npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.1 → 1.1.3 - Mend

@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (972) hide show

package/dist/esm/external-providers/services/embeddings.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"embeddings.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/embeddings.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,2BAA2B,EAC3B,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,GAIvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,+BAA+B,EAC/B,sCAAsC,EACtC,sCAAsC,GAGvC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAI9G;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAoCvD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAKhB;IAEA;IAEA;IAEA;IAGA;IAGA;IAhBT,QAAQ,CAA+D;IAEjF,YAEmB,MAAqB,EAErB,YAAwC,EAExC,yBAAkE,EAElE,uBAA8D,EAG9D,cAAmC,EAGnC,gBAA0C;QAZ1C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,8BAAyB,GAAzB,yBAAyB,CAAyC;QAElE,4BAAuB,GAAvB,uBAAuB,CAAuC;QAG9D,mBAAc,GAAd,cAAc,CAAqB;QAGnC,qBAAgB,GAAhB,gBAAgB,CAA0B;QAE3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;OAQG;IACI,cAAc,CAAC,aAAuC;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,qCAAqC,CACtF,gBAAgB,CAAC,aAAa,CAC/B,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAC/E,WAAW,EACX,sCAAsC,CAAC,mBAAmB,CAC3D,CAAC;QACF,IAAI,eAAe,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,uFAAuF;iBACzH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,yBAAyB,CAAC,kCAAkC,CAAC,WAAW,CAAC,CAAC;QAC1G,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,+BAA+B,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,oEAAoE;iBACtG;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,sCAAsC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1F,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,OAAO,EAAE,wDAAwD,aAAa,kBAAkB,WAAW,IAAI;iBAChH;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE;gBACP,aAAa;gBACb,WAAW;gBACX,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CACxB,eAAe,CAAC,gBAAgB,IAAI,oCAAoC,EACxE,oCAAoC,CACrC;gBACD,UAAU,EAAE,eAAe,CAAC,UAAU;aACvC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,KAAK,CAAC,UAAU,CAAC,OAA0B;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,OAAO,EAAE,mEAAmE;0BACxE,yGAAyG;iBAC9G;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAEzC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAClF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;gBAClE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gBAC9D,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;oBAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,OAAO,EAAE,0GAA0G;iBACpH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,sCAAsC,CAAC,mBAAmB,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY;oBACZ,OAAO,EAAE,8GAA8G;iBACxH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACpG,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YACpC,wFAAwF;YACxF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,yEAAyE,EAAE;aAClI,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAwD,CAAC;QAClG,IAAI,OAAO,MAAM,EAAE,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,gIAAgI;iBAC1I;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAU;gBACxD,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC1B,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAwB,CAAC;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,CAAC,MAAM,gBAAgB,OAAO,CAAC,KAAK,CAAC,MAAM,uCAAuC,CAC1H,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;YAC3G,CAAC;YACD,IAAI,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,sFAAsF;gBACtF,iFAAiF;gBACjF,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,CAAC,KAAK,cAAc,YAAY,qDAAqD,OAAO,CAAC,IAAI,yCAAyC,CACvK,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/F,MAAM,MAAM,GAAwC;gBAClD,OAAO;gBACP,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aACjE,CAAC;YACF,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,IAAI,EAAE,YAAY;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,kBAAkB,CAC9B,OAA0B,EAC1B,OAAkC,EAClC,IAQC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC;QAC1E,IAAI,KAAK,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAClD,MAAM,KAAK,GAAmB;YAC5B,QAAQ,EAAE,0BAA0B;YACpC,IAAI,EAAE,kBAAkB,CAAC,SAAS;YAClC,QAAQ,EAAE,OAAO,CAAC,WAAW;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,4EAA4E;YAC5E,KAAK,EAAE;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;gBAC/B,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;aAC9E;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa;gBACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,KAAK,EAAE;oBACL,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5G,qFAAqF;oBACrF,qFAAqF;oBACrF,kBAAkB,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS;iBACnD;aACF;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK,YAAY,KAAK;wBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;wBACxD,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC,EAAE;iBACrG;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACvD,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AA1SY,wBAAwB;IADpC,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IAEzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,WAAA,QAAQ,EAAE,CAAA;IAEV,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,QAAQ,EAAE,CAAA;+CAToB,0BAA0B;GAPhD,wBAAwB,CA0SpC","sourcesContent":["/*\n Embeddings execution service — the ONE seam through which the engine turns text into vectors\n * (RAG plan §3.d, DL2).\n \n Two callers, one code path — which is what keeps their vector spaces identical:\n * - the `rag:embedding-drain` worker embeds CORPUS chunks (`purpose: CORPUS`);\n * - Phase-5 retrieval embeds QUERIES (`purpose: QUERY`) through this same service, so a query\n * vector and the corpus vectors it searches were produced by the same class→model binding.\n \n ## Selection is by APPLICABILITY CLASS, never by model id (the standing model-selection rule)\n \n A caller names an {@link Embeddings_Applicability} class (`rag-default`); this service resolves\n * 1. the PROVIDER — the application's `EngineCapability.AI_EMBEDDINGS` selection\n * (`defineSaaSProviders` → `selection[AI_EMBEDDINGS].primary`), independent of the chat\n * provider by construction (DL2's whole point);\n * 2. the MODEL — `resolveEmbeddingsModelForApplicability` against the framework catalog.\n * The resolved `(class, model)` pair is what chunk rows are stamped with, and what the drain\n * worker's migration pass compares stamps against — so a preference edit re-binds the class and\n * the corpus converges onto the new model with no call-site changes.\n \n ## Failure posture\n \n \"Not configured\" (no provider serves `AI_EMBEDDINGS`) is a NON-ERROR state this service reports\n * through {@link resolveBinding}'s discriminated result — embeddings are an enhancement atop an\n * erasable corpus, and the drain worker turns it into one WARN per run, never a boot failure.\n * \"Configured but broken\" (provider selected but the contract/model/key is unusable) THROWS a\n * named CONFIGURATION error — that state is an operator mistake that silence would hide forever.\n \n ## Observability (H4)\n \n Every physical embedding call emits ONE agent-call trace of kind\n * {@link AgentCallTraceKind.EMBEDDING} through the same sink chain generations use — so the\n * PostHog sink can emit its `$ai_embedding` event and the companion filesystem sink records the\n * call. The trace's `output` is ALWAYS a `{ vectorCount, dims }` summary and its `input` a\n * `{ purpose, textCount, totalTextChars }` summary: raw vectors never enter the trace at any\n * verbosity (a vector is a lossy encoding of the source text, not telemetry), and the raw texts\n * stay out because a batch of corpus chunks is content the payload-gating levels were never\n * calibrated for. Usage completeness is OPERATION-AWARE: an embedding has no completion-token\n * dimension, so `tokenUsageComplete` is judged on input tokens alone.\n /\n\nimport { injectable, inject, optional } from 'inversify';\nimport { embedMany } from 'ai';\nimport {\n EngineCapability,\n ErrorType,\n ErrorCustomMessageReference,\n AgentCallOutcome,\n AgentCallTraceKind,\n AgentTraceabilityLevel,\n type AgentCallTrace,\n type AgentCallTraceSink,\n type AgentTraceabilityPolicy,\n} from '@wildo-ai/saas-models';\nimport {\n Embeddings_Applicability,\n EmbeddingsProvider_OperationKey,\n ExternalProvider_ExchangeProtocol_Kind,\n resolveEmbeddingsModelForApplicability,\n type EmbeddingsProvider_EmbedTextsOutput,\n type EmbeddingsProvider_TextPurpose,\n} from '@wildo-ai/external-connectors-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport type { BackendProviderRegistryBackendService } from '~wildo-backend-lib/external-providers/services/backend-provider-registry.backend.service';\n\n/\n Engine-side ceiling on texts per physical embedding request, combined with the provider's\n * declared `maxTextsPerBatch` as `min(provider, engine)`. Exists because a provider ceiling\n * (OpenAI: 2048 inputs) bounds REQUEST COUNT, not payload size — 2048 two-kilobyte chunks is a\n * ~4 MB request body; 256 keeps a worst-case batch well under typical body limits while still\n * amortizing per-request overhead across a whole chunk set.\n /\nexport const EMBEDDINGS_ENGINE_MAX_TEXTS_PER_CALL = 256;\n\n/\n The `agentRef` embeddings traces carry. Not a registered flows-actors agent — embeddings are a\n * protocol-kind execution, not an agent modality (DL2) — but the trace contract keys analytics\n * spans on `agentRef`, so the engine names its embedding executor stably here.\n /\nexport const EMBEDDINGS_TRACE_AGENT_REF = 'engine:embeddings';\n\n/* The resolved class→provider→model binding — the stamp identity chunk rows carry (DL2 migration key). /\nexport interface EmbeddingsResolvedBinding {\n /* The applicability class the binding was resolved FOR — persisted as `embeddingClass`. /\n applicability: Embeddings_Applicability;\n providerRef: string;\n /* Concrete model id — persisted as `embeddingModel`. Never authored at a call site. /\n model: string;\n /* The model's catalog dimension — persisted as `embeddingDims`, verified against measured vectors. /\n dims: number;\n /* Effective per-call text ceiling: `min(provider-declared, engine ceiling)`. /\n maxTextsPerBatch: number;\n /* Provider-declared retry posture, forwarded to the AI-SDK call. /\n maxRetries?: number;\n}\n\n/* Discriminated \"is embedding possible here?\" answer — see the file header's failure posture. /\nexport type EmbeddingsBindingResolution =\n \| { configured: true; binding: EmbeddingsResolvedBinding }\n \| {\n configured: false;\n /\n Why nothing is configured — for the drain worker's single WARN. Always the benign shape\n * (capability off / no provider declared); broken-but-selected states THROW instead.\n /\n reason: 'no_provider_for_capability';\n };\n\nexport interface EmbedTextsRequest {\n texts: readonly string[];\n purpose: EmbeddingsProvider_TextPurpose;\n applicability: Embeddings_Applicability;\n}\n\n@injectable()\nexport class EmbeddingsBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger)\n private readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n private readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)\n private readonly externalProvidersRegistry: ExternalProvidersRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.BackendProviderRegistryService)\n private readonly backendProviderRegistry: BackendProviderRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.AgentCallTraceSink)\n @optional()\n private readonly agentTraceSink?: AgentCallTraceSink,\n @inject(SAAS_SERVICE_TYPES.AgentTraceabilityPolicy)\n @optional()\n private readonly agentTracePolicy?: AgentTraceabilityPolicy,\n ) {\n this.logDebug = this.logger.debugByType('EmbeddingsBackendService');\n this.logger.setDebugTypeLogging('EmbeddingsBackendService', false);\n }\n\n /\n Resolve the current class→provider→model binding, or report \"not configured\".\n \n `configured: false` covers exactly the benign absence (capability disabled, or no declared\n * provider fills `AI_EMBEDDINGS`). A provider that IS selected but cannot serve — contract\n * missing, `embedTexts` undeclared, model unresolvable for the class — THROWS a named\n * CONFIGURATION error: that is an operator mistake, and returning \"not configured\" for it\n * would make a misconfiguration indistinguishable from a deliberate opt-out.\n /\n public resolveBinding(applicability: Embeddings_Applicability): EmbeddingsBindingResolution {\n const providerRef = this.externalProvidersRegistry.getPrimaryProviderForEngineCapability(\n EngineCapability.AI_EMBEDDINGS,\n );\n if (!providerRef) {\n return { configured: false, reason: 'no_provider_for_capability' };\n }\n\n const runtimeContract = this.externalProvidersRegistry.getProviderRuntimeContract(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n );\n if (runtimeContract?.kind !== 'embeddings') {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef,\n message: `Provider \"${providerRef}\" is selected for AI_EMBEDDINGS but declares no EMBEDDINGS_PROVIDER runtime contract.`,\n },\n });\n }\n\n const semanticOperations = this.externalProvidersRegistry.getEmbeddingsSemanticOperationKeys(providerRef);\n if (!semanticOperations.includes(EmbeddingsProvider_OperationKey.EMBED_TEXTS)) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef,\n message: `Provider \"${providerRef}\"'s embeddings contract does not declare the embedTexts operation.`,\n },\n });\n }\n\n const resolution = resolveEmbeddingsModelForApplicability({ applicability, providerRef });\n // `=== false` rather than `!…`: this compiler configuration narrows the literal-discriminant\n // union on the explicit comparison but not on the truthiness form (measured, not assumed).\n if (resolution.resolved === false) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef,\n applicability,\n failure: resolution.failure,\n consideredModels: resolution.consideredModels,\n message: `No embedding model resolves for applicability class \"${applicability}\" on provider \"${providerRef}\".`,\n },\n });\n }\n\n return {\n configured: true,\n binding: {\n applicability,\n providerRef,\n model: resolution.model,\n dims: resolution.entry.dims,\n maxTextsPerBatch: Math.min(\n runtimeContract.maxTextsPerBatch ?? EMBEDDINGS_ENGINE_MAX_TEXTS_PER_CALL,\n EMBEDDINGS_ENGINE_MAX_TEXTS_PER_CALL,\n ),\n maxRetries: runtimeContract.maxRetries,\n },\n };\n }\n\n /\n Embed ONE batch of texts under an applicability class (≤ the binding's `maxTextsPerBatch` —\n * paging a larger population into batches is the CALLER's job, because the caller owns the\n * run-level bounds and truncation reporting; this service owns one physical call).\n \n assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — this is the ONE egress through\n * which application text leaves for an external embeddings provider; every physical call emits a\n * kind-EMBEDDING agent-call trace (provider, model, token usage, outcome) through the standard\n * sink chain.\n * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — only the texts being embedded reach the\n * provider (no row context, no identifiers), and observability surfaces receive SUMMARIES only:\n * raw vectors and raw texts never enter traces, analytics, or logs at any verbosity.\n \n Verifies, before anything can be persisted: one vector per text, uniform measured dimension,\n * and measured dimension === the catalog's declared dimension for the resolved model (a\n * wrong-dims write would silently poison the ANN index the dims stamp keys). API keys are read\n * through the standard provider-secret path and never logged.\n /\n public async embedTexts(request: EmbedTextsRequest): Promise<EmbeddingsProvider_EmbedTextsOutput> {\n const resolutionResult = this.resolveBinding(request.applicability);\n if (!resolutionResult.configured) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n applicability: request.applicability,\n message: 'embedTexts was called with no AI_EMBEDDINGS provider configured. '\n + 'Callers must consult resolveBinding() first — the drain worker does, and reports the absence as a WARN.',\n },\n });\n }\n const binding = resolutionResult.binding;\n\n if (request.texts.length === 0 \|\| request.texts.length > binding.maxTextsPerBatch) {\n throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: {\n textCount: request.texts.length,\n maxTextsPerBatch: binding.maxTextsPerBatch,\n message: 'embedTexts takes 1..maxTextsPerBatch texts per call — batching a larger population is the caller\\'s job.',\n },\n });\n }\n\n const protocolKind = ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER;\n const apiKey = this.externalProvidersRegistry.getProviderApiKey(binding.providerRef, protocolKind);\n if (!apiKey) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef: binding.providerRef,\n protocolKind,\n message: 'API key not found for the embeddings provider. Configure the provider secret in the application environment.',\n },\n });\n }\n\n const contract = this.backendProviderRegistry.getRuntimeContract(binding.providerRef, protocolKind);\n if (contract?.kind !== 'embeddings') {\n // Unreachable past resolveBinding() unless the registry mutated mid-call; named anyway.\n throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: { providerRef: binding.providerRef, message: 'Embeddings runtime contract vanished between resolution and invocation.' },\n });\n }\n const client = contract.sdkFactory(apiKey) as { textEmbeddingModel?: (model: string) => unknown };\n if (typeof client?.textEmbeddingModel !== 'function') {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef: binding.providerRef,\n message: 'The embeddings provider\\'s SDK client exposes no textEmbeddingModel() — its sdkFactory does not serve the embeddings contract.',\n },\n });\n }\n\n const startTime = Date.now();\n const callTimestamp = new Date(startTime).toISOString();\n try {\n const result = await embedMany({\n model: client.textEmbeddingModel(binding.model) as never,\n values: [...request.texts],\n ...(binding.maxRetries !== undefined ? { maxRetries: binding.maxRetries } : {}),\n });\n\n const vectors = result.embeddings as number[][];\n if (vectors.length !== request.texts.length) {\n throw new Error(\n `Embeddings provider returned ${vectors.length} vectors for ${request.texts.length} texts — refusing a misaligned batch.`,\n );\n }\n const measuredDims = vectors[0]?.length ?? 0;\n if (vectors.some((vector) => vector.length !== measuredDims)) {\n throw new Error('Embeddings provider returned vectors of mixed dimensions within one batch — refusing.');\n }\n if (measuredDims !== binding.dims) {\n // Fail CLOSED: persisting under a wrong dims stamp poisons the per-dims ANN index and\n // every similarity comparison. The batch stays unembedded and the drain retries.\n throw new Error(\n `Embeddings model \"${binding.model}\" returned ${measuredDims}-dimensional vectors but its catalog row declares ${binding.dims} — refusing to stamp a wrong dimension.`,\n );\n }\n\n const inputTokens = typeof result.usage?.tokens === 'number' ? result.usage.tokens : undefined;\n const output: EmbeddingsProvider_EmbedTextsOutput = {\n vectors,\n model: binding.model,\n dims: measuredDims,\n usage: { ...(inputTokens !== undefined ? { inputTokens } : {}) },\n };\n await this.emitEmbeddingTrace(request, binding, {\n outcome: AgentCallOutcome.SUCCESS,\n callTimestamp,\n startTime,\n vectorCount: vectors.length,\n dims: measuredDims,\n inputTokens,\n });\n return output;\n } catch (error) {\n await this.emitEmbeddingTrace(request, binding, {\n outcome: AgentCallOutcome.FAILURE,\n callTimestamp,\n startTime,\n error,\n });\n throw error;\n }\n }\n\n /\n One trace per physical embedding call — kind EMBEDDING, summaries only (file header: raw\n * vectors and raw texts never enter the trace). Best-effort: a sink failure never turns a\n * successful embedding into a failed one (the agents-service discipline).\n */\n private async emitEmbeddingTrace(\n request: EmbedTextsRequest,\n binding: EmbeddingsResolvedBinding,\n call: {\n outcome: AgentCallOutcome;\n callTimestamp: string;\n startTime: number;\n vectorCount?: number;\n dims?: number;\n inputTokens?: number;\n error?: unknown;\n },\n ): Promise<void> {\n const sink = this.agentTraceSink;\n if (!sink) {\n return;\n }\n const level = this.agentTracePolicy?.level ?? AgentTraceabilityLevel.NONE;\n if (level === AgentTraceabilityLevel.NONE) {\n return;\n }\n const executionTime = Date.now() - call.startTime;\n const trace: AgentCallTrace = {\n agentRef: EMBEDDINGS_TRACE_AGENT_REF,\n kind: AgentCallTraceKind.EMBEDDING,\n provider: binding.providerRef,\n model: binding.model,\n callTimestamp: call.callTimestamp,\n outcome: call.outcome,\n // Summaries by contract — never the texts, never the vectors (file header).\n input: {\n purpose: request.purpose,\n applicability: binding.applicability,\n textCount: request.texts.length,\n totalTextChars: request.texts.reduce((total, text) => total + text.length, 0),\n },\n ...(call.outcome === AgentCallOutcome.SUCCESS\n ? { output: { vectorCount: call.vectorCount, dims: call.dims } }\n : {}),\n context: {\n callTimestamp: call.callTimestamp,\n executionTime,\n finishedAt: new Date().toISOString(),\n usage: {\n ...(call.inputTokens !== undefined ? { promptTokens: call.inputTokens, totalTokens: call.inputTokens } : {}),\n // Operation-aware completeness (H4): an embedding has no completion-token dimension,\n // so input tokens alone decide — never flagged incomplete for tokens it cannot have.\n tokenUsageComplete: call.inputTokens !== undefined,\n },\n },\n ...(call.outcome === AgentCallOutcome.FAILURE\n ? {\n error: call.error instanceof Error\n ? { name: call.error.name, message: call.error.message }\n : { message: typeof call.error === 'string' ? call.error : 'Unknown embeddings invocation error' },\n }\n : {}),\n };\n try {\n await sink.recordAgentCall({ trace, level });\n } catch (sinkError) {\n this.logDebug('Embedding trace sink failed (non-fatal)', {\n providerRef: binding.providerRef,\n error: sinkError instanceof Error ? sinkError.message : String(sinkError),\n });\n }\n }\n}\n"]}
1	+ {"version":3,"file":"embeddings.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/embeddings.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,2BAA2B,EAC3B,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,GAIvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,+BAA+B,EAC/B,sCAAsC,EACtC,sCAAsC,EAGtC,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAI9G;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAoCvD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAKhB;IAEA;IAEA;IAEA;IAGA;IAGA;IAhBT,QAAQ,CAA+D;IAEjF,YAEmB,MAAqB,EAErB,YAAwC,EAExC,yBAAkE,EAElE,uBAA8D,EAG9D,cAAmC,EAGnC,gBAA0C;QAZ1C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,8BAAyB,GAAzB,yBAAyB,CAAyC;QAElE,4BAAuB,GAAvB,uBAAuB,CAAuC;QAG9D,mBAAc,GAAd,cAAc,CAAqB;QAGnC,qBAAgB,GAAhB,gBAAgB,CAA0B;QAE3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;OAQG;IACI,cAAc,CAAC,aAAuC;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,qCAAqC,CACtF,gBAAgB,CAAC,aAAa,CAC/B,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAC/E,WAAW,EACX,sCAAsC,CAAC,mBAAmB,CAC3D,CAAC;QACF,IAAI,eAAe,EAAE,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;YACrE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,uFAAuF;iBACzH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,yBAAyB,CAAC,kCAAkC,CAAC,WAAW,CAAC,CAAC;QAC1G,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,+BAA+B,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,OAAO,EAAE,aAAa,WAAW,oEAAoE;iBACtG;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,sCAAsC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1F,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,OAAO,EAAE,wDAAwD,aAAa,kBAAkB,WAAW,IAAI;iBAChH;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE;gBACP,aAAa;gBACb,WAAW;gBACX,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CACxB,eAAe,CAAC,gBAAgB,IAAI,oCAAoC,EACxE,oCAAoC,CACrC;gBACD,UAAU,EAAE,eAAe,CAAC,UAAU;aACvC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,KAAK,CAAC,UAAU,CAAC,OAA0B;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,OAAO,EAAE,mEAAmE;0BACxE,yGAAyG;iBAC9G;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAEzC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAClF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;gBAClE,sBAAsB,EAAE,2BAA2B,CAAC,UAAU;gBAC9D,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;oBAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,OAAO,EAAE,0GAA0G;iBACpH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,sCAAsC,CAAC,mBAAmB,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY;oBACZ,OAAO,EAAE,8GAA8G;iBACxH;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACpG,IAAI,QAAQ,EAAE,IAAI,KAAK,2BAA2B,CAAC,UAAU,EAAE,CAAC;YAC9D,wFAAwF;YACxF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE;gBAChE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,yEAAyE,EAAE;aAClI,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAwD,CAAC;QAC1G,IAAI,OAAO,MAAM,EAAE,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE;oBACP,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,gIAAgI;iBAC1I;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAU;gBACxD,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC1B,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAwB,CAAC;YAChD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,CAAC,MAAM,gBAAgB,OAAO,CAAC,KAAK,CAAC,MAAM,uCAAuC,CAC1H,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;YAC3G,CAAC;YACD,IAAI,YAAY,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,sFAAsF;gBACtF,iFAAiF;gBACjF,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,CAAC,KAAK,cAAc,YAAY,qDAAqD,OAAO,CAAC,IAAI,yCAAyC,CACvK,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/F,MAAM,MAAM,GAAwC;gBAClD,OAAO;gBACP,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aACjE,CAAC;YACF,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,IAAI,EAAE,YAAY;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,aAAa;gBACb,SAAS;gBACT,KAAK;aACN,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,kBAAkB,CAC9B,OAA0B,EAC1B,OAAkC,EAClC,IAQC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC;QAC1E,IAAI,KAAK,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAClD,MAAM,KAAK,GAAmB;YAC5B,QAAQ,EAAE,0BAA0B;YACpC,IAAI,EAAE,kBAAkB,CAAC,SAAS;YAClC,QAAQ,EAAE,OAAO,CAAC,WAAW;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,4EAA4E;YAC5E,KAAK,EAAE;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;gBAC/B,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;aAC9E;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa;gBACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,KAAK,EAAE;oBACL,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5G,qFAAqF;oBACrF,qFAAqF;oBACrF,kBAAkB,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS;iBACnD;aACF;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO;gBAC3C,CAAC,CAAC;oBACE,KAAK,EAAE,IAAI,CAAC,KAAK,YAAY,KAAK;wBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;wBACxD,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC,EAAE;iBACrG;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;gBACvD,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAA;AA1SY,wBAAwB;IADpC,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IAEzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAA;IAC7C,WAAA,QAAQ,EAAE,CAAA;IAEV,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,QAAQ,EAAE,CAAA;+CAToB,0BAA0B;GAPhD,wBAAwB,CA0SpC","sourcesContent":["/*\n Embeddings execution service — the ONE seam through which the engine turns text into vectors\n * (RAG plan §3.d, DL2).\n \n Two callers, one code path — which is what keeps their vector spaces identical:\n * - the `rag:embedding-drain` worker embeds CORPUS chunks (`purpose: CORPUS`);\n * - Phase-5 retrieval embeds QUERIES (`purpose: QUERY`) through this same service, so a query\n * vector and the corpus vectors it searches were produced by the same class→model binding.\n \n ## Selection is by APPLICABILITY CLASS, never by model id (the standing model-selection rule)\n \n A caller names an {@link Embeddings_Applicability} class (`rag-default`); this service resolves\n * 1. the PROVIDER — the application's `EngineCapability.AI_EMBEDDINGS` selection\n * (`defineSaaSProviders` → `selection[AI_EMBEDDINGS].primary`), independent of the chat\n * provider by construction (DL2's whole point);\n * 2. the MODEL — `resolveEmbeddingsModelForApplicability` against the framework catalog.\n * The resolved `(class, model)` pair is what chunk rows are stamped with, and what the drain\n * worker's migration pass compares stamps against — so a preference edit re-binds the class and\n * the corpus converges onto the new model with no call-site changes.\n \n ## Failure posture\n \n \"Not configured\" (no provider serves `AI_EMBEDDINGS`) is a NON-ERROR state this service reports\n * through {@link resolveBinding}'s discriminated result — embeddings are an enhancement atop an\n * erasable corpus, and the drain worker turns it into one WARN per run, never a boot failure.\n * \"Configured but broken\" (provider selected but the contract/model/key is unusable) THROWS a\n * named CONFIGURATION error — that state is an operator mistake that silence would hide forever.\n \n ## Observability (H4)\n \n Every physical embedding call emits ONE agent-call trace of kind\n * {@link AgentCallTraceKind.EMBEDDING} through the same sink chain generations use — so the\n * PostHog sink can emit its `$ai_embedding` event and the companion filesystem sink records the\n * call. The trace's `output` is ALWAYS a `{ vectorCount, dims }` summary and its `input` a\n * `{ purpose, textCount, totalTextChars }` summary: raw vectors never enter the trace at any\n * verbosity (a vector is a lossy encoding of the source text, not telemetry), and the raw texts\n * stay out because a batch of corpus chunks is content the payload-gating levels were never\n * calibrated for. Usage completeness is OPERATION-AWARE: an embedding has no completion-token\n * dimension, so `tokenUsageComplete` is judged on input tokens alone.\n /\n\nimport { injectable, inject, optional } from 'inversify';\nimport { embedMany } from 'ai';\nimport {\n EngineCapability,\n ErrorType,\n ErrorCustomMessageReference,\n AgentCallOutcome,\n AgentCallTraceKind,\n AgentTraceabilityLevel,\n type AgentCallTrace,\n type AgentCallTraceSink,\n type AgentTraceabilityPolicy,\n} from '@wildo-ai/saas-models';\nimport {\n Embeddings_Applicability,\n EmbeddingsProvider_OperationKey,\n ExternalProvider_ExchangeProtocol_Kind,\n resolveEmbeddingsModelForApplicability,\n type EmbeddingsProvider_EmbedTextsOutput,\n type EmbeddingsProvider_TextPurpose,\n ProviderProtocolRuntimeKind,\n} from '@wildo-ai/external-connectors-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { ExternalProvidersRegistryBackendService } from '~wildo-backend-lib/external-providers/services/external-providers-registry.backend.service';\nimport type { BackendProviderRegistryBackendService } from '~wildo-backend-lib/external-providers/services/backend-provider-registry.backend.service';\n\n/\n Engine-side ceiling on texts per physical embedding request, combined with the provider's\n * declared `maxTextsPerBatch` as `min(provider, engine)`. Exists because a provider ceiling\n * (OpenAI: 2048 inputs) bounds REQUEST COUNT, not payload size — 2048 two-kilobyte chunks is a\n * ~4 MB request body; 256 keeps a worst-case batch well under typical body limits while still\n * amortizing per-request overhead across a whole chunk set.\n /\nexport const EMBEDDINGS_ENGINE_MAX_TEXTS_PER_CALL = 256;\n\n/\n The `agentRef` embeddings traces carry. Not a registered flows-actors agent — embeddings are a\n * protocol-kind execution, not an agent modality (DL2) — but the trace contract keys analytics\n * spans on `agentRef`, so the engine names its embedding executor stably here.\n /\nexport const EMBEDDINGS_TRACE_AGENT_REF = 'engine:embeddings';\n\n/* The resolved class→provider→model binding — the stamp identity chunk rows carry (DL2 migration key). /\nexport interface EmbeddingsResolvedBinding {\n /* The applicability class the binding was resolved FOR — persisted as `embeddingClass`. /\n applicability: Embeddings_Applicability;\n providerRef: string;\n /* Concrete model id — persisted as `embeddingModel`. Never authored at a call site. /\n model: string;\n /* The model's catalog dimension — persisted as `embeddingDims`, verified against measured vectors. /\n dims: number;\n /* Effective per-call text ceiling: `min(provider-declared, engine ceiling)`. /\n maxTextsPerBatch: number;\n /* Provider-declared retry posture, forwarded to the AI-SDK call. /\n maxRetries?: number;\n}\n\n/* Discriminated \"is embedding possible here?\" answer — see the file header's failure posture. /\nexport type EmbeddingsBindingResolution =\n \| { configured: true; binding: EmbeddingsResolvedBinding }\n \| {\n configured: false;\n /\n Why nothing is configured — for the drain worker's single WARN. Always the benign shape\n * (capability off / no provider declared); broken-but-selected states THROW instead.\n /\n reason: 'no_provider_for_capability';\n };\n\nexport interface EmbedTextsRequest {\n texts: readonly string[];\n purpose: EmbeddingsProvider_TextPurpose;\n applicability: Embeddings_Applicability;\n}\n\n@injectable()\nexport class EmbeddingsBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger)\n private readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n private readonly errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)\n private readonly externalProvidersRegistry: ExternalProvidersRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.BackendProviderRegistryService)\n private readonly backendProviderRegistry: BackendProviderRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.AgentCallTraceSink)\n @optional()\n private readonly agentTraceSink?: AgentCallTraceSink,\n @inject(SAAS_SERVICE_TYPES.AgentTraceabilityPolicy)\n @optional()\n private readonly agentTracePolicy?: AgentTraceabilityPolicy,\n ) {\n this.logDebug = this.logger.debugByType('EmbeddingsBackendService');\n this.logger.setDebugTypeLogging('EmbeddingsBackendService', false);\n }\n\n /\n Resolve the current class→provider→model binding, or report \"not configured\".\n \n `configured: false` covers exactly the benign absence (capability disabled, or no declared\n * provider fills `AI_EMBEDDINGS`). A provider that IS selected but cannot serve — contract\n * missing, `embedTexts` undeclared, model unresolvable for the class — THROWS a named\n * CONFIGURATION error: that is an operator mistake, and returning \"not configured\" for it\n * would make a misconfiguration indistinguishable from a deliberate opt-out.\n /\n public resolveBinding(applicability: Embeddings_Applicability): EmbeddingsBindingResolution {\n const providerRef = this.externalProvidersRegistry.getPrimaryProviderForEngineCapability(\n EngineCapability.AI_EMBEDDINGS,\n );\n if (!providerRef) {\n return { configured: false, reason: 'no_provider_for_capability' };\n }\n\n const runtimeContract = this.externalProvidersRegistry.getProviderRuntimeContract(\n providerRef,\n ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER,\n );\n if (runtimeContract?.kind !== ProviderProtocolRuntimeKind.EMBEDDINGS) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef,\n message: `Provider \"${providerRef}\" is selected for AI_EMBEDDINGS but declares no EMBEDDINGS_PROVIDER runtime contract.`,\n },\n });\n }\n\n const semanticOperations = this.externalProvidersRegistry.getEmbeddingsSemanticOperationKeys(providerRef);\n if (!semanticOperations.includes(EmbeddingsProvider_OperationKey.EMBED_TEXTS)) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef,\n message: `Provider \"${providerRef}\"'s embeddings contract does not declare the embedTexts operation.`,\n },\n });\n }\n\n const resolution = resolveEmbeddingsModelForApplicability({ applicability, providerRef });\n // `=== false` rather than `!…`: this compiler configuration narrows the literal-discriminant\n // union on the explicit comparison but not on the truthiness form (measured, not assumed).\n if (resolution.resolved === false) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef,\n applicability,\n failure: resolution.failure,\n consideredModels: resolution.consideredModels,\n message: `No embedding model resolves for applicability class \"${applicability}\" on provider \"${providerRef}\".`,\n },\n });\n }\n\n return {\n configured: true,\n binding: {\n applicability,\n providerRef,\n model: resolution.model,\n dims: resolution.entry.dims,\n maxTextsPerBatch: Math.min(\n runtimeContract.maxTextsPerBatch ?? EMBEDDINGS_ENGINE_MAX_TEXTS_PER_CALL,\n EMBEDDINGS_ENGINE_MAX_TEXTS_PER_CALL,\n ),\n maxRetries: runtimeContract.maxRetries,\n },\n };\n }\n\n /\n Embed ONE batch of texts under an applicability class (≤ the binding's `maxTextsPerBatch` —\n * paging a larger population into batches is the CALLER's job, because the caller owns the\n * run-level bounds and truncation reporting; this service owns one physical call).\n \n assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — this is the ONE egress through\n * which application text leaves for an external embeddings provider; every physical call emits a\n * kind-EMBEDDING agent-call trace (provider, model, token usage, outcome) through the standard\n * sink chain.\n * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — only the texts being embedded reach the\n * provider (no row context, no identifiers), and observability surfaces receive SUMMARIES only:\n * raw vectors and raw texts never enter traces, analytics, or logs at any verbosity.\n \n Verifies, before anything can be persisted: one vector per text, uniform measured dimension,\n * and measured dimension === the catalog's declared dimension for the resolved model (a\n * wrong-dims write would silently poison the ANN index the dims stamp keys). API keys are read\n * through the standard provider-secret path and never logged.\n /\n public async embedTexts(request: EmbedTextsRequest): Promise<EmbeddingsProvider_EmbedTextsOutput> {\n const resolutionResult = this.resolveBinding(request.applicability);\n if (!resolutionResult.configured) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n applicability: request.applicability,\n message: 'embedTexts was called with no AI_EMBEDDINGS provider configured. '\n + 'Callers must consult resolveBinding() first — the drain worker does, and reports the absence as a WARN.',\n },\n });\n }\n const binding = resolutionResult.binding;\n\n if (request.texts.length === 0 \|\| request.texts.length > binding.maxTextsPerBatch) {\n throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.VALIDATION,\n context: {\n textCount: request.texts.length,\n maxTextsPerBatch: binding.maxTextsPerBatch,\n message: 'embedTexts takes 1..maxTextsPerBatch texts per call — batching a larger population is the caller\\'s job.',\n },\n });\n }\n\n const protocolKind = ExternalProvider_ExchangeProtocol_Kind.EMBEDDINGS_PROVIDER;\n const apiKey = this.externalProvidersRegistry.getProviderApiKey(binding.providerRef, protocolKind);\n if (!apiKey) {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef: binding.providerRef,\n protocolKind,\n message: 'API key not found for the embeddings provider. Configure the provider secret in the application environment.',\n },\n });\n }\n\n const contract = this.backendProviderRegistry.getRuntimeContract(binding.providerRef, protocolKind);\n if (contract?.kind !== ProviderProtocolRuntimeKind.EMBEDDINGS) {\n // Unreachable past resolveBinding() unless the registry mutated mid-call; named anyway.\n throw this.errorBuilder.buildError(ErrorType.INTERNAL, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: { providerRef: binding.providerRef, message: 'Embeddings runtime contract vanished between resolution and invocation.' },\n });\n }\n const client = (await contract.sdkFactory(apiKey)) as { textEmbeddingModel?: (model: string) => unknown };\n if (typeof client?.textEmbeddingModel !== 'function') {\n throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n context: {\n providerRef: binding.providerRef,\n message: 'The embeddings provider\\'s SDK client exposes no textEmbeddingModel() — its sdkFactory does not serve the embeddings contract.',\n },\n });\n }\n\n const startTime = Date.now();\n const callTimestamp = new Date(startTime).toISOString();\n try {\n const result = await embedMany({\n model: client.textEmbeddingModel(binding.model) as never,\n values: [...request.texts],\n ...(binding.maxRetries !== undefined ? { maxRetries: binding.maxRetries } : {}),\n });\n\n const vectors = result.embeddings as number[][];\n if (vectors.length !== request.texts.length) {\n throw new Error(\n `Embeddings provider returned ${vectors.length} vectors for ${request.texts.length} texts — refusing a misaligned batch.`,\n );\n }\n const measuredDims = vectors[0]?.length ?? 0;\n if (vectors.some((vector) => vector.length !== measuredDims)) {\n throw new Error('Embeddings provider returned vectors of mixed dimensions within one batch — refusing.');\n }\n if (measuredDims !== binding.dims) {\n // Fail CLOSED: persisting under a wrong dims stamp poisons the per-dims ANN index and\n // every similarity comparison. The batch stays unembedded and the drain retries.\n throw new Error(\n `Embeddings model \"${binding.model}\" returned ${measuredDims}-dimensional vectors but its catalog row declares ${binding.dims} — refusing to stamp a wrong dimension.`,\n );\n }\n\n const inputTokens = typeof result.usage?.tokens === 'number' ? result.usage.tokens : undefined;\n const output: EmbeddingsProvider_EmbedTextsOutput = {\n vectors,\n model: binding.model,\n dims: measuredDims,\n usage: { ...(inputTokens !== undefined ? { inputTokens } : {}) },\n };\n await this.emitEmbeddingTrace(request, binding, {\n outcome: AgentCallOutcome.SUCCESS,\n callTimestamp,\n startTime,\n vectorCount: vectors.length,\n dims: measuredDims,\n inputTokens,\n });\n return output;\n } catch (error) {\n await this.emitEmbeddingTrace(request, binding, {\n outcome: AgentCallOutcome.FAILURE,\n callTimestamp,\n startTime,\n error,\n });\n throw error;\n }\n }\n\n /\n One trace per physical embedding call — kind EMBEDDING, summaries only (file header: raw\n * vectors and raw texts never enter the trace). Best-effort: a sink failure never turns a\n * successful embedding into a failed one (the agents-service discipline).\n */\n private async emitEmbeddingTrace(\n request: EmbedTextsRequest,\n binding: EmbeddingsResolvedBinding,\n call: {\n outcome: AgentCallOutcome;\n callTimestamp: string;\n startTime: number;\n vectorCount?: number;\n dims?: number;\n inputTokens?: number;\n error?: unknown;\n },\n ): Promise<void> {\n const sink = this.agentTraceSink;\n if (!sink) {\n return;\n }\n const level = this.agentTracePolicy?.level ?? AgentTraceabilityLevel.NONE;\n if (level === AgentTraceabilityLevel.NONE) {\n return;\n }\n const executionTime = Date.now() - call.startTime;\n const trace: AgentCallTrace = {\n agentRef: EMBEDDINGS_TRACE_AGENT_REF,\n kind: AgentCallTraceKind.EMBEDDING,\n provider: binding.providerRef,\n model: binding.model,\n callTimestamp: call.callTimestamp,\n outcome: call.outcome,\n // Summaries by contract — never the texts, never the vectors (file header).\n input: {\n purpose: request.purpose,\n applicability: binding.applicability,\n textCount: request.texts.length,\n totalTextChars: request.texts.reduce((total, text) => total + text.length, 0),\n },\n ...(call.outcome === AgentCallOutcome.SUCCESS\n ? { output: { vectorCount: call.vectorCount, dims: call.dims } }\n : {}),\n context: {\n callTimestamp: call.callTimestamp,\n executionTime,\n finishedAt: new Date().toISOString(),\n usage: {\n ...(call.inputTokens !== undefined ? { promptTokens: call.inputTokens, totalTokens: call.inputTokens } : {}),\n // Operation-aware completeness (H4): an embedding has no completion-token dimension,\n // so input tokens alone decide — never flagged incomplete for tokens it cannot have.\n tokenUsageComplete: call.inputTokens !== undefined,\n },\n },\n ...(call.outcome === AgentCallOutcome.FAILURE\n ? {\n error: call.error instanceof Error\n ? { name: call.error.name, message: call.error.message }\n : { message: typeof call.error === 'string' ? call.error : 'Unknown embeddings invocation error' },\n }\n : {}),\n };\n try {\n await sink.recordAgentCall({ trace, level });\n } catch (sinkError) {\n this.logDebug('Embedding trace sink failed (non-fatal)', {\n providerRef: binding.providerRef,\n error: sinkError instanceof Error ? sinkError.message : String(sinkError),\n });\n }\n }\n}\n"]}

package/dist/esm/external-providers/services/external-providers-registry.backend.service.d.ts CHANGED Viewed

@@ -4,8 +4,25 @@
  * Provides runtime access to the backend provider registry and
  * their protocol configurations, secrets, and operations.
  */
+import type { Container } from 'inversify';
 import { External_Providers_Registry, External_Providers_RegistryItem, EngineCapability } from '@wildo-ai/saas-models';
-import { ExternalProvider_ExchangeProtocol_Kind, ExternalProvider_ExchangeProtocol_Configuration_Base, LLMProvider_OperationKey, DocumentExtractionProvider_OperationKey, EmbeddingsProvider_OperationKey } from '@wildo-ai/external-connectors-models';
+/**
+ * How the required-capability floor is evaluated on the calling host.
+ *
+ * `includeEngineFloor` — whether ENABLED members of
+ * `ENGINE_CAPABILITIES_REQUIRING_A_PROVIDER_WHEN_ENABLED` count as required. True on a host
+ * expected to SERVE those slots (the application backend, the platform services); false on a
+ * scope-filtered host such as a minion, whose registry legitimately resolves none of them.
+ * The application's own `required` flags are honoured on every host regardless.
+ */
+export interface RequiredCapabilityFloorOptions {
+    includeEngineFloor: boolean;
+}
+import { ExternalProvider_ExchangeProtocol_Kind, ExternalProvider_ExchangeProtocol_Configuration_Base, LLMProvider_OperationKey, DocumentExtractionProvider_OperationKey, EmbeddingsProvider_OperationKey, ExternalProvider_SecretScope } from '@wildo-ai/external-connectors-models';
+import type { OrganizationProviderCredentialResolverPort } from '../../security/connected-accounts/organization-provider-credential-resolver.port';
+import type { UserProviderCredentialResolverPort } from '../../security/connected-accounts/user-provider-credential-resolver.port';
+import { ProviderCredentialResolutionSource } from '@wildo-ai/saas-models';
+import type { ExternalProvider_ConnectionShape, ExternalProvider_ConnectionTarget } from '@wildo-ai/external-connectors-models';
 import type { LoggerService } from '../../monitoring/logger/services/logger.service';
 import type { AppConfigurationService } from '../../config/services/app-configuration.backend.service';
 import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service';
@@ -33,6 +50,45 @@ export type RuntimeAgentClientProtocolProfile = {
     sessionMetaExtensions?: Record<string, unknown>;
     /** How this agent expresses each isolation posture; an absent posture is refused, never substituted. */
     sessionMetaExtensionsByHostConfigurationInheritance?: Partial<Record<string, Record<string, unknown>>>;
+    /**
+     * How the selected model reaches this agent. Absent means the provider
+     * declared none, and a run that selected a model is refused rather than
+     * started with the choice silently dropped.
+     */
+    modelDelivery?: {
+        channel: 'environment-variable';
+        environmentVariableName: string;
+    } | {
+        channel: 'session-config-option';
+        configId: string;
+    };
+    /**
+     * Semantic model id → this agent's own spelling, where the two differ.
+     *
+     * Absent, or absent for a given model, means the semantic id is sent
+     * unchanged — correct for every agent whose vocabulary already is Wildo's.
+     */
+    modelTransportIds?: Record<string, string>;
+    /** Agent-vocabulary session-mode ids to prefer per ceiling; an optimisation, never the guarantee. */
+    sessionModeIdsByPermissionCeiling?: Partial<Record<string, string[]>>;
+    /**
+     * The auth modes the PROVIDER declares its agent can actually use.
+     *
+     * Carried so an application-authored profile can be validated against it.
+     * The contract's list previously reached only the synthesized `default`
+     * profile, so an authored profile could declare any mode and nothing checked
+     * whether the agent supports it.
+     */
+    supportedAuthModes?: string[];
+    /**
+     * Host environment variables the AGENT ITSELF needs, declared by its provider.
+     *
+     * Distinct from the execution profile's list, which is application policy.
+     * This one is provider knowledge — which variable an agent reads to find its
+     * own credentials is not something an application can be expected to know —
+     * and it is UNIONED with the profile's rather than replaced by it.
+     */
+    inheritedEnvironmentVariables?: string[];
 };
 import { type ExternalProviderSelectionResolutionEvidence } from '../../external-providers/models/provider-selection-resolution-evidence.backend.definitions';
 /**
@@ -46,9 +102,9 @@ import { type ExternalProviderSelectionResolutionEvidence } from '../../external
  * Optional fields beyond the base also appear on this projection:
  *
  *   - `defaultExecutionProfileRef` / `executionProfiles` — set by
- *     `getDefaultProviderConfiguration` for `kind: 'agent-client-protocol'`
+ *     `getDefaultProviderConfiguration` for `kind: ProviderProtocolRuntimeKind.AGENT_CLIENT_PROTOCOL`
  *     contracts, consumed by `getAgentClientProtocolProfile` and the ACP runner.
- *   - `endpoints` — set for `kind: 'webhook-originator'`.
+ *   - `endpoints` — set for `kind: ProviderProtocolRuntimeKind.WEBHOOK_ORIGINATOR`.
  *
  * They stay typed as `unknown` here because their canonical schemas
  * live in `external-connectors-models`'s `AgentClientProtocol_Configuration` /
@@ -74,15 +130,101 @@ export declare class ExternalProvidersRegistryBackendService {
     protected readonly configService: AppConfigurationService;
     protected readonly errorBuilder: ErrorBuilderBackendService;
     protected readonly backendProviderRegistry: BackendProviderRegistryBackendService;
+    /**
+     * The container, used ONLY to resolve the per-organization credential store on demand
+     * ({@link resolveOrganizationCredentialResolver}). OPTIONAL, and appended LAST so no
+     * existing parameter position moves.
+     *
+     * **Deliberately NOT a constructor injection of
+     * {@link OrganizationProviderCredentialResolverPort}.** `@optional()` tolerates an ABSENT
+     * BINDING; it does not defer construction. So injecting the port directly made this
+     * configuration-tier registry construct the entire resource stack that stands behind the
+     * store — and that stack closes a cycle straight back here:
+     *
+     * ```
+     * SaaS.AuditLogSink → CompositeAuditLogSink → ExternalProvidersRegistryService
+     *   → OrganizationProviderCredentialResolver (the store)
+     *   → SystemAccessService / AuditLogsService → SaaS.AuditLogSink
+     * ```
+     *
+     * which InversifyJS reports as `Circular dependency found: (No dependency trace)` +
+     * `RangeError: Maximum call stack size exceeded` at BOOT — every platform service and every
+     * application backend, since `AuditLogsBackendService` injects the sink. The same edge
+     * poisons `LlmObservabilityAgentCallTraceSink`, which depends on this registry too.
+     *
+     * Resolving on demand is also what the port's own contract already assumed: this service is
+     * constructed at configuration tier, BEFORE repositories exist, while a tenant credential is
+     * only ever needed once a request is being served. Lazy-container is the pattern
+     * `AuthorizationsBackendService` and `WebSocketService` use to break their own cycles.
+     *
+     * When the container is absent (a unit harness) or the store is unbound (a minion resolving
+     * an LLM key), no tenant has its own credential here and resolution falls through to the
+     * deployment environment — the behaviour every caller had before the store existed.
+     */
+    protected readonly container?: Container;
     protected logDebug: (message: string, context?: Record<string, unknown>) => void;
     protected registry: External_Providers_Registry | null;
     protected isInitialized: boolean;
-    constructor(logger: LoggerService, configService: AppConfigurationService, errorBuilder: ErrorBuilderBackendService, backendProviderRegistry: BackendProviderRegistryBackendService);
+    constructor(logger: LoggerService, configService: AppConfigurationService, errorBuilder: ErrorBuilderBackendService, backendProviderRegistry: BackendProviderRegistryBackendService,
+    /**
+     * The container, used ONLY to resolve the per-organization credential store on demand
+     * ({@link resolveOrganizationCredentialResolver}). OPTIONAL, and appended LAST so no
+     * existing parameter position moves.
+     *
+     * **Deliberately NOT a constructor injection of
+     * {@link OrganizationProviderCredentialResolverPort}.** `@optional()` tolerates an ABSENT
+     * BINDING; it does not defer construction. So injecting the port directly made this
+     * configuration-tier registry construct the entire resource stack that stands behind the
+     * store — and that stack closes a cycle straight back here:
+     *
+     * ```
+     * SaaS.AuditLogSink → CompositeAuditLogSink → ExternalProvidersRegistryService
+     *   → OrganizationProviderCredentialResolver (the store)
+     *   → SystemAccessService / AuditLogsService → SaaS.AuditLogSink
+     * ```
+     *
+     * which InversifyJS reports as `Circular dependency found: (No dependency trace)` +
+     * `RangeError: Maximum call stack size exceeded` at BOOT — every platform service and every
+     * application backend, since `AuditLogsBackendService` injects the sink. The same edge
+     * poisons `LlmObservabilityAgentCallTraceSink`, which depends on this registry too.
+     *
+     * Resolving on demand is also what the port's own contract already assumed: this service is
+     * constructed at configuration tier, BEFORE repositories exist, while a tenant credential is
+     * only ever needed once a request is being served. Lazy-container is the pattern
+     * `AuthorizationsBackendService` and `WebSocketService` use to break their own cycles.
+     *
+     * When the container is absent (a unit harness) or the store is unbound (a minion resolving
+     * an LLM key), no tenant has its own credential here and resolution falls through to the
+     * deployment environment — the behaviour every caller had before the store existed.
+     */
+    container?: Container);
     /**
      * Initialize by projecting first-class backend provider modules into the
      * runtime registry facade used by existing callers.
      */
     initialize(): Promise<void>;
+    /**
+     * Report a registered provider whose optional runtime peer is not installed (#438).
+     *
+     * `requiredPackages` declares the npm packages a provider LAZY-LOADS — a vendor SDK that is
+     * never an engine or application dependency, installed only in a runtime that enables the
+     * provider. Two providers declare it (immudb -> `immudb-node`, posthog -> `posthog-node`), and
+     * until 2026-09-08 the field had NO READER anywhere: no start-up check, no installation step,
+     * no diagnostic. A provider could be registered with its SDK absent and the first sign was the
+     * feature quietly not working.
+     *
+     * A REPORT, never a refusal, and the asymmetry is deliberate: a declared provider may
+     * legitimately never be reached (a fan-out audit sink in an environment that emits nothing),
+     * so an absent optional peer is information rather than a misconfiguration. The capability
+     * DISAGREEMENT check in `define-saas-config` refuses, because a wrong declaration is wrong
+     * whatever happens next.
+     *
+     * Resolution is attempted from the RUNNING APPLICATION first and from this module second. The
+     * peer is installed in the application's own `backend-api`, not in the engine package, so
+     * resolving only from here would report a false absence — and a diagnostic that cries wolf is
+     * worse than the silence it replaces.
+     */
+    private reportMissingProviderRuntimePeers;
     private buildRuntimeRegistryFromProviderModules;
     getExternalProvidersRegistry(): External_Providers_Registry;
     getProviderTypes(): string[];
@@ -102,7 +244,10 @@ export declare class ExternalProvidersRegistryBackendService {
      * Resolve the provider ref(s) that should be ACTIVE for a capability,
      * honouring its declared `EngineCapabilityResolutionMode`:
      *   - `SELECT_ONE` (the default — billing, email, observability, …): the
-     *     single primary (fallbacks tried on failure), as a 0- or 1-element list.
+     *     single primary, as a 0- or 1-element list. A declared `whenUnavailable` entry
+     *     only orders the candidate list ahead of this call — it substitutes for a
+     *     primary that is not AVAILABLE, and nothing tries a second provider when a
+     *     call to the first one FAILS.
      *   - `FAN_OUT` (e.g. `COMPLIANCE_AUDIT_TRAIL`): EVERY declared + available
      *     provider — all active simultaneously (no primary, no failover).
      *
@@ -136,11 +281,18 @@ export declare class ExternalProvidersRegistryBackendService {
      * Audit (`COMPLIANCE_AUDIT_TRAIL`, when marked required) is the FIRST user, not
      * a special case: this generalizes the coherence to EVERY capability.
      */
-    getRequiredCapabilitiesWithoutProvider(): EngineCapability[];
+    getRequiredCapabilitiesWithoutProvider(options?: RequiredCapabilityFloorOptions): EngineCapability[];
+    /**
+     * The floor as a single fail-closed door (#328): every host that serves the application
+     * calls this after its registry is ready — the application backend, and the platform
+     * services after `refreshFromConfig()` — so "required with nothing serving it" cannot pass
+     * one host's boot because the check happened to live on another's branch.
+     */
+    assertRequiredCapabilityFloor(options?: RequiredCapabilityFloorOptions): void;
     /**
      * Per-environment external-provider selection override, read once from
      * `process.env.WILDO_PROVIDER_SELECTION_OVERRIDES` (a JSON map of
-     * `EngineCapability -> { primary, fallbacks? }`). Projected by the Wildo
+     * `EngineCapability -> { primary, whenUnavailable? }`). Projected by the Wildo
      * CLI's `env-vars-builder` from `wildo.infra.<env>.config.ts > providerSelection`.
      * Read as a string literal (not via a `platform-config-lib` import) to
      * preserve the engine → platform dependency direction — mirrors how
@@ -169,6 +321,33 @@ export declare class ExternalProvidersRegistryBackendService {
     getProviderConfiguration(providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): ResolvedProviderConfiguration | undefined;
     private mergeProviderConfiguration;
     private deepMergeRecord;
+    /**
+     * WHAT a declared secret identifies — the integration, or an account.
+     *
+     * DECLARED wins; otherwise DERIVED, and the derivation is deliberately narrow. A ref the REST
+     * runtime contract names as the OAuth2 client id or client secret is a REGISTRATION. Everything
+     * else answers CREDENTIAL.
+     *
+     * The fallback exists because the field arrived after 689 provider packages had been emitted,
+     * from catalogues that live outside this repository — a mark that only worked once every package
+     * had been re-emitted would enforce nothing until then, which for a guard is the same as not
+     * existing.
+     *
+     * It is a FLOOR, not a complete answer, and the direction of its error matters. Deriving
+     * CREDENTIAL for a registration secret the contract does not name in those two slots is the
+     * permissive mistake: such a secret would still be storable as a tenant's own. That is exactly
+     * the case a provider must declare explicitly, and it is why `scope` is authorable at all rather
+     * than purely computed.
+     */
+    getProviderSecretScope(providerRef: string, secretRef: string): ExternalProvider_SecretScope;
+    /**
+     * The contract entry for a ref, found by ENV-VAR NAME or by SLUG.
+     *
+     * Both are real addresses for the same thing and callers use both: the map key is the authoring
+     * slug (`accessToken`), while runtime contracts reference the env-var name (`SLACK_API_KEY`).
+     * Matching only one would leave half the callers unable to find an entry that is plainly there.
+     */
+    private findSecretsContractEntry;
     getProviderRuntimeContract(providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): ProviderProtocolRuntimeContract | undefined;
     getLLMSemanticOperationKeys(providerRef: string): LLMProvider_OperationKey[];
     /**
@@ -272,6 +451,126 @@ export declare class ExternalProvidersRegistryBackendService {
     private getProviderSecretEnvVarName;
     getConfiguredProviderSecretRef(providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): string | undefined;
     getProviderApiKey(providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): string | undefined;
+    /**
+     * WHICH connections this provider admits — the recorded decision, or the FLOOR.
+     *
+     * The floor is an APPLICATION-owned, undelegated connection and nothing else, and it is what a
+     * provider that has recorded no decision gets. It is not a permissive default: it is the one
+     * answer always available (an operator can author an environment variable) and the one that
+     * cannot produce a cross-tenant mistake (it has exactly one instance).
+     *
+     * Never derived here from a provider's auth shape. Whether a vendor can be connected per tenant
+     * is a fact about that vendor's product and about what somebody verified — see the catalogue
+     * record for a generated provider, or the module itself for a hand-authored one.
+     */
+    getProviderAdmissibleConnections(providerRef: string): readonly ExternalProvider_ConnectionShape[];
+    /**
+     * What the VENDOR admits, before this application's policy narrows it.
+     *
+     * Exists so a refusal can name the right cause. Once a policy can subtract, "this provider does
+     * not admit that connection" has two meanings — nobody recorded the vendor's capability, or this
+     * application switched it off — and they are repaired in different files by different people.
+     * A diagnostic that always blamed the catalogue would send an operator to edit a decision record
+     * that is already correct.
+     */
+    getProviderCatalogueAdmissibleConnections(providerRef: string): readonly ExternalProvider_ConnectionShape[];
+    /**
+     * Intersect what the VENDOR admits with what THIS application permits.
+     *
+     * Two layers answering different questions, and the intersection is what makes them composable:
+     * the catalogue record says an organization-owned Slack connection is possible because Slack is
+     * installed per workspace, while `providers.connections.slack` says whether this product offers
+     * one. A vendor opening a capability and a product deciding to use it are different events, and
+     * a single list would make them look identical.
+     *
+     * NARROWING ONLY, and that direction is the guarantee rather than a convention. An application
+     * cannot declare a connection the vendor does not support into existence — the connect leg would
+     * build an authorize URL the vendor rejects, or store a grant nothing can spend — so a policy
+     * entry naming an unadmitted shape contributes nothing instead of granting it.
+     *
+     * An ABSENT policy means "everything the catalogue admits", never "nothing". Most applications
+     * will never author one, and reading their silence as a refusal would switch off the whole
+     * connect surface for every product that has not yet thought about it.
+     *
+     * An intersection that empties is a legitimate outcome, not a misconfiguration: it is how an
+     * application switches a provider's connect surface off without removing the provider, which it
+     * may still need for its own application-scope credential.
+     */
+    private narrowToApplicationConnectionPolicy;
+    /**
+     * One provider secret for ONE connection target — strictly, with no substitution.
+     *
+     * ## Why this exists beside `resolveProviderSecretForOrganization` rather than extending it
+     *
+     * That method FALLS BACK: an organization with no credential of its own silently spends the
+     * deployment's. This one does not, and the difference is not a tightening of the same idea —
+     * it is the opposite policy. A fallback means the vendor sees the application's identity while
+     * the application believes it acted as the tenant, so every artifact the call leaves behind —
+     * a message, a record, a line in the vendor's own audit log — is attributed to the wrong party,
+     * and nothing downstream can detect it.
+     *
+     * An application that wants "the tenant's key when they have connected one, otherwise ours"
+     * still has it: it names an APPLICATION target for that usage, in its own code, where the
+     * choice is visible. What is removed is the engine performing the swap underneath a call that
+     * asked for a tenant.
+     *
+     * `resolveProviderSecretForOrganization` is superseded and is removed once its remaining
+     * consumers move; it is left standing only because its test currently carries another session's
+     * uncommitted work.
+     */
+    resolveProviderSecretForTarget(target: ExternalProvider_ConnectionTarget, providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind, secretRef: string): Promise<{
+        value: string;
+        source: ProviderCredentialResolutionSource;
+        credentialId?: string;
+    }>;
+    /** One shape for every connection refusal, so an operator reads the same sentence everywhere. */
+    private buildConnectionRefusal;
+    /**
+     * Lazy getter for the per-organization credential store — see the `container` constructor
+     * param's JSDoc for why this cannot be a constructor injection.
+     *
+     * `isBound` is what preserves the old `@optional()` semantics: a host that binds no store
+     * (a minion, a unit harness) resolves nothing here and falls through to the deployment
+     * environment, exactly as it did before the store existed.
+     */
+    protected resolveOrganizationCredentialResolver(): OrganizationProviderCredentialResolverPort | undefined;
+    /**
+     * Lazy getter for the per-user credential store — same mechanics as the organization one above,
+     * and the OPPOSITE meaning when it resolves nothing.
+     *
+     * An unbound organization store falls through to the deployment environment, because a tenant
+     * legitimately may not have its own credential. An unbound USER store REFUSES, because there is
+     * nothing a person's credential could fall through to: spending the deployment's shared
+     * principal on someone's behalf would attribute the act to the wrong party at the vendor. So a
+     * host that forgot to bind this gets a refusal naming the wiring fault, never a silent
+     * substitution.
+     */
+    protected resolveUserCredentialResolver(): UserProviderCredentialResolverPort | undefined;
+    /**
+     * Resolve one provider secret FOR A TENANT, or refuse naming what is missing.
+     *
+     * @param organizationId the tenant on whose behalf the call will be made. Must come from a
+     *   trusted execution scope — this method cannot verify it, and the envelope binding is what
+     *   keeps a mistake here from becoming a cross-tenant disclosure.
+     */
+    resolveProviderSecretForOrganization(organizationId: string, providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind, secretRef: string): Promise<{
+        value: string;
+        source: ProviderCredentialResolutionSource;
+        credentialId?: string;
+    }>;
+    /**
+     * The tenant-aware sibling of `getProviderApiKey` — the provider's configured `authConfig`
+     * secret, resolved for one organization.
+     *
+     * Refuses rather than returning `undefined` when the provider declares NO `authConfig.secretRef`
+     * at all, because that is a different fault from an unset value and an operator fixing it edits
+     * a different file: the provider module, not the environment.
+     */
+    resolveProviderApiKeyForOrganization(organizationId: string, providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): Promise<{
+        value: string;
+        source: ProviderCredentialResolutionSource;
+        credentialId?: string;
+    }>;
     isProviderEnabled(providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): boolean;
     getProviderProtocolSecrets(providerRef: string, protocolKind: ExternalProvider_ExchangeProtocol_Kind): Record<string, string> | undefined;
     /**

package/dist/esm/external-providers/services/external-providers-registry.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"external-providers-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/external-providers-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;~~AAGH~~,OAAO,EACH,2BAA2B,EAC3B,+BAA+B,EAC/B,gBAAgB,~~EAInB~~,MAAM,uBAAuB,CAAC;~~AAC~~/B,OAAO,~~EACH~~,sCAAsC,EACtC,oDAAoD,EACpD,wBAAwB,EACxB,uCAAuC,EACvC,+BAA+B,~~EAElC~~,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACzG,OAAO,KAAK,EAAE,+BAA+B,~~EAAE~~,MAAM,+CAA+C,CAAC;~~AACrG~~,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAOH,wBAAwB,EACxB,KAAK,iCAAiC,EACtC,KAAK,oCAAoC,EAC5C,MAAM,sCAAsC,CAAC;AAW9C;;;;;;;;;GASG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC5C,wFAAwF;IACxF,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sBAAsB,EAAE,wBAAwB,EAAE,CAAC;IACnD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,yBAAyB,EAAE,MAAM,EAAE,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,wGAAwG;IACxG,mDAAmD,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;~~CAC1G~~,CAAC;AAEF,OAAO,EAGH,KAAK,2CAA2C,EACnD,MAAM,yGAAyG,CAAC;AAEjH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,6BAA6B,GACrC,oDAAoD,GACpD;IACA,eAAe,CAAC,EAAE,+BAA+B,CAAC;IAClD,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CAC1C,CAAC;~~AA0DJ~~,qBACa,uCAAuC;IAOT,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IAC9B,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,uBAAuB;IACtD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,0BAA0B;IAChD,SAAS,CAAC,QAAQ,CAAC,uBAAuB,EAAE,qCAAqC;~~IAThJ~~,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,SAAS,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAQ;IAE9D,SAAS,CAAC,aAAa,UAAS;gBAG0B,MAAM,EAAE,aAAa,EACX,aAAa,EAAE,uBAAuB,EACnC,YAAY,EAAE,0BAA0B,EAC7B,uBAAuB,EAAE,qCAAqC;~~IAYhJ~~;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;~~IAoBxC~~,OAAO,CAAC,uCAAuC;IAuBxC,4BAA4B,IAAI,2BAA2B;IAK3D,gBAAgB,IAAI,MAAM,EAAE;IAK5B,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,+BAA+B,GAAG,SAAS;IAK7E,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAKhD;;;;;;OAMG;IACI,OAAO,IAAI,OAAO;IAIlB,+BAA+B,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,EAAE;IAiEvE,qCAAqC,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS;IAI9F~~;;;;;;;;;;;OAWG~~;IACI,oCAAoC,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,EAAE;IAQ5E,2BAA2B,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO;IAIzE;;;;;;;;;;;OAWG;IACI,yBAAyB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO;IAQvE;;;;;;;;;;OAUG;IACI,sCAAsC,~~IAAI~~,gBAAgB,EAAE;~~IAkBnE~~;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,+BAA+B,CAAC,~~CAA+E~~;~~IACvH~~,OAAO,CAAC,yCAAyC,CAAS;IAC1D,OAAO,CAAC,QAAQ,CAAC,mCAAmC,CAA+B;IAEnF,OAAO,CAAC,4BAA4B;IA2CpC;;;;OAIG;IACI,sCAAsC,CAAC,UAAU,EAAE,gBAAgB,GAAG,2CAA2C;IAwBxH,OAAO,CAAC,6BAA6B;IAoBrC;;;OAGG;IACI,wBAAwB,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,6BAA6B,GAAG,SAAS;IA0C5C,OAAO,CAAC,0BAA0B;IAgFlC,OAAO,CAAC,eAAe;~~IAkChB~~,0BAA0B,CAC7B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,+BAA+B,GAAG,SAAS;IAIvC,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB,EAAE;IAanF;;;;;OAKG;IACI,kCAAkC,CAAC,WAAW,EAAE,MAAM,GAAG,+BAA+B,EAAE;IAgBjG;;;;;;OAMG;IACI,0CAA0C,CAAC,WAAW,EAAE,MAAM,GAAG,uCAAuC,EAAE;IAgB1G,mCAAmC,CAAC,WAAW,EAAE,MAAM,GAAG,iCAAiC,GAAG,SAAS;IAQvG,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,iCAAiC,GAAG,SAAS;~~IA6BxG~~;;;;;;;;;OASG;IACI,sCAAsC,CACzC,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,MAAM,GAC5B,oCAAoC,GAAG,SAAS;IA8B5C,4CAA4C,CAC/C,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,MAAM,GAC5B,MAAM,GAAG,SAAS;IAuBrB,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,+BAA+B;IA2FvC,OAAO,CAAC,2BAA2B;IAsCnC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,0BAA0B;IAyClC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;;;;;;;;;;;;OAgBG;IACI,iBAAiB,CACpB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,EACpD,SAAS,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS;IAarB,OAAO,CAAC,2BAA2B;IAyB5B,8BAA8B,CACjC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,MAAM,GAAG,SAAS;IAOd,iBAAiB,CACpB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,MAAM,GAAG,SAAS;~~IAwBd~~,iBAAiB,CACpB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,OAAO;IA4BH,0BAA0B,CAC7B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS;IAoCrC;;;;;OAKG;IACU,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAmC/C,SAAS,CAAC,iBAAiB,IAAI,IAAI;CAWtC"}
1	+ {"version":3,"file":"external-providers-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/external-providers-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACH,2BAA2B,EAC3B,+BAA+B,EAC/B,gBAAgB,EAKnB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC3C,kBAAkB,EAAE,OAAO,CAAC;CAC/B;AACD,OAAO,EACL,sCAAsC,EACtC,oDAAoD,EACpD,wBAAwB,EACxB,uCAAuC,EACvC,+BAA+B,EAG/B,4BAA4B,EAC7B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,+FAA+F,CAAC;AAChK,OAAO,KAAK,EACR,kCAAkC,EACrC,MAAM,uFAAuF,CAAC;AAC/F,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAK3E,OAAO,KAAK,EACV,gCAAgC,EAChC,iCAAiC,EAClC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AACpH,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACzG,OAAO,KAAK,EAAE,+BAA+B,EAE5C,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAOH,wBAAwB,EACxB,KAAK,iCAAiC,EACtC,KAAK,oCAAoC,EAC5C,MAAM,sCAAsC,CAAC;AAW9C;;;;;;;;;GASG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC5C,wFAAwF;IACxF,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sBAAsB,EAAE,wBAAwB,EAAE,CAAC;IACnD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,yBAAyB,EAAE,MAAM,EAAE,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,wGAAwG;IACxG,mDAAmD,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvG;;;;OAIG;IACH,aAAa,CAAC,EACR;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,uBAAuB,EAAE,MAAM,CAAA;KAAE,GACpE;QAAE,OAAO,EAAE,uBAAuB,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,qGAAqG;IACrG,iCAAiC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B;;;;;;;OAOG;IACH,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5C,CAAC;AAEF,OAAO,EAGH,KAAK,2CAA2C,EACnD,MAAM,yGAAyG,CAAC;AAEjH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,6BAA6B,GACrC,oDAAoD,GACpD;IACA,eAAe,CAAC,EAAE,+BAA+B,CAAC;IAClD,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CAC1C,CAAC;AAqFJ,qBACa,uCAAuC;IAOT,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IAC9B,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,uBAAuB;IACtD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,0BAA0B;IAChD,SAAS,CAAC,QAAQ,CAAC,uBAAuB,EAAE,qCAAqC;IAC5I;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IAC8B,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;IAzC7E,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,SAAS,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAQ;IAE9D,SAAS,CAAC,aAAa,UAAS;gBAG0B,MAAM,EAAE,aAAa,EACX,aAAa,EAAE,uBAAuB,EACnC,YAAY,EAAE,0BAA0B,EAC7B,uBAAuB,EAAE,qCAAqC;IAC5I;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACiD,SAAS,CAAC,EAAE,SAAS;IAY7E;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBxC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,iCAAiC;IA8BzC,OAAO,CAAC,uCAAuC;IAuBxC,4BAA4B,IAAI,2BAA2B;IAK3D,gBAAgB,IAAI,MAAM,EAAE;IAK5B,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,+BAA+B,GAAG,SAAS;IAK7E,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAKhD;;;;;;OAMG;IACI,OAAO,IAAI,OAAO;IAIlB,+BAA+B,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,EAAE;IAiEvE,qCAAqC,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS;IAI9F;;;;;;;;;;;;;;OAcG;IACI,oCAAoC,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,EAAE;IAQ5E,2BAA2B,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO;IAIzE;;;;;;;;;;;OAWG;IACI,yBAAyB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO;IAQvE;;;;;;;;;;OAUG;IACI,sCAAsC,CACzC,OAAO,GAAE,8BAA6D,GACvE,gBAAgB,EAAE;IAmCrB;;;;;OAKG;IACI,6BAA6B,CAAC,OAAO,CAAC,EAAE,8BAA8B,GAAG,IAAI;IAgBpF;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,+BAA+B,CAAC,CAAqF;IAC7H,OAAO,CAAC,yCAAyC,CAAS;IAC1D,OAAO,CAAC,QAAQ,CAAC,mCAAmC,CAA+B;IAEnF,OAAO,CAAC,4BAA4B;IA2CpC;;;;OAIG;IACI,sCAAsC,CAAC,UAAU,EAAE,gBAAgB,GAAG,2CAA2C;IAwBxH,OAAO,CAAC,6BAA6B;IAoBrC;;;OAGG;IACI,wBAAwB,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,6BAA6B,GAAG,SAAS;IA0C5C,OAAO,CAAC,0BAA0B;IAgFlC,OAAO,CAAC,eAAe;IAkCvB;;;;;;;;;;;;;;;;;OAiBG;IACI,sBAAsB,CACzB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAClB,4BAA4B;IAqB/B;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IAYzB,0BAA0B,CAC7B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,+BAA+B,GAAG,SAAS;IAIvC,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,wBAAwB,EAAE;IAanF;;;;;OAKG;IACI,kCAAkC,CAAC,WAAW,EAAE,MAAM,GAAG,+BAA+B,EAAE;IAgBjG;;;;;;OAMG;IACI,0CAA0C,CAAC,WAAW,EAAE,MAAM,GAAG,uCAAuC,EAAE;IAgB1G,mCAAmC,CAAC,WAAW,EAAE,MAAM,GAAG,iCAAiC,GAAG,SAAS;IAQvG,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,iCAAiC,GAAG,SAAS;IAiDxG;;;;;;;;;OASG;IACI,sCAAsC,CACzC,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,MAAM,GAC5B,oCAAoC,GAAG,SAAS;IA8B5C,4CAA4C,CAC/C,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,MAAM,GAC5B,MAAM,GAAG,SAAS;IAuBrB,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,+BAA+B;IA2FvC,OAAO,CAAC,2BAA2B;IAsCnC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,OAAO,CAAC,0BAA0B;IAyClC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;;;;;;;;;;;;OAgBG;IACI,iBAAiB,CACpB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,EACpD,SAAS,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS;IAarB,OAAO,CAAC,2BAA2B;IAyB5B,8BAA8B,CACjC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,MAAM,GAAG,SAAS;IAOd,iBAAiB,CACpB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,MAAM,GAAG,SAAS;IAwBrB;;;;;;;;;;;OAWG;IACI,gCAAgC,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,gCAAgC,EAAE;IASzG;;;;;;;;OAQG;IACI,yCAAyC,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,gCAAgC,EAAE;IAOlH;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,mCAAmC;IAa3C;;;;;;;;;;;;;;;;;;;;OAoBG;IACU,8BAA8B,CACvC,MAAM,EAAE,iCAAiC,EACzC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,EACpD,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kCAAkC,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAsFhG,iGAAiG;IACjG,OAAO,CAAC,sBAAsB;IAmC9B;;;;;;;OAOG;IACH,SAAS,CAAC,qCAAqC,IAAI,0CAA0C,GAAG,SAAS;IAOzG;;;;;;;;;;OAUG;IACH,SAAS,CAAC,6BAA6B,IAAI,kCAAkC,GAAG,SAAS;IAOzF;;;;;;OAMG;IACU,oCAAoC,CAC7C,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,EACpD,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kCAAkC,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwDhG;;;;;;;OAOG;IACU,oCAAoC,CAC7C,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kCAAkC,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0BzF,iBAAiB,CACpB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,OAAO;IA4BH,0BAA0B,CAC7B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS;IAoCrC;;;;;OAKG;IACU,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAmC/C,SAAS,CAAC,iBAAiB,IAAI,IAAI;CAWtC"}