@wildo-ai/saas-backend-lib 1.1.3 → 1.1.4

package/dist/esm/files/services/rag-source-field-detection.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rag-source-field-detection.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/files/services/rag-source-field-detection.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,YAAY,EAA0C,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAIL,qBAAqB,EACrB,KAAK,oCAAoC,EAC1C,MAAM,2EAA2E,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,YAAY,EAAE,qBAAqB,CAAC;IACpC,qGAAqG;IACrG,MAAM,EAAE,oCAAoC,CAAC,QAAQ,CAAC,CAAC;IACvD;;;OAGG;IACH,cAAc,CAAC,EAAE,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;CACzE;AAED,qBACa,qCAAqC;IAS9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAZ/B,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAIjF,OAAO,CAAC,oBAAoB,CAA0D;gBAInE,MAAM,EAAE,aAAa,EAErB,iBAAiB,EAAE,+BAA+B,EAElD,YAAY,EAAE,0BAA0B;IAM3D;;;;;;;OAOG;IACH,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,sBAAsB,EAAE;IAsE3E;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO;IAIvD;;;;;;OAMG;IACH,yBAAyB,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAK5G;;;;;OAKG;IACH,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI;CAS9C"}
+{"version":3,"file":"rag-source-field-detection.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/services/rag-source-field-detection.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,YAAY,EAA0C,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAIL,qBAAqB,EACrB,KAAK,oCAAoC,EAC1C,MAAM,2EAA2E,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,YAAY,EAAE,qBAAqB,CAAC;IACpC,qGAAqG;IACrG,MAAM,EAAE,oCAAoC,CAAC,QAAQ,CAAC,CAAC;IACvD;;;OAGG;IACH,cAAc,CAAC,EAAE,oCAAoC,CAAC,gBAAgB,CAAC,CAAC;CACzE;AAED,qBACa,qCAAqC;IAS9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAZ/B,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAIjF,OAAO,CAAC,oBAAoB,CAA0D;gBAInE,MAAM,EAAE,aAAa,EAErB,iBAAiB,EAAE,+BAA+B,EAElD,YAAY,EAAE,0BAA0B;IAM3D;;;;;;;OAOG;IACH,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,sBAAsB,EAAE;IAsE3E;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO;IAIvD;;;;;;OAMG;IACH,yBAAyB,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAK5G;;;;;OAKG;IACH,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI;CAS9C"}

package/dist/esm/files/storage/application-storage-key.backend.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-storage-key.backend.utils.d.ts","sourceRoot":"","sources":["../../../../../src/files/storage/application-storage-key.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEhF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,cAAc,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,oBAAoB,GAAG,SAAS,EACvC,aAAa,EAAE,MAAM,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAcpC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAO7F;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAExE;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAC;IAClC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B,GAAG,MAAM,CAYT"}
+{"version":3,"file":"application-storage-key.backend.utils.d.ts","sourceRoot":"","sources":["../../../../src/files/storage/application-storage-key.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEhF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,cAAc,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,oBAAoB,GAAG,SAAS,EACvC,aAAa,EAAE,MAAM,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAcpC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAO7F;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAExE;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAC;IAClC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B,GAAG,MAAM,CAYT"}

package/dist/esm/files/storage/application-storage-key.backend.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-storage-key.backend.utils.js","sourceRoot":"","sources":["../../../../../src/files/storage/application-storage-key.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAErG,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAGlH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAuC,EACvC,aAAqB;IAErB,kGAAkG;IAClG,gGAAgG;IAChG,4DAA4D;IAC5D,IAAI,KAAK,EAAE,YAAY,KAAK,oBAAoB,CAAC,aAAa,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,EAAE,YAAY,KAAK,oBAAoB,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1E,CAAC;IACD,iGAAiG;IACjG,mGAAmG;IACnG,uDAAuD;IACvD,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,OAA8B;IACnF,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAY5C;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB;QACzC,CAAC,CAAC,sCAAsC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACjE,CAAC,CAAC,wBAAwB,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACvF,OAAO,8BAA8B,CAAC,YAAY,CAAC,4BAA4B,CAC7E,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,QAAQ,EACb,WAAW,EACX,KAAK,EACL,OAAO,CACR,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The ONE composer every path-based storage provider addresses a blob with.\n *\n * ## Why this module exists rather than a second implementation per provider\n *\n * The key shape is not decoration: `<scope>/<scopeId>` is what makes ONE TENANT's blobs a PREFIX,\n * and therefore what makes erasure, orphan sweeps, per-tenant listing and credential confinement\n * expressible at all. A provider that composes its own shape is a deployment where none of those\n * exist — silently, because nothing fails when a prefix is merely absent.\n *\n * That is exactly what had happened: the managed provider carried the tenant-scoped shape while the\n * local-directory provider composed `[applicationId]/[folderPath]/<leaf>` from the field's\n * declarative binding alone, so routing a field to local storage produced a store with no tenant\n * structure whatsoever. Two implementations that \"must agree\" agreed for as long as nobody edited\n * either. So the composition lives here, once, and both providers call it.\n *\n * ## What is NOT here\n *\n * Provider-specific framing stays with the provider:\n * - the managed provider prepends its configured `bucketPrefix` (an object-store namespacing knob\n *   with no filesystem meaning) and applies its textual stored-`storageRef` prefix guard;\n * - the local provider resolves the returned relative key against its base directory and applies\n *   its filesystem containment check.\n *\n * What is shared is the ANSWER to \"where does this blob live\", which is the part that must not\n * differ between two providers serving the same authored `z_file()` binding.\n */\n\nimport { ResourcePrimaryScope, resolveSharedPersistenceCollectionName } from '@wildo-ai/saas-models';\nimport type { FileScopeIdentifiers, ResourceType } from '@wildo-ai/saas-models';\nimport { API_ROUTES_BACKEND_DEFINITIONS } from '~wildo-backend-lib/requests/models/api-routes.backend.defintions';\nimport type { StorageUploadOptions } from './file-storage-provider.types';\n\n/**\n * The key segment for a blob with no resource type.\n *\n * A literal rather than a resource name, and prefixed with `_` so it can never collide with a\n * value `resolveSharedPersistenceCollectionName` produces — that function returns collection\n * names, which never start with an underscore.\n */\nexport const UNLINKED_STORAGE_SEGMENT = '_unlinked';\n\n/**\n * The `<scope>/<scopeId>` segments of a storage key.\n *\n * This is what makes ONE TENANT's blobs a prefix. Without it every organization's files of a given\n * resource share a single prefix, so erasure, orphan sweeps and \"who owns this object\" all become\n * per-row database work instead of prefix operations — and no per-tenant confinement is expressible\n * at all. (That was the state of the managed provider until 2026-08-14: the approved shape carried\n * these segments and the first implementation dropped them. The local-directory provider never had\n * them at all until this module existed.)\n *\n * Always emits BOTH segments, including for APPLICATION scope where the id repeats the one already\n * in the prefix. The redundancy is deliberate: one key shape, no branch, nothing that can produce a\n * second layout. A parser can always take the last three segments as scope/scopeId/fileId.\n */\nexport function resolveStorageScopeSegments(\n  scope: FileScopeIdentifiers | undefined,\n  applicationId: string,\n): { scope: string; scopeId: string } {\n  // The SEGMENT IS the enum value — `ResourcePrimaryScope.ORGANIZATIONS === 'organizations'`. Using\n  // the enum directly keeps one vocabulary: a parallel string table here would be a second source\n  // that silently drifts the day a scope is added or renamed.\n  if (scope?.primaryScope === ResourcePrimaryScope.ORGANIZATIONS && scope.organizationId) {\n    return { scope: ResourcePrimaryScope.ORGANIZATIONS, scopeId: scope.organizationId };\n  }\n  if (scope?.primaryScope === ResourcePrimaryScope.USER_SELF && scope.userId) {\n    return { scope: ResourcePrimaryScope.USER_SELF, scopeId: scope.userId };\n  }\n  // APPLICATION scope, or a scope whose id is missing — fall back to the application. Never throw:\n  // a key must always be derivable, and an application-scoped key is the correct conservative answer\n  // (it is the narrowest scope every file provably has).\n  return { scope: ResourcePrimaryScope.APPLICATION, scopeId: applicationId };\n}\n\n/**\n * The caller-authored tail of a key: `[folderPath/]<fileName|fileId>`.\n *\n * Returns the empty string when nothing survives — the caller raises\n * `FILE_STORAGE_KEY_COMPOSITION_FAILED` with its own execution context, which this module does not\n * have.\n */\nexport function composeStorageLeafPath(fileId: string, options?: StorageUploadOptions): string {\n  const leafName = options?.fileName?.trim() || fileId;\n  const folderPath = options?.folderPath?.trim();\n  if (!leafName) {\n    return '';\n  }\n  return folderPath ? `${folderPath}/${leafName}` : leafName;\n}\n\n/**\n * Does `candidate` contain a whole `.` or `..` path segment?\n *\n * ## Why a TEXTUAL check, beside a provider's own containment guard\n *\n * The local provider's guard resolves the path and checks it stays under the base directory, which\n * is strictly stronger for the question \"does this escape the store\". It is strictly WEAKER for the\n * question this key shape exists to answer: once a key carries a six-segment\n * `applications/<app>/files/<resource>/<scope>/<scopeId>/` prefix, a `..` no longer has to escape\n * the store to do damage — it only has to climb out of the TENANT prefix and land under a\n * different one, which the containment check happily admits because the destination is still\n * inside the base.\n *\n * The managed provider states the same thing from the other side (its stored-ref prefix check is\n * textual, so `…/x/../../../elsewhere/y` satisfies it). Both providers therefore refuse a `.`/`..`\n * SEGMENT in the composed key, and the verdict for one authored value no longer depends on which\n * provider a deployment binds.\n *\n * Only a WHOLE segment counts. `v1.2.3`, `..config` and `file..name.txt` are ordinary names, and a\n * substring match on `..` would refuse all three — an over-refusal invisible until an application\n * authors a versioned folder.\n */\nexport function storageKeyHasTraversalSegment(candidate: string): boolean {\n  return candidate.split('/').some((segment) => segment === '.' || segment === '..');\n}\n\n/**\n * The application-scoped, resource-scoped, tenant-scoped key for a blob.\n *\n * `applications/<applicationId>/files/<storageName>/<scope>/<scopeId>/<leafPath>`\n *\n * The managed provider prepends its bucket prefix to this; the local provider resolves it against\n * its base directory. Nothing else may re-derive it — the shape is the tenant boundary, and a\n * second derivation is a second boundary.\n */\nexport function composeApplicationStorageKey(args: {\n  applicationId: string;\n  /** `[folderPath/]<fileName|fileId>` — see {@link composeStorageLeafPath}. */\n  leafPath: string;\n  /**\n   * The resource this blob belongs to. Absent ⇒ {@link UNLINKED_STORAGE_SEGMENT}, an explicit\n   * staging segment rather than a fallthrough: late LINKING is allowed (the row's\n   * `linkedResourceId` fills in later), late TYPE declaration is not, because the key is derived\n   * once at create and the blob never moves.\n   */\n  linkedResourceType?: ResourceType;\n  scope?: FileScopeIdentifiers;\n}): string {\n  const storageName = args.linkedResourceType\n    ? resolveSharedPersistenceCollectionName(args.linkedResourceType)\n    : UNLINKED_STORAGE_SEGMENT;\n  const { scope, scopeId } = resolveStorageScopeSegments(args.scope, args.applicationId);\n  return API_ROUTES_BACKEND_DEFINITIONS.FILE_STORAGE.STORAGE_KEY_APPLICATION_FILE(\n    args.applicationId,\n    args.leafPath,\n    storageName,\n    scope,\n    scopeId,\n  );\n}\n"]}
+{"version":3,"file":"application-storage-key.backend.utils.js","sourceRoot":"","sources":["../../../../src/files/storage/application-storage-key.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAErG,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAGlH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAuC,EACvC,aAAqB;IAErB,kGAAkG;IAClG,gGAAgG;IAChG,4DAA4D;IAC5D,IAAI,KAAK,EAAE,YAAY,KAAK,oBAAoB,CAAC,aAAa,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,EAAE,YAAY,KAAK,oBAAoB,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1E,CAAC;IACD,iGAAiG;IACjG,mGAAmG;IACnG,uDAAuD;IACvD,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,OAA8B;IACnF,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAY5C;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB;QACzC,CAAC,CAAC,sCAAsC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACjE,CAAC,CAAC,wBAAwB,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACvF,OAAO,8BAA8B,CAAC,YAAY,CAAC,4BAA4B,CAC7E,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,QAAQ,EACb,WAAW,EACX,KAAK,EACL,OAAO,CACR,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The ONE composer every path-based storage provider addresses a blob with.\n *\n * ## Why this module exists rather than a second implementation per provider\n *\n * The key shape is not decoration: `<scope>/<scopeId>` is what makes ONE TENANT's blobs a PREFIX,\n * and therefore what makes erasure, orphan sweeps, per-tenant listing and credential confinement\n * expressible at all. A provider that composes its own shape is a deployment where none of those\n * exist — silently, because nothing fails when a prefix is merely absent.\n *\n * That is exactly what had happened: the managed provider carried the tenant-scoped shape while the\n * local-directory provider composed `[applicationId]/[folderPath]/<leaf>` from the field's\n * declarative binding alone, so routing a field to local storage produced a store with no tenant\n * structure whatsoever. Two implementations that \"must agree\" agreed for as long as nobody edited\n * either. So the composition lives here, once, and both providers call it.\n *\n * ## What is NOT here\n *\n * Provider-specific framing stays with the provider:\n * - the managed provider prepends its configured `bucketPrefix` (an object-store namespacing knob\n *   with no filesystem meaning) and applies its textual stored-`storageRef` prefix guard;\n * - the local provider resolves the returned relative key against its base directory and applies\n *   its filesystem containment check.\n *\n * What is shared is the ANSWER to \"where does this blob live\", which is the part that must not\n * differ between two providers serving the same authored `z_file()` binding.\n */\n\nimport { ResourcePrimaryScope, resolveSharedPersistenceCollectionName } from '@wildo-ai/saas-models';\nimport type { FileScopeIdentifiers, ResourceType } from '@wildo-ai/saas-models';\nimport { API_ROUTES_BACKEND_DEFINITIONS } from '~wildo-backend-lib/requests/models/api-routes.backend.defintions';\nimport type { StorageUploadOptions } from './file-storage-provider.types';\n\n/**\n * The key segment for a blob with no resource type.\n *\n * A literal rather than a resource name, and prefixed with `_` so it can never collide with a\n * value `resolveSharedPersistenceCollectionName` produces — that function returns collection\n * names, which never start with an underscore.\n */\nexport const UNLINKED_STORAGE_SEGMENT = '_unlinked';\n\n/**\n * The `<scope>/<scopeId>` segments of a storage key.\n *\n * This is what makes ONE TENANT's blobs a prefix. Without it every organization's files of a given\n * resource share a single prefix, so erasure, orphan sweeps and \"who owns this object\" all become\n * per-row database work instead of prefix operations — and no per-tenant confinement is expressible\n * at all. (That was the state of the managed provider until 2026-08-14: the approved shape carried\n * these segments and the first implementation dropped them. The local-directory provider never had\n * them at all until this module existed.)\n *\n * Always emits BOTH segments, including for APPLICATION scope where the id repeats the one already\n * in the prefix. The redundancy is deliberate: one key shape, no branch, nothing that can produce a\n * second layout. A parser can always take the last three segments as scope/scopeId/fileId.\n */\nexport function resolveStorageScopeSegments(\n  scope: FileScopeIdentifiers | undefined,\n  applicationId: string,\n): { scope: string; scopeId: string } {\n  // The SEGMENT IS the enum value — `ResourcePrimaryScope.ORGANIZATIONS === 'organizations'`. Using\n  // the enum directly keeps one vocabulary: a parallel string table here would be a second source\n  // that silently drifts the day a scope is added or renamed.\n  if (scope?.primaryScope === ResourcePrimaryScope.ORGANIZATIONS && scope.organizationId) {\n    return { scope: ResourcePrimaryScope.ORGANIZATIONS, scopeId: scope.organizationId };\n  }\n  if (scope?.primaryScope === ResourcePrimaryScope.USER_SELF && scope.userId) {\n    return { scope: ResourcePrimaryScope.USER_SELF, scopeId: scope.userId };\n  }\n  // APPLICATION scope, or a scope whose id is missing — fall back to the application. Never throw:\n  // a key must always be derivable, and an application-scoped key is the correct conservative answer\n  // (it is the narrowest scope every file provably has).\n  return { scope: ResourcePrimaryScope.APPLICATION, scopeId: applicationId };\n}\n\n/**\n * The caller-authored tail of a key: `[folderPath/]<fileName|fileId>`.\n *\n * Returns the empty string when nothing survives — the caller raises\n * `FILE_STORAGE_KEY_COMPOSITION_FAILED` with its own execution context, which this module does not\n * have.\n */\nexport function composeStorageLeafPath(fileId: string, options?: StorageUploadOptions): string {\n  const leafName = options?.fileName?.trim() || fileId;\n  const folderPath = options?.folderPath?.trim();\n  if (!leafName) {\n    return '';\n  }\n  return folderPath ? `${folderPath}/${leafName}` : leafName;\n}\n\n/**\n * Does `candidate` contain a whole `.` or `..` path segment?\n *\n * ## Why a TEXTUAL check, beside a provider's own containment guard\n *\n * The local provider's guard resolves the path and checks it stays under the base directory, which\n * is strictly stronger for the question \"does this escape the store\". It is strictly WEAKER for the\n * question this key shape exists to answer: once a key carries a six-segment\n * `applications/<app>/files/<resource>/<scope>/<scopeId>/` prefix, a `..` no longer has to escape\n * the store to do damage — it only has to climb out of the TENANT prefix and land under a\n * different one, which the containment check happily admits because the destination is still\n * inside the base.\n *\n * The managed provider states the same thing from the other side (its stored-ref prefix check is\n * textual, so `…/x/../../../elsewhere/y` satisfies it). Both providers therefore refuse a `.`/`..`\n * SEGMENT in the composed key, and the verdict for one authored value no longer depends on which\n * provider a deployment binds.\n *\n * Only a WHOLE segment counts. `v1.2.3`, `..config` and `file..name.txt` are ordinary names, and a\n * substring match on `..` would refuse all three — an over-refusal invisible until an application\n * authors a versioned folder.\n */\nexport function storageKeyHasTraversalSegment(candidate: string): boolean {\n  return candidate.split('/').some((segment) => segment === '.' || segment === '..');\n}\n\n/**\n * The application-scoped, resource-scoped, tenant-scoped key for a blob.\n *\n * `applications/<applicationId>/files/<storageName>/<scope>/<scopeId>/<leafPath>`\n *\n * The managed provider prepends its bucket prefix to this; the local provider resolves it against\n * its base directory. Nothing else may re-derive it — the shape is the tenant boundary, and a\n * second derivation is a second boundary.\n */\nexport function composeApplicationStorageKey(args: {\n  applicationId: string;\n  /** `[folderPath/]<fileName|fileId>` — see {@link composeStorageLeafPath}. */\n  leafPath: string;\n  /**\n   * The resource this blob belongs to. Absent ⇒ {@link UNLINKED_STORAGE_SEGMENT}, an explicit\n   * staging segment rather than a fallthrough: late LINKING is allowed (the row's\n   * `linkedResourceId` fills in later), late TYPE declaration is not, because the key is derived\n   * once at create and the blob never moves.\n   */\n  linkedResourceType?: ResourceType;\n  scope?: FileScopeIdentifiers;\n}): string {\n  const storageName = args.linkedResourceType\n    ? resolveSharedPersistenceCollectionName(args.linkedResourceType)\n    : UNLINKED_STORAGE_SEGMENT;\n  const { scope, scopeId } = resolveStorageScopeSegments(args.scope, args.applicationId);\n  return API_ROUTES_BACKEND_DEFINITIONS.FILE_STORAGE.STORAGE_KEY_APPLICATION_FILE(\n    args.applicationId,\n    args.leafPath,\n    storageName,\n    scope,\n    scopeId,\n  );\n}\n"]}

package/dist/esm/files/storage/file-storage-path-resolver.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-path-resolver.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/files/storage/file-storage-path-resolver.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAmE,MAAM,0BAA0B,CAAC;AAEpI,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAElG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAI1E,qBACa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa;IAMxC;;;;;;;;;OASG;IACH,OAAO,CACL,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,kBAAkB,EAChC,aAAa,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,EACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,oBAAoB,GAAG,SAAS;IAwEnC,OAAO,CAAC,iBAAiB;IAyBzB,OAAO,CAAC,eAAe;IAmDvB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;CAmDhC;AAkBD;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7C"}
+{"version":3,"file":"file-storage-path-resolver.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/storage/file-storage-path-resolver.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAmE,MAAM,0BAA0B,CAAC;AAEpI,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAElG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAI1E,qBACa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAI9D,MAAM,EAAE,aAAa;IAMxC;;;;;;;;;OASG;IACH,OAAO,CACL,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,kBAAkB,EAChC,aAAa,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,EACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,oBAAoB,GAAG,SAAS;IAwEnC,OAAO,CAAC,iBAAiB;IAyBzB,OAAO,CAAC,eAAe;IAmDvB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;CAmDhC;AAkBD;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7C"}

package/dist/esm/files/storage/file-storage-provider.types.d.ts

@@ -12,7 +12,7 @@ import type { FileStorageAccepted } from '@wildo-ai/zod-decorators';
 import type { FileScopeIdentifiers, ResourceType } from '@wildo-ai/saas-models';
 import type { File } from '@wildo-ai/saas-models';
 import type { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas';
-export type StoredFileStorageTarget = Pick<File, 'fileId' | 'storageProvider' | 'storageRef'>;
+export type StoredFileStorageTarget = Pick<File, 'fileId' | 'storageProvider' | 'storageRef' | 'uploadedBy' | 'uploadedByEntityType'>;
 /**
  * Optional parameters for upload operations.
  *
@@ -106,6 +106,15 @@ export interface StorageDownloadResult {
 /**
  * Storage metadata for a file.
  */
+/**
+ * What a vendor says about a file a person is about to link — the metadata the
+ * FILES row is created from, so the row records the vendor's facts rather than
+ * whatever the picker showed.
+ */
+export interface StorageRemoteFileDescription extends StorageFileMetadata {
+    /** The vendor's display name for the file. */
+    name: string;
+}
 export interface StorageFileMetadata {
     /** Content type (MIME type) */
     contentType: string;
@@ -133,6 +142,32 @@ export interface StorageProviderHealthResult {
 export interface IFileStorageProvider {
     /** Provider identifier — must match a FileStorageAccepted enum value */
     readonly providerId: FileStorageAccepted;
+    /**
+     * The external provider whose DELEGATED credential this storage reads and
+     * writes through — `'google-drive'` for `GOOGLE_DRIVE` — set only on a storage that
+     * lives at a vendor (#394 P5). It is the join the upload handler resolves a
+     * picker's `REMOTE_REFERENCE` by: the reference names a provider, the field
+     * names the storages it accepts, and the storage whose `connectedProviderRef`
+     * is that provider must be one of them. Absent on a storage the framework
+     * itself serves.
+     */
+    readonly connectedProviderRef?: string;
+    /**
+     * True on a storage whose `delete` forgets the reference and does NOT remove the bytes — a
+     * vendor storage where the bytes are a person's own document (#394 P5). A caller that "rolls
+     * back" a stored blob by deleting it must read this before logging that the bytes are gone.
+     */
+    readonly retainsBytesOnDelete?: true;
+    /**
+     * Describe a file that already exists at the vendor, BEFORE any row exists
+     * for it — the verification step of linking a picker's `REMOTE_REFERENCE`
+     * (#394 P5). Present only on a storage that can be linked to; a storage that
+     * only receives uploads has no such file to describe. Reads through the
+     * linker's connected account, which is also the proof that the reference is
+     * real and reachable by the person offering it; a reference the vendor does
+     * not know, or the linker cannot read, refuses here and no row is created.
+     */
+    describeRemoteReference?(externalId: string, linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>, executionContext: ExecutionContext<any>): Promise<StorageRemoteFileDescription>;
     /**
      * Whether this provider has the required configuration to operate.
      * Returns false when env vars / credentials are absent.

package/dist/esm/files/storage/file-storage-provider.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-provider.types.d.ts","sourceRoot":"","sources":["../../../../../src/files/storage/file-storage-provider.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,GAAG,iBAAiB,GAAG,YAAY,CAAC,CAAC;AAE9F;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAC;IAElC;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAE7B;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,MAAM,EAAE,QAAQ,CAAC;IACjB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IAEzC;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC;IAExB;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEpD;;;;;;;;;;OAUG;IACH,MAAM,CACJ,UAAU,EAAE,QAAQ,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;OAMG;IACH,QAAQ,CACN,IAAI,EAAE,uBAAuB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;;;OAKG;IACH,MAAM,CACJ,IAAI,EAAE,uBAAuB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,uBAAuB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC"}
+{"version":3,"file":"file-storage-provider.types.d.ts","sourceRoot":"","sources":["../../../../src/files/storage/file-storage-provider.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,IAAI,EACF,QAAQ,GACR,iBAAiB,GACjB,YAAY,GASZ,YAAY,GACZ,sBAAsB,CACzB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAC;IAElC;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAE7B;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,MAAM,EAAE,QAAQ,CAAC;IACjB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED;;GAEG;AACH;;;;GAIG;AACH,MAAM,WAAW,4BAA6B,SAAQ,mBAAmB;IACvE,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IAEzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAEvC;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAErC;;;;;;;;OAQG;IACH,uBAAuB,CAAC,CACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG,sBAAsB,CAAC,EACzD,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAEzC;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC;IAExB;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEpD;;;;;;;;;;OAUG;IACH,MAAM,CACJ,UAAU,EAAE,QAAQ,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;OAMG;IACH,QAAQ,CACN,IAAI,EAAE,uBAAuB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;;;OAKG;IACH,MAAM,CACJ,IAAI,EAAE,uBAAuB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;OAMG;IACH,WAAW,CACT,IAAI,EAAE,uBAAuB,EAC7B,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC"}

package/dist/esm/files/storage/file-storage-provider.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-provider.types.js","sourceRoot":"","sources":["../../../../../src/files/storage/file-storage-provider.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG","sourcesContent":["/**\n * File Storage Provider Interface\n *\n * Abstracts storage operations behind a unified interface.\n * The Wildo-managed MinIO/S3 provider is the default implementation.\n * Future providers (OneDrive, Google Drive, Dropbox, local-directory) implement the same interface.\n *\n * Services inject `IFileStorageProvider` via the `FileStorageRouterBackendService`.\n */\n\nimport { Readable } from 'stream';\nimport type { FileStorageAccepted } from '@wildo-ai/zod-decorators';\nimport type { FileScopeIdentifiers, ResourceType } from '@wildo-ai/saas-models';\nimport type { File } from '@wildo-ai/saas-models';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\n\nexport type StoredFileStorageTarget = Pick<File, 'fileId' | 'storageProvider' | 'storageRef'>;\n\n/**\n * Optional parameters for upload operations.\n *\n * All path segments are pre-composed by the caller\n * (typically `FileStoragePathResolverBackendService`); the provider\n * only concatenates them onto its own root.\n */\nexport interface StorageUploadOptions {\n  /**\n   * The resource type this blob belongs to, used to place it under a per-resource\n   * segment in the object key: `applications/<appId>/files/<storageName>/…`.\n   *\n   * OPTIONAL because a blob genuinely may have no resource yet (staged before linking), which\n   * lands under `_unlinked/` rather than inventing a resource segment. It is NOT optional because\n   * some provider ignores it — every path-based provider composes its key with the same shared\n   * composer, so this segment reaches the local-directory provider exactly as it reaches the\n   * managed one.\n   *\n   * The segment is `resolveSharedPersistenceCollectionName(resourceType)`, NOT the raw\n   * resource type — the same vocabulary the database grants use, so `USER_SELF` and\n   * `USERS` resolve to one prefix because they are the same rows.\n   */\n  linkedResourceType?: ResourceType;\n\n  /**\n   * The file's tenant scope, placed into the object key as `<scope>/<scopeId>`.\n   *\n   * This is what makes a tenant's blobs a PREFIX: erasure, orphan sweeps and \"who owns this object\"\n   * become prefix operations instead of per-row database lookups. Omitted ⇒ the key falls back to\n   * APPLICATION scope with the resolved application id, so there is exactly ONE key shape and never\n   * a branch that produces a second layout.\n   */\n  scope?: FileScopeIdentifiers;\n\n  /**\n   * Composed relative folder path for organizing files within\n   * the provider's namespace.\n   *\n   * When set, the provider stores the blob at\n   * `<providerRoot>/[applications/<appId>/files/<storageName>/<scope>/<scopeId>/]<folderPath>/<fileName|fileId>`,\n   * the bracketed prefix being present unless `includeApplicationId` is explicitly `false`.\n   *\n   * Forward-slash separated, no leading or trailing slash.\n   * @example 'specs/icps/big_companies'\n   * @example 'avatars'\n   */\n  folderPath?: string;\n\n  /**\n   * Explicit file name to use instead of the fileId.\n   * When omitted, the provider falls back to the fileId (UUID).\n   * @example 'personna.md'\n   * @example 'avatar.png'\n   */\n  fileName?: string;\n\n  /**\n   * Whether the framework-derived prefix\n   * `applications/<appId>/files/<storageName>/<scope>/<scopeId>/` is placed above the authored\n   * folder path and leaf name.\n   *\n   * - `true` / `undefined` → include it. This is now the default on EVERY provider; the\n   *   local-directory provider defaulted to `false` until 2026-09-09, which is what left it with no\n   *   tenant structure.\n   * - `false` → the key is the bare `[folderPath/]<fileName|fileId>`. This discards the WHOLE\n   *   prefix, not only the application segment, so nothing about the blob is addressable by tenant\n   *   any more. Both providers honour it identically, so one authored value has one meaning.\n   */\n  includeApplicationId?: boolean;\n}\n\n/**\n * Result of a successful file upload.\n */\nexport interface StorageUploadResult {\n  /** Unique storage reference (provider-specific key) */\n  storageRef: string;\n  /** Storage provider identifier */\n  provider: FileStorageAccepted;\n}\n\n/**\n * Result of a file download.\n */\nexport interface StorageDownloadResult {\n  /** Readable stream of file content */\n  stream: Readable;\n  /** Content type (MIME type) */\n  contentType: string;\n  /** File size in bytes */\n  size: number;\n  /** ETag for caching */\n  etag?: string;\n  /** Last modification date */\n  lastModified?: Date;\n}\n\n/**\n * Storage metadata for a file.\n */\nexport interface StorageFileMetadata {\n  /** Content type (MIME type) */\n  contentType: string;\n  /** File size in bytes */\n  size: number;\n  /** ETag for caching */\n  etag?: string;\n  /** Last modification date */\n  lastModified?: Date;\n}\n\n/**\n * Health check result for a storage provider.\n */\nexport interface StorageProviderHealthResult {\n  healthy: boolean;\n  latency: number;\n  error?: string;\n}\n\n/**\n * Unified storage provider interface.\n *\n * All file storage providers must implement this interface.\n * Operations are scoped by executionContext for multi-tenant isolation.\n */\nexport interface IFileStorageProvider {\n  /** Provider identifier — must match a FileStorageAccepted enum value */\n  readonly providerId: FileStorageAccepted;\n\n  /**\n   * Whether this provider has the required configuration to operate.\n   * Returns false when env vars / credentials are absent.\n   */\n  isConfigured(): boolean;\n\n  /**\n   * Eagerly initialize the provider (connect, verify bucket/container).\n   * Called at startup for fail-fast. If not called, providers may lazy-init.\n   */\n  initialize(): Promise<void>;\n\n  /**\n   * Check provider health (connectivity, bucket reachability).\n   */\n  healthCheck(): Promise<StorageProviderHealthResult>;\n\n  /**\n   * Upload a file to storage.\n   *\n   * @param fileStream - Readable stream of file content\n   * @param fileId - Unique file identifier\n   * @param mimeType - MIME type of the file\n   * @param size - File size in bytes\n   * @param executionContext - Execution context (for auth/tenant scoping)\n   * @param options - Optional upload options\n   * @returns Storage upload result with provider-specific reference\n   */\n  upload(\n    fileStream: Readable,\n    fileId: string,\n    mimeType: string,\n    size: number,\n    executionContext: ExecutionContext<any>,\n    options?: StorageUploadOptions,\n  ): Promise<StorageUploadResult>;\n\n  /**\n   * Download a file from storage.\n   *\n   * @param fileId - File identifier\n   * @param executionContext - Execution context\n   * @returns Download result with stream and metadata\n   */\n  download(\n    file: StoredFileStorageTarget,\n    executionContext: ExecutionContext<any>,\n  ): Promise<StorageDownloadResult>;\n\n  /**\n   * Delete a file from storage.\n   *\n   * @param fileId - File identifier\n   * @param executionContext - Execution context\n   */\n  delete(\n    file: StoredFileStorageTarget,\n    executionContext: ExecutionContext<any>,\n  ): Promise<void>;\n\n  /**\n   * Get file metadata without downloading.\n   *\n   * @param fileId - File identifier\n   * @param executionContext - Execution context\n   * @returns File metadata\n   */\n  getMetadata(\n    file: StoredFileStorageTarget,\n    executionContext: ExecutionContext<any>,\n  ): Promise<StorageFileMetadata>;\n}\n"]}
+{"version":3,"file":"file-storage-provider.types.js","sourceRoot":"","sources":["../../../../src/files/storage/file-storage-provider.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG","sourcesContent":["/**\n * File Storage Provider Interface\n *\n * Abstracts storage operations behind a unified interface.\n * The Wildo-managed MinIO/S3 provider is the default implementation.\n * Future providers (OneDrive, Google Drive, Dropbox, local-directory) implement the same interface.\n *\n * Services inject `IFileStorageProvider` via the `FileStorageRouterBackendService`.\n */\n\nimport { Readable } from 'stream';\nimport type { FileStorageAccepted } from '@wildo-ai/zod-decorators';\nimport type { FileScopeIdentifiers, ResourceType } from '@wildo-ai/saas-models';\nimport type { File } from '@wildo-ai/saas-models';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\n\nexport type StoredFileStorageTarget = Pick<\n  File,\n  | 'fileId'\n  | 'storageProvider'\n  | 'storageRef'\n  /*\n   * The two uploader fields ride along for a storage that serves bytes through a\n   * PERSON's connected account (#394 P5): a Drive file is reachable through the\n   * grant of whoever linked or uploaded it, not through the reader's, so the\n   * provider needs to know who that was. Both are optional on the row, so a\n   * target built from three fields still type-checks — a provider that needs\n   * them refuses at the call with a message naming what is missing.\n   */\n  | 'uploadedBy'\n  | 'uploadedByEntityType'\n>;\n\n/**\n * Optional parameters for upload operations.\n *\n * All path segments are pre-composed by the caller\n * (typically `FileStoragePathResolverBackendService`); the provider\n * only concatenates them onto its own root.\n */\nexport interface StorageUploadOptions {\n  /**\n   * The resource type this blob belongs to, used to place it under a per-resource\n   * segment in the object key: `applications/<appId>/files/<storageName>/…`.\n   *\n   * OPTIONAL because a blob genuinely may have no resource yet (staged before linking), which\n   * lands under `_unlinked/` rather than inventing a resource segment. It is NOT optional because\n   * some provider ignores it — every path-based provider composes its key with the same shared\n   * composer, so this segment reaches the local-directory provider exactly as it reaches the\n   * managed one.\n   *\n   * The segment is `resolveSharedPersistenceCollectionName(resourceType)`, NOT the raw\n   * resource type — the same vocabulary the database grants use, so `USER_SELF` and\n   * `USERS` resolve to one prefix because they are the same rows.\n   */\n  linkedResourceType?: ResourceType;\n\n  /**\n   * The file's tenant scope, placed into the object key as `<scope>/<scopeId>`.\n   *\n   * This is what makes a tenant's blobs a PREFIX: erasure, orphan sweeps and \"who owns this object\"\n   * become prefix operations instead of per-row database lookups. Omitted ⇒ the key falls back to\n   * APPLICATION scope with the resolved application id, so there is exactly ONE key shape and never\n   * a branch that produces a second layout.\n   */\n  scope?: FileScopeIdentifiers;\n\n  /**\n   * Composed relative folder path for organizing files within\n   * the provider's namespace.\n   *\n   * When set, the provider stores the blob at\n   * `<providerRoot>/[applications/<appId>/files/<storageName>/<scope>/<scopeId>/]<folderPath>/<fileName|fileId>`,\n   * the bracketed prefix being present unless `includeApplicationId` is explicitly `false`.\n   *\n   * Forward-slash separated, no leading or trailing slash.\n   * @example 'specs/icps/big_companies'\n   * @example 'avatars'\n   */\n  folderPath?: string;\n\n  /**\n   * Explicit file name to use instead of the fileId.\n   * When omitted, the provider falls back to the fileId (UUID).\n   * @example 'personna.md'\n   * @example 'avatar.png'\n   */\n  fileName?: string;\n\n  /**\n   * Whether the framework-derived prefix\n   * `applications/<appId>/files/<storageName>/<scope>/<scopeId>/` is placed above the authored\n   * folder path and leaf name.\n   *\n   * - `true` / `undefined` → include it. This is now the default on EVERY provider; the\n   *   local-directory provider defaulted to `false` until 2026-09-09, which is what left it with no\n   *   tenant structure.\n   * - `false` → the key is the bare `[folderPath/]<fileName|fileId>`. This discards the WHOLE\n   *   prefix, not only the application segment, so nothing about the blob is addressable by tenant\n   *   any more. Both providers honour it identically, so one authored value has one meaning.\n   */\n  includeApplicationId?: boolean;\n}\n\n/**\n * Result of a successful file upload.\n */\nexport interface StorageUploadResult {\n  /** Unique storage reference (provider-specific key) */\n  storageRef: string;\n  /** Storage provider identifier */\n  provider: FileStorageAccepted;\n}\n\n/**\n * Result of a file download.\n */\nexport interface StorageDownloadResult {\n  /** Readable stream of file content */\n  stream: Readable;\n  /** Content type (MIME type) */\n  contentType: string;\n  /** File size in bytes */\n  size: number;\n  /** ETag for caching */\n  etag?: string;\n  /** Last modification date */\n  lastModified?: Date;\n}\n\n/**\n * Storage metadata for a file.\n */\n/**\n * What a vendor says about a file a person is about to link — the metadata the\n * FILES row is created from, so the row records the vendor's facts rather than\n * whatever the picker showed.\n */\nexport interface StorageRemoteFileDescription extends StorageFileMetadata {\n  /** The vendor's display name for the file. */\n  name: string;\n}\n\nexport interface StorageFileMetadata {\n  /** Content type (MIME type) */\n  contentType: string;\n  /** File size in bytes */\n  size: number;\n  /** ETag for caching */\n  etag?: string;\n  /** Last modification date */\n  lastModified?: Date;\n}\n\n/**\n * Health check result for a storage provider.\n */\nexport interface StorageProviderHealthResult {\n  healthy: boolean;\n  latency: number;\n  error?: string;\n}\n\n/**\n * Unified storage provider interface.\n *\n * All file storage providers must implement this interface.\n * Operations are scoped by executionContext for multi-tenant isolation.\n */\nexport interface IFileStorageProvider {\n  /** Provider identifier — must match a FileStorageAccepted enum value */\n  readonly providerId: FileStorageAccepted;\n\n  /**\n   * The external provider whose DELEGATED credential this storage reads and\n   * writes through — `'google-drive'` for `GOOGLE_DRIVE` — set only on a storage that\n   * lives at a vendor (#394 P5). It is the join the upload handler resolves a\n   * picker's `REMOTE_REFERENCE` by: the reference names a provider, the field\n   * names the storages it accepts, and the storage whose `connectedProviderRef`\n   * is that provider must be one of them. Absent on a storage the framework\n   * itself serves.\n   */\n  readonly connectedProviderRef?: string;\n\n  /**\n   * True on a storage whose `delete` forgets the reference and does NOT remove the bytes — a\n   * vendor storage where the bytes are a person's own document (#394 P5). A caller that \"rolls\n   * back\" a stored blob by deleting it must read this before logging that the bytes are gone.\n   */\n  readonly retainsBytesOnDelete?: true;\n\n  /**\n   * Describe a file that already exists at the vendor, BEFORE any row exists\n   * for it — the verification step of linking a picker's `REMOTE_REFERENCE`\n   * (#394 P5). Present only on a storage that can be linked to; a storage that\n   * only receives uploads has no such file to describe. Reads through the\n   * linker's connected account, which is also the proof that the reference is\n   * real and reachable by the person offering it; a reference the vendor does\n   * not know, or the linker cannot read, refuses here and no row is created.\n   */\n  describeRemoteReference?(\n    externalId: string,\n    linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>,\n    executionContext: ExecutionContext<any>,\n  ): Promise<StorageRemoteFileDescription>;\n\n  /**\n   * Whether this provider has the required configuration to operate.\n   * Returns false when env vars / credentials are absent.\n   */\n  isConfigured(): boolean;\n\n  /**\n   * Eagerly initialize the provider (connect, verify bucket/container).\n   * Called at startup for fail-fast. If not called, providers may lazy-init.\n   */\n  initialize(): Promise<void>;\n\n  /**\n   * Check provider health (connectivity, bucket reachability).\n   */\n  healthCheck(): Promise<StorageProviderHealthResult>;\n\n  /**\n   * Upload a file to storage.\n   *\n   * @param fileStream - Readable stream of file content\n   * @param fileId - Unique file identifier\n   * @param mimeType - MIME type of the file\n   * @param size - File size in bytes\n   * @param executionContext - Execution context (for auth/tenant scoping)\n   * @param options - Optional upload options\n   * @returns Storage upload result with provider-specific reference\n   */\n  upload(\n    fileStream: Readable,\n    fileId: string,\n    mimeType: string,\n    size: number,\n    executionContext: ExecutionContext<any>,\n    options?: StorageUploadOptions,\n  ): Promise<StorageUploadResult>;\n\n  /**\n   * Download a file from storage.\n   *\n   * @param fileId - File identifier\n   * @param executionContext - Execution context\n   * @returns Download result with stream and metadata\n   */\n  download(\n    file: StoredFileStorageTarget,\n    executionContext: ExecutionContext<any>,\n  ): Promise<StorageDownloadResult>;\n\n  /**\n   * Delete a file from storage.\n   *\n   * @param fileId - File identifier\n   * @param executionContext - Execution context\n   */\n  delete(\n    file: StoredFileStorageTarget,\n    executionContext: ExecutionContext<any>,\n  ): Promise<void>;\n\n  /**\n   * Get file metadata without downloading.\n   *\n   * @param fileId - File identifier\n   * @param executionContext - Execution context\n   * @returns File metadata\n   */\n  getMetadata(\n    file: StoredFileStorageTarget,\n    executionContext: ExecutionContext<any>,\n  ): Promise<StorageFileMetadata>;\n}\n"]}

package/dist/esm/files/storage/file-storage-router.backend.service.d.ts

@@ -24,10 +24,20 @@ export declare class FileStorageRouterBackendService {
     private readonly errorBuilder;
     private readonly wildoManagedProvider;
     private readonly localDirectoryProvider;
+    private readonly googleDriveProvider;
     protected logDebug: (message: string, context?: Record<string, unknown>) => void;
     /** Map of providerId → IFileStorageProvider for O(1) lookup */
     private readonly providerMap;
-    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService, wildoManagedProvider: IFileStorageProvider, localDirectoryProvider: IFileStorageProvider);
+    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService, wildoManagedProvider: IFileStorageProvider, localDirectoryProvider: IFileStorageProvider, googleDriveProvider: IFileStorageProvider);
+    /**
+     * The storage a picker's `REMOTE_REFERENCE` lands in, by the PROVIDER the reference names
+     * (#394 P5): the storage whose `connectedProviderRef` is that provider — `google-drive` →
+     * `GOOGLE_DRIVE`. Registered-or-not is the only question answered here; whether the field
+     * accepts that storage and whether it is configured are the caller's, because each refuses
+     * with a different message. Undefined when no registered storage is connected through the
+     * provider, which is what a Dropbox reference gets until a Dropbox storage exists.
+     */
+    resolveProviderForConnectedProvider(providerRef: string): IFileStorageProvider | undefined;
     /**
      * Resolve the appropriate storage provider for a given set of accepted providers.
      *
@@ -48,6 +58,8 @@ export declare class FileStorageRouterBackendService {
      * Use this when no schema-level preference is set.
      */
     getDefaultProvider(): IFileStorageProvider;
+    /** Every registered storage, configured or not — for validators that report on the unconfigured ones. */
+    listProviders(): readonly IFileStorageProvider[];
     getProviderById(providerId: string): IFileStorageProvider | undefined;
     /**
      * Eagerly initialize all configured storage providers.
@@ -60,8 +72,14 @@ export declare class FileStorageRouterBackendService {
      */
     healthCheck(): Promise<StorageProviderHealthResult>;
     /**
-     * Check if at least one storage provider is configured.
-     * Returns false when the app doesn't use file features.
+     * Whether the APPLICATION has somewhere of its own to put bytes — at least one storage the
+     * framework serves with an application credential is configured. Returns false when the app
+     * doesn't use file features.
+     *
+     * A vendor storage (`connectedProviderRef` set) does not count: it is reachable only through a
+     * PERSON's delegated grant, so it is nowhere for an archival batch or a health check to write.
+     * Counting it made `resolveProvider([WILDO_MANAGED, LOCAL_DIRECTORY])` throw one line after this
+     * predicate answered true (#394 P5 review, F6).
      */
     isConfigured(): boolean;
 }

package/dist/esm/files/storage/file-storage-router.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-router.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/files/storage/file-storage-router.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAEvG,qBACa,+BAA+B;IAQxC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAbzC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEjF,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;gBAI7C,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,oBAAoB,EAAE,oBAAoB,EAE1C,sBAAsB,EAAE,oBAAoB;IAU/D;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,eAAe,CAAC,EAAE,mBAAmB,EAAE,GAAG,oBAAoB;IAgD9E;;;OAGG;IACH,kBAAkB,IAAI,oBAAoB;IAI1C,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAIrE;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAYjC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAezD;;;OAGG;IACH,YAAY,IAAI,OAAO;CAQxB"}
+{"version":3,"file":"file-storage-router.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/storage/file-storage-router.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAEvG,qBACa,+BAA+B;IAQxC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAErC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IAEvC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAftC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEjF,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;gBAI7C,MAAM,EAAE,aAAa,EAErB,YAAY,EAAE,0BAA0B,EAExC,oBAAoB,EAAE,oBAAoB,EAE1C,sBAAsB,EAAE,oBAAoB,EAE5C,mBAAmB,EAAE,oBAAoB;IAW5D;;;;;;;OAOG;IACH,mCAAmC,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAU1F;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,eAAe,CAAC,EAAE,mBAAmB,EAAE,GAAG,oBAAoB;IAgD9E;;;OAGG;IACH,kBAAkB,IAAI,oBAAoB;IAI1C,yGAAyG;IACzG,aAAa,IAAI,SAAS,oBAAoB,EAAE;IAIhD,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAIrE;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAYjC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAezD;;;;;;;;;OASG;IACH,YAAY,IAAI,OAAO;CAQxB"}

package/dist/esm/files/storage/file-storage-router.backend.service.js

@@ -37,19 +37,41 @@ let FileStorageRouterBackendService = class FileStorageRouterBackendService {
     errorBuilder;
     wildoManagedProvider;
     localDirectoryProvider;
+    googleDriveProvider;
     logDebug;
     /** Map of providerId → IFileStorageProvider for O(1) lookup */
     providerMap;
-    constructor(logger, errorBuilder, wildoManagedProvider, localDirectoryProvider) {
+    constructor(logger, errorBuilder, wildoManagedProvider, localDirectoryProvider, googleDriveProvider) {
         this.logger = logger;
         this.errorBuilder = errorBuilder;
         this.wildoManagedProvider = wildoManagedProvider;
         this.localDirectoryProvider = localDirectoryProvider;
+        this.googleDriveProvider = googleDriveProvider;
         this.logDebug = this.logger.debugByType('FileStorageRouterBackendService');
         this.logger.setDebugTypeLogging('FileStorageRouterBackendService', false);
         this.providerMap = new Map();
         this.providerMap.set(FileStorageAccepted.WILDO_MANAGED, this.wildoManagedProvider);
         this.providerMap.set(FileStorageAccepted.LOCAL_DIRECTORY, this.localDirectoryProvider);
+        this.providerMap.set(FileStorageAccepted.GOOGLE_DRIVE, this.googleDriveProvider);
+    }
+    /**
+     * The storage a picker's `REMOTE_REFERENCE` lands in, by the PROVIDER the reference names
+     * (#394 P5): the storage whose `connectedProviderRef` is that provider — `google-drive` →
+     * `GOOGLE_DRIVE`. Registered-or-not is the only question answered here; whether the field
+     * accepts that storage and whether it is configured are the caller's, because each refuses
+     * with a different message. Undefined when no registered storage is connected through the
+     * provider, which is what a Dropbox reference gets until a Dropbox storage exists.
+     */
+    resolveProviderForConnectedProvider(providerRef) {
+        // Framework-served storages declare no provider; `undefined === undefined` must not make one
+        // of them the answer to a reference that names nothing (the first draft did exactly that).
+        if (!providerRef)
+            return undefined;
+        for (const provider of this.providerMap.values()) {
+            if (provider.connectedProviderRef !== undefined && provider.connectedProviderRef === providerRef)
+                return provider;
+        }
+        return undefined;
     }
     /**
      * Resolve the appropriate storage provider for a given set of accepted providers.
@@ -108,6 +130,10 @@ let FileStorageRouterBackendService = class FileStorageRouterBackendService {
     getDefaultProvider() {
         return this.wildoManagedProvider;
     }
+    /** Every registered storage, configured or not — for validators that report on the unconfigured ones. */
+    listProviders() {
+        return [...this.providerMap.values()];
+    }
     getProviderById(providerId) {
         return this.providerMap.get(providerId);
     }
@@ -145,12 +171,18 @@ let FileStorageRouterBackendService = class FileStorageRouterBackendService {
         return { healthy: true, latency: totalLatency };
     }
     /**
-     * Check if at least one storage provider is configured.
-     * Returns false when the app doesn't use file features.
+     * Whether the APPLICATION has somewhere of its own to put bytes — at least one storage the
+     * framework serves with an application credential is configured. Returns false when the app
+     * doesn't use file features.
+     *
+     * A vendor storage (`connectedProviderRef` set) does not count: it is reachable only through a
+     * PERSON's delegated grant, so it is nowhere for an archival batch or a health check to write.
+     * Counting it made `resolveProvider([WILDO_MANAGED, LOCAL_DIRECTORY])` throw one line after this
+     * predicate answered true (#394 P5 review, F6).
      */
     isConfigured() {
         for (const provider of this.providerMap.values()) {
-            if (provider.isConfigured()) {
+            if (provider.connectedProviderRef === undefined && provider.isConfigured()) {
                 return true;
             }
         }
@@ -163,7 +195,8 @@ FileStorageRouterBackendService = __decorate([
     __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
     __param(2, inject(SAAS_SERVICE_TYPES.FileStorageProvider_WildoManaged)),
     __param(3, inject(SAAS_SERVICE_TYPES.FileStorageProvider_LocalDirectory)),
-    __metadata("design:paramtypes", [Function, ErrorBuilderBackendService, Object, Object])
+    __param(4, inject(SAAS_SERVICE_TYPES.FileStorageProvider_GoogleDrive)),
+    __metadata("design:paramtypes", [Function, ErrorBuilderBackendService, Object, Object, Object])
 ], FileStorageRouterBackendService);
 export { FileStorageRouterBackendService };
 //# sourceMappingURL=file-storage-router.backend.service.js.map

package/dist/esm/files/storage/file-storage-router.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-router.backend.service.js","sourceRoot":"","sources":["../../../../../src/files/storage/file-storage-router.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAIvG,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAQvB;IAEA;IAEA;IAEA;IAbT,QAAQ,CAA+D;IAEjF,+DAA+D;IAC9C,WAAW,CAAoC;IAEhE,YAEmB,MAAqB,EAErB,YAAwC,EAExC,oBAA0C,EAE1C,sBAA4C;QAN5C,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,2BAAsB,GAAtB,sBAAsB,CAAsB;QAE7D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,eAAuC;QACrD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;oBACjE,OAAO,EAAE;wBACP,OAAO,EAAE,oFAAoF;4BAC3F,0GAA0G;4BAC1G,yCAAyC;qBAC5C;iBACF,CACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;QACnC,CAAC;QAED,8FAA8F;QAC9F,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBACxC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAErB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;YACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EAAE,0DAA0D;oBACjE,oGAAoG;gBACtG,kBAAkB,EAAE,eAAe;gBACnC,mBAAmB;aACpB;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,wCAAwC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAjJY,+BAA+B;IAD3C,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;+CAH/B,0BAA0B;GAVhD,+BAA+B,CAiJ3C","sourcesContent":["/**\n * File Storage Router Backend Service\n *\n * Selects the appropriate IFileStorageProvider based on:\n * 1. Schema-declared `storageAccepted` (from z_file({ storageAccepted: [...] }))\n * 2. Provider availability (isConfigured() check)\n *\n * Registered providers:\n * - Wildo-managed (MinIO/S3) — default, used when no storageAccepted is specified\n * - Local directory — filesystem-backed storage via `storage.localDirectory`\n *\n * Resolution is strict: when `storageAccepted` is explicitly declared, only\n * those providers are considered. A CONFIGURATION error is thrown when none\n * of the declared providers are configured (no silent fallback to S3).\n * When `storageAccepted` is omitted, Wildo-managed is the default and must\n * be configured, otherwise a CONFIGURATION error is thrown.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';\nimport { FileStorageAccepted } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { IFileStorageProvider, StorageProviderHealthResult } from './file-storage-provider.types';\n\n@injectable()\nexport class FileStorageRouterBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  /** Map of providerId → IFileStorageProvider for O(1) lookup */\n  private readonly providerMap: Map<string, IFileStorageProvider>;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger)\n    private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n    private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_WildoManaged)\n    private readonly wildoManagedProvider: IFileStorageProvider,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_LocalDirectory)\n    private readonly localDirectoryProvider: IFileStorageProvider,\n  ) {\n    this.logDebug = this.logger.debugByType('FileStorageRouterBackendService');\n    this.logger.setDebugTypeLogging('FileStorageRouterBackendService', false);\n\n    this.providerMap = new Map<string, IFileStorageProvider>();\n    this.providerMap.set(FileStorageAccepted.WILDO_MANAGED, this.wildoManagedProvider);\n    this.providerMap.set(FileStorageAccepted.LOCAL_DIRECTORY, this.localDirectoryProvider);\n  }\n\n  /**\n   * Resolve the appropriate storage provider for a given set of accepted providers.\n   *\n   * Resolution:\n   * - `storageAccepted` undefined/empty → default to Wildo-managed (must be configured)\n   * - `storageAccepted` specified → first configured match wins; if none configured → CONFIGURATION error\n   *\n   * Strict: when providers are explicitly declared, no silent fallback to an\n   * un-requested provider occurs. This prevents data landing in unexpected storage.\n   *\n   * @param storageAccepted - Accepted storage providers from z_file() schema (undefined = Wildo-managed)\n   * @returns The resolved storage provider\n   * @throws CONFIGURATION error when no suitable configured provider is found\n   */\n  resolveProvider(storageAccepted?: FileStorageAccepted[]): IFileStorageProvider {\n    if (!storageAccepted || storageAccepted.length === 0) {\n      if (!this.wildoManagedProvider.isConfigured()) {\n        throw this.errorBuilder.buildError(\n          ErrorType.CONFIGURATION,\n          undefined,\n          {\n            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n            context: {\n              message: 'No storageAccepted specified and default Wildo-managed storage is not configured. ' +\n                'Set STORAGE_ENDPOINT (managed storage credentials are fetched from apps-manager, never configured here) ' +\n                'or specify storageAccepted in z_file().',\n            },\n          }\n        );\n      }\n      return this.wildoManagedProvider;\n    }\n\n    // Try to find a registered AND configured provider matching the schema preferences (in order)\n    for (const preferred of storageAccepted) {\n      const provider = this.providerMap.get(preferred);\n      if (provider && provider.isConfigured()) {\n        return provider;\n      }\n    }\n\n    // The developer explicitly declared accepted providers but none are configured.\n    // Strict behavior: do NOT silently fall back to a provider they didn't request.\n    const configuredProviders = Array.from(this.providerMap.entries())\n      .filter(([, p]) => p.isConfigured())\n      .map(([id]) => id);\n\n    throw this.errorBuilder.buildError(\n      ErrorType.CONFIGURATION,\n      undefined,\n      {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          message: 'None of the requested storage providers are configured. ' +\n            'Ensure the corresponding environment variables are set for at least one of the declared providers.',\n          requestedProviders: storageAccepted,\n          configuredProviders,\n        },\n      }\n    );\n  }\n\n  /**\n   * Get the default storage provider (Wildo-managed).\n   * Use this when no schema-level preference is set.\n   */\n  getDefaultProvider(): IFileStorageProvider {\n    return this.wildoManagedProvider;\n  }\n\n  getProviderById(providerId: string): IFileStorageProvider | undefined {\n    return this.providerMap.get(providerId);\n  }\n\n  /**\n   * Eagerly initialize all configured storage providers.\n   * Call at startup to fail fast on misconfiguration.\n   * Providers that are not configured are skipped.\n   */\n  async initialize(): Promise<void> {\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        this.logDebug('Skipping unconfigured storage provider', { providerId });\n        continue;\n      }\n      this.logDebug('Initializing storage provider', { providerId });\n      await provider.initialize();\n      this.logDebug('Storage provider initialized', { providerId });\n    }\n  }\n\n  /**\n   * Run health checks on all configured providers.\n   */\n  async healthCheck(): Promise<StorageProviderHealthResult> {\n    let totalLatency = 0;\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        continue;\n      }\n      const result = await provider.healthCheck();\n      totalLatency += result.latency;\n      if (!result.healthy) {\n        return { healthy: false, latency: totalLatency, error: `${providerId}: ${result.error}` };\n      }\n    }\n    return { healthy: true, latency: totalLatency };\n  }\n\n  /**\n   * Check if at least one storage provider is configured.\n   * Returns false when the app doesn't use file features.\n   */\n  isConfigured(): boolean {\n    for (const provider of this.providerMap.values()) {\n      if (provider.isConfigured()) {\n        return true;\n      }\n    }\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"file-storage-router.backend.service.js","sourceRoot":"","sources":["../../../../src/files/storage/file-storage-router.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAIvG,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAQvB;IAEA;IAEA;IAEA;IAEA;IAfT,QAAQ,CAA+D;IAEjF,+DAA+D;IAC9C,WAAW,CAAoC;IAEhE,YAEmB,MAAqB,EAErB,YAAwC,EAExC,oBAA0C,EAE1C,sBAA4C,EAE5C,mBAAyC;QARzC,WAAM,GAAN,MAAM,CAAe;QAErB,iBAAY,GAAZ,YAAY,CAA4B;QAExC,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,2BAAsB,GAAtB,sBAAsB,CAAsB;QAE5C,wBAAmB,GAAnB,mBAAmB,CAAsB;QAE1D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;OAOG;IACH,mCAAmC,CAAC,WAAmB;QACrD,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI,QAAQ,CAAC,oBAAoB,KAAK,WAAW;gBAAE,OAAO,QAAQ,CAAC;QACpH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,eAAuC;QACrD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;oBACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;oBACjE,OAAO,EAAE;wBACP,OAAO,EAAE,oFAAoF;4BAC3F,0GAA0G;4BAC1G,yCAAyC;qBAC5C;iBACF,CACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,oBAAoB,CAAC;QACnC,CAAC;QAED,8FAA8F;QAC9F,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBACxC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAErB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAChC,SAAS,CAAC,aAAa,EACvB,SAAS,EACT;YACE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;YACjE,OAAO,EAAE;gBACP,OAAO,EAAE,0DAA0D;oBACjE,oGAAoG;gBACtG,kBAAkB,EAAE,eAAe;gBACnC,mBAAmB;aACpB;SACF,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,yGAAyG;IACzG,aAAa;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,wCAAwC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY;QACV,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAjLY,+BAA+B;IAD3C,UAAU,EAAE;IAQR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAEjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAE9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAA;IAE3D,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAE7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;+CAL5B,0BAA0B;GAVhD,+BAA+B,CAiL3C","sourcesContent":["/**\n * File Storage Router Backend Service\n *\n * Selects the appropriate IFileStorageProvider based on:\n * 1. Schema-declared `storageAccepted` (from z_file({ storageAccepted: [...] }))\n * 2. Provider availability (isConfigured() check)\n *\n * Registered providers:\n * - Wildo-managed (MinIO/S3) — default, used when no storageAccepted is specified\n * - Local directory — filesystem-backed storage via `storage.localDirectory`\n *\n * Resolution is strict: when `storageAccepted` is explicitly declared, only\n * those providers are considered. A CONFIGURATION error is thrown when none\n * of the declared providers are configured (no silent fallback to S3).\n * When `storageAccepted` is omitted, Wildo-managed is the default and must\n * be configured, otherwise a CONFIGURATION error is thrown.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';\nimport { FileStorageAccepted } from '@wildo-ai/zod-decorators';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { IFileStorageProvider, StorageProviderHealthResult } from './file-storage-provider.types';\n\n@injectable()\nexport class FileStorageRouterBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  /** Map of providerId → IFileStorageProvider for O(1) lookup */\n  private readonly providerMap: Map<string, IFileStorageProvider>;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger)\n    private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService)\n    private readonly errorBuilder: ErrorBuilderBackendService,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_WildoManaged)\n    private readonly wildoManagedProvider: IFileStorageProvider,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_LocalDirectory)\n    private readonly localDirectoryProvider: IFileStorageProvider,\n    @inject(SAAS_SERVICE_TYPES.FileStorageProvider_GoogleDrive)\n    private readonly googleDriveProvider: IFileStorageProvider,\n  ) {\n    this.logDebug = this.logger.debugByType('FileStorageRouterBackendService');\n    this.logger.setDebugTypeLogging('FileStorageRouterBackendService', false);\n\n    this.providerMap = new Map<string, IFileStorageProvider>();\n    this.providerMap.set(FileStorageAccepted.WILDO_MANAGED, this.wildoManagedProvider);\n    this.providerMap.set(FileStorageAccepted.LOCAL_DIRECTORY, this.localDirectoryProvider);\n    this.providerMap.set(FileStorageAccepted.GOOGLE_DRIVE, this.googleDriveProvider);\n  }\n\n  /**\n   * The storage a picker's `REMOTE_REFERENCE` lands in, by the PROVIDER the reference names\n   * (#394 P5): the storage whose `connectedProviderRef` is that provider — `google-drive` →\n   * `GOOGLE_DRIVE`. Registered-or-not is the only question answered here; whether the field\n   * accepts that storage and whether it is configured are the caller's, because each refuses\n   * with a different message. Undefined when no registered storage is connected through the\n   * provider, which is what a Dropbox reference gets until a Dropbox storage exists.\n   */\n  resolveProviderForConnectedProvider(providerRef: string): IFileStorageProvider | undefined {\n    // Framework-served storages declare no provider; `undefined === undefined` must not make one\n    // of them the answer to a reference that names nothing (the first draft did exactly that).\n    if (!providerRef) return undefined;\n    for (const provider of this.providerMap.values()) {\n      if (provider.connectedProviderRef !== undefined && provider.connectedProviderRef === providerRef) return provider;\n    }\n    return undefined;\n  }\n\n  /**\n   * Resolve the appropriate storage provider for a given set of accepted providers.\n   *\n   * Resolution:\n   * - `storageAccepted` undefined/empty → default to Wildo-managed (must be configured)\n   * - `storageAccepted` specified → first configured match wins; if none configured → CONFIGURATION error\n   *\n   * Strict: when providers are explicitly declared, no silent fallback to an\n   * un-requested provider occurs. This prevents data landing in unexpected storage.\n   *\n   * @param storageAccepted - Accepted storage providers from z_file() schema (undefined = Wildo-managed)\n   * @returns The resolved storage provider\n   * @throws CONFIGURATION error when no suitable configured provider is found\n   */\n  resolveProvider(storageAccepted?: FileStorageAccepted[]): IFileStorageProvider {\n    if (!storageAccepted || storageAccepted.length === 0) {\n      if (!this.wildoManagedProvider.isConfigured()) {\n        throw this.errorBuilder.buildError(\n          ErrorType.CONFIGURATION,\n          undefined,\n          {\n            customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n            context: {\n              message: 'No storageAccepted specified and default Wildo-managed storage is not configured. ' +\n                'Set STORAGE_ENDPOINT (managed storage credentials are fetched from apps-manager, never configured here) ' +\n                'or specify storageAccepted in z_file().',\n            },\n          }\n        );\n      }\n      return this.wildoManagedProvider;\n    }\n\n    // Try to find a registered AND configured provider matching the schema preferences (in order)\n    for (const preferred of storageAccepted) {\n      const provider = this.providerMap.get(preferred);\n      if (provider && provider.isConfigured()) {\n        return provider;\n      }\n    }\n\n    // The developer explicitly declared accepted providers but none are configured.\n    // Strict behavior: do NOT silently fall back to a provider they didn't request.\n    const configuredProviders = Array.from(this.providerMap.entries())\n      .filter(([, p]) => p.isConfigured())\n      .map(([id]) => id);\n\n    throw this.errorBuilder.buildError(\n      ErrorType.CONFIGURATION,\n      undefined,\n      {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: {\n          message: 'None of the requested storage providers are configured. ' +\n            'Ensure the corresponding environment variables are set for at least one of the declared providers.',\n          requestedProviders: storageAccepted,\n          configuredProviders,\n        },\n      }\n    );\n  }\n\n  /**\n   * Get the default storage provider (Wildo-managed).\n   * Use this when no schema-level preference is set.\n   */\n  getDefaultProvider(): IFileStorageProvider {\n    return this.wildoManagedProvider;\n  }\n\n  /** Every registered storage, configured or not — for validators that report on the unconfigured ones. */\n  listProviders(): readonly IFileStorageProvider[] {\n    return [...this.providerMap.values()];\n  }\n\n  getProviderById(providerId: string): IFileStorageProvider | undefined {\n    return this.providerMap.get(providerId);\n  }\n\n  /**\n   * Eagerly initialize all configured storage providers.\n   * Call at startup to fail fast on misconfiguration.\n   * Providers that are not configured are skipped.\n   */\n  async initialize(): Promise<void> {\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        this.logDebug('Skipping unconfigured storage provider', { providerId });\n        continue;\n      }\n      this.logDebug('Initializing storage provider', { providerId });\n      await provider.initialize();\n      this.logDebug('Storage provider initialized', { providerId });\n    }\n  }\n\n  /**\n   * Run health checks on all configured providers.\n   */\n  async healthCheck(): Promise<StorageProviderHealthResult> {\n    let totalLatency = 0;\n    for (const [providerId, provider] of this.providerMap) {\n      if (!provider.isConfigured()) {\n        continue;\n      }\n      const result = await provider.healthCheck();\n      totalLatency += result.latency;\n      if (!result.healthy) {\n        return { healthy: false, latency: totalLatency, error: `${providerId}: ${result.error}` };\n      }\n    }\n    return { healthy: true, latency: totalLatency };\n  }\n\n  /**\n   * Whether the APPLICATION has somewhere of its own to put bytes — at least one storage the\n   * framework serves with an application credential is configured. Returns false when the app\n   * doesn't use file features.\n   *\n   * A vendor storage (`connectedProviderRef` set) does not count: it is reachable only through a\n   * PERSON's delegated grant, so it is nowhere for an archival batch or a health check to write.\n   * Counting it made `resolveProvider([WILDO_MANAGED, LOCAL_DIRECTORY])` throw one line after this\n   * predicate answered true (#394 P5 review, F6).\n   */\n  isConfigured(): boolean {\n    for (const provider of this.providerMap.values()) {\n      if (provider.connectedProviderRef === undefined && provider.isConfigured()) {\n        return true;\n      }\n    }\n    return false;\n  }\n}\n"]}

package/dist/esm/files/storage/google-drive-storage-provider.backend.service.d.ts

@@ -0,0 +1,87 @@
+/**
+ * `FileStorageAccepted.GOOGLE_DRIVE` — a file storage whose bytes live in a PERSON's Google Drive
+ * (#394 P5).
+ *
+ * Every other storage here is the application's: it holds a credential of its own and every row
+ * is reachable with it. This one holds none. A Drive file is reachable through exactly one grant —
+ * the delegated OAuth2 token of the person who linked it (a picker's `REMOTE_REFERENCE`) or
+ * uploaded it — so the row's `uploadedBy` is the credential key, resolved through the same
+ * connected-accounts store and the same admissibility predicate the browser access-token door
+ * uses. A reader who is not the linker still reads the file: the application authorizes the ROW,
+ * and the storage reads the BYTES as the linker, which is the delegated access the person granted
+ * when they connected the account. Each such read is a recorded credential USE.
+ *
+ * Two decisions, written down because they are not the obvious ones:
+ *
+ * - `delete` NEVER touches Drive. The application never owned these bytes: a linked file is the
+ *   person's document, and an uploaded one landed in their Drive under their account. Deleting a
+ *   person's own document because an application row went away is the irreversible act this
+ *   repository requires a deliberate door for, and there is no such door yet. So a delete forgets
+ *   the reference and says so — a stale file in someone's Drive is a nuisance; a vanished one is
+ *   an incident.
+ * - `isConfigured` asks the registry, not the network. There is no application credential to
+ *   probe with, and a per-person storage is "configured" exactly when the provider admits a
+ *   USER-owned delegated connection — the condition under which any row could ever be read.
+ *
+ * Outbound calls go to one fixed vendor host, so they are not SSRF-pinned; each carries a deadline.
+ */
+import { Readable } from 'stream';
+import type { File } from '@wildo-ai/saas-models';
+import { FileStorageAccepted } from '@wildo-ai/zod-decorators';
+import type { LoggerService } from '../../monitoring/logger/services/logger.service';
+import { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service';
+import { AppConfigurationService } from '../../config/services/app-configuration.backend.service';
+import type { ExecutionContext } from '../../runtime/models/execution-context.backend.schemas';
+import { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service';
+import type { UserProviderCredentialResolverPort } from '../../security/connected-accounts/user-provider-credential-resolver.port';
+import type { IFileStorageProvider, StorageDownloadResult, StorageFileMetadata, StorageProviderHealthResult, StorageRemoteFileDescription, StorageUploadOptions, StorageUploadResult, StoredFileStorageTarget } from './file-storage-provider.types';
+/**
+ * The provider whose delegated credential this storage reads through: the CATALOGUE `google-drive`
+ * provider (`@wildo-ai/providers/google-drive`), whose OAuth2 client a person connects their Drive
+ * through under the `drive.file` scope — not the engine `google` SSO provider, which mints no
+ * delegated token. The frontend `google-drive` module carries the same ref, so the picker, the
+ * access-token door and this storage all name one account.
+ */
+export declare const GOOGLE_DRIVE_CONNECTED_PROVIDER_REF = "google-drive";
+/** Drive v3, the only host this storage ever talks to. */
+export declare const GOOGLE_DRIVE_API_ORIGIN = "https://www.googleapis.com";
+/** One deadline for every call; a download of a large file streams past it only once headers arrived. */
+export declare const GOOGLE_DRIVE_REQUEST_TIMEOUT_MS = 30000;
+export declare class GoogleDriveStorageProvider implements IFileStorageProvider {
+    private readonly logger;
+    private readonly errorBuilder;
+    private readonly appConfigService;
+    private readonly registry;
+    private readonly userCredentials;
+    readonly providerId = FileStorageAccepted.GOOGLE_DRIVE;
+    readonly connectedProviderRef = "google-drive";
+    /** `delete` forgets the reference and leaves the bytes in the person's Drive — see the header. */
+    readonly retainsBytesOnDelete = true;
+    private readonly logDebug;
+    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService, appConfigService: AppConfigurationService, registry: ExternalProvidersRegistryBackendService, userCredentials: UserProviderCredentialResolverPort);
+    isConfigured(): boolean;
+    initialize(): Promise<void>;
+    healthCheck(): Promise<StorageProviderHealthResult>;
+    describeRemoteReference(externalId: string, linker: Pick<File, 'uploadedBy' | 'uploadedByEntityType'>, executionContext: ExecutionContext<any>): Promise<StorageRemoteFileDescription>;
+    upload(fileStream: Readable, fileId: string, mimeType: string, size: number, executionContext: ExecutionContext<any>, options?: StorageUploadOptions): Promise<StorageUploadResult>;
+    download(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): Promise<StorageDownloadResult>;
+    delete(file: StoredFileStorageTarget, _executionContext: ExecutionContext<any>): Promise<void>;
+    getMetadata(file: StoredFileStorageTarget, executionContext: ExecutionContext<any>): Promise<StorageFileMetadata>;
+    /**
+     * The delegated token of the person a target names. Three refusals, each naming what is
+     * missing: the target names no signed-in person; the provider admits no personal connection;
+     * the person's connection is gone. Every success is a recorded credential use.
+     *
+     * assurance-control: WILDO.IDENTITY.DELEGATED_AUTHORIZATION — a person's delegated grant is
+     * spent server-side only, only for a file that person linked or uploaded, and only as a
+     * recorded use; the token never reaches the reader.
+     */
+    private resolveLinkerToken;
+    private requireLinker;
+    private requireStorageRef;
+    private fetchMetadata;
+    private toDescription;
+    /** One call shape: fixed host, a deadline, and vendor status codes mapped to this repository's error types. */
+    private call;
+}
+//# sourceMappingURL=google-drive-storage-provider.backend.service.d.ts.map

package/dist/esm/files/storage/google-drive-storage-provider.backend.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive-storage-provider.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/files/storage/google-drive-storage-provider.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGlC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,0BAA0B,CAAC;AAEvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAE9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AACrJ,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,uFAAuF,CAAC;AAIhJ,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,iBAAiB,CAAC;AAElE,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AAKpE,yGAAyG;AACzG,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAgBtD,qBACa,0BAA2B,YAAW,oBAAoB;IAQhC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAX7F,QAAQ,CAAC,UAAU,oCAAoC;IACvD,QAAQ,CAAC,oBAAoB,kBAAuC;IACpE,kGAAkG;IAClG,QAAQ,CAAC,oBAAoB,QAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+D;gBAGlC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAC3C,gBAAgB,EAAE,uBAAuB,EACzB,QAAQ,EAAE,uCAAuC,EACnD,eAAe,EAAE,kCAAkC;IAMjI,YAAY,IAAI,OAAO;IAWjB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAWnD,uBAAuB,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG,sBAAsB,CAAC,EACzD,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GACtC,OAAO,CAAC,4BAA4B,CAAC;IAMlC,MAAM,CACV,UAAU,EAAE,QAAQ,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,EACvC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC;IA4CzB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA6BhH,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9F,WAAW,CAAC,IAAI,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAUvH;;;;;;;;OAQG;YACW,kBAAkB;IA8BhC,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,iBAAiB;YAUX,aAAa;IAU3B,OAAO,CAAC,aAAa;IA2BrB,+GAA+G;YACjG,IAAI;CAsCnB"}