@wildo-ai/saas-models 1.0.1 → 1.1.0

package/dist/esm/external-providers/engine-capability-resolution-mode.shared.d.ts

@@ -0,0 +1,39 @@
+import { EngineCapability } from './engine-capabilities.shared.schemas';
+/**
+ * How the engine resolves the provider(s) fulfilling an `EngineCapability`
+ * when more than one is declared for the same scope.
+ *
+ * This is a FIRST-CLASS, declared property of a capability — NOT an implicit
+ * per-consumer convention. A reader can tell whether a capability picks one
+ * provider or writes to all of them; a new capability author declares it
+ * here; and both the runtime registry resolver and the `defineSaaSProviders`
+ * config validators branch on it (so a `FAN_OUT` capability is validated by
+ * DECLARATION and never keyed off `selection`).
+ */
+export declare enum EngineCapabilityResolutionMode {
+    /**
+     * Exactly one active provider — `selection.<capability>.primary`, with
+     * `fallbacks` tried only on failure. The default for every capability
+     * (billing, email, observability, …): a request is served by one provider.
+     */
+    SELECT_ONE = "SELECT_ONE",
+    /**
+     * ALL declared providers are active simultaneously — every one receives
+     * every emission (no primary, no failover). For sinks whose nature is
+     * additive rather than substitutable: `COMPLIANCE_AUDIT_TRAIL` writes each
+     * audit event to every configured destination.
+     */
+    FAN_OUT = "FAN_OUT"
+}
+/**
+ * The declared resolution mode for an engine capability. A TOTAL lookup — every
+ * capability is explicitly classified in `ENGINE_CAPABILITY_RESOLUTION_MODE`
+ * (no silent default).
+ *
+ * Consumers: the runtime registry (`ExternalProvidersRegistryBackendService`
+ * — `FAN_OUT` uses the full provider list, `SELECT_ONE` uses the primary) and
+ * the `defineSaaSProviders` validators (a `FAN_OUT` capability is validated by
+ * declaration and rejects a `selection` entry).
+ */
+export declare function getEngineCapabilityResolutionMode(capability: EngineCapability): EngineCapabilityResolutionMode;
+//# sourceMappingURL=engine-capability-resolution-mode.shared.d.ts.map

package/dist/esm/external-providers/engine-capability-resolution-mode.shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-capability-resolution-mode.shared.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/engine-capability-resolution-mode.shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAExE;;;;;;;;;;GAUG;AACH,oBAAY,8BAA8B;IACxC;;;;OAIG;IACH,UAAU,eAAe;IACzB;;;;;OAKG;IACH,OAAO,YAAY;CACpB;AA+CD;;;;;;;;;GASG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,gBAAgB,GAC3B,8BAA8B,CAEhC"}

package/dist/esm/external-providers/engine-capability-resolution-mode.shared.js

@@ -0,0 +1,85 @@
+import { EngineCapability } from './engine-capabilities.shared.schemas.js';
+/**
+ * How the engine resolves the provider(s) fulfilling an `EngineCapability`
+ * when more than one is declared for the same scope.
+ *
+ * This is a FIRST-CLASS, declared property of a capability — NOT an implicit
+ * per-consumer convention. A reader can tell whether a capability picks one
+ * provider or writes to all of them; a new capability author declares it
+ * here; and both the runtime registry resolver and the `defineSaaSProviders`
+ * config validators branch on it (so a `FAN_OUT` capability is validated by
+ * DECLARATION and never keyed off `selection`).
+ */
+export var EngineCapabilityResolutionMode;
+(function (EngineCapabilityResolutionMode) {
+    /**
+     * Exactly one active provider — `selection.<capability>.primary`, with
+     * `fallbacks` tried only on failure. The default for every capability
+     * (billing, email, observability, …): a request is served by one provider.
+     */
+    EngineCapabilityResolutionMode["SELECT_ONE"] = "SELECT_ONE";
+    /**
+     * ALL declared providers are active simultaneously — every one receives
+     * every emission (no primary, no failover). For sinks whose nature is
+     * additive rather than substitutable: `COMPLIANCE_AUDIT_TRAIL` writes each
+     * audit event to every configured destination.
+     */
+    EngineCapabilityResolutionMode["FAN_OUT"] = "FAN_OUT";
+})(EngineCapabilityResolutionMode || (EngineCapabilityResolutionMode = {}));
+/**
+ * The DECLARED resolution mode for EVERY engine capability. Exhaustive by
+ * construction: because this is a `Record<EngineCapability, …>`, adding a new
+ * member to the `EngineCapability` enum WITHOUT classifying it here is a COMPILE
+ * error. That is deliberate — a bare "default to SELECT_ONE" would let a future
+ * additive/fan-out capability silently collapse to single-provider resolution
+ * (dropping emissions to every non-primary destination) just because its author
+ * forgot a one-line edit. The compiler now forces the decision.
+ *
+ * Only `COMPLIANCE_AUDIT_TRAIL` is `FAN_OUT` today (audit events are additive —
+ * every declared destination receives every event). Everything else is
+ * `SELECT_ONE` (the failover norm — one active provider, fallbacks on failure).
+ */
+const ENGINE_CAPABILITY_RESOLUTION_MODE = {
+    [EngineCapability.COMPLIANCE_AUDIT_TRAIL]: EngineCapabilityResolutionMode.FAN_OUT,
+    [EngineCapability.ORGANIZATIONS]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.BILLING]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.BILLING_PAYMENTS]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.MULTI_LANGUAGE]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.EMAIL_TRANSACTIONAL]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.EMAIL_MARKETING]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.SMS]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.AI_LLM]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.AI_IMAGE_GENERATION]: EngineCapabilityResolutionMode.SELECT_ONE,
+    // Embeddings are substitutable, not additive: one provider serves a vector space, and writing
+    // the same chunk through two providers would produce two incompatible spaces, not redundancy.
+    [EngineCapability.AI_EMBEDDINGS]: EngineCapabilityResolutionMode.SELECT_ONE,
+    // Extraction is substitutable, not additive: one provider reads a document, and running the
+    // same bytes through two OCR services would produce two divergent transcriptions of one page
+    // with no principled way to merge them — plus a second egress of the same private content.
+    [EngineCapability.AI_DOCUMENT_EXTRACTION]: EngineCapabilityResolutionMode.SELECT_ONE,
+    // One agent per task, and emphatically not fan-out: two coding agents given the same task
+    // against the same worktree do not produce redundancy, they produce a merge conflict nobody
+    // asked for — and the change attribution that follows a run could no longer say which agent
+    // wrote which file.
+    [EngineCapability.AI_CODING_AGENT]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.DOCUMENT_GENERATION]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.ANTIVIRUS_SCANNING]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.FRONTEND_ERROR_MONITORING]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.FRONTEND_PRODUCT_ANALYTICS]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.LLM_OBSERVABILITY]: EngineCapabilityResolutionMode.SELECT_ONE,
+    [EngineCapability.OBSERVABILITY_TELEMETRY]: EngineCapabilityResolutionMode.SELECT_ONE,
+};
+/**
+ * The declared resolution mode for an engine capability. A TOTAL lookup — every
+ * capability is explicitly classified in `ENGINE_CAPABILITY_RESOLUTION_MODE`
+ * (no silent default).
+ *
+ * Consumers: the runtime registry (`ExternalProvidersRegistryBackendService`
+ * — `FAN_OUT` uses the full provider list, `SELECT_ONE` uses the primary) and
+ * the `defineSaaSProviders` validators (a `FAN_OUT` capability is validated by
+ * declaration and rejects a `selection` entry).
+ */
+export function getEngineCapabilityResolutionMode(capability) {
+    return ENGINE_CAPABILITY_RESOLUTION_MODE[capability];
+}
+//# sourceMappingURL=engine-capability-resolution-mode.shared.js.map

package/dist/esm/external-providers/engine-capability-resolution-mode.shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-capability-resolution-mode.shared.js","sourceRoot":"","sources":["../../../../src/external-providers/engine-capability-resolution-mode.shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAExE;;;;;;;;;;GAUG;AACH,MAAM,CAAN,IAAY,8BAcX;AAdD,WAAY,8BAA8B;IACxC;;;;OAIG;IACH,2DAAyB,CAAA;IACzB;;;;;OAKG;IACH,qDAAmB,CAAA;AACrB,CAAC,EAdW,8BAA8B,KAA9B,8BAA8B,QAczC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,iCAAiC,GAA6D;IAClG,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,8BAA8B,CAAC,OAAO;IAEjF,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC3E,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACrE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC9E,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC5E,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACjF,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC7E,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACjE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACpE,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACjF,8FAA8F;IAC9F,8FAA8F;IAC9F,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC3E,4FAA4F;IAC5F,6FAA6F;IAC7F,2FAA2F;IAC3F,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACpF,0FAA0F;IAC1F,4FAA4F;IAC5F,4FAA4F;IAC5F,oBAAoB;IACpB,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC7E,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACjF,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAChF,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACvF,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,8BAA8B,CAAC,UAAU;IACxF,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,8BAA8B,CAAC,UAAU;IAC/E,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,8BAA8B,CAAC,UAAU;CACtF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,iCAAiC,CAC/C,UAA4B;IAE5B,OAAO,iCAAiC,CAAC,UAAU,CAAC,CAAC;AACvD,CAAC","sourcesContent":["import { EngineCapability } from './engine-capabilities.shared.schemas';\n\n/**\n * How the engine resolves the provider(s) fulfilling an `EngineCapability`\n * when more than one is declared for the same scope.\n *\n * This is a FIRST-CLASS, declared property of a capability — NOT an implicit\n * per-consumer convention. A reader can tell whether a capability picks one\n * provider or writes to all of them; a new capability author declares it\n * here; and both the runtime registry resolver and the `defineSaaSProviders`\n * config validators branch on it (so a `FAN_OUT` capability is validated by\n * DECLARATION and never keyed off `selection`).\n */\nexport enum EngineCapabilityResolutionMode {\n  /**\n   * Exactly one active provider — `selection.<capability>.primary`, with\n   * `fallbacks` tried only on failure. The default for every capability\n   * (billing, email, observability, …): a request is served by one provider.\n   */\n  SELECT_ONE = 'SELECT_ONE',\n  /**\n   * ALL declared providers are active simultaneously — every one receives\n   * every emission (no primary, no failover). For sinks whose nature is\n   * additive rather than substitutable: `COMPLIANCE_AUDIT_TRAIL` writes each\n   * audit event to every configured destination.\n   */\n  FAN_OUT = 'FAN_OUT',\n}\n\n/**\n * The DECLARED resolution mode for EVERY engine capability. Exhaustive by\n * construction: because this is a `Record<EngineCapability, …>`, adding a new\n * member to the `EngineCapability` enum WITHOUT classifying it here is a COMPILE\n * error. That is deliberate — a bare \"default to SELECT_ONE\" would let a future\n * additive/fan-out capability silently collapse to single-provider resolution\n * (dropping emissions to every non-primary destination) just because its author\n * forgot a one-line edit. The compiler now forces the decision.\n *\n * Only `COMPLIANCE_AUDIT_TRAIL` is `FAN_OUT` today (audit events are additive —\n * every declared destination receives every event). Everything else is\n * `SELECT_ONE` (the failover norm — one active provider, fallbacks on failure).\n */\nconst ENGINE_CAPABILITY_RESOLUTION_MODE: Record<EngineCapability, EngineCapabilityResolutionMode> = {\n  [EngineCapability.COMPLIANCE_AUDIT_TRAIL]: EngineCapabilityResolutionMode.FAN_OUT,\n\n  [EngineCapability.ORGANIZATIONS]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.BILLING]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.BILLING_PAYMENTS]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.MULTI_LANGUAGE]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.EMAIL_TRANSACTIONAL]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.EMAIL_MARKETING]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.SMS]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.AI_LLM]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.AI_IMAGE_GENERATION]: EngineCapabilityResolutionMode.SELECT_ONE,\n  // Embeddings are substitutable, not additive: one provider serves a vector space, and writing\n  // the same chunk through two providers would produce two incompatible spaces, not redundancy.\n  [EngineCapability.AI_EMBEDDINGS]: EngineCapabilityResolutionMode.SELECT_ONE,\n  // Extraction is substitutable, not additive: one provider reads a document, and running the\n  // same bytes through two OCR services would produce two divergent transcriptions of one page\n  // with no principled way to merge them — plus a second egress of the same private content.\n  [EngineCapability.AI_DOCUMENT_EXTRACTION]: EngineCapabilityResolutionMode.SELECT_ONE,\n  // One agent per task, and emphatically not fan-out: two coding agents given the same task\n  // against the same worktree do not produce redundancy, they produce a merge conflict nobody\n  // asked for — and the change attribution that follows a run could no longer say which agent\n  // wrote which file.\n  [EngineCapability.AI_CODING_AGENT]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.DOCUMENT_GENERATION]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.ANTIVIRUS_SCANNING]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.FRONTEND_ERROR_MONITORING]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.FRONTEND_PRODUCT_ANALYTICS]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.LLM_OBSERVABILITY]: EngineCapabilityResolutionMode.SELECT_ONE,\n  [EngineCapability.OBSERVABILITY_TELEMETRY]: EngineCapabilityResolutionMode.SELECT_ONE,\n};\n\n/**\n * The declared resolution mode for an engine capability. A TOTAL lookup — every\n * capability is explicitly classified in `ENGINE_CAPABILITY_RESOLUTION_MODE`\n * (no silent default).\n *\n * Consumers: the runtime registry (`ExternalProvidersRegistryBackendService`\n * — `FAN_OUT` uses the full provider list, `SELECT_ONE` uses the primary) and\n * the `defineSaaSProviders` validators (a `FAN_OUT` capability is validated by\n * declaration and rejects a `selection` entry).\n */\nexport function getEngineCapabilityResolutionMode(\n  capability: EngineCapability,\n): EngineCapabilityResolutionMode {\n  return ENGINE_CAPABILITY_RESOLUTION_MODE[capability];\n}\n"]}

package/dist/esm/external-providers/external-providers.shared.schemas.d.ts

@@ -2,18 +2,18 @@
  * External Providers Shared Schemas
  *
  * Provides application-level registry schemas for external providers.
- * OAuth2 configurations are defined per-provider in @wildo-ai/external-connectors.
+ * OAuth2 configurations are defined per-provider in @wildo-ai/external-connectors-models.
  */
 import { ExternalProvider_ExchangeProtocol_Kind, OAuth2_Purpose } from "@wildo-ai/external-connectors-models";
 import { z } from "zod";
-import { EngineCapability } from "./wildo-features.shared.schemas.js";
+import { EngineCapability } from "./engine-capabilities.shared.schemas";
 /**
  * External Providers Registry Item
  * Defines what protocols and capabilities a provider supports
  *
  * Note: This is a COMPUTED structure populated from:
- * - ExternalProvider_Definition.capabilities (what provider actually supports)
- * - CapabilityBindingsPolicy (what capabilities are assigned to this provider)
+ * - BackendProviderModule.providerCapabilities (what provider actually supports)
+ * - Materialized provider scope selection (what capabilities are assigned to this provider)
  * - Capability requirements validation
  */
 export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
@@ -40,7 +40,7 @@ export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
             discoveryUrl: z.ZodOptional<z.ZodURL>;
             endSessionUrl: z.ZodOptional<z.ZodURL>;
             apiBaseUrl: z.ZodOptional<z.ZodURL>;
-        }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip>>;
         capabilities: z.ZodOptional<z.ZodOptional<z.ZodObject<{
             supportsAuthorizationCode: z.ZodOptional<z.ZodBoolean>;
             supportsClientCredentials: z.ZodOptional<z.ZodBoolean>;
@@ -61,7 +61,7 @@ export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
             supportsScopeReduction: z.ZodOptional<z.ZodBoolean>;
             supportsCustomDomains: z.ZodOptional<z.ZodBoolean>;
             supportsMultiTenancy: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         scopes: z.ZodOptional<z.ZodOptional<z.ZodObject<{
             available: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 scope: z.ZodString;
@@ -76,7 +76,7 @@ export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
             defaultForAPI: z.ZodOptional<z.ZodArray<z.ZodString>>;
             minimum: z.ZodOptional<z.ZodArray<z.ZodString>>;
             offlineAccessScope: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         tokenConfig: z.ZodOptional<z.ZodOptional<z.ZodObject<{
             tokenType: z.ZodOptional<z.ZodString>;
             accessTokenLifetime: z.ZodOptional<z.ZodNumber>;
@@ -85,7 +85,7 @@ export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
             tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_TokenEndpoint_AuthMethod>>;
             tokenRequestHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             refreshBufferSeconds: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         preferredGrantType: z.ZodOptional<z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_GrantType>>>;
         responseType: z.ZodOptional<z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_ResponseType>>>;
         prompt: z.ZodOptional<z.ZodOptional<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_Prompt>>>;
@@ -99,7 +99,7 @@ export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
                 value: z.ZodString;
                 label: z.ZodString;
             }, z.core.$strip>>>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>>;
+        }, z.core.$strip>>>>;
         extraAuthParams: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
         extraTokenParams: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
         userProfileMapping: z.ZodOptional<z.ZodOptional<z.ZodObject<{
@@ -108,10 +108,10 @@ export declare const External_Providers_RegistryItemSchema: z.ZodObject<{
             name: z.ZodDefault<z.ZodString>;
             image: z.ZodDefault<z.ZodString>;
             emailVerified: z.ZodDefault<z.ZodString>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         extensions: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
-    }, z.core.$strip, core.$ZodObjectExtra>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export type External_Providers_RegistryItem = z.infer<typeof External_Providers_RegistryItemSchema>;
 /**
  * External Providers Registry
@@ -141,7 +141,7 @@ export declare const External_Providers_Registry_Schema: z.ZodRecord<z.ZodString
             discoveryUrl: z.ZodOptional<z.ZodURL>;
             endSessionUrl: z.ZodOptional<z.ZodURL>;
             apiBaseUrl: z.ZodOptional<z.ZodURL>;
-        }, z.core.$strip, core.$ZodObjectExtra>>;
+        }, z.core.$strip>>;
         capabilities: z.ZodOptional<z.ZodOptional<z.ZodObject<{
             supportsAuthorizationCode: z.ZodOptional<z.ZodBoolean>;
             supportsClientCredentials: z.ZodOptional<z.ZodBoolean>;
@@ -162,7 +162,7 @@ export declare const External_Providers_Registry_Schema: z.ZodRecord<z.ZodString
             supportsScopeReduction: z.ZodOptional<z.ZodBoolean>;
             supportsCustomDomains: z.ZodOptional<z.ZodBoolean>;
             supportsMultiTenancy: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         scopes: z.ZodOptional<z.ZodOptional<z.ZodObject<{
             available: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 scope: z.ZodString;
@@ -177,7 +177,7 @@ export declare const External_Providers_Registry_Schema: z.ZodRecord<z.ZodString
             defaultForAPI: z.ZodOptional<z.ZodArray<z.ZodString>>;
             minimum: z.ZodOptional<z.ZodArray<z.ZodString>>;
             offlineAccessScope: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         tokenConfig: z.ZodOptional<z.ZodOptional<z.ZodObject<{
             tokenType: z.ZodOptional<z.ZodString>;
             accessTokenLifetime: z.ZodOptional<z.ZodNumber>;
@@ -186,7 +186,7 @@ export declare const External_Providers_Registry_Schema: z.ZodRecord<z.ZodString
             tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_TokenEndpoint_AuthMethod>>;
             tokenRequestHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             refreshBufferSeconds: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         preferredGrantType: z.ZodOptional<z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_GrantType>>>;
         responseType: z.ZodOptional<z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_ResponseType>>>;
         prompt: z.ZodOptional<z.ZodOptional<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").OAuth2_Prompt>>>;
@@ -200,7 +200,7 @@ export declare const External_Providers_Registry_Schema: z.ZodRecord<z.ZodString
                 value: z.ZodString;
                 label: z.ZodString;
             }, z.core.$strip>>>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>>;
+        }, z.core.$strip>>>>;
         extraAuthParams: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
         extraTokenParams: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
         userProfileMapping: z.ZodOptional<z.ZodOptional<z.ZodObject<{
@@ -209,10 +209,10 @@ export declare const External_Providers_Registry_Schema: z.ZodRecord<z.ZodString
             name: z.ZodDefault<z.ZodString>;
             image: z.ZodDefault<z.ZodString>;
             emailVerified: z.ZodDefault<z.ZodString>;
-        }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip>>>;
         extensions: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
-    }, z.core.$strip, core.$ZodObjectExtra>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
 export type External_Providers_Registry = z.infer<typeof External_Providers_Registry_Schema>;
 /**
  * OAuth2 Enabled Provider Configuration
@@ -229,7 +229,7 @@ export declare const OAuth2EnabledProviderConfigSchema: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
     iconUrl: z.ZodOptional<z.ZodURL>;
     additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip>;
 export type OAuth2EnabledProviderConfig = z.infer<typeof OAuth2EnabledProviderConfigSchema>;
 /**
  * OAuth2 Providers Configuration Map
@@ -243,6 +243,6 @@ export declare const OAuth2ProvidersConfigSchema: z.ZodRecord<z.ZodString, z.Zod
     displayName: z.ZodOptional<z.ZodString>;
     iconUrl: z.ZodOptional<z.ZodURL>;
     additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip>>;
 export type OAuth2ProvidersConfig = z.infer<typeof OAuth2ProvidersConfigSchema>;
 //# sourceMappingURL=external-providers.shared.schemas.d.ts.map

package/dist/esm/external-providers/external-providers.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-providers.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/external-providers/external-providers.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,sCAAsC,EACtC,cAAc,EAEf,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAMnE;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAehD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG;;;GAGG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAG9C,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAM7F;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;uCAqB5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;wCAGvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"external-providers.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/external-providers.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,sCAAsC,EACtC,cAAc,EAEf,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAMxE;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAehD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG;;;GAGG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAG9C,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAM7F;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;iBAqB5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;kBAGvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/esm/external-providers/external-providers.shared.schemas.js

@@ -2,11 +2,11 @@
  * External Providers Shared Schemas
  *
  * Provides application-level registry schemas for external providers.
- * OAuth2 configurations are defined per-provider in @wildo-ai/external-connectors.
+ * OAuth2 configurations are defined per-provider in @wildo-ai/external-connectors-models.
  */
 import { ExternalProvider_ExchangeProtocol_Kind, OAuth2_Purpose, OAuth2_ProviderDefinitionSchema, } from "@wildo-ai/external-connectors-models";
 import { z } from "zod";
-import { EngineCapability } from "./wildo-features.shared.schemas.js";
+import { EngineCapability } from "./engine-capabilities.shared.schemas.js";
 // =============================================================================
 // EXTERNAL PROVIDERS REGISTRY
 // =============================================================================
@@ -15,8 +15,8 @@ import { EngineCapability } from "./wildo-features.shared.schemas.js";
  * Defines what protocols and capabilities a provider supports
  *
  * Note: This is a COMPUTED structure populated from:
- * - ExternalProvider_Definition.capabilities (what provider actually supports)
- * - CapabilityBindingsPolicy (what capabilities are assigned to this provider)
+ * - BackendProviderModule.providerCapabilities (what provider actually supports)
+ * - Materialized provider scope selection (what capabilities are assigned to this provider)
  * - Capability requirements validation
  */
 export const External_Providers_RegistryItemSchema = z.object({
@@ -67,4 +67,4 @@ export const OAuth2EnabledProviderConfigSchema = z.object({
  * Application-level configuration for all enabled OAuth2 providers
  */
 export const OAuth2ProvidersConfigSchema = z.record(z.string(), OAuth2EnabledProviderConfigSchema);
-//# sourceMappingURL=external-providers.shared.schemas.js.map
+//# sourceMappingURL=external-providers.shared.schemas.js.map

package/dist/esm/external-providers/external-providers.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"external-providers.shared.schemas.js","sourceRoot":"","sources":["../../../src/external-providers/external-providers.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,sCAAsC,EACtC,cAAc,EACd,+BAA+B,GAChC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,oDAAoD;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAEvB,uCAAuC;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAElE,oDAAoD;IACpD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEjE,yCAAyC;IACzC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEtC,4EAA4E;IAC5E,kBAAkB,EAAE,+BAA+B,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,MAAM,EAAE,EACV,qCAAqC,CACtC,CAAC;AAGF,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,6CAA6C;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpB,gCAAgC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAElC,8CAA8C;IAC9C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE9C,2CAA2C;IAC3C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;IAE9D,8CAA8C;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,0CAA0C;IAC1C,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAE3B,mCAAmC;IACnC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,MAAM,EAAE,EACV,iCAAiC,CAClC,CAAC"}
+{"version":3,"file":"external-providers.shared.schemas.js","sourceRoot":"","sources":["../../../../src/external-providers/external-providers.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,sCAAsC,EACtC,cAAc,EACd,+BAA+B,GAChC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAExE,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,oDAAoD;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAEvB,uCAAuC;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAElE,oDAAoD;IACpD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEjE,yCAAyC;IACzC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEtC,4EAA4E;IAC5E,kBAAkB,EAAE,+BAA+B,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,MAAM,EAAE,EACV,qCAAqC,CACtC,CAAC;AAGF,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,6CAA6C;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpB,gCAAgC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAElC,8CAA8C;IAC9C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAE9C,2CAA2C;IAC3C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;IAE9D,8CAA8C;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,0CAA0C;IAC1C,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAE3B,mCAAmC;IACnC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,MAAM,EAAE,EACV,iCAAiC,CAClC,CAAC","sourcesContent":["/**\n * External Providers Shared Schemas\n *\n * Provides application-level registry schemas for external providers.\n * OAuth2 configurations are defined per-provider in @wildo-ai/external-connectors-models.\n */\n\nimport {\n  ExternalProvider_ExchangeProtocol_Kind,\n  OAuth2_Purpose,\n  OAuth2_ProviderDefinitionSchema,\n} from \"@wildo-ai/external-connectors-models\";\nimport { z } from \"zod\";\nimport { EngineCapability } from \"./engine-capabilities.shared.schemas\";\n\n// =============================================================================\n// EXTERNAL PROVIDERS REGISTRY\n// =============================================================================\n\n/**\n * External Providers Registry Item\n * Defines what protocols and capabilities a provider supports\n *\n * Note: This is a COMPUTED structure populated from:\n * - BackendProviderModule.providerCapabilities (what provider actually supports)\n * - Materialized provider scope selection (what capabilities are assigned to this provider)\n * - Capability requirements validation\n */\nexport const External_Providers_RegistryItemSchema = z.object({\n  /** Reference to the provider (string identifier) */\n  providerRef: z.string(),\n\n  /** Protocols this provider supports */\n  protocols: z.array(z.enum(ExternalProvider_ExchangeProtocol_Kind)),\n\n  /** Engine capabilities enabled for this provider */\n  engineCapabilities: z.array(z.enum(EngineCapability)).default([]),\n\n  /** Does this provider support OAuth2? */\n  supportsOAuth2: z.boolean().optional(),\n\n  /** Custom OAuth2 configuration (if needed to override provider defaults) */\n  customOAuth2Config: OAuth2_ProviderDefinitionSchema.partial().optional(),\n});\nexport type External_Providers_RegistryItem = z.infer<typeof External_Providers_RegistryItemSchema>;\n\n/**\n * External Providers Registry\n * Maps provider references to their configurations\n */\nexport const External_Providers_Registry_Schema = z.record(\n  z.string(),\n  External_Providers_RegistryItemSchema\n);\nexport type External_Providers_Registry = z.infer<typeof External_Providers_Registry_Schema>;\n\n// =============================================================================\n// OAUTH2 ENABLED PROVIDERS CONFIGURATION\n// =============================================================================\n\n/**\n * OAuth2 Enabled Provider Configuration\n * For configuring OAuth2 providers at the application level\n *\n * Note: OAuth2 protocol definitions are in each provider folder in external-connectors.\n * This schema is for application-level enabling/customization of OAuth2 providers.\n */\nexport const OAuth2EnabledProviderConfigSchema = z.object({\n  /** Provider reference (string identifier) */\n  provider: z.string(),\n\n  /** Is this provider enabled? */\n  enabled: z.boolean().default(true),\n\n  /** Allowed email domains for this provider */\n  allowedDomains: z.array(z.string()).optional(),\n\n  /** Purpose: SSO only, API only, or both */\n  purpose: z.enum(OAuth2_Purpose).default(OAuth2_Purpose.HYBRID),\n\n  /** Custom display name (overrides default) */\n  displayName: z.string().optional(),\n\n  /** Custom icon URL (overrides default) */\n  iconUrl: z.url().optional(),\n\n  /** Additional scopes to request */\n  additionalScopes: z.array(z.string()).optional(),\n});\nexport type OAuth2EnabledProviderConfig = z.infer<typeof OAuth2EnabledProviderConfigSchema>;\n\n/**\n * OAuth2 Providers Configuration Map\n * Application-level configuration for all enabled OAuth2 providers\n */\nexport const OAuth2ProvidersConfigSchema = z.record(\n  z.string(),\n  OAuth2EnabledProviderConfigSchema\n);\nexport type OAuth2ProvidersConfig = z.infer<typeof OAuth2ProvidersConfigSchema>;\n"]}