@abloatai/transaction 0.37.0 → 0.38.0

package/dist/ai-sdk/index.d.ts

@@ -1,2 +1,4 @@
-export { coordinatedTool, type CoordinationStrategy, type CoordinatedModel, type CoordinatedToolOptions, type CoordinatedWriteResult, } from './coordinatedTool.js';
+export { updateTool, type UpdateStrategy, type UpdateToolModel, type UpdateToolOptions, type UpdateToolResult, } from './updateTool.js';
+export { createTool, deleteTool, readTool, type CreateToolOptions, type CreateToolResult, type DeleteToolOptions, type DeleteToolResult, type ReadToolOptions, type ReadToolResult, type ToolModel, } from './modelTools.js';
+export type { ModelToolOptions } from './toolOptions.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/ai-sdk/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/ai-sdk/index.js

@@ -1,2 +1,3 @@
-export { coordinatedTool, } from './coordinatedTool.js';
+export { updateTool, } from './updateTool.js';
+export { createTool, deleteTool, readTool, } from './modelTools.js';
 //# sourceMappingURL=index.js.map

package/dist/ai-sdk/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAKhB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,GAKX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,UAAU,EACV,UAAU,EACV,QAAQ,GAQT,MAAM,iBAAiB,CAAC"}

package/dist/ai-sdk/modelTools.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Small AI SDK adapters for Ablo model resources.
+ *
+ * The AI SDK owns the agent loop. These helpers only expose Ablo's
+ * authoritative model operations as tools, preserving the same credential,
+ * validation, idempotency, claims, and settlement behavior as direct SDK use.
+ */
+import type { z } from 'zod';
+import type { ClaimParams, ModelCreateParams, ModelDeleteParams, ModelRetrieveParams } from '../resources/modelOperations.js';
+import type { HeldClaim } from '../types/streams.js';
+import type { ModelToolOptions } from './toolOptions.js';
+export interface ToolModel<T, CreateInput = Partial<T>, Fields = T> {
+    get(params: ModelRetrieveParams): Promise<T | undefined>;
+    create(params: ModelCreateParams<T, CreateInput>): Promise<T>;
+    delete(params: ModelDeleteParams<T, Fields>): Promise<void>;
+    claim(params: ClaimParams<Fields> & {
+        queue: false;
+    }): Promise<HeldClaim<T> | null>;
+    claim(params: ClaimParams<Fields>): Promise<HeldClaim<T>>;
+}
+export interface ReadToolOptions<TInput, T> extends ModelToolOptions<TInput, ReadToolResult<T>> {
+    readonly description: string;
+    readonly inputSchema: z.ZodType<TInput>;
+    readonly id: (input: TInput) => string;
+}
+export type ReadToolResult<T> = {
+    readonly status: 'found';
+    readonly row: T;
+} | {
+    readonly status: 'not_found';
+    readonly message: string;
+};
+export declare function readTool<TInput, T>(model: Pick<ToolModel<T>, 'get'>, options: ReadToolOptions<TInput, T>): import("ai").Tool<TInput, ReadToolResult<T>>;
+export interface CreateToolOptions<TInput, CreateInput, T> extends ModelToolOptions<TInput, CreateToolResult<T>> {
+    readonly description: string;
+    readonly inputSchema: z.ZodType<TInput>;
+    readonly data: (input: TInput) => CreateInput;
+    /**
+     * Stable ids make retries idempotent. Omit only when the model or server
+     * generates the id and duplicate creation is acceptable to the application.
+     */
+    readonly id?: (input: TInput) => string | undefined;
+}
+export interface CreateToolResult<T> {
+    readonly status: 'created';
+    readonly row: T;
+}
+export declare function createTool<TInput, T, CreateInput>(model: Pick<ToolModel<T, CreateInput>, 'create'>, options: CreateToolOptions<TInput, CreateInput, T>): import("ai").Tool<TInput, CreateToolResult<T>>;
+export interface DeleteToolOptions<TInput> extends ModelToolOptions<TInput, DeleteToolResult> {
+    readonly description: string;
+    readonly inputSchema: z.ZodType<TInput>;
+    readonly id: (input: TInput) => string;
+    /** Defaults to waiting in the server-owned FIFO claim queue. */
+    readonly strategy?: 'claim' | 'queue';
+    readonly claim?: {
+        readonly description?: string;
+    };
+}
+export type DeleteToolResult = {
+    readonly status: 'deleted';
+    readonly id: string;
+} | {
+    readonly status: 'claimed';
+    readonly message: string;
+};
+export declare function deleteTool<TInput, T, Fields = T>(model: Pick<ToolModel<T, Partial<T>, Fields>, 'claim' | 'delete'>, options: DeleteToolOptions<TInput>): import("ai").Tool<TInput, DeleteToolResult>;
+//# sourceMappingURL=modelTools.d.ts.map

package/dist/ai-sdk/modelTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelTools.d.ts","sourceRoot":"","sources":["../../src/ai-sdk/modelTools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,SAAS,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC;IAChE,GAAG,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,KAAK,CACH,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE,GAC7C,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,eAAe,CAAC,MAAM,EAAE,CAAC,CACxC,SAAQ,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACxC;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,IACxB;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;CAAE,GAC7C;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,wBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,EAChC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAChC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,gDAsBpC;AAED,MAAM,WAAW,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CACvD,SAAQ,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CACrD;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;CACjB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,EAC/C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,EAChD,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,kDAqBnD;AAED,MAAM,WAAW,iBAAiB,CAAC,MAAM,CACvC,SAAQ,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,CAAC,EAC9C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC,EACjE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,+CAwCnC"}

package/dist/ai-sdk/modelTools.js

@@ -0,0 +1,89 @@
+/**
+ * Small AI SDK adapters for Ablo model resources.
+ *
+ * The AI SDK owns the agent loop. These helpers only expose Ablo's
+ * authoritative model operations as tools, preserving the same credential,
+ * validation, idempotency, claims, and settlement behavior as direct SDK use.
+ */
+import { tool } from 'ai';
+export function readTool(model, options) {
+    return tool({
+        description: options.description,
+        title: options.title,
+        inputSchema: options.inputSchema,
+        inputExamples: options.inputExamples,
+        needsApproval: options.needsApproval,
+        strict: options.strict,
+        outputSchema: options.outputSchema,
+        toModelOutput: options.toModelOutput,
+        execute: async (input) => {
+            const id = options.id(input);
+            const row = await model.get({ id });
+            return row === undefined
+                ? {
+                    status: 'not_found',
+                    message: `No accessible row exists with id ${id}.`,
+                }
+                : { status: 'found', row };
+        },
+    });
+}
+export function createTool(model, options) {
+    return tool({
+        description: options.description,
+        title: options.title,
+        inputSchema: options.inputSchema,
+        inputExamples: options.inputExamples,
+        needsApproval: options.needsApproval,
+        strict: options.strict,
+        outputSchema: options.outputSchema,
+        toModelOutput: options.toModelOutput,
+        execute: async (input) => {
+            const id = options.id?.(input);
+            const row = await model.create({
+                data: options.data(input),
+                ...(id !== undefined ? { id } : {}),
+                wait: 'confirmed',
+            });
+            return { status: 'created', row };
+        },
+    });
+}
+export function deleteTool(model, options) {
+    return tool({
+        description: options.description,
+        title: options.title,
+        inputSchema: options.inputSchema,
+        inputExamples: options.inputExamples,
+        // Destructive tools require approval unless an application deliberately
+        // opts into autonomous deletion.
+        needsApproval: options.needsApproval ?? true,
+        strict: options.strict,
+        outputSchema: options.outputSchema,
+        toModelOutput: options.toModelOutput,
+        execute: async (input, execution) => {
+            const id = options.id(input);
+            const queue = options.strategy !== 'claim';
+            const claim = await model.claim({
+                id,
+                queue,
+                description: options.claim?.description,
+                signal: execution.abortSignal,
+            });
+            if (!claim) {
+                return {
+                    status: 'claimed',
+                    message: 'Another participant holds this row right now — it was not deleted.',
+                };
+            }
+            try {
+                await model.delete({ id, claim, wait: 'confirmed' });
+                return { status: 'deleted', id };
+            }
+            finally {
+                await claim.release();
+            }
+        },
+    });
+}
+//# sourceMappingURL=modelTools.js.map

package/dist/ai-sdk/modelTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelTools.js","sourceRoot":"","sources":["../../src/ai-sdk/modelTools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAA6B,MAAM,IAAI,CAAC;AAgCrD,MAAM,UAAU,QAAQ,CACtB,KAAgC,EAChC,OAAmC;IAEnC,OAAO,IAAI,CAA4B;QACrC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACpC,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC;oBACE,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,oCAAoC,EAAE,GAAG;iBACnD;gBACH,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAmBD,MAAM,UAAU,UAAU,CACxB,KAAgD,EAChD,OAAkD;IAElD,OAAO,IAAI,CAA8B;QACvC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzB,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACpC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAgBD,MAAM,UAAU,UAAU,CACxB,KAAiE,EACjE,OAAkC;IAElC,OAAO,IAAI,CAA2B;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,wEAAwE;QACxE,iCAAiC;QACjC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,KAAK,EACZ,KAAa,EACb,SAA+B,EACJ,EAAE;YAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;gBAC9B,EAAE;gBACF,KAAK;gBACL,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW;gBACvC,MAAM,EAAE,SAAS,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,OAAO,EACL,oEAAoE;iBACvE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YACnC,CAAC;oBAAS,CAAC;gBACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/ai-sdk/toolOptions.d.ts

@@ -0,0 +1,8 @@
+import type { Tool } from 'ai';
+/**
+ * AI SDK-native presentation and execution policy shared by Ablo model tools.
+ * Ablo owns the data operation; AI SDK owns how the tool is presented,
+ * validated, approved, and returned to the model.
+ */
+export type ModelToolOptions<TInput, TResult> = Partial<Pick<Tool<TInput, TResult>, 'title' | 'inputExamples' | 'needsApproval' | 'strict' | 'outputSchema' | 'toModelOutput'>>;
+//# sourceMappingURL=toolOptions.d.ts.map

package/dist/ai-sdk/toolOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolOptions.d.ts","sourceRoot":"","sources":["../../src/ai-sdk/toolOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CACrD,IAAI,CACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EACnB,OAAO,GACP,eAAe,GACf,eAAe,GACf,QAAQ,GACR,cAAc,GACd,eAAe,CAClB,CACF,CAAC"}

package/dist/ai-sdk/toolOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=toolOptions.js.map

package/dist/ai-sdk/toolOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolOptions.js","sourceRoot":"","sources":["../../src/ai-sdk/toolOptions.ts"],"names":[],"mappings":""}

package/dist/ai-sdk/{coordinatedTool.d.ts → updateTool.d.ts}

@@ -1,5 +1,5 @@
 /**
- * Turns a write to one of your models into a Vercel AI SDK tool that handles
+ * Turns a write to one of your models into an AI SDK tool that handles
  * multi-agent coordination for you, so an agent can contribute to shared state
  * without silently overwriting another writer's concurrent change.
  *
@@ -11,10 +11,10 @@
  * write:
  *
  * ```ts
- * import { coordinatedTool } from '@abloatai/transaction/ai-sdk';
+ * import { updateTool } from '@abloatai/ablo/ai-sdk';
  * import { z } from 'zod';
  *
- * const saveSection = coordinatedTool(ablo.documents, {
+ * const saveSection = updateTool(ablo.documents, {
  *   description: 'Save your section into the shared document.',
  *   inputSchema: z.object({ text: z.string() }),
  *   id: () => DOC_ID,
@@ -25,7 +25,7 @@
  * await streamText({ model, messages, tools: { saveSection } });
  * ```
  *
- * The {@link CoordinatedToolOptions.apply} function is the whole API: a pure
+ * The {@link UpdateToolOptions.apply} function is the whole API: a pure
  * function from the freshest row and the tool input to a patch, in the same
  * spirit as a functional state update. Everything beneath it — reading the latest
  * row, the compare-and-swap, backing off between retries, and releasing claims —
@@ -52,32 +52,30 @@
  *   than a hidden wait when it might spend its turn on something else. Works under
  *   any conflict policy.
  *
- * - `'queue'` serializes writers over stateless HTTP. The tool polls to acquire
- *   the claim until it is granted or `poll.timeoutMs` elapses, so the model calls
- *   once and the tool waits its turn. Ordering is approximate rather than strict
- *   first-in-first-out, which would require a persistent connection.
+ * - `'queue'` joins Ablo's server-owned FIFO queue. The model calls once and
+ *   the tool waits for the canonical claim grant; it does not recreate queueing
+ *   with client-side polling.
  */
 import type { z } from 'zod';
-import type { ClaimParams, ModelRetrieveParams, ModelUpdateParams } from '../resources/modelOperations.js';
+import type { ClaimParams, ModelUpdateParams } from '../resources/modelOperations.js';
 import type { ModelUpdater, ContentionOptions } from '../resources/functionalUpdate.js';
 import type { HeldClaim } from '../types/streams.js';
-export type CoordinationStrategy = 'merge' | 'claim' | 'queue';
+import type { ModelToolOptions } from './toolOptions.js';
+export type UpdateStrategy = 'merge' | 'claim' | 'queue';
 /** The structured result the tool hands back to the model (or the caller). */
-export interface CoordinatedWriteResult<T> {
+export interface UpdateToolResult<T> {
     /**
      * `'written'` means the change was saved. `'claimed'` means another participant
      * holds the row, so nothing was saved and the model should try again.
-     * `'timeout'` means the `'queue'` strategy could not acquire the row within
-     * `poll.timeoutMs`.
      */
-    status: 'written' | 'claimed' | 'timeout';
+    status: 'written' | 'claimed';
     /** The reconciled row, on `'written'`. */
     row?: T;
     message?: string;
-    /** On `'written'` via the `queue` strategy, how long the tool waited in line. */
+    /** On `'written'` via the `queue` strategy, how long the tool waited. */
     waitedMs?: number;
 }
-export interface CoordinatedToolOptions<TInput, T> {
+export interface UpdateToolOptions<TInput, T> extends ModelToolOptions<TInput, UpdateToolResult<T>> {
     /** Tool description shown to the model. */
     description: string;
     /** The schema of what the model may send, as a standard AI SDK / Zod input schema. */
@@ -93,31 +91,26 @@ export interface CoordinatedToolOptions<TInput, T> {
      */
     apply: (current: T, input: TInput) => Partial<T>;
     /** How concurrent writers relate. Defaults to `'merge'`. */
-    strategy?: CoordinationStrategy;
+    strategy?: UpdateStrategy;
     /** Human-readable coordination metadata attached to the claim, used by the `'claim'` and `'queue'` strategies. */
     claim?: {
         description?: string;
     };
     /** How many reconcile rounds `'merge'` may take before it gives up with `AbloContentionError`. */
     retries?: number;
-    /** Poll interval and overall timeout for `'queue'`. Defaults to 250ms and 30s. */
-    poll?: {
-        intervalMs?: number;
-        timeoutMs?: number;
-    };
 }
 /**
  * The small model port this helper needs. Both typed transports implement this
  * exact contract; local-cache methods, wire receipts, and transport lifecycle
  * deliberately stay out of an AI tool's dependency surface.
  */
-export interface CoordinatedModel<T> {
-    get(params: ModelRetrieveParams): Promise<T | undefined>;
-    /** @deprecated Use `get({ id })`. */
-    retrieve?(params: ModelRetrieveParams): Promise<T | undefined>;
+export interface UpdateToolModel<T> {
     update(params: ModelUpdateParams<T>): Promise<T>;
     update(id: string, updater: ModelUpdater<T>, options?: ContentionOptions): Promise<T | undefined>;
+    claim(params: ClaimParams<T> & {
+        queue: false;
+    }): Promise<HeldClaim<T> | null>;
     claim(params: ClaimParams<T>): Promise<HeldClaim<T>>;
 }
-export declare function coordinatedTool<TInput, T = Record<string, unknown>>(model: CoordinatedModel<T>, options: CoordinatedToolOptions<TInput, T>): import("ai").Tool<TInput, CoordinatedWriteResult<T>>;
-//# sourceMappingURL=coordinatedTool.d.ts.map
+export declare function updateTool<TInput, T = Record<string, unknown>>(model: UpdateToolModel<T>, options: UpdateToolOptions<TInput, T>): import("ai").Tool<TInput, UpdateToolResult<T>>;
+//# sourceMappingURL=updateTool.d.ts.map

package/dist/ai-sdk/updateTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateTool.d.ts","sourceRoot":"","sources":["../../src/ai-sdk/updateTool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAGH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,0CAA0C;IAC1C,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAC1C,SAAQ,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrD,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,iEAAiE;IACjE,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,kHAAkH;IAClH,KAAK,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,kGAAkG;IAClG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EACxB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1B,KAAK,CACH,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE,GACxC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CACtD;AAED,wBAAgB,UAAU,CACxB,MAAM,EACN,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3B,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,kDAyEjE"}

package/dist/ai-sdk/{coordinatedTool.js → updateTool.js}

@@ -1,5 +1,5 @@
 /**
- * Turns a write to one of your models into a Vercel AI SDK tool that handles
+ * Turns a write to one of your models into an AI SDK tool that handles
  * multi-agent coordination for you, so an agent can contribute to shared state
  * without silently overwriting another writer's concurrent change.
  *
@@ -11,10 +11,10 @@
  * write:
  *
  * ```ts
- * import { coordinatedTool } from '@abloatai/transaction/ai-sdk';
+ * import { updateTool } from '@abloatai/ablo/ai-sdk';
  * import { z } from 'zod';
  *
- * const saveSection = coordinatedTool(ablo.documents, {
+ * const saveSection = updateTool(ablo.documents, {
  *   description: 'Save your section into the shared document.',
  *   inputSchema: z.object({ text: z.string() }),
  *   id: () => DOC_ID,
@@ -25,7 +25,7 @@
  * await streamText({ model, messages, tools: { saveSection } });
  * ```
  *
- * The {@link CoordinatedToolOptions.apply} function is the whole API: a pure
+ * The {@link UpdateToolOptions.apply} function is the whole API: a pure
  * function from the freshest row and the tool input to a patch, in the same
  * spirit as a functional state update. Everything beneath it — reading the latest
  * row, the compare-and-swap, backing off between retries, and releasing claims —
@@ -52,20 +52,23 @@
  *   than a hidden wait when it might spend its turn on something else. Works under
  *   any conflict policy.
  *
- * - `'queue'` serializes writers over stateless HTTP. The tool polls to acquire
- *   the claim until it is granted or `poll.timeoutMs` elapses, so the model calls
- *   once and the tool waits its turn. Ordering is approximate rather than strict
- *   first-in-first-out, which would require a persistent connection.
+ * - `'queue'` joins Ablo's server-owned FIFO queue. The model calls once and
+ *   the tool waits for the canonical claim grant; it does not recreate queueing
+ *   with client-side polling.
  */
 import { tool } from 'ai';
-import { AbloClaimedError, AbloNotFoundError } from '@abloatai/transaction/errors';
-const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-export function coordinatedTool(model, options) {
+export function updateTool(model, options) {
     const strategy = options.strategy ?? 'merge';
     return tool({
         description: options.description,
+        title: options.title,
         inputSchema: options.inputSchema,
-        execute: async (input) => {
+        inputExamples: options.inputExamples,
+        needsApproval: options.needsApproval,
+        strict: options.strict,
+        outputSchema: options.outputSchema,
+        toModelOutput: options.toModelOutput,
+        execute: async (input, execution) => {
             const id = options.id(input);
             if (strategy === 'merge') {
                 // Read the freshest row, apply the patch, and commit it with a
@@ -73,25 +76,35 @@ export function coordinatedTool(model, options) {
                 // backoff. The model never sees a conflict.
                 const row = await model.update(id, (current) => options.apply(current, input), {
                     retries: options.retries,
+                    signal: execution.abortSignal,
                 });
                 return { status: 'written', row: row ?? undefined };
             }
             // The 'claim' and 'queue' strategies both acquire a claim, write under it,
             // and release it. They differ only in what they do when the row is already
-            // held: 'claim' returns a signal to the model, while 'queue' waits and
-            // retries by polling to acquire.
-            const acquireWriteRelease = async () => {
+            // held: 'claim' returns a signal to the model, while 'queue' waits for
+            // the server-owned FIFO grant.
+            const acquireWriteRelease = async (queue) => {
                 const claim = await model.claim({
                     id,
-                    queue: false,
+                    queue,
                     description: options.claim?.description,
+                    signal: execution.abortSignal,
                 });
+                if (!claim) {
+                    return {
+                        status: 'claimed',
+                        message: 'Another participant holds this row right now — it was not saved.',
+                    };
+                }
                 try {
-                    const current = await model.get({ id });
-                    if (current === undefined) {
-                        throw new AbloNotFoundError(`Cannot write ${id}: it does not exist (or is outside this credential's scope).`, [id]);
-                    }
-                    const row = await model.update({ id, data: options.apply(current, input), claim, wait: 'confirmed' });
+                    const current = claim.data;
+                    const row = await model.update({
+                        id,
+                        data: options.apply(current, input),
+                        claim,
+                        wait: 'confirmed',
+                    });
                     return { status: 'written', row };
                 }
                 finally {
@@ -99,37 +112,13 @@ export function coordinatedTool(model, options) {
                 }
             };
             if (strategy === 'claim') {
-                try {
-                    return await acquireWriteRelease();
-                }
-                catch (e) {
-                    if (e instanceof AbloClaimedError) {
-                        return { status: 'claimed', message: 'Another participant holds this row right now — it was NOT saved. Wait briefly and try again.' };
-                    }
-                    throw e;
-                }
+                return acquireWriteRelease(false);
             }
-            // strategy === 'queue': poll to acquire the claim over stateless HTTP.
-            const interval = options.poll?.intervalMs ?? 250;
-            const timeout = options.poll?.timeoutMs ?? 30_000;
+            // The transaction client owns the server FIFO and resolves once granted.
             const start = Date.now();
-            for (;;) {
-                try {
-                    const result = await acquireWriteRelease();
-                    return { ...result, waitedMs: Date.now() - start };
-                }
-                catch (e) {
-                    if (e instanceof AbloClaimedError) {
-                        if (Date.now() - start >= timeout) {
-                            return { status: 'timeout', message: `Could not acquire the row within ${timeout}ms.` };
-                        }
-                        await sleep(interval);
-                        continue;
-                    }
-                    throw e;
-                }
-            }
+            const result = await acquireWriteRelease(true);
+            return { ...result, waitedMs: Date.now() - start };
         },
     });
 }
-//# sourceMappingURL=coordinatedTool.js.map
+//# sourceMappingURL=updateTool.js.map

package/dist/ai-sdk/updateTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateTool.js","sourceRoot":"","sources":["../../src/ai-sdk/updateTool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAE,IAAI,EAA6B,MAAM,IAAI,CAAC;AAoErD,MAAM,UAAU,UAAU,CAGxB,KAAyB,EAAE,OAAqC;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;IAE7C,OAAO,IAAI,CAA8B;QACvC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,KAAK,EACZ,KAAa,EACb,SAA+B,EACD,EAAE;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAE7B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,+DAA+D;gBAC/D,uEAAuE;gBACvE,4CAA4C;gBAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;oBAC7E,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,SAAS,CAAC,WAAW;iBAC9B,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC;YACtD,CAAC;YAED,2EAA2E;YAC3E,2EAA2E;YAC3E,uEAAuE;YACvE,+BAA+B;YAC/B,MAAM,mBAAmB,GAAG,KAAK,EAC/B,KAAc,EACgB,EAAE;gBAChC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;oBAC9B,EAAE;oBACF,KAAK;oBACL,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW;oBACvC,MAAM,EAAE,SAAS,CAAC,WAAW;iBAC9B,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,MAAM,EAAE,SAAS;wBACjB,OAAO,EACL,kEAAkE;qBACrE,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;oBAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;wBAC7B,EAAE;wBACF,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;wBACnC,KAAK;wBACL,IAAI,EAAE,WAAW;qBAClB,CAAC,CAAC;oBACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;gBACpC,CAAC;wBAAS,CAAC;oBACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,yEAAyE;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrD,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/capability.d.ts

@@ -165,6 +165,9 @@ export declare function grantedOperations(can: Readonly<Record<string, readonly
  */
 export declare const capabilityScopeSchema: z.ZodObject<{
     organizationId: z.ZodString;
+    projectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    branchId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    branchRoot: z.ZodDefault<z.ZodBoolean>;
     syncGroups: z.ZodArray<z.ZodString>;
     operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.update` | `${string}.create` | `${string}.delete` | `${string}.read`>>;
     participantKind: z.ZodEnum<{
@@ -198,6 +201,9 @@ export declare const capabilityMintResponseSchema: z.ZodObject<{
     organizationId: z.ZodString;
     scope: z.ZodObject<{
         organizationId: z.ZodString;
+        projectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        branchId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        branchRoot: z.ZodDefault<z.ZodBoolean>;
         syncGroups: z.ZodArray<z.ZodString>;
         operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.update` | `${string}.create` | `${string}.delete` | `${string}.read`>>;
         participantKind: z.ZodEnum<{

package/dist/auth/capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/auth/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;EAAiD,CAAC;AACxF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,uGAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;KAK9B,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,SAAS;IAClD,mBAAmB;IACnB,GAAG,mBAAmB,EAAE;CACzB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,GACxE,OAAO,CACL,MAAM,CACJ,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC,EAC5B,4BAA4B,CAC7B,CACF;CACJ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AAEpB;;;;GAIG;AACH,MAAM,MAAM,eAAe,CACzB,CAAC,SAAS;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,IAC9D,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,MAAM,EAAE,CAAC;;;;;MAaV;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,gBAAgB,EAAE,GACtC,gBAAgB,EAAE,CAOpB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIxB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,GACrD,GAAG,CAAC,MAAM,CAAC,CAQb;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,SAAS,gBAAgB,EAAE,EACvC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3B,gBAAgB,EAAE,CAIpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC,CAAC,EACzE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC1C,gBAAgB,EAAE,CAMpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;iBAYhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;iBAOvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAgClC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/auth/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;EAAiD,CAAC;AACxF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,uGAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;KAK9B,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,SAAS;IAClD,mBAAmB;IACnB,GAAG,mBAAmB,EAAE;CACzB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,GACxE,OAAO,CACL,MAAM,CACJ,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC,EAC5B,4BAA4B,CAC7B,CACF;CACJ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AAEpB;;;;GAIG;AACH,MAAM,MAAM,eAAe,CACzB,CAAC,SAAS;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,IAC9D,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,MAAM,EAAE,CAAC;;;;;MAaV;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,gBAAgB,EAAE,GACtC,gBAAgB,EAAE,CAOpB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIxB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,GACrD,GAAG,CAAC,MAAM,CAAC,CAQb;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,SAAS,gBAAgB,EAAE,EACvC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3B,gBAAgB,EAAE,CAIpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC,CAAC,EACzE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC1C,gBAAgB,EAAE,CAMpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAgBhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;iBAOvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAgClC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/auth/capability.js

@@ -170,6 +170,10 @@ export function grantedOperations(can, wireNames) {
  */
 export const capabilityScopeSchema = z.object({
     organizationId: z.string().min(1),
+    /** Credential target. Branch id is authoritative; null supports self-hosted identities. */
+    projectId: z.string().min(1).nullable().default(null),
+    branchId: z.string().min(1).nullable().default(null),
+    branchRoot: z.boolean().default(false),
     /**
      * The ROW axis — which sync groups this credential may act within. Read back
      * as plain strings rather than the branded form the request enforces: this is

package/dist/auth/capability.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../src/auth/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGxF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,eAAe,CAAC;IACtD,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,GAAG;IACH,yBAAyB;CAC1B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CACzC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CACrD,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;IAC7C,OAAO,EAAE,uCAAuC;CACjD,CAAC,CAAC;AAgCH;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAEpC,MAAS;IACT,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,OAAO,EAAE,UAAU,KAAK,mCAAmC;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAuC;IAEvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAmB,UAAU,CAAC,CAAC;IAClD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAYD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAsD;IAEtD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAsD;IAEtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAuC,EACvC,OAA4B;IAE5B,2EAA2E;IAC3E,6BAA6B;IAC7B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyE,EACzE,SAA2C;IAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAoB,EAAE,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,uEAAuE;IACvE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC3C,eAAe,EAAE,qBAAqB;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,EAAE,qBAAqB;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5C,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,eAAe,EAAE,qBAAqB;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C;;;;;OAKG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/D,4DAA4D;IAC5D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC"}
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../src/auth/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGxF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,eAAe,CAAC;IACtD,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,GAAG;IACH,yBAAyB;CAC1B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CACzC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CACrD,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;IAC7C,OAAO,EAAE,uCAAuC;CACjD,CAAC,CAAC;AAgCH;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAEpC,MAAS;IACT,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,OAAO,EAAE,UAAU,KAAK,mCAAmC;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAuC;IAEvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAmB,UAAU,CAAC,CAAC;IAClD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAYD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAsD;IAEtD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAsD;IAEtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAuC,EACvC,OAA4B;IAE5B,2EAA2E;IAC3E,6BAA6B;IAC7B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyE,EACzE,SAA2C;IAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAoB,EAAE,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,2FAA2F;IAC3F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,uEAAuE;IACvE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC3C,eAAe,EAAE,qBAAqB;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,EAAE,qBAAqB;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5C,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,eAAe,EAAE,qBAAqB;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C;;;;;OAKG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/D,4DAA4D;IAC5D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC"}

package/dist/auth/capabilityLifecycle.d.ts

@@ -16,6 +16,9 @@ export declare const capabilityRotationResponseSchema: z.ZodObject<{
     organizationId: z.ZodString;
     scope: z.ZodObject<{
         organizationId: z.ZodString;
+        projectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        branchId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        branchRoot: z.ZodDefault<z.ZodBoolean>;
         syncGroups: z.ZodArray<z.ZodString>;
         operations: z.ZodArray<z.ZodTemplateLiteral<`${string}.update` | `${string}.create` | `${string}.delete` | `${string}.read`>>;
         participantKind: z.ZodEnum<{

package/dist/auth/capabilityLifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilityLifecycle.d.ts","sourceRoot":"","sources":["../../src/auth/capabilityLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;iBAG1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;iBAU3C,CAAC;AAEH,UAAU,0BAA0B;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,0BAA0B;IACzE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBACf,SAAQ,0BAA0B,EAChC,mBAAmB;CAAG;AAwE1B,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAiC1B"}
+{"version":3,"file":"capabilityLifecycle.d.ts","sourceRoot":"","sources":["../../src/auth/capabilityLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;iBAG1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;iBAU3C,CAAC;AAEH,UAAU,0BAA0B;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,0BAA0B;IACzE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBACf,SAAQ,0BAA0B,EAChC,mBAAmB;CAAG;AAwE1B,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAiC1B"}

package/dist/auth/identity.d.ts

@@ -33,6 +33,8 @@ export interface IdentityResolveInput {
     };
     readonly internalOptions: {
         readonly organizationId?: string;
+        readonly branchId?: string;
+        readonly branchRoot?: boolean;
     };
     readonly url: string;
     readonly kind: ParticipantKind;
@@ -47,10 +49,10 @@ export interface ResolvedIdentity {
     readonly accountScope: string;
     /** Concrete project selected by the credential. The org id is the default project. */
     readonly projectId: string | null;
-    /** Data environment selected by the credential. Null for explicit/self-hosted identities. */
-    readonly environment: 'sandbox' | 'production' | null;
-    /** Concrete sandbox selected by the credential, when applicable. */
-    readonly sandboxId: string | null;
+    /** Immutable transaction branch selected by the credential. */
+    readonly branchId: string | null;
+    /** True only when branchId is the project's production root. */
+    readonly branchRoot: boolean;
     readonly teamIds: string[] | undefined;
     readonly capabilityToken: string | undefined;
     readonly syncGroups: readonly string[] | undefined;

package/dist/auth/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/auth/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAI/D,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,6FAA6F;IAC7F,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;IACtD,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,4FAA4F;IAC5F,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACpD;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAyH3B"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/auth/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAI/D,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE;QACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gEAAgE;IAChE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,4FAA4F;IAC5F,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACpD;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAyH3B"}