npm - @wildo-ai/saas-models - Versions diffs - 1.1.4 → 1.1.6 - Mend

@wildo-ai/saas-models 1.1.4 → 1.1.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1399) hide show

package/dist/esm/public-runtime/index.d.ts CHANGED Viewed

@@ -95,7 +95,17 @@ export { CrossFrontendHandoffErrorCode, CrossFrontendHandoffRequestSchema, Cross
  * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.
  */
 export { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';
+/**
+ * The caught-value describers, for code that must stay light.
+ *
+ * The backend provider loader is held to a measured module graph and imports only light doors; the
+ * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The
+ * source atom imports nothing at runtime, so it adds nothing to the budget.
+ */
+export { describeCaughtError, describeCaughtErrorWithKind, } from '../errors/caught-error-description.shared.utils';
 export { WildoHeaderKeys } from '../requests/header-keys.shared';
+/** The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. */
+export { ProofOfWorkAlgorithm, SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH, SUBMISSION_CHALLENGE_ACTION_PATTERN, SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH, SubmissionChallengeAction, SubmissionChallengeRefusalCode, SubmissionChallengeResponseKind, encodeSubmissionChallengeResponse, hashProofOfWorkCandidate, isSubmissionChallengeActionName, solveProofOfWorkChallenge, type ProofOfWorkChallenge, type ResourceOperationSubmissionChallenge, type SubmissionChallengeResponse, } from '../security/submission-challenge/submission-challenge.shared';
 /**
  * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path
  * under which the entire main controllers registry is served. Exposed on the
@@ -106,11 +116,25 @@ export { WildoHeaderKeys } from '../requests/header-keys.shared';
  * symbol is what prevents the prefix-drift class — a mismatched prefix
  * silently breaks auth (see the refresh-cookie `Path` regression that
  * motivated the shared symbol). The source atom
- * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds
- * nothing to the decorator-free bundle budget.
+ * (`../requests/manual-controllers-routes-urls`) imports only the import-free
+ * submission-challenge atom (itself on this seam), so it adds nothing to the
+ * decorator-free bundle budget.
  */
 export { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';
+/**
+ * A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering
+ * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both
+ * atoms are import-free; one rendering, two doors (#1518's "[object Object]" fix, #1591).
+ */
+export { describeThrownValue } from '../errors/thrown-value-description.shared.utils';
 export { AppFrontendType } from '../config/app-frontend-type.shared.schemas';
+/**
+ * The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with
+ * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the
+ * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and
+ * `BillingInterval` live.
+ */
+export { ProductPriceDisclosure, ProductAvailability, PublicPricingRecurrenceUnit, PublicPricingAmountBasis, publicPricingAmountDecimal, type PublicPricingPrice, type PublicPricingPlan, type PublicPricingCatalog, } from '../billing/public-pricing-catalog.shared.atoms';
 /**
  * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted
  * input too — MDX frontmatter at build time, API responses at runtime — and
@@ -142,9 +166,18 @@ export { buildProviderDisplayNameLabelKey, defineProviderMetadata, ENGINE_PROVID
  * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes
  * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend
  * facets' module graph. It is a closed enum over two string members with no Zod decorators and no
- * side effects, which is the same bar the tier rule below is exported under.
+ * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and
+ * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the
+ * facts its evidence establishes, with their members.
+ */
+export { ProviderDeploymentModel, ProviderComplianceDetermination, ProviderComplianceFact, ProviderComplianceProfileSchema, establishedProviderComplianceProfile, type EstablishedProviderComplianceProfile, type ProviderComplianceProfile, } from '../external-providers/provider-compliance-profile.shared.schemas';
+/**
+ * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in
+ * the browser bundle and stored by the application. Carved into an import-free atom
+ * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that
+ * mirrored the string literals would be a second copy that drifts the day a purpose is added.
  */
-export { ProviderDeploymentModel, ProviderComplianceProfileSchema, type ProviderComplianceProfile, } from '../external-providers/provider-compliance-profile.shared.schemas';
+export { ANONYMOUS_CONSENT_RECORD_METHOD, ANONYMOUS_CONSENT_RECORD_PATH, applicationAskedConsentPurposes, CONSENT_PURPOSES, ConsentPurpose, hasGrantedConsentPurposes, missingConsentPurposes, normalizeConsentPurposes, WEBSITE_VISITOR_CONSENT_STORAGE_KEY, } from '../compliance/privacy/consent-purposes.shared';
 /**
  * The tier rule (#328) is enforced by every facet's `compose*Providers`,
  * three of which are browser-bound and reach this package only here. It
@@ -160,15 +193,7 @@ export { assertProviderTierCoherence, engineSlotsBoundByCapabilities, findProvid
  * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel
  * side.
  */
-export { FrontendProviderEntrySchema, FrontendProvidersBlockSchema, type FrontendProviderEntry, type FrontendProvidersBlock, } from '../external-providers/frontend-provider-entry.shared.schemas';
-/**
- * The z_file storage vocabulary, re-exported so a browser-bound provider module
- * can declare `fileStorage: FileStorageAccepted.GOOGLE_DRIVE` by NAME (#394 P5).
- * The enum is owned by `@wildo-ai/zod-decorators` — the package that owns
- * `z_file({ storageAccepted })` — and the facets' bundle-isolation allow-list
- * admits only this door into the models, so the value has to be reachable here.
- */
-export { FileStorageAccepted } from '@wildo-ai/zod-decorators';
+export { FileStorageAccepted, FrontendProviderEntrySchema, FrontendProvidersBlockSchema, type FrontendProviderEntry, type FrontendProvidersBlock, } from '../external-providers/frontend-provider-entry.shared.schemas';
 /**
  * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP
  * footprint, the vendor SDK package it loads, and any third-party `<script>` it
@@ -180,7 +205,7 @@ export { FileStorageAccepted } from '@wildo-ai/zod-decorators';
  * executable half lives on the facet module types in
  * `@wildo-ai/external-connectors-public` and never crosses this seam.
  */
-export { normalizeProviderFrontendCspFootprint, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, type ProviderFrontendComponentDescriptor, type ProviderFrontendComponentDescriptors, type ProviderFrontendCspDerivedOrigin, type ProviderFrontendCspFootprint, type ProviderFrontendCspFootprintDeclaration, type ProviderFrontendScriptDeclaration, type ProviderFrontendSdkDescriptor, } from '../external-providers/provider-frontend-surface.shared.schemas';
+export { normalizeProviderFrontendCspFootprint, PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS, ProviderAddressLookupDeclarationSchema, ProviderAddressLookupPlaceIdRetention, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, type ProviderAddressLookupDeclaration, type ProviderFrontendComponentDescriptor, type ProviderFrontendComponentDescriptors, type ProviderFrontendCspDerivedOrigin, type ProviderFrontendCspFootprint, type ProviderFrontendCspFootprintDeclaration, type ProviderFrontendScriptDeclaration, type ProviderFrontendSdkDescriptor, } from '../external-providers/provider-frontend-surface.shared.schemas';
 /**
  * The contract between a provider's frontend COMPONENT and the surface that
  * mounts it (#394). Types only — no schema, no runtime value — and it lives in
@@ -194,13 +219,13 @@ export type { ProviderFilePickerConstraints, ProviderFilePickerProps, ProviderFi
  * dependency-free schema helper the engine's own provider modules declare their
  * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.
  */
-export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, type FrontendPublicConfigKeySpec, type FrontendPublicConfigSchema, type OverlayFrontendProviderPublicConfigInput, } from '../external-providers/frontend-provider-public-config.shared';
+export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH, assertFrontendProvidersServeOnlyDeclaredKeys, assertNoSecretValueInFrontendProviders, findSecretValuesInFrontendProviders, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, type FrontendPublicConfigKeySpec, type FrontendPublicConfigSchema, type FrontendPublicConfigSecretMatch, type FrontendPublicConfigSecretValue, type OverlayFrontendProviderPublicConfigInput, } from '../external-providers/frontend-provider-public-config.shared';
 /**
  * The public-config shape a built-in frontend capability expects (#380). Named
  * rather than conventional: the keys were previously read by hand at each use
  * site, where a renamed one produced `undefined` and a silently wrong surface.
  */
-export { FrontendFilePickerPublicConfigSchema, type FrontendFilePickerPublicConfig, } from '../external-providers/frontend-capability-public-config.shared.schemas';
+export { admissibleFrontendPublicConfigKeys, FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS, FrontendFilePickerPublicConfigSchema, frontendCapabilityPublicConfigKeys, layerProviderFilePickerConstraints, partitionFrontendCapabilityPublicConfig, type FrontendFilePickerPublicConfig, } from '../external-providers/frontend-capability-public-config.shared.schemas';
 /**
  * The RUNTIME half of the same idea (#437): what a built-in frontend capability
  * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —
@@ -208,7 +233,7 @@ export { FrontendFilePickerPublicConfigSchema, type FrontendFilePickerPublicConf
  * so the capability declares the method and the provider adapts to it. Pure types
  * plus one guard; no Zod, no decorators.
  */
-export { isFrontendErrorMonitoringSink, type FrontendCrashReport, type FrontendErrorMonitoringSink, } from '../external-providers/frontend-capability-runtime.shared.types';
+export { isFrontendErrorMonitoringSink, isFrontendProductAnalyticsSink, isFrontendCaptchaSink, type FrontendCaptchaSink, type FrontendCrashReport, type FrontendErrorMonitoringSink, type FrontendProductAnalyticsEvent, type FrontendProductAnalyticsSink, } from '../external-providers/frontend-capability-runtime.shared.types';
 /**
  * Provider capability atoms (provider-registration-refactor §Phase 0.2
  * + §Phase 1.g). Closed built-in enum + open declaration-merging seam
@@ -229,5 +254,28 @@ export { BUILTIN_PROVIDER_PROTOCOL, type BuiltinProviderProtocol, type ProviderP
  * above, so the closure stays decorator-free.
  */
 export { composeProviderRegistry, ProviderCompositionConflictError, type ProviderRegistryFragment, type ComposedProviderRegistry, type ProviderCompositionConflict, } from '../external-providers/compose-provider-registry.shared';
+/**
+ * Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a
+ * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.
+ *
+ * ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`
+ *
+ * They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of
+ * 41 import sites of the meta-workflows subpath, **7 take nothing but these primitives**, and all
+ * seven are `saas-specifications/src/technical-documentation/*.schemas.ts` — a browser-bound tier
+ * whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven
+ * regexes.
+ *
+ * No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`
+ * and nothing else, so it is already the zero-dependency atom K-2 asks for — the
+ * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its
+ * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1
+ * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.
+ *
+ * The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is
+ * a separate change from making it reachable on the bundle-safe seam, and doing both at once would
+ * hide one in the other.
+ */
+export { MetaWorkflow_Sha256DigestSchema, MetaWorkflow_NamespacedRefSchema, MetaWorkflow_OpaqueRefSchema, MetaWorkflow_PositiveVersionSchema, MetaWorkflow_PositiveOrdinalSchema, MetaWorkflow_NonNegativeRevisionSchema, MetaWorkflow_LowercaseUuidV4Schema, MetaWorkflow_IsoDateTimeSchema, MetaWorkflow_NonNegativeFiniteNumberSchema, metaWorkflowValuesAreUnique, metaWorkflowValuesAreLexicallySorted, compareMetaWorkflowCanonicalStrings, } from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';
 /** @wildo_source:part:end saas.public-runtime.contract */
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/public-runtime/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["~~../../../~~src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,EAC3B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC7B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE~~;;;;;;;;;;;;GAYG~~;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,GACjC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACtB,MAAM,wDAAwD,CAAC;AAEhE~~;;;;;;;;;;;;GAYG~~;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,EAC/B,KAAK,yBAAyB,GACjC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,EAC1B,KAAK,uBAAuB,GAC/B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,2BAA2B,EAC3B,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC9B,MAAM,8DAA8D,CAAC;AAEtE~~;;;;;;GAMG~~;AACH,OAAO,~~EAAE~~,~~mBAAmB~~,~~EAAE~~,~~MAAM~~,~~0BAA0B~~,~~CAAC;AAE/D;;;;;;;;;;GAUG;AACH~~,~~OAAO~~,~~EACH,~~qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,EACjC,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EACzC,KAAK,gCAAgC,EACrC,KAAK,4BAA4B,EACjC,KAAK,uCAAuC,EAC5C,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,GACrC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,YAAY,EACR,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,GACxB,MAAM,yEAAyE,CAAC;AAEjF;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,4BAA4B,EAC5B,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,wCAAwC,GAChD,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,oCAAoC,EACpC,KAAK,8BAA8B,GACtC,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,~~GACnC~~,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,GAC1B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,GACxB,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,GACnC,MAAM,wDAAwD,CAAC;AAEhE,0DAA0D"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,EAC3B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC7B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG;;;;;;GAMG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,GAC9B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,2GAA2G;AAC3G,OAAO,EACL,oBAAoB,EACpB,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oCAAoC,EACzC,KAAK,2BAA2B,GACjC,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;GAKG;AACH,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,GAC5B,MAAM,gDAAgD,CAAC;AAExD;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,GACjC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACtB,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,EACtB,+BAA+B,EAC/B,oCAAoC,EACpC,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,GACjC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,EAC1B,KAAK,uBAAuB,GAC/B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC9B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,EACjC,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EACzC,KAAK,gCAAgC,EACrC,KAAK,4BAA4B,EACjC,KAAK,uCAAuC,EAC5C,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,GACrC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,YAAY,EACR,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,GACxB,MAAM,yEAAyE,CAAC;AAEjF;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oDAAoD,EACpD,4CAA4C,EAC5C,sCAAsC,EACtC,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,EAC5B,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACpC,KAAK,wCAAwC,GAChD,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,EACvC,KAAK,8BAA8B,GACtC,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,GACpC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,GAC1B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,GACxB,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,GACnC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D"}

package/dist/esm/public-runtime/index.js CHANGED Viewed

@@ -95,7 +95,17 @@ export { CrossFrontendHandoffErrorCode, CrossFrontendHandoffRequestSchema, Cross
  * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.
  */
 export { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared.js';
+/**
+ * The caught-value describers, for code that must stay light.
+ *
+ * The backend provider loader is held to a measured module graph and imports only light doors; the
+ * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The
+ * source atom imports nothing at runtime, so it adds nothing to the budget.
+ */
+export { describeCaughtError, describeCaughtErrorWithKind, } from '../errors/caught-error-description.shared.utils.js';
 export { WildoHeaderKeys } from '../requests/header-keys.shared.js';
+/** The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. */
+export { ProofOfWorkAlgorithm, SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH, SUBMISSION_CHALLENGE_ACTION_PATTERN, SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH, SubmissionChallengeAction, SubmissionChallengeRefusalCode, SubmissionChallengeResponseKind, encodeSubmissionChallengeResponse, hashProofOfWorkCandidate, isSubmissionChallengeActionName, solveProofOfWorkChallenge, } from '../security/submission-challenge/submission-challenge.shared.js';
 /**
  * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path
  * under which the entire main controllers registry is served. Exposed on the
@@ -106,11 +116,25 @@ export { WildoHeaderKeys } from '../requests/header-keys.shared.js';
  * symbol is what prevents the prefix-drift class — a mismatched prefix
  * silently breaks auth (see the refresh-cookie `Path` regression that
  * motivated the shared symbol). The source atom
- * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds
- * nothing to the decorator-free bundle budget.
+ * (`../requests/manual-controllers-routes-urls`) imports only the import-free
+ * submission-challenge atom (itself on this seam), so it adds nothing to the
+ * decorator-free bundle budget.
  */
 export { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls.js';
+/**
+ * A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering
+ * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both
+ * atoms are import-free; one rendering, two doors (#1518's "[object Object]" fix, #1591).
+ */
+export { describeThrownValue } from '../errors/thrown-value-description.shared.utils.js';
 export { AppFrontendType } from '../config/app-frontend-type.shared.schemas.js';
+/**
+ * The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with
+ * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the
+ * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and
+ * `BillingInterval` live.
+ */
+export { ProductPriceDisclosure, ProductAvailability, PublicPricingRecurrenceUnit, PublicPricingAmountBasis, publicPricingAmountDecimal, } from '../billing/public-pricing-catalog.shared.atoms.js';
 /**
  * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted
  * input too — MDX frontmatter at build time, API responses at runtime — and
@@ -142,9 +166,18 @@ export { buildProviderDisplayNameLabelKey, defineProviderMetadata, ENGINE_PROVID
  * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes
  * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend
  * facets' module graph. It is a closed enum over two string members with no Zod decorators and no
- * side effects, which is the same bar the tier rule below is exported under.
+ * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and
+ * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the
+ * facts its evidence establishes, with their members.
+ */
+export { ProviderDeploymentModel, ProviderComplianceDetermination, ProviderComplianceFact, ProviderComplianceProfileSchema, establishedProviderComplianceProfile, } from '../external-providers/provider-compliance-profile.shared.schemas.js';
+/**
+ * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in
+ * the browser bundle and stored by the application. Carved into an import-free atom
+ * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that
+ * mirrored the string literals would be a second copy that drifts the day a purpose is added.
  */
-export { ProviderDeploymentModel, ProviderComplianceProfileSchema, } from '../external-providers/provider-compliance-profile.shared.schemas.js';
+export { ANONYMOUS_CONSENT_RECORD_METHOD, ANONYMOUS_CONSENT_RECORD_PATH, applicationAskedConsentPurposes, CONSENT_PURPOSES, ConsentPurpose, hasGrantedConsentPurposes, missingConsentPurposes, normalizeConsentPurposes, WEBSITE_VISITOR_CONSENT_STORAGE_KEY, } from '../compliance/privacy/consent-purposes.shared.js';
 /**
  * The tier rule (#328) is enforced by every facet's `compose*Providers`,
  * three of which are browser-bound and reach this package only here. It
@@ -160,15 +193,7 @@ export { assertProviderTierCoherence, engineSlotsBoundByCapabilities, findProvid
  * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel
  * side.
  */
-export { FrontendProviderEntrySchema, FrontendProvidersBlockSchema, } from '../external-providers/frontend-provider-entry.shared.schemas.js';
-/**
- * The z_file storage vocabulary, re-exported so a browser-bound provider module
- * can declare `fileStorage: FileStorageAccepted.GOOGLE_DRIVE` by NAME (#394 P5).
- * The enum is owned by `@wildo-ai/zod-decorators` — the package that owns
- * `z_file({ storageAccepted })` — and the facets' bundle-isolation allow-list
- * admits only this door into the models, so the value has to be reachable here.
- */
-export { FileStorageAccepted } from '@wildo-ai/zod-decorators';
+export { FileStorageAccepted, FrontendProviderEntrySchema, FrontendProvidersBlockSchema, } from '../external-providers/frontend-provider-entry.shared.schemas.js';
 /**
  * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP
  * footprint, the vendor SDK package it loads, and any third-party `<script>` it
@@ -180,19 +205,19 @@ export { FileStorageAccepted } from '@wildo-ai/zod-decorators';
  * executable half lives on the facet module types in
  * `@wildo-ai/external-connectors-public` and never crosses this seam.
  */
-export { normalizeProviderFrontendCspFootprint, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, } from '../external-providers/provider-frontend-surface.shared.schemas.js';
+export { normalizeProviderFrontendCspFootprint, PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS, ProviderAddressLookupDeclarationSchema, ProviderAddressLookupPlaceIdRetention, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, } from '../external-providers/provider-frontend-surface.shared.schemas.js';
 /**
  * How an application supplies a frontend provider's public keys, and the
  * dependency-free schema helper the engine's own provider modules declare their
  * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.
  */
-export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, } from '../external-providers/frontend-provider-public-config.shared.js';
+export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH, assertFrontendProvidersServeOnlyDeclaredKeys, assertNoSecretValueInFrontendProviders, findSecretValuesInFrontendProviders, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, } from '../external-providers/frontend-provider-public-config.shared.js';
 /**
  * The public-config shape a built-in frontend capability expects (#380). Named
  * rather than conventional: the keys were previously read by hand at each use
  * site, where a renamed one produced `undefined` and a silently wrong surface.
  */
-export { FrontendFilePickerPublicConfigSchema, } from '../external-providers/frontend-capability-public-config.shared.schemas.js';
+export { admissibleFrontendPublicConfigKeys, FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS, FrontendFilePickerPublicConfigSchema, frontendCapabilityPublicConfigKeys, layerProviderFilePickerConstraints, partitionFrontendCapabilityPublicConfig, } from '../external-providers/frontend-capability-public-config.shared.schemas.js';
 /**
  * The RUNTIME half of the same idea (#437): what a built-in frontend capability
  * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —
@@ -200,7 +225,7 @@ export { FrontendFilePickerPublicConfigSchema, } from '../external-providers/fro
  * so the capability declares the method and the provider adapts to it. Pure types
  * plus one guard; no Zod, no decorators.
  */
-export { isFrontendErrorMonitoringSink, } from '../external-providers/frontend-capability-runtime.shared.types.js';
+export { isFrontendErrorMonitoringSink, isFrontendProductAnalyticsSink, isFrontendCaptchaSink, } from '../external-providers/frontend-capability-runtime.shared.types.js';
 /**
  * Provider capability atoms (provider-registration-refactor §Phase 0.2
  * + §Phase 1.g). Closed built-in enum + open declaration-merging seam
@@ -221,5 +246,28 @@ export { BUILTIN_PROVIDER_PROTOCOL, } from '../external-providers/provider-proto
  * above, so the closure stays decorator-free.
  */
 export { composeProviderRegistry, ProviderCompositionConflictError, } from '../external-providers/compose-provider-registry.shared.js';
+/**
+ * Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a
+ * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.
+ *
+ * ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`
+ *
+ * They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of
+ * 41 import sites of the meta-workflows subpath, **7 take nothing but these primitives**, and all
+ * seven are `saas-specifications/src/technical-documentation/*.schemas.ts` — a browser-bound tier
+ * whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven
+ * regexes.
+ *
+ * No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`
+ * and nothing else, so it is already the zero-dependency atom K-2 asks for — the
+ * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its
+ * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1
+ * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.
+ *
+ * The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is
+ * a separate change from making it reachable on the bundle-safe seam, and doing both at once would
+ * hide one in the other.
+ */
+export { MetaWorkflow_Sha256DigestSchema, MetaWorkflow_NamespacedRefSchema, MetaWorkflow_OpaqueRefSchema, MetaWorkflow_PositiveVersionSchema, MetaWorkflow_PositiveOrdinalSchema, MetaWorkflow_NonNegativeRevisionSchema, MetaWorkflow_LowercaseUuidV4Schema, MetaWorkflow_IsoDateTimeSchema, MetaWorkflow_NonNegativeFiniteNumberSchema, metaWorkflowValuesAreUnique, metaWorkflowValuesAreLexicallySorted, compareMetaWorkflowCanonicalStrings, } from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas.js';
 /** @wildo_source:part:end saas.public-runtime.contract */
 //# sourceMappingURL=index.js.map

package/dist/esm/public-runtime/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,GAElC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GAQpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,4BAA4B,GAI/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,oCAAoC,GAEvC,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,GAGhC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE,0DAA0D","sourcesContent":["/*\n @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n \n @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n \n Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n \n Why this subpath exists:\n * The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n * module load (line 3) and re-exports the entire decorator-framework-bound\n * schema graph (~150 schemas, transitively pulls\n * `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n * `reflect-metadata`). Browser bundles that need only a handful of stable\n * atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n * enums) should NOT pay that cost.\n \n This subpath exposes that minimal stable surface, sourced from\n * side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n * K-4):\n \n - Cross-Frontend Handoff + Token Exchange DTO atoms\n * (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n * `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n * `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n * `TokenExchangeResponseSchema`,\n * `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n * `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n * schemas were added\n * in cross-app-jwt-propagation.md Step 5 — every receiver of an\n * AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n * a client-bundle target, so the response shape MUST live here too\n * (not just in the heavy backend schemas barrel).\n * - Frontend-kind enum\n * (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n * — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n * Consumed by website discovery, scaffolding, CSP config, and\n * companion services that need to introspect a service's runtime\n * kind without booting the full schema graph. The atom file's\n * file-level JSDoc is the canonical home for the kind-by-kind\n * rationale AND the locked \"no native variants\" design decision\n * — read that file before authoring any AppFrontendType-driven\n * conditional.\n * - Canonical HTTP header keys (`../requests/header-keys.shared`):\n * `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n * whole; per K-2 splitting it would itself violate DRY).\n * - Locale enums (re-exported transparently from\n * `@wildo-ai/presets-components-models/public-runtime`):\n * `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n * (`@wildo-ai/saas-models/public-runtime`) — the\n * `presets-components-models/public-runtime` subpath is an internal\n * seam (saas-models-public-runtime.md K-6).\n \n @wildo-boundary (saas-models-public-runtime.md K-3)\n * - This file and every file it transitively imports MUST NOT import from:\n * `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n * the `@wildo-ai/presets-components-models` ROOT barrel (only the\n * `/public-runtime` subpath of that package is allowed), `inversify`,\n * `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n * `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n * - DO NOT import from this package's ROOT barrel (`../index`) — that\n * barrel runs `initZodDecorators()` and pulls the full schema tree.\n * - Allowed imports: `zod` (peer dep, browser-safe), files inside\n * `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n * plan, and the\n * `@wildo-ai/presets-components-models/public-runtime` subpath.\n \n @wildo-bundle-budget\n * The output of this barrel + transitive imports MUST stay free of:\n * `initZodDecorators()` invocation, `reflect-metadata`, the full\n * `authentication.shared.dto.schemas.ts` web of types\n * (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n * `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n * snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n * after importing this module and asserts the prototype is unchanged\n * (proof that `initZodDecorators` did NOT run).\n \n @wildo-dry-contract\n * Every atom exposed here lives in EXACTLY one source file. The original\n * home (e.g. `authentication.shared.dto.schemas.ts`,\n * `localization/language.shared.schemas.ts`) re-exports from the same atom\n * so existing root-barrel consumers keep working unchanged. Adding a new\n * atom: split it out of its current heavy file FIRST (matching K-2\n * protocol), add a re-export at the original home, then add the import\n * here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n /\n\nexport {\n CrossFrontendHandoffErrorCode,\n CrossFrontendHandoffRequestSchema,\n CrossFrontendHandoffResponseSchema,\n TokenExchangeRequestSchema,\n TokenExchangeResponseSchema,\n type CrossFrontendHandoffRequest,\n type CrossFrontendHandoffResponse,\n type TokenExchangeRequest,\n type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/\n The single same-origin redirect predicate.\n \n On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n /\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/\n Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds\n * nothing to the decorator-free bundle budget.\n /\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/\n Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n /\nexport {\n ALL_ZOD_ISSUES,\n DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n ZOD_ROOT_ISSUE_PATH_LABEL,\n formatZodIssue,\n formatZodIssues,\n summarizeZodIssues,\n type FormattableZodIssue,\n type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n AvailableLanguage,\n TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/\n Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n /\nexport {\n buildProviderDisplayNameLabelKey,\n defineProviderMetadata,\n ENGINE_PROVIDER_ORIGIN,\n ProviderCatalogueProvenanceSchema,\n ProviderCatalogueSource,\n ProviderIdentitySchema,\n ProviderMetadataSchema,\n ProviderOriginKind,\n ProviderOriginSchema,\n ProviderTier,\n type DefineProviderMetadataInput,\n type ProviderCatalogueProvenance,\n type ProviderIdentity,\n type ProviderMetadata,\n type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/\n A provider's compliance primitives, reachable from the FRONTEND facets.\n \n `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n \n `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under.\n /\nexport {\n ProviderDeploymentModel,\n ProviderComplianceProfileSchema,\n type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/\n The tier rule (#328) is enforced by every facet's `composeProviders`,\n three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n /\nexport {\n assertProviderTierCoherence,\n engineSlotsBoundByCapabilities,\n findProviderTierViolations,\n type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/\n Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n \n Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n /\nexport {\n FrontendProviderEntrySchema,\n FrontendProvidersBlockSchema,\n type FrontendProviderEntry,\n type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/\n The z_file storage vocabulary, re-exported so a browser-bound provider module\n * can declare `fileStorage: FileStorageAccepted.GOOGLE_DRIVE` by NAME (#394 P5).\n * The enum is owned by `@wildo-ai/zod-decorators` — the package that owns\n * `z_file({ storageAccepted })` — and the facets' bundle-isolation allow-list\n * admits only this door into the models, so the value has to be reachable here.\n /\nexport { FileStorageAccepted } from '@wildo-ai/zod-decorators';\n\n/\n Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n \n These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n /\nexport {\n normalizeProviderFrontendCspFootprint,\n ProviderFrontendComponentDescriptorSchema,\n ProviderFrontendComponentDescriptorsSchema,\n ProviderFrontendCspDerivedOriginSchema,\n ProviderFrontendCspFootprintSchema,\n ProviderFrontendCspOriginBucket,\n ProviderFrontendScriptCrossOrigin,\n ProviderFrontendScriptDeclarationSchema,\n ProviderFrontendSdkDescriptorSchema,\n ProviderFrontendSelectionDelivery,\n type ProviderFrontendComponentDescriptor,\n type ProviderFrontendComponentDescriptors,\n type ProviderFrontendCspDerivedOrigin,\n type ProviderFrontendCspFootprint,\n type ProviderFrontendCspFootprintDeclaration,\n type ProviderFrontendScriptDeclaration,\n type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/\n The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n /\nexport type {\n ProviderFilePickerConstraints,\n ProviderFilePickerProps,\n ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/\n How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n /\nexport {\n defineFrontendPublicConfigSchema,\n FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n FrontendProviderPublicConfigError,\n FrontendProviderPublicConfigRefusal,\n FrontendPublicConfigValueKind,\n overlayFrontendProviderPublicConfig,\n readDeclaredPublicConfigKeys,\n type FrontendPublicConfigKeySpec,\n type FrontendPublicConfigSchema,\n type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/\n The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n /\nexport {\n FrontendFilePickerPublicConfigSchema,\n type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/\n The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n /\nexport {\n isFrontendErrorMonitoringSink,\n type FrontendCrashReport,\n type FrontendErrorMonitoringSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/\n Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n /\nexport {\n BUILTIN_PROVIDER_CAPABILITY,\n type BuiltinProviderCapability,\n type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n BUILTIN_PROVIDER_PROTOCOL,\n type BuiltinProviderProtocol,\n type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/\n Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n \n Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n /\nexport {\n composeProviderRegistry,\n ProviderCompositionConflictError,\n type ProviderRegistryFragment,\n type ComposedProviderRegistry,\n type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/* @wildo_source:part:end saas.public-runtime.contract */\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG;;;;;;GAMG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,GAC9B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,2GAA2G;AAC3G,OAAO,EACL,oBAAoB,EACpB,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,GAI1B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;GAKG;AACH,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,GAI7B,MAAM,gDAAgD,CAAC;AAExD;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,EACtB,+BAA+B,EAC/B,oCAAoC,GAGvC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GASpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oDAAoD,EACpD,4CAA4C,EAC5C,sCAAsC,EACtC,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,GAM/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,GAE1C,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GAMxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D","sourcesContent":["/*\n @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n \n @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n \n Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n \n Why this subpath exists:\n * The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n * module load (line 3) and re-exports the entire decorator-framework-bound\n * schema graph (~150 schemas, transitively pulls\n * `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n * `reflect-metadata`). Browser bundles that need only a handful of stable\n * atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n * enums) should NOT pay that cost.\n \n This subpath exposes that minimal stable surface, sourced from\n * side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n * K-4):\n \n - Cross-Frontend Handoff + Token Exchange DTO atoms\n * (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n * `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n * `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n * `TokenExchangeResponseSchema`,\n * `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n * `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n * schemas were added\n * in cross-app-jwt-propagation.md Step 5 — every receiver of an\n * AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n * a client-bundle target, so the response shape MUST live here too\n * (not just in the heavy backend schemas barrel).\n * - Frontend-kind enum\n * (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n * — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n * Consumed by website discovery, scaffolding, CSP config, and\n * companion services that need to introspect a service's runtime\n * kind without booting the full schema graph. The atom file's\n * file-level JSDoc is the canonical home for the kind-by-kind\n * rationale AND the locked \"no native variants\" design decision\n * — read that file before authoring any AppFrontendType-driven\n * conditional.\n * - Canonical HTTP header keys (`../requests/header-keys.shared`):\n * `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n * whole; per K-2 splitting it would itself violate DRY).\n * - Locale enums (re-exported transparently from\n * `@wildo-ai/presets-components-models/public-runtime`):\n * `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n * (`@wildo-ai/saas-models/public-runtime`) — the\n * `presets-components-models/public-runtime` subpath is an internal\n * seam (saas-models-public-runtime.md K-6).\n \n @wildo-boundary (saas-models-public-runtime.md K-3)\n * - This file and every file it transitively imports MUST NOT import from:\n * `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n * the `@wildo-ai/presets-components-models` ROOT barrel (only the\n * `/public-runtime` subpath of that package is allowed), `inversify`,\n * `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n * `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n * - DO NOT import from this package's ROOT barrel (`../index`) — that\n * barrel runs `initZodDecorators()` and pulls the full schema tree.\n * - Allowed imports: `zod` (peer dep, browser-safe), files inside\n * `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n * plan, and the\n * `@wildo-ai/presets-components-models/public-runtime` subpath.\n \n @wildo-bundle-budget\n * The output of this barrel + transitive imports MUST stay free of:\n * `initZodDecorators()` invocation, `reflect-metadata`, the full\n * `authentication.shared.dto.schemas.ts` web of types\n * (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n * `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n * snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n * after importing this module and asserts the prototype is unchanged\n * (proof that `initZodDecorators` did NOT run).\n \n @wildo-dry-contract\n * Every atom exposed here lives in EXACTLY one source file. The original\n * home (e.g. `authentication.shared.dto.schemas.ts`,\n * `localization/language.shared.schemas.ts`) re-exports from the same atom\n * so existing root-barrel consumers keep working unchanged. Adding a new\n * atom: split it out of its current heavy file FIRST (matching K-2\n * protocol), add a re-export at the original home, then add the import\n * here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n /\n\nexport {\n CrossFrontendHandoffErrorCode,\n CrossFrontendHandoffRequestSchema,\n CrossFrontendHandoffResponseSchema,\n TokenExchangeRequestSchema,\n TokenExchangeResponseSchema,\n type CrossFrontendHandoffRequest,\n type CrossFrontendHandoffResponse,\n type TokenExchangeRequest,\n type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/\n The single same-origin redirect predicate.\n \n On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n /\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\n/\n The caught-value describers, for code that must stay light.\n \n The backend provider loader is held to a measured module graph and imports only light doors; the\n * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The\n * source atom imports nothing at runtime, so it adds nothing to the budget.\n /\nexport {\n describeCaughtError,\n describeCaughtErrorWithKind,\n} from '../errors/caught-error-description.shared.utils';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/* The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. /\nexport {\n ProofOfWorkAlgorithm,\n SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH,\n SUBMISSION_CHALLENGE_ACTION_PATTERN,\n SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH,\n SubmissionChallengeAction,\n SubmissionChallengeRefusalCode,\n SubmissionChallengeResponseKind,\n encodeSubmissionChallengeResponse,\n hashProofOfWorkCandidate,\n isSubmissionChallengeActionName,\n solveProofOfWorkChallenge,\n type ProofOfWorkChallenge,\n type ResourceOperationSubmissionChallenge,\n type SubmissionChallengeResponse,\n} from '../security/submission-challenge/submission-challenge.shared';\n\n/\n Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) imports only the import-free\n * submission-challenge atom (itself on this seam), so it adds nothing to the\n * decorator-free bundle budget.\n /\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\n/\n A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering\n * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both\n * atoms are import-free; one rendering, two doors (#1518's \"[object Object]\" fix, #1591).\n /\nexport { describeThrownValue } from '../errors/thrown-value-description.shared.utils';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/\n The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with\n * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the\n * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and\n * `BillingInterval` live.\n /\nexport {\n ProductPriceDisclosure,\n ProductAvailability,\n PublicPricingRecurrenceUnit,\n PublicPricingAmountBasis,\n publicPricingAmountDecimal,\n type PublicPricingPrice,\n type PublicPricingPlan,\n type PublicPricingCatalog,\n} from '../billing/public-pricing-catalog.shared.atoms';\n\n/\n Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n /\nexport {\n ALL_ZOD_ISSUES,\n DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n ZOD_ROOT_ISSUE_PATH_LABEL,\n formatZodIssue,\n formatZodIssues,\n summarizeZodIssues,\n type FormattableZodIssue,\n type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n AvailableLanguage,\n TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/\n Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n /\nexport {\n buildProviderDisplayNameLabelKey,\n defineProviderMetadata,\n ENGINE_PROVIDER_ORIGIN,\n ProviderCatalogueProvenanceSchema,\n ProviderCatalogueSource,\n ProviderIdentitySchema,\n ProviderMetadataSchema,\n ProviderOriginKind,\n ProviderOriginSchema,\n ProviderTier,\n type DefineProviderMetadataInput,\n type ProviderCatalogueProvenance,\n type ProviderIdentity,\n type ProviderMetadata,\n type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/\n A provider's compliance primitives, reachable from the FRONTEND facets.\n \n `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n \n `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and\n * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the\n * facts its evidence establishes, with their members.\n /\nexport {\n ProviderDeploymentModel,\n ProviderComplianceDetermination,\n ProviderComplianceFact,\n ProviderComplianceProfileSchema,\n establishedProviderComplianceProfile,\n type EstablishedProviderComplianceProfile,\n type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/\n Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in\n * the browser bundle and stored by the application. Carved into an import-free atom\n * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that\n * mirrored the string literals would be a second copy that drifts the day a purpose is added.\n /\nexport {\n ANONYMOUS_CONSENT_RECORD_METHOD,\n ANONYMOUS_CONSENT_RECORD_PATH,\n applicationAskedConsentPurposes,\n CONSENT_PURPOSES,\n ConsentPurpose,\n hasGrantedConsentPurposes,\n missingConsentPurposes,\n normalizeConsentPurposes,\n WEBSITE_VISITOR_CONSENT_STORAGE_KEY,\n} from '../compliance/privacy/consent-purposes.shared';\n\n/\n The tier rule (#328) is enforced by every facet's `composeProviders`,\n three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n /\nexport {\n assertProviderTierCoherence,\n engineSlotsBoundByCapabilities,\n findProviderTierViolations,\n type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/\n Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n \n Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n /\nexport {\n FileStorageAccepted,\n FrontendProviderEntrySchema,\n FrontendProvidersBlockSchema,\n type FrontendProviderEntry,\n type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/\n Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n \n These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n /\nexport {\n normalizeProviderFrontendCspFootprint,\n PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS,\n ProviderAddressLookupDeclarationSchema,\n ProviderAddressLookupPlaceIdRetention,\n ProviderFrontendComponentDescriptorSchema,\n ProviderFrontendComponentDescriptorsSchema,\n ProviderFrontendCspDerivedOriginSchema,\n ProviderFrontendCspFootprintSchema,\n ProviderFrontendCspOriginBucket,\n ProviderFrontendScriptCrossOrigin,\n ProviderFrontendScriptDeclarationSchema,\n ProviderFrontendSdkDescriptorSchema,\n ProviderFrontendSelectionDelivery,\n type ProviderAddressLookupDeclaration,\n type ProviderFrontendComponentDescriptor,\n type ProviderFrontendComponentDescriptors,\n type ProviderFrontendCspDerivedOrigin,\n type ProviderFrontendCspFootprint,\n type ProviderFrontendCspFootprintDeclaration,\n type ProviderFrontendScriptDeclaration,\n type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/\n The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n /\nexport type {\n ProviderFilePickerConstraints,\n ProviderFilePickerProps,\n ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/\n How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n /\nexport {\n defineFrontendPublicConfigSchema,\n FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n FrontendProviderPublicConfigError,\n FrontendProviderPublicConfigRefusal,\n FrontendPublicConfigValueKind,\n FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH,\n assertFrontendProvidersServeOnlyDeclaredKeys,\n assertNoSecretValueInFrontendProviders,\n findSecretValuesInFrontendProviders,\n overlayFrontendProviderPublicConfig,\n readDeclaredPublicConfigKeys,\n type FrontendPublicConfigKeySpec,\n type FrontendPublicConfigSchema,\n type FrontendPublicConfigSecretMatch,\n type FrontendPublicConfigSecretValue,\n type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/\n The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n /\nexport {\n admissibleFrontendPublicConfigKeys,\n FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS,\n FrontendFilePickerPublicConfigSchema,\n frontendCapabilityPublicConfigKeys,\n layerProviderFilePickerConstraints,\n partitionFrontendCapabilityPublicConfig,\n type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/\n The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n /\nexport {\n isFrontendErrorMonitoringSink,\n isFrontendProductAnalyticsSink,\n isFrontendCaptchaSink,\n type FrontendCaptchaSink,\n type FrontendCrashReport,\n type FrontendErrorMonitoringSink,\n type FrontendProductAnalyticsEvent,\n type FrontendProductAnalyticsSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/\n Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n /\nexport {\n BUILTIN_PROVIDER_CAPABILITY,\n type BuiltinProviderCapability,\n type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n BUILTIN_PROVIDER_PROTOCOL,\n type BuiltinProviderProtocol,\n type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/\n Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n \n Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n /\nexport {\n composeProviderRegistry,\n ProviderCompositionConflictError,\n type ProviderRegistryFragment,\n type ComposedProviderRegistry,\n type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/\n Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a\n * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.\n \n ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`\n \n They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of\n * 41 import sites of the meta-workflows subpath, 7 take nothing but these primitives, and all\n * seven are `saas-specifications/src/technical-documentation/.schemas.ts` — a browser-bound tier\n whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven\n * regexes.\n \n No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`\n * and nothing else, so it is already the zero-dependency atom K-2 asks for — the\n * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its\n * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1\n * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.\n \n The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is\n * a separate change from making it reachable on the bundle-safe seam, and doing both at once would\n * hide one in the other.\n /\nexport {\n MetaWorkflow_Sha256DigestSchema,\n MetaWorkflow_NamespacedRefSchema,\n MetaWorkflow_OpaqueRefSchema,\n MetaWorkflow_PositiveVersionSchema,\n MetaWorkflow_PositiveOrdinalSchema,\n MetaWorkflow_NonNegativeRevisionSchema,\n MetaWorkflow_LowercaseUuidV4Schema,\n MetaWorkflow_IsoDateTimeSchema,\n MetaWorkflow_NonNegativeFiniteNumberSchema,\n metaWorkflowValuesAreUnique,\n metaWorkflowValuesAreLexicallySorted,\n compareMetaWorkflowCanonicalStrings,\n} from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';\n\n/* @wildo_source:part:end saas.public-runtime.contract */\n"]}

package/dist/esm/queue/jobs.shared.resources-config.schemas.d.ts CHANGED Viewed

@@ -4,14 +4,13 @@
  * Defines resource configurations for JobExecution and JobPayloadStorage.
  *
  * Resource Design Principles:
- * - REPOSITORY_ONLY variants throughout: both resources are reached by the queue services and by
- *   nothing else, so neither declares an API variant and neither generates a route
+ * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route
  * - Proper requestDto schemas for each variant
  * - isBackendOnly fields are automatically filtered in responses
  *
  * Key Resources:
- * - JobExecution: Tracks all job lifecycle events (30-day TTL)
- * - JobPayloadStorage: Stores large payloads >100KB (24-hour TTL)
+ * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained
+ * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence
  */
 import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
 import type { ResourceConfiguration } from '../resources/resources-config.shared.schemas';
@@ -27,15 +26,15 @@ export declare enum JobExecutionVariantKey {
 /**
  * Core operations available for JobExecution.
  */
-type JobExecution_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH;
+type JobExecution_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.LIST | CoreResourceOperation.SEARCH | CoreResourceOperation.DELETE_MANY;
 /**
  * Factory function for JobExecution resource configuration.
  *
  * JobExecution tracks the lifecycle of all jobs processed by the queue system.
  * It provides visibility into job status, retries, timing, and error information.
  *
- * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST), for the queue
- * services. There is no API variant, so no route is generated and nothing here is reachable over
+ * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue
+ * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over
  * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not
  * an API call, and adding an operator-facing one means declaring an API variant here first.
  */
@@ -50,7 +49,7 @@ export declare enum JobPayloadStorageVariantKey {
 /**
  * Core operations available for JobPayloadStorage.
  */
-type JobPayloadStorage_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.DELETE | CoreResourceOperation.SEARCH;
+type JobPayloadStorage_CoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.DELETE | CoreResourceOperation.SEARCH | CoreResourceOperation.DELETE_MANY;
 /**
  * Factory function for JobPayloadStorage resource configuration.
  *

package/dist/esm/queue/jobs.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"jobs.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA~~;;;;;;;;;;;;;;GAcG~~;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B;;GAEG;AACH,oBAAY,sBAAsB;IAChC,kDAAkD;IAClD,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,2BAA2B,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,CAAC;~~AAkBjC~~;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wDAAwD,GACnE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,2BAA2B,EAAE,OAAO,kBAAkB,~~CA2KzF~~,CAAC;AAMF;;GAEG;AACH,oBAAY,2BAA2B;IACrC,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;~~AAWjC~~;;;;;;;;GAQG;AACH,eAAO,MAAM,6DAA6D,GACxE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,EAAE,OAAO,uBAAuB,~~CA2FnG~~,CAAC"}
1	+ {"version":3,"file":"jobs.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAA4D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAGvI,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAKxB,MAAM,uBAAuB,CAAC;AAO/B;;GAEG;AACH,oBAAY,sBAAsB;IAChC,kDAAkD;IAClD,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,2BAA2B,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAkBtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wDAAwD,GACnE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,2BAA2B,EAAE,OAAO,kBAAkB,CAuLzF,CAAC;AAMF;;GAEG;AACH,oBAAY,2BAA2B;IACrC,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,KAAK,gCAAgC,GACjC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,WAAW,CAAC;AAWtC;;;;;;;;GAQG;AACH,eAAO,MAAM,6DAA6D,GACxE,wBAAwB,oBAAoB,EAAE,KAC7C,qBAAqB,CAAC,SAAS,EAAE,gCAAgC,EAAE,OAAO,uBAAuB,CAwGnG,CAAC"}

package/dist/esm/queue/jobs.shared.resources-config.schemas.js CHANGED Viewed

@@ -4,14 +4,13 @@
  * Defines resource configurations for JobExecution and JobPayloadStorage.
  *
  * Resource Design Principles:
- * - REPOSITORY_ONLY variants throughout: both resources are reached by the queue services and by
- *   nothing else, so neither declares an API variant and neither generates a route
+ * - REPOSITORY_ONLY variants throughout: both resources are reached by queue services and internal retention sweeps, so neither declares an API variant and neither generates a route
  * - Proper requestDto schemas for each variant
  * - isBackendOnly fields are automatically filtered in responses
  *
  * Key Resources:
- * - JobExecution: Tracks all job lifecycle events (30-day TTL)
- * - JobPayloadStorage: Stores large payloads >100KB (24-hour TTL)
+ * - JobExecution: Tracks job lifecycle; terminal history expires, unresolved scheduled work is retained
+ * - JobPayloadStorage: Stores operational payloads (24-hour default) and finite selected scheduled evidence
  */
 import { z } from 'zod';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
@@ -51,8 +50,8 @@ const JOB_EXECUTION_SORT_FIELDS = ['createdAt', 'completedAt', 'durationMs', 're
  * JobExecution tracks the lifecycle of all jobs processed by the queue system.
  * It provides visibility into job status, retries, timing, and error information.
  *
- * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST), for the queue
- * services. There is no API variant, so no route is generated and nothing here is reachable over
+ * Variants: one per operation, all REPOSITORY_ONLY (CREATE, READ, UPDATE, LIST, SEARCH, DELETE_MANY), for queue
+ * services and bounded retention maintenance. There is no API variant, so no route is generated and nothing here is reachable over
  * HTTP. In particular there is no admin cancel verb: cancelling a job is a queue-service call, not
  * an API call, and adding an operator-facing one means declaring an API variant here first.
  */
@@ -131,8 +130,20 @@ export const jobExecution_ResourceConfiguration_InitializationFactory = (resourc
             CoreResourceOperation.UPDATE,
             CoreResourceOperation.LIST,
             CoreResourceOperation.SEARCH,
+            CoreResourceOperation.DELETE_MANY,
         ],
         operationsConfiguration: {
+            // The built-in bounded retention sweep resolves this contract before deleting expired rows.
+            // Repository-only: supplying maintenance behavior must not create a public deletion route.
+            [CoreResourceOperation.DELETE_MANY]: {
+                variants: [{
+                        variantKey: JobExecutionVariantKey.INTERNAL,
+                        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                        isDefault: true,
+                        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                        riskLevel: ResourceOperationRiskLevel.HIGH,
+                    }],
+            },
             // === CREATE ===
             [CoreResourceOperation.CREATE]: {
                 variants: [
@@ -240,6 +251,7 @@ export const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (re
     // Internal services provide all data except auto-generated fields
     const JobPayloadStorageCreateInternalSchema = JobPayloadStorageSchema.omit({
         _id: true,
+        createdAt: true, // Repository owns timestamps; input cleaning removes them before DTO validation.
         referenceCount: true, // Starts at 1 (default)
     });
     return createResourceConfiguration_Initialization({
@@ -253,8 +265,20 @@ export const jobPayloadStorage_ResourceConfiguration_InitializationFactory = (re
             CoreResourceOperation.READ,
             CoreResourceOperation.DELETE,
             CoreResourceOperation.SEARCH,
+            CoreResourceOperation.DELETE_MANY,
         ],
         operationsConfiguration: {
+            // The built-in bounded retention sweep resolves this contract before deleting expired rows.
+            // Repository-only: supplying maintenance behavior must not create a public deletion route.
+            [CoreResourceOperation.DELETE_MANY]: {
+                variants: [{
+                        variantKey: JobPayloadStorageVariantKey.INTERNAL,
+                        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,
+                        isDefault: true,
+                        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                        riskLevel: ResourceOperationRiskLevel.HIGH,
+                    }],
+            },
             // === CREATE ===
             [CoreResourceOperation.CREATE]: {
                 variants: [