@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

package/dist/esm/inject/models/container.d.ts

@@ -25,6 +25,16 @@ export declare class SaasContainer {
      * Check if a service is bound
      */
     isBound(serviceType: symbol): boolean;
+    /**
+     * A binding when it is bound, `undefined` otherwise — and never a throw.
+     *
+     * For the OPTIONAL collaborators of a `toDynamicValue` binding: an observability sink, a metrics
+     * recorder, a logger. Each of those must degrade to "no emission" rather than take down the
+     * construction of the service that would have used it, and `container.get` on an unbound symbol
+     * throws. The `catch` covers the second failure mode `isBound` cannot: a binding that IS declared
+     * and throws while being constructed.
+     */
+    private resolveOptional;
     /**
      * Setup library injection for cross-package dependencies
      * This is the main method used by applications to setup the container

package/dist/esm/inject/models/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../../src/inject/models/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAc,MAAM,WAAW,CAAC;AAClD,OAAO,kBAAkB,CAAC;AA+R1B;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,SAAS,CAAY;;IAS7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkazB;;OAEG;IACI,YAAY,IAAI,SAAS;IAIhC;;OAEG;IACI,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,CAAC;IAIrC;;OAEG;IACI,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI5C;;;OAGG;WACW,kBAAkB,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS;CAWnE;AAGD;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,SAAS,CAMrD;AAED,wBAAgB,kBAAkB,IAAI,SAAS,CAK9C;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAGD,eAAe,aAAa,CAAC"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../src/inject/models/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAc,MAAM,WAAW,CAAC;AAClD,OAAO,kBAAkB,CAAC;AA0S1B;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,SAAS,CAAY;;IAS7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAugBzB;;OAEG;IACI,YAAY,IAAI,SAAS;IAIhC;;OAEG;IACI,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,CAAC;IAIrC;;OAEG;IACI,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI5C;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IAQvB;;;OAGG;WACW,kBAAkB,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS;CAWnE;AAGD;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,SAAS,CAMrD;AAED,wBAAgB,kBAAkB,IAAI,SAAS,CAK9C;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAGD,eAAe,aAAa,CAAC"}

package/dist/esm/inject/models/container.js

@@ -42,6 +42,12 @@ import { ResourceIdBackendService } from '../../resources/services/resource-id.b
 // Service Layer Services
 import { ServicesRegistryHandlerBackendService } from '../../base-classes/services/services/services-registry-handler.backend.service.js';
 import { SystemAccessBackendService } from '../../base-classes/services/services/system-access.backend.service.js';
+import { OrganizationProviderCredentialStoreBackendService } from '../../security/connected-accounts/services/organization-provider-credential-store.backend.service.js';
+import { UserProviderCredentialStoreBackendService } from '../../security/connected-accounts/services/user-provider-credential-store.backend.service.js';
+import { ProviderOAuth2PendingAuthorizationBackendService } from '../../security/connected-accounts/services/provider-oauth2-pending-authorization.backend.service.js';
+import { ProviderOAuth2RefresherBackendService } from '../../security/connected-accounts/services/provider-oauth2-refresher.backend.service.js';
+import { ProviderConnectionControllerBackendService } from '../../security/connected-accounts/controllers/provider-connection.controller.backend.service.js';
+import { InitiatorMembershipConnectionTargetAuthorization } from '../../security/connected-accounts/connection-target-authorization.backend.js';
 import { RuntimePrincipalBackendService } from '../../config/bootstrap/runtime-principal.backend.service.js';
 import { RuntimePrincipalAttestationBackendService } from '../../config/bootstrap/runtime-principal-attestation.backend.service.js';
 // Controller Layer Services
@@ -100,6 +106,8 @@ import { ResourceContextBackendService } from '../../resources/services/resource
 // External Providers Registry Services
 import { BackendProviderRegistryBackendService } from '../../external-providers/services/backend-provider-registry.backend.service.js';
 import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service.js';
+import { ExternalProvidersHttpApiAccessResolver } from '../../base-classes/services/repositories/http-api/http-api-provider-access.backend.js';
+import { ProviderOperationExecutorBackendService } from '../../external-providers/operations/provider-operation-executor.backend.service.js';
 import { DefaultFrontendBootstrapBackendService } from '../../external-providers/services/frontend-bootstrap.backend.service.js';
 // Feature System Services
 import { FeatureDefinitionRegistryBackendService } from '../../features/services/feature-definition-registry.backend.service.js';
@@ -113,6 +121,7 @@ import { AnonymousSessionBackendService } from '../../security/authentications/s
 import { BillingFeatureSyncBackendService } from '../../billing/services/back-office/billing-feature-sync.backend.service.js';
 import { ProductCatalogSyncBackendService } from '../../billing/services/back-office/product-catalog-sync.backend.service.js';
 import { UsageMeteringBackendService } from '../../billing/services/back-office/usage-metering.backend.service.js';
+import { BillingReconciliationBackendService } from '../../billing/services/back-office/billing-reconciliation.backend.service.js';
 import { BillingStateBackendService } from '../../billing/services/back-office/billing-state.backend.service.js';
 import { WebhookHandlerBackendService } from '../../notifications/webhooks/services/webhook-handler.backend.service.js';
 import { WebhookAutoControllerBackendService } from '../../notifications/webhooks/controllers/webhook-auto-controller.backend.service.js';
@@ -137,6 +146,8 @@ import { ResourceOperationCustomImplementationRegistryBackendService } from '../
 import { I18nBackendService } from '../../i18n/services/i18n.backend.service.js';
 // Flows-Actors Services
 import { FlowsActorsRegistryService } from '../../flows-actors/services/flows-actors-registry.service.js';
+import { McpClientBackendService } from '../../flows-actors/services/mcp-client.backend.service.js';
+import { McpCredentialResolverBackendService } from '../../flows-actors/services/mcp-credential-resolver.backend.service.js';
 import { FlowsActorsControllerBackendService } from '../../flows-actors/controllers/flows-actors.controller.js';
 import { AgentsBackendService } from '../../flows-actors/services/agents.backend.service.js';
 import { ConversationalExecutionBackendService } from '../../flows-actors/services/conversational-execution.backend.service.js';
@@ -150,7 +161,7 @@ import { A2ATaskCancellationBackendService } from '../../flows-actors/a2a/servic
 import { A2AControllerBackendService } from '../../flows-actors/a2a/controllers/a2a.controller.js';
 import { LlmObservabilityAgentCallTraceSink } from '../../flows-actors/services/llm-observability-agent-call-trace-sink.backend.js';
 import { CompositeAuditLogSink } from '../../compliance/audit-trails/services/composite-audit-log-sink.backend.js';
-import { AgentTraceabilityLevel } from '@wildo-ai/saas-models';
+import { AgentTraceabilityLevel, QueueAdapterType } from '@wildo-ai/saas-models';
 import { ContextCurationBackendService } from '../../flows-actors/services/context-curation.backend.service.js';
 import { PromptCompilerBackendService } from '../../flows-actors/services/prompt-compiler.backend.service.js';
 import { FlowsBackendService } from '../../flows-actors/services/flows.backend.services.js';
@@ -180,6 +191,7 @@ import { YaraScannerBackendService } from '../../files/scanning/yara-scanner.bac
 import { FileTextExtractionBackendService } from '../../files/services/file-text-extraction.backend.service.js';
 import { WildoManagedStorageProvider } from '../../files/storage/wildo-managed-storage-provider.backend.service.js';
 import { LocalDirectoryStorageProvider } from '../../files/storage/local-directory-storage-provider.backend.service.js';
+import { GoogleDriveStorageProvider } from '../../files/storage/google-drive-storage-provider.backend.service.js';
 import { FileStorageRouterBackendService } from '../../files/storage/file-storage-router.backend.service.js';
 import { FileStoragePathResolverBackendService } from '../../files/storage/file-storage-path-resolver.backend.service.js';
 import { PdfTemplateBindingBackendService } from '../../pdf-templates/services/pdf-template-binding.backend.service.js';
@@ -187,7 +199,7 @@ import { PdfGeneratedFileWriterBackendService } from '../../pdf-templates/servic
 import { PdfRendererBackendService } from '../../pdf-templates/services/pdf-renderer.backend.service.js';
 import { PdfGenerationOrchestratorBackendService } from '../../pdf-templates/services/pdf-generation-orchestrator.backend.service.js';
 // Queue System Services
-import { RabbitMQAdapterBackendService } from '../../queue/adapters/rabbitmq-adapter.backend.service.js';
+import { bindQueueAdapter } from '../../queue/adapters/queue-adapter.backend.binding.js';
 import { QueueBackendService } from '../../queue/queue.backend.service.js';
 import { JobExecutorBackendService } from '../../queue/job-executor.backend.service.js';
 import { JobStatusTrackingBackendService } from '../../queue/job-status-tracking.backend.service.js';
@@ -218,6 +230,7 @@ import { ChartControllerBackendService } from '../../charts/controllers/chart.ba
 // Analytics & Value Moment Services
 import { ValueMomentHandlerRegistryBackendService } from '../../monitoring/analytics/services/value-moment-handler-registry.backend.service.js';
 import { ValueMomentEngineBackendService } from '../../monitoring/analytics/services/value-moment-engine.backend.service.js';
+import { ValueMomentDefinitionRegistryBackendService } from '../../monitoring/analytics/services/value-moment-definition-registry.backend.service.js';
 import { AnalyticsBackendController } from '../../monitoring/analytics/controllers/analytics.backend.controller.js';
 // Guidance System Services
 import { GuidanceTriggerEvaluatorBackendService } from '../../guidance/services/guidance-trigger-evaluator.backend.service.js';
@@ -225,6 +238,7 @@ import { GuidanceTriggerEvaluatorBackendService } from '../../guidance/services/
 import { MilestoneDefinitionRegistryBackendService } from '../../guidance/services/milestone-definition-registry.backend.service.js';
 import { MilestoneConditionRegistryBackendService } from '../../guidance/services/milestone-condition-registry.backend.service.js';
 import { MilestoneEvaluatorBackendService } from '../../guidance/services/milestone-evaluator.backend.service.js';
+import { ProgressionStateStoreBackendService } from '../../guidance/services/progression-state-store.backend.service.js';
 import { LifecycleEvaluatorBackendService } from '../../guidance/services/lifecycle-evaluator.backend.service.js';
 // Data Seeding System Services
 import { DataSeedRegistryBackendService } from '../../data-seeding/services/data-seed-registry.backend.service.js';
@@ -240,9 +254,6 @@ import { DataSeedScopeResolverRegistryBackendService } from '../../data-seeding/
 import { DataSeedingAdminBackendController } from '../../data-seeding/controllers/data-seeding-admin.backend.controller.js';
 // Email System Services
 import { EmailTemplateValidatorBackendService } from '../../notifications/email/services/email-template-validator.backend.service.js';
-import { EmailTemplateCompilerBackendService } from '../../notifications/email/services/email-template-compiler.backend.service.js';
-import { EmailTemplateSandboxBackendService } from '../../notifications/email/services/email-template-sandbox.backend.service.js';
-import { EmailContextProviderRegistryBackendService } from '../../notifications/email/services/email-context-provider-registry.backend.service.js';
 import { EmailTemplateRegistryBackendService } from '../../notifications/email/services/email-template-registry.backend.service.js';
 import { EmailBackendService } from '../../notifications/email/services/email.backend.service.js';
 import { SMSBackendService } from '../../notifications/sms/services/sms.backend.service.js';
@@ -318,6 +329,37 @@ export class SaasContainer {
         // Service Layer Services - Currently Implemented & Bound
         this.container.bind(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService).to(ServicesRegistryHandlerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.SystemAccessService).to(SystemAccessBackendService).inSingletonScope();
+        // The organization-provider-credential store (#357). Bound in singleton scope like its siblings;
+        // the provider registry consumes it through the narrow resolver port, @optional, so a host that
+        // never binds it resolves provider secrets from the deployment environment exactly as before.
+        this.container.bind(SAAS_SERVICE_TYPES.OrganizationProviderCredentialResolver)
+            .to(OrganizationProviderCredentialStoreBackendService).inSingletonScope();
+        // The per-USER credential store. Bound beside the organization one and NOT @optional in effect:
+        // the resolver refuses a person-owned connection outright when nothing is bound, because a
+        // person's credential has nothing to fall through to. An unbound store here is a wiring fault,
+        // never a deployment choice.
+        this.container.bind(SAAS_SERVICE_TYPES.UserProviderCredentialResolver)
+            .to(UserProviderCredentialStoreBackendService).inSingletonScope();
+        // The in-flight authorization record. Singleton over the Redis client like its siblings; it holds
+        // no state of its own, and what it stores is bounded by a ten-minute TTL rather than by anything
+        // this process remembers.
+        this.container.bind(SAAS_SERVICE_TYPES.ProviderOAuth2PendingAuthorizationService)
+            .to(ProviderOAuth2PendingAuthorizationBackendService).inSingletonScope();
+        // The token refresher. Singleton so its in-flight map is shared across every caller in this
+        // process — the map IS the single-flight, and a per-request instance would hold one entry and
+        // collapse nothing.
+        this.container.bind(SAAS_SERVICE_TYPES.ProviderOAuth2Refresher)
+            .to(ProviderOAuth2RefresherBackendService).inSingletonScope();
+        // The connect controller — the two HTTP legs of the authorization-code flow.
+        this.container.bind(SAAS_SERVICE_TYPES.ProviderConnectionController)
+            .to(ProviderConnectionControllerBackendService).inSingletonScope();
+        // WHO may spend WHOSE account. Bound rather than left @optional, because the resolver REFUSES
+        // every non-application target when nothing is bound: correct as a default, and useless as a
+        // permanent state. The implementation reads the initiator's organization-wide memberships out of
+        // the execution context and touches no repository, so binding it costs no boot dependency — which
+        // is why it can be bound this early beside the store it guards.
+        this.container.bind(SAAS_SERVICE_TYPES.ConnectionTargetAuthorizationPort)
+            .to(InitiatorMembershipConnectionTargetAuthorization).inSingletonScope();
         // Process-level runtime identity, initialized once at startup. Singleton because a
         // process has exactly one identity for its lifetime.
         this.container.bind(SAAS_SERVICE_TYPES.RuntimePrincipalService).to(RuntimePrincipalBackendService).inSingletonScope();
@@ -395,6 +437,46 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.BackendProviderRegistryService).to(BackendProviderRegistryBackendService).inSingletonScope();
         // External Providers Registry Services - Runtime policy/config/secrets facade
         this.container.bind(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService).to(ExternalProvidersRegistryBackendService).inSingletonScope();
+        /*
+         * The operation lane, bound by FACTORY rather than by decoration.
+         *
+         * Both classes stay plain, which is what the lane's other classes are and what lets the
+         * repositories registry keep constructing its own resolver with `new`. Decorating them would also
+         * force an injection token for `ConnectionTargetAuthorizationPort`, which nothing binds — and its
+         * absence is deliberately fail-closed (it REFUSES every non-application connection target), so
+         * inventing a token to satisfy a decorator would put a load-bearing default behind DI plumbing.
+         *
+         * Singleton on purpose: the executor memoizes a catalogue per `(providerRef, domain)` and holds
+         * one rate-limit window per provider. A transient would re-load 6,054 operations per call and
+         * give every caller its own window, which is not a rate limit.
+         */
+        this.container
+            .bind(SAAS_SERVICE_TYPES.HttpApiProviderAccessResolverService)
+            .toDynamicValue(() => new ExternalProvidersHttpApiAccessResolver(this.container.get(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService)))
+            .inSingletonScope();
+        // Both of this class's security observations were DEAD in production until 2026-09-09, and the
+        // cause was here: it was constructed with two of its six parameters, so the audit resolver and
+        // the credential-use recorder were `undefined` for the process's whole life. Nothing failed —
+        // each seam feature-detects its sink and does nothing when there is none — so every outbound
+        // provider call left no trail and every stored credential stayed UNVALIDATED however well it
+        // worked. The collaborators are a NAMED bag now precisely so a future addition cannot be
+        // forgotten by being invisible, and the observations are counted when they drop, so a repeat of
+        // this would raise `audit_observation_dropped_total` instead of being silent.
+        //
+        // Every resolver below is LAZY and resolved per loss/emission rather than at bind time: this
+        // binding is evaluated during startup, and eagerly `get`ting the audit service or the metrics
+        // service here would pull their subgraphs into the provider lane's construction order.
+        this.container
+            .bind(SAAS_SERVICE_TYPES.ProviderOperationExecutorService)
+            .toDynamicValue(() => new ProviderOperationExecutorBackendService(this.container.get(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService), this.container.get(SAAS_SERVICE_TYPES.HttpApiProviderAccessResolverService), {
+            auditResolver: () => this.resolveOptional(SAAS_SERVICE_TYPES.AuditLogsService),
+            metricsResolver: () => this.resolveOptional(SAAS_SERVICE_TYPES.MetricsService),
+            // Delegating objects rather than resolved instances, so the logger is fetched at the
+            // moment there is something to say and never during this binding's evaluation.
+            logger: { error: (message, context) => this.resolveOptional(SAAS_SERVICE_TYPES.Logger)?.error(message, context) },
+            warn: (message) => this.resolveOptional(SAAS_SERVICE_TYPES.Logger)?.warn(message),
+        }))
+            .inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FrontendBootstrapBackendService).to(DefaultFrontendBootstrapBackendService).inSingletonScope();
         // Feature System Services
         this.container.bind(SAAS_SERVICE_TYPES.FeatureDefinitionRegistryService).to(FeatureDefinitionRegistryBackendService).inSingletonScope();
@@ -413,6 +495,7 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.BillingFeatureSyncService).to(BillingFeatureSyncBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.ProductCatalogSyncService).to(ProductCatalogSyncBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.UsageMeteringService).to(UsageMeteringBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.BillingReconciliationService).to(BillingReconciliationBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.BillingStateService).to(BillingStateBackendService).inSingletonScope();
         // Application Runtime Services - Currently Implemented & Bound
         this.container.bind(SAAS_SERVICE_TYPES.StartApplicationService).to(StartApplicationBackendService).inSingletonScope();
@@ -444,6 +527,14 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.ResourceOperationCustomImplementationRegistryService).to(ResourceOperationCustomImplementationRegistryBackendService).inSingletonScope();
         // Flows-Actors Services - Currently Implemented & Bound
         this.container.bind(SAAS_SERVICE_TYPES.FlowsActorsRegistryService).to(FlowsActorsRegistryService).inSingletonScope();
+        /*
+         * The MCP tool plane (#491). Bound unconditionally, and reached only by an agent that
+         * declares `mcpRefs` — an application with no MCP server pays nothing for these. The
+         * INJECTIONS in AgentsBackendService stay `@optional()` regardless, so a host that composes
+         * its own container without them degrades to function tools rather than failing to build.
+         */
+        this.container.bind(SAAS_SERVICE_TYPES.McpClientService).to(McpClientBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.McpCredentialResolverService).to(McpCredentialResolverBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FlowsActorsController).to(FlowsActorsControllerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.AgentsBackendService).to(AgentsBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.ConversationalExecutionBackendService).to(ConversationalExecutionBackendService).inSingletonScope();
@@ -540,6 +631,7 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.FileOperationHandlerService).to(FileOperationHandlerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FileStorageProvider_WildoManaged).to(WildoManagedStorageProvider).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FileStorageProvider_LocalDirectory).to(LocalDirectoryStorageProvider).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.FileStorageProvider_GoogleDrive).to(GoogleDriveStorageProvider).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FileStorageRouter).to(FileStorageRouterBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FileStoragePathResolver).to(FileStoragePathResolverBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.PdfTemplateBinding).to(PdfTemplateBindingBackendService).inSingletonScope();
@@ -552,8 +644,16 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.ClamAVScannerService).to(ClamAVScannerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.YaraScannerService).to(YaraScannerBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.FileTextExtractionService).to(FileTextExtractionBackendService).inSingletonScope();
-        // Queue System Services - RabbitMQ-based async processing
-        this.container.bind(SAAS_SERVICE_TYPES.RabbitMQAdapterService).to(RabbitMQAdapterBackendService).inSingletonScope();
+        /*
+         * Queue System Services — the adapter is SELECTED, not hard-bound (#502).
+         *
+         * `QueueAdapterType` had zero readers while this line named one class directly, so the enum
+         * described a choice nothing could make. `bindQueueAdapter` is now the only site that maps a
+         * member to an implementation; a test lane rebinds the same token with `QueueAdapterType.MEMORY`
+         * against this already-configured container, which is what makes the in-memory adapter reachable
+         * rather than merely present.
+         */
+        bindQueueAdapter(this.container, QueueAdapterType.RABBITMQ);
         this.container.bind(SAAS_SERVICE_TYPES.QueueBackendService).to(QueueBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.JobExecutorBackendService).to(JobExecutorBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.JobStatusTrackingService).to(JobStatusTrackingBackendService).inSingletonScope();
@@ -579,13 +679,11 @@ export class SaasContainer {
         this.container.bind(SAAS_SERVICE_TYPES.ChartController).to(ChartControllerBackendService).inSingletonScope();
         // Analytics & Value Moment Services
         this.container.bind(SAAS_SERVICE_TYPES.ValueMomentHandlerRegistry).to(ValueMomentHandlerRegistryBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.ValueMomentDefinitionRegistry).to(ValueMomentDefinitionRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.ValueMomentEngine).to(ValueMomentEngineBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.AnalyticsController).to(AnalyticsBackendController).inSingletonScope();
         // Email System Services - Template rendering and sending
         this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateValidator).to(EmailTemplateValidatorBackendService).inSingletonScope();
-        this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateCompiler).to(EmailTemplateCompilerBackendService).inSingletonScope();
-        this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateSandbox).to(EmailTemplateSandboxBackendService).inSingletonScope();
-        this.container.bind(SAAS_SERVICE_TYPES.EmailContextProviderRegistry).to(EmailContextProviderRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.EmailTemplateRegistry).to(EmailTemplateRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.EmailService).to(EmailBackendService).inSingletonScope();
         // SMS Service (Phase G2)
@@ -595,6 +693,7 @@ export class SaasContainer {
         // Progression System Services
         this.container.bind(SAAS_SERVICE_TYPES.MilestoneDefinitionRegistry).to(MilestoneDefinitionRegistryBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.MilestoneConditionRegistry).to(MilestoneConditionRegistryBackendService).inSingletonScope();
+        this.container.bind(SAAS_SERVICE_TYPES.ProgressionStateStore).to(ProgressionStateStoreBackendService).inSingletonScope();
         this.container.bind(SAAS_SERVICE_TYPES.MilestoneEvaluator).to(MilestoneEvaluatorBackendService).inSingletonScope();
         // Lifecycle System Services
         this.container.bind(SAAS_SERVICE_TYPES.LifecycleEvaluator).to(LifecycleEvaluatorBackendService).inSingletonScope();
@@ -648,6 +747,23 @@ export class SaasContainer {
     isBound(serviceType) {
         return this.container.isBound(serviceType);
     }
+    /**
+     * A binding when it is bound, `undefined` otherwise — and never a throw.
+     *
+     * For the OPTIONAL collaborators of a `toDynamicValue` binding: an observability sink, a metrics
+     * recorder, a logger. Each of those must degrade to "no emission" rather than take down the
+     * construction of the service that would have used it, and `container.get` on an unbound symbol
+     * throws. The `catch` covers the second failure mode `isBound` cannot: a binding that IS declared
+     * and throws while being constructed.
+     */
+    resolveOptional(serviceType) {
+        try {
+            return this.container.isBound(serviceType) ? this.container.get(serviceType) : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
     /**
      * Setup library injection for cross-package dependencies
      * This is the main method used by applications to setup the container