@wildo-ai/saas-backend-lib 1.1.3 → 1.1.4

package/dist/esm/external-providers/services/backend-provider-loader.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend-provider-loader.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/backend-provider-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,uBAAuB,EACvB,+BAA+B,EAC/B,2BAA2B,GAK5B,MAAM,uDAAuD,CAAC;AA8C/D,6EAA6E;AAE7E;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,OAAO,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,eAAyC;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QACtF,CAAC,CAAC,eAAe,CAAC,YAAY;QAC9B,0FAA0F;QAC1F,kDAAkD;QAClD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAKjC;IACC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAEpF,MAAM,iBAAiB,GAAG,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,WAA0B,CAAC,CAAC;IACvF,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,+BAA+B,CAAC,GAAG,CAAC,WAA0B,CAAC,CAAC;IACrF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,EAAE,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,qCAAqC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,qFAAqF;kBACzF,6FAA6F;kBAC7F,+CAA+C;SACpD,CAAC;IACJ,CAAC;IAED,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,cAAc,iBAAiB,aAAa,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,QAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,QAAQ,GAAG,2BAA2B,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAA0B,CAAC,CAAC;IACvE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO;YACL,MAAM,EAAE,IAAI,iBAAiB,yCAAyC,WAAW,GAAG;kBAChF,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC;SAC5G,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAyC;IAEzC,MAAM,EAAE,mBAAmB,EAAE,YAAY,GAAG,iBAAiB,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IAE3F,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB;;;;;;WAMG;QACH;;;;;;;;;;WAUG;QACH,MAAM,cAAc,GAAG,CAAC,GAAG,+BAA+B,CAAC,OAAO,EAAE,CAAC;aAClE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAU,CAAC,CACxF,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,uBAAuB,CAC/B,EAAE,OAAO,EAAE,IAAI,GAAG,CAAqC,aAAa,CAAC,EAAE,EACvE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACtD;YACD,UAAU,EAAE,IAAI,GAAG,EAAkB;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,eAAe,CAAC,sBAAsB,IAAI,EAAE,CAAC;IAEpE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1E,WAAW;QACX,OAAO,EAAE,MAAM,kBAAkB,CAAC;YAChC,WAAW;YACX,mBAAmB;YACnB,iBAAiB,EAAE,cAAc,CAAC,WAAW,CAAC;YAC9C,YAAY;SACb,CAAC;KACH,CAAC,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAChD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,WAA0B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,uBAAuB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC","sourcesContent":["/**\n * The host-side provider LOADER: turn a process's declared provider refs into a composed backend\n * registry, importing only what that process declared (#330).\n *\n * ## The defect this replaces\n *\n * `BackendProviderRegistryBackendService` used to be initialised from the engine's eagerly composed\n * catalogue — twenty-two provider modules, six of which import an `@ai-sdk/*` client at module top\n * level — as a DEFAULT FIELD INITIALISER. Every backend, every minion and every worker therefore\n * evaluated every provider before the runtime artifact could filter anything, and a Node worker that\n * declared one email provider still paid for six model SDKs (audit finding BE-1). Worse, the reverse\n * was impossible: there was no by-ref resolution at all, so a provider shipped as its own npm package\n * could not be loaded even when the application declared it (BE-2, BE-3).\n *\n * ## Resolution order, and why it is this order\n *\n * For each ref the artifact declares:\n *\n * 1. **The application's own fragment** — a module the application constructed and handed to\n *    `initialize`. It is the most specific answer and it needs no import.\n * 2. **The engine's on-demand map** (`ENGINE_BACKEND_PROVIDER_LOADERS`). An engine-shipped ref never\n *    needs a declared package, which is what lets an application whose artifact predates the import\n *    map keep working unchanged.\n * 3. **The artifact's `providerRuntimeImports[ref]`** — a dynamic import of the package specifier\n *    `wildo config sync` recorded from that provider package's `./companion` contribution, read\n *    through the fixed `backendProviderFragment` convention.\n *\n * ## This function does not refuse\n *\n * A ref it cannot resolve is recorded in {@link BackendProviderResolution.unresolved} with the reason,\n * and resolution continues. The refusal stays where it already was — the artifact filter in\n * `BackendProviderRegistryBackendService`, which names every missing ref in one message — because two\n * refusal sites for one condition is how the two drift, and because a caller that resolved nothing\n * should still hear about ALL of its missing refs rather than the first one. What changes is that the\n * refusal can now say WHY each ref failed instead of only that it was absent from the catalogue.\n */\nimport {\n  composeBackendProviders,\n  ENGINE_BACKEND_PROVIDER_LOADERS,\n  readBackendProviderFragment,\n  type BackendProviderModule,\n  type BackendProviderRegistry,\n  type BackendProviderRegistryFragment,\n  type ProviderRef,\n} from '@wildo-ai/external-connectors-private/backend-runtime';\n\n/**\n * Exactly what the loader reads out of a generated provider-runtime artifact — and nothing else.\n *\n * Stated structurally rather than as `ProviderRuntimeArtifact` because FOUR hosts pass one, and they\n * do not all hold the same nominal type: the backend, minion and worker hold the engine's\n * `ProviderRuntimeArtifact` (`artifactKind: 'backend'`), while the companion holds the CLI's\n * `SaasRuntimeProvidersArtifact` (`artifactKind` is a five-member union). Both satisfy this shape.\n * The alternative was a cast at the companion's call site, which would assert across a package\n * boundary the very thing nobody had checked — so the contract is narrowed to what is actually used\n * instead, and every host satisfies it by construction.\n */\nexport interface DeclaredProviderTopology {\n  readonly providerRefs?: ReadonlyArray<string>;\n  readonly providerRuntimeImports?: Readonly<Record<string, string>>;\n  readonly scope?: { readonly providers?: Readonly<Record<string, unknown>> };\n}\n\n/** @wildo_source:part:start saas.external-providers.backend-provider-loader facet:layer:backend facet:family:provider-registry facet:audience:app-developer */\n/** How a host asks for the providers it declared. */\nexport interface BackendProviderResolutionRequest {\n  /**\n   * The generated topology for THIS process. Absent for a host that has none — a platform\n   * application that initialises its configuration later — which then receives the whole engine\n   * catalogue, exactly as it did before this loader existed.\n   */\n  readonly providerRuntime?: DeclaredProviderTopology;\n  /**\n   * Providers the application constructed itself, rather than declaring by package. Accepts a whole\n   * `BackendProviderRegistry` too: a registry IS a fragment plus its indexes.\n   */\n  readonly applicationFragment?: BackendProviderRegistryFragment;\n  /**\n   * The import used for package-declared providers. Overridable so a test can resolve a fixture\n   * package without publishing one; production passes nothing.\n   */\n  readonly importModule?: (specifier: string) => Promise<unknown>;\n}\n\nexport interface BackendProviderResolution {\n  /** Everything that resolved, composed (so the tier and arm fences have already run). */\n  readonly registry: BackendProviderRegistry;\n  /** `providerRef` -> why it could not be resolved. Empty on a clean resolution. */\n  readonly unresolved: ReadonlyMap<string, string>;\n}\n/** @wildo_source:part:end saas.external-providers.backend-provider-loader */\n\n/**\n * A variable-specifier dynamic import.\n *\n * The specifier is data — a package name a generated artifact recorded — so this cannot be a static\n * import and no bundler can follow it. That is inherent to loading a provider the engine does not\n * know about, and it is why a host that bundles its backend must keep provider packages external.\n */\nasync function importBySpecifier(specifier: string): Promise<unknown> {\n  return import(/* @vite-ignore */ /* webpackIgnore: true */ specifier);\n}\n\nfunction readDeclaredRefs(providerRuntime: DeclaredProviderTopology): string[] {\n  const declared = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0\n    ? providerRuntime.providerRefs\n    // Same fallback the artifact filter keeps: `providerRefs` is optional on the schema, so a\n    // hand-crafted artifact may carry only the scope.\n    : Object.keys(providerRuntime.scope?.providers ?? {});\n  return [...new Set(declared)].sort();\n}\n\nfunction describeThrown(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nasync function resolveOneProvider(input: {\n  providerRef: string;\n  applicationFragment?: BackendProviderRegistryFragment;\n  runtimeImportPath?: string;\n  importModule: (specifier: string) => Promise<unknown>;\n}): Promise<{ module: BackendProviderModule } | { reason: string }> {\n  const { applicationFragment, importModule, providerRef, runtimeImportPath } = input;\n\n  const applicationModule = applicationFragment?.modules.get(providerRef as ProviderRef);\n  if (applicationModule) {\n    return { module: applicationModule };\n  }\n\n  const engineLoader = ENGINE_BACKEND_PROVIDER_LOADERS.get(providerRef as ProviderRef);\n  if (engineLoader) {\n    try {\n      return { module: await engineLoader() };\n    } catch (error) {\n      return { reason: `the engine module failed to load: ${describeThrown(error)}` };\n    }\n  }\n\n  if (!runtimeImportPath) {\n    return {\n      reason: 'no package declares it — the generated provider runtime carries no import path for '\n        + 'this ref, and the engine does not ship it. Add the provider package as a dependency of the '\n        + 'runtime owner and re-run `wildo config sync`.',\n    };\n  }\n\n  let namespace: unknown;\n  try {\n    namespace = await importModule(runtimeImportPath);\n  } catch (error) {\n    return { reason: `importing \"${runtimeImportPath}\" failed: ${describeThrown(error)}` };\n  }\n\n  let fragment: BackendProviderRegistryFragment;\n  try {\n    fragment = readBackendProviderFragment(namespace, runtimeImportPath);\n  } catch (error) {\n    return { reason: describeThrown(error) };\n  }\n\n  const packageModule = fragment.modules.get(providerRef as ProviderRef);\n  if (!packageModule) {\n    const contributed = [...fragment.modules.keys()].map(String).sort();\n    return {\n      reason: `\"${runtimeImportPath}\" loaded but contributes no provider \"${providerRef}\"`\n        + (contributed.length > 0 ? ` (it contributes: ${contributed.join(', ')})` : ' (it contributes nothing)'),\n    };\n  }\n\n  return { module: packageModule };\n}\n\n/**\n * Resolve the backend provider registry for one host.\n *\n * Every declared ref is resolved concurrently: the imports are independent, and a serial loop would\n * make boot latency the sum of every provider package's evaluation.\n */\nexport async function resolveBackendProviderRegistry(\n  request: BackendProviderResolutionRequest,\n): Promise<BackendProviderResolution> {\n  const { applicationFragment, importModule = importBySpecifier, providerRuntime } = request;\n\n  if (!providerRuntime) {\n    /*\n     * No artifact: today's semantics, preserved deliberately. A platform application initialises its\n     * configuration after startup and never receives a generated topology, so narrowing it to the\n     * MAIN tier here would silently drop providers from a host that never asked for the change. It\n     * is lazy now rather than eager, which is all this branch can honestly improve — a host that\n     * declares nothing has told us nothing to filter on.\n     */\n    /*\n     * The application's own modules WIN, and the engine map is asked only for the refs it did not\n     * supply — the same precedence the declared-refs path uses below.\n     *\n     * Not merely for symmetry: `composeProviderRegistry` refuses two fragments that declare one ref,\n     * by design and with no silent override. An application that hands over a registry it composed\n     * ITSELF (the pre-#330 contract: `composeBackendProviders(EngineBackendProviderRegistryFragment,\n     * appFragment)`) carries every engine ref inside it, so composing the two would throw a conflict\n     * on a call that used to work. Filtering here is what keeps this branch behaviour-identical to\n     * the default-field-initialiser it replaced.\n     */\n    const engineOnlyRefs = [...ENGINE_BACKEND_PROVIDER_LOADERS.entries()]\n      .filter(([providerRef]) => !applicationFragment?.modules.has(providerRef));\n    const engineModules = await Promise.all(\n      engineOnlyRefs.map(async ([providerRef, load]) => [providerRef, await load()] as const),\n    );\n    return {\n      registry: composeBackendProviders(\n        { modules: new Map<ProviderRef, BackendProviderModule>(engineModules) },\n        ...(applicationFragment ? [applicationFragment] : []),\n      ),\n      unresolved: new Map<string, string>(),\n    };\n  }\n\n  const declaredRefs = readDeclaredRefs(providerRuntime);\n  const runtimeImports = providerRuntime.providerRuntimeImports ?? {};\n\n  const outcomes = await Promise.all(declaredRefs.map(async (providerRef) => ({\n    providerRef,\n    outcome: await resolveOneProvider({\n      providerRef,\n      applicationFragment,\n      runtimeImportPath: runtimeImports[providerRef],\n      importModule,\n    }),\n  })));\n\n  const modules = new Map<ProviderRef, BackendProviderModule>();\n  const unresolved = new Map<string, string>();\n  for (const { outcome, providerRef } of outcomes) {\n    if ('module' in outcome) {\n      modules.set(providerRef as ProviderRef, outcome.module);\n    } else {\n      unresolved.set(providerRef, outcome.reason);\n    }\n  }\n\n  return { registry: composeBackendProviders({ modules }), unresolved };\n}\n"]}
+{"version":3,"file":"backend-provider-loader.backend.service.js","sourceRoot":"","sources":["../../../../src/external-providers/services/backend-provider-loader.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,uBAAuB,EACvB,+BAA+B,EAC/B,2BAA2B,GAK5B,MAAM,uDAAuD,CAAC;AA8C/D,6EAA6E;AAE7E;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,OAAO,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,eAAyC;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QACtF,CAAC,CAAC,eAAe,CAAC,YAAY;QAC9B,0FAA0F;QAC1F,kDAAkD;QAClD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAKjC;IACC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAEpF,MAAM,iBAAiB,GAAG,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,WAA0B,CAAC,CAAC;IACvF,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,+BAA+B,CAAC,GAAG,CAAC,WAA0B,CAAC,CAAC;IACrF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,EAAE,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,qCAAqC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,qFAAqF;kBACzF,6FAA6F;kBAC7F,+CAA+C;SACpD,CAAC;IACJ,CAAC;IAED,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,cAAc,iBAAiB,aAAa,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,QAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,QAAQ,GAAG,2BAA2B,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAA0B,CAAC,CAAC;IACvE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO;YACL,MAAM,EAAE,IAAI,iBAAiB,yCAAyC,WAAW,GAAG;kBAChF,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC;SAC5G,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAyC;IAEzC,MAAM,EAAE,mBAAmB,EAAE,YAAY,GAAG,iBAAiB,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IAE3F,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB;;;;;;WAMG;QACH;;;;;;;;;;WAUG;QACH,MAAM,cAAc,GAAG,CAAC,GAAG,+BAA+B,CAAC,OAAO,EAAE,CAAC;aAClE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAU,CAAC,CACxF,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,uBAAuB,CAC/B,EAAE,OAAO,EAAE,IAAI,GAAG,CAAqC,aAAa,CAAC,EAAE,EACvE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACtD;YACD,UAAU,EAAE,IAAI,GAAG,EAAkB;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,eAAe,CAAC,sBAAsB,IAAI,EAAE,CAAC;IAEpE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1E,WAAW;QACX,OAAO,EAAE,MAAM,kBAAkB,CAAC;YAChC,WAAW;YACX,mBAAmB;YACnB,iBAAiB,EAAE,cAAc,CAAC,WAAW,CAAC;YAC9C,YAAY;SACb,CAAC;KACH,CAAC,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAChD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,WAA0B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,uBAAuB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC","sourcesContent":["/**\n * The host-side provider LOADER: turn a process's declared provider refs into a composed backend\n * registry, importing only what that process declared (#330).\n *\n * ## The defect this replaces\n *\n * `BackendProviderRegistryBackendService` used to be initialised from the engine's eagerly composed\n * catalogue — twenty-two provider modules, six of which import an `@ai-sdk/*` client at module top\n * level — as a DEFAULT FIELD INITIALISER. Every backend, every minion and every worker therefore\n * evaluated every provider before the runtime artifact could filter anything, and a Node worker that\n * declared one email provider still paid for six model SDKs (audit finding BE-1). Worse, the reverse\n * was impossible: there was no by-ref resolution at all, so a provider shipped as its own npm package\n * could not be loaded even when the application declared it (BE-2, BE-3).\n *\n * ## Resolution order, and why it is this order\n *\n * For each ref the artifact declares:\n *\n * 1. **The application's own fragment** — a module the application constructed and handed to\n *    `initialize`. It is the most specific answer and it needs no import.\n * 2. **The engine's on-demand map** (`ENGINE_BACKEND_PROVIDER_LOADERS`). An engine-shipped ref never\n *    needs a declared package, which is what lets an application whose artifact predates the import\n *    map keep working unchanged.\n * 3. **The artifact's `providerRuntimeImports[ref]`** — a dynamic import of the package specifier\n *    `wildo config sync` recorded from that provider package's `./companion` contribution, read\n *    through the fixed `backendProviderFragment` convention.\n *\n * ## This function does not refuse\n *\n * A ref it cannot resolve is recorded in {@link BackendProviderResolution.unresolved} with the reason,\n * and resolution continues. The refusal stays where it already was — the artifact filter in\n * `BackendProviderRegistryBackendService`, which names every missing ref in one message — because two\n * refusal sites for one condition is how the two drift, and because a caller that resolved nothing\n * should still hear about ALL of its missing refs rather than the first one. What changes is that the\n * refusal can now say WHY each ref failed instead of only that it was absent from the catalogue.\n */\nimport {\n  composeBackendProviders,\n  ENGINE_BACKEND_PROVIDER_LOADERS,\n  readBackendProviderFragment,\n  type BackendProviderModule,\n  type BackendProviderRegistry,\n  type BackendProviderRegistryFragment,\n  type ProviderRef,\n} from '@wildo-ai/external-connectors-private/backend-runtime';\n\n/**\n * Exactly what the loader reads out of a generated provider-runtime artifact — and nothing else.\n *\n * Stated structurally rather than as `ProviderRuntimeArtifact` because FOUR hosts pass one, and they\n * do not all hold the same nominal type: the backend, minion and worker hold the engine's\n * `ProviderRuntimeArtifact` (`artifactKind: 'backend'`), while the companion holds the CLI's\n * `SaasRuntimeProvidersArtifact` (`artifactKind` is a five-member union). Both satisfy this shape.\n * The alternative was a cast at the companion's call site, which would assert across a package\n * boundary the very thing nobody had checked — so the contract is narrowed to what is actually used\n * instead, and every host satisfies it by construction.\n */\nexport interface DeclaredProviderTopology {\n  readonly providerRefs?: ReadonlyArray<string>;\n  readonly providerRuntimeImports?: Readonly<Record<string, string>>;\n  readonly scope?: { readonly providers?: Readonly<Record<string, unknown>> };\n}\n\n/** @wildo_source:part:start saas.external-providers.backend-provider-loader facet:layer:backend facet:family:provider-registry facet:audience:app-developer */\n/** How a host asks for the providers it declared. */\nexport interface BackendProviderResolutionRequest {\n  /**\n   * The generated topology for THIS process. Absent for a host that has none — a platform\n   * application that initialises its configuration later — which then receives the whole engine\n   * catalogue, exactly as it did before this loader existed.\n   */\n  readonly providerRuntime?: DeclaredProviderTopology;\n  /**\n   * Providers the application constructed itself, rather than declaring by package. Accepts a whole\n   * `BackendProviderRegistry` too: a registry IS a fragment plus its indexes.\n   */\n  readonly applicationFragment?: BackendProviderRegistryFragment;\n  /**\n   * The import used for package-declared providers. Overridable so a test can resolve a fixture\n   * package without publishing one; production passes nothing.\n   */\n  readonly importModule?: (specifier: string) => Promise<unknown>;\n}\n\nexport interface BackendProviderResolution {\n  /** Everything that resolved, composed (so the tier and arm fences have already run). */\n  readonly registry: BackendProviderRegistry;\n  /** `providerRef` -> why it could not be resolved. Empty on a clean resolution. */\n  readonly unresolved: ReadonlyMap<string, string>;\n}\n/** @wildo_source:part:end saas.external-providers.backend-provider-loader */\n\n/**\n * A variable-specifier dynamic import.\n *\n * The specifier is data — a package name a generated artifact recorded — so this cannot be a static\n * import and no bundler can follow it. That is inherent to loading a provider the engine does not\n * know about, and it is why a host that bundles its backend must keep provider packages external.\n */\nasync function importBySpecifier(specifier: string): Promise<unknown> {\n  return import(/* @vite-ignore */ /* webpackIgnore: true */ specifier);\n}\n\nfunction readDeclaredRefs(providerRuntime: DeclaredProviderTopology): string[] {\n  const declared = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0\n    ? providerRuntime.providerRefs\n    // Same fallback the artifact filter keeps: `providerRefs` is optional on the schema, so a\n    // hand-crafted artifact may carry only the scope.\n    : Object.keys(providerRuntime.scope?.providers ?? {});\n  return [...new Set(declared)].sort();\n}\n\nfunction describeThrown(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nasync function resolveOneProvider(input: {\n  providerRef: string;\n  applicationFragment?: BackendProviderRegistryFragment;\n  runtimeImportPath?: string;\n  importModule: (specifier: string) => Promise<unknown>;\n}): Promise<{ module: BackendProviderModule } | { reason: string }> {\n  const { applicationFragment, importModule, providerRef, runtimeImportPath } = input;\n\n  const applicationModule = applicationFragment?.modules.get(providerRef as ProviderRef);\n  if (applicationModule) {\n    return { module: applicationModule };\n  }\n\n  const engineLoader = ENGINE_BACKEND_PROVIDER_LOADERS.get(providerRef as ProviderRef);\n  if (engineLoader) {\n    try {\n      return { module: await engineLoader() };\n    } catch (error) {\n      return { reason: `the engine module failed to load: ${describeThrown(error)}` };\n    }\n  }\n\n  if (!runtimeImportPath) {\n    return {\n      reason: 'no package declares it — the generated provider runtime carries no import path for '\n        + 'this ref, and the engine does not ship it. Add the provider package as a dependency of the '\n        + 'runtime owner and re-run `wildo config sync`.',\n    };\n  }\n\n  let namespace: unknown;\n  try {\n    namespace = await importModule(runtimeImportPath);\n  } catch (error) {\n    return { reason: `importing \"${runtimeImportPath}\" failed: ${describeThrown(error)}` };\n  }\n\n  let fragment: BackendProviderRegistryFragment;\n  try {\n    fragment = readBackendProviderFragment(namespace, runtimeImportPath);\n  } catch (error) {\n    return { reason: describeThrown(error) };\n  }\n\n  const packageModule = fragment.modules.get(providerRef as ProviderRef);\n  if (!packageModule) {\n    const contributed = [...fragment.modules.keys()].map(String).sort();\n    return {\n      reason: `\"${runtimeImportPath}\" loaded but contributes no provider \"${providerRef}\"`\n        + (contributed.length > 0 ? ` (it contributes: ${contributed.join(', ')})` : ' (it contributes nothing)'),\n    };\n  }\n\n  return { module: packageModule };\n}\n\n/**\n * Resolve the backend provider registry for one host.\n *\n * Every declared ref is resolved concurrently: the imports are independent, and a serial loop would\n * make boot latency the sum of every provider package's evaluation.\n */\nexport async function resolveBackendProviderRegistry(\n  request: BackendProviderResolutionRequest,\n): Promise<BackendProviderResolution> {\n  const { applicationFragment, importModule = importBySpecifier, providerRuntime } = request;\n\n  if (!providerRuntime) {\n    /*\n     * No artifact: today's semantics, preserved deliberately. A platform application initialises its\n     * configuration after startup and never receives a generated topology, so narrowing it to the\n     * MAIN tier here would silently drop providers from a host that never asked for the change. It\n     * is lazy now rather than eager, which is all this branch can honestly improve — a host that\n     * declares nothing has told us nothing to filter on.\n     */\n    /*\n     * The application's own modules WIN, and the engine map is asked only for the refs it did not\n     * supply — the same precedence the declared-refs path uses below.\n     *\n     * Not merely for symmetry: `composeProviderRegistry` refuses two fragments that declare one ref,\n     * by design and with no silent override. An application that hands over a registry it composed\n     * ITSELF (the pre-#330 contract: `composeBackendProviders(EngineBackendProviderRegistryFragment,\n     * appFragment)`) carries every engine ref inside it, so composing the two would throw a conflict\n     * on a call that used to work. Filtering here is what keeps this branch behaviour-identical to\n     * the default-field-initialiser it replaced.\n     */\n    const engineOnlyRefs = [...ENGINE_BACKEND_PROVIDER_LOADERS.entries()]\n      .filter(([providerRef]) => !applicationFragment?.modules.has(providerRef));\n    const engineModules = await Promise.all(\n      engineOnlyRefs.map(async ([providerRef, load]) => [providerRef, await load()] as const),\n    );\n    return {\n      registry: composeBackendProviders(\n        { modules: new Map<ProviderRef, BackendProviderModule>(engineModules) },\n        ...(applicationFragment ? [applicationFragment] : []),\n      ),\n      unresolved: new Map<string, string>(),\n    };\n  }\n\n  const declaredRefs = readDeclaredRefs(providerRuntime);\n  const runtimeImports = providerRuntime.providerRuntimeImports ?? {};\n\n  const outcomes = await Promise.all(declaredRefs.map(async (providerRef) => ({\n    providerRef,\n    outcome: await resolveOneProvider({\n      providerRef,\n      applicationFragment,\n      runtimeImportPath: runtimeImports[providerRef],\n      importModule,\n    }),\n  })));\n\n  const modules = new Map<ProviderRef, BackendProviderModule>();\n  const unresolved = new Map<string, string>();\n  for (const { outcome, providerRef } of outcomes) {\n    if ('module' in outcome) {\n      modules.set(providerRef as ProviderRef, outcome.module);\n    } else {\n      unresolved.set(providerRef, outcome.reason);\n    }\n  }\n\n  return { registry: composeBackendProviders({ modules }), unresolved };\n}\n"]}

package/dist/esm/external-providers/services/backend-provider-registry.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend-provider-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/backend-provider-registry.backend.service.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACrC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4EAA4E,CAAC;AAkB1H,qBACa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAA4D;IAE5E,mJAAmJ;IACnJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,UAAU,CACR,QAAQ,EAAE,uBAAuB,EACjC,eAAe,CAAC,EAAE,uBAAuB,EACzC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9C,IAAI;IAQP,8FAA8F;IAE9F,WAAW,IAAI,uBAAuB;IAItC,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAInE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAIzC,wBAAwB,CAAC,YAAY,EAAE,sCAAsC,GAAG,qBAAqB,EAAE;IAMvG,kBAAkB,CAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACnD,sBAAsB,GAAG,SAAS;IAIrC,kBAAkB,CAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACnD,+BAA+B,GAAG,SAAS;IAI9C,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,sCAAsC,EAAE;CAGhF"}
+{"version":3,"file":"backend-provider-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/services/backend-provider-registry.backend.service.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACrC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4EAA4E,CAAC;AAkB1H,qBACa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAA4D;IAE5E,mJAAmJ;IACnJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,UAAU,CACR,QAAQ,EAAE,uBAAuB,EACjC,eAAe,CAAC,EAAE,uBAAuB,EACzC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9C,IAAI;IAQP,8FAA8F;IAE9F,WAAW,IAAI,uBAAuB;IAItC,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAInE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAIzC,wBAAwB,CAAC,YAAY,EAAE,sCAAsC,GAAG,qBAAqB,EAAE;IAMvG,kBAAkB,CAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACnD,sBAAsB,GAAG,SAAS;IAIrC,kBAAkB,CAChB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,sCAAsC,GACnD,+BAA+B,GAAG,SAAS;IAI9C,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,sCAAsC,EAAE;CAGhF"}

package/dist/esm/external-providers/services/backend-provider-registry.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend-provider-registry.backend.service.js","sourceRoot":"","sources":["../../../../../src/external-providers/services/backend-provider-registry.backend.service.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,uBAAuB,GAKxB,MAAM,uDAAuD,CAAC;AAI/D,uGAAuG;AACvG,yGAAyG;AACzG,mGAAmG;AAEnG;;;;;;;;;GASG;AACH,MAAM,+BAA+B,GAA4B,uBAAuB,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAG1G,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IACxC,QAAQ,GAA4B,+BAA+B,CAAC;IAE5E,mJAAmJ;IACnJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,UAAU,CACR,QAAiC,EACjC,eAAyC,EACzC,iBAA+C;QAE/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAChG,CAAC;IACD,8FAA8F;IAE9F,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB,CAAC,YAAoD;QAC3E,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC9D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,SAAS,CAC3E,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACnH,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,eAAe,CAAC;IAC7E,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC;CACF,CAAA;AApFY,qCAAqC;IADjD,UAAU,EAAE;GACA,qCAAqC,CAoFjD;;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAS,+BAA+B,CACtC,QAAiC,EACjC,eAAwC,EACxC,iBAA+C;IAE/C,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC1F,CAAC,CAAC,eAAe,CAAC,YAAY;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAG7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqC,CAAC;IACrE,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,GAAiB,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,wEAAwE;cACtE,qDAAqD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;cACjF,6EAA6E;cAC7E,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,OAAO,uBAAuB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import { injectable } from 'inversify';\nimport {\n  composeBackendProviders,\n  type BackendProviderModule,\n  type BackendProviderRegistry,\n  type BackendProtocolBinding,\n  type ProviderProtocolRuntimeContract,\n} from '@wildo-ai/external-connectors-private/backend-runtime';\nimport { ExternalProvider_ExchangeProtocol_Kind } from '@wildo-ai/external-connectors-models';\nimport type { ProviderRuntimeArtifact } from '~wildo-backend-lib/config/models/provider-runtime-artifact.backend.schemas';\n\n// The protocol→kind hand map that stood here (`BACKEND_PROTOCOL_TO_EXTERNAL_KIND`, a THIRD enumeration\n// of the protocol population) was retired 2026-09-05 (#327): a runtime contract's `kind` IS the exchange\n// kind now, and `composeBackendProviders` refuses a binding whose authoring key disagrees with it.\n\n/**\n * The registry a host serves before `initialize` runs: EMPTY, and composed rather than hand-built so\n * it is the same shape every consumer expects.\n *\n * It used to be the engine's eagerly composed catalogue, and that single default field initialiser is\n * what put twenty-two provider modules — six of them pulling an `@ai-sdk/*` client at module top\n * level — into every backend, minion and worker boot graph before any filtering could happen (audit\n * finding BE-1). Providers now arrive through `resolveBackendProviderRegistry`, which imports only\n * the refs the process declared, so nothing about this module evaluates a provider.\n */\nconst EMPTY_BACKEND_PROVIDER_REGISTRY: BackendProviderRegistry = composeBackendProviders({ modules: new Map() });\n\n@injectable()\nexport class BackendProviderRegistryBackendService {\n  private registry: BackendProviderRegistry = EMPTY_BACKEND_PROVIDER_REGISTRY;\n\n  /** @wildo_source:part:start saas.external-providers.backend-provider-registry.runtime-filter facet:layer:backend facet:family:provider-registry */\n  /**\n   * Adopt the registry a host RESOLVED, and re-check it against what that host declared.\n   *\n   * This is the seam that decides which providers a backend host can actually reach at runtime. A\n   * provider authored only in a NON-backend scope (e.g. `providers.scopes.frontendServices.<app>`)\n   * never enters this registry, so any backend feature keyed on it (billing, transactional email,\n   * server-side LLM calls) resolves nothing and fails at startup. Author the provider under\n   * `providers.scopes.backend` in `./wildo.saas.config.ts` so `wildo config sync` lists its ref in\n   * the generated provider-runtime artifact — otherwise it is filtered out here.\n   *\n   * Composition model:\n   *\n   * 1. The **runtime artifact** (`providerRuntime`, generated by `wildo config sync` and imported by\n   *    the application bootstrap) declares which providers this specific process may expose.\n   * 2. `resolveBackendProviderRegistry` LOADS exactly those refs — an application-supplied module\n   *    first, then the engine's on-demand map, then a dynamic import of the package the artifact\n   *    names — and hands the composed result here. Nothing a process did not declare is imported,\n   *    which is the whole point: a worker that declares one email provider evaluates one provider.\n   * 3. This method re-filters that registry to the artifact's `providerRefs` and REFUSES if any ref\n   *    is still missing. That is not redundant with the loader: the loader deliberately does not\n   *    throw, so this stays the one place a deployment gap is reported, and it reports ALL of them at\n   *    once rather than the first import that failed.\n   *\n   * When `providerRuntime` is `undefined` no filtering is applied — the host declared no topology, so\n   * there is nothing to filter against, and the loader will have handed over the whole engine\n   * catalogue (platform applications that initialize their config later).\n   *\n   * `unresolvedReasons` carries the loader's per-ref explanation into the refusal below, so an\n   * operator is told WHY a ref did not resolve (no package declares it / the import threw / the\n   * package exports no fragment) instead of only that it was absent.\n   */\n  initialize(\n    registry: BackendProviderRegistry,\n    providerRuntime?: ProviderRuntimeArtifact,\n    unresolvedReasons?: ReadonlyMap<string, string>,\n  ): void {\n    if (!providerRuntime) {\n      this.registry = registry;\n      return;\n    }\n\n    this.registry = filterRegistryByProviderRuntime(registry, providerRuntime, unresolvedReasons);\n  }\n  /** @wildo_source:part:end saas.external-providers.backend-provider-registry.runtime-filter */\n\n  getRegistry(): BackendProviderRegistry {\n    return this.registry;\n  }\n\n  getProvider(providerRef: string): BackendProviderModule | undefined {\n    return this.registry.getProviderByRef(providerRef as never);\n  }\n\n  hasProvider(providerRef: string): boolean {\n    return Boolean(this.getProvider(providerRef));\n  }\n\n  getProvidersWithProtocol(protocolKind: ExternalProvider_ExchangeProtocol_Kind): BackendProviderModule[] {\n    return [...this.registry.modules.values()].filter((provider) => (\n      this.getProtocolBinding(provider.metadata.ref, protocolKind) !== undefined\n    ));\n  }\n\n  getProtocolBinding(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): BackendProtocolBinding | undefined {\n    return this.getProvider(providerRef)?.protocols.find((binding) => binding.runtimeContract.kind === protocolKind);\n  }\n\n  getRuntimeContract(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): ProviderProtocolRuntimeContract | undefined {\n    return this.getProtocolBinding(providerRef, protocolKind)?.runtimeContract;\n  }\n\n  getProtocolKinds(providerRef: string): ExternalProvider_ExchangeProtocol_Kind[] {\n    return (this.getProvider(providerRef)?.protocols ?? []).map((binding) => binding.runtimeContract.kind);\n  }\n}\n\n/**\n * Build a restricted registry containing only the providers authored for\n * this backend process by the materialized `providerRuntime` artifact.\n *\n * The authored ref set comes from the artifact in this priority order:\n *\n *   1. `providerRuntime.providerRefs` — the canonical projection emitted by\n *      `materializeSaasProviderRuntimeArtifacts`.\n *   2. Keys of `providerRuntime.scope.providers` — fallback for older\n *      artifacts written before `providerRefs` was added.\n *\n * Post-2026-05-10 invariant: after the Option-B fix landed in\n * `selectScopedProviderRuntimeArtifact` (canonical) and the per-host\n * projection sites in minion / Node-worker startup (`selectMinionProviderRuntimeScope`,\n * `selectWorkerProviderRuntimeScope`), the canonical path ALWAYS\n * populates `providerRefs` from the per-host projected scope. The\n * fallback branch is unreachable for any artifact produced by the\n * current CLI sync; it only fires for legacy generated modules\n * predating that projection fix. Kept as defense-in-depth — the\n * schema marks `providerRefs` optional and would let a hand-crafted\n * artifact omit the field.\n *\n * If a ref is claimed by the artifact but missing from the composed\n * catalog, startup fails with a single error naming every missing ref.\n * This is deployment-correctness, not defensive coding: the artifact is\n * generated from `wildo.saas.config.ts` after companion-export discovery,\n * so any miss means the contributing package is not actually reachable\n * from this runtime, which is exactly what Step 1 of the provider\n * migration is supposed to make impossible to ignore.\n */\nfunction filterRegistryByProviderRuntime(\n  registry: BackendProviderRegistry,\n  providerRuntime: ProviderRuntimeArtifact,\n  unresolvedReasons?: ReadonlyMap<string, string>,\n): BackendProviderRegistry {\n  const authoredRefs = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0\n    ? providerRuntime.providerRefs\n    : Object.keys(providerRuntime.scope?.providers ?? {});\n\n  const authoredRefSet = new Set(authoredRefs);\n\n  type BrandedRef = Parameters<typeof registry.getProviderByRef>[0];\n  const filteredModules = new Map<BrandedRef, BackendProviderModule>();\n  const missingRefs: string[] = [];\n\n  for (const ref of authoredRefSet) {\n    const brandedRef = ref as BrandedRef;\n    const module = registry.getProviderByRef(brandedRef);\n    if (!module) {\n      missingRefs.push(ref);\n      continue;\n    }\n    filteredModules.set(brandedRef, module);\n  }\n\n  if (missingRefs.length > 0) {\n    const explained = missingRefs.sort().map((ref) => {\n      const reason = unresolvedReasons?.get(ref);\n      return reason ? `${ref} — ${reason}` : ref;\n    });\n    throw new Error(\n      `[BackendProviderRegistry] generated provider runtime claims providers `\n      + `not present in the composed backend catalog:\\n  - ${explained.join('\\n  - ')}\\n`\n      + `This is a discovery gap — verify that each provider's contributing package `\n      + `is reachable from the backend runtime owner and re-run \\`wildo config sync\\`.`,\n    );\n  }\n\n  return composeBackendProviders({ modules: filteredModules });\n}\n"]}
+{"version":3,"file":"backend-provider-registry.backend.service.js","sourceRoot":"","sources":["../../../../src/external-providers/services/backend-provider-registry.backend.service.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,uBAAuB,GAKxB,MAAM,uDAAuD,CAAC;AAI/D,uGAAuG;AACvG,yGAAyG;AACzG,mGAAmG;AAEnG;;;;;;;;;GASG;AACH,MAAM,+BAA+B,GAA4B,uBAAuB,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAG1G,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IACxC,QAAQ,GAA4B,+BAA+B,CAAC;IAE5E,mJAAmJ;IACnJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,UAAU,CACR,QAAiC,EACjC,eAAyC,EACzC,iBAA+C;QAE/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAChG,CAAC;IACD,8FAA8F;IAE9F,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB,CAAC,YAAoD;QAC3E,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC9D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,SAAS,CAC3E,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACnH,CAAC;IAED,kBAAkB,CAChB,WAAmB,EACnB,YAAoD;QAEpD,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,eAAe,CAAC;IAC7E,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC;CACF,CAAA;AApFY,qCAAqC;IADjD,UAAU,EAAE;GACA,qCAAqC,CAoFjD;;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAS,+BAA+B,CACtC,QAAiC,EACjC,eAAwC,EACxC,iBAA+C;IAE/C,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC1F,CAAC,CAAC,eAAe,CAAC,YAAY;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAG7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqC,CAAC;IACrE,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,GAAiB,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,iBAAiB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,wEAAwE;cACtE,qDAAqD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;cACjF,6EAA6E;cAC7E,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,OAAO,uBAAuB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import { injectable } from 'inversify';\nimport {\n  composeBackendProviders,\n  type BackendProviderModule,\n  type BackendProviderRegistry,\n  type BackendProtocolBinding,\n  type ProviderProtocolRuntimeContract,\n} from '@wildo-ai/external-connectors-private/backend-runtime';\nimport { ExternalProvider_ExchangeProtocol_Kind } from '@wildo-ai/external-connectors-models';\nimport type { ProviderRuntimeArtifact } from '~wildo-backend-lib/config/models/provider-runtime-artifact.backend.schemas';\n\n// The protocol→kind hand map that stood here (`BACKEND_PROTOCOL_TO_EXTERNAL_KIND`, a THIRD enumeration\n// of the protocol population) was retired 2026-09-05 (#327): a runtime contract's `kind` IS the exchange\n// kind now, and `composeBackendProviders` refuses a binding whose authoring key disagrees with it.\n\n/**\n * The registry a host serves before `initialize` runs: EMPTY, and composed rather than hand-built so\n * it is the same shape every consumer expects.\n *\n * It used to be the engine's eagerly composed catalogue, and that single default field initialiser is\n * what put twenty-two provider modules — six of them pulling an `@ai-sdk/*` client at module top\n * level — into every backend, minion and worker boot graph before any filtering could happen (audit\n * finding BE-1). Providers now arrive through `resolveBackendProviderRegistry`, which imports only\n * the refs the process declared, so nothing about this module evaluates a provider.\n */\nconst EMPTY_BACKEND_PROVIDER_REGISTRY: BackendProviderRegistry = composeBackendProviders({ modules: new Map() });\n\n@injectable()\nexport class BackendProviderRegistryBackendService {\n  private registry: BackendProviderRegistry = EMPTY_BACKEND_PROVIDER_REGISTRY;\n\n  /** @wildo_source:part:start saas.external-providers.backend-provider-registry.runtime-filter facet:layer:backend facet:family:provider-registry */\n  /**\n   * Adopt the registry a host RESOLVED, and re-check it against what that host declared.\n   *\n   * This is the seam that decides which providers a backend host can actually reach at runtime. A\n   * provider authored only in a NON-backend scope (e.g. `providers.scopes.frontendServices.<app>`)\n   * never enters this registry, so any backend feature keyed on it (billing, transactional email,\n   * server-side LLM calls) resolves nothing and fails at startup. Author the provider under\n   * `providers.scopes.backend` in `./wildo.saas.config.ts` so `wildo config sync` lists its ref in\n   * the generated provider-runtime artifact — otherwise it is filtered out here.\n   *\n   * Composition model:\n   *\n   * 1. The **runtime artifact** (`providerRuntime`, generated by `wildo config sync` and imported by\n   *    the application bootstrap) declares which providers this specific process may expose.\n   * 2. `resolveBackendProviderRegistry` LOADS exactly those refs — an application-supplied module\n   *    first, then the engine's on-demand map, then a dynamic import of the package the artifact\n   *    names — and hands the composed result here. Nothing a process did not declare is imported,\n   *    which is the whole point: a worker that declares one email provider evaluates one provider.\n   * 3. This method re-filters that registry to the artifact's `providerRefs` and REFUSES if any ref\n   *    is still missing. That is not redundant with the loader: the loader deliberately does not\n   *    throw, so this stays the one place a deployment gap is reported, and it reports ALL of them at\n   *    once rather than the first import that failed.\n   *\n   * When `providerRuntime` is `undefined` no filtering is applied — the host declared no topology, so\n   * there is nothing to filter against, and the loader will have handed over the whole engine\n   * catalogue (platform applications that initialize their config later).\n   *\n   * `unresolvedReasons` carries the loader's per-ref explanation into the refusal below, so an\n   * operator is told WHY a ref did not resolve (no package declares it / the import threw / the\n   * package exports no fragment) instead of only that it was absent.\n   */\n  initialize(\n    registry: BackendProviderRegistry,\n    providerRuntime?: ProviderRuntimeArtifact,\n    unresolvedReasons?: ReadonlyMap<string, string>,\n  ): void {\n    if (!providerRuntime) {\n      this.registry = registry;\n      return;\n    }\n\n    this.registry = filterRegistryByProviderRuntime(registry, providerRuntime, unresolvedReasons);\n  }\n  /** @wildo_source:part:end saas.external-providers.backend-provider-registry.runtime-filter */\n\n  getRegistry(): BackendProviderRegistry {\n    return this.registry;\n  }\n\n  getProvider(providerRef: string): BackendProviderModule | undefined {\n    return this.registry.getProviderByRef(providerRef as never);\n  }\n\n  hasProvider(providerRef: string): boolean {\n    return Boolean(this.getProvider(providerRef));\n  }\n\n  getProvidersWithProtocol(protocolKind: ExternalProvider_ExchangeProtocol_Kind): BackendProviderModule[] {\n    return [...this.registry.modules.values()].filter((provider) => (\n      this.getProtocolBinding(provider.metadata.ref, protocolKind) !== undefined\n    ));\n  }\n\n  getProtocolBinding(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): BackendProtocolBinding | undefined {\n    return this.getProvider(providerRef)?.protocols.find((binding) => binding.runtimeContract.kind === protocolKind);\n  }\n\n  getRuntimeContract(\n    providerRef: string,\n    protocolKind: ExternalProvider_ExchangeProtocol_Kind,\n  ): ProviderProtocolRuntimeContract | undefined {\n    return this.getProtocolBinding(providerRef, protocolKind)?.runtimeContract;\n  }\n\n  getProtocolKinds(providerRef: string): ExternalProvider_ExchangeProtocol_Kind[] {\n    return (this.getProvider(providerRef)?.protocols ?? []).map((binding) => binding.runtimeContract.kind);\n  }\n}\n\n/**\n * Build a restricted registry containing only the providers authored for\n * this backend process by the materialized `providerRuntime` artifact.\n *\n * The authored ref set comes from the artifact in this priority order:\n *\n *   1. `providerRuntime.providerRefs` — the canonical projection emitted by\n *      `materializeSaasProviderRuntimeArtifacts`.\n *   2. Keys of `providerRuntime.scope.providers` — fallback for older\n *      artifacts written before `providerRefs` was added.\n *\n * Post-2026-05-10 invariant: after the Option-B fix landed in\n * `selectScopedProviderRuntimeArtifact` (canonical) and the per-host\n * projection sites in minion / Node-worker startup (`selectMinionProviderRuntimeScope`,\n * `selectWorkerProviderRuntimeScope`), the canonical path ALWAYS\n * populates `providerRefs` from the per-host projected scope. The\n * fallback branch is unreachable for any artifact produced by the\n * current CLI sync; it only fires for legacy generated modules\n * predating that projection fix. Kept as defense-in-depth — the\n * schema marks `providerRefs` optional and would let a hand-crafted\n * artifact omit the field.\n *\n * If a ref is claimed by the artifact but missing from the composed\n * catalog, startup fails with a single error naming every missing ref.\n * This is deployment-correctness, not defensive coding: the artifact is\n * generated from `wildo.saas.config.ts` after companion-export discovery,\n * so any miss means the contributing package is not actually reachable\n * from this runtime, which is exactly what Step 1 of the provider\n * migration is supposed to make impossible to ignore.\n */\nfunction filterRegistryByProviderRuntime(\n  registry: BackendProviderRegistry,\n  providerRuntime: ProviderRuntimeArtifact,\n  unresolvedReasons?: ReadonlyMap<string, string>,\n): BackendProviderRegistry {\n  const authoredRefs = providerRuntime.providerRefs && providerRuntime.providerRefs.length > 0\n    ? providerRuntime.providerRefs\n    : Object.keys(providerRuntime.scope?.providers ?? {});\n\n  const authoredRefSet = new Set(authoredRefs);\n\n  type BrandedRef = Parameters<typeof registry.getProviderByRef>[0];\n  const filteredModules = new Map<BrandedRef, BackendProviderModule>();\n  const missingRefs: string[] = [];\n\n  for (const ref of authoredRefSet) {\n    const brandedRef = ref as BrandedRef;\n    const module = registry.getProviderByRef(brandedRef);\n    if (!module) {\n      missingRefs.push(ref);\n      continue;\n    }\n    filteredModules.set(brandedRef, module);\n  }\n\n  if (missingRefs.length > 0) {\n    const explained = missingRefs.sort().map((ref) => {\n      const reason = unresolvedReasons?.get(ref);\n      return reason ? `${ref} — ${reason}` : ref;\n    });\n    throw new Error(\n      `[BackendProviderRegistry] generated provider runtime claims providers `\n      + `not present in the composed backend catalog:\\n  - ${explained.join('\\n  - ')}\\n`\n      + `This is a discovery gap — verify that each provider's contributing package `\n      + `is reachable from the backend runtime owner and re-run \\`wildo config sync\\`.`,\n    );\n  }\n\n  return composeBackendProviders({ modules: filteredModules });\n}\n"]}

package/dist/esm/external-providers/services/document-extraction.backend.service.d.ts

@@ -20,11 +20,41 @@
  * Every sibling provider seam in this package hands an API key to an `@ai-sdk/*` client factory.
  * This one cannot: **`@ai-sdk/mistral@4.0.12` has ZERO OCR support** — the package exports no
  * `ocr` symbol and no client method reaching `POST /v1/ocr`, because the AI SDK models language,
- * embedding and image models and document extraction is none of them. So the request is built
- * here from the provider's declared `baseUrl`, `endpointPath` and `apiKey` header shape.
+ * embedding and image models and document extraction is none of them. So this service is the
+ * transport, issuing the request itself.
  *
- * That is a cost, and it is worth naming what it buys back: the contract declares the route and
- * the auth header, so a second provider in this family is a module edit rather than a change here.
+ * ## The line between engine and provider
+ *
+ * Until 2026-09-09 being the transport had quietly become being the CLIENT. This service composed
+ * MISTRAL's `/v1/ocr` request — `document: { type: 'document_url', document_url }` as an inline
+ * data URI, `include_image_base64: false` — and read MISTRAL's response — `pages[].markdown`,
+ * `usage_info.pages_processed` — while the arm it narrowed to (`kind: DOCUMENT_EXTRACTION`) is a
+ * PROTOCOL any provider may declare, and the vendor was named nowhere. A second provider selected
+ * for `AI_DOCUMENT_EXTRACTION` would have been sent through Mistral's API carrying its own key,
+ * and nothing would have refused it or logged it.
+ *
+ * It now mirrors `EmailBackendService` and `SMSBackendService`, the two arms that already have a
+ * solved shape for this: the provider declares PURE FUNCTIONS on its contract, and the engine owns
+ * transport.
+ *
+ *   ENGINE (here)  — resolve the provider, the model and the secret; compose the URL from the
+ *                    declared `baseUrl` + `endpointPath` and the API-key header from the declared
+ *                    `apiKey`; apply the engine's own byte ceiling and timeout; issue the request;
+ *                    validate what the provider's parser returns; retry per the failure class.
+ *   PROVIDER       — the request body and its `content-type`, how the bytes travel, and the
+ *                    projection of the vendor's response onto the framework's extraction or onto
+ *                    a {@link DocumentExtraction_FailureClass}.
+ *
+ * There is deliberately no consumer-side adapter registry of the kind billing uses. That shape
+ * exists only because a billing adapter is a CLASS in this package, which the provider package
+ * cannot reach without a reverse dependency edge; a document-extraction provider owes two
+ * functions over `@wildo-ai/external-connectors-models` types, which it supplies directly.
+ *
+ * Three floors stay HERE and a provider cannot lower them, because each one's failure mode is
+ * corpus deletion rather than a bad log line: a transport failure or timeout never reaches the
+ * parser and is `PROVIDER_UNAVAILABLE`; a parser that THROWS is `PROVIDER_UNAVAILABLE` rather
+ * than an unclassified crash; and a parser result that violates the standard output schema is
+ * `PROVIDER_UNAVAILABLE`, never "this document has no text".
  *
  * ## Failure posture — THREE outcomes, not two, and the third is the whole point
  *
@@ -32,7 +62,7 @@
  * not ask". Collapsing them is not a tidiness issue: `RagIngestionBackendService` deletes a
  * field's entire chunk set when an ingestion pass yields no text, so reporting a provider OUTAGE
  * as an unreadable document would silently destroy a live, already-embedded corpus and report
- * success. {@link DocumentExtractionFailureClass} carries that distinction, and
+ * success. {@link DocumentExtraction_FailureClass} carries that distinction, and
  * `FileTextExtractionBackendService` branches on it.
  *
  * ## Observability
@@ -45,7 +75,8 @@
  * context, and never included in a diagnostic dump of the request.
  */
 import { type AgentCallTraceSink, type AgentTraceabilityPolicy } from '@wildo-ai/saas-models';
-import { DocumentExtraction_Applicability, type DocumentExtractionProvider_ExtractDocumentTextOutput } from '@wildo-ai/external-connectors-models';
+import { DocumentExtraction_Applicability, DocumentExtraction_FailureClass, type DocumentExtraction_ProviderExtraction, type DocumentExtractionProvider_ExtractDocumentTextOutput } from '@wildo-ai/external-connectors-models';
+import type { DocumentExtractionProviderRequest, DocumentExtractionProviderRequestInput, DocumentExtractionProviderResponseInput } from '@wildo-ai/external-connectors-private/backend';
 import type { LoggerService } from '../../monitoring/logger/services/logger.service';
 import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service';
 import type { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service';
@@ -82,31 +113,20 @@ export declare const DOCUMENT_EXTRACTION_REQUEST_TIMEOUT_MS = 120000;
  */
 export declare const DOCUMENT_EXTRACTION_TRACE_AGENT_REF = "engine:document-extraction";
 /**
- * WHY an extraction failed, in the only two senses a caller can act on differently.
+ * A failed extraction, classified.
  *
- * This is the service's most load-bearing output after the text itself. See the file header: the
- * consequence of confusing the two is corpus deletion, not a misleading log line.
+ * The CLASS lives in `@wildo-ai/external-connectors-models` rather than here, and the move is what
+ * made the provider seam possible: a vocabulary a provider module cannot reach is one a provider
+ * cannot answer in, so before 2026-09-09 the classification had to be performed by whoever could
+ * reach it — this service — which is precisely how one vendor's status semantics became the
+ * framework's. The ERROR stays here because it is an engine construct: `FileTextExtractionBackendService`
+ * catches it, and a provider never throws.
  */
-export declare enum DocumentExtractionFailureClass {
-    /**
-     * The provider read the request and judged the DOCUMENT unprocessable — corrupt bytes, an
-     * unsupported format, a password-protected file. PERMANENT: re-sending the same bytes cannot
-     * succeed, so a sweep may safely stop retrying and skip the document.
-     */
-    UNREADABLE_DOCUMENT = "unreadable_document",
-    /**
-     * The provider could not be reached, refused the credential, throttled, or failed internally —
-     * a network error, a 401/403, a 429, any 5xx, or a timeout. TRANSIENT and, decisively, says
-     * NOTHING about the document. A caller must not conclude anything about the bytes from this.
-     */
-    PROVIDER_UNAVAILABLE = "provider_unavailable"
-}
-/** A failed extraction, classified. Thrown as {@link DocumentExtractionError}. */
 export declare class DocumentExtractionError extends Error {
-    readonly failureClass: DocumentExtractionFailureClass;
+    readonly failureClass: DocumentExtraction_FailureClass;
     /** Provider HTTP status, when the failure came from a response rather than from the transport. */
     readonly httpStatus?: number;
-    constructor(failureClass: DocumentExtractionFailureClass, message: string, 
+    constructor(failureClass: DocumentExtraction_FailureClass, message: string, 
     /** Provider HTTP status, when the failure came from a response rather than from the transport. */
     httpStatus?: number);
 }
@@ -126,6 +146,14 @@ export interface DocumentExtractionResolvedBinding {
     endpointPath: string;
     apiKeyHeaderName: string;
     apiKeyPrefix: string;
+    /**
+     * The provider's own request projection. Carried on the binding rather than re-read at the call
+     * site so that `resolveBinding` is the ONE place a contract without an executable wire shape is
+     * refused — see the refusal there for why a type is not enough.
+     */
+    buildExtractRequest: (input: DocumentExtractionProviderRequestInput) => DocumentExtractionProviderRequest;
+    /** The provider's own response projection and failure classification. */
+    parseExtractResponse: (response: DocumentExtractionProviderResponseInput) => DocumentExtraction_ProviderExtraction;
 }
 /** Discriminated "is provider extraction possible here?" answer. */
 export type DocumentExtractionBindingResolution = {
@@ -186,32 +214,51 @@ export declare class DocumentExtractionBackendService {
      * physical call emits an agent-call trace (provider, model, pages, outcome) through the standard
      * sink chain, so a reviewer can enumerate what was sent and when.
      * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — only the document bytes reach the
-     * provider: no filename, no row context, no identifiers, no organization or user id. The
-     * document is sent as an inline data URI rather than uploaded to the provider's file store,
-     * which means the provider retains no object of ours to delete (its Files API states a 30-day
-     * retention that an inline request never enters). Observability surfaces receive SUMMARIES only
-     * — the bytes and the extracted text never enter a trace, a log, or an error context.
+     * provider: no filename, no row context, no identifiers, no organization or user id. Since
+     * 2026-09-09 that is STRUCTURAL rather than a property of a body this service composes: the
+     * provider's `buildExtractRequest` receives `DocumentExtractionProviderRequestInput`, which
+     * carries the bytes, the MIME type and the resolved model and nothing else, so no provider can
+     * include an identifier it was never given. What FORM the bytes take on the wire is now the
+     * provider's decision and is recorded and pinned in its own module — the wired one inlines them
+     * as a `data:` URI precisely so no object of ours enters the vendor's file-store retention
+     * window. Observability surfaces receive SUMMARIES only — the bytes and the extracted text never
+     * enter a trace, a log, or an error context.
      * assurance-control: WILDO.PRIVACY.THIRD_PARTY_PROCESSING — routing documents here makes the
      * provider a PROCESSOR of application content. It is opt-in by construction: no bytes leave
      * unless an application selects a provider for `AI_DOCUMENT_EXTRACTION`, and with no selection
      * the local library serves every extraction with no egress at all.
      *
-     * Throws {@link DocumentExtractionError} with a {@link DocumentExtractionFailureClass}. See the
+     * Throws {@link DocumentExtractionError} with a {@link DocumentExtraction_FailureClass}. See the
      * file header for why the caller MUST branch on that class rather than treating any failure as
      * an unreadable document.
      */
     extractDocumentText(request: ExtractDocumentTextRequest): Promise<DocumentExtractionProvider_ExtractDocumentTextOutput>;
     /**
      * Attempt the call up to `binding.maxAttempts` times, retrying ONLY
-     * {@link DocumentExtractionFailureClass.PROVIDER_UNAVAILABLE}.
+     * {@link DocumentExtraction_FailureClass.PROVIDER_UNAVAILABLE}.
      *
      * An `UNREADABLE_DOCUMENT` is never retried, and that asymmetry is the point: the same bytes
      * will be judged the same way, so a retry spends a page of billed quota to receive the identical
      * refusal. The classification is what makes the retry policy expressible at all.
      */
     private invokeWithRetries;
-    /** One physical HTTPS request against the provider's declared route. */
+    /**
+     * One physical HTTPS request against the provider's declared route, with the provider's own body
+     * and the provider's own reading of the answer.
+     *
+     * Everything vendor-shaped comes off the contract. The engine contributes the URL, the API-key
+     * header and the timeout — note the header is applied AFTER the provider's transport headers, so
+     * a provider cannot take authentication over by naming that header.
+     */
     private invokeOnce;
+    /** Lower-cased header projection, so a provider's parser can index headers by a stable name. */
+    private responseHeadersToRecord;
+    /**
+     * Decode a response body without assuming it is JSON. A vendor error page is frequently HTML or
+     * plain text, and handing the raw string to the provider's parser is more useful than throwing
+     * before it gets a chance to classify — the parser is the half that knows what its vendor emits.
+     */
+    private bestEffortParseResponseBody;
     /**
      * One trace per physical extraction call — summaries only (file header: the bytes and the
      * extracted text never enter the trace). Best-effort: a sink failure never turns a successful

package/dist/esm/external-providers/services/document-extraction.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-extraction.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/external-providers/services/document-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAQL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gCAAgC,EAIhC,KAAK,oDAAoD,EAE1D,MAAM,sCAAsC,CAAC;AAG9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AAEtJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,6CAA6C,QAAmB,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC,SAAU,CAAC;AAK9D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,oBAAY,8BAA8B;IACxC;;;;OAIG;IACH,mBAAmB,wBAAwB;IAC3C;;;;OAIG;IACH,oBAAoB,yBAAyB;CAC9C;AAED,kFAAkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,YAAY,EAAE,8BAA8B;IAE5D,kGAAkG;aAClF,UAAU,CAAC,EAAE,MAAM;gBAHnB,YAAY,EAAE,8BAA8B,EAC5D,OAAO,EAAE,MAAM;IACf,kGAAkG;IAClF,UAAU,CAAC,EAAE,MAAM;CAKtC;AAED,gEAAgE;AAChE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,gCAAgC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,MAAM,MAAM,mCAAmC,GAC3C;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,iCAAiC,CAAA;CAAE,GAChE;IACE,UAAU,EAAE,KAAK,CAAC;IAClB;;;;OAIG;IACH,MAAM,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEN,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,gCAAgC,CAAC;IAChD,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqBD,qBACa,gCAAgC;IAKzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAIxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAGhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAjBpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,yBAAyB,EAAE,uCAAuC,EAElE,uBAAuB,EAAE,qCAAqC,EAI9D,cAAc,CAAC,EAAE,kBAAkB,EAGnC,gBAAgB,CAAC,EAAE,uBAAuB;IAM7D;;;;;;;;;OASG;IACI,cAAc,CAAC,aAAa,EAAE,gCAAgC,GAAG,mCAAmC;IAsE3G;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,iCAAiC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1G;;;;;;;;;;;;;;;;;;;;;OAqBG;IACU,mBAAmB,CAC9B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,oDAAoD,CAAC;IA8EhE;;;;;;;OAOG;YACW,iBAAiB;IA8B/B,wEAAwE;YAC1D,UAAU;IA6GxB;;;;OAIG;YACW,mBAAmB;CAyFlC"}
+{"version":3,"file":"document-extraction.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/services/document-extraction.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAGH,OAAO,EAQL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAK/B,KAAK,qCAAqC,EAC1C,KAAK,oDAAoD,EAE1D,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EACV,iCAAiC,EACjC,sCAAsC,EACtC,uCAAuC,EACxC,MAAM,+CAA+C,CAAC;AAGvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,0FAA0F,CAAC;AAGtJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,6CAA6C,QAAmB,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC,SAAU,CAAC;AAK9D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,+BAA+B,CAAC;AAEhF;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,YAAY,EAAE,+BAA+B;IAE7D,kGAAkG;aAClF,UAAU,CAAC,EAAE,MAAM;gBAHnB,YAAY,EAAE,+BAA+B,EAC7D,OAAO,EAAE,MAAM;IACf,kGAAkG;IAClF,UAAU,CAAC,EAAE,MAAM;CAKtC;AAED,gEAAgE;AAChE,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,gCAAgC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,KAAK,EAAE,sCAAsC,KAAK,iCAAiC,CAAC;IAC1G,yEAAyE;IACzE,oBAAoB,EAAE,CAAC,QAAQ,EAAE,uCAAuC,KAAK,qCAAqC,CAAC;CACpH;AAED,oEAAoE;AACpE,MAAM,MAAM,mCAAmC,GAC3C;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,iCAAiC,CAAA;CAAE,GAChE;IACE,UAAU,EAAE,KAAK,CAAC;IAClB;;;;OAIG;IACH,MAAM,EAAE,4BAA4B,CAAC;CACtC,CAAC;AAEN,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,gCAAgC,CAAC;IAChD,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBACa,gCAAgC;IAKzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAIxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAGhC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAjBpC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,yBAAyB,EAAE,uCAAuC,EAElE,uBAAuB,EAAE,qCAAqC,EAI9D,cAAc,CAAC,EAAE,kBAAkB,EAGnC,gBAAgB,CAAC,EAAE,uBAAuB;IAM7D;;;;;;;;;OASG;IACI,cAAc,CAAC,aAAa,EAAE,gCAAgC,GAAG,mCAAmC;IA2G3G;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,iCAAiC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1G;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACU,mBAAmB,CAC9B,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,oDAAoD,CAAC;IA8EhE;;;;;;;OAOG;YACW,iBAAiB;IA8B/B;;;;;;;OAOG;YACW,UAAU;IAkGxB,gGAAgG;IAChG,OAAO,CAAC,uBAAuB;IAQ/B;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAWnC;;;;OAIG;YACW,mBAAmB;CAyFlC"}