@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

package/dist/esm/config/models/provider-runtime-artifact.backend.schemas.d.ts

@@ -1,11 +1,46 @@
 import { z } from 'zod';
-import { EngineCapability } from '@wildo-ai/saas-models';
+import { EngineCapability, type FrontendProvidersBlock } from '@wildo-ai/saas-models';
+/**
+ * The per-service frontend bootstrap map, ANNOTATED rather than inferred.
+ *
+ * `FrontendProvidersBlockSchema` transitively references three atoms that `@wildo-ai/saas-models`
+ * publishes from `/public-runtime` alone, so a consumer that resolves this package's dependency to
+ * SOURCE — the minion and worker libraries do, deliberately — has no public specifier through which
+ * to NAME them. While the artifact object stayed small TypeScript inlined the shape and nobody
+ * noticed; the moment it grew one member past the inline threshold it needed the name and refused:
+ * `TS2742 … cannot be named without a reference to
+ * node_modules/@wildo-ai/saas-models/src/external-providers/provider-frontend-surface.shared.schemas`.
+ *
+ * Annotating here stops the expansion at `FrontendProvidersBlock`, which IS root-exported and
+ * therefore nameable everywhere. The underlying defect is a root-exported contract depending on a
+ * subpath-only module (`package-public-entrypoints.md`, "The root barrel must not DEPEND on a
+ * subpath-only surface"); that module is the frozen provider contract, so it is filed as #356 rather
+ * than fixed here. Nothing is lost: the schema's runtime behaviour is unchanged and consumers keep the
+ * same inferred field type.
+ */
+export interface ProviderRuntimeFrontendBootstraps {
+    [serviceKey: string]: FrontendProvidersBlock;
+}
 export declare const ProviderRuntimeArtifactSchema: z.ZodObject<{
     __AUTOGENERATED__: z.ZodString;
     generatedBy: z.ZodLiteral<"wildo provider-runtime-artifact">;
     generatedAt: z.ZodString;
     sourceDigest: z.ZodString;
     providerRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    /**
+     * `providerRef` -> the package specifier a host dynamic-imports to obtain that provider's backend
+     * module (#330).
+     *
+     * `providerRefs` says WHICH providers this process may expose; this says WHERE each one comes
+     * from, and it is what makes a provider shipped as its own npm package loadable at all — without
+     * it a host can only serve refs the engine itself ships.
+     *
+     * OPTIONAL rather than required, and that is load-bearing: an application whose artifact was
+     * generated before this field existed still parses, and every ref it names is engine-shipped, so
+     * the loader resolves all of them through the engine's own on-demand map. An un-resynced
+     * application therefore behaves exactly as it did before.
+     */
+    providerRuntimeImports: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     providerGraphDigest: z.ZodOptional<z.ZodString>;
     lockfileSectionDigest: z.ZodOptional<z.ZodString>;
     artifactKind: z.ZodLiteral<"backend">;
@@ -17,19 +52,7 @@ export declare const ProviderRuntimeArtifactSchema: z.ZodObject<{
         moduleIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
         moduleIdsByService: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
     }, z.core.$strict>;
-    frontendProviderBootstraps: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
-        providers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
-            metadata: z.ZodObject<{
-                ref: z.ZodString;
-                displayNameLabelKey: z.ZodOptional<z.ZodString>;
-                displayName: z.ZodOptional<z.ZodString>;
-                iconRef: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>;
-            providerCapabilities: z.ZodArray<z.ZodString>;
-            protocols: z.ZodArray<z.ZodString>;
-            publicConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        }, z.core.$strip>>>;
-    }, z.core.$strip>>>;
+    frontendProviderBootstraps: z.ZodOptional<z.ZodType<ProviderRuntimeFrontendBootstraps, unknown, z.core.$ZodTypeInternals<ProviderRuntimeFrontendBootstraps, unknown>>>;
     scope: z.ZodDefault<z.ZodObject<{
         providers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
             engineCapabilities: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof EngineCapability>>>;
@@ -38,7 +61,7 @@ export declare const ProviderRuntimeArtifactSchema: z.ZodObject<{
         }, z.core.$strict>>>;
         selection: z.ZodDefault<z.ZodRecord<z.ZodEnum<typeof EngineCapability> & z.core.$partial, z.ZodObject<{
             primary: z.ZodString;
-            fallbacks: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            whenUnavailable: z.ZodDefault<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;

package/dist/esm/config/models/provider-runtime-artifact.backend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-runtime-artifact.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/provider-runtime-artifact.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAEjB,MAAM,uBAAuB,CAAC;AA8B/B,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAexC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,sJAAsJ;AACtJ,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/C"}
+{"version":3,"file":"provider-runtime-artifact.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/config/models/provider-runtime-artifact.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAEhB,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iCAAiC;IAChD,CAAC,UAAU,EAAE,MAAM,GAAG,sBAAsB,CAAC;CAC9C;AAiCD,eAAO,MAAM,6BAA6B;;;;;;IAMxC;;;;;;;;;;;;OAYG;;;;;;;;;;;;;;;;;;;;;;;;;kBAQH,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,sJAAsJ;AACtJ,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/C"}

package/dist/esm/config/models/provider-runtime-artifact.backend.schemas.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { EngineCapability, FrontendProvidersBlockSchema, } from '@wildo-ai/saas-models';
+const FrontendProviderBootstrapsRecordSchema = z.record(z.string().min(1), FrontendProvidersBlockSchema);
 const ProviderRuntimeScopeSelectionSchema = z.strictObject({
     engineCapabilities: z.array(z.enum(EngineCapability)).default([]),
     providerCapabilities: z.array(z.string().min(1)).default([]),
@@ -7,7 +8,7 @@ const ProviderRuntimeScopeSelectionSchema = z.strictObject({
 });
 const ProviderRuntimeSelectionPolicySchema = z.strictObject({
     primary: z.string().min(1),
-    fallbacks: z.array(z.string().min(1)).default([]),
+    whenUnavailable: z.array(z.string().min(1)).default([]),
 });
 const ProviderRuntimeScopeArtifactSchema = z.strictObject({
     providers: z.record(z.string(), ProviderRuntimeScopeSelectionSchema).default({}),
@@ -27,11 +28,25 @@ export const ProviderRuntimeArtifactSchema = z.strictObject({
     generatedAt: z.string().datetime({ offset: true }),
     sourceDigest: z.string().min(1),
     providerRefs: z.array(z.string().min(1)).optional(),
+    /**
+     * `providerRef` -> the package specifier a host dynamic-imports to obtain that provider's backend
+     * module (#330).
+     *
+     * `providerRefs` says WHICH providers this process may expose; this says WHERE each one comes
+     * from, and it is what makes a provider shipped as its own npm package loadable at all — without
+     * it a host can only serve refs the engine itself ships.
+     *
+     * OPTIONAL rather than required, and that is load-bearing: an application whose artifact was
+     * generated before this field existed still parses, and every ref it names is engine-shipped, so
+     * the loader resolves all of them through the engine's own on-demand map. An un-resynced
+     * application therefore behaves exactly as it did before.
+     */
+    providerRuntimeImports: z.record(z.string().min(1), z.string().min(1)).optional(),
     providerGraphDigest: z.string().min(1).optional(),
     lockfileSectionDigest: z.string().min(1).optional(),
     artifactKind: z.literal('backend'),
     modules: ProviderRuntimeModulesArtifactSchema,
-    frontendProviderBootstraps: z.record(z.string().min(1), FrontendProvidersBlockSchema).optional(),
+    frontendProviderBootstraps: FrontendProviderBootstrapsRecordSchema.optional(),
     scope: ProviderRuntimeScopeArtifactSchema.default({ providers: {}, selection: {} }),
 });
 //# sourceMappingURL=provider-runtime-artifact.backend.schemas.js.map

package/dist/esm/config/models/provider-runtime-artifact.backend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-runtime-artifact.backend.schemas.js","sourceRoot":"","sources":["../../../../../src/config/models/provider-runtime-artifact.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,oCAAoC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvG,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,eAAe,EAAE,CAAC,CAAC,MAAM,CACvB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,CAAC;IACb,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClC,OAAO,EAAE,oCAAoC;IAC7C,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,4BAA4B,CAC7B,CAAC,QAAQ,EAAE;IACZ,KAAK,EAAE,kCAAkC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  EngineCapability,\n  FrontendProvidersBlockSchema,\n} from '@wildo-ai/saas-models';\n\nconst ProviderRuntimeScopeSelectionSchema = z.strictObject({\n  engineCapabilities: z.array(z.enum(EngineCapability)).default([]),\n  providerCapabilities: z.array(z.string().min(1)).default([]),\n  protocols: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeSelectionPolicySchema = z.strictObject({\n  primary: z.string().min(1),\n  fallbacks: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeScopeArtifactSchema = z.strictObject({\n  providers: z.record(z.string(), ProviderRuntimeScopeSelectionSchema).default({}),\n  selection: z.partialRecord(z.enum(EngineCapability), ProviderRuntimeSelectionPolicySchema).default({}),\n});\n\nconst ProviderRuntimeModulesArtifactSchema = z.strictObject({\n  declaredModules: z.record(\n    z.string(),\n    z.strictObject({\n      services: z.array(z.string().min(1)),\n      haveSamlIntegration: z.boolean().optional(),\n    }),\n  ).default({}),\n  moduleIds: z.array(z.string().min(1)).default([]),\n  moduleIdsByService: z.record(z.string(), z.array(z.string().min(1))).default({}),\n});\n\nexport const ProviderRuntimeArtifactSchema = z.strictObject({\n  __AUTOGENERATED__: z.string().includes('DO NOT EDIT'),\n  generatedBy: z.literal('wildo provider-runtime-artifact'),\n  generatedAt: z.string().datetime({ offset: true }),\n  sourceDigest: z.string().min(1),\n  providerRefs: z.array(z.string().min(1)).optional(),\n  providerGraphDigest: z.string().min(1).optional(),\n  lockfileSectionDigest: z.string().min(1).optional(),\n  artifactKind: z.literal('backend'),\n  modules: ProviderRuntimeModulesArtifactSchema,\n  frontendProviderBootstraps: z.record(\n    z.string().min(1),\n    FrontendProvidersBlockSchema,\n  ).optional(),\n  scope: ProviderRuntimeScopeArtifactSchema.default({ providers: {}, selection: {} }),\n});\nexport type ProviderRuntimeArtifact = z.infer<typeof ProviderRuntimeArtifactSchema>;\n\n/** Values-only identity retained after the generated provider artifact is applied; no provider configuration or secret material crosses this seam. */\nexport interface ProviderRuntimeArtifactEvidenceMetadata {\n  readonly sourceDigest: string;\n  readonly providerGraphDigest: string | null;\n  readonly lockfileSectionDigest: string | null;\n}\n"]}
+{"version":3,"file":"provider-runtime-artifact.backend.schemas.js","sourceRoot":"","sources":["../../../../src/config/models/provider-runtime-artifact.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,4BAA4B,GAE7B,MAAM,uBAAuB,CAAC;AAwB/B,MAAM,sCAAsC,GAC1C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAE5D,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,oCAAoC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvG,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,eAAe,EAAE,CAAC,CAAC,MAAM,CACvB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,CAAC;IACb,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClC,OAAO,EAAE,oCAAoC;IAC7C,0BAA0B,EAAE,sCAAsC,CAAC,QAAQ,EAAE;IAC7E,KAAK,EAAE,kCAAkC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  EngineCapability,\n  FrontendProvidersBlockSchema,\n  type FrontendProvidersBlock,\n} from '@wildo-ai/saas-models';\n\n/**\n * The per-service frontend bootstrap map, ANNOTATED rather than inferred.\n *\n * `FrontendProvidersBlockSchema` transitively references three atoms that `@wildo-ai/saas-models`\n * publishes from `/public-runtime` alone, so a consumer that resolves this package's dependency to\n * SOURCE — the minion and worker libraries do, deliberately — has no public specifier through which\n * to NAME them. While the artifact object stayed small TypeScript inlined the shape and nobody\n * noticed; the moment it grew one member past the inline threshold it needed the name and refused:\n * `TS2742 … cannot be named without a reference to\n * node_modules/@wildo-ai/saas-models/src/external-providers/provider-frontend-surface.shared.schemas`.\n *\n * Annotating here stops the expansion at `FrontendProvidersBlock`, which IS root-exported and\n * therefore nameable everywhere. The underlying defect is a root-exported contract depending on a\n * subpath-only module (`package-public-entrypoints.md`, \"The root barrel must not DEPEND on a\n * subpath-only surface\"); that module is the frozen provider contract, so it is filed as #356 rather\n * than fixed here. Nothing is lost: the schema's runtime behaviour is unchanged and consumers keep the\n * same inferred field type.\n */\nexport interface ProviderRuntimeFrontendBootstraps {\n  [serviceKey: string]: FrontendProvidersBlock;\n}\n\nconst FrontendProviderBootstrapsRecordSchema: z.ZodType<ProviderRuntimeFrontendBootstraps> =\n  z.record(z.string().min(1), FrontendProvidersBlockSchema);\n\nconst ProviderRuntimeScopeSelectionSchema = z.strictObject({\n  engineCapabilities: z.array(z.enum(EngineCapability)).default([]),\n  providerCapabilities: z.array(z.string().min(1)).default([]),\n  protocols: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeSelectionPolicySchema = z.strictObject({\n  primary: z.string().min(1),\n  whenUnavailable: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeScopeArtifactSchema = z.strictObject({\n  providers: z.record(z.string(), ProviderRuntimeScopeSelectionSchema).default({}),\n  selection: z.partialRecord(z.enum(EngineCapability), ProviderRuntimeSelectionPolicySchema).default({}),\n});\n\nconst ProviderRuntimeModulesArtifactSchema = z.strictObject({\n  declaredModules: z.record(\n    z.string(),\n    z.strictObject({\n      services: z.array(z.string().min(1)),\n      haveSamlIntegration: z.boolean().optional(),\n    }),\n  ).default({}),\n  moduleIds: z.array(z.string().min(1)).default([]),\n  moduleIdsByService: z.record(z.string(), z.array(z.string().min(1))).default({}),\n});\n\nexport const ProviderRuntimeArtifactSchema = z.strictObject({\n  __AUTOGENERATED__: z.string().includes('DO NOT EDIT'),\n  generatedBy: z.literal('wildo provider-runtime-artifact'),\n  generatedAt: z.string().datetime({ offset: true }),\n  sourceDigest: z.string().min(1),\n  providerRefs: z.array(z.string().min(1)).optional(),\n  /**\n   * `providerRef` -> the package specifier a host dynamic-imports to obtain that provider's backend\n   * module (#330).\n   *\n   * `providerRefs` says WHICH providers this process may expose; this says WHERE each one comes\n   * from, and it is what makes a provider shipped as its own npm package loadable at all — without\n   * it a host can only serve refs the engine itself ships.\n   *\n   * OPTIONAL rather than required, and that is load-bearing: an application whose artifact was\n   * generated before this field existed still parses, and every ref it names is engine-shipped, so\n   * the loader resolves all of them through the engine's own on-demand map. An un-resynced\n   * application therefore behaves exactly as it did before.\n   */\n  providerRuntimeImports: z.record(z.string().min(1), z.string().min(1)).optional(),\n  providerGraphDigest: z.string().min(1).optional(),\n  lockfileSectionDigest: z.string().min(1).optional(),\n  artifactKind: z.literal('backend'),\n  modules: ProviderRuntimeModulesArtifactSchema,\n  frontendProviderBootstraps: FrontendProviderBootstrapsRecordSchema.optional(),\n  scope: ProviderRuntimeScopeArtifactSchema.default({ providers: {}, selection: {} }),\n});\nexport type ProviderRuntimeArtifact = z.infer<typeof ProviderRuntimeArtifactSchema>;\n\n/** Values-only identity retained after the generated provider artifact is applied; no provider configuration or secret material crosses this seam. */\nexport interface ProviderRuntimeArtifactEvidenceMetadata {\n  readonly sourceDigest: string;\n  readonly providerGraphDigest: string | null;\n  readonly lockfileSectionDigest: string | null;\n}\n"]}

package/dist/esm/config/models/runtime-topology.backend.contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-topology.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/runtime-topology.backend.contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,uCAAuC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,uCAAuC,GAC7C,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAerC;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,mCAAmC,GACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAIrC"}
+{"version":3,"file":"runtime-topology.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../src/config/models/runtime-topology.backend.contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,uCAAuC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,uCAAuC,GAC7C,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAerC;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,mCAAmC,GACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAIrC"}

package/dist/esm/config/services/__tests__/mock-app-configuration.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-app-configuration.service.d.ts","sourceRoot":"","sources":["../../../../../../src/config/services/__tests__/mock-app-configuration.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,qBACa,2BAA2B;IACtC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAqB1B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IAExD;;;;;;;;;OASG;IACH,OAAO,CAAC,cAAc,CAA8B;IAEpD,mGAAmG;IACnG,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,wFAAwF;IACxF,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAI7C,qEAAqE;IACrE,aAAa,IAAI,OAAO;IAIxB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEhC;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEjC;IAED,GAAG,4CAEA;IAEH,MAAM,iDAAiC;IAEvC,UAAU,oCAA2B;IACrC,cAAc,oCAAuB;IAErC,qCAAqC;kBAC0B,OAAO;cAAQ,OAAO;oBAAc,OAAO;OAGxG;IAEF,kBAAkB,gEAEf;IAEH,sCAAsC,+DAQnC;IAEH;;;OAGG;IACH,sCAAsC,oDAanC;IAEH,iCAAiC,oCAc9B;IAEH,KAAK;CAWN"}
+{"version":3,"file":"mock-app-configuration.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/__tests__/mock-app-configuration.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,qBACa,2BAA2B;IACtC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAqB1B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IAExD;;;;;;;;;OASG;IACH,OAAO,CAAC,cAAc,CAA8B;IAEpD,mGAAmG;IACnG,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,wFAAwF;IACxF,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAI7C,qEAAqE;IACrE,aAAa,IAAI,OAAO;IAIxB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEhC;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEjC;IAED,GAAG,4CAEA;IAEH,MAAM,iDAAiC;IAEvC,UAAU,oCAA2B;IACrC,cAAc,oCAAuB;IAErC,qCAAqC;kBAC0B,OAAO;cAAQ,OAAO;oBAAc,OAAO;OAGxG;IAEF,kBAAkB,gEAEf;IAEH,sCAAsC,+DAQnC;IAEH;;;OAGG;IACH,sCAAsC,oDAanC;IAEH,iCAAiC,oCAc9B;IAEH,KAAK;CAWN"}

package/dist/esm/config/services/app-configuration-loader.backend.service.d.ts

@@ -67,7 +67,6 @@ export declare class AppConfigurationLoaderService {
     }>;
     protected loadPlatformManagedSecrets(): Promise<AppConfigurationSecrets>;
     private parseBootstrapConfigMetadataResponse;
-    private getAppsManagerFetchFailureMode;
     private shouldRetryInDevelopmentMode;
     private executeWithRetryWhenEnabled;
     private executeWithRetry;

package/dist/esm/config/services/app-configuration-loader.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-configuration-loader.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,EAAE,uBAAuB,EAAkC,MAAM,qEAAqE,CAAC;AAE9I,OAAO,KAAK,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,6DAA6D,CAAC;AAOtI,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAE5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAc,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAsG7C,qBACa,6BAA6B;IAcH,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAdtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA4F;IAC9H,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2F;IAE5H,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAA2B;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAGJ,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMrF,UAAU,IAAI,OAAO,CAAC;QACjC,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,uBAAuB,CAAC;QACpC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAkCF,SAAS,CAAC,6BAA6B,IAAI,oBAAoB;IAsB/D;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,kBAAkB,IAAI,gCAAgC;IAkKhE;;;;;;;;OAQG;cACa,oCAAoC,CAClD,SAAS,EAAE,gBAAgB,GAAG,gCAAgC,GAC7D,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;cAyHf,0BAA0B,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAiC9E,OAAO,CAAC,oCAAoC;IA6E5C,OAAO,CAAC,8BAA8B;IAWtC,OAAO,CAAC,4BAA4B;YAMtB,2BAA2B;YAW3B,gBAAgB;IAmD9B,OAAO,CAAC,KAAK;CAGd"}
+{"version":3,"file":"app-configuration-loader.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/config/services/app-configuration-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,uBAAuB,EAAkC,MAAM,qEAAqE,CAAC;AAE9I,OAAO,KAAK,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,6DAA6D,CAAC;AAOtI,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAE5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAc,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AA4F7C,qBACa,6BAA6B;IAcH,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAdtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA4F;IAC9H,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2F;IAE5H,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAA2B;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAGJ,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMrF,UAAU,IAAI,OAAO,CAAC;QACjC,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,uBAAuB,CAAC;QACpC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAoCF,SAAS,CAAC,6BAA6B,IAAI,oBAAoB;IAsB/D;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,kBAAkB,IAAI,gCAAgC;IAkKhE;;;;;;;;OAQG;cACa,oCAAoC,CAClD,SAAS,EAAE,gBAAgB,GAAG,gCAAgC,GAC7D,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;cAyHf,0BAA0B,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAiC9E,OAAO,CAAC,oCAAoC;IAoF5C,OAAO,CAAC,4BAA4B;YAMtB,2BAA2B;YAW3B,gBAAgB;IAmD9B,OAAO,CAAC,KAAK;CAGd"}

package/dist/esm/config/services/app-configuration-loader.backend.service.js

@@ -28,10 +28,11 @@ import { injectable, inject } from 'inversify';
 import { z } from 'zod';
 import { ErrorType, ResourcesConfigOperationsDtosBuilderUtils, RuntimeEnvironment, WildoHeaderKeys } from '@wildo-ai/saas-models';
 import { ApplicationBackendDataEnvKeys, ApplicationBackendRuntimeEnvKeys } from '@wildo-ai/platform-core-shared';
+import { AdminAppManagedMinionsSchema, AdminAppManagedWorkersSchema } from '@wildo-ai/platform-config-lib';
 import { AppConfigurationSecrets_Schema } from '../../config/models/app-config-secrets.backend.schemas.js';
 import { JwtPrivateKeys } from '../../security/authentications/models/jwt.backend.schemas.js';
 import { buildFileServicesTopologyFromEnvironment, buildMinimalPreOverrideAppConfiguration, buildStorageTopologyFromEnvironment } from '../../config/models/app-config.backend.schemas.js';
-import { APP_CONFIGURATION_MINION_MODES, MongoDBProtocol } from '../../config/models/app-config.backend.schemas.js';
+import { MongoDBProtocol } from '../../config/models/app-config.backend.schemas.js';
 import { DEFAULT_PERSISTENCE_ADAPTER, ResourceIdFormat } from '@wildo-ai/saas-models';
 import { buildPlatformRuntimeEndpointsFromBackendEnv } from '../../config/models/runtime-topology.backend.contracts.js';
 import { SAAS_SERVICE_TYPES } from '../../inject/models/service-types.js';
@@ -40,71 +41,66 @@ import { ApplicationEnvConfigurationSchema } from '../../config/models/app-env-c
 import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
 import { describeCaughtError } from '../../errors/utils/error-log-level-classification.backend.utils.js';
 import axios from 'axios';
+import { APPS_MANAGER_REQUEST_TIMEOUT_MS } from '../../config/models/apps-manager-transport.backend.definitions.js';
 import { API_ROUTES_BACKEND_DEFINITIONS } from '../../requests/models/api-routes.backend.defintions.js';
-var AppsManagerFetchKind;
-(function (AppsManagerFetchKind) {
-    AppsManagerFetchKind["PLATFORM_MANAGED_SECRETS"] = "platform_managed_secrets";
-    AppsManagerFetchKind["BOOTSTRAP_CONFIG_METADATA"] = "bootstrap_config_metadata";
-})(AppsManagerFetchKind || (AppsManagerFetchKind = {}));
-var AppsManagerFetchFailureMode;
-(function (AppsManagerFetchFailureMode) {
-    AppsManagerFetchFailureMode["FAIL_FAST"] = "fail_fast";
-})(AppsManagerFetchFailureMode || (AppsManagerFetchFailureMode = {}));
+/**
+ * Every apps-manager fetch fails fast, and that is the whole policy (#502).
+ *
+ * This was an `AppsManagerFetchFailureMode` enum with one member and a resolver whose every switch
+ * arm returned it — an abstraction expressing a choice that does not exist. Collapsed to a constant
+ * because the value is still worth carrying in the error context: an operator reading a configuration
+ * failure wants to know the loader gave up rather than degraded.
+ *
+ * If a second mode is ever wanted — a cached-config fallback, a degraded boot — it comes back as a
+ * real decision about what an application may run WITHOUT, not as a vocabulary waiting for a second
+ * member. Bootstrap configuration is the wrong place to be permissive: an application that boots on
+ * stale or absent config is one whose behaviour nobody can reason about.
+ */
+const APPS_MANAGER_FETCH_FAILURE_MODE = 'fail_fast';
 const AppBootstrapConfigMetadataResponseSchema = z.object({
     appSlug: z.string().min(1),
     appIdentity: z.unknown().optional(),
     frontendServices: z.unknown().optional(),
     /**
-     * Mirrors `AdminAppManagedMinionsSchema` from
-     * `@wildo-ai/platform-config-lib` — it must carry EVERY field that schema
-     * declares, not merely the ones a past regression happened to expose.
-     * `mode` and `schedule` are the recorded case (the KD-12 cron-tick path);
-     * `platformAccess` was added the same way and would have been stripped the
-     * same way. Earlier
-     * shape only declared `resourceAccess`, which silently stripped these
-     * fields from the wire payload via Zod's default object semantics —
-     * `extractMinionTickCronJobs()` then never observed `mode === 'cron'`
-     * and the entire MINION_TICK CronJob registration was dead in
-     * production. Adding either field on the apps-manager side without
-     * mirroring it here will reintroduce the same silent regression.
+     * The managed runtime inventories are the PRODUCER's schemas, imported — never re-declared here.
+     *
+     * ## Why these two fields, alone in this object, come from `@wildo-ai/platform-config-lib`
+     *
+     * Until 2026-09-09 both blocks were written out by hand at this site, as a copy of
+     * `AdminAppManagedMinionsSchema` / `AdminAppManagedWorkersSchema`, with a comment instructing the
+     * next author to keep the copy in step. That instruction failed twice, in the only way this class
+     * of defect ever fails: Zod strips what a schema does not declare, so a field added on the
+     * platform side and not mirrored here was not rejected, it was DELETED from the payload between
+     * the wire and the application.
+     *
+     *  - `mode` / `schedule` (KD-12): the loader's copy declared only `resourceAccess`, so
+     *    `extractMinionTickCronJobs()` never observed `mode === 'cron'` and the entire MINION_TICK
+     *    CronJob registration was dead in production while apps-manager sent the data correctly.
+     *  - `platformAccess` (R4/R5): added on the platform side later, stripped here identically, until
+     *    someone noticed and widened the copy again.
+     *
+     * Neither incident produced an error, a failing test, or a log line — which is precisely why a
+     * comment asking for vigilance was the wrong mechanism. The import removes the copy.
+     *
+     * ## Why importing is safe, and is not a new dependency
+     *
+     * `engine/saas-backend-lib` already declares `@wildo-ai/platform-config-lib` as a hard
+     * `dependencies` edge (`package.json`), and `app-config.backend.schemas.ts` already imports
+     * runtime VALUES from its package root. The module holding these schemas is re-exported by that
+     * same root, so this import adds no module to any graph that was not already loaded.
+     *
+     * It also cannot tighten what the wire accepts, which is the risk worth naming. The PRODUCER —
+     * `apps-to-manager.apps-manager.platform.controller.ts` — parses the payload it serves through
+     * `AppBootstrapConfigMetadataResponseSchema`, which is built out of these very schemas. A
+     * consumer parsing with the producer's own schema can reject nothing the producer can emit. The
+     * differences all run the permissive way: `WorkerHttpSchema` DEFAULTS `port` / `healthPath` /
+     * `readyPath` where the hand copy required them.
+     *
+     * The dev companion (`companion-platform-config.companion.ts`) has always parsed this response
+     * with the platform's schema. This hop was the only consumer of the contract that did not.
      */
-    minions: z.record(z.string(), z.object({
-        resourceAccess: z.object({
-            read: z.array(z.string().min(1)).default([]),
-            write: z.array(z.string().min(1)).default([]),
-        }).optional(),
-        // Structural, mirroring `app-config.backend.schemas.ts` — see the boundary
-        // note there for why this hop does not reference the config-lib schema.
-        platformAccess: z.object({ scopes: z.array(z.string().min(1)).optional() }).optional(),
-        mode: z.enum(APP_CONFIGURATION_MINION_MODES).optional(),
-        schedule: z.string().min(1).optional(),
-    })).optional(),
-    workers: z.record(z.string(), z.object({
-        name: z.string().min(1),
-        displayName: z.string().min(1),
-        description: z.string().optional(),
-        runtime: z.object({
-            type: z.string().min(1),
-            language: z.string().min(1),
-        }),
-        http: z.object({
-            port: z.number().int().positive(),
-            healthPath: z.string().min(1),
-            readyPath: z.string().min(1),
-            metricsPath: z.string().min(1).optional(),
-        }),
-        auth: z.literal('wildo-jwt'),
-        replicas: z.number().int().positive(),
-        resources: z.object({
-            cpu: z.string().min(1).optional(),
-            memory: z.string().min(1).optional(),
-        }).optional(),
-        dataAccess: z.object({
-            database: z.enum(['read-only', 'read-write', 'none']).optional(),
-            cache: z.boolean().optional(),
-            queue: z.enum(['consumer', 'producer', 'both', 'none']).optional(),
-        }).optional(),
-    })).optional(),
+    minions: AdminAppManagedMinionsSchema.optional(),
+    workers: AdminAppManagedWorkersSchema.optional(),
     engineCapabilities: z.record(z.string(), z.object({
         enabled: z.boolean(),
         required: z.boolean().optional(),
@@ -153,6 +149,8 @@ let AppConfigurationLoaderService = class AppConfigurationLoaderService {
         this.serviceName = this.applicationEnvConfig.SERVICE_NAME;
         this.axiosInstance = axios.create({
             baseURL: this.applicationEnvConfig.PLATFORM_APPS_MANAGER_URL,
+            // `axios` defaults to `timeout: 0` — no deadline. Measured on axios@1.13.5, not assumed.
+            timeout: APPS_MANAGER_REQUEST_TIMEOUT_MS,
             headers: {
                 [WildoHeaderKeys.CONTENT_TYPE]: 'application/json',
                 [WildoHeaderKeys.SERVICE_ID]: this.serviceName,
@@ -462,7 +460,7 @@ let AppConfigurationLoaderService = class AppConfigurationLoaderService {
                     message: 'Failed to fetch bootstrap config metadata from apps-manager',
                     serviceName: this.serviceName,
                     applicationEnv: this.applicationEnvConfig.APPLICATION_ENV,
-                    failureMode: AppsManagerFetchFailureMode.FAIL_FAST,
+                    failureMode: APPS_MANAGER_FETCH_FAILURE_MODE,
                     error: describeCaughtError(error),
                 },
             });
@@ -489,7 +487,7 @@ let AppConfigurationLoaderService = class AppConfigurationLoaderService {
                     message: 'Failed to load platform managed secrets',
                     serviceName: this.serviceName,
                     applicationEnv: this.applicationEnvConfig.APPLICATION_ENV,
-                    failureMode: this.getAppsManagerFetchFailureMode(AppsManagerFetchKind.PLATFORM_MANAGED_SECRETS),
+                    failureMode: APPS_MANAGER_FETCH_FAILURE_MODE,
                     status: error.status ?? undefined,
                     response: error.response?.data ?? undefined,
                     error: describeCaughtError(error)
@@ -532,13 +530,18 @@ let AppConfigurationLoaderService = class AppConfigurationLoaderService {
             appSlug,
             appIdentity: response.appIdentity,
             frontendServices: response.frontendServices,
-            // The cast here narrows our locally-parsed shape to
-            // `AppConfiguration['minions']` (defined in
-            // `app-config.backend.schemas.ts`). The two shapes MUST stay
-            // aligned — when adding a field to `AppConfiguration_MinionsSchema`,
-            // mirror it on the local response schema above so the wire field
-            // survives Zod's "strip unknown" semantics. KD-12's `mode` /
-            // `schedule` fields are the documented precedent.
+            // The cast crosses the two schemas that describe this block: the platform's
+            // `AdminAppManagedMinionsSchema` (what the wire carries, and what the response schema above
+            // now parses with) and the engine's `AppConfiguration_MinionsSchema` (what the running
+            // application holds). It is a cast rather than an assignment because the second is a
+            // `strictObject` typed against a named interface for the TS7056 reason recorded on
+            // `AppConfiguration_MinionEntry` — collapsing the two would put that ceiling back.
+            //
+            // What used to sit here was an instruction to hand-mirror a third copy at this site whenever
+            // either schema grew, and that instruction failed twice in production. The two survivors are
+            // now held in step MECHANICALLY, by
+            // `config/__tests__/managed-runtime-inventory-parity.backend.test.ts`, which fails on a field
+            // present in one and absent in the other. Do not restore a hand copy here.
             minions: response.minions,
             workers: response.workers,
             engineCapabilities: response.engineCapabilities,
@@ -551,14 +554,6 @@ let AppConfigurationLoaderService = class AppConfigurationLoaderService {
             refreshTokenExpirationDays: jwtBlock.refreshTokenExpirationDays,
         };
     }
-    getAppsManagerFetchFailureMode(fetchKind) {
-        switch (fetchKind) {
-            case AppsManagerFetchKind.PLATFORM_MANAGED_SECRETS:
-            case AppsManagerFetchKind.BOOTSTRAP_CONFIG_METADATA:
-            default:
-                return AppsManagerFetchFailureMode.FAIL_FAST;
-        }
-    }
     shouldRetryInDevelopmentMode() {
         const isAppManager = this.serviceName === AppConfigurationLoaderService_1.APP_MANAGER_SERVICE_NAME;
         const isDevelopment = this.applicationEnvConfig.APPLICATION_ENV === RuntimeEnvironment.DEVELOPMENT;