@wildo-ai/saas-backend-lib 1.1.2 → 1.1.3

package/dist/esm/inject/models/container.js

@@ -42,6 +42,12 @@ import { ResourceIdBackendService } from '../../resources/services/resource-id.b
 // Service Layer Services
 import { ServicesRegistryHandlerBackendService } from '../../base-classes/services/services/services-registry-handler.backend.service.js';
 import { SystemAccessBackendService } from '../../base-classes/services/services/system-access.backend.service.js';
+import { OrganizationProviderCredentialStoreBackendService } from '../../security/connected-accounts/services/organization-provider-credential-store.backend.service.js';
+import { UserProviderCredentialStoreBackendService } from '../../security/connected-accounts/services/user-provider-credential-store.backend.service.js';
+import { ProviderOAuth2PendingAuthorizationBackendService } from '../../security/connected-accounts/services/provider-oauth2-pending-authorization.backend.service.js';
+import { ProviderOAuth2RefresherBackendService } from '../../security/connected-accounts/services/provider-oauth2-refresher.backend.service.js';
+import { ProviderConnectionControllerBackendService } from '../../security/connected-accounts/controllers/provider-connection.controller.backend.service.js';
+import { InitiatorMembershipConnectionTargetAuthorization } from '../../security/connected-accounts/connection-target-authorization.backend.js';
 import { RuntimePrincipalBackendService } from '../../config/bootstrap/runtime-principal.backend.service.js';
 import { RuntimePrincipalAttestationBackendService } from '../../config/bootstrap/runtime-principal-attestation.backend.service.js';
 // Controller Layer Services
@@ -100,6 +106,8 @@ import { ResourceContextBackendService } from '../../resources/services/resource
 // External Providers Registry Services
 import { BackendProviderRegistryBackendService } from '../../external-providers/services/backend-provider-registry.backend.service.js';
 import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service.js';
+import { ExternalProvidersHttpApiAccessResolver } from '../../base-classes/services/repositories/http-api/http-api-provider-access.backend.js';
+import { ProviderOperationExecutorBackendService } from '../../external-providers/operations/provider-operation-executor.backend.service.js';
 import { DefaultFrontendBootstrapBackendService } from '../../external-providers/services/frontend-bootstrap.backend.service.js';
 // Feature System Services
 import { FeatureDefinitionRegistryBackendService } from '../../features/services/feature-definition-registry.backend.service.js';
@@ -113,6 +121,7 @@ import { AnonymousSessionBackendService } from '../../security/authentications/s
 import { BillingFeatureSyncBackendService } from '../../billing/services/back-office/billing-feature-sync.backend.service.js';
 import { ProductCatalogSyncBackendService } from '../../billing/services/back-office/product-catalog-sync.backend.service.js';
 import { UsageMeteringBackendService } from '../../billing/services/back-office/usage-metering.backend.service.js';
+import { BillingReconciliationBackendService } from '../../billing/services/back-office/billing-reconciliation.backend.service.js';
 import { BillingStateBackendService } from '../../billing/services/back-office/billing-state.backend.service.js';
 import { WebhookHandlerBackendService } from '../../notifications/webhooks/services/webhook-handler.backend.service.js';
 import { WebhookAutoControllerBackendService } from '../../notifications/webhooks/controllers/webhook-auto-controller.backend.service.js';
@@ -150,7 +159,7 @@ import { A2ATaskCancellationBackendService } from '../../flows-actors/a2a/servic
 import { A2AControllerBackendService } from '../../flows-actors/a2a/controllers/a2a.controller.js';
 import { LlmObservabilityAgentCallTraceSink } from '../../flows-actors/services/llm-observability-agent-call-trace-sink.backend.js';
 import { CompositeAuditLogSink } from '../../compliance/audit-trails/services/composite-audit-log-sink.backend.js';
-import { AgentTraceabilityLevel } from '@wildo-ai/saas-models';
+import { AgentTraceabilityLevel, QueueAdapterType } from '@wildo-ai/saas-models';
 import { ContextCurationBackendService } from '../../flows-actors/services/context-curation.backend.service.js';
 import { PromptCompilerBackendService } from '../../flows-actors/services/prompt-compiler.backend.service.js';
 import { FlowsBackendService } from '../../flows-actors/services/flows.backend.services.js';
@@ -187,7 +196,7 @@ import { PdfGeneratedFileWriterBackendService } from '../../pdf-templates/servic
 import { PdfRendererBackendService } from '../../pdf-templates/services/pdf-renderer.backend.service.js';
 import { PdfGenerationOrchestratorBackendService } from '../../pdf-templates/services/pdf-generation-orchestrator.backend.service.js';
 // Queue System Services
-import { RabbitMQAdapterBackendService } from '../../queue/adapters/rabbitmq-adapter.backend.service.js';
+import { bindQueueAdapter } from '../../queue/adapters/queue-adapter.backend.binding.js';
 import { QueueBackendService } from '../../queue/queue.backend.service.js';
 import { JobExecutorBackendService } from '../../queue/job-executor.backend.service.js';
 import { JobStatusTrackingBackendService } from '../../queue/job-status-tracking.backend.service.js';
@@ -218,6 +227,7 @@ import { ChartControllerBackendService } from '../../charts/controllers/chart.ba
 // Analytics & Value Moment Services
 import { ValueMomentHandlerRegistryBackendService } from '../../monitoring/analytics/services/value-moment-handler-registry.backend.service.js';
 import { ValueMomentEngineBackendService } from '../../monitoring/analytics/services/value-moment-engine.backend.service.js';
+import { ValueMomentDefinitionRegistryBackendService } from '../../monitoring/analytics/services/value-moment-definition-registry.backend.service.js';
 import { AnalyticsBackendController } from '../../monitoring/analytics/controllers/analytics.backend.controller.js';
 // Guidance System Services
 import { GuidanceTriggerEvaluatorBackendService } from '../../guidance/services/guidance-trigger-evaluator.backend.service.js';
@@ -225,6 +235,7 @@ import { GuidanceTriggerEvaluatorBackendService } from '../../guidance/services/
 import { MilestoneDefinitionRegistryBackendService } from '../../guidance/services/milestone-definition-registry.backend.service.js';
 import { MilestoneConditionRegistryBackendService } from '../../guidance/services/milestone-condition-registry.backend.service.js';
 import { MilestoneEvaluatorBackendService } from '../../guidance/services/milestone-evaluator.backend.service.js';
+import { ProgressionStateStoreBackendService } from '../../guidance/services/progression-state-store.backend.service.js';
 import { LifecycleEvaluatorBackendService } from '../../guidance/services/lifecycle-evaluator.backend.service.js';
 // Data Seeding System Services
 import { DataSeedRegistryBackendService } from '../../data-seeding/services/data-seed-registry.backend.service.js';
@@ -240,9 +251,6 @@ import { DataSeedScopeResolverRegistryBackendService } from '../../data-seeding/
 import { DataSeedingAdminBackendController } from '../../data-seeding/controllers/data-seeding-admin.backend.controller.js';
 // Email System Services
 import { EmailTemplateValidatorBackendService } from '../../notifications/email/services/email-template-validator.backend.service.js';
-import { EmailTemplateCompilerBackendService } from '../../notifications/email/services/email-template-compiler.backend.service.js';
-import { EmailTemplateSandboxBackendService } from '../../notifications/email/services/email-template-sandbox.backend.service.js';
-import { EmailContextProviderRegistryBackendService } from '../../notifications/email/services/email-context-provider-registry.backend.service.js';
 import { EmailTemplateRegistryBackendService } from '../../notifications/email/services/email-template-registry.backend.service.js';
 import { EmailBackendService } from '../../notifications/email/services/email.backend.service.js';
 import { SMSBackendService } from '../../notifications/sms/services/sms.backend.service.js';
@@ -318,6 +326,37 @@ export class SaasContainer {
         // Service Layer Services - Currently Implemented & Bound
         this.container.bind(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService).to(ServicesRegistryHandlerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.SystemAccessService).to(SystemAccessBackendService).inSingletonScope();
+        // The organization-provider-credential store (#357). Bound in singleton scope like its siblings;
+        // the provider registry consumes it through the narrow resolver port, @optional, so a host that
+        // never binds it resolves provider secrets from the deployment environment exactly as before.
+        this.container.bind(SAAS_SERVICE_TYPES.OrganizationProviderCredentialResolver)
+            .to(OrganizationProviderCredentialStoreBackendService).inSingletonScope();
+        // The per-USER credential store. Bound beside the organization one and NOT @optional in effect:
+        // the resolver refuses a person-owned connection outright when nothing is bound, because a
+        // person's credential has nothing to fall through to. An unbound store here is a wiring fault,
+        // never a deployment choice.
+        this.container.bind(SAAS_SERVICE_TYPES.UserProviderCredentialResolver)
+            .to(UserProviderCredentialStoreBackendService).inSingletonScope();
+        // The in-flight authorization record. Singleton over the Redis client like its siblings; it holds
+        // no state of its own, and what it stores is bounded by a ten-minute TTL rather than by anything
+        // this process remembers.
+        this.container.bind(SAAS_SERVICE_TYPES.ProviderOAuth2PendingAuthorizationService)
+            .to(ProviderOAuth2PendingAuthorizationBackendService).inSingletonScope();
+        // The token refresher. Singleton so its in-flight map is shared across every caller in this
+        // process — the map IS the single-flight, and a per-request instance would hold one entry and
+        // collapse nothing.
+        this.container.bind(SAAS_SERVICE_TYPES.ProviderOAuth2Refresher)
+            .to(ProviderOAuth2RefresherBackendService).inSingletonScope();
+        // The connect controller — the two HTTP legs of the authorization-code flow.
+        this.container.bind(SAAS_SERVICE_TYPES.ProviderConnectionController)
+            .to(ProviderConnectionControllerBackendService).inSingletonScope();
+        // WHO may spend WHOSE account. Bound rather than left @optional, because the resolver REFUSES
+        // every non-application target when nothing is bound: correct as a default, and useless as a
+        // permanent state. The implementation reads the initiator's organization-wide memberships out of
+        // the execution context and touches no repository, so binding it costs no boot dependency — which
+        // is why it can be bound this early beside the store it guards.
+        this.container.bind(SAAS_SERVICE_TYPES.ConnectionTargetAuthorizationPort)
+            .to(InitiatorMembershipConnectionTargetAuthorization).inSingletonScope();
         // Process-level runtime identity, initialized once at startup. Singleton because a
         // process has exactly one identity for its lifetime.
         this.container.bind(SAAS_SERVICE_TYPES.RuntimePrincipalService).to(RuntimePrincipalBackendService).inSingletonScope();
@@ -395,6 +434,27 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.BackendProviderRegistryService).to(BackendProviderRegistryBackendService).inSingletonScope();
         // External Providers Registry Services - Runtime policy/config/secrets facade
         this.container.bind(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService).to(ExternalProvidersRegistryBackendService).inSingletonScope();
+        /*
+         * The operation lane, bound by FACTORY rather than by decoration.
+         *
+         * Both classes stay plain, which is what the lane's other classes are and what lets the
+         * repositories registry keep constructing its own resolver with `new`. Decorating them would also
+         * force an injection token for `ConnectionTargetAuthorizationPort`, which nothing binds — and its
+         * absence is deliberately fail-closed (it REFUSES every non-application connection target), so
+         * inventing a token to satisfy a decorator would put a load-bearing default behind DI plumbing.
+         *
+         * Singleton on purpose: the executor memoizes a catalogue per `(providerRef, domain)` and holds
+         * one rate-limit window per provider. A transient would re-load 6,054 operations per call and
+         * give every caller its own window, which is not a rate limit.
+         */
+        this.container
+            .bind(SAAS_SERVICE_TYPES.HttpApiProviderAccessResolverService)
+            .toDynamicValue(() => new ExternalProvidersHttpApiAccessResolver(this.container.get(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)))
+            .inSingletonScope();
+        this.container
+            .bind(SAAS_SERVICE_TYPES.ProviderOperationExecutorService)
+            .toDynamicValue(() => new ProviderOperationExecutorBackendService(this.container.get(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService), this.container.get(SAAS_SERVICE_TYPES.HttpApiProviderAccessResolverService)))
+            .inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FrontendBootstrapBackendService).to(DefaultFrontendBootstrapBackendService).inSingletonScope();
         // Feature System Services
         this.container.bind(SAAS_SERVICE_TYPES.FeatureDefinitionRegistryService).to(FeatureDefinitionRegistryBackendService).inSingletonScope();
@@ -413,6 +473,7 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.BillingFeatureSyncService).to(BillingFeatureSyncBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.ProductCatalogSyncService).to(ProductCatalogSyncBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.UsageMeteringService).to(UsageMeteringBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.BillingReconciliationService).to(BillingReconciliationBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.BillingStateService).to(BillingStateBackendService).inSingletonScope();
         // Application Runtime Services - Currently Implemented & Bound
         this.container.bind(SAAS_SERVICE_TYPES.StartApplicationService).to(StartApplicationBackendService).inSingletonScope();
@@ -552,8 +613,16 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.ClamAVScannerService).to(ClamAVScannerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.YaraScannerService).to(YaraScannerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FileTextExtractionService).to(FileTextExtractionBackendService).inSingletonScope();
-        // Queue System Services - RabbitMQ-based async processing
-        this.container.bind(SAAS_SERVICE_TYPES.RabbitMQAdapterService).to(RabbitMQAdapterBackendService).inSingletonScope();
+        /*
+         * Queue System Services — the adapter is SELECTED, not hard-bound (#502).
+         *
+         * `QueueAdapterType` had zero readers while this line named one class directly, so the enum
+         * described a choice nothing could make. `bindQueueAdapter` is now the only site that maps a
+         * member to an implementation; a test lane rebinds the same token with `QueueAdapterType.MEMORY`
+         * against this already-configured container, which is what makes the in-memory adapter reachable
+         * rather than merely present.
+         */
+        bindQueueAdapter(this.container, QueueAdapterType.RABBITMQ);
         this.container.bind(SAAS_SERVICE_TYPES.QueueBackendService).to(QueueBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.JobExecutorBackendService).to(JobExecutorBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.JobStatusTrackingService).to(JobStatusTrackingBackendService).inSingletonScope();
@@ -579,13 +648,11 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.ChartController).to(ChartControllerBackendService).inSingletonScope();
         // Analytics & Value Moment Services
         this.container.bind(SAAS_SERVICE_TYPES.ValueMomentHandlerRegistry).to(ValueMomentHandlerRegistryBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.ValueMomentDefinitionRegistry).to(ValueMomentDefinitionRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.ValueMomentEngine).to(ValueMomentEngineBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.AnalyticsController).to(AnalyticsBackendController).inSingletonScope();
         // Email System Services - Template rendering and sending
         this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateValidator).to(EmailTemplateValidatorBackendService).inSingletonScope();
-        this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateCompiler).to(EmailTemplateCompilerBackendService).inSingletonScope();
-        this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateSandbox).to(EmailTemplateSandboxBackendService).inSingletonScope();
-        this.container.bind(SAAS_SERVICE_TYPES.EmailContextProviderRegistry).to(EmailContextProviderRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateRegistry).to(EmailTemplateRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.EmailService).to(EmailBackendService).inSingletonScope();
         // SMS Service (Phase G2)
@@ -595,6 +662,7 @@ export class SaasContainer {
         // Progression System Services
         this.container.bind(SAAS_SERVICE_TYPES.MilestoneDefinitionRegistry).to(MilestoneDefinitionRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.MilestoneConditionRegistry).to(MilestoneConditionRegistryBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.ProgressionStateStore).to(ProgressionStateStoreBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.MilestoneEvaluator).to(MilestoneEvaluatorBackendService).inSingletonScope();
         // Lifecycle System Services
         this.container.bind(SAAS_SERVICE_TYPES.LifecycleEvaluator).to(LifecycleEvaluatorBackendService).inSingletonScope();