@agent-vm/agent-portal-sdk 0.0.148 → 0.0.149

package/contract-fixtures/portable-contracts/discovery/search-result.fixture.json

@@ -17,6 +17,10 @@
 			"ok": true
 		},
 		"canonicalJson": "{\"items\":[{\"id\":\"search-1\",\"status\":\"ok\",\"value\":{\"namespaceDiscovery\":[],\"tools\":[]}}],\"ok\":true}",
-		"refinementIdentities": ["portal.request-id.not-reserved", "portal.result.aggregate-status"]
+		"refinementIdentities": [
+			"portal.google.discovery-policy",
+			"portal.request-id.not-reserved",
+			"portal.result.aggregate-status"
+		]
 	}
 }

package/contract-fixtures/portable-contracts/files/attachment-cleaned-result.fixture.json

@@ -0,0 +1,16 @@
+{
+	"caseId": "attachment-cleaned-result",
+	"schemaId": "portal.attachment.result",
+	"tags": ["native-attachment", "accepted"],
+	"input": {
+		"kind": "cleaned"
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"kind": "cleaned"
+		},
+		"canonicalJson": "{\"kind\":\"cleaned\"}",
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-parent-path-rejected.fixture.json

@@ -0,0 +1,17 @@
+{
+	"caseId": "attachment-parent-path-rejected",
+	"schemaId": "portal.attachment.result",
+	"tags": ["native-attachment", "rejected"],
+	"input": {
+		"kind": "staged",
+		"stagingId": "11111111-1111-4111-8111-111111111111",
+		"path": "/home/hermes/.cache/agent-vm-native/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/portal-native-sun-11111111-1111-4111-8111-111111111111/../report.bin",
+		"byteLength": 4,
+		"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-public-request.fixture.json

@@ -0,0 +1,26 @@
+{
+	"caseId": "attachment-public-request",
+	"schemaId": "portal.file.request",
+	"tags": ["native-attachment", "accepted"],
+	"input": {
+		"action": "attach",
+		"source": {
+			"kind": "tool-vm-file",
+			"path": "report.bin"
+		},
+		"caption": "Report"
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"action": "attach",
+			"source": {
+				"kind": "tool-vm-file",
+				"path": "report.bin"
+			},
+			"caption": "Report"
+		},
+		"canonicalJson": "{\"action\":\"attach\",\"caption\":\"Report\",\"source\":{\"kind\":\"tool-vm-file\",\"path\":\"report.bin\"}}",
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-public-result.fixture.json

@@ -0,0 +1,26 @@
+{
+	"caseId": "attachment-public-result",
+	"schemaId": "portal.file.result",
+	"tags": ["native-attachment", "accepted"],
+	"input": {
+		"kind": "attached",
+		"messageId": "native-message",
+		"fileName": "report.bin",
+		"byteLength": 4,
+		"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+		"cleanup": "complete"
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"kind": "attached",
+			"messageId": "native-message",
+			"fileName": "report.bin",
+			"byteLength": 4,
+			"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+			"cleanup": "complete"
+		},
+		"canonicalJson": "{\"byteLength\":4,\"cleanup\":\"complete\",\"fileName\":\"report.bin\",\"kind\":\"attached\",\"messageId\":\"native-message\",\"sha256\":\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}",
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-recipient-rejected.fixture.json

@@ -0,0 +1,19 @@
+{
+	"caseId": "attachment-recipient-rejected",
+	"schemaId": "portal.attachment.request",
+	"tags": ["native-attachment", "rejected"],
+	"input": {
+		"action": "stage",
+		"source": {
+			"kind": "operation-file",
+			"referenceId": "55555555-5555-4555-8555-555555555555",
+			"path": "./report.bin"
+		},
+		"recipient": "caller-selected"
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-settle-request.fixture.json

@@ -0,0 +1,20 @@
+{
+	"caseId": "attachment-settle-request",
+	"schemaId": "portal.attachment.request",
+	"tags": ["native-attachment", "accepted"],
+	"input": {
+		"action": "settle",
+		"stagingId": "11111111-1111-4111-8111-111111111111",
+		"outcome": "unconfirmed"
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"action": "settle",
+			"stagingId": "11111111-1111-4111-8111-111111111111",
+			"outcome": "unconfirmed"
+		},
+		"canonicalJson": "{\"action\":\"settle\",\"outcome\":\"unconfirmed\",\"stagingId\":\"11111111-1111-4111-8111-111111111111\"}",
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-stage-request.fixture.json

@@ -0,0 +1,26 @@
+{
+	"caseId": "attachment-stage-request",
+	"schemaId": "portal.attachment.request",
+	"tags": ["native-attachment", "accepted"],
+	"input": {
+		"action": "stage",
+		"source": {
+			"kind": "operation-file",
+			"referenceId": "55555555-5555-4555-8555-555555555555",
+			"path": "./report.bin"
+		}
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"action": "stage",
+			"source": {
+				"kind": "operation-file",
+				"referenceId": "55555555-5555-4555-8555-555555555555",
+				"path": "./report.bin"
+			}
+		},
+		"canonicalJson": "{\"action\":\"stage\",\"source\":{\"kind\":\"operation-file\",\"path\":\"./report.bin\",\"referenceId\":\"55555555-5555-4555-8555-555555555555\"}}",
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/attachment-staged-result.fixture.json

@@ -0,0 +1,24 @@
+{
+	"caseId": "attachment-staged-result",
+	"schemaId": "portal.attachment.result",
+	"tags": ["native-attachment", "accepted"],
+	"input": {
+		"kind": "staged",
+		"stagingId": "11111111-1111-4111-8111-111111111111",
+		"path": "/home/hermes/.cache/agent-vm-native/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/portal-native-sun-11111111-1111-4111-8111-111111111111/report.bin",
+		"byteLength": 4,
+		"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"kind": "staged",
+			"stagingId": "11111111-1111-4111-8111-111111111111",
+			"path": "/home/hermes/.cache/agent-vm-native/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/portal-native-sun-11111111-1111-4111-8111-111111111111/report.bin",
+			"byteLength": 4,
+			"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+		},
+		"canonicalJson": "{\"byteLength\":4,\"kind\":\"staged\",\"path\":\"/home/hermes/.cache/agent-vm-native/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/portal-native-sun-11111111-1111-4111-8111-111111111111/report.bin\",\"sha256\":\"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\"stagingId\":\"11111111-1111-4111-8111-111111111111\"}",
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/file-list-request.fixture.json

@@ -0,0 +1,14 @@
+{
+	"caseId": "file-list-request",
+	"schemaId": "portal.file.request",
+	"tags": ["operation-file", "rejected", "obsolete-rpc"],
+	"input": {
+		"action": "list",
+		"referenceId": "55555555-5555-4555-8555-555555555555"
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/file-listed-result.fixture.json

@@ -0,0 +1,21 @@
+{
+	"caseId": "file-listed-result",
+	"schemaId": "portal.file.result",
+	"tags": ["operation-file", "rejected", "obsolete-rpc"],
+	"input": {
+		"kind": "listed",
+		"entries": [
+			{
+				"name": "report.pdf",
+				"kind": "file",
+				"byteLength": 5
+			}
+		],
+		"limitReached": false
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/file-materialized-result.fixture.json

@@ -0,0 +1,17 @@
+{
+	"caseId": "file-materialized-result",
+	"schemaId": "portal.file.result",
+	"tags": ["operation-file", "rejected", "obsolete-rpc"],
+	"input": {
+		"kind": "materialized",
+		"path": "/work/portal-file-example/report.pdf",
+		"byteLength": 0,
+		"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+		"cleanup": "complete"
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/file-request-root-rejected.fixture.json

@@ -0,0 +1,15 @@
+{
+	"caseId": "file-request-root-rejected",
+	"schemaId": "portal.file.request",
+	"tags": ["operation-file", "rejected", "obsolete-rpc"],
+	"input": {
+		"action": "list",
+		"referenceId": "55555555-5555-4555-8555-555555555555",
+		"root": "/etc"
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/files/file-result-payload-rejected.fixture.json

@@ -0,0 +1,18 @@
+{
+	"caseId": "file-result-payload-rejected",
+	"schemaId": "portal.file.result",
+	"tags": ["operation-file", "rejected", "obsolete-rpc"],
+	"input": {
+		"kind": "materialized",
+		"path": "/work/result",
+		"byteLength": 0,
+		"sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+		"cleanup": "complete",
+		"contentBase64": "AA=="
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portable.schema.invalid-union"],
+		"refinementIdentities": []
+	}
+}

package/contract-fixtures/portable-contracts/outcomes/completed-file-delivery-partial.fixture.json

@@ -0,0 +1,84 @@
+{
+	"caseId": "completed-file-delivery-partial",
+	"schemaId": "portal.call.result",
+	"tags": ["accepted", "outcome", "aggregate-status"],
+	"input": {
+		"items": [
+			{
+				"artifacts": [
+					{
+						"byteLength": 3,
+						"expiresAt": "2099-01-01T00:00:00.000Z",
+						"fingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+						"id": "complete-file"
+					}
+				],
+				"error": {
+					"code": "execution_failed",
+					"message": "One output could not be delivered."
+				},
+				"id": "call-1",
+				"operationId": "operation-1",
+				"outcome": {
+					"certainty": "proven",
+					"completion": "failed",
+					"kind": "completed",
+					"retryClass": "forbidden"
+				},
+				"owningGeneration": "generation-1",
+				"status": "error",
+				"value": {
+					"delivery": "partial",
+					"remoteExecution": {
+						"exitCode": 0
+					}
+				}
+			}
+		],
+		"ok": false
+	},
+	"expectation": {
+		"kind": "accepted",
+		"normalized": {
+			"items": [
+				{
+					"artifacts": [
+						{
+							"byteLength": 3,
+							"expiresAt": "2099-01-01T00:00:00.000Z",
+							"fingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+							"id": "complete-file"
+						}
+					],
+					"error": {
+						"code": "execution_failed",
+						"message": "One output could not be delivered."
+					},
+					"id": "call-1",
+					"operationId": "operation-1",
+					"outcome": {
+						"certainty": "proven",
+						"completion": "failed",
+						"kind": "completed",
+						"retryClass": "forbidden"
+					},
+					"owningGeneration": "generation-1",
+					"status": "error",
+					"value": {
+						"delivery": "partial",
+						"remoteExecution": {
+							"exitCode": 0
+						}
+					}
+				}
+			],
+			"ok": false
+		},
+		"canonicalJson": "{\"items\":[{\"artifacts\":[{\"byteLength\":3,\"expiresAt\":\"2099-01-01T00:00:00.000Z\",\"fingerprint\":\"sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\",\"id\":\"complete-file\"}],\"error\":{\"code\":\"execution_failed\",\"message\":\"One output could not be delivered.\"},\"id\":\"call-1\",\"operationId\":\"operation-1\",\"outcome\":{\"certainty\":\"proven\",\"completion\":\"failed\",\"kind\":\"completed\",\"retryClass\":\"forbidden\"},\"owningGeneration\":\"generation-1\",\"status\":\"error\",\"value\":{\"delivery\":\"partial\",\"remoteExecution\":{\"exitCode\":0}}}],\"ok\":false}",
+		"refinementIdentities": [
+			"portal.request-id.not-reserved",
+			"portal.result.aggregate-status",
+			"portal.result.outcome-algebra"
+		]
+	}
+}

package/contract-fixtures/portable-contracts/outcomes/invalid-retryable-file-delivery.fixture.json

@@ -0,0 +1,40 @@
+{
+	"caseId": "invalid-retryable-file-delivery",
+	"schemaId": "portal.call.item-result",
+	"tags": ["rejected", "outcome", "result-discriminant"],
+	"input": {
+		"artifacts": [
+			{
+				"byteLength": 3,
+				"expiresAt": "2099-01-01T00:00:00.000Z",
+				"fingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+				"id": "complete-file"
+			}
+		],
+		"error": {
+			"code": "execution_failed",
+			"message": "One output could not be delivered."
+		},
+		"id": "call-1",
+		"operationId": "operation-1",
+		"outcome": {
+			"certainty": "proven",
+			"completion": "failed",
+			"kind": "completed",
+			"retryClass": "policy-gated"
+		},
+		"owningGeneration": "generation-1",
+		"status": "error",
+		"value": {
+			"delivery": "partial",
+			"remoteExecution": {
+				"exitCode": 0
+			}
+		}
+	},
+	"expectation": {
+		"kind": "rejected",
+		"errorCodes": ["portal.result.status-shape"],
+		"refinementIdentities": ["portal.request-id.not-reserved"]
+	}
+}

package/dist/approval-surface/index.d.ts

@@ -1,2 +1,2 @@
-import { a as GatewayApprovalDecisionResult, c as GatewayApprovalPresentationRequestSchema, d as ApprovalChallengeReferenceSchema, f as ApprovalDecisionReference, h as ApprovalRequiredResultSchema, i as GatewayApprovalDecisionRequestSchema, l as sanitizeGatewayApprovalArguments, m as ApprovalRequiredResult, n as ApprovalPresentationOutcomeSchema, o as GatewayApprovalDecisionResultSchema, p as ApprovalDecisionReferenceSchema, r as GatewayApprovalDecisionRequest, s as GatewayApprovalPresentationRequest, t as ApprovalPresentationOutcome, u as ApprovalChallengeReference } from "../index-ex2lEawY.js";
+import { a as GatewayApprovalDecisionResult, c as GatewayApprovalPresentationRequestSchema, d as ApprovalChallengeReferenceSchema, f as ApprovalDecisionReference, h as ApprovalRequiredResultSchema, i as GatewayApprovalDecisionRequestSchema, l as sanitizeGatewayApprovalArguments, m as ApprovalRequiredResult, n as ApprovalPresentationOutcomeSchema, o as GatewayApprovalDecisionResultSchema, p as ApprovalDecisionReferenceSchema, r as GatewayApprovalDecisionRequest, s as GatewayApprovalPresentationRequest, t as ApprovalPresentationOutcome, u as ApprovalChallengeReference } from "../index-C5NsqQls.js";
 export { ApprovalChallengeReference, ApprovalChallengeReferenceSchema, ApprovalDecisionReference, ApprovalDecisionReferenceSchema, ApprovalPresentationOutcome, ApprovalPresentationOutcomeSchema, ApprovalRequiredResult, ApprovalRequiredResultSchema, GatewayApprovalDecisionRequest, GatewayApprovalDecisionRequestSchema, GatewayApprovalDecisionResult, GatewayApprovalDecisionResultSchema, GatewayApprovalPresentationRequest, GatewayApprovalPresentationRequestSchema, sanitizeGatewayApprovalArguments };

package/dist/approval-surface/index.js

@@ -1,2 +1,2 @@
-import { a as sanitizeGatewayApprovalArguments, c as ApprovalRequiredResultSchema, i as GatewayApprovalPresentationRequestSchema, n as GatewayApprovalDecisionRequestSchema, o as ApprovalChallengeReferenceSchema, r as GatewayApprovalDecisionResultSchema, s as ApprovalDecisionReferenceSchema, t as ApprovalPresentationOutcomeSchema } from "../approval-surface-phfnKUSF.js";
+import { a as sanitizeGatewayApprovalArguments, c as ApprovalRequiredResultSchema, i as GatewayApprovalPresentationRequestSchema, n as GatewayApprovalDecisionRequestSchema, o as ApprovalChallengeReferenceSchema, r as GatewayApprovalDecisionResultSchema, s as ApprovalDecisionReferenceSchema, t as ApprovalPresentationOutcomeSchema } from "../approval-surface-CfbAG-81.js";
 export { ApprovalChallengeReferenceSchema, ApprovalDecisionReferenceSchema, ApprovalPresentationOutcomeSchema, ApprovalRequiredResultSchema, GatewayApprovalDecisionRequestSchema, GatewayApprovalDecisionResultSchema, GatewayApprovalPresentationRequestSchema, sanitizeGatewayApprovalArguments };

package/dist/{approval-surface-phfnKUSF.js → approval-surface-CfbAG-81.js}

@@ -1,6 +1,6 @@
-import { n as withPortableSuperRefinement } from "./portable-refinement-authoring-C1Q92x2G.js";
-import { t as ItemIdSchema } from "./request-id-schema-Hq_6lSFV.js";
-import { n as PortalApprovalRequiredCallItemResultSchema, t as PortalApprovalChallengeSchema } from "./portal-call-result-schema-DM77S9CA.js";
+import { r as withPortableSuperRefinement } from "./portable-refinement-authoring-oFICWLOo.js";
+import { t as ItemIdSchema } from "./request-id-schema-DQ84TX-D.js";
+import { n as PortalApprovalRequiredCallItemResultSchema, t as PortalApprovalChallengeSchema } from "./portal-call-result-schema-DVJ6FyTz.js";
 import { z } from "zod";
 //#region src/approval-surface/models/approval-decision-reference-schema.ts
 const ApprovalDecisionReferenceSchema = z.object({
@@ -129,4 +129,4 @@ function sanitizeGatewayApprovalArguments(argumentsValue) {
 //#endregion
 export { sanitizeGatewayApprovalArguments as a, ApprovalRequiredResultSchema as c, GatewayApprovalPresentationRequestSchema as i, GatewayApprovalDecisionRequestSchema as n, ApprovalChallengeReferenceSchema as o, GatewayApprovalDecisionResultSchema as r, ApprovalDecisionReferenceSchema as s, ApprovalPresentationOutcomeSchema as t };
 
-//# sourceMappingURL=approval-surface-phfnKUSF.js.map
+//# sourceMappingURL=approval-surface-CfbAG-81.js.map

package/dist/{approval-surface-phfnKUSF.js.map → approval-surface-CfbAG-81.js.map}

@@ -1 +1 @@
-{"version":3,"file":"approval-surface-phfnKUSF.js","names":[],"sources":["../src/approval-surface/models/approval-decision-reference-schema.ts","../src/approval-surface/models/gateway-approval-presentation-schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { ItemIdSchema } from '../../contract-primitives/models/request-id-schema.js';\nimport {\n\tPortalApprovalChallengeSchema,\n\tPortalApprovalRequiredCallItemResultSchema,\n} from '../../portal-call-surface/models/portal-call-result-schema.js';\n\nexport const ApprovalDecisionReferenceSchema = z\n\t.object({\n\t\tapprovalId: z.string().min(1),\n\t\tcallId: ItemIdSchema,\n\t\texpiresAt: z.string().datetime(),\n\t\tstatus: z.enum(['approved', 'denied', 'expired']),\n\t})\n\t.strict();\n\nexport type ApprovalDecisionReference = z.infer<typeof ApprovalDecisionReferenceSchema>;\n\nexport const ApprovalRequiredResultSchema = PortalApprovalRequiredCallItemResultSchema;\n\nexport const ApprovalChallengeReferenceSchema = PortalApprovalChallengeSchema;\n\nexport type ApprovalRequiredResult = z.infer<typeof ApprovalRequiredResultSchema>;\nexport type ApprovalChallengeReference = z.infer<typeof ApprovalChallengeReferenceSchema>;\n","import { z } from 'zod';\n\nimport { ItemIdSchema } from '../../contract-primitives/models/request-id-schema.js';\nimport { withPortableSuperRefinement } from '../../portable-contracts/portable-refinement-authoring.js';\n\nconst MAXIMUM_APPROVAL_DISPLAY_DEPTH = 6;\nconst MAXIMUM_APPROVAL_DISPLAY_ENTRIES = 32;\nconst MAXIMUM_APPROVAL_DISPLAY_STRING_SCALARS = 256;\nconst MAXIMUM_APPROVAL_DISPLAY_BYTES = 4_096;\nconst APPROVAL_REDACTED_VALUE = '[REDACTED]';\nconst APPROVAL_TRUNCATED_VALUE = '[TRUNCATED]';\nconst APPROVAL_TRUNCATION_FIELD = '$truncated';\n\nconst credentialKeyPattern =\n\t/(?:token|password|secret|authorization|cookie|api[ _-]?key|private[ _-]?key)/iu;\nconst credentialValuePattern =\n\t/(?:-----BEGIN [A-Z ]*PRIVATE KEY-----|\\b(?:bearer|basic)\\s+\\S+|\\b(?:api[ _-]?key|token|password|secret|authorization|cookie)\\s*[:=]\\s*\\S+)/iu;\n\nexport const GatewayApprovalPresentationRequestSchema = withPortableSuperRefinement({\n\trefinement: (request, context) => {\n\t\tif (\n\t\t\tnew TextEncoder().encode(request.display.argumentsPreview).byteLength >\n\t\t\tMAXIMUM_APPROVAL_DISPLAY_BYTES\n\t\t) {\n\t\t\tcontext.addIssue({\n\t\t\t\tcode: 'custom',\n\t\t\t\tmessage: 'Approval argument preview exceeds the portable UTF-8 byte bound.',\n\t\t\t\tpath: ['display', 'argumentsPreview'],\n\t\t\t});\n\t\t}\n\t},\n\trefinementIdentity: 'gateway.approval.arguments-preview.utf8-bytes',\n\tschema: z\n\t\t.object({\n\t\t\tallowedDecisions: z.tuple([z.literal('approve'), z.literal('deny')]),\n\t\t\tchallengeId: z.string().uuid(),\n\t\t\tdisplay: z\n\t\t\t\t.object({\n\t\t\t\t\targumentsPreview: z.string().max(MAXIMUM_APPROVAL_DISPLAY_BYTES),\n\t\t\t\t})\n\t\t\t\t.strict(),\n\t\t\texpiresAt: z.string().datetime(),\n\t\t\titemId: ItemIdSchema,\n\t\t\tname: z.string().min(1).max(256),\n\t\t\tnamespace: z.string().min(1).max(256),\n\t\t})\n\t\t.strict(),\n});\n\nexport const ApprovalPresentationOutcomeSchema = z.discriminatedUnion('kind', [\n\tz.object({ kind: z.literal('approved') }).strict(),\n\tz.object({ kind: z.literal('denied') }).strict(),\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('cancelled'),\n\t\t\treason: z.enum(['challenge-expired', 'session-ended', 'user-cancelled']),\n\t\t})\n\t\t.strict(),\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('unavailable'),\n\t\t\treason: z.enum(['presenter-missing', 'presentation-failed']),\n\t\t})\n\t\t.strict(),\n]);\n\nexport const GatewayApprovalDecisionRequestSchema = z\n\t.object({\n\t\tchallengeId: z.string().uuid(),\n\t\tdecision: z.enum(['approve', 'deny']),\n\t})\n\t.strict();\n\nexport const GatewayApprovalDecisionResultSchema = z.discriminatedUnion('kind', [\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('recorded'),\n\t\t\tstate: z.enum(['approved', 'denied']),\n\t\t})\n\t\t.strict(),\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('rejected'),\n\t\t\treason: z.enum([\n\t\t\t\t'not-found',\n\t\t\t\t'expired',\n\t\t\t\t'stale-authority',\n\t\t\t\t'principal-mismatch',\n\t\t\t\t'already-decided',\n\t\t\t\t'presenter-not-authorized',\n\t\t\t]),\n\t\t})\n\t\t.strict(),\n]);\n\nexport type GatewayApprovalPresentationRequest = z.infer<\n\ttypeof GatewayApprovalPresentationRequestSchema\n>;\nexport type ApprovalPresentationOutcome = z.infer<typeof ApprovalPresentationOutcomeSchema>;\nexport type GatewayApprovalDecisionRequest = z.infer<typeof GatewayApprovalDecisionRequestSchema>;\nexport type GatewayApprovalDecisionResult = z.infer<typeof GatewayApprovalDecisionResultSchema>;\n\ninterface ApprovalTruncationMarker {\n\treadonly omittedCount: number;\n\treadonly value: typeof APPROVAL_TRUNCATED_VALUE;\n}\n\ntype SanitizedApprovalValue =\n\t| ApprovalTruncationMarker\n\t| boolean\n\t| null\n\t| number\n\t| string\n\t| readonly SanitizedApprovalValue[]\n\t| { readonly [key: string]: SanitizedApprovalValue };\n\nfunction truncateUnicodeScalars(value: string): string | ApprovalTruncationMarker {\n\tconst scalars = Array.from(value);\n\tif (scalars.length <= MAXIMUM_APPROVAL_DISPLAY_STRING_SCALARS) return value;\n\treturn {\n\t\tomittedCount: scalars.length - MAXIMUM_APPROVAL_DISPLAY_STRING_SCALARS,\n\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t};\n}\n\nfunction sanitizeApprovalValue(value: unknown, depth: number): SanitizedApprovalValue {\n\tif (depth >= MAXIMUM_APPROVAL_DISPLAY_DEPTH) {\n\t\treturn { omittedCount: 1, value: APPROVAL_TRUNCATED_VALUE };\n\t}\n\tif (value === null || typeof value === 'boolean') return value;\n\tif (typeof value === 'number') return Number.isFinite(value) ? value : String(value);\n\tif (typeof value === 'string') {\n\t\tif (credentialValuePattern.test(value)) return APPROVAL_REDACTED_VALUE;\n\t\treturn truncateUnicodeScalars(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\tconst included = value\n\t\t\t.slice(0, MAXIMUM_APPROVAL_DISPLAY_ENTRIES)\n\t\t\t.map((item) => sanitizeApprovalValue(item, depth + 1));\n\t\tif (value.length > MAXIMUM_APPROVAL_DISPLAY_ENTRIES) {\n\t\t\tincluded[MAXIMUM_APPROVAL_DISPLAY_ENTRIES - 1] = {\n\t\t\t\tomittedCount: value.length - (MAXIMUM_APPROVAL_DISPLAY_ENTRIES - 1),\n\t\t\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t\t\t};\n\t\t}\n\t\treturn included;\n\t}\n\tif (typeof value !== 'object') return '[UNSUPPORTED]';\n\n\tconst sortedEntries = Object.entries(value).toSorted(([leftKey], [rightKey]) =>\n\t\tleftKey.localeCompare(rightKey),\n\t);\n\tconst requiresTruncation = sortedEntries.length > MAXIMUM_APPROVAL_DISPLAY_ENTRIES;\n\tconst includedEntryCount = requiresTruncation\n\t\t? MAXIMUM_APPROVAL_DISPLAY_ENTRIES - 1\n\t\t: MAXIMUM_APPROVAL_DISPLAY_ENTRIES;\n\tconst sanitizedEntries = sortedEntries\n\t\t.slice(0, includedEntryCount)\n\t\t.map(\n\t\t\t([key, childValue]) =>\n\t\t\t\t[\n\t\t\t\t\tkey,\n\t\t\t\t\tcredentialKeyPattern.test(key)\n\t\t\t\t\t\t? APPROVAL_REDACTED_VALUE\n\t\t\t\t\t\t: sanitizeApprovalValue(childValue, depth + 1),\n\t\t\t\t] as const,\n\t\t);\n\tif (requiresTruncation) {\n\t\tsanitizedEntries.push([\n\t\t\tAPPROVAL_TRUNCATION_FIELD,\n\t\t\t{\n\t\t\t\tomittedCount: sortedEntries.length - includedEntryCount,\n\t\t\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t\t\t},\n\t\t]);\n\t}\n\treturn Object.fromEntries(sanitizedEntries);\n}\n\nexport function sanitizeGatewayApprovalArguments(argumentsValue: unknown): string {\n\tconst preview = JSON.stringify(sanitizeApprovalValue(argumentsValue, 0));\n\tconst byteLength = new TextEncoder().encode(preview).byteLength;\n\tif (byteLength <= MAXIMUM_APPROVAL_DISPLAY_BYTES) return preview;\n\treturn JSON.stringify({\n\t\tomittedCount: byteLength - MAXIMUM_APPROVAL_DISPLAY_BYTES,\n\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t});\n}\n"],"mappings":";;;;;AAQA,MAAa,kCAAkC,EAC7C,OAAO;CACP,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,QAAQ;CACR,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,KAAK;EAAC;EAAY;EAAU;EAAU,CAAC;CACjD,CAAC,CACD,QAAQ;AAIV,MAAa,+BAA+B;AAE5C,MAAa,mCAAmC;;;AChBhD,MAAM,iCAAiC;AACvC,MAAM,mCAAmC;AACzC,MAAM,0CAA0C;AAChD,MAAM,iCAAiC;AACvC,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAElC,MAAM,uBACL;AACD,MAAM,yBACL;AAED,MAAa,2CAA2C,4BAA4B;CACnF,aAAa,SAAS,YAAY;EACjC,IACC,IAAI,aAAa,CAAC,OAAO,QAAQ,QAAQ,iBAAiB,CAAC,aAC3D,gCAEA,QAAQ,SAAS;GAChB,MAAM;GACN,SAAS;GACT,MAAM,CAAC,WAAW,mBAAmB;GACrC,CAAC;;CAGJ,oBAAoB;CACpB,QAAQ,EACN,OAAO;EACP,kBAAkB,EAAE,MAAM,CAAC,EAAE,QAAQ,UAAU,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EACpE,aAAa,EAAE,QAAQ,CAAC,MAAM;EAC9B,SAAS,EACP,OAAO,EACP,kBAAkB,EAAE,QAAQ,CAAC,IAAI,+BAA+B,EAChE,CAAC,CACD,QAAQ;EACV,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,QAAQ;EACR,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;EAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;EACrC,CAAC,CACD,QAAQ;CACV,CAAC;AAEF,MAAa,oCAAoC,EAAE,mBAAmB,QAAQ;CAC7E,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,QAAQ;CAClD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC,QAAQ;CAChD,EACE,OAAO;EACP,MAAM,EAAE,QAAQ,YAAY;EAC5B,QAAQ,EAAE,KAAK;GAAC;GAAqB;GAAiB;GAAiB,CAAC;EACxE,CAAC,CACD,QAAQ;CACV,EACE,OAAO;EACP,MAAM,EAAE,QAAQ,cAAc;EAC9B,QAAQ,EAAE,KAAK,CAAC,qBAAqB,sBAAsB,CAAC;EAC5D,CAAC,CACD,QAAQ;CACV,CAAC;AAEF,MAAa,uCAAuC,EAClD,OAAO;CACP,aAAa,EAAE,QAAQ,CAAC,MAAM;CAC9B,UAAU,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC;CACrC,CAAC,CACD,QAAQ;AAEV,MAAa,sCAAsC,EAAE,mBAAmB,QAAQ,CAC/E,EACE,OAAO;CACP,MAAM,EAAE,QAAQ,WAAW;CAC3B,OAAO,EAAE,KAAK,CAAC,YAAY,SAAS,CAAC;CACrC,CAAC,CACD,QAAQ,EACV,EACE,OAAO;CACP,MAAM,EAAE,QAAQ,WAAW;CAC3B,QAAQ,EAAE,KAAK;EACd;EACA;EACA;EACA;EACA;EACA;EACA,CAAC;CACF,CAAC,CACD,QAAQ,CACV,CAAC;AAuBF,SAAS,uBAAuB,OAAkD;CACjF,MAAM,UAAU,MAAM,KAAK,MAAM;CACjC,IAAI,QAAQ,UAAU,yCAAyC,OAAO;CACtE,OAAO;EACN,cAAc,QAAQ,SAAS;EAC/B,OAAO;EACP;;AAGF,SAAS,sBAAsB,OAAgB,OAAuC;CACrF,IAAI,SAAS,gCACZ,OAAO;EAAE,cAAc;EAAG,OAAO;EAA0B;CAE5D,IAAI,UAAU,QAAQ,OAAO,UAAU,WAAW,OAAO;CACzD,IAAI,OAAO,UAAU,UAAU,OAAO,OAAO,SAAS,MAAM,GAAG,QAAQ,OAAO,MAAM;CACpF,IAAI,OAAO,UAAU,UAAU;EAC9B,IAAI,uBAAuB,KAAK,MAAM,EAAE,OAAO;EAC/C,OAAO,uBAAuB,MAAM;;CAErC,IAAI,MAAM,QAAQ,MAAM,EAAE;EACzB,MAAM,WAAW,MACf,MAAM,GAAG,iCAAiC,CAC1C,KAAK,SAAS,sBAAsB,MAAM,QAAQ,EAAE,CAAC;EACvD,IAAI,MAAM,SAAS,kCAClB,SAAS,mCAAmC,KAAK;GAChD,cAAc,MAAM,UAAU,mCAAmC;GACjE,OAAO;GACP;EAEF,OAAO;;CAER,IAAI,OAAO,UAAU,UAAU,OAAO;CAEtC,MAAM,gBAAgB,OAAO,QAAQ,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,cACjE,QAAQ,cAAc,SAAS,CAC/B;CACD,MAAM,qBAAqB,cAAc,SAAS;CAClD,MAAM,qBAAqB,qBACxB,mCAAmC,IACnC;CACH,MAAM,mBAAmB,cACvB,MAAM,GAAG,mBAAmB,CAC5B,KACC,CAAC,KAAK,gBACN,CACC,KACA,qBAAqB,KAAK,IAAI,GAC3B,0BACA,sBAAsB,YAAY,QAAQ,EAAE,CAC/C,CACF;CACF,IAAI,oBACH,iBAAiB,KAAK,CACrB,2BACA;EACC,cAAc,cAAc,SAAS;EACrC,OAAO;EACP,CACD,CAAC;CAEH,OAAO,OAAO,YAAY,iBAAiB;;AAG5C,SAAgB,iCAAiC,gBAAiC;CACjF,MAAM,UAAU,KAAK,UAAU,sBAAsB,gBAAgB,EAAE,CAAC;CACxE,MAAM,aAAa,IAAI,aAAa,CAAC,OAAO,QAAQ,CAAC;CACrD,IAAI,cAAc,gCAAgC,OAAO;CACzD,OAAO,KAAK,UAAU;EACrB,cAAc,aAAa;EAC3B,OAAO;EACP,CAAC"}
+{"version":3,"file":"approval-surface-CfbAG-81.js","names":[],"sources":["../src/approval-surface/models/approval-decision-reference-schema.ts","../src/approval-surface/models/gateway-approval-presentation-schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { ItemIdSchema } from '../../contract-primitives/models/request-id-schema.js';\nimport {\n\tPortalApprovalChallengeSchema,\n\tPortalApprovalRequiredCallItemResultSchema,\n} from '../../portal-call-surface/models/portal-call-result-schema.js';\n\nexport const ApprovalDecisionReferenceSchema = z\n\t.object({\n\t\tapprovalId: z.string().min(1),\n\t\tcallId: ItemIdSchema,\n\t\texpiresAt: z.string().datetime(),\n\t\tstatus: z.enum(['approved', 'denied', 'expired']),\n\t})\n\t.strict();\n\nexport type ApprovalDecisionReference = z.infer<typeof ApprovalDecisionReferenceSchema>;\n\nexport const ApprovalRequiredResultSchema = PortalApprovalRequiredCallItemResultSchema;\n\nexport const ApprovalChallengeReferenceSchema = PortalApprovalChallengeSchema;\n\nexport type ApprovalRequiredResult = z.infer<typeof ApprovalRequiredResultSchema>;\nexport type ApprovalChallengeReference = z.infer<typeof ApprovalChallengeReferenceSchema>;\n","import { z } from 'zod';\n\nimport { ItemIdSchema } from '../../contract-primitives/models/request-id-schema.js';\nimport { withPortableSuperRefinement } from '../../portable-contracts/portable-refinement-authoring.js';\n\nconst MAXIMUM_APPROVAL_DISPLAY_DEPTH = 6;\nconst MAXIMUM_APPROVAL_DISPLAY_ENTRIES = 32;\nconst MAXIMUM_APPROVAL_DISPLAY_STRING_SCALARS = 256;\nconst MAXIMUM_APPROVAL_DISPLAY_BYTES = 4_096;\nconst APPROVAL_REDACTED_VALUE = '[REDACTED]';\nconst APPROVAL_TRUNCATED_VALUE = '[TRUNCATED]';\nconst APPROVAL_TRUNCATION_FIELD = '$truncated';\n\nconst credentialKeyPattern =\n\t/(?:token|password|secret|authorization|cookie|api[ _-]?key|private[ _-]?key)/iu;\nconst credentialValuePattern =\n\t/(?:-----BEGIN [A-Z ]*PRIVATE KEY-----|\\b(?:bearer|basic)\\s+\\S+|\\b(?:api[ _-]?key|token|password|secret|authorization|cookie)\\s*[:=]\\s*\\S+)/iu;\n\nexport const GatewayApprovalPresentationRequestSchema = withPortableSuperRefinement({\n\trefinement: (request, context) => {\n\t\tif (\n\t\t\tnew TextEncoder().encode(request.display.argumentsPreview).byteLength >\n\t\t\tMAXIMUM_APPROVAL_DISPLAY_BYTES\n\t\t) {\n\t\t\tcontext.addIssue({\n\t\t\t\tcode: 'custom',\n\t\t\t\tmessage: 'Approval argument preview exceeds the portable UTF-8 byte bound.',\n\t\t\t\tpath: ['display', 'argumentsPreview'],\n\t\t\t});\n\t\t}\n\t},\n\trefinementIdentity: 'gateway.approval.arguments-preview.utf8-bytes',\n\tschema: z\n\t\t.object({\n\t\t\tallowedDecisions: z.tuple([z.literal('approve'), z.literal('deny')]),\n\t\t\tchallengeId: z.string().uuid(),\n\t\t\tdisplay: z\n\t\t\t\t.object({\n\t\t\t\t\targumentsPreview: z.string().max(MAXIMUM_APPROVAL_DISPLAY_BYTES),\n\t\t\t\t})\n\t\t\t\t.strict(),\n\t\t\texpiresAt: z.string().datetime(),\n\t\t\titemId: ItemIdSchema,\n\t\t\tname: z.string().min(1).max(256),\n\t\t\tnamespace: z.string().min(1).max(256),\n\t\t})\n\t\t.strict(),\n});\n\nexport const ApprovalPresentationOutcomeSchema = z.discriminatedUnion('kind', [\n\tz.object({ kind: z.literal('approved') }).strict(),\n\tz.object({ kind: z.literal('denied') }).strict(),\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('cancelled'),\n\t\t\treason: z.enum(['challenge-expired', 'session-ended', 'user-cancelled']),\n\t\t})\n\t\t.strict(),\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('unavailable'),\n\t\t\treason: z.enum(['presenter-missing', 'presentation-failed']),\n\t\t})\n\t\t.strict(),\n]);\n\nexport const GatewayApprovalDecisionRequestSchema = z\n\t.object({\n\t\tchallengeId: z.string().uuid(),\n\t\tdecision: z.enum(['approve', 'deny']),\n\t})\n\t.strict();\n\nexport const GatewayApprovalDecisionResultSchema = z.discriminatedUnion('kind', [\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('recorded'),\n\t\t\tstate: z.enum(['approved', 'denied']),\n\t\t})\n\t\t.strict(),\n\tz\n\t\t.object({\n\t\t\tkind: z.literal('rejected'),\n\t\t\treason: z.enum([\n\t\t\t\t'not-found',\n\t\t\t\t'expired',\n\t\t\t\t'stale-authority',\n\t\t\t\t'principal-mismatch',\n\t\t\t\t'already-decided',\n\t\t\t\t'presenter-not-authorized',\n\t\t\t]),\n\t\t})\n\t\t.strict(),\n]);\n\nexport type GatewayApprovalPresentationRequest = z.infer<\n\ttypeof GatewayApprovalPresentationRequestSchema\n>;\nexport type ApprovalPresentationOutcome = z.infer<typeof ApprovalPresentationOutcomeSchema>;\nexport type GatewayApprovalDecisionRequest = z.infer<typeof GatewayApprovalDecisionRequestSchema>;\nexport type GatewayApprovalDecisionResult = z.infer<typeof GatewayApprovalDecisionResultSchema>;\n\ninterface ApprovalTruncationMarker {\n\treadonly omittedCount: number;\n\treadonly value: typeof APPROVAL_TRUNCATED_VALUE;\n}\n\ntype SanitizedApprovalValue =\n\t| ApprovalTruncationMarker\n\t| boolean\n\t| null\n\t| number\n\t| string\n\t| readonly SanitizedApprovalValue[]\n\t| { readonly [key: string]: SanitizedApprovalValue };\n\nfunction truncateUnicodeScalars(value: string): string | ApprovalTruncationMarker {\n\tconst scalars = Array.from(value);\n\tif (scalars.length <= MAXIMUM_APPROVAL_DISPLAY_STRING_SCALARS) return value;\n\treturn {\n\t\tomittedCount: scalars.length - MAXIMUM_APPROVAL_DISPLAY_STRING_SCALARS,\n\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t};\n}\n\nfunction sanitizeApprovalValue(value: unknown, depth: number): SanitizedApprovalValue {\n\tif (depth >= MAXIMUM_APPROVAL_DISPLAY_DEPTH) {\n\t\treturn { omittedCount: 1, value: APPROVAL_TRUNCATED_VALUE };\n\t}\n\tif (value === null || typeof value === 'boolean') return value;\n\tif (typeof value === 'number') return Number.isFinite(value) ? value : String(value);\n\tif (typeof value === 'string') {\n\t\tif (credentialValuePattern.test(value)) return APPROVAL_REDACTED_VALUE;\n\t\treturn truncateUnicodeScalars(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\tconst included = value\n\t\t\t.slice(0, MAXIMUM_APPROVAL_DISPLAY_ENTRIES)\n\t\t\t.map((item) => sanitizeApprovalValue(item, depth + 1));\n\t\tif (value.length > MAXIMUM_APPROVAL_DISPLAY_ENTRIES) {\n\t\t\tincluded[MAXIMUM_APPROVAL_DISPLAY_ENTRIES - 1] = {\n\t\t\t\tomittedCount: value.length - (MAXIMUM_APPROVAL_DISPLAY_ENTRIES - 1),\n\t\t\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t\t\t};\n\t\t}\n\t\treturn included;\n\t}\n\tif (typeof value !== 'object') return '[UNSUPPORTED]';\n\n\tconst sortedEntries = Object.entries(value).toSorted(([leftKey], [rightKey]) =>\n\t\tleftKey.localeCompare(rightKey),\n\t);\n\tconst requiresTruncation = sortedEntries.length > MAXIMUM_APPROVAL_DISPLAY_ENTRIES;\n\tconst includedEntryCount = requiresTruncation\n\t\t? MAXIMUM_APPROVAL_DISPLAY_ENTRIES - 1\n\t\t: MAXIMUM_APPROVAL_DISPLAY_ENTRIES;\n\tconst sanitizedEntries = sortedEntries\n\t\t.slice(0, includedEntryCount)\n\t\t.map(\n\t\t\t([key, childValue]) =>\n\t\t\t\t[\n\t\t\t\t\tkey,\n\t\t\t\t\tcredentialKeyPattern.test(key)\n\t\t\t\t\t\t? APPROVAL_REDACTED_VALUE\n\t\t\t\t\t\t: sanitizeApprovalValue(childValue, depth + 1),\n\t\t\t\t] as const,\n\t\t);\n\tif (requiresTruncation) {\n\t\tsanitizedEntries.push([\n\t\t\tAPPROVAL_TRUNCATION_FIELD,\n\t\t\t{\n\t\t\t\tomittedCount: sortedEntries.length - includedEntryCount,\n\t\t\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t\t\t},\n\t\t]);\n\t}\n\treturn Object.fromEntries(sanitizedEntries);\n}\n\nexport function sanitizeGatewayApprovalArguments(argumentsValue: unknown): string {\n\tconst preview = JSON.stringify(sanitizeApprovalValue(argumentsValue, 0));\n\tconst byteLength = new TextEncoder().encode(preview).byteLength;\n\tif (byteLength <= MAXIMUM_APPROVAL_DISPLAY_BYTES) return preview;\n\treturn JSON.stringify({\n\t\tomittedCount: byteLength - MAXIMUM_APPROVAL_DISPLAY_BYTES,\n\t\tvalue: APPROVAL_TRUNCATED_VALUE,\n\t});\n}\n"],"mappings":";;;;;AAQA,MAAa,kCAAkC,EAC7C,OAAO;CACP,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,QAAQ;CACR,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,QAAQ,EAAE,KAAK;EAAC;EAAY;EAAU;EAAU,CAAC;CACjD,CAAC,CACD,QAAQ;AAIV,MAAa,+BAA+B;AAE5C,MAAa,mCAAmC;;;AChBhD,MAAM,iCAAiC;AACvC,MAAM,mCAAmC;AACzC,MAAM,0CAA0C;AAChD,MAAM,iCAAiC;AACvC,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AACjC,MAAM,4BAA4B;AAElC,MAAM,uBACL;AACD,MAAM,yBACL;AAED,MAAa,2CAA2C,4BAA4B;CACnF,aAAa,SAAS,YAAY;EACjC,IACC,IAAI,aAAa,CAAC,OAAO,QAAQ,QAAQ,iBAAiB,CAAC,aAC3D,gCAEA,QAAQ,SAAS;GAChB,MAAM;GACN,SAAS;GACT,MAAM,CAAC,WAAW,mBAAmB;GACrC,CAAC;;CAGJ,oBAAoB;CACpB,QAAQ,EACN,OAAO;EACP,kBAAkB,EAAE,MAAM,CAAC,EAAE,QAAQ,UAAU,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EACpE,aAAa,EAAE,QAAQ,CAAC,MAAM;EAC9B,SAAS,EACP,OAAO,EACP,kBAAkB,EAAE,QAAQ,CAAC,IAAI,+BAA+B,EAChE,CAAC,CACD,QAAQ;EACV,WAAW,EAAE,QAAQ,CAAC,UAAU;EAChC,QAAQ;EACR,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;EAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;EACrC,CAAC,CACD,QAAQ;CACV,CAAC;AAEF,MAAa,oCAAoC,EAAE,mBAAmB,QAAQ;CAC7E,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,QAAQ;CAClD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC,QAAQ;CAChD,EACE,OAAO;EACP,MAAM,EAAE,QAAQ,YAAY;EAC5B,QAAQ,EAAE,KAAK;GAAC;GAAqB;GAAiB;GAAiB,CAAC;EACxE,CAAC,CACD,QAAQ;CACV,EACE,OAAO;EACP,MAAM,EAAE,QAAQ,cAAc;EAC9B,QAAQ,EAAE,KAAK,CAAC,qBAAqB,sBAAsB,CAAC;EAC5D,CAAC,CACD,QAAQ;CACV,CAAC;AAEF,MAAa,uCAAuC,EAClD,OAAO;CACP,aAAa,EAAE,QAAQ,CAAC,MAAM;CAC9B,UAAU,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC;CACrC,CAAC,CACD,QAAQ;AAEV,MAAa,sCAAsC,EAAE,mBAAmB,QAAQ,CAC/E,EACE,OAAO;CACP,MAAM,EAAE,QAAQ,WAAW;CAC3B,OAAO,EAAE,KAAK,CAAC,YAAY,SAAS,CAAC;CACrC,CAAC,CACD,QAAQ,EACV,EACE,OAAO;CACP,MAAM,EAAE,QAAQ,WAAW;CAC3B,QAAQ,EAAE,KAAK;EACd;EACA;EACA;EACA;EACA;EACA;EACA,CAAC;CACF,CAAC,CACD,QAAQ,CACV,CAAC;AAuBF,SAAS,uBAAuB,OAAkD;CACjF,MAAM,UAAU,MAAM,KAAK,MAAM;CACjC,IAAI,QAAQ,UAAU,yCAAyC,OAAO;CACtE,OAAO;EACN,cAAc,QAAQ,SAAS;EAC/B,OAAO;EACP;;AAGF,SAAS,sBAAsB,OAAgB,OAAuC;CACrF,IAAI,SAAS,gCACZ,OAAO;EAAE,cAAc;EAAG,OAAO;EAA0B;CAE5D,IAAI,UAAU,QAAQ,OAAO,UAAU,WAAW,OAAO;CACzD,IAAI,OAAO,UAAU,UAAU,OAAO,OAAO,SAAS,MAAM,GAAG,QAAQ,OAAO,MAAM;CACpF,IAAI,OAAO,UAAU,UAAU;EAC9B,IAAI,uBAAuB,KAAK,MAAM,EAAE,OAAO;EAC/C,OAAO,uBAAuB,MAAM;;CAErC,IAAI,MAAM,QAAQ,MAAM,EAAE;EACzB,MAAM,WAAW,MACf,MAAM,GAAG,iCAAiC,CAC1C,KAAK,SAAS,sBAAsB,MAAM,QAAQ,EAAE,CAAC;EACvD,IAAI,MAAM,SAAS,kCAClB,SAAS,mCAAmC,KAAK;GAChD,cAAc,MAAM,UAAU,mCAAmC;GACjE,OAAO;GACP;EAEF,OAAO;;CAER,IAAI,OAAO,UAAU,UAAU,OAAO;CAEtC,MAAM,gBAAgB,OAAO,QAAQ,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,cACjE,QAAQ,cAAc,SAAS,CAC/B;CACD,MAAM,qBAAqB,cAAc,SAAS;CAClD,MAAM,qBAAqB,qBACxB,mCAAmC,IACnC;CACH,MAAM,mBAAmB,cACvB,MAAM,GAAG,mBAAmB,CAC5B,KACC,CAAC,KAAK,gBACN,CACC,KACA,qBAAqB,KAAK,IAAI,GAC3B,0BACA,sBAAsB,YAAY,QAAQ,EAAE,CAC/C,CACF;CACF,IAAI,oBACH,iBAAiB,KAAK,CACrB,2BACA;EACC,cAAc,cAAc,SAAS;EACrC,OAAO;EACP,CACD,CAAC;CAEH,OAAO,OAAO,YAAY,iBAAiB;;AAG5C,SAAgB,iCAAiC,gBAAiC;CACjF,MAAM,UAAU,KAAK,UAAU,sBAAsB,gBAAgB,EAAE,CAAC;CACxE,MAAM,aAAa,IAAI,aAAa,CAAC,OAAO,QAAQ,CAAC;CACrD,IAAI,cAAc,gCAAgC,OAAO;CACzD,OAAO,KAAK,UAAU;EACrB,cAAc,aAAa;EAC3B,OAAO;EACP,CAAC"}

package/dist/artifact-surface/index.js

@@ -1,3 +1,3 @@
 import { t as ArtifactReferenceSchema } from "../artifact-reference-schema-CiEjxYPd.js";
-import { a as PortalArtifactReadRequestSchema, c as PortalArtifactRedactorSchema, i as parsePortalArtifactReadResourceRequest, n as PortalArtifactReadResourceRequestSchema, o as PortalArtifactReadResultSchema, r as createPortalArtifactReadResourceRequest, s as PortalArtifactRecordSchema, t as PORTAL_ARTIFACT_READ_REQUEST_META_KEY } from "../artifact-surface-CHEu4tDd.js";
+import { a as PortalArtifactReadRequestSchema, c as PortalArtifactRedactorSchema, i as parsePortalArtifactReadResourceRequest, n as PortalArtifactReadResourceRequestSchema, o as PortalArtifactReadResultSchema, r as createPortalArtifactReadResourceRequest, s as PortalArtifactRecordSchema, t as PORTAL_ARTIFACT_READ_REQUEST_META_KEY } from "../artifact-surface-Db5KQOA0.js";
 export { ArtifactReferenceSchema, PORTAL_ARTIFACT_READ_REQUEST_META_KEY, PortalArtifactReadRequestSchema, PortalArtifactReadResourceRequestSchema, PortalArtifactReadResultSchema, PortalArtifactRecordSchema, PortalArtifactRedactorSchema, createPortalArtifactReadResourceRequest, parsePortalArtifactReadResourceRequest };

package/dist/{artifact-surface-CHEu4tDd.js → artifact-surface-Db5KQOA0.js}

@@ -1,5 +1,5 @@
 import { t as ArtifactReferenceSchema } from "./artifact-reference-schema-CiEjxYPd.js";
-import { o as JsonValueSchema } from "./json-value-schema-Br5M7d7X.js";
+import { o as JsonValueSchema } from "./json-value-schema-rxMrw9uZ.js";
 import { z } from "zod";
 //#region src/artifact-surface/models/portal-artifact-contract-schema.ts
 const PortalArtifactRecordSchema = z.object({
@@ -62,4 +62,4 @@ function parsePortalArtifactReadResourceRequest(resourceRequest) {
 //#endregion
 export { PortalArtifactReadRequestSchema as a, PortalArtifactRedactorSchema as c, parsePortalArtifactReadResourceRequest as i, PortalArtifactReadResourceRequestSchema as n, PortalArtifactReadResultSchema as o, createPortalArtifactReadResourceRequest as r, PortalArtifactRecordSchema as s, PORTAL_ARTIFACT_READ_REQUEST_META_KEY as t };
 
-//# sourceMappingURL=artifact-surface-CHEu4tDd.js.map
+//# sourceMappingURL=artifact-surface-Db5KQOA0.js.map

package/dist/{artifact-surface-CHEu4tDd.js.map → artifact-surface-Db5KQOA0.js.map}

@@ -1 +1 @@
-{"version":3,"file":"artifact-surface-CHEu4tDd.js","names":[],"sources":["../src/artifact-surface/models/portal-artifact-contract-schema.ts","../src/artifact-surface/artifact-read-resource-uri.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { JsonValueSchema } from '../../contract-primitives/models/json-value-schema.js';\nimport { ArtifactReferenceSchema } from './artifact-reference-schema.js';\n\nexport const PortalArtifactRecordSchema = z\n\t.object({\n\t\tmetadata: z.record(z.string(), JsonValueSchema).optional(),\n\t\treference: ArtifactReferenceSchema,\n\t\tredactionProfile: z.string().min(1),\n\t})\n\t.strict();\n\nexport type PortalArtifactRecord = z.infer<typeof PortalArtifactRecordSchema>;\n\nexport const PortalArtifactReadRequestSchema = z\n\t.object({\n\t\tmaxBytes: z\n\t\t\t.number()\n\t\t\t.int()\n\t\t\t.positive()\n\t\t\t.max(16 * 1024 * 1024),\n\t\toffsetBytes: z.number().int().nonnegative().default(0),\n\t\treference: ArtifactReferenceSchema,\n\t})\n\t.strict();\n\nexport type PortalArtifactReadRequest = z.infer<typeof PortalArtifactReadRequestSchema>;\n\nexport const PortalArtifactReadResultSchema = z\n\t.object({\n\t\tcontentBase64: z.string(),\n\t\tmediaType: z.string().optional(),\n\t\toffsetBytes: z.number().int().nonnegative(),\n\t\treference: ArtifactReferenceSchema,\n\t\ttruncated: z.boolean().default(false),\n\t})\n\t.strict();\n\nexport type PortalArtifactReadResult = z.infer<typeof PortalArtifactReadResultSchema>;\n\nexport const PortalArtifactRedactorSchema = z\n\t.object({\n\t\tmaxModelVisibleBytes: z.number().int().nonnegative(),\n\t\tprofile: z.string().min(1),\n\t})\n\t.strict();\n\nexport type PortalArtifactRedactor = z.infer<typeof PortalArtifactRedactorSchema>;\n","import { z } from 'zod';\n\nimport {\n\tPortalArtifactReadRequestSchema,\n\ttype PortalArtifactReadRequest,\n} from './models/portal-artifact-contract-schema.js';\n\nexport const PORTAL_ARTIFACT_READ_REQUEST_META_KEY = 'agent-vm/artifact-read-request';\n\nconst artifactReadResourceProtocol = 'agent-vm-artifact:';\nconst artifactReadResourceHost = 'read';\n\nexport const PortalArtifactReadResourceRequestSchema = z\n\t.object({\n\t\t_meta: z\n\t\t\t.object({\n\t\t\t\t[PORTAL_ARTIFACT_READ_REQUEST_META_KEY]: PortalArtifactReadRequestSchema,\n\t\t\t})\n\t\t\t.strict(),\n\t\turi: z.string().min(1),\n\t})\n\t.strict();\n\nexport type PortalArtifactReadResourceRequest = z.infer<\n\ttypeof PortalArtifactReadResourceRequestSchema\n>;\n\nfunction createOpaqueArtifactResourceUri(artifactId: string): string {\n\tconst resourceUri = new URL(`${artifactReadResourceProtocol}//${artifactReadResourceHost}`);\n\tresourceUri.searchParams.set('id', artifactId);\n\treturn resourceUri.toString();\n}\n\nfunction parseOpaqueArtifactResourceId(uri: string): string {\n\tconst resourceUri = new URL(uri);\n\tif (\n\t\tresourceUri.protocol !== artifactReadResourceProtocol ||\n\t\tresourceUri.hostname !== artifactReadResourceHost ||\n\t\tresourceUri.port.length > 0 ||\n\t\tresourceUri.username.length > 0 ||\n\t\tresourceUri.password.length > 0 ||\n\t\t(resourceUri.pathname.length > 0 && resourceUri.pathname !== '/') ||\n\t\tresourceUri.hash.length > 0 ||\n\t\t[...resourceUri.searchParams.keys()].some((parameterName) => parameterName !== 'id')\n\t) {\n\t\tthrow new TypeError('Artifact read resource URI has an invalid origin or field.');\n\t}\n\tconst artifactIds = resourceUri.searchParams.getAll('id');\n\tif (artifactIds.length !== 1 || artifactIds[0] === undefined || artifactIds[0].length === 0) {\n\t\tthrow new TypeError('Artifact read resource URI requires one opaque artifact identifier.');\n\t}\n\treturn artifactIds[0];\n}\n\n/** Build one standard MCP read request whose URI exposes only the opaque artifact ID. */\nexport function createPortalArtifactReadResourceRequest(\n\trequest: PortalArtifactReadRequest,\n): PortalArtifactReadResourceRequest {\n\tconst parsedRequest = PortalArtifactReadRequestSchema.parse(request);\n\treturn PortalArtifactReadResourceRequestSchema.parse({\n\t\t_meta: { [PORTAL_ARTIFACT_READ_REQUEST_META_KEY]: parsedRequest },\n\t\turi: createOpaqueArtifactResourceUri(parsedRequest.reference.id),\n\t});\n}\n\n/** Recover and validate the complete public read request from standard MCP params. */\nexport function parsePortalArtifactReadResourceRequest(\n\tresourceRequest: unknown,\n): PortalArtifactReadRequest {\n\tconst parsedResourceRequest = PortalArtifactReadResourceRequestSchema.parse(resourceRequest);\n\t// oxlint-disable-next-line no-underscore-dangle -- `_meta` is the standard MCP protocol field name.\n\tconst publicRequest = parsedResourceRequest._meta[PORTAL_ARTIFACT_READ_REQUEST_META_KEY];\n\tif (parseOpaqueArtifactResourceId(parsedResourceRequest.uri) !== publicRequest.reference.id) {\n\t\tthrow new TypeError('Artifact read resource URI does not match its public request.');\n\t}\n\treturn publicRequest;\n}\n"],"mappings":";;;;AAKA,MAAa,6BAA6B,EACxC,OAAO;CACP,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU;CAC1D,WAAW;CACX,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACnC,CAAC,CACD,QAAQ;AAIV,MAAa,kCAAkC,EAC7C,OAAO;CACP,UAAU,EACR,QAAQ,CACR,KAAK,CACL,UAAU,CACV,IAAI,KAAK,OAAO,KAAK;CACvB,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;CACtD,WAAW;CACX,CAAC,CACD,QAAQ;AAIV,MAAa,iCAAiC,EAC5C,OAAO;CACP,eAAe,EAAE,QAAQ;CACzB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CAC3C,WAAW;CACX,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;CACrC,CAAC,CACD,QAAQ;AAIV,MAAa,+BAA+B,EAC1C,OAAO;CACP,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CACpD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,CAAC,CACD,QAAQ;;;ACvCV,MAAa,wCAAwC;AAErD,MAAM,+BAA+B;AACrC,MAAM,2BAA2B;AAEjC,MAAa,0CAA0C,EACrD,OAAO;CACP,OAAO,EACL,OAAO,GACN,wCAAwC,iCACzC,CAAC,CACD,QAAQ;CACV,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE;CACtB,CAAC,CACD,QAAQ;AAMV,SAAS,gCAAgC,YAA4B;CACpE,MAAM,cAAc,IAAI,IAAI,GAAG,6BAA6B,IAAI,2BAA2B;CAC3F,YAAY,aAAa,IAAI,MAAM,WAAW;CAC9C,OAAO,YAAY,UAAU;;AAG9B,SAAS,8BAA8B,KAAqB;CAC3D,MAAM,cAAc,IAAI,IAAI,IAAI;CAChC,IACC,YAAY,aAAa,gCACzB,YAAY,aAAa,4BACzB,YAAY,KAAK,SAAS,KAC1B,YAAY,SAAS,SAAS,KAC9B,YAAY,SAAS,SAAS,KAC7B,YAAY,SAAS,SAAS,KAAK,YAAY,aAAa,OAC7D,YAAY,KAAK,SAAS,KAC1B,CAAC,GAAG,YAAY,aAAa,MAAM,CAAC,CAAC,MAAM,kBAAkB,kBAAkB,KAAK,EAEpF,MAAM,IAAI,UAAU,6DAA6D;CAElF,MAAM,cAAc,YAAY,aAAa,OAAO,KAAK;CACzD,IAAI,YAAY,WAAW,KAAK,YAAY,OAAO,KAAA,KAAa,YAAY,GAAG,WAAW,GACzF,MAAM,IAAI,UAAU,sEAAsE;CAE3F,OAAO,YAAY;;;AAIpB,SAAgB,wCACf,SACoC;CACpC,MAAM,gBAAgB,gCAAgC,MAAM,QAAQ;CACpE,OAAO,wCAAwC,MAAM;EACpD,OAAO,GAAG,wCAAwC,eAAe;EACjE,KAAK,gCAAgC,cAAc,UAAU,GAAG;EAChE,CAAC;;;AAIH,SAAgB,uCACf,iBAC4B;CAC5B,MAAM,wBAAwB,wCAAwC,MAAM,gBAAgB;CAE5F,MAAM,gBAAgB,sBAAsB,MAAM;CAClD,IAAI,8BAA8B,sBAAsB,IAAI,KAAK,cAAc,UAAU,IACxF,MAAM,IAAI,UAAU,gEAAgE;CAErF,OAAO"}
+{"version":3,"file":"artifact-surface-Db5KQOA0.js","names":[],"sources":["../src/artifact-surface/models/portal-artifact-contract-schema.ts","../src/artifact-surface/artifact-read-resource-uri.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { JsonValueSchema } from '../../contract-primitives/models/json-value-schema.js';\nimport { ArtifactReferenceSchema } from './artifact-reference-schema.js';\n\nexport const PortalArtifactRecordSchema = z\n\t.object({\n\t\tmetadata: z.record(z.string(), JsonValueSchema).optional(),\n\t\treference: ArtifactReferenceSchema,\n\t\tredactionProfile: z.string().min(1),\n\t})\n\t.strict();\n\nexport type PortalArtifactRecord = z.infer<typeof PortalArtifactRecordSchema>;\n\nexport const PortalArtifactReadRequestSchema = z\n\t.object({\n\t\tmaxBytes: z\n\t\t\t.number()\n\t\t\t.int()\n\t\t\t.positive()\n\t\t\t.max(16 * 1024 * 1024),\n\t\toffsetBytes: z.number().int().nonnegative().default(0),\n\t\treference: ArtifactReferenceSchema,\n\t})\n\t.strict();\n\nexport type PortalArtifactReadRequest = z.infer<typeof PortalArtifactReadRequestSchema>;\n\nexport const PortalArtifactReadResultSchema = z\n\t.object({\n\t\tcontentBase64: z.string(),\n\t\tmediaType: z.string().optional(),\n\t\toffsetBytes: z.number().int().nonnegative(),\n\t\treference: ArtifactReferenceSchema,\n\t\ttruncated: z.boolean().default(false),\n\t})\n\t.strict();\n\nexport type PortalArtifactReadResult = z.infer<typeof PortalArtifactReadResultSchema>;\n\nexport const PortalArtifactRedactorSchema = z\n\t.object({\n\t\tmaxModelVisibleBytes: z.number().int().nonnegative(),\n\t\tprofile: z.string().min(1),\n\t})\n\t.strict();\n\nexport type PortalArtifactRedactor = z.infer<typeof PortalArtifactRedactorSchema>;\n","import { z } from 'zod';\n\nimport {\n\tPortalArtifactReadRequestSchema,\n\ttype PortalArtifactReadRequest,\n} from './models/portal-artifact-contract-schema.js';\n\nexport const PORTAL_ARTIFACT_READ_REQUEST_META_KEY = 'agent-vm/artifact-read-request';\n\nconst artifactReadResourceProtocol = 'agent-vm-artifact:';\nconst artifactReadResourceHost = 'read';\n\nexport const PortalArtifactReadResourceRequestSchema = z\n\t.object({\n\t\t_meta: z\n\t\t\t.object({\n\t\t\t\t[PORTAL_ARTIFACT_READ_REQUEST_META_KEY]: PortalArtifactReadRequestSchema,\n\t\t\t})\n\t\t\t.strict(),\n\t\turi: z.string().min(1),\n\t})\n\t.strict();\n\nexport type PortalArtifactReadResourceRequest = z.infer<\n\ttypeof PortalArtifactReadResourceRequestSchema\n>;\n\nfunction createOpaqueArtifactResourceUri(artifactId: string): string {\n\tconst resourceUri = new URL(`${artifactReadResourceProtocol}//${artifactReadResourceHost}`);\n\tresourceUri.searchParams.set('id', artifactId);\n\treturn resourceUri.toString();\n}\n\nfunction parseOpaqueArtifactResourceId(uri: string): string {\n\tconst resourceUri = new URL(uri);\n\tif (\n\t\tresourceUri.protocol !== artifactReadResourceProtocol ||\n\t\tresourceUri.hostname !== artifactReadResourceHost ||\n\t\tresourceUri.port.length > 0 ||\n\t\tresourceUri.username.length > 0 ||\n\t\tresourceUri.password.length > 0 ||\n\t\t(resourceUri.pathname.length > 0 && resourceUri.pathname !== '/') ||\n\t\tresourceUri.hash.length > 0 ||\n\t\t[...resourceUri.searchParams.keys()].some((parameterName) => parameterName !== 'id')\n\t) {\n\t\tthrow new TypeError('Artifact read resource URI has an invalid origin or field.');\n\t}\n\tconst artifactIds = resourceUri.searchParams.getAll('id');\n\tif (artifactIds.length !== 1 || artifactIds[0] === undefined || artifactIds[0].length === 0) {\n\t\tthrow new TypeError('Artifact read resource URI requires one opaque artifact identifier.');\n\t}\n\treturn artifactIds[0];\n}\n\n/** Build one standard MCP read request whose URI exposes only the opaque artifact ID. */\nexport function createPortalArtifactReadResourceRequest(\n\trequest: PortalArtifactReadRequest,\n): PortalArtifactReadResourceRequest {\n\tconst parsedRequest = PortalArtifactReadRequestSchema.parse(request);\n\treturn PortalArtifactReadResourceRequestSchema.parse({\n\t\t_meta: { [PORTAL_ARTIFACT_READ_REQUEST_META_KEY]: parsedRequest },\n\t\turi: createOpaqueArtifactResourceUri(parsedRequest.reference.id),\n\t});\n}\n\n/** Recover and validate the complete public read request from standard MCP params. */\nexport function parsePortalArtifactReadResourceRequest(\n\tresourceRequest: unknown,\n): PortalArtifactReadRequest {\n\tconst parsedResourceRequest = PortalArtifactReadResourceRequestSchema.parse(resourceRequest);\n\t// oxlint-disable-next-line no-underscore-dangle -- `_meta` is the standard MCP protocol field name.\n\tconst publicRequest = parsedResourceRequest._meta[PORTAL_ARTIFACT_READ_REQUEST_META_KEY];\n\tif (parseOpaqueArtifactResourceId(parsedResourceRequest.uri) !== publicRequest.reference.id) {\n\t\tthrow new TypeError('Artifact read resource URI does not match its public request.');\n\t}\n\treturn publicRequest;\n}\n"],"mappings":";;;;AAKA,MAAa,6BAA6B,EACxC,OAAO;CACP,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU;CAC1D,WAAW;CACX,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACnC,CAAC,CACD,QAAQ;AAIV,MAAa,kCAAkC,EAC7C,OAAO;CACP,UAAU,EACR,QAAQ,CACR,KAAK,CACL,UAAU,CACV,IAAI,KAAK,OAAO,KAAK;CACvB,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;CACtD,WAAW;CACX,CAAC,CACD,QAAQ;AAIV,MAAa,iCAAiC,EAC5C,OAAO;CACP,eAAe,EAAE,QAAQ;CACzB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CAC3C,WAAW;CACX,WAAW,EAAE,SAAS,CAAC,QAAQ,MAAM;CACrC,CAAC,CACD,QAAQ;AAIV,MAAa,+BAA+B,EAC1C,OAAO;CACP,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;CACpD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,CAAC,CACD,QAAQ;;;ACvCV,MAAa,wCAAwC;AAErD,MAAM,+BAA+B;AACrC,MAAM,2BAA2B;AAEjC,MAAa,0CAA0C,EACrD,OAAO;CACP,OAAO,EACL,OAAO,GACN,wCAAwC,iCACzC,CAAC,CACD,QAAQ;CACV,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE;CACtB,CAAC,CACD,QAAQ;AAMV,SAAS,gCAAgC,YAA4B;CACpE,MAAM,cAAc,IAAI,IAAI,GAAG,6BAA6B,IAAI,2BAA2B;CAC3F,YAAY,aAAa,IAAI,MAAM,WAAW;CAC9C,OAAO,YAAY,UAAU;;AAG9B,SAAS,8BAA8B,KAAqB;CAC3D,MAAM,cAAc,IAAI,IAAI,IAAI;CAChC,IACC,YAAY,aAAa,gCACzB,YAAY,aAAa,4BACzB,YAAY,KAAK,SAAS,KAC1B,YAAY,SAAS,SAAS,KAC9B,YAAY,SAAS,SAAS,KAC7B,YAAY,SAAS,SAAS,KAAK,YAAY,aAAa,OAC7D,YAAY,KAAK,SAAS,KAC1B,CAAC,GAAG,YAAY,aAAa,MAAM,CAAC,CAAC,MAAM,kBAAkB,kBAAkB,KAAK,EAEpF,MAAM,IAAI,UAAU,6DAA6D;CAElF,MAAM,cAAc,YAAY,aAAa,OAAO,KAAK;CACzD,IAAI,YAAY,WAAW,KAAK,YAAY,OAAO,KAAA,KAAa,YAAY,GAAG,WAAW,GACzF,MAAM,IAAI,UAAU,sEAAsE;CAE3F,OAAO,YAAY;;;AAIpB,SAAgB,wCACf,SACoC;CACpC,MAAM,gBAAgB,gCAAgC,MAAM,QAAQ;CACpE,OAAO,wCAAwC,MAAM;EACpD,OAAO,GAAG,wCAAwC,eAAe;EACjE,KAAK,gCAAgC,cAAc,UAAU,GAAG;EAChE,CAAC;;;AAIH,SAAgB,uCACf,iBAC4B;CAC5B,MAAM,wBAAwB,wCAAwC,MAAM,gBAAgB;CAE5F,MAAM,gBAAgB,sBAAsB,MAAM;CAClD,IAAI,8BAA8B,sBAAsB,IAAI,KAAK,cAAc,UAAU,IACxF,MAAM,IAAI,UAAU,gEAAgE;CAErF,OAAO"}

package/dist/capability-description-surface/index.d.ts

@@ -1,2 +1,2 @@
-import { C as compactCapabilitySummaryDescription, S as ToolSchemaSummarySchema, _ as ToolSafetySummary, a as CapabilitySearchMatch, b as ToolSchemaHintSchema, c as CapabilitySummarySchema, d as ResultExpectation, f as ResultExpectationSchema, g as ToolCallDispositionSchema, h as ToolCallDisposition, i as CapabilityDiscoveryMetadataSchema, l as CompactCapabilityDescriptionCodePointLimit, m as SafeCallingHintSchema, n as CapabilityDescriptorSchema, o as CapabilitySearchMatchSchema, p as SafeCallingHint, r as CapabilityDiscoveryMetadata, s as CapabilitySummary, t as CapabilityDescriptor, u as JsonSchemaDocumentSchema, v as ToolSafetySummarySchema, x as ToolSchemaSummary, y as ToolSchemaHint } from "../index-uDfElZ9U.js";
+import { C as compactCapabilitySummaryDescription, S as ToolSchemaSummarySchema, _ as ToolSafetySummary, a as CapabilitySearchMatch, b as ToolSchemaHintSchema, c as CapabilitySummarySchema, d as ResultExpectation, f as ResultExpectationSchema, g as ToolCallDispositionSchema, h as ToolCallDisposition, i as CapabilityDiscoveryMetadataSchema, l as CompactCapabilityDescriptionCodePointLimit, m as SafeCallingHintSchema, n as CapabilityDescriptorSchema, o as CapabilitySearchMatchSchema, p as SafeCallingHint, r as CapabilityDiscoveryMetadata, s as CapabilitySummary, t as CapabilityDescriptor, u as JsonSchemaDocumentSchema, v as ToolSafetySummarySchema, x as ToolSchemaSummary, y as ToolSchemaHint } from "../index-ByBEiqZp.js";
 export { CapabilityDescriptor, CapabilityDescriptorSchema, CapabilityDiscoveryMetadata, CapabilityDiscoveryMetadataSchema, CapabilitySearchMatch, CapabilitySearchMatchSchema, CapabilitySummary, CapabilitySummarySchema, CompactCapabilityDescriptionCodePointLimit, JsonSchemaDocumentSchema, ResultExpectation, ResultExpectationSchema, SafeCallingHint, SafeCallingHintSchema, ToolCallDisposition, ToolCallDispositionSchema, ToolSafetySummary, ToolSafetySummarySchema, ToolSchemaHint, ToolSchemaHintSchema, ToolSchemaSummary, ToolSchemaSummarySchema, compactCapabilitySummaryDescription };

package/dist/capability-description-surface/index.js

@@ -1,3 +1,3 @@
-import { a as CompactCapabilityDescriptionCodePointLimit, c as SafeCallingHintSchema, d as ToolSchemaHintSchema, f as ToolSchemaSummarySchema, i as CapabilitySummarySchema, l as ToolCallDispositionSchema, n as CapabilityDiscoveryMetadataSchema, o as JsonSchemaDocumentSchema, p as compactCapabilitySummaryDescription, r as CapabilitySearchMatchSchema, s as ResultExpectationSchema, t as CapabilityDescriptorSchema, u as ToolSafetySummarySchema } from "../capability-descriptor-schema-B_0vLQ3E.js";
-import "../capability-description-surface-YqGm-nS_.js";
+import { a as CompactCapabilityDescriptionCodePointLimit, c as SafeCallingHintSchema, d as ToolSchemaHintSchema, f as ToolSchemaSummarySchema, i as CapabilitySummarySchema, l as ToolCallDispositionSchema, n as CapabilityDiscoveryMetadataSchema, o as JsonSchemaDocumentSchema, p as compactCapabilitySummaryDescription, r as CapabilitySearchMatchSchema, s as ResultExpectationSchema, t as CapabilityDescriptorSchema, u as ToolSafetySummarySchema } from "../capability-descriptor-schema-5evBt6Hl.js";
+import "../capability-description-surface-DKZLjpG4.js";
 export { CapabilityDescriptorSchema, CapabilityDiscoveryMetadataSchema, CapabilitySearchMatchSchema, CapabilitySummarySchema, CompactCapabilityDescriptionCodePointLimit, JsonSchemaDocumentSchema, ResultExpectationSchema, SafeCallingHintSchema, ToolCallDispositionSchema, ToolSafetySummarySchema, ToolSchemaHintSchema, ToolSchemaSummarySchema, compactCapabilitySummaryDescription };

package/dist/capability-description-surface-DKZLjpG4.js

@@ -0,0 +1,2 @@
+import "./capability-descriptor-schema-5evBt6Hl.js";
+export {};

package/dist/{capability-descriptor-schema-B_0vLQ3E.js → capability-descriptor-schema-5evBt6Hl.js}

@@ -1,5 +1,5 @@
 import { r as NamespaceNameSchema, t as CapabilityNameSchema } from "./capability-reference-schema-K7qXJgEa.js";
-import { o as JsonValueSchema } from "./json-value-schema-Br5M7d7X.js";
+import { o as JsonValueSchema } from "./json-value-schema-rxMrw9uZ.js";
 import { z } from "zod";
 import { oauthToolAvailabilitySchema, oauthToolRequirementSchema } from "@agent-vm/oauth-broker-contracts";
 //#region src/capability-description-surface/models/capability-descriptor-schema.ts
@@ -112,4 +112,4 @@ const CapabilityDescriptorSchema = z.object({
 //#endregion
 export { CompactCapabilityDescriptionCodePointLimit as a, SafeCallingHintSchema as c, ToolSchemaHintSchema as d, ToolSchemaSummarySchema as f, CapabilitySummarySchema as i, ToolCallDispositionSchema as l, CapabilityDiscoveryMetadataSchema as n, JsonSchemaDocumentSchema as o, compactCapabilitySummaryDescription as p, CapabilitySearchMatchSchema as r, ResultExpectationSchema as s, CapabilityDescriptorSchema as t, ToolSafetySummarySchema as u };
 
-//# sourceMappingURL=capability-descriptor-schema-B_0vLQ3E.js.map
+//# sourceMappingURL=capability-descriptor-schema-5evBt6Hl.js.map