@agent-vm/agent-portal-sdk 0.0.134 → 0.0.135

package/dist/cli/tool-portal.js

@@ -1,109 +1,170 @@
 #!/usr/bin/env node
-import { a as PortalArtifactReadRequestSchema } from "../artifact-surface-BstQxq6b.js";
-import { a as encodeCanonicalJson } from "../portable-contracts-Bca33zVa.js";
-import { r as PortalCallRequestSchema } from "../portal-call-request-schema-Cp6CMGs9.js";
-import { a as PortalListRequestSchema, r as PortalSearchRequestSchema, s as PortalDescribeRequestSchema } from "../portal-call-surface-DjZVquFt.js";
-import { t as ToolPortalMcpClient } from "../tool-portal-mcp-client-DwJF-48Y.js";
-import { t as createNodeToolPortalMcpTransport } from "../node-tool-portal-mcp-transport-Cl2VKbLY.js";
+import { a as PortalArtifactReadRequestSchema } from "../artifact-surface-BIDasG5x.js";
+import { r as PortalCallRequestSchema } from "../portal-call-request-schema-DYxcWijW.js";
+import { a as PortalListRequestSchema, r as PortalSearchRequestSchema, s as PortalDescribeRequestSchema } from "../portal-call-surface-B_oQxm5X.js";
+import { a as encodeCanonicalJson } from "../portable-contracts-C5rtqe-H.js";
+import { t as ToolPortalMcpClient } from "../tool-portal-mcp-client-nMGxqQ-A.js";
+import { t as createNodeToolPortalMcpTransport } from "../node-tool-portal-mcp-transport-CnB8MCW2.js";
 import { z } from "zod";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-//#region src/cli/tool-portal.ts
-const OperationSchema = z.enum([
+import { conditional, object, or } from "@optique/core/constructs";
+import { runParser } from "@optique/core/facade";
+import "@optique/core/message";
+import { map, optional } from "@optique/core/modifiers";
+import "@optique/core/parser";
+import { command, option } from "@optique/core/primitives";
+import { zod } from "@optique/zod";
+//#region src/cli/tool-portal-cli-parser.ts
+z.enum([
 	"artifact-read",
 	"call",
 	"describe",
 	"list",
 	"search"
 ]);
-const TransportKindSchema = z.enum(["http", "scoped-stdio"]);
-const EnvironmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
+const transportKindSchema = z.enum(["http", "scoped-stdio"]);
+const environmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
+const absolutePathSchema = z.string().min(1).refine(path.isAbsolute, { message: "Scoped stdio configuration path must be absolute." });
+function createEnvironmentVariableNameParser() {
+	return zod(environmentVariableNameSchema, {
+		metavar: "ENV_NAME",
+		placeholder: "TOOL_PORTAL_AUTH"
+	});
+}
+function createInputJsonParser() {
+	return zod(z.string().min(1), {
+		metavar: "JSON",
+		placeholder: "{}"
+	});
+}
+function createHttpTransportParser() {
+	return map(object({
+		authorizationEnvironmentName: option("--authorization-env", createEnvironmentVariableNameParser()),
+		endpoint: option("--endpoint", zod(z.string().min(1), {
+			metavar: "URL",
+			placeholder: "https://example.test/mcp"
+		}))
+	}), (options) => ({
+		...options,
+		kind: "http"
+	}));
+}
+function createScopedStdioTransportParser() {
+	return map(object({ scopedStdioConfigPath: option("--stdio-config", zod(absolutePathSchema, {
+		metavar: "PATH",
+		placeholder: "/tmp/tool-portal.json"
+	})) }), (options) => ({
+		...options,
+		kind: "scoped-stdio"
+	}));
+}
+function createTransportParser() {
+	return map(conditional(option("--transport", zod(transportKindSchema, {
+		metavar: "TRANSPORT",
+		placeholder: "http"
+	})), {
+		http: createHttpTransportParser(),
+		"scoped-stdio": createScopedStdioTransportParser()
+	}), ([, transport]) => transport);
+}
+function createInputJsonOption() {
+	return option("--input-json", createInputJsonParser());
+}
+function createCallCommand() {
+	return command("call", map(object({
+		approvalTokenEnvironmentName: optional(option("--approval-token-env", createEnvironmentVariableNameParser())),
+		inputJson: createInputJsonOption(),
+		transport: createTransportParser()
+	}), ({ approvalTokenEnvironmentName, inputJson, transport }) => ({
+		...approvalTokenEnvironmentName === void 0 ? {} : { approvalTokenEnvironmentName },
+		inputJson,
+		operation: "call",
+		transport
+	})));
+}
+function createNonCallCommand(operation) {
+	return command(operation, map(object({
+		inputJson: createInputJsonOption(),
+		transport: createTransportParser()
+	}), ({ inputJson, transport }) => ({
+		inputJson,
+		operation,
+		transport
+	})));
+}
+const toolPortalCliParser = or(createNonCallCommand("artifact-read"), createCallCommand(), createNonCallCommand("describe"), createNonCallCommand("list"), createNonCallCommand("search"));
+var ToolPortalCliRunnerSignalError = class extends Error {
+	signal;
+	constructor(signal) {
+		super(`Tool Portal CLI runner signal: ${signal.kind}`);
+		this.signal = signal;
+	}
+};
+function writeOutput(write, text) {
+	write.write(text.endsWith("\n") ? text : `${text}\n`);
+}
+function createRunOptions(io) {
+	return {
+		help: {
+			command: true,
+			option: { names: ["-h", "--help"] },
+			onShow: () => {
+				throw new ToolPortalCliRunnerSignalError({
+					exitCode: 0,
+					kind: "help"
+				});
+			}
+		},
+		onError: (exitCode) => {
+			throw new ToolPortalCliRunnerSignalError({
+				exitCode,
+				kind: "parse-error"
+			});
+		},
+		stderr: (text) => writeOutput(io.stderr, text),
+		stdout: (text) => writeOutput(io.stdout, text)
+	};
+}
+function runToolPortalCliParser(argv, io) {
+	try {
+		return {
+			kind: "parsed",
+			value: runParser(toolPortalCliParser, "tool-portal", argv, createRunOptions(io))
+		};
+	} catch (error) {
+		if (error instanceof ToolPortalCliRunnerSignalError) return error.signal;
+		throw error;
+	}
+}
+//#endregion
+//#region src/cli/tool-portal.ts
 const canonicalResultGraceAfterInterruptMilliseconds = 250;
 const ScopedStdioConfigSchema = z.object({
 	argv: z.array(z.string()).max(128),
 	executable: z.string().min(1),
 	schemaVersion: z.literal(1)
 }).strict();
-function parseNamedOptions(argv) {
-	const namedOptions = /* @__PURE__ */ new Map();
-	for (let index = 1; index < argv.length; index += 2) {
-		const name = argv[index];
-		const value = argv[index + 1];
-		if (name === void 0 || value === void 0 || !name.startsWith("--")) throw new Error("Every Tool Portal CLI option requires one explicit value.");
-		if (namedOptions.has(name)) throw new Error(`Duplicate Tool Portal CLI option: ${name}.`);
-		namedOptions.set(name, value);
-	}
-	return namedOptions;
-}
-function requireNamedOption(namedOptions, name) {
-	const value = namedOptions.get(name);
-	if (value === void 0 || value.length === 0) throw new Error(`Missing required Tool Portal CLI option: ${name}.`);
-	return value;
-}
-function assertExactOptionNames(namedOptions, allowedNames) {
-	for (const name of namedOptions.keys()) if (!allowedNames.has(name)) throw new Error(`Unknown Tool Portal CLI option: ${name}.`);
-}
-function parseCliArguments(argv) {
-	const operation = OperationSchema.parse(argv[0]);
-	const namedOptions = parseNamedOptions(argv);
-	const inputJson = requireNamedOption(namedOptions, "--input-json");
-	const transportKind = TransportKindSchema.parse(requireNamedOption(namedOptions, "--transport"));
-	if (operation !== "call" && namedOptions.has("--approval-token-env")) throw new Error("Tool Portal approval tokens are accepted only for the call operation.");
-	if (transportKind === "http") {
-		assertExactOptionNames(namedOptions, new Set([
-			"--approval-token-env",
-			"--authorization-env",
-			"--endpoint",
-			"--input-json",
-			"--transport"
-		]));
-		return {
-			...namedOptions.has("--approval-token-env") ? { approvalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(requireNamedOption(namedOptions, "--approval-token-env")) } : {},
-			authorizationEnvironmentName: EnvironmentVariableNameSchema.parse(requireNamedOption(namedOptions, "--authorization-env")),
-			endpoint: requireNamedOption(namedOptions, "--endpoint"),
-			inputJson,
-			operation,
-			transportKind
-		};
-	}
-	assertExactOptionNames(namedOptions, new Set([
-		"--approval-token-env",
-		"--input-json",
-		"--stdio-config",
-		"--transport"
-	]));
-	const scopedStdioConfigPath = requireNamedOption(namedOptions, "--stdio-config");
-	if (!path.isAbsolute(scopedStdioConfigPath)) throw new Error("Scoped stdio configuration path must be absolute.");
-	return {
-		...namedOptions.has("--approval-token-env") ? { approvalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(requireNamedOption(namedOptions, "--approval-token-env")) } : {},
-		inputJson,
-		operation,
-		scopedStdioConfigPath,
-		transportKind
-	};
-}
 function parseHttpEndpoint(endpoint) {
 	const parsedEndpoint = new URL(endpoint);
 	if (!["http:", "https:"].includes(parsedEndpoint.protocol) || parsedEndpoint.username.length > 0 || parsedEndpoint.password.length > 0 || parsedEndpoint.hash.length > 0) throw new Error("Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment.");
 	return parsedEndpoint;
 }
 async function createCliTransport(arguments_, environment) {
-	if (arguments_.transportKind === "http") {
-		const environmentName = arguments_.authorizationEnvironmentName;
+	if (arguments_.transport.kind === "http") {
+		const environmentName = arguments_.transport.authorizationEnvironmentName;
 		const authorization = environmentName === void 0 ? void 0 : environment[environmentName];
 		if (authorization === void 0 || authorization.length === 0) throw new Error("The explicit Tool Portal authorization environment variable is unset.");
-		if (arguments_.endpoint === void 0) throw new Error("Tool Portal HTTP endpoint is required.");
 		return {
 			authorization,
 			transport: createNodeToolPortalMcpTransport({
 				authorization,
-				endpoint: parseHttpEndpoint(arguments_.endpoint),
+				endpoint: parseHttpEndpoint(arguments_.transport.endpoint),
 				kind: "http"
 			})
 		};
 	}
-	if (arguments_.scopedStdioConfigPath === void 0) throw new Error("Scoped stdio configuration path is required.");
-	const config = ScopedStdioConfigSchema.parse(JSON.parse(await readFile(arguments_.scopedStdioConfigPath, "utf8")));
+	const config = ScopedStdioConfigSchema.parse(JSON.parse(await readFile(arguments_.transport.scopedStdioConfigPath, "utf8")));
 	return {
 		authorization: void 0,
 		transport: createNodeToolPortalMcpTransport({
@@ -143,7 +204,10 @@ async function invokePortalOperation(props) {
 			result: await props.client.search(PortalSearchRequestSchema.parse(props.publicRequest), options)
 		};
 	}
-	throw new Error(`Unsupported Tool Portal CLI operation: ${String(props.operation)}.`);
+	return assertNever(props.operation);
+}
+function assertNever(value) {
+	throw new Error(`Unsupported Tool Portal CLI operation: ${String(value)}.`);
 }
 function readApprovalToken(arguments_, environment) {
 	const environmentName = arguments_.approvalTokenEnvironmentName;
@@ -168,7 +232,13 @@ async function runToolPortalCli(argv, environment) {
 	const interrupt = () => cancellation.abort(/* @__PURE__ */ new Error("Tool Portal CLI interrupted."));
 	process.once("SIGINT", interrupt);
 	try {
-		const cliArguments = parseCliArguments(argv);
+		const parseResult = runToolPortalCliParser(argv, {
+			stderr: process.stderr,
+			stdout: process.stdout
+		});
+		if (parseResult.kind === "help") return parseResult.exitCode;
+		if (parseResult.kind === "parse-error") return 2;
+		const cliArguments = parseResult.value;
 		const transportResult = await createCliTransport(cliArguments, environment);
 		authorization = transportResult.authorization;
 		client = new ToolPortalMcpClient({ transport: transportResult.transport });

package/dist/cli/tool-portal.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-portal.js","names":[],"sources":["../../src/cli/tool-portal.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\n\nimport { z } from 'zod';\n\nimport {\n\tPortalArtifactReadRequestSchema,\n\ttype PortalArtifactReadResult,\n} from '../artifact-surface/index.js';\nimport { encodeCanonicalJson } from '../portable-contracts/index.js';\nimport {\n\tPortalCallRequestSchema,\n\tPortalDescribeRequestSchema,\n\tPortalListRequestSchema,\n\tPortalSearchRequestSchema,\n\ttype PortalCallResult,\n\ttype PortalDescribeResult,\n\ttype PortalListResult,\n\ttype PortalSearchResult,\n} from '../portal-call-surface/index.js';\nimport {\n\tToolPortalMcpClient,\n\ttype ToolPortalMcpTransport,\n} from '../tool-portal-mcp-client/index.js';\nimport { createNodeToolPortalMcpTransport } from '../tool-portal-mcp-client/node-tool-portal-mcp-transport.js';\n\nconst OperationSchema = z.enum(['artifact-read', 'call', 'describe', 'list', 'search']);\nconst TransportKindSchema = z.enum(['http', 'scoped-stdio']);\nconst EnvironmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);\nconst canonicalResultGraceAfterInterruptMilliseconds = 250;\nconst ScopedStdioConfigSchema = z\n\t.object({\n\t\targv: z.array(z.string()).max(128),\n\t\texecutable: z.string().min(1),\n\t\tschemaVersion: z.literal(1),\n\t})\n\t.strict();\n\ntype ToolPortalCliOperation = z.infer<typeof OperationSchema>;\ntype ToolPortalCliInvocationResult =\n\t| { readonly kind: 'artifact-read'; readonly result: PortalArtifactReadResult }\n\t| {\n\t\t\treadonly kind: 'portal';\n\t\t\treadonly result:\n\t\t\t\t| PortalCallResult\n\t\t\t\t| PortalDescribeResult\n\t\t\t\t| PortalListResult\n\t\t\t\t| PortalSearchResult;\n\t  };\n\ninterface ToolPortalCliArguments {\n\treadonly approvalTokenEnvironmentName?: string;\n\treadonly authorizationEnvironmentName?: string;\n\treadonly endpoint?: string;\n\treadonly inputJson: string;\n\treadonly operation: ToolPortalCliOperation;\n\treadonly scopedStdioConfigPath?: string;\n\treadonly transportKind: z.infer<typeof TransportKindSchema>;\n}\n\ninterface ToolPortalCliTransportResult {\n\treadonly authorization: string | undefined;\n\treadonly transport: ToolPortalMcpTransport;\n}\n\nfunction parseNamedOptions(argv: readonly string[]): ReadonlyMap<string, string> {\n\tconst namedOptions = new Map<string, string>();\n\tfor (let index = 1; index < argv.length; index += 2) {\n\t\tconst name = argv[index];\n\t\tconst value = argv[index + 1];\n\t\tif (name === undefined || value === undefined || !name.startsWith('--')) {\n\t\t\tthrow new Error('Every Tool Portal CLI option requires one explicit value.');\n\t\t}\n\t\tif (namedOptions.has(name)) {\n\t\t\tthrow new Error(`Duplicate Tool Portal CLI option: ${name}.`);\n\t\t}\n\t\tnamedOptions.set(name, value);\n\t}\n\treturn namedOptions;\n}\n\nfunction requireNamedOption(namedOptions: ReadonlyMap<string, string>, name: string): string {\n\tconst value = namedOptions.get(name);\n\tif (value === undefined || value.length === 0) {\n\t\tthrow new Error(`Missing required Tool Portal CLI option: ${name}.`);\n\t}\n\treturn value;\n}\n\nfunction assertExactOptionNames(\n\tnamedOptions: ReadonlyMap<string, string>,\n\tallowedNames: ReadonlySet<string>,\n): void {\n\tfor (const name of namedOptions.keys()) {\n\t\tif (!allowedNames.has(name)) {\n\t\t\tthrow new Error(`Unknown Tool Portal CLI option: ${name}.`);\n\t\t}\n\t}\n}\n\nfunction parseCliArguments(argv: readonly string[]): ToolPortalCliArguments {\n\tconst operation = OperationSchema.parse(argv[0]);\n\tconst namedOptions = parseNamedOptions(argv);\n\tconst inputJson = requireNamedOption(namedOptions, '--input-json');\n\tconst transportKind = TransportKindSchema.parse(requireNamedOption(namedOptions, '--transport'));\n\tif (operation !== 'call' && namedOptions.has('--approval-token-env')) {\n\t\tthrow new Error('Tool Portal approval tokens are accepted only for the call operation.');\n\t}\n\n\tif (transportKind === 'http') {\n\t\tassertExactOptionNames(\n\t\t\tnamedOptions,\n\t\t\tnew Set([\n\t\t\t\t'--approval-token-env',\n\t\t\t\t'--authorization-env',\n\t\t\t\t'--endpoint',\n\t\t\t\t'--input-json',\n\t\t\t\t'--transport',\n\t\t\t]),\n\t\t);\n\t\treturn {\n\t\t\t...(namedOptions.has('--approval-token-env')\n\t\t\t\t? {\n\t\t\t\t\t\tapprovalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(\n\t\t\t\t\t\t\trequireNamedOption(namedOptions, '--approval-token-env'),\n\t\t\t\t\t\t),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\tauthorizationEnvironmentName: EnvironmentVariableNameSchema.parse(\n\t\t\t\trequireNamedOption(namedOptions, '--authorization-env'),\n\t\t\t),\n\t\t\tendpoint: requireNamedOption(namedOptions, '--endpoint'),\n\t\t\tinputJson,\n\t\t\toperation,\n\t\t\ttransportKind,\n\t\t};\n\t}\n\n\tassertExactOptionNames(\n\t\tnamedOptions,\n\t\tnew Set(['--approval-token-env', '--input-json', '--stdio-config', '--transport']),\n\t);\n\tconst scopedStdioConfigPath = requireNamedOption(namedOptions, '--stdio-config');\n\tif (!path.isAbsolute(scopedStdioConfigPath)) {\n\t\tthrow new Error('Scoped stdio configuration path must be absolute.');\n\t}\n\treturn {\n\t\t...(namedOptions.has('--approval-token-env')\n\t\t\t? {\n\t\t\t\t\tapprovalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(\n\t\t\t\t\t\trequireNamedOption(namedOptions, '--approval-token-env'),\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\tinputJson,\n\t\toperation,\n\t\tscopedStdioConfigPath,\n\t\ttransportKind,\n\t};\n}\n\nfunction parseHttpEndpoint(endpoint: string): URL {\n\tconst parsedEndpoint = new URL(endpoint);\n\tif (\n\t\t!['http:', 'https:'].includes(parsedEndpoint.protocol) ||\n\t\tparsedEndpoint.username.length > 0 ||\n\t\tparsedEndpoint.password.length > 0 ||\n\t\tparsedEndpoint.hash.length > 0\n\t) {\n\t\tthrow new Error(\n\t\t\t'Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment.',\n\t\t);\n\t}\n\treturn parsedEndpoint;\n}\n\nasync function createCliTransport(\n\targuments_: ToolPortalCliArguments,\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<ToolPortalCliTransportResult> {\n\tif (arguments_.transportKind === 'http') {\n\t\tconst environmentName = arguments_.authorizationEnvironmentName;\n\t\tconst authorization = environmentName === undefined ? undefined : environment[environmentName];\n\t\tif (authorization === undefined || authorization.length === 0) {\n\t\t\tthrow new Error('The explicit Tool Portal authorization environment variable is unset.');\n\t\t}\n\t\tif (arguments_.endpoint === undefined) {\n\t\t\tthrow new Error('Tool Portal HTTP endpoint is required.');\n\t\t}\n\t\treturn {\n\t\t\tauthorization,\n\t\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\t\tauthorization,\n\t\t\t\tendpoint: parseHttpEndpoint(arguments_.endpoint),\n\t\t\t\tkind: 'http',\n\t\t\t}),\n\t\t};\n\t}\n\n\tif (arguments_.scopedStdioConfigPath === undefined) {\n\t\tthrow new Error('Scoped stdio configuration path is required.');\n\t}\n\tconst config = ScopedStdioConfigSchema.parse(\n\t\tJSON.parse(await readFile(arguments_.scopedStdioConfigPath, 'utf8')) as unknown,\n\t);\n\treturn {\n\t\tauthorization: undefined,\n\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\targv: config.argv,\n\t\t\texecutable: config.executable,\n\t\t\tkind: 'scoped-stdio',\n\t\t}),\n\t};\n}\n\nasync function invokePortalOperation(props: {\n\treadonly approvalToken?: string;\n\treadonly client: ToolPortalMcpClient;\n\treadonly operation: ToolPortalCliOperation;\n\treadonly publicRequest: unknown;\n\treadonly signal: AbortSignal;\n}): Promise<ToolPortalCliInvocationResult> {\n\tconst options = {\n\t\tresultGraceAfterAbortMs: canonicalResultGraceAfterInterruptMilliseconds,\n\t\tsignal: props.signal,\n\t};\n\tswitch (props.operation) {\n\t\tcase 'artifact-read':\n\t\t\treturn {\n\t\t\t\tkind: 'artifact-read',\n\t\t\t\tresult: await props.client.artifacts.read(\n\t\t\t\t\tPortalArtifactReadRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'call':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.call(PortalCallRequestSchema.parse(props.publicRequest), {\n\t\t\t\t\t...options,\n\t\t\t\t\t...(props.approvalToken === undefined ? {} : { approvalToken: props.approvalToken }),\n\t\t\t\t}),\n\t\t\t};\n\t\tcase 'describe':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.describe(\n\t\t\t\t\tPortalDescribeRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'list':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.list(\n\t\t\t\t\tPortalListRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'search':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.search(\n\t\t\t\t\tPortalSearchRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t}\n\tthrow new Error(`Unsupported Tool Portal CLI operation: ${String(props.operation)}.`);\n}\n\nfunction readApprovalToken(\n\targuments_: ToolPortalCliArguments,\n\tenvironment: NodeJS.ProcessEnv,\n): string | undefined {\n\tconst environmentName = arguments_.approvalTokenEnvironmentName;\n\tif (environmentName === undefined) return undefined;\n\tconst approvalToken = environment[environmentName];\n\tif (approvalToken === undefined || approvalToken.length === 0) {\n\t\tthrow new Error('The explicit Tool Portal approval-token environment variable is unset.');\n\t}\n\treturn z.string().min(1).max(16_384).parse(approvalToken);\n}\n\nfunction safeDiagnostic(error: unknown, secrets: readonly string[]): string {\n\tlet message = error instanceof Error ? error.message : String(error);\n\tfor (const secret of secrets) {\n\t\tif (secret.length > 0) message = message.replaceAll(secret, '[redacted]');\n\t}\n\treturn message;\n}\n\nasync function waitForCancellationNotificationFlush(): Promise<void> {\n\tawait new Promise<void>((resolve) => setImmediate(resolve));\n}\n\nasync function runToolPortalCli(\n\targv: readonly string[],\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<number> {\n\tlet authorization: string | undefined;\n\tlet approvalToken: string | undefined;\n\tlet client: ToolPortalMcpClient | undefined;\n\tconst cancellation = new AbortController();\n\tconst interrupt = (): void => cancellation.abort(new Error('Tool Portal CLI interrupted.'));\n\tprocess.once('SIGINT', interrupt);\n\ttry {\n\t\tconst cliArguments = parseCliArguments(argv);\n\t\tconst transportResult = await createCliTransport(cliArguments, environment);\n\t\tauthorization = transportResult.authorization;\n\t\tclient = new ToolPortalMcpClient({ transport: transportResult.transport });\n\t\tawait client.connect();\n\t\tconst publicRequest = JSON.parse(cliArguments.inputJson) as unknown;\n\t\tapprovalToken =\n\t\t\tcliArguments.operation === 'call' ? readApprovalToken(cliArguments, environment) : undefined;\n\t\tconst invocation = await invokePortalOperation({\n\t\t\t...(approvalToken === undefined ? {} : { approvalToken }),\n\t\t\tclient,\n\t\t\toperation: cliArguments.operation,\n\t\t\tpublicRequest,\n\t\t\tsignal: cancellation.signal,\n\t\t});\n\t\tprocess.stdout.write(`${encodeCanonicalJson(invocation.result)}\\n`);\n\t\tconst exitCode = invocation.kind === 'artifact-read' || invocation.result.ok ? 0 : 1;\n\t\ttry {\n\t\t\tawait client.close();\n\t\t} catch {\n\t\t\t// A canonical result already returned and remains authoritative after interrupt/close races.\n\t\t}\n\t\tclient = undefined;\n\t\treturn exitCode;\n\t} catch (error: unknown) {\n\t\tif (cancellation.signal.aborted) {\n\t\t\tawait waitForCancellationNotificationFlush();\n\t\t}\n\t\tprocess.stderr.write(\n\t\t\t`tool-portal: ${safeDiagnostic(error, [\n\t\t\t\t...(authorization === undefined ? [] : [authorization]),\n\t\t\t\t...(approvalToken === undefined ? [] : [approvalToken]),\n\t\t\t])}\\n`,\n\t\t);\n\t\treturn 2;\n\t} finally {\n\t\tprocess.removeListener('SIGINT', interrupt);\n\t\tif (client !== undefined) {\n\t\t\ttry {\n\t\t\t\tawait client.close();\n\t\t\t} catch {\n\t\t\t\t// The primary diagnostic and exit class remain authoritative.\n\t\t\t}\n\t\t}\n\t}\n}\n\nprocess.exitCode = await runToolPortalCli(process.argv.slice(2), process.env);\n"],"mappings":";;;;;;;;;;;AA4BA,MAAM,kBAAkB,EAAE,KAAK;CAAC;CAAiB;CAAQ;CAAY;CAAQ;CAAS,CAAC;AACvF,MAAM,sBAAsB,EAAE,KAAK,CAAC,QAAQ,eAAe,CAAC;AAC5D,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,4BAA4B;AACnF,MAAM,iDAAiD;AACvD,MAAM,0BAA0B,EAC9B,OAAO;CACP,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI;CAClC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,eAAe,EAAE,QAAQ,EAAE;CAC3B,CAAC,CACD,QAAQ;AA6BV,SAAS,kBAAkB,MAAsD;CAChF,MAAM,+BAAe,IAAI,KAAqB;CAC9C,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,OAAO,KAAK;EAClB,MAAM,QAAQ,KAAK,QAAQ;EAC3B,IAAI,SAAS,KAAA,KAAa,UAAU,KAAA,KAAa,CAAC,KAAK,WAAW,KAAK,EACtE,MAAM,IAAI,MAAM,4DAA4D;EAE7E,IAAI,aAAa,IAAI,KAAK,EACzB,MAAM,IAAI,MAAM,qCAAqC,KAAK,GAAG;EAE9D,aAAa,IAAI,MAAM,MAAM;;CAE9B,OAAO;;AAGR,SAAS,mBAAmB,cAA2C,MAAsB;CAC5F,MAAM,QAAQ,aAAa,IAAI,KAAK;CACpC,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAC3C,MAAM,IAAI,MAAM,4CAA4C,KAAK,GAAG;CAErE,OAAO;;AAGR,SAAS,uBACR,cACA,cACO;CACP,KAAK,MAAM,QAAQ,aAAa,MAAM,EACrC,IAAI,CAAC,aAAa,IAAI,KAAK,EAC1B,MAAM,IAAI,MAAM,mCAAmC,KAAK,GAAG;;AAK9D,SAAS,kBAAkB,MAAiD;CAC3E,MAAM,YAAY,gBAAgB,MAAM,KAAK,GAAG;CAChD,MAAM,eAAe,kBAAkB,KAAK;CAC5C,MAAM,YAAY,mBAAmB,cAAc,eAAe;CAClE,MAAM,gBAAgB,oBAAoB,MAAM,mBAAmB,cAAc,cAAc,CAAC;CAChG,IAAI,cAAc,UAAU,aAAa,IAAI,uBAAuB,EACnE,MAAM,IAAI,MAAM,wEAAwE;CAGzF,IAAI,kBAAkB,QAAQ;EAC7B,uBACC,cACA,IAAI,IAAI;GACP;GACA;GACA;GACA;GACA;GACA,CAAC,CACF;EACD,OAAO;GACN,GAAI,aAAa,IAAI,uBAAuB,GACzC,EACA,8BAA8B,8BAA8B,MAC3D,mBAAmB,cAAc,uBAAuB,CACxD,EACD,GACA,EAAE;GACL,8BAA8B,8BAA8B,MAC3D,mBAAmB,cAAc,sBAAsB,CACvD;GACD,UAAU,mBAAmB,cAAc,aAAa;GACxD;GACA;GACA;GACA;;CAGF,uBACC,cACA,IAAI,IAAI;EAAC;EAAwB;EAAgB;EAAkB;EAAc,CAAC,CAClF;CACD,MAAM,wBAAwB,mBAAmB,cAAc,iBAAiB;CAChF,IAAI,CAAC,KAAK,WAAW,sBAAsB,EAC1C,MAAM,IAAI,MAAM,oDAAoD;CAErE,OAAO;EACN,GAAI,aAAa,IAAI,uBAAuB,GACzC,EACA,8BAA8B,8BAA8B,MAC3D,mBAAmB,cAAc,uBAAuB,CACxD,EACD,GACA,EAAE;EACL;EACA;EACA;EACA;EACA;;AAGF,SAAS,kBAAkB,UAAuB;CACjD,MAAM,iBAAiB,IAAI,IAAI,SAAS;CACxC,IACC,CAAC,CAAC,SAAS,SAAS,CAAC,SAAS,eAAe,SAAS,IACtD,eAAe,SAAS,SAAS,KACjC,eAAe,SAAS,SAAS,KACjC,eAAe,KAAK,SAAS,GAE7B,MAAM,IAAI,MACT,sFACA;CAEF,OAAO;;AAGR,eAAe,mBACd,YACA,aACwC;CACxC,IAAI,WAAW,kBAAkB,QAAQ;EACxC,MAAM,kBAAkB,WAAW;EACnC,MAAM,gBAAgB,oBAAoB,KAAA,IAAY,KAAA,IAAY,YAAY;EAC9E,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,wEAAwE;EAEzF,IAAI,WAAW,aAAa,KAAA,GAC3B,MAAM,IAAI,MAAM,yCAAyC;EAE1D,OAAO;GACN;GACA,WAAW,iCAAiC;IAC3C;IACA,UAAU,kBAAkB,WAAW,SAAS;IAChD,MAAM;IACN,CAAC;GACF;;CAGF,IAAI,WAAW,0BAA0B,KAAA,GACxC,MAAM,IAAI,MAAM,+CAA+C;CAEhE,MAAM,SAAS,wBAAwB,MACtC,KAAK,MAAM,MAAM,SAAS,WAAW,uBAAuB,OAAO,CAAC,CACpE;CACD,OAAO;EACN,eAAe,KAAA;EACf,WAAW,iCAAiC;GAC3C,MAAM,OAAO;GACb,YAAY,OAAO;GACnB,MAAM;GACN,CAAC;EACF;;AAGF,eAAe,sBAAsB,OAMM;CAC1C,MAAM,UAAU;EACf,yBAAyB;EACzB,QAAQ,MAAM;EACd;CACD,QAAQ,MAAM,WAAd;EACC,KAAK,iBACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,UAAU,KACpC,gCAAgC,MAAM,MAAM,cAAc,EAC1D,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAAK,wBAAwB,MAAM,MAAM,cAAc,EAAE;IACnF,GAAG;IACH,GAAI,MAAM,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe,MAAM,eAAe;IACnF,CAAC;GACF;EACF,KAAK,YACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,SAC1B,4BAA4B,MAAM,MAAM,cAAc,EACtD,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAC1B,wBAAwB,MAAM,MAAM,cAAc,EAClD,QACA;GACD;EACF,KAAK,UACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,OAC1B,0BAA0B,MAAM,MAAM,cAAc,EACpD,QACA;GACD;;CAEH,MAAM,IAAI,MAAM,0CAA0C,OAAO,MAAM,UAAU,CAAC,GAAG;;AAGtF,SAAS,kBACR,YACA,aACqB;CACrB,MAAM,kBAAkB,WAAW;CACnC,IAAI,oBAAoB,KAAA,GAAW,OAAO,KAAA;CAC1C,MAAM,gBAAgB,YAAY;CAClC,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,yEAAyE;CAE1F,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,MAAO,CAAC,MAAM,cAAc;;AAG1D,SAAS,eAAe,OAAgB,SAAoC;CAC3E,IAAI,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;CACpE,KAAK,MAAM,UAAU,SACpB,IAAI,OAAO,SAAS,GAAG,UAAU,QAAQ,WAAW,QAAQ,aAAa;CAE1E,OAAO;;AAGR,eAAe,uCAAsD;CACpE,MAAM,IAAI,SAAe,YAAY,aAAa,QAAQ,CAAC;;AAG5D,eAAe,iBACd,MACA,aACkB;CAClB,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,eAAe,IAAI,iBAAiB;CAC1C,MAAM,kBAAwB,aAAa,sBAAM,IAAI,MAAM,+BAA+B,CAAC;CAC3F,QAAQ,KAAK,UAAU,UAAU;CACjC,IAAI;EACH,MAAM,eAAe,kBAAkB,KAAK;EAC5C,MAAM,kBAAkB,MAAM,mBAAmB,cAAc,YAAY;EAC3E,gBAAgB,gBAAgB;EAChC,SAAS,IAAI,oBAAoB,EAAE,WAAW,gBAAgB,WAAW,CAAC;EAC1E,MAAM,OAAO,SAAS;EACtB,MAAM,gBAAgB,KAAK,MAAM,aAAa,UAAU;EACxD,gBACC,aAAa,cAAc,SAAS,kBAAkB,cAAc,YAAY,GAAG,KAAA;EACpF,MAAM,aAAa,MAAM,sBAAsB;GAC9C,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe;GACxD;GACA,WAAW,aAAa;GACxB;GACA,QAAQ,aAAa;GACrB,CAAC;EACF,QAAQ,OAAO,MAAM,GAAG,oBAAoB,WAAW,OAAO,CAAC,IAAI;EACnE,MAAM,WAAW,WAAW,SAAS,mBAAmB,WAAW,OAAO,KAAK,IAAI;EACnF,IAAI;GACH,MAAM,OAAO,OAAO;UACb;EAGR,SAAS,KAAA;EACT,OAAO;UACC,OAAgB;EACxB,IAAI,aAAa,OAAO,SACvB,MAAM,sCAAsC;EAE7C,QAAQ,OAAO,MACd,gBAAgB,eAAe,OAAO,CACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,EACtD,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,CACtD,CAAC,CAAC,IACH;EACD,OAAO;WACE;EACT,QAAQ,eAAe,UAAU,UAAU;EAC3C,IAAI,WAAW,KAAA,GACd,IAAI;GACH,MAAM,OAAO,OAAO;UACb;;;AAOX,QAAQ,WAAW,MAAM,iBAAiB,QAAQ,KAAK,MAAM,EAAE,EAAE,QAAQ,IAAI"}
+{"version":3,"file":"tool-portal.js","names":[],"sources":["../../src/cli/tool-portal-cli-parser.ts","../../src/cli/tool-portal.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { conditional, object, or } from '@optique/core/constructs';\nimport { runParser, type RunOptions } from '@optique/core/facade';\nimport { formatMessage } from '@optique/core/message';\nimport { map, optional } from '@optique/core/modifiers';\nimport type { Parser } from '@optique/core/parser';\nimport { parseSync } from '@optique/core/parser';\nimport { command, option } from '@optique/core/primitives';\nimport { zod } from '@optique/zod';\nimport { z } from 'zod';\n\nconst operationSchema = z.enum(['artifact-read', 'call', 'describe', 'list', 'search']);\nconst transportKindSchema = z.enum(['http', 'scoped-stdio']);\nconst environmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);\nconst absolutePathSchema = z.string().min(1).refine(path.isAbsolute, {\n\tmessage: 'Scoped stdio configuration path must be absolute.',\n});\n\nexport type ToolPortalCliOperation = z.infer<typeof operationSchema>;\n\nexport interface ToolPortalHttpTransportArguments {\n\treadonly authorizationEnvironmentName: string;\n\treadonly endpoint: string;\n\treadonly kind: 'http';\n}\n\nexport interface ToolPortalScopedStdioTransportArguments {\n\treadonly kind: 'scoped-stdio';\n\treadonly scopedStdioConfigPath: string;\n}\n\nexport type ToolPortalCliTransport =\n\t| ToolPortalHttpTransportArguments\n\t| ToolPortalScopedStdioTransportArguments;\n\ntype ToolPortalNonCallOperation = Exclude<ToolPortalCliOperation, 'call'>;\n\nexport type ToolPortalCliArguments =\n\t| {\n\t\t\treadonly approvalTokenEnvironmentName?: string;\n\t\t\treadonly inputJson: string;\n\t\t\treadonly operation: 'call';\n\t\t\treadonly transport: ToolPortalCliTransport;\n\t  }\n\t| {\n\t\t\treadonly inputJson: string;\n\t\t\treadonly operation: ToolPortalNonCallOperation;\n\t\t\treadonly transport: ToolPortalCliTransport;\n\t  };\n\nexport type ToolPortalCliParseResult =\n\t| { readonly kind: 'parsed'; readonly value: ToolPortalCliArguments }\n\t| { readonly kind: 'help'; readonly exitCode: 0 }\n\t| { readonly kind: 'parse-error'; readonly exitCode: number };\n\nexport interface ToolPortalCliParserIo {\n\treadonly stderr: Pick<NodeJS.WriteStream, 'write'>;\n\treadonly stdout: Pick<NodeJS.WriteStream, 'write'>;\n}\n\nfunction createEnvironmentVariableNameParser(): ReturnType<typeof zod<string>> {\n\treturn zod(environmentVariableNameSchema, {\n\t\tmetavar: 'ENV_NAME',\n\t\tplaceholder: 'TOOL_PORTAL_AUTH',\n\t});\n}\n\nfunction createInputJsonParser(): ReturnType<typeof zod<string>> {\n\treturn zod(z.string().min(1), {\n\t\tmetavar: 'JSON',\n\t\tplaceholder: '{}',\n\t});\n}\n\nfunction createHttpTransportParser(): Parser<'sync', ToolPortalHttpTransportArguments> {\n\tconst httpTransportOptionsParser = object({\n\t\tauthorizationEnvironmentName: option(\n\t\t\t'--authorization-env',\n\t\t\tcreateEnvironmentVariableNameParser(),\n\t\t),\n\t\tendpoint: option(\n\t\t\t'--endpoint',\n\t\t\tzod(z.string().min(1), {\n\t\t\t\tmetavar: 'URL',\n\t\t\t\tplaceholder: 'https://example.test/mcp',\n\t\t\t}),\n\t\t),\n\t});\n\treturn map(\n\t\thttpTransportOptionsParser,\n\t\t(options): ToolPortalHttpTransportArguments => ({\n\t\t\t...options,\n\t\t\tkind: 'http',\n\t\t}),\n\t);\n}\n\nfunction createScopedStdioTransportParser(): Parser<\n\t'sync',\n\tToolPortalScopedStdioTransportArguments\n> {\n\tconst scopedStdioTransportOptionsParser = object({\n\t\tscopedStdioConfigPath: option(\n\t\t\t'--stdio-config',\n\t\t\tzod(absolutePathSchema, {\n\t\t\t\tmetavar: 'PATH',\n\t\t\t\tplaceholder: '/tmp/tool-portal.json',\n\t\t\t}),\n\t\t),\n\t});\n\treturn map(\n\t\tscopedStdioTransportOptionsParser,\n\t\t(options): ToolPortalScopedStdioTransportArguments => ({\n\t\t\t...options,\n\t\t\tkind: 'scoped-stdio',\n\t\t}),\n\t);\n}\n\nfunction createTransportParser(): Parser<'sync', ToolPortalCliTransport> {\n\tconst transportSelectionParser = conditional(\n\t\toption(\n\t\t\t'--transport',\n\t\t\tzod(transportKindSchema, {\n\t\t\t\tmetavar: 'TRANSPORT',\n\t\t\t\tplaceholder: 'http',\n\t\t\t}),\n\t\t),\n\t\t{\n\t\t\thttp: createHttpTransportParser(),\n\t\t\t'scoped-stdio': createScopedStdioTransportParser(),\n\t\t},\n\t);\n\treturn map(transportSelectionParser, ([, transport]): ToolPortalCliTransport => transport);\n}\n\nfunction createInputJsonOption(): Parser<'sync', string> {\n\treturn option('--input-json', createInputJsonParser());\n}\n\nfunction createCallCommand(): Parser<'sync', ToolPortalCliArguments> {\n\treturn command(\n\t\t'call',\n\t\tmap(\n\t\t\tobject({\n\t\t\t\tapprovalTokenEnvironmentName: optional(\n\t\t\t\t\toption('--approval-token-env', createEnvironmentVariableNameParser()),\n\t\t\t\t),\n\t\t\t\tinputJson: createInputJsonOption(),\n\t\t\t\ttransport: createTransportParser(),\n\t\t\t}),\n\t\t\t({ approvalTokenEnvironmentName, inputJson, transport }): ToolPortalCliArguments => ({\n\t\t\t\t...(approvalTokenEnvironmentName === undefined ? {} : { approvalTokenEnvironmentName }),\n\t\t\t\tinputJson,\n\t\t\t\toperation: 'call',\n\t\t\t\ttransport,\n\t\t\t}),\n\t\t),\n\t);\n}\n\nfunction createNonCallCommand(\n\toperation: ToolPortalNonCallOperation,\n): Parser<'sync', ToolPortalCliArguments> {\n\treturn command(\n\t\toperation,\n\t\tmap(\n\t\t\tobject({\n\t\t\t\tinputJson: createInputJsonOption(),\n\t\t\t\ttransport: createTransportParser(),\n\t\t\t}),\n\t\t\t({ inputJson, transport }): ToolPortalCliArguments => ({\n\t\t\t\tinputJson,\n\t\t\t\toperation,\n\t\t\t\ttransport,\n\t\t\t}),\n\t\t),\n\t);\n}\n\nexport const toolPortalCliParser: Parser<'sync', ToolPortalCliArguments> = or(\n\tcreateNonCallCommand('artifact-read'),\n\tcreateCallCommand(),\n\tcreateNonCallCommand('describe'),\n\tcreateNonCallCommand('list'),\n\tcreateNonCallCommand('search'),\n);\n\ntype ToolPortalCliRunnerSignal = Exclude<ToolPortalCliParseResult, { readonly kind: 'parsed' }>;\n\nclass ToolPortalCliRunnerSignalError extends Error {\n\treadonly signal: ToolPortalCliRunnerSignal;\n\n\tconstructor(signal: ToolPortalCliRunnerSignal) {\n\t\tsuper(`Tool Portal CLI runner signal: ${signal.kind}`);\n\t\tthis.signal = signal;\n\t}\n}\n\nfunction writeOutput(write: ToolPortalCliParserIo['stdout'], text: string): void {\n\twrite.write(text.endsWith('\\n') ? text : `${text}\\n`);\n}\n\nfunction createRunOptions(io: ToolPortalCliParserIo): RunOptions<never, never> {\n\treturn {\n\t\thelp: {\n\t\t\tcommand: true,\n\t\t\toption: { names: ['-h', '--help'] as const },\n\t\t\tonShow: (): never => {\n\t\t\t\tthrow new ToolPortalCliRunnerSignalError({ exitCode: 0, kind: 'help' });\n\t\t\t},\n\t\t},\n\t\tonError: (exitCode: number): never => {\n\t\t\tthrow new ToolPortalCliRunnerSignalError({ exitCode, kind: 'parse-error' });\n\t\t},\n\t\tstderr: (text: string): void => writeOutput(io.stderr, text),\n\t\tstdout: (text: string): void => writeOutput(io.stdout, text),\n\t};\n}\n\nexport function runToolPortalCliParser(\n\targv: readonly string[],\n\tio: ToolPortalCliParserIo,\n): ToolPortalCliParseResult {\n\ttry {\n\t\treturn {\n\t\t\tkind: 'parsed',\n\t\t\tvalue: runParser(toolPortalCliParser, 'tool-portal', argv, createRunOptions(io)),\n\t\t};\n\t} catch (error: unknown) {\n\t\tif (error instanceof ToolPortalCliRunnerSignalError) return error.signal;\n\t\tthrow error;\n\t}\n}\n\nexport function parseToolPortalCliArguments(argv: readonly string[]): ToolPortalCliArguments {\n\tconst result = parseSync(toolPortalCliParser, argv);\n\tif (!result.success) {\n\t\tthrow new Error(formatMessage(result.error));\n\t}\n\treturn result.value;\n}\n","#!/usr/bin/env node\n\nimport { readFile } from 'node:fs/promises';\n\nimport { z } from 'zod';\n\nimport {\n\tPortalArtifactReadRequestSchema,\n\ttype PortalArtifactReadResult,\n} from '../artifact-surface/index.js';\nimport { encodeCanonicalJson } from '../portable-contracts/index.js';\nimport {\n\tPortalCallRequestSchema,\n\tPortalDescribeRequestSchema,\n\tPortalListRequestSchema,\n\tPortalSearchRequestSchema,\n\ttype PortalCallResult,\n\ttype PortalDescribeResult,\n\ttype PortalListResult,\n\ttype PortalSearchResult,\n} from '../portal-call-surface/index.js';\nimport {\n\tToolPortalMcpClient,\n\ttype ToolPortalMcpTransport,\n} from '../tool-portal-mcp-client/index.js';\nimport { createNodeToolPortalMcpTransport } from '../tool-portal-mcp-client/node-tool-portal-mcp-transport.js';\nimport {\n\trunToolPortalCliParser,\n\ttype ToolPortalCliArguments,\n\ttype ToolPortalCliOperation,\n} from './tool-portal-cli-parser.js';\n\nconst canonicalResultGraceAfterInterruptMilliseconds = 250;\nconst ScopedStdioConfigSchema = z\n\t.object({\n\t\targv: z.array(z.string()).max(128),\n\t\texecutable: z.string().min(1),\n\t\tschemaVersion: z.literal(1),\n\t})\n\t.strict();\n\ntype ToolPortalCliInvocationResult =\n\t| { readonly kind: 'artifact-read'; readonly result: PortalArtifactReadResult }\n\t| {\n\t\t\treadonly kind: 'portal';\n\t\t\treadonly result:\n\t\t\t\t| PortalCallResult\n\t\t\t\t| PortalDescribeResult\n\t\t\t\t| PortalListResult\n\t\t\t\t| PortalSearchResult;\n\t  };\n\ninterface ToolPortalCliTransportResult {\n\treadonly authorization: string | undefined;\n\treadonly transport: ToolPortalMcpTransport;\n}\n\nfunction parseHttpEndpoint(endpoint: string): URL {\n\tconst parsedEndpoint = new URL(endpoint);\n\tif (\n\t\t!['http:', 'https:'].includes(parsedEndpoint.protocol) ||\n\t\tparsedEndpoint.username.length > 0 ||\n\t\tparsedEndpoint.password.length > 0 ||\n\t\tparsedEndpoint.hash.length > 0\n\t) {\n\t\tthrow new Error(\n\t\t\t'Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment.',\n\t\t);\n\t}\n\treturn parsedEndpoint;\n}\n\nasync function createCliTransport(\n\targuments_: ToolPortalCliArguments,\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<ToolPortalCliTransportResult> {\n\tif (arguments_.transport.kind === 'http') {\n\t\tconst environmentName = arguments_.transport.authorizationEnvironmentName;\n\t\tconst authorization = environmentName === undefined ? undefined : environment[environmentName];\n\t\tif (authorization === undefined || authorization.length === 0) {\n\t\t\tthrow new Error('The explicit Tool Portal authorization environment variable is unset.');\n\t\t}\n\t\treturn {\n\t\t\tauthorization,\n\t\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\t\tauthorization,\n\t\t\t\tendpoint: parseHttpEndpoint(arguments_.transport.endpoint),\n\t\t\t\tkind: 'http',\n\t\t\t}),\n\t\t};\n\t}\n\n\tconst config = ScopedStdioConfigSchema.parse(\n\t\tJSON.parse(await readFile(arguments_.transport.scopedStdioConfigPath, 'utf8')) as unknown,\n\t);\n\treturn {\n\t\tauthorization: undefined,\n\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\targv: config.argv,\n\t\t\texecutable: config.executable,\n\t\t\tkind: 'scoped-stdio',\n\t\t}),\n\t};\n}\n\nasync function invokePortalOperation(props: {\n\treadonly approvalToken?: string;\n\treadonly client: ToolPortalMcpClient;\n\treadonly operation: ToolPortalCliOperation;\n\treadonly publicRequest: unknown;\n\treadonly signal: AbortSignal;\n}): Promise<ToolPortalCliInvocationResult> {\n\tconst options = {\n\t\tresultGraceAfterAbortMs: canonicalResultGraceAfterInterruptMilliseconds,\n\t\tsignal: props.signal,\n\t};\n\tswitch (props.operation) {\n\t\tcase 'artifact-read':\n\t\t\treturn {\n\t\t\t\tkind: 'artifact-read',\n\t\t\t\tresult: await props.client.artifacts.read(\n\t\t\t\t\tPortalArtifactReadRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'call':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.call(PortalCallRequestSchema.parse(props.publicRequest), {\n\t\t\t\t\t...options,\n\t\t\t\t\t...(props.approvalToken === undefined ? {} : { approvalToken: props.approvalToken }),\n\t\t\t\t}),\n\t\t\t};\n\t\tcase 'describe':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.describe(\n\t\t\t\t\tPortalDescribeRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'list':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.list(\n\t\t\t\t\tPortalListRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'search':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.search(\n\t\t\t\t\tPortalSearchRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t}\n\treturn assertNever(props.operation);\n}\n\nfunction assertNever(value: never): never {\n\tthrow new Error(`Unsupported Tool Portal CLI operation: ${String(value)}.`);\n}\n\nfunction readApprovalToken(\n\targuments_: Extract<ToolPortalCliArguments, { readonly operation: 'call' }>,\n\tenvironment: NodeJS.ProcessEnv,\n): string | undefined {\n\tconst environmentName = arguments_.approvalTokenEnvironmentName;\n\tif (environmentName === undefined) return undefined;\n\tconst approvalToken = environment[environmentName];\n\tif (approvalToken === undefined || approvalToken.length === 0) {\n\t\tthrow new Error('The explicit Tool Portal approval-token environment variable is unset.');\n\t}\n\treturn z.string().min(1).max(16_384).parse(approvalToken);\n}\n\nfunction safeDiagnostic(error: unknown, secrets: readonly string[]): string {\n\tlet message = error instanceof Error ? error.message : String(error);\n\tfor (const secret of secrets) {\n\t\tif (secret.length > 0) message = message.replaceAll(secret, '[redacted]');\n\t}\n\treturn message;\n}\n\nasync function waitForCancellationNotificationFlush(): Promise<void> {\n\tawait new Promise<void>((resolve) => setImmediate(resolve));\n}\n\nasync function runToolPortalCli(\n\targv: readonly string[],\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<number> {\n\tlet authorization: string | undefined;\n\tlet approvalToken: string | undefined;\n\tlet client: ToolPortalMcpClient | undefined;\n\tconst cancellation = new AbortController();\n\tconst interrupt = (): void => cancellation.abort(new Error('Tool Portal CLI interrupted.'));\n\tprocess.once('SIGINT', interrupt);\n\ttry {\n\t\tconst parseResult = runToolPortalCliParser(argv, {\n\t\t\tstderr: process.stderr,\n\t\t\tstdout: process.stdout,\n\t\t});\n\t\tif (parseResult.kind === 'help') return parseResult.exitCode;\n\t\tif (parseResult.kind === 'parse-error') return 2;\n\t\tconst cliArguments = parseResult.value;\n\t\tconst transportResult = await createCliTransport(cliArguments, environment);\n\t\tauthorization = transportResult.authorization;\n\t\tclient = new ToolPortalMcpClient({ transport: transportResult.transport });\n\t\tawait client.connect();\n\t\tconst publicRequest = JSON.parse(cliArguments.inputJson) as unknown;\n\t\tapprovalToken =\n\t\t\tcliArguments.operation === 'call' ? readApprovalToken(cliArguments, environment) : undefined;\n\t\tconst invocation = await invokePortalOperation({\n\t\t\t...(approvalToken === undefined ? {} : { approvalToken }),\n\t\t\tclient,\n\t\t\toperation: cliArguments.operation,\n\t\t\tpublicRequest,\n\t\t\tsignal: cancellation.signal,\n\t\t});\n\t\tprocess.stdout.write(`${encodeCanonicalJson(invocation.result)}\\n`);\n\t\tconst exitCode = invocation.kind === 'artifact-read' || invocation.result.ok ? 0 : 1;\n\t\ttry {\n\t\t\tawait client.close();\n\t\t} catch {\n\t\t\t// A canonical result already returned and remains authoritative after interrupt/close races.\n\t\t}\n\t\tclient = undefined;\n\t\treturn exitCode;\n\t} catch (error: unknown) {\n\t\tif (cancellation.signal.aborted) {\n\t\t\tawait waitForCancellationNotificationFlush();\n\t\t}\n\t\tprocess.stderr.write(\n\t\t\t`tool-portal: ${safeDiagnostic(error, [\n\t\t\t\t...(authorization === undefined ? [] : [authorization]),\n\t\t\t\t...(approvalToken === undefined ? [] : [approvalToken]),\n\t\t\t])}\\n`,\n\t\t);\n\t\treturn 2;\n\t} finally {\n\t\tprocess.removeListener('SIGINT', interrupt);\n\t\tif (client !== undefined) {\n\t\t\ttry {\n\t\t\t\tawait client.close();\n\t\t\t} catch {\n\t\t\t\t// The primary diagnostic and exit class remain authoritative.\n\t\t\t}\n\t\t}\n\t}\n}\n\nprocess.exitCode = await runToolPortalCli(process.argv.slice(2), process.env);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAYwB,EAAE,KAAK;CAAC;CAAiB;CAAQ;CAAY;CAAQ;CAAS,CAAC;AACvF,MAAM,sBAAsB,EAAE,KAAK,CAAC,QAAQ,eAAe,CAAC;AAC5D,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,4BAA4B;AACnF,MAAM,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,KAAK,YAAY,EACpE,SAAS,qDACT,CAAC;AA4CF,SAAS,sCAAsE;CAC9E,OAAO,IAAI,+BAA+B;EACzC,SAAS;EACT,aAAa;EACb,CAAC;;AAGH,SAAS,wBAAwD;CAChE,OAAO,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE;EAC7B,SAAS;EACT,aAAa;EACb,CAAC;;AAGH,SAAS,4BAA8E;CActF,OAAO,IAb4B,OAAO;EACzC,8BAA8B,OAC7B,uBACA,qCAAqC,CACrC;EACD,UAAU,OACT,cACA,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE;GACtB,SAAS;GACT,aAAa;GACb,CAAC,CACF;EACD,CAE0B,GACzB,aAA+C;EAC/C,GAAG;EACH,MAAM;EACN,EACD;;AAGF,SAAS,mCAGP;CAUD,OAAO,IATmC,OAAO,EAChD,uBAAuB,OACtB,kBACA,IAAI,oBAAoB;EACvB,SAAS;EACT,aAAa;EACb,CAAC,CACF,EACD,CAEiC,GAChC,aAAsD;EACtD,GAAG;EACH,MAAM;EACN,EACD;;AAGF,SAAS,wBAAgE;CAcxE,OAAO,IAb0B,YAChC,OACC,eACA,IAAI,qBAAqB;EACxB,SAAS;EACT,aAAa;EACb,CAAC,CACF,EACD;EACC,MAAM,2BAA2B;EACjC,gBAAgB,kCAAkC;EAClD,CAEiC,GAAG,GAAG,eAAuC,UAAU;;AAG3F,SAAS,wBAAgD;CACxD,OAAO,OAAO,gBAAgB,uBAAuB,CAAC;;AAGvD,SAAS,oBAA4D;CACpE,OAAO,QACN,QACA,IACC,OAAO;EACN,8BAA8B,SAC7B,OAAO,wBAAwB,qCAAqC,CAAC,CACrE;EACD,WAAW,uBAAuB;EAClC,WAAW,uBAAuB;EAClC,CAAC,GACD,EAAE,8BAA8B,WAAW,iBAAyC;EACpF,GAAI,iCAAiC,KAAA,IAAY,EAAE,GAAG,EAAE,8BAA8B;EACtF;EACA,WAAW;EACX;EACA,EACD,CACD;;AAGF,SAAS,qBACR,WACyC;CACzC,OAAO,QACN,WACA,IACC,OAAO;EACN,WAAW,uBAAuB;EAClC,WAAW,uBAAuB;EAClC,CAAC,GACD,EAAE,WAAW,iBAAyC;EACtD;EACA;EACA;EACA,EACD,CACD;;AAGF,MAAa,sBAA8D,GAC1E,qBAAqB,gBAAgB,EACrC,mBAAmB,EACnB,qBAAqB,WAAW,EAChC,qBAAqB,OAAO,EAC5B,qBAAqB,SAAS,CAC9B;AAID,IAAM,iCAAN,cAA6C,MAAM;CAClD;CAEA,YAAY,QAAmC;EAC9C,MAAM,kCAAkC,OAAO,OAAO;EACtD,KAAK,SAAS;;;AAIhB,SAAS,YAAY,OAAwC,MAAoB;CAChF,MAAM,MAAM,KAAK,SAAS,KAAK,GAAG,OAAO,GAAG,KAAK,IAAI;;AAGtD,SAAS,iBAAiB,IAAqD;CAC9E,OAAO;EACN,MAAM;GACL,SAAS;GACT,QAAQ,EAAE,OAAO,CAAC,MAAM,SAAS,EAAW;GAC5C,cAAqB;IACpB,MAAM,IAAI,+BAA+B;KAAE,UAAU;KAAG,MAAM;KAAQ,CAAC;;GAExE;EACD,UAAU,aAA4B;GACrC,MAAM,IAAI,+BAA+B;IAAE;IAAU,MAAM;IAAe,CAAC;;EAE5E,SAAS,SAAuB,YAAY,GAAG,QAAQ,KAAK;EAC5D,SAAS,SAAuB,YAAY,GAAG,QAAQ,KAAK;EAC5D;;AAGF,SAAgB,uBACf,MACA,IAC2B;CAC3B,IAAI;EACH,OAAO;GACN,MAAM;GACN,OAAO,UAAU,qBAAqB,eAAe,MAAM,iBAAiB,GAAG,CAAC;GAChF;UACO,OAAgB;EACxB,IAAI,iBAAiB,gCAAgC,OAAO,MAAM;EAClE,MAAM;;;;;ACxMR,MAAM,iDAAiD;AACvD,MAAM,0BAA0B,EAC9B,OAAO;CACP,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI;CAClC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,eAAe,EAAE,QAAQ,EAAE;CAC3B,CAAC,CACD,QAAQ;AAkBV,SAAS,kBAAkB,UAAuB;CACjD,MAAM,iBAAiB,IAAI,IAAI,SAAS;CACxC,IACC,CAAC,CAAC,SAAS,SAAS,CAAC,SAAS,eAAe,SAAS,IACtD,eAAe,SAAS,SAAS,KACjC,eAAe,SAAS,SAAS,KACjC,eAAe,KAAK,SAAS,GAE7B,MAAM,IAAI,MACT,sFACA;CAEF,OAAO;;AAGR,eAAe,mBACd,YACA,aACwC;CACxC,IAAI,WAAW,UAAU,SAAS,QAAQ;EACzC,MAAM,kBAAkB,WAAW,UAAU;EAC7C,MAAM,gBAAgB,oBAAoB,KAAA,IAAY,KAAA,IAAY,YAAY;EAC9E,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,wEAAwE;EAEzF,OAAO;GACN;GACA,WAAW,iCAAiC;IAC3C;IACA,UAAU,kBAAkB,WAAW,UAAU,SAAS;IAC1D,MAAM;IACN,CAAC;GACF;;CAGF,MAAM,SAAS,wBAAwB,MACtC,KAAK,MAAM,MAAM,SAAS,WAAW,UAAU,uBAAuB,OAAO,CAAC,CAC9E;CACD,OAAO;EACN,eAAe,KAAA;EACf,WAAW,iCAAiC;GAC3C,MAAM,OAAO;GACb,YAAY,OAAO;GACnB,MAAM;GACN,CAAC;EACF;;AAGF,eAAe,sBAAsB,OAMM;CAC1C,MAAM,UAAU;EACf,yBAAyB;EACzB,QAAQ,MAAM;EACd;CACD,QAAQ,MAAM,WAAd;EACC,KAAK,iBACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,UAAU,KACpC,gCAAgC,MAAM,MAAM,cAAc,EAC1D,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAAK,wBAAwB,MAAM,MAAM,cAAc,EAAE;IACnF,GAAG;IACH,GAAI,MAAM,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe,MAAM,eAAe;IACnF,CAAC;GACF;EACF,KAAK,YACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,SAC1B,4BAA4B,MAAM,MAAM,cAAc,EACtD,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAC1B,wBAAwB,MAAM,MAAM,cAAc,EAClD,QACA;GACD;EACF,KAAK,UACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,OAC1B,0BAA0B,MAAM,MAAM,cAAc,EACpD,QACA;GACD;;CAEH,OAAO,YAAY,MAAM,UAAU;;AAGpC,SAAS,YAAY,OAAqB;CACzC,MAAM,IAAI,MAAM,0CAA0C,OAAO,MAAM,CAAC,GAAG;;AAG5E,SAAS,kBACR,YACA,aACqB;CACrB,MAAM,kBAAkB,WAAW;CACnC,IAAI,oBAAoB,KAAA,GAAW,OAAO,KAAA;CAC1C,MAAM,gBAAgB,YAAY;CAClC,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,yEAAyE;CAE1F,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,MAAO,CAAC,MAAM,cAAc;;AAG1D,SAAS,eAAe,OAAgB,SAAoC;CAC3E,IAAI,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;CACpE,KAAK,MAAM,UAAU,SACpB,IAAI,OAAO,SAAS,GAAG,UAAU,QAAQ,WAAW,QAAQ,aAAa;CAE1E,OAAO;;AAGR,eAAe,uCAAsD;CACpE,MAAM,IAAI,SAAe,YAAY,aAAa,QAAQ,CAAC;;AAG5D,eAAe,iBACd,MACA,aACkB;CAClB,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,eAAe,IAAI,iBAAiB;CAC1C,MAAM,kBAAwB,aAAa,sBAAM,IAAI,MAAM,+BAA+B,CAAC;CAC3F,QAAQ,KAAK,UAAU,UAAU;CACjC,IAAI;EACH,MAAM,cAAc,uBAAuB,MAAM;GAChD,QAAQ,QAAQ;GAChB,QAAQ,QAAQ;GAChB,CAAC;EACF,IAAI,YAAY,SAAS,QAAQ,OAAO,YAAY;EACpD,IAAI,YAAY,SAAS,eAAe,OAAO;EAC/C,MAAM,eAAe,YAAY;EACjC,MAAM,kBAAkB,MAAM,mBAAmB,cAAc,YAAY;EAC3E,gBAAgB,gBAAgB;EAChC,SAAS,IAAI,oBAAoB,EAAE,WAAW,gBAAgB,WAAW,CAAC;EAC1E,MAAM,OAAO,SAAS;EACtB,MAAM,gBAAgB,KAAK,MAAM,aAAa,UAAU;EACxD,gBACC,aAAa,cAAc,SAAS,kBAAkB,cAAc,YAAY,GAAG,KAAA;EACpF,MAAM,aAAa,MAAM,sBAAsB;GAC9C,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe;GACxD;GACA,WAAW,aAAa;GACxB;GACA,QAAQ,aAAa;GACrB,CAAC;EACF,QAAQ,OAAO,MAAM,GAAG,oBAAoB,WAAW,OAAO,CAAC,IAAI;EACnE,MAAM,WAAW,WAAW,SAAS,mBAAmB,WAAW,OAAO,KAAK,IAAI;EACnF,IAAI;GACH,MAAM,OAAO,OAAO;UACb;EAGR,SAAS,KAAA;EACT,OAAO;UACC,OAAgB;EACxB,IAAI,aAAa,OAAO,SACvB,MAAM,sCAAsC;EAE7C,QAAQ,OAAO,MACd,gBAAgB,eAAe,OAAO,CACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,EACtD,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,CACtD,CAAC,CAAC,IACH;EACD,OAAO;WACE;EACT,QAAQ,eAAe,UAAU,UAAU;EAC3C,IAAI,WAAW,KAAA,GACd,IAAI;GACH,MAAM,OAAO,OAAO;UACb;;;AAOX,QAAQ,WAAW,MAAM,iBAAiB,QAAQ,KAAK,MAAM,EAAE,EAAE,QAAQ,IAAI"}

package/dist/contracts/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as SandboxProcessStartRequest, $n as SandboxShellCommandSchema, $t as SandboxEnvironmentCloseRequest, A as SandboxTerminalResizeResultSchema, An as SANDBOX_MAXIMUM_BINARY_BYTES, At as SandboxFsRenameResultSchema, B as SandboxStreamWriteRequestSchema, Bn as SandboxDirectShellStartRequest, Bt as SandboxExecCancelRequestSchema, C as SandboxTerminalAttachRequest, Cn as BoundedOpaqueIdentifierSchema, Ct as SandboxFsRemoveRequest, D as SandboxTerminalResizeRequest, Dn as NonnegativeSafeIntegerSchema, Dt as SandboxFsRenameRequest, E as SandboxTerminalAttachResultSchema, En as CanonicalBase64Schema, Et as SandboxFsRemoveResultSchema, F as SandboxStreamReadRequest, Fn as SANDBOX_MAXIMUM_PATH_CHARACTERS, Ft as SandboxFsWriteRequest, G as SandboxProcessCancelResult, Gn as SandboxEnvironmentVariableNameSchema, Gt as SandboxExecStartRequestSchema, H as SandboxStreamWriteResultSchema, Hn as SandboxEnvironmentHandle, Ht as SandboxExecCancelResultSchema, I as SandboxStreamReadRequestSchema, In as SANDBOX_MAXIMUM_TEXT_CHARACTERS, It as SandboxFsWriteRequestSchema, J as SandboxProcessLogChunkSchema, Jn as SandboxGuestAbsolutePathSchema, Jt as SandboxExecWaitRequest, K as SandboxProcessCancelResultSchema, Kn as SandboxEnvironmentVariableSchema, Kt as SandboxExecStartResult, L as SandboxStreamReadResult, Ln as SandboxBinaryChunkSchema, Lt as SandboxFsWriteResult, M as SandboxStreamCloseRequestSchema, Mn as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, Mt as SandboxFsStatRequestSchema, N as SandboxStreamCloseResult, Nn as SANDBOX_MAXIMUM_LIST_ITEMS, Nt as SandboxFsStatResult, O as SandboxTerminalResizeRequestSchema, On as PORTABLE_MAXIMUM_SAFE_INTEGER, Ot as SandboxFsRenameRequestSchema, P as SandboxStreamCloseResultSchema, Pn as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, Pt as SandboxFsStatResultSchema, Q as SandboxProcessLogsResultSchema, Qn as SandboxProcessHandleSchema, Qt as SandboxTerminalSizeSchema, R as SandboxStreamReadResultSchema, Rn as SandboxBoundHandle, Rt as SandboxFsWriteResultSchema, S as ManagedAgentProjectionSchema, Sn as BoundedByteCountSchema, St as SandboxFsReadResultSchema, T as SandboxTerminalAttachResult, Tn as BoundedTextSchema, Tt as SandboxFsRemoveResult, U as SandboxProcessCancelRequest, Un as SandboxEnvironmentHandleSchema, Ut as SandboxExecStartModeSchema, V as SandboxStreamWriteResult, Vn as SandboxDirectShellStartRequestSchema, Vt as SandboxExecCancelResult, W as SandboxProcessCancelRequestSchema, Wn as SandboxEnvironmentVariable, Wt as SandboxExecStartRequest, X as SandboxProcessLogsRequestSchema, Xn as SandboxHandleKindSchema, Xt as SandboxExecWaitResult, Y as SandboxProcessLogsRequest, Yn as SandboxGuestPathSchema, Yt as SandboxExecWaitRequestSchema, Z as SandboxProcessLogsResult, Zn as SandboxProcessHandle, Zt as SandboxExecWaitResultSchema, _ as GatewayRuntimeTrustedInvocationRequester, _n as SandboxRetainedResultLookupRequestSchema, _t as SandboxFsMkdirResult, a as GatewayRuntimeFrameworkIdentitySchema, an as SandboxEnvironmentOpenResult, ar as SandboxWorkRelativePathSchema, at as SandboxProcessStatusResultSchema, b as GatewayStablePrincipalDigestSchema, bn as SandboxTerminalOutcome, bt as SandboxFsReadRequestSchema, c as GatewayRuntimeManagedPluginClientKind, cn as SandboxEnvironmentStatusResult, ct as SandboxProcessWaitResult, d as GatewayRuntimeTrustedInvocationContext, dn as SandboxOperationControlResult, dt as SandboxFsListRequest, en as SandboxEnvironmentCloseResult, er as SandboxStreamChannelSchema, et as SandboxProcessStartRequestSchema, f as GatewayRuntimeTrustedInvocationContextSchema, fn as SandboxOperationControlResultSchema, ft as SandboxFsListRequestSchema, g as GatewayRuntimeTrustedInvocationPrincipalSchema, gn as SandboxRetainedResultLookupRequest, gt as SandboxFsMkdirRequestSchema, h as GatewayRuntimeTrustedInvocationPrincipal, hn as SandboxProvenTerminationOutcomeSchema, ht as SandboxFsMkdirRequest, i as GatewayRuntimeFrameworkIdentity, in as SandboxEnvironmentOpenRequestSchema, ir as SandboxTerminalHandleSchema, it as SandboxProcessStatusResult, j as SandboxStreamCloseRequest, jn as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, jt as SandboxFsStatRequest, k as SandboxTerminalResizeResult, kn as PositiveSafeIntegerSchema, kt as SandboxFsRenameResult, l as GatewayRuntimeManagedPluginClientKindSchema, ln as SandboxEnvironmentStatusResultSchema, lt as SandboxProcessWaitResultSchema, m as GatewayRuntimeTrustedInvocationCorrelationSchema, mn as SandboxOperationIdentitySchema, mt as SandboxFsListResultSchema, n as GatewayRuntimeAttachmentMetadata, nn as SandboxEnvironmentHandleRequestSchema, nr as SandboxStreamHandleSchema, nt as SandboxProcessStartResultSchema, o as GatewayRuntimeFrameworkKind, on as SandboxEnvironmentOpenResultSchema, or as Sha256DigestSchema, ot as SandboxProcessWaitRequest, p as GatewayRuntimeTrustedInvocationCorrelation, pn as SandboxOperationIdentity, pt as SandboxFsListResult, q as SandboxProcessHandleRequestSchema, qn as SandboxEnvironmentVariableValueSchema, qt as SandboxExecStartResultSchema, r as GatewayRuntimeAttachmentMetadataSchema, rn as SandboxEnvironmentOpenRequest, rr as SandboxTerminalHandle, rt as SandboxProcessStatusRequest, s as GatewayRuntimeFrameworkKindSchema, sn as SandboxEnvironmentStatusRequest, sr as createSandboxBoundHandleSchema, st as SandboxProcessWaitRequestSchema, t as SANDBOX_METHOD_CONTRACTS, tn as SandboxEnvironmentCloseResultSchema, tr as SandboxStreamHandle, tt as SandboxProcessStartResult, u as GatewayRuntimeProjectionCohortDigestSchema, un as SandboxAmbiguousOutcomeSchema, ut as SandboxFilesystemEntrySchema, v as GatewayRuntimeTrustedInvocationRequesterSchema, vn as SandboxRetainedResultLookupResult, vt as SandboxFsMkdirResultSchema, w as SandboxTerminalAttachRequestSchema, wn as BoundedOperationMillisecondsSchema, wt as SandboxFsRemoveRequestSchema, x as ManagedAgentProjection, xn as SandboxTerminalOutcomeSchema, xt as SandboxFsReadResult, y as GatewayStablePrincipalDigest, yn as SandboxRetainedResultLookupResultSchema, yt as SandboxFsReadRequest, z as SandboxStreamWriteRequest, zn as SandboxBoundHandleSchema, zt as SandboxExecCancelRequest } from "../index-C-NPMMvc.js";
-export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadata, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentity, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKind, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKind, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContext, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelation, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipal, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequester, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigest, GatewayStablePrincipalDigestSchema, ManagedAgentProjection, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandle, SandboxBoundHandleSchema, SandboxDirectShellStartRequest, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseRequest, SandboxEnvironmentCloseResult, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandle, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequest, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResult, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusRequest, SandboxEnvironmentStatusResult, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariable, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequest, SandboxExecCancelRequestSchema, SandboxExecCancelResult, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequest, SandboxExecStartRequestSchema, SandboxExecStartResult, SandboxExecStartResultSchema, SandboxExecWaitRequest, SandboxExecWaitRequestSchema, SandboxExecWaitResult, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequest, SandboxFsListRequestSchema, SandboxFsListResult, SandboxFsListResultSchema, SandboxFsMkdirRequest, SandboxFsMkdirRequestSchema, SandboxFsMkdirResult, SandboxFsMkdirResultSchema, SandboxFsReadRequest, SandboxFsReadRequestSchema, SandboxFsReadResult, SandboxFsReadResultSchema, SandboxFsRemoveRequest, SandboxFsRemoveRequestSchema, SandboxFsRemoveResult, SandboxFsRemoveResultSchema, SandboxFsRenameRequest, SandboxFsRenameRequestSchema, SandboxFsRenameResult, SandboxFsRenameResultSchema, SandboxFsStatRequest, SandboxFsStatRequestSchema, SandboxFsStatResult, SandboxFsStatResultSchema, SandboxFsWriteRequest, SandboxFsWriteRequestSchema, SandboxFsWriteResult, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResult, SandboxOperationControlResultSchema, SandboxOperationIdentity, SandboxOperationIdentitySchema, SandboxProcessCancelRequest, SandboxProcessCancelRequestSchema, SandboxProcessCancelResult, SandboxProcessCancelResultSchema, SandboxProcessHandle, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequest, SandboxProcessLogsRequestSchema, SandboxProcessLogsResult, SandboxProcessLogsResultSchema, SandboxProcessStartRequest, SandboxProcessStartRequestSchema, SandboxProcessStartResult, SandboxProcessStartResultSchema, SandboxProcessStatusRequest, SandboxProcessStatusResult, SandboxProcessStatusResultSchema, SandboxProcessWaitRequest, SandboxProcessWaitRequestSchema, SandboxProcessWaitResult, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequest, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResult, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequest, SandboxStreamCloseRequestSchema, SandboxStreamCloseResult, SandboxStreamCloseResultSchema, SandboxStreamHandle, SandboxStreamHandleSchema, SandboxStreamReadRequest, SandboxStreamReadRequestSchema, SandboxStreamReadResult, SandboxStreamReadResultSchema, SandboxStreamWriteRequest, SandboxStreamWriteRequestSchema, SandboxStreamWriteResult, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequest, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResult, SandboxTerminalAttachResultSchema, SandboxTerminalHandle, SandboxTerminalHandleSchema, SandboxTerminalOutcome, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequest, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResult, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, createSandboxBoundHandleSchema };
+import { $ as SandboxProcessLogsResultSchema, $n as SandboxProcessHandleSchema, $t as SandboxTerminalSizeSchema, A as SandboxTerminalResizeResult, An as PositiveSafeIntegerSchema, At as SandboxFsRenameResult, B as SandboxStreamWriteRequest, Bn as SandboxBoundHandleSchema, Bt as SandboxExecCancelRequest, C as compareUnicodeCodePointStrings, Cn as BoundedByteCountSchema, Ct as SandboxFsReadResultSchema, D as SandboxTerminalAttachResultSchema, Dn as CanonicalBase64Schema, Dt as SandboxFsRemoveResultSchema, E as SandboxTerminalAttachResult, En as BoundedTextSchema, Et as SandboxFsRemoveResult, F as SandboxStreamCloseResultSchema, Fn as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, Ft as SandboxFsStatResultSchema, G as SandboxProcessCancelRequestSchema, Gn as SandboxEnvironmentVariable, Gt as SandboxExecStartRequest, H as SandboxStreamWriteResult, Hn as SandboxDirectShellStartRequestSchema, Ht as SandboxExecCancelResult, I as SandboxStreamReadRequest, In as SANDBOX_MAXIMUM_PATH_CHARACTERS, It as SandboxFsWriteRequest, J as SandboxProcessHandleRequestSchema, Jn as SandboxEnvironmentVariableValueSchema, Jt as SandboxExecStartResultSchema, K as SandboxProcessCancelResult, Kn as SandboxEnvironmentVariableNameSchema, Kt as SandboxExecStartRequestSchema, L as SandboxStreamReadRequestSchema, Ln as SANDBOX_MAXIMUM_TEXT_CHARACTERS, Lt as SandboxFsWriteRequestSchema, M as SandboxStreamCloseRequest, Mn as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, Mt as SandboxFsStatRequest, N as SandboxStreamCloseRequestSchema, Nn as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, Nt as SandboxFsStatRequestSchema, O as SandboxTerminalResizeRequest, On as NonnegativeSafeIntegerSchema, Ot as SandboxFsRenameRequest, P as SandboxStreamCloseResult, Pn as SANDBOX_MAXIMUM_LIST_ITEMS, Pt as SandboxFsStatResult, Q as SandboxProcessLogsResult, Qn as SandboxProcessHandle, Qt as SandboxExecWaitResultSchema, R as SandboxStreamReadResult, Rn as SandboxBinaryChunkSchema, Rt as SandboxFsWriteResult, S as ManagedAgentProjectionSchema, Sn as SandboxTerminalOutcomeSchema, St as SandboxFsReadResult, T as SandboxTerminalAttachRequestSchema, Tn as BoundedOperationMillisecondsSchema, Tt as SandboxFsRemoveRequestSchema, U as SandboxStreamWriteResultSchema, Un as SandboxEnvironmentHandle, Ut as SandboxExecCancelResultSchema, V as SandboxStreamWriteRequestSchema, Vn as SandboxDirectShellStartRequest, Vt as SandboxExecCancelRequestSchema, W as SandboxProcessCancelRequest, Wn as SandboxEnvironmentHandleSchema, Wt as SandboxExecStartModeSchema, X as SandboxProcessLogsRequest, Xn as SandboxGuestPathSchema, Xt as SandboxExecWaitRequestSchema, Y as SandboxProcessLogChunkSchema, Yn as SandboxGuestAbsolutePathSchema, Yt as SandboxExecWaitRequest, Z as SandboxProcessLogsRequestSchema, Zn as SandboxHandleKindSchema, Zt as SandboxExecWaitResult, _ as GatewayRuntimeTrustedInvocationRequester, _n as SandboxRetainedResultLookupRequest, _t as SandboxFsMkdirRequestSchema, a as GatewayRuntimeFrameworkIdentitySchema, an as SandboxEnvironmentOpenRequestSchema, ar as SandboxTerminalHandleSchema, at as SandboxProcessStatusResult, b as GatewayStablePrincipalDigestSchema, bn as SandboxRetainedResultLookupResultSchema, bt as SandboxFsReadRequest, c as GatewayRuntimeManagedPluginClientKind, cn as SandboxEnvironmentStatusRequest, cr as createSandboxBoundHandleSchema, ct as SandboxProcessWaitRequestSchema, d as GatewayRuntimeTrustedInvocationContext, dn as SandboxAmbiguousOutcomeSchema, dt as SandboxFilesystemEntrySchema, en as SandboxEnvironmentCloseRequest, er as SandboxShellCommandSchema, et as SandboxProcessStartRequest, f as GatewayRuntimeTrustedInvocationContextSchema, fn as SandboxOperationControlResult, ft as SandboxFsListRequest, g as GatewayRuntimeTrustedInvocationPrincipalSchema, gn as SandboxProvenTerminationOutcomeSchema, gt as SandboxFsMkdirRequest, h as GatewayRuntimeTrustedInvocationPrincipal, hn as SandboxOperationIdentitySchema, ht as SandboxFsListResultSchema, i as GatewayRuntimeFrameworkIdentity, in as SandboxEnvironmentOpenRequest, ir as SandboxTerminalHandle, it as SandboxProcessStatusRequest, j as SandboxTerminalResizeResultSchema, jn as SANDBOX_MAXIMUM_BINARY_BYTES, jt as SandboxFsRenameResultSchema, k as SandboxTerminalResizeRequestSchema, kn as PORTABLE_MAXIMUM_SAFE_INTEGER, kt as SandboxFsRenameRequestSchema, l as GatewayRuntimeManagedPluginClientKindSchema, ln as SandboxEnvironmentStatusResult, lt as SandboxProcessWaitResult, m as GatewayRuntimeTrustedInvocationCorrelationSchema, mn as SandboxOperationIdentity, mt as SandboxFsListResult, n as GatewayRuntimeAttachmentMetadata, nn as SandboxEnvironmentCloseResultSchema, nr as SandboxStreamHandle, nt as SandboxProcessStartResult, o as GatewayRuntimeFrameworkKind, on as SandboxEnvironmentOpenResult, or as SandboxWorkRelativePathSchema, ot as SandboxProcessStatusResultSchema, p as GatewayRuntimeTrustedInvocationCorrelation, pn as SandboxOperationControlResultSchema, pt as SandboxFsListRequestSchema, q as SandboxProcessCancelResultSchema, qn as SandboxEnvironmentVariableSchema, qt as SandboxExecStartResult, r as GatewayRuntimeAttachmentMetadataSchema, rn as SandboxEnvironmentHandleRequestSchema, rr as SandboxStreamHandleSchema, rt as SandboxProcessStartResultSchema, s as GatewayRuntimeFrameworkKindSchema, sn as SandboxEnvironmentOpenResultSchema, sr as Sha256DigestSchema, st as SandboxProcessWaitRequest, t as SANDBOX_METHOD_CONTRACTS, tn as SandboxEnvironmentCloseResult, tr as SandboxStreamChannelSchema, tt as SandboxProcessStartRequestSchema, u as GatewayRuntimeProjectionCohortDigestSchema, un as SandboxEnvironmentStatusResultSchema, ut as SandboxProcessWaitResultSchema, v as GatewayRuntimeTrustedInvocationRequesterSchema, vn as SandboxRetainedResultLookupRequestSchema, vt as SandboxFsMkdirResult, w as SandboxTerminalAttachRequest, wn as BoundedOpaqueIdentifierSchema, wt as SandboxFsRemoveRequest, x as ManagedAgentProjection, xn as SandboxTerminalOutcome, xt as SandboxFsReadRequestSchema, y as GatewayStablePrincipalDigest, yn as SandboxRetainedResultLookupResult, yt as SandboxFsMkdirResultSchema, z as SandboxStreamReadResultSchema, zn as SandboxBoundHandle, zt as SandboxFsWriteResultSchema } from "../index-C5NhyO2R.js";
+export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadata, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentity, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKind, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKind, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContext, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelation, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipal, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequester, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigest, GatewayStablePrincipalDigestSchema, ManagedAgentProjection, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandle, SandboxBoundHandleSchema, SandboxDirectShellStartRequest, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseRequest, SandboxEnvironmentCloseResult, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandle, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequest, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResult, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusRequest, SandboxEnvironmentStatusResult, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariable, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequest, SandboxExecCancelRequestSchema, SandboxExecCancelResult, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequest, SandboxExecStartRequestSchema, SandboxExecStartResult, SandboxExecStartResultSchema, SandboxExecWaitRequest, SandboxExecWaitRequestSchema, SandboxExecWaitResult, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequest, SandboxFsListRequestSchema, SandboxFsListResult, SandboxFsListResultSchema, SandboxFsMkdirRequest, SandboxFsMkdirRequestSchema, SandboxFsMkdirResult, SandboxFsMkdirResultSchema, SandboxFsReadRequest, SandboxFsReadRequestSchema, SandboxFsReadResult, SandboxFsReadResultSchema, SandboxFsRemoveRequest, SandboxFsRemoveRequestSchema, SandboxFsRemoveResult, SandboxFsRemoveResultSchema, SandboxFsRenameRequest, SandboxFsRenameRequestSchema, SandboxFsRenameResult, SandboxFsRenameResultSchema, SandboxFsStatRequest, SandboxFsStatRequestSchema, SandboxFsStatResult, SandboxFsStatResultSchema, SandboxFsWriteRequest, SandboxFsWriteRequestSchema, SandboxFsWriteResult, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResult, SandboxOperationControlResultSchema, SandboxOperationIdentity, SandboxOperationIdentitySchema, SandboxProcessCancelRequest, SandboxProcessCancelRequestSchema, SandboxProcessCancelResult, SandboxProcessCancelResultSchema, SandboxProcessHandle, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequest, SandboxProcessLogsRequestSchema, SandboxProcessLogsResult, SandboxProcessLogsResultSchema, SandboxProcessStartRequest, SandboxProcessStartRequestSchema, SandboxProcessStartResult, SandboxProcessStartResultSchema, SandboxProcessStatusRequest, SandboxProcessStatusResult, SandboxProcessStatusResultSchema, SandboxProcessWaitRequest, SandboxProcessWaitRequestSchema, SandboxProcessWaitResult, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequest, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResult, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequest, SandboxStreamCloseRequestSchema, SandboxStreamCloseResult, SandboxStreamCloseResultSchema, SandboxStreamHandle, SandboxStreamHandleSchema, SandboxStreamReadRequest, SandboxStreamReadRequestSchema, SandboxStreamReadResult, SandboxStreamReadResultSchema, SandboxStreamWriteRequest, SandboxStreamWriteRequestSchema, SandboxStreamWriteResult, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequest, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResult, SandboxTerminalAttachResultSchema, SandboxTerminalHandle, SandboxTerminalHandleSchema, SandboxTerminalOutcome, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequest, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResult, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, compareUnicodeCodePointStrings, createSandboxBoundHandleSchema };

package/dist/contracts/index.js

@@ -1,2 +1,2 @@
-import { $ as SandboxExecStartResultSchema, A as SandboxProcessStartResultSchema, At as SandboxBinaryChunkSchema, B as SandboxFsReadResultSchema, Bt as SandboxProcessHandleSchema, C as SandboxProcessCancelRequestSchema, Ct as SANDBOX_MAXIMUM_BINARY_BYTES, D as SandboxProcessLogsRequestSchema, Dt as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, E as SandboxProcessLogChunkSchema, Et as SANDBOX_MAXIMUM_LIST_ITEMS, F as SandboxFsListRequestSchema, Ft as SandboxEnvironmentVariableSchema, G as SandboxFsStatRequestSchema, Gt as SandboxWorkRelativePathSchema, H as SandboxFsRemoveResultSchema, Ht as SandboxStreamChannelSchema, I as SandboxFsListResultSchema, It as SandboxEnvironmentVariableValueSchema, J as SandboxFsWriteResultSchema, K as SandboxFsStatResultSchema, Kt as Sha256DigestSchema, L as SandboxFsMkdirRequestSchema, Lt as SandboxGuestAbsolutePathSchema, M as SandboxProcessWaitRequestSchema, Mt as SandboxDirectShellStartRequestSchema, N as SandboxProcessWaitResultSchema, Nt as SandboxEnvironmentHandleSchema, O as SandboxProcessLogsResultSchema, Ot as SANDBOX_MAXIMUM_PATH_CHARACTERS, P as SandboxFilesystemEntrySchema, Pt as SandboxEnvironmentVariableNameSchema, Q as SandboxExecStartRequestSchema, R as SandboxFsMkdirResultSchema, Rt as SandboxGuestPathSchema, S as SandboxStreamWriteResultSchema, St as PositiveSafeIntegerSchema, T as SandboxProcessHandleRequestSchema, Tt as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, U as SandboxFsRenameRequestSchema, Ut as SandboxStreamHandleSchema, V as SandboxFsRemoveRequestSchema, Vt as SandboxShellCommandSchema, W as SandboxFsRenameResultSchema, Wt as SandboxTerminalHandleSchema, X as SandboxExecCancelResultSchema, Y as SandboxExecCancelRequestSchema, Z as SandboxExecStartModeSchema, _ as SandboxStreamCloseRequestSchema, _t as BoundedOperationMillisecondsSchema, a as GatewayRuntimeManagedPluginClientKindSchema, at as SandboxEnvironmentOpenRequestSchema, b as SandboxStreamReadResultSchema, bt as NonnegativeSafeIntegerSchema, c as GatewayRuntimeTrustedInvocationCorrelationSchema, ct as SandboxAmbiguousOutcomeSchema, d as GatewayStablePrincipalDigestSchema, dt as SandboxProvenTerminationOutcomeSchema, et as SandboxExecWaitRequestSchema, f as ManagedAgentProjectionSchema, ft as SandboxRetainedResultLookupRequestSchema, g as SandboxTerminalResizeResultSchema, gt as BoundedOpaqueIdentifierSchema, h as SandboxTerminalResizeRequestSchema, ht as BoundedByteCountSchema, i as GatewayRuntimeFrameworkKindSchema, it as SandboxEnvironmentHandleRequestSchema, j as SandboxProcessStatusResultSchema, jt as SandboxBoundHandleSchema, k as SandboxProcessStartRequestSchema, kt as SANDBOX_MAXIMUM_TEXT_CHARACTERS, l as GatewayRuntimeTrustedInvocationPrincipalSchema, lt as SandboxOperationControlResultSchema, m as SandboxTerminalAttachResultSchema, mt as SandboxTerminalOutcomeSchema, n as GatewayRuntimeAttachmentMetadataSchema, nt as SandboxTerminalSizeSchema, o as GatewayRuntimeProjectionCohortDigestSchema, ot as SandboxEnvironmentOpenResultSchema, p as SandboxTerminalAttachRequestSchema, pt as SandboxRetainedResultLookupResultSchema, q as SandboxFsWriteRequestSchema, qt as createSandboxBoundHandleSchema, r as GatewayRuntimeFrameworkIdentitySchema, rt as SandboxEnvironmentCloseResultSchema, s as GatewayRuntimeTrustedInvocationContextSchema, st as SandboxEnvironmentStatusResultSchema, t as SANDBOX_METHOD_CONTRACTS, tt as SandboxExecWaitResultSchema, u as GatewayRuntimeTrustedInvocationRequesterSchema, ut as SandboxOperationIdentitySchema, v as SandboxStreamCloseResultSchema, vt as BoundedTextSchema, w as SandboxProcessCancelResultSchema, wt as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, x as SandboxStreamWriteRequestSchema, xt as PORTABLE_MAXIMUM_SAFE_INTEGER, y as SandboxStreamReadRequestSchema, yt as CanonicalBase64Schema, z as SandboxFsReadRequestSchema, zt as SandboxHandleKindSchema } from "../contracts-RgGW0RX2.js";
-export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigestSchema, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandleSchema, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequestSchema, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequestSchema, SandboxExecStartResultSchema, SandboxExecWaitRequestSchema, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequestSchema, SandboxFsListResultSchema, SandboxFsMkdirRequestSchema, SandboxFsMkdirResultSchema, SandboxFsReadRequestSchema, SandboxFsReadResultSchema, SandboxFsRemoveRequestSchema, SandboxFsRemoveResultSchema, SandboxFsRenameRequestSchema, SandboxFsRenameResultSchema, SandboxFsStatRequestSchema, SandboxFsStatResultSchema, SandboxFsWriteRequestSchema, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResultSchema, SandboxOperationIdentitySchema, SandboxProcessCancelRequestSchema, SandboxProcessCancelResultSchema, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequestSchema, SandboxProcessLogsResultSchema, SandboxProcessStartRequestSchema, SandboxProcessStartResultSchema, SandboxProcessStatusResultSchema, SandboxProcessWaitRequestSchema, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequestSchema, SandboxStreamCloseResultSchema, SandboxStreamHandleSchema, SandboxStreamReadRequestSchema, SandboxStreamReadResultSchema, SandboxStreamWriteRequestSchema, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResultSchema, SandboxTerminalHandleSchema, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, createSandboxBoundHandleSchema };
+import { $ as SandboxExecStartRequestSchema, A as SandboxProcessStartRequestSchema, At as SANDBOX_MAXIMUM_TEXT_CHARACTERS, B as SandboxFsReadRequestSchema, Bt as SandboxHandleKindSchema, C as SandboxStreamWriteResultSchema, Ct as PositiveSafeIntegerSchema, D as SandboxProcessLogChunkSchema, Dt as SANDBOX_MAXIMUM_LIST_ITEMS, E as SandboxProcessHandleRequestSchema, Et as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, F as SandboxFilesystemEntrySchema, Ft as SandboxEnvironmentVariableNameSchema, G as SandboxFsRenameResultSchema, Gt as SandboxTerminalHandleSchema, H as SandboxFsRemoveRequestSchema, Ht as SandboxShellCommandSchema, I as SandboxFsListRequestSchema, It as SandboxEnvironmentVariableSchema, J as SandboxFsWriteRequestSchema, Jt as createSandboxBoundHandleSchema, K as SandboxFsStatRequestSchema, Kt as SandboxWorkRelativePathSchema, L as SandboxFsListResultSchema, Lt as SandboxEnvironmentVariableValueSchema, M as SandboxProcessStatusResultSchema, Mt as SandboxBoundHandleSchema, N as SandboxProcessWaitRequestSchema, Nt as SandboxDirectShellStartRequestSchema, O as SandboxProcessLogsRequestSchema, Ot as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, P as SandboxProcessWaitResultSchema, Pt as SandboxEnvironmentHandleSchema, Q as SandboxExecStartModeSchema, R as SandboxFsMkdirRequestSchema, Rt as SandboxGuestAbsolutePathSchema, S as SandboxStreamWriteRequestSchema, St as PORTABLE_MAXIMUM_SAFE_INTEGER, T as SandboxProcessCancelResultSchema, Tt as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, U as SandboxFsRemoveResultSchema, Ut as SandboxStreamChannelSchema, V as SandboxFsReadResultSchema, Vt as SandboxProcessHandleSchema, W as SandboxFsRenameRequestSchema, Wt as SandboxStreamHandleSchema, X as SandboxExecCancelRequestSchema, Y as SandboxFsWriteResultSchema, Z as SandboxExecCancelResultSchema, _ as SandboxTerminalResizeResultSchema, _t as BoundedOpaqueIdentifierSchema, a as GatewayRuntimeManagedPluginClientKindSchema, at as SandboxEnvironmentHandleRequestSchema, b as SandboxStreamReadRequestSchema, bt as CanonicalBase64Schema, c as GatewayRuntimeTrustedInvocationCorrelationSchema, ct as SandboxEnvironmentStatusResultSchema, d as GatewayStablePrincipalDigestSchema, dt as SandboxOperationIdentitySchema, et as SandboxExecStartResultSchema, f as ManagedAgentProjectionSchema, ft as SandboxProvenTerminationOutcomeSchema, g as SandboxTerminalResizeRequestSchema, gt as BoundedByteCountSchema, h as SandboxTerminalAttachResultSchema, ht as SandboxTerminalOutcomeSchema, i as GatewayRuntimeFrameworkKindSchema, it as SandboxEnvironmentCloseResultSchema, j as SandboxProcessStartResultSchema, jt as SandboxBinaryChunkSchema, k as SandboxProcessLogsResultSchema, kt as SANDBOX_MAXIMUM_PATH_CHARACTERS, l as GatewayRuntimeTrustedInvocationPrincipalSchema, lt as SandboxAmbiguousOutcomeSchema, m as SandboxTerminalAttachRequestSchema, mt as SandboxRetainedResultLookupResultSchema, n as GatewayRuntimeAttachmentMetadataSchema, nt as SandboxExecWaitResultSchema, o as GatewayRuntimeProjectionCohortDigestSchema, ot as SandboxEnvironmentOpenRequestSchema, p as compareUnicodeCodePointStrings, pt as SandboxRetainedResultLookupRequestSchema, q as SandboxFsStatResultSchema, qt as Sha256DigestSchema, r as GatewayRuntimeFrameworkIdentitySchema, rt as SandboxTerminalSizeSchema, s as GatewayRuntimeTrustedInvocationContextSchema, st as SandboxEnvironmentOpenResultSchema, t as SANDBOX_METHOD_CONTRACTS, tt as SandboxExecWaitRequestSchema, u as GatewayRuntimeTrustedInvocationRequesterSchema, ut as SandboxOperationControlResultSchema, v as SandboxStreamCloseRequestSchema, vt as BoundedOperationMillisecondsSchema, w as SandboxProcessCancelRequestSchema, wt as SANDBOX_MAXIMUM_BINARY_BYTES, x as SandboxStreamReadResultSchema, xt as NonnegativeSafeIntegerSchema, y as SandboxStreamCloseResultSchema, yt as BoundedTextSchema, z as SandboxFsMkdirResultSchema, zt as SandboxGuestPathSchema } from "../contracts-3pjrcMjD.js";
+export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigestSchema, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandleSchema, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequestSchema, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequestSchema, SandboxExecStartResultSchema, SandboxExecWaitRequestSchema, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequestSchema, SandboxFsListResultSchema, SandboxFsMkdirRequestSchema, SandboxFsMkdirResultSchema, SandboxFsReadRequestSchema, SandboxFsReadResultSchema, SandboxFsRemoveRequestSchema, SandboxFsRemoveResultSchema, SandboxFsRenameRequestSchema, SandboxFsRenameResultSchema, SandboxFsStatRequestSchema, SandboxFsStatResultSchema, SandboxFsWriteRequestSchema, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResultSchema, SandboxOperationIdentitySchema, SandboxProcessCancelRequestSchema, SandboxProcessCancelResultSchema, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequestSchema, SandboxProcessLogsResultSchema, SandboxProcessStartRequestSchema, SandboxProcessStartResultSchema, SandboxProcessStatusResultSchema, SandboxProcessWaitRequestSchema, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequestSchema, SandboxStreamCloseResultSchema, SandboxStreamHandleSchema, SandboxStreamReadRequestSchema, SandboxStreamReadResultSchema, SandboxStreamWriteRequestSchema, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResultSchema, SandboxTerminalHandleSchema, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, compareUnicodeCodePointStrings, createSandboxBoundHandleSchema };

package/dist/{contracts-RgGW0RX2.js → contracts-3pjrcMjD.js}

@@ -1,4 +1,7 @@
-import { n as withPortableSuperRefinement } from "./portable-refinement-authoring-ZSmR-amG.js";
+import { n as withPortableSuperRefinement } from "./portable-refinement-authoring-CvlKRs_Z.js";
+import "./request-id-schema-DGLLX-tp.js";
+import { r as NamespaceNameSchema } from "./capability-reference-schema-K7qXJgEa.js";
+import "./json-value-schema-BGfMDOGA.js";
 import { z } from "zod";
 //#region src/contracts/contract-foundations.ts
 const PORTABLE_MAXIMUM_SAFE_INTEGER = Number.MAX_SAFE_INTEGER;
@@ -449,6 +452,17 @@ const SandboxTerminalResizeResultSchema = z.object({
 }).strict();
 //#endregion
 //#region src/contracts/trusted-context-contracts.ts
+function compareUnicodeCodePointStrings(left, right) {
+	const leftCodePoints = Array.from(left, (character) => character.codePointAt(0) ?? 0);
+	const rightCodePoints = Array.from(right, (character) => character.codePointAt(0) ?? 0);
+	const sharedLength = Math.min(leftCodePoints.length, rightCodePoints.length);
+	for (let index = 0; index < sharedLength; index += 1) {
+		const leftCodePoint = leftCodePoints[index] ?? 0;
+		const rightCodePoint = rightCodePoints[index] ?? 0;
+		if (leftCodePoint !== rightCodePoint) return leftCodePoint - rightCodePoint;
+	}
+	return leftCodePoints.length - rightCodePoints.length;
+}
 const GatewayRuntimeFrameworkKindSchema = z.enum(["openclaw", "hermes"]);
 const GatewayRuntimeManagedPluginClientKindSchema = z.enum(["openclaw-managed-plugin", "hermes-managed-plugin"]);
 const GatewayRuntimeFrameworkIdentitySchema = z.discriminatedUnion("kind", [z.object({
@@ -459,12 +473,29 @@ const GatewayRuntimeFrameworkIdentitySchema = z.discriminatedUnion("kind", [z.ob
 	profileName: BoundedOpaqueIdentifierSchema
 }).strict()]).readonly();
 const GatewayRuntimeProjectionCohortDigestSchema = z.string().regex(/^projection-cohort:[a-f0-9]{64}$/u);
-const ManagedAgentProjectionSchema = z.object({
-	agentId: BoundedOpaqueIdentifierSchema,
-	frameworkIdentity: GatewayRuntimeFrameworkIdentitySchema,
-	profileAssignmentRevision: BoundedOpaqueIdentifierSchema,
-	toolPortalProfileId: BoundedOpaqueIdentifierSchema
-}).strict().readonly();
+const ManagedAgentProjectionSchema = withPortableSuperRefinement({
+	refinement: (projection, context) => {
+		if (new Set(projection.toolPortalNamespaceNames).size !== projection.toolPortalNamespaceNames.length) context.addIssue({
+			code: "custom",
+			message: "Managed Agent Projection Tool Portal namespace names must be unique.",
+			path: ["toolPortalNamespaceNames"]
+		});
+		const sortedNamespaceNames = [...projection.toolPortalNamespaceNames].toSorted(compareUnicodeCodePointStrings);
+		if (projection.toolPortalNamespaceNames.some((namespaceName, index) => namespaceName !== sortedNamespaceNames[index])) context.addIssue({
+			code: "custom",
+			message: "Managed Agent Projection Tool Portal namespace names must be sorted.",
+			path: ["toolPortalNamespaceNames"]
+		});
+	},
+	refinementIdentity: "gateway.managed-agent-projection.namespace-names",
+	schema: z.object({
+		agentId: BoundedOpaqueIdentifierSchema,
+		frameworkIdentity: GatewayRuntimeFrameworkIdentitySchema,
+		profileAssignmentRevision: BoundedOpaqueIdentifierSchema,
+		toolPortalNamespaceNames: z.array(NamespaceNameSchema).readonly(),
+		toolPortalProfileId: BoundedOpaqueIdentifierSchema
+	}).strict()
+}).readonly();
 const GatewayRuntimeAttachmentMetadataSchema = withPortableSuperRefinement({
 	refinement: (metadata, context) => {
 		if (new Set(metadata.configuredAgentIds).size !== metadata.configuredAgentIds.length) context.addIssue({
@@ -606,6 +637,6 @@ const SANDBOX_METHOD_CONTRACTS = {
 	}
 };
 //#endregion
-export { SandboxExecStartResultSchema as $, SandboxProcessStartResultSchema as A, SandboxBinaryChunkSchema as At, SandboxFsReadResultSchema as B, SandboxProcessHandleSchema as Bt, SandboxProcessCancelRequestSchema as C, SANDBOX_MAXIMUM_BINARY_BYTES as Ct, SandboxProcessLogsRequestSchema as D, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS as Dt, SandboxProcessLogChunkSchema as E, SANDBOX_MAXIMUM_LIST_ITEMS as Et, SandboxFsListRequestSchema as F, SandboxEnvironmentVariableSchema as Ft, SandboxFsStatRequestSchema as G, SandboxWorkRelativePathSchema as Gt, SandboxFsRemoveResultSchema as H, SandboxStreamChannelSchema as Ht, SandboxFsListResultSchema as I, SandboxEnvironmentVariableValueSchema as It, SandboxFsWriteResultSchema as J, SandboxFsStatResultSchema as K, Sha256DigestSchema as Kt, SandboxFsMkdirRequestSchema as L, SandboxGuestAbsolutePathSchema as Lt, SandboxProcessWaitRequestSchema as M, SandboxDirectShellStartRequestSchema as Mt, SandboxProcessWaitResultSchema as N, SandboxEnvironmentHandleSchema as Nt, SandboxProcessLogsResultSchema as O, SANDBOX_MAXIMUM_PATH_CHARACTERS as Ot, SandboxFilesystemEntrySchema as P, SandboxEnvironmentVariableNameSchema as Pt, SandboxExecStartRequestSchema as Q, SandboxFsMkdirResultSchema as R, SandboxGuestPathSchema as Rt, SandboxStreamWriteResultSchema as S, PositiveSafeIntegerSchema as St, SandboxProcessHandleRequestSchema as T, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS as Tt, SandboxFsRenameRequestSchema as U, SandboxStreamHandleSchema as Ut, SandboxFsRemoveRequestSchema as V, SandboxShellCommandSchema as Vt, SandboxFsRenameResultSchema as W, SandboxTerminalHandleSchema as Wt, SandboxExecCancelResultSchema as X, SandboxExecCancelRequestSchema as Y, SandboxExecStartModeSchema as Z, SandboxStreamCloseRequestSchema as _, BoundedOperationMillisecondsSchema as _t, GatewayRuntimeManagedPluginClientKindSchema as a, SandboxEnvironmentOpenRequestSchema as at, SandboxStreamReadResultSchema as b, NonnegativeSafeIntegerSchema as bt, GatewayRuntimeTrustedInvocationCorrelationSchema as c, SandboxAmbiguousOutcomeSchema as ct, GatewayStablePrincipalDigestSchema as d, SandboxProvenTerminationOutcomeSchema as dt, SandboxExecWaitRequestSchema as et, ManagedAgentProjectionSchema as f, SandboxRetainedResultLookupRequestSchema as ft, SandboxTerminalResizeResultSchema as g, BoundedOpaqueIdentifierSchema as gt, SandboxTerminalResizeRequestSchema as h, BoundedByteCountSchema as ht, GatewayRuntimeFrameworkKindSchema as i, SandboxEnvironmentHandleRequestSchema as it, SandboxProcessStatusResultSchema as j, SandboxBoundHandleSchema as jt, SandboxProcessStartRequestSchema as k, SANDBOX_MAXIMUM_TEXT_CHARACTERS as kt, GatewayRuntimeTrustedInvocationPrincipalSchema as l, SandboxOperationControlResultSchema as lt, SandboxTerminalAttachResultSchema as m, SandboxTerminalOutcomeSchema as mt, GatewayRuntimeAttachmentMetadataSchema as n, SandboxTerminalSizeSchema as nt, GatewayRuntimeProjectionCohortDigestSchema as o, SandboxEnvironmentOpenResultSchema as ot, SandboxTerminalAttachRequestSchema as p, SandboxRetainedResultLookupResultSchema as pt, SandboxFsWriteRequestSchema as q, createSandboxBoundHandleSchema as qt, GatewayRuntimeFrameworkIdentitySchema as r, SandboxEnvironmentCloseResultSchema as rt, GatewayRuntimeTrustedInvocationContextSchema as s, SandboxEnvironmentStatusResultSchema as st, SANDBOX_METHOD_CONTRACTS as t, SandboxExecWaitResultSchema as tt, GatewayRuntimeTrustedInvocationRequesterSchema as u, SandboxOperationIdentitySchema as ut, SandboxStreamCloseResultSchema as v, BoundedTextSchema as vt, SandboxProcessCancelResultSchema as w, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES as wt, SandboxStreamWriteRequestSchema as x, PORTABLE_MAXIMUM_SAFE_INTEGER as xt, SandboxStreamReadRequestSchema as y, CanonicalBase64Schema as yt, SandboxFsReadRequestSchema as z, SandboxHandleKindSchema as zt };
+export { SandboxExecStartRequestSchema as $, SandboxProcessStartRequestSchema as A, SANDBOX_MAXIMUM_TEXT_CHARACTERS as At, SandboxFsReadRequestSchema as B, SandboxHandleKindSchema as Bt, SandboxStreamWriteResultSchema as C, PositiveSafeIntegerSchema as Ct, SandboxProcessLogChunkSchema as D, SANDBOX_MAXIMUM_LIST_ITEMS as Dt, SandboxProcessHandleRequestSchema as E, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS as Et, SandboxFilesystemEntrySchema as F, SandboxEnvironmentVariableNameSchema as Ft, SandboxFsRenameResultSchema as G, SandboxTerminalHandleSchema as Gt, SandboxFsRemoveRequestSchema as H, SandboxShellCommandSchema as Ht, SandboxFsListRequestSchema as I, SandboxEnvironmentVariableSchema as It, SandboxFsWriteRequestSchema as J, createSandboxBoundHandleSchema as Jt, SandboxFsStatRequestSchema as K, SandboxWorkRelativePathSchema as Kt, SandboxFsListResultSchema as L, SandboxEnvironmentVariableValueSchema as Lt, SandboxProcessStatusResultSchema as M, SandboxBoundHandleSchema as Mt, SandboxProcessWaitRequestSchema as N, SandboxDirectShellStartRequestSchema as Nt, SandboxProcessLogsRequestSchema as O, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS as Ot, SandboxProcessWaitResultSchema as P, SandboxEnvironmentHandleSchema as Pt, SandboxExecStartModeSchema as Q, SandboxFsMkdirRequestSchema as R, SandboxGuestAbsolutePathSchema as Rt, SandboxStreamWriteRequestSchema as S, PORTABLE_MAXIMUM_SAFE_INTEGER as St, SandboxProcessCancelResultSchema as T, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES as Tt, SandboxFsRemoveResultSchema as U, SandboxStreamChannelSchema as Ut, SandboxFsReadResultSchema as V, SandboxProcessHandleSchema as Vt, SandboxFsRenameRequestSchema as W, SandboxStreamHandleSchema as Wt, SandboxExecCancelRequestSchema as X, SandboxFsWriteResultSchema as Y, SandboxExecCancelResultSchema as Z, SandboxTerminalResizeResultSchema as _, BoundedOpaqueIdentifierSchema as _t, GatewayRuntimeManagedPluginClientKindSchema as a, SandboxEnvironmentHandleRequestSchema as at, SandboxStreamReadRequestSchema as b, CanonicalBase64Schema as bt, GatewayRuntimeTrustedInvocationCorrelationSchema as c, SandboxEnvironmentStatusResultSchema as ct, GatewayStablePrincipalDigestSchema as d, SandboxOperationIdentitySchema as dt, SandboxExecStartResultSchema as et, ManagedAgentProjectionSchema as f, SandboxProvenTerminationOutcomeSchema as ft, SandboxTerminalResizeRequestSchema as g, BoundedByteCountSchema as gt, SandboxTerminalAttachResultSchema as h, SandboxTerminalOutcomeSchema as ht, GatewayRuntimeFrameworkKindSchema as i, SandboxEnvironmentCloseResultSchema as it, SandboxProcessStartResultSchema as j, SandboxBinaryChunkSchema as jt, SandboxProcessLogsResultSchema as k, SANDBOX_MAXIMUM_PATH_CHARACTERS as kt, GatewayRuntimeTrustedInvocationPrincipalSchema as l, SandboxAmbiguousOutcomeSchema as lt, SandboxTerminalAttachRequestSchema as m, SandboxRetainedResultLookupResultSchema as mt, GatewayRuntimeAttachmentMetadataSchema as n, SandboxExecWaitResultSchema as nt, GatewayRuntimeProjectionCohortDigestSchema as o, SandboxEnvironmentOpenRequestSchema as ot, compareUnicodeCodePointStrings as p, SandboxRetainedResultLookupRequestSchema as pt, SandboxFsStatResultSchema as q, Sha256DigestSchema as qt, GatewayRuntimeFrameworkIdentitySchema as r, SandboxTerminalSizeSchema as rt, GatewayRuntimeTrustedInvocationContextSchema as s, SandboxEnvironmentOpenResultSchema as st, SANDBOX_METHOD_CONTRACTS as t, SandboxExecWaitRequestSchema as tt, GatewayRuntimeTrustedInvocationRequesterSchema as u, SandboxOperationControlResultSchema as ut, SandboxStreamCloseRequestSchema as v, BoundedOperationMillisecondsSchema as vt, SandboxProcessCancelRequestSchema as w, SANDBOX_MAXIMUM_BINARY_BYTES as wt, SandboxStreamReadResultSchema as x, NonnegativeSafeIntegerSchema as xt, SandboxStreamCloseResultSchema as y, BoundedTextSchema as yt, SandboxFsMkdirResultSchema as z, SandboxGuestPathSchema as zt };
 
-//# sourceMappingURL=contracts-RgGW0RX2.js.map
+//# sourceMappingURL=contracts-3pjrcMjD.js.map