@agent-vm/agent-portal-sdk 0.0.134 → 0.0.138

package/dist/cli/tool-portal.js

@@ -1,109 +1,39 @@
 #!/usr/bin/env node
-import { a as PortalArtifactReadRequestSchema } from "../artifact-surface-BstQxq6b.js";
-import { a as encodeCanonicalJson } from "../portable-contracts-Bca33zVa.js";
-import { r as PortalCallRequestSchema } from "../portal-call-request-schema-Cp6CMGs9.js";
-import { a as PortalListRequestSchema, r as PortalSearchRequestSchema, s as PortalDescribeRequestSchema } from "../portal-call-surface-DjZVquFt.js";
-import { t as ToolPortalMcpClient } from "../tool-portal-mcp-client-DwJF-48Y.js";
-import { t as createNodeToolPortalMcpTransport } from "../node-tool-portal-mcp-transport-Cl2VKbLY.js";
+import { a as PortalArtifactReadRequestSchema } from "../artifact-surface-BIDasG5x.js";
+import { r as PortalCallRequestSchema } from "../portal-call-request-schema-DYxcWijW.js";
+import { a as PortalListRequestSchema, r as PortalSearchRequestSchema, s as PortalDescribeRequestSchema } from "../portal-call-surface-B_oQxm5X.js";
+import { a as encodeCanonicalJson } from "../portable-contracts-C5rtqe-H.js";
+import { t as ToolPortalMcpClient } from "../tool-portal-mcp-client-nMGxqQ-A.js";
+import { t as createNodeToolPortalMcpTransport } from "../node-tool-portal-mcp-transport-CnB8MCW2.js";
 import { z } from "zod";
+import { run } from "@optique/run";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-//#region src/cli/tool-portal.ts
-const OperationSchema = z.enum([
-	"artifact-read",
-	"call",
-	"describe",
-	"list",
-	"search"
-]);
-const TransportKindSchema = z.enum(["http", "scoped-stdio"]);
-const EnvironmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
+import { object, or } from "@optique/core/constructs";
+import { map, optional, withDefault } from "@optique/core/modifiers";
+import { command, constant, option } from "@optique/core/primitives";
+import { zod } from "@optique/zod";
+//#region src/cli/tool-portal-cli-operation.ts
 const canonicalResultGraceAfterInterruptMilliseconds = 250;
-const ScopedStdioConfigSchema = z.object({
+const scopedStdioConfigSchema = z.object({
 	argv: z.array(z.string()).max(128),
 	executable: z.string().min(1),
 	schemaVersion: z.literal(1)
 }).strict();
-function parseNamedOptions(argv) {
-	const namedOptions = /* @__PURE__ */ new Map();
-	for (let index = 1; index < argv.length; index += 2) {
-		const name = argv[index];
-		const value = argv[index + 1];
-		if (name === void 0 || value === void 0 || !name.startsWith("--")) throw new Error("Every Tool Portal CLI option requires one explicit value.");
-		if (namedOptions.has(name)) throw new Error(`Duplicate Tool Portal CLI option: ${name}.`);
-		namedOptions.set(name, value);
-	}
-	return namedOptions;
-}
-function requireNamedOption(namedOptions, name) {
-	const value = namedOptions.get(name);
-	if (value === void 0 || value.length === 0) throw new Error(`Missing required Tool Portal CLI option: ${name}.`);
-	return value;
-}
-function assertExactOptionNames(namedOptions, allowedNames) {
-	for (const name of namedOptions.keys()) if (!allowedNames.has(name)) throw new Error(`Unknown Tool Portal CLI option: ${name}.`);
-}
-function parseCliArguments(argv) {
-	const operation = OperationSchema.parse(argv[0]);
-	const namedOptions = parseNamedOptions(argv);
-	const inputJson = requireNamedOption(namedOptions, "--input-json");
-	const transportKind = TransportKindSchema.parse(requireNamedOption(namedOptions, "--transport"));
-	if (operation !== "call" && namedOptions.has("--approval-token-env")) throw new Error("Tool Portal approval tokens are accepted only for the call operation.");
-	if (transportKind === "http") {
-		assertExactOptionNames(namedOptions, new Set([
-			"--approval-token-env",
-			"--authorization-env",
-			"--endpoint",
-			"--input-json",
-			"--transport"
-		]));
-		return {
-			...namedOptions.has("--approval-token-env") ? { approvalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(requireNamedOption(namedOptions, "--approval-token-env")) } : {},
-			authorizationEnvironmentName: EnvironmentVariableNameSchema.parse(requireNamedOption(namedOptions, "--authorization-env")),
-			endpoint: requireNamedOption(namedOptions, "--endpoint"),
-			inputJson,
-			operation,
-			transportKind
-		};
-	}
-	assertExactOptionNames(namedOptions, new Set([
-		"--approval-token-env",
-		"--input-json",
-		"--stdio-config",
-		"--transport"
-	]));
-	const scopedStdioConfigPath = requireNamedOption(namedOptions, "--stdio-config");
-	if (!path.isAbsolute(scopedStdioConfigPath)) throw new Error("Scoped stdio configuration path must be absolute.");
-	return {
-		...namedOptions.has("--approval-token-env") ? { approvalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(requireNamedOption(namedOptions, "--approval-token-env")) } : {},
-		inputJson,
-		operation,
-		scopedStdioConfigPath,
-		transportKind
-	};
-}
-function parseHttpEndpoint(endpoint) {
-	const parsedEndpoint = new URL(endpoint);
-	if (!["http:", "https:"].includes(parsedEndpoint.protocol) || parsedEndpoint.username.length > 0 || parsedEndpoint.password.length > 0 || parsedEndpoint.hash.length > 0) throw new Error("Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment.");
-	return parsedEndpoint;
-}
-async function createCliTransport(arguments_, environment) {
-	if (arguments_.transportKind === "http") {
-		const environmentName = arguments_.authorizationEnvironmentName;
-		const authorization = environmentName === void 0 ? void 0 : environment[environmentName];
+async function createCliTransport(command, environment) {
+	if (command.transport.kind === "http") {
+		const authorization = environment[command.transport.authorizationEnvironmentName];
 		if (authorization === void 0 || authorization.length === 0) throw new Error("The explicit Tool Portal authorization environment variable is unset.");
-		if (arguments_.endpoint === void 0) throw new Error("Tool Portal HTTP endpoint is required.");
 		return {
 			authorization,
 			transport: createNodeToolPortalMcpTransport({
 				authorization,
-				endpoint: parseHttpEndpoint(arguments_.endpoint),
+				endpoint: new URL(command.transport.endpoint),
 				kind: "http"
 			})
 		};
 	}
-	if (arguments_.scopedStdioConfigPath === void 0) throw new Error("Scoped stdio configuration path is required.");
-	const config = ScopedStdioConfigSchema.parse(JSON.parse(await readFile(arguments_.scopedStdioConfigPath, "utf8")));
+	const config = scopedStdioConfigSchema.parse(JSON.parse(await readFile(command.transport.scopedStdioConfigPath, "utf8")));
 	return {
 		authorization: void 0,
 		transport: createNodeToolPortalMcpTransport({
@@ -143,10 +73,13 @@ async function invokePortalOperation(props) {
 			result: await props.client.search(PortalSearchRequestSchema.parse(props.publicRequest), options)
 		};
 	}
-	throw new Error(`Unsupported Tool Portal CLI operation: ${String(props.operation)}.`);
+	return assertNever$1(props.operation);
+}
+function assertNever$1(value) {
+	throw new Error(`Unsupported Tool Portal CLI operation: ${String(value)}.`);
 }
-function readApprovalToken(arguments_, environment) {
-	const environmentName = arguments_.approvalTokenEnvironmentName;
+function readApprovalToken(command, environment) {
+	const environmentName = command.approvalTokenEnvironmentName;
 	if (environmentName === void 0) return void 0;
 	const approvalToken = environment[environmentName];
 	if (approvalToken === void 0 || approvalToken.length === 0) throw new Error("The explicit Tool Portal approval-token environment variable is unset.");
@@ -160,7 +93,7 @@ function safeDiagnostic(error, secrets) {
 async function waitForCancellationNotificationFlush() {
 	await new Promise((resolve) => setImmediate(resolve));
 }
-async function runToolPortalCli(argv, environment) {
+async function runToolPortalOperation(command, environment) {
 	let authorization;
 	let approvalToken;
 	let client;
@@ -168,17 +101,16 @@ async function runToolPortalCli(argv, environment) {
 	const interrupt = () => cancellation.abort(/* @__PURE__ */ new Error("Tool Portal CLI interrupted."));
 	process.once("SIGINT", interrupt);
 	try {
-		const cliArguments = parseCliArguments(argv);
-		const transportResult = await createCliTransport(cliArguments, environment);
+		const transportResult = await createCliTransport(command, environment);
 		authorization = transportResult.authorization;
 		client = new ToolPortalMcpClient({ transport: transportResult.transport });
 		await client.connect();
-		const publicRequest = JSON.parse(cliArguments.inputJson);
-		approvalToken = cliArguments.operation === "call" ? readApprovalToken(cliArguments, environment) : void 0;
+		const publicRequest = JSON.parse(command.inputJson);
+		approvalToken = command.operation === "call" ? readApprovalToken(command, environment) : void 0;
 		const invocation = await invokePortalOperation({
 			...approvalToken === void 0 ? {} : { approvalToken },
 			client,
-			operation: cliArguments.operation,
+			operation: command.operation,
 			publicRequest,
 			signal: cancellation.signal
 		});
@@ -200,7 +132,125 @@ async function runToolPortalCli(argv, environment) {
 		} catch {}
 	}
 }
-process.exitCode = await runToolPortalCli(process.argv.slice(2), process.env);
+//#endregion
+//#region src/cli/tool-portal-cli-dispatcher.ts
+function assertNever(value) {
+	throw new Error(`Unsupported Tool Portal CLI operation: ${String(value)}.`);
+}
+async function dispatchToolPortalCommand(command, environment, operation = runToolPortalOperation) {
+	switch (command.operation) {
+		case "artifact-read":
+		case "call":
+		case "describe":
+		case "list":
+		case "search": return operation(command, environment);
+		default: return assertNever(command);
+	}
+}
+//#endregion
+//#region src/cli/tool-portal-cli-parser.ts
+const toolPortalTransportKindSchema = z.enum(["http", "scoped-stdio"]);
+const toolPortalHttpTransportKindSchema = toolPortalTransportKindSchema.extract(["http"]);
+const toolPortalScopedStdioTransportKindSchema = toolPortalTransportKindSchema.extract(["scoped-stdio"]);
+const toolPortalInputJsonSchema = z.string().min(1);
+const toolPortalEnvironmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
+const toolPortalOptionalApprovalEnvironmentNameSchema = toolPortalEnvironmentVariableNameSchema.optional();
+const toolPortalHttpEndpointSchema = z.string().min(1).refine((value) => {
+	try {
+		const endpoint = new URL(value);
+		return (endpoint.protocol === "http:" || endpoint.protocol === "https:") && endpoint.username.length === 0 && endpoint.password.length === 0 && endpoint.hash.length === 0;
+	} catch {
+		return false;
+	}
+}, { message: "Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment." });
+const toolPortalScopedStdioConfigPathSchema = z.string().min(1).refine(path.isAbsolute, { message: "Scoped stdio configuration path must be absolute." });
+function projectZodScalarPresence(props) {
+	if (props.schema instanceof z.ZodOptional) {
+		if (props.schema.unwrap() instanceof z.ZodDefault) throw new Error("CLI value schemas must not mix ZodOptional and ZodDefault.");
+		return optional(props.parser);
+	}
+	if (props.schema instanceof z.ZodDefault) {
+		if (props.schema.unwrap() instanceof z.ZodOptional) throw new Error("CLI value schemas must not mix ZodOptional and ZodDefault.");
+		return withDefault(props.parser, props.schema.parse(void 0));
+	}
+	if (props.schema.safeParse(void 0).success) throw new TypeError("CLI value schemas accepting undefined must use ZodOptional or ZodDefault.");
+	return props.parser;
+}
+const toolPortalTransportParser = or(map(object({
+	authorizationEnvironmentName: option("--authorization-env", zod(toolPortalEnvironmentVariableNameSchema, {
+		metavar: "ENV_NAME",
+		placeholder: "TOOL_PORTAL_AUTH"
+	})),
+	endpoint: option("--endpoint", zod(toolPortalHttpEndpointSchema, {
+		metavar: "URL",
+		placeholder: "https://example.test/mcp"
+	})),
+	kind: constant("http"),
+	transportKind: option("--transport", zod(toolPortalHttpTransportKindSchema, {
+		metavar: "TRANSPORT",
+		placeholder: "http"
+	}))
+}), ({ authorizationEnvironmentName, endpoint, kind }) => ({
+	authorizationEnvironmentName,
+	endpoint,
+	kind
+})), map(object({
+	kind: constant("scoped-stdio"),
+	scopedStdioConfigPath: option("--stdio-config", zod(toolPortalScopedStdioConfigPathSchema, {
+		metavar: "PATH",
+		placeholder: "/tmp/tool-portal.json"
+	})),
+	transportKind: option("--transport", zod(toolPortalScopedStdioTransportKindSchema, {
+		metavar: "TRANSPORT",
+		placeholder: "scoped-stdio"
+	}))
+}), ({ kind, scopedStdioConfigPath }) => ({
+	kind,
+	scopedStdioConfigPath
+})));
+function createInputJsonOption() {
+	return option("--input-json", zod(toolPortalInputJsonSchema, {
+		metavar: "JSON",
+		placeholder: "{}"
+	}));
+}
+const callCommandParser = command("call", object({
+	approvalTokenEnvironmentName: projectZodScalarPresence({
+		parser: option("--approval-token-env", zod(toolPortalOptionalApprovalEnvironmentNameSchema, {
+			metavar: "ENV_NAME",
+			placeholder: void 0
+		})),
+		schema: toolPortalOptionalApprovalEnvironmentNameSchema
+	}),
+	inputJson: createInputJsonOption(),
+	operation: constant("call"),
+	transport: toolPortalTransportParser
+}));
+//#endregion
+//#region src/cli/tool-portal.ts
+const command$1 = run(or(command("artifact-read", object({
+	inputJson: createInputJsonOption(),
+	operation: constant("artifact-read"),
+	transport: toolPortalTransportParser
+})), callCommandParser, command("describe", object({
+	inputJson: createInputJsonOption(),
+	operation: constant("describe"),
+	transport: toolPortalTransportParser
+})), command("list", object({
+	inputJson: createInputJsonOption(),
+	operation: constant("list"),
+	transport: toolPortalTransportParser
+})), command("search", object({
+	inputJson: createInputJsonOption(),
+	operation: constant("search"),
+	transport: toolPortalTransportParser
+}))), {
+	errorExitCode: 2,
+	help: "both",
+	programName: "tool-portal",
+	showDefault: true
+});
+process.exitCode = await dispatchToolPortalCommand(command$1, process.env);
 //#endregion
 export {};
 

package/dist/cli/tool-portal.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-portal.js","names":[],"sources":["../../src/cli/tool-portal.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\n\nimport { z } from 'zod';\n\nimport {\n\tPortalArtifactReadRequestSchema,\n\ttype PortalArtifactReadResult,\n} from '../artifact-surface/index.js';\nimport { encodeCanonicalJson } from '../portable-contracts/index.js';\nimport {\n\tPortalCallRequestSchema,\n\tPortalDescribeRequestSchema,\n\tPortalListRequestSchema,\n\tPortalSearchRequestSchema,\n\ttype PortalCallResult,\n\ttype PortalDescribeResult,\n\ttype PortalListResult,\n\ttype PortalSearchResult,\n} from '../portal-call-surface/index.js';\nimport {\n\tToolPortalMcpClient,\n\ttype ToolPortalMcpTransport,\n} from '../tool-portal-mcp-client/index.js';\nimport { createNodeToolPortalMcpTransport } from '../tool-portal-mcp-client/node-tool-portal-mcp-transport.js';\n\nconst OperationSchema = z.enum(['artifact-read', 'call', 'describe', 'list', 'search']);\nconst TransportKindSchema = z.enum(['http', 'scoped-stdio']);\nconst EnvironmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);\nconst canonicalResultGraceAfterInterruptMilliseconds = 250;\nconst ScopedStdioConfigSchema = z\n\t.object({\n\t\targv: z.array(z.string()).max(128),\n\t\texecutable: z.string().min(1),\n\t\tschemaVersion: z.literal(1),\n\t})\n\t.strict();\n\ntype ToolPortalCliOperation = z.infer<typeof OperationSchema>;\ntype ToolPortalCliInvocationResult =\n\t| { readonly kind: 'artifact-read'; readonly result: PortalArtifactReadResult }\n\t| {\n\t\t\treadonly kind: 'portal';\n\t\t\treadonly result:\n\t\t\t\t| PortalCallResult\n\t\t\t\t| PortalDescribeResult\n\t\t\t\t| PortalListResult\n\t\t\t\t| PortalSearchResult;\n\t  };\n\ninterface ToolPortalCliArguments {\n\treadonly approvalTokenEnvironmentName?: string;\n\treadonly authorizationEnvironmentName?: string;\n\treadonly endpoint?: string;\n\treadonly inputJson: string;\n\treadonly operation: ToolPortalCliOperation;\n\treadonly scopedStdioConfigPath?: string;\n\treadonly transportKind: z.infer<typeof TransportKindSchema>;\n}\n\ninterface ToolPortalCliTransportResult {\n\treadonly authorization: string | undefined;\n\treadonly transport: ToolPortalMcpTransport;\n}\n\nfunction parseNamedOptions(argv: readonly string[]): ReadonlyMap<string, string> {\n\tconst namedOptions = new Map<string, string>();\n\tfor (let index = 1; index < argv.length; index += 2) {\n\t\tconst name = argv[index];\n\t\tconst value = argv[index + 1];\n\t\tif (name === undefined || value === undefined || !name.startsWith('--')) {\n\t\t\tthrow new Error('Every Tool Portal CLI option requires one explicit value.');\n\t\t}\n\t\tif (namedOptions.has(name)) {\n\t\t\tthrow new Error(`Duplicate Tool Portal CLI option: ${name}.`);\n\t\t}\n\t\tnamedOptions.set(name, value);\n\t}\n\treturn namedOptions;\n}\n\nfunction requireNamedOption(namedOptions: ReadonlyMap<string, string>, name: string): string {\n\tconst value = namedOptions.get(name);\n\tif (value === undefined || value.length === 0) {\n\t\tthrow new Error(`Missing required Tool Portal CLI option: ${name}.`);\n\t}\n\treturn value;\n}\n\nfunction assertExactOptionNames(\n\tnamedOptions: ReadonlyMap<string, string>,\n\tallowedNames: ReadonlySet<string>,\n): void {\n\tfor (const name of namedOptions.keys()) {\n\t\tif (!allowedNames.has(name)) {\n\t\t\tthrow new Error(`Unknown Tool Portal CLI option: ${name}.`);\n\t\t}\n\t}\n}\n\nfunction parseCliArguments(argv: readonly string[]): ToolPortalCliArguments {\n\tconst operation = OperationSchema.parse(argv[0]);\n\tconst namedOptions = parseNamedOptions(argv);\n\tconst inputJson = requireNamedOption(namedOptions, '--input-json');\n\tconst transportKind = TransportKindSchema.parse(requireNamedOption(namedOptions, '--transport'));\n\tif (operation !== 'call' && namedOptions.has('--approval-token-env')) {\n\t\tthrow new Error('Tool Portal approval tokens are accepted only for the call operation.');\n\t}\n\n\tif (transportKind === 'http') {\n\t\tassertExactOptionNames(\n\t\t\tnamedOptions,\n\t\t\tnew Set([\n\t\t\t\t'--approval-token-env',\n\t\t\t\t'--authorization-env',\n\t\t\t\t'--endpoint',\n\t\t\t\t'--input-json',\n\t\t\t\t'--transport',\n\t\t\t]),\n\t\t);\n\t\treturn {\n\t\t\t...(namedOptions.has('--approval-token-env')\n\t\t\t\t? {\n\t\t\t\t\t\tapprovalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(\n\t\t\t\t\t\t\trequireNamedOption(namedOptions, '--approval-token-env'),\n\t\t\t\t\t\t),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\tauthorizationEnvironmentName: EnvironmentVariableNameSchema.parse(\n\t\t\t\trequireNamedOption(namedOptions, '--authorization-env'),\n\t\t\t),\n\t\t\tendpoint: requireNamedOption(namedOptions, '--endpoint'),\n\t\t\tinputJson,\n\t\t\toperation,\n\t\t\ttransportKind,\n\t\t};\n\t}\n\n\tassertExactOptionNames(\n\t\tnamedOptions,\n\t\tnew Set(['--approval-token-env', '--input-json', '--stdio-config', '--transport']),\n\t);\n\tconst scopedStdioConfigPath = requireNamedOption(namedOptions, '--stdio-config');\n\tif (!path.isAbsolute(scopedStdioConfigPath)) {\n\t\tthrow new Error('Scoped stdio configuration path must be absolute.');\n\t}\n\treturn {\n\t\t...(namedOptions.has('--approval-token-env')\n\t\t\t? {\n\t\t\t\t\tapprovalTokenEnvironmentName: EnvironmentVariableNameSchema.parse(\n\t\t\t\t\t\trequireNamedOption(namedOptions, '--approval-token-env'),\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t\tinputJson,\n\t\toperation,\n\t\tscopedStdioConfigPath,\n\t\ttransportKind,\n\t};\n}\n\nfunction parseHttpEndpoint(endpoint: string): URL {\n\tconst parsedEndpoint = new URL(endpoint);\n\tif (\n\t\t!['http:', 'https:'].includes(parsedEndpoint.protocol) ||\n\t\tparsedEndpoint.username.length > 0 ||\n\t\tparsedEndpoint.password.length > 0 ||\n\t\tparsedEndpoint.hash.length > 0\n\t) {\n\t\tthrow new Error(\n\t\t\t'Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment.',\n\t\t);\n\t}\n\treturn parsedEndpoint;\n}\n\nasync function createCliTransport(\n\targuments_: ToolPortalCliArguments,\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<ToolPortalCliTransportResult> {\n\tif (arguments_.transportKind === 'http') {\n\t\tconst environmentName = arguments_.authorizationEnvironmentName;\n\t\tconst authorization = environmentName === undefined ? undefined : environment[environmentName];\n\t\tif (authorization === undefined || authorization.length === 0) {\n\t\t\tthrow new Error('The explicit Tool Portal authorization environment variable is unset.');\n\t\t}\n\t\tif (arguments_.endpoint === undefined) {\n\t\t\tthrow new Error('Tool Portal HTTP endpoint is required.');\n\t\t}\n\t\treturn {\n\t\t\tauthorization,\n\t\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\t\tauthorization,\n\t\t\t\tendpoint: parseHttpEndpoint(arguments_.endpoint),\n\t\t\t\tkind: 'http',\n\t\t\t}),\n\t\t};\n\t}\n\n\tif (arguments_.scopedStdioConfigPath === undefined) {\n\t\tthrow new Error('Scoped stdio configuration path is required.');\n\t}\n\tconst config = ScopedStdioConfigSchema.parse(\n\t\tJSON.parse(await readFile(arguments_.scopedStdioConfigPath, 'utf8')) as unknown,\n\t);\n\treturn {\n\t\tauthorization: undefined,\n\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\targv: config.argv,\n\t\t\texecutable: config.executable,\n\t\t\tkind: 'scoped-stdio',\n\t\t}),\n\t};\n}\n\nasync function invokePortalOperation(props: {\n\treadonly approvalToken?: string;\n\treadonly client: ToolPortalMcpClient;\n\treadonly operation: ToolPortalCliOperation;\n\treadonly publicRequest: unknown;\n\treadonly signal: AbortSignal;\n}): Promise<ToolPortalCliInvocationResult> {\n\tconst options = {\n\t\tresultGraceAfterAbortMs: canonicalResultGraceAfterInterruptMilliseconds,\n\t\tsignal: props.signal,\n\t};\n\tswitch (props.operation) {\n\t\tcase 'artifact-read':\n\t\t\treturn {\n\t\t\t\tkind: 'artifact-read',\n\t\t\t\tresult: await props.client.artifacts.read(\n\t\t\t\t\tPortalArtifactReadRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'call':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.call(PortalCallRequestSchema.parse(props.publicRequest), {\n\t\t\t\t\t...options,\n\t\t\t\t\t...(props.approvalToken === undefined ? {} : { approvalToken: props.approvalToken }),\n\t\t\t\t}),\n\t\t\t};\n\t\tcase 'describe':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.describe(\n\t\t\t\t\tPortalDescribeRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'list':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.list(\n\t\t\t\t\tPortalListRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'search':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.search(\n\t\t\t\t\tPortalSearchRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t}\n\tthrow new Error(`Unsupported Tool Portal CLI operation: ${String(props.operation)}.`);\n}\n\nfunction readApprovalToken(\n\targuments_: ToolPortalCliArguments,\n\tenvironment: NodeJS.ProcessEnv,\n): string | undefined {\n\tconst environmentName = arguments_.approvalTokenEnvironmentName;\n\tif (environmentName === undefined) return undefined;\n\tconst approvalToken = environment[environmentName];\n\tif (approvalToken === undefined || approvalToken.length === 0) {\n\t\tthrow new Error('The explicit Tool Portal approval-token environment variable is unset.');\n\t}\n\treturn z.string().min(1).max(16_384).parse(approvalToken);\n}\n\nfunction safeDiagnostic(error: unknown, secrets: readonly string[]): string {\n\tlet message = error instanceof Error ? error.message : String(error);\n\tfor (const secret of secrets) {\n\t\tif (secret.length > 0) message = message.replaceAll(secret, '[redacted]');\n\t}\n\treturn message;\n}\n\nasync function waitForCancellationNotificationFlush(): Promise<void> {\n\tawait new Promise<void>((resolve) => setImmediate(resolve));\n}\n\nasync function runToolPortalCli(\n\targv: readonly string[],\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<number> {\n\tlet authorization: string | undefined;\n\tlet approvalToken: string | undefined;\n\tlet client: ToolPortalMcpClient | undefined;\n\tconst cancellation = new AbortController();\n\tconst interrupt = (): void => cancellation.abort(new Error('Tool Portal CLI interrupted.'));\n\tprocess.once('SIGINT', interrupt);\n\ttry {\n\t\tconst cliArguments = parseCliArguments(argv);\n\t\tconst transportResult = await createCliTransport(cliArguments, environment);\n\t\tauthorization = transportResult.authorization;\n\t\tclient = new ToolPortalMcpClient({ transport: transportResult.transport });\n\t\tawait client.connect();\n\t\tconst publicRequest = JSON.parse(cliArguments.inputJson) as unknown;\n\t\tapprovalToken =\n\t\t\tcliArguments.operation === 'call' ? readApprovalToken(cliArguments, environment) : undefined;\n\t\tconst invocation = await invokePortalOperation({\n\t\t\t...(approvalToken === undefined ? {} : { approvalToken }),\n\t\t\tclient,\n\t\t\toperation: cliArguments.operation,\n\t\t\tpublicRequest,\n\t\t\tsignal: cancellation.signal,\n\t\t});\n\t\tprocess.stdout.write(`${encodeCanonicalJson(invocation.result)}\\n`);\n\t\tconst exitCode = invocation.kind === 'artifact-read' || invocation.result.ok ? 0 : 1;\n\t\ttry {\n\t\t\tawait client.close();\n\t\t} catch {\n\t\t\t// A canonical result already returned and remains authoritative after interrupt/close races.\n\t\t}\n\t\tclient = undefined;\n\t\treturn exitCode;\n\t} catch (error: unknown) {\n\t\tif (cancellation.signal.aborted) {\n\t\t\tawait waitForCancellationNotificationFlush();\n\t\t}\n\t\tprocess.stderr.write(\n\t\t\t`tool-portal: ${safeDiagnostic(error, [\n\t\t\t\t...(authorization === undefined ? [] : [authorization]),\n\t\t\t\t...(approvalToken === undefined ? [] : [approvalToken]),\n\t\t\t])}\\n`,\n\t\t);\n\t\treturn 2;\n\t} finally {\n\t\tprocess.removeListener('SIGINT', interrupt);\n\t\tif (client !== undefined) {\n\t\t\ttry {\n\t\t\t\tawait client.close();\n\t\t\t} catch {\n\t\t\t\t// The primary diagnostic and exit class remain authoritative.\n\t\t\t}\n\t\t}\n\t}\n}\n\nprocess.exitCode = await runToolPortalCli(process.argv.slice(2), process.env);\n"],"mappings":";;;;;;;;;;;AA4BA,MAAM,kBAAkB,EAAE,KAAK;CAAC;CAAiB;CAAQ;CAAY;CAAQ;CAAS,CAAC;AACvF,MAAM,sBAAsB,EAAE,KAAK,CAAC,QAAQ,eAAe,CAAC;AAC5D,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,4BAA4B;AACnF,MAAM,iDAAiD;AACvD,MAAM,0BAA0B,EAC9B,OAAO;CACP,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI;CAClC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,eAAe,EAAE,QAAQ,EAAE;CAC3B,CAAC,CACD,QAAQ;AA6BV,SAAS,kBAAkB,MAAsD;CAChF,MAAM,+BAAe,IAAI,KAAqB;CAC9C,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACpD,MAAM,OAAO,KAAK;EAClB,MAAM,QAAQ,KAAK,QAAQ;EAC3B,IAAI,SAAS,KAAA,KAAa,UAAU,KAAA,KAAa,CAAC,KAAK,WAAW,KAAK,EACtE,MAAM,IAAI,MAAM,4DAA4D;EAE7E,IAAI,aAAa,IAAI,KAAK,EACzB,MAAM,IAAI,MAAM,qCAAqC,KAAK,GAAG;EAE9D,aAAa,IAAI,MAAM,MAAM;;CAE9B,OAAO;;AAGR,SAAS,mBAAmB,cAA2C,MAAsB;CAC5F,MAAM,QAAQ,aAAa,IAAI,KAAK;CACpC,IAAI,UAAU,KAAA,KAAa,MAAM,WAAW,GAC3C,MAAM,IAAI,MAAM,4CAA4C,KAAK,GAAG;CAErE,OAAO;;AAGR,SAAS,uBACR,cACA,cACO;CACP,KAAK,MAAM,QAAQ,aAAa,MAAM,EACrC,IAAI,CAAC,aAAa,IAAI,KAAK,EAC1B,MAAM,IAAI,MAAM,mCAAmC,KAAK,GAAG;;AAK9D,SAAS,kBAAkB,MAAiD;CAC3E,MAAM,YAAY,gBAAgB,MAAM,KAAK,GAAG;CAChD,MAAM,eAAe,kBAAkB,KAAK;CAC5C,MAAM,YAAY,mBAAmB,cAAc,eAAe;CAClE,MAAM,gBAAgB,oBAAoB,MAAM,mBAAmB,cAAc,cAAc,CAAC;CAChG,IAAI,cAAc,UAAU,aAAa,IAAI,uBAAuB,EACnE,MAAM,IAAI,MAAM,wEAAwE;CAGzF,IAAI,kBAAkB,QAAQ;EAC7B,uBACC,cACA,IAAI,IAAI;GACP;GACA;GACA;GACA;GACA;GACA,CAAC,CACF;EACD,OAAO;GACN,GAAI,aAAa,IAAI,uBAAuB,GACzC,EACA,8BAA8B,8BAA8B,MAC3D,mBAAmB,cAAc,uBAAuB,CACxD,EACD,GACA,EAAE;GACL,8BAA8B,8BAA8B,MAC3D,mBAAmB,cAAc,sBAAsB,CACvD;GACD,UAAU,mBAAmB,cAAc,aAAa;GACxD;GACA;GACA;GACA;;CAGF,uBACC,cACA,IAAI,IAAI;EAAC;EAAwB;EAAgB;EAAkB;EAAc,CAAC,CAClF;CACD,MAAM,wBAAwB,mBAAmB,cAAc,iBAAiB;CAChF,IAAI,CAAC,KAAK,WAAW,sBAAsB,EAC1C,MAAM,IAAI,MAAM,oDAAoD;CAErE,OAAO;EACN,GAAI,aAAa,IAAI,uBAAuB,GACzC,EACA,8BAA8B,8BAA8B,MAC3D,mBAAmB,cAAc,uBAAuB,CACxD,EACD,GACA,EAAE;EACL;EACA;EACA;EACA;EACA;;AAGF,SAAS,kBAAkB,UAAuB;CACjD,MAAM,iBAAiB,IAAI,IAAI,SAAS;CACxC,IACC,CAAC,CAAC,SAAS,SAAS,CAAC,SAAS,eAAe,SAAS,IACtD,eAAe,SAAS,SAAS,KACjC,eAAe,SAAS,SAAS,KACjC,eAAe,KAAK,SAAS,GAE7B,MAAM,IAAI,MACT,sFACA;CAEF,OAAO;;AAGR,eAAe,mBACd,YACA,aACwC;CACxC,IAAI,WAAW,kBAAkB,QAAQ;EACxC,MAAM,kBAAkB,WAAW;EACnC,MAAM,gBAAgB,oBAAoB,KAAA,IAAY,KAAA,IAAY,YAAY;EAC9E,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,wEAAwE;EAEzF,IAAI,WAAW,aAAa,KAAA,GAC3B,MAAM,IAAI,MAAM,yCAAyC;EAE1D,OAAO;GACN;GACA,WAAW,iCAAiC;IAC3C;IACA,UAAU,kBAAkB,WAAW,SAAS;IAChD,MAAM;IACN,CAAC;GACF;;CAGF,IAAI,WAAW,0BAA0B,KAAA,GACxC,MAAM,IAAI,MAAM,+CAA+C;CAEhE,MAAM,SAAS,wBAAwB,MACtC,KAAK,MAAM,MAAM,SAAS,WAAW,uBAAuB,OAAO,CAAC,CACpE;CACD,OAAO;EACN,eAAe,KAAA;EACf,WAAW,iCAAiC;GAC3C,MAAM,OAAO;GACb,YAAY,OAAO;GACnB,MAAM;GACN,CAAC;EACF;;AAGF,eAAe,sBAAsB,OAMM;CAC1C,MAAM,UAAU;EACf,yBAAyB;EACzB,QAAQ,MAAM;EACd;CACD,QAAQ,MAAM,WAAd;EACC,KAAK,iBACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,UAAU,KACpC,gCAAgC,MAAM,MAAM,cAAc,EAC1D,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAAK,wBAAwB,MAAM,MAAM,cAAc,EAAE;IACnF,GAAG;IACH,GAAI,MAAM,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe,MAAM,eAAe;IACnF,CAAC;GACF;EACF,KAAK,YACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,SAC1B,4BAA4B,MAAM,MAAM,cAAc,EACtD,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAC1B,wBAAwB,MAAM,MAAM,cAAc,EAClD,QACA;GACD;EACF,KAAK,UACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,OAC1B,0BAA0B,MAAM,MAAM,cAAc,EACpD,QACA;GACD;;CAEH,MAAM,IAAI,MAAM,0CAA0C,OAAO,MAAM,UAAU,CAAC,GAAG;;AAGtF,SAAS,kBACR,YACA,aACqB;CACrB,MAAM,kBAAkB,WAAW;CACnC,IAAI,oBAAoB,KAAA,GAAW,OAAO,KAAA;CAC1C,MAAM,gBAAgB,YAAY;CAClC,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,yEAAyE;CAE1F,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,MAAO,CAAC,MAAM,cAAc;;AAG1D,SAAS,eAAe,OAAgB,SAAoC;CAC3E,IAAI,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;CACpE,KAAK,MAAM,UAAU,SACpB,IAAI,OAAO,SAAS,GAAG,UAAU,QAAQ,WAAW,QAAQ,aAAa;CAE1E,OAAO;;AAGR,eAAe,uCAAsD;CACpE,MAAM,IAAI,SAAe,YAAY,aAAa,QAAQ,CAAC;;AAG5D,eAAe,iBACd,MACA,aACkB;CAClB,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,eAAe,IAAI,iBAAiB;CAC1C,MAAM,kBAAwB,aAAa,sBAAM,IAAI,MAAM,+BAA+B,CAAC;CAC3F,QAAQ,KAAK,UAAU,UAAU;CACjC,IAAI;EACH,MAAM,eAAe,kBAAkB,KAAK;EAC5C,MAAM,kBAAkB,MAAM,mBAAmB,cAAc,YAAY;EAC3E,gBAAgB,gBAAgB;EAChC,SAAS,IAAI,oBAAoB,EAAE,WAAW,gBAAgB,WAAW,CAAC;EAC1E,MAAM,OAAO,SAAS;EACtB,MAAM,gBAAgB,KAAK,MAAM,aAAa,UAAU;EACxD,gBACC,aAAa,cAAc,SAAS,kBAAkB,cAAc,YAAY,GAAG,KAAA;EACpF,MAAM,aAAa,MAAM,sBAAsB;GAC9C,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe;GACxD;GACA,WAAW,aAAa;GACxB;GACA,QAAQ,aAAa;GACrB,CAAC;EACF,QAAQ,OAAO,MAAM,GAAG,oBAAoB,WAAW,OAAO,CAAC,IAAI;EACnE,MAAM,WAAW,WAAW,SAAS,mBAAmB,WAAW,OAAO,KAAK,IAAI;EACnF,IAAI;GACH,MAAM,OAAO,OAAO;UACb;EAGR,SAAS,KAAA;EACT,OAAO;UACC,OAAgB;EACxB,IAAI,aAAa,OAAO,SACvB,MAAM,sCAAsC;EAE7C,QAAQ,OAAO,MACd,gBAAgB,eAAe,OAAO,CACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,EACtD,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,CACtD,CAAC,CAAC,IACH;EACD,OAAO;WACE;EACT,QAAQ,eAAe,UAAU,UAAU;EAC3C,IAAI,WAAW,KAAA,GACd,IAAI;GACH,MAAM,OAAO,OAAO;UACb;;;AAOX,QAAQ,WAAW,MAAM,iBAAiB,QAAQ,KAAK,MAAM,EAAE,EAAE,QAAQ,IAAI"}
+{"version":3,"file":"tool-portal.js","names":["assertNever","command"],"sources":["../../src/cli/tool-portal-cli-operation.ts","../../src/cli/tool-portal-cli-dispatcher.ts","../../src/cli/tool-portal-cli-parser.ts","../../src/cli/tool-portal.ts"],"sourcesContent":["import { readFile } from 'node:fs/promises';\n\nimport { z } from 'zod';\n\nimport {\n\tPortalArtifactReadRequestSchema,\n\ttype PortalArtifactReadResult,\n} from '../artifact-surface/index.js';\nimport { encodeCanonicalJson } from '../portable-contracts/index.js';\nimport {\n\tPortalCallRequestSchema,\n\tPortalDescribeRequestSchema,\n\tPortalListRequestSchema,\n\tPortalSearchRequestSchema,\n\ttype PortalCallResult,\n\ttype PortalDescribeResult,\n\ttype PortalListResult,\n\ttype PortalSearchResult,\n} from '../portal-call-surface/index.js';\nimport {\n\tToolPortalMcpClient,\n\ttype ToolPortalMcpTransport,\n} from '../tool-portal-mcp-client/index.js';\nimport { createNodeToolPortalMcpTransport } from '../tool-portal-mcp-client/node-tool-portal-mcp-transport.js';\nimport type { ToolPortalCommand } from './tool-portal-cli-parser.js';\n\nconst canonicalResultGraceAfterInterruptMilliseconds = 250;\nconst scopedStdioConfigSchema = z\n\t.object({\n\t\targv: z.array(z.string()).max(128),\n\t\texecutable: z.string().min(1),\n\t\tschemaVersion: z.literal(1),\n\t})\n\t.strict();\n\ntype ToolPortalCliInvocationResult =\n\t| { readonly kind: 'artifact-read'; readonly result: PortalArtifactReadResult }\n\t| {\n\t\t\treadonly kind: 'portal';\n\t\t\treadonly result:\n\t\t\t\t| PortalCallResult\n\t\t\t\t| PortalDescribeResult\n\t\t\t\t| PortalListResult\n\t\t\t\t| PortalSearchResult;\n\t  };\n\ninterface ToolPortalCliTransportResult {\n\treadonly authorization: string | undefined;\n\treadonly transport: ToolPortalMcpTransport;\n}\n\nasync function createCliTransport(\n\tcommand: ToolPortalCommand,\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<ToolPortalCliTransportResult> {\n\tif (command.transport.kind === 'http') {\n\t\tconst authorization = environment[command.transport.authorizationEnvironmentName];\n\t\tif (authorization === undefined || authorization.length === 0) {\n\t\t\tthrow new Error('The explicit Tool Portal authorization environment variable is unset.');\n\t\t}\n\t\treturn {\n\t\t\tauthorization,\n\t\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\t\tauthorization,\n\t\t\t\tendpoint: new URL(command.transport.endpoint),\n\t\t\t\tkind: 'http',\n\t\t\t}),\n\t\t};\n\t}\n\n\tconst config = scopedStdioConfigSchema.parse(\n\t\tJSON.parse(await readFile(command.transport.scopedStdioConfigPath, 'utf8')) as unknown,\n\t);\n\treturn {\n\t\tauthorization: undefined,\n\t\ttransport: createNodeToolPortalMcpTransport({\n\t\t\targv: config.argv,\n\t\t\texecutable: config.executable,\n\t\t\tkind: 'scoped-stdio',\n\t\t}),\n\t};\n}\n\nasync function invokePortalOperation(props: {\n\treadonly approvalToken?: string;\n\treadonly client: ToolPortalMcpClient;\n\treadonly operation: ToolPortalCommand['operation'];\n\treadonly publicRequest: unknown;\n\treadonly signal: AbortSignal;\n}): Promise<ToolPortalCliInvocationResult> {\n\tconst options = {\n\t\tresultGraceAfterAbortMs: canonicalResultGraceAfterInterruptMilliseconds,\n\t\tsignal: props.signal,\n\t};\n\tswitch (props.operation) {\n\t\tcase 'artifact-read':\n\t\t\treturn {\n\t\t\t\tkind: 'artifact-read',\n\t\t\t\tresult: await props.client.artifacts.read(\n\t\t\t\t\tPortalArtifactReadRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'call':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.call(PortalCallRequestSchema.parse(props.publicRequest), {\n\t\t\t\t\t...options,\n\t\t\t\t\t...(props.approvalToken === undefined ? {} : { approvalToken: props.approvalToken }),\n\t\t\t\t}),\n\t\t\t};\n\t\tcase 'describe':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.describe(\n\t\t\t\t\tPortalDescribeRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'list':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.list(\n\t\t\t\t\tPortalListRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t\tcase 'search':\n\t\t\treturn {\n\t\t\t\tkind: 'portal',\n\t\t\t\tresult: await props.client.search(\n\t\t\t\t\tPortalSearchRequestSchema.parse(props.publicRequest),\n\t\t\t\t\toptions,\n\t\t\t\t),\n\t\t\t};\n\t}\n\treturn assertNever(props.operation);\n}\n\nfunction assertNever(value: never): never {\n\tthrow new Error(`Unsupported Tool Portal CLI operation: ${String(value)}.`);\n}\n\nfunction readApprovalToken(\n\tcommand: Extract<ToolPortalCommand, { readonly operation: 'call' }>,\n\tenvironment: NodeJS.ProcessEnv,\n): string | undefined {\n\tconst environmentName = command.approvalTokenEnvironmentName;\n\tif (environmentName === undefined) return undefined;\n\tconst approvalToken = environment[environmentName];\n\tif (approvalToken === undefined || approvalToken.length === 0) {\n\t\tthrow new Error('The explicit Tool Portal approval-token environment variable is unset.');\n\t}\n\treturn z.string().min(1).max(16_384).parse(approvalToken);\n}\n\nfunction safeDiagnostic(error: unknown, secrets: readonly string[]): string {\n\tlet message = error instanceof Error ? error.message : String(error);\n\tfor (const secret of secrets) {\n\t\tif (secret.length > 0) message = message.replaceAll(secret, '[redacted]');\n\t}\n\treturn message;\n}\n\nasync function waitForCancellationNotificationFlush(): Promise<void> {\n\tawait new Promise<void>((resolve) => setImmediate(resolve));\n}\n\nexport async function runToolPortalOperation(\n\tcommand: ToolPortalCommand,\n\tenvironment: NodeJS.ProcessEnv,\n): Promise<number> {\n\tlet authorization: string | undefined;\n\tlet approvalToken: string | undefined;\n\tlet client: ToolPortalMcpClient | undefined;\n\tconst cancellation = new AbortController();\n\tconst interrupt = (): void => cancellation.abort(new Error('Tool Portal CLI interrupted.'));\n\tprocess.once('SIGINT', interrupt);\n\ttry {\n\t\tconst transportResult = await createCliTransport(command, environment);\n\t\tauthorization = transportResult.authorization;\n\t\tclient = new ToolPortalMcpClient({ transport: transportResult.transport });\n\t\tawait client.connect();\n\t\tconst publicRequest = JSON.parse(command.inputJson) as unknown;\n\t\tapprovalToken =\n\t\t\tcommand.operation === 'call' ? readApprovalToken(command, environment) : undefined;\n\t\tconst invocation = await invokePortalOperation({\n\t\t\t...(approvalToken === undefined ? {} : { approvalToken }),\n\t\t\tclient,\n\t\t\toperation: command.operation,\n\t\t\tpublicRequest,\n\t\t\tsignal: cancellation.signal,\n\t\t});\n\t\tprocess.stdout.write(`${encodeCanonicalJson(invocation.result)}\\n`);\n\t\tconst exitCode = invocation.kind === 'artifact-read' || invocation.result.ok ? 0 : 1;\n\t\ttry {\n\t\t\tawait client.close();\n\t\t} catch {\n\t\t\t// A canonical result already returned and remains authoritative after interrupt/close races.\n\t\t}\n\t\tclient = undefined;\n\t\treturn exitCode;\n\t} catch (error: unknown) {\n\t\tif (cancellation.signal.aborted) await waitForCancellationNotificationFlush();\n\t\tprocess.stderr.write(\n\t\t\t`tool-portal: ${safeDiagnostic(error, [\n\t\t\t\t...(authorization === undefined ? [] : [authorization]),\n\t\t\t\t...(approvalToken === undefined ? [] : [approvalToken]),\n\t\t\t])}\\n`,\n\t\t);\n\t\treturn 2;\n\t} finally {\n\t\tprocess.removeListener('SIGINT', interrupt);\n\t\tif (client !== undefined) {\n\t\t\ttry {\n\t\t\t\tawait client.close();\n\t\t\t} catch {\n\t\t\t\t// The primary diagnostic and exit class remain authoritative.\n\t\t\t}\n\t\t}\n\t}\n}\n","import { runToolPortalOperation } from './tool-portal-cli-operation.js';\nimport type { ToolPortalCommand } from './tool-portal-cli-parser.js';\n\nexport type ToolPortalOperation = (\n\tcommand: ToolPortalCommand,\n\tenvironment: NodeJS.ProcessEnv,\n) => Promise<number>;\n\nfunction assertNever(value: never): never {\n\tthrow new Error(`Unsupported Tool Portal CLI operation: ${String(value)}.`);\n}\n\nexport async function dispatchToolPortalCommand(\n\tcommand: ToolPortalCommand,\n\tenvironment: NodeJS.ProcessEnv,\n\toperation: ToolPortalOperation = runToolPortalOperation,\n): Promise<number> {\n\tswitch (command.operation) {\n\t\tcase 'artifact-read':\n\t\tcase 'call':\n\t\tcase 'describe':\n\t\tcase 'list':\n\t\tcase 'search':\n\t\t\treturn operation(command, environment);\n\t\tdefault:\n\t\t\treturn assertNever(command);\n\t}\n}\n","import path from 'node:path';\n\nimport { object, or } from '@optique/core/constructs';\nimport { map, optional, withDefault } from '@optique/core/modifiers';\nimport type { InferValue, Parser } from '@optique/core/parser';\nimport { command, constant, option } from '@optique/core/primitives';\nimport { zod } from '@optique/zod';\nimport { z } from 'zod';\n\nconst toolPortalTransportKindSchema = z.enum(['http', 'scoped-stdio']);\nconst toolPortalHttpTransportKindSchema = toolPortalTransportKindSchema.extract(['http']);\nconst toolPortalScopedStdioTransportKindSchema = toolPortalTransportKindSchema.extract([\n\t'scoped-stdio',\n]);\nconst toolPortalInputJsonSchema = z.string().min(1);\nconst toolPortalEnvironmentVariableNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);\nconst toolPortalOptionalApprovalEnvironmentNameSchema =\n\ttoolPortalEnvironmentVariableNameSchema.optional();\nconst toolPortalHttpEndpointSchema = z\n\t.string()\n\t.min(1)\n\t.refine(\n\t\t(value): boolean => {\n\t\t\ttry {\n\t\t\t\tconst endpoint = new URL(value);\n\t\t\t\treturn (\n\t\t\t\t\t(endpoint.protocol === 'http:' || endpoint.protocol === 'https:') &&\n\t\t\t\t\tendpoint.username.length === 0 &&\n\t\t\t\t\tendpoint.password.length === 0 &&\n\t\t\t\t\tendpoint.hash.length === 0\n\t\t\t\t);\n\t\t\t} catch {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t},\n\t\t{\n\t\t\tmessage:\n\t\t\t\t'Tool Portal HTTP endpoint must be an HTTP(S) URL without credentials or a fragment.',\n\t\t},\n\t);\nconst toolPortalScopedStdioConfigPathSchema = z.string().min(1).refine(path.isAbsolute, {\n\tmessage: 'Scoped stdio configuration path must be absolute.',\n});\n\ninterface ZodScalarPresenceProps<TSchema extends z.ZodType, TState> {\n\treadonly parser: Parser<'sync', z.infer<TSchema>, TState>;\n\treadonly schema: TSchema;\n}\n\nexport function projectZodScalarPresence<TSchema extends z.ZodType, TState>(\n\tprops: ZodScalarPresenceProps<TSchema, TState>,\n): Parser<'sync', z.infer<TSchema>>;\nexport function projectZodScalarPresence(props: {\n\treadonly parser: Parser;\n\treadonly schema: z.ZodType;\n}): Parser {\n\tif (props.schema instanceof z.ZodOptional) {\n\t\tif (props.schema.unwrap() instanceof z.ZodDefault) {\n\t\t\tthrow new Error('CLI value schemas must not mix ZodOptional and ZodDefault.');\n\t\t}\n\t\treturn optional(props.parser);\n\t}\n\tif (props.schema instanceof z.ZodDefault) {\n\t\tif (props.schema.unwrap() instanceof z.ZodOptional) {\n\t\t\tthrow new Error('CLI value schemas must not mix ZodOptional and ZodDefault.');\n\t\t}\n\t\treturn withDefault(props.parser, props.schema.parse(undefined));\n\t}\n\tif (props.schema.safeParse(undefined).success) {\n\t\tthrow new TypeError(\n\t\t\t'CLI value schemas accepting undefined must use ZodOptional or ZodDefault.',\n\t\t);\n\t}\n\treturn props.parser;\n}\n\nconst toolPortalHttpTransportParser = map(\n\tobject({\n\t\tauthorizationEnvironmentName: option(\n\t\t\t'--authorization-env',\n\t\t\tzod(toolPortalEnvironmentVariableNameSchema, {\n\t\t\t\tmetavar: 'ENV_NAME',\n\t\t\t\tplaceholder: 'TOOL_PORTAL_AUTH',\n\t\t\t}),\n\t\t),\n\t\tendpoint: option(\n\t\t\t'--endpoint',\n\t\t\tzod(toolPortalHttpEndpointSchema, {\n\t\t\t\tmetavar: 'URL',\n\t\t\t\tplaceholder: 'https://example.test/mcp',\n\t\t\t}),\n\t\t),\n\t\tkind: constant('http'),\n\t\ttransportKind: option(\n\t\t\t'--transport',\n\t\t\tzod(toolPortalHttpTransportKindSchema, {\n\t\t\t\tmetavar: 'TRANSPORT',\n\t\t\t\tplaceholder: 'http',\n\t\t\t}),\n\t\t),\n\t}),\n\t({ authorizationEnvironmentName, endpoint, kind }) => ({\n\t\tauthorizationEnvironmentName,\n\t\tendpoint,\n\t\tkind,\n\t}),\n);\n\nconst toolPortalScopedStdioTransportParser = map(\n\tobject({\n\t\tkind: constant('scoped-stdio'),\n\t\tscopedStdioConfigPath: option(\n\t\t\t'--stdio-config',\n\t\t\tzod(toolPortalScopedStdioConfigPathSchema, {\n\t\t\t\tmetavar: 'PATH',\n\t\t\t\tplaceholder: '/tmp/tool-portal.json',\n\t\t\t}),\n\t\t),\n\t\ttransportKind: option(\n\t\t\t'--transport',\n\t\t\tzod(toolPortalScopedStdioTransportKindSchema, {\n\t\t\t\tmetavar: 'TRANSPORT',\n\t\t\t\tplaceholder: 'scoped-stdio',\n\t\t\t}),\n\t\t),\n\t}),\n\t({ kind, scopedStdioConfigPath }) => ({ kind, scopedStdioConfigPath }),\n);\n\nconst toolPortalTransportParser = or(\n\ttoolPortalHttpTransportParser,\n\ttoolPortalScopedStdioTransportParser,\n);\n\nfunction createInputJsonOption(): Parser<'sync', z.infer<typeof toolPortalInputJsonSchema>> {\n\treturn option(\n\t\t'--input-json',\n\t\tzod(toolPortalInputJsonSchema, { metavar: 'JSON', placeholder: '{}' }),\n\t);\n}\n\nconst callCommandParser = command(\n\t'call',\n\tobject({\n\t\tapprovalTokenEnvironmentName: projectZodScalarPresence({\n\t\t\tparser: option(\n\t\t\t\t'--approval-token-env',\n\t\t\t\tzod(toolPortalOptionalApprovalEnvironmentNameSchema, {\n\t\t\t\t\tmetavar: 'ENV_NAME',\n\t\t\t\t\tplaceholder: undefined,\n\t\t\t\t}),\n\t\t\t),\n\t\t\tschema: toolPortalOptionalApprovalEnvironmentNameSchema,\n\t\t}),\n\t\tinputJson: createInputJsonOption(),\n\t\toperation: constant('call'),\n\t\ttransport: toolPortalTransportParser,\n\t}),\n);\n\nconst artifactReadCommandParser = command(\n\t'artifact-read',\n\tobject({\n\t\tinputJson: createInputJsonOption(),\n\t\toperation: constant('artifact-read'),\n\t\ttransport: toolPortalTransportParser,\n\t}),\n);\nconst describeCommandParser = command(\n\t'describe',\n\tobject({\n\t\tinputJson: createInputJsonOption(),\n\t\toperation: constant('describe'),\n\t\ttransport: toolPortalTransportParser,\n\t}),\n);\nconst listCommandParser = command(\n\t'list',\n\tobject({\n\t\tinputJson: createInputJsonOption(),\n\t\toperation: constant('list'),\n\t\ttransport: toolPortalTransportParser,\n\t}),\n);\nconst searchCommandParser = command(\n\t'search',\n\tobject({\n\t\tinputJson: createInputJsonOption(),\n\t\toperation: constant('search'),\n\t\ttransport: toolPortalTransportParser,\n\t}),\n);\n\nexport const toolPortalRootParser = or(\n\tartifactReadCommandParser,\n\tcallCommandParser,\n\tdescribeCommandParser,\n\tlistCommandParser,\n\tsearchCommandParser,\n);\n\nexport type ToolPortalCommand = InferValue<typeof toolPortalRootParser>;\n","#!/usr/bin/env node\n\nimport { run } from '@optique/run';\n\nimport { dispatchToolPortalCommand } from './tool-portal-cli-dispatcher.js';\nimport { toolPortalRootParser } from './tool-portal-cli-parser.js';\n\nconst command = run(toolPortalRootParser, {\n\terrorExitCode: 2,\n\thelp: 'both',\n\tprogramName: 'tool-portal',\n\tshowDefault: true,\n});\n\nprocess.exitCode = await dispatchToolPortalCommand(command, process.env);\n"],"mappings":";;;;;;;;;;;;;;;;AA0BA,MAAM,iDAAiD;AACvD,MAAM,0BAA0B,EAC9B,OAAO;CACP,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI;CAClC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,eAAe,EAAE,QAAQ,EAAE;CAC3B,CAAC,CACD,QAAQ;AAkBV,eAAe,mBACd,SACA,aACwC;CACxC,IAAI,QAAQ,UAAU,SAAS,QAAQ;EACtC,MAAM,gBAAgB,YAAY,QAAQ,UAAU;EACpD,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,wEAAwE;EAEzF,OAAO;GACN;GACA,WAAW,iCAAiC;IAC3C;IACA,UAAU,IAAI,IAAI,QAAQ,UAAU,SAAS;IAC7C,MAAM;IACN,CAAC;GACF;;CAGF,MAAM,SAAS,wBAAwB,MACtC,KAAK,MAAM,MAAM,SAAS,QAAQ,UAAU,uBAAuB,OAAO,CAAC,CAC3E;CACD,OAAO;EACN,eAAe,KAAA;EACf,WAAW,iCAAiC;GAC3C,MAAM,OAAO;GACb,YAAY,OAAO;GACnB,MAAM;GACN,CAAC;EACF;;AAGF,eAAe,sBAAsB,OAMM;CAC1C,MAAM,UAAU;EACf,yBAAyB;EACzB,QAAQ,MAAM;EACd;CACD,QAAQ,MAAM,WAAd;EACC,KAAK,iBACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,UAAU,KACpC,gCAAgC,MAAM,MAAM,cAAc,EAC1D,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAAK,wBAAwB,MAAM,MAAM,cAAc,EAAE;IACnF,GAAG;IACH,GAAI,MAAM,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe,MAAM,eAAe;IACnF,CAAC;GACF;EACF,KAAK,YACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,SAC1B,4BAA4B,MAAM,MAAM,cAAc,EACtD,QACA;GACD;EACF,KAAK,QACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,KAC1B,wBAAwB,MAAM,MAAM,cAAc,EAClD,QACA;GACD;EACF,KAAK,UACJ,OAAO;GACN,MAAM;GACN,QAAQ,MAAM,MAAM,OAAO,OAC1B,0BAA0B,MAAM,MAAM,cAAc,EACpD,QACA;GACD;;CAEH,OAAOA,cAAY,MAAM,UAAU;;AAGpC,SAASA,cAAY,OAAqB;CACzC,MAAM,IAAI,MAAM,0CAA0C,OAAO,MAAM,CAAC,GAAG;;AAG5E,SAAS,kBACR,SACA,aACqB;CACrB,MAAM,kBAAkB,QAAQ;CAChC,IAAI,oBAAoB,KAAA,GAAW,OAAO,KAAA;CAC1C,MAAM,gBAAgB,YAAY;CAClC,IAAI,kBAAkB,KAAA,KAAa,cAAc,WAAW,GAC3D,MAAM,IAAI,MAAM,yEAAyE;CAE1F,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,MAAO,CAAC,MAAM,cAAc;;AAG1D,SAAS,eAAe,OAAgB,SAAoC;CAC3E,IAAI,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;CACpE,KAAK,MAAM,UAAU,SACpB,IAAI,OAAO,SAAS,GAAG,UAAU,QAAQ,WAAW,QAAQ,aAAa;CAE1E,OAAO;;AAGR,eAAe,uCAAsD;CACpE,MAAM,IAAI,SAAe,YAAY,aAAa,QAAQ,CAAC;;AAG5D,eAAsB,uBACrB,SACA,aACkB;CAClB,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,eAAe,IAAI,iBAAiB;CAC1C,MAAM,kBAAwB,aAAa,sBAAM,IAAI,MAAM,+BAA+B,CAAC;CAC3F,QAAQ,KAAK,UAAU,UAAU;CACjC,IAAI;EACH,MAAM,kBAAkB,MAAM,mBAAmB,SAAS,YAAY;EACtE,gBAAgB,gBAAgB;EAChC,SAAS,IAAI,oBAAoB,EAAE,WAAW,gBAAgB,WAAW,CAAC;EAC1E,MAAM,OAAO,SAAS;EACtB,MAAM,gBAAgB,KAAK,MAAM,QAAQ,UAAU;EACnD,gBACC,QAAQ,cAAc,SAAS,kBAAkB,SAAS,YAAY,GAAG,KAAA;EAC1E,MAAM,aAAa,MAAM,sBAAsB;GAC9C,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,EAAE,eAAe;GACxD;GACA,WAAW,QAAQ;GACnB;GACA,QAAQ,aAAa;GACrB,CAAC;EACF,QAAQ,OAAO,MAAM,GAAG,oBAAoB,WAAW,OAAO,CAAC,IAAI;EACnE,MAAM,WAAW,WAAW,SAAS,mBAAmB,WAAW,OAAO,KAAK,IAAI;EACnF,IAAI;GACH,MAAM,OAAO,OAAO;UACb;EAGR,SAAS,KAAA;EACT,OAAO;UACC,OAAgB;EACxB,IAAI,aAAa,OAAO,SAAS,MAAM,sCAAsC;EAC7E,QAAQ,OAAO,MACd,gBAAgB,eAAe,OAAO,CACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,EACtD,GAAI,kBAAkB,KAAA,IAAY,EAAE,GAAG,CAAC,cAAc,CACtD,CAAC,CAAC,IACH;EACD,OAAO;WACE;EACT,QAAQ,eAAe,UAAU,UAAU;EAC3C,IAAI,WAAW,KAAA,GACd,IAAI;GACH,MAAM,OAAO,OAAO;UACb;;;;;AChNX,SAAS,YAAY,OAAqB;CACzC,MAAM,IAAI,MAAM,0CAA0C,OAAO,MAAM,CAAC,GAAG;;AAG5E,eAAsB,0BACrB,SACA,aACA,YAAiC,wBACf;CAClB,QAAQ,QAAQ,WAAhB;EACC,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,OAAO,UAAU,SAAS,YAAY;EACvC,SACC,OAAO,YAAY,QAAQ;;;;;AChB9B,MAAM,gCAAgC,EAAE,KAAK,CAAC,QAAQ,eAAe,CAAC;AACtE,MAAM,oCAAoC,8BAA8B,QAAQ,CAAC,OAAO,CAAC;AACzF,MAAM,2CAA2C,8BAA8B,QAAQ,CACtF,eACA,CAAC;AACF,MAAM,4BAA4B,EAAE,QAAQ,CAAC,IAAI,EAAE;AACnD,MAAM,0CAA0C,EAAE,QAAQ,CAAC,MAAM,4BAA4B;AAC7F,MAAM,kDACL,wCAAwC,UAAU;AACnD,MAAM,+BAA+B,EACnC,QAAQ,CACR,IAAI,EAAE,CACN,QACC,UAAmB;CACnB,IAAI;EACH,MAAM,WAAW,IAAI,IAAI,MAAM;EAC/B,QACE,SAAS,aAAa,WAAW,SAAS,aAAa,aACxD,SAAS,SAAS,WAAW,KAC7B,SAAS,SAAS,WAAW,KAC7B,SAAS,KAAK,WAAW;SAEnB;EACP,OAAO;;GAGT,EACC,SACC,uFACD,CACD;AACF,MAAM,wCAAwC,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,KAAK,YAAY,EACvF,SAAS,qDACT,CAAC;AAUF,SAAgB,yBAAyB,OAG9B;CACV,IAAI,MAAM,kBAAkB,EAAE,aAAa;EAC1C,IAAI,MAAM,OAAO,QAAQ,YAAY,EAAE,YACtC,MAAM,IAAI,MAAM,6DAA6D;EAE9E,OAAO,SAAS,MAAM,OAAO;;CAE9B,IAAI,MAAM,kBAAkB,EAAE,YAAY;EACzC,IAAI,MAAM,OAAO,QAAQ,YAAY,EAAE,aACtC,MAAM,IAAI,MAAM,6DAA6D;EAE9E,OAAO,YAAY,MAAM,QAAQ,MAAM,OAAO,MAAM,KAAA,EAAU,CAAC;;CAEhE,IAAI,MAAM,OAAO,UAAU,KAAA,EAAU,CAAC,SACrC,MAAM,IAAI,UACT,4EACA;CAEF,OAAO,MAAM;;AAwDd,MAAM,4BAA4B,GArDI,IACrC,OAAO;CACN,8BAA8B,OAC7B,uBACA,IAAI,yCAAyC;EAC5C,SAAS;EACT,aAAa;EACb,CAAC,CACF;CACD,UAAU,OACT,cACA,IAAI,8BAA8B;EACjC,SAAS;EACT,aAAa;EACb,CAAC,CACF;CACD,MAAM,SAAS,OAAO;CACtB,eAAe,OACd,eACA,IAAI,mCAAmC;EACtC,SAAS;EACT,aAAa;EACb,CAAC,CACF;CACD,CAAC,GACD,EAAE,8BAA8B,UAAU,YAAY;CACtD;CACA;CACA;CACA,EAyB4B,EAtBe,IAC5C,OAAO;CACN,MAAM,SAAS,eAAe;CAC9B,uBAAuB,OACtB,kBACA,IAAI,uCAAuC;EAC1C,SAAS;EACT,aAAa;EACb,CAAC,CACF;CACD,eAAe,OACd,eACA,IAAI,0CAA0C;EAC7C,SAAS;EACT,aAAa;EACb,CAAC,CACF;CACD,CAAC,GACD,EAAE,MAAM,6BAA6B;CAAE;CAAM;CAAuB,EAKjC,CACpC;AAED,SAAS,wBAAmF;CAC3F,OAAO,OACN,gBACA,IAAI,2BAA2B;EAAE,SAAS;EAAQ,aAAa;EAAM,CAAC,CACtE;;AAGF,MAAM,oBAAoB,QACzB,QACA,OAAO;CACN,8BAA8B,yBAAyB;EACtD,QAAQ,OACP,wBACA,IAAI,iDAAiD;GACpD,SAAS;GACT,aAAa,KAAA;GACb,CAAC,CACF;EACD,QAAQ;EACR,CAAC;CACF,WAAW,uBAAuB;CAClC,WAAW,SAAS,OAAO;CAC3B,WAAW;CACX,CAAC,CACF;;;ACvJD,MAAMC,YAAU,ID0LoB,GAjCF,QACjC,iBACA,OAAO;CACN,WAAW,uBAAuB;CAClC,WAAW,SAAS,gBAAgB;CACpC,WAAW;CACX,CAAC,CA4BF,EACA,mBA3B6B,QAC7B,YACA,OAAO;CACN,WAAW,uBAAuB;CAClC,WAAW,SAAS,WAAW;CAC/B,WAAW;CACX,CAAC,CAsBF,EApByB,QACzB,QACA,OAAO;CACN,WAAW,uBAAuB;CAClC,WAAW,SAAS,OAAO;CAC3B,WAAW;CACX,CAAC,CAeF,EAb2B,QAC3B,UACA,OAAO;CACN,WAAW,uBAAuB;CAClC,WAAW,SAAS,SAAS;CAC7B,WAAW;CACX,CAAC,CAQF,CC/LmB,EAAsB;CACzC,eAAe;CACf,MAAM;CACN,aAAa;CACb,aAAa;CACb,CAAC;AAEF,QAAQ,WAAW,MAAM,0BAA0BA,WAAS,QAAQ,IAAI"}

package/dist/contracts/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as SandboxProcessStartRequest, $n as SandboxShellCommandSchema, $t as SandboxEnvironmentCloseRequest, A as SandboxTerminalResizeResultSchema, An as SANDBOX_MAXIMUM_BINARY_BYTES, At as SandboxFsRenameResultSchema, B as SandboxStreamWriteRequestSchema, Bn as SandboxDirectShellStartRequest, Bt as SandboxExecCancelRequestSchema, C as SandboxTerminalAttachRequest, Cn as BoundedOpaqueIdentifierSchema, Ct as SandboxFsRemoveRequest, D as SandboxTerminalResizeRequest, Dn as NonnegativeSafeIntegerSchema, Dt as SandboxFsRenameRequest, E as SandboxTerminalAttachResultSchema, En as CanonicalBase64Schema, Et as SandboxFsRemoveResultSchema, F as SandboxStreamReadRequest, Fn as SANDBOX_MAXIMUM_PATH_CHARACTERS, Ft as SandboxFsWriteRequest, G as SandboxProcessCancelResult, Gn as SandboxEnvironmentVariableNameSchema, Gt as SandboxExecStartRequestSchema, H as SandboxStreamWriteResultSchema, Hn as SandboxEnvironmentHandle, Ht as SandboxExecCancelResultSchema, I as SandboxStreamReadRequestSchema, In as SANDBOX_MAXIMUM_TEXT_CHARACTERS, It as SandboxFsWriteRequestSchema, J as SandboxProcessLogChunkSchema, Jn as SandboxGuestAbsolutePathSchema, Jt as SandboxExecWaitRequest, K as SandboxProcessCancelResultSchema, Kn as SandboxEnvironmentVariableSchema, Kt as SandboxExecStartResult, L as SandboxStreamReadResult, Ln as SandboxBinaryChunkSchema, Lt as SandboxFsWriteResult, M as SandboxStreamCloseRequestSchema, Mn as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, Mt as SandboxFsStatRequestSchema, N as SandboxStreamCloseResult, Nn as SANDBOX_MAXIMUM_LIST_ITEMS, Nt as SandboxFsStatResult, O as SandboxTerminalResizeRequestSchema, On as PORTABLE_MAXIMUM_SAFE_INTEGER, Ot as SandboxFsRenameRequestSchema, P as SandboxStreamCloseResultSchema, Pn as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, Pt as SandboxFsStatResultSchema, Q as SandboxProcessLogsResultSchema, Qn as SandboxProcessHandleSchema, Qt as SandboxTerminalSizeSchema, R as SandboxStreamReadResultSchema, Rn as SandboxBoundHandle, Rt as SandboxFsWriteResultSchema, S as ManagedAgentProjectionSchema, Sn as BoundedByteCountSchema, St as SandboxFsReadResultSchema, T as SandboxTerminalAttachResult, Tn as BoundedTextSchema, Tt as SandboxFsRemoveResult, U as SandboxProcessCancelRequest, Un as SandboxEnvironmentHandleSchema, Ut as SandboxExecStartModeSchema, V as SandboxStreamWriteResult, Vn as SandboxDirectShellStartRequestSchema, Vt as SandboxExecCancelResult, W as SandboxProcessCancelRequestSchema, Wn as SandboxEnvironmentVariable, Wt as SandboxExecStartRequest, X as SandboxProcessLogsRequestSchema, Xn as SandboxHandleKindSchema, Xt as SandboxExecWaitResult, Y as SandboxProcessLogsRequest, Yn as SandboxGuestPathSchema, Yt as SandboxExecWaitRequestSchema, Z as SandboxProcessLogsResult, Zn as SandboxProcessHandle, Zt as SandboxExecWaitResultSchema, _ as GatewayRuntimeTrustedInvocationRequester, _n as SandboxRetainedResultLookupRequestSchema, _t as SandboxFsMkdirResult, a as GatewayRuntimeFrameworkIdentitySchema, an as SandboxEnvironmentOpenResult, ar as SandboxWorkRelativePathSchema, at as SandboxProcessStatusResultSchema, b as GatewayStablePrincipalDigestSchema, bn as SandboxTerminalOutcome, bt as SandboxFsReadRequestSchema, c as GatewayRuntimeManagedPluginClientKind, cn as SandboxEnvironmentStatusResult, ct as SandboxProcessWaitResult, d as GatewayRuntimeTrustedInvocationContext, dn as SandboxOperationControlResult, dt as SandboxFsListRequest, en as SandboxEnvironmentCloseResult, er as SandboxStreamChannelSchema, et as SandboxProcessStartRequestSchema, f as GatewayRuntimeTrustedInvocationContextSchema, fn as SandboxOperationControlResultSchema, ft as SandboxFsListRequestSchema, g as GatewayRuntimeTrustedInvocationPrincipalSchema, gn as SandboxRetainedResultLookupRequest, gt as SandboxFsMkdirRequestSchema, h as GatewayRuntimeTrustedInvocationPrincipal, hn as SandboxProvenTerminationOutcomeSchema, ht as SandboxFsMkdirRequest, i as GatewayRuntimeFrameworkIdentity, in as SandboxEnvironmentOpenRequestSchema, ir as SandboxTerminalHandleSchema, it as SandboxProcessStatusResult, j as SandboxStreamCloseRequest, jn as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, jt as SandboxFsStatRequest, k as SandboxTerminalResizeResult, kn as PositiveSafeIntegerSchema, kt as SandboxFsRenameResult, l as GatewayRuntimeManagedPluginClientKindSchema, ln as SandboxEnvironmentStatusResultSchema, lt as SandboxProcessWaitResultSchema, m as GatewayRuntimeTrustedInvocationCorrelationSchema, mn as SandboxOperationIdentitySchema, mt as SandboxFsListResultSchema, n as GatewayRuntimeAttachmentMetadata, nn as SandboxEnvironmentHandleRequestSchema, nr as SandboxStreamHandleSchema, nt as SandboxProcessStartResultSchema, o as GatewayRuntimeFrameworkKind, on as SandboxEnvironmentOpenResultSchema, or as Sha256DigestSchema, ot as SandboxProcessWaitRequest, p as GatewayRuntimeTrustedInvocationCorrelation, pn as SandboxOperationIdentity, pt as SandboxFsListResult, q as SandboxProcessHandleRequestSchema, qn as SandboxEnvironmentVariableValueSchema, qt as SandboxExecStartResultSchema, r as GatewayRuntimeAttachmentMetadataSchema, rn as SandboxEnvironmentOpenRequest, rr as SandboxTerminalHandle, rt as SandboxProcessStatusRequest, s as GatewayRuntimeFrameworkKindSchema, sn as SandboxEnvironmentStatusRequest, sr as createSandboxBoundHandleSchema, st as SandboxProcessWaitRequestSchema, t as SANDBOX_METHOD_CONTRACTS, tn as SandboxEnvironmentCloseResultSchema, tr as SandboxStreamHandle, tt as SandboxProcessStartResult, u as GatewayRuntimeProjectionCohortDigestSchema, un as SandboxAmbiguousOutcomeSchema, ut as SandboxFilesystemEntrySchema, v as GatewayRuntimeTrustedInvocationRequesterSchema, vn as SandboxRetainedResultLookupResult, vt as SandboxFsMkdirResultSchema, w as SandboxTerminalAttachRequestSchema, wn as BoundedOperationMillisecondsSchema, wt as SandboxFsRemoveRequestSchema, x as ManagedAgentProjection, xn as SandboxTerminalOutcomeSchema, xt as SandboxFsReadResult, y as GatewayStablePrincipalDigest, yn as SandboxRetainedResultLookupResultSchema, yt as SandboxFsReadRequest, z as SandboxStreamWriteRequest, zn as SandboxBoundHandleSchema, zt as SandboxExecCancelRequest } from "../index-C-NPMMvc.js";
-export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadata, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentity, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKind, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKind, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContext, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelation, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipal, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequester, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigest, GatewayStablePrincipalDigestSchema, ManagedAgentProjection, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandle, SandboxBoundHandleSchema, SandboxDirectShellStartRequest, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseRequest, SandboxEnvironmentCloseResult, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandle, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequest, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResult, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusRequest, SandboxEnvironmentStatusResult, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariable, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequest, SandboxExecCancelRequestSchema, SandboxExecCancelResult, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequest, SandboxExecStartRequestSchema, SandboxExecStartResult, SandboxExecStartResultSchema, SandboxExecWaitRequest, SandboxExecWaitRequestSchema, SandboxExecWaitResult, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequest, SandboxFsListRequestSchema, SandboxFsListResult, SandboxFsListResultSchema, SandboxFsMkdirRequest, SandboxFsMkdirRequestSchema, SandboxFsMkdirResult, SandboxFsMkdirResultSchema, SandboxFsReadRequest, SandboxFsReadRequestSchema, SandboxFsReadResult, SandboxFsReadResultSchema, SandboxFsRemoveRequest, SandboxFsRemoveRequestSchema, SandboxFsRemoveResult, SandboxFsRemoveResultSchema, SandboxFsRenameRequest, SandboxFsRenameRequestSchema, SandboxFsRenameResult, SandboxFsRenameResultSchema, SandboxFsStatRequest, SandboxFsStatRequestSchema, SandboxFsStatResult, SandboxFsStatResultSchema, SandboxFsWriteRequest, SandboxFsWriteRequestSchema, SandboxFsWriteResult, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResult, SandboxOperationControlResultSchema, SandboxOperationIdentity, SandboxOperationIdentitySchema, SandboxProcessCancelRequest, SandboxProcessCancelRequestSchema, SandboxProcessCancelResult, SandboxProcessCancelResultSchema, SandboxProcessHandle, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequest, SandboxProcessLogsRequestSchema, SandboxProcessLogsResult, SandboxProcessLogsResultSchema, SandboxProcessStartRequest, SandboxProcessStartRequestSchema, SandboxProcessStartResult, SandboxProcessStartResultSchema, SandboxProcessStatusRequest, SandboxProcessStatusResult, SandboxProcessStatusResultSchema, SandboxProcessWaitRequest, SandboxProcessWaitRequestSchema, SandboxProcessWaitResult, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequest, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResult, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequest, SandboxStreamCloseRequestSchema, SandboxStreamCloseResult, SandboxStreamCloseResultSchema, SandboxStreamHandle, SandboxStreamHandleSchema, SandboxStreamReadRequest, SandboxStreamReadRequestSchema, SandboxStreamReadResult, SandboxStreamReadResultSchema, SandboxStreamWriteRequest, SandboxStreamWriteRequestSchema, SandboxStreamWriteResult, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequest, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResult, SandboxTerminalAttachResultSchema, SandboxTerminalHandle, SandboxTerminalHandleSchema, SandboxTerminalOutcome, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequest, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResult, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, createSandboxBoundHandleSchema };
+import { $ as SandboxProcessLogsResultSchema, $n as SandboxProcessHandleSchema, $t as SandboxTerminalSizeSchema, A as SandboxTerminalResizeResult, An as PositiveSafeIntegerSchema, At as SandboxFsRenameResult, B as SandboxStreamWriteRequest, Bn as SandboxBoundHandleSchema, Bt as SandboxExecCancelRequest, C as compareUnicodeCodePointStrings, Cn as BoundedByteCountSchema, Ct as SandboxFsReadResultSchema, D as SandboxTerminalAttachResultSchema, Dn as CanonicalBase64Schema, Dt as SandboxFsRemoveResultSchema, E as SandboxTerminalAttachResult, En as BoundedTextSchema, Et as SandboxFsRemoveResult, F as SandboxStreamCloseResultSchema, Fn as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, Ft as SandboxFsStatResultSchema, G as SandboxProcessCancelRequestSchema, Gn as SandboxEnvironmentVariable, Gt as SandboxExecStartRequest, H as SandboxStreamWriteResult, Hn as SandboxDirectShellStartRequestSchema, Ht as SandboxExecCancelResult, I as SandboxStreamReadRequest, In as SANDBOX_MAXIMUM_PATH_CHARACTERS, It as SandboxFsWriteRequest, J as SandboxProcessHandleRequestSchema, Jn as SandboxEnvironmentVariableValueSchema, Jt as SandboxExecStartResultSchema, K as SandboxProcessCancelResult, Kn as SandboxEnvironmentVariableNameSchema, Kt as SandboxExecStartRequestSchema, L as SandboxStreamReadRequestSchema, Ln as SANDBOX_MAXIMUM_TEXT_CHARACTERS, Lt as SandboxFsWriteRequestSchema, M as SandboxStreamCloseRequest, Mn as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, Mt as SandboxFsStatRequest, N as SandboxStreamCloseRequestSchema, Nn as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, Nt as SandboxFsStatRequestSchema, O as SandboxTerminalResizeRequest, On as NonnegativeSafeIntegerSchema, Ot as SandboxFsRenameRequest, P as SandboxStreamCloseResult, Pn as SANDBOX_MAXIMUM_LIST_ITEMS, Pt as SandboxFsStatResult, Q as SandboxProcessLogsResult, Qn as SandboxProcessHandle, Qt as SandboxExecWaitResultSchema, R as SandboxStreamReadResult, Rn as SandboxBinaryChunkSchema, Rt as SandboxFsWriteResult, S as ManagedAgentProjectionSchema, Sn as SandboxTerminalOutcomeSchema, St as SandboxFsReadResult, T as SandboxTerminalAttachRequestSchema, Tn as BoundedOperationMillisecondsSchema, Tt as SandboxFsRemoveRequestSchema, U as SandboxStreamWriteResultSchema, Un as SandboxEnvironmentHandle, Ut as SandboxExecCancelResultSchema, V as SandboxStreamWriteRequestSchema, Vn as SandboxDirectShellStartRequest, Vt as SandboxExecCancelRequestSchema, W as SandboxProcessCancelRequest, Wn as SandboxEnvironmentHandleSchema, Wt as SandboxExecStartModeSchema, X as SandboxProcessLogsRequest, Xn as SandboxGuestPathSchema, Xt as SandboxExecWaitRequestSchema, Y as SandboxProcessLogChunkSchema, Yn as SandboxGuestAbsolutePathSchema, Yt as SandboxExecWaitRequest, Z as SandboxProcessLogsRequestSchema, Zn as SandboxHandleKindSchema, Zt as SandboxExecWaitResult, _ as GatewayRuntimeTrustedInvocationRequester, _n as SandboxRetainedResultLookupRequest, _t as SandboxFsMkdirRequestSchema, a as GatewayRuntimeFrameworkIdentitySchema, an as SandboxEnvironmentOpenRequestSchema, ar as SandboxTerminalHandleSchema, at as SandboxProcessStatusResult, b as GatewayStablePrincipalDigestSchema, bn as SandboxRetainedResultLookupResultSchema, bt as SandboxFsReadRequest, c as GatewayRuntimeManagedPluginClientKind, cn as SandboxEnvironmentStatusRequest, cr as createSandboxBoundHandleSchema, ct as SandboxProcessWaitRequestSchema, d as GatewayRuntimeTrustedInvocationContext, dn as SandboxAmbiguousOutcomeSchema, dt as SandboxFilesystemEntrySchema, en as SandboxEnvironmentCloseRequest, er as SandboxShellCommandSchema, et as SandboxProcessStartRequest, f as GatewayRuntimeTrustedInvocationContextSchema, fn as SandboxOperationControlResult, ft as SandboxFsListRequest, g as GatewayRuntimeTrustedInvocationPrincipalSchema, gn as SandboxProvenTerminationOutcomeSchema, gt as SandboxFsMkdirRequest, h as GatewayRuntimeTrustedInvocationPrincipal, hn as SandboxOperationIdentitySchema, ht as SandboxFsListResultSchema, i as GatewayRuntimeFrameworkIdentity, in as SandboxEnvironmentOpenRequest, ir as SandboxTerminalHandle, it as SandboxProcessStatusRequest, j as SandboxTerminalResizeResultSchema, jn as SANDBOX_MAXIMUM_BINARY_BYTES, jt as SandboxFsRenameResultSchema, k as SandboxTerminalResizeRequestSchema, kn as PORTABLE_MAXIMUM_SAFE_INTEGER, kt as SandboxFsRenameRequestSchema, l as GatewayRuntimeManagedPluginClientKindSchema, ln as SandboxEnvironmentStatusResult, lt as SandboxProcessWaitResult, m as GatewayRuntimeTrustedInvocationCorrelationSchema, mn as SandboxOperationIdentity, mt as SandboxFsListResult, n as GatewayRuntimeAttachmentMetadata, nn as SandboxEnvironmentCloseResultSchema, nr as SandboxStreamHandle, nt as SandboxProcessStartResult, o as GatewayRuntimeFrameworkKind, on as SandboxEnvironmentOpenResult, or as SandboxWorkRelativePathSchema, ot as SandboxProcessStatusResultSchema, p as GatewayRuntimeTrustedInvocationCorrelation, pn as SandboxOperationControlResultSchema, pt as SandboxFsListRequestSchema, q as SandboxProcessCancelResultSchema, qn as SandboxEnvironmentVariableSchema, qt as SandboxExecStartResult, r as GatewayRuntimeAttachmentMetadataSchema, rn as SandboxEnvironmentHandleRequestSchema, rr as SandboxStreamHandleSchema, rt as SandboxProcessStartResultSchema, s as GatewayRuntimeFrameworkKindSchema, sn as SandboxEnvironmentOpenResultSchema, sr as Sha256DigestSchema, st as SandboxProcessWaitRequest, t as SANDBOX_METHOD_CONTRACTS, tn as SandboxEnvironmentCloseResult, tr as SandboxStreamChannelSchema, tt as SandboxProcessStartRequestSchema, u as GatewayRuntimeProjectionCohortDigestSchema, un as SandboxEnvironmentStatusResultSchema, ut as SandboxProcessWaitResultSchema, v as GatewayRuntimeTrustedInvocationRequesterSchema, vn as SandboxRetainedResultLookupRequestSchema, vt as SandboxFsMkdirResult, w as SandboxTerminalAttachRequest, wn as BoundedOpaqueIdentifierSchema, wt as SandboxFsRemoveRequest, x as ManagedAgentProjection, xn as SandboxTerminalOutcome, xt as SandboxFsReadRequestSchema, y as GatewayStablePrincipalDigest, yn as SandboxRetainedResultLookupResult, yt as SandboxFsMkdirResultSchema, z as SandboxStreamReadResultSchema, zn as SandboxBoundHandle, zt as SandboxFsWriteResultSchema } from "../index-C5NhyO2R.js";
+export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadata, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentity, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKind, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKind, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContext, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelation, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipal, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequester, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigest, GatewayStablePrincipalDigestSchema, ManagedAgentProjection, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandle, SandboxBoundHandleSchema, SandboxDirectShellStartRequest, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseRequest, SandboxEnvironmentCloseResult, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandle, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequest, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResult, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusRequest, SandboxEnvironmentStatusResult, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariable, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequest, SandboxExecCancelRequestSchema, SandboxExecCancelResult, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequest, SandboxExecStartRequestSchema, SandboxExecStartResult, SandboxExecStartResultSchema, SandboxExecWaitRequest, SandboxExecWaitRequestSchema, SandboxExecWaitResult, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequest, SandboxFsListRequestSchema, SandboxFsListResult, SandboxFsListResultSchema, SandboxFsMkdirRequest, SandboxFsMkdirRequestSchema, SandboxFsMkdirResult, SandboxFsMkdirResultSchema, SandboxFsReadRequest, SandboxFsReadRequestSchema, SandboxFsReadResult, SandboxFsReadResultSchema, SandboxFsRemoveRequest, SandboxFsRemoveRequestSchema, SandboxFsRemoveResult, SandboxFsRemoveResultSchema, SandboxFsRenameRequest, SandboxFsRenameRequestSchema, SandboxFsRenameResult, SandboxFsRenameResultSchema, SandboxFsStatRequest, SandboxFsStatRequestSchema, SandboxFsStatResult, SandboxFsStatResultSchema, SandboxFsWriteRequest, SandboxFsWriteRequestSchema, SandboxFsWriteResult, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResult, SandboxOperationControlResultSchema, SandboxOperationIdentity, SandboxOperationIdentitySchema, SandboxProcessCancelRequest, SandboxProcessCancelRequestSchema, SandboxProcessCancelResult, SandboxProcessCancelResultSchema, SandboxProcessHandle, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequest, SandboxProcessLogsRequestSchema, SandboxProcessLogsResult, SandboxProcessLogsResultSchema, SandboxProcessStartRequest, SandboxProcessStartRequestSchema, SandboxProcessStartResult, SandboxProcessStartResultSchema, SandboxProcessStatusRequest, SandboxProcessStatusResult, SandboxProcessStatusResultSchema, SandboxProcessWaitRequest, SandboxProcessWaitRequestSchema, SandboxProcessWaitResult, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequest, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResult, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequest, SandboxStreamCloseRequestSchema, SandboxStreamCloseResult, SandboxStreamCloseResultSchema, SandboxStreamHandle, SandboxStreamHandleSchema, SandboxStreamReadRequest, SandboxStreamReadRequestSchema, SandboxStreamReadResult, SandboxStreamReadResultSchema, SandboxStreamWriteRequest, SandboxStreamWriteRequestSchema, SandboxStreamWriteResult, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequest, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResult, SandboxTerminalAttachResultSchema, SandboxTerminalHandle, SandboxTerminalHandleSchema, SandboxTerminalOutcome, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequest, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResult, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, compareUnicodeCodePointStrings, createSandboxBoundHandleSchema };

package/dist/contracts/index.js

@@ -1,2 +1,2 @@
-import { $ as SandboxExecStartResultSchema, A as SandboxProcessStartResultSchema, At as SandboxBinaryChunkSchema, B as SandboxFsReadResultSchema, Bt as SandboxProcessHandleSchema, C as SandboxProcessCancelRequestSchema, Ct as SANDBOX_MAXIMUM_BINARY_BYTES, D as SandboxProcessLogsRequestSchema, Dt as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, E as SandboxProcessLogChunkSchema, Et as SANDBOX_MAXIMUM_LIST_ITEMS, F as SandboxFsListRequestSchema, Ft as SandboxEnvironmentVariableSchema, G as SandboxFsStatRequestSchema, Gt as SandboxWorkRelativePathSchema, H as SandboxFsRemoveResultSchema, Ht as SandboxStreamChannelSchema, I as SandboxFsListResultSchema, It as SandboxEnvironmentVariableValueSchema, J as SandboxFsWriteResultSchema, K as SandboxFsStatResultSchema, Kt as Sha256DigestSchema, L as SandboxFsMkdirRequestSchema, Lt as SandboxGuestAbsolutePathSchema, M as SandboxProcessWaitRequestSchema, Mt as SandboxDirectShellStartRequestSchema, N as SandboxProcessWaitResultSchema, Nt as SandboxEnvironmentHandleSchema, O as SandboxProcessLogsResultSchema, Ot as SANDBOX_MAXIMUM_PATH_CHARACTERS, P as SandboxFilesystemEntrySchema, Pt as SandboxEnvironmentVariableNameSchema, Q as SandboxExecStartRequestSchema, R as SandboxFsMkdirResultSchema, Rt as SandboxGuestPathSchema, S as SandboxStreamWriteResultSchema, St as PositiveSafeIntegerSchema, T as SandboxProcessHandleRequestSchema, Tt as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, U as SandboxFsRenameRequestSchema, Ut as SandboxStreamHandleSchema, V as SandboxFsRemoveRequestSchema, Vt as SandboxShellCommandSchema, W as SandboxFsRenameResultSchema, Wt as SandboxTerminalHandleSchema, X as SandboxExecCancelResultSchema, Y as SandboxExecCancelRequestSchema, Z as SandboxExecStartModeSchema, _ as SandboxStreamCloseRequestSchema, _t as BoundedOperationMillisecondsSchema, a as GatewayRuntimeManagedPluginClientKindSchema, at as SandboxEnvironmentOpenRequestSchema, b as SandboxStreamReadResultSchema, bt as NonnegativeSafeIntegerSchema, c as GatewayRuntimeTrustedInvocationCorrelationSchema, ct as SandboxAmbiguousOutcomeSchema, d as GatewayStablePrincipalDigestSchema, dt as SandboxProvenTerminationOutcomeSchema, et as SandboxExecWaitRequestSchema, f as ManagedAgentProjectionSchema, ft as SandboxRetainedResultLookupRequestSchema, g as SandboxTerminalResizeResultSchema, gt as BoundedOpaqueIdentifierSchema, h as SandboxTerminalResizeRequestSchema, ht as BoundedByteCountSchema, i as GatewayRuntimeFrameworkKindSchema, it as SandboxEnvironmentHandleRequestSchema, j as SandboxProcessStatusResultSchema, jt as SandboxBoundHandleSchema, k as SandboxProcessStartRequestSchema, kt as SANDBOX_MAXIMUM_TEXT_CHARACTERS, l as GatewayRuntimeTrustedInvocationPrincipalSchema, lt as SandboxOperationControlResultSchema, m as SandboxTerminalAttachResultSchema, mt as SandboxTerminalOutcomeSchema, n as GatewayRuntimeAttachmentMetadataSchema, nt as SandboxTerminalSizeSchema, o as GatewayRuntimeProjectionCohortDigestSchema, ot as SandboxEnvironmentOpenResultSchema, p as SandboxTerminalAttachRequestSchema, pt as SandboxRetainedResultLookupResultSchema, q as SandboxFsWriteRequestSchema, qt as createSandboxBoundHandleSchema, r as GatewayRuntimeFrameworkIdentitySchema, rt as SandboxEnvironmentCloseResultSchema, s as GatewayRuntimeTrustedInvocationContextSchema, st as SandboxEnvironmentStatusResultSchema, t as SANDBOX_METHOD_CONTRACTS, tt as SandboxExecWaitResultSchema, u as GatewayRuntimeTrustedInvocationRequesterSchema, ut as SandboxOperationIdentitySchema, v as SandboxStreamCloseResultSchema, vt as BoundedTextSchema, w as SandboxProcessCancelResultSchema, wt as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, x as SandboxStreamWriteRequestSchema, xt as PORTABLE_MAXIMUM_SAFE_INTEGER, y as SandboxStreamReadRequestSchema, yt as CanonicalBase64Schema, z as SandboxFsReadRequestSchema, zt as SandboxHandleKindSchema } from "../contracts-RgGW0RX2.js";
-export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigestSchema, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandleSchema, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequestSchema, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequestSchema, SandboxExecStartResultSchema, SandboxExecWaitRequestSchema, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequestSchema, SandboxFsListResultSchema, SandboxFsMkdirRequestSchema, SandboxFsMkdirResultSchema, SandboxFsReadRequestSchema, SandboxFsReadResultSchema, SandboxFsRemoveRequestSchema, SandboxFsRemoveResultSchema, SandboxFsRenameRequestSchema, SandboxFsRenameResultSchema, SandboxFsStatRequestSchema, SandboxFsStatResultSchema, SandboxFsWriteRequestSchema, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResultSchema, SandboxOperationIdentitySchema, SandboxProcessCancelRequestSchema, SandboxProcessCancelResultSchema, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequestSchema, SandboxProcessLogsResultSchema, SandboxProcessStartRequestSchema, SandboxProcessStartResultSchema, SandboxProcessStatusResultSchema, SandboxProcessWaitRequestSchema, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequestSchema, SandboxStreamCloseResultSchema, SandboxStreamHandleSchema, SandboxStreamReadRequestSchema, SandboxStreamReadResultSchema, SandboxStreamWriteRequestSchema, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResultSchema, SandboxTerminalHandleSchema, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, createSandboxBoundHandleSchema };
+import { $ as SandboxExecStartRequestSchema, A as SandboxProcessStartRequestSchema, At as SANDBOX_MAXIMUM_TEXT_CHARACTERS, B as SandboxFsReadRequestSchema, Bt as SandboxHandleKindSchema, C as SandboxStreamWriteResultSchema, Ct as PositiveSafeIntegerSchema, D as SandboxProcessLogChunkSchema, Dt as SANDBOX_MAXIMUM_LIST_ITEMS, E as SandboxProcessHandleRequestSchema, Et as SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, F as SandboxFilesystemEntrySchema, Ft as SandboxEnvironmentVariableNameSchema, G as SandboxFsRenameResultSchema, Gt as SandboxTerminalHandleSchema, H as SandboxFsRemoveRequestSchema, Ht as SandboxShellCommandSchema, I as SandboxFsListRequestSchema, It as SandboxEnvironmentVariableSchema, J as SandboxFsWriteRequestSchema, Jt as createSandboxBoundHandleSchema, K as SandboxFsStatRequestSchema, Kt as SandboxWorkRelativePathSchema, L as SandboxFsListResultSchema, Lt as SandboxEnvironmentVariableValueSchema, M as SandboxProcessStatusResultSchema, Mt as SandboxBoundHandleSchema, N as SandboxProcessWaitRequestSchema, Nt as SandboxDirectShellStartRequestSchema, O as SandboxProcessLogsRequestSchema, Ot as SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, P as SandboxProcessWaitResultSchema, Pt as SandboxEnvironmentHandleSchema, Q as SandboxExecStartModeSchema, R as SandboxFsMkdirRequestSchema, Rt as SandboxGuestAbsolutePathSchema, S as SandboxStreamWriteRequestSchema, St as PORTABLE_MAXIMUM_SAFE_INTEGER, T as SandboxProcessCancelResultSchema, Tt as SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, U as SandboxFsRemoveResultSchema, Ut as SandboxStreamChannelSchema, V as SandboxFsReadResultSchema, Vt as SandboxProcessHandleSchema, W as SandboxFsRenameRequestSchema, Wt as SandboxStreamHandleSchema, X as SandboxExecCancelRequestSchema, Y as SandboxFsWriteResultSchema, Z as SandboxExecCancelResultSchema, _ as SandboxTerminalResizeResultSchema, _t as BoundedOpaqueIdentifierSchema, a as GatewayRuntimeManagedPluginClientKindSchema, at as SandboxEnvironmentHandleRequestSchema, b as SandboxStreamReadRequestSchema, bt as CanonicalBase64Schema, c as GatewayRuntimeTrustedInvocationCorrelationSchema, ct as SandboxEnvironmentStatusResultSchema, d as GatewayStablePrincipalDigestSchema, dt as SandboxOperationIdentitySchema, et as SandboxExecStartResultSchema, f as ManagedAgentProjectionSchema, ft as SandboxProvenTerminationOutcomeSchema, g as SandboxTerminalResizeRequestSchema, gt as BoundedByteCountSchema, h as SandboxTerminalAttachResultSchema, ht as SandboxTerminalOutcomeSchema, i as GatewayRuntimeFrameworkKindSchema, it as SandboxEnvironmentCloseResultSchema, j as SandboxProcessStartResultSchema, jt as SandboxBinaryChunkSchema, k as SandboxProcessLogsResultSchema, kt as SANDBOX_MAXIMUM_PATH_CHARACTERS, l as GatewayRuntimeTrustedInvocationPrincipalSchema, lt as SandboxAmbiguousOutcomeSchema, m as SandboxTerminalAttachRequestSchema, mt as SandboxRetainedResultLookupResultSchema, n as GatewayRuntimeAttachmentMetadataSchema, nt as SandboxExecWaitResultSchema, o as GatewayRuntimeProjectionCohortDigestSchema, ot as SandboxEnvironmentOpenRequestSchema, p as compareUnicodeCodePointStrings, pt as SandboxRetainedResultLookupRequestSchema, q as SandboxFsStatResultSchema, qt as Sha256DigestSchema, r as GatewayRuntimeFrameworkIdentitySchema, rt as SandboxTerminalSizeSchema, s as GatewayRuntimeTrustedInvocationContextSchema, st as SandboxEnvironmentOpenResultSchema, t as SANDBOX_METHOD_CONTRACTS, tt as SandboxExecWaitRequestSchema, u as GatewayRuntimeTrustedInvocationRequesterSchema, ut as SandboxOperationControlResultSchema, v as SandboxStreamCloseRequestSchema, vt as BoundedOperationMillisecondsSchema, w as SandboxProcessCancelRequestSchema, wt as SANDBOX_MAXIMUM_BINARY_BYTES, x as SandboxStreamReadResultSchema, xt as NonnegativeSafeIntegerSchema, y as SandboxStreamCloseResultSchema, yt as BoundedTextSchema, z as SandboxFsMkdirResultSchema, zt as SandboxGuestPathSchema } from "../contracts-3pjrcMjD.js";
+export { BoundedByteCountSchema, BoundedOpaqueIdentifierSchema, BoundedOperationMillisecondsSchema, BoundedTextSchema, CanonicalBase64Schema, GatewayRuntimeAttachmentMetadataSchema, GatewayRuntimeFrameworkIdentitySchema, GatewayRuntimeFrameworkKindSchema, GatewayRuntimeManagedPluginClientKindSchema, GatewayRuntimeProjectionCohortDigestSchema, GatewayRuntimeTrustedInvocationContextSchema, GatewayRuntimeTrustedInvocationCorrelationSchema, GatewayRuntimeTrustedInvocationPrincipalSchema, GatewayRuntimeTrustedInvocationRequesterSchema, GatewayStablePrincipalDigestSchema, ManagedAgentProjectionSchema, NonnegativeSafeIntegerSchema, PORTABLE_MAXIMUM_SAFE_INTEGER, PositiveSafeIntegerSchema, SANDBOX_MAXIMUM_BINARY_BYTES, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS, SANDBOX_MAXIMUM_LIST_ITEMS, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS, SANDBOX_MAXIMUM_PATH_CHARACTERS, SANDBOX_MAXIMUM_TEXT_CHARACTERS, SANDBOX_METHOD_CONTRACTS, SandboxAmbiguousOutcomeSchema, SandboxBinaryChunkSchema, SandboxBoundHandleSchema, SandboxDirectShellStartRequestSchema, SandboxEnvironmentCloseResultSchema, SandboxEnvironmentHandleRequestSchema, SandboxEnvironmentHandleSchema, SandboxEnvironmentOpenRequestSchema, SandboxEnvironmentOpenResultSchema, SandboxEnvironmentStatusResultSchema, SandboxEnvironmentVariableNameSchema, SandboxEnvironmentVariableSchema, SandboxEnvironmentVariableValueSchema, SandboxExecCancelRequestSchema, SandboxExecCancelResultSchema, SandboxExecStartModeSchema, SandboxExecStartRequestSchema, SandboxExecStartResultSchema, SandboxExecWaitRequestSchema, SandboxExecWaitResultSchema, SandboxFilesystemEntrySchema, SandboxFsListRequestSchema, SandboxFsListResultSchema, SandboxFsMkdirRequestSchema, SandboxFsMkdirResultSchema, SandboxFsReadRequestSchema, SandboxFsReadResultSchema, SandboxFsRemoveRequestSchema, SandboxFsRemoveResultSchema, SandboxFsRenameRequestSchema, SandboxFsRenameResultSchema, SandboxFsStatRequestSchema, SandboxFsStatResultSchema, SandboxFsWriteRequestSchema, SandboxFsWriteResultSchema, SandboxGuestAbsolutePathSchema, SandboxGuestPathSchema, SandboxHandleKindSchema, SandboxOperationControlResultSchema, SandboxOperationIdentitySchema, SandboxProcessCancelRequestSchema, SandboxProcessCancelResultSchema, SandboxProcessHandleRequestSchema, SandboxProcessHandleSchema, SandboxProcessLogChunkSchema, SandboxProcessLogsRequestSchema, SandboxProcessLogsResultSchema, SandboxProcessStartRequestSchema, SandboxProcessStartResultSchema, SandboxProcessStatusResultSchema, SandboxProcessWaitRequestSchema, SandboxProcessWaitResultSchema, SandboxProvenTerminationOutcomeSchema, SandboxRetainedResultLookupRequestSchema, SandboxRetainedResultLookupResultSchema, SandboxShellCommandSchema, SandboxStreamChannelSchema, SandboxStreamCloseRequestSchema, SandboxStreamCloseResultSchema, SandboxStreamHandleSchema, SandboxStreamReadRequestSchema, SandboxStreamReadResultSchema, SandboxStreamWriteRequestSchema, SandboxStreamWriteResultSchema, SandboxTerminalAttachRequestSchema, SandboxTerminalAttachResultSchema, SandboxTerminalHandleSchema, SandboxTerminalOutcomeSchema, SandboxTerminalResizeRequestSchema, SandboxTerminalResizeResultSchema, SandboxTerminalSizeSchema, SandboxWorkRelativePathSchema, Sha256DigestSchema, compareUnicodeCodePointStrings, createSandboxBoundHandleSchema };

package/dist/{contracts-RgGW0RX2.js → contracts-3pjrcMjD.js}

@@ -1,4 +1,7 @@
-import { n as withPortableSuperRefinement } from "./portable-refinement-authoring-ZSmR-amG.js";
+import { n as withPortableSuperRefinement } from "./portable-refinement-authoring-CvlKRs_Z.js";
+import "./request-id-schema-DGLLX-tp.js";
+import { r as NamespaceNameSchema } from "./capability-reference-schema-K7qXJgEa.js";
+import "./json-value-schema-BGfMDOGA.js";
 import { z } from "zod";
 //#region src/contracts/contract-foundations.ts
 const PORTABLE_MAXIMUM_SAFE_INTEGER = Number.MAX_SAFE_INTEGER;
@@ -449,6 +452,17 @@ const SandboxTerminalResizeResultSchema = z.object({
 }).strict();
 //#endregion
 //#region src/contracts/trusted-context-contracts.ts
+function compareUnicodeCodePointStrings(left, right) {
+	const leftCodePoints = Array.from(left, (character) => character.codePointAt(0) ?? 0);
+	const rightCodePoints = Array.from(right, (character) => character.codePointAt(0) ?? 0);
+	const sharedLength = Math.min(leftCodePoints.length, rightCodePoints.length);
+	for (let index = 0; index < sharedLength; index += 1) {
+		const leftCodePoint = leftCodePoints[index] ?? 0;
+		const rightCodePoint = rightCodePoints[index] ?? 0;
+		if (leftCodePoint !== rightCodePoint) return leftCodePoint - rightCodePoint;
+	}
+	return leftCodePoints.length - rightCodePoints.length;
+}
 const GatewayRuntimeFrameworkKindSchema = z.enum(["openclaw", "hermes"]);
 const GatewayRuntimeManagedPluginClientKindSchema = z.enum(["openclaw-managed-plugin", "hermes-managed-plugin"]);
 const GatewayRuntimeFrameworkIdentitySchema = z.discriminatedUnion("kind", [z.object({
@@ -459,12 +473,29 @@ const GatewayRuntimeFrameworkIdentitySchema = z.discriminatedUnion("kind", [z.ob
 	profileName: BoundedOpaqueIdentifierSchema
 }).strict()]).readonly();
 const GatewayRuntimeProjectionCohortDigestSchema = z.string().regex(/^projection-cohort:[a-f0-9]{64}$/u);
-const ManagedAgentProjectionSchema = z.object({
-	agentId: BoundedOpaqueIdentifierSchema,
-	frameworkIdentity: GatewayRuntimeFrameworkIdentitySchema,
-	profileAssignmentRevision: BoundedOpaqueIdentifierSchema,
-	toolPortalProfileId: BoundedOpaqueIdentifierSchema
-}).strict().readonly();
+const ManagedAgentProjectionSchema = withPortableSuperRefinement({
+	refinement: (projection, context) => {
+		if (new Set(projection.toolPortalNamespaceNames).size !== projection.toolPortalNamespaceNames.length) context.addIssue({
+			code: "custom",
+			message: "Managed Agent Projection Tool Portal namespace names must be unique.",
+			path: ["toolPortalNamespaceNames"]
+		});
+		const sortedNamespaceNames = [...projection.toolPortalNamespaceNames].toSorted(compareUnicodeCodePointStrings);
+		if (projection.toolPortalNamespaceNames.some((namespaceName, index) => namespaceName !== sortedNamespaceNames[index])) context.addIssue({
+			code: "custom",
+			message: "Managed Agent Projection Tool Portal namespace names must be sorted.",
+			path: ["toolPortalNamespaceNames"]
+		});
+	},
+	refinementIdentity: "gateway.managed-agent-projection.namespace-names",
+	schema: z.object({
+		agentId: BoundedOpaqueIdentifierSchema,
+		frameworkIdentity: GatewayRuntimeFrameworkIdentitySchema,
+		profileAssignmentRevision: BoundedOpaqueIdentifierSchema,
+		toolPortalNamespaceNames: z.array(NamespaceNameSchema).readonly(),
+		toolPortalProfileId: BoundedOpaqueIdentifierSchema
+	}).strict()
+}).readonly();
 const GatewayRuntimeAttachmentMetadataSchema = withPortableSuperRefinement({
 	refinement: (metadata, context) => {
 		if (new Set(metadata.configuredAgentIds).size !== metadata.configuredAgentIds.length) context.addIssue({
@@ -606,6 +637,6 @@ const SANDBOX_METHOD_CONTRACTS = {
 	}
 };
 //#endregion
-export { SandboxExecStartResultSchema as $, SandboxProcessStartResultSchema as A, SandboxBinaryChunkSchema as At, SandboxFsReadResultSchema as B, SandboxProcessHandleSchema as Bt, SandboxProcessCancelRequestSchema as C, SANDBOX_MAXIMUM_BINARY_BYTES as Ct, SandboxProcessLogsRequestSchema as D, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS as Dt, SandboxProcessLogChunkSchema as E, SANDBOX_MAXIMUM_LIST_ITEMS as Et, SandboxFsListRequestSchema as F, SandboxEnvironmentVariableSchema as Ft, SandboxFsStatRequestSchema as G, SandboxWorkRelativePathSchema as Gt, SandboxFsRemoveResultSchema as H, SandboxStreamChannelSchema as Ht, SandboxFsListResultSchema as I, SandboxEnvironmentVariableValueSchema as It, SandboxFsWriteResultSchema as J, SandboxFsStatResultSchema as K, Sha256DigestSchema as Kt, SandboxFsMkdirRequestSchema as L, SandboxGuestAbsolutePathSchema as Lt, SandboxProcessWaitRequestSchema as M, SandboxDirectShellStartRequestSchema as Mt, SandboxProcessWaitResultSchema as N, SandboxEnvironmentHandleSchema as Nt, SandboxProcessLogsResultSchema as O, SANDBOX_MAXIMUM_PATH_CHARACTERS as Ot, SandboxFilesystemEntrySchema as P, SandboxEnvironmentVariableNameSchema as Pt, SandboxExecStartRequestSchema as Q, SandboxFsMkdirResultSchema as R, SandboxGuestPathSchema as Rt, SandboxStreamWriteResultSchema as S, PositiveSafeIntegerSchema as St, SandboxProcessHandleRequestSchema as T, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS as Tt, SandboxFsRenameRequestSchema as U, SandboxStreamHandleSchema as Ut, SandboxFsRemoveRequestSchema as V, SandboxShellCommandSchema as Vt, SandboxFsRenameResultSchema as W, SandboxTerminalHandleSchema as Wt, SandboxExecCancelResultSchema as X, SandboxExecCancelRequestSchema as Y, SandboxExecStartModeSchema as Z, SandboxStreamCloseRequestSchema as _, BoundedOperationMillisecondsSchema as _t, GatewayRuntimeManagedPluginClientKindSchema as a, SandboxEnvironmentOpenRequestSchema as at, SandboxStreamReadResultSchema as b, NonnegativeSafeIntegerSchema as bt, GatewayRuntimeTrustedInvocationCorrelationSchema as c, SandboxAmbiguousOutcomeSchema as ct, GatewayStablePrincipalDigestSchema as d, SandboxProvenTerminationOutcomeSchema as dt, SandboxExecWaitRequestSchema as et, ManagedAgentProjectionSchema as f, SandboxRetainedResultLookupRequestSchema as ft, SandboxTerminalResizeResultSchema as g, BoundedOpaqueIdentifierSchema as gt, SandboxTerminalResizeRequestSchema as h, BoundedByteCountSchema as ht, GatewayRuntimeFrameworkKindSchema as i, SandboxEnvironmentHandleRequestSchema as it, SandboxProcessStatusResultSchema as j, SandboxBoundHandleSchema as jt, SandboxProcessStartRequestSchema as k, SANDBOX_MAXIMUM_TEXT_CHARACTERS as kt, GatewayRuntimeTrustedInvocationPrincipalSchema as l, SandboxOperationControlResultSchema as lt, SandboxTerminalAttachResultSchema as m, SandboxTerminalOutcomeSchema as mt, GatewayRuntimeAttachmentMetadataSchema as n, SandboxTerminalSizeSchema as nt, GatewayRuntimeProjectionCohortDigestSchema as o, SandboxEnvironmentOpenResultSchema as ot, SandboxTerminalAttachRequestSchema as p, SandboxRetainedResultLookupResultSchema as pt, SandboxFsWriteRequestSchema as q, createSandboxBoundHandleSchema as qt, GatewayRuntimeFrameworkIdentitySchema as r, SandboxEnvironmentCloseResultSchema as rt, GatewayRuntimeTrustedInvocationContextSchema as s, SandboxEnvironmentStatusResultSchema as st, SANDBOX_METHOD_CONTRACTS as t, SandboxExecWaitResultSchema as tt, GatewayRuntimeTrustedInvocationRequesterSchema as u, SandboxOperationIdentitySchema as ut, SandboxStreamCloseResultSchema as v, BoundedTextSchema as vt, SandboxProcessCancelResultSchema as w, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES as wt, SandboxStreamWriteRequestSchema as x, PORTABLE_MAXIMUM_SAFE_INTEGER as xt, SandboxStreamReadRequestSchema as y, CanonicalBase64Schema as yt, SandboxFsReadRequestSchema as z, SandboxHandleKindSchema as zt };
+export { SandboxExecStartRequestSchema as $, SandboxProcessStartRequestSchema as A, SANDBOX_MAXIMUM_TEXT_CHARACTERS as At, SandboxFsReadRequestSchema as B, SandboxHandleKindSchema as Bt, SandboxStreamWriteResultSchema as C, PositiveSafeIntegerSchema as Ct, SandboxProcessLogChunkSchema as D, SANDBOX_MAXIMUM_LIST_ITEMS as Dt, SandboxProcessHandleRequestSchema as E, SANDBOX_MAXIMUM_IDENTIFIER_CHARACTERS as Et, SandboxFilesystemEntrySchema as F, SandboxEnvironmentVariableNameSchema as Ft, SandboxFsRenameResultSchema as G, SandboxTerminalHandleSchema as Gt, SandboxFsRemoveRequestSchema as H, SandboxShellCommandSchema as Ht, SandboxFsListRequestSchema as I, SandboxEnvironmentVariableSchema as It, SandboxFsWriteRequestSchema as J, createSandboxBoundHandleSchema as Jt, SandboxFsStatRequestSchema as K, SandboxWorkRelativePathSchema as Kt, SandboxFsListResultSchema as L, SandboxEnvironmentVariableValueSchema as Lt, SandboxProcessStatusResultSchema as M, SandboxBoundHandleSchema as Mt, SandboxProcessWaitRequestSchema as N, SandboxDirectShellStartRequestSchema as Nt, SandboxProcessLogsRequestSchema as O, SANDBOX_MAXIMUM_OPERATION_MILLISECONDS as Ot, SandboxProcessWaitResultSchema as P, SandboxEnvironmentHandleSchema as Pt, SandboxExecStartModeSchema as Q, SandboxFsMkdirRequestSchema as R, SandboxGuestAbsolutePathSchema as Rt, SandboxStreamWriteRequestSchema as S, PORTABLE_MAXIMUM_SAFE_INTEGER as St, SandboxProcessCancelResultSchema as T, SANDBOX_MAXIMUM_ENVIRONMENT_VARIABLES as Tt, SandboxFsRemoveResultSchema as U, SandboxStreamChannelSchema as Ut, SandboxFsReadResultSchema as V, SandboxProcessHandleSchema as Vt, SandboxFsRenameRequestSchema as W, SandboxStreamHandleSchema as Wt, SandboxExecCancelRequestSchema as X, SandboxFsWriteResultSchema as Y, SandboxExecCancelResultSchema as Z, SandboxTerminalResizeResultSchema as _, BoundedOpaqueIdentifierSchema as _t, GatewayRuntimeManagedPluginClientKindSchema as a, SandboxEnvironmentHandleRequestSchema as at, SandboxStreamReadRequestSchema as b, CanonicalBase64Schema as bt, GatewayRuntimeTrustedInvocationCorrelationSchema as c, SandboxEnvironmentStatusResultSchema as ct, GatewayStablePrincipalDigestSchema as d, SandboxOperationIdentitySchema as dt, SandboxExecStartResultSchema as et, ManagedAgentProjectionSchema as f, SandboxProvenTerminationOutcomeSchema as ft, SandboxTerminalResizeRequestSchema as g, BoundedByteCountSchema as gt, SandboxTerminalAttachResultSchema as h, SandboxTerminalOutcomeSchema as ht, GatewayRuntimeFrameworkKindSchema as i, SandboxEnvironmentCloseResultSchema as it, SandboxProcessStartResultSchema as j, SandboxBinaryChunkSchema as jt, SandboxProcessLogsResultSchema as k, SANDBOX_MAXIMUM_PATH_CHARACTERS as kt, GatewayRuntimeTrustedInvocationPrincipalSchema as l, SandboxAmbiguousOutcomeSchema as lt, SandboxTerminalAttachRequestSchema as m, SandboxRetainedResultLookupResultSchema as mt, GatewayRuntimeAttachmentMetadataSchema as n, SandboxExecWaitResultSchema as nt, GatewayRuntimeProjectionCohortDigestSchema as o, SandboxEnvironmentOpenRequestSchema as ot, compareUnicodeCodePointStrings as p, SandboxRetainedResultLookupRequestSchema as pt, SandboxFsStatResultSchema as q, Sha256DigestSchema as qt, GatewayRuntimeFrameworkIdentitySchema as r, SandboxTerminalSizeSchema as rt, GatewayRuntimeTrustedInvocationContextSchema as s, SandboxEnvironmentOpenResultSchema as st, SANDBOX_METHOD_CONTRACTS as t, SandboxExecWaitRequestSchema as tt, GatewayRuntimeTrustedInvocationRequesterSchema as u, SandboxOperationControlResultSchema as ut, SandboxStreamCloseRequestSchema as v, BoundedOperationMillisecondsSchema as vt, SandboxProcessCancelRequestSchema as w, SANDBOX_MAXIMUM_BINARY_BYTES as wt, SandboxStreamReadResultSchema as x, NonnegativeSafeIntegerSchema as xt, SandboxStreamCloseResultSchema as y, BoundedTextSchema as yt, SandboxFsMkdirResultSchema as z, SandboxGuestPathSchema as zt };
 
-//# sourceMappingURL=contracts-RgGW0RX2.js.map
+//# sourceMappingURL=contracts-3pjrcMjD.js.map