@wildo-ai/saas-backend-lib 1.1.3 → 1.1.4

package/dist/esm/errors/utils/error-log-level-classification.backend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-log-level-classification.backend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/errors/utils/error-log-level-classification.backend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAQpG;;;;;;;;;;GAUG;AACH,oBAAY,uBAAuB;IACjC,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAEvF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,kBAAkB,GAAG,uBAAuB,CAsBlG;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAE5F;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWpG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2BnF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQ1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,uBAAuB,CAqCzB"}
+{"version":3,"file":"error-log-level-classification.backend.utils.d.ts","sourceRoot":"","sources":["../../../../src/errors/utils/error-log-level-classification.backend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAQpG;;;;;;;;;;GAUG;AACH,oBAAY,uBAAuB;IACjC,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAEvF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,kBAAkB,GAAG,uBAAuB,CAsBlG;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAE5F;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWpG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2BnF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQ1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,uBAAuB,CAqCzB"}

package/dist/esm/errors/utils/error-log-level-classification.backend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-log-level-classification.backend.utils.js","sourceRoot":"","sources":["../../../../../src/errors/utils/error-log-level-classification.backend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAA2B,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2FAA2F,CAAC;AAC5I,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AAEvH;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,uBAKX;AALD,WAAY,uBAAuB;IACjC,0CAAe,CAAA;IACf,wCAAa,CAAA;IACb,wCAAa,CAAA;IACb,0CAAe,CAAA;AACjB,CAAC,EALW,uBAAuB,KAAvB,uBAAuB,QAKlC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAyB;IAC5E,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAAyB;IACvE,IAAI,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,uBAAuB,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IAEjF,wDAAwD;IACxD,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACtB,OAAO,uBAAuB,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,2EAA2E;IAC3E,4BAA4B;IAC5B,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvB,KAAK,aAAa,CAAC,GAAG;YACpB,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACvC,KAAK,aAAa,CAAC,MAAM;YACvB,OAAO,uBAAuB,CAAC,IAAI,CAAC;QACtC;YACE,OAAO,uBAAuB,CAAC,KAAK,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAA8B;IACjF,OAAO,KAAK,KAAK,uBAAuB,CAAC,KAAK,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAAyB;IACzE,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,mBAAmB,CAAC;YACzB,GAAG,iCAAiC,CAAC,KAAK,CAAC;YAC3C,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE;;;;;;;;;;;;;;;;;eAiBG;YACH,CAAC,wBAAwB,CAAC,EAAE,+BAA+B,CAAC,KAAK,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;QACtC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YACpD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,sBAAsB,KAAK,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wCAAwC,CACtD,MAAsB,EACtB,OAAe,EACf,KAAyB,EACzB,UAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAErD,yEAAyE;IACzE,0EAA0E;IAC1E,yCAAyC;IACzC,MAAM,aAAa,GAA4B;QAC7C,GAAG,iCAAiC,CAAC,KAAK,CAAC;QAC3C,GAAG,OAAO;KACX,CAAC;IAEF,MAAM,YAAY,GAChB,oCAAoC,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC5E,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;QAC1C,CAAC,CAAC,aAAa,CAAC;IAEpB,4DAA4D;IAC5D,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAE7E,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,uBAAuB,CAAC,KAAK;YAChC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,uBAAuB,CAAC,IAAI;YAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM;QACR,KAAK,uBAAuB,CAAC,IAAI;YAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM;QACR,KAAK,uBAAuB,CAAC,KAAK;YAChC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpC,MAAM;IACV,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { ErrorSeverity, isWildoBackendError, type WildoError_Backend } from '@wildo-ai/saas-models';\nimport { isExpiredJwtVerificationFailure } from '~wildo-backend-lib/security/jwt/utils/jwt-verification-error-classification.backend.utils';\nimport {\n  normalizeLogContext,\n  normalizeLogValue,\n} from '~wildo-backend-lib/monitoring/logger/utils/log-value-normalization.backend.utils';\nimport { LOG_SEVERITY_FLOOR_FIELD } from '~wildo-backend-lib/monitoring/logger/utils/log-severity-floor.backend.utils';\n\n/**\n * Backend log severity for an error at a logging boundary.\n *\n * Deliberately NOT the same axis as {@link ErrorSeverity} (the business/impact\n * severity carried on the error). This is the *operational* severity: \"does a\n * human operator need to look at this line?\" — the only question a log level\n * should answer.\n *\n * Values match {@link LevelledLogger} method names so dispatch is a direct\n * lookup, not a translation table.\n */\nexport enum BackendErrorLogSeverity {\n  DEBUG = 'debug',\n  INFO = 'info',\n  WARN = 'warn',\n  ERROR = 'error',\n}\n\n/**\n * Minimal structural logger contract the dispatch helper needs.\n *\n * Kept structural (not a dependency on the concrete `LoggerService`) so the\n * classification/dispatch layer stays free of DI wiring and is trivially\n * unit-testable with a stub. `LoggerService` satisfies this shape.\n */\nexport interface LevelledLogger {\n  debug(message: string, context?: Record<string, unknown>): void;\n  info(message: string, context?: Record<string, unknown>): void;\n  warn(message: string, context?: Record<string, unknown>): void;\n  error(message: string, errorOrContext?: unknown, context?: Record<string, unknown>): void;\n}\n\n/**\n * Expected, self-correcting client conditions that must never be logged as\n * faults.\n *\n * The canonical case: an **expired access token**. This is not an error — it is\n * a normal step in the token lifecycle. The frontend receives the 401, silently\n * calls `/refresh`, and retries. Logging it at `error` (with a stack trace, per\n * request, per expired session) is a category mistake that floods production\n * logs with non-actionable noise and inflates log-ingestion cost.\n *\n * This is the extension point for other genuinely self-healing conditions.\n * Add them here so every logging boundary agrees on what counts as \"expected\" —\n * do NOT special-case them at individual call sites.\n *\n * **Admission rule — both must hold before folding a condition in:**\n * 1. The client recovers with **zero human involvement** (transparent, no\n *    banner, no user decision).\n * 2. The **retried request succeeds unchanged** — same payload, no lost work.\n *\n * Expired token is the textbook case (silent `/refresh` → identical retry\n * works). Deliberately EXCLUDED, with reasons, so nobody re-litigates them:\n * - **Malformed / bad-signature token** — a potential security signal; a spike\n *   is credential-stuffing. Stays at `warn`.\n * - **`VERSION_CONFLICT`** (optimistic concurrency) — fails BOTH tests: it\n *   surfaces a user-facing conflict banner (a human must reconcile) and a blind\n *   retry would clobber the divergent remote state. It is a real concurrent-\n *   edit event and a useful hot-row-contention signal. Stays at `warn`.\n *   Only a future *transparent auto-merge* retry (no user involvement) would\n *   qualify — the current user-mediated flow does not.\n */\nexport function isExpectedSelfHealingClientCondition(error: WildoError_Backend): boolean {\n  return isExpiredJwtVerificationFailure(error);\n}\n\n/**\n * Map a backend error to the operational log severity it deserves.\n *\n * Big-tech observability practice: **log level reflects operator action, not\n * code path.** An exception used as control flow (expired token, validation\n * rejection, not-found) is not an `ERROR` just because it unwound the stack.\n *\n * The mapping is driven by the error's own declared contract — `statusCode` and\n * business {@link ErrorSeverity} from `ERROR_DEFINITIONS` — so new error types\n * inherit correct log levels for free:\n *\n * - **Expected self-healing client conditions** → `debug` (expired token, etc.).\n *   Never a fault; keep them out of the error stream entirely — track via\n *   metrics/counters and alert on *rate*, not individual events.\n * - **Server faults (5xx)** → `error`. A human must look (INTERNAL, DATABASE,\n *   EXTERNAL_SERVICE, CONFIGURATION, UNKNOWN, uncaught/unhandled).\n * - **4xx client errors**, by business severity:\n *   - `LOW` → `debug` — routine client mistakes (VALIDATION, NOT_FOUND,\n *     feature-gating). The caller sent a bad request; that is not our fault.\n *   - `MEDIUM` → `warn` — worth aggregate visibility but not a fault\n *     (AUTHENTICATION/AUTHORIZATION failures, CONFLICT, RATE_LIMIT,\n *     BUSINESS_RULE). A *spike* is the signal (e.g. credential stuffing) — the\n *     rate alert fires, not the individual line.\n *   - `HIGH`+ on a 4xx is unusual → `error`, so it is surfaced rather than\n *     silently swallowed.\n */\nexport function classifyBackendErrorLogSeverity(error: WildoError_Backend): BackendErrorLogSeverity {\n  if (isExpectedSelfHealingClientCondition(error)) {\n    return BackendErrorLogSeverity.DEBUG;\n  }\n\n  const statusCode = typeof error.statusCode === 'number' ? error.statusCode : 500;\n\n  // Server faults always warrant an operator's attention.\n  if (statusCode >= 500) {\n    return BackendErrorLogSeverity.ERROR;\n  }\n\n  // Remaining 4xx: the client's request was wrong. Business severity decides\n  // how loud we are about it.\n  switch (error.severity) {\n    case ErrorSeverity.LOW:\n      return BackendErrorLogSeverity.DEBUG;\n    case ErrorSeverity.MEDIUM:\n      return BackendErrorLogSeverity.WARN;\n    default:\n      return BackendErrorLogSeverity.ERROR;\n  }\n}\n\n/**\n * A stack trace exists to locate an *unexpected* fault. Expected control-flow\n * exceptions (expired token, validation) have no fault to locate — the stack is\n * pure noise and, at scale, real ingestion cost. Attach it only for `error`.\n */\nexport function backendErrorLogSeverityIncludesStack(level: BackendErrorLogSeverity): boolean {\n  return level === BackendErrorLogSeverity.ERROR;\n}\n\n/**\n * Canonical projection of a {@link WildoError_Backend} into flat, structured\n * log fields — the single source of truth for \"what error fields belong on a\n * log line\".\n *\n * Every field becomes a top-level, individually-queryable key (never a\n * pre-rendered blob). Optional fields are omitted when absent so log records\n * stay free of null keys. The stack is deliberately NOT included here: whether\n * to attach it is a per-boundary decision driven by the emitted level (see\n * {@link backendErrorLogSeverityIncludesStack}), so each boundary layers it on\n * top of this projection when appropriate.\n *\n * Used by {@link logWildoBackendErrorAtClassifiedSeverity} (HTTP, batch,\n * websocket-auth boundaries) AND directly by boundaries that own their own\n * operational severity and must NOT adopt the request-style classification —\n * e.g. a permanently dead-lettered queue job is operationally an `error`\n * regardless of the underlying error's business severity, so it keeps its\n * explicit level and merely reuses this projection to restore the full detail.\n */\nexport function projectWildoBackendErrorLogFields(error: WildoError_Backend): Record<string, unknown> {\n  return {\n    errorType: error.type,\n    severity: error.severity,\n    statusCode: error.statusCode,\n    customMessageReference: error.customMessageReference,\n    ...(error.operationPathKey ? { operationPath: error.operationPathKey } : {}),\n    ...(error.correlationId ? { correlationId: error.correlationId } : {}),\n    ...(error.backendActions?.length ? { backendActions: error.backendActions } : {}),\n    ...(error.context ? { context: error.context } : {}),\n  };\n}\n\n/**\n * Project ANY caught value into flat, structured, individually-queryable log\n * fields — the `catch (error)` counterpart to {@link projectWildoBackendErrorLogFields}.\n *\n * A `catch` binding is `unknown`, and the pervasive footgun is\n * `error instanceof Error ? error.message : JSON.stringify(error)`. A\n * {@link WildoError_Backend} is a **plain object, NOT an `Error` instance**, so\n * `instanceof Error` is `false` and every structured backend failure falls to the\n * `else` branch — silently collapsing to `String(error)` (`'[object Object]'`) or,\n * when the fallback is `JSON.stringify`, to a **doubly-escaped JSON string** crammed\n * under a single `error` key (Pino re-escapes the already-serialized blob → the fields\n * become un-greppable). This helper resolves the `WildoError_Backend | Error | unknown`\n * trichotomy once, emitting raw JSON in every case:\n *\n * - {@link WildoError_Backend} → the canonical flat projection (top-level queryable\n *   keys) plus its carried `stack`. A best-effort catch swallows an *unexpected*\n *   failure, so the stack (the fault locator) is always attached here — unlike the\n *   classified HTTP boundary ({@link logWildoBackendErrorAtClassifiedSeverity}), which\n *   gates the stack on the emitted level.\n * - native `Error` → a structured error object including non-enumerable\n *   `name`/`message`/`stack`, `cause`, and extension fields such as Zod\n *   `issues`.\n * - anything else → its JSON-native value under `error`; objects remain\n *   objects, primitives retain their type, and cyclic references become an\n *   explicit `[Circular]` marker.\n *\n * Spread it into a log context:\n * `logger.warn(msg, { ...ctx, ...projectCaughtErrorLogFields(error) })`.\n *\n * Choosing `warn` there is safe BECAUSE of the level floor this projection attaches: if the swallowed\n * value turns out to be a server fault, `LoggerService` emits the record at `error` regardless, and\n * records what the call site asked for under `promotedFromLevel`. Pick the level that describes the\n * expected case; the floor covers the unexpected one.\n *\n * For the same reason, never put a `ZodError`'s own `.message` in a log context\n * — in Zod 4 it IS a `JSON.stringify` blob, so it hits the same double-escaping.\n * Log the structured issues, and use `summarizeZodIssues` from\n * `@wildo-ai/saas-models` when a human-readable one-liner is wanted alongside.\n */\nexport function projectCaughtErrorLogFields(error: unknown): Record<string, unknown> {\n  if (isWildoBackendError(error)) {\n    return normalizeLogContext({\n      ...projectWildoBackendErrorLogFields(error),\n      ...(typeof error.stack === 'string' ? { stack: error.stack } : {}),\n      /*\n       * The LEVEL this record must not fall below, carried so the sink can apply it.\n       *\n       * This projection is the catch-path one, and a catch path chooses its level BY HAND — 213\n       * emissions below `error` across 86 files, measured 2026-09-09 — which is exactly where\n       * `classifyBackendErrorLogSeverity` gets bypassed. A swallowed DATABASE or INTERNAL failure was\n       * emitted at `warn` while these very fields said `severity: CRITICAL`: greppable, and invisible\n       * to an alert keyed on level.\n       *\n       * Carrying the classifier's own answer adds no new judgement — every \"stays at warn\" case it\n       * documents is preserved — and `resolveEmittedLogLevel` only ever RAISES, so a call site that\n       * deliberately logs louder keeps its choice.\n       *\n       * Deliberately NOT added to `projectWildoBackendErrorLogFields`: both of its consumers already\n       * resolve the level on purpose (`logWildoBackendErrorAtClassifiedSeverity` emits AT the\n       * classification; a dead-lettered job owns a louder one), so a floor there would be a field that\n       * can never change an outcome.\n       */\n      [LOG_SEVERITY_FLOOR_FIELD]: classifyBackendErrorLogSeverity(error),\n    });\n  }\n  return { error: normalizeLogValue(error) };\n}\n\n/**\n * One-line human-readable description of ANY caught value.\n *\n * The string counterpart to {@link projectCaughtErrorLogFields}, for the narrow\n * cases where a caught error must become a plain `string` rather than structured\n * log fields — a persisted `failureReason` column, a batch summary's `error`\n * field, a DLQ record. Prefer the structured projection for LOGGING; reach for\n * this only when the destination's contract is genuinely `string`.\n *\n * It exists because the obvious inline form,\n * `err instanceof Error ? err.message : String(err)`, is wrong for the engine's\n * own error type: a {@link WildoError_Backend} is a plain object, NOT an `Error`,\n * so it takes the `String(...)` branch and every structured failure is persisted\n * as the literal `'[object Object]'` — unreadable, and identical for every\n * distinct fault.\n *\n * Resolution order for a `WildoError_Backend`: the human `context.message` when\n * present, else the stable `customMessageReference` code.\n */\nexport function describeCaughtError(error: unknown): string {\n  if (isWildoBackendError(error)) {\n    const detail = error.context?.message;\n    return typeof detail === 'string' && detail.length > 0\n      ? detail\n      : String(error.customMessageReference);\n  }\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * `\"<kind>: <message>\"` for ANY caught value — {@link describeCaughtError} for the\n * destinations that also want to know WHAT KIND of thing failed, not only why.\n *\n * Reach for this instead of the inline `err instanceof Error ? \\`${err.name}: ${err.message}\\`\n * : String(err)` wherever the kind is load-bearing rather than decorative:\n *\n * - a **failure DIGEST / dedup key** — collapsing every distinct fault into one bucket\n *   is worse than an unreadable message, because the bucket is then wrong for every\n *   subsequent decision keyed off it;\n * - a **persisted terminal diagnostic** an operator reads without the log beside it;\n * - a **classifier** that branches on the fault's identity.\n *\n * A {@link WildoError_Backend} has no `name`: its kind is the pair\n * `type` + `customMessageReference`, which is what this renders. Everything else falls\n * through to the native `name`, so the output shape is unchanged for a real `Error`.\n */\nexport function describeCaughtErrorWithKind(error: unknown): string {\n  if (isWildoBackendError(error)) {\n    return `${error.type}/${error.customMessageReference}: ${describeCaughtError(error)}`;\n  }\n  return error instanceof Error ? `${error.name}: ${error.message}` : String(error);\n}\n\n/**\n * Classify a backend error and emit exactly one structured log line at the\n * appropriate operational severity.\n *\n * Use this at every backend error-logging boundary instead of hardcoding\n * `logger.error(...)`. It guarantees a single, consistent treatment: expected\n * client conditions stay at `debug`, server faults stay at `error` (with\n * stack), and everything in between is graded by declared severity.\n *\n * @returns the level the line was emitted at (useful for tests / metrics hooks).\n */\nexport function logWildoBackendErrorAtClassifiedSeverity(\n  logger: LevelledLogger,\n  message: string,\n  error: WildoError_Backend,\n  context: Record<string, unknown> = {},\n): BackendErrorLogSeverity {\n  const level = classifyBackendErrorLogSeverity(error);\n\n  // Standard error fields come from the canonical projection; the caller's\n  // `context` carries only boundary-specific extras (method/path, socketId,\n  // jobId, …) and wins on any key overlap.\n  const mergedContext: Record<string, unknown> = {\n    ...projectWildoBackendErrorLogFields(error),\n    ...context,\n  };\n\n  const finalContext: Record<string, unknown> =\n    backendErrorLogSeverityIncludesStack(level) && typeof error.stack === 'string'\n      ? { ...mergedContext, stack: error.stack }\n      : mergedContext;\n\n  // Extension point: this is the natural site to increment an\n  // `auth_token_verification_total{result=\"expired\"}`-style counter (the\n  // RECORD_METRICS backend action) so alerting keys off aggregate rate rather\n  // than individual log lines. Wire a metrics sink here when one is available.\n\n  switch (level) {\n    case BackendErrorLogSeverity.DEBUG:\n      logger.debug(message, finalContext);\n      break;\n    case BackendErrorLogSeverity.INFO:\n      logger.info(message, finalContext);\n      break;\n    case BackendErrorLogSeverity.WARN:\n      logger.warn(message, finalContext);\n      break;\n    case BackendErrorLogSeverity.ERROR:\n      logger.error(message, finalContext);\n      break;\n  }\n\n  return level;\n}\n"]}
+{"version":3,"file":"error-log-level-classification.backend.utils.js","sourceRoot":"","sources":["../../../../src/errors/utils/error-log-level-classification.backend.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAA2B,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2FAA2F,CAAC;AAC5I,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,kFAAkF,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AAEvH;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,uBAKX;AALD,WAAY,uBAAuB;IACjC,0CAAe,CAAA;IACf,wCAAa,CAAA;IACb,wCAAa,CAAA;IACb,0CAAe,CAAA;AACjB,CAAC,EALW,uBAAuB,KAAvB,uBAAuB,QAKlC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAAyB;IAC5E,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAAyB;IACvE,IAAI,oCAAoC,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,uBAAuB,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IAEjF,wDAAwD;IACxD,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACtB,OAAO,uBAAuB,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,2EAA2E;IAC3E,4BAA4B;IAC5B,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvB,KAAK,aAAa,CAAC,GAAG;YACpB,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACvC,KAAK,aAAa,CAAC,MAAM;YACvB,OAAO,uBAAuB,CAAC,IAAI,CAAC;QACtC;YACE,OAAO,uBAAuB,CAAC,KAAK,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAAC,KAA8B;IACjF,OAAO,KAAK,KAAK,uBAAuB,CAAC,KAAK,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAAyB;IACzE,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,mBAAmB,CAAC;YACzB,GAAG,iCAAiC,CAAC,KAAK,CAAC;YAC3C,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE;;;;;;;;;;;;;;;;;eAiBG;YACH,CAAC,wBAAwB,CAAC,EAAE,+BAA+B,CAAC,KAAK,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;QACtC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YACpD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,sBAAsB,KAAK,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wCAAwC,CACtD,MAAsB,EACtB,OAAe,EACf,KAAyB,EACzB,UAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAErD,yEAAyE;IACzE,0EAA0E;IAC1E,yCAAyC;IACzC,MAAM,aAAa,GAA4B;QAC7C,GAAG,iCAAiC,CAAC,KAAK,CAAC;QAC3C,GAAG,OAAO;KACX,CAAC;IAEF,MAAM,YAAY,GAChB,oCAAoC,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC5E,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;QAC1C,CAAC,CAAC,aAAa,CAAC;IAEpB,4DAA4D;IAC5D,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAE7E,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,uBAAuB,CAAC,KAAK;YAChC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,uBAAuB,CAAC,IAAI;YAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM;QACR,KAAK,uBAAuB,CAAC,IAAI;YAC/B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM;QACR,KAAK,uBAAuB,CAAC,KAAK;YAChC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpC,MAAM;IACV,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { ErrorSeverity, isWildoBackendError, type WildoError_Backend } from '@wildo-ai/saas-models';\nimport { isExpiredJwtVerificationFailure } from '~wildo-backend-lib/security/jwt/utils/jwt-verification-error-classification.backend.utils';\nimport {\n  normalizeLogContext,\n  normalizeLogValue,\n} from '~wildo-backend-lib/monitoring/logger/utils/log-value-normalization.backend.utils';\nimport { LOG_SEVERITY_FLOOR_FIELD } from '~wildo-backend-lib/monitoring/logger/utils/log-severity-floor.backend.utils';\n\n/**\n * Backend log severity for an error at a logging boundary.\n *\n * Deliberately NOT the same axis as {@link ErrorSeverity} (the business/impact\n * severity carried on the error). This is the *operational* severity: \"does a\n * human operator need to look at this line?\" — the only question a log level\n * should answer.\n *\n * Values match {@link LevelledLogger} method names so dispatch is a direct\n * lookup, not a translation table.\n */\nexport enum BackendErrorLogSeverity {\n  DEBUG = 'debug',\n  INFO = 'info',\n  WARN = 'warn',\n  ERROR = 'error',\n}\n\n/**\n * Minimal structural logger contract the dispatch helper needs.\n *\n * Kept structural (not a dependency on the concrete `LoggerService`) so the\n * classification/dispatch layer stays free of DI wiring and is trivially\n * unit-testable with a stub. `LoggerService` satisfies this shape.\n */\nexport interface LevelledLogger {\n  debug(message: string, context?: Record<string, unknown>): void;\n  info(message: string, context?: Record<string, unknown>): void;\n  warn(message: string, context?: Record<string, unknown>): void;\n  error(message: string, errorOrContext?: unknown, context?: Record<string, unknown>): void;\n}\n\n/**\n * Expected, self-correcting client conditions that must never be logged as\n * faults.\n *\n * The canonical case: an **expired access token**. This is not an error — it is\n * a normal step in the token lifecycle. The frontend receives the 401, silently\n * calls `/refresh`, and retries. Logging it at `error` (with a stack trace, per\n * request, per expired session) is a category mistake that floods production\n * logs with non-actionable noise and inflates log-ingestion cost.\n *\n * This is the extension point for other genuinely self-healing conditions.\n * Add them here so every logging boundary agrees on what counts as \"expected\" —\n * do NOT special-case them at individual call sites.\n *\n * **Admission rule — both must hold before folding a condition in:**\n * 1. The client recovers with **zero human involvement** (transparent, no\n *    banner, no user decision).\n * 2. The **retried request succeeds unchanged** — same payload, no lost work.\n *\n * Expired token is the textbook case (silent `/refresh` → identical retry\n * works). Deliberately EXCLUDED, with reasons, so nobody re-litigates them:\n * - **Malformed / bad-signature token** — a potential security signal; a spike\n *   is credential-stuffing. Stays at `warn`.\n * - **`VERSION_CONFLICT`** (optimistic concurrency) — fails BOTH tests: it\n *   surfaces a user-facing conflict banner (a human must reconcile) and a blind\n *   retry would clobber the divergent remote state. It is a real concurrent-\n *   edit event and a useful hot-row-contention signal. Stays at `warn`.\n *   Only a future *transparent auto-merge* retry (no user involvement) would\n *   qualify — the current user-mediated flow does not.\n */\nexport function isExpectedSelfHealingClientCondition(error: WildoError_Backend): boolean {\n  return isExpiredJwtVerificationFailure(error);\n}\n\n/**\n * Map a backend error to the operational log severity it deserves.\n *\n * Big-tech observability practice: **log level reflects operator action, not\n * code path.** An exception used as control flow (expired token, validation\n * rejection, not-found) is not an `ERROR` just because it unwound the stack.\n *\n * The mapping is driven by the error's own declared contract — `statusCode` and\n * business {@link ErrorSeverity} from `ERROR_DEFINITIONS` — so new error types\n * inherit correct log levels for free:\n *\n * - **Expected self-healing client conditions** → `debug` (expired token, etc.).\n *   Never a fault; keep them out of the error stream entirely — track via\n *   metrics/counters and alert on *rate*, not individual events.\n * - **Server faults (5xx)** → `error`. A human must look (INTERNAL, DATABASE,\n *   EXTERNAL_SERVICE, CONFIGURATION, UNKNOWN, uncaught/unhandled).\n * - **4xx client errors**, by business severity:\n *   - `LOW` → `debug` — routine client mistakes (VALIDATION, NOT_FOUND,\n *     feature-gating). The caller sent a bad request; that is not our fault.\n *   - `MEDIUM` → `warn` — worth aggregate visibility but not a fault\n *     (AUTHENTICATION/AUTHORIZATION failures, CONFLICT, RATE_LIMIT,\n *     BUSINESS_RULE). A *spike* is the signal (e.g. credential stuffing) — the\n *     rate alert fires, not the individual line.\n *   - `HIGH`+ on a 4xx is unusual → `error`, so it is surfaced rather than\n *     silently swallowed.\n */\nexport function classifyBackendErrorLogSeverity(error: WildoError_Backend): BackendErrorLogSeverity {\n  if (isExpectedSelfHealingClientCondition(error)) {\n    return BackendErrorLogSeverity.DEBUG;\n  }\n\n  const statusCode = typeof error.statusCode === 'number' ? error.statusCode : 500;\n\n  // Server faults always warrant an operator's attention.\n  if (statusCode >= 500) {\n    return BackendErrorLogSeverity.ERROR;\n  }\n\n  // Remaining 4xx: the client's request was wrong. Business severity decides\n  // how loud we are about it.\n  switch (error.severity) {\n    case ErrorSeverity.LOW:\n      return BackendErrorLogSeverity.DEBUG;\n    case ErrorSeverity.MEDIUM:\n      return BackendErrorLogSeverity.WARN;\n    default:\n      return BackendErrorLogSeverity.ERROR;\n  }\n}\n\n/**\n * A stack trace exists to locate an *unexpected* fault. Expected control-flow\n * exceptions (expired token, validation) have no fault to locate — the stack is\n * pure noise and, at scale, real ingestion cost. Attach it only for `error`.\n */\nexport function backendErrorLogSeverityIncludesStack(level: BackendErrorLogSeverity): boolean {\n  return level === BackendErrorLogSeverity.ERROR;\n}\n\n/**\n * Canonical projection of a {@link WildoError_Backend} into flat, structured\n * log fields — the single source of truth for \"what error fields belong on a\n * log line\".\n *\n * Every field becomes a top-level, individually-queryable key (never a\n * pre-rendered blob). Optional fields are omitted when absent so log records\n * stay free of null keys. The stack is deliberately NOT included here: whether\n * to attach it is a per-boundary decision driven by the emitted level (see\n * {@link backendErrorLogSeverityIncludesStack}), so each boundary layers it on\n * top of this projection when appropriate.\n *\n * Used by {@link logWildoBackendErrorAtClassifiedSeverity} (HTTP, batch,\n * websocket-auth boundaries) AND directly by boundaries that own their own\n * operational severity and must NOT adopt the request-style classification —\n * e.g. a permanently dead-lettered queue job is operationally an `error`\n * regardless of the underlying error's business severity, so it keeps its\n * explicit level and merely reuses this projection to restore the full detail.\n */\nexport function projectWildoBackendErrorLogFields(error: WildoError_Backend): Record<string, unknown> {\n  return {\n    errorType: error.type,\n    severity: error.severity,\n    statusCode: error.statusCode,\n    customMessageReference: error.customMessageReference,\n    ...(error.operationPathKey ? { operationPath: error.operationPathKey } : {}),\n    ...(error.correlationId ? { correlationId: error.correlationId } : {}),\n    ...(error.backendActions?.length ? { backendActions: error.backendActions } : {}),\n    ...(error.context ? { context: error.context } : {}),\n  };\n}\n\n/**\n * Project ANY caught value into flat, structured, individually-queryable log\n * fields — the `catch (error)` counterpart to {@link projectWildoBackendErrorLogFields}.\n *\n * A `catch` binding is `unknown`, and the pervasive footgun is\n * `error instanceof Error ? error.message : JSON.stringify(error)`. A\n * {@link WildoError_Backend} is a **plain object, NOT an `Error` instance**, so\n * `instanceof Error` is `false` and every structured backend failure falls to the\n * `else` branch — silently collapsing to `String(error)` (`'[object Object]'`) or,\n * when the fallback is `JSON.stringify`, to a **doubly-escaped JSON string** crammed\n * under a single `error` key (Pino re-escapes the already-serialized blob → the fields\n * become un-greppable). This helper resolves the `WildoError_Backend | Error | unknown`\n * trichotomy once, emitting raw JSON in every case:\n *\n * - {@link WildoError_Backend} → the canonical flat projection (top-level queryable\n *   keys) plus its carried `stack`. A best-effort catch swallows an *unexpected*\n *   failure, so the stack (the fault locator) is always attached here — unlike the\n *   classified HTTP boundary ({@link logWildoBackendErrorAtClassifiedSeverity}), which\n *   gates the stack on the emitted level.\n * - native `Error` → a structured error object including non-enumerable\n *   `name`/`message`/`stack`, `cause`, and extension fields such as Zod\n *   `issues`.\n * - anything else → its JSON-native value under `error`; objects remain\n *   objects, primitives retain their type, and cyclic references become an\n *   explicit `[Circular]` marker.\n *\n * Spread it into a log context:\n * `logger.warn(msg, { ...ctx, ...projectCaughtErrorLogFields(error) })`.\n *\n * Choosing `warn` there is safe BECAUSE of the level floor this projection attaches: if the swallowed\n * value turns out to be a server fault, `LoggerService` emits the record at `error` regardless, and\n * records what the call site asked for under `promotedFromLevel`. Pick the level that describes the\n * expected case; the floor covers the unexpected one.\n *\n * For the same reason, never put a `ZodError`'s own `.message` in a log context\n * — in Zod 4 it IS a `JSON.stringify` blob, so it hits the same double-escaping.\n * Log the structured issues, and use `summarizeZodIssues` from\n * `@wildo-ai/saas-models` when a human-readable one-liner is wanted alongside.\n */\nexport function projectCaughtErrorLogFields(error: unknown): Record<string, unknown> {\n  if (isWildoBackendError(error)) {\n    return normalizeLogContext({\n      ...projectWildoBackendErrorLogFields(error),\n      ...(typeof error.stack === 'string' ? { stack: error.stack } : {}),\n      /*\n       * The LEVEL this record must not fall below, carried so the sink can apply it.\n       *\n       * This projection is the catch-path one, and a catch path chooses its level BY HAND — 213\n       * emissions below `error` across 86 files, measured 2026-09-09 — which is exactly where\n       * `classifyBackendErrorLogSeverity` gets bypassed. A swallowed DATABASE or INTERNAL failure was\n       * emitted at `warn` while these very fields said `severity: CRITICAL`: greppable, and invisible\n       * to an alert keyed on level.\n       *\n       * Carrying the classifier's own answer adds no new judgement — every \"stays at warn\" case it\n       * documents is preserved — and `resolveEmittedLogLevel` only ever RAISES, so a call site that\n       * deliberately logs louder keeps its choice.\n       *\n       * Deliberately NOT added to `projectWildoBackendErrorLogFields`: both of its consumers already\n       * resolve the level on purpose (`logWildoBackendErrorAtClassifiedSeverity` emits AT the\n       * classification; a dead-lettered job owns a louder one), so a floor there would be a field that\n       * can never change an outcome.\n       */\n      [LOG_SEVERITY_FLOOR_FIELD]: classifyBackendErrorLogSeverity(error),\n    });\n  }\n  return { error: normalizeLogValue(error) };\n}\n\n/**\n * One-line human-readable description of ANY caught value.\n *\n * The string counterpart to {@link projectCaughtErrorLogFields}, for the narrow\n * cases where a caught error must become a plain `string` rather than structured\n * log fields — a persisted `failureReason` column, a batch summary's `error`\n * field, a DLQ record. Prefer the structured projection for LOGGING; reach for\n * this only when the destination's contract is genuinely `string`.\n *\n * It exists because the obvious inline form,\n * `err instanceof Error ? err.message : String(err)`, is wrong for the engine's\n * own error type: a {@link WildoError_Backend} is a plain object, NOT an `Error`,\n * so it takes the `String(...)` branch and every structured failure is persisted\n * as the literal `'[object Object]'` — unreadable, and identical for every\n * distinct fault.\n *\n * Resolution order for a `WildoError_Backend`: the human `context.message` when\n * present, else the stable `customMessageReference` code.\n */\nexport function describeCaughtError(error: unknown): string {\n  if (isWildoBackendError(error)) {\n    const detail = error.context?.message;\n    return typeof detail === 'string' && detail.length > 0\n      ? detail\n      : String(error.customMessageReference);\n  }\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * `\"<kind>: <message>\"` for ANY caught value — {@link describeCaughtError} for the\n * destinations that also want to know WHAT KIND of thing failed, not only why.\n *\n * Reach for this instead of the inline `err instanceof Error ? \\`${err.name}: ${err.message}\\`\n * : String(err)` wherever the kind is load-bearing rather than decorative:\n *\n * - a **failure DIGEST / dedup key** — collapsing every distinct fault into one bucket\n *   is worse than an unreadable message, because the bucket is then wrong for every\n *   subsequent decision keyed off it;\n * - a **persisted terminal diagnostic** an operator reads without the log beside it;\n * - a **classifier** that branches on the fault's identity.\n *\n * A {@link WildoError_Backend} has no `name`: its kind is the pair\n * `type` + `customMessageReference`, which is what this renders. Everything else falls\n * through to the native `name`, so the output shape is unchanged for a real `Error`.\n */\nexport function describeCaughtErrorWithKind(error: unknown): string {\n  if (isWildoBackendError(error)) {\n    return `${error.type}/${error.customMessageReference}: ${describeCaughtError(error)}`;\n  }\n  return error instanceof Error ? `${error.name}: ${error.message}` : String(error);\n}\n\n/**\n * Classify a backend error and emit exactly one structured log line at the\n * appropriate operational severity.\n *\n * Use this at every backend error-logging boundary instead of hardcoding\n * `logger.error(...)`. It guarantees a single, consistent treatment: expected\n * client conditions stay at `debug`, server faults stay at `error` (with\n * stack), and everything in between is graded by declared severity.\n *\n * @returns the level the line was emitted at (useful for tests / metrics hooks).\n */\nexport function logWildoBackendErrorAtClassifiedSeverity(\n  logger: LevelledLogger,\n  message: string,\n  error: WildoError_Backend,\n  context: Record<string, unknown> = {},\n): BackendErrorLogSeverity {\n  const level = classifyBackendErrorLogSeverity(error);\n\n  // Standard error fields come from the canonical projection; the caller's\n  // `context` carries only boundary-specific extras (method/path, socketId,\n  // jobId, …) and wins on any key overlap.\n  const mergedContext: Record<string, unknown> = {\n    ...projectWildoBackendErrorLogFields(error),\n    ...context,\n  };\n\n  const finalContext: Record<string, unknown> =\n    backendErrorLogSeverityIncludesStack(level) && typeof error.stack === 'string'\n      ? { ...mergedContext, stack: error.stack }\n      : mergedContext;\n\n  // Extension point: this is the natural site to increment an\n  // `auth_token_verification_total{result=\"expired\"}`-style counter (the\n  // RECORD_METRICS backend action) so alerting keys off aggregate rate rather\n  // than individual log lines. Wire a metrics sink here when one is available.\n\n  switch (level) {\n    case BackendErrorLogSeverity.DEBUG:\n      logger.debug(message, finalContext);\n      break;\n    case BackendErrorLogSeverity.INFO:\n      logger.info(message, finalContext);\n      break;\n    case BackendErrorLogSeverity.WARN:\n      logger.warn(message, finalContext);\n      break;\n    case BackendErrorLogSeverity.ERROR:\n      logger.error(message, finalContext);\n      break;\n  }\n\n  return level;\n}\n"]}

package/dist/esm/errors/utils/rate-limit-environment-relaxation.backend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit-environment-relaxation.backend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/errors/utils/rate-limit-environment-relaxation.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC,OAAO,CAAC;AAEzD;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CAAC,cAAc,EAAE,kBAAkB,GAAG,MAAM,CAIhG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mCAAmC,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,GAAG,MAAM,CAEnH;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAQzD,CAAC;AAEF,2FAA2F;AAC3F,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,cAAc,EAAE,kBAAkB,GACjC,mCAAmC,GAAG,IAAI,CAK5C"}
+{"version":3,"file":"rate-limit-environment-relaxation.backend.utils.d.ts","sourceRoot":"","sources":["../../../../src/errors/utils/rate-limit-environment-relaxation.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC,OAAO,CAAC;AAEzD;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CAAC,cAAc,EAAE,kBAAkB,GAAG,MAAM,CAIhG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mCAAmC,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,GAAG,MAAM,CAEnH;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAQzD,CAAC;AAEF,2FAA2F;AAC3F,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,cAAc,EAAE,kBAAkB,GACjC,mCAAmC,GAAG,IAAI,CAK5C"}

package/dist/esm/errors/utils/rate-limit-environment-relaxation.backend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit-environment-relaxation.backend.utils.js","sourceRoot":"","sources":["../../../../../src/errors/utils/rate-limit-environment-relaxation.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,qCAAqC,CAAC,cAAkC;IACtF,OAAO,cAAc,KAAK,kBAAkB,CAAC,WAAW,IAAI,cAAc,KAAK,kBAAkB,CAAC,IAAI;QACpG,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mCAAmC,CAAC,WAAmB,EAAE,cAAkC;IACzG,OAAO,WAAW,GAAG,qCAAqC,CAAC,cAAc,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,wBAAwB;IACxB,6BAA6B;IAC7B,kCAAkC;IAClC,oCAAoC;IACpC,oCAAoC;IACpC,2BAA2B;IAC3B,2BAA2B;CAC5B,CAAC;AASF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAC7C,cAAkC;IAElC,MAAM,UAAU,GAAG,qCAAqC,CAAC,cAAc,CAAC,CAAC;IACzE,OAAO,UAAU,KAAK,CAAC;QACrB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,4BAA4B,EAAE,CAAC;AACjF,CAAC","sourcesContent":["/**\n * Non-production relaxation of ABUSE-THROTTLE maxima — the single seam.\n *\n * ## Why this module exists\n *\n * Every rate-limit maximum in the engine is authored for a PRODUCTION threat model\n * (credential stuffing, registration spam, enumeration, LLM-spend abuse, unmetered\n * egress). Applied unchanged, those same numbers turn ordinary local development and\n * automated e2e/integration runs — which legitimately fire the same endpoint from the\n * same IP, the same email and the same principal dozens of times in seconds — into a\n * 429 flood.\n *\n * The relaxation used to live as a private constant inside\n * `RateLimitBackendService`, so it reached only that service's three surfaces\n * (`checkRateLimit`, `checkPolicy`, `checkPolicyForVariant`). Five other enforcement\n * sites carry their own hard-coded maxima and never saw it. The one that hurt most in\n * practice was the machine-credential failure guard\n * (`assertMachineAuthAttemptWithinRate`, 50 failures / 600 s / source IP): on a dev\n * machine every process shares `127.0.0.1`, so fifty failed `sk_*` / `oc_*`\n * presentations from ANY source lock out every machine-credential path for ten\n * minutes — including the ones a developer is actively debugging.\n *\n * This module is that single seam. Import it at every abuse-throttle site rather than\n * re-deriving an environment branch locally; a second copy of the branch is how the\n * first one drifted (see `.claude/rules/invariant-call-site-enumeration.md`).\n *\n * ## What it deliberately does NOT do\n *\n * - **It does not bypass enforcement.** The counters still increment through the real\n *   Redis `INCR` + `EXPIRE` path, so a genuine regression (windows not incrementing,\n *   keys colliding, TTL never set) still reproduces locally. Only the ceiling moves.\n * - **It does not touch `STAGING` / `PRODUCTION`.** {@link resolveRateLimitEnvironmentMultiplier}\n *   returns `1` for every environment other than `DEVELOPMENT` and `TEST`, so the\n *   authored number IS the enforced number wherever the threat model is real.\n * - **It must not be applied to business-semantic counters.** A counter whose maximum\n *   is a product or tenant policy — SSO grace logins (`enforcement.graceLoginAttempts`),\n *   trial quotas, plan entitlements — is not an abuse throttle. Multiplying it would\n *   change observable product behavior in dev/test and make local runs disagree with\n *   production semantics, which is the opposite of what this exists for. The same goes\n *   for counters used as audit/log DE-DUPLICATION windows (the authorization-denial\n *   audit sampler, the SAML assertion warning de-dup): relaxing those produces an\n *   audit/log flood, not headroom.\n *\n * @see `.claude/rules/invariant-call-site-enumeration.md` — the per-site enumeration\n *   discipline that produced this module.\n */\n\nimport { RuntimeEnvironment } from '@wildo-ai/saas-models';\n\n/**\n * Factor applied to an abuse-throttle maximum in `DEVELOPMENT` / `TEST`.\n *\n * Large on purpose. The goal is that no honest local or automated run can reach a\n * ceiling, while the counter itself still exercises the real enforcement path. A\n * smaller factor (10×, 100×) merely moves the flood later into a long e2e suite,\n * which is the worst of both worlds: still flaky, still hard to attribute.\n */\nexport const NON_PRODUCTION_RATE_LIMIT_MULTIPLIER = 1000;\n\n/**\n * `NON_PRODUCTION_RATE_LIMIT_MULTIPLIER` in `DEVELOPMENT` / `TEST`, `1` everywhere\n * else. The single branch point for the relaxation.\n *\n * @param applicationEnv - the resolved runtime environment, normally\n *   `AppConfigurationService.applicationEnv`.\n */\nexport function resolveRateLimitEnvironmentMultiplier(applicationEnv: RuntimeEnvironment): number {\n  return applicationEnv === RuntimeEnvironment.DEVELOPMENT || applicationEnv === RuntimeEnvironment.TEST\n    ? NON_PRODUCTION_RATE_LIMIT_MULTIPLIER\n    : 1;\n}\n\n/**\n * Scale one abuse-throttle maximum for the current environment. The canonical call\n * shape at an enforcement site:\n *\n * ```ts\n * const effectiveMax = relaxAbuseThrottleMaxForEnvironment(MACHINE_AUTH_FAILURE_MAX, applicationEnv);\n * if (failureCount >= effectiveMax) { … }\n * ```\n *\n * Compare the LIVE count against the returned value — never scale the count itself,\n * and never scale the window length. Shortening the window in dev would make a local\n * run stop reproducing the production timing behavior; raising the ceiling does not.\n *\n * @param authoredMax - the production-authored maximum for the window.\n * @param applicationEnv - the resolved runtime environment.\n * @returns `authoredMax` in `STAGING` / `PRODUCTION`; the relaxed ceiling otherwise.\n */\nexport function relaxAbuseThrottleMaxForEnvironment(authoredMax: number, applicationEnv: RuntimeEnvironment): number {\n  return authoredMax * resolveRateLimitEnvironmentMultiplier(applicationEnv);\n}\n\n/**\n * Every abuse throttle this relaxation reaches, named so the boot announcement can list them (#499).\n *\n * A line saying \"abuse limits relaxed\" would be accurate and still misleading: an operator would\n * reasonably read it as ALL of them, and it is not — a counter whose maximum is a product or tenant\n * policy is deliberately untouched, as is any counter used as an audit de-duplication window (see the\n * module header). Naming the reached set is what makes the announcement actionable rather than\n * atmospheric.\n *\n * Maintained by hand against the import sites, which is a list re-stating another file's population —\n * exactly the shape `invariant-call-site-enumeration.md` warns about. It is tolerable ONLY because it\n * feeds a log line rather than a decision: a stale entry here misinforms an operator, it does not\n * change a ceiling. Keep it in step when a site is added, and prefer deleting it over letting it rot.\n */\nexport const RELAXED_ABUSE_THROTTLE_SITES: readonly string[] = [\n  'HTTP perimeter limiter',\n  'WebSocket per-event limiter',\n  'machine-credential failure guard',\n  'external-turn throttle (A2A / MCP)',\n  'authorization-denial audit sampler',\n  'webhook endpoint-test cap',\n  'rate-limit policy service',\n];\n\n/** What a boot announcement should say, or `null` when the environment relaxes nothing. */\nexport interface AbuseThrottleRelaxationAnnouncement {\n  readonly applicationEnv: RuntimeEnvironment;\n  readonly multiplier: number;\n  readonly relaxedSites: readonly string[];\n}\n\n/**\n * Describe the relaxation in force, for an unmissable line at startup (#499).\n *\n * The relaxation is keyed on the resolved environment and nothing else — a deliberate decision, so\n * there is one source of truth for \"what kind of host is this\" rather than a second flag that can\n * disagree with it. The residual risk is that a host which merely REPORTS development (a demonstration\n * box, a staging-like environment mis-declared) runs with maxima multiplied by a thousand. That risk is\n * accepted, and this function is the whole of what makes it visible instead of silent.\n *\n * Returns `null` in `STAGING` / `PRODUCTION`, so a caller logs nothing where nothing is relaxed.\n */\nexport function describeAbuseThrottleRelaxation(\n  applicationEnv: RuntimeEnvironment,\n): AbuseThrottleRelaxationAnnouncement | null {\n  const multiplier = resolveRateLimitEnvironmentMultiplier(applicationEnv);\n  return multiplier === 1\n    ? null\n    : { applicationEnv, multiplier, relaxedSites: RELAXED_ABUSE_THROTTLE_SITES };\n}\n"]}
+{"version":3,"file":"rate-limit-environment-relaxation.backend.utils.js","sourceRoot":"","sources":["../../../../src/errors/utils/rate-limit-environment-relaxation.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,qCAAqC,CAAC,cAAkC;IACtF,OAAO,cAAc,KAAK,kBAAkB,CAAC,WAAW,IAAI,cAAc,KAAK,kBAAkB,CAAC,IAAI;QACpG,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mCAAmC,CAAC,WAAmB,EAAE,cAAkC;IACzG,OAAO,WAAW,GAAG,qCAAqC,CAAC,cAAc,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,wBAAwB;IACxB,6BAA6B;IAC7B,kCAAkC;IAClC,oCAAoC;IACpC,oCAAoC;IACpC,2BAA2B;IAC3B,2BAA2B;CAC5B,CAAC;AASF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,+BAA+B,CAC7C,cAAkC;IAElC,MAAM,UAAU,GAAG,qCAAqC,CAAC,cAAc,CAAC,CAAC;IACzE,OAAO,UAAU,KAAK,CAAC;QACrB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,4BAA4B,EAAE,CAAC;AACjF,CAAC","sourcesContent":["/**\n * Non-production relaxation of ABUSE-THROTTLE maxima — the single seam.\n *\n * ## Why this module exists\n *\n * Every rate-limit maximum in the engine is authored for a PRODUCTION threat model\n * (credential stuffing, registration spam, enumeration, LLM-spend abuse, unmetered\n * egress). Applied unchanged, those same numbers turn ordinary local development and\n * automated e2e/integration runs — which legitimately fire the same endpoint from the\n * same IP, the same email and the same principal dozens of times in seconds — into a\n * 429 flood.\n *\n * The relaxation used to live as a private constant inside\n * `RateLimitBackendService`, so it reached only that service's three surfaces\n * (`checkRateLimit`, `checkPolicy`, `checkPolicyForVariant`). Five other enforcement\n * sites carry their own hard-coded maxima and never saw it. The one that hurt most in\n * practice was the machine-credential failure guard\n * (`assertMachineAuthAttemptWithinRate`, 50 failures / 600 s / source IP): on a dev\n * machine every process shares `127.0.0.1`, so fifty failed `sk_*` / `oc_*`\n * presentations from ANY source lock out every machine-credential path for ten\n * minutes — including the ones a developer is actively debugging.\n *\n * This module is that single seam. Import it at every abuse-throttle site rather than\n * re-deriving an environment branch locally; a second copy of the branch is how the\n * first one drifted (see `.claude/rules/invariant-call-site-enumeration.md`).\n *\n * ## What it deliberately does NOT do\n *\n * - **It does not bypass enforcement.** The counters still increment through the real\n *   Redis `INCR` + `EXPIRE` path, so a genuine regression (windows not incrementing,\n *   keys colliding, TTL never set) still reproduces locally. Only the ceiling moves.\n * - **It does not touch `STAGING` / `PRODUCTION`.** {@link resolveRateLimitEnvironmentMultiplier}\n *   returns `1` for every environment other than `DEVELOPMENT` and `TEST`, so the\n *   authored number IS the enforced number wherever the threat model is real.\n * - **It must not be applied to business-semantic counters.** A counter whose maximum\n *   is a product or tenant policy — SSO grace logins (`enforcement.graceLoginAttempts`),\n *   trial quotas, plan entitlements — is not an abuse throttle. Multiplying it would\n *   change observable product behavior in dev/test and make local runs disagree with\n *   production semantics, which is the opposite of what this exists for. The same goes\n *   for counters used as audit/log DE-DUPLICATION windows (the authorization-denial\n *   audit sampler, the SAML assertion warning de-dup): relaxing those produces an\n *   audit/log flood, not headroom.\n *\n * @see `.claude/rules/invariant-call-site-enumeration.md` — the per-site enumeration\n *   discipline that produced this module.\n */\n\nimport { RuntimeEnvironment } from '@wildo-ai/saas-models';\n\n/**\n * Factor applied to an abuse-throttle maximum in `DEVELOPMENT` / `TEST`.\n *\n * Large on purpose. The goal is that no honest local or automated run can reach a\n * ceiling, while the counter itself still exercises the real enforcement path. A\n * smaller factor (10×, 100×) merely moves the flood later into a long e2e suite,\n * which is the worst of both worlds: still flaky, still hard to attribute.\n */\nexport const NON_PRODUCTION_RATE_LIMIT_MULTIPLIER = 1000;\n\n/**\n * `NON_PRODUCTION_RATE_LIMIT_MULTIPLIER` in `DEVELOPMENT` / `TEST`, `1` everywhere\n * else. The single branch point for the relaxation.\n *\n * @param applicationEnv - the resolved runtime environment, normally\n *   `AppConfigurationService.applicationEnv`.\n */\nexport function resolveRateLimitEnvironmentMultiplier(applicationEnv: RuntimeEnvironment): number {\n  return applicationEnv === RuntimeEnvironment.DEVELOPMENT || applicationEnv === RuntimeEnvironment.TEST\n    ? NON_PRODUCTION_RATE_LIMIT_MULTIPLIER\n    : 1;\n}\n\n/**\n * Scale one abuse-throttle maximum for the current environment. The canonical call\n * shape at an enforcement site:\n *\n * ```ts\n * const effectiveMax = relaxAbuseThrottleMaxForEnvironment(MACHINE_AUTH_FAILURE_MAX, applicationEnv);\n * if (failureCount >= effectiveMax) { … }\n * ```\n *\n * Compare the LIVE count against the returned value — never scale the count itself,\n * and never scale the window length. Shortening the window in dev would make a local\n * run stop reproducing the production timing behavior; raising the ceiling does not.\n *\n * @param authoredMax - the production-authored maximum for the window.\n * @param applicationEnv - the resolved runtime environment.\n * @returns `authoredMax` in `STAGING` / `PRODUCTION`; the relaxed ceiling otherwise.\n */\nexport function relaxAbuseThrottleMaxForEnvironment(authoredMax: number, applicationEnv: RuntimeEnvironment): number {\n  return authoredMax * resolveRateLimitEnvironmentMultiplier(applicationEnv);\n}\n\n/**\n * Every abuse throttle this relaxation reaches, named so the boot announcement can list them (#499).\n *\n * A line saying \"abuse limits relaxed\" would be accurate and still misleading: an operator would\n * reasonably read it as ALL of them, and it is not — a counter whose maximum is a product or tenant\n * policy is deliberately untouched, as is any counter used as an audit de-duplication window (see the\n * module header). Naming the reached set is what makes the announcement actionable rather than\n * atmospheric.\n *\n * Maintained by hand against the import sites, which is a list re-stating another file's population —\n * exactly the shape `invariant-call-site-enumeration.md` warns about. It is tolerable ONLY because it\n * feeds a log line rather than a decision: a stale entry here misinforms an operator, it does not\n * change a ceiling. Keep it in step when a site is added, and prefer deleting it over letting it rot.\n */\nexport const RELAXED_ABUSE_THROTTLE_SITES: readonly string[] = [\n  'HTTP perimeter limiter',\n  'WebSocket per-event limiter',\n  'machine-credential failure guard',\n  'external-turn throttle (A2A / MCP)',\n  'authorization-denial audit sampler',\n  'webhook endpoint-test cap',\n  'rate-limit policy service',\n];\n\n/** What a boot announcement should say, or `null` when the environment relaxes nothing. */\nexport interface AbuseThrottleRelaxationAnnouncement {\n  readonly applicationEnv: RuntimeEnvironment;\n  readonly multiplier: number;\n  readonly relaxedSites: readonly string[];\n}\n\n/**\n * Describe the relaxation in force, for an unmissable line at startup (#499).\n *\n * The relaxation is keyed on the resolved environment and nothing else — a deliberate decision, so\n * there is one source of truth for \"what kind of host is this\" rather than a second flag that can\n * disagree with it. The residual risk is that a host which merely REPORTS development (a demonstration\n * box, a staging-like environment mis-declared) runs with maxima multiplied by a thousand. That risk is\n * accepted, and this function is the whole of what makes it visible instead of silent.\n *\n * Returns `null` in `STAGING` / `PRODUCTION`, so a caller logs nothing where nothing is relaxed.\n */\nexport function describeAbuseThrottleRelaxation(\n  applicationEnv: RuntimeEnvironment,\n): AbuseThrottleRelaxationAnnouncement | null {\n  const multiplier = resolveRateLimitEnvironmentMultiplier(applicationEnv);\n  return multiplier === 1\n    ? null\n    : { applicationEnv, multiplier, relaxedSites: RELAXED_ABUSE_THROTTLE_SITES };\n}\n"]}

package/dist/esm/external-data/batches/external-data-pipeline-scheduled-run.batch.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-pipeline-scheduled-run.batch.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-data/batches/external-data-pipeline-scheduled-run.batch.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,4FAA4F,CAAC;AAa/I,QAAA,MAAM,4CAA4C;;;;;;;;;iBAWhD,CAAC;AAEH,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAElH,wBAAgB,2CAA2C,IAAI,UAAU,CAAC,OAAO,iCAAiC,CAAC,CAyDlH"}
+{"version":3,"file":"external-data-pipeline-scheduled-run.batch.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/external-data/batches/external-data-pipeline-scheduled-run.batch.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,4FAA4F,CAAC;AAa/I,QAAA,MAAM,4CAA4C;;;;;;;;;iBAWhD,CAAC;AAEH,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAElH,wBAAgB,2CAA2C,IAAI,UAAU,CAAC,OAAO,iCAAiC,CAAC,CAyDlH"}

package/dist/esm/external-data/controllers/external-data-admin.backend.contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-admin.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../../src/external-data/controllers/external-data-admin.backend.contracts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mHAAmH;AACnH;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAG,0BAAmC,CAAC;AAEnF,2FAA2F;AAC3F,eAAO,MAAM,kCAAkC,EAAG,gBAAyB,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,sCAAsC,EAAG,+BAAwC,CAAC;AAE/F,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B;IACxC,oFAAoF;;IAEpF;;;;;;;OAOG;;CAEK,CAAC;AAEX,MAAM,MAAM,kCAAkC,GAC5C,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,OAAO,6BAA6B,CAAC,CAAC;AACrF,gEAAgE"}
+{"version":3,"file":"external-data-admin.backend.contracts.d.ts","sourceRoot":"","sources":["../../../../src/external-data/controllers/external-data-admin.backend.contracts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mHAAmH;AACnH;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAG,0BAAmC,CAAC;AAEnF,2FAA2F;AAC3F,eAAO,MAAM,kCAAkC,EAAG,gBAAyB,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,sCAAsC,EAAG,+BAAwC,CAAC;AAE/F,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B;IACxC,oFAAoF;;IAEpF;;;;;;;OAOG;;CAEK,CAAC;AAEX,MAAM,MAAM,kCAAkC,GAC5C,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,OAAO,6BAA6B,CAAC,CAAC;AACrF,gEAAgE"}

package/dist/esm/external-data/controllers/external-data-admin.backend.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-admin.backend.controller.d.ts","sourceRoot":"","sources":["../../../../../src/external-data/controllers/external-data-admin.backend.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,kBAAkB,CAAC;AAO1B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAKhK,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6EAA6E,CAAC;AAczI,qBACa,kCAAmC,SAAQ,gCAAgC;IAMpF,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBARL,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EAEhE,kBAAkB,EAAE,qCAAqC,EAEzD,oBAAoB,EAAE,yCAAyC,EAE/D,uBAAuB,EAAE,qCAAqC;IAKjF,gFAAgF;IACzE,sBAAsB,IAAI,MAAM;IAIvC,SAAS,CAAC,WAAW,IAAI,IAAI;IAgB7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAgC1B;;;;;;OAMG;YACW,mBAAmB;IAmCjC,wEAAwE;YAC1D,iBAAiB;CA6BhC"}
+{"version":3,"file":"external-data-admin.backend.controller.d.ts","sourceRoot":"","sources":["../../../../src/external-data/controllers/external-data-admin.backend.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,kBAAkB,CAAC;AAO1B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AAKhK,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6EAA6E,CAAC;AAczI,qBACa,kCAAmC,SAAQ,gCAAgC;IAMpF,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBARL,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EAEhE,kBAAkB,EAAE,qCAAqC,EAEzD,oBAAoB,EAAE,yCAAyC,EAE/D,uBAAuB,EAAE,qCAAqC;IAKjF,gFAAgF;IACzE,sBAAsB,IAAI,MAAM;IAIvC,SAAS,CAAC,WAAW,IAAI,IAAI;IAgB7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAgC1B;;;;;;OAMG;YACW,mBAAmB;IAmCjC,wEAAwE;YAC1D,iBAAiB;CA6BhC"}

package/dist/esm/external-data/external-data-extraction-source.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-extraction-source.backend.d.ts","sourceRoot":"","sources":["../../../../src/external-data/external-data-extraction-source.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6FAA6F,CAAC;AAKrI,kGAAkG;AAClG,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC9F;;;;;;;;OAQG;IACH,qBAAqB,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC7C;AAED,uFAAuF;AACvF,qBAAa,mCAAoC,YAAW,4BAA4B;IAKpF,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IANnC,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoB;gBAGpC,WAAW,EAAE,+BAA+B,EAC5C,UAAU,EAAE,iBAAiB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC;IAS7C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAe1G;;;;;;;OAOG;IACU,qBAAqB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YASzC,gBAAgB;YAwBhB,eAAe;CA+B9B"}
+{"version":3,"file":"external-data-extraction-source.backend.d.ts","sourceRoot":"","sources":["../../../src/external-data/external-data-extraction-source.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6FAA6F,CAAC;AAKrI,kGAAkG;AAClG,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC9F;;;;;;;;OAQG;IACH,qBAAqB,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC7C;AAED,uFAAuF;AACvF,qBAAa,mCAAoC,YAAW,4BAA4B;IAKpF,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IANnC,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoB;gBAGpC,WAAW,EAAE,+BAA+B,EAC5C,UAAU,EAAE,iBAAiB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC;IAS7C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAe1G;;;;;;;OAOG;IACU,qBAAqB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YASzC,gBAAgB;YAwBhB,eAAe;CA+B9B"}

package/dist/esm/external-data/external-data-models.exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-models.exports.d.ts","sourceRoot":"","sources":["../../../../src/external-data/external-data-models.exports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,uDAAuD,CAAC;AACtE,cAAc,mCAAmC,CAAC"}
+{"version":3,"file":"external-data-models.exports.d.ts","sourceRoot":"","sources":["../../../src/external-data/external-data-models.exports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,uDAAuD,CAAC;AACtE,cAAc,mCAAmC,CAAC"}

package/dist/esm/external-data/external-data-pipeline-run.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-pipeline-run.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/external-data/external-data-pipeline-run.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AASH,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAML,qBAAqB,EAGtB,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qEAAqE,CAAC;AAExG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mFAAmF,CAAC;AACtI,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sFAAsF,CAAC;AAC5I,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAMlG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6GAA6G,CAAC;AAC5J,OAAO,EAEL,KAAK,mCAAmC,EAEzC,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAuC,KAAK,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAanI,MAAM,WAAW,4BAA4B;IAC3C,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,aAAa,EAAE,qBAAqB,CAAC,YAAY,GAAG,qBAAqB,CAAC,eAAe,CAAC;IAC1F,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,CAAC;IAC/D,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrC,4FAA4F;IAC5F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gGAAgG;AAChG,MAAM,MAAM,mCAAmC,GAAG,CAChD,WAAW,EAAE,+BAA+B,EAC5C,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC,KACnC,4BAA4B,CAAC;AAElC,qBACa,qCAAqC;IAKX,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IACd,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IACV,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAC1G;;;;OAIG;IACsE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACpH;;;;OAIG;IASU,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAChD,8FAA8F;IACjF,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACtD;;;;;;;;;;;;;;;;;OAiBG;IAEH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC;;;OAGG;IAEH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IA1DlC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;gBAGf,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACzB,oBAAoB,EAAE,yCAAyC,EAC1E,iBAAiB,EAAE,+BAA+B,EAC3D,UAAU,EAAE,4BAA4B,EACrC,aAAa,EAAE,+BAA+B,EAC1B,uBAAuB,EAAE,qCAAqC;IACjJ;;;;OAIG;IACuF,yBAAyB,CAAC,EAAE,OAAO;IAC7H;;;;OAIG;IAS2B,iBAAiB,CAAC,EAAE,wBAAwB;IAC1E,8FAA8F;IAChE,uBAAuB,CAAC,EAAE,mCAAmC;IAC3F;;;;;;;;;;;;;;;;;OAiBG;IAEc,gBAAgB,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;IACrF;;;OAGG;IAEc,cAAc,CAAC,EAAE,mCAAmC;IAMvE,mFAAmF;IACtE,WAAW,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAerG,4GAA4G;IACrG,qBAAqB,IAAI,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,+BAA+B,CAAA;KAAE,CAAC;YAU/F,UAAU;IA8HxB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAsB9B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAWvB;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,yBAAyB;YAWnB,6BAA6B;IAY3C,OAAO,CAAC,aAAa;IAQrB;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;CA2CnC"}
+{"version":3,"file":"external-data-pipeline-run.backend.service.d.ts","sourceRoot":"","sources":["../../../src/external-data/external-data-pipeline-run.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AASH,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAML,qBAAqB,EAGtB,MAAM,iEAAiE,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qEAAqE,CAAC;AAExG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mFAAmF,CAAC;AACtI,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sFAAsF,CAAC;AAC5I,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAMlG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6GAA6G,CAAC;AAC5J,OAAO,EAEL,KAAK,mCAAmC,EAEzC,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAuC,KAAK,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AAanI,MAAM,WAAW,4BAA4B;IAC3C,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,aAAa,EAAE,qBAAqB,CAAC,YAAY,GAAG,qBAAqB,CAAC,eAAe,CAAC;IAC1F,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,iBAAiB,CAAC;IAC/D,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrC,4FAA4F;IAC5F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gGAAgG;AAChG,MAAM,MAAM,mCAAmC,GAAG,CAChD,WAAW,EAAE,+BAA+B,EAC5C,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC,KACnC,4BAA4B,CAAC;AAElC,qBACa,qCAAqC;IAKX,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IACd,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IACV,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAC1G;;;;OAIG;IACsE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACpH;;;;OAIG;IASU,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAChD,8FAA8F;IACjF,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACtD;;;;;;;;;;;;;;;;;OAiBG;IAEH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC;;;OAGG;IAEH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IA1DlC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;gBAGf,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACzB,oBAAoB,EAAE,yCAAyC,EAC1E,iBAAiB,EAAE,+BAA+B,EAC3D,UAAU,EAAE,4BAA4B,EACrC,aAAa,EAAE,+BAA+B,EAC1B,uBAAuB,EAAE,qCAAqC;IACjJ;;;;OAIG;IACuF,yBAAyB,CAAC,EAAE,OAAO;IAC7H;;;;OAIG;IAS2B,iBAAiB,CAAC,EAAE,wBAAwB;IAC1E,8FAA8F;IAChE,uBAAuB,CAAC,EAAE,mCAAmC;IAC3F;;;;;;;;;;;;;;;;;OAiBG;IAEc,gBAAgB,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;IACrF;;;OAGG;IAEc,cAAc,CAAC,EAAE,mCAAmC;IAMvE,mFAAmF;IACtE,WAAW,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAerG,4GAA4G;IACrG,qBAAqB,IAAI,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,+BAA+B,CAAA;KAAE,CAAC;YAU/F,UAAU;IA8HxB;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAsB9B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAWvB;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,yBAAyB;YAWnB,6BAA6B;IAY3C,OAAO,CAAC,aAAa;IAQrB;;;;;;;;OAQG;IACH,OAAO,CAAC,0BAA0B;CA2CnC"}

package/dist/esm/external-data/external-data-pipeline-run.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-pipeline-run.backend.service.js","sourceRoot":"","sources":["../../../../src/external-data/external-data-pipeline-run.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;;;;;;;;;;;;;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,SAAS,GAEV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GAEzB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,GAIpB,MAAM,iEAAiE,CAAC;AAWzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AAE1G,OAAO,EAAE,iBAAiB,EAAE,MAAM,6FAA6F,CAAC;AAChI,OAAO,EAAE,sCAAsC,EAAE,MAAM,iGAAiG,CAAC;AAEzJ,OAAO,EACL,oBAAoB,EAEpB,oBAAoB,GACrB,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAqC,MAAM,2CAA2C,CAAC;AACnI;;;;;;GAMG;AACH,OAAO,EAAE,yBAAyB,EAAiC,MAAM,mCAAmC,CAAC;AAE7G,yFAAyF;AACzF,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwC1B,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAKM;IACa;IACe;IACX;IACT;IACG;IACoB;IAMO;IAc5D;IAEA;IAoBb;IAMA;IA1DF,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,QAAQ,CAA4C;IAErE,YACsD,MAAqB,EACR,YAAwC,EACzB,oBAA+D,EAC1E,iBAAkD,EAC3D,UAAwC,EACrC,aAA8C,EAC1B,uBAA8D,EAMvD,yBAAmC,EAc/F,iBAA4C,EAE5C,uBAA6D,EAoB1E,gBAAoE,EAMpE,cAAoD;QAtDjB,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QACzB,yBAAoB,GAApB,oBAAoB,CAA2C;QAC1E,sBAAiB,GAAjB,iBAAiB,CAAiC;QAC3D,eAAU,GAAV,UAAU,CAA8B;QACrC,kBAAa,GAAb,aAAa,CAAiC;QAC1B,4BAAuB,GAAvB,uBAAuB,CAAuC;QAMvD,8BAAyB,GAAzB,yBAAyB,CAAU;QAc/F,sBAAiB,GAAjB,iBAAiB,CAA2B;QAE5C,4BAAuB,GAAvB,uBAAuB,CAAsC;QAoB1E,qBAAgB,GAAhB,gBAAgB,CAAoD;QAMpE,mBAAc,GAAd,cAAc,CAAsC;QAErE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,mFAAmF;IAC5E,KAAK,CAAC,WAAW,CAAC,KAAmC;QAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;gBAC7D,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;aACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,4GAA4G;IACrG,qBAAqB;QAC1B,OAAQ,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAe;aAC3D,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YACxB,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,YAA4B,CAErF,CAAC;YACd,OAAO,aAAa,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxH,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAmC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;QAEjE,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,YAA4B,CAEjG,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,EAAE,oBAAoB,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,wCAAwC;gBAC5F,OAAO,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,YAAY,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QAC9F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;YAC3F,YAAY,EAAE,mBAAmB,CAAC,4BAA4B;YAC9D,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;SAClD,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAC9D,mBAAmB,CAAC,4BAAuD,EAC3E,YAAY,CACb,CAAC;QAEF,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAA4B,YAAY,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE;gBAC5C,oBAAoB,EAAE,YAAY;gBAClC,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;aACZ,CAAC,CAAyC,CAAC;QACvD,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;QACjD,MAAM,aAAa,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAEtG,+EAA+E;QAC/E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACzH,qFAAqF;QACrF,mEAAmE;QACnE,IAAI,CAAC;YACH,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,YAAY,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,MAAM,aAAa,GAAmC,EAAE,CAAC;QACzD,IAAI,MAAM,GAAG,cAAc,CAAC;QAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,OAAO,aAAa,CAAC,MAAM,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACjH,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,yBAAyB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA0B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxD,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE;YACxE,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC,CAAC;QAEJ,+EAA+E;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG;YAClB,IAAI;YACJ,OAAO,EAAE,EAAE,WAAW,EAAE,mBAAmB,CAAC,oBAA6B,EAAE;YAC3E,aAAa;YACb,KAAK;YACL,OAAO;YACP,iBAAiB;YACjB,iBAAiB,EAAE,iBAAiB,YAAY,EAAE;YAClD,eAAe;SAChB,CAAC;QACF,MAAM,UAAU,GAAG,YAAY;YAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAEzD,+EAA+E;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC;QAC3C,4FAA4F;QAC5F,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC;QAC7C,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE;YAC9C,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC9C,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;YAClD,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC;YAChC,cAAc,EAAE;gBACd,aAAa,EAAE,YAAY;gBAC3B,aAAa,EAAE,aAAa,CAAC,MAAM;gBACnC,YAAY,EAAE,UAAU,CAAC,MAAM;gBAC/B,UAAU;gBACV,SAAS;gBACT,UAAU;aACX;SACO,CAAC,CAAC;QAEZ,IAAI,CAAC,0BAA0B,CAAC,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE;YAC1E,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc;YACzD,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,gBAAgB,EAAE,OAAO,CAAC,MAAM;YAChC,UAAU;YACV,SAAS;YACT,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC9C,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAC5B,YAAoB,EACpB,WAA4C,EAC5C,YAAqB;QAErB,MAAM,aAAa,GAAG;YACpB,WAAW,CAAC,mBAAmB;YAC/B,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACxD,CAAC;QACF,OAAO;YACL,OAAO,EAAE,iBAAiB,YAAY,EAAE;YACxC,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE;YAC9C,YAAY;YACZ,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;YACrE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO;YAC7D,OAAO,EAAE,CAAC;YACV,aAAa;YACb,iBAAiB,EAAE,yBAAyB,CAAC,OAAO;YACpD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,YAAsC;QAC5D,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,wBAAwB,CAAC,MAAM;gBAClC,OAAO,wBAAwB,CAAC,MAAM,CAAC;YACzC,KAAK,wBAAwB,CAAC,SAAS;gBACrC,OAAO,wBAAwB,CAAC,SAAS,CAAC;YAC5C,KAAK,wBAAwB,CAAC,MAAM;gBAClC,OAAO,wBAAwB,CAAC,MAAM,CAAC;QAC3C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,WAA4C;QACxE,OAAO,WAAW,CAAC,UAAU,KAAK,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;IACxI,CAAC;IAEO,yBAAyB,CAC/B,WAA4C,EAC5C,eAAsC;QAEtC,MAAM,UAAU,GAAG,IAAI,iBAAiB,CACtC,WAAW,CAAC,OAAO,EACnB,IAAI,sCAAsC,CAAC,IAAI,CAAC,yBAAkC,CAAC,CACpF,CAAC;QACF,OAAO,IAAI,mCAAmC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,eAAsC;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,cAA8B,EAAE,eAAe,CAAC,CAAC;QAChH,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAkB,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;QACvF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE;gBACtE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gBAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,iFAAiF,EAAE;aACxG,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC7G,CAAC;IAEO,aAAa,CAAC,YAAoB,EAAE,UAAsC;QAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,YAAY,MAAM,UAAU,CAAC,MAAM,4DAA4D,EAAE;YAC3I,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;YACtD,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,qBAAqB;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,0BAA0B,CAChC,gBAAuC,EACvC,YAAoB,EACpB,WAA4C,EAC5C,MAA+E;QAE/E,IAAI,IAAiC,CAAC;QACtC,IAAI,CAAC;YACH,sFAAsF;YACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,IAAI,CAAC,gBAAgB,CAAC;YAC7E,MAAM,IAAI,GAAG,gBAAgB,EAAE,2BAA2B,CAAC;YAC3D,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBAChD,YAAY;oBACZ,mBAAmB,EAAE,yBAAyB;oBAC9C,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW;oBAC5C,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;oBAC9C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO;oBACpC,QAAQ,EAAE,MAAM,CAAC,aAAa;oBAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;iBACpC,EAAE,gBAAgB,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6FAA6F;YAC7F,0EAA0E;QAC5E,CAAC;QAED,oBAAoB,CAAC;YACnB,WAAW,EAAE,oBAAoB,CAAC,4BAA4B;YAC9D,IAAI;YACJ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,wFAAwF;YACxF,qFAAqF;YACrF,OAAO,EAAE;gBACP,oBAAoB,EAAE,YAAY;gBAClC,mBAAmB,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW;gBACpD,uBAAuB,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;gBACtD,gBAAgB,EAAE,MAAM,CAAC,aAAa;aACvC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAlWY,qCAAqC;IADjD,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IACzC,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAC5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAMhE,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAcvE,WAAA,SAAS,EAAE,CAAA;IAEX,WAAA,SAAS,EAAE,CAAA;IAmBX,YAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAMvD,YAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;;GA1D7C,qCAAqC,CAkWjD","sourcesContent":["/**\n * The ETL pipeline RUN service (partial-resource paper v3.1, PR-5/PR-6/PR-9/PR-10/PR-12) — the\n * orchestrator that turns a declared `externalDataPipeline` into destination rows: E (extraction source over\n * the shared read client) → T (pure transform) → L (the data-seeding engines' imperative doors).\n *\n * ## The one decision that carries the paper's ⚠ traps: MODE SELECTION (PR-6)\n *\n * A run that COMPLETES a pass over the remote population loads through `runSyncSeed` — the full\n * reconcile INCLUDING the Stage-4 orphan walk (a destination row whose remote sibling vanished is\n * handled per the declared `orphanPolicy`). A run that stops mid-pass (`maxRowsPerRun` reached)\n * loads through `runUpgradeSeed` — the SAME reconcile loop with NO orphan stage, because \"absent\n * from a partial extraction\" is not evidence of remote deletion. A partial run orphans NOTHING;\n * the persisted cursor lets the next run continue the pass where this one stopped.\n *\n * ## Change detection (PR-30)\n *\n * The assembled seed pins `version: 1` forever and declares\n * `reconcileStrategy: CONTENT` — a pipeline's change signal is the REMOTE VALUE, not a version\n * bump. Managed-field content comparison decides write-vs-skip per row, so an unchanged remote\n * population costs zero destination writes (and zero RAG re-ingestions) per pass.\n *\n * ## Ledger split (PR-9)\n *\n * Per-entry load outcome lives on the `DataSeedRun` ledger row every run writes through the\n * engines (one row per pipeline — `seedKey` + constant version, recovered and reset each run).\n * The `ExternalDataPipelineState` row carries what data-seeding cannot know: the extraction CURSOR\n * (surviving restarts, so populations larger than one run's budget eventually sync end to end)\n * and the ETL-side last-run summary (extracted/rejected happen BEFORE the seed engine sees\n * anything). Transform rejections are logged per row (bounded) and counted on the summary; the\n * rejected rows' previous destination versions simply survive.\n *\n * ## Attribution (PR-10)\n *\n * ONE read-through audit row per run through the same lazily-resolved seam as the virtual\n * repository (`logHttpApiReadThroughAccess`), carrying the run outcome counts — a pipeline run\n * is bulk read-through access to an external system and lands in the same audit lane.\n *\n * ## Concurrency\n *\n * Single-flight per pipeline is IN-PROCESS (a second `runPipeline` for the same resource while\n * one is in flight answers `already-running`). A cross-instance double run is deliberately not\n * locked out: every load is an idempotent business-key MERGE and extraction pages are\n * drift-safe, so the second run wastes work but corrupts nothing — the same posture as\n * concurrent seed passes.\n */\n\nimport { inject, injectable, optional, unmanaged } from 'inversify';\nimport {\n  CoreResourceOperation,\n  ErrorCustomMessageReference,\n  ErrorType,\n  type ResourceType,\n} from '@wildo-ai/saas-models';\nimport {\n  ExternalDataDestinationPopulation,\n  ExternalDataOrphanPolicy,\n  type ExternalDataPipelineDeclaration,\n} from '@wildo-ai/saas-models/external-data';\n\nimport {\n  DataSeedMode,\n  DataSeedReconcileStrategy,\n  DataSeedScopeKind,\n  DataSeedSyncOrphanPolicy,\n  DataSeedTriggerKind,\n  DataSeedTriggerOrigin,\n  type DataSeedDefinition,\n  type DataSeedStaticEntry,\n} from '~wildo-backend-lib/data-seeding/models/data-seed.shared.schemas';\nimport { DataSeedRunStatus } from '~wildo-backend-lib/data-seeding/models/data-seed-run.shared.schemas';\nimport type { DataSeedScopeAnchor } from '~wildo-backend-lib/data-seeding/services/shared/data-seed-scope-anchor.shared.types';\nimport type { SyncSeedEngineBackendService } from '~wildo-backend-lib/data-seeding/services/engines/sync-seed-engine.backend.service';\nimport type { UpgradeSeedEngineBackendService } from '~wildo-backend-lib/data-seeding/services/engines/upgrade-seed-engine.backend.service';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { BackendResourceType } from '~wildo-backend-lib/resources/models/resources-types.backend.schemas';\nimport type { ExternalDataPipelineState } from '~wildo-backend-lib/external-data/models/external-data-pipeline-state.backend.schemas';\nimport { HttpApiReadClient } from '~wildo-backend-lib/base-classes/services/repositories/http-api/http-api-read-client.backend';\nimport { ExternalProvidersHttpApiAccessResolver } from '~wildo-backend-lib/base-classes/services/repositories/http-api/http-api-provider-access.backend';\nimport type { HttpApiAuditLogsResolver } from '~wildo-backend-lib/base-classes/services/repositories/http-api/http-api-resource-repository.backend.service';\nimport {\n  AuditObservationKind,\n  type AuditObservationLossMetricsRecorder,\n  emitAuditObservation,\n} from '~wildo-backend-lib/monitoring/observability/audit-observation-emission.backend';\nimport { HttpApiExternalDataExtractionSource, type ExternalDataExtractionSource } from './external-data-extraction-source.backend';\n/*\n * entrypoint-closure-waiver: `etl-transform.backend` is published only by `./external-data-models` (one\n * door per room), and nothing nominal crosses into this root-exported module's public surface —\n * `ExternalDataTransformedRow`/`ExternalDataRowRejection` are structural interfaces and `ExternalDataPipelineRunReport`\n * names none of them nominally. Probed 2026-08-28 after the barrel split:\n * `tsc -p tsconfig.build.json --noEmit` with declaration emit — zero TS2742/TS2883/TS7056.\n */\nimport { transformExternalDataPage, type ExternalDataRowRejection } from './external-data-transform.backend';\n\n/** How many per-row rejection reasons are LOGGED per run — the count is always exact. */\nconst MAX_LOGGED_REJECTIONS = 25;\n\nexport interface ExternalDataPipelineRunInput {\n  /** The DESTINATION resource type declaring the `externalDataPipeline`. */\n  resourceType: string;\n  /** `ADMIN_MANUAL` for the on-demand door, `SCHEDULED_RERUN` for the cron batch (PR-12). */\n  triggerOrigin: DataSeedTriggerOrigin.ADMIN_MANUAL | DataSeedTriggerOrigin.SCHEDULED_RERUN;\n  triggeredByUserId: string | null;\n}\n\nexport interface ExternalDataPipelineRunReport {\n  outcome: 'completed-pass' | 'partial-pass' | 'already-running';\n  extractedRows: number;\n  rejectedRows: number;\n  /**\n   * Declared entries HANDED TO the seed engine (extracted − rejected) — what was submitted, never\n   * what was written. Named `submittedEntries` rather than `loadedEntries` because the old name\n   * read as a write count and was believed as one: a run reporting `loadedEntries: 2` had in fact\n   * written one row and failed the other. `loadStatus` is the field that answers what landed.\n   */\n  submittedEntries: number;\n  /**\n   * The seed engine's verdict on the LOAD — `PARTIAL`/`FAILED` means go read `seedRunId`. Distinct\n   * from `outcome`, which reports only whether the EXTRACTION pass completed.\n   */\n  loadStatus: DataSeedRunStatus | null;\n  /** `_id` of the `DataSeedRun` ledger row (per-entry outcome detail); null when none ran. */\n  seedRunId: string | null;\n  /** The persisted continuation — non-null exactly for `partial-pass`. */\n  cursor: string | null;\n  durationMs: number;\n}\n\n/** Test seam: build the extraction source for one run (production default: the HTTP source). */\nexport type ExternalDataExtractionSourceFactory = (\n  declaration: ExternalDataPipelineDeclaration,\n  internalContext: ExecutionContext<any>,\n) => ExternalDataExtractionSource;\n\n@injectable()\nexport class ExternalDataPipelineRunBackendService {\n  private readonly inFlight = new Set<string>();\n  private readonly logDebug: (message: string, data?: unknown) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositoriesRegistry: RepositoriesRegistryHandlerBackendService,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: ResourcesRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.SyncSeedEngine) private readonly syncEngine: SyncSeedEngineBackendService,\n    @inject(SAAS_SERVICE_TYPES.UpgradeSeedEngine) private readonly upgradeEngine: UpgradeSeedEngineBackendService,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n    /**\n     * Resolves provider credentials for the extraction client. `@optional()` so a container\n     * without external-connector bindings still constructs the service — a run then fails with\n     * the resolver's own actionable error, never at boot.\n     */\n    @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService) @optional() private readonly externalProvidersRegistry?: unknown,\n    /**\n     * The read-through audit seam (PR-10) — same structural, lazily-resolved contract as the\n     * virtual repository's: absent binding means no emission, and emission failure never fails\n     * the run it observes.\n     */\n    /*\n     * `@unmanaged()`, because this class IS container-constructed and the two seams below are not the\n     * container's to resolve. The contract was copied from `HttpApiResourceRepositoryBackendService`,\n     * where an undecorated optional parameter is fine — that class carries no `@injectable()` and is\n     * built with `new`. Under `@injectable()` the same shape is a boot failure: Inversify validates\n     * EVERY constructor parameter, so an undecorated one aborts container setup with\n     * \"unexpected missing metadata\" long before any ETL code runs.\n     */\n    @unmanaged() private readonly auditLogsResolver?: HttpApiAuditLogsResolver,\n    /** Test seam — production leaves it unset and gets the HTTP source over the shared client. */\n    @unmanaged() private readonly extractionSourceFactory?: ExternalDataExtractionSourceFactory,\n    /**\n     * The PRODUCTION door to the read-through audit sink — and it had to be added, because the\n     * `@unmanaged()` thunk above cannot be one.\n     *\n     * `@unmanaged()` tells Inversify not to resolve a parameter, and this class is bound with\n     * `.to(...)`, so the container constructs it and passes `undefined` there. That made the seam a\n     * TEST-ONLY door: every scheduled ETL run in production reached `recordRunReadThroughAccess`,\n     * found no resolver, and emitted nothing. The sink itself exists\n     * (`AuditLogsBackendService.logHttpApiReadThroughAccess`), so nothing was refusing — the row was\n     * simply never written, silently, which is exactly the shape the loss counter now makes visible.\n     *\n     * Two suppliers, and they cannot collide: `@unmanaged()` is structurally unfillable by the\n     * container, so the thunk is only ever set by a test constructing this class with `new`, and it\n     * takes precedence there so a suite can substitute a double. `@optional()` here for the usual\n     * reason — a minimal container binds no audit service and an ETL run must still run.\n     *\n     * assurance-control: WILDO.AUDIT.ATTRIBUTION — an ETL run's external read is recorded.\n     */\n    @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional()\n    private readonly auditLogsService?: NonNullable<ReturnType<HttpApiAuditLogsResolver>>,\n    /**\n     * The loss counter behind that emission. Appended LAST and `@optional()`, so a container with no\n     * metrics binding degrades a dropped attribution row to the log channel rather than to nothing.\n     */\n    @inject(SAAS_SERVICE_TYPES.MetricsService) @optional()\n    private readonly metricsService?: AuditObservationLossMetricsRecorder,\n  ) {\n    this.logDebug = this.logger.debugByType('ExternalDataPipelineRun');\n    this.logger.setDebugTypeLogging('ExternalDataPipelineRun', false);\n  }\n\n  /** The on-demand door (PR-12). The scheduled batch calls this per due pipeline. */\n  public async runPipeline(input: ExternalDataPipelineRunInput): Promise<ExternalDataPipelineRunReport> {\n    if (this.inFlight.has(input.resourceType)) {\n      return {\n        outcome: 'already-running', extractedRows: 0, rejectedRows: 0,\n        submittedEntries: 0, loadStatus: null, seedRunId: null, cursor: null, durationMs: 0,\n      };\n    }\n    this.inFlight.add(input.resourceType);\n    try {\n      return await this.executeRun(input);\n    } finally {\n      this.inFlight.delete(input.resourceType);\n    }\n  }\n\n  /** Every registered resource that declares an `externalDataPipeline` — the scheduled batch's population. */\n  public listDeclaredPipelines(): Array<{ resourceType: string; declaration: ExternalDataPipelineDeclaration }> {\n    return (this.resourcesRegistry.getResourceTypes() as string[])\n      .flatMap((resourceType) => {\n        const configuration = this.resourcesRegistry.getResourceConfiguration(resourceType as ResourceType) as\n          | { externalDataPipeline?: ExternalDataPipelineDeclaration }\n          | undefined;\n        return configuration?.externalDataPipeline ? [{ resourceType, declaration: configuration.externalDataPipeline }] : [];\n      });\n  }\n\n  private async executeRun(input: ExternalDataPipelineRunInput): Promise<ExternalDataPipelineRunReport> {\n    const startedAtMs = Date.now();\n    const { resourceType, triggerOrigin, triggeredByUserId } = input;\n\n    const configuration = this.resourcesRegistry.getResourceConfiguration(resourceType as ResourceType) as {\n      externalDataPipeline?: ExternalDataPipelineDeclaration;\n    };\n    const declaration = configuration?.externalDataPipeline;\n    if (!declaration) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.RESOURCES_REGISTRY_INITIALIZATION_FAILED,\n        context: { reason: 'etl_pipeline_without_declaration', resourceType },\n      });\n    }\n\n    const internalContext = await this.executionContextCreator.createForInternalSystemOperation();\n    const stateContext = await this.executionContextCreator.createForInternalRepositoryOperation({\n      resourceType: BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE,\n      operationIdentifier: CoreResourceOperation.CREATE,\n    });\n    const stateRepo = this.repositoriesRegistry.getRepositoryOrThrow(\n      BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE as unknown as ResourceType,\n      stateContext,\n    );\n\n    let state = await stateRepo.read<ExternalDataPipelineState>(stateContext, { pipelineResourceType: resourceType });\n    if (!state) {\n      state = (await stateRepo.create(stateContext, {\n        pipelineResourceType: resourceType,\n        cursor: null,\n        passStartedAt: null,\n        lastRunAt: null,\n        lastRunSummary: null,\n      } as never)) as unknown as ExternalDataPipelineState;\n    }\n    const resumingCursor = state.cursor ?? undefined;\n    const passStartedAt = resumingCursor === undefined ? new Date() : (state.passStartedAt ?? new Date());\n\n    // ── E: bounded page walk from the persisted cursor ──────────────────────────\n    const source = (this.extractionSourceFactory ?? this.buildHttpExtractionSource.bind(this))(declaration, internalContext);\n    // PR-21 — WARN-only drift probe, once per run, before extraction. A probe failure is\n    // swallowed: drift detection must never be the reason a run fails.\n    try {\n      for (const warning of (await source.describeContractDrift?.()) ?? []) {\n        this.logger.warn(`ExternalDataPipelineRun[${resourceType}]: schema drift — ${warning}`);\n      }\n    } catch {\n      // Diagnostic only.\n    }\n    const extractedRows: Array<Record<string, unknown>> = [];\n    let cursor = resumingCursor;\n    let passComplete = false;\n    while (extractedRows.length < declaration.maxRowsPerRun) {\n      const page = await source.extractPage(cursor, Math.min(declaration.maxRowsPerRun - extractedRows.length, 1_000));\n      extractedRows.push(...page.rows);\n      cursor = page.nextCursor;\n      if (page.complete) {\n        passComplete = true;\n        break;\n      }\n    }\n\n    // ── T: pure transform; per-row rejections reported, never fatal ─────────────\n    const { rows, rejections } = transformExternalDataPage(declaration, extractedRows);\n    this.logRejections(resourceType, rejections);\n    const entries: DataSeedStaticEntry[] = rows.map((row) => ({\n      businessKey: { [declaration.remoteKeyLocalField]: row.businessKeyValue },\n      data: row.data,\n    }));\n\n    // ── L: mode selection is THE PR-6 guard — a partial run orphans NOTHING ─────\n    const seed = this.assembleSeedDefinition(resourceType, declaration, passComplete);\n    const scope = await this.resolveApplicationScopeAnchor(internalContext);\n    const engineInput = {\n      seed,\n      trigger: { triggerKind: DataSeedTriggerKind.ON_SCHEDULED_REFRESH as const },\n      triggerOrigin,\n      scope,\n      entries,\n      triggeredByUserId,\n      rowMetadataSource: `external-data:${resourceType}`,\n      internalContext,\n    };\n    const seedReport = passComplete\n      ? await this.syncEngine.runSyncSeed(engineInput)\n      : await this.upgradeEngine.runUpgradeSeed(engineInput);\n\n    // ── Persist the state row: the cursor IS the pass continuation ──────────────\n    const durationMs = Date.now() - startedAtMs;\n    const seedRunId = seedReport.runId ?? null;\n    // The LOAD verdict, carried separately from `outcome` (which is about the EXTRACTION pass).\n    // Both are reported: a full pass that failed to write part of what it read is neither a clean\n    // success nor a partial pass, and collapsing them would hide exactly that case.\n    const loadStatus = seedReport.status ?? null;\n    await stateRepo.update(stateContext, state._id, {\n      cursor: passComplete ? null : (cursor ?? null),\n      passStartedAt: passComplete ? null : passStartedAt,\n      lastRunAt: new Date(startedAtMs),\n      lastRunSummary: {\n        completedPass: passComplete,\n        extractedRows: extractedRows.length,\n        rejectedRows: rejections.length,\n        loadStatus,\n        seedRunId,\n        durationMs,\n      },\n    } as never);\n\n    this.recordRunReadThroughAccess(internalContext, resourceType, declaration, {\n      extractedRows: extractedRows.length,\n      rejectedRows: rejections.length,\n      completedPass: passComplete,\n    });\n\n    return {\n      outcome: passComplete ? 'completed-pass' : 'partial-pass',\n      extractedRows: extractedRows.length,\n      rejectedRows: rejections.length,\n      submittedEntries: entries.length,\n      loadStatus,\n      seedRunId,\n      cursor: passComplete ? null : (cursor ?? null),\n      durationMs,\n    };\n  }\n\n  /**\n   * The assembled seed is EPHEMERAL (never registered): `version` is pinned at 1 forever and\n   * `reconcileStrategy: CONTENT` carries change detection (PR-30) — bumping the version per run\n   * would route every row through the migrator path and rewrite the whole corpus each pass.\n   */\n  private assembleSeedDefinition(\n    resourceType: string,\n    declaration: ExternalDataPipelineDeclaration,\n    passComplete: boolean,\n  ): DataSeedDefinition {\n    const managedFields = [\n      declaration.remoteKeyLocalField,\n      ...declaration.mapping.map((entry) => entry.localField),\n    ];\n    return {\n      seedKey: `external-data:${resourceType}`,\n      scope: { kind: DataSeedScopeKind.APPLICATION },\n      resourceType,\n      triggers: [{ triggerKind: DataSeedTriggerKind.ON_SCHEDULED_REFRESH }],\n      mode: passComplete ? DataSeedMode.SYNC : DataSeedMode.UPGRADE,\n      version: 1,\n      managedFields,\n      reconcileStrategy: DataSeedReconcileStrategy.CONTENT,\n      ...(passComplete ? { onOrphan: this.mapOrphanPolicy(this.effectiveOrphanPolicy(declaration)) } : {}),\n    } as DataSeedDefinition;\n  }\n\n  /**\n   * The seam between the two closed vocabularies (never merged by value overlap — the ETL\n   * declaration must not depend on data-seeding's enum, and each member's semantics are owned\n   * where it is declared).\n   */\n  private mapOrphanPolicy(orphanPolicy: ExternalDataOrphanPolicy): DataSeedSyncOrphanPolicy {\n    switch (orphanPolicy) {\n      case ExternalDataOrphanPolicy.DELETE:\n        return DataSeedSyncOrphanPolicy.DELETE;\n      case ExternalDataOrphanPolicy.DEPRECATE:\n        return DataSeedSyncOrphanPolicy.DEPRECATE;\n      case ExternalDataOrphanPolicy.REPORT:\n        return DataSeedSyncOrphanPolicy.REPORT;\n    }\n  }\n\n  /**\n   * ⚠ OPEN-population caveat, named where it is decided: the SYNC orphan walk considers every\n   * row of the destination, including caller-minted rows on an OPEN population. Those rows have\n   * no `__seed` metadata and a business key outside the declared set, so DELETE/DEPRECATE would\n   * hit them. Slice 1 therefore downgrades OPEN populations' orphan handling to REPORT.\n   */\n  private effectiveOrphanPolicy(declaration: ExternalDataPipelineDeclaration): ExternalDataOrphanPolicy {\n    return declaration.population === ExternalDataDestinationPopulation.OPEN ? ExternalDataOrphanPolicy.REPORT : declaration.orphanPolicy;\n  }\n\n  private buildHttpExtractionSource(\n    declaration: ExternalDataPipelineDeclaration,\n    internalContext: ExecutionContext<any>,\n  ): ExternalDataExtractionSource {\n    const readClient = new HttpApiReadClient(\n      declaration.binding,\n      new ExternalProvidersHttpApiAccessResolver(this.externalProvidersRegistry as never),\n    );\n    return new HttpApiExternalDataExtractionSource(declaration, readClient, internalContext);\n  }\n\n  private async resolveApplicationScopeAnchor(internalContext: ExecutionContext<any>): Promise<DataSeedScopeAnchor> {\n    const appRepo = this.repositoriesRegistry.getRepositoryOrThrow('applications' as ResourceType, internalContext);\n    const application = (await appRepo.read<{ _id: string }>(internalContext, {})) ?? null;\n    if (!application) {\n      throw this.errorBuilder.buildError(ErrorType.INTERNAL, internalContext, {\n        customMessageReference: ErrorCustomMessageReference.INTERNAL,\n        context: { message: 'ExternalDataPipelineRun: no APPLICATION row exists — bootstrap order violation.' },\n      });\n    }\n    return { scopeKind: DataSeedScopeKind.APPLICATION, relatedId: application._id, relatedResourceType: null };\n  }\n\n  private logRejections(resourceType: string, rejections: ExternalDataRowRejection[]): void {\n    if (rejections.length === 0) return;\n    this.logger.warn(`ExternalDataPipelineRun[${resourceType}]: ${rejections.length} row(s) rejected by transform (previous versions survive).`, {\n      rejections: rejections.slice(0, MAX_LOGGED_REJECTIONS),\n      truncated: rejections.length > MAX_LOGGED_REJECTIONS,\n    });\n  }\n\n  /**\n   * PR-10 — one audit row per run, fire-and-forget through the shared seam.\n   *\n   * The emission goes through {@link emitAuditObservation}, so a run whose attribution row never\n   * reached the pipeline lands on `audit_observation_dropped_total` instead of nowhere. The feature\n   * detection decides an ARGUMENT rather than an early return: handing the seam `undefined` is how\n   * this site reports `SERVICE_UNAVAILABLE`, and returning early would restore the silence that let\n   * this seam sit unwired in production without anything saying so.\n   */\n  private recordRunReadThroughAccess(\n    executionContext: ExecutionContext<any>,\n    resourceType: string,\n    declaration: ExternalDataPipelineDeclaration,\n    counts: { extractedRows: number; rejectedRows: number; completedPass: boolean },\n  ): void {\n    let emit: (() => unknown) | undefined;\n    try {\n      // The test thunk first, the injected production service second — see the constructor.\n      const auditLogsService = this.auditLogsResolver?.() ?? this.auditLogsService;\n      const sink = auditLogsService?.logHttpApiReadThroughAccess;\n      if (typeof sink === 'function') {\n        emit = (): unknown => sink.call(auditLogsService, {\n          resourceType,\n          operationIdentifier: 'externalDataPipelineRun',\n          providerRef: declaration.binding.providerRef,\n          remoteEntityRef: declaration.binding.entityRef,\n          dialect: declaration.binding.dialect,\n          rowCount: counts.extractedRows,\n          rejectedRows: counts.rejectedRows,\n          completedPass: counts.completedPass,\n        }, executionContext);\n      }\n    } catch {\n      // A thunk that throws leaves `emit` undefined, so the observation is reported as UNAVAILABLE\n      // rather than swallowed. Observation only — never the reason a run fails.\n    }\n\n    emitAuditObservation({\n      observation: AuditObservationKind.HTTP_API_READ_THROUGH_ACCESS,\n      emit,\n      metricsService: this.metricsService,\n      logger: this.logger,\n      // Enough to name WHICH run went unrecorded, and how much it moved — the counts are what\n      // separate a run that read nothing from one that read a tenant's whole remote table.\n      context: {\n        observedResourceType: resourceType,\n        observedProviderRef: declaration.binding.providerRef,\n        observedRemoteEntityRef: declaration.binding.entityRef,\n        observedRowCount: counts.extractedRows,\n      },\n    });\n  }\n}\n"]}
+{"version":3,"file":"external-data-pipeline-run.backend.service.js","sourceRoot":"","sources":["../../../src/external-data/external-data-pipeline-run.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;;;;;;;;;;;;;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,SAAS,GAEV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GAEzB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,GAIpB,MAAM,iEAAiE,CAAC;AAWzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AAE1G,OAAO,EAAE,iBAAiB,EAAE,MAAM,6FAA6F,CAAC;AAChI,OAAO,EAAE,sCAAsC,EAAE,MAAM,iGAAiG,CAAC;AAEzJ,OAAO,EACL,oBAAoB,EAEpB,oBAAoB,GACrB,MAAM,gFAAgF,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAqC,MAAM,2CAA2C,CAAC;AACnI;;;;;;GAMG;AACH,OAAO,EAAE,yBAAyB,EAAiC,MAAM,mCAAmC,CAAC;AAE7G,yFAAyF;AACzF,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwC1B,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAKM;IACa;IACe;IACX;IACT;IACG;IACoB;IAMO;IAc5D;IAEA;IAoBb;IAMA;IA1DF,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,QAAQ,CAA4C;IAErE,YACsD,MAAqB,EACR,YAAwC,EACzB,oBAA+D,EAC1E,iBAAkD,EAC3D,UAAwC,EACrC,aAA8C,EAC1B,uBAA8D,EAMvD,yBAAmC,EAc/F,iBAA4C,EAE5C,uBAA6D,EAoB1E,gBAAoE,EAMpE,cAAoD;QAtDjB,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QACzB,yBAAoB,GAApB,oBAAoB,CAA2C;QAC1E,sBAAiB,GAAjB,iBAAiB,CAAiC;QAC3D,eAAU,GAAV,UAAU,CAA8B;QACrC,kBAAa,GAAb,aAAa,CAAiC;QAC1B,4BAAuB,GAAvB,uBAAuB,CAAuC;QAMvD,8BAAyB,GAAzB,yBAAyB,CAAU;QAc/F,sBAAiB,GAAjB,iBAAiB,CAA2B;QAE5C,4BAAuB,GAAvB,uBAAuB,CAAsC;QAoB1E,qBAAgB,GAAhB,gBAAgB,CAAoD;QAMpE,mBAAc,GAAd,cAAc,CAAsC;QAErE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,mFAAmF;IAC5E,KAAK,CAAC,WAAW,CAAC,KAAmC;QAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;gBAC7D,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;aACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,4GAA4G;IACrG,qBAAqB;QAC1B,OAAQ,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAe;aAC3D,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YACxB,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,YAA4B,CAErF,CAAC;YACd,OAAO,aAAa,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxH,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAmC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;QAEjE,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,YAA4B,CAEjG,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,EAAE,oBAAoB,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,wCAAwC;gBAC5F,OAAO,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,YAAY,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QAC9F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,oCAAoC,CAAC;YAC3F,YAAY,EAAE,mBAAmB,CAAC,4BAA4B;YAC9D,mBAAmB,EAAE,qBAAqB,CAAC,MAAM;SAClD,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAC9D,mBAAmB,CAAC,4BAAuD,EAC3E,YAAY,CACb,CAAC;QAEF,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAA4B,YAAY,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE;gBAC5C,oBAAoB,EAAE,YAAY;gBAClC,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;aACZ,CAAC,CAAyC,CAAC;QACvD,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;QACjD,MAAM,aAAa,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAEtG,+EAA+E;QAC/E,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACzH,qFAAqF;QACrF,mEAAmE;QACnE,IAAI,CAAC;YACH,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,YAAY,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,MAAM,aAAa,GAAmC,EAAE,CAAC;QACzD,IAAI,MAAM,GAAG,cAAc,CAAC;QAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,OAAO,aAAa,CAAC,MAAM,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACjH,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,yBAAyB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA0B,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxD,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE;YACxE,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC,CAAC;QAEJ,+EAA+E;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG;YAClB,IAAI;YACJ,OAAO,EAAE,EAAE,WAAW,EAAE,mBAAmB,CAAC,oBAA6B,EAAE;YAC3E,aAAa;YACb,KAAK;YACL,OAAO;YACP,iBAAiB;YACjB,iBAAiB,EAAE,iBAAiB,YAAY,EAAE;YAClD,eAAe;SAChB,CAAC;QACF,MAAM,UAAU,GAAG,YAAY;YAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC;YAChD,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAEzD,+EAA+E;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;QAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC;QAC3C,4FAA4F;QAC5F,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC;QAC7C,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE;YAC9C,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC9C,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;YAClD,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC;YAChC,cAAc,EAAE;gBACd,aAAa,EAAE,YAAY;gBAC3B,aAAa,EAAE,aAAa,CAAC,MAAM;gBACnC,YAAY,EAAE,UAAU,CAAC,MAAM;gBAC/B,UAAU;gBACV,SAAS;gBACT,UAAU;aACX;SACO,CAAC,CAAC;QAEZ,IAAI,CAAC,0BAA0B,CAAC,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE;YAC1E,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc;YACzD,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY,EAAE,UAAU,CAAC,MAAM;YAC/B,gBAAgB,EAAE,OAAO,CAAC,MAAM;YAChC,UAAU;YACV,SAAS;YACT,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC9C,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAC5B,YAAoB,EACpB,WAA4C,EAC5C,YAAqB;QAErB,MAAM,aAAa,GAAG;YACpB,WAAW,CAAC,mBAAmB;YAC/B,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACxD,CAAC;QACF,OAAO;YACL,OAAO,EAAE,iBAAiB,YAAY,EAAE;YACxC,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE;YAC9C,YAAY;YACZ,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,oBAAoB,EAAE,CAAC;YACrE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO;YAC7D,OAAO,EAAE,CAAC;YACV,aAAa;YACb,iBAAiB,EAAE,yBAAyB,CAAC,OAAO;YACpD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,YAAsC;QAC5D,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,wBAAwB,CAAC,MAAM;gBAClC,OAAO,wBAAwB,CAAC,MAAM,CAAC;YACzC,KAAK,wBAAwB,CAAC,SAAS;gBACrC,OAAO,wBAAwB,CAAC,SAAS,CAAC;YAC5C,KAAK,wBAAwB,CAAC,MAAM;gBAClC,OAAO,wBAAwB,CAAC,MAAM,CAAC;QAC3C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,WAA4C;QACxE,OAAO,WAAW,CAAC,UAAU,KAAK,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;IACxI,CAAC;IAEO,yBAAyB,CAC/B,WAA4C,EAC5C,eAAsC;QAEtC,MAAM,UAAU,GAAG,IAAI,iBAAiB,CACtC,WAAW,CAAC,OAAO,EACnB,IAAI,sCAAsC,CAAC,IAAI,CAAC,yBAAkC,CAAC,CACpF,CAAC;QACF,OAAO,IAAI,mCAAmC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,eAAsC;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,cAA8B,EAAE,eAAe,CAAC,CAAC;QAChH,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAkB,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;QACvF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE;gBACtE,sBAAsB,EAAE,2BAA2B,CAAC,QAAQ;gBAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,iFAAiF,EAAE;aACxG,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC7G,CAAC;IAEO,aAAa,CAAC,YAAoB,EAAE,UAAsC;QAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,YAAY,MAAM,UAAU,CAAC,MAAM,4DAA4D,EAAE;YAC3I,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;YACtD,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,qBAAqB;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,0BAA0B,CAChC,gBAAuC,EACvC,YAAoB,EACpB,WAA4C,EAC5C,MAA+E;QAE/E,IAAI,IAAiC,CAAC;QACtC,IAAI,CAAC;YACH,sFAAsF;YACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,IAAI,CAAC,gBAAgB,CAAC;YAC7E,MAAM,IAAI,GAAG,gBAAgB,EAAE,2BAA2B,CAAC;YAC3D,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBAChD,YAAY;oBACZ,mBAAmB,EAAE,yBAAyB;oBAC9C,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW;oBAC5C,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;oBAC9C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO;oBACpC,QAAQ,EAAE,MAAM,CAAC,aAAa;oBAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;iBACpC,EAAE,gBAAgB,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6FAA6F;YAC7F,0EAA0E;QAC5E,CAAC;QAED,oBAAoB,CAAC;YACnB,WAAW,EAAE,oBAAoB,CAAC,4BAA4B;YAC9D,IAAI;YACJ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,wFAAwF;YACxF,qFAAqF;YACrF,OAAO,EAAE;gBACP,oBAAoB,EAAE,YAAY;gBAClC,mBAAmB,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW;gBACpD,uBAAuB,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;gBACtD,gBAAgB,EAAE,MAAM,CAAC,aAAa;aACvC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAlWY,qCAAqC;IADjD,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IACzC,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAC5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAMhE,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAcvE,WAAA,SAAS,EAAE,CAAA;IAEX,WAAA,SAAS,EAAE,CAAA;IAmBX,YAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;IAMvD,YAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAAE,YAAA,QAAQ,EAAE,CAAA;;GA1D7C,qCAAqC,CAkWjD","sourcesContent":["/**\n * The ETL pipeline RUN service (partial-resource paper v3.1, PR-5/PR-6/PR-9/PR-10/PR-12) — the\n * orchestrator that turns a declared `externalDataPipeline` into destination rows: E (extraction source over\n * the shared read client) → T (pure transform) → L (the data-seeding engines' imperative doors).\n *\n * ## The one decision that carries the paper's ⚠ traps: MODE SELECTION (PR-6)\n *\n * A run that COMPLETES a pass over the remote population loads through `runSyncSeed` — the full\n * reconcile INCLUDING the Stage-4 orphan walk (a destination row whose remote sibling vanished is\n * handled per the declared `orphanPolicy`). A run that stops mid-pass (`maxRowsPerRun` reached)\n * loads through `runUpgradeSeed` — the SAME reconcile loop with NO orphan stage, because \"absent\n * from a partial extraction\" is not evidence of remote deletion. A partial run orphans NOTHING;\n * the persisted cursor lets the next run continue the pass where this one stopped.\n *\n * ## Change detection (PR-30)\n *\n * The assembled seed pins `version: 1` forever and declares\n * `reconcileStrategy: CONTENT` — a pipeline's change signal is the REMOTE VALUE, not a version\n * bump. Managed-field content comparison decides write-vs-skip per row, so an unchanged remote\n * population costs zero destination writes (and zero RAG re-ingestions) per pass.\n *\n * ## Ledger split (PR-9)\n *\n * Per-entry load outcome lives on the `DataSeedRun` ledger row every run writes through the\n * engines (one row per pipeline — `seedKey` + constant version, recovered and reset each run).\n * The `ExternalDataPipelineState` row carries what data-seeding cannot know: the extraction CURSOR\n * (surviving restarts, so populations larger than one run's budget eventually sync end to end)\n * and the ETL-side last-run summary (extracted/rejected happen BEFORE the seed engine sees\n * anything). Transform rejections are logged per row (bounded) and counted on the summary; the\n * rejected rows' previous destination versions simply survive.\n *\n * ## Attribution (PR-10)\n *\n * ONE read-through audit row per run through the same lazily-resolved seam as the virtual\n * repository (`logHttpApiReadThroughAccess`), carrying the run outcome counts — a pipeline run\n * is bulk read-through access to an external system and lands in the same audit lane.\n *\n * ## Concurrency\n *\n * Single-flight per pipeline is IN-PROCESS (a second `runPipeline` for the same resource while\n * one is in flight answers `already-running`). A cross-instance double run is deliberately not\n * locked out: every load is an idempotent business-key MERGE and extraction pages are\n * drift-safe, so the second run wastes work but corrupts nothing — the same posture as\n * concurrent seed passes.\n */\n\nimport { inject, injectable, optional, unmanaged } from 'inversify';\nimport {\n  CoreResourceOperation,\n  ErrorCustomMessageReference,\n  ErrorType,\n  type ResourceType,\n} from '@wildo-ai/saas-models';\nimport {\n  ExternalDataDestinationPopulation,\n  ExternalDataOrphanPolicy,\n  type ExternalDataPipelineDeclaration,\n} from '@wildo-ai/saas-models/external-data';\n\nimport {\n  DataSeedMode,\n  DataSeedReconcileStrategy,\n  DataSeedScopeKind,\n  DataSeedSyncOrphanPolicy,\n  DataSeedTriggerKind,\n  DataSeedTriggerOrigin,\n  type DataSeedDefinition,\n  type DataSeedStaticEntry,\n} from '~wildo-backend-lib/data-seeding/models/data-seed.shared.schemas';\nimport { DataSeedRunStatus } from '~wildo-backend-lib/data-seeding/models/data-seed-run.shared.schemas';\nimport type { DataSeedScopeAnchor } from '~wildo-backend-lib/data-seeding/services/shared/data-seed-scope-anchor.shared.types';\nimport type { SyncSeedEngineBackendService } from '~wildo-backend-lib/data-seeding/services/engines/sync-seed-engine.backend.service';\nimport type { UpgradeSeedEngineBackendService } from '~wildo-backend-lib/data-seeding/services/engines/upgrade-seed-engine.backend.service';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { BackendResourceType } from '~wildo-backend-lib/resources/models/resources-types.backend.schemas';\nimport type { ExternalDataPipelineState } from '~wildo-backend-lib/external-data/models/external-data-pipeline-state.backend.schemas';\nimport { HttpApiReadClient } from '~wildo-backend-lib/base-classes/services/repositories/http-api/http-api-read-client.backend';\nimport { ExternalProvidersHttpApiAccessResolver } from '~wildo-backend-lib/base-classes/services/repositories/http-api/http-api-provider-access.backend';\nimport type { HttpApiAuditLogsResolver } from '~wildo-backend-lib/base-classes/services/repositories/http-api/http-api-resource-repository.backend.service';\nimport {\n  AuditObservationKind,\n  type AuditObservationLossMetricsRecorder,\n  emitAuditObservation,\n} from '~wildo-backend-lib/monitoring/observability/audit-observation-emission.backend';\nimport { HttpApiExternalDataExtractionSource, type ExternalDataExtractionSource } from './external-data-extraction-source.backend';\n/*\n * entrypoint-closure-waiver: `etl-transform.backend` is published only by `./external-data-models` (one\n * door per room), and nothing nominal crosses into this root-exported module's public surface —\n * `ExternalDataTransformedRow`/`ExternalDataRowRejection` are structural interfaces and `ExternalDataPipelineRunReport`\n * names none of them nominally. Probed 2026-08-28 after the barrel split:\n * `tsc -p tsconfig.build.json --noEmit` with declaration emit — zero TS2742/TS2883/TS7056.\n */\nimport { transformExternalDataPage, type ExternalDataRowRejection } from './external-data-transform.backend';\n\n/** How many per-row rejection reasons are LOGGED per run — the count is always exact. */\nconst MAX_LOGGED_REJECTIONS = 25;\n\nexport interface ExternalDataPipelineRunInput {\n  /** The DESTINATION resource type declaring the `externalDataPipeline`. */\n  resourceType: string;\n  /** `ADMIN_MANUAL` for the on-demand door, `SCHEDULED_RERUN` for the cron batch (PR-12). */\n  triggerOrigin: DataSeedTriggerOrigin.ADMIN_MANUAL | DataSeedTriggerOrigin.SCHEDULED_RERUN;\n  triggeredByUserId: string | null;\n}\n\nexport interface ExternalDataPipelineRunReport {\n  outcome: 'completed-pass' | 'partial-pass' | 'already-running';\n  extractedRows: number;\n  rejectedRows: number;\n  /**\n   * Declared entries HANDED TO the seed engine (extracted − rejected) — what was submitted, never\n   * what was written. Named `submittedEntries` rather than `loadedEntries` because the old name\n   * read as a write count and was believed as one: a run reporting `loadedEntries: 2` had in fact\n   * written one row and failed the other. `loadStatus` is the field that answers what landed.\n   */\n  submittedEntries: number;\n  /**\n   * The seed engine's verdict on the LOAD — `PARTIAL`/`FAILED` means go read `seedRunId`. Distinct\n   * from `outcome`, which reports only whether the EXTRACTION pass completed.\n   */\n  loadStatus: DataSeedRunStatus | null;\n  /** `_id` of the `DataSeedRun` ledger row (per-entry outcome detail); null when none ran. */\n  seedRunId: string | null;\n  /** The persisted continuation — non-null exactly for `partial-pass`. */\n  cursor: string | null;\n  durationMs: number;\n}\n\n/** Test seam: build the extraction source for one run (production default: the HTTP source). */\nexport type ExternalDataExtractionSourceFactory = (\n  declaration: ExternalDataPipelineDeclaration,\n  internalContext: ExecutionContext<any>,\n) => ExternalDataExtractionSource;\n\n@injectable()\nexport class ExternalDataPipelineRunBackendService {\n  private readonly inFlight = new Set<string>();\n  private readonly logDebug: (message: string, data?: unknown) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositoriesRegistry: RepositoriesRegistryHandlerBackendService,\n    @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: ResourcesRegistryBackendService,\n    @inject(SAAS_SERVICE_TYPES.SyncSeedEngine) private readonly syncEngine: SyncSeedEngineBackendService,\n    @inject(SAAS_SERVICE_TYPES.UpgradeSeedEngine) private readonly upgradeEngine: UpgradeSeedEngineBackendService,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n    /**\n     * Resolves provider credentials for the extraction client. `@optional()` so a container\n     * without external-connector bindings still constructs the service — a run then fails with\n     * the resolver's own actionable error, never at boot.\n     */\n    @inject(SAAS_SERVICE_TYPES.ExternalProvidersRegistryService) @optional() private readonly externalProvidersRegistry?: unknown,\n    /**\n     * The read-through audit seam (PR-10) — same structural, lazily-resolved contract as the\n     * virtual repository's: absent binding means no emission, and emission failure never fails\n     * the run it observes.\n     */\n    /*\n     * `@unmanaged()`, because this class IS container-constructed and the two seams below are not the\n     * container's to resolve. The contract was copied from `HttpApiResourceRepositoryBackendService`,\n     * where an undecorated optional parameter is fine — that class carries no `@injectable()` and is\n     * built with `new`. Under `@injectable()` the same shape is a boot failure: Inversify validates\n     * EVERY constructor parameter, so an undecorated one aborts container setup with\n     * \"unexpected missing metadata\" long before any ETL code runs.\n     */\n    @unmanaged() private readonly auditLogsResolver?: HttpApiAuditLogsResolver,\n    /** Test seam — production leaves it unset and gets the HTTP source over the shared client. */\n    @unmanaged() private readonly extractionSourceFactory?: ExternalDataExtractionSourceFactory,\n    /**\n     * The PRODUCTION door to the read-through audit sink — and it had to be added, because the\n     * `@unmanaged()` thunk above cannot be one.\n     *\n     * `@unmanaged()` tells Inversify not to resolve a parameter, and this class is bound with\n     * `.to(...)`, so the container constructs it and passes `undefined` there. That made the seam a\n     * TEST-ONLY door: every scheduled ETL run in production reached `recordRunReadThroughAccess`,\n     * found no resolver, and emitted nothing. The sink itself exists\n     * (`AuditLogsBackendService.logHttpApiReadThroughAccess`), so nothing was refusing — the row was\n     * simply never written, silently, which is exactly the shape the loss counter now makes visible.\n     *\n     * Two suppliers, and they cannot collide: `@unmanaged()` is structurally unfillable by the\n     * container, so the thunk is only ever set by a test constructing this class with `new`, and it\n     * takes precedence there so a suite can substitute a double. `@optional()` here for the usual\n     * reason — a minimal container binds no audit service and an ETL run must still run.\n     *\n     * assurance-control: WILDO.AUDIT.ATTRIBUTION — an ETL run's external read is recorded.\n     */\n    @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional()\n    private readonly auditLogsService?: NonNullable<ReturnType<HttpApiAuditLogsResolver>>,\n    /**\n     * The loss counter behind that emission. Appended LAST and `@optional()`, so a container with no\n     * metrics binding degrades a dropped attribution row to the log channel rather than to nothing.\n     */\n    @inject(SAAS_SERVICE_TYPES.MetricsService) @optional()\n    private readonly metricsService?: AuditObservationLossMetricsRecorder,\n  ) {\n    this.logDebug = this.logger.debugByType('ExternalDataPipelineRun');\n    this.logger.setDebugTypeLogging('ExternalDataPipelineRun', false);\n  }\n\n  /** The on-demand door (PR-12). The scheduled batch calls this per due pipeline. */\n  public async runPipeline(input: ExternalDataPipelineRunInput): Promise<ExternalDataPipelineRunReport> {\n    if (this.inFlight.has(input.resourceType)) {\n      return {\n        outcome: 'already-running', extractedRows: 0, rejectedRows: 0,\n        submittedEntries: 0, loadStatus: null, seedRunId: null, cursor: null, durationMs: 0,\n      };\n    }\n    this.inFlight.add(input.resourceType);\n    try {\n      return await this.executeRun(input);\n    } finally {\n      this.inFlight.delete(input.resourceType);\n    }\n  }\n\n  /** Every registered resource that declares an `externalDataPipeline` — the scheduled batch's population. */\n  public listDeclaredPipelines(): Array<{ resourceType: string; declaration: ExternalDataPipelineDeclaration }> {\n    return (this.resourcesRegistry.getResourceTypes() as string[])\n      .flatMap((resourceType) => {\n        const configuration = this.resourcesRegistry.getResourceConfiguration(resourceType as ResourceType) as\n          | { externalDataPipeline?: ExternalDataPipelineDeclaration }\n          | undefined;\n        return configuration?.externalDataPipeline ? [{ resourceType, declaration: configuration.externalDataPipeline }] : [];\n      });\n  }\n\n  private async executeRun(input: ExternalDataPipelineRunInput): Promise<ExternalDataPipelineRunReport> {\n    const startedAtMs = Date.now();\n    const { resourceType, triggerOrigin, triggeredByUserId } = input;\n\n    const configuration = this.resourcesRegistry.getResourceConfiguration(resourceType as ResourceType) as {\n      externalDataPipeline?: ExternalDataPipelineDeclaration;\n    };\n    const declaration = configuration?.externalDataPipeline;\n    if (!declaration) {\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.RESOURCES_REGISTRY_INITIALIZATION_FAILED,\n        context: { reason: 'etl_pipeline_without_declaration', resourceType },\n      });\n    }\n\n    const internalContext = await this.executionContextCreator.createForInternalSystemOperation();\n    const stateContext = await this.executionContextCreator.createForInternalRepositoryOperation({\n      resourceType: BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE,\n      operationIdentifier: CoreResourceOperation.CREATE,\n    });\n    const stateRepo = this.repositoriesRegistry.getRepositoryOrThrow(\n      BackendResourceType.EXTERNAL_DATA_PIPELINE_STATE as unknown as ResourceType,\n      stateContext,\n    );\n\n    let state = await stateRepo.read<ExternalDataPipelineState>(stateContext, { pipelineResourceType: resourceType });\n    if (!state) {\n      state = (await stateRepo.create(stateContext, {\n        pipelineResourceType: resourceType,\n        cursor: null,\n        passStartedAt: null,\n        lastRunAt: null,\n        lastRunSummary: null,\n      } as never)) as unknown as ExternalDataPipelineState;\n    }\n    const resumingCursor = state.cursor ?? undefined;\n    const passStartedAt = resumingCursor === undefined ? new Date() : (state.passStartedAt ?? new Date());\n\n    // ── E: bounded page walk from the persisted cursor ──────────────────────────\n    const source = (this.extractionSourceFactory ?? this.buildHttpExtractionSource.bind(this))(declaration, internalContext);\n    // PR-21 — WARN-only drift probe, once per run, before extraction. A probe failure is\n    // swallowed: drift detection must never be the reason a run fails.\n    try {\n      for (const warning of (await source.describeContractDrift?.()) ?? []) {\n        this.logger.warn(`ExternalDataPipelineRun[${resourceType}]: schema drift — ${warning}`);\n      }\n    } catch {\n      // Diagnostic only.\n    }\n    const extractedRows: Array<Record<string, unknown>> = [];\n    let cursor = resumingCursor;\n    let passComplete = false;\n    while (extractedRows.length < declaration.maxRowsPerRun) {\n      const page = await source.extractPage(cursor, Math.min(declaration.maxRowsPerRun - extractedRows.length, 1_000));\n      extractedRows.push(...page.rows);\n      cursor = page.nextCursor;\n      if (page.complete) {\n        passComplete = true;\n        break;\n      }\n    }\n\n    // ── T: pure transform; per-row rejections reported, never fatal ─────────────\n    const { rows, rejections } = transformExternalDataPage(declaration, extractedRows);\n    this.logRejections(resourceType, rejections);\n    const entries: DataSeedStaticEntry[] = rows.map((row) => ({\n      businessKey: { [declaration.remoteKeyLocalField]: row.businessKeyValue },\n      data: row.data,\n    }));\n\n    // ── L: mode selection is THE PR-6 guard — a partial run orphans NOTHING ─────\n    const seed = this.assembleSeedDefinition(resourceType, declaration, passComplete);\n    const scope = await this.resolveApplicationScopeAnchor(internalContext);\n    const engineInput = {\n      seed,\n      trigger: { triggerKind: DataSeedTriggerKind.ON_SCHEDULED_REFRESH as const },\n      triggerOrigin,\n      scope,\n      entries,\n      triggeredByUserId,\n      rowMetadataSource: `external-data:${resourceType}`,\n      internalContext,\n    };\n    const seedReport = passComplete\n      ? await this.syncEngine.runSyncSeed(engineInput)\n      : await this.upgradeEngine.runUpgradeSeed(engineInput);\n\n    // ── Persist the state row: the cursor IS the pass continuation ──────────────\n    const durationMs = Date.now() - startedAtMs;\n    const seedRunId = seedReport.runId ?? null;\n    // The LOAD verdict, carried separately from `outcome` (which is about the EXTRACTION pass).\n    // Both are reported: a full pass that failed to write part of what it read is neither a clean\n    // success nor a partial pass, and collapsing them would hide exactly that case.\n    const loadStatus = seedReport.status ?? null;\n    await stateRepo.update(stateContext, state._id, {\n      cursor: passComplete ? null : (cursor ?? null),\n      passStartedAt: passComplete ? null : passStartedAt,\n      lastRunAt: new Date(startedAtMs),\n      lastRunSummary: {\n        completedPass: passComplete,\n        extractedRows: extractedRows.length,\n        rejectedRows: rejections.length,\n        loadStatus,\n        seedRunId,\n        durationMs,\n      },\n    } as never);\n\n    this.recordRunReadThroughAccess(internalContext, resourceType, declaration, {\n      extractedRows: extractedRows.length,\n      rejectedRows: rejections.length,\n      completedPass: passComplete,\n    });\n\n    return {\n      outcome: passComplete ? 'completed-pass' : 'partial-pass',\n      extractedRows: extractedRows.length,\n      rejectedRows: rejections.length,\n      submittedEntries: entries.length,\n      loadStatus,\n      seedRunId,\n      cursor: passComplete ? null : (cursor ?? null),\n      durationMs,\n    };\n  }\n\n  /**\n   * The assembled seed is EPHEMERAL (never registered): `version` is pinned at 1 forever and\n   * `reconcileStrategy: CONTENT` carries change detection (PR-30) — bumping the version per run\n   * would route every row through the migrator path and rewrite the whole corpus each pass.\n   */\n  private assembleSeedDefinition(\n    resourceType: string,\n    declaration: ExternalDataPipelineDeclaration,\n    passComplete: boolean,\n  ): DataSeedDefinition {\n    const managedFields = [\n      declaration.remoteKeyLocalField,\n      ...declaration.mapping.map((entry) => entry.localField),\n    ];\n    return {\n      seedKey: `external-data:${resourceType}`,\n      scope: { kind: DataSeedScopeKind.APPLICATION },\n      resourceType,\n      triggers: [{ triggerKind: DataSeedTriggerKind.ON_SCHEDULED_REFRESH }],\n      mode: passComplete ? DataSeedMode.SYNC : DataSeedMode.UPGRADE,\n      version: 1,\n      managedFields,\n      reconcileStrategy: DataSeedReconcileStrategy.CONTENT,\n      ...(passComplete ? { onOrphan: this.mapOrphanPolicy(this.effectiveOrphanPolicy(declaration)) } : {}),\n    } as DataSeedDefinition;\n  }\n\n  /**\n   * The seam between the two closed vocabularies (never merged by value overlap — the ETL\n   * declaration must not depend on data-seeding's enum, and each member's semantics are owned\n   * where it is declared).\n   */\n  private mapOrphanPolicy(orphanPolicy: ExternalDataOrphanPolicy): DataSeedSyncOrphanPolicy {\n    switch (orphanPolicy) {\n      case ExternalDataOrphanPolicy.DELETE:\n        return DataSeedSyncOrphanPolicy.DELETE;\n      case ExternalDataOrphanPolicy.DEPRECATE:\n        return DataSeedSyncOrphanPolicy.DEPRECATE;\n      case ExternalDataOrphanPolicy.REPORT:\n        return DataSeedSyncOrphanPolicy.REPORT;\n    }\n  }\n\n  /**\n   * ⚠ OPEN-population caveat, named where it is decided: the SYNC orphan walk considers every\n   * row of the destination, including caller-minted rows on an OPEN population. Those rows have\n   * no `__seed` metadata and a business key outside the declared set, so DELETE/DEPRECATE would\n   * hit them. Slice 1 therefore downgrades OPEN populations' orphan handling to REPORT.\n   */\n  private effectiveOrphanPolicy(declaration: ExternalDataPipelineDeclaration): ExternalDataOrphanPolicy {\n    return declaration.population === ExternalDataDestinationPopulation.OPEN ? ExternalDataOrphanPolicy.REPORT : declaration.orphanPolicy;\n  }\n\n  private buildHttpExtractionSource(\n    declaration: ExternalDataPipelineDeclaration,\n    internalContext: ExecutionContext<any>,\n  ): ExternalDataExtractionSource {\n    const readClient = new HttpApiReadClient(\n      declaration.binding,\n      new ExternalProvidersHttpApiAccessResolver(this.externalProvidersRegistry as never),\n    );\n    return new HttpApiExternalDataExtractionSource(declaration, readClient, internalContext);\n  }\n\n  private async resolveApplicationScopeAnchor(internalContext: ExecutionContext<any>): Promise<DataSeedScopeAnchor> {\n    const appRepo = this.repositoriesRegistry.getRepositoryOrThrow('applications' as ResourceType, internalContext);\n    const application = (await appRepo.read<{ _id: string }>(internalContext, {})) ?? null;\n    if (!application) {\n      throw this.errorBuilder.buildError(ErrorType.INTERNAL, internalContext, {\n        customMessageReference: ErrorCustomMessageReference.INTERNAL,\n        context: { message: 'ExternalDataPipelineRun: no APPLICATION row exists — bootstrap order violation.' },\n      });\n    }\n    return { scopeKind: DataSeedScopeKind.APPLICATION, relatedId: application._id, relatedResourceType: null };\n  }\n\n  private logRejections(resourceType: string, rejections: ExternalDataRowRejection[]): void {\n    if (rejections.length === 0) return;\n    this.logger.warn(`ExternalDataPipelineRun[${resourceType}]: ${rejections.length} row(s) rejected by transform (previous versions survive).`, {\n      rejections: rejections.slice(0, MAX_LOGGED_REJECTIONS),\n      truncated: rejections.length > MAX_LOGGED_REJECTIONS,\n    });\n  }\n\n  /**\n   * PR-10 — one audit row per run, fire-and-forget through the shared seam.\n   *\n   * The emission goes through {@link emitAuditObservation}, so a run whose attribution row never\n   * reached the pipeline lands on `audit_observation_dropped_total` instead of nowhere. The feature\n   * detection decides an ARGUMENT rather than an early return: handing the seam `undefined` is how\n   * this site reports `SERVICE_UNAVAILABLE`, and returning early would restore the silence that let\n   * this seam sit unwired in production without anything saying so.\n   */\n  private recordRunReadThroughAccess(\n    executionContext: ExecutionContext<any>,\n    resourceType: string,\n    declaration: ExternalDataPipelineDeclaration,\n    counts: { extractedRows: number; rejectedRows: number; completedPass: boolean },\n  ): void {\n    let emit: (() => unknown) | undefined;\n    try {\n      // The test thunk first, the injected production service second — see the constructor.\n      const auditLogsService = this.auditLogsResolver?.() ?? this.auditLogsService;\n      const sink = auditLogsService?.logHttpApiReadThroughAccess;\n      if (typeof sink === 'function') {\n        emit = (): unknown => sink.call(auditLogsService, {\n          resourceType,\n          operationIdentifier: 'externalDataPipelineRun',\n          providerRef: declaration.binding.providerRef,\n          remoteEntityRef: declaration.binding.entityRef,\n          dialect: declaration.binding.dialect,\n          rowCount: counts.extractedRows,\n          rejectedRows: counts.rejectedRows,\n          completedPass: counts.completedPass,\n        }, executionContext);\n      }\n    } catch {\n      // A thunk that throws leaves `emit` undefined, so the observation is reported as UNAVAILABLE\n      // rather than swallowed. Observation only — never the reason a run fails.\n    }\n\n    emitAuditObservation({\n      observation: AuditObservationKind.HTTP_API_READ_THROUGH_ACCESS,\n      emit,\n      metricsService: this.metricsService,\n      logger: this.logger,\n      // Enough to name WHICH run went unrecorded, and how much it moved — the counts are what\n      // separate a run that read nothing from one that read a tenant's whole remote table.\n      context: {\n        observedResourceType: resourceType,\n        observedProviderRef: declaration.binding.providerRef,\n        observedRemoteEntityRef: declaration.binding.entityRef,\n        observedRowCount: counts.extractedRows,\n      },\n    });\n  }\n}\n"]}

package/dist/esm/external-data/external-data-transform.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-transform.backend.d.ts","sourceRoot":"","sources":["../../../../src/external-data/external-data-transform.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAE7C,2FAA2F;AAC3F,MAAM,WAAW,0BAA0B;IACzC,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wEAAwE;AACxE,MAAM,WAAW,wBAAwB;IACvC,gGAAgG;IAChG,QAAQ,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACnC,UAAU,EAAE,wBAAwB,EAAE,CAAC;CACxC;AAED,wEAAwE;AACxE,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,+BAA+B,EAC5C,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjD,2BAA2B,CA2C7B"}
+{"version":3,"file":"external-data-transform.backend.d.ts","sourceRoot":"","sources":["../../../src/external-data/external-data-transform.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qCAAqC,CAAC;AAE7C,2FAA2F;AAC3F,MAAM,WAAW,0BAA0B;IACzC,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wEAAwE;AACxE,MAAM,WAAW,wBAAwB;IACvC,gGAAgG;IAChG,QAAQ,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACnC,UAAU,EAAE,wBAAwB,EAAE,CAAC;CACxC;AAED,wEAAwE;AACxE,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,+BAA+B,EAC5C,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjD,2BAA2B,CA2C7B"}

package/dist/esm/external-data/models/external-data-pipeline-state.backend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-data-pipeline-state.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/external-data/models/external-data-pipeline-state.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,qBAAqB,EAIrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wDAAwD,CAAC;AAM3F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;iBAgD1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,oBAAY,mCAAmC;IAC7C,QAAQ,aAAa;CACtB;AAED,KAAK,wCAAwC,GACzC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAWjC,eAAO,MAAM,oEAAoE,GAC/E,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,wCAAwC,EAAE,OAAO,+BAA+B,CA0BnH,CAAC"}
+{"version":3,"file":"external-data-pipeline-state.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/external-data/models/external-data-pipeline-state.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,qBAAqB,EAIrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wDAAwD,CAAC;AAM3F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;iBAgD1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,oBAAY,mCAAmC;IAC7C,QAAQ,aAAa;CACtB;AAED,KAAK,wCAAwC,GACzC,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAWjC,eAAO,MAAM,oEAAoE,GAC/E,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,wCAAwC,EAAE,OAAO,+BAA+B,CA0BnH,CAAC"}

package/dist/esm/external-providers/models/external-providers.backend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-providers.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/models/external-providers.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAgC,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAEL,4BAA4B,EAM5B,2BAA2B,EAC3B,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAM9C;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;iBAkB1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAMxF;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;iBAMxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;;iBAgBzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;iBAS1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAMxF;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;iBAMlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,4CAA6C,SAAQ,4BAA4B;IAEhG,WAAW,EAAE,yBAAyB,CAAC;IAGvC,gBAAgB,EAAE,uBAAuB,CAAC;IAG1C,YAAY,EAAE,wBAAwB,CAAC;IAGvC,eAAe,EAAE,yBAAyB,CAAC;IAG3C,IAAI,EAAE,iBAAiB,CAAC;IAoBxB,UAAU,EAAE,sBAAsB,CAAC;IAGnC,YAAY,CAAC,EAAE,2BAA2B,CAAC;CAC5C;AAED;;;;GAIG;AACH,eAAO,MAAM,kDAAkD,EAAE,CAAC,CAAC,OAAO,CAAC,4CAA4C,CA+BrH,CAAC;AAMH;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,OAAO,gBAAgB,CAAC,kBAAkB,CAAC;IACtD,WAAW,EAAE,yBAAyB,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uBAAuB,EAAE,+BAA+B,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,OAAO,gBAAgB,CAAC,UAAU,CAAC;IAC9C,WAAW,EAAE,IAAI,CAAC,yBAAyB,EAAE,qBAAqB,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC;IAChG,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"external-providers.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/models/external-providers.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAgC,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAEL,4BAA4B,EAM5B,2BAA2B,EAC3B,gBAAgB,EAChB,+BAA+B,EAC/B,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAM9C;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;iBAkB1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAMxF;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;iBAMxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;;iBAgBzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;iBAS1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAMxF;;;GAGG;AACH,eAAO,MAAM,uBAAuB;;;iBAMlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,4CAA6C,SAAQ,4BAA4B;IAEhG,WAAW,EAAE,yBAAyB,CAAC;IAGvC,gBAAgB,EAAE,uBAAuB,CAAC;IAG1C,YAAY,EAAE,wBAAwB,CAAC;IAGvC,eAAe,EAAE,yBAAyB,CAAC;IAG3C,IAAI,EAAE,iBAAiB,CAAC;IAoBxB,UAAU,EAAE,sBAAsB,CAAC;IAGnC,YAAY,CAAC,EAAE,2BAA2B,CAAC;CAC5C;AAED;;;;GAIG;AACH,eAAO,MAAM,kDAAkD,EAAE,CAAC,CAAC,OAAO,CAAC,4CAA4C,CA+BrH,CAAC;AAMH;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,OAAO,gBAAgB,CAAC,kBAAkB,CAAC;IACtD,WAAW,EAAE,yBAAyB,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,uBAAuB,EAAE,+BAA+B,CAAC;CAC1D;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,OAAO,gBAAgB,CAAC,UAAU,CAAC;IAC9C,WAAW,EAAE,IAAI,CAAC,yBAAyB,EAAE,qBAAqB,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC;IAChG,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/esm/external-providers/models/provider-selection-resolution-evidence.backend.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAE7H,oBAAY,sCAAsC;IAChD,4BAA4B,iCAAiC;IAC7D,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;CAC9C;AAED,oBAAY,uCAAuC;IACjD,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,uCAAuC,CAAC;IACjE,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,+GAA+G;IAC/G,QAAQ,CAAC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,8FAA8F;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,uBAAuB,EAAE,uCAAuC,GAAG,IAAI,CAAC;CAClF"}
+{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,+DAA+D,CAAC;AAE7H,oBAAY,sCAAsC;IAChD,4BAA4B,iCAAiC;IAC7D,kBAAkB,uBAAuB;IACzC,oBAAoB,yBAAyB;CAC9C;AAED,oBAAY,uCAAuC;IACjD,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,uCAAuC,CAAC;IACjE,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,+GAA+G;IAC/G,QAAQ,CAAC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,8FAA8F;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9D,QAAQ,CAAC,uBAAuB,EAAE,uCAAuC,GAAG,IAAI,CAAC;CAClF"}

package/dist/esm/external-providers/models/provider-selection-resolution-evidence.backend.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.js","sourceRoot":"","sources":["../../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAEA,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,uGAA6D,CAAA;IAC7D,mFAAyC,CAAA;IACzC,uFAA6C,CAAA;AAC/C,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD;AAED,MAAM,CAAN,IAAY,uCAIX;AAJD,WAAY,uCAAuC;IACjD,4DAAiB,CAAA;IACjB,8DAAmB,CAAA;IACnB,kEAAuB,CAAA;AACzB,CAAC,EAJW,uCAAuC,KAAvC,uCAAuC,QAIlD","sourcesContent":["import type { ProviderRuntimeArtifactEvidenceMetadata } from '../../config/models/provider-runtime-artifact.backend.schemas';\n\nexport enum ExternalProviderSelectionAuthorityKind {\n  APPLICATION_RUNTIME_ARTIFACT = 'APPLICATION_RUNTIME_ARTIFACT',\n  DEFAULT_RESOLUTION = 'DEFAULT_RESOLUTION',\n  ENVIRONMENT_OVERRIDE = 'ENVIRONMENT_OVERRIDE',\n}\n\nexport enum ExternalProviderSelectionOverrideStatus {\n  ABSENT = 'ABSENT',\n  APPLIED = 'APPLIED',\n  MALFORMED = 'MALFORMED',\n}\n\nexport interface ExternalProviderSelectionResolutionEvidence {\n  readonly authorityKind: ExternalProviderSelectionAuthorityKind;\n  readonly overrideStatus: ExternalProviderSelectionOverrideStatus;\n  readonly applicationPrimaryProviderRef: string | null;\n  /** The selection's `whenUnavailable` refs — substitutes for an unavailable primary, never a failover chain. */\n  readonly applicationSubstituteProviderRefs: readonly string[];\n  readonly environmentPrimaryProviderRef: string | null;\n  /** The environment override's `whenUnavailable` refs. Same semantics as the application's. */\n  readonly environmentSubstituteProviderRefs: readonly string[];\n  readonly providerRuntimeArtifact: ProviderRuntimeArtifactEvidenceMetadata | null;\n}\n"]}
+{"version":3,"file":"provider-selection-resolution-evidence.backend.definitions.js","sourceRoot":"","sources":["../../../../src/external-providers/models/provider-selection-resolution-evidence.backend.definitions.ts"],"names":[],"mappings":"AAEA,MAAM,CAAN,IAAY,sCAIX;AAJD,WAAY,sCAAsC;IAChD,uGAA6D,CAAA;IAC7D,mFAAyC,CAAA;IACzC,uFAA6C,CAAA;AAC/C,CAAC,EAJW,sCAAsC,KAAtC,sCAAsC,QAIjD;AAED,MAAM,CAAN,IAAY,uCAIX;AAJD,WAAY,uCAAuC;IACjD,4DAAiB,CAAA;IACjB,8DAAmB,CAAA;IACnB,kEAAuB,CAAA;AACzB,CAAC,EAJW,uCAAuC,KAAvC,uCAAuC,QAIlD","sourcesContent":["import type { ProviderRuntimeArtifactEvidenceMetadata } from '../../config/models/provider-runtime-artifact.backend.schemas';\n\nexport enum ExternalProviderSelectionAuthorityKind {\n  APPLICATION_RUNTIME_ARTIFACT = 'APPLICATION_RUNTIME_ARTIFACT',\n  DEFAULT_RESOLUTION = 'DEFAULT_RESOLUTION',\n  ENVIRONMENT_OVERRIDE = 'ENVIRONMENT_OVERRIDE',\n}\n\nexport enum ExternalProviderSelectionOverrideStatus {\n  ABSENT = 'ABSENT',\n  APPLIED = 'APPLIED',\n  MALFORMED = 'MALFORMED',\n}\n\nexport interface ExternalProviderSelectionResolutionEvidence {\n  readonly authorityKind: ExternalProviderSelectionAuthorityKind;\n  readonly overrideStatus: ExternalProviderSelectionOverrideStatus;\n  readonly applicationPrimaryProviderRef: string | null;\n  /** The selection's `whenUnavailable` refs — substitutes for an unavailable primary, never a failover chain. */\n  readonly applicationSubstituteProviderRefs: readonly string[];\n  readonly environmentPrimaryProviderRef: string | null;\n  /** The environment override's `whenUnavailable` refs. Same semantics as the application's. */\n  readonly environmentSubstituteProviderRefs: readonly string[];\n  readonly providerRuntimeArtifact: ProviderRuntimeArtifactEvidenceMetadata | null;\n}\n"]}