProviders({ modules: new Map() });
 let BackendProviderRegistryBackendService = class BackendProviderRegistryBackendService {
-    registry = EngineBackendProviderRegistry;
+    registry = EMPTY_BACKEND_PROVIDER_REGISTRY;
     /** @wildo_source:part:start saas.external-providers.backend-provider-registry.runtime-filter facet:layer:backend facet:family:provider-registry */
     /**
-     * Initialize the backend provider registry that all downstream services
-     * (auth, billing, notifications, …) will resolve through.
+     * Adopt the registry a host RESOLVED, and re-check it against what that host declared.
      *
-     * This is the seam that decides which providers a backend host can actually
-     * reach at runtime. A provider authored only in a NON-backend scope (e.g.
-     * `providers.scopes.frontendServices.<app>`) never enters this registry, so
-     * any backend feature keyed on it (billing, transactional email, server-side
-     * LLM calls) resolves nothing and fails at startup. Author the provider under
-     * `providers.scopes.backend` in `./wildo.saas.config.ts` AND declare a
-     * matching backend contribution (`runtimeTargets: [{ kind: 'backend' }]`) so
-     * `wildo config sync` lists its ref in the generated provider-runtime
-     * artifact — otherwise it is filtered out here.
+     * This is the seam that decides which providers a backend host can actually reach at runtime. A
+     * provider authored only in a NON-backend scope (e.g. `providers.scopes.frontendServices.<app>`)
+     * never enters this registry, so any backend feature keyed on it (billing, transactional email,
+     * server-side LLM calls) resolves nothing and fails at startup. Author the provider under
+     * `providers.scopes.backend` in `./wildo.saas.config.ts` so `wildo config sync` lists its ref in
+     * the generated provider-runtime artifact — otherwise it is filtered out here.
      *
      * Composition model:
      *
-     * 1. The **catalog** is the union of engine-shipped providers
-     *    (`EngineBackendProviderRegistry`) and any application-contributed
-     *    providers (passed in via `registry`). This is what is *available*.
-     * 2. The **runtime artifact** (`providerRuntime`, generated by
-     *    `wildo config sync` and imported by the application bootstrap)
-     *    declares which providers this specific backend process is *allowed*
-     *    to expose, scoped by the authored `providers.scopes.backend`.
-     * 3. The active registry is the catalog filtered to the artifact's
-     *    `providerRefs`. Any ref claimed by the artifact but missing from the
-     *    catalog is a deployment-time error and fails startup loudly — there
-     *    is no silent fallback to the unfiltered catalog.
+     * 1. The **runtime artifact** (`providerRuntime`, generated by `wildo config sync` and imported by
+     *    the application bootstrap) declares which providers this specific process may expose.
+     * 2. `resolveBackendProviderRegistry` LOADS exactly those refs — an application-supplied module
+     *    first, then the engine's on-demand map, then a dynamic import of the package the artifact
+     *    names — and hands the composed result here. Nothing a process did not declare is imported,
+     *    which is the whole point: a worker that declares one email provider evaluates one provider.
+     * 3. This method re-filters that registry to the artifact's `providerRefs` and REFUSES if any ref
+     *    is still missing. That is not redundant with the loader: the loader deliberately does not
+     *    throw, so this stays the one place a deployment gap is reported, and it reports ALL of them at
+     *    once rather than the first import that failed.
+     *
+     * When `providerRuntime` is `undefined` no filtering is applied — the host declared no topology, so
+     * there is nothing to filter against, and the loader will have handed over the whole engine
+     * catalogue (platform applications that initialize their config later).
      *
-     * When `providerRuntime` is `undefined`, no filtering is applied and the
-     * full catalog is exposed (legacy / pre-materialization callers, and
-     * platform applications that initialize their config later).
+     * `unresolvedReasons` carries the loader's per-ref explanation into the refusal below, so an
+     * operator is told WHY a ref did not resolve (no package declares it / the import threw / the
+     * package exports no fragment) instead of only that it was absent.
      */
-    initialize(registry = EngineBackendProviderRegistry, providerRuntime) {
+    initialize(registry, providerRuntime, unresolvedReasons) {
         if (!providerRuntime) {
             this.registry = registry;
             return;
         }
-        this.registry = filterRegistryByProviderRuntime(registry, providerRuntime);
+        this.registry = filterRegistryByProviderRuntime(registry, providerRuntime, unresolvedReasons);
     }
     /** @wildo_source:part:end saas.external-providers.backend-provider-registry.runtime-filter */
     getRegistry() {
@@ -88,18 +75,13 @@ let BackendProviderRegistryBackendService = class BackendProviderRegistryBackend
         return [...this.registry.modules.values()].filter((provider) => (this.getProtocolBinding(provider.metadata.ref, protocolKind) !== undefined));
     }
     getProtocolBinding(providerRef, protocolKind) {
-        const backendProtocol = EXTERNAL_KIND_TO_BACKEND_PROTOCOL.get(protocolKind);
-        if (!backendProtocol)
-            return undefined;
-        return this.getProvider(providerRef)?.protocols.find((protocol) => protocol.protocol === backendProtocol);
+        return this.getProvider(providerRef)?.protocols.find((binding) => binding.runtimeContract.kind === protocolKind);
     }
     getRuntimeContract(providerRef, protocolKind) {
         return this.getProtocolBinding(providerRef, protocolKind)?.runtimeContract;
     }
     getProtocolKinds(providerRef) {
-        return (this.getProvider(providerRef)?.protocols ?? [])
-            .map((protocol) => BACKEND_PROTOCOL_TO_EXTERNAL_KIND[protocol.protocol])
-            .filter((kind) => Boolean(kind));
+        return (this.getProvider(providerRef)?.protocols ?? []).map((binding) => binding.runtimeContract.kind);
     }
 };
 BackendProviderRegistryBackendService = __decorate([
@@ -136,7 +118,7 @@ export { BackendProviderRegistryBackendService };
  * from this runtime, which is exactly what Step 1 of the provider
  * migration is supposed to make impossible to ignore.
  */
-function filterRegistryByProviderRuntime(registry, providerRuntime) {
+function filterRegistryByProviderRuntime(registry, providerRuntime, unresolvedReasons) {
     const authoredRefs = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0
         ? providerRuntime.providerRefs
         : Object.keys(providerRuntime.scope?.providers ?? {});
@@ -153,8 +135,12 @@ function filterRegistryByProviderRuntime(registry, providerRuntime) {
         filteredModules.set(brandedRef, module);
     }
     if (missingRefs.length > 0) {
+        const explained = missingRefs.sort().map((ref) => {
+            const reason = unresolvedReasons?.get(ref);
+            return reason ? `${ref} — ${reason}` : ref;
+        });
         throw new Error(`[BackendProviderRegistry] generated provider runtime claims providers `
-            + `not present in the composed backend catalog: [${missingRefs.sort().join(', ')}]. `
+            + `not present in the composed backend catalog:\n  - ${explained.join('\n  - ')}\n`
             + `This is a discovery gap — verify that each provider's contributing package `
             + `is reachable from the backend runtime owner and re-run \`wildo config sync\`.`);
     }

package/dist/esm/external-providers/services/backend-provider-registry.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend-provider-registry.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/backend-provider-registry.backend.service.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,GAKxB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAG9F,MAAM,iCAAiC,GAA2D;IAChG,QAAQ,EAAE,sCAAsC,CAAC,QAAQ;IACzD,kBAAkB,EAAE,sCAAsC,CAAC,kBAAkB;IAC7E,YAAY,EAAE,sCAAsC,CAAC,YAAY;IACjE,cAAc,EAAE,sCAAsC,CAAC,cAAc;IACrE,UAAU,EAAE,sCAAsC,CAAC,UAAU;IAC7D,gBAAgB,EAAE,sCAAsC,CAAC,gBAAgB;IACzE,YAAY,EAAE,sCAAsC,CAAC,YAAY;IACjE,2EAA2E;IAC3E,6EAA6E;IAC7E,oCAAoC;IACpC,cAAc,EAAE,sCAAsC,CAAC,cAAc;IACrE,cAAc,EAAE,sCAAsC,CAAC,cAAc;IACrE,cAAc,EAAE,sCAAsC,CAAC,cAAc;IACrE,8FAA8F;IAC9F,mBAAmB,EAAE,sCAAsC,CAAC,mBAAmB;IAC/E,+FAA+F;IAC/F,gGAAgG;IAChG,mFAAmF;IACnF,4BAA4B,EAAE,sCAAsC,CAAC,4BAA4B;IACjG,4EAA4E;IAC5E,4DAA4D;IAC5D,qBAAqB,EAAE,sCAAsC,CAAC,qBAAqB;CACpF,CAAC;AAEF,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAC/C,MAAM,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAC9F,CAAC;AAGK,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IACxC,QAAQ,GAA4B,6BAA6B,CAAC;IAE1E,mJAAmJ;IACnJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,UAAU,CACR,WAAoC,6BAA6B,EACjE,eAAyC;QAEzC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC7E,CAAC;IACD,8FAA8F;IAE9F,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB,CAAC,YAAoD;QAC3E,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC9D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,SAAS,CAC3E,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,MAAM,eAAe,GAAG,iCAAiC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QACvC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC;IAC5G,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,eAAe,CAAC;IAC7E,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;aACpD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,iCAAiC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACvE,MAAM,CAAC,CAAC,IAAI,EAAkD,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,CAAC;CACF,CAAA;AAxFY,qCAAqC;IADjD,UAAU,EAAE;GACA,qCAAqC,CAwFjD;;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAS,+BAA+B,CACtC,QAAiC,EACjC,eAAwC;IAExC,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC1F,CAAC,CAAC,eAAe,CAAC,YAAY;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAG7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqC,CAAC;IACrE,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,GAAiB,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,wEAAwE;cACtE,iDAAiD,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;cACnF,6EAA6E;cAC7E,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,OAAO,uBAAuB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import { injectable } from 'inversify';\nimport {\n  EngineBackendProviderRegistry,\n  composeBackendProviders,\n  type BackendProviderModule,\n  type BackendProviderRegistry,\n  type BackendProtocolBinding,\n  type ProviderProtocolRuntimeContract,\n} from '@wildo-ai/external-connectors-private/backend';\nimport { ExternalProvider_ExchangeProtocol_Kind } from '@wildo-ai/external-connectors-models';\nimport type { ProviderRuntimeArtifact } from '~wildo-backend-lib/config/models/provider-runtime-artifact.backend.schemas';\n\nconst BACKEND_PROTOCOL_TO_EXTERNAL_KIND: Record<string, ExternalProvider_ExchangeProtocol_Kind> = {\n  REST_API: ExternalProvider_ExchangeProtocol_Kind.REST_API,\n  WEBHOOK_ORIGINATOR: ExternalProvider_ExchangeProtocol_Kind.WEBHOOK_ORIGINATOR,\n  LLM_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.LLM_PROVIDER,\n  EMAIL_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.EMAIL_PROVIDER,\n  SSO_OAUTH2: ExternalProvider_ExchangeProtocol_Kind.SSO_OAUTH2,\n  BILLING_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.BILLING_PROVIDER,\n  SMS_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.SMS_PROVIDER,\n  // Multimodal generation (artifact-modality axis). IMAGE_PROVIDER is wired;\n  // AUDIO/VIDEO are reserved (protocol resolvable, but no runtime-contract arm\n  // and no provider serves them yet).\n  IMAGE_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.IMAGE_PROVIDER,\n  AUDIO_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.AUDIO_PROVIDER,\n  VIDEO_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.VIDEO_PROVIDER,\n  // Text → vector embeddings (RAG plan DL2) — its own protocol kind, wired like IMAGE_PROVIDER.\n  EMBEDDINGS_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n  // Document bytes → text (OCR) — its own protocol kind, wired like EMBEDDINGS_PROVIDER. Without\n  // this row `getRuntimeContract(ref, DOCUMENT_EXTRACTION_PROVIDER)` is structurally `undefined`,\n  // so a provider could declare the transport and the engine could never resolve it.\n  DOCUMENT_EXTRACTION_PROVIDER: ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n  // Coding agents over the Agent Client Protocol — a session transport, not a\n  // request/response one, and its own engine capability slot.\n  AGENT_CLIENT_PROTOCOL: ExternalProvider_ExchangeProtocol_Kind.AGENT_CLIENT_PROTOCOL,\n};\n\nconst EXTERNAL_KIND_TO_BACKEND_PROTOCOL = new Map(\n  Object.entries(BACKEND_PROTOCOL_TO_EXTERNAL_KIND).map(([protocol, kind]) => [kind, protocol]),\n);\n\n@injectable()\nexport class BackendProviderRegistryBackendService {\n  private registry: BackendProviderRegistry = EngineBackendProviderRegistry;\n\n  /** @wildo_source:part:start saas.external-providers.backend-provider-registry.runtime-filter facet:layer:backend facet:family:provider-registry */\n  /**\n   * Initialize the backend provider registry that all downstream services\n   * (auth, billing, notifications, …) will resolve through.\n   *\n   * This is the seam that decides which providers a backend host can actually\n   * reach at runtime. A provider authored only in a NON-backend scope (e.g.\n   * `providers.scopes.frontendServices.<app>`) never enters this registry, so\n   * any backend feature keyed on it (billing, transactional email, server-side\n   * LLM calls) resolves nothing and fails at startup. Author the provider under\n   * `providers.scopes.backend` in `./wildo.saas.config.ts` AND declare a\n   * matching backend contribution (`runtimeTargets: [{ kind: 'backend' }]`) so\n   * `wildo config sync` lists its ref in the generated provider-runtime\n   * artifact — otherwise it is filtered out here.\n   *\n   * Composition model:\n   *\n   * 1. The **catalog** is the union of engine-shipped providers\n   *    (`EngineBackendProviderRegistry`) and any application-contributed\n   *    providers (passed in via `registry`). This is what is *available*.\n   * 2. The **runtime artifact** (`providerRuntime`, generated by\n   *    `wildo config sync` and imported by the application bootstrap)\n   *    declares which providers this specific backend process is *allowed*\n   *    to expose, scoped by the authored `providers.scopes.backend`.\n   * 3. The active registry is the catalog filtered to the artifact's\n   *    `providerRefs`. Any ref claimed by the artifact but missing from the\n   *    catalog is a deployment-time error and fails startup loudly — there\n   *    is no silent fallback to the unfiltered catalog.\n   *\n   * When `providerRuntime` is `undefined`, no filtering is applied and the\n   * full catalog is exposed (legacy / pre-materialization callers, and\n   * platform applications that initialize their config later).\n   */\n  initialize(\n    registry: BackendProviderRegistry = EngineBackendProviderRegistry,\n    providerRuntime?: ProviderRuntimeArtifact,\n  ): void {\n    if (!providerRuntime) {\n      this.registry = registry;\n      return;\n    }\n\n    this.registry = filterRegistryByProviderRuntime(registry, providerRuntime);\n  }\n  /** @wildo_source:part:end saas.external-providers.backend-provider-registry.runtime-filter */\n\n  getRegistry(): BackendProviderRegistry {\n    return this.registry;\n  }\n\n  getProvider(providerRef: string): BackendProviderModule | undefined {\n    return this.registry.getProviderByRef(providerRef as never);\n  }\n\n  hasProvider(providerRef: string): boolean {\n    return Boolean(this.getProvider(providerRef));\n  }\n\n  getProvidersWithProtocol(protocolKind: ExternalProvider_ExchangeProtocol_Kind): BackendProviderModule[] {\n    return [...this.registry.modules.values()].filter((provider) => (\n      this.getProtocolBinding(provider.metadata.ref, protocolKind) !== undefined\n    ));\n  }\n\n  getProtocolBinding(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): BackendProtocolBinding | undefined {\n    const backendProtocol = EXTERNAL_KIND_TO_BACKEND_PROTOCOL.get(protocolKind);\n    if (!backendProtocol) return undefined;\n    return this.getProvider(providerRef)?.protocols.find((protocol) => protocol.protocol === backendProtocol);\n  }\n\n  getRuntimeContract(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): ProviderProtocolRuntimeContract | undefined {\n    return this.getProtocolBinding(providerRef, protocolKind)?.runtimeContract;\n  }\n\n  getProtocolKinds(providerRef: string): ExternalProvider_ExchangeProtocol_Kind[] {\n    return (this.getProvider(providerRef)?.protocols ?? [])\n      .map((protocol) => BACKEND_PROTOCOL_TO_EXTERNAL_KIND[protocol.protocol])\n      .filter((kind): kind is ExternalProvider_ExchangeProtocol_Kind => Boolean(kind));\n  }\n}\n\n/**\n * Build a restricted registry containing only the providers authored for\n * this backend process by the materialized `providerRuntime` artifact.\n *\n * The authored ref set comes from the artifact in this priority order:\n *\n *   1. `providerRuntime.providerRefs` — the canonical projection emitted by\n *      `materializeSaasProviderRuntimeArtifacts`.\n *   2. Keys of `providerRuntime.scope.providers` — fallback for older\n *      artifacts written before `providerRefs` was added.\n *\n * Post-2026-05-10 invariant: after the Option-B fix landed in\n * `selectScopedProviderRuntimeArtifact` (canonical) and the per-host\n * projection sites in minion / Node-worker startup (`selectMinionProviderRuntimeScope`,\n * `selectWorkerProviderRuntimeScope`), the canonical path ALWAYS\n * populates `providerRefs` from the per-host projected scope. The\n * fallback branch is unreachable for any artifact produced by the\n * current CLI sync; it only fires for legacy generated modules\n * predating that projection fix. Kept as defense-in-depth — the\n * schema marks `providerRefs` optional and would let a hand-crafted\n * artifact omit the field.\n *\n * If a ref is claimed by the artifact but missing from the composed\n * catalog, startup fails with a single error naming every missing ref.\n * This is deployment-correctness, not defensive coding: the artifact is\n * generated from `wildo.saas.config.ts` after companion-export discovery,\n * so any miss means the contributing package is not actually reachable\n * from this runtime, which is exactly what Step 1 of the provider\n * migration is supposed to make impossible to ignore.\n */\nfunction filterRegistryByProviderRuntime(\n  registry: BackendProviderRegistry,\n  providerRuntime: ProviderRuntimeArtifact,\n): BackendProviderRegistry {\n  const authoredRefs = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0\n    ? providerRuntime.providerRefs\n    : Object.keys(providerRuntime.scope?.providers ?? {});\n\n  const authoredRefSet = new Set(authoredRefs);\n\n  type BrandedRef = Parameters<typeof registry.getProviderByRef>[0];\n  const filteredModules = new Map<BrandedRef, BackendProviderModule>();\n  const missingRefs: string[] = [];\n\n  for (const ref of authoredRefSet) {\n    const brandedRef = ref as BrandedRef;\n    const module = registry.getProviderByRef(brandedRef);\n    if (!module) {\n      missingRefs.push(ref);\n      continue;\n    }\n    filteredModules.set(brandedRef, module);\n  }\n\n  if (missingRefs.length > 0) {\n    throw new Error(\n      `[BackendProviderRegistry] generated provider runtime claims providers `\n      + `not present in the composed backend catalog: [${missingRefs.sort().join(', ')}]. `\n      + `This is a discovery gap — verify that each provider's contributing package `\n      + `is reachable from the backend runtime owner and re-run \\`wildo config sync\\`.`,\n    );\n  }\n\n  return composeBackendProviders({ modules: filteredModules });\n}\n"]}
+{"version":3,"file":"backend-provider-registry.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/backend-provider-registry.backend.service.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,uBAAuB,GAKxB,MAAM,uDAAuD,CAAC;AAI/D,uGAAuG;AACvG,yGAAyG;AACzG,mGAAmG;AAEnG;;;;;;;;;GASG;AACH,MAAM,+BAA+B,GAA4B,uBAAuB,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAG1G,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IACxC,QAAQ,GAA4B,+BAA+B,CAAC;IAE5E,mJAAmJ;IACnJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,UAAU,CACR,QAAiC,EACjC,eAAyC,EACzC,iBAA+C;QAE/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAChG,CAAC;IACD,8FAA8F;IAE9F,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB,CAAC,YAAoD;QAC3E,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC9D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,SAAS,CAC3E,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACnH,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,eAAe,CAAC;IAC7E,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC;CACF,CAAA;AApFY,qCAAqC;IADjD,UAAU,EAAE;GACA,qCAAqC,CAoFjD;;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAS,+BAA+B,CACtC,QAAiC,EACjC,eAAwC,EACxC,iBAA+C;IAE/C,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC1F,CAAC,CAAC,eAAe,CAAC,YAAY;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAG7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqC,CAAC;IACrE,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,GAAiB,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,wEAAwE;cACtE,qDAAqD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;cACjF,6EAA6E;cAC7E,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,OAAO,uBAAuB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import { injectable } from 'inversify';\nimport {\n  composeBackendProviders,\n  type BackendProviderModule,\n  type BackendProviderRegistry,\n  type BackendProtocolBinding,\n  type ProviderProtocolRuntimeContract,\n} from '@wildo-ai/external-connectors-private/backend-runtime';\nimport { ExternalProvider_ExchangeProtocol_Kind } from '@wildo-ai/external-connectors-models';\nimport type { ProviderRuntimeArtifact } from '~wildo-backend-lib/config/models/provider-runtime-artifact.backend.schemas';\n\n// The protocol→kind hand map that stood here (`BACKEND_PROTOCOL_TO_EXTERNAL_KIND`, a THIRD enumeration\n// of the protocol population) was retired 2026-09-05 (#327): a runtime contract's `kind` IS the exchange\n// kind now, and `composeBackendProviders` refuses a binding whose authoring key disagrees with it.\n\n/**\n * The registry a host serves before `initialize` runs: EMPTY, and composed rather than hand-built so\n * it is the same shape every consumer expects.\n *\n * It used to be the engine's eagerly composed catalogue, and that single default field initialiser is\n * what put twenty-two provider modules — six of them pulling an `@ai-sdk/*` client at module top\n * level — into every backend, minion and worker boot graph before any filtering could happen (audit\n * finding BE-1). Providers now arrive through `resolveBackendProviderRegistry`, which imports only\n * the refs the process declared, so nothing about this module evaluates a provider.\n */\nconst EMPTY_BACKEND_PROVIDER_REGISTRY: BackendProviderRegistry = composeBackendProviders({ modules: new Map() });\n\n@injectable()\nexport class BackendProviderRegistryBackendService {\n  private registry: BackendProviderRegistry = EMPTY_BACKEND_PROVIDER_REGISTRY;\n\n  /** @wildo_source:part:start saas.external-providers.backend-provider-registry.runtime-filter facet:layer:backend facet:family:provider-registry */\n  /**\n   * Adopt the registry a host RESOLVED, and re-check it against what that host declared.\n   *\n   * This is the seam that decides which providers a backend host can actually reach at runtime. A\n   * provider authored only in a NON-backend scope (e.g. `providers.scopes.frontendServices.<app>`)\n   * never enters this registry, so any backend feature keyed on it (billing, transactional email,\n   * server-side LLM calls) resolves nothing and fails at startup. Author the provider under\n   * `providers.scopes.backend` in `./wildo.saas.config.ts` so `wildo config sync` lists its ref in\n   * the generated provider-runtime artifact — otherwise it is filtered out here.\n   *\n   * Composition model:\n   *\n   * 1. The **runtime artifact** (`providerRuntime`, generated by `wildo config sync` and imported by\n   *    the application bootstrap) declares which providers this specific process may expose.\n   * 2. `resolveBackendProviderRegistry` LOADS exactly those refs — an application-supplied module\n   *    first, then the engine's on-demand map, then a dynamic import of the package the artifact\n   *    names — and hands the composed result here. Nothing a process did not declare is imported,\n   *    which is the whole point: a worker that declares one email provider evaluates one provider.\n   * 3. This method re-filters that registry to the artifact's `providerRefs` and REFUSES if any ref\n   *    is still missing. That is not redundant with the loader: the loader deliberately does not\n   *    throw, so this stays the one place a deployment gap is reported, and it reports ALL of them at\n   *    once rather than the first import that failed.\n   *\n   * When `providerRuntime` is `undefined` no filtering is applied — the host declared no topology, so\n   * there is nothing to filter against, and the loader will have handed over the whole engine\n   * catalogue (platform applications that initialize their config later).\n   *\n   * `unresolvedReasons` carries the loader's per-ref explanation into the refusal below, so an\n   * operator is told WHY a ref did not resolve (no package declares it / the import threw / the\n   * package exports no fragment) instead of only that it was absent.\n   */\n  initialize(\n    registry: BackendProviderRegistry,\n    providerRuntime?: ProviderRuntimeArtifact,\n    unresolvedReasons?: ReadonlyMap<string, string>,\n  ): void {\n    if (!providerRuntime) {\n      this.registry = registry;\n      return;\n    }\n\n    this.registry = filterRegistryByProviderRuntime(registry, providerRuntime, unresolvedReasons);\n  }\n  /** @wildo_source:part:end saas.external-providers.backend-provider-registry.runtime-filter */\n\n  getRegistry(): BackendProviderRegistry {\n    return this.registry;\n  }\n\n  getProvider(providerRef: string): BackendProviderModule | undefined {\n    return this.registry.getProviderByRef(providerRef as never);\n  }\n\n  hasProvider(providerRef: string): boolean {\n    return Boolean(this.getProvider(providerRef));\n  }\n\n  getProvidersWithProtocol(protocolKind: ExternalProvider_ExchangeProtocol_Kind): BackendProviderModule[] {\n    return [...this.registry.modules.values()].filter((provider) => (\n      this.getProtocolBinding(provider.metadata.ref, protocolKind) !== undefined\n    ));\n  }\n\n  getProtocolBinding(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): BackendProtocolBinding | undefined {\n    return this.getProvider(providerRef)?.protocols.find((binding) => binding.runtimeContract.kind === protocolKind);\n  }\n\n  getRuntimeContract(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): ProviderProtocolRuntimeContract | undefined {\n    return this.getProtocolBinding(providerRef, protocolKind)?.runtimeContract;\n  }\n\n  getProtocolKinds(providerRef: string): ExternalProvider_ExchangeProtocol_Kind[] {\n    return (this.getProvider(providerRef)?.protocols ?? []).map((binding) => binding.runtimeContract.kind);\n  }\n}\n\n/**\n * Build a restricted registry containing only the providers authored for\n * this backend process by the materialized `providerRuntime` artifact.\n *\n * The authored ref set comes from the artifact in this priority order:\n *\n *   1. `providerRuntime.providerRefs` — the canonical projection emitted by\n *      `materializeSaasProviderRuntimeArtifacts`.\n *   2. Keys of `providerRuntime.scope.providers` — fallback for older\n *      artifacts written before `providerRefs` was added.\n *\n * Post-2026-05-10 invariant: after the Option-B fix landed in\n * `selectScopedProviderRuntimeArtifact` (canonical) and the per-host\n * projection sites in minion / Node-worker startup (`selectMinionProviderRuntimeScope`,\n * `selectWorkerProviderRuntimeScope`), the canonical path ALWAYS\n * populates `providerRefs` from the per-host projected scope. The\n * fallback branch is unreachable for any artifact produced by the\n * current CLI sync; it only fires for legacy generated modules\n * predating that projection fix. Kept as defense-in-depth — the\n * schema marks `providerRefs` optional and would let a hand-crafted\n * artifact omit the field.\n *\n * If a ref is claimed by the artifact but missing from the composed\n * catalog, startup fails with a single error naming every missing ref.\n * This is deployment-correctness, not defensive coding: the artifact is\n * generated from `wildo.saas.config.ts` after companion-export discovery,\n * so any miss means the contributing package is not actually reachable\n * from this runtime, which is exactly what Step 1 of the provider\n * migration is supposed to make impossible to ignore.\n */\nfunction filterRegistryByProviderRuntime(\n  registry: BackendProviderRegistry,\n  providerRuntime: ProviderRuntimeArtifact,\n  unresolvedReasons?: ReadonlyMap<string, string>,\n): BackendProviderRegistry {\n  const authoredRefs = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0\n    ? providerRuntime.providerRefs\n    : Object.keys(providerRuntime.scope?.providers ?? {});\n\n  const authoredRefSet = new Set(authoredRefs);\n\n  type BrandedRef = Parameters<typeof registry.getProviderByRef>[0];\n  const filteredModules = new Map<BrandedRef, BackendProviderModule>();\n  const missingRefs: string[] = [];\n\n  for (const ref of authoredRefSet) {\n    const brandedRef = ref as BrandedRef;\n    const module = registry.getProviderByRef(brandedRef);\n    if (!module) {\n      missingRefs.push(ref);\n      continue;\n    }\n    filteredModules.set(brandedRef, module);\n  }\n\n  if (missingRefs.length > 0) {\n    const explained = missingRefs.sort().map((ref) => {\n      const reason = unresolvedReasons?.get(ref);\n      return reason ? `${ref} — ${reason}` : ref;\n    });\n    throw new Error(\n      `[BackendProviderRegistry] generated provider runtime claims providers `\n      + `not present in the composed backend catalog:\\n  - ${explained.join('\\n  - ')}\\n`\n      + `This is a discovery gap — verify that each provider's contributing package `\n      + `is reachable from the backend runtime owner and re-run \\`wildo config sync\\`.`,\n    );\n  }\n\n  return composeBackendProviders({ modules: filteredModules });\n}\n"]}

package/dist/esm/external-providers/services/document-extraction.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-extraction.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/document-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAQL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gCAAgC,EAIhC,KAAK,oDAAoD,EAC1D,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AAEtJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,6CAA6C,QAAmB,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC,SAAU,CAAC;AAK9D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,oBAAY,8BAA8B;IACxC;;;;OAIG;IACH,mBAAmB,wBAAwB;IAC3C;;;;OAIG;IACH,oBAAoB,yBAAyB;CAC9C;AAED,kFAAkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,YAAY,EAAE,8BAA8B;IAE5D,kGAAkG;aAClF,UAAU,CAAC,EAAE,MAAM;gBAHnB,YAAY,EAAE,8BAA8B,EAC5D,OAAO,EAAE,MAAM;IACf,kGAAkG;IAClF,UAAU,CAAC,EAAE,MAAM;CAKtC;AAED,gEAAgE;AAChE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,gCAAgC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,MAAM,MAAM,mCAAmC,GAC3C;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,iCAAiC,CAAA;CAAE,GAChE;IACE,UAAU,EAAE,KAAK,CAAC;IAClB;;;;OAIG;IACH,MAAM,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEN,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,gCAAgC,CAAC;IAChD,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqBD,qBACa,gCAAgC;IAKzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAIxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAGhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAjBpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,yBAAyB,EAAE,uCAAuC,EAElE,uBAAuB,EAAE,qCAAqC,EAI9D,cAAc,CAAC,EAAE,kBAAkB,EAGnC,gBAAgB,CAAC,EAAE,uBAAuB;IAM7D;;;;;;;;;OASG;IACI,cAAc,CAAC,aAAa,EAAE,gCAAgC,GAAG,mCAAmC;IAsE3G;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,iCAAiC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1G;;;;;;;;;;;;;;;;;;;;;OAqBG;IACU,mBAAmB,CAC9B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,oDAAoD,CAAC;IA8EhE;;;;;;;OAOG;YACW,iBAAiB;IA8B/B,wEAAwE;YAC1D,UAAU;IA6GxB;;;;OAIG;YACW,mBAAmB;CAyFlC"}
+{"version":3,"file":"document-extraction.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/document-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAQL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gCAAgC,EAIhC,KAAK,oDAAoD,EAE1D,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AAEtJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,6CAA6C,QAAmB,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC,SAAU,CAAC;AAK9D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,oBAAY,8BAA8B;IACxC;;;;OAIG;IACH,mBAAmB,wBAAwB;IAC3C;;;;OAIG;IACH,oBAAoB,yBAAyB;CAC9C;AAED,kFAAkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,YAAY,EAAE,8BAA8B;IAE5D,kGAAkG;aAClF,UAAU,CAAC,EAAE,MAAM;gBAHnB,YAAY,EAAE,8BAA8B,EAC5D,OAAO,EAAE,MAAM;IACf,kGAAkG;IAClF,UAAU,CAAC,EAAE,MAAM;CAKtC;AAED,gEAAgE;AAChE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,gCAAgC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,MAAM,MAAM,mCAAmC,GAC3C;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,iCAAiC,CAAA;CAAE,GAChE;IACE,UAAU,EAAE,KAAK,CAAC;IAClB;;;;OAIG;IACH,MAAM,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEN,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,gCAAgC,CAAC;IAChD,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqBD,qBACa,gCAAgC;IAKzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAIxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAGhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAjBpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,yBAAyB,EAAE,uCAAuC,EAElE,uBAAuB,EAAE,qCAAqC,EAI9D,cAAc,CAAC,EAAE,kBAAkB,EAGnC,gBAAgB,CAAC,EAAE,uBAAuB;IAM7D;;;;;;;;;OASG;IACI,cAAc,CAAC,aAAa,EAAE,gCAAgC,GAAG,mCAAmC;IAsE3G;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,iCAAiC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1G;;;;;;;;;;;;;;;;;;;;;OAqBG;IACU,mBAAmB,CAC9B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,oDAAoD,CAAC;IA8EhE;;;;;;;OAOG;YACW,iBAAiB;IA8B/B,wEAAwE;YAC1D,UAAU;IA6GxB;;;;OAIG;YACW,mBAAmB;CAyFlC"}

package/dist/esm/external-providers/services/document-extraction.backend.service.js

@@ -58,7 +58,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { injectable, inject, optional } from 'inversify';
 import { EngineCapability, ErrorType, ErrorCustomMessageReference, AgentCallOutcome, AgentCallTraceKind, AgentTraceabilityLevel, } from '@wildo-ai/saas-models';
-import { DocumentExtractionProvider_OperationKey, ExternalProvider_ExchangeProtocol_Kind, resolveDocumentExtractionModelForApplicability, } from '@wildo-ai/external-connectors-models';
+import { DocumentExtractionProvider_OperationKey, ExternalProvider_ExchangeProtocol_Kind, resolveDocumentExtractionModelForApplicability, ProviderProtocolRuntimeKind, } from '@wildo-ai/external-connectors-models';
 import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
 import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
 /**
@@ -162,7 +162,7 @@ let DocumentExtractionBackendService = class DocumentExtractionBackendService {
             return { configured: false, reason: 'no_provider_for_capability' };
         }
         const runtimeContract = this.externalProvidersRegistry.getProviderRuntimeContract(providerRef, ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER);
-        if (runtimeContract?.kind !== 'document-extraction') {
+        if (runtimeContract?.kind !== ProviderProtocolRuntimeKind.DOCUMENT_EXTRACTION) {
             throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
                 customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
                 context: {
@@ -285,7 +285,7 @@ let DocumentExtractionBackendService = class DocumentExtractionBackendService {
         // read the contract through the CONFIG registry, and this confirms the RUNTIME registry still
         // agrees. Unreachable unless the registry mutated mid-call; named rather than assumed.
         const contract = this.backendProviderRegistry.getRuntimeContract(binding.providerRef, protocolKind);
-        if (contract?.kind !== 'document-extraction') {
+        if (contract?.kind !== ProviderProtocolRuntimeKind.DOCUMENT_EXTRACTION) {
             throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
                 customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
                 context: {

package/dist/esm/external-providers/services/document-extraction.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"document-extraction.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/document-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,2BAA2B,EAC3B,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,GAIvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,uCAAuC,EACvC,sCAAsC,EACtC,8CAA8C,GAE/C,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAI9G;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,OAAO,CAAC;AAE9D,wGAAwG;AACxG,MAAM,wCAAwC,GAAG,CAAC,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,4BAA4B,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,8BAaX;AAbD,WAAY,8BAA8B;IACxC;;;;OAIG;IACH,6EAA2C,CAAA;IAC3C;;;;OAIG;IACH,+EAA6C,CAAA;AAC/C,CAAC,EAbW,8BAA8B,KAA9B,8BAA8B,QAazC;AAED,kFAAkF;AAClF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAE9B;IAGA;IAJlB,YACkB,YAA4C,EAC5D,OAAe;IACf,kGAAkG;IAClF,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,iBAAY,GAAZ,YAAY,CAAgC;QAG5C,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAkEM,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;IAKxB;IAEA;IAEA;IAEA;IAIA;IAGA;IAjBT,QAAQ,CAA+D;IAEjF,YAEmB,MAAqB,EAErB,YAAwC,EAExC,yBAAkE,EAElE,uBAA8D,EAI9D,cAAmC,EAGnC,gBAA0C;QAb1C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,8BAAyB,GAAzB,yBAAyB,CAAyC;QAElE,4BAAuB,GAAvB,uBAAuB,CAAuC;QAI9D,mBAAc,GAAd,cAAc,CAAqB;QAGnC,qBAAgB,GAAhB,gBAAgB,CAA0B;QAE3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,kCAAkC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;;;OASG;IACI,cAAc,CAAC,aAA+C;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,qCAAqC,CACtF,gBAAgB,CAAC,sBAAsB,CACxC,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAC/E,WAAW,EACX,sCAAsC,CAAC,4BAA4B,CACpE,CAAC;QACF,IAAI,eAAe,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,yGAAyG;iBAC3I;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,yBAAyB,CAAC,0CAA0C,CAAC,WAAW,CAAC,CAAC;QAClH,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,uCAAuC,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,sFAAsF;iBACxH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,8CAA8C,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAClG,6FAA6F;QAC7F,uFAAuF;QACvF,oEAAoE;QACpE,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,OAAO,EAAE,kEAAkE,aAAa,kBAAkB,WAAW,IAAI;iBAC1H;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE;gBACP,aAAa;gBACb,WAAW;gBACX,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,kBAAkB,EAAE,UAAU,CAAC,KAAK,CAAC,kBAAkB;gBACvD,gBAAgB,EAAE,IAAI,CAAC,GAAG,CACxB,eAAe,CAAC,gBAAgB,IAAI,6CAA6C,EACjF,6CAA6C,CAC9C;gBACD,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,wCAAwC;gBACpF,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,YAAY,EAAE,eAAe,CAAC,YAAY;gBAC1C,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,UAAU;gBACnD,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;aAClD;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAA0C,EAAE,QAAgB,EAAE,UAAkB;QAC9F,OAAO,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAC/G,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,KAAK,CAAC,mBAAmB,CAC9B,OAAmC;QAEnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,OAAO,EAAE,qFAAqF;0BAC1F,2HAA2H;iBAChI;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAEzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;gBAClE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gBAC9D,OAAO,EAAE;oBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;oBAC3C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,OAAO,EAAE,qFAAqF;0BAC1F,2FAA2F;iBAChG;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,sCAAsC,CAAC,4BAA4B,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY;oBACZ,OAAO,EAAE,uHAAuH;iBACjI;aACF,CAAC,CAAC;QACL,CAAC;QACD,iGAAiG;QACjG,8FAA8F;QAC9F,uFAAuF;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACpG,IAAI,QAAQ,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,kFAAkF;iBAC5F;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACtE,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBAClC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,iBAAiB,CAC7B,OAA0C,EAC1C,MAAc,EACd,OAAmC;QAEnC,IAAI,SAA8C,CAAC;QACnD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;uBAC1C,KAAK,CAAC,YAAY,KAAK,8BAA8B,CAAC,oBAAoB,EAAE,CAAC;oBAChF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,oEAAoE,EAAE;oBAClF,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,oGAAoG;QACpG,MAAM,SAAS,IAAI,IAAI,uBAAuB,CAC5C,8BAA8B,CAAC,oBAAoB,EACnD,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,UAAU,CACtB,OAA0C,EAC1C,MAAc,EACd,OAAmC;QAEnC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QAEjG,+FAA+F;QAC/F,+FAA+F;QAC/F,gGAAgG;QAChG,6FAA6F;QAC7F,6FAA6F;QAC7F,kDAAkD;QAClD,MAAM,WAAW,GAAG,QAAQ,OAAO,CAAC,QAAQ,WAAW,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE7F,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAClG,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,GAAG,MAAM,EAAE;iBAC/D;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE;oBAC7D,wFAAwF;oBACxF,uFAAuF;oBACvF,oBAAoB,EAAE,KAAK;iBAC5B,CAAC;gBACF,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,cAAc,EAAE,CAAC;YACxB,0FAA0F;YAC1F,MAAM,IAAI,uBAAuB,CAC/B,8BAA8B,CAAC,oBAAoB,EACnD,iCAAiC,OAAO,CAAC,WAAW,qBAAqB;kBACrE,CAAC,cAAc,YAAY,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CACxF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,oEAAoE;YACpE,+FAA+F;YAC/F,8FAA8F;YAC9F,wFAAwF;YACxF,gEAAgE;YAChE,gEAAgE;YAChE,yDAAyD;YACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YAC7E,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YAC/E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC;YAC7C,MAAM,YAAY,GAAG,iBAAiB,IAAI,mBAAmB,IAAI,aAAa;gBAC5E,CAAC,CAAC,8BAA8B,CAAC,oBAAoB;gBACrD,CAAC,CAAC,8BAA8B,CAAC,mBAAmB,CAAC;YACvD,4FAA4F;YAC5F,uDAAuD;YACvD,MAAM,IAAI,uBAAuB,CAC/B,YAAY,EACZ,iCAAiC,OAAO,CAAC,WAAW,mBAAmB,QAAQ,CAAC,MAAM,GAAG,EACzF,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,MAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuC,CAAC;QACzE,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,wFAAwF;YACxF,MAAM,IAAI,uBAAuB,CAC/B,8BAA8B,CAAC,oBAAoB,EACnD,iCAAiC,OAAO,CAAC,WAAW,4CAA4C;kBAC5F,CAAC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,2FAA2F;YAC3F,2FAA2F;YAC3F,4EAA4E;YAC5E,MAAM,IAAI,uBAAuB,CAC/B,8BAA8B,CAAC,oBAAoB,EACnD,iCAAiC,OAAO,CAAC,WAAW,4CAA4C,CACjG,CAAC;QACJ,CAAC;QAED,8FAA8F;QAC9F,4FAA4F;QAC5F,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAExG,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC9B,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;YACtE,KAAK,EAAE;gBACL,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,eAAe,KAAK,QAAQ;oBACxD,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE;oBACvD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,cAAc,KAAK,QAAQ;oBACvD,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE;oBACzD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,mBAAmB,CAC/B,OAAmC,EACnC,OAA0C,EAC1C,IAQC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC;QAC1E,IAAI,KAAK,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAClD,MAAM,KAAK,GAAmB;YAC5B,QAAQ,EAAE,mCAAmC;YAC7C,0FAA0F;YAC1F,0FAA0F;YAC1F,yFAAyF;YACzF,4FAA4F;YAC5F,yFAAyF;YACzF,IAAI,EAAE,kBAAkB,CAAC,UAAU;YACnC,QAAQ,EAAE,OAAO,CAAC,WAAW;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,wEAAwE;YACxE,KAAK,EAAE;gBACL,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC;oBACE,MAAM,EAAE;wBACN,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,cAAc,EAAE,IAAI,CAAC,cAAc;wBACnC,gFAAgF;wBAChF,+EAA+E;wBAC/E,mFAAmF;wBACnF,0EAA0E;wBAC1E,iDAAiD;wBACjD,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnG;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa;gBACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,KAAK,EAAE;oBACL,qFAAqF;oBACrF,wFAAwF;oBACxF,qFAAqF;oBACrF,qFAAqF;oBACrF,uFAAuF;oBACvF,sFAAsF;oBACtF,4BAA4B;oBAC5B,kBAAkB,EAAE,IAAI;iBACzB;aACF;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK,YAAY,uBAAuB;wBAClD,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;wBAChE,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK;4BAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;4BACxD,CAAC,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE;iBAClE;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE;gBACjE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AAzcY,gCAAgC;IAD5C,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IAGzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,WAAA,QAAQ,EAAE,CAAA;IAEV,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,QAAQ,EAAE,CAAA;+CAVoB,0BAA0B;GAPhD,gCAAgC,CAyc5C","sourcesContent":["/**\n * Document-extraction execution service — the ONE seam through which the engine turns document\n * BYTES into text using an external provider (OCR).\n *\n * Its only caller is `FileTextExtractionBackendService`, which owns the CHOICE between this\n * provider path and the local `pdfjs-dist` text-layer path. That split is deliberate: this\n * service knows how to talk to a provider and nothing about fallbacks, and the file service knows\n * about fallbacks and nothing about HTTP.\n *\n * ## Selection is by APPLICABILITY CLASS, never by model id (the standing model-selection rule)\n *\n * A caller names a {@link DocumentExtraction_Applicability} class; this service resolves\n *  1. the PROVIDER — the application's `EngineCapability.AI_DOCUMENT_EXTRACTION` selection\n *     (`defineSaaSProviders` → `selection[AI_DOCUMENT_EXTRACTION].primary`), independent of the\n *     chat and embeddings providers by construction;\n *  2. the MODEL — `resolveDocumentExtractionModelForApplicability` against the framework catalog.\n *\n * ## Why a direct HTTPS call instead of the AI SDK\n *\n * Every sibling provider seam in this package hands an API key to an `@ai-sdk/*` client factory.\n * This one cannot: **`@ai-sdk/mistral@4.0.12` has ZERO OCR support** — the package exports no\n * `ocr` symbol and no client method reaching `POST /v1/ocr`, because the AI SDK models language,\n * embedding and image models and document extraction is none of them. So the request is built\n * here from the provider's declared `baseUrl`, `endpointPath` and `apiKey` header shape.\n *\n * That is a cost, and it is worth naming what it buys back: the contract declares the route and\n * the auth header, so a second provider in this family is a module edit rather than a change here.\n *\n * ## Failure posture — THREE outcomes, not two, and the third is the whole point\n *\n * A caller must be able to distinguish \"these bytes are not a readable document\" from \"I could\n * not ask\". Collapsing them is not a tidiness issue: `RagIngestionBackendService` deletes a\n * field's entire chunk set when an ingestion pass yields no text, so reporting a provider OUTAGE\n * as an unreadable document would silently destroy a live, already-embedded corpus and report\n * success. {@link DocumentExtractionFailureClass} carries that distinction, and\n * `FileTextExtractionBackendService` branches on it.\n *\n * ## Observability\n *\n * Every physical extraction emits ONE agent-call trace through the standard sink chain. Its\n * `input` and `output` are SUMMARIES — mime type, byte length, page count, character count. The\n * document bytes and the extracted text never enter a trace, a log, or an error `context` at any\n * verbosity: an uploaded contract is application content, not telemetry. The API key is read\n * through the standard provider-secret path and is never logged, never placed in an error\n * context, and never included in a diagnostic dump of the request.\n */\n\nimport { injectable, inject, optional } from 'inversify';\nimport {\n  EngineCapability,\n  ErrorType,\n  ErrorCustomMessageReference,\n  AgentCallOutcome,\n  AgentCallTraceKind,\n  AgentTraceabilityLevel,\n  type AgentCallTrace,\n  type AgentCallTraceSink,\n  type AgentTraceabilityPolicy,\n} from '@wildo-ai/saas-models';\nimport {\n  DocumentExtraction_Applicability,\n  DocumentExtractionProvider_OperationKey,\n  ExternalProvider_ExchangeProtocol_Kind,\n  resolveDocumentExtractionModelForApplicability,\n  type DocumentExtractionProvider_ExtractDocumentTextOutput,\n} from '@wildo-ai/external-connectors-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport type { BackendProviderRegistryBackendService } from '~wildo-backend-lib/external-providers/services/backend-provider-registry.backend.service';\n\n/**\n * Engine-side ceiling on the document bytes sent in one extraction request, applied as\n * `min(provider-declared, engine)` — and UNCONDITIONAL, so a provider that declares no limit\n * (the wired one does not; Mistral publishes none) still cannot produce an unbounded request.\n *\n * 24 MB, chosen from measurement rather than convention. Live probes against `POST /v1/ocr` on\n * 2026-08-27, isolating the body-size axis with one-page documents:\n *   -  8 MB document (10.7 MB encoded body) → HTTP 200 in  4.9 s\n *   - 32 MB document (42.7 MB encoded body) → HTTP 200 in 19.8 s\n * Nothing was refused, so the provider's true maximum is UNESTABLISHED. What the probes DID\n * establish is that latency scales with body size, and 20 s inside a synchronous extraction call\n * is already past the point where the local fallback (240 ms for a 129-page document) is the\n * better answer. So this ceiling exists to bound LATENCY and memory, not to mirror a published\n * limit — because there is no published limit to mirror.\n *\n * Base64 inflates by 4/3, so 24 MB of document is a ~32 MB request body.\n */\nexport const DOCUMENT_EXTRACTION_ENGINE_MAX_DOCUMENT_BYTES = 24 * 1024 * 1024;\n\n/**\n * Wall-clock budget for one extraction request. Measured basis: a 129-page, 994 KB document\n * completed in 4.4 s, and the 32 MB probe took 19.8 s. 120 s leaves generous headroom over both\n * while still guaranteeing the call terminates — an extraction runs inside an ingestion sweep,\n * and a request that hangs forever would stall the sweep rather than merely lose one document.\n */\nexport const DOCUMENT_EXTRACTION_REQUEST_TIMEOUT_MS = 120_000;\n\n/** Attempts per extraction when the provider declares none. See the Mistral module for why 2, not 3. */\nconst DOCUMENT_EXTRACTION_DEFAULT_MAX_ATTEMPTS = 2;\n\n/**\n * The `agentRef` extraction traces carry. Not a registered flows-actors agent — extraction is a\n * protocol-kind execution, not an agent modality — but the trace contract keys analytics spans on\n * `agentRef`, so the engine names its extraction executor stably here.\n */\nexport const DOCUMENT_EXTRACTION_TRACE_AGENT_REF = 'engine:document-extraction';\n\n/**\n * WHY an extraction failed, in the only two senses a caller can act on differently.\n *\n * This is the service's most load-bearing output after the text itself. See the file header: the\n * consequence of confusing the two is corpus deletion, not a misleading log line.\n */\nexport enum DocumentExtractionFailureClass {\n  /**\n   * The provider read the request and judged the DOCUMENT unprocessable — corrupt bytes, an\n   * unsupported format, a password-protected file. PERMANENT: re-sending the same bytes cannot\n   * succeed, so a sweep may safely stop retrying and skip the document.\n   */\n  UNREADABLE_DOCUMENT = 'unreadable_document',\n  /**\n   * The provider could not be reached, refused the credential, throttled, or failed internally —\n   * a network error, a 401/403, a 429, any 5xx, or a timeout. TRANSIENT and, decisively, says\n   * NOTHING about the document. A caller must not conclude anything about the bytes from this.\n   */\n  PROVIDER_UNAVAILABLE = 'provider_unavailable',\n}\n\n/** A failed extraction, classified. Thrown as {@link DocumentExtractionError}. */\nexport class DocumentExtractionError extends Error {\n  constructor(\n    public readonly failureClass: DocumentExtractionFailureClass,\n    message: string,\n    /** Provider HTTP status, when the failure came from a response rather than from the transport. */\n    public readonly httpStatus?: number,\n  ) {\n    super(message);\n    this.name = 'DocumentExtractionError';\n  }\n}\n\n/** The resolved class→provider→model binding for extraction. */\nexport interface DocumentExtractionResolvedBinding {\n  applicability: DocumentExtraction_Applicability;\n  providerRef: string;\n  /** Concrete model id — never authored at a call site. */\n  model: string;\n  /** MIME types the resolved model can process, from its catalog row. */\n  supportedMimeTypes: readonly string[];\n  /** Effective document-byte ceiling: `min(provider-declared, engine ceiling)`. */\n  maxDocumentBytes: number;\n  /** Attempts per call, including the first. */\n  maxAttempts: number;\n  baseUrl: string;\n  endpointPath: string;\n  apiKeyHeaderName: string;\n  apiKeyPrefix: string;\n}\n\n/** Discriminated \"is provider extraction possible here?\" answer. */\nexport type DocumentExtractionBindingResolution =\n  | { configured: true; binding: DocumentExtractionResolvedBinding }\n  | {\n      configured: false;\n      /**\n       * Why nothing is configured. Always the BENIGN shape — no provider fills the capability.\n       * A provider that IS selected but cannot serve THROWS instead, because a misconfiguration\n       * that presented as a deliberate opt-out would never be noticed.\n       */\n      reason: 'no_provider_for_capability';\n    };\n\nexport interface ExtractDocumentTextRequest {\n  /**\n   * The document. A `Buffer` on the request object rather than a field of a Zod-shaped input, so\n   * that no diagnostic path can casually serialize an application's private document — see the\n   * input schema's JSDoc in `document-extraction.external-connectors-models.schemas.ts`.\n   */\n  document: Buffer;\n  mimeType: string;\n  applicability: DocumentExtraction_Applicability;\n  /** Diagnostic correlation only — never sent to the provider. */\n  fileId?: string;\n}\n\n/**\n * The shape of the provider's OCR response that this service reads.\n *\n * spec-cite: https://docs.mistral.ai/api/endpoint/ocr — the 200 response carries `pages` (an array\n * of page objects, each with `markdown`), `model`, and `usage_info` with `pages_processed` and\n * `doc_size_bytes`. Confirmed by live call on 2026-08-27, which returned exactly these keys.\n *\n * Deliberately a LOOSE local shape rather than a strict parse of the whole response: the provider\n * documents many fields this engine does not consume (`images`, `tables`, `hyperlinks`, `header`,\n * `footer`, `dimensions`, `confidence_scores`, `blocks`, `document_annotation`), and rejecting a\n * response for carrying a field we do not read would turn every additive vendor change into an\n * outage. What IS validated is the part we depend on, below.\n */\ninterface DocumentExtractionProviderResponse {\n  pages?: Array<{ markdown?: unknown }>;\n  model?: unknown;\n  usage_info?: { pages_processed?: unknown; doc_size_bytes?: unknown };\n}\n\n@injectable()\nexport class DocumentExtractionBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger)\n    private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n    private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)\n    private readonly externalProvidersRegistry: ExternalProvidersRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.BackendProviderRegistryService)\n    private readonly backendProviderRegistry: BackendProviderRegistryBackendService,\n    // Appended LAST deliberately — DI constructor positions are order-sensitive.\n    @inject(SAAS_SERVICE_TYPES.AgentCallTraceSink)\n    @optional()\n    private readonly agentTraceSink?: AgentCallTraceSink,\n    @inject(SAAS_SERVICE_TYPES.AgentTraceabilityPolicy)\n    @optional()\n    private readonly agentTracePolicy?: AgentTraceabilityPolicy,\n  ) {\n    this.logDebug = this.logger.debugByType('DocumentExtractionBackendService');\n    this.logger.setDebugTypeLogging('DocumentExtractionBackendService', false);\n  }\n\n  /**\n   * Resolve the current class→provider→model binding, or report \"not configured\".\n   *\n   * `configured: false` covers exactly the benign absence (no declared provider fills\n   * `AI_DOCUMENT_EXTRACTION`) — an application that ingests only born-digital PDFs may leave the\n   * capability unset on purpose, and the file service falls back to the local library. A provider\n   * that IS selected but cannot serve — no contract, `extractDocumentText` undeclared, model\n   * unresolvable — THROWS a named CONFIGURATION error, because that is an operator mistake and\n   * silence would make it indistinguishable from the deliberate opt-out.\n   */\n  public resolveBinding(applicability: DocumentExtraction_Applicability): DocumentExtractionBindingResolution {\n    const providerRef = this.externalProvidersRegistry.getPrimaryProviderForEngineCapability(\n      EngineCapability.AI_DOCUMENT_EXTRACTION,\n    );\n    if (!providerRef) {\n      return { configured: false, reason: 'no_provider_for_capability' };\n    }\n\n    const runtimeContract = this.externalProvidersRegistry.getProviderRuntimeContract(\n      providerRef,\n      ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n    );\n    if (runtimeContract?.kind !== 'document-extraction') {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef,\n          message: `Provider \"${providerRef}\" is selected for AI_DOCUMENT_EXTRACTION but declares no DOCUMENT_EXTRACTION_PROVIDER runtime contract.`,\n        },\n      });\n    }\n\n    const semanticOperations = this.externalProvidersRegistry.getDocumentExtractionSemanticOperationKeys(providerRef);\n    if (!semanticOperations.includes(DocumentExtractionProvider_OperationKey.EXTRACT_DOCUMENT_TEXT)) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef,\n          message: `Provider \"${providerRef}\"'s document-extraction contract does not declare the extractDocumentText operation.`,\n        },\n      });\n    }\n\n    const resolution = resolveDocumentExtractionModelForApplicability({ applicability, providerRef });\n    // `=== false` rather than `!…`: this compiler configuration narrows the literal-discriminant\n    // union on the explicit comparison but not on the truthiness form (the embeddings seam\n    // measured this; it is copied deliberately rather than re-derived).\n    if (resolution.resolved === false) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef,\n          applicability,\n          failure: resolution.failure,\n          consideredModels: resolution.consideredModels,\n          message: `No document-extraction model resolves for applicability class \"${applicability}\" on provider \"${providerRef}\".`,\n        },\n      });\n    }\n\n    return {\n      configured: true,\n      binding: {\n        applicability,\n        providerRef,\n        model: resolution.model,\n        supportedMimeTypes: resolution.entry.supportedMimeTypes,\n        maxDocumentBytes: Math.min(\n          runtimeContract.maxDocumentBytes ?? DOCUMENT_EXTRACTION_ENGINE_MAX_DOCUMENT_BYTES,\n          DOCUMENT_EXTRACTION_ENGINE_MAX_DOCUMENT_BYTES,\n        ),\n        maxAttempts: runtimeContract.maxAttempts ?? DOCUMENT_EXTRACTION_DEFAULT_MAX_ATTEMPTS,\n        baseUrl: runtimeContract.baseUrl,\n        endpointPath: runtimeContract.endpointPath,\n        apiKeyHeaderName: runtimeContract.apiKey.headerName,\n        apiKeyPrefix: runtimeContract.apiKey.prefix ?? '',\n      },\n    };\n  }\n\n  /**\n   * Whether the resolved binding can process this MIME type and this many bytes, WITHOUT making a\n   * request. Consulted by the file service before any egress: sending a document the model cannot\n   * read spends an egress of application content to learn something the catalog already knew.\n   */\n  public canServe(binding: DocumentExtractionResolvedBinding, mimeType: string, byteLength: number): boolean {\n    return binding.supportedMimeTypes.includes(mimeType.toLowerCase()) && byteLength <= binding.maxDocumentBytes;\n  }\n\n  /**\n   * Extract one document's text through the configured provider.\n   *\n   * assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — this is the ONE egress through\n   * which application DOCUMENTS leave the deployment for an external extraction provider; every\n   * physical call emits an agent-call trace (provider, model, pages, outcome) through the standard\n   * sink chain, so a reviewer can enumerate what was sent and when.\n   * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — only the document bytes reach the\n   * provider: no filename, no row context, no identifiers, no organization or user id. The\n   * document is sent as an inline data URI rather than uploaded to the provider's file store,\n   * which means the provider retains no object of ours to delete (its Files API states a 30-day\n   * retention that an inline request never enters). Observability surfaces receive SUMMARIES only\n   * — the bytes and the extracted text never enter a trace, a log, or an error context.\n   * assurance-control: WILDO.PRIVACY.THIRD_PARTY_PROCESSING — routing documents here makes the\n   * provider a PROCESSOR of application content. It is opt-in by construction: no bytes leave\n   * unless an application selects a provider for `AI_DOCUMENT_EXTRACTION`, and with no selection\n   * the local library serves every extraction with no egress at all.\n   *\n   * Throws {@link DocumentExtractionError} with a {@link DocumentExtractionFailureClass}. See the\n   * file header for why the caller MUST branch on that class rather than treating any failure as\n   * an unreadable document.\n   */\n  public async extractDocumentText(\n    request: ExtractDocumentTextRequest,\n  ): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput> {\n    const resolutionResult = this.resolveBinding(request.applicability);\n    if (!resolutionResult.configured) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          applicability: request.applicability,\n          message: 'extractDocumentText was called with no AI_DOCUMENT_EXTRACTION provider configured. '\n            + 'Callers must consult resolveBinding() first — FileTextExtractionBackendService does, and falls back to the local library.',\n        },\n      });\n    }\n    const binding = resolutionResult.binding;\n\n    if (!this.canServe(binding, request.mimeType, request.document.length)) {\n      throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.VALIDATION,\n        context: {\n          mimeType: request.mimeType,\n          documentByteLength: request.document.length,\n          maxDocumentBytes: binding.maxDocumentBytes,\n          supportedMimeTypes: binding.supportedMimeTypes,\n          message: 'The resolved document-extraction model cannot serve this MIME type or byte length. '\n            + 'Callers must consult canServe() first, which is a pure catalog check and costs no egress.',\n        },\n      });\n    }\n\n    const protocolKind = ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER;\n    const apiKey = this.externalProvidersRegistry.getProviderApiKey(binding.providerRef, protocolKind);\n    if (!apiKey) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef: binding.providerRef,\n          protocolKind,\n          message: 'API key not found for the document-extraction provider. Configure the provider secret in the application environment.',\n        },\n      });\n    }\n    // Read through `backendProviderRegistry` as well, matching the embeddings seam: `resolveBinding`\n    // read the contract through the CONFIG registry, and this confirms the RUNTIME registry still\n    // agrees. Unreachable unless the registry mutated mid-call; named rather than assumed.\n    const contract = this.backendProviderRegistry.getRuntimeContract(binding.providerRef, protocolKind);\n    if (contract?.kind !== 'document-extraction') {\n      throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef: binding.providerRef,\n          message: 'Document-extraction runtime contract vanished between resolution and invocation.',\n        },\n      });\n    }\n\n    const startTime = Date.now();\n    const callTimestamp = new Date(startTime).toISOString();\n    try {\n      const output = await this.invokeWithRetries(binding, apiKey, request);\n      await this.emitExtractionTrace(request, binding, {\n        outcome: AgentCallOutcome.SUCCESS,\n        callTimestamp,\n        startTime,\n        pageCount: output.pageCount,\n        characterCount: output.text.length,\n        usage: output.usage,\n      });\n      return output;\n    } catch (error) {\n      await this.emitExtractionTrace(request, binding, {\n        outcome: AgentCallOutcome.FAILURE,\n        callTimestamp,\n        startTime,\n        error,\n      });\n      throw error;\n    }\n  }\n\n  /**\n   * Attempt the call up to `binding.maxAttempts` times, retrying ONLY\n   * {@link DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE}.\n   *\n   * An `UNREADABLE_DOCUMENT` is never retried, and that asymmetry is the point: the same bytes\n   * will be judged the same way, so a retry spends a page of billed quota to receive the identical\n   * refusal. The classification is what makes the retry policy expressible at all.\n   */\n  private async invokeWithRetries(\n    binding: DocumentExtractionResolvedBinding,\n    apiKey: string,\n    request: ExtractDocumentTextRequest,\n  ): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput> {\n    let lastError: DocumentExtractionError | undefined;\n    for (let attempt = 1; attempt <= Math.max(1, binding.maxAttempts); attempt++) {\n      try {\n        return await this.invokeOnce(binding, apiKey, request);\n      } catch (error) {\n        if (!(error instanceof DocumentExtractionError)\n          || error.failureClass !== DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE) {\n          throw error;\n        }\n        lastError = error;\n        this.logDebug('Document extraction attempt failed with a transient provider fault', {\n          providerRef: binding.providerRef,\n          attempt,\n          maxAttempts: binding.maxAttempts,\n          httpStatus: error.httpStatus,\n        });\n      }\n    }\n    // Unreachable with `maxAttempts >= 1` unless every attempt threw, in which case `lastError` is set.\n    throw lastError ?? new DocumentExtractionError(\n      DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n      'Document extraction exhausted its attempts without producing a result.',\n    );\n  }\n\n  /** One physical HTTPS request against the provider's declared route. */\n  private async invokeOnce(\n    binding: DocumentExtractionResolvedBinding,\n    apiKey: string,\n    request: ExtractDocumentTextRequest,\n  ): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput> {\n    const url = `${binding.baseUrl.replace(/\\/+$/, '')}/${binding.endpointPath.replace(/^\\/+/, '')}`;\n\n    // The document travels as an inline data URI. The provider's document chunk accepts a URL, and\n    // a `data:` URI is the form that keeps the bytes inside THIS request — the alternative (upload\n    // to the provider's file store, then reference the id) would leave an object of ours sitting in\n    // their retention window, and the alternative-alternative (a public URL to our object store)\n    // would require exposing application documents to the internet. Verified working against the\n    // live API on 2026-08-27 for a 129-page document.\n    const documentUrl = `data:${request.mimeType};base64,${request.document.toString('base64')}`;\n\n    const abortController = new AbortController();\n    const timeout = setTimeout(() => abortController.abort(), DOCUMENT_EXTRACTION_REQUEST_TIMEOUT_MS);\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          [binding.apiKeyHeaderName]: `${binding.apiKeyPrefix}${apiKey}`,\n        },\n        body: JSON.stringify({\n          model: binding.model,\n          document: { type: 'document_url', document_url: documentUrl },\n          // Images are not requested: this seam produces TEXT, and asking for base64 images would\n          // multiply the response size by an order of magnitude for bytes nothing here consumes.\n          include_image_base64: false,\n        }),\n        signal: abortController.signal,\n      });\n    } catch (transportError) {\n      // A transport failure — DNS, TCP, TLS, or our own abort. Says nothing about the document.\n      throw new DocumentExtractionError(\n        DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n        `Document-extraction provider \"${binding.providerRef}\" was unreachable: `\n          + (transportError instanceof Error ? transportError.message : String(transportError)),\n      );\n    } finally {\n      clearTimeout(timeout);\n    }\n\n    if (!response.ok) {\n      // The status→class mapping, and every boundary in it is deliberate:\n      //   - 4xx generally means the provider READ our request and refused THIS DOCUMENT → permanent.\n      //   - 401/403 is a CREDENTIAL fault, not a document fault. Classifying it as unreadable would\n      //     make a rotated key look like a corpus of corrupt files, and would silently delete\n      //     chunk sets across every document while the key was wrong.\n      //   - 408/429 are explicitly retryable by their own definition.\n      //   - 5xx is the provider's fault, never the document's.\n      const isCredentialFault = response.status === 401 || response.status === 403;\n      const isThrottleOrTimeout = response.status === 408 || response.status === 429;\n      const isServerFault = response.status >= 500;\n      const failureClass = isCredentialFault || isThrottleOrTimeout || isServerFault\n        ? DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE\n        : DocumentExtractionFailureClass.UNREADABLE_DOCUMENT;\n      // The response BODY is deliberately not carried into the message: a provider error body can\n      // echo request content, and this message reaches logs.\n      throw new DocumentExtractionError(\n        failureClass,\n        `Document-extraction provider \"${binding.providerRef}\" answered HTTP ${response.status}.`,\n        response.status,\n      );\n    }\n\n    let parsed: DocumentExtractionProviderResponse;\n    try {\n      parsed = (await response.json()) as DocumentExtractionProviderResponse;\n    } catch (parseError) {\n      // A 200 whose body is not JSON is the provider misbehaving, not the document being bad.\n      throw new DocumentExtractionError(\n        DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n        `Document-extraction provider \"${binding.providerRef}\" returned a 200 with an unreadable body: `\n          + (parseError instanceof Error ? parseError.message : String(parseError)),\n      );\n    }\n\n    if (!Array.isArray(parsed.pages)) {\n      // Validate the ONE field this engine depends on. A response with no `pages` array is not a\n      // document with no text — it is a contract violation, and treating it as \"this document is\n      // empty\" is precisely how an upstream change would silently empty a corpus.\n      throw new DocumentExtractionError(\n        DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n        `Document-extraction provider \"${binding.providerRef}\" returned a response with no pages array.`,\n      );\n    }\n\n    // Per-page markdown, joined in document order. Non-string page content is skipped rather than\n    // stringified — `String(undefined)` in a retrieval corpus is worse than a shorter document.\n    const pageTexts = parsed.pages.map((page) => (typeof page?.markdown === 'string' ? page.markdown : ''));\n\n    return {\n      text: pageTexts.join('\\n'),\n      pageCount: parsed.pages.length,\n      model: typeof parsed.model === 'string' ? parsed.model : binding.model,\n      usage: {\n        ...(typeof parsed.usage_info?.pages_processed === 'number'\n          ? { pagesProcessed: parsed.usage_info.pages_processed }\n          : {}),\n        ...(typeof parsed.usage_info?.doc_size_bytes === 'number'\n          ? { documentSizeBytes: parsed.usage_info.doc_size_bytes }\n          : {}),\n      },\n    };\n  }\n\n  /**\n   * One trace per physical extraction call — summaries only (file header: the bytes and the\n   * extracted text never enter the trace). Best-effort: a sink failure never turns a successful\n   * extraction into a failed one (the agents-service discipline).\n   */\n  private async emitExtractionTrace(\n    request: ExtractDocumentTextRequest,\n    binding: DocumentExtractionResolvedBinding,\n    call: {\n      outcome: AgentCallOutcome;\n      callTimestamp: string;\n      startTime: number;\n      pageCount?: number;\n      characterCount?: number;\n      usage?: { pagesProcessed?: number; documentSizeBytes?: number };\n      error?: unknown;\n    },\n  ): Promise<void> {\n    const sink = this.agentTraceSink;\n    if (!sink) {\n      return;\n    }\n    const level = this.agentTracePolicy?.level ?? AgentTraceabilityLevel.NONE;\n    if (level === AgentTraceabilityLevel.NONE) {\n      return;\n    }\n    const executionTime = Date.now() - call.startTime;\n    const trace: AgentCallTrace = {\n      agentRef: DOCUMENT_EXTRACTION_TRACE_AGENT_REF,\n      // GENERATION rather than a dedicated kind: extraction has no trace kind of its own today,\n      // and inventing one is a change to the shared observability vocabulary (and to every sink\n      // that switches on it) that this workstream has no evidence to justify. What matters for\n      // correctness — that no document content is emitted — is enforced by the payload below, not\n      // by the kind. Revisit if a sink ever needs to price or aggregate extraction separately.\n      kind: AgentCallTraceKind.GENERATION,\n      provider: binding.providerRef,\n      model: binding.model,\n      callTimestamp: call.callTimestamp,\n      outcome: call.outcome,\n      // Summaries by contract — never the document, never the extracted text.\n      input: {\n        applicability: binding.applicability,\n        mimeType: request.mimeType,\n        documentByteLength: request.document.length,\n        ...(request.fileId !== undefined ? { fileId: request.fileId } : {}),\n      },\n      ...(call.outcome === AgentCallOutcome.SUCCESS\n        ? {\n            output: {\n              pageCount: call.pageCount,\n              characterCount: call.characterCount,\n              // The provider's own billing unit lives in `output`, not in `usage`: the shared\n              // `LLMProvider_UsageSchema` has token dimensions only, and widening it for one\n              // protocol would push a page concept onto every LLM and embedding trace. If a sink\n              // ever needs to price extraction, that is the moment to add the dimension\n              // deliberately — not a side effect of this seam.\n              ...(call.usage?.pagesProcessed !== undefined ? { pagesProcessed: call.usage.pagesProcessed } : {}),\n            },\n          }\n        : {}),\n      context: {\n        callTimestamp: call.callTimestamp,\n        executionTime,\n        finishedAt: new Date().toISOString(),\n        usage: {\n          // TRUE, and the value is reasoned rather than copied. `tokenUsageComplete` means \"no\n          // token dimension THE OPERATION REQUIRES is missing\". An OCR call requires none — it is\n          // billed per page and the provider reports no tokens at all — so the required set is\n          // empty and is vacuously satisfied. Writing `false` here would flag every extraction\n          // trace as incomplete forever for lacking tokens it structurally cannot have, which is\n          // exactly the defect the embeddings arm's operation-aware completeness was written to\n          // avoid, one protocol over.\n          tokenUsageComplete: true,\n        },\n      },\n      ...(call.outcome === AgentCallOutcome.FAILURE\n        ? {\n            error: call.error instanceof DocumentExtractionError\n              ? { name: call.error.failureClass, message: call.error.message }\n              : call.error instanceof Error\n                ? { name: call.error.name, message: call.error.message }\n                : { message: 'Unknown document-extraction invocation error' },\n          }\n        : {}),\n    };\n    try {\n      await sink.recordAgentCall({ trace, level });\n    } catch (sinkError) {\n      this.logDebug('Document-extraction trace sink failed (non-fatal)', {\n        providerRef: binding.providerRef,\n        error: sinkError instanceof Error ? sinkError.message : String(sinkError),\n      });\n    }\n  }\n}\n"]}
+{"version":3,"file":"document-extraction.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/document-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,2BAA2B,EAC3B,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,GAIvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,uCAAuC,EACvC,sCAAsC,EACtC,8CAA8C,EAE9C,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAI9G;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,OAAO,CAAC;AAE9D,wGAAwG;AACxG,MAAM,wCAAwC,GAAG,CAAC,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,4BAA4B,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,CAAN,IAAY,8BAaX;AAbD,WAAY,8BAA8B;IACxC;;;;OAIG;IACH,6EAA2C,CAAA;IAC3C;;;;OAIG;IACH,+EAA6C,CAAA;AAC/C,CAAC,EAbW,8BAA8B,KAA9B,8BAA8B,QAazC;AAED,kFAAkF;AAClF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAE9B;IAGA;IAJlB,YACkB,YAA4C,EAC5D,OAAe;IACf,kGAAkG;IAClF,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,iBAAY,GAAZ,YAAY,CAAgC;QAG5C,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAkEM,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;IAKxB;IAEA;IAEA;IAEA;IAIA;IAGA;IAjBT,QAAQ,CAA+D;IAEjF,YAEmB,MAAqB,EAErB,YAAwC,EAExC,yBAAkE,EAElE,uBAA8D,EAI9D,cAAmC,EAGnC,gBAA0C;QAb1C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,8BAAyB,GAAzB,yBAAyB,CAAyC;QAElE,4BAAuB,GAAvB,uBAAuB,CAAuC;QAI9D,mBAAc,GAAd,cAAc,CAAqB;QAGnC,qBAAgB,GAAhB,gBAAgB,CAA0B;QAE3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,kCAAkC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;;;OASG;IACI,cAAc,CAAC,aAA+C;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,qCAAqC,CACtF,gBAAgB,CAAC,sBAAsB,CACxC,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAC/E,WAAW,EACX,sCAAsC,CAAC,4BAA4B,CACpE,CAAC;QACF,IAAI,eAAe,EAAE,IAAI,KAAK,2BAA2B,CAAC,mBAAmB,EAAE,CAAC;YAC9E,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,yGAAyG;iBAC3I;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,yBAAyB,CAAC,0CAA0C,CAAC,WAAW,CAAC,CAAC;QAClH,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,uCAAuC,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,sFAAsF;iBACxH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,8CAA8C,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAClG,6FAA6F;QAC7F,uFAAuF;QACvF,oEAAoE;QACpE,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,OAAO,EAAE,kEAAkE,aAAa,kBAAkB,WAAW,IAAI;iBAC1H;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE;gBACP,aAAa;gBACb,WAAW;gBACX,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,kBAAkB,EAAE,UAAU,CAAC,KAAK,CAAC,kBAAkB;gBACvD,gBAAgB,EAAE,IAAI,CAAC,GAAG,CACxB,eAAe,CAAC,gBAAgB,IAAI,6CAA6C,EACjF,6CAA6C,CAC9C;gBACD,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,wCAAwC;gBACpF,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,YAAY,EAAE,eAAe,CAAC,YAAY;gBAC1C,gBAAgB,EAAE,eAAe,CAAC,MAAM,CAAC,UAAU;gBACnD,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;aAClD;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAA0C,EAAE,QAAgB,EAAE,UAAkB;QAC9F,OAAO,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAC/G,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,KAAK,CAAC,mBAAmB,CAC9B,OAAmC;QAEnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,OAAO,EAAE,qFAAqF;0BAC1F,2HAA2H;iBAChI;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAEzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;gBAClE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gBAC9D,OAAO,EAAE;oBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;oBAC3C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,OAAO,EAAE,qFAAqF;0BAC1F,2FAA2F;iBAChG;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,sCAAsC,CAAC,4BAA4B,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY;oBACZ,OAAO,EAAE,uHAAuH;iBACjI;aACF,CAAC,CAAC;QACL,CAAC;QACD,iGAAiG;QACjG,8FAA8F;QAC9F,uFAAuF;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACpG,IAAI,QAAQ,EAAE,IAAI,KAAK,2BAA2B,CAAC,mBAAmB,EAAE,CAAC;YACvE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,kFAAkF;iBAC5F;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACtE,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBAClC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,iBAAiB,CAC7B,OAA0C,EAC1C,MAAc,EACd,OAAmC;QAEnC,IAAI,SAA8C,CAAC;QACnD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;uBAC1C,KAAK,CAAC,YAAY,KAAK,8BAA8B,CAAC,oBAAoB,EAAE,CAAC;oBAChF,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,oEAAoE,EAAE;oBAClF,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,oGAAoG;QACpG,MAAM,SAAS,IAAI,IAAI,uBAAuB,CAC5C,8BAA8B,CAAC,oBAAoB,EACnD,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,UAAU,CACtB,OAA0C,EAC1C,MAAc,EACd,OAAmC;QAEnC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QAEjG,+FAA+F;QAC/F,+FAA+F;QAC/F,gGAAgG;QAChG,6FAA6F;QAC7F,6FAA6F;QAC7F,kDAAkD;QAClD,MAAM,WAAW,GAAG,QAAQ,OAAO,CAAC,QAAQ,WAAW,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE7F,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAClG,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,GAAG,MAAM,EAAE;iBAC/D;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE;oBAC7D,wFAAwF;oBACxF,uFAAuF;oBACvF,oBAAoB,EAAE,KAAK;iBAC5B,CAAC;gBACF,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,cAAc,EAAE,CAAC;YACxB,0FAA0F;YAC1F,MAAM,IAAI,uBAAuB,CAC/B,8BAA8B,CAAC,oBAAoB,EACnD,iCAAiC,OAAO,CAAC,WAAW,qBAAqB;kBACrE,CAAC,cAAc,YAAY,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CACxF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,oEAAoE;YACpE,+FAA+F;YAC/F,8FAA8F;YAC9F,wFAAwF;YACxF,gEAAgE;YAChE,gEAAgE;YAChE,yDAAyD;YACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YAC7E,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YAC/E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC;YAC7C,MAAM,YAAY,GAAG,iBAAiB,IAAI,mBAAmB,IAAI,aAAa;gBAC5E,CAAC,CAAC,8BAA8B,CAAC,oBAAoB;gBACrD,CAAC,CAAC,8BAA8B,CAAC,mBAAmB,CAAC;YACvD,4FAA4F;YAC5F,uDAAuD;YACvD,MAAM,IAAI,uBAAuB,CAC/B,YAAY,EACZ,iCAAiC,OAAO,CAAC,WAAW,mBAAmB,QAAQ,CAAC,MAAM,GAAG,EACzF,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,MAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuC,CAAC;QACzE,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,wFAAwF;YACxF,MAAM,IAAI,uBAAuB,CAC/B,8BAA8B,CAAC,oBAAoB,EACnD,iCAAiC,OAAO,CAAC,WAAW,4CAA4C;kBAC5F,CAAC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,2FAA2F;YAC3F,2FAA2F;YAC3F,4EAA4E;YAC5E,MAAM,IAAI,uBAAuB,CAC/B,8BAA8B,CAAC,oBAAoB,EACnD,iCAAiC,OAAO,CAAC,WAAW,4CAA4C,CACjG,CAAC;QACJ,CAAC;QAED,8FAA8F;QAC9F,4FAA4F;QAC5F,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAExG,OAAO;YACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC9B,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;YACtE,KAAK,EAAE;gBACL,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,eAAe,KAAK,QAAQ;oBACxD,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE;oBACvD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,EAAE,cAAc,KAAK,QAAQ;oBACvD,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE;oBACzD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,mBAAmB,CAC/B,OAAmC,EACnC,OAA0C,EAC1C,IAQC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC;QAC1E,IAAI,KAAK,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAClD,MAAM,KAAK,GAAmB;YAC5B,QAAQ,EAAE,mCAAmC;YAC7C,0FAA0F;YAC1F,0FAA0F;YAC1F,yFAAyF;YACzF,4FAA4F;YAC5F,yFAAyF;YACzF,IAAI,EAAE,kBAAkB,CAAC,UAAU;YACnC,QAAQ,EAAE,OAAO,CAAC,WAAW;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,wEAAwE;YACxE,KAAK,EAAE;gBACL,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC;oBACE,MAAM,EAAE;wBACN,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,cAAc,EAAE,IAAI,CAAC,cAAc;wBACnC,gFAAgF;wBAChF,+EAA+E;wBAC/E,mFAAmF;wBACnF,0EAA0E;wBAC1E,iDAAiD;wBACjD,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnG;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa;gBACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,KAAK,EAAE;oBACL,qFAAqF;oBACrF,wFAAwF;oBACxF,qFAAqF;oBACrF,qFAAqF;oBACrF,uFAAuF;oBACvF,sFAAsF;oBACtF,4BAA4B;oBAC5B,kBAAkB,EAAE,IAAI;iBACzB;aACF;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK,YAAY,uBAAuB;wBAClD,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;wBAChE,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK;4BAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;4BACxD,CAAC,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE;iBAClE;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,mDAAmD,EAAE;gBACjE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AAzcY,gCAAgC;IAD5C,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IAGzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,WAAA,QAAQ,EAAE,CAAA;IAEV,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,QAAQ,EAAE,CAAA;+CAVoB,0BAA0B;GAPhD,gCAAgC,CAyc5C","sourcesContent":["/**\n * Document-extraction execution service — the ONE seam through which the engine turns document\n * BYTES into text using an external provider (OCR).\n *\n * Its only caller is `FileTextExtractionBackendService`, which owns the CHOICE between this\n * provider path and the local `pdfjs-dist` text-layer path. That split is deliberate: this\n * service knows how to talk to a provider and nothing about fallbacks, and the file service knows\n * about fallbacks and nothing about HTTP.\n *\n * ## Selection is by APPLICABILITY CLASS, never by model id (the standing model-selection rule)\n *\n * A caller names a {@link DocumentExtraction_Applicability} class; this service resolves\n *  1. the PROVIDER — the application's `EngineCapability.AI_DOCUMENT_EXTRACTION` selection\n *     (`defineSaaSProviders` → `selection[AI_DOCUMENT_EXTRACTION].primary`), independent of the\n *     chat and embeddings providers by construction;\n *  2. the MODEL — `resolveDocumentExtractionModelForApplicability` against the framework catalog.\n *\n * ## Why a direct HTTPS call instead of the AI SDK\n *\n * Every sibling provider seam in this package hands an API key to an `@ai-sdk/*` client factory.\n * This one cannot: **`@ai-sdk/mistral@4.0.12` has ZERO OCR support** — the package exports no\n * `ocr` symbol and no client method reaching `POST /v1/ocr`, because the AI SDK models language,\n * embedding and image models and document extraction is none of them. So the request is built\n * here from the provider's declared `baseUrl`, `endpointPath` and `apiKey` header shape.\n *\n * That is a cost, and it is worth naming what it buys back: the contract declares the route and\n * the auth header, so a second provider in this family is a module edit rather than a change here.\n *\n * ## Failure posture — THREE outcomes, not two, and the third is the whole point\n *\n * A caller must be able to distinguish \"these bytes are not a readable document\" from \"I could\n * not ask\". Collapsing them is not a tidiness issue: `RagIngestionBackendService` deletes a\n * field's entire chunk set when an ingestion pass yields no text, so reporting a provider OUTAGE\n * as an unreadable document would silently destroy a live, already-embedded corpus and report\n * success. {@link DocumentExtractionFailureClass} carries that distinction, and\n * `FileTextExtractionBackendService` branches on it.\n *\n * ## Observability\n *\n * Every physical extraction emits ONE agent-call trace through the standard sink chain. Its\n * `input` and `output` are SUMMARIES — mime type, byte length, page count, character count. The\n * document bytes and the extracted text never enter a trace, a log, or an error `context` at any\n * verbosity: an uploaded contract is application content, not telemetry. The API key is read\n * through the standard provider-secret path and is never logged, never placed in an error\n * context, and never included in a diagnostic dump of the request.\n */\n\nimport { injectable, inject, optional } from 'inversify';\nimport {\n  EngineCapability,\n  ErrorType,\n  ErrorCustomMessageReference,\n  AgentCallOutcome,\n  AgentCallTraceKind,\n  AgentTraceabilityLevel,\n  type AgentCallTrace,\n  type AgentCallTraceSink,\n  type AgentTraceabilityPolicy,\n} from '@wildo-ai/saas-models';\nimport {\n  DocumentExtraction_Applicability,\n  DocumentExtractionProvider_OperationKey,\n  ExternalProvider_ExchangeProtocol_Kind,\n  resolveDocumentExtractionModelForApplicability,\n  type DocumentExtractionProvider_ExtractDocumentTextOutput,\n  ProviderProtocolRuntimeKind,\n} from '@wildo-ai/external-connectors-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport type { BackendProviderRegistryBackendService } from '~wildo-backend-lib/external-providers/services/backend-provider-registry.backend.service';\n\n/**\n * Engine-side ceiling on the document bytes sent in one extraction request, applied as\n * `min(provider-declared, engine)` — and UNCONDITIONAL, so a provider that declares no limit\n * (the wired one does not; Mistral publishes none) still cannot produce an unbounded request.\n *\n * 24 MB, chosen from measurement rather than convention. Live probes against `POST /v1/ocr` on\n * 2026-08-27, isolating the body-size axis with one-page documents:\n *   -  8 MB document (10.7 MB encoded body) → HTTP 200 in  4.9 s\n *   - 32 MB document (42.7 MB encoded body) → HTTP 200 in 19.8 s\n * Nothing was refused, so the provider's true maximum is UNESTABLISHED. What the probes DID\n * establish is that latency scales with body size, and 20 s inside a synchronous extraction call\n * is already past the point where the local fallback (240 ms for a 129-page document) is the\n * better answer. So this ceiling exists to bound LATENCY and memory, not to mirror a published\n * limit — because there is no published limit to mirror.\n *\n * Base64 inflates by 4/3, so 24 MB of document is a ~32 MB request body.\n */\nexport const DOCUMENT_EXTRACTION_ENGINE_MAX_DOCUMENT_BYTES = 24 * 1024 * 1024;\n\n/**\n * Wall-clock budget for one extraction request. Measured basis: a 129-page, 994 KB document\n * completed in 4.4 s, and the 32 MB probe took 19.8 s. 120 s leaves generous headroom over both\n * while still guaranteeing the call terminates — an extraction runs inside an ingestion sweep,\n * and a request that hangs forever would stall the sweep rather than merely lose one document.\n */\nexport const DOCUMENT_EXTRACTION_REQUEST_TIMEOUT_MS = 120_000;\n\n/** Attempts per extraction when the provider declares none. See the Mistral module for why 2, not 3. */\nconst DOCUMENT_EXTRACTION_DEFAULT_MAX_ATTEMPTS = 2;\n\n/**\n * The `agentRef` extraction traces carry. Not a registered flows-actors agent — extraction is a\n * protocol-kind execution, not an agent modality — but the trace contract keys analytics spans on\n * `agentRef`, so the engine names its extraction executor stably here.\n */\nexport const DOCUMENT_EXTRACTION_TRACE_AGENT_REF = 'engine:document-extraction';\n\n/**\n * WHY an extraction failed, in the only two senses a caller can act on differently.\n *\n * This is the service's most load-bearing output after the text itself. See the file header: the\n * consequence of confusing the two is corpus deletion, not a misleading log line.\n */\nexport enum DocumentExtractionFailureClass {\n  /**\n   * The provider read the request and judged the DOCUMENT unprocessable — corrupt bytes, an\n   * unsupported format, a password-protected file. PERMANENT: re-sending the same bytes cannot\n   * succeed, so a sweep may safely stop retrying and skip the document.\n   */\n  UNREADABLE_DOCUMENT = 'unreadable_document',\n  /**\n   * The provider could not be reached, refused the credential, throttled, or failed internally —\n   * a network error, a 401/403, a 429, any 5xx, or a timeout. TRANSIENT and, decisively, says\n   * NOTHING about the document. A caller must not conclude anything about the bytes from this.\n   */\n  PROVIDER_UNAVAILABLE = 'provider_unavailable',\n}\n\n/** A failed extraction, classified. Thrown as {@link DocumentExtractionError}. */\nexport class DocumentExtractionError extends Error {\n  constructor(\n    public readonly failureClass: DocumentExtractionFailureClass,\n    message: string,\n    /** Provider HTTP status, when the failure came from a response rather than from the transport. */\n    public readonly httpStatus?: number,\n  ) {\n    super(message);\n    this.name = 'DocumentExtractionError';\n  }\n}\n\n/** The resolved class→provider→model binding for extraction. */\nexport interface DocumentExtractionResolvedBinding {\n  applicability: DocumentExtraction_Applicability;\n  providerRef: string;\n  /** Concrete model id — never authored at a call site. */\n  model: string;\n  /** MIME types the resolved model can process, from its catalog row. */\n  supportedMimeTypes: readonly string[];\n  /** Effective document-byte ceiling: `min(provider-declared, engine ceiling)`. */\n  maxDocumentBytes: number;\n  /** Attempts per call, including the first. */\n  maxAttempts: number;\n  baseUrl: string;\n  endpointPath: string;\n  apiKeyHeaderName: string;\n  apiKeyPrefix: string;\n}\n\n/** Discriminated \"is provider extraction possible here?\" answer. */\nexport type DocumentExtractionBindingResolution =\n  | { configured: true; binding: DocumentExtractionResolvedBinding }\n  | {\n      configured: false;\n      /**\n       * Why nothing is configured. Always the BENIGN shape — no provider fills the capability.\n       * A provider that IS selected but cannot serve THROWS instead, because a misconfiguration\n       * that presented as a deliberate opt-out would never be noticed.\n       */\n      reason: 'no_provider_for_capability';\n    };\n\nexport interface ExtractDocumentTextRequest {\n  /**\n   * The document. A `Buffer` on the request object rather than a field of a Zod-shaped input, so\n   * that no diagnostic path can casually serialize an application's private document — see the\n   * input schema's JSDoc in `document-extraction.external-connectors-models.schemas.ts`.\n   */\n  document: Buffer;\n  mimeType: string;\n  applicability: DocumentExtraction_Applicability;\n  /** Diagnostic correlation only — never sent to the provider. */\n  fileId?: string;\n}\n\n/**\n * The shape of the provider's OCR response that this service reads.\n *\n * spec-cite: https://docs.mistral.ai/api/endpoint/ocr — the 200 response carries `pages` (an array\n * of page objects, each with `markdown`), `model`, and `usage_info` with `pages_processed` and\n * `doc_size_bytes`. Confirmed by live call on 2026-08-27, which returned exactly these keys.\n *\n * Deliberately a LOOSE local shape rather than a strict parse of the whole response: the provider\n * documents many fields this engine does not consume (`images`, `tables`, `hyperlinks`, `header`,\n * `footer`, `dimensions`, `confidence_scores`, `blocks`, `document_annotation`), and rejecting a\n * response for carrying a field we do not read would turn every additive vendor change into an\n * outage. What IS validated is the part we depend on, below.\n */\ninterface DocumentExtractionProviderResponse {\n  pages?: Array<{ markdown?: unknown }>;\n  model?: unknown;\n  usage_info?: { pages_processed?: unknown; doc_size_bytes?: unknown };\n}\n\n@injectable()\nexport class DocumentExtractionBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger)\n    private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n    private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)\n    private readonly externalProvidersRegistry: ExternalProvidersRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.BackendProviderRegistryService)\n    private readonly backendProviderRegistry: BackendProviderRegistryBackendService,\n    // Appended LAST deliberately — DI constructor positions are order-sensitive.\n    @inject(SAAS_SERVICE_TYPES.AgentCallTraceSink)\n    @optional()\n    private readonly agentTraceSink?: AgentCallTraceSink,\n    @inject(SAAS_SERVICE_TYPES.AgentTraceabilityPolicy)\n    @optional()\n    private readonly agentTracePolicy?: AgentTraceabilityPolicy,\n  ) {\n    this.logDebug = this.logger.debugByType('DocumentExtractionBackendService');\n    this.logger.setDebugTypeLogging('DocumentExtractionBackendService', false);\n  }\n\n  /**\n   * Resolve the current class→provider→model binding, or report \"not configured\".\n   *\n   * `configured: false` covers exactly the benign absence (no declared provider fills\n   * `AI_DOCUMENT_EXTRACTION`) — an application that ingests only born-digital PDFs may leave the\n   * capability unset on purpose, and the file service falls back to the local library. A provider\n   * that IS selected but cannot serve — no contract, `extractDocumentText` undeclared, model\n   * unresolvable — THROWS a named CONFIGURATION error, because that is an operator mistake and\n   * silence would make it indistinguishable from the deliberate opt-out.\n   */\n  public resolveBinding(applicability: DocumentExtraction_Applicability): DocumentExtractionBindingResolution {\n    const providerRef = this.externalProvidersRegistry.getPrimaryProviderForEngineCapability(\n      EngineCapability.AI_DOCUMENT_EXTRACTION,\n    );\n    if (!providerRef) {\n      return { configured: false, reason: 'no_provider_for_capability' };\n    }\n\n    const runtimeContract = this.externalProvidersRegistry.getProviderRuntimeContract(\n      providerRef,\n      ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER,\n    );\n    if (runtimeContract?.kind !== ProviderProtocolRuntimeKind.DOCUMENT_EXTRACTION) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef,\n          message: `Provider \"${providerRef}\" is selected for AI_DOCUMENT_EXTRACTION but declares no DOCUMENT_EXTRACTION_PROVIDER runtime contract.`,\n        },\n      });\n    }\n\n    const semanticOperations = this.externalProvidersRegistry.getDocumentExtractionSemanticOperationKeys(providerRef);\n    if (!semanticOperations.includes(DocumentExtractionProvider_OperationKey.EXTRACT_DOCUMENT_TEXT)) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef,\n          message: `Provider \"${providerRef}\"'s document-extraction contract does not declare the extractDocumentText operation.`,\n        },\n      });\n    }\n\n    const resolution = resolveDocumentExtractionModelForApplicability({ applicability, providerRef });\n    // `=== false` rather than `!…`: this compiler configuration narrows the literal-discriminant\n    // union on the explicit comparison but not on the truthiness form (the embeddings seam\n    // measured this; it is copied deliberately rather than re-derived).\n    if (resolution.resolved === false) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef,\n          applicability,\n          failure: resolution.failure,\n          consideredModels: resolution.consideredModels,\n          message: `No document-extraction model resolves for applicability class \"${applicability}\" on provider \"${providerRef}\".`,\n        },\n      });\n    }\n\n    return {\n      configured: true,\n      binding: {\n        applicability,\n        providerRef,\n        model: resolution.model,\n        supportedMimeTypes: resolution.entry.supportedMimeTypes,\n        maxDocumentBytes: Math.min(\n          runtimeContract.maxDocumentBytes ?? DOCUMENT_EXTRACTION_ENGINE_MAX_DOCUMENT_BYTES,\n          DOCUMENT_EXTRACTION_ENGINE_MAX_DOCUMENT_BYTES,\n        ),\n        maxAttempts: runtimeContract.maxAttempts ?? DOCUMENT_EXTRACTION_DEFAULT_MAX_ATTEMPTS,\n        baseUrl: runtimeContract.baseUrl,\n        endpointPath: runtimeContract.endpointPath,\n        apiKeyHeaderName: runtimeContract.apiKey.headerName,\n        apiKeyPrefix: runtimeContract.apiKey.prefix ?? '',\n      },\n    };\n  }\n\n  /**\n   * Whether the resolved binding can process this MIME type and this many bytes, WITHOUT making a\n   * request. Consulted by the file service before any egress: sending a document the model cannot\n   * read spends an egress of application content to learn something the catalog already knew.\n   */\n  public canServe(binding: DocumentExtractionResolvedBinding, mimeType: string, byteLength: number): boolean {\n    return binding.supportedMimeTypes.includes(mimeType.toLowerCase()) && byteLength <= binding.maxDocumentBytes;\n  }\n\n  /**\n   * Extract one document's text through the configured provider.\n   *\n   * assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — this is the ONE egress through\n   * which application DOCUMENTS leave the deployment for an external extraction provider; every\n   * physical call emits an agent-call trace (provider, model, pages, outcome) through the standard\n   * sink chain, so a reviewer can enumerate what was sent and when.\n   * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — only the document bytes reach the\n   * provider: no filename, no row context, no identifiers, no organization or user id. The\n   * document is sent as an inline data URI rather than uploaded to the provider's file store,\n   * which means the provider retains no object of ours to delete (its Files API states a 30-day\n   * retention that an inline request never enters). Observability surfaces receive SUMMARIES only\n   * — the bytes and the extracted text never enter a trace, a log, or an error context.\n   * assurance-control: WILDO.PRIVACY.THIRD_PARTY_PROCESSING — routing documents here makes the\n   * provider a PROCESSOR of application content. It is opt-in by construction: no bytes leave\n   * unless an application selects a provider for `AI_DOCUMENT_EXTRACTION`, and with no selection\n   * the local library serves every extraction with no egress at all.\n   *\n   * Throws {@link DocumentExtractionError} with a {@link DocumentExtractionFailureClass}. See the\n   * file header for why the caller MUST branch on that class rather than treating any failure as\n   * an unreadable document.\n   */\n  public async extractDocumentText(\n    request: ExtractDocumentTextRequest,\n  ): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput> {\n    const resolutionResult = this.resolveBinding(request.applicability);\n    if (!resolutionResult.configured) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          applicability: request.applicability,\n          message: 'extractDocumentText was called with no AI_DOCUMENT_EXTRACTION provider configured. '\n            + 'Callers must consult resolveBinding() first — FileTextExtractionBackendService does, and falls back to the local library.',\n        },\n      });\n    }\n    const binding = resolutionResult.binding;\n\n    if (!this.canServe(binding, request.mimeType, request.document.length)) {\n      throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.VALIDATION,\n        context: {\n          mimeType: request.mimeType,\n          documentByteLength: request.document.length,\n          maxDocumentBytes: binding.maxDocumentBytes,\n          supportedMimeTypes: binding.supportedMimeTypes,\n          message: 'The resolved document-extraction model cannot serve this MIME type or byte length. '\n            + 'Callers must consult canServe() first, which is a pure catalog check and costs no egress.',\n        },\n      });\n    }\n\n    const protocolKind = ExternalProvider_ExchangeProtocol_Kind.DOCUMENT_EXTRACTION_PROVIDER;\n    const apiKey = this.externalProvidersRegistry.getProviderApiKey(binding.providerRef, protocolKind);\n    if (!apiKey) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef: binding.providerRef,\n          protocolKind,\n          message: 'API key not found for the document-extraction provider. Configure the provider secret in the application environment.',\n        },\n      });\n    }\n    // Read through `backendProviderRegistry` as well, matching the embeddings seam: `resolveBinding`\n    // read the contract through the CONFIG registry, and this confirms the RUNTIME registry still\n    // agrees. Unreachable unless the registry mutated mid-call; named rather than assumed.\n    const contract = this.backendProviderRegistry.getRuntimeContract(binding.providerRef, protocolKind);\n    if (contract?.kind !== ProviderProtocolRuntimeKind.DOCUMENT_EXTRACTION) {\n      throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          providerRef: binding.providerRef,\n          message: 'Document-extraction runtime contract vanished between resolution and invocation.',\n        },\n      });\n    }\n\n    const startTime = Date.now();\n    const callTimestamp = new Date(startTime).toISOString();\n    try {\n      const output = await this.invokeWithRetries(binding, apiKey, request);\n      await this.emitExtractionTrace(request, binding, {\n        outcome: AgentCallOutcome.SUCCESS,\n        callTimestamp,\n        startTime,\n        pageCount: output.pageCount,\n        characterCount: output.text.length,\n        usage: output.usage,\n      });\n      return output;\n    } catch (error) {\n      await this.emitExtractionTrace(request, binding, {\n        outcome: AgentCallOutcome.FAILURE,\n        callTimestamp,\n        startTime,\n        error,\n      });\n      throw error;\n    }\n  }\n\n  /**\n   * Attempt the call up to `binding.maxAttempts` times, retrying ONLY\n   * {@link DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE}.\n   *\n   * An `UNREADABLE_DOCUMENT` is never retried, and that asymmetry is the point: the same bytes\n   * will be judged the same way, so a retry spends a page of billed quota to receive the identical\n   * refusal. The classification is what makes the retry policy expressible at all.\n   */\n  private async invokeWithRetries(\n    binding: DocumentExtractionResolvedBinding,\n    apiKey: string,\n    request: ExtractDocumentTextRequest,\n  ): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput> {\n    let lastError: DocumentExtractionError | undefined;\n    for (let attempt = 1; attempt <= Math.max(1, binding.maxAttempts); attempt++) {\n      try {\n        return await this.invokeOnce(binding, apiKey, request);\n      } catch (error) {\n        if (!(error instanceof DocumentExtractionError)\n          || error.failureClass !== DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE) {\n          throw error;\n        }\n        lastError = error;\n        this.logDebug('Document extraction attempt failed with a transient provider fault', {\n          providerRef: binding.providerRef,\n          attempt,\n          maxAttempts: binding.maxAttempts,\n          httpStatus: error.httpStatus,\n        });\n      }\n    }\n    // Unreachable with `maxAttempts >= 1` unless every attempt threw, in which case `lastError` is set.\n    throw lastError ?? new DocumentExtractionError(\n      DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n      'Document extraction exhausted its attempts without producing a result.',\n    );\n  }\n\n  /** One physical HTTPS request against the provider's declared route. */\n  private async invokeOnce(\n    binding: DocumentExtractionResolvedBinding,\n    apiKey: string,\n    request: ExtractDocumentTextRequest,\n  ): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput> {\n    const url = `${binding.baseUrl.replace(/\\/+$/, '')}/${binding.endpointPath.replace(/^\\/+/, '')}`;\n\n    // The document travels as an inline data URI. The provider's document chunk accepts a URL, and\n    // a `data:` URI is the form that keeps the bytes inside THIS request — the alternative (upload\n    // to the provider's file store, then reference the id) would leave an object of ours sitting in\n    // their retention window, and the alternative-alternative (a public URL to our object store)\n    // would require exposing application documents to the internet. Verified working against the\n    // live API on 2026-08-27 for a 129-page document.\n    const documentUrl = `data:${request.mimeType};base64,${request.document.toString('base64')}`;\n\n    const abortController = new AbortController();\n    const timeout = setTimeout(() => abortController.abort(), DOCUMENT_EXTRACTION_REQUEST_TIMEOUT_MS);\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          [binding.apiKeyHeaderName]: `${binding.apiKeyPrefix}${apiKey}`,\n        },\n        body: JSON.stringify({\n          model: binding.model,\n          document: { type: 'document_url', document_url: documentUrl },\n          // Images are not requested: this seam produces TEXT, and asking for base64 images would\n          // multiply the response size by an order of magnitude for bytes nothing here consumes.\n          include_image_base64: false,\n        }),\n        signal: abortController.signal,\n      });\n    } catch (transportError) {\n      // A transport failure — DNS, TCP, TLS, or our own abort. Says nothing about the document.\n      throw new DocumentExtractionError(\n        DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n        `Document-extraction provider \"${binding.providerRef}\" was unreachable: `\n          + (transportError instanceof Error ? transportError.message : String(transportError)),\n      );\n    } finally {\n      clearTimeout(timeout);\n    }\n\n    if (!response.ok) {\n      // The status→class mapping, and every boundary in it is deliberate:\n      //   - 4xx generally means the provider READ our request and refused THIS DOCUMENT → permanent.\n      //   - 401/403 is a CREDENTIAL fault, not a document fault. Classifying it as unreadable would\n      //     make a rotated key look like a corpus of corrupt files, and would silently delete\n      //     chunk sets across every document while the key was wrong.\n      //   - 408/429 are explicitly retryable by their own definition.\n      //   - 5xx is the provider's fault, never the document's.\n      const isCredentialFault = response.status === 401 || response.status === 403;\n      const isThrottleOrTimeout = response.status === 408 || response.status === 429;\n      const isServerFault = response.status >= 500;\n      const failureClass = isCredentialFault || isThrottleOrTimeout || isServerFault\n        ? DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE\n        : DocumentExtractionFailureClass.UNREADABLE_DOCUMENT;\n      // The response BODY is deliberately not carried into the message: a provider error body can\n      // echo request content, and this message reaches logs.\n      throw new DocumentExtractionError(\n        failureClass,\n        `Document-extraction provider \"${binding.providerRef}\" answered HTTP ${response.status}.`,\n        response.status,\n      );\n    }\n\n    let parsed: DocumentExtractionProviderResponse;\n    try {\n      parsed = (await response.json()) as DocumentExtractionProviderResponse;\n    } catch (parseError) {\n      // A 200 whose body is not JSON is the provider misbehaving, not the document being bad.\n      throw new DocumentExtractionError(\n        DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n        `Document-extraction provider \"${binding.providerRef}\" returned a 200 with an unreadable body: `\n          + (parseError instanceof Error ? parseError.message : String(parseError)),\n      );\n    }\n\n    if (!Array.isArray(parsed.pages)) {\n      // Validate the ONE field this engine depends on. A response with no `pages` array is not a\n      // document with no text — it is a contract violation, and treating it as \"this document is\n      // empty\" is precisely how an upstream change would silently empty a corpus.\n      throw new DocumentExtractionError(\n        DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE,\n        `Document-extraction provider \"${binding.providerRef}\" returned a response with no pages array.`,\n      );\n    }\n\n    // Per-page markdown, joined in document order. Non-string page content is skipped rather than\n    // stringified — `String(undefined)` in a retrieval corpus is worse than a shorter document.\n    const pageTexts = parsed.pages.map((page) => (typeof page?.markdown === 'string' ? page.markdown : ''));\n\n    return {\n      text: pageTexts.join('\\n'),\n      pageCount: parsed.pages.length,\n      model: typeof parsed.model === 'string' ? parsed.model : binding.model,\n      usage: {\n        ...(typeof parsed.usage_info?.pages_processed === 'number'\n          ? { pagesProcessed: parsed.usage_info.pages_processed }\n          : {}),\n        ...(typeof parsed.usage_info?.doc_size_bytes === 'number'\n          ? { documentSizeBytes: parsed.usage_info.doc_size_bytes }\n          : {}),\n      },\n    };\n  }\n\n  /**\n   * One trace per physical extraction call — summaries only (file header: the bytes and the\n   * extracted text never enter the trace). Best-effort: a sink failure never turns a successful\n   * extraction into a failed one (the agents-service discipline).\n   */\n  private async emitExtractionTrace(\n    request: ExtractDocumentTextRequest,\n    binding: DocumentExtractionResolvedBinding,\n    call: {\n      outcome: AgentCallOutcome;\n      callTimestamp: string;\n      startTime: number;\n      pageCount?: number;\n      characterCount?: number;\n      usage?: { pagesProcessed?: number; documentSizeBytes?: number };\n      error?: unknown;\n    },\n  ): Promise<void> {\n    const sink = this.agentTraceSink;\n    if (!sink) {\n      return;\n    }\n    const level = this.agentTracePolicy?.level ?? AgentTraceabilityLevel.NONE;\n    if (level === AgentTraceabilityLevel.NONE) {\n      return;\n    }\n    const executionTime = Date.now() - call.startTime;\n    const trace: AgentCallTrace = {\n      agentRef: DOCUMENT_EXTRACTION_TRACE_AGENT_REF,\n      // GENERATION rather than a dedicated kind: extraction has no trace kind of its own today,\n      // and inventing one is a change to the shared observability vocabulary (and to every sink\n      // that switches on it) that this workstream has no evidence to justify. What matters for\n      // correctness — that no document content is emitted — is enforced by the payload below, not\n      // by the kind. Revisit if a sink ever needs to price or aggregate extraction separately.\n      kind: AgentCallTraceKind.GENERATION,\n      provider: binding.providerRef,\n      model: binding.model,\n      callTimestamp: call.callTimestamp,\n      outcome: call.outcome,\n      // Summaries by contract — never the document, never the extracted text.\n      input: {\n        applicability: binding.applicability,\n        mimeType: request.mimeType,\n        documentByteLength: request.document.length,\n        ...(request.fileId !== undefined ? { fileId: request.fileId } : {}),\n      },\n      ...(call.outcome === AgentCallOutcome.SUCCESS\n        ? {\n            output: {\n              pageCount: call.pageCount,\n              characterCount: call.characterCount,\n              // The provider's own billing unit lives in `output`, not in `usage`: the shared\n              // `LLMProvider_UsageSchema` has token dimensions only, and widening it for one\n              // protocol would push a page concept onto every LLM and embedding trace. If a sink\n              // ever needs to price extraction, that is the moment to add the dimension\n              // deliberately — not a side effect of this seam.\n              ...(call.usage?.pagesProcessed !== undefined ? { pagesProcessed: call.usage.pagesProcessed } : {}),\n            },\n          }\n        : {}),\n      context: {\n        callTimestamp: call.callTimestamp,\n        executionTime,\n        finishedAt: new Date().toISOString(),\n        usage: {\n          // TRUE, and the value is reasoned rather than copied. `tokenUsageComplete` means \"no\n          // token dimension THE OPERATION REQUIRES is missing\". An OCR call requires none — it is\n          // billed per page and the provider reports no tokens at all — so the required set is\n          // empty and is vacuously satisfied. Writing `false` here would flag every extraction\n          // trace as incomplete forever for lacking tokens it structurally cannot have, which is\n          // exactly the defect the embeddings arm's operation-aware completeness was written to\n          // avoid, one protocol over.\n          tokenUsageComplete: true,\n        },\n      },\n      ...(call.outcome === AgentCallOutcome.FAILURE\n        ? {\n            error: call.error instanceof DocumentExtractionError\n              ? { name: call.error.failureClass, message: call.error.message }\n              : call.error instanceof Error\n                ? { name: call.error.name, message: call.error.message }\n                : { message: 'Unknown document-extraction invocation error' },\n          }\n        : {}),\n    };\n    try {\n      await sink.recordAgentCall({ trace, level });\n    } catch (sinkError) {\n      this.logDebug('Document-extraction trace sink failed (non-fatal)', {\n        providerRef: binding.providerRef,\n        error: sinkError instanceof Error ? sinkError.message : String(sinkError),\n      });\n    }\n  }\n}\n"]}

package/dist/esm/external-providers/services/embeddings.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embeddings.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/embeddings.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAQL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EAIxB,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACpC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AAEtJ;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,MAAM,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,2GAA2G;AAC3G,MAAM,WAAW,yBAAyB;IACxC,4FAA4F;IAC5F,aAAa,EAAE,wBAAwB,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,KAAK,EAAE,MAAM,CAAC;IACd,uGAAuG;IACvG,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kGAAkG;AAClG,MAAM,MAAM,2BAA2B,GACnC;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,GACxD;IACE,UAAU,EAAE,KAAK,CAAC;IAClB;;;OAGG;IACH,MAAM,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,8BAA8B,CAAC;IACxC,aAAa,EAAE,wBAAwB,CAAC;CACzC;AAED,qBACa,wBAAwB;IAKjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAGxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAGhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAhBpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,yBAAyB,EAAE,uCAAuC,EAElE,uBAAuB,EAAE,qCAAqC,EAG9D,cAAc,CAAC,EAAE,kBAAkB,EAGnC,gBAAgB,CAAC,EAAE,uBAAuB;IAM7D;;;;;;;;OAQG;IACI,cAAc,CAAC,aAAa,EAAE,wBAAwB,GAAG,2BAA2B;IAiE3F;;;;;;;;;;;;;;;;;OAiBG;IACU,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,mCAAmC,CAAC;IA+GjG;;;;OAIG;YACW,kBAAkB;CAmEjC"}
+{"version":3,"file":"embeddings.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/embeddings.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAQL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EAIxB,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EAEpC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AAEtJ;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,MAAM,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,2GAA2G;AAC3G,MAAM,WAAW,yBAAyB;IACxC,4FAA4F;IAC5F,aAAa,EAAE,wBAAwB,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,KAAK,EAAE,MAAM,CAAC;IACd,uGAAuG;IACvG,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kGAAkG;AAClG,MAAM,MAAM,2BAA2B,GACnC;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,GACxD;IACE,UAAU,EAAE,KAAK,CAAC;IAClB;;;OAGG;IACH,MAAM,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,8BAA8B,CAAC;IACxC,aAAa,EAAE,wBAAwB,CAAC;CACzC;AAED,qBACa,wBAAwB;IAKjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAGxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAGhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAhBpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,yBAAyB,EAAE,uCAAuC,EAElE,uBAAuB,EAAE,qCAAqC,EAG9D,cAAc,CAAC,EAAE,kBAAkB,EAGnC,gBAAgB,CAAC,EAAE,uBAAuB;IAM7D;;;;;;;;OAQG;IACI,cAAc,CAAC,aAAa,EAAE,wBAAwB,GAAG,2BAA2B;IAiE3F;;;;;;;;;;;;;;;;;OAiBG;IACU,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,mCAAmC,CAAC;IA+GjG;;;;OAIG;YACW,kBAAkB;CAmEjC"}

package/dist/esm/external-providers/services/embeddings.backend.service.js

@@ -53,7 +53,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { injectable, inject, optional } from 'inversify';
 import { embedMany } from 'ai';
 import { EngineCapability, ErrorType, ErrorCustomMessageReference, AgentCallOutcome, AgentCallTraceKind, AgentTraceabilityLevel, } from '@wildo-ai/saas-models';
-import { EmbeddingsProvider_OperationKey, ExternalProvider_ExchangeProtocol_Kind, resolveEmbeddingsModelForApplicability, } from '@wildo-ai/external-connectors-models';
+import { EmbeddingsProvider_OperationKey, ExternalProvider_ExchangeProtocol_Kind, resolveEmbeddingsModelForApplicability, ProviderProtocolRuntimeKind, } from '@wildo-ai/external-connectors-models';
 import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
 import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
 /**
@@ -103,7 +103,7 @@ let EmbeddingsBackendService = class EmbeddingsBackendService {
             return { configured: false, reason: 'no_provider_for_capability' };
         }
         const runtimeContract = this.externalProvidersRegistry.getProviderRuntimeContract(providerRef, ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER);
-        if (runtimeContract?.kind !== 'embeddings') {
+        if (runtimeContract?.kind !== ProviderProtocolRuntimeKind.EMBEDDINGS) {
             throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
                 customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
                 context: {
@@ -203,14 +203,14 @@ let EmbeddingsBackendService = class EmbeddingsBackendService {
             });
         }
         const contract = this.backendProviderRegistry.getRuntimeContract(binding.providerRef, protocolKind);
-        if (contract?.kind !== 'embeddings') {
+        if (contract?.kind !== ProviderProtocolRuntimeKind.EMBEDDINGS) {
             // Unreachable past resolveBinding() unless the registry mutated mid-call; named anyway.
             throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {
                 customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
                 context: { providerRef: binding.providerRef, message: 'Embeddings runtime contract vanished between resolution and invocation.' },
             });
         }
-        const client = contract.sdkFactory(apiKey);
+        const client = (await contract.sdkFactory(apiKey));
         if (typeof client?.textEmbeddingModel !== 'function') {
             throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
                 customMessageReference: ErrorCustomMessageReference.CONFIGURATION,