@wildo-ai/saas-backend-lib 1.1.2 → 1.1.3

package/dist/esm/config/bootstrap/application-runtime-profile.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-runtime-profile.backend.js","sourceRoot":"","sources":["../../../../../src/config/bootstrap/application-runtime-profile.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAN,IAAY,yBAiBX;AAjBD,WAAY,yBAAyB;IACnC;;;;;;;OAOG;IACH,wEAA2C,CAAA;IAC3C;;;;;OAKG;IACH,8CAAiB,CAAA;AACnB,CAAC,EAjBW,yBAAyB,KAAzB,yBAAyB,QAiBpC;AA+ID;;;;;;;GAOG;AACH,MAAM,UAAU,8CAA8C,CAC5D,OAAkC;IAElC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,yBAAyB,CAAC,mBAAmB;YAChD,OAAO;gBACL,2CAA2C,EAAE,IAAI;gBACjD,sCAAsC,EAAE,IAAI;gBAC5C,yEAAyE;gBACzE,wEAAwE;gBACxE,0DAA0D;gBAC1D,kCAAkC,EAAE,IAAI;gBACxC,sEAAsE;gBACtE,mEAAmE;gBACnE,gBAAgB;gBAChB,6BAA6B,EAAE,IAAI;gBACnC,qCAAqC,EAAE,IAAI;gBAC3C,sCAAsC,EAAE,IAAI;aAC7C,CAAC;QACJ,KAAK,yBAAyB,CAAC,MAAM;YACnC,OAAO;gBACL,8DAA8D;gBAC9D,sEAAsE;gBACtE,qEAAqE;gBACrE,mCAAmC;gBACnC,2CAA2C,EAAE,KAAK;gBAClD,uEAAuE;gBACvE,sEAAsE;gBACtE,qEAAqE;gBACrE,4DAA4D;gBAC5D,sCAAsC,EAAE,KAAK;gBAC7C,uEAAuE;gBACvE,yEAAyE;gBACzE,0EAA0E;gBAC1E,uEAAuE;gBACvE,8BAA8B;gBAC9B,kCAAkC,EAAE,KAAK;gBACzC,oEAAoE;gBACpE,yEAAyE;gBACzE,mEAAmE;gBACnE,mDAAmD;gBACnD,6BAA6B,EAAE,KAAK;gBACpC,qCAAqC,EAAE,KAAK;gBAC5C,yEAAyE;gBACzE,wEAAwE;gBACxE,sCAAsC,EAAE,KAAK;aAC9C,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,SAAS,GAAU,OAAO,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,SAAS,CAAC,gEAAgE,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAyCD;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,OAAkC;IAElC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,yBAAyB,CAAC,mBAAmB;YAChD,OAAO,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC;QACpD,KAAK,yBAAyB,CAAC,MAAM;YACnC,OAAO,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC;QACnD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,SAAS,GAAU,OAAO,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,SAAS,CAAC,8DAA8D,CACxH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * WHICH RUNTIME is booting the shared application lifecycle, and WHICH BOOT\n * ASSERTIONS therefore apply to it.\n *\n * ## The problem this solves\n *\n * `StartApplicationBackendService` is booted by more than one kind of runtime.\n * Historically it had no notion of which one, so every boot-time validator ran\n * against every runtime — including validators asserting things that are\n * structurally meaningless for that runtime. Each time one fired, the fix was to\n * make the runtime CARRY the declaration it could never use, which pushed the\n * runtime further from its own semantics:\n *\n * - a minion mounts no MCP/A2A transport, yet had to declare every named\n *   resource-server instance or fail closed on `operation.mcp.servers`\n *   membership refs;\n * - a minion had to carry a binding for EVERY generated-PDF field in the whole\n *   application, including resources it can never touch.\n *\n * Both produced production-shaped crash-loops. The root cause is not the\n * individual declaration — it is that the framework had no way to ask *\"does\n * this assertion apply to the runtime I am booting?\"*.\n *\n * ## Not the same concept as the runtime-control flags\n *\n * `headlessMode` / `skipCronSync` / `skipJobConsumers` answer a different\n * question: **\"should I START this subsystem?\"** They are host-authored controls\n * over what gets wired up. A runtime profile answers **\"does this DECLARATION\n * CLASS apply to me at all?\"**. The two are deliberately not merged: a runtime\n * may legitimately skip starting the HTTP server while still wanting its\n * transport declarations validated (a validation-only boot, for instance).\n *\n * ## Not the same concept as `BackgroundRuntimeType`\n *\n * `BackgroundRuntimeType` (`MINION` | `WORKER`) is a *deployable runtime kind* —\n * a docker-compose service, a K8s workload, a provider-runtime scope. This enum\n * is about *boot-assertion applicability* inside a single process. Today the two\n * vocabularies partially overlap, but they answer different questions and must\n * not be collapsed because their members currently coincide. Notably, a WORKER\n * has no member here at all: workers never boot this lifecycle (they are\n * standalone by design, with no backing-service access), so giving them a\n * profile would invent a member with no referent.\n *\n * See `.claude/plans/minion-runtime-scope.md` (Step 2, OQ-2).\n */\nexport enum ApplicationRuntimeProfile {\n  /**\n   * The application's own backend service. Serves the full public surface — HTTP\n   * API, MCP servers, A2A agents, generated-PDF rendering — so every boot\n   * assertion applies to it. This is the default for any host that does not\n   * declare otherwise, which keeps the fail-closed direction correct: a new\n   * runtime that forgets to declare its profile is over-validated, never\n   * under-validated.\n   */\n  APPLICATION_BACKEND = 'application_backend',\n  /**\n   * A minion — a background digital worker of the application owner. Boots the\n   * shared lifecycle to obtain the resource graph, DI container, and provider\n   * bindings, but mounts no externally-addressable transport and serves no\n   * human-facing surface.\n   */\n  MINION = 'minion',\n}\n\n/**\n * Boot assertions whose applicability varies by runtime.\n *\n * Every trait is phrased as an ASSERTION the framework makes, not as a\n * capability the runtime has. That distinction is load-bearing: a minion may\n * well render a PDF, so the honest trait is not \"renders PDFs\" but \"is required\n * to carry a COMPLETE set of PDF bindings for the whole application\". Phrasing\n * these as capabilities would have quietly removed working functionality.\n */\nexport interface ApplicationRuntimeProfileBootAssertions {\n  /**\n   * Whether every `operation.mcp.servers` / agent `actorSystemRefs` membership\n   * ref must resolve to a declared resource-server instance.\n   *\n   * Applies only to runtimes that actually SERVE those transports. For a runtime\n   * that mounts none, an unresolvable ref describes a surface it does not\n   * expose — asserting on it fails a boot over a declaration that could never be\n   * read.\n   */\n  assertsResourceServerMembershipCompleteness: boolean;\n  /**\n   * Whether EVERY generated-PDF file field in the resource graph must have a\n   * backend binding.\n   *\n   * Deliberately narrow: this gates only the COMPLETENESS half of PDF binding\n   * validation. The coherence half — a binding declared for a field that is not\n   * a generated PDF field, or pointing at the wrong template id — always runs,\n   * for every runtime. What you DID declare must always be correct; being\n   * required to declare ALL of it is what varies.\n   */\n  assertsGeneratedPdfBindingCompleteness: boolean;\n  /**\n   * Whether this runtime is EXPECTED to host the Layer-2 audit provider fan-out,\n   * so an ENABLED `COMPLIANCE_AUDIT_TRAIL` capability that resolves NO provider is\n   * a genuine misconfiguration worth a startup warning — as opposed to the\n   * expected, by-design posture of a runtime that is legitimately Layer-1-only.\n   *\n   * Different in KIND from the two completeness assertions above: those gate\n   * fail-CLOSED boot validators that THROW. This gates a fail-OPEN diagnostic — a\n   * `logger.warn`, never a throw — because Layer-1 database audit is unaffected\n   * either way and the runtime still boots. What varies by profile is only whether\n   * \"enabled but nothing serves it\" is a SIGNAL or NOISE for this runtime.\n   *\n   * Only the application backend installs the Layer-2 audit sink — the immudb node\n   * client is present only there — and its `immudb.audit-reconcile` cron backfills\n   * every Layer-1 `AUDIT_LOGS` row, INCLUDING rows emitted by minions, into the\n   * Layer-2 ledger. So an auxiliary runtime resolving no audit provider is correct\n   * by construction; warning there is false-alarm noise on every restart that\n   * trains operators to ignore the channel. The backend resolving no provider is\n   * the real misconfiguration this diagnostic exists to surface — which is why the\n   * fail-closed default profile (`APPLICATION_BACKEND`) asserts it.\n   *\n   * assurance-control: WILDO.AUDIT.SECURITY_EVENT — the absence of the Layer-2\n   * provider audit fan-out is diagnosed on the runtime accountable for hosting it,\n   * and only there.\n   */\n  assertsLayer2AuditProviderPresence: boolean;\n  /**\n   * Whether this runtime performs boot-time SCHEMA/DATA MAINTENANCE over the\n   * application's collections — the retention-marker backfill and the drifted\n   * unique-index reconciliation.\n   *\n   * Not a capability question (\"could it?\") but an ownership one (\"is it the\n   * runtime accountable for it?\"). Maintenance of this kind is application-WIDE\n   * and belongs to exactly one runtime:\n   *\n   * - it writes to every retention-governed collection, including ones a\n   *   confined runtime has no grant for and no business touching;\n   * - several runtimes doing it concurrently race each other over the same rows\n   *   and indexes for no benefit;\n   * - it is a migration, and a migration wants one owner.\n   *\n   * Covers THREE boot steps, and the third only became visible after the first\n   * two were gated: the retention-marker backfill, the drifted-unique-index\n   * reconciliation, and the declared-unique-index build+verification. The last\n   * one BUILDS as well as asserts — `mongooseModel.init()` creates a declared\n   * index, which is a write — so it belongs on the same side of the gate.\n   *\n   * Discovered the hard way (2026-08-12), twice in a row: once a minion's Mongo\n   * user became collection-scoped, its boot ran `updateMany` on `users` — a\n   * collection it had never declared — and crash-looped on `not authorized`.\n   * Gating that surfaced the next one immediately: `create: \"organizations\"`,\n   * 60 declared indexes it could not build and was not accountable for.\n   *\n   * The containment was right both times; the minion was doing the application\n   * backend's job. Granting `users` to a scraper to \"fix\" it would have inverted\n   * the whole point. The lesson generalises past these three: a boot step that\n   * WRITES to the application's schema belongs to the runtime that owns the\n   * schema, and adding one without asking which runtime owns it is how a\n   * confined runtime acquires an authority nobody intended.\n   */\n  performsBootSchemaMaintenance: boolean;\n\n  /**\n   * Whether this runtime OBSERVES the administrative-continuity floors at boot — the report that\n   * names organizations left without a usable owner, and applications left without a usable\n   * super-administrator.\n   *\n   * A separate assertion from {@link performsBootSchemaMaintenance} rather than a reuse of it,\n   * because the two are different authorities that happen to share a containment argument. One\n   * WRITES the application's schema; this one READS the application's whole administrative\n   * population. Collapsing them would make \"may this runtime repair the schema?\" and \"may this\n   * runtime audit who administers the tenant?\" one switch, and a future profile that wants one\n   * without the other would have nowhere to say so.\n   *\n   * FALSE for a confined runtime, for the reason `performsBootSchemaMaintenance` already generalises:\n   * the report reads `users` and `organizations` across the whole application, which a table-scoped\n   * role has neither the grants nor the accountability for. Observed 2026-08-24 on a clean-room\n   * PostgreSQL boot — `permission denied for table users` / `for table organizations`, twice per\n   * boot, from the marketing-scrapper minion. It never blocked the boot (the report is non-fatal by\n   * design), which is exactly why it survived: a recurring, ignorable error in a healthy startup.\n   *\n   * Note that the sibling's JSDoc had ALREADY named this hazard — \"granting `users` to a scraper to\n   * 'fix' it would have inverted the whole point\" — one boot step before it happened again. The\n   * lesson was recorded; the next step added simply did not consult it.\n   */\n  reportsAdministrativeContinuityFloors: boolean;\n  /**\n   * Whether this runtime PROVES at boot that its persistence adapter can commit\n   * the native transactions the application's authored boundaries require.\n   *\n   * The probe issues a transaction against a synthetic collection\n   * (`__wildo_transaction_readiness_probe`) that no `resourceAccess` declares or\n   * ever could, so a collection-scoped runtime is refused by construction.\n   *\n   * More importantly it proves an INFRASTRUCTURE property — \"does this Mongo\n   * deployment support multi-document transactions?\" — which is identical for\n   * every runtime pointed at that database, and which the application backend\n   * already proves. The boundaries it enumerates are the backend's too\n   * (`authentication.self-registration` is not something a minion serves; a\n   * minion is never a user, D15).\n   *\n   * Stated trade: a minion no longer fails FAST on a deployment whose adapter\n   * cannot do transactions — it would fail on its first transactional write\n   * instead. Acceptable because the backend fails fast on the same deployment,\n   * and because the alternative is granting every confined runtime access to a\n   * probe collection nobody declared.\n   */\n  assertsPersistenceTransactionReadiness: boolean;\n}\n\n/**\n * The single authority mapping a runtime profile to its boot assertions.\n *\n * Exhaustive by construction: the `never` fallthrough makes adding a profile\n * member a COMPILE error until its assertions are decided. That is the point —\n * the failure mode this whole mechanism exists to prevent is a new runtime\n * silently inheriting assertions nobody considered.\n */\nexport function resolveApplicationRuntimeProfileBootAssertions(\n  profile: ApplicationRuntimeProfile,\n): ApplicationRuntimeProfileBootAssertions {\n  switch (profile) {\n    case ApplicationRuntimeProfile.APPLICATION_BACKEND:\n      return {\n        assertsResourceServerMembershipCompleteness: true,\n        assertsGeneratedPdfBindingCompleteness: true,\n        // The backend is the SOLE host of the Layer-2 audit sink (immudb-node is\n        // installed only here), so an enabled audit capability with no resolved\n        // provider is a genuine misconfiguration it must surface.\n        assertsLayer2AuditProviderPresence: true,\n        // The backend owns application-wide schema maintenance. It is the one\n        // runtime holding database-wide authority, and a migration wants a\n        // single owner.\n        performsBootSchemaMaintenance: true,\n        reportsAdministrativeContinuityFloors: true,\n        assertsPersistenceTransactionReadiness: true,\n      };\n    case ApplicationRuntimeProfile.MINION:\n      return {\n        // A minion mounts no MCP/A2A transport. It does not carry the\n        // declarations at all (they are excluded from the minion projection),\n        // so asserting membership against an empty registry would fail every\n        // ref the resource graph declares.\n        assertsResourceServerMembershipCompleteness: false,\n        // A minion carries the application's PDF bindings and CAN render a PDF\n        // if one is bound. What it is not required to do is account for every\n        // generated-PDF field in the application, including on resources its\n        // `resourceAccess` whitelist forbids it from ever touching.\n        assertsGeneratedPdfBindingCompleteness: false,\n        // A minion is Layer-1-only by design: it never hosts the Layer-2 audit\n        // fan-out, and the backend's `immudb.audit-reconcile` cron backfills the\n        // minion's `AUDIT_LOGS` rows into Layer-2. Resolving no audit provider is\n        // therefore correct, not a misconfiguration — warning on every restart\n        // would be false-alarm noise.\n        assertsLayer2AuditProviderPresence: false,\n        // A minion must NOT. Its database user is collection-scoped to what\n        // `resourceAccess` declared, so a backfill over every retention-governed\n        // collection is both unauthorised and not its concern. The backend\n        // performs it; the minion simply reads the result.\n        performsBootSchemaMaintenance: false,\n        reportsAdministrativeContinuityFloors: false,\n        // Same reason, one layer up: the probe touches a synthetic collection no\n        // grant covers, and proves a deployment-wide property the backend owns.\n        assertsPersistenceTransactionReadiness: false,\n      };\n    default: {\n      const unhandled: never = profile;\n      throw new Error(\n        `Unhandled ApplicationRuntimeProfile '${String(unhandled)}' — every profile must declare its boot assertions explicitly.`,\n      );\n    }\n  }\n}\n\n/**\n * Runtime access policy — how this runtime's PRIVILEGED accesses behave while it runs.\n *\n * Deliberately separate from {@link ApplicationRuntimeProfileBootAssertions}: boot\n * assertions are evaluated once, at startup, and answer \"is this configuration\n * coherent for me?\". This answers \"what must hold every time I exercise privilege?\",\n * which is a different lifecycle and a different failure mode. Folding them together\n * would mean a boot-time concern and a per-call concern share a shape and drift into\n * each other.\n */\nexport interface ApplicationRuntimeAccessPolicy {\n  /**\n   * Whether a privileged system-access READ must be PROVABLY audited before its data\n   * is handed to the caller — i.e. if the audit cannot be written, the caller does not\n   * get the data.\n   *\n   * This is the fail-closed half of the accountable-bypass doctrine (D9 + OQ-5). The\n   * system-access door legitimately bypasses per-tenant authorization; what makes that\n   * acceptable for a non-human background worker is that every passage leaves evidence.\n   * An accountable bypass that stops being recorded is just a bypass.\n   *\n   * Scoped to the MINION profile ONLY, deliberately. Applying it to the application\n   * backend would make the framework's most common internal read path depend on audit\n   * availability — converting an audit hiccup into an application-wide outage, a\n   * self-inflicted denial of service. A minion's privileged reads are the elevated,\n   * least frequent, least latency-sensitive case, which is exactly where the trade\n   * favours accountability over availability.\n   *\n   * READS only. A write cannot be unwound by refusing to report it — its audit is\n   * already deferred to the transaction's post-commit queue, so failing afterwards\n   * would leave the mutation committed AND the caller erroring, inviting a retry that\n   * duplicates it. See the plan's Step 3b limitations.\n   *\n   * assurance-control: WILDO.AUDIT.SECURITY_EVENT — privileged access by a non-human\n   * runtime is not merely audited, it is audited or refused.\n   */\n  requiresAccountableSystemAccess: boolean;\n}\n\n/**\n * The single authority mapping a runtime profile to its access policy. Exhaustive by\n * construction for the same reason as the boot-assertion resolver: a new runtime must\n * DECIDE this, never inherit it by omission.\n */\nexport function resolveApplicationRuntimeAccessPolicy(\n  profile: ApplicationRuntimeProfile,\n): ApplicationRuntimeAccessPolicy {\n  switch (profile) {\n    case ApplicationRuntimeProfile.APPLICATION_BACKEND:\n      return { requiresAccountableSystemAccess: false };\n    case ApplicationRuntimeProfile.MINION:\n      return { requiresAccountableSystemAccess: true };\n    default: {\n      const unhandled: never = profile;\n      throw new Error(\n        `Unhandled ApplicationRuntimeProfile '${String(unhandled)}' — every profile must declare its access policy explicitly.`,\n      );\n    }\n  }\n}\n"]}
+{"version":3,"file":"application-runtime-profile.backend.js","sourceRoot":"","sources":["../../../../../src/config/bootstrap/application-runtime-profile.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAN,IAAY,yBAiBX;AAjBD,WAAY,yBAAyB;IACnC;;;;;;;OAOG;IACH,wEAA2C,CAAA;IAC3C;;;;;OAKG;IACH,8CAAiB,CAAA;AACnB,CAAC,EAjBW,yBAAyB,KAAzB,yBAAyB,QAiBpC;AAoJD;;;;;;;GAOG;AACH,MAAM,UAAU,8CAA8C,CAC5D,OAAkC;IAElC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,yBAAyB,CAAC,mBAAmB;YAChD,OAAO;gBACL,2CAA2C,EAAE,IAAI;gBACjD,sCAAsC,EAAE,IAAI;gBAC5C,yEAAyE;gBACzE,wEAAwE;gBACxE,0DAA0D;gBAC1D,kCAAkC,EAAE,IAAI;gBACxC,sFAAsF;gBACtF,yEAAyE;gBACzE,oCAAoC,EAAE,IAAI;gBAC1C,sEAAsE;gBACtE,mEAAmE;gBACnE,gBAAgB;gBAChB,6BAA6B,EAAE,IAAI;gBACnC,qCAAqC,EAAE,IAAI;gBAC3C,sCAAsC,EAAE,IAAI;aAC7C,CAAC;QACJ,KAAK,yBAAyB,CAAC,MAAM;YACnC,OAAO;gBACL,8DAA8D;gBAC9D,sEAAsE;gBACtE,qEAAqE;gBACrE,mCAAmC;gBACnC,2CAA2C,EAAE,KAAK;gBAClD,uEAAuE;gBACvE,sEAAsE;gBACtE,qEAAqE;gBACrE,4DAA4D;gBAC5D,sCAAsC,EAAE,KAAK;gBAC7C,uEAAuE;gBACvE,yEAAyE;gBACzE,0EAA0E;gBAC1E,uEAAuE;gBACvE,8BAA8B;gBAC9B,kCAAkC,EAAE,KAAK;gBACzC,wFAAwF;gBACxF,0FAA0F;gBAC1F,oCAAoC,EAAE,KAAK;gBAC3C,oEAAoE;gBACpE,yEAAyE;gBACzE,mEAAmE;gBACnE,mDAAmD;gBACnD,6BAA6B,EAAE,KAAK;gBACpC,qCAAqC,EAAE,KAAK;gBAC5C,yEAAyE;gBACzE,wEAAwE;gBACxE,sCAAsC,EAAE,KAAK;aAC9C,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,SAAS,GAAU,OAAO,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,SAAS,CAAC,gEAAgE,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAyCD;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,OAAkC;IAElC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,yBAAyB,CAAC,mBAAmB;YAChD,OAAO,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC;QACpD,KAAK,yBAAyB,CAAC,MAAM;YACnC,OAAO,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC;QACnD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,SAAS,GAAU,OAAO,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,SAAS,CAAC,8DAA8D,CACxH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * WHICH RUNTIME is booting the shared application lifecycle, and WHICH BOOT\n * ASSERTIONS therefore apply to it.\n *\n * ## The problem this solves\n *\n * `StartApplicationBackendService` is booted by more than one kind of runtime.\n * Historically it had no notion of which one, so every boot-time validator ran\n * against every runtime — including validators asserting things that are\n * structurally meaningless for that runtime. Each time one fired, the fix was to\n * make the runtime CARRY the declaration it could never use, which pushed the\n * runtime further from its own semantics:\n *\n * - a minion mounts no MCP/A2A transport, yet had to declare every named\n *   resource-server instance or fail closed on `operation.mcp.servers`\n *   membership refs;\n * - a minion had to carry a binding for EVERY generated-PDF field in the whole\n *   application, including resources it can never touch.\n *\n * Both produced production-shaped crash-loops. The root cause is not the\n * individual declaration — it is that the framework had no way to ask *\"does\n * this assertion apply to the runtime I am booting?\"*.\n *\n * ## Not the same concept as the runtime-control flags\n *\n * `headlessMode` / `skipCronSync` / `skipJobConsumers` answer a different\n * question: **\"should I START this subsystem?\"** They are host-authored controls\n * over what gets wired up. A runtime profile answers **\"does this DECLARATION\n * CLASS apply to me at all?\"**. The two are deliberately not merged: a runtime\n * may legitimately skip starting the HTTP server while still wanting its\n * transport declarations validated (a validation-only boot, for instance).\n *\n * ## Not the same concept as `BackgroundRuntimeType`\n *\n * `BackgroundRuntimeType` (`MINION` | `WORKER`) is a *deployable runtime kind* —\n * a docker-compose service, a K8s workload, a provider-runtime scope. This enum\n * is about *boot-assertion applicability* inside a single process. Today the two\n * vocabularies partially overlap, but they answer different questions and must\n * not be collapsed because their members currently coincide. Notably, a WORKER\n * has no member here at all: workers never boot this lifecycle (they are\n * standalone by design, with no backing-service access), so giving them a\n * profile would invent a member with no referent.\n *\n * See `.claude/plans/minion-runtime-scope.md` (Step 2, OQ-2).\n */\nexport enum ApplicationRuntimeProfile {\n  /**\n   * The application's own backend service. Serves the full public surface — HTTP\n   * API, MCP servers, A2A agents, generated-PDF rendering — so every boot\n   * assertion applies to it. This is the default for any host that does not\n   * declare otherwise, which keeps the fail-closed direction correct: a new\n   * runtime that forgets to declare its profile is over-validated, never\n   * under-validated.\n   */\n  APPLICATION_BACKEND = 'application_backend',\n  /**\n   * A minion — a background digital worker of the application owner. Boots the\n   * shared lifecycle to obtain the resource graph, DI container, and provider\n   * bindings, but mounts no externally-addressable transport and serves no\n   * human-facing surface.\n   */\n  MINION = 'minion',\n}\n\n/**\n * Boot assertions whose applicability varies by runtime.\n *\n * Every trait is phrased as an ASSERTION the framework makes, not as a\n * capability the runtime has. That distinction is load-bearing: a minion may\n * well render a PDF, so the honest trait is not \"renders PDFs\" but \"is required\n * to carry a COMPLETE set of PDF bindings for the whole application\". Phrasing\n * these as capabilities would have quietly removed working functionality.\n */\nexport interface ApplicationRuntimeProfileBootAssertions {\n  /**\n   * Whether every `operation.mcp.servers` / agent `actorSystemRefs` membership\n   * ref must resolve to a declared resource-server instance.\n   *\n   * Applies only to runtimes that actually SERVE those transports. For a runtime\n   * that mounts none, an unresolvable ref describes a surface it does not\n   * expose — asserting on it fails a boot over a declaration that could never be\n   * read.\n   */\n  assertsResourceServerMembershipCompleteness: boolean;\n  /**\n   * Whether EVERY generated-PDF file field in the resource graph must have a\n   * backend binding.\n   *\n   * Deliberately narrow: this gates only the COMPLETENESS half of PDF binding\n   * validation. The coherence half — a binding declared for a field that is not\n   * a generated PDF field, or pointing at the wrong template id — always runs,\n   * for every runtime. What you DID declare must always be correct; being\n   * required to declare ALL of it is what varies.\n   */\n  assertsGeneratedPdfBindingCompleteness: boolean;\n  /**\n   * Whether this runtime is EXPECTED to host the Layer-2 audit provider fan-out,\n   * so an ENABLED `COMPLIANCE_AUDIT_TRAIL` capability that resolves NO provider is\n   * a genuine misconfiguration worth a startup warning — as opposed to the\n   * expected, by-design posture of a runtime that is legitimately Layer-1-only.\n   *\n   * Different in KIND from the two completeness assertions above: those gate\n   * fail-CLOSED boot validators that THROW. This gates a fail-OPEN diagnostic — a\n   * `logger.warn`, never a throw — because Layer-1 database audit is unaffected\n   * either way and the runtime still boots. What varies by profile is only whether\n   * \"enabled but nothing serves it\" is a SIGNAL or NOISE for this runtime.\n   *\n   * Only the application backend installs the Layer-2 audit sink — the immudb node\n   * client is present only there — and its `immudb.audit-reconcile` cron backfills\n   * every Layer-1 `AUDIT_LOGS` row, INCLUDING rows emitted by minions, into the\n   * Layer-2 ledger. So an auxiliary runtime resolving no audit provider is correct\n   * by construction; warning there is false-alarm noise on every restart that\n   * trains operators to ignore the channel. The backend resolving no provider is\n   * the real misconfiguration this diagnostic exists to surface — which is why the\n   * fail-closed default profile (`APPLICATION_BACKEND`) asserts it.\n   *\n   * assurance-control: WILDO.AUDIT.SECURITY_EVENT — the absence of the Layer-2\n   * provider audit fan-out is diagnosed on the runtime accountable for hosting it,\n   * and only there.\n   */\n  assertsLayer2AuditProviderPresence: boolean;\n  /**\n   * Whether ENABLED members of `ENGINE_CAPABILITIES_REQUIRING_A_PROVIDER_WHEN_ENABLED` must resolve a\n   * provider on this host (#328). The application's own `required` flags are asserted everywhere.\n   */\n  assertsEngineCapabilityProviderFloor: boolean;\n  /**\n   * Whether this runtime performs boot-time SCHEMA/DATA MAINTENANCE over the\n   * application's collections — the retention-marker backfill and the drifted\n   * unique-index reconciliation.\n   *\n   * Not a capability question (\"could it?\") but an ownership one (\"is it the\n   * runtime accountable for it?\"). Maintenance of this kind is application-WIDE\n   * and belongs to exactly one runtime:\n   *\n   * - it writes to every retention-governed collection, including ones a\n   *   confined runtime has no grant for and no business touching;\n   * - several runtimes doing it concurrently race each other over the same rows\n   *   and indexes for no benefit;\n   * - it is a migration, and a migration wants one owner.\n   *\n   * Covers THREE boot steps, and the third only became visible after the first\n   * two were gated: the retention-marker backfill, the drifted-unique-index\n   * reconciliation, and the declared-unique-index build+verification. The last\n   * one BUILDS as well as asserts — `mongooseModel.init()` creates a declared\n   * index, which is a write — so it belongs on the same side of the gate.\n   *\n   * Discovered the hard way (2026-08-12), twice in a row: once a minion's Mongo\n   * user became collection-scoped, its boot ran `updateMany` on `users` — a\n   * collection it had never declared — and crash-looped on `not authorized`.\n   * Gating that surfaced the next one immediately: `create: \"organizations\"`,\n   * 60 declared indexes it could not build and was not accountable for.\n   *\n   * The containment was right both times; the minion was doing the application\n   * backend's job. Granting `users` to a scraper to \"fix\" it would have inverted\n   * the whole point. The lesson generalises past these three: a boot step that\n   * WRITES to the application's schema belongs to the runtime that owns the\n   * schema, and adding one without asking which runtime owns it is how a\n   * confined runtime acquires an authority nobody intended.\n   */\n  performsBootSchemaMaintenance: boolean;\n\n  /**\n   * Whether this runtime OBSERVES the administrative-continuity floors at boot — the report that\n   * names organizations left without a usable owner, and applications left without a usable\n   * super-administrator.\n   *\n   * A separate assertion from {@link performsBootSchemaMaintenance} rather than a reuse of it,\n   * because the two are different authorities that happen to share a containment argument. One\n   * WRITES the application's schema; this one READS the application's whole administrative\n   * population. Collapsing them would make \"may this runtime repair the schema?\" and \"may this\n   * runtime audit who administers the tenant?\" one switch, and a future profile that wants one\n   * without the other would have nowhere to say so.\n   *\n   * FALSE for a confined runtime, for the reason `performsBootSchemaMaintenance` already generalises:\n   * the report reads `users` and `organizations` across the whole application, which a table-scoped\n   * role has neither the grants nor the accountability for. Observed 2026-08-24 on a clean-room\n   * PostgreSQL boot — `permission denied for table users` / `for table organizations`, twice per\n   * boot, from the marketing-scrapper minion. It never blocked the boot (the report is non-fatal by\n   * design), which is exactly why it survived: a recurring, ignorable error in a healthy startup.\n   *\n   * Note that the sibling's JSDoc had ALREADY named this hazard — \"granting `users` to a scraper to\n   * 'fix' it would have inverted the whole point\" — one boot step before it happened again. The\n   * lesson was recorded; the next step added simply did not consult it.\n   */\n  reportsAdministrativeContinuityFloors: boolean;\n  /**\n   * Whether this runtime PROVES at boot that its persistence adapter can commit\n   * the native transactions the application's authored boundaries require.\n   *\n   * The probe issues a transaction against a synthetic collection\n   * (`__wildo_transaction_readiness_probe`) that no `resourceAccess` declares or\n   * ever could, so a collection-scoped runtime is refused by construction.\n   *\n   * More importantly it proves an INFRASTRUCTURE property — \"does this Mongo\n   * deployment support multi-document transactions?\" — which is identical for\n   * every runtime pointed at that database, and which the application backend\n   * already proves. The boundaries it enumerates are the backend's too\n   * (`authentication.self-registration` is not something a minion serves; a\n   * minion is never a user, D15).\n   *\n   * Stated trade: a minion no longer fails FAST on a deployment whose adapter\n   * cannot do transactions — it would fail on its first transactional write\n   * instead. Acceptable because the backend fails fast on the same deployment,\n   * and because the alternative is granting every confined runtime access to a\n   * probe collection nobody declared.\n   */\n  assertsPersistenceTransactionReadiness: boolean;\n}\n\n/**\n * The single authority mapping a runtime profile to its boot assertions.\n *\n * Exhaustive by construction: the `never` fallthrough makes adding a profile\n * member a COMPILE error until its assertions are decided. That is the point —\n * the failure mode this whole mechanism exists to prevent is a new runtime\n * silently inheriting assertions nobody considered.\n */\nexport function resolveApplicationRuntimeProfileBootAssertions(\n  profile: ApplicationRuntimeProfile,\n): ApplicationRuntimeProfileBootAssertions {\n  switch (profile) {\n    case ApplicationRuntimeProfile.APPLICATION_BACKEND:\n      return {\n        assertsResourceServerMembershipCompleteness: true,\n        assertsGeneratedPdfBindingCompleteness: true,\n        // The backend is the SOLE host of the Layer-2 audit sink (immudb-node is\n        // installed only here), so an enabled audit capability with no resolved\n        // provider is a genuine misconfiguration it must surface.\n        assertsLayer2AuditProviderPresence: true,\n        // The backend is the host that SERVES email, billing and SMS, so an enabled slot with\n        // nothing behind it is a misconfiguration it must refuse at boot (#328).\n        assertsEngineCapabilityProviderFloor: true,\n        // The backend owns application-wide schema maintenance. It is the one\n        // runtime holding database-wide authority, and a migration wants a\n        // single owner.\n        performsBootSchemaMaintenance: true,\n        reportsAdministrativeContinuityFloors: true,\n        assertsPersistenceTransactionReadiness: true,\n      };\n    case ApplicationRuntimeProfile.MINION:\n      return {\n        // A minion mounts no MCP/A2A transport. It does not carry the\n        // declarations at all (they are excluded from the minion projection),\n        // so asserting membership against an empty registry would fail every\n        // ref the resource graph declares.\n        assertsResourceServerMembershipCompleteness: false,\n        // A minion carries the application's PDF bindings and CAN render a PDF\n        // if one is bound. What it is not required to do is account for every\n        // generated-PDF field in the application, including on resources its\n        // `resourceAccess` whitelist forbids it from ever touching.\n        assertsGeneratedPdfBindingCompleteness: false,\n        // A minion is Layer-1-only by design: it never hosts the Layer-2 audit\n        // fan-out, and the backend's `immudb.audit-reconcile` cron backfills the\n        // minion's `AUDIT_LOGS` rows into Layer-2. Resolving no audit provider is\n        // therefore correct, not a misconfiguration — warning on every restart\n        // would be false-alarm noise.\n        assertsLayer2AuditProviderPresence: false,\n        // A minion's registry is filtered to ITS scope; the backend serves the engine flows, so\n        // an enabled email/billing/SMS slot resolving nothing here is the normal topology (#328).\n        assertsEngineCapabilityProviderFloor: false,\n        // A minion must NOT. Its database user is collection-scoped to what\n        // `resourceAccess` declared, so a backfill over every retention-governed\n        // collection is both unauthorised and not its concern. The backend\n        // performs it; the minion simply reads the result.\n        performsBootSchemaMaintenance: false,\n        reportsAdministrativeContinuityFloors: false,\n        // Same reason, one layer up: the probe touches a synthetic collection no\n        // grant covers, and proves a deployment-wide property the backend owns.\n        assertsPersistenceTransactionReadiness: false,\n      };\n    default: {\n      const unhandled: never = profile;\n      throw new Error(\n        `Unhandled ApplicationRuntimeProfile '${String(unhandled)}' — every profile must declare its boot assertions explicitly.`,\n      );\n    }\n  }\n}\n\n/**\n * Runtime access policy — how this runtime's PRIVILEGED accesses behave while it runs.\n *\n * Deliberately separate from {@link ApplicationRuntimeProfileBootAssertions}: boot\n * assertions are evaluated once, at startup, and answer \"is this configuration\n * coherent for me?\". This answers \"what must hold every time I exercise privilege?\",\n * which is a different lifecycle and a different failure mode. Folding them together\n * would mean a boot-time concern and a per-call concern share a shape and drift into\n * each other.\n */\nexport interface ApplicationRuntimeAccessPolicy {\n  /**\n   * Whether a privileged system-access READ must be PROVABLY audited before its data\n   * is handed to the caller — i.e. if the audit cannot be written, the caller does not\n   * get the data.\n   *\n   * This is the fail-closed half of the accountable-bypass doctrine (D9 + OQ-5). The\n   * system-access door legitimately bypasses per-tenant authorization; what makes that\n   * acceptable for a non-human background worker is that every passage leaves evidence.\n   * An accountable bypass that stops being recorded is just a bypass.\n   *\n   * Scoped to the MINION profile ONLY, deliberately. Applying it to the application\n   * backend would make the framework's most common internal read path depend on audit\n   * availability — converting an audit hiccup into an application-wide outage, a\n   * self-inflicted denial of service. A minion's privileged reads are the elevated,\n   * least frequent, least latency-sensitive case, which is exactly where the trade\n   * favours accountability over availability.\n   *\n   * READS only. A write cannot be unwound by refusing to report it — its audit is\n   * already deferred to the transaction's post-commit queue, so failing afterwards\n   * would leave the mutation committed AND the caller erroring, inviting a retry that\n   * duplicates it. See the plan's Step 3b limitations.\n   *\n   * assurance-control: WILDO.AUDIT.SECURITY_EVENT — privileged access by a non-human\n   * runtime is not merely audited, it is audited or refused.\n   */\n  requiresAccountableSystemAccess: boolean;\n}\n\n/**\n * The single authority mapping a runtime profile to its access policy. Exhaustive by\n * construction for the same reason as the boot-assertion resolver: a new runtime must\n * DECIDE this, never inherit it by omission.\n */\nexport function resolveApplicationRuntimeAccessPolicy(\n  profile: ApplicationRuntimeProfile,\n): ApplicationRuntimeAccessPolicy {\n  switch (profile) {\n    case ApplicationRuntimeProfile.APPLICATION_BACKEND:\n      return { requiresAccountableSystemAccess: false };\n    case ApplicationRuntimeProfile.MINION:\n      return { requiresAccountableSystemAccess: true };\n    default: {\n      const unhandled: never = profile;\n      throw new Error(\n        `Unhandled ApplicationRuntimeProfile '${String(unhandled)}' — every profile must declare its access policy explicitly.`,\n      );\n    }\n  }\n}\n"]}

package/dist/esm/config/models/app-config.backend.schemas.d.ts

@@ -66,12 +66,29 @@ export interface AppConfiguration_MinionEntry {
  * The named runtime source for the minion execution-mode vocabulary (KD-3).
  *
  * A const object rather than a nominal enum, deliberately: the AUTHORING surface for these values
- * is `defineMinionConfig` in `platform-config-lib` (which this engine package must not depend on,
- * and which declares the same wire values structurally), and the CLI merge in
- * `app-runtime-targets.service.ts` carries them across that seam as plain strings. A nominal enum
- * here would break that seam's assignability while unifying nothing. When the vocabulary ever
- * gains a member, add it here AND in `define-minion-config.ts` in the same change — the two
- * declarations share wire values by contract, not by import.
+ * is `defineMinionConfig` in `platform-config-lib`, which declares the same wire values
+ * structurally, and the CLI merge in `app-runtime-targets.service.ts` carries them across that seam
+ * as plain strings. A nominal enum here would break that seam's assignability while unifying
+ * nothing. That reasoning is unchanged and is why this stays a const object.
+ *
+ * ## CORRECTION 2026-09-09 — the premise attached to it was false, and it was load-bearing
+ *
+ * This used to read "`defineMinionConfig` in `platform-config-lib` (which this engine package must
+ * not depend on ...)". There is no such prohibition, and there never was one this file honoured:
+ * `@wildo-ai/platform-config-lib` is a hard `dependencies` edge in this package's `package.json`,
+ * and line 29 of THIS file imports two runtime values (`INFRA_DEFAULT_PORTS`, `STORAGE_DEFAULTS`)
+ * across it. A boundary asserted in prose while the file beside it crosses the boundary is not a
+ * policy; it is a claim nobody checked.
+ *
+ * It mattered because it was cited. `app-configuration-loader.backend.service.ts` pointed at this
+ * note as the reason its bootstrap-response schema re-declared the managed minion and worker blocks
+ * by hand instead of importing them — and that hand copy silently stripped `mode`/`schedule` (the
+ * KD-12 cron-tick path, dead in production) and then `platformAccess`, because Zod deletes what a
+ * schema does not declare. The loader now imports the platform's own schemas; only the two
+ * declarations below remain, and they are held in step MECHANICALLY by
+ * `config/__tests__/managed-runtime-inventory-parity.backend.test.ts` rather than by a sentence
+ * asking the next author to remember. That pin covers this vocabulary too: adding a member here and
+ * not in `define-minion-config.ts` (or the reverse) reddens it.
  */
 export declare const APP_CONFIGURATION_MINION_MODES: {
     /** A long-running daemon; self-ticks from its own loop, never registered as a CronJob. */
@@ -80,7 +97,56 @@ export declare const APP_CONFIGURATION_MINION_MODES: {
     readonly CRON: "cron";
 };
 export type AppConfigurationMinionMode = (typeof APP_CONFIGURATION_MINION_MODES)[keyof typeof APP_CONFIGURATION_MINION_MODES];
-declare const AppConfiguration_MinionsSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<AppConfiguration_MinionEntry, unknown, z.core.$ZodTypeInternals<AppConfiguration_MinionEntry, unknown>>>>;
+/**
+ * Exported ONLY so the parity pin can reach it — no production consumer imports either of these two
+ * from outside this module.
+ *
+ * `config/__tests__/managed-runtime-inventory-parity.backend.test.ts` compares this declaration,
+ * field for field, against `AdminAppManagedMinionsSchema` / `AdminAppManagedWorkersSchema` in
+ * `@wildo-ai/platform-config-lib` — the schemas the apps-manager wire actually carries. The two
+ * cannot simply be collapsed: this side is a `strictObject` annotated against a named interface for
+ * the TS7056 serialization-ceiling reason recorded on `AppConfiguration_MinionEntry` above, and the
+ * wire side must stay strip-tolerant so an additive platform change cannot brick an application
+ * backend mid-deploy. Two declarations are therefore the design; two declarations DRIFTING is the
+ * defect, and the pin is what separates the two.
+ */
+export declare const AppConfiguration_MinionsSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<AppConfiguration_MinionEntry, unknown, z.core.$ZodTypeInternals<AppConfiguration_MinionEntry, unknown>>>>;
+/** Exported for the parity pin — see `AppConfiguration_MinionsSchema` above. */
+export declare const AppConfiguration_WorkersSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+    name: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    runtime: z.ZodObject<{
+        type: z.ZodString;
+        language: z.ZodString;
+    }, z.core.$strict>;
+    http: z.ZodObject<{
+        port: z.ZodNumber;
+        healthPath: z.ZodString;
+        readyPath: z.ZodString;
+        metricsPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    auth: z.ZodLiteral<"wildo-jwt">;
+    replicas: z.ZodNumber;
+    resources: z.ZodOptional<z.ZodObject<{
+        cpu: z.ZodOptional<z.ZodString>;
+        memory: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    dataAccess: z.ZodOptional<z.ZodObject<{
+        database: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            "read-only": "read-only";
+            "read-write": "read-write";
+        }>>;
+        cache: z.ZodOptional<z.ZodBoolean>;
+        queue: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            consumer: "consumer";
+            producer: "producer";
+            both: "both";
+        }>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>>>;
 /** ──────────────────────────────────────────────────────────────
  * Auth Backend-Only Enums
  * ────────────────────────────────────────────────────────────── */
@@ -151,6 +217,11 @@ export declare const AppConfiguration_AuthSchema: z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         maxRegistrationsPerHourPerIp: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
+    consentGrantLifetimeDays: z.ZodOptional<z.ZodNumber>;
+    scimDocumentation: z.ZodOptional<z.ZodObject<{
+        serviceProviderUri: z.ZodOptional<z.ZodURL>;
+        authenticationSchemeUri: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
     passwordHashing: z.ZodObject<{
         argon2: z.ZodOptional<z.ZodObject<{
             type: z.ZodEnum<typeof Argon2Type>;
@@ -267,19 +338,16 @@ export declare const EmailBrandTokens_ConfigSchema: z.ZodObject<{
     primaryColor: z.ZodOptional<z.ZodString>;
     secondaryColor: z.ZodOptional<z.ZodString>;
     fontFamily: z.ZodOptional<z.ZodString>;
-    logoUrl: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type EmailBrandTokens_Config = z.infer<typeof EmailBrandTokens_ConfigSchema>;
 export declare const AppConfiguration_Email_Schema: z.ZodObject<{
     from: z.ZodEmail;
-    replyTo: z.ZodOptional<z.ZodEmail>;
     isTransactionalWildoManaged: z.ZodBoolean;
     isMarketingWildoManaged: z.ZodBoolean;
     brandTokens: z.ZodOptional<z.ZodObject<{
         primaryColor: z.ZodOptional<z.ZodString>;
         secondaryColor: z.ZodOptional<z.ZodString>;
         fontFamily: z.ZodOptional<z.ZodString>;
-        logoUrl: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const AppConfigBackend_Monitoring_Schema: z.ZodObject<{
@@ -628,6 +696,11 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
             enabled: z.ZodDefault<z.ZodBoolean>;
             maxRegistrationsPerHourPerIp: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
+        consentGrantLifetimeDays: z.ZodOptional<z.ZodNumber>;
+        scimDocumentation: z.ZodOptional<z.ZodObject<{
+            serviceProviderUri: z.ZodOptional<z.ZodURL>;
+            authenticationSchemeUri: z.ZodOptional<z.ZodURL>;
+        }, z.core.$strip>>;
         passwordHashing: z.ZodObject<{
             argon2: z.ZodOptional<z.ZodObject<{
                 type: z.ZodEnum<typeof Argon2Type>;
@@ -759,6 +832,11 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
                 requireSpecialChars: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                 expiryDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
             }, z.core.$strip>>;
+            stepUpAuth: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                maxAgeSeconds: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                methods: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         scimProvisioning: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -777,14 +855,12 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
     }, z.core.$strip>;
     email: z.ZodObject<{
         from: z.ZodEmail;
-        replyTo: z.ZodOptional<z.ZodEmail>;
         isTransactionalWildoManaged: z.ZodBoolean;
         isMarketingWildoManaged: z.ZodBoolean;
         brandTokens: z.ZodOptional<z.ZodObject<{
             primaryColor: z.ZodOptional<z.ZodString>;
             secondaryColor: z.ZodOptional<z.ZodString>;
             fontFamily: z.ZodOptional<z.ZodString>;
-            logoUrl: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     storage: z.ZodObject<{
@@ -869,7 +945,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
             companion: z.ZodOptional<z.ZodObject<{
@@ -880,7 +956,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
             frontendServices: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -891,7 +967,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
             minions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -902,7 +978,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
             workers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -913,19 +989,21 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
         }, z.core.$strict>;
+        connections: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            admissible: z.ZodArray<z.ZodObject<{
+                ownerScope: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Connection_OwnerScope>;
+                delegation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Connection_DelegationMode>>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>>>;
     }, z.core.$strict>>;
     providerConfigurations: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>>;
     billing: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         providerRef: z.ZodOptional<z.ZodString>;
-        webhooks: z.ZodOptional<z.ZodObject<{
-            path: z.ZodDefault<z.ZodString>;
-            signingSecretRef: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
         defaultCurrency: z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>;
         supportedCurrencies: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>>;
         tax: z.ZodDefault<z.ZodObject<{
@@ -944,7 +1022,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
             defaultTrialDays: z.ZodDefault<z.ZodNumber>;
             paymentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
             maxPaymentRetries: z.ZodDefault<z.ZodNumber>;
-            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ProrationBehavior>>;
+            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ProrationBehavior>>;
             defaultCancellation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").BillingTiming>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
@@ -1042,6 +1120,7 @@ export declare const _AppConfiguration_AppManagedConfiguration_Schema: z.ZodObje
     }, z.core.$strip>>;
     auditTrail: z.ZodOptional<z.ZodObject<{
         archiveAfterDays: z.ZodOptional<z.ZodNumber>;
+        allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
     tenantTeardown: z.ZodOptional<z.ZodObject<{
         retentionWindowDays: z.ZodDefault<z.ZodNumber>;
@@ -1282,6 +1361,11 @@ export declare const _AppConfiguration_Shape: {
             enabled: z.ZodDefault<z.ZodBoolean>;
             maxRegistrationsPerHourPerIp: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
+        consentGrantLifetimeDays: z.ZodOptional<z.ZodNumber>;
+        scimDocumentation: z.ZodOptional<z.ZodObject<{
+            serviceProviderUri: z.ZodOptional<z.ZodURL>;
+            authenticationSchemeUri: z.ZodOptional<z.ZodURL>;
+        }, z.core.$strip>>;
         passwordHashing: z.ZodObject<{
             argon2: z.ZodOptional<z.ZodObject<{
                 type: z.ZodEnum<typeof Argon2Type>;
@@ -1413,6 +1497,11 @@ export declare const _AppConfiguration_Shape: {
                 requireSpecialChars: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                 expiryDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
             }, z.core.$strip>>;
+            stepUpAuth: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                maxAgeSeconds: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                methods: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         scimProvisioning: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -1431,14 +1520,12 @@ export declare const _AppConfiguration_Shape: {
     }, z.core.$strip>;
     email: z.ZodObject<{
         from: z.ZodEmail;
-        replyTo: z.ZodOptional<z.ZodEmail>;
         isTransactionalWildoManaged: z.ZodBoolean;
         isMarketingWildoManaged: z.ZodBoolean;
         brandTokens: z.ZodOptional<z.ZodObject<{
             primaryColor: z.ZodOptional<z.ZodString>;
             secondaryColor: z.ZodOptional<z.ZodString>;
             fontFamily: z.ZodOptional<z.ZodString>;
-            logoUrl: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     storage: z.ZodObject<{
@@ -1523,7 +1610,7 @@ export declare const _AppConfiguration_Shape: {
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
             companion: z.ZodOptional<z.ZodObject<{
@@ -1534,7 +1621,7 @@ export declare const _AppConfiguration_Shape: {
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
             frontendServices: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -1545,7 +1632,7 @@ export declare const _AppConfiguration_Shape: {
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
             minions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -1556,7 +1643,7 @@ export declare const _AppConfiguration_Shape: {
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
             workers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -1567,19 +1654,21 @@ export declare const _AppConfiguration_Shape: {
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
         }, z.core.$strict>;
+        connections: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            admissible: z.ZodArray<z.ZodObject<{
+                ownerScope: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Connection_OwnerScope>;
+                delegation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Connection_DelegationMode>>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>>>;
     }, z.core.$strict>>;
     providerConfigurations: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>>;
     billing: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         providerRef: z.ZodOptional<z.ZodString>;
-        webhooks: z.ZodOptional<z.ZodObject<{
-            path: z.ZodDefault<z.ZodString>;
-            signingSecretRef: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
         defaultCurrency: z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>;
         supportedCurrencies: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>>;
         tax: z.ZodDefault<z.ZodObject<{
@@ -1598,7 +1687,7 @@ export declare const _AppConfiguration_Shape: {
             defaultTrialDays: z.ZodDefault<z.ZodNumber>;
             paymentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
             maxPaymentRetries: z.ZodDefault<z.ZodNumber>;
-            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ProrationBehavior>>;
+            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ProrationBehavior>>;
             defaultCancellation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").BillingTiming>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
@@ -1696,6 +1785,7 @@ export declare const _AppConfiguration_Shape: {
     }, z.core.$strip>>;
     auditTrail: z.ZodOptional<z.ZodObject<{
         archiveAfterDays: z.ZodOptional<z.ZodNumber>;
+        allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
     tenantTeardown: z.ZodOptional<z.ZodObject<{
         retentionWindowDays: z.ZodDefault<z.ZodNumber>;
@@ -1915,6 +2005,11 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
                 requireSpecialChars: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                 expiryDays: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
             }, z.core.$strip>>;
+            stepUpAuth: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                maxAgeSeconds: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+                methods: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<typeof import("@wildo-ai/saas-models").AuthMethod>>>>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         scimProvisioning: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -1933,14 +2028,12 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
     }, z.core.$strip>;
     email: z.ZodObject<{
         from: z.ZodEmail;
-        replyTo: z.ZodOptional<z.ZodEmail>;
         isTransactionalWildoManaged: z.ZodOptional<z.ZodBoolean>;
         isMarketingWildoManaged: z.ZodOptional<z.ZodBoolean>;
         brandTokens: z.ZodOptional<z.ZodObject<{
             primaryColor: z.ZodOptional<z.ZodString>;
             secondaryColor: z.ZodOptional<z.ZodString>;
             fontFamily: z.ZodOptional<z.ZodString>;
-            logoUrl: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     storage: z.ZodObject<{
@@ -2025,7 +2118,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
             companion: z.ZodOptional<z.ZodObject<{
@@ -2036,7 +2129,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
             frontendServices: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -2047,7 +2140,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
             minions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -2058,7 +2151,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
             workers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -2069,19 +2162,21 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
                 }, z.core.$strict>>>;
                 selection: z.ZodOptional<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
                     primary: z.ZodString;
-                    fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>>;
         }, z.core.$strict>;
+        connections: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            admissible: z.ZodArray<z.ZodObject<{
+                ownerScope: z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Connection_OwnerScope>;
+                delegation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ExternalProvider_Connection_DelegationMode>>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>>>;
     }, z.core.$strict>>;
     providerConfigurations: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>>;
     billing: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         providerRef: z.ZodOptional<z.ZodString>;
-        webhooks: z.ZodOptional<z.ZodObject<{
-            path: z.ZodDefault<z.ZodString>;
-            signingSecretRef: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
         defaultCurrency: z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>;
         supportedCurrencies: z.ZodDefault<z.ZodArray<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/zod-decorators").AvailableCurrency>, z.ZodString]>>>;
         tax: z.ZodDefault<z.ZodObject<{
@@ -2100,7 +2195,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
             defaultTrialDays: z.ZodDefault<z.ZodNumber>;
             paymentGracePeriodDays: z.ZodDefault<z.ZodNumber>;
             maxPaymentRetries: z.ZodDefault<z.ZodNumber>;
-            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").ProrationBehavior>>;
+            defaultProration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ProrationBehavior>>;
             defaultCancellation: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/saas-models").BillingTiming>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
@@ -2198,6 +2293,7 @@ export declare const AppConfiguration_PreOverrideSeed_Schema: z.ZodObject<{
     }, z.core.$strip>>;
     auditTrail: z.ZodOptional<z.ZodObject<{
         archiveAfterDays: z.ZodOptional<z.ZodNumber>;
+        allowPrivateNetworkSiemCollectors: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
     tenantTeardown: z.ZodOptional<z.ZodObject<{
         retentionWindowDays: z.ZodDefault<z.ZodNumber>;

package/dist/esm/config/models/app-config.backend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-config.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/app-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAUL,gBAAgB,EAKhB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAA6B,MAAM,qEAAqE,CAAC;AA6DrI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACrD;2EACuE;IACvE,cAAc,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B;IACzC,0FAA0F;;IAE1F,sEAAsE;;CAE9D,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,OAAO,8BAA8B,CAAC,CAAC;AAS9H,QAAA,MAAM,8BAA8B,2JAGvB,CAAC;AAgCd;;oEAEoE;AAEpE,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,GAAG,QAAQ;CACZ;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,WAAW,gBAAgB;CAC5B;AAED,0EAA0E;AAC1E,oBAAY,eAAe;IACzB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,oBAAY,aAAa;IACvB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;oEAEoE;AAEpE,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAqD1D;;;;;oEAKoE;AAEpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2EtC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;iBAA2C,CAAA;AAGzF,eAAO,MAAM,mCAAmC;;;;;;iBAA8C,CAAA;AAC9F,eAAO,MAAM,8CAA8C;;;;;;;;iBAAwD,CAAA;AAEnH;;;;;oEAKoE;AAGpE,eAAO,MAAM,6CAA6C,GAAI,CAAC,SAAS,mBAAmB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;iBA+CvH,CAAA;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;iBAAgG,CAAC;AAE5I;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAMxC,CAAC;AAGH,eAAO,MAAM,kCAAkC;;;;;iBAK7C,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,4BAA4B;;;;;iBAgBhC,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;iBAqB5B,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+H3C,CAAC;AAIH,wFAAwF;AACxF,eAAO,MAAM,4BAA4B;;;;iBAcvC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;iBA0BtC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gDAAgD;;;;;;iBAc3D,CAAC;AAEH,gEAAgE;AAChE,eAAO,MAAM,uDAAuD;;iBAElE,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;iBAIzC,CAAC;AAoBH,0EAA0E;AAC1E,eAAO,MAAM,qDAAqD;;;iBAGhE,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;iBAM9C,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,gCAAgC,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;CACnE;AAED,4EAA4E;AAC5E,MAAM,MAAM,gCAAgC,GAAG,IAAI,CACjD,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC9C,SAAS,GAAG,gBAAgB,CAC7B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,gCAAgC,GACpC,gCAAgC,CAkBlC;AAED;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,qCAAqC,GACzC,IAAI,CAAC,gCAAgC,EAAE,cAAc,CAAC,CAkBxD;AAED,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAmBlC;AAQD;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,qCAAqC,CAevC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2CAA2C,CACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAKlC;AAqBD,QAAA,MAAM,0CAA0C;;;;;;;;;;;;iBAA2C,CAAC;AAc5F;;;;;;oEAMoE;AAEpE,eAAO,MAAM,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwD3D,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;oEAsBoE;AAEpE,eAAO,MAAM,qDAAqD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBhE,CAAC;AAEH;;;;;;;;;oEASoE;AAEpE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,uBAAuB,CAAC;AAEpE,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAqC,CAAC;AAE9G,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgClD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,2CAA2C;;;;;;CAM9C,CAAC;AAEX,MAAM,WAAW,4CAA4C;IAC3D,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,GAAG,SAAS,CAAC;IACjF,2FAA2F;IAC3F,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,GAAG,SAAS,CAAC;CAChF;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,4CAA4C,GAClD,gCAAgC,CAkClC;AAED;;oEAEoE;AAIpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;AACjF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;AAE7E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACzE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC7F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AACzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAC/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AACxI,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACvE,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AACvG,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AACxH,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qDAAqD,CAAC,CAAC;AAClI,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAC5F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC"}
+{"version":3,"file":"app-config.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/app-config.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAUL,gBAAgB,EAKhB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAA6B,MAAM,qEAAqE,CAAC;AA0ErI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACrD;2EACuE;IACvE,cAAc,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,8BAA8B;IACzC,0FAA0F;;IAE1F,sEAAsE;;CAE9D,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,OAAO,8BAA8B,CAAC,CAAC;AAS9H;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,8BAA8B,2JAG9B,CAAC;AAEd,gFAAgF;AAChF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA4B9B,CAAC;AAEd;;oEAEoE;AAEpE,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,GAAG,QAAQ;CACZ;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,WAAW,gBAAgB;CAC5B;AAED,0EAA0E;AAC1E,oBAAY,eAAe;IACzB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED,oBAAY,aAAa;IACvB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED;;oEAEoE;AAEpE,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAqD1D;;;;;oEAKoE;AAEpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2HtC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;iBAA2C,CAAA;AAGzF,eAAO,MAAM,mCAAmC;;;;;;iBAA8C,CAAA;AAC9F,eAAO,MAAM,8CAA8C;;;;;;;;iBAAwD,CAAA;AAEnH;;;;;oEAKoE;AAGpE,eAAO,MAAM,6CAA6C,GAAI,CAAC,SAAS,mBAAmB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;iBA+CvH,CAAA;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;iBAAgG,CAAC;AAE5I;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;iBAiBxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,6BAA6B;;;;;;;;;iBAaxC,CAAC;AAGH,eAAO,MAAM,kCAAkC;;;;;iBAK7C,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,4BAA4B;;;;;iBAgBhC,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;iBAqB5B,CAAC;AAEH;;GAEG;AACH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+H3C,CAAC;AAIH,wFAAwF;AACxF,eAAO,MAAM,4BAA4B;;;;iBAcvC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;iBA0BtC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gDAAgD;;;;;;iBAc3D,CAAC;AAEH,gEAAgE;AAChE,eAAO,MAAM,uDAAuD;;iBAElE,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;iBAIzC,CAAC;AAoBH,0EAA0E;AAC1E,eAAO,MAAM,qDAAqD;;;iBAGhE,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;iBAM9C,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,4FAA4F;AAC5F,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,gCAAgC,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;CACnE;AAED,4EAA4E;AAC5E,MAAM,MAAM,gCAAgC,GAAG,IAAI,CACjD,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC9C,SAAS,GAAG,gBAAgB,CAC7B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,gCAAgC,GACpC,gCAAgC,CAkBlC;AAED;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,qCAAqC,GACzC,IAAI,CAAC,gCAAgC,EAAE,cAAc,CAAC,CAkBxD;AAED,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAmBlC;AAQD;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,qCAAqC,CAevC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2CAA2C,CACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,gCAAgC,CAKlC;AAqBD,QAAA,MAAM,0CAA0C;;;;;;;;;;;;iBAA2C,CAAC;AAc5F;;;;;;oEAMoE;AAEpE,eAAO,MAAM,gDAAgD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwD3D,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;oEAsBoE;AAEpE,eAAO,MAAM,qDAAqD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBhE,CAAC;AAEH;;;;;;;;;oEASoE;AAEpE;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,uBAAuB,CAAC;AAEpE,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAqC,CAAC;AAE9G,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgClD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,2CAA2C;;;;;;CAM9C,CAAC;AAEX,MAAM,WAAW,4CAA4C;IAC3D,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC,GAAG,SAAS,CAAC;IACvE;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,GAAG,SAAS,CAAC;IACjF,2FAA2F;IAC3F,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,GAAG,SAAS,CAAC;CAChF;AAED;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,4CAA4C,GAClD,gCAAgC,CAkClC;AAED;;oEAEoE;AAIpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;AACjF,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;AAE7E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACzE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC7F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AACzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAC/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,iDAAiD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uDAAuD,CAAC,CAAC;AACxI,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACvE,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AACvG,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AACxH,MAAM,MAAM,6CAA6C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qDAAqD,CAAC,CAAC;AAClI,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAC5F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC"}