@wildo-ai/saas-models 1.1.5 → 1.1.6

package/dist/esm/public-runtime/index.js

@@ -95,7 +95,17 @@ export { CrossFrontendHandoffErrorCode, CrossFrontendHandoffRequestSchema, Cross
  * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.
  */
 export { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared.js';
+/**
+ * The caught-value describers, for code that must stay light.
+ *
+ * The backend provider loader is held to a measured module graph and imports only light doors; the
+ * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The
+ * source atom imports nothing at runtime, so it adds nothing to the budget.
+ */
+export { describeCaughtError, describeCaughtErrorWithKind, } from '../errors/caught-error-description.shared.utils.js';
 export { WildoHeaderKeys } from '../requests/header-keys.shared.js';
+/** The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. */
+export { ProofOfWorkAlgorithm, SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH, SUBMISSION_CHALLENGE_ACTION_PATTERN, SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH, SubmissionChallengeAction, SubmissionChallengeRefusalCode, SubmissionChallengeResponseKind, encodeSubmissionChallengeResponse, hashProofOfWorkCandidate, isSubmissionChallengeActionName, solveProofOfWorkChallenge, } from '../security/submission-challenge/submission-challenge.shared.js';
 /**
  * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path
  * under which the entire main controllers registry is served. Exposed on the
@@ -106,18 +116,25 @@ export { WildoHeaderKeys } from '../requests/header-keys.shared.js';
  * symbol is what prevents the prefix-drift class — a mismatched prefix
  * silently breaks auth (see the refresh-cookie `Path` regression that
  * motivated the shared symbol). The source atom
- * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds
- * nothing to the decorator-free bundle budget.
+ * (`../requests/manual-controllers-routes-urls`) imports only the import-free
+ * submission-challenge atom (itself on this seam), so it adds nothing to the
+ * decorator-free bundle budget.
  */
 export { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls.js';
 /**
- * A caught value as one readable line, for a bundle-isolated package (`saas-website`). The root's
- * `describeCaughtError` also recognises the engine's own error type and so imports the error schemas;
- * this atom imports nothing, and `describeCaughtError` delegates to it for every other value — one
- * rendering, two doors (#1518's "[object Object]" fix, reachable from the browser-safe seam).
+ * A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering
+ * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both
+ * atoms are import-free; one rendering, two doors (#1518's "[object Object]" fix, #1591).
  */
 export { describeThrownValue } from '../errors/thrown-value-description.shared.utils.js';
 export { AppFrontendType } from '../config/app-frontend-type.shared.schemas.js';
+/**
+ * The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with
+ * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the
+ * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and
+ * `BillingInterval` live.
+ */
+export { ProductPriceDisclosure, ProductAvailability, PublicPricingRecurrenceUnit, PublicPricingAmountBasis, publicPricingAmountDecimal, } from '../billing/public-pricing-catalog.shared.atoms.js';
 /**
  * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted
  * input too — MDX frontmatter at build time, API responses at runtime — and
@@ -149,9 +166,11 @@ export { buildProviderDisplayNameLabelKey, defineProviderMetadata, ENGINE_PROVID
  * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes
  * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend
  * facets' module graph. It is a closed enum over two string members with no Zod decorators and no
- * side effects, which is the same bar the tier rule below is exported under.
+ * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and
+ * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the
+ * facts its evidence establishes, with their members.
  */
-export { ProviderDeploymentModel, ProviderComplianceProfileSchema, } from '../external-providers/provider-compliance-profile.shared.schemas.js';
+export { ProviderDeploymentModel, ProviderComplianceDetermination, ProviderComplianceFact, ProviderComplianceProfileSchema, establishedProviderComplianceProfile, } from '../external-providers/provider-compliance-profile.shared.schemas.js';
 /**
  * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in
  * the browser bundle and stored by the application. Carved into an import-free atom
@@ -186,13 +205,13 @@ export { FileStorageAccepted, FrontendProviderEntrySchema, FrontendProvidersBloc
  * executable half lives on the facet module types in
  * `@wildo-ai/external-connectors-public` and never crosses this seam.
  */
-export { normalizeProviderFrontendCspFootprint, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, } from '../external-providers/provider-frontend-surface.shared.schemas.js';
+export { normalizeProviderFrontendCspFootprint, PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS, ProviderAddressLookupDeclarationSchema, ProviderAddressLookupPlaceIdRetention, ProviderFrontendComponentDescriptorSchema, ProviderFrontendComponentDescriptorsSchema, ProviderFrontendCspDerivedOriginSchema, ProviderFrontendCspFootprintSchema, ProviderFrontendCspOriginBucket, ProviderFrontendScriptCrossOrigin, ProviderFrontendScriptDeclarationSchema, ProviderFrontendSdkDescriptorSchema, ProviderFrontendSelectionDelivery, } from '../external-providers/provider-frontend-surface.shared.schemas.js';
 /**
  * How an application supplies a frontend provider's public keys, and the
  * dependency-free schema helper the engine's own provider modules declare their
  * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.
  */
-export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, } from '../external-providers/frontend-provider-public-config.shared.js';
+export { defineFrontendPublicConfigSchema, FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY, FrontendProviderPublicConfigError, FrontendProviderPublicConfigRefusal, FrontendPublicConfigValueKind, FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH, assertFrontendProvidersServeOnlyDeclaredKeys, assertNoSecretValueInFrontendProviders, findSecretValuesInFrontendProviders, overlayFrontendProviderPublicConfig, readDeclaredPublicConfigKeys, } from '../external-providers/frontend-provider-public-config.shared.js';
 /**
  * The public-config shape a built-in frontend capability expects (#380). Named
  * rather than conventional: the keys were previously read by hand at each use
@@ -206,7 +225,7 @@ export { admissibleFrontendPublicConfigKeys, FRONTEND_CAPABILITY_PUBLIC_CONFIG_S
  * so the capability declares the method and the provider adapts to it. Pure types
  * plus one guard; no Zod, no decorators.
  */
-export { isFrontendErrorMonitoringSink, } from '../external-providers/frontend-capability-runtime.shared.types.js';
+export { isFrontendErrorMonitoringSink, isFrontendProductAnalyticsSink, isFrontendCaptchaSink, } from '../external-providers/frontend-capability-runtime.shared.types.js';
 /**
  * Provider capability atoms (provider-registration-refactor §Phase 0.2
  * + §Phase 1.g). Closed built-in enum + open declaration-merging seam

package/dist/esm/public-runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;;GAKG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,GAElC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GAQpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,4BAA4B,GAI/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,GAE1C,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,GAGhC,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D","sourcesContent":["/**\n * @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n *\n * @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n *\n * Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n *\n * Why this subpath exists:\n *   The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n *   module load (line 3) and re-exports the entire decorator-framework-bound\n *   schema graph (~150 schemas, transitively pulls\n *   `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n *   `reflect-metadata`). Browser bundles that need only a handful of stable\n *   atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n *   enums) should NOT pay that cost.\n *\n *   This subpath exposes that minimal stable surface, sourced from\n *   side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n *   K-4):\n *\n *     - Cross-Frontend Handoff + Token Exchange DTO atoms\n *       (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n *       `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n *       `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n *       `TokenExchangeResponseSchema`,\n *       `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n *       `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n *       schemas were added\n *       in cross-app-jwt-propagation.md Step 5 — every receiver of an\n *       AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n *       a client-bundle target, so the response shape MUST live here too\n *       (not just in the heavy backend schemas barrel).\n *     - Frontend-kind enum\n *       (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n *       — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n *       Consumed by website discovery, scaffolding, CSP config, and\n *       companion services that need to introspect a service's runtime\n *       kind without booting the full schema graph. The atom file's\n *       file-level JSDoc is the canonical home for the kind-by-kind\n *       rationale AND the locked \"no native variants\" design decision\n *       — read that file before authoring any AppFrontendType-driven\n *       conditional.\n *     - Canonical HTTP header keys (`../requests/header-keys.shared`):\n *       `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n *       whole; per K-2 splitting it would itself violate DRY).\n *     - Locale enums (re-exported transparently from\n *       `@wildo-ai/presets-components-models/public-runtime`):\n *       `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n *       (`@wildo-ai/saas-models/public-runtime`) — the\n *       `presets-components-models/public-runtime` subpath is an internal\n *       seam (saas-models-public-runtime.md K-6).\n *\n * @wildo-boundary  (saas-models-public-runtime.md K-3)\n *   - This file and every file it transitively imports MUST NOT import from:\n *     `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n *     the `@wildo-ai/presets-components-models` ROOT barrel (only the\n *     `/public-runtime` subpath of that package is allowed), `inversify`,\n *     `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n *     `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n *   - DO NOT import from this package's ROOT barrel (`../index`) — that\n *     barrel runs `initZodDecorators()` and pulls the full schema tree.\n *   - Allowed imports: `zod` (peer dep, browser-safe), files inside\n *     `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n *     plan, and the\n *     `@wildo-ai/presets-components-models/public-runtime` subpath.\n *\n * @wildo-bundle-budget\n *   The output of this barrel + transitive imports MUST stay free of:\n *   `initZodDecorators()` invocation, `reflect-metadata`, the full\n *   `authentication.shared.dto.schemas.ts` web of types\n *   (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n *   `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n *   snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n *   after importing this module and asserts the prototype is unchanged\n *   (proof that `initZodDecorators` did NOT run).\n *\n * @wildo-dry-contract\n *   Every atom exposed here lives in EXACTLY one source file. The original\n *   home (e.g. `authentication.shared.dto.schemas.ts`,\n *   `localization/language.shared.schemas.ts`) re-exports from the same atom\n *   so existing root-barrel consumers keep working unchanged. Adding a new\n *   atom: split it out of its current heavy file FIRST (matching K-2\n *   protocol), add a re-export at the original home, then add the import\n *   here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n */\n\nexport {\n    CrossFrontendHandoffErrorCode,\n    CrossFrontendHandoffRequestSchema,\n    CrossFrontendHandoffResponseSchema,\n    TokenExchangeRequestSchema,\n    TokenExchangeResponseSchema,\n    type CrossFrontendHandoffRequest,\n    type CrossFrontendHandoffResponse,\n    type TokenExchangeRequest,\n    type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/**\n * The single same-origin redirect predicate.\n *\n * On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n */\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/**\n * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) is import-free, so it adds\n * nothing to the decorator-free bundle budget.\n */\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\n/**\n * A caught value as one readable line, for a bundle-isolated package (`saas-website`). The root's\n * `describeCaughtError` also recognises the engine's own error type and so imports the error schemas;\n * this atom imports nothing, and `describeCaughtError` delegates to it for every other value — one\n * rendering, two doors (#1518's \"[object Object]\" fix, reachable from the browser-safe seam).\n */\nexport { describeThrownValue } from '../errors/thrown-value-description.shared.utils';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/**\n * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n */\nexport {\n    ALL_ZOD_ISSUES,\n    DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n    ZOD_ROOT_ISSUE_PATH_LABEL,\n    formatZodIssue,\n    formatZodIssues,\n    summarizeZodIssues,\n    type FormattableZodIssue,\n    type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n    AvailableLanguage,\n    TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n */\nexport {\n    buildProviderDisplayNameLabelKey,\n    defineProviderMetadata,\n    ENGINE_PROVIDER_ORIGIN,\n    ProviderCatalogueProvenanceSchema,\n    ProviderCatalogueSource,\n    ProviderIdentitySchema,\n    ProviderMetadataSchema,\n    ProviderOriginKind,\n    ProviderOriginSchema,\n    ProviderTier,\n    type DefineProviderMetadataInput,\n    type ProviderCatalogueProvenance,\n    type ProviderIdentity,\n    type ProviderMetadata,\n    type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/**\n * A provider's compliance primitives, reachable from the FRONTEND facets.\n *\n * `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n *\n * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under.\n */\nexport {\n    ProviderDeploymentModel,\n    ProviderComplianceProfileSchema,\n    type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/**\n * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in\n * the browser bundle and stored by the application. Carved into an import-free atom\n * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that\n * mirrored the string literals would be a second copy that drifts the day a purpose is added.\n */\nexport {\n    ANONYMOUS_CONSENT_RECORD_METHOD,\n    ANONYMOUS_CONSENT_RECORD_PATH,\n    applicationAskedConsentPurposes,\n    CONSENT_PURPOSES,\n    ConsentPurpose,\n    hasGrantedConsentPurposes,\n    missingConsentPurposes,\n    normalizeConsentPurposes,\n    WEBSITE_VISITOR_CONSENT_STORAGE_KEY,\n} from '../compliance/privacy/consent-purposes.shared';\n\n/**\n * The tier rule (#328) is enforced by every facet's `compose*Providers`,\n * three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n */\nexport {\n    assertProviderTierCoherence,\n    engineSlotsBoundByCapabilities,\n    findProviderTierViolations,\n    type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/**\n * Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n *\n * Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n */\nexport {\n    FileStorageAccepted,\n    FrontendProviderEntrySchema,\n    FrontendProvidersBlockSchema,\n    type FrontendProviderEntry,\n    type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/**\n * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n *\n * These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n */\nexport {\n    normalizeProviderFrontendCspFootprint,\n    ProviderFrontendComponentDescriptorSchema,\n    ProviderFrontendComponentDescriptorsSchema,\n    ProviderFrontendCspDerivedOriginSchema,\n    ProviderFrontendCspFootprintSchema,\n    ProviderFrontendCspOriginBucket,\n    ProviderFrontendScriptCrossOrigin,\n    ProviderFrontendScriptDeclarationSchema,\n    ProviderFrontendSdkDescriptorSchema,\n    ProviderFrontendSelectionDelivery,\n    type ProviderFrontendComponentDescriptor,\n    type ProviderFrontendComponentDescriptors,\n    type ProviderFrontendCspDerivedOrigin,\n    type ProviderFrontendCspFootprint,\n    type ProviderFrontendCspFootprintDeclaration,\n    type ProviderFrontendScriptDeclaration,\n    type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/**\n * The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n */\nexport type {\n    ProviderFilePickerConstraints,\n    ProviderFilePickerProps,\n    ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/**\n * How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n */\nexport {\n    defineFrontendPublicConfigSchema,\n    FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n    FrontendProviderPublicConfigError,\n    FrontendProviderPublicConfigRefusal,\n    FrontendPublicConfigValueKind,\n    overlayFrontendProviderPublicConfig,\n    readDeclaredPublicConfigKeys,\n    type FrontendPublicConfigKeySpec,\n    type FrontendPublicConfigSchema,\n    type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/**\n * The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n */\nexport {\n    admissibleFrontendPublicConfigKeys,\n    FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS,\n    FrontendFilePickerPublicConfigSchema,\n    frontendCapabilityPublicConfigKeys,\n    layerProviderFilePickerConstraints,\n    partitionFrontendCapabilityPublicConfig,\n    type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/**\n * The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n */\nexport {\n    isFrontendErrorMonitoringSink,\n    type FrontendCrashReport,\n    type FrontendErrorMonitoringSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/**\n * Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n */\nexport {\n    BUILTIN_PROVIDER_CAPABILITY,\n    type BuiltinProviderCapability,\n    type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n    BUILTIN_PROVIDER_PROTOCOL,\n    type BuiltinProviderProtocol,\n    type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/**\n * Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n *\n * Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n */\nexport {\n    composeProviderRegistry,\n    ProviderCompositionConflictError,\n    type ProviderRegistryFragment,\n    type ComposedProviderRegistry,\n    type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/**\n * Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a\n * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.\n *\n * ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`\n *\n * They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of\n * 41 import sites of the meta-workflows subpath, **7 take nothing but these primitives**, and all\n * seven are `saas-specifications/src/technical-documentation/*.schemas.ts` — a browser-bound tier\n * whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven\n * regexes.\n *\n * No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`\n * and nothing else, so it is already the zero-dependency atom K-2 asks for — the\n * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its\n * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1\n * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.\n *\n * The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is\n * a separate change from making it reachable on the bundle-safe seam, and doing both at once would\n * hide one in the other.\n */\nexport {\n    MetaWorkflow_Sha256DigestSchema,\n    MetaWorkflow_NamespacedRefSchema,\n    MetaWorkflow_OpaqueRefSchema,\n    MetaWorkflow_PositiveVersionSchema,\n    MetaWorkflow_PositiveOrdinalSchema,\n    MetaWorkflow_NonNegativeRevisionSchema,\n    MetaWorkflow_LowercaseUuidV4Schema,\n    MetaWorkflow_IsoDateTimeSchema,\n    MetaWorkflow_NonNegativeFiniteNumberSchema,\n    metaWorkflowValuesAreUnique,\n    metaWorkflowValuesAreLexicallySorted,\n    compareMetaWorkflowCanonicalStrings,\n} from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';\n\n/** @wildo_source:part:end saas.public-runtime.contract */\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/public-runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AAEH,OAAO,EACH,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EAClC,0BAA0B,EAC1B,2BAA2B,GAK9B,MAAM,uEAAuE,CAAC;AAE/E;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG;;;;;;GAMG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,GAC9B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,2GAA2G;AAC3G,OAAO,EACL,oBAAoB,EACpB,uCAAuC,EACvC,mCAAmC,EACnC,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,+BAA+B,EAC/B,yBAAyB,GAI1B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAEhF;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAEtF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAE7E;;;;;GAKG;AACH,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,GAI7B,MAAM,gDAAgD,CAAC;AAExD;;;;;;GAMG;AACH,OAAO,EACH,cAAc,EACd,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,kBAAkB,GAGrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACH,iBAAiB,EACjB,aAAa,GAChB,MAAM,oDAAoD,CAAC;AAE5D;;;;;;;;;GASG;AACH,OAAO,EACH,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,GAMf,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACH,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,EACtB,+BAA+B,EAC/B,oCAAoC,GAGvC,MAAM,kEAAkE,CAAC;AAE1E;;;;;GAKG;AACH,OAAO,EACH,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,GACtC,MAAM,+CAA+C,CAAC;AAEvD;;;;;GAKG;AACH,OAAO,EACH,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,GAE7B,MAAM,uDAAuD,CAAC;AAE/D;;;;;;;GAOG;AACH,OAAO,EACH,mBAAmB,EACnB,2BAA2B,EAC3B,4BAA4B,GAG/B,MAAM,8DAA8D,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,OAAO,EACH,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,sCAAsC,EACtC,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC,EACjC,uCAAuC,EACvC,mCAAmC,EACnC,iCAAiC,GASpC,MAAM,gEAAgE,CAAC;AAexE;;;;GAIG;AACH,OAAO,EACH,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,6BAA6B,EAC7B,oDAAoD,EACpD,4CAA4C,EAC5C,sCAAsC,EACtC,mCAAmC,EACnC,mCAAmC,EACnC,4BAA4B,GAM/B,MAAM,8DAA8D,CAAC;AAEtE;;;;GAIG;AACH,OAAO,EACH,kCAAkC,EAClC,yCAAyC,EACzC,oCAAoC,EACpC,kCAAkC,EAClC,kCAAkC,EAClC,uCAAuC,GAE1C,MAAM,wEAAwE,CAAC;AAEhF;;;;;;GAMG;AACH,OAAO,EACH,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GAMxB,MAAM,gEAAgE,CAAC;AAExE;;;;;;GAMG;AACH,OAAO,EACH,2BAA2B,GAG9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACH,yBAAyB,GAG5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,OAAO,EACH,uBAAuB,EACvB,gCAAgC,GAInC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACH,+BAA+B,EAC/B,gCAAgC,EAChC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,kCAAkC,EAClC,8BAA8B,EAC9B,0CAA0C,EAC1C,2BAA2B,EAC3B,oCAAoC,EACpC,mCAAmC,GACtC,MAAM,qEAAqE,CAAC;AAE7E,0DAA0D","sourcesContent":["/**\n * @wildo_source:part:start saas.public-runtime.contract facet:layer:shared facet:family:bundle-boundary\n *\n * @wildo-package-subpath @wildo-ai/saas-models/public-runtime\n *\n * Browser-safe, decorator-framework-free atom subset of\n * `@wildo-ai/saas-models`.\n *\n * Why this subpath exists:\n *   The package's root barrel (`./index.ts`) calls `initZodDecorators()` at\n *   module load (line 3) and re-exports the entire decorator-framework-bound\n *   schema graph (~150 schemas, transitively pulls\n *   `@wildo-ai/external-connectors-models` + `@wildo-ai/zod-decorators` +\n *   `reflect-metadata`). Browser bundles that need only a handful of stable\n *   atoms (cross-frontend handoff DTOs, canonical HTTP header keys, locale\n *   enums) should NOT pay that cost.\n *\n *   This subpath exposes that minimal stable surface, sourced from\n *   side-effect-free atom files (saas-models-public-runtime.md K-1 / K-2 /\n *   K-4):\n *\n *     - Cross-Frontend Handoff + Token Exchange DTO atoms\n *       (`../security/authentications/cross-frontend-handoff.shared.dto.schemas`):\n *       `CrossFrontendHandoffErrorCode`, `CrossFrontendHandoffRequestSchema`,\n *       `CrossFrontendHandoffResponseSchema`, `TokenExchangeRequestSchema`,\n *       `TokenExchangeResponseSchema`,\n *       `CrossFrontendHandoffRequest`, `CrossFrontendHandoffResponse`,\n *       `TokenExchangeRequest`, `TokenExchangeResponse`. The token-exchange\n *       schemas were added\n *       in cross-app-jwt-propagation.md Step 5 — every receiver of an\n *       AUTH_CODE_EXCHANGE token (SaaS app, docs site) is by construction\n *       a client-bundle target, so the response shape MUST live here too\n *       (not just in the heavy backend schemas barrel).\n *     - Frontend-kind enum\n *       (`../config/app-frontend-type.shared.schemas`): `AppFrontendType`\n *       — the SAAS_APP / STATIC_WEBSITE / TECH_DOC runtime taxonomy.\n *       Consumed by website discovery, scaffolding, CSP config, and\n *       companion services that need to introspect a service's runtime\n *       kind without booting the full schema graph. The atom file's\n *       file-level JSDoc is the canonical home for the kind-by-kind\n *       rationale AND the locked \"no native variants\" design decision\n *       — read that file before authoring any AppFrontendType-driven\n *       conditional.\n *     - Canonical HTTP header keys (`../requests/header-keys.shared`):\n *       `WildoHeaderKeys` (already a zero-dep `as const` atom — re-exported\n *       whole; per K-2 splitting it would itself violate DRY).\n *     - Locale enums (re-exported transparently from\n *       `@wildo-ai/presets-components-models/public-runtime`):\n *       `AvailableLanguage`, `TextDirection`. Consumers see ONE import path\n *       (`@wildo-ai/saas-models/public-runtime`) — the\n *       `presets-components-models/public-runtime` subpath is an internal\n *       seam (saas-models-public-runtime.md K-6).\n *\n * @wildo-boundary  (saas-models-public-runtime.md K-3)\n *   - This file and every file it transitively imports MUST NOT import from:\n *     `@wildo-ai/zod-decorators`, `@wildo-ai/external-connectors-models`,\n *     the `@wildo-ai/presets-components-models` ROOT barrel (only the\n *     `/public-runtime` subpath of that package is allowed), `inversify`,\n *     `reflect-metadata`, `mongoose`, `axios`, `express`, `socket.io`,\n *     `pino`, `helmet`, `argon2`, `bcrypt`, `jsonwebtoken`.\n *   - DO NOT import from this package's ROOT barrel (`../index`) — that\n *     barrel runs `initZodDecorators()` and pulls the full schema tree.\n *   - Allowed imports: `zod` (peer dep, browser-safe), files inside\n *     `./public-runtime/`, the atom files extracted by Steps 1 + 2 of the\n *     plan, and the\n *     `@wildo-ai/presets-components-models/public-runtime` subpath.\n *\n * @wildo-bundle-budget\n *   The output of this barrel + transitive imports MUST stay free of:\n *   `initZodDecorators()` invocation, `reflect-metadata`, the full\n *   `authentication.shared.dto.schemas.ts` web of types\n *   (`UserContextSchema`, `SessionType`, `AuthMethod`, `AuthFactorLevel`,\n *   `AuthSessionPurpose`, `AuthUtils`). The Step 5 vitest boundary test\n *   snapshots `Object.getOwnPropertyNames(z.ZodType.prototype)` before and\n *   after importing this module and asserts the prototype is unchanged\n *   (proof that `initZodDecorators` did NOT run).\n *\n * @wildo-dry-contract\n *   Every atom exposed here lives in EXACTLY one source file. The original\n *   home (e.g. `authentication.shared.dto.schemas.ts`,\n *   `localization/language.shared.schemas.ts`) re-exports from the same atom\n *   so existing root-barrel consumers keep working unchanged. Adding a new\n *   atom: split it out of its current heavy file FIRST (matching K-2\n *   protocol), add a re-export at the original home, then add the import\n *   here. NEVER duplicate a declaration into a `_public-runtime/` folder.\n */\n\nexport {\n    CrossFrontendHandoffErrorCode,\n    CrossFrontendHandoffRequestSchema,\n    CrossFrontendHandoffResponseSchema,\n    TokenExchangeRequestSchema,\n    TokenExchangeResponseSchema,\n    type CrossFrontendHandoffRequest,\n    type CrossFrontendHandoffResponse,\n    type TokenExchangeRequest,\n    type TokenExchangeResponse,\n} from '../security/authentications/cross-frontend-handoff.shared.dto.schemas';\n\n/**\n * The single same-origin redirect predicate.\n *\n * On the bundle-safe seam because the two BROWSER receivers of a post-authentication redirect — the\n * SaaS app (`saas-frontend-lib`) and the docs site (`saas-technical-doc`) — are client-bundle targets\n * by construction, while the ISSUER-side schema in this package validates the same value on the\n * server. All three must reach one predicate or they drift; they already had, in the same direction,\n * across four hand-written copies. The source atom is import-free, so it adds nothing to the budget.\n */\nexport { isSameOriginRedirectPath } from '../security/authentications/same-origin-redirect-path.shared';\n\n/**\n * The caught-value describers, for code that must stay light.\n *\n * The backend provider loader is held to a measured module graph and imports only light doors; the\n * package root would take its import-time graph from 136 modules to 624 for one function (#1591). The\n * source atom imports nothing at runtime, so it adds nothing to the budget.\n */\nexport {\n    describeCaughtError,\n    describeCaughtErrorWithKind,\n} from '../errors/caught-error-description.shared.utils';\n\nexport { WildoHeaderKeys } from '../requests/header-keys.shared';\n\n/** The public submission challenge (#1735): answers a browser form encodes and solves. Imports nothing. */\nexport {\n  ProofOfWorkAlgorithm,\n  SUBMISSION_CHALLENGE_PROOF_OF_WORK_PATH,\n  SUBMISSION_CHALLENGE_ACTION_PATTERN,\n  SUBMISSION_CHALLENGE_RESPONSE_MAX_LENGTH,\n  SubmissionChallengeAction,\n  SubmissionChallengeRefusalCode,\n  SubmissionChallengeResponseKind,\n  encodeSubmissionChallengeResponse,\n  hashProofOfWorkCandidate,\n  isSubmissionChallengeActionName,\n  solveProofOfWorkChallenge,\n  type ProofOfWorkChallenge,\n  type ResourceOperationSubmissionChallenge,\n  type SubmissionChallengeResponse,\n} from '../security/submission-challenge/submission-challenge.shared';\n\n/**\n * Main API mount prefix (`/api/v1`) — the SINGLE SOURCE OF TRUTH for the path\n * under which the entire main controllers registry is served. Exposed on the\n * bundle-safe seam because browser-bound runtimes that call the SaaS backend\n * (e.g. the docs auth client's token-exchange / cross-frontend-handoff\n * requests) must prefix their request URLs with the SAME value the backend\n * mounts and the SaaS-app HTTP client uses. Deriving every consumer from one\n * symbol is what prevents the prefix-drift class — a mismatched prefix\n * silently breaks auth (see the refresh-cookie `Path` regression that\n * motivated the shared symbol). The source atom\n * (`../requests/manual-controllers-routes-urls`) imports only the import-free\n * submission-challenge atom (itself on this seam), so it adds nothing to the\n * decorator-free bundle budget.\n */\nexport { MAIN_API_BASE_PATH } from '../requests/manual-controllers-routes-urls';\n\n/**\n * A caught value as one readable line, for a bundle-isolated package (`saas-website`) — the rendering\n * `describeCaughtError` (above) delegates to for every value that is not the engine's own error. Both\n * atoms are import-free; one rendering, two doors (#1518's \"[object Object]\" fix, #1591).\n */\nexport { describeThrownValue } from '../errors/thrown-value-description.shared.utils';\n\nexport { AppFrontendType } from '../config/app-frontend-type.shared.schemas';\n\n/**\n * The public pricing catalogue (#1835): the plain, JSON-safe shape a website pricing island reads, with\n * the two pricing-surface vocabularies it needs. The source atom is import-free; the derivation from the\n * billing catalogue (`derivePublicPricingCatalog`) stays on the root barrel, where `ProductType` and\n * `BillingInterval` live.\n */\nexport {\n    ProductPriceDisclosure,\n    ProductAvailability,\n    PublicPricingRecurrenceUnit,\n    PublicPricingAmountBasis,\n    publicPricingAmountDecimal,\n    type PublicPricingPrice,\n    type PublicPricingPlan,\n    type PublicPricingCatalog,\n} from '../billing/public-pricing-catalog.shared.atoms';\n\n/**\n * Canonical Zod-issue rendering. Browser-bound runtimes validate untrusted\n * input too — MDX frontmatter at build time, API responses at runtime — and\n * each one previously re-derived its own `path: message` formatter, drifting on\n * root labels and truncation. The source atom is import-free (the issue shape is\n * structural, not a `zod` type import), so it adds nothing to the bundle budget.\n */\nexport {\n    ALL_ZOD_ISSUES,\n    DEFAULT_ZOD_ISSUE_RENDER_LIMIT,\n    ZOD_ROOT_ISSUE_PATH_LABEL,\n    formatZodIssue,\n    formatZodIssues,\n    summarizeZodIssues,\n    type FormattableZodIssue,\n    type ZodIssueFormattingOptions,\n} from '../errors/zod-issue-formatting.shared.utils';\n\nexport {\n    AvailableLanguage,\n    TextDirection,\n} from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Provider metadata atom (provider-registration-refactor §Phase 0.1 +\n * §Phase 1.g). The schema is built with plain Zod (no decorator\n * framework) and the type is `z.infer<…>`. Re-exported here so the\n * browser-bound `@wildo-ai/external-connectors-public/app`,\n * `@wildo-ai/external-connectors-public/techdoc`, and\n * `@wildo-ai/external-connectors-public/website` can consume it WITHOUT\n * pulling the saas-models\n * root barrel (which would boot `initZodDecorators()`).\n */\nexport {\n    buildProviderDisplayNameLabelKey,\n    defineProviderMetadata,\n    ENGINE_PROVIDER_ORIGIN,\n    ProviderCatalogueProvenanceSchema,\n    ProviderCatalogueSource,\n    ProviderIdentitySchema,\n    ProviderMetadataSchema,\n    ProviderOriginKind,\n    ProviderOriginSchema,\n    ProviderTier,\n    type DefineProviderMetadataInput,\n    type ProviderCatalogueProvenance,\n    type ProviderIdentity,\n    type ProviderMetadata,\n    type ProviderOrigin,\n} from '../external-providers/provider-metadata.shared.schemas';\n\n/**\n * A provider's compliance primitives, reachable from the FRONTEND facets.\n *\n * `ProviderComplianceProfile` was reachable only from the backend provider contract until\n * 2026-09-07 (#345), which left the half of the provider population that executes in the DATA\n * SUBJECT'S BROWSER unable to state a deployment model, a processing region or a legal entity —\n * exactly the recipients a processor register and a transfer statement must name.\n *\n * `ProviderDeploymentModel` is exported as a VALUE, not merely a type: a provider module writes\n * `ProviderDeploymentModel.VENDOR_HOSTED` in its own declaration, so the enum enters the frontend\n * facets' module graph. It is a closed enum over two string members with no Zod decorators and no\n * side effects, which is the same bar the tier rule below is exported under. `ProviderComplianceDetermination` and\n * `ProviderComplianceFact` (#1708) meet the same bar: a browser facet writes an UNDETERMINED profile, or cites the\n * facts its evidence establishes, with their members.\n */\nexport {\n    ProviderDeploymentModel,\n    ProviderComplianceDetermination,\n    ProviderComplianceFact,\n    ProviderComplianceProfileSchema,\n    establishedProviderComplianceProfile,\n    type EstablishedProviderComplianceProfile,\n    type ProviderComplianceProfile,\n} from '../external-providers/provider-compliance-profile.shared.schemas';\n\n/**\n * Consent purposes (#534) — the set a person grants, read by the visitor-tier `WebsiteConsentGate` in\n * the browser bundle and stored by the application. Carved into an import-free atom\n * (`consent-purposes.shared.ts`) so the website and the engine share ONE vocabulary: a website that\n * mirrored the string literals would be a second copy that drifts the day a purpose is added.\n */\nexport {\n    ANONYMOUS_CONSENT_RECORD_METHOD,\n    ANONYMOUS_CONSENT_RECORD_PATH,\n    applicationAskedConsentPurposes,\n    CONSENT_PURPOSES,\n    ConsentPurpose,\n    hasGrantedConsentPurposes,\n    missingConsentPurposes,\n    normalizeConsentPurposes,\n    WEBSITE_VISITOR_CONSENT_STORAGE_KEY,\n} from '../compliance/privacy/consent-purposes.shared';\n\n/**\n * The tier rule (#328) is enforced by every facet's `compose*Providers`,\n * three of which are browser-bound and reach this package only here. It\n * depends on the closed capability→slot map and the metadata enums only —\n * no Zod decorators, no side effects.\n */\nexport {\n    assertProviderTierCoherence,\n    engineSlotsBoundByCapabilities,\n    findProviderTierViolations,\n    type ProviderTierRuleSubject,\n} from '../external-providers/provider-tier-rule.shared.utils';\n\n/**\n * Frontend-provider bootstrap atoms shared by browser-bound runtimes.\n *\n * Safe for `/public-runtime` because the entry/block schemas depend only on\n * plain Zod plus `ProviderMetadataSchema`; the heavier\n * `AppConfiguration_FrontendBootstrapResponse` contract stays on the root-barrel\n * side.\n */\nexport {\n    FileStorageAccepted,\n    FrontendProviderEntrySchema,\n    FrontendProvidersBlockSchema,\n    type FrontendProviderEntry,\n    type FrontendProvidersBlock,\n} from '../external-providers/frontend-provider-entry.shared.schemas';\n\n/**\n * Frontend-surface atoms a provider declares (#332, slice S4a): its CSP\n * footprint, the vendor SDK package it loads, and any third-party `<script>` it\n * asks the surface to add.\n *\n * These are the DATA half of the frontend provider surface and they ride inside\n * `FrontendProviderEntry`, so they must reach the same browser-bound consumers\n * through the same door. Plain Zod, no decorators, no side effects. The\n * executable half lives on the facet module types in\n * `@wildo-ai/external-connectors-public` and never crosses this seam.\n */\nexport {\n    normalizeProviderFrontendCspFootprint,\n    PROVIDER_FRONTEND_CSP_ORIGIN_BUCKETS,\n    ProviderAddressLookupDeclarationSchema,\n    ProviderAddressLookupPlaceIdRetention,\n    ProviderFrontendComponentDescriptorSchema,\n    ProviderFrontendComponentDescriptorsSchema,\n    ProviderFrontendCspDerivedOriginSchema,\n    ProviderFrontendCspFootprintSchema,\n    ProviderFrontendCspOriginBucket,\n    ProviderFrontendScriptCrossOrigin,\n    ProviderFrontendScriptDeclarationSchema,\n    ProviderFrontendSdkDescriptorSchema,\n    ProviderFrontendSelectionDelivery,\n    type ProviderAddressLookupDeclaration,\n    type ProviderFrontendComponentDescriptor,\n    type ProviderFrontendComponentDescriptors,\n    type ProviderFrontendCspDerivedOrigin,\n    type ProviderFrontendCspFootprint,\n    type ProviderFrontendCspFootprintDeclaration,\n    type ProviderFrontendScriptDeclaration,\n    type ProviderFrontendSdkDescriptor,\n} from '../external-providers/provider-frontend-surface.shared.schemas';\n\n/**\n * The contract between a provider's frontend COMPONENT and the surface that\n * mounts it (#394). Types only — no schema, no runtime value — and it lives in\n * this package rather than beside the module types it serves because a component\n * ships in its OWN package and that package would otherwise close a dependency\n * cycle through emitted declarations. Its own file says why in full.\n */\nexport type {\n    ProviderFilePickerConstraints,\n    ProviderFilePickerProps,\n    ProviderFileSelection,\n} from '../external-providers/provider-frontend-component-contract.shared.types';\n\n/**\n * How an application supplies a frontend provider's public keys, and the\n * dependency-free schema helper the engine's own provider modules declare their\n * keys with (#394 P3). Browser-safe: pure functions and one enum, no Zod.\n */\nexport {\n    defineFrontendPublicConfigSchema,\n    FRONTEND_PROVIDER_PUBLIC_CONFIG_KEY,\n    FrontendProviderPublicConfigError,\n    FrontendProviderPublicConfigRefusal,\n    FrontendPublicConfigValueKind,\n    FRONTEND_PUBLIC_CONFIG_SECRET_CONTAINMENT_MIN_LENGTH,\n    assertFrontendProvidersServeOnlyDeclaredKeys,\n    assertNoSecretValueInFrontendProviders,\n    findSecretValuesInFrontendProviders,\n    overlayFrontendProviderPublicConfig,\n    readDeclaredPublicConfigKeys,\n    type FrontendPublicConfigKeySpec,\n    type FrontendPublicConfigSchema,\n    type FrontendPublicConfigSecretMatch,\n    type FrontendPublicConfigSecretValue,\n    type OverlayFrontendProviderPublicConfigInput,\n} from '../external-providers/frontend-provider-public-config.shared';\n\n/**\n * The public-config shape a built-in frontend capability expects (#380). Named\n * rather than conventional: the keys were previously read by hand at each use\n * site, where a renamed one produced `undefined` and a silently wrong surface.\n */\nexport {\n    admissibleFrontendPublicConfigKeys,\n    FRONTEND_CAPABILITY_PUBLIC_CONFIG_SCHEMAS,\n    FrontendFilePickerPublicConfigSchema,\n    frontendCapabilityPublicConfigKeys,\n    layerProviderFilePickerConstraints,\n    partitionFrontendCapabilityPublicConfig,\n    type FrontendFilePickerPublicConfig,\n} from '../external-providers/frontend-capability-public-config.shared.schemas';\n\n/**\n * The RUNTIME half of the same idea (#437): what a built-in frontend capability\n * calls on the provider that fills it. `FRONTEND_ERROR_MONITORING` is the first —\n * the framework reports a caught crash without knowing which vendor is listening,\n * so the capability declares the method and the provider adapts to it. Pure types\n * plus one guard; no Zod, no decorators.\n */\nexport {\n    isFrontendErrorMonitoringSink,\n    isFrontendProductAnalyticsSink,\n    isFrontendCaptchaSink,\n    type FrontendCaptchaSink,\n    type FrontendCrashReport,\n    type FrontendErrorMonitoringSink,\n    type FrontendProductAnalyticsEvent,\n    type FrontendProductAnalyticsSink,\n} from '../external-providers/frontend-capability-runtime.shared.types';\n\n/**\n * Provider capability atoms (provider-registration-refactor §Phase 0.2\n * + §Phase 1.g). Closed built-in enum + open declaration-merging seam\n * + computed union type. Pure types and `as const` — no Zod, no\n * decorators, no side effects. Required by every facet's provider\n * module shape, so it MUST live on the bundle-safe seam.\n */\nexport {\n    BUILTIN_PROVIDER_CAPABILITY,\n    type BuiltinProviderCapability,\n    type ProviderCapability,\n} from '../external-providers/provider-capability.shared.schemas';\nexport {\n    BUILTIN_PROVIDER_PROTOCOL,\n    type BuiltinProviderProtocol,\n    type ProviderProtocol,\n} from '../external-providers/provider-protocol.shared.schemas';\n\n/**\n * Generic registry composition core (provider-registration-refactor\n * §Phase 1.e + §Phase 1.g). Used by every facet's `compose<Facet>Providers`\n * wrapper (backend, frontend-app, frontend-techdoc, frontend-website).\n * The browser-bound facets need this on the bundle-safe seam; the backend\n * facet inherits via the same import path for DRY.\n *\n * Pure runtime — only TYPE-imports `ProviderCapability` from the atom\n * above, so the closure stays decorator-free.\n */\nexport {\n    composeProviderRegistry,\n    ProviderCompositionConflictError,\n    type ProviderRegistryFragment,\n    type ComposedProviderRegistry,\n    type ProviderCompositionConflict,\n} from '../external-providers/compose-provider-registry.shared';\n\n/**\n * Portable lexical primitives — a sha256-digest grammar, a namespaced/opaque ref grammar, a\n * positive version, a lowercase UUIDv4, an ISO datetime, and two array-canonicality predicates.\n *\n * ## Why they are HERE and not only behind `@wildo-ai/saas-models/meta-workflows`\n *\n * They are shared by two domains, and only one of them is meta-workflows. Measured 2026-09-19: of\n * 41 import sites of the meta-workflows subpath, **7 take nothing but these primitives**, and all\n * seven are `saas-specifications/src/technical-documentation/*.schemas.ts` — a browser-bound tier\n * whose bundle-isolation allow-list had to admit an entire authoring domain to obtain seven\n * regexes.\n *\n * No K-2 extraction was needed: `portable-primitives.meta-workflows.shared.schemas` imports `zod`\n * and nothing else, so it is already the zero-dependency atom K-2 asks for — the\n * `WildoHeaderKeys` case, re-exported whole. The meta-workflows door keeps publishing it for its\n * 34 mixed consumers; that is two SUBPATHS onto one atom, which `check:package-entrypoints` rule 1\n * does not refuse (it is root-vs-subpath), and it is what a curated bundle-safe subset IS.\n *\n * The `MetaWorkflow_` prefix is kept deliberately: renaming a symbol that 34 other sites import is\n * a separate change from making it reachable on the bundle-safe seam, and doing both at once would\n * hide one in the other.\n */\nexport {\n    MetaWorkflow_Sha256DigestSchema,\n    MetaWorkflow_NamespacedRefSchema,\n    MetaWorkflow_OpaqueRefSchema,\n    MetaWorkflow_PositiveVersionSchema,\n    MetaWorkflow_PositiveOrdinalSchema,\n    MetaWorkflow_NonNegativeRevisionSchema,\n    MetaWorkflow_LowercaseUuidV4Schema,\n    MetaWorkflow_IsoDateTimeSchema,\n    MetaWorkflow_NonNegativeFiniteNumberSchema,\n    metaWorkflowValuesAreUnique,\n    metaWorkflowValuesAreLexicallySorted,\n    compareMetaWorkflowCanonicalStrings,\n} from '../meta-workflows/portable-primitives.meta-workflows.shared.schemas';\n\n/** @wildo_source:part:end saas.public-runtime.contract */\n"]}

package/dist/esm/queue/jobs.shared.schemas.d.ts

@@ -438,6 +438,18 @@ export declare const JobPayloadSchema: z.ZodObject<{
     rpcReplyCorrelationId: z.ZodOptional<z.ZodUUID>;
     replyTo: z.ZodOptional<z.ZodString>;
     originCorrelationId: z.ZodOptional<z.ZodString>;
+    attribution: z.ZodOptional<z.ZodObject<{
+        organizationId: z.ZodOptional<z.ZodString>;
+        caseRef: z.ZodOptional<z.ZodObject<{
+            resourceType: z.ZodString;
+            resourceId: z.ZodString;
+        }, z.core.$strict>>;
+        executionRef: z.ZodOptional<z.ZodObject<{
+            kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("..").ExecutionRefKind>>;
+            id: z.ZodString;
+        }, z.core.$strict>>;
+        taskRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
     domainCategory: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type JobPayload = z.infer<typeof JobPayloadSchema>;
@@ -461,8 +473,15 @@ export declare const JobPayloadStorageSchema: z.ZodObject<{
     applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     payloadJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
     scheduledEvidence: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
-        operationPathKey: z.ZodOptional<z.ZodString>;
+        source: z.ZodEnum<typeof ScheduledEvidenceSource>;
+        policy: z.ZodObject<{
+            policyRef: z.ZodString;
+            retainForMs: z.ZodNumber;
+            resultFields: z.ZodArray<z.ZodString>;
+            deferredField: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
         applicationId: z.ZodString;
+        operationPathKey: z.ZodOptional<z.ZodString>;
         jobId: z.ZodUUID;
         queueName: z.ZodString;
         jobType: z.ZodEnum<typeof JobType>;
@@ -474,14 +493,7 @@ export declare const JobPayloadStorageSchema: z.ZodObject<{
         completedAt: z.ZodDate;
         expiresAt: z.ZodDate;
         invocationStatus: z.ZodEnum<typeof JobExecutionStatus>;
-        source: z.ZodEnum<typeof ScheduledEvidenceSource>;
         attemptCount: z.ZodNumber;
-        policy: z.ZodObject<{
-            policyRef: z.ZodString;
-            retainForMs: z.ZodNumber;
-            resultFields: z.ZodArray<z.ZodString>;
-            deferredField: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
         resultStatus: z.ZodEnum<typeof ScheduledEvidenceResultStatus>;
         deferred: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>>;
@@ -611,12 +623,20 @@ export declare const JobResultSchema: z.ZodObject<{
             consumableTokenId: z.ZodOptional<z.ZodString>;
             webhookProviderId: z.ZodOptional<z.ZodString>;
             anonymousUserId: z.ZodOptional<z.ZodString>;
+            inboundDeliveryId: z.ZodOptional<z.ZodString>;
+            inboundHandlerRef: z.ZodOptional<z.ZodString>;
+            inboundScopeUserId: z.ZodOptional<z.ZodString>;
+            inboundSender: z.ZodOptional<z.ZodObject<{
+                channel: z.ZodEnum<typeof import("..").InboundChannelKind>;
+                assurance: z.ZodEnum<typeof import("..").InboundSenderAssurance>;
+            }, z.core.$strict>>;
         }, z.core.$strip>>>;
         executionType: z.ZodOptional<z.ZodEnum<typeof import("..").ExecutionContext_ExecutionType>>;
         userGuidance: z.ZodOptional<z.ZodObject<{
             guidanceKey: z.ZodOptional<z.ZodString>;
             explanation: z.ZodOptional<z.ZodString>;
             resolution: z.ZodOptional<z.ZodString>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
             completedSteps: z.ZodOptional<z.ZodArray<z.ZodString>>;
             nextAction: z.ZodOptional<z.ZodObject<{
                 label: z.ZodString;
@@ -785,12 +805,20 @@ export declare const JobExecutionSchema: z.ZodObject<{
             consumableTokenId: z.ZodOptional<z.ZodString>;
             webhookProviderId: z.ZodOptional<z.ZodString>;
             anonymousUserId: z.ZodOptional<z.ZodString>;
+            inboundDeliveryId: z.ZodOptional<z.ZodString>;
+            inboundHandlerRef: z.ZodOptional<z.ZodString>;
+            inboundScopeUserId: z.ZodOptional<z.ZodString>;
+            inboundSender: z.ZodOptional<z.ZodObject<{
+                channel: z.ZodEnum<typeof import("..").InboundChannelKind>;
+                assurance: z.ZodEnum<typeof import("..").InboundSenderAssurance>;
+            }, z.core.$strict>>;
         }, z.core.$strip>>>;
         executionType: z.ZodOptional<z.ZodEnum<typeof import("..").ExecutionContext_ExecutionType>>;
         userGuidance: z.ZodOptional<z.ZodObject<{
             guidanceKey: z.ZodOptional<z.ZodString>;
             explanation: z.ZodOptional<z.ZodString>;
             resolution: z.ZodOptional<z.ZodString>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
             completedSteps: z.ZodOptional<z.ZodArray<z.ZodString>>;
             nextAction: z.ZodOptional<z.ZodObject<{
                 label: z.ZodString;

package/dist/esm/queue/jobs.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jobs.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAExE,OAAO,EAA4B,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AASpG;;GAEG;AACH,oBAAY,OAAO;IACjB,uEAAuE;IACvE,kBAAkB,uBAAuB;IACzC,uDAAuD;IACvD,YAAY,iBAAiB;IAC7B,uDAAuD;IACvD,cAAc,mBAAmB;IACjC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,oBAAY,SAAS;IACnB,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,gBAAgB;IAC1B,4JAA4J;IAC5J,QAAQ,aAAa;IACrB;;;;OAIG;IACH,MAAM,WAAW;CAClB;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,6BAA6B;IAC7B,GAAG,QAAQ;IACX,4CAA4C;IAC5C,OAAO,YAAY;IACnB,sCAAsC;IACtC,QAAQ,aAAa;CACtB;AAED;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED;;;GAGG;AACH,oBAAY,WAAW;IACrB,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;CACtB;AAMD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAa,CAAC;AAiBvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,6BAA6B;;;;iBAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oHAAoH;AAEpH,oFAAoF;AACpF,eAAO,MAAM,sCAAsC,QAAgB,CAAC;AACpE,eAAO,MAAM,0CAA0C,QAAY,CAAC;AAEpE,wFAAwF;AACxF,oBAAY,qBAAqB;IAC/B,iFAAiF;IACjF,MAAM,WAAW;IACjB,iFAAiF;IACjF,UAAU,eAAe;IACzB,kFAAkF;IAClF,SAAS,cAAc;CACxB;AAED,kFAAkF;AAClF,oBAAY,uBAAuB;IACjC,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAED,oBAAY,8BAA8B;IACxC,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;CAC9B;AAED,wFAAwF;AACxF,oBAAY,sBAAsB;IAChC,iBAAiB,sBAAsB;IACvC,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAED,uFAAuF;AACvF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;iBAgBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,wBAAgB,gCAAgC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAEnH;AAED,0FAA0F;AAC1F,eAAO,MAAM,6BAA6B;;;;;iBAaxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oBAAY,uBAAuB;IACjC,SAAS,cAAc;IACvB,cAAc,mBAAmB;IACjC,qBAAqB,0BAA0B;IAC/C,WAAW,gBAAgB;CAC5B;AACD,oBAAY,6BAA6B;IACvC,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAmBD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,8BAA8B,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAElE,2GAA2G;AAC3G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC;;;;iBAO3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAGtG;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4H3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;GAGG;AACH,eAAO,MAAM,+BAA+B,QAAe,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4ClC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,oBAAY,4CAA4C;IACtD,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2CAA2C;;;iBAGtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAEhH;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,qCAAqC,GAAG,SAAS,CAG3G;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,QAAoB,CAAC;AAE3D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8F7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"jobs.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/queue/jobs.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,8CAA8C,CAAC;AAExE,OAAO,EAA4B,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AASpG;;GAEG;AACH,oBAAY,OAAO;IACjB,uEAAuE;IACvE,kBAAkB,uBAAuB;IACzC,uDAAuD;IACvD,YAAY,iBAAiB;IAC7B,uDAAuD;IACvD,cAAc,mBAAmB;IACjC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,oBAAY,SAAS;IACnB,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;;;;;;;;;;GAWG;AACH,oBAAY,gBAAgB;IAC1B,4JAA4J;IAC5J,QAAQ,aAAa;IACrB;;;;OAIG;IACH,MAAM,WAAW;CAClB;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,6BAA6B;IAC7B,GAAG,QAAQ;IACX,4CAA4C;IAC5C,OAAO,YAAY;IACnB,sCAAsC;IACtC,QAAQ,aAAa;CACtB;AAED;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,iCAAiC;IACjC,OAAO,YAAY;IACnB,yBAAyB;IACzB,MAAM,WAAW;IACjB,gCAAgC;IAChC,UAAU,eAAe;IACzB,4BAA4B;IAC5B,SAAS,cAAc;IACvB,gCAAgC;IAChC,MAAM,WAAW;IACjB,4BAA4B;IAC5B,QAAQ,aAAa;IACrB,iCAAiC;IACjC,WAAW,gBAAgB;IAC3B,yBAAyB;IACzB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,sBAAsB;IAChC,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED;;;GAGG;AACH,oBAAY,WAAW;IACrB,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;CACtB;AAMD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAa,CAAC;AAiBvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,6BAA6B;;;;iBAOxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oHAAoH;AAEpH,oFAAoF;AACpF,eAAO,MAAM,sCAAsC,QAAgB,CAAC;AACpE,eAAO,MAAM,0CAA0C,QAAY,CAAC;AAEpE,wFAAwF;AACxF,oBAAY,qBAAqB;IAC/B,iFAAiF;IACjF,MAAM,WAAW;IACjB,iFAAiF;IACjF,UAAU,eAAe;IACzB,kFAAkF;IAClF,SAAS,cAAc;CACxB;AAED,kFAAkF;AAClF,oBAAY,uBAAuB;IACjC,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAED,oBAAY,8BAA8B;IACxC,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;CAC9B;AAED,wFAAwF;AACxF,oBAAY,sBAAsB;IAChC,iBAAiB,sBAAsB;IACvC,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAED,uFAAuF;AACvF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;iBAgBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,wBAAgB,gCAAgC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAEnH;AAED,0FAA0F;AAC1F,eAAO,MAAM,6BAA6B;;;;;iBAaxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oBAAY,uBAAuB;IACjC,SAAS,cAAc;IACvB,cAAc,mBAAmB;IACjC,qBAAqB,0BAA0B;IAC/C,WAAW,gBAAgB;CAC5B;AACD,oBAAY,6BAA6B;IACvC,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAmBD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,8BAA8B,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAElE,2GAA2G;AAC3G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC;;;;iBAO3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAGtG;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;GAGG;AACH,eAAO,MAAM,+BAA+B,QAAe,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4ClC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,oBAAY,4CAA4C;IACtD,MAAM,WAAW;IACjB,UAAU,eAAe;CAC1B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2CAA2C;;;iBAGtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAEhH;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,qCAAqC,GAAG,SAAS,CAG3G;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,QAAoB,CAAC;AAE3D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8F7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/esm/queue/jobs.shared.schemas.js

@@ -11,6 +11,7 @@
  * - Proper indexes for common query patterns
  */
 import { z } from 'zod';
+import { ModelCallAttributionInputSchema } from '../flows-actors/work-attribution.shared.schemas.js';
 import { DataMode } from '../resources/resources-config.shared.schemas.js';
 import { initZodDecorators } from '@wildo-ai/zod-decorators';
 import { WildoError_BackendSchema, RetryPolicy_BackoffType } from '../errors/errors.shared.schemas.js';
@@ -517,6 +518,17 @@ export const JobPayloadSchema = z.object({
      * originating request (e.g. some system-enqueued work), in which case the worker mints a fresh id.
      */
     originCorrelationId: z.string().optional(),
+    /**
+     * The WORK FRAME the job was enqueued inside (#1598 review F14): tenant, case, execution and task, so a
+     * model call the worker makes is attributed to the same unit of work as the request that enqueued it. The
+     * worker reopens the frame from this field in the same step that adopts `originCorrelationId`, at both
+     * consumers (the operations lane and the domain lane).
+     *
+     * ENGINE-WRITTEN, never client-supplied: the enqueue path copies it from the ambient frame, and no request
+     * DTO carries it. Re-deriving attribution in the worker from the job's own arguments was rejected, because
+     * every job type would have to know how.
+     */
+    attribution: ModelCallAttributionInputSchema.optional(),
     // === Domain Routing ===
     /** Domain category for domain-specific routing (e.g., 'email', 'agents') */
     domainCategory: z.string().optional(),