@wildo-ai/saas-backend-lib 1.1.3 → 1.1.4

package/dist/esm/config/models/provider-runtime-artifact.backend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-runtime-artifact.backend.schemas.js","sourceRoot":"","sources":["../../../../../src/config/models/provider-runtime-artifact.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,4BAA4B,GAE7B,MAAM,uBAAuB,CAAC;AAwB/B,MAAM,sCAAsC,GAC1C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAE5D,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,oCAAoC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvG,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,eAAe,EAAE,CAAC,CAAC,MAAM,CACvB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,CAAC;IACb,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClC,OAAO,EAAE,oCAAoC;IAC7C,0BAA0B,EAAE,sCAAsC,CAAC,QAAQ,EAAE;IAC7E,KAAK,EAAE,kCAAkC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  EngineCapability,\n  FrontendProvidersBlockSchema,\n  type FrontendProvidersBlock,\n} from '@wildo-ai/saas-models';\n\n/**\n * The per-service frontend bootstrap map, ANNOTATED rather than inferred.\n *\n * `FrontendProvidersBlockSchema` transitively references three atoms that `@wildo-ai/saas-models`\n * publishes from `/public-runtime` alone, so a consumer that resolves this package's dependency to\n * SOURCE — the minion and worker libraries do, deliberately — has no public specifier through which\n * to NAME them. While the artifact object stayed small TypeScript inlined the shape and nobody\n * noticed; the moment it grew one member past the inline threshold it needed the name and refused:\n * `TS2742 … cannot be named without a reference to\n * node_modules/@wildo-ai/saas-models/src/external-providers/provider-frontend-surface.shared.schemas`.\n *\n * Annotating here stops the expansion at `FrontendProvidersBlock`, which IS root-exported and\n * therefore nameable everywhere. The underlying defect is a root-exported contract depending on a\n * subpath-only module (`package-public-entrypoints.md`, \"The root barrel must not DEPEND on a\n * subpath-only surface\"); that module is the frozen provider contract, so it is filed as #356 rather\n * than fixed here. Nothing is lost: the schema's runtime behaviour is unchanged and consumers keep the\n * same inferred field type.\n */\nexport interface ProviderRuntimeFrontendBootstraps {\n  [serviceKey: string]: FrontendProvidersBlock;\n}\n\nconst FrontendProviderBootstrapsRecordSchema: z.ZodType<ProviderRuntimeFrontendBootstraps> =\n  z.record(z.string().min(1), FrontendProvidersBlockSchema);\n\nconst ProviderRuntimeScopeSelectionSchema = z.strictObject({\n  engineCapabilities: z.array(z.enum(EngineCapability)).default([]),\n  providerCapabilities: z.array(z.string().min(1)).default([]),\n  protocols: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeSelectionPolicySchema = z.strictObject({\n  primary: z.string().min(1),\n  whenUnavailable: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeScopeArtifactSchema = z.strictObject({\n  providers: z.record(z.string(), ProviderRuntimeScopeSelectionSchema).default({}),\n  selection: z.partialRecord(z.enum(EngineCapability), ProviderRuntimeSelectionPolicySchema).default({}),\n});\n\nconst ProviderRuntimeModulesArtifactSchema = z.strictObject({\n  declaredModules: z.record(\n    z.string(),\n    z.strictObject({\n      services: z.array(z.string().min(1)),\n      haveSamlIntegration: z.boolean().optional(),\n    }),\n  ).default({}),\n  moduleIds: z.array(z.string().min(1)).default([]),\n  moduleIdsByService: z.record(z.string(), z.array(z.string().min(1))).default({}),\n});\n\nexport const ProviderRuntimeArtifactSchema = z.strictObject({\n  __AUTOGENERATED__: z.string().includes('DO NOT EDIT'),\n  generatedBy: z.literal('wildo provider-runtime-artifact'),\n  generatedAt: z.string().datetime({ offset: true }),\n  sourceDigest: z.string().min(1),\n  providerRefs: z.array(z.string().min(1)).optional(),\n  /**\n   * `providerRef` -> the package specifier a host dynamic-imports to obtain that provider's backend\n   * module (#330).\n   *\n   * `providerRefs` says WHICH providers this process may expose; this says WHERE each one comes\n   * from, and it is what makes a provider shipped as its own npm package loadable at all — without\n   * it a host can only serve refs the engine itself ships.\n   *\n   * OPTIONAL rather than required, and that is load-bearing: an application whose artifact was\n   * generated before this field existed still parses, and every ref it names is engine-shipped, so\n   * the loader resolves all of them through the engine's own on-demand map. An un-resynced\n   * application therefore behaves exactly as it did before.\n   */\n  providerRuntimeImports: z.record(z.string().min(1), z.string().min(1)).optional(),\n  providerGraphDigest: z.string().min(1).optional(),\n  lockfileSectionDigest: z.string().min(1).optional(),\n  artifactKind: z.literal('backend'),\n  modules: ProviderRuntimeModulesArtifactSchema,\n  frontendProviderBootstraps: FrontendProviderBootstrapsRecordSchema.optional(),\n  scope: ProviderRuntimeScopeArtifactSchema.default({ providers: {}, selection: {} }),\n});\nexport type ProviderRuntimeArtifact = z.infer<typeof ProviderRuntimeArtifactSchema>;\n\n/** Values-only identity retained after the generated provider artifact is applied; no provider configuration or secret material crosses this seam. */\nexport interface ProviderRuntimeArtifactEvidenceMetadata {\n  readonly sourceDigest: string;\n  readonly providerGraphDigest: string | null;\n  readonly lockfileSectionDigest: string | null;\n}\n"]}
+{"version":3,"file":"provider-runtime-artifact.backend.schemas.js","sourceRoot":"","sources":["../../../../src/config/models/provider-runtime-artifact.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,4BAA4B,GAE7B,MAAM,uBAAuB,CAAC;AAwB/B,MAAM,sCAAsC,GAC1C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAE5D,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,oCAAoC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvG,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,eAAe,EAAE,CAAC,CAAC,MAAM,CACvB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,CAAC;IACb,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClC,OAAO,EAAE,oCAAoC;IAC7C,0BAA0B,EAAE,sCAAsC,CAAC,QAAQ,EAAE;IAC7E,KAAK,EAAE,kCAAkC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  EngineCapability,\n  FrontendProvidersBlockSchema,\n  type FrontendProvidersBlock,\n} from '@wildo-ai/saas-models';\n\n/**\n * The per-service frontend bootstrap map, ANNOTATED rather than inferred.\n *\n * `FrontendProvidersBlockSchema` transitively references three atoms that `@wildo-ai/saas-models`\n * publishes from `/public-runtime` alone, so a consumer that resolves this package's dependency to\n * SOURCE — the minion and worker libraries do, deliberately — has no public specifier through which\n * to NAME them. While the artifact object stayed small TypeScript inlined the shape and nobody\n * noticed; the moment it grew one member past the inline threshold it needed the name and refused:\n * `TS2742 … cannot be named without a reference to\n * node_modules/@wildo-ai/saas-models/src/external-providers/provider-frontend-surface.shared.schemas`.\n *\n * Annotating here stops the expansion at `FrontendProvidersBlock`, which IS root-exported and\n * therefore nameable everywhere. The underlying defect is a root-exported contract depending on a\n * subpath-only module (`package-public-entrypoints.md`, \"The root barrel must not DEPEND on a\n * subpath-only surface\"); that module is the frozen provider contract, so it is filed as #356 rather\n * than fixed here. Nothing is lost: the schema's runtime behaviour is unchanged and consumers keep the\n * same inferred field type.\n */\nexport interface ProviderRuntimeFrontendBootstraps {\n  [serviceKey: string]: FrontendProvidersBlock;\n}\n\nconst FrontendProviderBootstrapsRecordSchema: z.ZodType<ProviderRuntimeFrontendBootstraps> =\n  z.record(z.string().min(1), FrontendProvidersBlockSchema);\n\nconst ProviderRuntimeScopeSelectionSchema = z.strictObject({\n  engineCapabilities: z.array(z.enum(EngineCapability)).default([]),\n  providerCapabilities: z.array(z.string().min(1)).default([]),\n  protocols: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeSelectionPolicySchema = z.strictObject({\n  primary: z.string().min(1),\n  whenUnavailable: z.array(z.string().min(1)).default([]),\n});\n\nconst ProviderRuntimeScopeArtifactSchema = z.strictObject({\n  providers: z.record(z.string(), ProviderRuntimeScopeSelectionSchema).default({}),\n  selection: z.partialRecord(z.enum(EngineCapability), ProviderRuntimeSelectionPolicySchema).default({}),\n});\n\nconst ProviderRuntimeModulesArtifactSchema = z.strictObject({\n  declaredModules: z.record(\n    z.string(),\n    z.strictObject({\n      services: z.array(z.string().min(1)),\n      haveSamlIntegration: z.boolean().optional(),\n    }),\n  ).default({}),\n  moduleIds: z.array(z.string().min(1)).default([]),\n  moduleIdsByService: z.record(z.string(), z.array(z.string().min(1))).default({}),\n});\n\nexport const ProviderRuntimeArtifactSchema = z.strictObject({\n  __AUTOGENERATED__: z.string().includes('DO NOT EDIT'),\n  generatedBy: z.literal('wildo provider-runtime-artifact'),\n  generatedAt: z.string().datetime({ offset: true }),\n  sourceDigest: z.string().min(1),\n  providerRefs: z.array(z.string().min(1)).optional(),\n  /**\n   * `providerRef` -> the package specifier a host dynamic-imports to obtain that provider's backend\n   * module (#330).\n   *\n   * `providerRefs` says WHICH providers this process may expose; this says WHERE each one comes\n   * from, and it is what makes a provider shipped as its own npm package loadable at all — without\n   * it a host can only serve refs the engine itself ships.\n   *\n   * OPTIONAL rather than required, and that is load-bearing: an application whose artifact was\n   * generated before this field existed still parses, and every ref it names is engine-shipped, so\n   * the loader resolves all of them through the engine's own on-demand map. An un-resynced\n   * application therefore behaves exactly as it did before.\n   */\n  providerRuntimeImports: z.record(z.string().min(1), z.string().min(1)).optional(),\n  providerGraphDigest: z.string().min(1).optional(),\n  lockfileSectionDigest: z.string().min(1).optional(),\n  artifactKind: z.literal('backend'),\n  modules: ProviderRuntimeModulesArtifactSchema,\n  frontendProviderBootstraps: FrontendProviderBootstrapsRecordSchema.optional(),\n  scope: ProviderRuntimeScopeArtifactSchema.default({ providers: {}, selection: {} }),\n});\nexport type ProviderRuntimeArtifact = z.infer<typeof ProviderRuntimeArtifactSchema>;\n\n/** Values-only identity retained after the generated provider artifact is applied; no provider configuration or secret material crosses this seam. */\nexport interface ProviderRuntimeArtifactEvidenceMetadata {\n  readonly sourceDigest: string;\n  readonly providerGraphDigest: string | null;\n  readonly lockfileSectionDigest: string | null;\n}\n"]}

package/dist/esm/config/models/runtime-topology.backend.contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-topology.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../../src/config/models/runtime-topology.backend.contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,uCAAuC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,uCAAuC,GAC7C,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAerC;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,mCAAmC,GACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAIrC"}
+{"version":3,"file":"runtime-topology.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../src/config/models/runtime-topology.backend.contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,uCAAuC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,MAAM,CAAC;IAClC,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,uCAAuC,GAC7C,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAerC;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,mCAAmC,GACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAIrC"}

package/dist/esm/config/services/__tests__/mock-app-configuration.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-app-configuration.service.d.ts","sourceRoot":"","sources":["../../../../../../src/config/services/__tests__/mock-app-configuration.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,qBACa,2BAA2B;IACtC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAqB1B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IAExD;;;;;;;;;OASG;IACH,OAAO,CAAC,cAAc,CAA8B;IAEpD,mGAAmG;IACnG,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,wFAAwF;IACxF,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAI7C,qEAAqE;IACrE,aAAa,IAAI,OAAO;IAIxB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEhC;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEjC;IAED,GAAG,4CAEA;IAEH,MAAM,iDAAiC;IAEvC,UAAU,oCAA2B;IACrC,cAAc,oCAAuB;IAErC,qCAAqC;kBAC0B,OAAO;cAAQ,OAAO;oBAAc,OAAO;OAGxG;IAEF,kBAAkB,gEAEf;IAEH,sCAAsC,+DAQnC;IAEH;;;OAGG;IACH,sCAAsC,oDAanC;IAEH,iCAAiC,oCAc9B;IAEH,KAAK;CAWN"}
+{"version":3,"file":"mock-app-configuration.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/__tests__/mock-app-configuration.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,kBAAkB,CAAC;AAI1B,qBACa,2BAA2B;IACtC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAqB1B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IAExD;;;;;;;;;OASG;IACH,OAAO,CAAC,cAAc,CAA8B;IAEpD,mGAAmG;IACnG,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,wFAAwF;IACxF,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAI7C,qEAAqE;IACrE,aAAa,IAAI,OAAO;IAIxB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEhC;IAED,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEjC;IAED,GAAG,4CAEA;IAEH,MAAM,iDAAiC;IAEvC,UAAU,oCAA2B;IACrC,cAAc,oCAAuB;IAErC,qCAAqC;kBAC0B,OAAO;cAAQ,OAAO;oBAAc,OAAO;OAGxG;IAEF,kBAAkB,gEAEf;IAEH,sCAAsC,+DAQnC;IAEH;;;OAGG;IACH,sCAAsC,oDAanC;IAEH,iCAAiC,oCAc9B;IAEH,KAAK;CAWN"}

package/dist/esm/config/services/app-configuration-loader.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-configuration-loader.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,uBAAuB,EAAkC,MAAM,qEAAqE,CAAC;AAE9I,OAAO,KAAK,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,6DAA6D,CAAC;AAOtI,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAE5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAc,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AA2F7C,qBACa,6BAA6B;IAcH,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAdtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA4F;IAC9H,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2F;IAE5H,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAA2B;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAGJ,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMrF,UAAU,IAAI,OAAO,CAAC;QACjC,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,uBAAuB,CAAC;QACpC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAkCF,SAAS,CAAC,6BAA6B,IAAI,oBAAoB;IAsB/D;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,kBAAkB,IAAI,gCAAgC;IAkKhE;;;;;;;;OAQG;cACa,oCAAoC,CAClD,SAAS,EAAE,gBAAgB,GAAG,gCAAgC,GAC7D,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;cAyHf,0BAA0B,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAiC9E,OAAO,CAAC,oCAAoC;IAoF5C,OAAO,CAAC,4BAA4B;YAMtB,2BAA2B;YAW3B,gBAAgB;IAmD9B,OAAO,CAAC,KAAK;CAGd"}
+{"version":3,"file":"app-configuration-loader.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/config/services/app-configuration-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,uBAAuB,EAAkC,MAAM,qEAAqE,CAAC;AAE9I,OAAO,KAAK,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,MAAM,6DAA6D,CAAC;AAOtI,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AAE5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAc,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AA4F7C,qBACa,6BAA6B;IAcH,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IAdtE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACrD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA4F;IAC9H,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2F;IAE5H,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAA2B;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAM;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAGJ,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAMrF,UAAU,IAAI,OAAO,CAAC;QACjC,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,uBAAuB,CAAC;QACpC,SAAS,EAAE,gCAAgC,CAAC;QAC5C,aAAa,EAAE,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAoCF,SAAS,CAAC,6BAA6B,IAAI,oBAAoB;IAsB/D;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,kBAAkB,IAAI,gCAAgC;IAkKhE;;;;;;;;OAQG;cACa,oCAAoC,CAClD,SAAS,EAAE,gBAAgB,GAAG,gCAAgC,GAC7D,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;cAyHf,0BAA0B,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAiC9E,OAAO,CAAC,oCAAoC;IAoF5C,OAAO,CAAC,4BAA4B;YAMtB,2BAA2B;YAW3B,gBAAgB;IAmD9B,OAAO,CAAC,KAAK;CAGd"}

package/dist/esm/config/services/app-configuration-loader.backend.service.js

@@ -41,6 +41,7 @@ import { ApplicationEnvConfigurationSchema } from '../../config/models/app-env-c
 import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service.js';
 import { describeCaughtError } from '../../errors/utils/error-log-level-classification.backend.utils.js';
 import axios from 'axios';
+import { APPS_MANAGER_REQUEST_TIMEOUT_MS } from '../../config/models/apps-manager-transport.backend.definitions.js';
 import { API_ROUTES_BACKEND_DEFINITIONS } from '../../requests/models/api-routes.backend.defintions.js';
 /**
  * Every apps-manager fetch fails fast, and that is the whole policy (#502).
@@ -148,6 +149,8 @@ let AppConfigurationLoaderService = class AppConfigurationLoaderService {
         this.serviceName = this.applicationEnvConfig.SERVICE_NAME;
         this.axiosInstance = axios.create({
             baseURL: this.applicationEnvConfig.PLATFORM_APPS_MANAGER_URL,
+            // `axios` defaults to `timeout: 0` — no deadline. Measured on axios@1.13.5, not assumed.
+            timeout: APPS_MANAGER_REQUEST_TIMEOUT_MS,
             headers: {
                 [WildoHeaderKeys.CONTENT_TYPE]: 'application/json',
                 [WildoHeaderKeys.SERVICE_ID]: this.serviceName,

package/dist/esm/config/services/app-configuration-loader.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-configuration-loader.backend.service.js","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,yCAAyC,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAClI,OAAO,EAAE,6BAA6B,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AACjH,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC3G,OAAO,EAA2B,8BAA8B,EAAE,MAAM,qEAAqE,CAAC;AAC9I,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AAExG,OAAO,EAAE,wCAAwC,EAAE,uCAAuC,EAAE,mCAAmC,EAAE,MAAM,6DAA6D,CAAC;AACrM,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,2CAA2C,EAAE,MAAM,qEAAqE,CAAC;AAElI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,iEAAiE,CAAC;AACpH,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACnH,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAElH;;;;;;;;;;;;GAYG;AACH,MAAM,+BAA+B,GAAG,WAAW,CAAC;AAEpD,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAC1B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC,CACH,CAAC,QAAQ,EAAE;IACZ,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE;QACxC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE;KACrC,CAAC,CAAC,QAAQ,EAAE;IACb,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtG,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3C,iBAAiB,EAAE,CAAC,CAAC,MAAM,CACzB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,2EAA2E;YAC3E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;SACrC,CAAC,CAAC,CACJ,CAAC,QAAQ,EAAE;QACZ,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE;QACxC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE;KACvC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAGI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;;IAcK;IACa;IAdhD,QAAQ,CAA+D;IACvE,oBAAoB,CAAuB;IAC3C,WAAW,CAAS;IACpB,aAAa,CAAgB;IACtB,iBAAiB,GAAW,QAAQ,GAAG,8BAA8B,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAC;IAC7G,gBAAgB,GAAW,QAAQ,GAAG,8BAA8B,CAAC,YAAY,CAAC,sBAAsB,EAAE,CAAC;IAEpH,MAAM,CAAU,wBAAwB,GAAG,uBAAuB,CAAC;IACnE,MAAM,CAAU,kBAAkB,GAAG,EAAE,CAAC;IACxC,MAAM,CAAU,iBAAiB,GAAG,IAAI,CAAC;IACzC,MAAM,CAAU,gBAAgB,GAAG,KAAK,CAAC;IAEjD,YAC6C,MAAqB,EACR,YAAwC;QADrD,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAEhG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAEM,KAAK,CAAC,UAAU;QAQrB,oBAAoB;QACpB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC;QAE1D,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,yBAAyB;YAC5D,OAAO,EAAE;gBACP,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,kBAAkB;gBAClD,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW;gBAC9C,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,mCAAmC;gBAChG,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,cAAc;aAC3E;SACF,CAAC,CAAC;QAEH,uDAAuD;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE5C,6EAA6E;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAE3D,0EAA0E;QAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,oCAAoC,CAAC,SAAS,CAAC,CAAC;QAE/E,OAAO;YACL,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU;YACV,SAAS;YACT,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,cAAc;YACvD,OAAO;SACR,CAAC;IACJ,CAAC;IAES,6BAA6B;QACrC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvE,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oFAAoF;YACpF,oFAAoF;YACpF,sFAAsF;YACtF,qFAAqF;YACrF,sFAAsF;YACtF,mFAAmF;YACnF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,sDAAsD;oBAC/D,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;oBACxC,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACO,kBAAkB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;YACpE,cAAc,EAAE,GAAG,CAAC,yBAAyB;YAC7C,yBAAyB,EAAE,GAAG,CAAC,qCAAqC;YACpE,iBAAiB,EAAE,GAAG,CAAC,4BAA4B;SACpD,CAAC,CAAC;QACH,MAAM,2BAA2B,GAC/B,GAAG,CAAC,gCAAgC,CAAC,6BAA6B,CAAC,CAAC;QAEtE,MAAM,UAAU,GAAG,uCAAuC,CAAC;YACzD,gBAAgB,EAAE;gBAChB,GAAG,iBAAiB;gBACpB,GAAG,2BAA2B;aAC/B;YACD,QAAQ,EAAE;gBACR;;;;;;;;;;;mBAWG;gBACH,cAAc,EAAE,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,IAAI,2BAA2B;gBAC1G;;;;;;;;;;;;;;mBAcG;gBACH,gBAAgB,EAAE,GAAG,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,IAAI,gBAAgB,CAAC,SAAS;gBACrG;;;;;;;;;;;;;;;;;;mBAkBG;gBACH,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE;wBACP,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,GAAG,CAAC,YAAY;wBACtB,QAAQ,EAAE,GAAG,CAAC,gBAAgB;wBAC9B,QAAQ,EAAE,GAAG,CAAC,gBAAgB,IAAI,eAAe,CAAC,OAAO;wBACzD,OAAO,EAAE;4BACP,WAAW,EAAE,IAAI;4BACjB,CAAC,EAAE,UAAU;4BACb,UAAU,EAAE,OAAO;4BACnB,GAAG,CAAC,GAAG,CAAC,yBAAyB,KAAK,SAAS;gCAC7C,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,yBAAyB,EAAE;gCACrD,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP;;;;;;;;mBAQG;gBACH,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;oBACvD,UAAU,EAAE;wBACV,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC;wBACxD,IAAI,EAAE,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC,IAAI,IAAI;wBAChE,YAAY,EAAE,GAAG,CAAC,6BAA6B,CAAC,mBAAmB,CAAC;wBACpE,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,mBAAmB,CAAC;4BACxD,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,6BAA6B,CAAC,mBAAmB,CAAC,EAAE;4BACrE,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP,KAAK,EAAE;oBACL,IAAI,EAAE,GAAG,CAAC,UAAU;oBACpB,IAAI,EAAE,GAAG,CAAC,UAAU;oBACpB,EAAE,EAAE,CAAC;oBACL,0DAA0D;oBAC1D,6DAA6D;oBAC7D,iDAAiD;oBACjD,yDAAyD;oBACzD,sDAAsD;oBACtD,0DAA0D;oBAC1D,2DAA2D;oBAC3D,6DAA6D;oBAC7D,4DAA4D;oBAC5D,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnF;gBACD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;oBACtB,QAAQ,EAAE;wBACR,IAAI,EAAE,GAAG,CAAC,aAAa;wBACvB,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;wBAC/B,qEAAqE;wBACrE,mEAAmE;wBACnE,mEAAmE;wBACnE,iEAAiE;wBACjE,eAAe;wBACf,EAAE;wBACF,6EAA6E;wBAC7E,qEAAqE;wBACrE,qEAAqE;wBACrE,sEAAsE;wBACtE,kEAAkE;wBAClE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC7D;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,GAAG,EAAE,EAAE;YACP,4EAA4E;YAC5E,6EAA6E;YAC7E,2EAA2E;YAC3E,8BAA8B;YAC9B,4DAA4D;YAC5D,EAAE;YACF,6EAA6E;YAC7E,uEAAuE;YACvE,2EAA2E;YAC3E,8EAA8E;YAC9E,uCAAuC;YACvC,OAAO,EAAE,mCAAmC,CAAC,GAAG,CAAC;YACjD,yEAAyE;YACzE,iEAAiE;YACjE,8CAA8C;YAC9C,GAAG,wCAAwC,CAAC,GAAG,CAAC;SACjD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,4DAA4D,EAAE;YAC1E,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,qBAAqB,EAAE,GAAG,CAAC,yBAAyB;YACpD,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM;SAC7D,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACO,KAAK,CAAC,oCAAoC,CAClD,SAA8D;QAE9D,MAAM,cAAc,GAAG,KAAK,IAAkC,EAAE;YAC9D,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAErE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;oBACrE,OAAO,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;iBAC7G,CAAC,CAAC;YACL,CAAC;YAED,MAAM,EACJ,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,OAAO,EACP,OAAO,EACP,kBAAkB,EAClB,SAAS,EACT,KAAK,EACL,sBAAsB,EACtB,UAAU,EACV,iBAAiB,EACjB,4BAA4B,EAC5B,0BAA0B,GAC3B,GAAG,IAAI,CAAC,oCAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE7D,IAAI,WAAW,EAAE,CAAC;gBAChB,SAAS,CAAC,WAAW,GAAG,WAAW,CAAC;YACtC,CAAC;YAED,IAAI,gBAAgB,EAAE,CAAC;gBACrB,SAAS,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;YAChD,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;YAC9B,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;YAC9B,CAAC;YAED,IAAI,kBAAkB,EAAE,CAAC;gBACvB,SAAS,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;YACpD,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;YAClC,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,SAAS,CAAC,KAAK,GAAG;oBAChB,GAAG,SAAS,CAAC,KAAK;oBAClB,GAAG,KAAK;iBACT,CAAC;YACJ,CAAC;YAED,IAAI,sBAAsB,EAAE,CAAC;gBAC3B,SAAS,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;YAC5D,CAAC;YAED,SAAS,CAAC,GAAG,GAAG;gBACd,GAAG,SAAS,CAAC,GAAG;gBAChB,SAAS,EAAE;oBACT,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS;oBAC1B,GAAG,UAAU;iBACd;gBACD,iBAAiB,EAAE;oBACjB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;oBAC1C,GAAG,iBAAiB;iBACrB;gBACD,kEAAkE;gBAClE,4DAA4D;gBAC5D,2DAA2D;gBAC3D,0CAA0C;gBAC1C,mEAAmE;gBACnE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,uDAAuD;gBACvD,EAAE;gBACF,0DAA0D;gBAC1D,uEAAuE;gBACvE,6DAA6D;gBAC7D,wDAAwD;gBACxD,2DAA2D;gBAC3D,aAAa;gBACb,4BAA4B;gBAC5B,0BAA0B;aAC3B,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;gBAClE,OAAO;gBACP,cAAc,EAAE,CAAC,CAAC,WAAW;gBAC7B,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM;gBAChE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC9C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC9C,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM;gBACnE,iBAAiB,EAAE,CAAC,CAAC,SAAS;gBAC9B,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC5E,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM;aACzD,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,6DAA6D;oBACtE,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,eAAe;oBACzD,WAAW,EAAE,+BAA+B;oBAC5C,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAES,KAAK,CAAC,0BAA0B;QACxC,MAAM,oBAAoB,GAAG,KAAK,IAAsC,EAAE;YACxE,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACnF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAA0B,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAE/F,IAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChM,CAAC;YAED,MAAM,gBAAgB,GAAG,yCAAyC,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,yCAAyC;oBAClD,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,eAAe;oBACzD,WAAW,EAAE,+BAA+B;oBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;oBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;oBAC3C,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,oCAAoC,CAC1C,IAAa;QAoBb,MAAM,QAAQ,GAAG,wCAAwC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,iDAAiD;iBAC3D;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC9B,MAAM,UAAU,GAAG,QAAQ,EAAE,SAAS,CAAC;QACvC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,+DAA+D;oBACxE,OAAO;iBACR;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,yDAAyD,cAAc,CAAC,sBAAsB,EAAE;oBACzG,OAAO;iBACR;aACF,CAAC,CAAC;QACL,CAAC;QACD,+DAA+D;QAC/D,mEAAmE;QACnE,+DAA+D;QAE/D,OAAO;YACL,OAAO;YACP,WAAW,EAAE,QAAQ,CAAC,WAA0D;YAChF,gBAAgB,EAAE,QAAQ,CAAC,gBAAoE;YAC/F,4EAA4E;YAC5E,4FAA4F;YAC5F,uFAAuF;YACvF,qFAAqF;YACrF,mFAAmF;YACnF,mFAAmF;YACnF,EAAE;YACF,6FAA6F;YAC7F,6FAA6F;YAC7F,oCAAoC;YACpC,8FAA8F;YAC9F,2EAA2E;YAC3E,OAAO,EAAE,QAAQ,CAAC,OAAkD;YACpE,OAAO,EAAE,QAAQ,CAAC,OAAkD;YACpE,kBAAkB,EAAE,QAAQ,CAAC,kBAAwE;YACrG,SAAS,EAAE,QAAQ,CAAC,SAAsD;YAC1E,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,sBAAsB,EAAE,QAAQ,CAAC,sBAAgF;YACjH,UAAU;YACV,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,EAAE;YACnD,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B;YACnE,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;SAChE,CAAC;IACJ,CAAC;IAIO,4BAA4B;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,KAAK,+BAA6B,CAAC,wBAAwB,CAAC;QACjG,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,KAAK,kBAAkB,CAAC,WAAW,CAAC;QACnG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,SAA2B,EAC3B,aAAqB;QAErB,IAAI,IAAI,CAAC,4BAA4B,EAAE,EAAE,CAAC;YACxC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,SAA2B,EAC3B,aAAqB;QAErB,IAAI,SAAc,CAAC;QAEnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,+BAA6B,CAAC,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7F,IAAI,CAAC;gBACH,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,+BAA6B,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAC1E,+BAA6B,CAAC,gBAAgB,CAC/C,CAAC;oBAEF,IAAI,CAAC,QAAQ,CAAC,YAAY,aAAa,cAAc,OAAO,IAAI,+BAA6B,CAAC,kBAAkB,UAAU,KAAK,UAAU,EAAE;wBACzI,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,OAAO;wBACP,KAAK;qBACN,CAAC,CAAC;oBAEH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,CAAC,uBAAuB,aAAa,wCAAwC,EAAE;wBAC1F,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,aAAa,EAAE,+BAA6B,CAAC,kBAAkB;qBAChE,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,MAAM,SAAS,EAAE,CAAC;YAE3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAElB,IAAI,OAAO,GAAG,+BAA6B,CAAC,kBAAkB,EAAE,CAAC;oBAC/D,IAAI,CAAC,QAAQ,CAAC,WAAW,OAAO,eAAe,aAAa,cAAc,EAAE;wBAC1E,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,OAAO;wBACP,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,CAAC,OAAO,+BAA6B,CAAC,kBAAkB,wBAAwB,aAAa,EAAE,EAAE;wBAC5G,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;;AAjkBU,6BAA6B;IADzC,UAAU,EAAE;IAeR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;qCADI,aAAa;QACM,0BAA0B;GAfvF,6BAA6B,CAkkBzC","sourcesContent":["/**\n * Application Configuration Loader Service\n *\n * Loads application configuration through a layered chain (T5):\n *   1. Parse env vars (identity, database addresses, platform URLs)\n *   2. Build the minimal pre-override AppConfiguration skeleton\n *   3. Inject env-sourced database/runtime config into that skeleton\n *   4. Fetch reduced managed config metadata from apps-manager\n *   5. Merge managed app identity/frontend/engine-capability defaults plus JWT keys\n *   6. Return config for developer overrides (applied by AppConfigurationService)\n *\n * Secrets are still fully fetched from apps-manager (separate endpoint).\n */\n\nimport { injectable, inject } from 'inversify';\nimport { z } from 'zod';\nimport { ErrorType, ResourcesConfigOperationsDtosBuilderUtils, RuntimeEnvironment, WildoHeaderKeys } from '@wildo-ai/saas-models';\nimport { ApplicationBackendDataEnvKeys, ApplicationBackendRuntimeEnvKeys } from '@wildo-ai/platform-core-shared';\nimport { AdminAppManagedMinionsSchema, AdminAppManagedWorkersSchema } from '@wildo-ai/platform-config-lib';\nimport { AppConfigurationSecrets, AppConfigurationSecrets_Schema } from '~wildo-backend-lib/config/models/app-config-secrets.backend.schemas';\nimport { JwtPrivateKeys } from '~wildo-backend-lib/security/authentications/models/jwt.backend.schemas';\nimport type { AppConfiguration, AppConfiguration_PreOverrideSeed } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { buildFileServicesTopologyFromEnvironment, buildMinimalPreOverrideAppConfiguration, buildStorageTopologyFromEnvironment } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { MongoDBProtocol } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { DEFAULT_PERSISTENCE_ADAPTER, ResourceIdFormat } from '@wildo-ai/saas-models';\nimport { buildPlatformRuntimeEndpointsFromBackendEnv } from '~wildo-backend-lib/config/models/runtime-topology.backend.contracts';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ApplicationEnvConfig } from '~wildo-backend-lib/config/models/app-env-config.backend.schemas';\nimport { ApplicationEnvConfigurationSchema } from '~wildo-backend-lib/config/models/app-env-config.backend.schemas';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport axios, { AxiosInstance } from 'axios';\nimport { API_ROUTES_BACKEND_DEFINITIONS } from '~wildo-backend-lib/requests/models/api-routes.backend.defintions';\n\n/**\n * Every apps-manager fetch fails fast, and that is the whole policy (#502).\n *\n * This was an `AppsManagerFetchFailureMode` enum with one member and a resolver whose every switch\n * arm returned it — an abstraction expressing a choice that does not exist. Collapsed to a constant\n * because the value is still worth carrying in the error context: an operator reading a configuration\n * failure wants to know the loader gave up rather than degraded.\n *\n * If a second mode is ever wanted — a cached-config fallback, a degraded boot — it comes back as a\n * real decision about what an application may run WITHOUT, not as a vocabulary waiting for a second\n * member. Bootstrap configuration is the wrong place to be permissive: an application that boots on\n * stale or absent config is one whose behaviour nobody can reason about.\n */\nconst APPS_MANAGER_FETCH_FAILURE_MODE = 'fail_fast';\n\nconst AppBootstrapConfigMetadataResponseSchema = z.object({\n  appSlug: z.string().min(1),\n  appIdentity: z.unknown().optional(),\n  frontendServices: z.unknown().optional(),\n  /**\n   * The managed runtime inventories are the PRODUCER's schemas, imported — never re-declared here.\n   *\n   * ## Why these two fields, alone in this object, come from `@wildo-ai/platform-config-lib`\n   *\n   * Until 2026-09-09 both blocks were written out by hand at this site, as a copy of\n   * `AdminAppManagedMinionsSchema` / `AdminAppManagedWorkersSchema`, with a comment instructing the\n   * next author to keep the copy in step. That instruction failed twice, in the only way this class\n   * of defect ever fails: Zod strips what a schema does not declare, so a field added on the\n   * platform side and not mirrored here was not rejected, it was DELETED from the payload between\n   * the wire and the application.\n   *\n   *  - `mode` / `schedule` (KD-12): the loader's copy declared only `resourceAccess`, so\n   *    `extractMinionTickCronJobs()` never observed `mode === 'cron'` and the entire MINION_TICK\n   *    CronJob registration was dead in production while apps-manager sent the data correctly.\n   *  - `platformAccess` (R4/R5): added on the platform side later, stripped here identically, until\n   *    someone noticed and widened the copy again.\n   *\n   * Neither incident produced an error, a failing test, or a log line — which is precisely why a\n   * comment asking for vigilance was the wrong mechanism. The import removes the copy.\n   *\n   * ## Why importing is safe, and is not a new dependency\n   *\n   * `engine/saas-backend-lib` already declares `@wildo-ai/platform-config-lib` as a hard\n   * `dependencies` edge (`package.json`), and `app-config.backend.schemas.ts` already imports\n   * runtime VALUES from its package root. The module holding these schemas is re-exported by that\n   * same root, so this import adds no module to any graph that was not already loaded.\n   *\n   * It also cannot tighten what the wire accepts, which is the risk worth naming. The PRODUCER —\n   * `apps-to-manager.apps-manager.platform.controller.ts` — parses the payload it serves through\n   * `AppBootstrapConfigMetadataResponseSchema`, which is built out of these very schemas. A\n   * consumer parsing with the producer's own schema can reject nothing the producer can emit. The\n   * differences all run the permissive way: `WorkerHttpSchema` DEFAULTS `port` / `healthPath` /\n   * `readyPath` where the hand copy required them.\n   *\n   * The dev companion (`companion-platform-config.companion.ts`) has always parsed this response\n   * with the platform's schema. This hop was the only consumer of the contract that did not.\n   */\n  minions: AdminAppManagedMinionsSchema.optional(),\n  workers: AdminAppManagedWorkersSchema.optional(),\n  engineCapabilities: z.record(\n    z.string(),\n    z.object({\n      enabled: z.boolean(),\n      required: z.boolean().optional(),\n    }),\n  ).optional(),\n  providers: z.unknown().optional(),\n  email: z.object({\n    isTransactionalWildoManaged: z.boolean(),\n    isMarketingWildoManaged: z.boolean(),\n  }).optional(),\n  providerConfigurations: z.record(z.string(), z.record(z.string(), z.unknown()).optional()).default({}),\n  jwt: z.object({\n    publicKey: z.record(z.string(), z.string()),\n    rotatedPublicKeys: z.record(\n      z.string(),\n      z.array(z.object({\n        kid: z.string().min(1),\n        publicKey: z.string().min(1),\n        /** Preserve platform-owned retirement bounds through bootstrap parsing. */\n        notAfter: z.coerce.date().optional(),\n      })),\n    ).optional(),\n    accessTokenExpirationMinutes: z.number(),\n    refreshTokenExpirationDays: z.number(),\n  }).optional(),\n});\n\n@injectable()\nexport class AppConfigurationLoaderService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n  protected applicationEnvConfig: ApplicationEnvConfig;\n  protected serviceName: string;\n  protected axiosInstance: AxiosInstance;\n  private readonly appsSecretUrlPath: string = \"api/v1\" + API_ROUTES_BACKEND_DEFINITIONS.APPS_MANAGER.GET_APPLICATION_SECRETS();\n  private readonly appConfigUrlPath: string = \"api/v1\" + API_ROUTES_BACKEND_DEFINITIONS.APPS_MANAGER.GET_APPLICATION_CONFIG();\n\n  private static readonly APP_MANAGER_SERVICE_NAME = \"platform_apps_manager\";\n  private static readonly DEV_RETRY_ATTEMPTS = 10;\n  private static readonly DEV_BASE_DELAY_MS = 1000;\n  private static readonly DEV_MAX_DELAY_MS = 10000;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private errorBuilder: ErrorBuilderBackendService\n  ) {\n    this.logDebug = this.logger.debugByType('AppConfigurationLoaderService');\n    this.logger.setDebugTypeLogging('AppConfigurationLoaderService', false);\n  }\n\n  public async initialize(): Promise<{\n    applicationEnvConfig: ApplicationEnvConfig;\n    serviceName: string;\n    appSecrets: AppConfigurationSecrets;\n    appConfig: AppConfiguration_PreOverrideSeed;\n    applicationId: string;\n    appSlug: string;\n  }> {\n    // 1. Parse env vars\n    this.applicationEnvConfig = this.loadPlatformEnvironmentConfig();\n    this.serviceName = this.applicationEnvConfig.SERVICE_NAME;\n\n    this.axiosInstance = axios.create({\n      baseURL: this.applicationEnvConfig.PLATFORM_APPS_MANAGER_URL,\n      headers: {\n        [WildoHeaderKeys.CONTENT_TYPE]: 'application/json',\n        [WildoHeaderKeys.SERVICE_ID]: this.serviceName,\n        [WildoHeaderKeys.PLATFORM_SECRET]: this.applicationEnvConfig.PLATFORM_APPLICATION_PRIMARY_SECRET,\n        [WildoHeaderKeys.APPLICATION_ID]: this.applicationEnvConfig.APPLICATION_ID,\n      },\n    });\n\n    // 2. Build base config from Zod defaults + env overlay\n    const appConfig = this.buildConfigFromEnv();\n\n    // 3. Fetch secrets (full payload — credentials are always from apps-manager)\n    const appSecrets = await this.loadPlatformManagedSecrets();\n\n    // 4. Fetch reduced managed config metadata from apps-manager and merge it\n    const { appSlug } = await this.fetchAndMergeBootstrapConfigMetadata(appConfig);\n\n    return {\n      applicationEnvConfig: this.applicationEnvConfig,\n      serviceName: this.serviceName,\n      appSecrets,\n      appConfig,\n      applicationId: this.applicationEnvConfig.APPLICATION_ID,\n      appSlug,\n    };\n  }\n\n  protected loadPlatformEnvironmentConfig(): ApplicationEnvConfig {\n    try {\n      const envConfig = ApplicationEnvConfigurationSchema.parse(process.env);\n      this.logDebug('Platform environment configuration loaded successfully');\n      return envConfig;\n    } catch (error) {\n      // The caught error is the ONLY evidence of what actually failed here, and it is not\n      // necessarily a Zod validation failure: anything thrown while evaluating the schema\n      // (module-init/TDZ seams under native ESM) surfaces through the same catch. Reporting\n      // only `processEnvKeys` produced a startup log that named a validation failure while\n      // the env in fact parsed cleanly, which sent diagnosis down the wrong layer entirely.\n      // Mirror the sibling catches in this service and always describe the caught error.\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Platform environment configuration validation failed',\n          processEnvKeys: Object.keys(process.env),\n          error: describeCaughtError(error),\n        },\n      });\n    }\n  }\n\n  /**\n   * Build the minimal pre-override AppConfiguration skeleton, then inject\n   * database and runtime config from environment variables.\n   *\n   * This replaces the old pattern of fetching the full config from apps-manager.\n   * The loader only authors env/runtime material plus the narrow structural\n   * placeholders required before developer overrides run.\n   *\n   * A minimal seed provides required top-level sections so the shared schema can\n   * materialize nested defaults before developer overrides run. Developer\n   * overrides still replace these placeholders with app-specific values.\n   */\n  protected buildConfigFromEnv(): AppConfiguration_PreOverrideSeed {\n    const env = this.applicationEnvConfig;\n    const platformEndpoints = buildPlatformRuntimeEndpointsFromBackendEnv({\n      appsManagerUrl: env.PLATFORM_APPS_MANAGER_URL,\n      crontabsBatchesManagerUrl: env.PLATFORM_CRONTABS_BATCHES_MANAGER_URL,\n      moduleRegistryUrl: env.PLATFORM_MODULE_REGISTRY_URL,\n    });\n    const applicationRuntimeEndpoints =\n      env[ApplicationBackendRuntimeEnvKeys.APPLICATION_RUNTIME_ENDPOINTS];\n\n    const baseConfig = buildMinimalPreOverrideAppConfiguration({\n      runtimeEndpoints: {\n        ...platformEndpoints,\n        ...applicationRuntimeEndpoints,\n      },\n      database: {\n        /**\n         * DECLARED by the environment, no longer hard-coded.\n         *\n         * This literal was `PersistenceAdapter.MONGODB`, which made the whole PostgreSQL adapter\n         * unreachable through any supported boot path: no env var, secret or bootstrap value could\n         * select it, so the only way to exercise it was a test reaching into the config object. That\n         * is why no application had ever booted on PostgreSQL, and it is a much narrower gap than\n         * \"PostgreSQL is unfinished\" — the adapter, planner, repository and (now) the DDL were all\n         * ready; nothing could ASK for them.\n         *\n         * The env key defaults to MONGODB, so a deployment that does not author it is unchanged.\n         */\n        defaultAdapter: env[ApplicationBackendDataEnvKeys.DATABASE_DEFAULT_ADAPTER] ?? DEFAULT_PERSISTENCE_ADAPTER,\n        /**\n         * DECLARED by the environment, no longer hard-coded — and still NOT derived from the\n         * adapter above.\n         *\n         * The literal that was here said \"declared, not derived\" while being neither: nothing could\n         * state it, so the engine's own rule was true in the schema and unreachable in practice. An\n         * application selecting PostgreSQL had no supported way to say which identity format it\n         * mints, which is the second half of the same gap `DATABASE_DEFAULT_ADAPTER` closed.\n         *\n         * Deriving it from `defaultAdapter` remains rejected, and the schema's JSDoc records what\n         * that cost: moving a resource between adapters silently changed the shape of every id it\n         * minted, and made every id it had ALREADY minted fail `validateForResource`.\n         *\n         * The env key defaults to `OBJECT_ID`, so a deployment that does not author it is unchanged.\n         */\n        resourceIdFormat: env[ApplicationBackendDataEnvKeys.RESOURCE_ID_FORMAT] ?? ResourceIdFormat.OBJECT_ID,\n        /**\n         * Built ONLY when the environment supplies an address — the exact shape `postgresql` below\n         * has always had, and for the reason its own JSDoc gives.\n         *\n         * Until 2026-08-28 this branch was UNCONDITIONAL, so `database.mongodb.enabled` was `true`\n         * on every runtime that has ever existed, with `host` simply `undefined` when no mongod was\n         * within reach. That left the flag unable to answer the only question anyone asks of it —\n         * does this runtime have a MongoDB? — and reproduced exactly the defect the PostgreSQL\n         * branch was written to avoid: it passes the registry's boot check and then fails at the\n         * first connection, which is the wrong place to learn about it.\n         *\n         * Met on `wonder-crm` (PostgreSQL on both planes, no mongod declared): its readiness gate\n         * probed a MongoDB it does not have, so `/health/ready` could never become ready.\n         *\n         * The compiler offers no protection here — this package builds with `strict: false`, so an\n         * absent branch produces no access error at any reader. The readers were enumerated by hand\n         * instead, and `MongoDBService.connect` now refuses with a named configuration error rather\n         * than a bare TypeError.\n         */\n        ...(env.MONGODB_HOST ? {\n          mongodb: {\n            enabled: true,\n            host: env.MONGODB_HOST,\n            database: env.MONGODB_DATABASE,\n            protocol: env.MONGODB_PROTOCOL ?? MongoDBProtocol.MONGODB,\n            options: {\n              retryWrites: true,\n              w: 'majority',\n              authSource: 'admin',\n              ...(env.MONGODB_DIRECT_CONNECTION !== undefined\n                ? { directConnection: env.MONGODB_DIRECT_CONNECTION }\n                : {}),\n            },\n          },\n        } : {}),\n        /**\n         * Built ONLY when the environment supplies an address.\n         *\n         * Absence is what keeps `postgresql.enabled` false — a branch with `enabled: true` and no\n         * host would pass the registry's boot check (\"is the declared adapter enabled?\") and then\n         * fail at the first connection, which is the wrong place to learn about it. Credentials are\n         * NOT read here: `PostgreSQLDatabaseBackendService` takes them from\n         * `secrets.database.postgresql`, matching how MongoDB splits address from credential.\n         */\n        ...(env[ApplicationBackendDataEnvKeys.POSTGRESQL_HOST] ? {\n          postgresql: {\n            enabled: true,\n            host: env[ApplicationBackendDataEnvKeys.POSTGRESQL_HOST],\n            port: env[ApplicationBackendDataEnvKeys.POSTGRESQL_PORT] ?? 5432,\n            databaseName: env[ApplicationBackendDataEnvKeys.POSTGRESQL_DATABASE],\n            ...(env[ApplicationBackendDataEnvKeys.POSTGRESQL_SSL_MODE]\n              ? { sslMode: env[ApplicationBackendDataEnvKeys.POSTGRESQL_SSL_MODE] }\n              : {}),\n          },\n        } : {}),\n        redis: {\n          host: env.REDIS_HOST,\n          port: env.REDIS_PORT,\n          db: 0,\n          // Slice 3.6 + 2026-05-26 ACL-alignment fix — when the app\n          // authored `wildo.saas.config.dataServices.redis.keyPrefix`,\n          // the env var `REDIS_KEY_PREFIX` threads it into\n          // `config.database.redis.keyPrefix`. When the env var is\n          // unset, we deliberately leave the field undefined so\n          // `RedisService.connect()` falls back to the slug-derived\n          // default `<appSlug>:` — the only default that aligns with\n          // the per-app ACL grant `~<appSlug>:*`. The previous literal\n          // schema default `'saas:'` was removed for the same reason.\n          ...(env.REDIS_KEY_PREFIX !== undefined ? { keyPrefix: env.REDIS_KEY_PREFIX } : {}),\n        },\n        ...(env.RABBITMQ_HOST ? {\n          rabbitmq: {\n            host: env.RABBITMQ_HOST,\n            port: env.RABBITMQ_PORT ?? 5672,\n            // Slice 2.5c-3 — per-app vhost isolation. The field is threaded ONLY\n            // when the operator authored `backingServices.rabbitmq.vhost`; the\n            // key stays absent otherwise so the adapter applies its documented\n            // default-vhost (`/`) fallback rather than receiving an explicit\n            // `undefined`.\n            //\n            // The `database` branch is env-owned: `fetchAndMergeBootstrapConfigMetadata`\n            // deliberately never re-authors it, so this seed is the ONLY path by\n            // which an authored vhost can reach `RabbitMQAdapterBackendService`.\n            // Dropping it here (as this mapping previously did) made the authored\n            // vhost a silent no-op — see the matching note on the env schema.\n            ...(env.RABBITMQ_VHOST ? { vhost: env.RABBITMQ_VHOST } : {}),\n          },\n        } : {}),\n      },\n      jwt: {},\n      // Object-storage TOPOLOGY, injected here for the same reason `database` is:\n      // this seed is the one place environment material becomes configuration, and\n      // routing storage through it removes the last app-tier subsystem that read\n      // `process.env` directly. See\n      // `.claude/plans/application-runtime-topology-delivery.md`.\n      //\n      // Each block is emitted ONLY when its defining value is present, and that is\n      // load-bearing rather than tidy: the storage provider treats a missing\n      // connection as UNCONFIGURED, so seeding a plausible default would disable\n      // the file feature silently instead of failing loudly — the failure mode this\n      // subsystem has already produced once.\n      storage: buildStorageTopologyFromEnvironment(env),\n      // Same contract as `storage`, one derivation over: the scanning sidecars\n      // are platform-injected topology, and this seed is the one place\n      // environment material becomes configuration.\n      ...buildFileServicesTopologyFromEnvironment(env),\n    });\n\n    this.logDebug('Built pre-override config seed from env/bootstrap material', {\n      mongoHost: env.MONGODB_HOST,\n      mongoDirectConnection: env.MONGODB_DIRECT_CONNECTION,\n      platformEndpointCount: Object.keys(platformEndpoints).length,\n    });\n\n    return baseConfig;\n  }\n\n  /**\n   * Fetch reduced bootstrap metadata from apps-manager.\n   * This keeps apps-manager authoritative for selected app-managed declaration\n   * fields without letting it re-author env/bootstrap runtime branches.\n   *\n   * Policy:\n   * - fail-fast after the retry window is exhausted\n   * - development mode only changes retry behavior, not the final failure mode\n   */\n  protected async fetchAndMergeBootstrapConfigMetadata(\n    appConfig: AppConfiguration | AppConfiguration_PreOverrideSeed,\n  ): Promise<{ appSlug: string }> {\n    const fetchOperation = async (): Promise<{ appSlug: string }> => {\n      this.logDebug('Fetching bootstrap config metadata from apps-manager');\n      const response = await this.axiosInstance.get(this.appConfigUrlPath);\n\n      if (response.status !== 200) {\n        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n          context: { message: 'Failed to fetch bootstrap config metadata from apps-manager', status: response.status },\n        });\n      }\n\n      const {\n        appSlug,\n        appIdentity,\n        frontendServices,\n        minions,\n        workers,\n        engineCapabilities,\n        providers,\n        email,\n        providerConfigurations,\n        publicKeys,\n        rotatedPublicKeys,\n        accessTokenExpirationMinutes,\n        refreshTokenExpirationDays,\n      } = this.parseBootstrapConfigMetadataResponse(response.data);\n\n      if (appIdentity) {\n        appConfig.appIdentity = appIdentity;\n      }\n\n      if (frontendServices) {\n        appConfig.frontendServices = frontendServices;\n      }\n\n      if (minions) {\n        appConfig.minions = minions;\n      }\n\n      if (workers) {\n        appConfig.workers = workers;\n      }\n\n      if (engineCapabilities) {\n        appConfig.engineCapabilities = engineCapabilities;\n      }\n\n      if (providers) {\n        appConfig.providers = providers;\n      }\n\n      if (email) {\n        appConfig.email = {\n          ...appConfig.email,\n          ...email,\n        };\n      }\n\n      if (providerConfigurations) {\n        appConfig.providerConfigurations = providerConfigurations;\n      }\n\n      appConfig.jwt = {\n        ...appConfig.jwt,\n        publicKey: {\n          ...appConfig.jwt.publicKey,\n          ...publicKeys,\n        },\n        rotatedPublicKeys: {\n          ...(appConfig.jwt.rotatedPublicKeys ?? {}),\n          ...rotatedPublicKeys,\n        },\n        // Slice 3.3 hardening (F-24, Slice 3 closeout): operator-authored\n        // `serviceAuth` TTLs are AUTHORITATIVE — they overwrite any\n        // locally authored values in `saas-config.backend.ts`. The\n        // dogfood backend no longer hardcodes the\n        // `jwt.{accessTokenExpirationMinutes, refreshTokenExpirationDays}`\n        // block, and any future redeclaration is intentionally ignored\n        // at sign time so that `wildo.infra.<env>.config.ts` stays the\n        // single source of truth for the user-auth TTL policy.\n        //\n        // After Slice 3 closeout these fields are REQUIRED on the\n        // bootstrap response (`AppBootstrapConfigMetadataResponseSchema.jwt`),\n        // so the prior conditional-spread defensive pattern is gone.\n        // The schema-level requirement is the gate; if an older\n        // apps-manager violates the contract it fails parse(), not\n        // sign-time.\n        accessTokenExpirationMinutes,\n        refreshTokenExpirationDays,\n      };\n\n      this.logDebug('Bootstrap config metadata merged from apps-manager', {\n        appSlug,\n        hasAppIdentity: !!appIdentity,\n        frontendServiceCount: Object.keys(frontendServices ?? {}).length,\n        minionCount: Object.keys(minions ?? {}).length,\n        workerCount: Object.keys(workers ?? {}).length,\n        engineCapabilityCount: Object.keys(engineCapabilities ?? {}).length,\n        hasProviderScopes: !!providers,\n        providerConfigurationCount: Object.keys(providerConfigurations ?? {}).length,\n        jwtKeyCount: Object.keys(appConfig.jwt.publicKey).length,\n      });\n\n      return { appSlug };\n    };\n\n    try {\n      return await this.executeWithRetryWhenEnabled(fetchOperation, 'fetchAndMergeBootstrapConfigMetadata');\n    } catch (error) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Failed to fetch bootstrap config metadata from apps-manager',\n          serviceName: this.serviceName,\n          applicationEnv: this.applicationEnvConfig.APPLICATION_ENV,\n          failureMode: APPS_MANAGER_FETCH_FAILURE_MODE,\n          error: describeCaughtError(error),\n        },\n      });\n    }\n  }\n\n  protected async loadPlatformManagedSecrets(): Promise<AppConfigurationSecrets> {\n    const loadSecretsOperation = async (): Promise<AppConfigurationSecrets> => {\n      this.logDebug('Loading platform managed secrets', { url: this.appsSecretUrlPath });\n      const response = await this.axiosInstance.get<AppConfigurationSecrets>(this.appsSecretUrlPath);\n\n      if(response.status !== 200) {\n        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, { context: { message: 'Failed to load platform managed secrets', response: response.data, status: response.status } });\n      }\n\n      const apiParsingSchema = ResourcesConfigOperationsDtosBuilderUtils.createApiParsingSchema(AppConfigurationSecrets_Schema);\n      const secrets = apiParsingSchema.parse(response.data);\n      this.logDebug('Platform managed secrets loaded successfully');\n\n      return secrets;\n    };\n\n    try {\n      return await this.executeWithRetryWhenEnabled(loadSecretsOperation, 'loadPlatformManagedSecrets');\n    } catch (error) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Failed to load platform managed secrets',\n          serviceName: this.serviceName,\n          applicationEnv: this.applicationEnvConfig.APPLICATION_ENV,\n          failureMode: APPS_MANAGER_FETCH_FAILURE_MODE,\n          status: error.status ?? undefined,\n          response: error.response?.data ?? undefined,\n          error: describeCaughtError(error)\n        }\n      });\n    }\n  }\n\n  private parseBootstrapConfigMetadataResponse(\n    data: unknown,\n  ): {\n    appSlug: string;\n    appIdentity?: AppConfiguration['appIdentity'];\n    frontendServices?: AppConfiguration['frontendServices'];\n    minions?: AppConfiguration['minions'];\n    workers?: AppConfiguration['workers'];\n    engineCapabilities?: AppConfiguration['engineCapabilities'];\n    providers?: AppConfiguration['providers'];\n    email?: Pick<\n      AppConfiguration['email'],\n      'isTransactionalWildoManaged' | 'isMarketingWildoManaged'\n    >;\n    providerConfigurations?: AppConfiguration['providerConfigurations'];\n    publicKeys: Record<string, string>;\n    rotatedPublicKeys: Record<string, Array<{ kid: string; publicKey: string; notAfter?: Date }>>;\n    /** Slice 3 closeout: required on the bootstrap response, never undefined here. */\n    accessTokenExpirationMinutes: number;\n    refreshTokenExpirationDays: number;\n  } {\n    const response = AppBootstrapConfigMetadataResponseSchema.parse(data);\n    const appSlug = response.appSlug.trim();\n    if (!appSlug) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Apps-manager config response is missing appSlug',\n        },\n      });\n    }\n\n    const jwtBlock = response.jwt;\n    const publicKeys = jwtBlock?.publicKey;\n    if (!jwtBlock || !publicKeys || Object.keys(publicKeys).length === 0) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Apps-manager config response is missing jwt.publicKey entries',\n          appSlug,\n        },\n      });\n    }\n    if (!publicKeys[JwtPrivateKeys.APPLICATION_AUTH_TOKEN]?.trim()) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: `Apps-manager config response is missing jwt.publicKey.${JwtPrivateKeys.APPLICATION_AUTH_TOKEN}`,\n          appSlug,\n        },\n      });\n    }\n    // Slice 3 closeout: when `jwt` is present (which the publicKey\n    // guard above proves), the schema also guarantees both TTL fields.\n    // The narrowing here lets the return value drop `| undefined`.\n\n    return {\n      appSlug,\n      appIdentity: response.appIdentity as AppConfiguration['appIdentity'] | undefined,\n      frontendServices: response.frontendServices as AppConfiguration['frontendServices'] | undefined,\n      // The cast crosses the two schemas that describe this block: the platform's\n      // `AdminAppManagedMinionsSchema` (what the wire carries, and what the response schema above\n      // now parses with) and the engine's `AppConfiguration_MinionsSchema` (what the running\n      // application holds). It is a cast rather than an assignment because the second is a\n      // `strictObject` typed against a named interface for the TS7056 reason recorded on\n      // `AppConfiguration_MinionEntry` — collapsing the two would put that ceiling back.\n      //\n      // What used to sit here was an instruction to hand-mirror a third copy at this site whenever\n      // either schema grew, and that instruction failed twice in production. The two survivors are\n      // now held in step MECHANICALLY, by\n      // `config/__tests__/managed-runtime-inventory-parity.backend.test.ts`, which fails on a field\n      // present in one and absent in the other. Do not restore a hand copy here.\n      minions: response.minions as AppConfiguration['minions'] | undefined,\n      workers: response.workers as AppConfiguration['workers'] | undefined,\n      engineCapabilities: response.engineCapabilities as AppConfiguration['engineCapabilities'] | undefined,\n      providers: response.providers as AppConfiguration['providers'] | undefined,\n      email: response.email,\n      providerConfigurations: response.providerConfigurations as AppConfiguration['providerConfigurations'] | undefined,\n      publicKeys,\n      rotatedPublicKeys: jwtBlock.rotatedPublicKeys ?? {},\n      accessTokenExpirationMinutes: jwtBlock.accessTokenExpirationMinutes,\n      refreshTokenExpirationDays: jwtBlock.refreshTokenExpirationDays,\n    };\n  }\n\n\n\n  private shouldRetryInDevelopmentMode(): boolean {\n    const isAppManager = this.serviceName === AppConfigurationLoaderService.APP_MANAGER_SERVICE_NAME;\n    const isDevelopment = this.applicationEnvConfig.APPLICATION_ENV === RuntimeEnvironment.DEVELOPMENT;\n    return !isAppManager && isDevelopment;\n  }\n\n  private async executeWithRetryWhenEnabled<T>(\n    operation: () => Promise<T>,\n    operationName: string,\n  ): Promise<T> {\n    if (this.shouldRetryInDevelopmentMode()) {\n      return await this.executeWithRetry(operation, operationName);\n    }\n\n    return await operation();\n  }\n\n  private async executeWithRetry<T>(\n    operation: () => Promise<T>,\n    operationName: string\n  ): Promise<T> {\n    let lastError: any;\n\n    for (let attempt = 1; attempt <= AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS; attempt++) {\n      try {\n        if (attempt > 1) {\n          const delay = Math.min(\n            AppConfigurationLoaderService.DEV_BASE_DELAY_MS * Math.pow(2, attempt - 2),\n            AppConfigurationLoaderService.DEV_MAX_DELAY_MS\n          );\n\n          this.logDebug(`Retrying ${operationName} - attempt ${attempt}/${AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS} after ${delay}ms delay`, {\n            serviceName: this.serviceName,\n            attempt,\n            delay\n          });\n\n          await this.delay(delay);\n        } else {\n          this.logDebug(`Initial attempt for ${operationName} - non-app-manager service in dev mode`, {\n            serviceName: this.serviceName,\n            totalAttempts: AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS\n          });\n        }\n\n        return await operation();\n\n      } catch (error) {\n        lastError = error;\n\n        if (attempt < AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS) {\n          this.logDebug(`Attempt ${attempt} failed for ${operationName}, will retry`, {\n            serviceName: this.serviceName,\n            attempt,\n            error: describeCaughtError(error)\n          });\n        } else {\n          this.logDebug(`All ${AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS} attempts failed for ${operationName}`, {\n            serviceName: this.serviceName,\n            error: describeCaughtError(error)\n          });\n        }\n      }\n    }\n\n    throw lastError;\n  }\n\n  private delay(ms: number): Promise<void> {\n    return new Promise(resolve => setTimeout(resolve, ms));\n  }\n}\n"]}
+{"version":3,"file":"app-configuration-loader.backend.service.js","sourceRoot":"","sources":["../../../../src/config/services/app-configuration-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,yCAAyC,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAClI,OAAO,EAAE,6BAA6B,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AACjH,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC3G,OAAO,EAA2B,8BAA8B,EAAE,MAAM,qEAAqE,CAAC;AAC9I,OAAO,EAAE,cAAc,EAAE,MAAM,wEAAwE,CAAC;AAExG,OAAO,EAAE,wCAAwC,EAAE,uCAAuC,EAAE,mCAAmC,EAAE,MAAM,6DAA6D,CAAC;AACrM,OAAO,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAE,2CAA2C,EAAE,MAAM,qEAAqE,CAAC;AAElI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,iEAAiE,CAAC;AACpH,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACnH,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,6EAA6E,CAAC;AAC9H,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAElH;;;;;;;;;;;;GAYG;AACH,MAAM,+BAA+B,GAAG,WAAW,CAAC;AAEpD,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAC1B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC,CACH,CAAC,QAAQ,EAAE;IACZ,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE;QACxC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE;KACrC,CAAC,CAAC,QAAQ,EAAE;IACb,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtG,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3C,iBAAiB,EAAE,CAAC,CAAC,MAAM,CACzB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,2EAA2E;YAC3E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;SACrC,CAAC,CAAC,CACJ,CAAC,QAAQ,EAAE;QACZ,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE;QACxC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE;KACvC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAGI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;;IAcK;IACa;IAdhD,QAAQ,CAA+D;IACvE,oBAAoB,CAAuB;IAC3C,WAAW,CAAS;IACpB,aAAa,CAAgB;IACtB,iBAAiB,GAAW,QAAQ,GAAG,8BAA8B,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAC;IAC7G,gBAAgB,GAAW,QAAQ,GAAG,8BAA8B,CAAC,YAAY,CAAC,sBAAsB,EAAE,CAAC;IAEpH,MAAM,CAAU,wBAAwB,GAAG,uBAAuB,CAAC;IACnE,MAAM,CAAU,kBAAkB,GAAG,EAAE,CAAC;IACxC,MAAM,CAAU,iBAAiB,GAAG,IAAI,CAAC;IACzC,MAAM,CAAU,gBAAgB,GAAG,KAAK,CAAC;IAEjD,YAC6C,MAAqB,EACR,YAAwC;QADrD,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAEhG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAEM,KAAK,CAAC,UAAU;QAQrB,oBAAoB;QACpB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC;QAE1D,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,yBAAyB;YAC5D,yFAAyF;YACzF,OAAO,EAAE,+BAA+B;YACxC,OAAO,EAAE;gBACP,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,kBAAkB;gBAClD,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW;gBAC9C,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,mCAAmC;gBAChG,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,cAAc;aAC3E;SACF,CAAC,CAAC;QAEH,uDAAuD;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE5C,6EAA6E;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAE3D,0EAA0E;QAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,oCAAoC,CAAC,SAAS,CAAC,CAAC;QAE/E,OAAO;YACL,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU;YACV,SAAS;YACT,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,cAAc;YACvD,OAAO;SACR,CAAC;IACJ,CAAC;IAES,6BAA6B;QACrC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvE,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oFAAoF;YACpF,oFAAoF;YACpF,sFAAsF;YACtF,qFAAqF;YACrF,sFAAsF;YACtF,mFAAmF;YACnF,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,sDAAsD;oBAC/D,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;oBACxC,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACO,kBAAkB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;YACpE,cAAc,EAAE,GAAG,CAAC,yBAAyB;YAC7C,yBAAyB,EAAE,GAAG,CAAC,qCAAqC;YACpE,iBAAiB,EAAE,GAAG,CAAC,4BAA4B;SACpD,CAAC,CAAC;QACH,MAAM,2BAA2B,GAC/B,GAAG,CAAC,gCAAgC,CAAC,6BAA6B,CAAC,CAAC;QAEtE,MAAM,UAAU,GAAG,uCAAuC,CAAC;YACzD,gBAAgB,EAAE;gBAChB,GAAG,iBAAiB;gBACpB,GAAG,2BAA2B;aAC/B;YACD,QAAQ,EAAE;gBACR;;;;;;;;;;;mBAWG;gBACH,cAAc,EAAE,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,IAAI,2BAA2B;gBAC1G;;;;;;;;;;;;;;mBAcG;gBACH,gBAAgB,EAAE,GAAG,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,IAAI,gBAAgB,CAAC,SAAS;gBACrG;;;;;;;;;;;;;;;;;;mBAkBG;gBACH,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE;wBACP,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,GAAG,CAAC,YAAY;wBACtB,QAAQ,EAAE,GAAG,CAAC,gBAAgB;wBAC9B,QAAQ,EAAE,GAAG,CAAC,gBAAgB,IAAI,eAAe,CAAC,OAAO;wBACzD,OAAO,EAAE;4BACP,WAAW,EAAE,IAAI;4BACjB,CAAC,EAAE,UAAU;4BACb,UAAU,EAAE,OAAO;4BACnB,GAAG,CAAC,GAAG,CAAC,yBAAyB,KAAK,SAAS;gCAC7C,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,yBAAyB,EAAE;gCACrD,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP;;;;;;;;mBAQG;gBACH,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;oBACvD,UAAU,EAAE;wBACV,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC;wBACxD,IAAI,EAAE,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC,IAAI,IAAI;wBAChE,YAAY,EAAE,GAAG,CAAC,6BAA6B,CAAC,mBAAmB,CAAC;wBACpE,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,mBAAmB,CAAC;4BACxD,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,6BAA6B,CAAC,mBAAmB,CAAC,EAAE;4BACrE,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;gBACP,KAAK,EAAE;oBACL,IAAI,EAAE,GAAG,CAAC,UAAU;oBACpB,IAAI,EAAE,GAAG,CAAC,UAAU;oBACpB,EAAE,EAAE,CAAC;oBACL,0DAA0D;oBAC1D,6DAA6D;oBAC7D,iDAAiD;oBACjD,yDAAyD;oBACzD,sDAAsD;oBACtD,0DAA0D;oBAC1D,2DAA2D;oBAC3D,6DAA6D;oBAC7D,4DAA4D;oBAC5D,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnF;gBACD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;oBACtB,QAAQ,EAAE;wBACR,IAAI,EAAE,GAAG,CAAC,aAAa;wBACvB,IAAI,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;wBAC/B,qEAAqE;wBACrE,mEAAmE;wBACnE,mEAAmE;wBACnE,iEAAiE;wBACjE,eAAe;wBACf,EAAE;wBACF,6EAA6E;wBAC7E,qEAAqE;wBACrE,qEAAqE;wBACrE,sEAAsE;wBACtE,kEAAkE;wBAClE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC7D;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,GAAG,EAAE,EAAE;YACP,4EAA4E;YAC5E,6EAA6E;YAC7E,2EAA2E;YAC3E,8BAA8B;YAC9B,4DAA4D;YAC5D,EAAE;YACF,6EAA6E;YAC7E,uEAAuE;YACvE,2EAA2E;YAC3E,8EAA8E;YAC9E,uCAAuC;YACvC,OAAO,EAAE,mCAAmC,CAAC,GAAG,CAAC;YACjD,yEAAyE;YACzE,iEAAiE;YACjE,8CAA8C;YAC9C,GAAG,wCAAwC,CAAC,GAAG,CAAC;SACjD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,4DAA4D,EAAE;YAC1E,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,qBAAqB,EAAE,GAAG,CAAC,yBAAyB;YACpD,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM;SAC7D,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACO,KAAK,CAAC,oCAAoC,CAClD,SAA8D;QAE9D,MAAM,cAAc,GAAG,KAAK,IAAkC,EAAE;YAC9D,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAErE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;oBACrE,OAAO,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;iBAC7G,CAAC,CAAC;YACL,CAAC;YAED,MAAM,EACJ,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,OAAO,EACP,OAAO,EACP,kBAAkB,EAClB,SAAS,EACT,KAAK,EACL,sBAAsB,EACtB,UAAU,EACV,iBAAiB,EACjB,4BAA4B,EAC5B,0BAA0B,GAC3B,GAAG,IAAI,CAAC,oCAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE7D,IAAI,WAAW,EAAE,CAAC;gBAChB,SAAS,CAAC,WAAW,GAAG,WAAW,CAAC;YACtC,CAAC;YAED,IAAI,gBAAgB,EAAE,CAAC;gBACrB,SAAS,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;YAChD,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;YAC9B,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;YAC9B,CAAC;YAED,IAAI,kBAAkB,EAAE,CAAC;gBACvB,SAAS,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;YACpD,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;YAClC,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,SAAS,CAAC,KAAK,GAAG;oBAChB,GAAG,SAAS,CAAC,KAAK;oBAClB,GAAG,KAAK;iBACT,CAAC;YACJ,CAAC;YAED,IAAI,sBAAsB,EAAE,CAAC;gBAC3B,SAAS,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;YAC5D,CAAC;YAED,SAAS,CAAC,GAAG,GAAG;gBACd,GAAG,SAAS,CAAC,GAAG;gBAChB,SAAS,EAAE;oBACT,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS;oBAC1B,GAAG,UAAU;iBACd;gBACD,iBAAiB,EAAE;oBACjB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;oBAC1C,GAAG,iBAAiB;iBACrB;gBACD,kEAAkE;gBAClE,4DAA4D;gBAC5D,2DAA2D;gBAC3D,0CAA0C;gBAC1C,mEAAmE;gBACnE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,uDAAuD;gBACvD,EAAE;gBACF,0DAA0D;gBAC1D,uEAAuE;gBACvE,6DAA6D;gBAC7D,wDAAwD;gBACxD,2DAA2D;gBAC3D,aAAa;gBACb,4BAA4B;gBAC5B,0BAA0B;aAC3B,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,oDAAoD,EAAE;gBAClE,OAAO;gBACP,cAAc,EAAE,CAAC,CAAC,WAAW;gBAC7B,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM;gBAChE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC9C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC9C,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM;gBACnE,iBAAiB,EAAE,CAAC,CAAC,SAAS;gBAC9B,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM;gBAC5E,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM;aACzD,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,6DAA6D;oBACtE,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,eAAe;oBACzD,WAAW,EAAE,+BAA+B;oBAC5C,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAES,KAAK,CAAC,0BAA0B;QACxC,MAAM,oBAAoB,GAAG,KAAK,IAAsC,EAAE;YACxE,IAAI,CAAC,QAAQ,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACnF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAA0B,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAE/F,IAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChM,CAAC;YAED,MAAM,gBAAgB,GAAG,yCAAyC,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YAE9D,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,yCAAyC;oBAClD,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,eAAe;oBACzD,WAAW,EAAE,+BAA+B;oBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;oBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;oBAC3C,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;iBAClC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,oCAAoC,CAC1C,IAAa;QAoBb,MAAM,QAAQ,GAAG,wCAAwC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,iDAAiD;iBAC3D;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC9B,MAAM,UAAU,GAAG,QAAQ,EAAE,SAAS,CAAC;QACvC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,+DAA+D;oBACxE,OAAO;iBACR;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,OAAO,EAAE;oBACP,OAAO,EAAE,yDAAyD,cAAc,CAAC,sBAAsB,EAAE;oBACzG,OAAO;iBACR;aACF,CAAC,CAAC;QACL,CAAC;QACD,+DAA+D;QAC/D,mEAAmE;QACnE,+DAA+D;QAE/D,OAAO;YACL,OAAO;YACP,WAAW,EAAE,QAAQ,CAAC,WAA0D;YAChF,gBAAgB,EAAE,QAAQ,CAAC,gBAAoE;YAC/F,4EAA4E;YAC5E,4FAA4F;YAC5F,uFAAuF;YACvF,qFAAqF;YACrF,mFAAmF;YACnF,mFAAmF;YACnF,EAAE;YACF,6FAA6F;YAC7F,6FAA6F;YAC7F,oCAAoC;YACpC,8FAA8F;YAC9F,2EAA2E;YAC3E,OAAO,EAAE,QAAQ,CAAC,OAAkD;YACpE,OAAO,EAAE,QAAQ,CAAC,OAAkD;YACpE,kBAAkB,EAAE,QAAQ,CAAC,kBAAwE;YACrG,SAAS,EAAE,QAAQ,CAAC,SAAsD;YAC1E,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,sBAAsB,EAAE,QAAQ,CAAC,sBAAgF;YACjH,UAAU;YACV,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,IAAI,EAAE;YACnD,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B;YACnE,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;SAChE,CAAC;IACJ,CAAC;IAIO,4BAA4B;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,KAAK,+BAA6B,CAAC,wBAAwB,CAAC;QACjG,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,KAAK,kBAAkB,CAAC,WAAW,CAAC;QACnG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,SAA2B,EAC3B,aAAqB;QAErB,IAAI,IAAI,CAAC,4BAA4B,EAAE,EAAE,CAAC;YACxC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,SAA2B,EAC3B,aAAqB;QAErB,IAAI,SAAc,CAAC;QAEnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,+BAA6B,CAAC,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7F,IAAI,CAAC;gBACH,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,+BAA6B,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAC1E,+BAA6B,CAAC,gBAAgB,CAC/C,CAAC;oBAEF,IAAI,CAAC,QAAQ,CAAC,YAAY,aAAa,cAAc,OAAO,IAAI,+BAA6B,CAAC,kBAAkB,UAAU,KAAK,UAAU,EAAE;wBACzI,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,OAAO;wBACP,KAAK;qBACN,CAAC,CAAC;oBAEH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,CAAC,uBAAuB,aAAa,wCAAwC,EAAE;wBAC1F,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,aAAa,EAAE,+BAA6B,CAAC,kBAAkB;qBAChE,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,MAAM,SAAS,EAAE,CAAC;YAE3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAElB,IAAI,OAAO,GAAG,+BAA6B,CAAC,kBAAkB,EAAE,CAAC;oBAC/D,IAAI,CAAC,QAAQ,CAAC,WAAW,OAAO,eAAe,aAAa,cAAc,EAAE;wBAC1E,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,OAAO;wBACP,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,CAAC,OAAO,+BAA6B,CAAC,kBAAkB,wBAAwB,aAAa,EAAE,EAAE;wBAC5G,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;;AAnkBU,6BAA6B;IADzC,UAAU,EAAE;IAeR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;qCADI,aAAa;QACM,0BAA0B;GAfvF,6BAA6B,CAokBzC","sourcesContent":["/**\n * Application Configuration Loader Service\n *\n * Loads application configuration through a layered chain (T5):\n *   1. Parse env vars (identity, database addresses, platform URLs)\n *   2. Build the minimal pre-override AppConfiguration skeleton\n *   3. Inject env-sourced database/runtime config into that skeleton\n *   4. Fetch reduced managed config metadata from apps-manager\n *   5. Merge managed app identity/frontend/engine-capability defaults plus JWT keys\n *   6. Return config for developer overrides (applied by AppConfigurationService)\n *\n * Secrets are still fully fetched from apps-manager (separate endpoint).\n */\n\nimport { injectable, inject } from 'inversify';\nimport { z } from 'zod';\nimport { ErrorType, ResourcesConfigOperationsDtosBuilderUtils, RuntimeEnvironment, WildoHeaderKeys } from '@wildo-ai/saas-models';\nimport { ApplicationBackendDataEnvKeys, ApplicationBackendRuntimeEnvKeys } from '@wildo-ai/platform-core-shared';\nimport { AdminAppManagedMinionsSchema, AdminAppManagedWorkersSchema } from '@wildo-ai/platform-config-lib';\nimport { AppConfigurationSecrets, AppConfigurationSecrets_Schema } from '~wildo-backend-lib/config/models/app-config-secrets.backend.schemas';\nimport { JwtPrivateKeys } from '~wildo-backend-lib/security/authentications/models/jwt.backend.schemas';\nimport type { AppConfiguration, AppConfiguration_PreOverrideSeed } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { buildFileServicesTopologyFromEnvironment, buildMinimalPreOverrideAppConfiguration, buildStorageTopologyFromEnvironment } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { MongoDBProtocol } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { DEFAULT_PERSISTENCE_ADAPTER, ResourceIdFormat } from '@wildo-ai/saas-models';\nimport { buildPlatformRuntimeEndpointsFromBackendEnv } from '~wildo-backend-lib/config/models/runtime-topology.backend.contracts';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ApplicationEnvConfig } from '~wildo-backend-lib/config/models/app-env-config.backend.schemas';\nimport { ApplicationEnvConfigurationSchema } from '~wildo-backend-lib/config/models/app-env-config.backend.schemas';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport axios, { AxiosInstance } from 'axios';\nimport { APPS_MANAGER_REQUEST_TIMEOUT_MS } from '~wildo-backend-lib/config/models/apps-manager-transport.backend.definitions';\nimport { API_ROUTES_BACKEND_DEFINITIONS } from '~wildo-backend-lib/requests/models/api-routes.backend.defintions';\n\n/**\n * Every apps-manager fetch fails fast, and that is the whole policy (#502).\n *\n * This was an `AppsManagerFetchFailureMode` enum with one member and a resolver whose every switch\n * arm returned it — an abstraction expressing a choice that does not exist. Collapsed to a constant\n * because the value is still worth carrying in the error context: an operator reading a configuration\n * failure wants to know the loader gave up rather than degraded.\n *\n * If a second mode is ever wanted — a cached-config fallback, a degraded boot — it comes back as a\n * real decision about what an application may run WITHOUT, not as a vocabulary waiting for a second\n * member. Bootstrap configuration is the wrong place to be permissive: an application that boots on\n * stale or absent config is one whose behaviour nobody can reason about.\n */\nconst APPS_MANAGER_FETCH_FAILURE_MODE = 'fail_fast';\n\nconst AppBootstrapConfigMetadataResponseSchema = z.object({\n  appSlug: z.string().min(1),\n  appIdentity: z.unknown().optional(),\n  frontendServices: z.unknown().optional(),\n  /**\n   * The managed runtime inventories are the PRODUCER's schemas, imported — never re-declared here.\n   *\n   * ## Why these two fields, alone in this object, come from `@wildo-ai/platform-config-lib`\n   *\n   * Until 2026-09-09 both blocks were written out by hand at this site, as a copy of\n   * `AdminAppManagedMinionsSchema` / `AdminAppManagedWorkersSchema`, with a comment instructing the\n   * next author to keep the copy in step. That instruction failed twice, in the only way this class\n   * of defect ever fails: Zod strips what a schema does not declare, so a field added on the\n   * platform side and not mirrored here was not rejected, it was DELETED from the payload between\n   * the wire and the application.\n   *\n   *  - `mode` / `schedule` (KD-12): the loader's copy declared only `resourceAccess`, so\n   *    `extractMinionTickCronJobs()` never observed `mode === 'cron'` and the entire MINION_TICK\n   *    CronJob registration was dead in production while apps-manager sent the data correctly.\n   *  - `platformAccess` (R4/R5): added on the platform side later, stripped here identically, until\n   *    someone noticed and widened the copy again.\n   *\n   * Neither incident produced an error, a failing test, or a log line — which is precisely why a\n   * comment asking for vigilance was the wrong mechanism. The import removes the copy.\n   *\n   * ## Why importing is safe, and is not a new dependency\n   *\n   * `engine/saas-backend-lib` already declares `@wildo-ai/platform-config-lib` as a hard\n   * `dependencies` edge (`package.json`), and `app-config.backend.schemas.ts` already imports\n   * runtime VALUES from its package root. The module holding these schemas is re-exported by that\n   * same root, so this import adds no module to any graph that was not already loaded.\n   *\n   * It also cannot tighten what the wire accepts, which is the risk worth naming. The PRODUCER —\n   * `apps-to-manager.apps-manager.platform.controller.ts` — parses the payload it serves through\n   * `AppBootstrapConfigMetadataResponseSchema`, which is built out of these very schemas. A\n   * consumer parsing with the producer's own schema can reject nothing the producer can emit. The\n   * differences all run the permissive way: `WorkerHttpSchema` DEFAULTS `port` / `healthPath` /\n   * `readyPath` where the hand copy required them.\n   *\n   * The dev companion (`companion-platform-config.companion.ts`) has always parsed this response\n   * with the platform's schema. This hop was the only consumer of the contract that did not.\n   */\n  minions: AdminAppManagedMinionsSchema.optional(),\n  workers: AdminAppManagedWorkersSchema.optional(),\n  engineCapabilities: z.record(\n    z.string(),\n    z.object({\n      enabled: z.boolean(),\n      required: z.boolean().optional(),\n    }),\n  ).optional(),\n  providers: z.unknown().optional(),\n  email: z.object({\n    isTransactionalWildoManaged: z.boolean(),\n    isMarketingWildoManaged: z.boolean(),\n  }).optional(),\n  providerConfigurations: z.record(z.string(), z.record(z.string(), z.unknown()).optional()).default({}),\n  jwt: z.object({\n    publicKey: z.record(z.string(), z.string()),\n    rotatedPublicKeys: z.record(\n      z.string(),\n      z.array(z.object({\n        kid: z.string().min(1),\n        publicKey: z.string().min(1),\n        /** Preserve platform-owned retirement bounds through bootstrap parsing. */\n        notAfter: z.coerce.date().optional(),\n      })),\n    ).optional(),\n    accessTokenExpirationMinutes: z.number(),\n    refreshTokenExpirationDays: z.number(),\n  }).optional(),\n});\n\n@injectable()\nexport class AppConfigurationLoaderService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n  protected applicationEnvConfig: ApplicationEnvConfig;\n  protected serviceName: string;\n  protected axiosInstance: AxiosInstance;\n  private readonly appsSecretUrlPath: string = \"api/v1\" + API_ROUTES_BACKEND_DEFINITIONS.APPS_MANAGER.GET_APPLICATION_SECRETS();\n  private readonly appConfigUrlPath: string = \"api/v1\" + API_ROUTES_BACKEND_DEFINITIONS.APPS_MANAGER.GET_APPLICATION_CONFIG();\n\n  private static readonly APP_MANAGER_SERVICE_NAME = \"platform_apps_manager\";\n  private static readonly DEV_RETRY_ATTEMPTS = 10;\n  private static readonly DEV_BASE_DELAY_MS = 1000;\n  private static readonly DEV_MAX_DELAY_MS = 10000;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private errorBuilder: ErrorBuilderBackendService\n  ) {\n    this.logDebug = this.logger.debugByType('AppConfigurationLoaderService');\n    this.logger.setDebugTypeLogging('AppConfigurationLoaderService', false);\n  }\n\n  public async initialize(): Promise<{\n    applicationEnvConfig: ApplicationEnvConfig;\n    serviceName: string;\n    appSecrets: AppConfigurationSecrets;\n    appConfig: AppConfiguration_PreOverrideSeed;\n    applicationId: string;\n    appSlug: string;\n  }> {\n    // 1. Parse env vars\n    this.applicationEnvConfig = this.loadPlatformEnvironmentConfig();\n    this.serviceName = this.applicationEnvConfig.SERVICE_NAME;\n\n    this.axiosInstance = axios.create({\n      baseURL: this.applicationEnvConfig.PLATFORM_APPS_MANAGER_URL,\n      // `axios` defaults to `timeout: 0` — no deadline. Measured on axios@1.13.5, not assumed.\n      timeout: APPS_MANAGER_REQUEST_TIMEOUT_MS,\n      headers: {\n        [WildoHeaderKeys.CONTENT_TYPE]: 'application/json',\n        [WildoHeaderKeys.SERVICE_ID]: this.serviceName,\n        [WildoHeaderKeys.PLATFORM_SECRET]: this.applicationEnvConfig.PLATFORM_APPLICATION_PRIMARY_SECRET,\n        [WildoHeaderKeys.APPLICATION_ID]: this.applicationEnvConfig.APPLICATION_ID,\n      },\n    });\n\n    // 2. Build base config from Zod defaults + env overlay\n    const appConfig = this.buildConfigFromEnv();\n\n    // 3. Fetch secrets (full payload — credentials are always from apps-manager)\n    const appSecrets = await this.loadPlatformManagedSecrets();\n\n    // 4. Fetch reduced managed config metadata from apps-manager and merge it\n    const { appSlug } = await this.fetchAndMergeBootstrapConfigMetadata(appConfig);\n\n    return {\n      applicationEnvConfig: this.applicationEnvConfig,\n      serviceName: this.serviceName,\n      appSecrets,\n      appConfig,\n      applicationId: this.applicationEnvConfig.APPLICATION_ID,\n      appSlug,\n    };\n  }\n\n  protected loadPlatformEnvironmentConfig(): ApplicationEnvConfig {\n    try {\n      const envConfig = ApplicationEnvConfigurationSchema.parse(process.env);\n      this.logDebug('Platform environment configuration loaded successfully');\n      return envConfig;\n    } catch (error) {\n      // The caught error is the ONLY evidence of what actually failed here, and it is not\n      // necessarily a Zod validation failure: anything thrown while evaluating the schema\n      // (module-init/TDZ seams under native ESM) surfaces through the same catch. Reporting\n      // only `processEnvKeys` produced a startup log that named a validation failure while\n      // the env in fact parsed cleanly, which sent diagnosis down the wrong layer entirely.\n      // Mirror the sibling catches in this service and always describe the caught error.\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Platform environment configuration validation failed',\n          processEnvKeys: Object.keys(process.env),\n          error: describeCaughtError(error),\n        },\n      });\n    }\n  }\n\n  /**\n   * Build the minimal pre-override AppConfiguration skeleton, then inject\n   * database and runtime config from environment variables.\n   *\n   * This replaces the old pattern of fetching the full config from apps-manager.\n   * The loader only authors env/runtime material plus the narrow structural\n   * placeholders required before developer overrides run.\n   *\n   * A minimal seed provides required top-level sections so the shared schema can\n   * materialize nested defaults before developer overrides run. Developer\n   * overrides still replace these placeholders with app-specific values.\n   */\n  protected buildConfigFromEnv(): AppConfiguration_PreOverrideSeed {\n    const env = this.applicationEnvConfig;\n    const platformEndpoints = buildPlatformRuntimeEndpointsFromBackendEnv({\n      appsManagerUrl: env.PLATFORM_APPS_MANAGER_URL,\n      crontabsBatchesManagerUrl: env.PLATFORM_CRONTABS_BATCHES_MANAGER_URL,\n      moduleRegistryUrl: env.PLATFORM_MODULE_REGISTRY_URL,\n    });\n    const applicationRuntimeEndpoints =\n      env[ApplicationBackendRuntimeEnvKeys.APPLICATION_RUNTIME_ENDPOINTS];\n\n    const baseConfig = buildMinimalPreOverrideAppConfiguration({\n      runtimeEndpoints: {\n        ...platformEndpoints,\n        ...applicationRuntimeEndpoints,\n      },\n      database: {\n        /**\n         * DECLARED by the environment, no longer hard-coded.\n         *\n         * This literal was `PersistenceAdapter.MONGODB`, which made the whole PostgreSQL adapter\n         * unreachable through any supported boot path: no env var, secret or bootstrap value could\n         * select it, so the only way to exercise it was a test reaching into the config object. That\n         * is why no application had ever booted on PostgreSQL, and it is a much narrower gap than\n         * \"PostgreSQL is unfinished\" — the adapter, planner, repository and (now) the DDL were all\n         * ready; nothing could ASK for them.\n         *\n         * The env key defaults to MONGODB, so a deployment that does not author it is unchanged.\n         */\n        defaultAdapter: env[ApplicationBackendDataEnvKeys.DATABASE_DEFAULT_ADAPTER] ?? DEFAULT_PERSISTENCE_ADAPTER,\n        /**\n         * DECLARED by the environment, no longer hard-coded — and still NOT derived from the\n         * adapter above.\n         *\n         * The literal that was here said \"declared, not derived\" while being neither: nothing could\n         * state it, so the engine's own rule was true in the schema and unreachable in practice. An\n         * application selecting PostgreSQL had no supported way to say which identity format it\n         * mints, which is the second half of the same gap `DATABASE_DEFAULT_ADAPTER` closed.\n         *\n         * Deriving it from `defaultAdapter` remains rejected, and the schema's JSDoc records what\n         * that cost: moving a resource between adapters silently changed the shape of every id it\n         * minted, and made every id it had ALREADY minted fail `validateForResource`.\n         *\n         * The env key defaults to `OBJECT_ID`, so a deployment that does not author it is unchanged.\n         */\n        resourceIdFormat: env[ApplicationBackendDataEnvKeys.RESOURCE_ID_FORMAT] ?? ResourceIdFormat.OBJECT_ID,\n        /**\n         * Built ONLY when the environment supplies an address — the exact shape `postgresql` below\n         * has always had, and for the reason its own JSDoc gives.\n         *\n         * Until 2026-08-28 this branch was UNCONDITIONAL, so `database.mongodb.enabled` was `true`\n         * on every runtime that has ever existed, with `host` simply `undefined` when no mongod was\n         * within reach. That left the flag unable to answer the only question anyone asks of it —\n         * does this runtime have a MongoDB? — and reproduced exactly the defect the PostgreSQL\n         * branch was written to avoid: it passes the registry's boot check and then fails at the\n         * first connection, which is the wrong place to learn about it.\n         *\n         * Met on `wonder-crm` (PostgreSQL on both planes, no mongod declared): its readiness gate\n         * probed a MongoDB it does not have, so `/health/ready` could never become ready.\n         *\n         * The compiler offers no protection here — this package builds with `strict: false`, so an\n         * absent branch produces no access error at any reader. The readers were enumerated by hand\n         * instead, and `MongoDBService.connect` now refuses with a named configuration error rather\n         * than a bare TypeError.\n         */\n        ...(env.MONGODB_HOST ? {\n          mongodb: {\n            enabled: true,\n            host: env.MONGODB_HOST,\n            database: env.MONGODB_DATABASE,\n            protocol: env.MONGODB_PROTOCOL ?? MongoDBProtocol.MONGODB,\n            options: {\n              retryWrites: true,\n              w: 'majority',\n              authSource: 'admin',\n              ...(env.MONGODB_DIRECT_CONNECTION !== undefined\n                ? { directConnection: env.MONGODB_DIRECT_CONNECTION }\n                : {}),\n            },\n          },\n        } : {}),\n        /**\n         * Built ONLY when the environment supplies an address.\n         *\n         * Absence is what keeps `postgresql.enabled` false — a branch with `enabled: true` and no\n         * host would pass the registry's boot check (\"is the declared adapter enabled?\") and then\n         * fail at the first connection, which is the wrong place to learn about it. Credentials are\n         * NOT read here: `PostgreSQLDatabaseBackendService` takes them from\n         * `secrets.database.postgresql`, matching how MongoDB splits address from credential.\n         */\n        ...(env[ApplicationBackendDataEnvKeys.POSTGRESQL_HOST] ? {\n          postgresql: {\n            enabled: true,\n            host: env[ApplicationBackendDataEnvKeys.POSTGRESQL_HOST],\n            port: env[ApplicationBackendDataEnvKeys.POSTGRESQL_PORT] ?? 5432,\n            databaseName: env[ApplicationBackendDataEnvKeys.POSTGRESQL_DATABASE],\n            ...(env[ApplicationBackendDataEnvKeys.POSTGRESQL_SSL_MODE]\n              ? { sslMode: env[ApplicationBackendDataEnvKeys.POSTGRESQL_SSL_MODE] }\n              : {}),\n          },\n        } : {}),\n        redis: {\n          host: env.REDIS_HOST,\n          port: env.REDIS_PORT,\n          db: 0,\n          // Slice 3.6 + 2026-05-26 ACL-alignment fix — when the app\n          // authored `wildo.saas.config.dataServices.redis.keyPrefix`,\n          // the env var `REDIS_KEY_PREFIX` threads it into\n          // `config.database.redis.keyPrefix`. When the env var is\n          // unset, we deliberately leave the field undefined so\n          // `RedisService.connect()` falls back to the slug-derived\n          // default `<appSlug>:` — the only default that aligns with\n          // the per-app ACL grant `~<appSlug>:*`. The previous literal\n          // schema default `'saas:'` was removed for the same reason.\n          ...(env.REDIS_KEY_PREFIX !== undefined ? { keyPrefix: env.REDIS_KEY_PREFIX } : {}),\n        },\n        ...(env.RABBITMQ_HOST ? {\n          rabbitmq: {\n            host: env.RABBITMQ_HOST,\n            port: env.RABBITMQ_PORT ?? 5672,\n            // Slice 2.5c-3 — per-app vhost isolation. The field is threaded ONLY\n            // when the operator authored `backingServices.rabbitmq.vhost`; the\n            // key stays absent otherwise so the adapter applies its documented\n            // default-vhost (`/`) fallback rather than receiving an explicit\n            // `undefined`.\n            //\n            // The `database` branch is env-owned: `fetchAndMergeBootstrapConfigMetadata`\n            // deliberately never re-authors it, so this seed is the ONLY path by\n            // which an authored vhost can reach `RabbitMQAdapterBackendService`.\n            // Dropping it here (as this mapping previously did) made the authored\n            // vhost a silent no-op — see the matching note on the env schema.\n            ...(env.RABBITMQ_VHOST ? { vhost: env.RABBITMQ_VHOST } : {}),\n          },\n        } : {}),\n      },\n      jwt: {},\n      // Object-storage TOPOLOGY, injected here for the same reason `database` is:\n      // this seed is the one place environment material becomes configuration, and\n      // routing storage through it removes the last app-tier subsystem that read\n      // `process.env` directly. See\n      // `.claude/plans/application-runtime-topology-delivery.md`.\n      //\n      // Each block is emitted ONLY when its defining value is present, and that is\n      // load-bearing rather than tidy: the storage provider treats a missing\n      // connection as UNCONFIGURED, so seeding a plausible default would disable\n      // the file feature silently instead of failing loudly — the failure mode this\n      // subsystem has already produced once.\n      storage: buildStorageTopologyFromEnvironment(env),\n      // Same contract as `storage`, one derivation over: the scanning sidecars\n      // are platform-injected topology, and this seed is the one place\n      // environment material becomes configuration.\n      ...buildFileServicesTopologyFromEnvironment(env),\n    });\n\n    this.logDebug('Built pre-override config seed from env/bootstrap material', {\n      mongoHost: env.MONGODB_HOST,\n      mongoDirectConnection: env.MONGODB_DIRECT_CONNECTION,\n      platformEndpointCount: Object.keys(platformEndpoints).length,\n    });\n\n    return baseConfig;\n  }\n\n  /**\n   * Fetch reduced bootstrap metadata from apps-manager.\n   * This keeps apps-manager authoritative for selected app-managed declaration\n   * fields without letting it re-author env/bootstrap runtime branches.\n   *\n   * Policy:\n   * - fail-fast after the retry window is exhausted\n   * - development mode only changes retry behavior, not the final failure mode\n   */\n  protected async fetchAndMergeBootstrapConfigMetadata(\n    appConfig: AppConfiguration | AppConfiguration_PreOverrideSeed,\n  ): Promise<{ appSlug: string }> {\n    const fetchOperation = async (): Promise<{ appSlug: string }> => {\n      this.logDebug('Fetching bootstrap config metadata from apps-manager');\n      const response = await this.axiosInstance.get(this.appConfigUrlPath);\n\n      if (response.status !== 200) {\n        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n          context: { message: 'Failed to fetch bootstrap config metadata from apps-manager', status: response.status },\n        });\n      }\n\n      const {\n        appSlug,\n        appIdentity,\n        frontendServices,\n        minions,\n        workers,\n        engineCapabilities,\n        providers,\n        email,\n        providerConfigurations,\n        publicKeys,\n        rotatedPublicKeys,\n        accessTokenExpirationMinutes,\n        refreshTokenExpirationDays,\n      } = this.parseBootstrapConfigMetadataResponse(response.data);\n\n      if (appIdentity) {\n        appConfig.appIdentity = appIdentity;\n      }\n\n      if (frontendServices) {\n        appConfig.frontendServices = frontendServices;\n      }\n\n      if (minions) {\n        appConfig.minions = minions;\n      }\n\n      if (workers) {\n        appConfig.workers = workers;\n      }\n\n      if (engineCapabilities) {\n        appConfig.engineCapabilities = engineCapabilities;\n      }\n\n      if (providers) {\n        appConfig.providers = providers;\n      }\n\n      if (email) {\n        appConfig.email = {\n          ...appConfig.email,\n          ...email,\n        };\n      }\n\n      if (providerConfigurations) {\n        appConfig.providerConfigurations = providerConfigurations;\n      }\n\n      appConfig.jwt = {\n        ...appConfig.jwt,\n        publicKey: {\n          ...appConfig.jwt.publicKey,\n          ...publicKeys,\n        },\n        rotatedPublicKeys: {\n          ...(appConfig.jwt.rotatedPublicKeys ?? {}),\n          ...rotatedPublicKeys,\n        },\n        // Slice 3.3 hardening (F-24, Slice 3 closeout): operator-authored\n        // `serviceAuth` TTLs are AUTHORITATIVE — they overwrite any\n        // locally authored values in `saas-config.backend.ts`. The\n        // dogfood backend no longer hardcodes the\n        // `jwt.{accessTokenExpirationMinutes, refreshTokenExpirationDays}`\n        // block, and any future redeclaration is intentionally ignored\n        // at sign time so that `wildo.infra.<env>.config.ts` stays the\n        // single source of truth for the user-auth TTL policy.\n        //\n        // After Slice 3 closeout these fields are REQUIRED on the\n        // bootstrap response (`AppBootstrapConfigMetadataResponseSchema.jwt`),\n        // so the prior conditional-spread defensive pattern is gone.\n        // The schema-level requirement is the gate; if an older\n        // apps-manager violates the contract it fails parse(), not\n        // sign-time.\n        accessTokenExpirationMinutes,\n        refreshTokenExpirationDays,\n      };\n\n      this.logDebug('Bootstrap config metadata merged from apps-manager', {\n        appSlug,\n        hasAppIdentity: !!appIdentity,\n        frontendServiceCount: Object.keys(frontendServices ?? {}).length,\n        minionCount: Object.keys(minions ?? {}).length,\n        workerCount: Object.keys(workers ?? {}).length,\n        engineCapabilityCount: Object.keys(engineCapabilities ?? {}).length,\n        hasProviderScopes: !!providers,\n        providerConfigurationCount: Object.keys(providerConfigurations ?? {}).length,\n        jwtKeyCount: Object.keys(appConfig.jwt.publicKey).length,\n      });\n\n      return { appSlug };\n    };\n\n    try {\n      return await this.executeWithRetryWhenEnabled(fetchOperation, 'fetchAndMergeBootstrapConfigMetadata');\n    } catch (error) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Failed to fetch bootstrap config metadata from apps-manager',\n          serviceName: this.serviceName,\n          applicationEnv: this.applicationEnvConfig.APPLICATION_ENV,\n          failureMode: APPS_MANAGER_FETCH_FAILURE_MODE,\n          error: describeCaughtError(error),\n        },\n      });\n    }\n  }\n\n  protected async loadPlatformManagedSecrets(): Promise<AppConfigurationSecrets> {\n    const loadSecretsOperation = async (): Promise<AppConfigurationSecrets> => {\n      this.logDebug('Loading platform managed secrets', { url: this.appsSecretUrlPath });\n      const response = await this.axiosInstance.get<AppConfigurationSecrets>(this.appsSecretUrlPath);\n\n      if(response.status !== 200) {\n        throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, { context: { message: 'Failed to load platform managed secrets', response: response.data, status: response.status } });\n      }\n\n      const apiParsingSchema = ResourcesConfigOperationsDtosBuilderUtils.createApiParsingSchema(AppConfigurationSecrets_Schema);\n      const secrets = apiParsingSchema.parse(response.data);\n      this.logDebug('Platform managed secrets loaded successfully');\n\n      return secrets;\n    };\n\n    try {\n      return await this.executeWithRetryWhenEnabled(loadSecretsOperation, 'loadPlatformManagedSecrets');\n    } catch (error) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Failed to load platform managed secrets',\n          serviceName: this.serviceName,\n          applicationEnv: this.applicationEnvConfig.APPLICATION_ENV,\n          failureMode: APPS_MANAGER_FETCH_FAILURE_MODE,\n          status: error.status ?? undefined,\n          response: error.response?.data ?? undefined,\n          error: describeCaughtError(error)\n        }\n      });\n    }\n  }\n\n  private parseBootstrapConfigMetadataResponse(\n    data: unknown,\n  ): {\n    appSlug: string;\n    appIdentity?: AppConfiguration['appIdentity'];\n    frontendServices?: AppConfiguration['frontendServices'];\n    minions?: AppConfiguration['minions'];\n    workers?: AppConfiguration['workers'];\n    engineCapabilities?: AppConfiguration['engineCapabilities'];\n    providers?: AppConfiguration['providers'];\n    email?: Pick<\n      AppConfiguration['email'],\n      'isTransactionalWildoManaged' | 'isMarketingWildoManaged'\n    >;\n    providerConfigurations?: AppConfiguration['providerConfigurations'];\n    publicKeys: Record<string, string>;\n    rotatedPublicKeys: Record<string, Array<{ kid: string; publicKey: string; notAfter?: Date }>>;\n    /** Slice 3 closeout: required on the bootstrap response, never undefined here. */\n    accessTokenExpirationMinutes: number;\n    refreshTokenExpirationDays: number;\n  } {\n    const response = AppBootstrapConfigMetadataResponseSchema.parse(data);\n    const appSlug = response.appSlug.trim();\n    if (!appSlug) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Apps-manager config response is missing appSlug',\n        },\n      });\n    }\n\n    const jwtBlock = response.jwt;\n    const publicKeys = jwtBlock?.publicKey;\n    if (!jwtBlock || !publicKeys || Object.keys(publicKeys).length === 0) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: 'Apps-manager config response is missing jwt.publicKey entries',\n          appSlug,\n        },\n      });\n    }\n    if (!publicKeys[JwtPrivateKeys.APPLICATION_AUTH_TOKEN]?.trim()) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        context: {\n          message: `Apps-manager config response is missing jwt.publicKey.${JwtPrivateKeys.APPLICATION_AUTH_TOKEN}`,\n          appSlug,\n        },\n      });\n    }\n    // Slice 3 closeout: when `jwt` is present (which the publicKey\n    // guard above proves), the schema also guarantees both TTL fields.\n    // The narrowing here lets the return value drop `| undefined`.\n\n    return {\n      appSlug,\n      appIdentity: response.appIdentity as AppConfiguration['appIdentity'] | undefined,\n      frontendServices: response.frontendServices as AppConfiguration['frontendServices'] | undefined,\n      // The cast crosses the two schemas that describe this block: the platform's\n      // `AdminAppManagedMinionsSchema` (what the wire carries, and what the response schema above\n      // now parses with) and the engine's `AppConfiguration_MinionsSchema` (what the running\n      // application holds). It is a cast rather than an assignment because the second is a\n      // `strictObject` typed against a named interface for the TS7056 reason recorded on\n      // `AppConfiguration_MinionEntry` — collapsing the two would put that ceiling back.\n      //\n      // What used to sit here was an instruction to hand-mirror a third copy at this site whenever\n      // either schema grew, and that instruction failed twice in production. The two survivors are\n      // now held in step MECHANICALLY, by\n      // `config/__tests__/managed-runtime-inventory-parity.backend.test.ts`, which fails on a field\n      // present in one and absent in the other. Do not restore a hand copy here.\n      minions: response.minions as AppConfiguration['minions'] | undefined,\n      workers: response.workers as AppConfiguration['workers'] | undefined,\n      engineCapabilities: response.engineCapabilities as AppConfiguration['engineCapabilities'] | undefined,\n      providers: response.providers as AppConfiguration['providers'] | undefined,\n      email: response.email,\n      providerConfigurations: response.providerConfigurations as AppConfiguration['providerConfigurations'] | undefined,\n      publicKeys,\n      rotatedPublicKeys: jwtBlock.rotatedPublicKeys ?? {},\n      accessTokenExpirationMinutes: jwtBlock.accessTokenExpirationMinutes,\n      refreshTokenExpirationDays: jwtBlock.refreshTokenExpirationDays,\n    };\n  }\n\n\n\n  private shouldRetryInDevelopmentMode(): boolean {\n    const isAppManager = this.serviceName === AppConfigurationLoaderService.APP_MANAGER_SERVICE_NAME;\n    const isDevelopment = this.applicationEnvConfig.APPLICATION_ENV === RuntimeEnvironment.DEVELOPMENT;\n    return !isAppManager && isDevelopment;\n  }\n\n  private async executeWithRetryWhenEnabled<T>(\n    operation: () => Promise<T>,\n    operationName: string,\n  ): Promise<T> {\n    if (this.shouldRetryInDevelopmentMode()) {\n      return await this.executeWithRetry(operation, operationName);\n    }\n\n    return await operation();\n  }\n\n  private async executeWithRetry<T>(\n    operation: () => Promise<T>,\n    operationName: string\n  ): Promise<T> {\n    let lastError: any;\n\n    for (let attempt = 1; attempt <= AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS; attempt++) {\n      try {\n        if (attempt > 1) {\n          const delay = Math.min(\n            AppConfigurationLoaderService.DEV_BASE_DELAY_MS * Math.pow(2, attempt - 2),\n            AppConfigurationLoaderService.DEV_MAX_DELAY_MS\n          );\n\n          this.logDebug(`Retrying ${operationName} - attempt ${attempt}/${AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS} after ${delay}ms delay`, {\n            serviceName: this.serviceName,\n            attempt,\n            delay\n          });\n\n          await this.delay(delay);\n        } else {\n          this.logDebug(`Initial attempt for ${operationName} - non-app-manager service in dev mode`, {\n            serviceName: this.serviceName,\n            totalAttempts: AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS\n          });\n        }\n\n        return await operation();\n\n      } catch (error) {\n        lastError = error;\n\n        if (attempt < AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS) {\n          this.logDebug(`Attempt ${attempt} failed for ${operationName}, will retry`, {\n            serviceName: this.serviceName,\n            attempt,\n            error: describeCaughtError(error)\n          });\n        } else {\n          this.logDebug(`All ${AppConfigurationLoaderService.DEV_RETRY_ATTEMPTS} attempts failed for ${operationName}`, {\n            serviceName: this.serviceName,\n            error: describeCaughtError(error)\n          });\n        }\n      }\n    }\n\n    throw lastError;\n  }\n\n  private delay(ms: number): Promise<void> {\n    return new Promise(resolve => setTimeout(resolve, ms));\n  }\n}\n"]}

package/dist/esm/config/services/app-configuration.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-configuration.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/config/services/app-configuration.backend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,gBAAgB,EAChB,KAAK,gCAAgC,EAEtC,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AAC9G,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,EACL,KAAK,gCAAgC,EAGtC,MAAM,0EAA0E,CAAC;AAClF,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,uCAAuC,EAE7C,MAAM,4EAA4E,CAAC;AAGpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAIL,kBAAkB,EAIlB,kBAAkB,EAElB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G;;;;;;;;;;;;GAYG;AACH,qBACa,uBAAuB;IAaG,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IACjB,OAAO,CAAC,aAAa;IAd1E,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,kBAAkB,CAAiD;IAC3E,OAAO,CAAC,2BAA2B,CAA8C;IACjF,OAAO,CAAC,wCAAwC,CAAwD;IACxG,OAAO,CAAC,QAAQ,CAAwC;IACxD,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,eAAe,CAAmC;IAC1D,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,QAAQ,CAAuB;gBAGM,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACrC,aAAa,EAAE,6BAA6B;IAMzG;;OAEG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBxC;;;;;;;;OAQG;IACI,4BAA4B,CAAC,OAAO,EAAE;QAC3C,MAAM,EAAE,gBAAgB,CAAC;QACzB,OAAO,EAAE,uBAAuB,CAAC;QACjC,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,kBAAkB,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,kBAAkB,CAAC,EAAE,gBAAgB,GAAG,gCAAgC,CAAC;QACzE,sBAAsB,CAAC,EAAE,OAAO,CAAC;KAClC,GAAG,IAAI;IA2ER;;;OAGG;IACI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAOzE;;;;OAIG;IACI,qCAAqC,CAAC,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAM7J;;;OAGG;IACI,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO;IAM/D;;;;OAIG;IACI,sCAAsC,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAWzF;;;;;;;;OAQG;IACI,sCAAsC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAc9E;;;;;OAKG;IACI,iCAAiC,IAAI,MAAM,GAAG,IAAI;IAYzD,OAAO,CAAC,4BAA4B;IAiDpC,OAAO,CAAC,yBAAyB;IA2CjC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,yBAAyB;IAejC;;;;;OAKG;IACI,aAAa,IAAI,OAAO;IAI/B;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,sCAAsC,CAAiD;IAE/F,IAAW,qCAAqC,IAAI,sBAAsB,GAAG,SAAS,CAErF;IAEM,0CAA0C,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI;IAIxF,IAAW,MAAM,IAAI,gBAAgB,CAMpC;IAED;;;;;;;;;;;;;OAaG;IACI,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAQtE;;;;;;;;;;;;;;OAcG;IACI,uBAAuB,IAAI,MAAM,GAAG,SAAS;IAepD;;;;;;;;;;;;OAYG;IACI,0BAA0B,IAAI,MAAM,GAAG,SAAS;IAKvD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,6BAA6B,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAgBxG;;;;;;;;;;;;;;;;;OAiBG;IACI,2BAA2B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAiB9E,IAAW,OAAO,IAAI,uBAAuB,CAK5C;IAED,IAAW,aAAa,IAAI,MAAM,CAKjC;IAED,IAAW,cAAc,IAAI,kBAAkB,CAK9C;IAED,IAAW,WAAW,IAAI,MAAM,CAK/B;IAED;;;;;;;;;OASG;IACH,IAAW,OAAO,IAAI,MAAM,CAkB3B;IAED;;;OAGG;IACI,kBAAkB,CAAC,aAAa,EAAE,gCAAgC,GAAG,IAAI;IAkChF;;;;;;OAMG;IACI,oBAAoB,CAAC,eAAe,EAAE,uBAAuB,GAAG,IAAI;IA2DpE,4BAA4B,CAAC,mBAAmB,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAIpG,yHAAyH;IAClH,0CAA0C,IAAI,uCAAuC,GAAG,IAAI;IAInG;;;OAGG;IACI,+BAA+B,IAAI,IAAI;IAoB9C,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACH,IAAW,SAAS,IAAI;QACtB,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAA;KACpD,CAKA;IAED,uEAAuE;IACvE,IAAW,wBAAwB,IAAI,OAAO,CAI7C;CAEF"}
+{"version":3,"file":"app-configuration.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/config/services/app-configuration.backend.service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,gBAAgB,EAChB,KAAK,gCAAgC,EAEtC,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qEAAqE,CAAC;AAC9G,OAAO,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAC3F,OAAO,EACL,KAAK,gCAAgC,EAGtC,MAAM,0EAA0E,CAAC;AAClF,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,uCAAuC,EAE7C,MAAM,4EAA4E,CAAC;AAGpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAIL,kBAAkB,EAIlB,kBAAkB,EAElB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAG9G;;;;;;;;;;;;GAYG;AACH,qBACa,uBAAuB;IAaG,OAAO,CAAC,MAAM;IACD,OAAO,CAAC,YAAY;IACjB,OAAO,CAAC,aAAa;IAd1E,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjF,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,kBAAkB,CAAiD;IAC3E,OAAO,CAAC,2BAA2B,CAA8C;IACjF,OAAO,CAAC,wCAAwC,CAAwD;IACxG,OAAO,CAAC,QAAQ,CAAwC;IACxD,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,eAAe,CAAmC;IAC1D,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,QAAQ,CAAuB;gBAGM,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACrC,aAAa,EAAE,6BAA6B;IAMzG;;OAEG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBxC;;;;;;;;OAQG;IACI,4BAA4B,CAAC,OAAO,EAAE;QAC3C,MAAM,EAAE,gBAAgB,CAAC;QACzB,OAAO,EAAE,uBAAuB,CAAC;QACjC,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,kBAAkB,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,kBAAkB,CAAC,EAAE,gBAAgB,GAAG,gCAAgC,CAAC;QACzE,sBAAsB,CAAC,EAAE,OAAO,CAAC;KAClC,GAAG,IAAI;IA2ER;;;OAGG;IACI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAOzE;;;;OAIG;IACI,qCAAqC,CAAC,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI;IAM7J;;;OAGG;IACI,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO;IAM/D;;;;OAIG;IACI,sCAAsC,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAWzF;;;;;;;;OAQG;IACI,sCAAsC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAc9E;;;;;OAKG;IACI,iCAAiC,IAAI,MAAM,GAAG,IAAI;IAYzD,OAAO,CAAC,4BAA4B;IAiDpC,OAAO,CAAC,yBAAyB;IA2CjC,OAAO,CAAC,8BAA8B;IAsBtC,OAAO,CAAC,yBAAyB;IAejC;;;;;OAKG;IACI,aAAa,IAAI,OAAO;IAI/B;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,sCAAsC,CAAiD;IAE/F,IAAW,qCAAqC,IAAI,sBAAsB,GAAG,SAAS,CAErF;IAEM,0CAA0C,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI;IAIxF,IAAW,MAAM,IAAI,gBAAgB,CAMpC;IAED;;;;;;;;;;;;;OAaG;IACI,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAQtE;;;;;;;;;;;;;;OAcG;IACI,uBAAuB,IAAI,MAAM,GAAG,SAAS;IAepD;;;;;;;;;;;;OAYG;IACI,0BAA0B,IAAI,MAAM,GAAG,SAAS;IAKvD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,6BAA6B,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAgBxG;;;;;;;;;;;;;;;;;OAiBG;IACI,2BAA2B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS;IAiB9E,IAAW,OAAO,IAAI,uBAAuB,CAK5C;IAED,IAAW,aAAa,IAAI,MAAM,CAKjC;IAED,IAAW,cAAc,IAAI,kBAAkB,CAK9C;IAED,IAAW,WAAW,IAAI,MAAM,CAK/B;IAED;;;;;;;;;OASG;IACH,IAAW,OAAO,IAAI,MAAM,CAkB3B;IAED;;;OAGG;IACI,kBAAkB,CAAC,aAAa,EAAE,gCAAgC,GAAG,IAAI;IAkChF;;;;;;OAMG;IACI,oBAAoB,CAAC,eAAe,EAAE,uBAAuB,GAAG,IAAI;IA2DpE,4BAA4B,CAAC,mBAAmB,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAIpG,yHAAyH;IAClH,0CAA0C,IAAI,uCAAuC,GAAG,IAAI;IAInG;;;OAGG;IACI,+BAA+B,IAAI,IAAI;IAoB9C,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACH,IAAW,SAAS,IAAI;QACtB,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAA;KACpD,CAKA;IAED,uEAAuE;IACvE,IAAW,wBAAwB,IAAI,OAAO,CAI7C;CAEF"}