@collective-intelligence/external-apps-server-sdk 0.1.21 → 0.1.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/dist/admin.d.ts +2 -0
  2. package/dist/gateway.js +1 -1
  3. package/dist/persistence/drizzle.js +1 -1
  4. package/dist/runtime/effect.js +1 -1
  5. package/dist/tools/ai-sdk.js +1 -1
  6. package/package.json +5 -4
package/dist/gateway.js CHANGED
@@ -6,4 +6,4 @@ var __create=Object.create;var __getProtoOf=Object.getPrototypeOf;var __defProp=
6
6
  missingProperty: ${missingProperty},
7
7
  depsCount: ${depsCount},
8
8
  deps: ${deps}}`};var def={keyword:"dependencies",type:"object",schemaType:"object",error:exports.error,code(cxt){const[propDeps,schDeps]=splitDependencies(cxt);validatePropertyDeps(cxt,propDeps);validateSchemaDeps(cxt,schDeps)}};function splitDependencies({schema}){const propertyDeps={};const schemaDeps={};for(const key in schema){if(key==="__proto__")continue;const deps=Array.isArray(schema[key])?propertyDeps:schemaDeps;deps[key]=schema[key]}return[propertyDeps,schemaDeps]}function validatePropertyDeps(cxt,propertyDeps=cxt.schema){const{gen,data,it}=cxt;if(Object.keys(propertyDeps).length===0)return;const missing=gen.let("missing");for(const prop in propertyDeps){const deps=propertyDeps[prop];if(deps.length===0)continue;const hasProperty=(0,code_1.propertyInData)(gen,data,prop,it.opts.ownProperties);cxt.setParams({property:prop,depsCount:deps.length,deps:deps.join(", ")});if(it.allErrors){gen.if(hasProperty,()=>{for(const depProp of deps){(0,code_1.checkReportMissingProp)(cxt,depProp)}})}else{gen.if((0,codegen_1._)`${hasProperty} && (${(0,code_1.checkMissingProp)(cxt,deps,missing)})`);(0,code_1.reportMissingProp)(cxt,missing);gen.else()}}}exports.validatePropertyDeps=validatePropertyDeps;function validateSchemaDeps(cxt,schemaDeps=cxt.schema){const{gen,data,keyword,it}=cxt;const valid=gen.name("valid");for(const prop in schemaDeps){if((0,util_1.alwaysValidSchema)(it,schemaDeps[prop]))continue;gen.if((0,code_1.propertyInData)(gen,data,prop,it.opts.ownProperties),()=>{const schCxt=cxt.subschema({keyword,schemaProp:prop},valid);cxt.mergeValidEvaluated(schCxt,valid)},()=>gen.var(valid,true));cxt.ok(valid)}}exports.validateSchemaDeps=validateSchemaDeps;exports.default=def});var require_propertyNames=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var util_1=require_util();var error={message:"property name must be valid",params:({params})=>(0,codegen_1._)`{propertyName: ${params.propertyName}}`};var def={keyword:"propertyNames",type:"object",schemaType:["object","boolean"],error,code(cxt){const{gen,schema,data,it}=cxt;if((0,util_1.alwaysValidSchema)(it,schema))return;const valid=gen.name("valid");gen.forIn("key",data,(key)=>{cxt.setParams({propertyName:key});cxt.subschema({keyword:"propertyNames",data:key,dataTypes:["string"],propertyName:key,compositeRule:true},valid);gen.if((0,codegen_1.not)(valid),()=>{cxt.error(true);if(!it.allErrors)gen.break()})});cxt.ok(valid)}};exports.default=def});var require_additionalProperties=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var code_1=require_code2();var codegen_1=require_codegen();var names_1=require_names();var util_1=require_util();var error={message:"must NOT have additional properties",params:({params})=>(0,codegen_1._)`{additionalProperty: ${params.additionalProperty}}`};var def={keyword:"additionalProperties",type:["object"],schemaType:["boolean","object"],allowUndefined:true,trackErrors:true,error,code(cxt){const{gen,schema,parentSchema,data,errsCount,it}=cxt;if(!errsCount)throw new Error("ajv implementation error");const{allErrors,opts}=it;it.props=true;if(opts.removeAdditional!=="all"&&(0,util_1.alwaysValidSchema)(it,schema))return;const props=(0,code_1.allSchemaProperties)(parentSchema.properties);const patProps=(0,code_1.allSchemaProperties)(parentSchema.patternProperties);checkAdditionalProperties();cxt.ok((0,codegen_1._)`${errsCount} === ${names_1.default.errors}`);function checkAdditionalProperties(){gen.forIn("key",data,(key)=>{if(!props.length&&!patProps.length)additionalPropertyCode(key);else gen.if(isAdditional(key),()=>additionalPropertyCode(key))})}function isAdditional(key){let definedProp;if(props.length>8){const propsSchema=(0,util_1.schemaRefOrVal)(it,parentSchema.properties,"properties");definedProp=(0,code_1.isOwnProperty)(gen,propsSchema,key)}else if(props.length){definedProp=(0,codegen_1.or)(...props.map((p)=>(0,codegen_1._)`${key} === ${p}`))}else{definedProp=codegen_1.nil}if(patProps.length){definedProp=(0,codegen_1.or)(definedProp,...patProps.map((p)=>(0,codegen_1._)`${(0,code_1.usePattern)(cxt,p)}.test(${key})`))}return(0,codegen_1.not)(definedProp)}function deleteAdditional(key){gen.code((0,codegen_1._)`delete ${data}[${key}]`)}function additionalPropertyCode(key){if(opts.removeAdditional==="all"||opts.removeAdditional&&schema===false){deleteAdditional(key);return}if(schema===false){cxt.setParams({additionalProperty:key});cxt.error();if(!allErrors)gen.break();return}if(typeof schema=="object"&&!(0,util_1.alwaysValidSchema)(it,schema)){const valid=gen.name("valid");if(opts.removeAdditional==="failing"){applyAdditionalSchema(key,valid,false);gen.if((0,codegen_1.not)(valid),()=>{cxt.reset();deleteAdditional(key)})}else{applyAdditionalSchema(key,valid);if(!allErrors)gen.if((0,codegen_1.not)(valid),()=>gen.break())}}}function applyAdditionalSchema(key,valid,errors){const subschema={keyword:"additionalProperties",dataProp:key,dataPropType:util_1.Type.Str};if(errors===false){Object.assign(subschema,{compositeRule:true,createErrors:false,allErrors:false})}cxt.subschema(subschema,valid)}}};exports.default=def});var require_properties=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var validate_1=require_validate();var code_1=require_code2();var util_1=require_util();var additionalProperties_1=require_additionalProperties();var def={keyword:"properties",type:"object",schemaType:"object",code(cxt){const{gen,schema,parentSchema,data,it}=cxt;if(it.opts.removeAdditional==="all"&&parentSchema.additionalProperties===undefined){additionalProperties_1.default.code(new validate_1.KeywordCxt(it,additionalProperties_1.default,"additionalProperties"))}const allProps=(0,code_1.allSchemaProperties)(schema);for(const prop of allProps){it.definedProperties.add(prop)}if(it.opts.unevaluated&&allProps.length&&it.props!==true){it.props=util_1.mergeEvaluated.props(gen,(0,util_1.toHash)(allProps),it.props)}const properties=allProps.filter((p)=>!(0,util_1.alwaysValidSchema)(it,schema[p]));if(properties.length===0)return;const valid=gen.name("valid");for(const prop of properties){if(hasDefault(prop)){applyPropertySchema(prop)}else{gen.if((0,code_1.propertyInData)(gen,data,prop,it.opts.ownProperties));applyPropertySchema(prop);if(!it.allErrors)gen.else().var(valid,true);gen.endIf()}cxt.it.definedProperties.add(prop);cxt.ok(valid)}function hasDefault(prop){return it.opts.useDefaults&&!it.compositeRule&&schema[prop].default!==undefined}function applyPropertySchema(prop){cxt.subschema({keyword:"properties",schemaProp:prop,dataProp:prop},valid)}}};exports.default=def});var require_patternProperties=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var code_1=require_code2();var codegen_1=require_codegen();var util_1=require_util();var util_2=require_util();var def={keyword:"patternProperties",type:"object",schemaType:"object",code(cxt){const{gen,schema,data,parentSchema,it}=cxt;const{opts}=it;const patterns=(0,code_1.allSchemaProperties)(schema);const alwaysValidPatterns=patterns.filter((p)=>(0,util_1.alwaysValidSchema)(it,schema[p]));if(patterns.length===0||alwaysValidPatterns.length===patterns.length&&(!it.opts.unevaluated||it.props===true)){return}const checkProperties=opts.strictSchema&&!opts.allowMatchingProperties&&parentSchema.properties;const valid=gen.name("valid");if(it.props!==true&&!(it.props instanceof codegen_1.Name)){it.props=(0,util_2.evaluatedPropsToName)(gen,it.props)}const{props}=it;validatePatternProperties();function validatePatternProperties(){for(const pat of patterns){if(checkProperties)checkMatchingProperties(pat);if(it.allErrors){validateProperties(pat)}else{gen.var(valid,true);validateProperties(pat);gen.if(valid)}}}function checkMatchingProperties(pat){for(const prop in checkProperties){if(new RegExp(pat).test(prop)){(0,util_1.checkStrictMode)(it,`property ${prop} matches pattern ${pat} (use allowMatchingProperties)`)}}}function validateProperties(pat){gen.forIn("key",data,(key)=>{gen.if((0,codegen_1._)`${(0,code_1.usePattern)(cxt,pat)}.test(${key})`,()=>{const alwaysValid=alwaysValidPatterns.includes(pat);if(!alwaysValid){cxt.subschema({keyword:"patternProperties",schemaProp:pat,dataProp:key,dataPropType:util_2.Type.Str},valid)}if(it.opts.unevaluated&&props!==true){gen.assign((0,codegen_1._)`${props}[${key}]`,true)}else if(!alwaysValid&&!it.allErrors){gen.if((0,codegen_1.not)(valid),()=>gen.break())}})})}}};exports.default=def});var require_not=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var util_1=require_util();var def={keyword:"not",schemaType:["object","boolean"],trackErrors:true,code(cxt){const{gen,schema,it}=cxt;if((0,util_1.alwaysValidSchema)(it,schema)){cxt.fail();return}const valid=gen.name("valid");cxt.subschema({keyword:"not",compositeRule:true,createErrors:false,allErrors:false},valid);cxt.failResult(valid,()=>cxt.reset(),()=>cxt.error())},error:{message:"must NOT be valid"}};exports.default=def});var require_anyOf=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var code_1=require_code2();var def={keyword:"anyOf",schemaType:"array",trackErrors:true,code:code_1.validateUnion,error:{message:"must match a schema in anyOf"}};exports.default=def});var require_oneOf=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var util_1=require_util();var error={message:"must match exactly one schema in oneOf",params:({params})=>(0,codegen_1._)`{passingSchemas: ${params.passing}}`};var def={keyword:"oneOf",schemaType:"array",trackErrors:true,error,code(cxt){const{gen,schema,parentSchema,it}=cxt;if(!Array.isArray(schema))throw new Error("ajv implementation error");if(it.opts.discriminator&&parentSchema.discriminator)return;const schArr=schema;const valid=gen.let("valid",false);const passing=gen.let("passing",null);const schValid=gen.name("_valid");cxt.setParams({passing});gen.block(validateOneOf);cxt.result(valid,()=>cxt.reset(),()=>cxt.error(true));function validateOneOf(){schArr.forEach((sch,i)=>{let schCxt;if((0,util_1.alwaysValidSchema)(it,sch)){gen.var(schValid,true)}else{schCxt=cxt.subschema({keyword:"oneOf",schemaProp:i,compositeRule:true},schValid)}if(i>0){gen.if((0,codegen_1._)`${schValid} && ${valid}`).assign(valid,false).assign(passing,(0,codegen_1._)`[${passing}, ${i}]`).else()}gen.if(schValid,()=>{gen.assign(valid,true);gen.assign(passing,i);if(schCxt)cxt.mergeEvaluated(schCxt,codegen_1.Name)})})}}};exports.default=def});var require_allOf=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var util_1=require_util();var def={keyword:"allOf",schemaType:"array",code(cxt){const{gen,schema,it}=cxt;if(!Array.isArray(schema))throw new Error("ajv implementation error");const valid=gen.name("valid");schema.forEach((sch,i)=>{if((0,util_1.alwaysValidSchema)(it,sch))return;const schCxt=cxt.subschema({keyword:"allOf",schemaProp:i},valid);cxt.ok(valid);cxt.mergeEvaluated(schCxt)})}};exports.default=def});var require_if=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var util_1=require_util();var error={message:({params})=>(0,codegen_1.str)`must match "${params.ifClause}" schema`,params:({params})=>(0,codegen_1._)`{failingKeyword: ${params.ifClause}}`};var def={keyword:"if",schemaType:["object","boolean"],trackErrors:true,error,code(cxt){const{gen,parentSchema,it}=cxt;if(parentSchema.then===undefined&&parentSchema.else===undefined){(0,util_1.checkStrictMode)(it,'"if" without "then" and "else" is ignored')}const hasThen=hasSchema(it,"then");const hasElse=hasSchema(it,"else");if(!hasThen&&!hasElse)return;const valid=gen.let("valid",true);const schValid=gen.name("_valid");validateIf();cxt.reset();if(hasThen&&hasElse){const ifClause=gen.let("ifClause");cxt.setParams({ifClause});gen.if(schValid,validateClause("then",ifClause),validateClause("else",ifClause))}else if(hasThen){gen.if(schValid,validateClause("then"))}else{gen.if((0,codegen_1.not)(schValid),validateClause("else"))}cxt.pass(valid,()=>cxt.error(true));function validateIf(){const schCxt=cxt.subschema({keyword:"if",compositeRule:true,createErrors:false,allErrors:false},schValid);cxt.mergeEvaluated(schCxt)}function validateClause(keyword,ifClause){return()=>{const schCxt=cxt.subschema({keyword},schValid);gen.assign(valid,schValid);cxt.mergeValidEvaluated(schCxt,valid);if(ifClause)gen.assign(ifClause,(0,codegen_1._)`${keyword}`);else cxt.setParams({ifClause:keyword})}}}};function hasSchema(it,keyword){const schema=it.schema[keyword];return schema!==undefined&&!(0,util_1.alwaysValidSchema)(it,schema)}exports.default=def});var require_thenElse=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var util_1=require_util();var def={keyword:["then","else"],schemaType:["object","boolean"],code({keyword,parentSchema,it}){if(parentSchema.if===undefined)(0,util_1.checkStrictMode)(it,`"${keyword}" without "if" is ignored`)}};exports.default=def});var require_applicator=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var additionalItems_1=require_additionalItems();var prefixItems_1=require_prefixItems();var items_1=require_items();var items2020_1=require_items2020();var contains_1=require_contains();var dependencies_1=require_dependencies();var propertyNames_1=require_propertyNames();var additionalProperties_1=require_additionalProperties();var properties_1=require_properties();var patternProperties_1=require_patternProperties();var not_1=require_not();var anyOf_1=require_anyOf();var oneOf_1=require_oneOf();var allOf_1=require_allOf();var if_1=require_if();var thenElse_1=require_thenElse();function getApplicator(draft2020=false){const applicator=[not_1.default,anyOf_1.default,oneOf_1.default,allOf_1.default,if_1.default,thenElse_1.default,propertyNames_1.default,additionalProperties_1.default,dependencies_1.default,properties_1.default,patternProperties_1.default];if(draft2020)applicator.push(prefixItems_1.default,items2020_1.default);else applicator.push(additionalItems_1.default,items_1.default);applicator.push(contains_1.default);return applicator}exports.default=getApplicator});var require_dynamicAnchor=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});exports.dynamicAnchor=undefined;var codegen_1=require_codegen();var names_1=require_names();var compile_1=require_compile();var ref_1=require_ref();var def={keyword:"$dynamicAnchor",schemaType:"string",code:(cxt)=>dynamicAnchor(cxt,cxt.schema)};function dynamicAnchor(cxt,anchor){const{gen,it}=cxt;it.schemaEnv.root.dynamicAnchors[anchor]=true;const v=(0,codegen_1._)`${names_1.default.dynamicAnchors}${(0,codegen_1.getProperty)(anchor)}`;const validate=it.errSchemaPath==="#"?it.validateName:_getValidate(cxt);gen.if((0,codegen_1._)`!${v}`,()=>gen.assign(v,validate))}exports.dynamicAnchor=dynamicAnchor;function _getValidate(cxt){const{schemaEnv,schema,self}=cxt.it;const{root,baseId,localRefs,meta}=schemaEnv.root;const{schemaId}=self.opts;const sch=new compile_1.SchemaEnv({schema,schemaId,root,baseId,localRefs,meta});compile_1.compileSchema.call(self,sch);return(0,ref_1.getValidate)(cxt,sch)}exports.default=def});var require_dynamicRef=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});exports.dynamicRef=undefined;var codegen_1=require_codegen();var names_1=require_names();var ref_1=require_ref();var def={keyword:"$dynamicRef",schemaType:"string",code:(cxt)=>dynamicRef(cxt,cxt.schema)};function dynamicRef(cxt,ref){const{gen,keyword,it}=cxt;if(ref[0]!=="#")throw new Error(`"${keyword}" only supports hash fragment reference`);const anchor=ref.slice(1);if(it.allErrors){_dynamicRef()}else{const valid=gen.let("valid",false);_dynamicRef(valid);cxt.ok(valid)}function _dynamicRef(valid){if(it.schemaEnv.root.dynamicAnchors[anchor]){const v=gen.let("_v",(0,codegen_1._)`${names_1.default.dynamicAnchors}${(0,codegen_1.getProperty)(anchor)}`);gen.if(v,_callRef(v,valid),_callRef(it.validateName,valid))}else{_callRef(it.validateName,valid)()}}function _callRef(validate,valid){return valid?()=>gen.block(()=>{(0,ref_1.callRef)(cxt,validate);gen.let(valid,true)}):()=>(0,ref_1.callRef)(cxt,validate)}}exports.dynamicRef=dynamicRef;exports.default=def});var require_recursiveAnchor=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var dynamicAnchor_1=require_dynamicAnchor();var util_1=require_util();var def={keyword:"$recursiveAnchor",schemaType:"boolean",code(cxt){if(cxt.schema)(0,dynamicAnchor_1.dynamicAnchor)(cxt,"");else(0,util_1.checkStrictMode)(cxt.it,"$recursiveAnchor: false is ignored")}};exports.default=def});var require_recursiveRef=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var dynamicRef_1=require_dynamicRef();var def={keyword:"$recursiveRef",schemaType:"string",code:(cxt)=>(0,dynamicRef_1.dynamicRef)(cxt,cxt.schema)};exports.default=def});var require_dynamic=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var dynamicAnchor_1=require_dynamicAnchor();var dynamicRef_1=require_dynamicRef();var recursiveAnchor_1=require_recursiveAnchor();var recursiveRef_1=require_recursiveRef();var dynamic=[dynamicAnchor_1.default,dynamicRef_1.default,recursiveAnchor_1.default,recursiveRef_1.default];exports.default=dynamic});var require_dependentRequired=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var dependencies_1=require_dependencies();var def={keyword:"dependentRequired",type:"object",schemaType:"object",error:dependencies_1.error,code:(cxt)=>(0,dependencies_1.validatePropertyDeps)(cxt)};exports.default=def});var require_dependentSchemas=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var dependencies_1=require_dependencies();var def={keyword:"dependentSchemas",type:"object",schemaType:"object",code:(cxt)=>(0,dependencies_1.validateSchemaDeps)(cxt)};exports.default=def});var require_limitContains=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var util_1=require_util();var def={keyword:["maxContains","minContains"],type:"array",schemaType:"number",code({keyword,parentSchema,it}){if(parentSchema.contains===undefined){(0,util_1.checkStrictMode)(it,`"${keyword}" without "contains" is ignored`)}}};exports.default=def});var require_next=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var dependentRequired_1=require_dependentRequired();var dependentSchemas_1=require_dependentSchemas();var limitContains_1=require_limitContains();var next=[dependentRequired_1.default,dependentSchemas_1.default,limitContains_1.default];exports.default=next});var require_unevaluatedProperties=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var util_1=require_util();var names_1=require_names();var error={message:"must NOT have unevaluated properties",params:({params})=>(0,codegen_1._)`{unevaluatedProperty: ${params.unevaluatedProperty}}`};var def={keyword:"unevaluatedProperties",type:"object",schemaType:["boolean","object"],trackErrors:true,error,code(cxt){const{gen,schema,data,errsCount,it}=cxt;if(!errsCount)throw new Error("ajv implementation error");const{allErrors,props}=it;if(props instanceof codegen_1.Name){gen.if((0,codegen_1._)`${props} !== true`,()=>gen.forIn("key",data,(key)=>gen.if(unevaluatedDynamic(props,key),()=>unevaluatedPropCode(key))))}else if(props!==true){gen.forIn("key",data,(key)=>props===undefined?unevaluatedPropCode(key):gen.if(unevaluatedStatic(props,key),()=>unevaluatedPropCode(key)))}it.props=true;cxt.ok((0,codegen_1._)`${errsCount} === ${names_1.default.errors}`);function unevaluatedPropCode(key){if(schema===false){cxt.setParams({unevaluatedProperty:key});cxt.error();if(!allErrors)gen.break();return}if(!(0,util_1.alwaysValidSchema)(it,schema)){const valid=gen.name("valid");cxt.subschema({keyword:"unevaluatedProperties",dataProp:key,dataPropType:util_1.Type.Str},valid);if(!allErrors)gen.if((0,codegen_1.not)(valid),()=>gen.break())}}function unevaluatedDynamic(evaluatedProps,key){return(0,codegen_1._)`!${evaluatedProps} || !${evaluatedProps}[${key}]`}function unevaluatedStatic(evaluatedProps,key){const ps=[];for(const p in evaluatedProps){if(evaluatedProps[p]===true)ps.push((0,codegen_1._)`${key} !== ${p}`)}return(0,codegen_1.and)(...ps)}}};exports.default=def});var require_unevaluatedItems=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var util_1=require_util();var error={message:({params:{len}})=>(0,codegen_1.str)`must NOT have more than ${len} items`,params:({params:{len}})=>(0,codegen_1._)`{limit: ${len}}`};var def={keyword:"unevaluatedItems",type:"array",schemaType:["boolean","object"],error,code(cxt){const{gen,schema,data,it}=cxt;const items=it.items||0;if(items===true)return;const len=gen.const("len",(0,codegen_1._)`${data}.length`);if(schema===false){cxt.setParams({len:items});cxt.fail((0,codegen_1._)`${len} > ${items}`)}else if(typeof schema=="object"&&!(0,util_1.alwaysValidSchema)(it,schema)){const valid=gen.var("valid",(0,codegen_1._)`${len} <= ${items}`);gen.if((0,codegen_1.not)(valid),()=>validateItems(valid,items));cxt.ok(valid)}it.items=true;function validateItems(valid,from){gen.forRange("i",from,len,(i)=>{cxt.subschema({keyword:"unevaluatedItems",dataProp:i,dataPropType:util_1.Type.Num},valid);if(!it.allErrors)gen.if((0,codegen_1.not)(valid),()=>gen.break())})}}};exports.default=def});var require_unevaluated=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var unevaluatedProperties_1=require_unevaluatedProperties();var unevaluatedItems_1=require_unevaluatedItems();var unevaluated=[unevaluatedProperties_1.default,unevaluatedItems_1.default];exports.default=unevaluated});var require_format=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var error={message:({schemaCode})=>(0,codegen_1.str)`must match format "${schemaCode}"`,params:({schemaCode})=>(0,codegen_1._)`{format: ${schemaCode}}`};var def={keyword:"format",type:["number","string"],schemaType:"string",$data:true,error,code(cxt,ruleType){const{gen,data,$data,schema,schemaCode,it}=cxt;const{opts,errSchemaPath,schemaEnv,self}=it;if(!opts.validateFormats)return;if($data)validate$DataFormat();else validateFormat();function validate$DataFormat(){const fmts=gen.scopeValue("formats",{ref:self.formats,code:opts.code.formats});const fDef=gen.const("fDef",(0,codegen_1._)`${fmts}[${schemaCode}]`);const fType=gen.let("fType");const format=gen.let("format");gen.if((0,codegen_1._)`typeof ${fDef} == "object" && !(${fDef} instanceof RegExp)`,()=>gen.assign(fType,(0,codegen_1._)`${fDef}.type || "string"`).assign(format,(0,codegen_1._)`${fDef}.validate`),()=>gen.assign(fType,(0,codegen_1._)`"string"`).assign(format,fDef));cxt.fail$data((0,codegen_1.or)(unknownFmt(),invalidFmt()));function unknownFmt(){if(opts.strictSchema===false)return codegen_1.nil;return(0,codegen_1._)`${schemaCode} && !${format}`}function invalidFmt(){const callFormat=schemaEnv.$async?(0,codegen_1._)`(${fDef}.async ? await ${format}(${data}) : ${format}(${data}))`:(0,codegen_1._)`${format}(${data})`;const validData=(0,codegen_1._)`(typeof ${format} == "function" ? ${callFormat} : ${format}.test(${data}))`;return(0,codegen_1._)`${format} && ${format} !== true && ${fType} === ${ruleType} && !${validData}`}}function validateFormat(){const formatDef=self.formats[schema];if(!formatDef){unknownFormat();return}if(formatDef===true)return;const[fmtType,format,fmtRef]=getFormat(formatDef);if(fmtType===ruleType)cxt.pass(validCondition());function unknownFormat(){if(opts.strictSchema===false){self.logger.warn(unknownMsg());return}throw new Error(unknownMsg());function unknownMsg(){return`unknown format "${schema}" ignored in schema at path "${errSchemaPath}"`}}function getFormat(fmtDef){const code=fmtDef instanceof RegExp?(0,codegen_1.regexpCode)(fmtDef):opts.code.formats?(0,codegen_1._)`${opts.code.formats}${(0,codegen_1.getProperty)(schema)}`:undefined;const fmt=gen.scopeValue("formats",{key:schema,ref:fmtDef,code});if(typeof fmtDef=="object"&&!(fmtDef instanceof RegExp)){return[fmtDef.type||"string",fmtDef.validate,(0,codegen_1._)`${fmt}.validate`]}return["string",fmtDef,fmt]}function validCondition(){if(typeof formatDef=="object"&&!(formatDef instanceof RegExp)&&formatDef.async){if(!schemaEnv.$async)throw new Error("async format in sync schema");return(0,codegen_1._)`await ${fmtRef}(${data})`}return typeof format=="function"?(0,codegen_1._)`${fmtRef}(${data})`:(0,codegen_1._)`${fmtRef}.test(${data})`}}}};exports.default=def});var require_format2=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var format_1=require_format();var format=[format_1.default];exports.default=format});var require_metadata=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});exports.contentVocabulary=exports.metadataVocabulary=undefined;exports.metadataVocabulary=["title","description","default","deprecated","readOnly","writeOnly","examples"];exports.contentVocabulary=["contentMediaType","contentEncoding","contentSchema"]});var require_draft2020=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var core_1=require_core2();var validation_1=require_validation();var applicator_1=require_applicator();var dynamic_1=require_dynamic();var next_1=require_next();var unevaluated_1=require_unevaluated();var format_1=require_format2();var metadata_1=require_metadata();var draft2020Vocabularies=[dynamic_1.default,core_1.default,validation_1.default,(0,applicator_1.default)(true),format_1.default,metadata_1.metadataVocabulary,metadata_1.contentVocabulary,next_1.default,unevaluated_1.default];exports.default=draft2020Vocabularies});var require_types=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});exports.DiscrError=undefined;var DiscrError;(function(DiscrError){DiscrError["Tag"]="tag";DiscrError["Mapping"]="mapping"})(DiscrError||(exports.DiscrError=DiscrError={}))});var require_discriminator=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var codegen_1=require_codegen();var types_1=require_types();var compile_1=require_compile();var ref_error_1=require_ref_error();var util_1=require_util();var error={message:({params:{discrError,tagName}})=>discrError===types_1.DiscrError.Tag?`tag "${tagName}" must be string`:`value of tag "${tagName}" must be in oneOf`,params:({params:{discrError,tag,tagName}})=>(0,codegen_1._)`{error: ${discrError}, tag: ${tagName}, tagValue: ${tag}}`};var def={keyword:"discriminator",type:"object",schemaType:"object",error,code(cxt){const{gen,data,schema,parentSchema,it}=cxt;const{oneOf}=parentSchema;if(!it.opts.discriminator){throw new Error("discriminator: requires discriminator option")}const tagName=schema.propertyName;if(typeof tagName!="string")throw new Error("discriminator: requires propertyName");if(schema.mapping)throw new Error("discriminator: mapping is not supported");if(!oneOf)throw new Error("discriminator: requires oneOf keyword");const valid=gen.let("valid",false);const tag=gen.const("tag",(0,codegen_1._)`${data}${(0,codegen_1.getProperty)(tagName)}`);gen.if((0,codegen_1._)`typeof ${tag} == "string"`,()=>validateMapping(),()=>cxt.error(false,{discrError:types_1.DiscrError.Tag,tag,tagName}));cxt.ok(valid);function validateMapping(){const mapping=getMapping();gen.if(false);for(const tagValue in mapping){gen.elseIf((0,codegen_1._)`${tag} === ${tagValue}`);gen.assign(valid,applyTagSchema(mapping[tagValue]))}gen.else();cxt.error(false,{discrError:types_1.DiscrError.Mapping,tag,tagName});gen.endIf()}function applyTagSchema(schemaProp){const _valid=gen.name("valid");const schCxt=cxt.subschema({keyword:"oneOf",schemaProp},_valid);cxt.mergeEvaluated(schCxt,codegen_1.Name);return _valid}function getMapping(){var _a;const oneOfMapping={};const topRequired=hasRequired(parentSchema);let tagRequired=true;for(let i=0;i<oneOf.length;i++){let sch=oneOf[i];if((sch===null||sch===undefined?undefined:sch.$ref)&&!(0,util_1.schemaHasRulesButRef)(sch,it.self.RULES)){const ref=sch.$ref;sch=compile_1.resolveRef.call(it.self,it.schemaEnv.root,it.baseId,ref);if(sch instanceof compile_1.SchemaEnv)sch=sch.schema;if(sch===undefined)throw new ref_error_1.default(it.opts.uriResolver,it.baseId,ref)}const propSch=(_a=sch===null||sch===undefined?undefined:sch.properties)===null||_a===undefined?undefined:_a[tagName];if(typeof propSch!="object"){throw new Error(`discriminator: oneOf subschemas (or referenced schemas) must have "properties/${tagName}"`)}tagRequired=tagRequired&&(topRequired||hasRequired(sch));addMappings(propSch,i)}if(!tagRequired)throw new Error(`discriminator: "${tagName}" must be required`);return oneOfMapping;function hasRequired({required}){return Array.isArray(required)&&required.includes(tagName)}function addMappings(sch,i){if(sch.const){addMapping(sch.const,i)}else if(sch.enum){for(const tagValue of sch.enum){addMapping(tagValue,i)}}else{throw new Error(`discriminator: "properties/${tagName}" must have "const" or "enum"`)}}function addMapping(tagValue,i){if(typeof tagValue!="string"||tagValue in oneOfMapping){throw new Error(`discriminator: "${tagName}" values must be unique strings`)}oneOfMapping[tagValue]=i}}}};exports.default=def});var require_schema=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/schema",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/core":true,"https://json-schema.org/draft/2020-12/vocab/applicator":true,"https://json-schema.org/draft/2020-12/vocab/unevaluated":true,"https://json-schema.org/draft/2020-12/vocab/validation":true,"https://json-schema.org/draft/2020-12/vocab/meta-data":true,"https://json-schema.org/draft/2020-12/vocab/format-annotation":true,"https://json-schema.org/draft/2020-12/vocab/content":true},$dynamicAnchor:"meta",title:"Core and Validation specifications meta-schema",allOf:[{$ref:"meta/core"},{$ref:"meta/applicator"},{$ref:"meta/unevaluated"},{$ref:"meta/validation"},{$ref:"meta/meta-data"},{$ref:"meta/format-annotation"},{$ref:"meta/content"}],type:["object","boolean"],$comment:"This meta-schema also defines keywords that have appeared in previous drafts in order to prevent incompatible extensions as they remain in common use.",properties:{definitions:{$comment:'"definitions" has been replaced by "$defs".',type:"object",additionalProperties:{$dynamicRef:"#meta"},deprecated:true,default:{}},dependencies:{$comment:'"dependencies" has been split and replaced by "dependentSchemas" and "dependentRequired" in order to serve their differing semantics.',type:"object",additionalProperties:{anyOf:[{$dynamicRef:"#meta"},{$ref:"meta/validation#/$defs/stringArray"}]},deprecated:true,default:{}},$recursiveAnchor:{$comment:'"$recursiveAnchor" has been replaced by "$dynamicAnchor".',$ref:"meta/core#/$defs/anchorString",deprecated:true},$recursiveRef:{$comment:'"$recursiveRef" has been replaced by "$dynamicRef".',$ref:"meta/core#/$defs/uriReferenceString",deprecated:true}}}});var require_applicator2=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/applicator",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/applicator":true},$dynamicAnchor:"meta",title:"Applicator vocabulary meta-schema",type:["object","boolean"],properties:{prefixItems:{$ref:"#/$defs/schemaArray"},items:{$dynamicRef:"#meta"},contains:{$dynamicRef:"#meta"},additionalProperties:{$dynamicRef:"#meta"},properties:{type:"object",additionalProperties:{$dynamicRef:"#meta"},default:{}},patternProperties:{type:"object",additionalProperties:{$dynamicRef:"#meta"},propertyNames:{format:"regex"},default:{}},dependentSchemas:{type:"object",additionalProperties:{$dynamicRef:"#meta"},default:{}},propertyNames:{$dynamicRef:"#meta"},if:{$dynamicRef:"#meta"},then:{$dynamicRef:"#meta"},else:{$dynamicRef:"#meta"},allOf:{$ref:"#/$defs/schemaArray"},anyOf:{$ref:"#/$defs/schemaArray"},oneOf:{$ref:"#/$defs/schemaArray"},not:{$dynamicRef:"#meta"}},$defs:{schemaArray:{type:"array",minItems:1,items:{$dynamicRef:"#meta"}}}}});var require_unevaluated2=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/unevaluated",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/unevaluated":true},$dynamicAnchor:"meta",title:"Unevaluated applicator vocabulary meta-schema",type:["object","boolean"],properties:{unevaluatedItems:{$dynamicRef:"#meta"},unevaluatedProperties:{$dynamicRef:"#meta"}}}});var require_content=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/content",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/content":true},$dynamicAnchor:"meta",title:"Content vocabulary meta-schema",type:["object","boolean"],properties:{contentEncoding:{type:"string"},contentMediaType:{type:"string"},contentSchema:{$dynamicRef:"#meta"}}}});var require_core3=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/core",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/core":true},$dynamicAnchor:"meta",title:"Core vocabulary meta-schema",type:["object","boolean"],properties:{$id:{$ref:"#/$defs/uriReferenceString",$comment:"Non-empty fragments not allowed.",pattern:"^[^#]*#?$"},$schema:{$ref:"#/$defs/uriString"},$ref:{$ref:"#/$defs/uriReferenceString"},$anchor:{$ref:"#/$defs/anchorString"},$dynamicRef:{$ref:"#/$defs/uriReferenceString"},$dynamicAnchor:{$ref:"#/$defs/anchorString"},$vocabulary:{type:"object",propertyNames:{$ref:"#/$defs/uriString"},additionalProperties:{type:"boolean"}},$comment:{type:"string"},$defs:{type:"object",additionalProperties:{$dynamicRef:"#meta"}}},$defs:{anchorString:{type:"string",pattern:"^[A-Za-z_][-A-Za-z0-9._]*$"},uriString:{type:"string",format:"uri"},uriReferenceString:{type:"string",format:"uri-reference"}}}});var require_format_annotation=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/format-annotation",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/format-annotation":true},$dynamicAnchor:"meta",title:"Format vocabulary meta-schema for annotation results",type:["object","boolean"],properties:{format:{type:"string"}}}});var require_meta_data=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/meta-data",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/meta-data":true},$dynamicAnchor:"meta",title:"Meta-data vocabulary meta-schema",type:["object","boolean"],properties:{title:{type:"string"},description:{type:"string"},default:true,deprecated:{type:"boolean",default:false},readOnly:{type:"boolean",default:false},writeOnly:{type:"boolean",default:false},examples:{type:"array",items:true}}}});var require_validation2=__commonJS(function(exports,module){module.exports={$schema:"https://json-schema.org/draft/2020-12/schema",$id:"https://json-schema.org/draft/2020-12/meta/validation",$vocabulary:{"https://json-schema.org/draft/2020-12/vocab/validation":true},$dynamicAnchor:"meta",title:"Validation vocabulary meta-schema",type:["object","boolean"],properties:{type:{anyOf:[{$ref:"#/$defs/simpleTypes"},{type:"array",items:{$ref:"#/$defs/simpleTypes"},minItems:1,uniqueItems:true}]},const:true,enum:{type:"array",items:true},multipleOf:{type:"number",exclusiveMinimum:0},maximum:{type:"number"},exclusiveMaximum:{type:"number"},minimum:{type:"number"},exclusiveMinimum:{type:"number"},maxLength:{$ref:"#/$defs/nonNegativeInteger"},minLength:{$ref:"#/$defs/nonNegativeIntegerDefault0"},pattern:{type:"string",format:"regex"},maxItems:{$ref:"#/$defs/nonNegativeInteger"},minItems:{$ref:"#/$defs/nonNegativeIntegerDefault0"},uniqueItems:{type:"boolean",default:false},maxContains:{$ref:"#/$defs/nonNegativeInteger"},minContains:{$ref:"#/$defs/nonNegativeInteger",default:1},maxProperties:{$ref:"#/$defs/nonNegativeInteger"},minProperties:{$ref:"#/$defs/nonNegativeIntegerDefault0"},required:{$ref:"#/$defs/stringArray"},dependentRequired:{type:"object",additionalProperties:{$ref:"#/$defs/stringArray"}}},$defs:{nonNegativeInteger:{type:"integer",minimum:0},nonNegativeIntegerDefault0:{$ref:"#/$defs/nonNegativeInteger",default:0},simpleTypes:{enum:["array","boolean","integer","null","number","object","string"]},stringArray:{type:"array",items:{type:"string"},uniqueItems:true,default:[]}}}});var require_json_schema_2020_12=__commonJS(function(exports){Object.defineProperty(exports,"__esModule",{value:true});var metaSchema=require_schema();var applicator=require_applicator2();var unevaluated=require_unevaluated2();var content=require_content();var core=require_core3();var format=require_format_annotation();var metadata=require_meta_data();var validation=require_validation2();var META_SUPPORT_DATA=["/properties"];function addMetaSchema2020($data){[metaSchema,applicator,unevaluated,content,core,with$data(this,format),metadata,with$data(this,validation)].forEach((sch)=>this.addMetaSchema(sch,undefined,false));return this;function with$data(ajv,sch){return $data?ajv.$dataMetaSchema(sch,META_SUPPORT_DATA):sch}}exports.default=addMetaSchema2020});var require__2020=__commonJS(function(exports,module){Object.defineProperty(exports,"__esModule",{value:true});exports.MissingRefError=exports.ValidationError=exports.CodeGen=exports.Name=exports.nil=exports.stringify=exports.str=exports._=exports.KeywordCxt=exports.Ajv2020=undefined;var core_1=require_core();var draft2020_1=require_draft2020();var discriminator_1=require_discriminator();var json_schema_2020_12_1=require_json_schema_2020_12();var META_SCHEMA_ID="https://json-schema.org/draft/2020-12/schema";class Ajv2020 extends core_1.default{constructor(opts={}){super({...opts,dynamicRef:true,next:true,unevaluated:true})}_addVocabularies(){super._addVocabularies();draft2020_1.default.forEach((v)=>this.addVocabulary(v));if(this.opts.discriminator)this.addKeyword(discriminator_1.default)}_addDefaultMetaSchema(){super._addDefaultMetaSchema();const{$data,meta}=this.opts;if(!meta)return;json_schema_2020_12_1.default.call(this,$data);this.refs["http://json-schema.org/schema"]=META_SCHEMA_ID}defaultMeta(){return this.opts.defaultMeta=super.defaultMeta()||(this.getSchema(META_SCHEMA_ID)?META_SCHEMA_ID:undefined)}}exports.Ajv2020=Ajv2020;module.exports=exports=Ajv2020;module.exports.Ajv2020=Ajv2020;Object.defineProperty(exports,"__esModule",{value:true});exports.default=Ajv2020;var validate_1=require_validate();Object.defineProperty(exports,"KeywordCxt",{enumerable:true,get:function(){return validate_1.KeywordCxt}});var codegen_1=require_codegen();Object.defineProperty(exports,"_",{enumerable:true,get:function(){return codegen_1._}});Object.defineProperty(exports,"str",{enumerable:true,get:function(){return codegen_1.str}});Object.defineProperty(exports,"stringify",{enumerable:true,get:function(){return codegen_1.stringify}});Object.defineProperty(exports,"nil",{enumerable:true,get:function(){return codegen_1.nil}});Object.defineProperty(exports,"Name",{enumerable:true,get:function(){return codegen_1.Name}});Object.defineProperty(exports,"CodeGen",{enumerable:true,get:function(){return codegen_1.CodeGen}});var validation_error_1=require_validation_error();Object.defineProperty(exports,"ValidationError",{enumerable:true,get:function(){return validation_error_1.default}});var ref_error_1=require_ref_error();Object.defineProperty(exports,"MissingRefError",{enumerable:true,get:function(){return ref_error_1.default}})});var exports_client={};__export(exports_client,{GatewayIngestionError:()=>GatewayIngestionError,createGatewayIngestionClient:()=>createGatewayIngestionClient});var exports_registry={};__export(exports_registry,{defineGateway:()=>defineGateway,defineOperation:()=>defineOperation,defineOperationDomain:()=>defineOperationDomain});var exports_kernel={};__export(exports_kernel,{createGatewayKernel:()=>createGatewayKernel});var loopbackHostname=/^(?:localhost|127(?:\.\d{1,3}){3}|\[::1\])$/u;var requireTenantOrigin=(value,name)=>{let url;try{url=new URL(value)}catch{throw new TypeError(`${name} must contain only an HTTPS origin or a loopback HTTP origin`)}const allowedScheme=url.protocol==="https:"||url.protocol==="http:"&&loopbackHostname.test(url.hostname);if(!allowedScheme||url.origin!==value){throw new TypeError(`${name} must contain only an HTTPS origin or a loopback HTTP origin`)}return url.origin};var resolveCredentials=async(provider)=>("getCredentials"in provider)?await provider.getCredentials():provider;var basicAuthorization=({clientId,clientSecret})=>{if(clientId.length===0||clientId.includes(":")){throw new TypeError("A non-empty clientId without ':' is required")}if(clientSecret.length===0){throw new TypeError("A non-empty clientSecret is required")}return`Basic ${Buffer.from(`${clientId}:${clientSecret}`,"utf-8").toString("base64")}`};class GatewayIngestionError extends Error{code;correlationId;retryable;status;constructor(message,options){super(message);this.name="GatewayIngestionError";this.code=options.code;this.correlationId=options.correlationId;this.retryable=options.retryable;this.status=options.status}}var object=(value)=>{if(typeof value!=="object"||value===null||Array.isArray(value)){return null}return Object.fromEntries(Object.entries(value))};var boundedJson=async(response)=>{const text=await response.text();if(new TextEncoder().encode(text).byteLength>1048576){throw new TypeError("Gateway ingestion response is too large")}try{return JSON.parse(text)}catch{throw new TypeError("Gateway ingestion response is not valid JSON")}};var requiredIdentifier=(value,name)=>{if(value.length===0||value.length>512){throw new TypeError(`${name} must contain between 1 and 512 characters`)}return value};var bounded=(value,name,maximum)=>{if(value.length===0||value.length>maximum){throw new TypeError(`${name} must contain between 1 and ${maximum} characters`)}return value};var integer=(value,name)=>{if(typeof value!=="number"||!Number.isSafeInteger(value)||value<0){throw new TypeError(`Gateway ingestion response ${name} must be a non-negative integer`)}return value};var acknowledgement=(value)=>{const candidate=object(value);if(candidate===null||typeof candidate.correlationId!=="string"||candidate.checkpoint!==null&&typeof candidate.checkpoint!=="string"){throw new TypeError("Gateway ingestion acknowledgement is invalid")}return{acknowledged:integer(candidate.acknowledged,"acknowledged"),checkpoint:candidate.checkpoint===null?null:bounded(candidate.checkpoint,"checkpoint",1024),correlationId:requiredIdentifier(candidate.correlationId,"correlationId"),ignored:integer(candidate.ignored,"ignored"),quarantined:integer(candidate.quarantined,"quarantined"),written:integer(candidate.written,"written")}};var ingestionError=(status,value)=>{const candidate=object(value);const error=object(candidate?.error);const code=typeof error?.code==="string"?error.code:"invalid_response";const message=typeof error?.message==="string"?error.message:`Gateway ingestion failed with HTTP ${status}`;const correlationId=typeof candidate?.correlationId==="string"?candidate.correlationId:undefined;const errorOptions={code,retryable:error?.retryable===true,status};if(correlationId!==undefined){errorOptions.correlationId=correlationId}return new GatewayIngestionError(message,errorOptions)};var defaultCorrelationId=()=>crypto.randomUUID();var pushRecord=({deletedAt,externalId,revision,updatedAt,value})=>{if(deletedAt!==undefined&&updatedAt!==undefined){return{deletedAt,externalId,revision,updatedAt,value}}if(updatedAt!==undefined){return{externalId,revision,updatedAt,value}}return deletedAt===undefined?{externalId,revision,value}:{deletedAt,externalId,revision,value}};var createGatewayIngestionClient=(config)=>{const tenantUrl=requireTenantOrigin(config.tenantUrl,"tenantUrl");const installationId=requiredIdentifier(config.installationId,"installationId");const organizationId=requiredIdentifier(config.organizationId,"organizationId");const fetch=config.fetch??globalThis.fetch;const createCorrelationId=config.createCorrelationId??defaultCorrelationId;return{push:async(bindingId,request)=>{const boundedBindingId=requiredIdentifier(bindingId,"bindingId");const batchId=bounded(request.batchId,"batchId",256);const cursor=bounded(request.cursor,"cursor",1024);const expectedCursor=request.expectedCursor===null?null:bounded(request.expectedCursor,"expectedCursor",1024);if(request.records.length>1000){throw new TypeError("records must contain at most 1000 entries")}const correlationId=bounded(request.correlationId??createCorrelationId(),"correlationId",256);const credentials=await resolveCredentials(config.authentication.credentials);const path=`/application/v1/external-app-gateways/${encodeURIComponent(installationId)}`+`/bindings/${encodeURIComponent(boundedBindingId)}/push`;const requestInit={body:JSON.stringify({batchId,cursor,expectedCursor,records:request.records.map(pushRecord)}),headers:{authorization:basicAuthorization(credentials),"content-type":"application/json","x-correlation-id":correlationId,"x-organization-id":organizationId},method:"POST"};if(request.signal!==undefined){requestInit.signal=request.signal}const response=await fetch(new URL(path,tenantUrl),requestInit);const body=await boundedJson(response);if(response.status!==202){throw ingestionError(response.status,body)}return acknowledgement(body)}}};var resourceCapabilityByOperation={create:"create",get:"get",hard_delete:"hardDelete",list:"search",restore:"restore",soft_delete:"softDelete",update:"update"};var exposedKnowledgeResource=(exposure)=>{if(exposure.access!=="read"&&exposure.access!=="read_write"){throw new TypeError("Invalid knowledge access mode")}const{resource}=exposure;if(typeof resource.execute!=="function"){throw new TypeError("Resource requires an executable handler")}for(const operation of["list","get","create","update","hard_delete","soft_delete","restore"]){const exposedOperation=exposure.access==="read_write"||operation==="list"||operation==="get";const enabled=exposedOperation&&(operation==="list"||resource.definition.capabilities[resourceCapabilityByOperation[operation]]===true);if(enabled&&resource.authorization[operation]===undefined){throw new TypeError(`Resource ${operation} requires authorization`)}}if(exposure.access==="read_write"){return resource}const capabilities=resource.definition.capabilities.get===true?{get:true,search:true}:{search:true};const authorization={get:resource.authorization.get,list:resource.authorization.list};const exposed={...resource,authorization:Object.fromEntries(Object.entries(authorization).filter(([,policy])=>policy!==undefined)),definition:{...resource.definition,capabilities},execute:async(request,context,options)=>{if(request.operation!=="list"&&request.operation!=="get"){return{correlationId:request.requestId,error:{code:"capability_not_supported",message:"Resource is exposed read-only",retryable:false},ok:false}}return await resource.execute(request,context,options)}};return Object.freeze(exposed)};var compareCodePoints=(left,right)=>{const leftPoints=Array.from(left,(character)=>character.codePointAt(0)??0);const rightPoints=Array.from(right,(character)=>character.codePointAt(0)??0);const length=Math.min(leftPoints.length,rightPoints.length);for(let index=0;index<length;index+=1){const difference=leftPoints[index]-rightPoints[index];if(difference!==0){return difference}}return leftPoints.length-rightPoints.length};var insertSortedKey=(keys,key)=>{let index=0;while(index<keys.length&&compareCodePoints(keys[index]??"",key)<=0){index+=1}keys.splice(index,0,key)};var isJsonObject=(value)=>Object.prototype.toString.call(value)==="[object Object]"&&!Array.isArray(value)&&(Object.getPrototypeOf(value)===Object.prototype||Object.getPrototypeOf(value)===null);var isJsonArray=(value)=>Array.isArray(value);var canonicalize=(value,ancestors,_valueType)=>{if(value===null){return"null"}if(isJsonArray(value)){if(ancestors.has(value)){throw new TypeError("package declarations cannot contain cyclic values")}ancestors.add(value);try{return`[${value.map((item)=>canonicalize(item,ancestors)).join(",")}]`}finally{ancestors.delete(value)}}if(isJsonObject(value)){if(ancestors.has(value)){throw new TypeError("package declarations cannot contain cyclic values")}ancestors.add(value);try{const record=value;const keys=[];for(const key of Object.keys(record)){insertSortedKey(keys,key)}return`{${keys.map((key)=>`${JSON.stringify(key)}:${canonicalize(record[key],ancestors)}`).join(",")}}`}finally{ancestors.delete(value)}}if(value instanceof Object){throw new TypeError("package declarations must contain JSON-compatible values")}switch(Object.prototype.toString.call(value)){case"[object Boolean]":{return value===true?"true":"false"}case"[object Number]":{const number=Number(value);if(!Number.isFinite(number)){throw new TypeError("package declarations cannot contain non-finite numbers")}return JSON.stringify(number)}case"[object String]":{return JSON.stringify(String(value))}default:{throw new TypeError("package declarations must contain JSON-compatible values")}}};var canonicalJson=(value,..._typeEvidence)=>canonicalize(value,new WeakSet);var parseJsonObject=(source)=>{const value=JSON.parse(source);if(!isJsonObject(value)){throw new TypeError("expected a JSON object")}return value};var compareUtf16CodeUnits=(left,right)=>{const length=Math.min(left.length,right.length);for(let index=0;index<length;index+=1){const difference=left.charCodeAt(index)-right.charCodeAt(index);if(difference!==0){return difference}}return left.length-right.length};var plainFormWidgets=["checkbox","color","date","date_range","datetime","email","file","hidden","number","password","structured_file_preview","switch","text","textarea","user_multi_select","user_select","variable_references"];var selectFormWidgets=["folders_explorer","multi_select","radio","select"];var packageVariableTypes=["string","number","boolean","string[]","json","secret"];var isVariableReference=(value)=>typeof value==="object"&&value!==null&&!Array.isArray(value)&&Object.keys(value).length===1&&("$variable"in value)&&typeof value.$variable==="string";var isString=(value)=>String(value)===value;var holdsType=(type,value)=>{switch(type){case"boolean":{return Boolean(value)===value}case"json":{return true}case"number":{return Number(value)===value}case"string[]":{return Array.isArray(value)&&value.every(isString)}default:{return isString(value)}}};var packageVariableViolation=(name,declaration)=>{if(!packageVariableTypes.includes(declaration.type)){return`variable '${name}' has the unknown type '${declaration.type}'`}if(!("default"in declaration)||declaration.default===undefined){return}if(declaration.type==="secret"){return`variable '${name}' is a secret and cannot declare a default`}if(!holdsType(declaration.type,declaration.default)){return`variable '${name}' declares a default outside its type '${declaration.type}'`}return};var invalid=(path)=>{throw new TypeError(`Invalid package manifest at ${path}`)};var string=(v,p)=>typeof v==="string"?v:invalid(p);var identity=(v,p)=>{const s=string(v,p);return s.trim()===""?invalid(p):s};var hostedIdentity=(value,path)=>{const text=identity(value,path);return text===text.trim()?text:invalid(path)};var assertDenseArrays=(value,path,seen)=>{if(typeof value!=="object"||value===null||seen.has(value)){return}seen.add(value);if(Array.isArray(value)){for(let index=0;index<value.length;index+=1){if(!Object.hasOwn(value,index)){invalid(`${path}/${index}`)}}}for(const[key,child]of Object.entries(value)){assertDenseArrays(child,`${path}/${key}`,seen)}};var boolean=(v,p)=>typeof v==="boolean"?v:invalid(p);var number=(v,p)=>typeof v==="number"&&Number.isFinite(v)?v:invalid(p);var positiveSafeInteger=(value,path)=>{const parsed=number(value,path);return Number.isSafeInteger(parsed)&&parsed>0?parsed:invalid(path)};var optional=(read)=>(v,p)=>v===undefined?undefined:read(v,p);var nullable=(read)=>(v,p)=>v===null?null:read(v,p);var literal=(...values)=>(v,p)=>{for(const value of values){if(v===value){return value}}return invalid(p)};var array=(read)=>(v,p)=>{if(!Array.isArray(v)){return invalid(p)}return v.map((item,index)=>read(item,`${p}/${index}`))};var record=(read)=>(v,p)=>{if(typeof v!=="object"||v===null||Array.isArray(v)){return invalid(p)}return Object.fromEntries(Object.entries(v).map(([key,value])=>[key,read(value,`${p}/${key}`)]))};var object2=(fields)=>(v,p)=>{if(typeof v!=="object"||v===null||Array.isArray(v)){return invalid(p)}const entries=Object.entries(v);for(const key in fields){if(!Object.hasOwn(fields,key)){continue}fields[key](entries.find(([name])=>name===key)?.[1],`${p}/${key}`)}return v};var varying=(read)=>(v,p)=>isVariableReference(v)?v:read(v,p);var varyingStructure=(read)=>(v,p)=>isVariableReference(v)?v:read(v,p);var varyingArray=(read)=>array(varying(read));var varyingStrings=varyingArray(string);var excludedKey=/^(?:fqn|kind|lifecycle|version)$|Fqn$/u;var varyingFields=(fields)=>{const wrapped=Object.fromEntries(Object.entries(fields).map(([key,read])=>[key,excludedKey.test(key)?read:varying(read)]));return wrapped};var varyingObject=(fields)=>object2(varyingFields(fields));var substituted=(read)=>(v,p)=>read(v,p);var refine=(read,violation)=>(v,p)=>{const value=read(v,p);return violation(value)===undefined?value:invalid(p)};var strings=array(string);var optString=optional(string);var optBoolean=optional(boolean);var optNumber=optional(number);var optStrings=optional(strings);var json=(v)=>parseJsonObject(canonicalJson({value:v})).value;var jsonObject=record(json);var base={description:optString,displayName:string,fqn:identity,icon:optString,tags:optStrings,version:string};var union=(left,right)=>(v,p)=>{try{return left(v,p)}catch(error){if(!(error instanceof TypeError)){throw error}return right(v,p)}};var schemaDocument=(v,p)=>{const doc=jsonObject(v,p);const schemaType=literal("array","boolean","integer","null","number","object","string");const fields={$anchor:optString,$comment:optString,$defs:optional(record(schemaDocument)),$dynamicAnchor:optString,$dynamicRef:optString,$id:optString,$ref:optString,$schema:optional(literal("https://json-schema.org/draft/2020-12/schema")),additionalProperties:optional(union(boolean,schemaDocument)),allOf:optional(array(schemaDocument)),anyOf:optional(array(schemaDocument)),const:optional(json),contains:optional(schemaDocument),default:optional(json),dependentRequired:optional(record(strings)),description:optString,else:optional(schemaDocument),enum:optional(array(json)),exclusiveMaximum:optNumber,exclusiveMinimum:optNumber,format:optString,if:optional(schemaDocument),items:optional(schemaDocument),maxItems:optNumber,maxLength:optNumber,maxProperties:optNumber,maximum:optNumber,minItems:optNumber,minLength:optNumber,minProperties:optNumber,minimum:optNumber,multipleOf:optNumber,not:optional(schemaDocument),oneOf:optional(array(schemaDocument)),pattern:optString,patternProperties:optional(record(schemaDocument)),prefixItems:optional(array(schemaDocument)),properties:optional(record(schemaDocument)),required:optStrings,then:optional(schemaDocument),title:optString,type:optional(union(schemaType,array(schemaType))),unevaluatedItems:optional(union(boolean,schemaDocument)),unevaluatedProperties:optional(union(boolean,schemaDocument)),uniqueItems:optBoolean};return object2(fields)(doc,p)};var schema=object2({dialect:literal("https://json-schema.org/draft/2020-12/schema"),document:schemaDocument,fidelity:literal("exact","structural")});var visibility=object2({equals:optional(json),field:string,in:optional(array(json)),isNotSet:optBoolean,isSet:optBoolean,notEquals:optional(json),notIn:optional(array(json))});var visibilityRule=object2({logic:optional(literal("and","or")),visibleWhen:union(visibility,array(visibility))});var validationRule=(v,p)=>{const{type}=object2({type:string})(v,p);const messages={code:optString,message:optString};switch(type){case"min_length":case"max_length":case"min":case"max":{return object2({...messages,type:literal(type),value:number})(v,p)}case"pattern":{return object2({...messages,type:literal(type),value:string})(v,p)}case"required":{return object2({...messages,type:literal("required")})(v,p)}default:{return object2({...messages,type:literal("integer","json","non_empty_array")})(v,p)}}};var selectOption=object2({label:optString,locked:optBoolean,value:string});var selectOptions=object2({aiFill:optional(object2({buttonLabel:optString,prompt:string,retryable:optBoolean})),allowClear:optBoolean,allowCustom:optBoolean,dataSource:optString,dependencies:optStrings,options:optional(array(union(string,selectOption))),preventSaveWhenEmpty:optBoolean,readonlyOnUpdate:optBoolean,searchable:optBoolean,selectionMetadataField:optString,submit:optBoolean});var fieldUiBase={"ui:disabled":optBoolean,"ui:help":optString,"ui:order":optNumber,"ui:placeholder":optString,"ui:readonly":optBoolean,"ui:suggestedName":optString,"ui:validation":optional(array(validationRule))};var absent=(v,p)=>v===undefined?undefined:invalid(p);var plainFieldUi=object2({...fieldUiBase,"ui:options":absent,"ui:widget":literal(...plainFormWidgets)});var selectFieldUi=object2({...fieldUiBase,"ui:options":optional(selectOptions),"ui:widget":optional(literal(...selectFormWidgets))});var structuredFileUploadFieldUi=object2({...fieldUiBase,"ui:options":optional(object2({formatField:optString})),"ui:widget":literal("structured_file_upload")});var structuredFileBrowserFieldUi=object2({...fieldUiBase,"ui:options":object2({contribution:object2({componentFqn:string,connectionSlot:string}),formatField:optString,label:optString}),"ui:widget":literal("structured_file_browser")});var fieldUi=union(union(plainFieldUi,selectFieldUi),union(structuredFileUploadFieldUi,structuredFileBrowserFieldUi));var formItems=array(union(string,object2({md:string})));var form=object2({createSteps:optional(array(object2({description:optional(nullable(string)),id:string,includeInBasicInfo:optional(nullable(boolean)),items:formItems,title:string,visibility:optional(nullable(visibilityRule))}))),layout:optional(literal("stacked","two_column")),schema,uiSchema:optional(record(fieldUi)),updateSections:optional(array(object2({description:optional(nullable(string)),items:formItems,layout:optional(nullable(literal("stacked","two_column"))),title:optional(nullable(string))}))),visibility:optional(record(visibilityRule))});var closedGatewayObject=(fields)=>refine(object2(fields),(value)=>Object.keys(value).some((key)=>!Object.hasOwn(fields,key))?"unexpected Gateway field":undefined);var identifier=refine(string,(value)=>/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u.test(value)?undefined:"invalid identifier");var version=refine(string,(value)=>value.length>0&&value.length<=128&&value.trim()===value?undefined:"invalid version");var bounded2=(maximum,minimum=1)=>refine(number,(value)=>Number.isSafeInteger(value)&&value>=minimum&&value<=maximum?undefined:"invalid limit");var unique=(read,key)=>refine(read,(values)=>new Set(values.map(key)).size===values.length?undefined:"duplicate identifier");var projection=refine(schema,(value)=>(value.fidelity==="exact"||value.fidelity==="structural")&&Object.keys(value).every((key)=>key==="dialect"||key==="document"||key==="fidelity")?undefined:"unsupported Gateway projection");var authorization=closedGatewayObject({delegatedSubject:literal("allowed","forbidden","required"),organization:literal("required"),principalKinds:refine(unique(array(literal("detached_user","service_principal")),(kind)=>kind),(values)=>values.length>0?undefined:"empty principalKinds"),scopes:unique(array(refine(string,(value)=>value.length>0&&value.length<=256?undefined:"invalid scope")),(scope)=>scope)});var operationFields={authorization,description:string,effects:literal("external_side_effect","read","write"),execution:closedGatewayObject({mode:literal("synchronous"),timeoutMs:bounded2(3600000)}),id:identifier,idempotency:literal("idempotent","requires_key","safe"),input:projection,limits:closedGatewayObject({maxRequestBytes:bounded2(16777216),maxResponseBytes:bounded2(16777216)}),output:projection,retry:union(closedGatewayObject({mode:literal("never")}),closedGatewayObject({maxAttempts:bounded2(10,2),mode:literal("idempotent_only")})),title:string,version};var operationReader=closedGatewayObject(operationFields);var domainFields={description:optional(string),displayOrder:optional(number),icon:optional(string),id:identifier,tags:optional(strings),title:string};var domainsReader=unique(array(closedGatewayObject({...domainFields,operations:unique(array(operationReader),(operation)=>operation.id)})),(domain)=>domain.id);var inputReader=closedGatewayObject({id:identifier,operationDomains:domainsReader,version});var empty=refine(array(identity),(values)=>values.length===0?undefined:"operation-only Gateway required");var emptyReader=(value,path)=>{empty(value,path);return[]};var disabled=(value,path)=>boolean(value,path)===false?false:invalid(path);var contractReader=closedGatewayObject({capabilities:closedGatewayObject({resources:disabled}),datasets:emptyReader,id:identifier,knowledge:emptyReader,operationDomains:unique(array(closedGatewayObject({...domainFields,operations:unique(array(closedGatewayObject({...operationFields,canonicalReference:string})),(operation)=>operation.id)})),(domain)=>domain.id),organizationBinding:closedGatewayObject({mode:literal("installed_organization")}),protocolVersion:literal("2"),version});var buildOperationGatewayContract=(input)=>{assertDenseArrays(input,"gateway",new WeakSet);canonicalJson(input);const admitted=inputReader(input,"gateway");return{capabilities:{resources:false},datasets:[],id:admitted.id,knowledge:[],operationDomains:admitted.operationDomains.map((domain)=>({...domain,operations:domain.operations.map((operation)=>({...operation,canonicalReference:`${admitted.id}/${domain.id}/${operation.id}@${operation.version}`})).sort((a,b)=>compareUtf16CodeUnits(a.id,b.id))})).sort((a,b)=>compareUtf16CodeUnits(a.id,b.id)),organizationBinding:{mode:"installed_organization"},protocolVersion:"2",version:admitted.version}};var readOperationGatewayContract=(value,path)=>{assertDenseArrays(value,path,new WeakSet);const admitted=contractReader(value,path);const normalized=buildOperationGatewayContract({id:admitted.id,operationDomains:admitted.operationDomains.map((domain)=>({...domain,operations:domain.operations.map(({canonicalReference:_reference,...operation})=>operation)})),version:admitted.version});if(canonicalJson(admitted)!==canonicalJson(normalized)){invalid(path)}return normalized};var deepFreeze=(value)=>{if(value!==null&&typeof value==="object"&&!Object.isFrozen(value)){Object.freeze(value);for(const child of Object.values(value)){deepFreeze(child)}}return value};var SchemaConsumerProfiles=Object.freeze({automationGraphInput:"workflow_value",automationGraphOutput:"workflow_value",connectionCredential:"interactive_form",connectorSettings:"interactive_form",form:"interactive_form",knowledgeEntity:"knowledge_record",knowledgeRelation:"knowledge_record",notificationCredential:"interactive_form",studioComponentProps:"studio_props",toolInput:"ai_function_input",toolOutput:"runtime_json",toolSettings:"interactive_form",workflowConfiguration:"workflow_value",workflowFieldValue:"workflow_value",workflowInput:"workflow_value",workflowOutput:"workflow_value",workflowPortValue:"workflow_value"});var annotationKeywords=["$anchor","$comment","$id","$schema","$vocabulary","deprecated","description","examples","readOnly","title","writeOnly"];var structuralKeywords=["$defs","$ref","additionalProperties","const","enum","items","properties","required","type"];var boundKeywords=["exclusiveMaximum","exclusiveMinimum","maxItems","maxLength","maxProperties","maximum","minItems","minLength","minProperties","minimum","multipleOf","pattern","uniqueItems"];var UnrestrictedScopeKeyword="x-unrestricted-scope";var baseProfileKeywords=[...annotationKeywords,...structuralKeywords,...boundKeywords];var ConsumerProfiles=deepFreeze({ai_function_input:{allowedFidelity:["exact","structural"],allowedKeywords:[...baseProfileKeywords,"anyOf"],id:"ai_function_input",rootObject:true,unsupportedKeywords:["$dynamicRef","$dynamicAnchor","allOf","oneOf","not","patternProperties","prefixItems","contains","dependentRequired","if","then","else","unevaluatedItems","unevaluatedProperties"]},interactive_form:{allowedFidelity:["exact"],allowedKeywords:[...baseProfileKeywords,"anyOf","default","format",UnrestrictedScopeKeyword],id:"interactive_form",rootObject:true,unsupportedKeywords:["$dynamicRef","$dynamicAnchor","allOf","oneOf","not","patternProperties","contains","dependentRequired","if","then","else","prefixItems","unevaluatedItems","unevaluatedProperties"]},knowledge_record:{allowedFidelity:["exact","structural"],allowedKeywords:[...baseProfileKeywords,"format"],id:"knowledge_record",rootObject:true,unsupportedKeywords:["$dynamicRef","$dynamicAnchor","allOf","anyOf","oneOf","not","patternProperties","prefixItems","contains","dependentRequired","if","then","else","unevaluatedItems","unevaluatedProperties"]},runtime_json:{allowedFidelity:["exact","structural"],allowedKeywords:null,id:"runtime_json",rootObject:false,unsupportedKeywords:["$dynamicRef","$dynamicAnchor"]},studio_props:{allowedFidelity:["exact"],allowedKeywords:[...baseProfileKeywords,"anyOf","default","format"],id:"studio_props",rootObject:true,unsupportedKeywords:["$dynamicRef","$dynamicAnchor","allOf","oneOf","not","patternProperties","contains","dependentRequired","if","then","else","prefixItems","unevaluatedItems","unevaluatedProperties"]},workflow_value:{allowedFidelity:["exact","structural"],allowedKeywords:[...baseProfileKeywords,"default","format","oneOf"],id:"workflow_value",rootObject:false,unsupportedKeywords:["$dynamicRef","$dynamicAnchor","allOf","anyOf","not","unevaluatedItems","unevaluatedProperties"]}});var knownVocabularies=new Set(["https://json-schema.org/draft/2020-12/vocab/applicator","https://json-schema.org/draft/2020-12/vocab/content","https://json-schema.org/draft/2020-12/vocab/core","https://json-schema.org/draft/2020-12/vocab/format-annotation","https://json-schema.org/draft/2020-12/vocab/format-assertion","https://json-schema.org/draft/2020-12/vocab/meta-data","https://json-schema.org/draft/2020-12/vocab/unevaluated","https://json-schema.org/draft/2020-12/vocab/validation"]);var schemaArrayKeywords=new Set(["allOf","anyOf","oneOf","prefixItems"]);var schemaMapKeywords=new Set(["$defs","patternProperties","properties"]);var schemaValueKeywords=new Set(["additionalProperties","contains","else","if","items","not","then","unevaluatedItems","unevaluatedProperties"]);var workflowBindingKey=(binding)=>canonicalJson({path:binding.path,target:binding.target});var renderWorkflowBinding=(binding)=>`${binding.target}:${binding.path.join(".")}`;var isConnectionCount=(value)=>value===undefined||value===null||Number.isSafeInteger(value)&&value>=0;var workflowPortPolicyViolation=(port)=>{if(!isConnectionCount(port.minConnections)||!isConnectionCount(port.maxConnections)){return"connection counts must be non-negative integers"}const max=port.maxConnections===undefined?1:port.maxConnections;if(max!==null&&(port.minConnections??0)>max){return"minConnections cannot exceed maxConnections"}if(port.allowedTemplateKinds?.length===0){return"allowedTemplateKinds cannot be empty"}if(port.allowedTemplateFqns?.length===0){return"allowedTemplateFqns cannot be empty"}if(port.schemaResolution?.variants.length===0){return"schemaResolution requires variants"}return};var firstDuplicate=(values)=>values.find((value,index)=>values.indexOf(value)!==index);var workflowEditorViolation=(editor)=>{const sections=editor.form?.sections??[];const duplicateSection=firstDuplicate(sections.flatMap((section)=>section.id===undefined?[]:[section.id]));if(duplicateSection!==undefined){return`workflow editor section id '${duplicateSection}' is not unique`}const fields=sections.flatMap((section)=>section.fields??[]);const keys=fields.map((field)=>workflowBindingKey(field.binding));const duplicateField=fields.find((field,index)=>keys.indexOf(workflowBindingKey(field.binding))!==index);if(duplicateField!==undefined){return`workflow editor binding ${renderWorkflowBinding(duplicateField.binding)} is not unique`}for(const field of fields){const references=[...(field.visibleWhen??[]).map((rule)=>rule.binding),...field.optionSource?.kind==="remote"?field.optionSource.dependsOn:[]];const dangling=references.find((reference)=>!keys.includes(workflowBindingKey(reference)));if(dangling!==undefined){return`workflow editor field ${renderWorkflowBinding(field.binding)} references unknown binding ${renderWorkflowBinding(dangling)}`}}return};var metadata=object2({available:boolean,label:string});var connection=object2({...base,compatibility:optional(object2({auth:optString,dialect:optString,extensions:optional(jsonObject),provider:optString})),creationMode:optional(literal("self_service","registration_only")),credential:form,defaultConnectionName:string,discoveryMetadata:optional(metadata),kind:literal("connection"),providerFamily:string,secretFields:optStrings,testMetadata:optional(metadata)});var pathParts=array(union(string,number));var bindingModes=array(literal("external","managed"));var syncModes=array(literal("delta","full"));var bindingScopes=array(literal("organization","tenant"));var mutationPolicy=literal("always","connector_backed","never");var extraProps=literal("ignore","import","inline");var outboundStrategy=literal("local_first","remote_first");var updateMode=literal("full","partial");var localized=object2({fallbackLocale:string,values:record(string)});var catalogTags=optional(record(strings));var connectionRefs=optional(array(object2({catalogCollection:optString,connectionInstanceFqn:optional(identity),connectionTemplateFqn:string,label:string,required:optBoolean,slot:string,visibleWhen:optional(visibility)})));var projectionPath=refine(string,(path)=>path.split(".").every((key)=>/^[^[\]]+(?:\[\d*\])*$/u.test(key))&&path.split("[]").length<=2?undefined:"malformed remote path");var fieldMap=(v,p)=>{const common={direction:literal("both","inbound","outbound"),local:string,skipIfNull:boolean};const{op}=object2({op:string})(v,p);switch(op){case"path":{return object2({...common,op:literal(op),remote:string})(v,p)}case"cast":{return object2({...common,falseValues:optStrings,op:literal(op),remote:string,trueValues:optStrings})(v,p)}case"default":{return object2({...common,op:literal(op),remote:optString,value:json})(v,p)}case"concat":{return object2({...common,op:literal(op),remote:strings,separator:optString})(v,p)}case"split":{return object2({...common,discardEmpty:optBoolean,op:literal(op),remote:string,separators:optStrings,trimItems:optBoolean,uniqueItems:optBoolean})(v,p)}case"coordinates":{return object2({...common,latitudeKey:optString,longitudeKey:optString,op:literal(op),remote:(value,location)=>{const parts=strings(value,location);if(parts.length!==2){return invalid(location)}return[string(parts[0],location),string(parts[1],location)]}})(v,p)}case"transform":{return object2({...common,op:literal(op),remote:string,transformerId:string})(v,p)}case"reference":{return object2({...common,op:literal(op),remote:projectionPath,target:optString})(v,p)}case"embedded":{return object2({...common,fieldMap:array((rule,path)=>{const nested=fieldMap(rule,path);if(nested.op==="embedded"){throw new TypeError(`Invalid package manifest at ${path}/op: an embedded rule cannot hold another embedded rule`)}return nested}),op:literal(op),remote:projectionPath,remoteId:string,target:optString})(v,p)}default:{return invalid(`${p}/op`)}}};var predefinedExtras=optional(array(object2({displayName:nullable(string),enabled:boolean,id:string,includeInEntityEmbedding:boolean,kind:literal("linked_text","file_source"),slotKey:string,source:jsonObject})));var predefinedSchedules=optional(array(object2({cronExpression:string,enabled:optBoolean,importMode:optional(literal("delta","full")),label:optString,rationale:optString,timezone:optString})));var schemaCapability={extraPropsMode:optional(extraProps),fieldMap:optional(array(fieldMap)),fqn:string,outboundStrategy:optional(outboundStrategy),predefinedBindingExtras:predefinedExtras,predefinedBindingKey:optString,predefinedBindingMode:optional(literal("external","managed")),predefinedBindingRemoteCollectionId:optString,predefinedBindingRemoteCollectionName:optString,predefinedSchedules,supportedSyncModes:optional(syncModes),supportsInbound:optBoolean,supportsOutbound:optBoolean,syncIntervalSeconds:optional(nullable(number)),updateMode:optional(updateMode)};var entityCapability=object2({...schemaCapability,predefinedBindingParentKey:optString,supportedBindingModes:optional(bindingModes)});var relationCapability=object2({...schemaCapability,predefinedBindingParentEntityKey:optString,predefinedBindingRelationImportMode:optional(literal("child_binding","relation_only")),predefinedBindingSourceEntityKey:optString,predefinedBindingTargetEntityKey:optString});var discoveryDefaults=object2({extraPropsMode:extraProps,outboundStrategy,supportedBindingModes:bindingModes,supportedSyncModes:syncModes,supportsInbound:boolean,supportsOutbound:boolean,syncIntervalSeconds:nullable(number),updateMode});var datasetCapabilities=object2({aggregates:array(literal("count","count_distinct","sum","min","max","avg")),definitionRefresh:boolean,grouping:boolean,intents:array(literal("records","aggregate","time_series")),limits:object2({maxBytes:number,maxPageRows:number,maxRows:number,timeoutMs:number}),ordering:boolean,pagination:boolean,predicates:array(literal("eq","ne","lt","lte","gt","gte","in","not_in","is_null","is_not_null","contains","starts_with"))});var readOverviewBudget=(value,path)=>{const parsed=positiveSafeInteger(value,path);return parsed<=1e6?parsed:invalid(path)};var overviewInputMaxChars=optional(nullable(readOverviewBudget));var richEnrichment=optional(nullable(boolean));var fieldReferences=array(object2({field:string,scope:literal("data","entity")}));var ownerRelationFields={autocomplete:optional(object2({baseFilters:optional(array(object2({caseSensitive:optBoolean,field:identity,operator:literal("contains","contains_all","contains_any","contains_none","ends_with","eq","exists","gt","gte","in","is_empty","is_not_empty","is_not_null","is_null","lt","lte","ne","nin","not_contains","not_in","starts_with"),value:json}))),fields:optional(fieldReferences)})),display:optional(object2({fields:fieldReferences})),inverseOf:optional((_value,path)=>invalid(path)),onDelete:optional(literal("clear","restrict")),targetSchemaFqn:identity};var ownerRelation=union(object2({...ownerRelationFields,cardinality:literal("one_to_one","many_to_one"),maxItems:optional((_value,path)=>invalid(path))}),object2({...ownerRelationFields,cardinality:literal("one_to_many","many_to_many"),maxItems:optional(positiveSafeInteger)}));var inverseRelation=object2({autocomplete:optional((_value,path)=>invalid(path)),cardinality:optional((_value,path)=>invalid(path)),display:optional(object2({fields:fieldReferences})),inverseOf:object2({field:refine(identity,(pointer)=>/^\/(?:[^~/]|~[01])+$/u.test(pointer)?undefined:"top-level pointer"),schemaFqn:identity}),maxItems:optional((_value,path)=>invalid(path)),onDelete:optional((_value,path)=>invalid(path)),targetSchemaFqn:optional((_value,path)=>invalid(path))});var relation=union(ownerRelation,inverseRelation);var fieldSemantics=object2({defaultSearch:optBoolean,embedded:optBoolean,faceted:optBoolean,file:optional(object2({accepts:strings,multiple:boolean})),includeInItemEmbedding:optBoolean,indexContent:optBoolean,indexOverview:optBoolean,indexed:optBoolean,managedProjectionSource:optional(literal("organization_group","organization_user")),mediaVisibility:optional(literal("private","protected","public")),overviewInputMaxChars,queryGuidance:optString,relation:optional(relation),richEnrichment,unique:optBoolean,user:optional(object2({accounts:optional((value,path)=>value===true?true:invalid(path)),multiple:boolean}))});var managedProjection=object2({connectorPolicy:literal("allow","deny_schema"),genericMutationPolicy:literal("deny_managed_fields","deny_schema"),kind:literal("directory_person","directory_person_in_group","directory_group","directory_group_parent"),source:literal("organization_group","organization_group_hierarchy","organization_group_membership","organization_user")});var fieldLocalization=object2({description:optional(localized),help:optional(localized),label:optional(localized),placeholder:optional(localized)});var fieldPresentation=object2({copyable:optBoolean,editor:optString,editorOptions:optional(object2({accepts:optStrings,allowCustomValues:optBoolean,autocomplete:optString,clearable:optBoolean,falseLabel:optString,multiple:optBoolean,options:optional(array(object2({label:string,value:string}))),rows:optNumber,searchable:optBoolean,showButtons:optBoolean,spellcheck:optBoolean,step:optNumber,trueLabel:optString})),emptyLabel:optString,falseLabel:optString,hidden:optBoolean,layout:optional(object2({column:optNumber,labelPlacement:optional(literal("left","top")),order:optNumber,row:optNumber,width:optional(union(number,literal("full")))})),maxLines:optNumber,readOnly:optBoolean,renderer:optString,trueLabel:optString});var lifecycle=object2({deployMode:literal("init_only","upsert"),readonly:boolean});var autocompleteConfiguration=object2({autocompleteFields:fieldReferences,defaultAutocompleteFields:fieldReferences});var knowledgeSchema={catalogTags,domainFqn:string,fieldLocalization:optional(record(fieldLocalization)),fieldPresentation:optional(record(fieldPresentation)),fieldSemantics:optional(record(fieldSemantics)),localMutationPolicy:optional(mutationPolicy),managedProjection:optional(managedProjection),schema};var policyRef=(value,path)=>{const{kind}=object2({kind:string})(value,path);return kind==="literal"?object2({kind:literal("literal"),value:json})(value,path):object2({kind:literal("subject","resource"),path:strings})(value,path)};var uuid=(value,path)=>{const parsed=identity(value,path);return/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu.test(parsed)?parsed:invalid(path)};var absent2=(value,path)=>value===undefined?undefined:invalid(path);var hasRelationHop=(predicate)=>{switch(predicate.op){case"and":case"or":{return predicate.args.some(hasRelationHop)}case"not":{return hasRelationHop(predicate.arg)}case"relation_field":{return"field"in predicate||hasRelationHop(predicate.inner)}default:{return false}}};var relationFieldPredicate=(value,path)=>object2({field:optional(identity)})(value,path).field===undefined?object2({direction:literal("out","in"),inner:policyPredicate,op:literal("relation_field"),relationSchemaId:uuid})(value,path):object2({direction:absent2,relationSchemaId:absent2})(value,path)&&object2({field:identity,inner:policyPredicate,op:literal("relation_field")})(value,path);var policyPredicate=(value,path)=>{const{op}=object2({op:string})(value,path);switch(op){case"eq":case"neq":case"lt":case"lte":case"gt":case"gte":{return object2({left:policyRef,op:literal("eq","neq","lt","lte","gt","gte"),right:policyRef})(value,path)}case"in":{return object2({op:literal("in"),set:policyRef,value:policyRef})(value,path)}case"exists":case"is_null":{return object2({op:literal("exists","is_null"),ref:policyRef})(value,path)}case"contains":case"starts_with":{return object2({op:literal("contains","starts_with"),ref:policyRef,value:policyRef})(value,path)}case"const":{return object2({op:literal("const"),value:boolean})(value,path)}case"not":{return object2({arg:policyPredicate,op:literal("not")})(value,path)}case"and":case"or":{return object2({args:array(policyPredicate),op:literal("and","or")})(value,path)}case"relation_exists":{return object2({direction:literal("out","in"),op:literal("relation_exists"),relationSchemaId:uuid})(value,path)}case"relation_field":{return relationFieldPredicate(value,path)}default:{return invalid(`${path}/op`)}}};var writableField=(value,path)=>{const field=array(identity)(value,path);return field.length>=2&&field[0]==="data"?field:invalid(path)};var writableFields=(value,path)=>{const fields=array(writableField)(value,path);return fields.length>0?fields:invalid(path)};var subjectMatch=(value,path)=>{const predicate=policyPredicate(value,path);return hasRelationHop(predicate)?invalid(path):predicate};var policyBody=object2({rule:optional(policyPredicate),subjectMatch,writableFields:optional(writableFields)});var fieldWriteRule=(policy,path)=>policy.policyBody.writableFields===undefined||policy.effect==="allow"&&policy.policyType==="filter"&&(policy.targetKind==="entity_schema"||policy.targetKind==="entity_domain")?policy:invalid(`${path}/policyBody/writableFields`);var relationScopeRule=(policy,path)=>policy.policyBody.rule===undefined||policy.targetKind==="entity_schema"||!hasRelationHop(policy.policyBody.rule)?policy:invalid(`${path}/policyBody/rule`);var policyFields={effect:literal("allow","deny"),policyBody,policyType:literal("filter","gate"),targetFqn:identity,targetKind:literal("entity_domain","entity_schema","relation_domain","relation_schema")};var concrete=(list)=>list===undefined||isVariableReference(list)?[]:list.filter((item)=>!isVariableReference(item));var spelled=(key)=>key===null||isVariableReference(key)?undefined:key;var knownKeys=(list)=>{if(isVariableReference(list)){return}const keys=new Set;for(const item of list??[]){const key=isVariableReference(item)?undefined:spelled(item.key);if(key===undefined){return}keys.add(key)}return keys};var connection2=union(refine(varyingObject({setupKey:identity}),(value)=>Object.keys(value).some((key)=>key!=="setupKey")?"install-only input":undefined),refine(object2({connectionInstanceFqn:identity}),(value)=>Object.keys(value).some((key)=>key!=="connectionInstanceFqn")?"declared connection reference":undefined));var bindingFields={executionRole:optional(literal("root","child")),extraPropsMode:optional(literal("ignore","import","inline")),extras:refine(predefinedExtras,(extras)=>extras?.some((extra)=>!/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu.test(extra.id))?"invalid extra UUID":undefined),fieldMap:optional(array(fieldMap)),key:identity,outboundStrategy:optional(literal("local_first","remote_first")),parentKey:optional(nullable(identity)),remoteCollectionId:optional(nullable(string)),remoteCollectionName:optional(nullable(string)),supportedSyncModes:optional(varyingArray(literal("delta","full"))),supportsInbound:optBoolean,supportsOutbound:optBoolean,syncIntervalSeconds:optional(nullable(positiveSafeInteger)),updateMode:optional(literal("full","partial"))};var entityBinding=varyingObject({...bindingFields,bindingMode:literal("managed","external"),maxRemoteDeletionsPerRun:optional(nullable(positiveSafeInteger)),missingConnectorFieldsBehavior:optional(literal("prune","retain")),pushEntityMatch:optional(literal("remote_ref","unique_fields")),remoteDeletionPropagation:optional(literal("never","full","full_and_delta")),schemaFqn:identity,supportedBindingModes:optional(varyingArray(literal("managed","external"))),suppressEntityEvents:optBoolean});var relationBinding=varyingObject({...bindingFields,bindingMode:optional(literal("managed")),relationImportMode:optional(literal("child_binding","relation_only")),relationSchemaFqn:identity,sourceEntityKey:optional(nullable(identity)),targetEntityKey:optional(nullable(identity))});var schedule=varyingObject({cronExpression:identity,enabled:optBoolean,importMode:optional(literal("delta","full")),key:identity,timezone:optString});var positive=refine(number,(n)=>n>0?undefined:"positive");var budget=optional(nullable(positiveSafeInteger));var pipeline=varyingObject({definition:varyingObject({budgets:optional(varyingObject({maxPagesPerRun:budget,maxRemoteItemsPerRun:budget,maxRootWorkUnitsPerRun:budget,maxSecondsPerRun:optional(nullable(positive))})),steps:refine(varyingArray(varyingObject({tasks:varyingArray(varyingObject({bindingKey:identity,kind:literal("entity","relation"),modeOverride:optional(nullable(literal("delta","full")))}))})),(steps)=>steps.length>0?undefined:"empty")}),enabled:optBoolean,key:identity,name:optString,schedules:optional(varyingArray(schedule))});var uniqueKeys=(values,path)=>{const seen=new Set;for(const[index,value]of values.entries()){const key=spelled(value.key);if(key===undefined){continue}if(seen.has(key)){invalid(`${path}/${index}/key`)}seen.add(key)}};var knowledge=varyingObject({...base,connections:optional(record(connection2)),dataPolicies:optional(varyingArray(varyingObject({...policyFields,fqn:identity,priority:optNumber}))),enabled:optBoolean,entityBindings:optional(varyingArray(entityBinding)),kind:literal("knowledgeConnectorInstance"),lifecycle,pipelines:optional(varyingArray(pipeline)),relationBindings:optional(varyingArray(relationBinding)),remoteFilters:optional(record(varyingObject({mode:literal("all","only_selected","all_except_selected"),selected_ids:varyingStrings}))),settings:optional(record(varyingObject({type:literal("inline","linked"),value:json}))),templateFqn:identity});var assertEntityParents=(entities,path)=>{const parents=new Map(entities.map((b)=>[spelled(b.key),spelled(b.parentKey)]));for(const binding of entities){const key=spelled(binding.key);if(key===undefined){continue}const seen=new Set([key]);let parent=spelled(binding.parentKey);while(parent!==undefined){if(seen.has(parent)){invalid(`${path}/entityBindings/parentKey`)}seen.add(parent);parent=parents.get(parent)}}};var assertPolicyLifecycle=(policies,path)=>{for(const[index,policy]of policies.entries()){if(Object.keys(policy).some((key)=>key==="lifecycle"||key==="deployMode"||key==="readonly")){invalid(`${path}/dataPolicies/${index}/lifecycle`)}}};var assertPipelineTasks=(item,bindingKeys,path)=>{const tasks=new Set;const definition=isVariableReference(item.definition)?undefined:item.definition;for(const step of concrete(definition?.steps)){for(const task of concrete(step.tasks)){const bindingKey=spelled(task.bindingKey);if(bindingKey===undefined){continue}const key=`${task.kind}:${bindingKey}`;if(bindingKeys[task.kind]?.has(bindingKey)===false||tasks.has(key)){invalid(`${path}/definition/steps`)}tasks.add(key)}}};var knowledgeConnectorInstance=(value,path)=>{const parsed=knowledge(value,path);assertPolicyLifecycle(concrete(parsed.dataPolicies),path);const entities=concrete(parsed.entityBindings);const relations=concrete(parsed.relationBindings);const pipelines=concrete(parsed.pipelines);uniqueKeys(entities,`${path}/entityBindings`);uniqueKeys(relations,`${path}/relationBindings`);uniqueKeys(pipelines,`${path}/pipelines`);const entityKeys=knownKeys(parsed.entityBindings);const bindingKeys={entity:entityKeys,relation:knownKeys(parsed.relationBindings)};assertEntityParents(entities,path);for(const[index,binding]of[...entities,...relations].entries()){const parentKey=spelled(binding.parentKey);if(parentKey!==undefined&&(entityKeys?.has(parentKey)===false||parentKey===spelled(binding.key))){invalid(`${path}/bindings/${index}/parentKey`)}}for(const[index,relation]of relations.entries()){for(const key of[relation.sourceEntityKey,relation.targetEntityKey]){const entityKey=spelled(key);if(entityKey!==undefined&&entityKeys?.has(entityKey)===false){invalid(`${path}/relationBindings/${index}`)}}}for(const[index,item]of pipelines.entries()){uniqueKeys(concrete(item.schedules),`${path}/pipelines/${index}/schedules`);assertPipelineTasks(item,bindingKeys,`${path}/pipelines/${index}`)}return parsed};var scalar=literal("boolean","string","int64","float64","decimal","date","timestamp","duration","json");var datasetDefinition=varyingObject({fields:varyingArray(varyingObject({id:identity,name:string,nullable:boolean,semantic:optString,type:scalar})),measures:varyingArray(varyingObject({id:identity,name:string,resultType:scalar})),relationships:varyingArray(varyingObject({cardinality:literal("one_to_one","one_to_many","many_to_one","many_to_many"),fromFieldId:identity,id:identity,toFieldId:identity})),version:literal(1)});var location=(value,path)=>{const parsed=varyingObject({segments:varyingArray(varyingObject({kind:literal("container","dataset"),label:string,opaqueId:identity}))})(value,path);if(isVariableReference(parsed.segments)){return parsed}const[first]=parsed.segments;if(first===undefined||!isVariableReference(first)&&first.kind!=="container"){return invalid(`${path}/segments/0`)}return parsed};var datasetValue=(value,path)=>{const{kind}=object2({kind:string})(value,path);switch(kind){case"null":{return varyingObject({kind:literal("null")})(value,path)}case"boolean":{return varyingObject({kind:literal("boolean"),value:boolean})(value,path)}case"float64":{return varyingObject({kind:literal("float64"),value:number})(value,path)}case"json":{return varyingObject({kind:literal("json"),value:json})(value,path)}default:{return varyingObject({kind:literal("string","int64","decimal","date","timestamp","duration"),value:string})(value,path)}}};var datasetFilter=(value,path)=>{const{kind}=object2({kind:string})(value,path);if(kind==="not"){return varyingObject({filter:datasetFilter,kind:literal("not")})(value,path)}if(kind==="and"||kind==="or"){return varyingObject({filters:varyingArray(datasetFilter),kind:literal("and","or")})(value,path)}return varyingObject({fieldId:identity,kind:literal("predicate"),operator:literal("eq","ne","lt","lte","gt","gte","in","not_in","is_null","is_not_null","contains","starts_with"),values:varyingArray(datasetValue)})(value,path)};var datasetFields={...base,connection:optional(connection2),dataPolicy:optional(varyingObject({allowedFields:varyingStrings,allowedOperations:varyingArray(literal("describe","records","aggregate","time_series")),maxBytes:budget,maxRows:budget,maxTimeoutMs:budget,principals:varyingArray(varyingObject({id:identity,kind:literal("user","service")})),rowFilter:optional(nullable(datasetFilter)),sensitiveFields:optional(varyingStrings)})),kind:literal("datasetConnectorInstance"),lifecycle,providerFqn:identity,schedules:optional(varyingArray(varyingObject({action:literal("health","refresh_definition"),cronExpression:identity,enabled:optBoolean,key:identity,timezone:optString}))),settings:optional(jsonObject)};var datasetConnectorInstance=(value,path)=>{const parsed=union(varyingObject({...datasetFields,bindingMode:literal("managed"),definition:datasetDefinition,sourceLocation:optional(location),templateConfig:optional(varyingObject({variant:identity,version:literal(1)})),templateFqn:optional(identity)}),varyingObject({...datasetFields,bindingMode:literal("external"),definition:optional(datasetDefinition),gatewayBindingKey:optString,sourceLocation:location,sourceMapping:optional(varyingObject({effectiveAtFieldId:optString,entityIdFieldId:identity,historySemantics:optional(literal("append_history")),kind:literal("entity_snapshot","status_update"),statusFieldId:optString,version:literal(1)}))}))(value,path);uniqueKeys(concrete(parsed.schedules),`${path}/schedules`);return parsed};var assertDataAccess=(value,own,location)=>{if(value===undefined){return}if(typeof value!=="object"||value===null||Array.isArray(value)){throw new TypeError(`${location}: dataAccess must be an object`)}for(const[source,mode]of Object.entries(value)){if(!["knowledge","datasets","documents"].includes(source)){throw new TypeError(`${location}: unknown dataAccess source '${source}'`)}if(mode!=="user"&&mode!==own){throw new TypeError(`${location}: dataAccess.${source} must be 'user' or '${own}'`)}}};var readDataAccess=(own)=>(value,location)=>{assertDataAccess(value,own,location);return value};var workflowDataAccess=(outer,inner,location)=>{assertDataAccess(outer,"workflow",location);assertDataAccess(inner,"workflow",`${location}.definition`);if(outer!==undefined&&inner!==undefined){for(const source of["knowledge","datasets","documents"]){if((outer[source]??"workflow")!==(inner[source]??"workflow")){throw new TypeError(`${location}: conflicting dataAccess.${source} in declaration and definition`)}}}return outer??inner};var toolBindingDeclaration=(entry)=>typeof entry==="string"?{tool:entry}:entry;var duplicateToolBinding=(tools)=>{const seen=new Set;for(const entry of tools){const binding=toolBindingDeclaration(entry);const key=JSON.stringify([binding.tool,binding.name??null]);if(seen.has(key)){return binding}seen.add(key)}return};var agentAudienceViolation=(audience)=>{const applications=audience.applications??[];if(audience.anonymous===true&&applications.length===0){return"anonymous visitors need an application in audience.applications"}const repeated=applications.find((fqn,index)=>applications.indexOf(fqn)!==index);return repeated===undefined?undefined:`audience application '${repeated}' is listed more than once`};var agentModelTiers=["complex","balanced","fast","super_fast"];var datasetParserFormat=(value,path)=>{if(typeof value!=="string"||value.length>128||value==="external"||!/^[a-z][a-z0-9._-]*$/u.test(value)){throw new TypeError(`Invalid dataset parser format at ${path}`)}return value};var datasetParserVersion=(value,path)=>{if(typeof value!=="string"||value.trim()===""||value.length>96){throw new TypeError(`Invalid dataset parser version at ${path}`)}return value};var readExternalAppGateway=closedGatewayObject({...base,expectedContract:readOperationGatewayContract,kind:literal("externalAppGateway")});var externalApplicationConsents=["inherit","ask","skip"];var roleKey=/^[a-z][a-z0-9]*(?:_[a-z0-9]+)*$/u;var resourceAction=/^[a-z][a-z0-9_]*(?::[a-z][a-z0-9_]*)+$/u;var isOwnAncestor=({key,parent},declared)=>{const seen=new Set;let ancestor=parent;while(ancestor!==undefined&&ancestor!==key&&!seen.has(ancestor)){seen.add(ancestor);ancestor=declared.get(ancestor)?.role.parent}return ancestor===key};var permissionsOf=({appPermissions=[],platformPermissions})=>[...platformPermissions,...appPermissions];var roleViolation=(entry,roles,declared)=>{const{kind,path,role}=entry;const{assignRoles=[],key,parent,replaces}=role;const visibility=entry.kind==="User Role"?entry.role.visibility:undefined;if(key==="anonymous"&&visibility!=="declared"){return`${path}: role 'anonymous' must be a User Role with Declared Visibility`}if(visibility==="user"&&Object.hasOwn(role,"bindings")){return`${path}.bindings: role '${key}' with User Visibility declares no bindings`}const assigned=assignRoles.find((other)=>declared.get(other)?.kind!=="User Role");if(assigned!==undefined){return`${path}.assignRoles: role '${assigned}' of role '${key}' is not a User Role of this application`}if(replaces!==undefined){if(declared.has(replaces)){return`${path}.replaces: role '${key}' replaces '${replaces}', which this release declares`}const first=roles.find((other)=>other.role.replaces===replaces);if(first?.role.key!==key){return`${path}.replaces: roles '${first?.role.key}' and '${key}' replace the same role '${replaces}'`}}if(parent===undefined){return}const held=declared.get(parent);if(held?.kind!==kind){return`${path}.parent: parent '${parent}' of role '${key}' is not a declared ${kind}`}const heldPermissions=permissionsOf(held.role);const missing=permissionsOf(role).find((permission)=>!heldPermissions.includes(permission));if(missing!==undefined){return`${path}.parent: role '${parent}' must hold permission '${missing}' of its child role '${key}'`}return isOwnAncestor(role,declared)?`${path}.parent: role '${key}' is its own ancestor`:undefined};var rolesViolation=(userRoles,serverRoles)=>{const roles=[...userRoles.map((role,index)=>({kind:"User Role",path:`userRoles[${index}]`,role})),...serverRoles.map((role,index)=>({kind:"Server Role",path:`serverRoles[${index}]`,role}))];const declared=new Map;for(const entry of roles){const{path,role}=entry;const{key,platformPermissions}=role;if(key.length>64||!roleKey.test(key)){return`${path}.key: role key '${key}' must match ${roleKey.source} and hold at most 64 characters`}if(declared.has(key)){return`${path}.key: role key '${key}' is declared more than once`}declared.set(key,entry);const malformed=platformPermissions.find((permission)=>!resourceAction.test(permission));if(malformed!==undefined){return`${path}.platformPermissions: permission '${malformed}' of role '${key}' must be 'resource:action'`}}for(const entry of roles){const violation=roleViolation(entry,roles,declared);if(violation!==undefined){return violation}}return};var defaultServerRoleViolation=(defaultServerRole,serverRoles)=>{if(defaultServerRole===undefined){return serverRoles.length===0?undefined:"defaultServerRole is required with serverRoles"}return serverRoles.some(({key})=>key===defaultServerRole)?undefined:`defaultServerRole: role '${defaultServerRole}' is not a declared Server Role`};var groupBindingsViolation=(groupBindings,userRoles)=>{for(const[index,{group,role}]of groupBindings.entries()){const path=`groupBindings[${index}]`;if(group.trim()===""){return`${path}.group: the Group Role Binding of role '${role}' must name a Group`}if(!userRoles.some(({key})=>key===role)){return`${path}.role: role '${role}' of the Group Role Binding to Group '${group}' is not a declared User Role`}const first=groupBindings.findIndex((other)=>other.group===group&&other.role===role);if(first!==index){return`${path}: the Group Role Binding of role '${role}' to Group '${group}' is declared more than once`}}return};var externalApplicationViolation=({applicationConsent,defaultServerRole,groupBindings=[],primaryRedirectUri,redirectUris,serverRoles=[],userRoles})=>{if(primaryRedirectUri!==undefined&&!isVariableReference(primaryRedirectUri)&&!isVariableReference(redirectUris)&&!redirectUris.some(isVariableReference)&&!redirectUris.includes(primaryRedirectUri)){return"primaryRedirectUri must be one of redirectUris"}if(applicationConsent!==undefined&&!isVariableReference(applicationConsent)&&!externalApplicationConsents.includes(applicationConsent)){return"applicationConsent must be 'inherit', 'ask' or 'skip'"}return rolesViolation(userRoles,serverRoles)??defaultServerRoleViolation(defaultServerRole,serverRoles)??groupBindingsViolation(groupBindings,userRoles)};var uuid2=/^[0-9a-f]{8}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{4}-?[0-9a-f]{12}$/iu;var placeholder=/\{(?<name>[^{}]*)\}/gu;var placeholders={remoteId:(remoteId)=>encodeURIComponent(remoteId),remoteIdUuidHex:(remoteId)=>uuid2.test(remoteId)?remoteId.replaceAll("-","").toLowerCase():null};var isPlaceholderName=(name)=>Object.hasOwn(placeholders,name);var resolver=(name)=>isPlaceholderName(name)?placeholders[name]:undefined;var knowledgeRemoteReferenceUrlTemplate=(value,path)=>{if(typeof value!=="string"||!value.startsWith("https://")||/[{}]/u.test(value.replaceAll(placeholder,(match,name)=>resolver(name)===undefined?match:""))){throw new TypeError(`Invalid remote reference URL template at ${path}`)}return value};var subgroupKey=/^[a-z0-9]+(?:-[a-z0-9]+)*$/u;var organizationGroupFqnMaxLength=320;var fqnViolation=(fqn)=>{const characters=[...fqn];if(characters.length<=organizationGroupFqnMaxLength){return}const shortened=`${characters.slice(0,40).join("")}...${characters.slice(-40).join("")}`;return`Group FQN '${shortened}' holds ${characters.length} characters; the limit is ${organizationGroupFqnMaxLength}`};var subgroupsViolation=(parentFqn,subgroups=[])=>{const keys=new Set;for(const{key,subgroups:nested}of subgroups){if(!subgroupKey.test(key)){return`subgroup key '${key}' of '${parentFqn}' must match ${subgroupKey.source}`}if(keys.has(key)){return`subgroup key '${key}' is declared more than once in '${parentFqn}'`}keys.add(key);const fqn=`${parentFqn}.${key}`;const violation=fqnViolation(fqn)??subgroupsViolation(fqn,nested);if(violation!==undefined){return violation}}return};var organizationGroupViolation=({fqn,subgroups})=>fqnViolation(fqn)??subgroupsViolation(fqn,subgroups);var sections=["authentication","branding","governance","identity","locale"];var mediaPath=/^media\/[^/]+$/u;var brandingViolation=(branding)=>{if(branding===undefined||isVariableReference(branding)){return}const paths=new Set;for(const key of["cover","icon","logo"]){const reference=branding[key];const media=isVariableReference(reference)?undefined:reference?.media;if(media===undefined||isVariableReference(media)){continue}if(!mediaPath.test(media)){return`branding.${key} media path '${media}' must be media/<file>`}if(paths.has(media)){return`branding.${key} media path '${media}' is used by two branding keys`}paths.add(media)}return};var authenticationViolation=(authentication)=>{if(authentication===undefined||isVariableReference(authentication)){return}for(const method of["otp","password"]){const local=authentication[method];if(local===undefined||isVariableReference(local)){continue}const{domains,enabled}=local;if(enabled===true&&!isVariableReference(domains)&&(domains??[]).length===0){return`authentication.${method} is enabled and needs at least one domain`}}const consent=authentication.applicationConsent;if(consent!==undefined&&!isVariableReference(consent)&&consent!=="ask"&&consent!=="skip"){return"authentication.applicationConsent must be 'ask' or 'skip'"}return};var organizationSettingsViolation=(definition)=>{if(!sections.some((section)=>Object.keys(definition[section]??{}).length>0)){return"at least one setting is required"}if(definition.identity!==undefined&&"slug"in definition.identity){return"identity.slug is not declarable"}return brandingViolation(definition.branding)??authenticationViolation(definition.authentication)};var identifier2=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;var fields=new Set(["category","defaultVisibility","description","displayName","fqn","gatewayRef","icon","kind","operationReferences","tags","version"]);var referencesGateway=(reference,gatewayId)=>{const separator=reference.indexOf("@");if(separator===-1){return false}const[gateway,domain,operation,...rest]=reference.slice(0,separator).split("/");const version=reference.slice(separator+1);return identifier2.test(gatewayId)&&gateway===gatewayId&&domain!==undefined&&identifier2.test(domain)&&operation!==undefined&&identifier2.test(operation)&&rest.length===0&&version.length>0&&version.length<=128&&version.trim()===version};var remoteToolCollectionViolation=(declaration)=>{const unknownField=Object.keys(declaration).find((key)=>!fields.has(key));if(unknownField!==undefined){return`unsupported remote metadata field '${unknownField}'`}const{gatewayRef,operationReferences}=declaration;if(gatewayRef===undefined||gatewayRef.trim()===""||gatewayRef.trim()!==gatewayRef){return"gatewayRef must be a nonempty FQN"}if(operationReferences.length===0||new Set(operationReferences).size!==operationReferences.length||operationReferences.some((reference)=>!referencesGateway(reference,reference.split("/")[0]??""))){return"operationReferences must name unique versioned Gateway operations"}return};var servicePrincipalOrganizationRoles=["organization_admin","organization_operator","organization_member"];var maxStudioTriggerFormFileBytes=10*1024*1024;var studioFormKey="studioForm";var fieldKeyPattern=/^[A-Za-z][A-Za-z0-9_]*$/u;var contentTypePattern=/^[\w.+-]+\/[\w.+-]+$/u;var fieldKey=refine(identity,(key)=>fieldKeyPattern.test(key)?undefined:"key");var fileField=object2({accept:optional(refine(array(refine(identity,(type)=>contentTypePattern.test(type)?undefined:"content type")),(types)=>types.length===0?"no content type":undefined)),key:fieldKey,label:identity,maxBytes:optional(refine(positiveSafeInteger,(bytes)=>bytes>maxStudioTriggerFormFileBytes?"above ceiling":undefined)),type:literal("file")});var valueField=object2({key:fieldKey,label:identity,type:literal("boolean","number","text","textarea")});var enumField=object2({key:fieldKey,label:identity,options:refine(array(object2({label:identity,value:identity})),(options)=>options.length>0&&new Set(options.map(({value})=>value)).size===options.length?undefined:"options"),type:literal("enum")});var jsonField=object2({key:fieldKey,label:identity,schema:schemaDocument,type:literal("json")});var entitiesField=object2({key:fieldKey,label:identity,labelKey:optional(identity),schemaFqn:identity,type:literal("entities"),valueKey:optional(identity)});var richTextField=object2({key:fieldKey,label:identity,type:literal("rich_text")});var userField=object2({key:fieldKey,label:identity,multiple:optBoolean,required:optBoolean,type:literal("user_select")});var fieldReaders={boolean:valueField,entities:entitiesField,enum:enumField,file:fileField,json:jsonField,number:valueField,rich_text:richTextField,text:valueField,textarea:valueField,user_select:userField};var formField=(value,path)=>{const{type}=object2({type:literal("boolean","entities","enum","file","json","number","rich_text","text","textarea","user_select")})(value,path);return fieldReaders[type](value,path)};var studioFormFields=refine(array(formField),(fields)=>new Set(fields.map(({key})=>key)).size===fields.length?undefined:"duplicate key");var studioTriggerFormAt=(metadata,path)=>optional(object2({fields:optional(studioFormFields),organizationGroup:identity}))(metadata[studioFormKey],`${path}/${studioFormKey}`);var studioTriggerMetadata=(read)=>(value,path)=>{const metadata=read(value,path);studioTriggerFormAt(metadata,path);return metadata};var access=optional(object2({groups:refine(array(identity),(groups)=>groups.length===0?"no group":undefined)}));var view=object2({access,componentRef:identity,dataBinding:optional(object2({filter:optional(jsonObject),kind:literal("schema"),schema:identity})),fqn:identity,orderIndex:number,props:optional(jsonObject),slot:identity});var pageBase={access,fqn:identity,fullHeight:optBoolean,fullWidth:optBoolean,icon:optString,label:string,orderIndex:number,routeSegment:identity,slug:identity};var genericPage=object2({...pageBase,kind:literal("generic"),views:array(view)});var predefinedPage=object2({...pageBase,kind:literal("predefined"),predefinedPageRef:identity});var page=(value,path)=>object2({kind:literal("generic","predefined")})(value,path).kind==="generic"?genericPage(value,path):predefinedPage(value,path);var layout=(value,path)=>object2({kind:literal("custom","left_sidebar")})(value,path).kind==="custom"?object2({componentRef:identity,kind:literal("custom"),props:optional(jsonObject)})(value,path):object2({kind:literal("left_sidebar")})(value,path);var studioViewKey=(fqn)=>(fqn.split(".").at(-1)??fqn).toLowerCase().replaceAll(/[^a-z0-9]+/gu,"-").replaceAll(/^-+|-+$/gu,"").slice(0,64);var hasDuplicate=(keys)=>new Set(keys).size!==keys.length;var collision=({sections})=>{const pages=sections.map((section)=>section.pages);const views=pages.flat().map((item)=>item.kind==="generic"?item.views:[]);if(hasDuplicate([...sections.map(({fqn})=>fqn),...pages.flat().map(({fqn})=>fqn),...views.flat().map(({fqn})=>fqn)])){return"duplicate FQN"}if(hasDuplicate(sections.map(({slug})=>slug))){return"duplicate section slug"}if(pages.some((items)=>hasDuplicate(items.map(({slug})=>slug)))){return"duplicate page slug"}return views.some((items)=>hasDuplicate(items.map(({fqn,slot})=>`${slot}
9
- ${studioViewKey(fqn)}`)))?"duplicate view key":undefined};var isTrue=(value,path)=>value===true?true:invalid(path);var studioAppDeclaration=object2({...base,definition:refine(object2({color:optString,description:optString,icon:optString,layout:optional(layout),name:string,sections:array(object2({access,description:optString,fqn:identity,icon:optString,label:string,orderIndex:number,pages:array(page),slug:identity})),slug:identity}),collision),grants:object2({groups:refine(array(object2({group:identity,role:literal("manage","view")})),(grants)=>new Set(grants.map(({group})=>group)).size===grants.length?undefined:"duplicate Group")}),kind:literal("studioApp"),lifecycle:object2({deployMode:literal("upsert"),readonly:isTrue})});var agentFormFields=(value,path)=>studioFormFields(value,path).map((field,index)=>field.type==="rich_text"||field.type==="user_select"?invalid(`${path}/${index}/type`):field);var studioFormKey2="studioForm";var studioAgentFormAt=(metadata,path)=>optional(object2({fields:agentFormFields}))(metadata[studioFormKey2],`${path}/${studioFormKey2}`);var studioAgentMetadata=(read)=>(value,path)=>{const metadata=read(value,path);studioAgentFormAt(metadata,path);return metadata};var notificationDefinition=object2({capabilities:object2({extensionReadyProviders:strings,recipientTargets:strings,supportsActionLink:boolean,supportsAttachments:boolean,supportsFixedDestinations:optBoolean,supportsHtml:boolean,supportsMarkdown:boolean,supportsMentions:boolean,supportsReadReceipts:boolean,supportsRouteDestinations:boolean,supportsThreads:boolean}),credentialProfileKey:optString,family:literal("email","im","internal"),key:string,provider:string,setup:object2({docsUrl:nullable(string),healthCheck:object2({available:boolean,label:optString}),instructions:string,liveTest:object2({available:boolean,label:optString}),secretFields:strings,setupForm:nullable(form)})});var studioPage=object2({fullWidth:optBoolean,icon:optString,kind:literal("predefined"),label:string,orderIndex:number,predefinedPageRef:string,routeSegment:string,slug:string});var studioSection=object2({description:optString,icon:optString,label:string,orderIndex:number,pages:array(studioPage),slug:string});var studioAppTemplate=object2({color:optString,description:optString,icon:optString,isDefaultTemplate:optBoolean,name:string,sections:array(studioSection),slug:string});var datasetScalarType=literal("boolean","string","int64","float64","decimal","date","timestamp","duration","json");var datasetDefinition2=object2({fields:array(object2({id:string,name:string,nullable:boolean,semantic:optional(string),type:datasetScalarType})),measures:array(object2({id:string,name:string,resultType:datasetScalarType})),relationships:array(object2({cardinality:literal("one_to_one","one_to_many","many_to_one","many_to_many"),fromFieldId:string,id:string,toFieldId:string})),version:literal(1)});var datasetBlueprint=object2({...base,blueprintVersion:positiveSafeInteger,configuration:optional(jsonObject),definition:datasetDefinition2,kind:literal("datasetBlueprint"),templateFqn:identity});var semanticRole=literal("dimension","effective_time","entity_reference","event_time","identity","measure","status");var hint=object2({role:semanticRole});var datasetTableTemplate=object2({...base,admittedIngestionModes:array(literal("append","replace","upsert")),compatibleProviderFqns:strings,configuration:schema,identity:object2({keyRoles:array(semanticRole),uniqueness:literal("append_only","key","none")}),indexHints:array(hint),kind:literal("datasetTableTemplate"),partitionHints:array(hint),physicalCode:literal("evt","fact","gen","snap","stat","ts"),requirements:schema,semanticRoles:array(semanticRole)});var WorkflowEditorWidgets=["checkbox","code","condition_builder","credential_selector","key_value","list","mapping_builder","multi_select","number","resource_selector","schedule_builder","schema_builder","select","text","textarea"];var WorkflowTemplateKinds=["action_node","input_node","output_node","trigger_node"];var WorkflowTriggerLifecycleAdapterIds=Object.freeze({externalApplication:"builtin.core.workflows.lifecycle.external-application",mcpOperation:"builtin.core.workflows.lifecycle.mcp-operation"});var dynamicPort=object2({configPath:string,defaultIdPath:optString,idPath:string,requiredPath:optString,schemaPath:optString});var fieldBinding=object2({path:pathParts,target:literal("input_binding","parameter")});var nonNegativeInteger=(value,path)=>{const parsed=number(value,path);return Number.isSafeInteger(parsed)&&parsed>=0?parsed:invalid(path)};var optionSource=union(object2({kind:literal("static"),options:array(object2({label:localized,value:json}))}),object2({clearOnDependencyChange:boolean,dependsOn:array(fieldBinding),kind:literal("remote"),operationId:string,searchable:boolean}));var editorField=object2({binding:fieldBinding,fieldConfig:optional(jsonObject),fieldFqn:optString,fieldVersion:optString,help:optional(localized),label:optional(localized),optionSource:optional(optionSource),order:optNumber,placeholder:optional(localized),readOnly:optBoolean,required:optBoolean,resolutionPhase:literal("runtime","structural"),sensitive:optBoolean,valueSources:array(literal("expression","fixed","literal","mapping","model","system")),visibleWhen:optional(array(object2({binding:fieldBinding,operator:literal("equals","in","is_not_set","is_set","not_equals"),value:optional(json)}))),widget:optional(literal(...WorkflowEditorWidgets))});var templateKind=literal(...WorkflowTemplateKinds);var nodePort=refine(object2({allowedTemplateFqns:optStrings,allowedTemplateKinds:optional(array(templateKind)),direction:literal("input","output"),key:string,maxConnections:optional(nullable(nonNegativeInteger)),minConnections:optional(nonNegativeInteger),schemaResolution:optional(object2({configPath:pathParts,variants:array(object2({schema,schemaInjections:optional(array(object2({configPath:pathParts,schemaPath:pathParts}))),when:json}))})),valueSchema:schema}),workflowPortPolicyViolation);var eventSelectorProjection=union(object2({required:optBoolean,sourcePath:pathParts,targetPath:pathParts}),object2({targetPath:pathParts,value:json}));var eventIngress=object2({acquisitionMode:string,callbackPathPath:optional(pathParts),connectionIdPath:optional(pathParts),eventKind:string,listener:object2({fqn:string,version:string}),requiredConfigPaths:optional(array(pathParts)),requiredListener:optBoolean,selector:array(eventSelectorProjection)});var triggerActivation=union(object2({eventIngress,kind:literal("event")}),union(object2({invocationRole:optional(literal("application","user")),kind:literal("manual"),lifecycleAdapterId:optString,triggerRefPath:optional(pathParts)}),object2({kind:literal("schedule")})));var parseWorkflowReusableDependency=(value)=>object2({inputContractPath:pathParts,modePath:optional(pathParts),targetWorkflowFqnPath:optional(pathParts),targetWorkflowIdPath:pathParts})(value,"/reusableDependency");var nodeContract=object2({capabilityComposition:optional(object2({capability:string,fragments:strings,selector:object2({path:pathParts,target:literal("parameter")})})),configSchema:optional(schema),connectionRequirements:optional(array(object2({cardinality:literal("many","one"),connectionTemplateFqns:refine(strings,(fqns)=>fqns.length===0?"connectionTemplateFqns cannot be empty":undefined),key:string,required:boolean,selector:object2({path:pathParts,target:literal("parameter")})}))),dynamicPorts:optional(object2({input:optional(dynamicPort),output:optional(dynamicPort)})),editor:optional(refine(object2({form:optional(object2({sections:optional(array(object2({fields:optional(array(editorField)),id:optString,order:optNumber,title:optString})))}))}),workflowEditorViolation)),execution:optional(object2({itemModes:optional(array(literal("all_items","each_item","single"))),mainOutputPort:optString,repeatable:optBoolean,resumable:optBoolean,sideEffect:literal("external","none","read","write"),testable:optBoolean})),implementationId:string,inputSchema:optional(schema),instancePolicy:optional(object2({maxInstances:optNumber,minInstances:optNumber,onWorkflowCreate:optBoolean})),nodeCollectionFqn:optString,nodeCollectionVersion:optString,outputChannels:optional(array(object2({adapterId:string,cardinality:literal("many","one"),deliveryMode:literal("asynchronous","synchronous"),key:string,required:boolean,valueSchema:schema}))),outputSchema:optional(schema),ports:optional(array(nodePort)),reusableDependency:optional(parseWorkflowReusableDependency),triggerActivation:optional(triggerActivation)});var fieldContract=object2({availableForInput:optBoolean,availableForOutput:optBoolean,clearOnDependencyChange:optBoolean,optionDependencies:optional(array(object2({path:pathParts,target:literal("parameter","part","value")}))),user:optional(object2({multiple:boolean})),valueSchema:optional(schema)});var graphSchema=object2({bindings:optional(array(object2({extensions:jsonObject}))),fieldProjections:array(object2({source:pathParts,target:pathParts})),schema});var graphBoundary=object2({templateFqn:string,templateVersion:string});var graph=object2({edges:array(object2({extensions:optional(jsonObject),id:string,source:string,target:string})),inputBoundary:graphBoundary,inputContract:graphSchema,metadata:object2({description:nullable(string),tags:strings,templateSource:nullable(string)}),nodes:array(object2({extensions:optional(jsonObject),id:string,templateFqn:string,templateVersion:string})),outputBoundary:graphBoundary,outputContract:graphSchema,triggers:array(object2({config:object2({extensions:optional(jsonObject)}),id:string,inputBindings:record(string),invocation:object2({mode:literal("attach","detach"),timeoutMs:nullable(number)}),metadata:object2({fieldDisplayValues:record(string)}),settings:object2({enabled:boolean}),templateFqn:string,templateVersion:string})),version:literal(1)});var uiLayout=object2({edges:record(object2({extensions:optional(jsonObject)})),nodes:record(object2({position:optional(object2({x:number,y:number}))})),version:literal(1),viewport:nullable(object2({x:number,y:number,zoom:number}))});var bindingSpan=object2({end:number,start:number});var bindingSource=object2({kind:literal("input","loop_index","loop_item","merge_output","node_output","port_arrival","run","scope","trigger"),mergeId:optional(nullable(string)),nodeId:optional(nullable(string)),portId:optional(nullable(string)),selection:optional(nullable(object2({ancestry:literal("nearest_dominating_ancestor"),iteration:literal("aggregate","previous_iteration","same_iteration")})))});var bindingExpression=(value,path)=>{const{kind}=object2({kind:string})(value,path);switch(kind){case"array":{return object2({items:array(bindingExpression),kind:literal("array")})(value,path)}case"call":{return object2({args:array(bindingExpression),kind:literal("call"),name:string})(value,path)}case"interpolation":{return object2({kind:literal("interpolation"),parts:array(bindingExpression),span:optional(nullable(bindingSpan))})(value,path)}case"literal":{return object2({kind:literal("literal"),value:json})(value,path)}case"object":{return object2({fields:record(bindingExpression),kind:literal("object")})(value,path)}case"operator":{return object2({args:array(bindingExpression),kind:literal("operator"),op:string})(value,path)}case"ref":{return object2({kind:literal("ref"),onUnavailable:object2({kind:literal("error","fallback","null"),value:optional(nullable(bindingExpression))}),path:pathParts,source:bindingSource,span:optional(nullable(bindingSpan))})(value,path)}default:{return invalid(`${path}/kind`)}}};var authoredValue=union(object2({mode:literal("fixed"),value:json}),object2({compiled:optional(nullable(bindingExpression)),languageVersion:literal(1),mode:literal("expression"),source:string}));var nodeExecutionSettings=object2({dryRun:optional(object2({mode:literal("allow","block_side_effects")})),idempotencyKey:optional(nullable(bindingExpression)),onError:optional(object2({mode:literal("continue","fail_run")})),retry:optional(object2({backoffMs:optional(nullable(number)),maxAttempts:optional(nullable(number)),mode:literal("disabled","exponential","fixed")})),timeoutMs:optional(nullable(number))});var authoringTemplateRef=object2({templateFqn:string,templateVersion:string});var authoringFieldProjection=object2({fieldConfig:optional(jsonObject),fieldFqn:string,fieldVersion:string,path:strings});var authoringInputContract=object2({fieldProjections:optional(array(authoringFieldProjection)),jsonSchema:jsonObject});var authoringOutputContract=object2({bindings:array(object2({key:string,kind:literal("artifact","value"),value:bindingExpression})),fieldProjections:optional(array(authoringFieldProjection)),jsonSchema:jsonObject});var inputEndpoint=object2({kind:literal("input_node"),portId:string});var actionEndpoint=object2({kind:literal("action_node"),nodeId:string,portId:string});var triggerEndpoint=object2({kind:literal("trigger_node"),portId:string,triggerId:string});var outputEndpoint=object2({kind:literal("output_node"),portId:string});var authoringDefinition=object2({dataAccess:readDataAccess("workflow"),edges:array(object2({id:string,source:union(union(actionEndpoint,inputEndpoint),triggerEndpoint),target:union(union(actionEndpoint,inputEndpoint),outputEndpoint)})),inputBoundary:authoringTemplateRef,inputContract:authoringInputContract,metadata:jsonObject,nodes:array(object2({config:record(authoredValue),extensions:optional(jsonObject),id:string,inputs:record(authoredValue),metadata:jsonObject,settings:nodeExecutionSettings,templateFqn:string,templateVersion:string,uid:optString})),outputBoundary:authoringTemplateRef,outputContract:authoringOutputContract,triggers:array(object2({config:jsonObject,id:string,inputBindings:record(object2({overridePolicy:literal("caller_may_override","locked"),value:authoredValue})),invocation:object2({mode:literal("attach","await_result","detach"),timeoutMs:optional(nullable(number))}),metadata:studioTriggerMetadata(jsonObject),settings:jsonObject,templateFqn:string,templateVersion:string})),version:literal(1)});var onlyKeys=(...keys)=>(value)=>Object.keys(value).some((key)=>!keys.includes(key))?"unexpected member":undefined;var remoteDeletion=union(refine(object2({capability:literal("full")}),onlyKeys("capability")),refine(object2({capability:literal("full_and_delta"),feed:literal("server_filtered","client_filtered")}),onlyKeys("capability","feed")));var bindingTargets=(read)=>optional(union(literal("all"),array(read)));var knowledgeTargets=bindingTargets(object2({fqn:identity,policy:optional(identity)}));var declaredBindings=optional(object2({agents:bindingTargets(identity),documents:bindingTargets(identity),knowledge:optional(object2({domains:knowledgeTargets,schemas:knowledgeTargets})),skills:bindingTargets(identity),workflows:bindingTargets(identity)}));var roleFields={appPermissions:optStrings,assignRoles:optStrings,key:string,parent:optString,platformPermissions:strings,replaces:optString,users:optional(object2({create:boolean}))};var roleVisibility=object2({visibility:literal("user","declared")});var userVisibilityRole=object2({...roleFields,visibility:literal("user")});var declaredVisibilityRole=object2({...roleFields,bindings:declaredBindings,visibility:literal("declared")});var userRole=(value,path)=>roleVisibility(value,path).visibility==="declared"?declaredVisibilityRole(value,path):userVisibilityRole(value,path);var knowledgeSelection=optional(object2({exclude:optional(array(identity)),include:optional(array(identity))}));var toolBindings2=refine(array(union(identity,object2({approval:optional(union(literal("always","never"),object2({rule:identity}))),knowledge:optional(object2({domains:knowledgeSelection,entitySchemas:knowledgeSelection,relationSchemas:knowledgeSelection,unrestricted:optBoolean})),name:optional(identity),settings:optional(jsonObject),tool:identity}))),(tools)=>duplicateToolBinding(tools)===undefined?undefined:"duplicate tool binding");var withoutRetiredRelationFields=(read)=>(value,path)=>{const declaration=read(value,path);if("relationFields"in declaration){throw new TypeError(`Invalid package manifest at ${path}/relationFields: relationFields is no longer supported; rebuild the package with the current extensions SDK, which declares Entity Relation Fields in fieldSemantics`)}return declaration};var agentAudience2=refine(object2({anonymous:optBoolean,applications:optional(array(identity)),members:optional(literal("all","none","selected")),organizationGroups:optional(literal("none","selected"))}),(audience)=>("organizationTeams"in audience)?"organizationTeams":agentAudienceViolation(audience));var withoutRetiredAgentFields=(agent)=>["invokingApplicationFqns","modelPreset"].find((field)=>(field in agent));var webhookHandshake=union(object2({kind:literal("echo_query_parameter"),parameter:identity}),union(object2({kind:literal("echo_query_parameter_with_verify_token"),parameter:identity,tokenParameter:identity}),object2({field:identity,kind:literal("echo_json_body_field"),when:object2({equals:string,field:identity})})));var localMethod=varyingObject({domains:optional(varyingStrings),enabled:boolean});var media=varyingObject({media:string});var organizationSettingsSso=object2({...varyingFields({connection:varyingObject({setupKey:identity}),defaultRole:literal("organization_admin","organization_operator","organization_member"),domains:varyingStrings,enabled:boolean,provisionMembers:boolean}),provider:union(object2({fqn:identity}),varyingObject({providerId:identity}))});var organizationSettings=object2({...varyingFields({...base,branding:optional(varyingObject({cover:optional(media),icon:optional(media),logo:optional(media)})),governance:optional(varyingObject({accessAuditRetentionMonths:optional(positiveSafeInteger),maxGroupHierarchyDepth:optional(positiveSafeInteger)})),identity:optional(varyingObject({companyDomains:optional(varyingStrings),name:optString})),kind:literal("organizationSettings"),lifecycle,locale:optional(varyingObject({defaultLanguage:optString,languages:optional(varyingStrings),timezone:optString}))}),authentication:varyingStructure(optional(object2({...varyingFields({applicationConsent:optional(literal("ask","skip")),otp:optional(localMethod),password:optional(localMethod)}),sso:varyingStructure(optional(array(varyingStructure(organizationSettingsSso))))})))});var subgroups=(value,path)=>optional(array(object2({description:optString,displayName:string,key:string,subgroups})))(value,path);var primitives={agent:refine(object2({...base,activity:optional(object2({heartbeat:boolean,schedule:boolean})),audience:optional(agentAudience2),behavioralBoundaries:strings,dataAccess:readDataAccess("agent"),kind:literal("agent"),lifecycle,maxSteps:optional(positiveSafeInteger),metadata:optional(studioAgentMetadata(jsonObject)),modelTier:optional(literal(...agentModelTiers)),objectives:strings,operatingInstructions:string,output:optional(object2({schema})),responsibility:string,skills:array(identity),tools:toolBindings2}),withoutRetiredAgentFields),connection,connectionInstance:substituted(varyingObject({...base,credentials:jsonObject,kind:literal("connectionInstance"),lifecycle,templateFqn:identity})),datasetBlueprint,datasetConnectorInstance,datasetParser:object2({...base,extensions:array(identity),format:datasetParserFormat,kind:literal("datasetParser"),mediaTypes:array(identity),parserVersion:datasetParserVersion}),datasetTableTemplate,documentsConnector:object2({...base,connectionRefs,kind:literal("documentsConnector"),providerDisplayName:optional(identity),providerFamily:identity}),domain:object2({...base,kind:literal("domain"),lifecycle,localMutationPolicy:optional(mutationPolicy),versioningEnabled:nullable(boolean)}),domainTemplate:object2({...base,catalogTags,domainFqn:string,domainName:string,entitySchemaFqns:strings,kind:literal("domainTemplate"),relationSchemaFqns:strings}),emailProvider:object2({...base,connectionTemplateFqn:identity,deploymentIdentity:optional(union(literal("aws"),literal("azure"))),kind:literal("emailProvider"),senderKind:literal("address","mailbox")}),eventListener:object2({...base,capabilities:array(literal("internal","poll","webhook")),eventKind:string,kind:literal("eventListener"),manualWebhookState:optional(object2({keyFamily:identity,stateKey:identity})),messaging:optional(object2({connectionTemplateFqn:identity,contractVersion:literal(1),service:identity})),receiveModeField:optional(identity),runtimeState:optional(array(object2({keyFamily:string,stateKey:string}))),safeOccurrenceFields:optStrings,safeSelectorFields:optStrings,sourceScope:optional(literal("connection","selector")),webhookAcknowledgement:optional(object2({status:literal(200,204)})),webhookHandshake:optional(webhookHandshake),webhookRegistration:optional(literal("listener"))}),externalAppGateway:readExternalAppGateway,externalApplication:substituted(refine(object2({...varyingFields({...base,allowedOrigins:varyingStrings,applicationConsent:optional(literal(...externalApplicationConsents)),applicationType:literal("confidential","public"),audience:string,kind:literal("externalApplication"),lifecycle,postLogoutRedirectUris:varyingStrings,primaryRedirectUri:optString,redirectUris:varyingStrings,scopes:varyingStrings,setupInstructions:optString}),defaultServerRole:optString,groupBindings:optional(array(object2({coverage:optional(literal("direct","inherited")),group:string,lifecycle,role:string}))),serverRoles:optional(array(object2({...roleFields,bindings:declaredBindings}))),userRoles:array(userRole)}),externalApplicationViolation)),externalDatasetProvider:object2({...base,capabilities:datasetCapabilities,connectionTemplateFqns:strings,kind:literal("externalDatasetProvider"),sourceCapabilities:optional(array(object2({capabilities:datasetCapabilities,datasetOpaqueIdPrefix:string})))}),fieldTransformer:object2({...base,kind:literal("fieldTransformer"),sourceFieldType:string,targetFieldType:string}),knowledgeConnector:object2({...base,autoActivate:optBoolean,autoInstantiate:optBoolean,bindingScopes:optional(bindingScopes),connectionRefs,contributions:optional(array(object2({capabilityFqn:string,connectionSlot:string,connectionTemplateFqn:string,controlFqn:optString,displayName:string,fqn:identity,metadata:optional(jsonObject)}))),defaultOutboundStrategy:optional(outboundStrategy),defaultUpdateMode:optional(updateMode),discoveryDefaults:optional(discoveryDefaults),entityIdentityMode:optional(literal("adapter","item_metadata")),entitySchemaCapabilities:optional(array(entityCapability)),isSingleton:optBoolean,kind:literal("knowledgeConnector"),outboundCapability:optional(literal("declared_and_enablable","none")),recommendedImportSchedules:predefinedSchedules,relationSchemaCapabilities:optional(array(relationCapability)),remoteDeletion:optional(remoteDeletion),remoteReference:optional(object2({providerKey:identity,urlTemplate:knowledgeRemoteReferenceUrlTemplate})),settings:optional(form),supportedBindingModes:optional(bindingModes)}),knowledgeConnectorInstance,knowledgeConnectorOauth:object2({...base,connectorFqn:string,kind:literal("knowledgeConnectorOauth")}),knowledgeEntityAdapter:object2({...base,connectorFqn:string,entitySchemaFqn:string,kind:literal("knowledgeEntityAdapter"),normalizesFieldMapValues:optBoolean,normalizesImportedData:optBoolean}),knowledgeEntitySchema:withoutRetiredRelationFields(object2({...base,...knowledgeSchema,autocompleteConfiguration,defaultSyncDirection:optString,deletionMode:optString,displayDefaults:optional(object2({collections:optStrings,details:optStrings})),displayNameExpression:nullable(string),embedEntities:optBoolean,embeddingConfig:nullable(jsonObject),extendsSchemaFqn:optString,kind:literal("knowledgeEntitySchema"),lifecycle,maxVersionsExpirationDays:optional(nullable(number)),overviewInputMaxChars,persistFullFieldContributions:boolean,richEnrichment,syncable:optBoolean,usableAsDocumentScope:boolean,versioned:optBoolean,versioningEnabled:nullable(boolean)})),knowledgePolicy:(value,path)=>relationScopeRule(fieldWriteRule(object2({...base,...policyFields,kind:literal("knowledgePolicy"),priority:optNumber})(value,path),path),path),knowledgeRelationAdapter:object2({...base,connectorFqn:string,kind:literal("knowledgeRelationAdapter"),relationSchemaFqn:string}),knowledgeRelationSchema:object2({...base,...knowledgeSchema,kind:literal("knowledgeRelationSchema"),lifecycle:optional(lifecycle),sourceSchemaFqn:string,targetSchemaFqn:string}),managedDatasetProvider:object2({...base,capabilities:datasetCapabilities,connectionTemplateFqns:strings,kind:literal("managedDatasetProvider")}),notificationChannel:object2({...base,credential:optional(form),definition:notificationDefinition,kind:literal("notificationChannel")}),organizationGroup:refine(object2({...base,kind:literal("organizationGroup"),lifecycle,parent:optional(identity),subgroups}),organizationGroupViolation),organizationSettings:substituted(refine(organizationSettings,organizationSettingsViolation)),organizationSso:object2({...base,connectionTemplateFqn:string,kind:literal("organizationSso"),providerId:string,requiredCredentialFields:strings,secretCredentialFields:optStrings,setupGuide:optional(array(object2({locale:string,markdown:string})))}),outboundMessagingProvider:object2({...base,connectionTemplateFqn:identity,kind:literal("outboundMessagingProvider"),service:identity}),remoteToolCollection:refine(object2({...base,category:optString,defaultVisibility:optional(array(object2({effect:literal("allow","deny"),subject:literal("organization")}))),gatewayRef:identity,kind:literal("remoteToolCollection"),operationReferences:strings}),remoteToolCollectionViolation),servicePrincipal:object2({...base,groups:array(identity),kind:literal("servicePrincipal"),organizationRole:literal(...servicePrincipalOrganizationRoles)}),skill:object2({dataAccess:readDataAccess("skill"),...base,instructions:string,kind:literal("skill"),lifecycle,tools:toolBindings2}),skillTemplate:object2({...base,catalogTags,kind:literal("skillTemplate"),lifecycle:optional(lifecycle),name:string}),studioApp:studioAppDeclaration,studioAppTemplate:object2({...base,definition:studioAppTemplate,kind:literal("studioAppTemplate")}),studioComponent:object2({...base,category:literal("layout","page","primitive","view","widget"),composition:optional(object2({extensions:optional(jsonObject),slotSource:literal("props","static"),slots:array(object2({extensions:optional(jsonObject),key:string,label:optional(localized)}))})),kind:literal("studioComponent"),propsSchema:schema,sourceRef:string}),tool:object2({...base,allowMultipleSkillBindings:optBoolean,autoActivate:optBoolean,autoInstantiate:optBoolean,bindingScopes:optional(bindingScopes),bindingSettings:optional(form),capabilityType:optional(literal("delegate","external","read","write")),category:optString,connectionRefs,effectKind:optional(literal("mutation","read_only")),extraLoaders:optional(array(object2({bindingName:string,inheritBindingSettings:optBoolean,toolFqn:string}))),healthCheck:optional(object2({capabilities:optStrings,description:string})),input:schema,isSingleton:optBoolean,kind:literal("tool"),output:schema,settings:optional(form),setupInstructions:optional(object2({links:strings,markdown:string})),toolCollectionFqns:optStrings,toolGuidance:optional(object2({inputRequirementsSummary:optString,useWhen:optString})),usageScopes:optional(array(literal("automation","chat","skill")))}),toolCollection:object2({...base,category:optString,defaultVisibility:optional(array(object2({effect:literal("allow","deny"),subject:literal("organization")}))),kind:literal("toolCollection"),toolFqns:strings}),toolSettingsOptions:object2({...base,catalogCollection:optString,catalogConnectionSlots:optStrings,connectionSlots:optStrings,dependencies:optStrings,fieldKey:string,formTarget:optional(literal("binding","settings")),includeUnavailableSelectedOptions:optBoolean,kind:literal("toolSettingsOptions"),toolFqn:string}),workflow:refine(object2({dataAccess:readDataAccess("workflow"),...base,definition:authoringDefinition,kind:literal("workflow"),lifecycle,name:string,servicePrincipalFqn:optional(identity),slug:string}),(workflow)=>{workflowDataAccess(workflow.dataAccess,workflow.definition.dataAccess,`workflow:${workflow.fqn}`)}),workflowField:object2({...base,collectionFqn:string,collectionVersion:string,contract:fieldContract,kind:literal("workflowField"),presentation:optional(object2({placeholder:optString,widget:optString}))}),workflowFieldCollection:object2({...base,contract:object2({weight:number}),kind:literal("workflowFieldCollection"),presentation:optional(object2({categoryPath:strings,label:localized}))}),workflowNode:object2({...base,contract:nodeContract,kind:literal("workflowNode"),nodeKind:literal("action","input","output","trigger"),presentation:optional(object2({categoryPath:optStrings,tags:optStrings}))}),workflowNodeCollection:object2({...base,contract:object2({collection:optional(object2({parentFqn:string,parentVersion:string,weight:number}))}),kind:literal("workflowNodeCollection"),presentation:optional(object2({categoryPath:strings}))}),workflowTemplate:object2({...base,catalogTags,category:string,definition:graph,kind:literal("workflowTemplate"),lifecycle,name:string,requiredSkills:strings,requiredTools:strings,skillSlots:strings,slug:string,uiLayout:nullable(uiLayout)})};var primitive=(v,p)=>{const{kind}=object2({kind:string})(v,p);for(const[name,read]of Object.entries(primitives)){if(name===kind){return read(v,p)}}return invalid(`${p}/kind`)};var readDependency=object2({fqn:hostedIdentity});var parsePackageDependencies=(value)=>{const requirements=array(readDependency)(value,"/dependencies");const identities=new Set;for(const requirement of requirements){if(Object.keys(requirement).some((key)=>key!=="fqn")){throw new TypeError(`package dependency '${requirement.fqn}' has unexpected fields`)}if(identities.has(requirement.fqn)){throw new TypeError(`duplicate package dependency '${requirement.fqn}'`)}identities.add(requirement.fqn)}return[...requirements].sort((left,right)=>compareUtf16CodeUnits(left.fqn,right.fqn))};var PackageManifestVersion="v4";var legacyFixedDestinationTargets=new Set(["fixed-email","channel-destination","telegram-chat","whatsapp-destination"]);var FRONTEND_CATALOG_CONTRACT="frontend-catalog/v1";var FRONTEND_CATALOG_EXPORT_NAME="loadFrontendCatalog";var packageVariable=(value,path)=>{const declared=object2({default:optional(json),description:optString,type:literal(...packageVariableTypes)})(value,path);const name=path.slice(path.lastIndexOf("/")+1);if(packageVariableViolation(name,declared)!==undefined){return invalid(path)}return declared};var readHostedContribution=(value,path)=>{const shared=object2({compatibility:optional(record(string)),contract:optString,execution:optional(literal("interactive","job")),exportName:hostedIdentity,fqn:hostedIdentity,host:literal("backend","dashboard","studio")})(value,path);if(shared.host==="backend"){return{...shared.compatibility===undefined?undefined:{compatibility:shared.compatibility},...shared.contract===undefined?undefined:{contract:shared.contract},...shared.execution===undefined?undefined:{execution:shared.execution},exportName:shared.exportName,fqn:shared.fqn,host:shared.host}}if(shared.execution!==undefined){throw new TypeError(`Invalid package manifest at ${path}/execution: frontend contributions cannot declare an execution lane`)}if(shared.contract!==FRONTEND_CATALOG_CONTRACT){throw new TypeError(`Invalid package manifest at ${path}/contract: frontend contribution contract must be '${FRONTEND_CATALOG_CONTRACT}'`)}if(shared.exportName!==FRONTEND_CATALOG_EXPORT_NAME){throw new TypeError(`Invalid package manifest at ${path}/exportName: frontend contribution export must be '${FRONTEND_CATALOG_EXPORT_NAME}'`)}return{...shared.compatibility===undefined?undefined:{compatibility:shared.compatibility},contract:FRONTEND_CATALOG_CONTRACT,exportName:FRONTEND_CATALOG_EXPORT_NAME,fqn:shared.fqn,host:shared.host}};var readManifest=object2({apiVersion:literal(PackageManifestVersion),author:optString,autoInstallable:optBoolean,bindingScopes:optional(array(literal("organization","tenant"))),category:optString,dependencies:optional(parsePackageDependencies),description:optString,documentation:optString,fqn:identity,homepage:optString,hostedContributions:optional(array(readHostedContribution)),icon:optString,installationWizard:optional(object2({size:optional(literal("lg","md","xl")),steps:array(object2({description:optString,kind:literal("connector_instance","tool_instance"),optional:optBoolean,ref:string,title:optString}))})),name:string,primitives:array(primitive),requiredEnvironmentVariables:optStrings,tags:optStrings,tenantMandatory:optBoolean,tenantStandard:optBoolean,variables:optional(record(packageVariable)),version:string});var PACKAGE_MEDIA_SIZE_LIMIT_BYTES=2*1024*1024;var retiredPrimitiveKinds=new Map(Object.entries({dataset_blueprint:"datasetBlueprint",dataset_parser:"datasetParser",dataset_table_template:"datasetTableTemplate",documents_connector:"documentsConnector",domain_template:"domainTemplate",event_listener:"eventListener",external_application:"externalApplication",external_dataset_provider:"externalDatasetProvider",field_transformer:"fieldTransformer",knowledge_connector:"knowledgeConnector",knowledge_connector_oauth:"knowledgeConnectorOauth",knowledge_entity_adapter:"knowledgeEntityAdapter",knowledge_entity_schema:"knowledgeEntitySchema",knowledge_policy:"knowledgePolicy",knowledge_relation_adapter:"knowledgeRelationAdapter",knowledge_relation_schema:"knowledgeRelationSchema",managed_dataset_provider:"managedDatasetProvider","notification-channel":"notificationChannel",organization_sso:"organizationSso",skill_template:"skillTemplate",studio_app:"studioApp",studio_component:"studioComponent",tool_collection:"toolCollection",tool_settings_options:"toolSettingsOptions",workflow_field:"workflowField",workflow_field_collection:"workflowFieldCollection",workflow_node:"workflowNode",workflow_node_collection:"workflowNodeCollection",workflow_template:"workflowTemplate"}));var retiredGroupNames=new Map(Object.entries({directory_person_in_team:"directory_person_in_group",directory_team:"directory_group",directory_team_parent:"directory_group_parent",organization_team:"organization_group",organization_team_hierarchy:"organization_group_hierarchy",organization_team_membership:"organization_group_membership"}));var toolResultBrand=Symbol.for("@ci/tool-result");import{createHash}from"node:crypto";var import__2020=__toESM(require__2020(),1);var datasetCapabilities2={aggregates:[],definitionRefresh:true,grouping:false,intents:["records"],limits:{maxBytes:1048576,maxPageRows:1000,maxRows:1000,timeoutMs:60000},ordering:true,pagination:false,predicates:[]};var createDatasetQueryValidator=(definition)=>{const fields=definition.fields.map((field)=>field.id);const segment={additionalProperties:false,properties:{kind:{enum:["container","dataset"]},label:{type:"string"},opaqueId:{type:"string"}},required:["kind","opaqueId","label"],type:"object"};const order={additionalProperties:false,properties:{direction:{enum:["asc","desc"]},fieldOrAlias:{enum:fields}},required:["fieldOrAlias","direction"],type:"object"};return new import__2020.default({strict:false}).compile({additionalProperties:false,properties:{bounds:{additionalProperties:false,properties:{maxBytes:{maximum:1048576,minimum:1,type:"integer"},maxRows:{maximum:1000,minimum:1,type:"integer"},timeoutMs:{maximum:60000,minimum:1,type:"integer"}},required:["maxRows","maxBytes","timeoutMs"],type:"object"},definitionRevisionId:{maxLength:256,minLength:1,type:"string"},location:{additionalProperties:false,properties:{segments:{items:segment,maxItems:32,minItems:1,type:"array"}},required:["segments"],type:"object"},operation:{additionalProperties:false,properties:{kind:{const:"records"},orderBy:{items:order,maxItems:20,type:"array"},projection:{items:{enum:fields},type:"array",uniqueItems:true}},required:["kind","projection","orderBy"],type:"object"},providerFqn:{maxLength:256,minLength:1,type:"string"}},required:["location","definitionRevisionId","operation","bounds","providerFqn"],type:"object"})};var tuple=(prefixItems)=>{if(prefixItems.length===0){return{maxItems:0,type:"array"}}return{items:false,maxItems:prefixItems.length,minItems:prefixItems.length,prefixItems,type:"array"}};var createDatasetResultValidator=(definition,query)=>{const fields=query.operation.projection.map((id)=>{const field=definition.fields.find((candidate)=>candidate.id===id);if(field===undefined){throw new Error("Dataset projection is not declared")}return field});const validate=new import__2020.default({strict:false}).compile({additionalProperties:false,properties:{byteCount:{maximum:query.bounds.maxBytes,minimum:0,type:"integer"},columns:tuple(fields.map((field)=>({additionalProperties:false,properties:{fieldId:{const:field.id},type:{const:field.type}},required:["fieldId","type"],type:"object"}))),kind:{const:"records"},observedAt:{minLength:1,type:"string"},rowCount:{maximum:query.bounds.maxRows,minimum:0,type:"integer"},rows:{items:tuple(fields.map((field)=>{let valueType="string";if(field.type==="float64"){valueType="number"}else if(field.type==="boolean"){valueType="boolean"}const value={additionalProperties:false,properties:{kind:{const:field.type},value:field.type==="json"?{}:{type:valueType}},required:["kind","value"],type:"object"};return field.nullable?{anyOf:[value,{additionalProperties:false,properties:{kind:{const:"null"}},required:["kind"],type:"object"}]}:value})),maxItems:query.bounds.maxRows,type:"array"}},required:["kind","columns","rows","rowCount","byteCount","observedAt"],type:"object"});return(page)=>validate(page)&&page.rowCount===page.rows.length};var identifier3=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;var assertIdentifier=(label,value)=>{if(!identifier3.test(value)){throw new TypeError(`${label} is invalid`)}};var unique2=(label,values)=>{if(new Set(values).size!==values.length){throw new TypeError(`${label} must contain unique identifiers`)}};var compareIdentifiers=(left,right)=>{if(left<right){return-1}if(left>right){return 1}return 0};var assertNonEmpty=(label,value)=>{if(value.length===0||value.length>128||value.trim()!==value){throw new TypeError(`${label} must be a non-empty bounded string`)}};var assertBoundedInteger=(label,value,maximum,minimum=1)=>{if(!Number.isSafeInteger(value)||value<minimum||value>maximum){throw new TypeError(`${label} must be between ${minimum} and ${maximum}`)}};var assertOperation=(operation)=>{if(typeof operation.handler!=="function"){throw new TypeError("Operation requires an executable handler")}assertIdentifier("operation id",operation.id);assertNonEmpty("operation version",operation.version);if(operation.effects!=="read"&&operation.effects!=="write"&&operation.effects!=="external_side_effect"){throw new TypeError("operation effects classification is invalid")}if(operation.idempotency!=="safe"&&operation.idempotency!=="idempotent"&&operation.idempotency!=="requires_key"){throw new TypeError("operation idempotency policy is invalid")}if(operation.execution.mode!=="synchronous"){throw new TypeError("Gateway operations must be synchronous")}assertBoundedInteger("operation timeoutMs",operation.execution.timeoutMs,3600000);assertBoundedInteger("operation maxRequestBytes",operation.limits.maxRequestBytes,16777216);assertBoundedInteger("operation maxResponseBytes",operation.limits.maxResponseBytes,16777216);if(operation.retry.mode!=="never"&&operation.retry.mode!=="idempotent_only"){throw new TypeError("operation retry policy is invalid")}if(operation.retry.mode==="idempotent_only"){assertBoundedInteger("operation retry maxAttempts",operation.retry.maxAttempts,10,2)}if(operation.authorization.organization!=="required"){throw new TypeError("operation organization authorization must be required")}if(operation.authorization.delegatedSubject!=="allowed"&&operation.authorization.delegatedSubject!=="forbidden"&&operation.authorization.delegatedSubject!=="required"){throw new TypeError("operation delegatedSubject policy is invalid")}if(operation.authorization.principalKinds.length===0){throw new TypeError("operation principalKinds must not be empty")}if(operation.authorization.principalKinds.some((kind)=>kind!=="detached_user"&&kind!=="service_principal")){throw new TypeError("operation principalKinds contains an invalid value")}if(operation.authorization.scopes.some((scope)=>scope.length===0||scope.length>256)){throw new TypeError("operation scopes contains an invalid value")}unique2("operation principalKinds",operation.authorization.principalKinds);unique2("operation scopes",operation.authorization.scopes)};var operationDomains=(input)=>{unique2("operationDomains",input.operationDomains.map(({id})=>id));return input.operationDomains.map((domain)=>{assertIdentifier("operation domain id",domain.id);unique2(`operation domain ${domain.id}`,domain.operations.map(({id})=>id));const operations=domain.operations.map((operation)=>{assertOperation(operation);return{authorization:operation.authorization,canonicalReference:`${input.id}/${domain.id}/${operation.id}@${operation.version}`,description:operation.description,effects:operation.effects,execution:operation.execution,id:operation.id,idempotency:operation.idempotency,input:operation.input,limits:operation.limits,output:operation.output,retry:operation.retry,title:operation.title,version:operation.version}}).sort((left,right)=>compareIdentifiers(left.id,right.id));const manifest={id:domain.id,operations,title:domain.title};if(domain.description!==undefined){manifest.description=domain.description}if(domain.displayOrder!==undefined){manifest.displayOrder=domain.displayOrder}if(domain.icon!==undefined){manifest.icon=domain.icon}if(domain.tags!==undefined){manifest.tags=domain.tags}return manifest}).sort((left,right)=>compareIdentifiers(left.id,right.id))};var buildGatewayManifest=(input)=>{if(input.organizationBinding!==undefined&&input.organizationBinding.mode!=="installed_organization"){throw new TypeError("Gateway source data is shared; sourceField organization binding is unsupported")}assertIdentifier("gateway id",input.id);const datasets=(input.datasets??[]).map(({query,...dataset})=>{assertIdentifier("dataset id",dataset.id);if(typeof query!=="function"){throw new TypeError("Dataset requires an executable query handler")}if(dataset.definition.version!==1||dataset.definition.measures.length>0||dataset.definition.fields.length===0){throw new TypeError("Datasets currently expose records only")}unique2("dataset fields",dataset.definition.fields.map((field)=>field.id));return{...dataset,capabilities:datasetCapabilities2}}).sort((a,b)=>a.id.localeCompare(b.id));unique2("datasets",datasets.map((dataset)=>dataset.id));const knowledge=(input.knowledge??[]).map((exposure)=>({access:exposure.access,definition:exposedKnowledgeResource(exposure).definition,fullInventory:exposure.resource.scan!==undefined,id:exposure.resource.definition.id,incrementalChanges:exposure.resource.changes!==undefined})).sort((a,b)=>a.id.localeCompare(b.id));unique2("knowledge resources",knowledge.map(({id})=>id));const domains=operationDomains(input);const structural={capabilities:{resources:knowledge.length>0},datasets,id:input.id,knowledge,operationDomains:domains,organizationBinding:input.organizationBinding??{mode:"installed_organization"},protocolVersion:input.protocolVersion??"2",version:input.version};const revision=createHash("sha256").update(canonicalJson(structural)).digest("hex");return{...structural,contentHash:revision,revision}};var buildGatewayProposal=(manifest)=>({gatewayId:manifest.id,gatewayVersion:manifest.version,knowledge:manifest.knowledge,operationDomains:manifest.operationDomains,revision:manifest.revision});var snapshot=(value)=>{if(Array.isArray(value)){return Object.freeze(value.map((item)=>snapshot(item)))}if(typeof value==="object"&&value!==null){return Object.freeze(Object.fromEntries(Object.entries(value).map(([key,item])=>[key,snapshot(item)])))}return value};var defineOperation=(definition)=>Object.freeze(definition);var defineOperationDomain=(definition)=>Object.freeze(definition);var defineGateway=(declaration)=>{const input=snapshot(declaration);const exposures=input.knowledge??[];const resources=new Map(exposures.map((exposure)=>[exposure.resource.definition.id,exposedKnowledgeResource(exposure)]));const manifest=buildGatewayManifest(input);return Object.freeze({dataset:(id)=>input.datasets?.find((dataset)=>dataset.id===id),input,manifest,proposal:buildGatewayProposal(manifest),resource:(id)=>resources.get(id)})};var readResourceBody=async(request,maximum)=>{if(Number(request.headers.get("content-length"))>maximum){await request.body?.cancel();return null}const reader=request.body?.getReader();if(reader===undefined){return null}const decoder=new TextDecoder("utf-8",{fatal:true});let size=0;let text="";try{for(;;){const{done,value}=await reader.read();if(done){break}size+=value.byteLength;if(size>maximum){await reader.cancel();return null}text+=decoder.decode(value,{stream:true})}text+=decoder.decode();const parsed=JSON.parse(text);if(typeof parsed!=="object"||parsed===null||Array.isArray(parsed)){return null}return Object.fromEntries(Object.entries(parsed))}catch{return null}finally{reader.releaseLock()}};var gatewayCallerAuthErrorBrand=Symbol.for("@collective-intelligence/external-apps-server-sdk/GatewayCallerAuthError");class GatewayCallerAuthError extends Error{code;[gatewayCallerAuthErrorBrand]=true;static[Symbol.hasInstance](value){return value instanceof Error&&gatewayCallerAuthErrorBrand in value&&value[gatewayCallerAuthErrorBrand]===true&&"code"in value&&(value.code==="authorization_denied"||value.code==="temporarily_unavailable"||value.code==="replay_detected"||value.code==="unauthenticated")}constructor(code,message){super(message);this.code=code;this.name="GatewayCallerAuthError"}}var jsonHeaders=(correlationId)=>{const headers=new Headers({"cache-control":"no-store","content-type":"application/json"});if(correlationId!==undefined){headers.set("x-correlation-id",correlationId)}return headers};var json2=(body,status=200,correlationId)=>Response.json(body,{headers:jsonHeaders(correlationId),status});var errorStatus=(code)=>{switch(code){case"unauthenticated":{return 401}case"authorization_denied":{return 403}case"not_found":{return 404}case"conflict":case"replay_detected":{return 409}case"temporarily_unavailable":{return 503}case"internal_error":{return 500}case"capability_not_supported":case"execution_cancelled":case"invalid_request":{return 400}default:{throw new TypeError("Unknown gateway protocol error")}}};var failure=(code,message,correlationId,retryable=false,details)=>{const baseError={code,message,retryable};const error=details===undefined?baseError:{...baseError,details};return json2({correlationId,error,ok:false},errorStatus(code),correlationId)};var record2=(value)=>typeof value==="object"&&value!==null&&!Array.isArray(value)?Object.fromEntries(Object.entries(value)):null;var jsonByteLength=(value)=>{try{const encoded=JSON.stringify(value);return encoded===undefined?null:new TextEncoder().encode(encoded).byteLength}catch{return null}};var bearer=(request)=>{const authorization=request.headers.get("authorization");if(authorization===null||!authorization.startsWith("Bearer ")||authorization.length>16391){return null}const token=authorization.slice("Bearer ".length);return token.length>0?token:null};class InvalidExternalAuditSubjectError extends TypeError{constructor(message){super(message);this.name="InvalidExternalAuditSubjectError"}}var gatewayOperationTimeoutError=(message)=>Object.assign(new Error(message),{name:"GatewayOperationTimeoutError"});var isGatewayOperationTimeoutError=(error)=>error instanceof Error&&error.name==="GatewayOperationTimeoutError";var runWithTimeout=async(run,controller,timeoutMs)=>{let timer;const timeout=new Promise((_resolve,reject)=>{timer=setTimeout(()=>{reject(gatewayOperationTimeoutError("Gateway operation timed out"));controller.abort()},timeoutMs)});try{return await Promise.race([run(),timeout])}finally{if(timer!==undefined){clearTimeout(timer)}}};var externalAuditSubject=(body)=>{if(!("externalAuditSubject"in body)){return}const candidate=record2(body.externalAuditSubject);if(candidate===null||typeof candidate.issuer!=="string"||candidate.issuer.length===0||typeof candidate.subject!=="string"||candidate.subject.length===0||candidate.mappedCiUserId!==undefined&&typeof candidate.mappedCiUserId!=="string"){throw new InvalidExternalAuditSubjectError("External audit subject is invalid")}return{issuer:candidate.issuer,subject:candidate.subject,...typeof candidate.mappedCiUserId==="string"?{mappedCiUserId:candidate.mappedCiUserId}:{}}};var authenticate=async(verifyCaller,request,binding,correlationId)=>{const token=bearer(request);const organizationId=request.headers.get("x-organization-id");if(token===null||organizationId===null||organizationId.length===0){return failure("unauthenticated","A CI gateway caller token and organization are required",correlationId)}try{return await verifyCaller({binding,organizationId,token})}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("unauthenticated","The CI gateway caller token is invalid",correlationId)}};var validExternalSubject=(subject)=>subject!==undefined&&subject.issuer.length>0&&subject.subject.length>0;var authorizeGatewayInvocation=(input)=>{if(!input.requirement.principalKinds.includes(input.caller.principalKind)){throw new GatewayCallerAuthError("authorization_denied","The principal kind is not authorized")}const scopes=new Set(input.caller.scopes);if(input.requirement.scopes.some((scope)=>!scopes.has(scope))){throw new GatewayCallerAuthError("authorization_denied","The caller does not have the required scopes")}const hasSubject=validExternalSubject(input.externalAuditSubject);if(input.requirement.delegatedSubject==="required"&&!hasSubject){throw new GatewayCallerAuthError("authorization_denied","An external audit subject is required")}if(input.requirement.delegatedSubject==="forbidden"&&input.externalAuditSubject!==undefined){throw new GatewayCallerAuthError("authorization_denied","An external audit subject is not allowed")}return hasSubject&&input.externalAuditSubject!==undefined?{caller:input.caller,correlationId:input.correlationId,externalAuditSubject:input.externalAuditSubject,organizationId:input.caller.organizationId}:{caller:input.caller,correlationId:input.correlationId,organizationId:input.caller.organizationId}};var createDatasetsHandler=(config)=>{const{maximumBody}=config;return async(request,path,correlationId)=>{if(path[0]==="v1"&&path[1]==="datasets"&&path[2]!==undefined&&path.length===4){const dataset=config.gateway.dataset(path[2]);if(!dataset){return failure("not_found","Gateway dataset not found",correlationId)}const caller=await authenticate(config.verifyCaller,request,`dataset:${dataset.id}`,correlationId);if(caller instanceof Response){return caller}try{const context=authorizeGatewayInvocation({caller,correlationId,requirement:dataset.authorization});if(request.method==="GET"&&path[3]==="definition"){return json2({definition:dataset.definition,revision:config.gateway.manifest.revision},200,correlationId)}if(request.method!=="POST"||path[3]!=="query"){return failure("capability_not_supported","Datasets expose read-only records",correlationId)}const body=await readResourceBody(request,maximumBody);const validate=createDatasetQueryValidator(dataset.definition);if(!validate(body)){return failure("invalid_request","Invalid or unsupported Dataset records query",correlationId)}if(body.definitionRevisionId!==config.gateway.manifest.revision){return failure("conflict","Dataset definition revision changed",correlationId)}if(body.providerFqn!==dataset.providerFqn){return failure("invalid_request","Remote Dataset Provider does not match the Gateway Dataset",correlationId)}const controller=new AbortController;const abort=()=>{controller.abort(request.signal.reason)};request.signal.addEventListener("abort",abort,{once:true});if(request.signal.aborted){abort()}try{const result=await runWithTimeout(async()=>await dataset.query({...body,correlationId,deadlineEpochMs:Date.now()+body.bounds.timeoutMs,definition:dataset.definition},context,{signal:controller.signal}),controller,body.bounds.timeoutMs);if(result.status==="success"&&(!createDatasetResultValidator(dataset.definition,body)(result.value)||(jsonByteLength(result.value)??Infinity)>body.bounds.maxBytes)){return failure("internal_error","Dataset result violates requested bounds",correlationId)}return json2(result,200,correlationId)}finally{request.signal.removeEventListener("abort",abort)}}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}if(isGatewayOperationTimeoutError(error)){return failure("temporarily_unavailable","Dataset query timed out",correlationId,true)}return failure("internal_error","Dataset query failed",correlationId)}}return}};var record3=(value)=>typeof value==="object"&&value!==null&&!Array.isArray(value)?Object.fromEntries(Object.entries(value)):null;var json3=(body,status,correlationId)=>Response.json(body,{headers:{"cache-control":"no-store","x-correlation-id":correlationId},status});var resourceResult=(result)=>{if(result.ok){return json3(result,200,result.correlationId)}let status;switch(result.error.code){case"unauthenticated":{status=401;break}case"forbidden":{status=403;break}case"not_found":{status=404;break}case"conflict":{status=409;break}case"rate_limited":{status=429;break}case"unavailable":case"transport_error":{status=503;break}case"internal":{status=500;break}case"capability_not_supported":case"invalid_request":case"upload_not_supported":{status=400;break}default:{status=500}}return json3(result,status,result.correlationId)};var resourceRequest=(request,body,resourceId,externalId,action,correlationId)=>{if(request.method==="POST"&&externalId===undefined&&(action==="scan"||action==="search")){const pagination=record3(body.pagination);if(pagination===null||pagination.mode!=="cursor"&&pagination.mode!=="page"){return null}const query=body;return{operation:"list",query,requestId:correlationId,resourceId}}if(request.method==="GET"&&externalId!==undefined&&action===undefined){return{id:externalId,operation:"get",requestId:correlationId,resourceId}}if(request.method==="POST"&&externalId===undefined&&action==="records"){if(typeof body.idempotencyKey!=="string"||!("value"in body)){return null}return{idempotencyKey:body.idempotencyKey,operation:"create",requestId:correlationId,resourceId,value:body.value}}if(externalId===undefined||typeof body.expectedRevision!=="string"){return null}const idempotencyKey=typeof body.idempotencyKey==="string"?{idempotencyKey:body.idempotencyKey}:{};if(request.method==="PATCH"&&action===undefined&&"value"in body){return{expectedRevision:body.expectedRevision,id:externalId,...idempotencyKey,operation:"update",requestId:correlationId,resourceId,value:body.value}}const operation=request.method==="DELETE"&&action===undefined?"hard_delete":request.method==="POST"&&action==="soft-delete"?"soft_delete":request.method==="POST"&&action==="restore"?"restore":null;return operation===null?null:{expectedRevision:body.expectedRevision,id:externalId,...idempotencyKey,operation,requestId:correlationId,resourceId}};var positiveInteger=(value,maximum)=>typeof value==="number"&&Number.isSafeInteger(value)&&value>0&&value<=maximum;var handleKnowledgeInventory=async({resource,request,body,caller,correlationId})=>{const resourceId=resource.definition.id;if(resource.scan===undefined){return failure("capability_not_supported","Full inventory is not supported",correlationId)}if(request.method!=="POST"||!positiveInteger(body.page,Number.MAX_SAFE_INTEGER)||!positiveInteger(body.pageSize,100)||body.page>1&&body.watermark===undefined||body.watermark!==undefined&&typeof body.watermark!=="string"||Object.keys(body).some((key)=>!["page","pageSize","watermark","externalAuditSubject"].includes(key))){return failure("invalid_request","Invalid inventory request",correlationId)}const requirement=resource.authorization.list;if(requirement===undefined){return failure("authorization_denied","Resource access is not declared",correlationId)}try{const subject=externalAuditSubject(body);const authorization={caller,correlationId,requirement};if(subject!==undefined){Object.assign(authorization,{externalAuditSubject:subject})}const context=authorizeGatewayInvocation(authorization);const input={page:body.page,pageSize:body.pageSize,requestId:correlationId,resourceId};if(typeof body.watermark==="string"){Object.assign(input,{watermark:body.watermark})}return resourceResult(await resource.scan(input,context,{signal:request.signal}))}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("internal_error","Resource inventory failed",correlationId)}};var createKnowledgeHandler=(config)=>{const{maximumBody}=config;return async(request,path,correlationId)=>{if(path[0]==="v1"&&path[1]==="entities"&&path[2]!==undefined){const resourceId=path[2];const resource=config.gateway.resource(resourceId);if(resource===undefined){return failure("not_found","Gateway resource not found",correlationId)}const isScan=path.length===4&&(path[3]==="scan"||path[3]==="search");const isChanges=path.length===4&&path[3]==="changes";const isCreate=path.length===4&&path[3]==="records";const externalId=path[3]==="records"?path[4]:undefined;const action=isScan?path[3]:isChanges?"changes":isCreate?"records":path[5];const binding=`resource:${resourceId}`;const caller=await authenticate(config.verifyCaller,request,binding,correlationId);if(caller instanceof Response){return caller}const body=request.method==="GET"?{}:await readResourceBody(request,maximumBody);if(body===null){return failure("invalid_request","Request body is invalid",correlationId)}if(isScan&&path[3]==="scan"){return await handleKnowledgeInventory({body,caller,correlationId,request,resource})}if(isChanges){if(resource.changes===undefined||typeof body.limit!=="number"||!Number.isSafeInteger(body.limit)||body.limit<1){return failure("capability_not_supported","Incremental changes are not supported",correlationId)}const requirement=resource.authorization.list;if(requirement===undefined){return failure("authorization_denied","Resource access is not declared",correlationId)}try{const subject=externalAuditSubject(body);const context=authorizeGatewayInvocation({caller,correlationId,...subject===undefined?{}:{externalAuditSubject:subject},requirement});return resourceResult(await resource.changes({...typeof body.cursor==="string"?{cursor:body.cursor}:{},limit:body.limit,requestId:correlationId,resourceId},context,{signal:request.signal}))}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("internal_error","Resource changes failed",correlationId)}}const input=resourceRequest(request,body,resourceId,externalId,action,correlationId);if(input===null){return failure("invalid_request","Resource request is invalid",correlationId)}const requirement=resource.authorization[input.operation];if(requirement===undefined){return failure("capability_not_supported","The resource operation is not declared",correlationId)}try{const subject=externalAuditSubject(body);const context=authorizeGatewayInvocation({caller,correlationId,...subject===undefined?{}:{externalAuditSubject:subject},requirement});return resourceResult(await resource.execute(input,context,{signal:request.signal}))}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("internal_error","Resource operation failed",correlationId)}}return}};var import__20202=__toESM(require__2020(),1);var brand=Symbol.for("@collective-intelligence/external-apps-server-sdk/GatewayOperationError");class GatewayOperationError extends Error{[brand]=true;code;static[Symbol.hasInstance](value){return value instanceof Error&&brand in value&&value[brand]===true&&"code"in value&&(value.code==="authorization_denied"||value.code==="capability_not_supported"||value.code==="invalid_request")}constructor(code,message){super(message.slice(0,512));this.code=code;this.name="GatewayOperationError"}}var createOperationsHandler=(config)=>{const{maximumBody}=config;const operations=new Map;const operationSchemas=new Map;const ajv=new import__20202.default({allErrors:true,strict:false});for(const domain of config.gateway.input.operationDomains){for(const operation of domain.operations){const key=`${domain.id}/${operation.id}`;operations.set(key,operation);operationSchemas.set(key,{input:ajv.compile(operation.input.document),output:ajv.compile(operation.output.document)})}}return async(request,path,correlationId)=>{if(path[0]==="v1"&&path[1]==="operation-domains"&&path[2]!==undefined&&path[3]==="operations"&&path[4]!==undefined&&path[5]==="invoke"&&request.method==="POST"){const domainId=path[2];const operationId=path[4];const operation=operations.get(`${domainId}/${operationId}`);const validators=operationSchemas.get(`${domainId}/${operationId}`);if(operation===undefined||validators===undefined){return failure("not_found","Gateway operation not found",correlationId)}const suppliedIdempotencyKey=request.headers.get("x-idempotency-key");const validIdempotencyKey=suppliedIdempotencyKey===null||/^[\w.-]{1,256}$/u.test(suppliedIdempotencyKey);if(!validIdempotencyKey||operation.idempotency==="requires_key"&&suppliedIdempotencyKey===null){return failure("invalid_request",suppliedIdempotencyKey===null?"A valid idempotency key is required":"The supplied idempotency key is invalid",correlationId)}const idempotencyKey=suppliedIdempotencyKey??undefined;const binding=`operation:${config.gateway.manifest.id}/${domainId}/${operation.id}@${operation.version}`;const caller=await authenticate(config.verifyCaller,request,binding,correlationId);if(caller instanceof Response){return caller}const body=await readResourceBody(request,Math.min(maximumBody,operation.limits.maxRequestBytes));if(body===null||!("input"in body)){return failure("invalid_request","Operation input is required",correlationId)}if(!validators.input(body.input)){return failure("invalid_request","Operation input does not match its declared schema",correlationId,false,{validation:validators.input.errors?.map(({instancePath,keyword,message,schemaPath})=>({instancePath,keyword,message:message??null,schemaPath}))??[]})}let context;try{const subject=externalAuditSubject(body);context=authorizeGatewayInvocation({caller,correlationId,...subject===undefined?{}:{externalAuditSubject:subject},requirement:operation.authorization})}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("authorization_denied","Operation access denied",correlationId)}if(request.signal.aborted){return failure("execution_cancelled","Operation was cancelled",correlationId)}const controller=new AbortController;const cancelled=Promise.withResolvers();const onAbort=()=>{cancelled.reject(new DOMException("Operation was cancelled","AbortError"));controller.abort()};request.signal.addEventListener("abort",onAbort,{once:true});if(operation.execution.mode==="synchronous"){try{const result=await runWithTimeout(async()=>await Promise.race([operation.handler({context,...idempotencyKey===undefined?{}:{idempotencyKey},input:body.input,signal:controller.signal}),cancelled.promise]),controller,operation.execution.timeoutMs);const resultBytes=jsonByteLength(result);if(resultBytes===null||resultBytes>operation.limits.maxResponseBytes||!validators.output(result)){return failure("internal_error","Gateway operation result violates its declared contract",correlationId)}return json2({correlationId,ok:true,result},200,correlationId)}catch(error){if(isGatewayOperationTimeoutError(error)){return failure("temporarily_unavailable",error.message,correlationId,operation.retry.mode==="idempotent_only")}if(!controller.signal.aborted&&error instanceof GatewayOperationError){return failure(error.code,error.message,correlationId)}if(!controller.signal.aborted&&error instanceof GatewayCallerAuthError){return failure(error.code,"Operation access denied",correlationId)}return failure(controller.signal.aborted?"execution_cancelled":"internal_error",controller.signal.aborted?"Operation was cancelled":"Gateway operation failed",correlationId,false)}finally{request.signal.removeEventListener("abort",onAbort)}}}return}};var normalizePath=(request)=>new URL(request.url).pathname.split("/").filter(Boolean).map((part)=>decodeURIComponent(part));var createGatewayKernel=(config)=>{const createCorrelationId=config.createCorrelationId??(()=>crypto.randomUUID());const maximumBody=config.maxBodyBytes??1048576;const datasets=createDatasetsHandler({gateway:config.gateway,maximumBody,verifyCaller:config.verifyCaller});const knowledge=createKnowledgeHandler({gateway:config.gateway,maximumBody,verifyCaller:config.verifyCaller});const operations=createOperationsHandler({gateway:config.gateway,maximumBody,verifyCaller:config.verifyCaller});const handle=async(request)=>{const correlationId=request.headers.get("x-correlation-id")?.match(/^[\w.-]{1,128}$/u)?.[0]??createCorrelationId();const path=normalizePath(request);if(request.method==="GET"&&path.join("/")===".well-known/collective-intelligence-gateway"){return json2({manifestUrl:"/v1/manifest",protocolVersions:[config.gateway.manifest.protocolVersion]})}if(request.method==="POST"&&path.join("/")==="v1/connections/package-enroll"){if(config.enrollPackageConnection===undefined){return failure("capability_not_supported","Package enrollment is unavailable",correlationId)}const callerToken=bearer(request);if(callerToken===null||callerToken.length>16384){return failure("unauthenticated","A narrow signed enrollment token is required",correlationId)}try{await config.enrollPackageConnection({callerToken,manifestHash:config.gateway.manifest.contentHash});return json2({enrolled:true,manifest:config.gateway.manifest},200,correlationId)}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId,error.code==="temporarily_unavailable")}return failure("temporarily_unavailable","Package enrollment is unavailable",correlationId,true)}}if(request.method==="POST"&&path.join("/")==="v1/connections/enroll"){if(config.enrollConnection===undefined){return failure("capability_not_supported","Connection enrollment is unavailable",correlationId)}const credential=bearer(request);if(credential===null){return failure("unauthenticated","A setup credential is required",correlationId)}try{const body=record2(await readResourceBody(request,maximumBody));if(typeof body?.callerToken!=="string"||body.callerToken.length===0||body.callerToken.length>16384){return failure("invalid_request","A signed discovery token is required",correlationId)}await config.enrollConnection({callerToken:body.callerToken,credential});return json2({enrolled:true},200,correlationId)}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId,error.code==="temporarily_unavailable")}return failure("temporarily_unavailable","Connection enrollment is unavailable",correlationId,true)}}if(request.method==="GET"&&path.join("/")==="v1/manifest"){const credential=bearer(request);let setupAuthorized=false;if(credential!==null&&config.verifySetupCredential!==undefined){try{setupAuthorized=await config.verifySetupCredential(credential)}catch{}}if(!setupAuthorized){const caller=await authenticate(config.verifyCaller,request,"connection:discover",correlationId);if(caller instanceof Response){return caller}}const response=json2(config.gateway.manifest);response.headers.set("cache-control","no-store");return response}if(request.method==="GET"&&path.join("/")==="v1/health"){return json2({gatewayId:config.gateway.manifest.id,protocolVersion:config.gateway.manifest.protocolVersion,status:"healthy"})}const datasetResponse=await datasets(request,path,correlationId);if(datasetResponse!==undefined){return datasetResponse}const knowledgeResponse=await knowledge(request,path,correlationId);if(knowledgeResponse!==undefined){return knowledgeResponse}const operationResponse=await operations(request,path,correlationId);if(operationResponse!==undefined){return operationResponse}return failure("not_found","Gateway route not found",correlationId)};return{handle,manifest:config.gateway.manifest}};var{createGatewayKernel:createGatewayKernel2}=exports_kernel;var{createGatewayIngestionClient:createGatewayIngestionClient2}=exports_client;var{defineGateway:defineGateway2,defineOperation:defineOperation2,defineOperationDomain:defineOperationDomain2}=exports_registry;export{GatewayIngestionError,GatewayOperationError,createGatewayIngestionClient2 as createGatewayIngestionClient,createGatewayKernel2 as createGatewayKernel,defineGateway2 as defineGateway,defineOperation2 as defineOperation,defineOperationDomain2 as defineOperationDomain};
9
+ ${studioViewKey(fqn)}`)))?"duplicate view key":undefined};var isTrue=(value,path)=>value===true?true:invalid(path);var studioAppDeclaration=object2({...base,definition:refine(object2({color:optString,description:optString,icon:optString,layout:optional(layout),name:string,sections:array(object2({access,description:optString,fqn:identity,icon:optString,label:string,orderIndex:number,pages:array(page),slug:identity})),slug:identity}),collision),grants:object2({groups:refine(array(object2({group:identity,role:literal("manage","view")})),(grants)=>new Set(grants.map(({group})=>group)).size===grants.length?undefined:"duplicate Group")}),kind:literal("studioApp"),lifecycle:object2({deployMode:literal("upsert"),readonly:isTrue})});var agentFormFields=(value,path)=>studioFormFields(value,path).map((field,index)=>field.type==="rich_text"||field.type==="user_select"?invalid(`${path}/${index}/type`):field);var studioFormKey2="studioForm";var studioAgentFormAt=(metadata,path)=>optional(object2({fields:agentFormFields}))(metadata[studioFormKey2],`${path}/${studioFormKey2}`);var studioAgentMetadata=(read)=>(value,path)=>{const metadata=read(value,path);studioAgentFormAt(metadata,path);return metadata};var notificationDefinition=object2({capabilities:object2({extensionReadyProviders:strings,recipientTargets:strings,supportsActionLink:boolean,supportsAttachments:boolean,supportsFixedDestinations:optBoolean,supportsHtml:boolean,supportsMarkdown:boolean,supportsMentions:boolean,supportsReadReceipts:boolean,supportsRouteDestinations:boolean,supportsThreads:boolean}),credentialProfileKey:optString,family:literal("email","im","internal"),key:string,provider:string,setup:object2({docsUrl:nullable(string),healthCheck:object2({available:boolean,label:optString}),instructions:string,liveTest:object2({available:boolean,label:optString}),secretFields:strings,setupForm:nullable(form)})});var studioPage=object2({fullWidth:optBoolean,icon:optString,kind:literal("predefined"),label:string,orderIndex:number,predefinedPageRef:string,routeSegment:string,slug:string});var studioSection=object2({description:optString,icon:optString,label:string,orderIndex:number,pages:array(studioPage),slug:string});var studioAppTemplate=object2({color:optString,description:optString,icon:optString,isDefaultTemplate:optBoolean,name:string,sections:array(studioSection),slug:string});var datasetScalarType=literal("boolean","string","int64","float64","decimal","date","timestamp","duration","json");var datasetDefinition2=object2({fields:array(object2({id:string,name:string,nullable:boolean,semantic:optional(string),type:datasetScalarType})),measures:array(object2({id:string,name:string,resultType:datasetScalarType})),relationships:array(object2({cardinality:literal("one_to_one","one_to_many","many_to_one","many_to_many"),fromFieldId:string,id:string,toFieldId:string})),version:literal(1)});var datasetBlueprint=object2({...base,blueprintVersion:positiveSafeInteger,configuration:optional(jsonObject),definition:datasetDefinition2,kind:literal("datasetBlueprint"),templateFqn:identity});var semanticRole=literal("dimension","effective_time","entity_reference","event_time","identity","measure","status");var hint=object2({role:semanticRole});var datasetTableTemplate=object2({...base,admittedIngestionModes:array(literal("append","replace","upsert")),compatibleProviderFqns:strings,configuration:schema,identity:object2({keyRoles:array(semanticRole),uniqueness:literal("append_only","key","none")}),indexHints:array(hint),kind:literal("datasetTableTemplate"),partitionHints:array(hint),physicalCode:literal("evt","fact","gen","snap","stat","ts"),requirements:schema,semanticRoles:array(semanticRole)});var WorkflowEditorWidgets=["checkbox","code","condition_builder","credential_selector","key_value","list","mapping_builder","multi_select","number","resource_selector","schedule_builder","schema_builder","select","text","textarea"];var WorkflowTemplateKinds=["action_node","input_node","output_node","trigger_node"];var WorkflowTriggerLifecycleAdapterIds=Object.freeze({externalApplication:"builtin.core.workflows.lifecycle.external-application",mcpOperation:"builtin.core.workflows.lifecycle.mcp-operation"});var dynamicPort=object2({configPath:string,defaultIdPath:optString,idPath:string,requiredPath:optString,schemaPath:optString});var fieldBinding=object2({path:pathParts,target:literal("input_binding","parameter")});var nonNegativeInteger=(value,path)=>{const parsed=number(value,path);return Number.isSafeInteger(parsed)&&parsed>=0?parsed:invalid(path)};var optionSource=union(object2({kind:literal("static"),options:array(object2({label:localized,value:json}))}),object2({clearOnDependencyChange:boolean,dependsOn:array(fieldBinding),kind:literal("remote"),operationId:string,searchable:boolean}));var editorField=object2({binding:fieldBinding,fieldConfig:optional(jsonObject),fieldFqn:optString,fieldVersion:optString,help:optional(localized),label:optional(localized),optionSource:optional(optionSource),order:optNumber,placeholder:optional(localized),readOnly:optBoolean,required:optBoolean,resolutionPhase:literal("runtime","structural"),sensitive:optBoolean,valueSources:array(literal("expression","fixed","literal","mapping","model","system")),visibleWhen:optional(array(object2({binding:fieldBinding,operator:literal("equals","in","is_not_set","is_set","not_equals"),value:optional(json)}))),widget:optional(literal(...WorkflowEditorWidgets))});var templateKind=literal(...WorkflowTemplateKinds);var nodePort=refine(object2({allowedTemplateFqns:optStrings,allowedTemplateKinds:optional(array(templateKind)),direction:literal("input","output"),key:string,maxConnections:optional(nullable(nonNegativeInteger)),minConnections:optional(nonNegativeInteger),schemaResolution:optional(object2({configPath:pathParts,variants:array(object2({schema,schemaInjections:optional(array(object2({configPath:pathParts,schemaPath:pathParts}))),when:json}))})),valueSchema:schema}),workflowPortPolicyViolation);var eventSelectorProjection=union(object2({required:optBoolean,sourcePath:pathParts,targetPath:pathParts}),object2({targetPath:pathParts,value:json}));var eventIngress=object2({acquisitionMode:string,callbackPathPath:optional(pathParts),connectionIdPath:optional(pathParts),eventKind:string,listener:object2({fqn:string,version:string}),requiredConfigPaths:optional(array(pathParts)),requiredListener:optBoolean,selector:array(eventSelectorProjection)});var triggerActivation=union(object2({eventIngress,kind:literal("event")}),union(object2({invocationRole:optional(literal("application","user")),kind:literal("manual"),lifecycleAdapterId:optString,triggerRefPath:optional(pathParts)}),object2({kind:literal("schedule")})));var parseWorkflowReusableDependency=(value)=>object2({inputContractPath:pathParts,modePath:optional(pathParts),targetWorkflowFqnPath:optional(pathParts),targetWorkflowIdPath:pathParts})(value,"/reusableDependency");var nodeContract=object2({capabilityComposition:optional(object2({capability:string,fragments:strings,selector:object2({path:pathParts,target:literal("parameter")})})),configSchema:optional(schema),connectionRequirements:optional(array(object2({cardinality:literal("many","one"),connectionTemplateFqns:refine(strings,(fqns)=>fqns.length===0?"connectionTemplateFqns cannot be empty":undefined),key:string,required:boolean,selector:object2({path:pathParts,target:literal("parameter")})}))),dynamicPorts:optional(object2({input:optional(dynamicPort),output:optional(dynamicPort)})),editor:optional(refine(object2({form:optional(object2({sections:optional(array(object2({fields:optional(array(editorField)),id:optString,order:optNumber,title:optString})))}))}),workflowEditorViolation)),execution:optional(object2({itemModes:optional(array(literal("all_items","each_item","single"))),mainOutputPort:optString,repeatable:optBoolean,resumable:optBoolean,sideEffect:literal("external","none","read","write"),testable:optBoolean})),implementationId:string,inputSchema:optional(schema),instancePolicy:optional(object2({maxInstances:optNumber,minInstances:optNumber,onWorkflowCreate:optBoolean})),nodeCollectionFqn:optString,nodeCollectionVersion:optString,outputChannels:optional(array(object2({adapterId:string,cardinality:literal("many","one"),deliveryMode:literal("asynchronous","synchronous"),key:string,required:boolean,valueSchema:schema}))),outputSchema:optional(schema),ports:optional(array(nodePort)),reusableDependency:optional(parseWorkflowReusableDependency),triggerActivation:optional(triggerActivation)});var fieldContract=object2({availableForInput:optBoolean,availableForOutput:optBoolean,clearOnDependencyChange:optBoolean,optionDependencies:optional(array(object2({path:pathParts,target:literal("parameter","part","value")}))),user:optional(object2({multiple:boolean})),valueSchema:optional(schema)});var graphSchema=object2({bindings:optional(array(object2({extensions:jsonObject}))),fieldProjections:array(object2({source:pathParts,target:pathParts})),schema});var graphBoundary=object2({templateFqn:string,templateVersion:string});var graph=object2({edges:array(object2({extensions:optional(jsonObject),id:string,source:string,target:string})),inputBoundary:graphBoundary,inputContract:graphSchema,metadata:object2({description:nullable(string),tags:strings,templateSource:nullable(string)}),nodes:array(object2({extensions:optional(jsonObject),id:string,templateFqn:string,templateVersion:string})),outputBoundary:graphBoundary,outputContract:graphSchema,triggers:array(object2({config:object2({extensions:optional(jsonObject)}),id:string,inputBindings:record(string),invocation:object2({mode:literal("attach","detach"),timeoutMs:nullable(number)}),metadata:object2({fieldDisplayValues:record(string)}),settings:object2({enabled:boolean}),templateFqn:string,templateVersion:string})),version:literal(1)});var uiLayout=object2({edges:record(object2({extensions:optional(jsonObject)})),nodes:record(object2({position:optional(object2({x:number,y:number}))})),version:literal(1),viewport:nullable(object2({x:number,y:number,zoom:number}))});var bindingSpan=object2({end:number,start:number});var bindingSource=object2({kind:literal("input","loop_index","loop_item","merge_output","node_output","port_arrival","run","scope","trigger"),mergeId:optional(nullable(string)),nodeId:optional(nullable(string)),portId:optional(nullable(string)),selection:optional(nullable(object2({ancestry:literal("nearest_dominating_ancestor"),iteration:literal("aggregate","previous_iteration","same_iteration")})))});var bindingExpression=(value,path)=>{const{kind}=object2({kind:string})(value,path);switch(kind){case"array":{return object2({items:array(bindingExpression),kind:literal("array")})(value,path)}case"call":{return object2({args:array(bindingExpression),kind:literal("call"),name:string})(value,path)}case"interpolation":{return object2({kind:literal("interpolation"),parts:array(bindingExpression),span:optional(nullable(bindingSpan))})(value,path)}case"literal":{return object2({kind:literal("literal"),value:json})(value,path)}case"object":{return object2({fields:record(bindingExpression),kind:literal("object")})(value,path)}case"operator":{return object2({args:array(bindingExpression),kind:literal("operator"),op:string})(value,path)}case"ref":{return object2({kind:literal("ref"),onUnavailable:object2({kind:literal("error","fallback","null"),value:optional(nullable(bindingExpression))}),path:pathParts,source:bindingSource,span:optional(nullable(bindingSpan))})(value,path)}default:{return invalid(`${path}/kind`)}}};var authoredValue=union(object2({mode:literal("fixed"),value:json}),object2({compiled:optional(nullable(bindingExpression)),languageVersion:literal(1),mode:literal("expression"),source:string}));var nodeExecutionSettings=object2({dryRun:optional(object2({mode:literal("allow","block_side_effects")})),idempotencyKey:optional(nullable(bindingExpression)),onError:optional(object2({mode:literal("continue","fail_run")})),retry:optional(object2({backoffMs:optional(nullable(number)),maxAttempts:optional(nullable(number)),mode:literal("disabled","exponential","fixed")})),timeoutMs:optional(nullable(number))});var authoringTemplateRef=object2({templateFqn:string,templateVersion:string});var authoringFieldProjection=object2({fieldConfig:optional(jsonObject),fieldFqn:string,fieldVersion:string,path:strings});var authoringInputContract=object2({fieldProjections:optional(array(authoringFieldProjection)),jsonSchema:jsonObject});var authoringOutputContract=object2({bindings:array(object2({key:string,kind:literal("artifact","value"),value:bindingExpression})),fieldProjections:optional(array(authoringFieldProjection)),jsonSchema:jsonObject});var inputEndpoint=object2({kind:literal("input_node"),portId:string});var actionEndpoint=object2({kind:literal("action_node"),nodeId:string,portId:string});var triggerEndpoint=object2({kind:literal("trigger_node"),portId:string,triggerId:string});var outputEndpoint=object2({kind:literal("output_node"),portId:string});var authoringDefinition=object2({dataAccess:readDataAccess("workflow"),edges:array(object2({id:string,source:union(union(actionEndpoint,inputEndpoint),triggerEndpoint),target:union(union(actionEndpoint,inputEndpoint),outputEndpoint)})),inputBoundary:authoringTemplateRef,inputContract:authoringInputContract,metadata:jsonObject,nodes:array(object2({config:record(authoredValue),extensions:optional(jsonObject),id:string,inputs:record(authoredValue),metadata:jsonObject,settings:nodeExecutionSettings,templateFqn:string,templateVersion:string,uid:optString})),outputBoundary:authoringTemplateRef,outputContract:authoringOutputContract,triggers:array(object2({config:jsonObject,id:string,inputBindings:record(object2({overridePolicy:literal("caller_may_override","locked"),value:authoredValue})),invocation:object2({mode:literal("attach","await_result","detach"),timeoutMs:optional(nullable(number))}),metadata:studioTriggerMetadata(jsonObject),settings:jsonObject,templateFqn:string,templateVersion:string})),version:literal(1)});var onlyKeys=(...keys)=>(value)=>Object.keys(value).some((key)=>!keys.includes(key))?"unexpected member":undefined;var remoteDeletion=union(refine(object2({capability:literal("full")}),onlyKeys("capability")),refine(object2({capability:literal("full_and_delta"),feed:literal("server_filtered","client_filtered")}),onlyKeys("capability","feed")));var bindingTargets=(read)=>optional(union(literal("all"),array(read)));var knowledgeTargets=bindingTargets(object2({fqn:identity,policy:optional(identity)}));var declaredBindings=optional(object2({agents:bindingTargets(identity),documents:bindingTargets(identity),knowledge:optional(object2({domains:knowledgeTargets,schemas:knowledgeTargets})),skills:bindingTargets(identity),workflows:bindingTargets(identity)}));var roleFields={appPermissions:optStrings,assignRoles:optStrings,key:string,parent:optString,platformPermissions:strings,replaces:optString,users:optional(object2({create:boolean}))};var roleVisibility=object2({visibility:literal("user","declared")});var userVisibilityRole=object2({...roleFields,visibility:literal("user")});var declaredVisibilityRole=object2({...roleFields,bindings:declaredBindings,visibility:literal("declared")});var userRole=(value,path)=>roleVisibility(value,path).visibility==="declared"?declaredVisibilityRole(value,path):userVisibilityRole(value,path);var knowledgeSelection=optional(object2({exclude:optional(array(identity)),include:optional(array(identity))}));var toolBindings2=refine(array(union(identity,object2({approval:optional(union(literal("always","never"),object2({rule:identity}))),knowledge:optional(object2({domains:knowledgeSelection,entitySchemas:knowledgeSelection,relationSchemas:knowledgeSelection,unrestricted:optBoolean})),name:optional(identity),settings:optional(jsonObject),tool:identity}))),(tools)=>duplicateToolBinding(tools)===undefined?undefined:"duplicate tool binding");var withoutRetiredRelationFields=(read)=>(value,path)=>{const declaration=read(value,path);if("relationFields"in declaration){throw new TypeError(`Invalid package manifest at ${path}/relationFields: relationFields is no longer supported; rebuild the package with the current extensions SDK, which declares Entity Relation Fields in fieldSemantics`)}return declaration};var agentAudience2=refine(object2({anonymous:optBoolean,applications:optional(array(identity)),members:optional(literal("all","none","selected")),organizationGroups:optional(literal("none","selected"))}),(audience)=>("organizationTeams"in audience)?"organizationTeams":agentAudienceViolation(audience));var withoutRetiredAgentFields=(agent)=>["invokingApplicationFqns","modelPreset"].find((field)=>(field in agent));var webhookHandshake=union(object2({kind:literal("echo_query_parameter"),parameter:identity}),union(object2({kind:literal("echo_query_parameter_with_verify_token"),parameter:identity,tokenParameter:identity}),object2({field:identity,kind:literal("echo_json_body_field"),when:object2({equals:string,field:identity})})));var localMethod=varyingObject({domains:optional(varyingStrings),enabled:boolean});var media=varyingObject({media:string});var organizationSettingsSso=object2({...varyingFields({connection:varyingObject({setupKey:identity}),defaultRole:literal("organization_admin","organization_operator","organization_member"),domains:varyingStrings,enabled:boolean,provisionMembers:boolean}),provider:union(object2({fqn:identity}),varyingObject({providerId:identity}))});var organizationSettings=object2({...varyingFields({...base,branding:optional(varyingObject({cover:optional(media),icon:optional(media),logo:optional(media)})),governance:optional(varyingObject({accessAuditRetentionMonths:optional(positiveSafeInteger),maxGroupHierarchyDepth:optional(positiveSafeInteger)})),identity:optional(varyingObject({companyDomains:optional(varyingStrings),name:optString})),kind:literal("organizationSettings"),lifecycle,locale:optional(varyingObject({defaultLanguage:optString,languages:optional(varyingStrings),timezone:optString}))}),authentication:varyingStructure(optional(object2({...varyingFields({applicationConsent:optional(literal("ask","skip")),otp:optional(localMethod),password:optional(localMethod)}),sso:varyingStructure(optional(array(varyingStructure(organizationSettingsSso))))})))});var subgroups=(value,path)=>optional(array(object2({description:optString,displayName:string,key:string,subgroups})))(value,path);var primitives={agent:refine(object2({...base,activity:optional(object2({heartbeat:boolean,schedule:boolean})),audience:optional(agentAudience2),behavioralBoundaries:strings,dataAccess:readDataAccess("agent"),kind:literal("agent"),lifecycle,maxSteps:optional(positiveSafeInteger),metadata:optional(studioAgentMetadata(jsonObject)),modelTier:optional(literal(...agentModelTiers)),objectives:strings,operatingInstructions:string,output:optional(object2({schema})),responsibility:string,skills:array(identity),tools:toolBindings2}),withoutRetiredAgentFields),connection,connectionInstance:substituted(varyingObject({...base,credentials:jsonObject,kind:literal("connectionInstance"),lifecycle,templateFqn:identity})),datasetBlueprint,datasetConnectorInstance,datasetParser:object2({...base,extensions:array(identity),format:datasetParserFormat,kind:literal("datasetParser"),mediaTypes:array(identity),parserVersion:datasetParserVersion}),datasetTableTemplate,documentsConnector:object2({...base,connectionRefs,kind:literal("documentsConnector"),providerDisplayName:optional(identity),providerFamily:identity}),domain:object2({...base,kind:literal("domain"),lifecycle,localMutationPolicy:optional(mutationPolicy),versioningEnabled:nullable(boolean)}),domainTemplate:object2({...base,catalogTags,domainFqn:string,domainName:string,entitySchemaFqns:strings,kind:literal("domainTemplate"),relationSchemaFqns:strings}),emailProvider:object2({...base,connectionTemplateFqn:identity,deploymentIdentity:optional(union(literal("aws"),literal("azure"))),kind:literal("emailProvider"),senderKind:literal("address","mailbox")}),eventListener:object2({...base,capabilities:array(literal("internal","poll","webhook")),eventKind:string,kind:literal("eventListener"),manualWebhookState:optional(object2({keyFamily:identity,stateKey:identity})),messaging:optional(object2({connectionTemplateFqn:identity,contractVersion:literal(1),service:identity})),receiveModeField:optional(identity),runtimeState:optional(array(object2({keyFamily:string,stateKey:string}))),safeOccurrenceFields:optStrings,safeSelectorFields:optStrings,sourceScope:optional(literal("connection","selector")),webhookAcknowledgement:optional(object2({status:literal(200,204)})),webhookHandshake:optional(webhookHandshake),webhookRegistration:optional(literal("listener"))}),externalAppGateway:readExternalAppGateway,externalApplication:substituted(refine(object2({...varyingFields({...base,allowedOrigins:varyingStrings,applicationConsent:optional(literal(...externalApplicationConsents)),applicationType:literal("confidential","public"),audience:string,kind:literal("externalApplication"),lifecycle,postLogoutRedirectUris:varyingStrings,primaryRedirectUri:optString,redirectUris:varyingStrings,scopes:varyingStrings,setupInstructions:optString}),defaultServerRole:optString,groupBindings:optional(array(object2({coverage:optional(literal("direct","inherited")),group:string,lifecycle,role:string}))),serverRoles:optional(array(object2({...roleFields,bindings:declaredBindings}))),userRoles:array(userRole)}),externalApplicationViolation)),externalDatasetProvider:object2({...base,capabilities:datasetCapabilities,connectionTemplateFqns:strings,kind:literal("externalDatasetProvider"),sourceCapabilities:optional(array(object2({capabilities:datasetCapabilities,datasetOpaqueIdPrefix:string})))}),fieldTransformer:object2({...base,kind:literal("fieldTransformer"),sourceFieldType:string,targetFieldType:string}),knowledgeConnector:object2({...base,autoActivate:optBoolean,autoInstantiate:optBoolean,bindingScopes:optional(bindingScopes),connectionRefs,contributions:optional(array(object2({capabilityFqn:string,connectionSlot:string,connectionTemplateFqn:string,controlFqn:optString,displayName:string,fqn:identity,metadata:optional(jsonObject)}))),defaultOutboundStrategy:optional(outboundStrategy),defaultUpdateMode:optional(updateMode),discoveryDefaults:optional(discoveryDefaults),entityIdentityMode:optional(literal("adapter","item_metadata")),entitySchemaCapabilities:optional(array(entityCapability)),isSingleton:optBoolean,kind:literal("knowledgeConnector"),outboundCapability:optional(literal("declared_and_enablable","none")),recommendedImportSchedules:predefinedSchedules,relationSchemaCapabilities:optional(array(relationCapability)),remoteDeletion:optional(remoteDeletion),remoteReference:optional(object2({providerKey:identity,urlTemplate:knowledgeRemoteReferenceUrlTemplate})),settings:optional(form),supportedBindingModes:optional(bindingModes)}),knowledgeConnectorInstance,knowledgeConnectorOauth:object2({...base,connectorFqn:string,kind:literal("knowledgeConnectorOauth")}),knowledgeEntityAdapter:object2({...base,connectorFqn:string,entitySchemaFqn:string,kind:literal("knowledgeEntityAdapter"),normalizesFieldMapValues:optBoolean,normalizesImportedData:optBoolean}),knowledgeEntitySchema:withoutRetiredRelationFields(object2({...base,...knowledgeSchema,autocompleteConfiguration,defaultSyncDirection:optString,deletionMode:optString,displayDefaults:optional(object2({collections:optStrings,details:optStrings})),displayNameExpression:nullable(string),embedEntities:optBoolean,embeddingConfig:nullable(jsonObject),extendsSchemaFqn:optString,kind:literal("knowledgeEntitySchema"),lifecycle,maxVersionsExpirationDays:optional(nullable(number)),overviewInputMaxChars,persistFullFieldContributions:boolean,richEnrichment,syncable:optBoolean,usableAsDocumentScope:boolean,versioned:optBoolean,versioningEnabled:nullable(boolean)})),knowledgePolicy:(value,path)=>relationScopeRule(fieldWriteRule(object2({...base,...policyFields,kind:literal("knowledgePolicy"),priority:optNumber})(value,path),path),path),knowledgeRelationAdapter:object2({...base,connectorFqn:string,kind:literal("knowledgeRelationAdapter"),relationSchemaFqn:string}),knowledgeRelationSchema:object2({...base,...knowledgeSchema,kind:literal("knowledgeRelationSchema"),lifecycle:optional(lifecycle),sourceSchemaFqn:string,targetSchemaFqn:string}),managedDatasetProvider:object2({...base,capabilities:datasetCapabilities,connectionTemplateFqns:strings,kind:literal("managedDatasetProvider")}),notificationChannel:object2({...base,credential:optional(form),definition:notificationDefinition,kind:literal("notificationChannel")}),organizationGroup:refine(object2({...base,kind:literal("organizationGroup"),lifecycle,parent:optional(identity),subgroups}),organizationGroupViolation),organizationSettings:substituted(refine(organizationSettings,organizationSettingsViolation)),organizationSso:object2({...base,connectionTemplateFqn:string,kind:literal("organizationSso"),providerId:string,requiredCredentialFields:strings,secretCredentialFields:optStrings,setupGuide:optional(array(object2({locale:string,markdown:string})))}),outboundMessagingProvider:object2({...base,connectionTemplateFqn:identity,kind:literal("outboundMessagingProvider"),service:identity}),remoteToolCollection:refine(object2({...base,category:optString,defaultVisibility:optional(array(object2({effect:literal("allow","deny"),subject:literal("organization")}))),gatewayRef:identity,kind:literal("remoteToolCollection"),operationReferences:strings}),remoteToolCollectionViolation),servicePrincipal:object2({...base,groups:array(identity),kind:literal("servicePrincipal"),organizationRole:literal(...servicePrincipalOrganizationRoles)}),skill:object2({dataAccess:readDataAccess("skill"),...base,instructions:string,kind:literal("skill"),lifecycle,tools:toolBindings2}),skillTemplate:object2({...base,catalogTags,kind:literal("skillTemplate"),lifecycle:optional(lifecycle),name:string}),studioApp:studioAppDeclaration,studioAppTemplate:object2({...base,definition:studioAppTemplate,kind:literal("studioAppTemplate")}),studioComponent:object2({...base,category:literal("layout","page","primitive","view","widget"),composition:optional(object2({extensions:optional(jsonObject),slotSource:literal("props","static"),slots:array(object2({extensions:optional(jsonObject),key:string,label:optional(localized)}))})),kind:literal("studioComponent"),propsSchema:schema,sourceRef:string}),tool:object2({...base,allowMultipleSkillBindings:optBoolean,autoActivate:optBoolean,autoInstantiate:optBoolean,bindingScopes:optional(bindingScopes),bindingSettings:optional(form),capabilityType:optional(literal("delegate","external","read","write")),category:optString,connectionRefs,effectKind:optional(literal("mutation","read_only")),extraLoaders:optional(array(object2({bindingName:string,inheritBindingSettings:optBoolean,toolFqn:string}))),healthCheck:optional(object2({capabilities:optStrings,description:string})),input:schema,isSingleton:optBoolean,kind:literal("tool"),output:schema,settings:optional(form),setupInstructions:optional(object2({links:strings,markdown:string})),toolCollectionFqns:optStrings,toolGuidance:optional(object2({inputRequirementsSummary:optString,useWhen:optString})),usageScopes:optional(array(literal("automation","chat","skill")))}),toolCollection:object2({...base,category:optString,defaultVisibility:optional(array(object2({effect:literal("allow","deny"),subject:literal("organization")}))),kind:literal("toolCollection"),toolFqns:strings}),toolSettingsOptions:object2({...base,catalogCollection:optString,catalogConnectionSlots:optStrings,connectionSlots:optStrings,dependencies:optStrings,fieldKey:string,formTarget:optional(literal("binding","settings")),includeUnavailableSelectedOptions:optBoolean,kind:literal("toolSettingsOptions"),toolFqn:string}),workflow:refine(object2({dataAccess:readDataAccess("workflow"),...base,definition:authoringDefinition,kind:literal("workflow"),lifecycle,name:string,runDetailsRetention:optional(literal("full","outcome_only")),servicePrincipalFqn:optional(identity),slug:string}),(workflow)=>{workflowDataAccess(workflow.dataAccess,workflow.definition.dataAccess,`workflow:${workflow.fqn}`)}),workflowField:object2({...base,collectionFqn:string,collectionVersion:string,contract:fieldContract,kind:literal("workflowField"),presentation:optional(object2({placeholder:optString,widget:optString}))}),workflowFieldCollection:object2({...base,contract:object2({weight:number}),kind:literal("workflowFieldCollection"),presentation:optional(object2({categoryPath:strings,label:localized}))}),workflowNode:object2({...base,contract:nodeContract,kind:literal("workflowNode"),nodeKind:literal("action","input","output","trigger"),presentation:optional(object2({categoryPath:optStrings,tags:optStrings}))}),workflowNodeCollection:object2({...base,contract:object2({collection:optional(object2({parentFqn:string,parentVersion:string,weight:number}))}),kind:literal("workflowNodeCollection"),presentation:optional(object2({categoryPath:strings}))}),workflowTemplate:object2({...base,catalogTags,category:string,definition:graph,kind:literal("workflowTemplate"),lifecycle,name:string,requiredSkills:strings,requiredTools:strings,skillSlots:strings,slug:string,uiLayout:nullable(uiLayout)})};var primitive=(v,p)=>{const{kind}=object2({kind:string})(v,p);for(const[name,read]of Object.entries(primitives)){if(name===kind){return read(v,p)}}return invalid(`${p}/kind`)};var readDependency=object2({fqn:hostedIdentity});var parsePackageDependencies=(value)=>{const requirements=array(readDependency)(value,"/dependencies");const identities=new Set;for(const requirement of requirements){if(Object.keys(requirement).some((key)=>key!=="fqn")){throw new TypeError(`package dependency '${requirement.fqn}' has unexpected fields`)}if(identities.has(requirement.fqn)){throw new TypeError(`duplicate package dependency '${requirement.fqn}'`)}identities.add(requirement.fqn)}return[...requirements].sort((left,right)=>compareUtf16CodeUnits(left.fqn,right.fqn))};var PackageManifestVersion="v4";var legacyFixedDestinationTargets=new Set(["fixed-email","channel-destination","telegram-chat","whatsapp-destination"]);var FRONTEND_CATALOG_CONTRACT="frontend-catalog/v1";var FRONTEND_CATALOG_EXPORT_NAME="loadFrontendCatalog";var packageVariable=(value,path)=>{const declared=object2({default:optional(json),description:optString,type:literal(...packageVariableTypes)})(value,path);const name=path.slice(path.lastIndexOf("/")+1);if(packageVariableViolation(name,declared)!==undefined){return invalid(path)}return declared};var readHostedContribution=(value,path)=>{const shared=object2({compatibility:optional(record(string)),contract:optString,execution:optional(literal("interactive","job")),exportName:hostedIdentity,fqn:hostedIdentity,host:literal("backend","dashboard","studio")})(value,path);if(shared.host==="backend"){return{...shared.compatibility===undefined?undefined:{compatibility:shared.compatibility},...shared.contract===undefined?undefined:{contract:shared.contract},...shared.execution===undefined?undefined:{execution:shared.execution},exportName:shared.exportName,fqn:shared.fqn,host:shared.host}}if(shared.execution!==undefined){throw new TypeError(`Invalid package manifest at ${path}/execution: frontend contributions cannot declare an execution lane`)}if(shared.contract!==FRONTEND_CATALOG_CONTRACT){throw new TypeError(`Invalid package manifest at ${path}/contract: frontend contribution contract must be '${FRONTEND_CATALOG_CONTRACT}'`)}if(shared.exportName!==FRONTEND_CATALOG_EXPORT_NAME){throw new TypeError(`Invalid package manifest at ${path}/exportName: frontend contribution export must be '${FRONTEND_CATALOG_EXPORT_NAME}'`)}return{...shared.compatibility===undefined?undefined:{compatibility:shared.compatibility},contract:FRONTEND_CATALOG_CONTRACT,exportName:FRONTEND_CATALOG_EXPORT_NAME,fqn:shared.fqn,host:shared.host}};var readManifest=object2({apiVersion:literal(PackageManifestVersion),author:optString,autoInstallable:optBoolean,bindingScopes:optional(array(literal("organization","tenant"))),category:optString,dependencies:optional(parsePackageDependencies),description:optString,documentation:optString,fqn:identity,homepage:optString,hostedContributions:optional(array(readHostedContribution)),icon:optString,installationWizard:optional(object2({size:optional(literal("lg","md","xl")),steps:array(object2({description:optString,kind:literal("connector_instance","tool_instance"),optional:optBoolean,ref:string,title:optString}))})),name:string,primitives:array(primitive),requiredEnvironmentVariables:optStrings,tags:optStrings,tenantMandatory:optBoolean,tenantStandard:optBoolean,variables:optional(record(packageVariable)),version:string});var PACKAGE_MEDIA_SIZE_LIMIT_BYTES=2*1024*1024;var retiredPrimitiveKinds=new Map(Object.entries({dataset_blueprint:"datasetBlueprint",dataset_parser:"datasetParser",dataset_table_template:"datasetTableTemplate",documents_connector:"documentsConnector",domain_template:"domainTemplate",event_listener:"eventListener",external_application:"externalApplication",external_dataset_provider:"externalDatasetProvider",field_transformer:"fieldTransformer",knowledge_connector:"knowledgeConnector",knowledge_connector_oauth:"knowledgeConnectorOauth",knowledge_entity_adapter:"knowledgeEntityAdapter",knowledge_entity_schema:"knowledgeEntitySchema",knowledge_policy:"knowledgePolicy",knowledge_relation_adapter:"knowledgeRelationAdapter",knowledge_relation_schema:"knowledgeRelationSchema",managed_dataset_provider:"managedDatasetProvider","notification-channel":"notificationChannel",organization_sso:"organizationSso",skill_template:"skillTemplate",studio_app:"studioApp",studio_component:"studioComponent",tool_collection:"toolCollection",tool_settings_options:"toolSettingsOptions",workflow_field:"workflowField",workflow_field_collection:"workflowFieldCollection",workflow_node:"workflowNode",workflow_node_collection:"workflowNodeCollection",workflow_template:"workflowTemplate"}));var retiredGroupNames=new Map(Object.entries({directory_person_in_team:"directory_person_in_group",directory_team:"directory_group",directory_team_parent:"directory_group_parent",organization_team:"organization_group",organization_team_hierarchy:"organization_group_hierarchy",organization_team_membership:"organization_group_membership"}));var toolResultBrand=Symbol.for("@ci/tool-result");import{createHash}from"node:crypto";var import__2020=__toESM(require__2020(),1);var datasetCapabilities2={aggregates:[],definitionRefresh:true,grouping:false,intents:["records"],limits:{maxBytes:1048576,maxPageRows:1000,maxRows:1000,timeoutMs:60000},ordering:true,pagination:false,predicates:[]};var createDatasetQueryValidator=(definition)=>{const fields=definition.fields.map((field)=>field.id);const segment={additionalProperties:false,properties:{kind:{enum:["container","dataset"]},label:{type:"string"},opaqueId:{type:"string"}},required:["kind","opaqueId","label"],type:"object"};const order={additionalProperties:false,properties:{direction:{enum:["asc","desc"]},fieldOrAlias:{enum:fields}},required:["fieldOrAlias","direction"],type:"object"};return new import__2020.default({strict:false}).compile({additionalProperties:false,properties:{bounds:{additionalProperties:false,properties:{maxBytes:{maximum:1048576,minimum:1,type:"integer"},maxRows:{maximum:1000,minimum:1,type:"integer"},timeoutMs:{maximum:60000,minimum:1,type:"integer"}},required:["maxRows","maxBytes","timeoutMs"],type:"object"},definitionRevisionId:{maxLength:256,minLength:1,type:"string"},location:{additionalProperties:false,properties:{segments:{items:segment,maxItems:32,minItems:1,type:"array"}},required:["segments"],type:"object"},operation:{additionalProperties:false,properties:{kind:{const:"records"},orderBy:{items:order,maxItems:20,type:"array"},projection:{items:{enum:fields},type:"array",uniqueItems:true}},required:["kind","projection","orderBy"],type:"object"},providerFqn:{maxLength:256,minLength:1,type:"string"}},required:["location","definitionRevisionId","operation","bounds","providerFqn"],type:"object"})};var tuple=(prefixItems)=>{if(prefixItems.length===0){return{maxItems:0,type:"array"}}return{items:false,maxItems:prefixItems.length,minItems:prefixItems.length,prefixItems,type:"array"}};var createDatasetResultValidator=(definition,query)=>{const fields=query.operation.projection.map((id)=>{const field=definition.fields.find((candidate)=>candidate.id===id);if(field===undefined){throw new Error("Dataset projection is not declared")}return field});const validate=new import__2020.default({strict:false}).compile({additionalProperties:false,properties:{byteCount:{maximum:query.bounds.maxBytes,minimum:0,type:"integer"},columns:tuple(fields.map((field)=>({additionalProperties:false,properties:{fieldId:{const:field.id},type:{const:field.type}},required:["fieldId","type"],type:"object"}))),kind:{const:"records"},observedAt:{minLength:1,type:"string"},rowCount:{maximum:query.bounds.maxRows,minimum:0,type:"integer"},rows:{items:tuple(fields.map((field)=>{let valueType="string";if(field.type==="float64"){valueType="number"}else if(field.type==="boolean"){valueType="boolean"}const value={additionalProperties:false,properties:{kind:{const:field.type},value:field.type==="json"?{}:{type:valueType}},required:["kind","value"],type:"object"};return field.nullable?{anyOf:[value,{additionalProperties:false,properties:{kind:{const:"null"}},required:["kind"],type:"object"}]}:value})),maxItems:query.bounds.maxRows,type:"array"}},required:["kind","columns","rows","rowCount","byteCount","observedAt"],type:"object"});return(page)=>validate(page)&&page.rowCount===page.rows.length};var identifier3=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u;var assertIdentifier=(label,value)=>{if(!identifier3.test(value)){throw new TypeError(`${label} is invalid`)}};var unique2=(label,values)=>{if(new Set(values).size!==values.length){throw new TypeError(`${label} must contain unique identifiers`)}};var compareIdentifiers=(left,right)=>{if(left<right){return-1}if(left>right){return 1}return 0};var assertNonEmpty=(label,value)=>{if(value.length===0||value.length>128||value.trim()!==value){throw new TypeError(`${label} must be a non-empty bounded string`)}};var assertBoundedInteger=(label,value,maximum,minimum=1)=>{if(!Number.isSafeInteger(value)||value<minimum||value>maximum){throw new TypeError(`${label} must be between ${minimum} and ${maximum}`)}};var assertOperation=(operation)=>{if(typeof operation.handler!=="function"){throw new TypeError("Operation requires an executable handler")}assertIdentifier("operation id",operation.id);assertNonEmpty("operation version",operation.version);if(operation.effects!=="read"&&operation.effects!=="write"&&operation.effects!=="external_side_effect"){throw new TypeError("operation effects classification is invalid")}if(operation.idempotency!=="safe"&&operation.idempotency!=="idempotent"&&operation.idempotency!=="requires_key"){throw new TypeError("operation idempotency policy is invalid")}if(operation.execution.mode!=="synchronous"){throw new TypeError("Gateway operations must be synchronous")}assertBoundedInteger("operation timeoutMs",operation.execution.timeoutMs,3600000);assertBoundedInteger("operation maxRequestBytes",operation.limits.maxRequestBytes,16777216);assertBoundedInteger("operation maxResponseBytes",operation.limits.maxResponseBytes,16777216);if(operation.retry.mode!=="never"&&operation.retry.mode!=="idempotent_only"){throw new TypeError("operation retry policy is invalid")}if(operation.retry.mode==="idempotent_only"){assertBoundedInteger("operation retry maxAttempts",operation.retry.maxAttempts,10,2)}if(operation.authorization.organization!=="required"){throw new TypeError("operation organization authorization must be required")}if(operation.authorization.delegatedSubject!=="allowed"&&operation.authorization.delegatedSubject!=="forbidden"&&operation.authorization.delegatedSubject!=="required"){throw new TypeError("operation delegatedSubject policy is invalid")}if(operation.authorization.principalKinds.length===0){throw new TypeError("operation principalKinds must not be empty")}if(operation.authorization.principalKinds.some((kind)=>kind!=="detached_user"&&kind!=="service_principal")){throw new TypeError("operation principalKinds contains an invalid value")}if(operation.authorization.scopes.some((scope)=>scope.length===0||scope.length>256)){throw new TypeError("operation scopes contains an invalid value")}unique2("operation principalKinds",operation.authorization.principalKinds);unique2("operation scopes",operation.authorization.scopes)};var operationDomains=(input)=>{unique2("operationDomains",input.operationDomains.map(({id})=>id));return input.operationDomains.map((domain)=>{assertIdentifier("operation domain id",domain.id);unique2(`operation domain ${domain.id}`,domain.operations.map(({id})=>id));const operations=domain.operations.map((operation)=>{assertOperation(operation);return{authorization:operation.authorization,canonicalReference:`${input.id}/${domain.id}/${operation.id}@${operation.version}`,description:operation.description,effects:operation.effects,execution:operation.execution,id:operation.id,idempotency:operation.idempotency,input:operation.input,limits:operation.limits,output:operation.output,retry:operation.retry,title:operation.title,version:operation.version}}).sort((left,right)=>compareIdentifiers(left.id,right.id));const manifest={id:domain.id,operations,title:domain.title};if(domain.description!==undefined){manifest.description=domain.description}if(domain.displayOrder!==undefined){manifest.displayOrder=domain.displayOrder}if(domain.icon!==undefined){manifest.icon=domain.icon}if(domain.tags!==undefined){manifest.tags=domain.tags}return manifest}).sort((left,right)=>compareIdentifiers(left.id,right.id))};var buildGatewayManifest=(input)=>{if(input.organizationBinding!==undefined&&input.organizationBinding.mode!=="installed_organization"){throw new TypeError("Gateway source data is shared; sourceField organization binding is unsupported")}assertIdentifier("gateway id",input.id);const datasets=(input.datasets??[]).map(({query,...dataset})=>{assertIdentifier("dataset id",dataset.id);if(typeof query!=="function"){throw new TypeError("Dataset requires an executable query handler")}if(dataset.definition.version!==1||dataset.definition.measures.length>0||dataset.definition.fields.length===0){throw new TypeError("Datasets currently expose records only")}unique2("dataset fields",dataset.definition.fields.map((field)=>field.id));return{...dataset,capabilities:datasetCapabilities2}}).sort((a,b)=>a.id.localeCompare(b.id));unique2("datasets",datasets.map((dataset)=>dataset.id));const knowledge=(input.knowledge??[]).map((exposure)=>({access:exposure.access,definition:exposedKnowledgeResource(exposure).definition,fullInventory:exposure.resource.scan!==undefined,id:exposure.resource.definition.id,incrementalChanges:exposure.resource.changes!==undefined})).sort((a,b)=>a.id.localeCompare(b.id));unique2("knowledge resources",knowledge.map(({id})=>id));const domains=operationDomains(input);const structural={capabilities:{resources:knowledge.length>0},datasets,id:input.id,knowledge,operationDomains:domains,organizationBinding:input.organizationBinding??{mode:"installed_organization"},protocolVersion:input.protocolVersion??"2",version:input.version};const revision=createHash("sha256").update(canonicalJson(structural)).digest("hex");return{...structural,contentHash:revision,revision}};var buildGatewayProposal=(manifest)=>({gatewayId:manifest.id,gatewayVersion:manifest.version,knowledge:manifest.knowledge,operationDomains:manifest.operationDomains,revision:manifest.revision});var snapshot=(value)=>{if(Array.isArray(value)){return Object.freeze(value.map((item)=>snapshot(item)))}if(typeof value==="object"&&value!==null){return Object.freeze(Object.fromEntries(Object.entries(value).map(([key,item])=>[key,snapshot(item)])))}return value};var defineOperation=(definition)=>Object.freeze(definition);var defineOperationDomain=(definition)=>Object.freeze(definition);var defineGateway=(declaration)=>{const input=snapshot(declaration);const exposures=input.knowledge??[];const resources=new Map(exposures.map((exposure)=>[exposure.resource.definition.id,exposedKnowledgeResource(exposure)]));const manifest=buildGatewayManifest(input);return Object.freeze({dataset:(id)=>input.datasets?.find((dataset)=>dataset.id===id),input,manifest,proposal:buildGatewayProposal(manifest),resource:(id)=>resources.get(id)})};var readResourceBody=async(request,maximum)=>{if(Number(request.headers.get("content-length"))>maximum){await request.body?.cancel();return null}const reader=request.body?.getReader();if(reader===undefined){return null}const decoder=new TextDecoder("utf-8",{fatal:true});let size=0;let text="";try{for(;;){const{done,value}=await reader.read();if(done){break}size+=value.byteLength;if(size>maximum){await reader.cancel();return null}text+=decoder.decode(value,{stream:true})}text+=decoder.decode();const parsed=JSON.parse(text);if(typeof parsed!=="object"||parsed===null||Array.isArray(parsed)){return null}return Object.fromEntries(Object.entries(parsed))}catch{return null}finally{reader.releaseLock()}};var gatewayCallerAuthErrorBrand=Symbol.for("@collective-intelligence/external-apps-server-sdk/GatewayCallerAuthError");class GatewayCallerAuthError extends Error{code;[gatewayCallerAuthErrorBrand]=true;static[Symbol.hasInstance](value){return value instanceof Error&&gatewayCallerAuthErrorBrand in value&&value[gatewayCallerAuthErrorBrand]===true&&"code"in value&&(value.code==="authorization_denied"||value.code==="temporarily_unavailable"||value.code==="replay_detected"||value.code==="unauthenticated")}constructor(code,message){super(message);this.code=code;this.name="GatewayCallerAuthError"}}var jsonHeaders=(correlationId)=>{const headers=new Headers({"cache-control":"no-store","content-type":"application/json"});if(correlationId!==undefined){headers.set("x-correlation-id",correlationId)}return headers};var json2=(body,status=200,correlationId)=>Response.json(body,{headers:jsonHeaders(correlationId),status});var errorStatus=(code)=>{switch(code){case"unauthenticated":{return 401}case"authorization_denied":{return 403}case"not_found":{return 404}case"conflict":case"replay_detected":{return 409}case"temporarily_unavailable":{return 503}case"internal_error":{return 500}case"capability_not_supported":case"execution_cancelled":case"invalid_request":{return 400}default:{throw new TypeError("Unknown gateway protocol error")}}};var failure=(code,message,correlationId,retryable=false,details)=>{const baseError={code,message,retryable};const error=details===undefined?baseError:{...baseError,details};return json2({correlationId,error,ok:false},errorStatus(code),correlationId)};var record2=(value)=>typeof value==="object"&&value!==null&&!Array.isArray(value)?Object.fromEntries(Object.entries(value)):null;var jsonByteLength=(value)=>{try{const encoded=JSON.stringify(value);return encoded===undefined?null:new TextEncoder().encode(encoded).byteLength}catch{return null}};var bearer=(request)=>{const authorization=request.headers.get("authorization");if(authorization===null||!authorization.startsWith("Bearer ")||authorization.length>16391){return null}const token=authorization.slice("Bearer ".length);return token.length>0?token:null};class InvalidExternalAuditSubjectError extends TypeError{constructor(message){super(message);this.name="InvalidExternalAuditSubjectError"}}var gatewayOperationTimeoutError=(message)=>Object.assign(new Error(message),{name:"GatewayOperationTimeoutError"});var isGatewayOperationTimeoutError=(error)=>error instanceof Error&&error.name==="GatewayOperationTimeoutError";var runWithTimeout=async(run,controller,timeoutMs)=>{let timer;const timeout=new Promise((_resolve,reject)=>{timer=setTimeout(()=>{reject(gatewayOperationTimeoutError("Gateway operation timed out"));controller.abort()},timeoutMs)});try{return await Promise.race([run(),timeout])}finally{if(timer!==undefined){clearTimeout(timer)}}};var externalAuditSubject=(body)=>{if(!("externalAuditSubject"in body)){return}const candidate=record2(body.externalAuditSubject);if(candidate===null||typeof candidate.issuer!=="string"||candidate.issuer.length===0||typeof candidate.subject!=="string"||candidate.subject.length===0||candidate.mappedCiUserId!==undefined&&typeof candidate.mappedCiUserId!=="string"){throw new InvalidExternalAuditSubjectError("External audit subject is invalid")}return{issuer:candidate.issuer,subject:candidate.subject,...typeof candidate.mappedCiUserId==="string"?{mappedCiUserId:candidate.mappedCiUserId}:{}}};var authenticate=async(verifyCaller,request,binding,correlationId)=>{const token=bearer(request);const organizationId=request.headers.get("x-organization-id");if(token===null||organizationId===null||organizationId.length===0){return failure("unauthenticated","A CI gateway caller token and organization are required",correlationId)}try{return await verifyCaller({binding,organizationId,token})}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("unauthenticated","The CI gateway caller token is invalid",correlationId)}};var validExternalSubject=(subject)=>subject!==undefined&&subject.issuer.length>0&&subject.subject.length>0;var authorizeGatewayInvocation=(input)=>{if(!input.requirement.principalKinds.includes(input.caller.principalKind)){throw new GatewayCallerAuthError("authorization_denied","The principal kind is not authorized")}const scopes=new Set(input.caller.scopes);if(input.requirement.scopes.some((scope)=>!scopes.has(scope))){throw new GatewayCallerAuthError("authorization_denied","The caller does not have the required scopes")}const hasSubject=validExternalSubject(input.externalAuditSubject);if(input.requirement.delegatedSubject==="required"&&!hasSubject){throw new GatewayCallerAuthError("authorization_denied","An external audit subject is required")}if(input.requirement.delegatedSubject==="forbidden"&&input.externalAuditSubject!==undefined){throw new GatewayCallerAuthError("authorization_denied","An external audit subject is not allowed")}return hasSubject&&input.externalAuditSubject!==undefined?{caller:input.caller,correlationId:input.correlationId,externalAuditSubject:input.externalAuditSubject,organizationId:input.caller.organizationId}:{caller:input.caller,correlationId:input.correlationId,organizationId:input.caller.organizationId}};var createDatasetsHandler=(config)=>{const{maximumBody}=config;return async(request,path,correlationId)=>{if(path[0]==="v1"&&path[1]==="datasets"&&path[2]!==undefined&&path.length===4){const dataset=config.gateway.dataset(path[2]);if(!dataset){return failure("not_found","Gateway dataset not found",correlationId)}const caller=await authenticate(config.verifyCaller,request,`dataset:${dataset.id}`,correlationId);if(caller instanceof Response){return caller}try{const context=authorizeGatewayInvocation({caller,correlationId,requirement:dataset.authorization});if(request.method==="GET"&&path[3]==="definition"){return json2({definition:dataset.definition,revision:config.gateway.manifest.revision},200,correlationId)}if(request.method!=="POST"||path[3]!=="query"){return failure("capability_not_supported","Datasets expose read-only records",correlationId)}const body=await readResourceBody(request,maximumBody);const validate=createDatasetQueryValidator(dataset.definition);if(!validate(body)){return failure("invalid_request","Invalid or unsupported Dataset records query",correlationId)}if(body.definitionRevisionId!==config.gateway.manifest.revision){return failure("conflict","Dataset definition revision changed",correlationId)}if(body.providerFqn!==dataset.providerFqn){return failure("invalid_request","Remote Dataset Provider does not match the Gateway Dataset",correlationId)}const controller=new AbortController;const abort=()=>{controller.abort(request.signal.reason)};request.signal.addEventListener("abort",abort,{once:true});if(request.signal.aborted){abort()}try{const result=await runWithTimeout(async()=>await dataset.query({...body,correlationId,deadlineEpochMs:Date.now()+body.bounds.timeoutMs,definition:dataset.definition},context,{signal:controller.signal}),controller,body.bounds.timeoutMs);if(result.status==="success"&&(!createDatasetResultValidator(dataset.definition,body)(result.value)||(jsonByteLength(result.value)??Infinity)>body.bounds.maxBytes)){return failure("internal_error","Dataset result violates requested bounds",correlationId)}return json2(result,200,correlationId)}finally{request.signal.removeEventListener("abort",abort)}}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}if(isGatewayOperationTimeoutError(error)){return failure("temporarily_unavailable","Dataset query timed out",correlationId,true)}return failure("internal_error","Dataset query failed",correlationId)}}return}};var record3=(value)=>typeof value==="object"&&value!==null&&!Array.isArray(value)?Object.fromEntries(Object.entries(value)):null;var json3=(body,status,correlationId)=>Response.json(body,{headers:{"cache-control":"no-store","x-correlation-id":correlationId},status});var resourceResult=(result)=>{if(result.ok){return json3(result,200,result.correlationId)}let status;switch(result.error.code){case"unauthenticated":{status=401;break}case"forbidden":{status=403;break}case"not_found":{status=404;break}case"conflict":{status=409;break}case"rate_limited":{status=429;break}case"unavailable":case"transport_error":{status=503;break}case"internal":{status=500;break}case"capability_not_supported":case"invalid_request":case"upload_not_supported":{status=400;break}default:{status=500}}return json3(result,status,result.correlationId)};var resourceRequest=(request,body,resourceId,externalId,action,correlationId)=>{if(request.method==="POST"&&externalId===undefined&&(action==="scan"||action==="search")){const pagination=record3(body.pagination);if(pagination===null||pagination.mode!=="cursor"&&pagination.mode!=="page"){return null}const query=body;return{operation:"list",query,requestId:correlationId,resourceId}}if(request.method==="GET"&&externalId!==undefined&&action===undefined){return{id:externalId,operation:"get",requestId:correlationId,resourceId}}if(request.method==="POST"&&externalId===undefined&&action==="records"){if(typeof body.idempotencyKey!=="string"||!("value"in body)){return null}return{idempotencyKey:body.idempotencyKey,operation:"create",requestId:correlationId,resourceId,value:body.value}}if(externalId===undefined||typeof body.expectedRevision!=="string"){return null}const idempotencyKey=typeof body.idempotencyKey==="string"?{idempotencyKey:body.idempotencyKey}:{};if(request.method==="PATCH"&&action===undefined&&"value"in body){return{expectedRevision:body.expectedRevision,id:externalId,...idempotencyKey,operation:"update",requestId:correlationId,resourceId,value:body.value}}const operation=request.method==="DELETE"&&action===undefined?"hard_delete":request.method==="POST"&&action==="soft-delete"?"soft_delete":request.method==="POST"&&action==="restore"?"restore":null;return operation===null?null:{expectedRevision:body.expectedRevision,id:externalId,...idempotencyKey,operation,requestId:correlationId,resourceId}};var positiveInteger=(value,maximum)=>typeof value==="number"&&Number.isSafeInteger(value)&&value>0&&value<=maximum;var handleKnowledgeInventory=async({resource,request,body,caller,correlationId})=>{const resourceId=resource.definition.id;if(resource.scan===undefined){return failure("capability_not_supported","Full inventory is not supported",correlationId)}if(request.method!=="POST"||!positiveInteger(body.page,Number.MAX_SAFE_INTEGER)||!positiveInteger(body.pageSize,100)||body.page>1&&body.watermark===undefined||body.watermark!==undefined&&typeof body.watermark!=="string"||Object.keys(body).some((key)=>!["page","pageSize","watermark","externalAuditSubject"].includes(key))){return failure("invalid_request","Invalid inventory request",correlationId)}const requirement=resource.authorization.list;if(requirement===undefined){return failure("authorization_denied","Resource access is not declared",correlationId)}try{const subject=externalAuditSubject(body);const authorization={caller,correlationId,requirement};if(subject!==undefined){Object.assign(authorization,{externalAuditSubject:subject})}const context=authorizeGatewayInvocation(authorization);const input={page:body.page,pageSize:body.pageSize,requestId:correlationId,resourceId};if(typeof body.watermark==="string"){Object.assign(input,{watermark:body.watermark})}return resourceResult(await resource.scan(input,context,{signal:request.signal}))}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("internal_error","Resource inventory failed",correlationId)}};var createKnowledgeHandler=(config)=>{const{maximumBody}=config;return async(request,path,correlationId)=>{if(path[0]==="v1"&&path[1]==="entities"&&path[2]!==undefined){const resourceId=path[2];const resource=config.gateway.resource(resourceId);if(resource===undefined){return failure("not_found","Gateway resource not found",correlationId)}const isScan=path.length===4&&(path[3]==="scan"||path[3]==="search");const isChanges=path.length===4&&path[3]==="changes";const isCreate=path.length===4&&path[3]==="records";const externalId=path[3]==="records"?path[4]:undefined;const action=isScan?path[3]:isChanges?"changes":isCreate?"records":path[5];const binding=`resource:${resourceId}`;const caller=await authenticate(config.verifyCaller,request,binding,correlationId);if(caller instanceof Response){return caller}const body=request.method==="GET"?{}:await readResourceBody(request,maximumBody);if(body===null){return failure("invalid_request","Request body is invalid",correlationId)}if(isScan&&path[3]==="scan"){return await handleKnowledgeInventory({body,caller,correlationId,request,resource})}if(isChanges){if(resource.changes===undefined||typeof body.limit!=="number"||!Number.isSafeInteger(body.limit)||body.limit<1){return failure("capability_not_supported","Incremental changes are not supported",correlationId)}const requirement=resource.authorization.list;if(requirement===undefined){return failure("authorization_denied","Resource access is not declared",correlationId)}try{const subject=externalAuditSubject(body);const context=authorizeGatewayInvocation({caller,correlationId,...subject===undefined?{}:{externalAuditSubject:subject},requirement});return resourceResult(await resource.changes({...typeof body.cursor==="string"?{cursor:body.cursor}:{},limit:body.limit,requestId:correlationId,resourceId},context,{signal:request.signal}))}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("internal_error","Resource changes failed",correlationId)}}const input=resourceRequest(request,body,resourceId,externalId,action,correlationId);if(input===null){return failure("invalid_request","Resource request is invalid",correlationId)}const requirement=resource.authorization[input.operation];if(requirement===undefined){return failure("capability_not_supported","The resource operation is not declared",correlationId)}try{const subject=externalAuditSubject(body);const context=authorizeGatewayInvocation({caller,correlationId,...subject===undefined?{}:{externalAuditSubject:subject},requirement});return resourceResult(await resource.execute(input,context,{signal:request.signal}))}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("internal_error","Resource operation failed",correlationId)}}return}};var import__20202=__toESM(require__2020(),1);var brand=Symbol.for("@collective-intelligence/external-apps-server-sdk/GatewayOperationError");class GatewayOperationError extends Error{[brand]=true;code;static[Symbol.hasInstance](value){return value instanceof Error&&brand in value&&value[brand]===true&&"code"in value&&(value.code==="authorization_denied"||value.code==="capability_not_supported"||value.code==="invalid_request")}constructor(code,message){super(message.slice(0,512));this.code=code;this.name="GatewayOperationError"}}var createOperationsHandler=(config)=>{const{maximumBody}=config;const operations=new Map;const operationSchemas=new Map;const ajv=new import__20202.default({allErrors:true,strict:false});for(const domain of config.gateway.input.operationDomains){for(const operation of domain.operations){const key=`${domain.id}/${operation.id}`;operations.set(key,operation);operationSchemas.set(key,{input:ajv.compile(operation.input.document),output:ajv.compile(operation.output.document)})}}return async(request,path,correlationId)=>{if(path[0]==="v1"&&path[1]==="operation-domains"&&path[2]!==undefined&&path[3]==="operations"&&path[4]!==undefined&&path[5]==="invoke"&&request.method==="POST"){const domainId=path[2];const operationId=path[4];const operation=operations.get(`${domainId}/${operationId}`);const validators=operationSchemas.get(`${domainId}/${operationId}`);if(operation===undefined||validators===undefined){return failure("not_found","Gateway operation not found",correlationId)}const suppliedIdempotencyKey=request.headers.get("x-idempotency-key");const validIdempotencyKey=suppliedIdempotencyKey===null||/^[\w.-]{1,256}$/u.test(suppliedIdempotencyKey);if(!validIdempotencyKey||operation.idempotency==="requires_key"&&suppliedIdempotencyKey===null){return failure("invalid_request",suppliedIdempotencyKey===null?"A valid idempotency key is required":"The supplied idempotency key is invalid",correlationId)}const idempotencyKey=suppliedIdempotencyKey??undefined;const binding=`operation:${config.gateway.manifest.id}/${domainId}/${operation.id}@${operation.version}`;const caller=await authenticate(config.verifyCaller,request,binding,correlationId);if(caller instanceof Response){return caller}const body=await readResourceBody(request,Math.min(maximumBody,operation.limits.maxRequestBytes));if(body===null||!("input"in body)){return failure("invalid_request","Operation input is required",correlationId)}if(!validators.input(body.input)){return failure("invalid_request","Operation input does not match its declared schema",correlationId,false,{validation:validators.input.errors?.map(({instancePath,keyword,message,schemaPath})=>({instancePath,keyword,message:message??null,schemaPath}))??[]})}let context;try{const subject=externalAuditSubject(body);context=authorizeGatewayInvocation({caller,correlationId,...subject===undefined?{}:{externalAuditSubject:subject},requirement:operation.authorization})}catch(error){if(error instanceof InvalidExternalAuditSubjectError){return failure("invalid_request",error.message,correlationId)}if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId)}return failure("authorization_denied","Operation access denied",correlationId)}if(request.signal.aborted){return failure("execution_cancelled","Operation was cancelled",correlationId)}const controller=new AbortController;const cancelled=Promise.withResolvers();const onAbort=()=>{cancelled.reject(new DOMException("Operation was cancelled","AbortError"));controller.abort()};request.signal.addEventListener("abort",onAbort,{once:true});if(operation.execution.mode==="synchronous"){try{const result=await runWithTimeout(async()=>await Promise.race([operation.handler({context,...idempotencyKey===undefined?{}:{idempotencyKey},input:body.input,signal:controller.signal}),cancelled.promise]),controller,operation.execution.timeoutMs);const resultBytes=jsonByteLength(result);if(resultBytes===null||resultBytes>operation.limits.maxResponseBytes||!validators.output(result)){return failure("internal_error","Gateway operation result violates its declared contract",correlationId)}return json2({correlationId,ok:true,result},200,correlationId)}catch(error){if(isGatewayOperationTimeoutError(error)){return failure("temporarily_unavailable",error.message,correlationId,operation.retry.mode==="idempotent_only")}if(!controller.signal.aborted&&error instanceof GatewayOperationError){return failure(error.code,error.message,correlationId)}if(!controller.signal.aborted&&error instanceof GatewayCallerAuthError){return failure(error.code,"Operation access denied",correlationId)}return failure(controller.signal.aborted?"execution_cancelled":"internal_error",controller.signal.aborted?"Operation was cancelled":"Gateway operation failed",correlationId,false)}finally{request.signal.removeEventListener("abort",onAbort)}}}return}};var normalizePath=(request)=>new URL(request.url).pathname.split("/").filter(Boolean).map((part)=>decodeURIComponent(part));var createGatewayKernel=(config)=>{const createCorrelationId=config.createCorrelationId??(()=>crypto.randomUUID());const maximumBody=config.maxBodyBytes??1048576;const datasets=createDatasetsHandler({gateway:config.gateway,maximumBody,verifyCaller:config.verifyCaller});const knowledge=createKnowledgeHandler({gateway:config.gateway,maximumBody,verifyCaller:config.verifyCaller});const operations=createOperationsHandler({gateway:config.gateway,maximumBody,verifyCaller:config.verifyCaller});const handle=async(request)=>{const correlationId=request.headers.get("x-correlation-id")?.match(/^[\w.-]{1,128}$/u)?.[0]??createCorrelationId();const path=normalizePath(request);if(request.method==="GET"&&path.join("/")===".well-known/collective-intelligence-gateway"){return json2({manifestUrl:"/v1/manifest",protocolVersions:[config.gateway.manifest.protocolVersion]})}if(request.method==="POST"&&path.join("/")==="v1/connections/package-enroll"){if(config.enrollPackageConnection===undefined){return failure("capability_not_supported","Package enrollment is unavailable",correlationId)}const callerToken=bearer(request);if(callerToken===null||callerToken.length>16384){return failure("unauthenticated","A narrow signed enrollment token is required",correlationId)}try{await config.enrollPackageConnection({callerToken,manifestHash:config.gateway.manifest.contentHash});return json2({enrolled:true,manifest:config.gateway.manifest},200,correlationId)}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId,error.code==="temporarily_unavailable")}return failure("temporarily_unavailable","Package enrollment is unavailable",correlationId,true)}}if(request.method==="POST"&&path.join("/")==="v1/connections/enroll"){if(config.enrollConnection===undefined){return failure("capability_not_supported","Connection enrollment is unavailable",correlationId)}const credential=bearer(request);if(credential===null){return failure("unauthenticated","A setup credential is required",correlationId)}try{const body=record2(await readResourceBody(request,maximumBody));if(typeof body?.callerToken!=="string"||body.callerToken.length===0||body.callerToken.length>16384){return failure("invalid_request","A signed discovery token is required",correlationId)}await config.enrollConnection({callerToken:body.callerToken,credential});return json2({enrolled:true},200,correlationId)}catch(error){if(error instanceof GatewayCallerAuthError){return failure(error.code,error.message,correlationId,error.code==="temporarily_unavailable")}return failure("temporarily_unavailable","Connection enrollment is unavailable",correlationId,true)}}if(request.method==="GET"&&path.join("/")==="v1/manifest"){const credential=bearer(request);let setupAuthorized=false;if(credential!==null&&config.verifySetupCredential!==undefined){try{setupAuthorized=await config.verifySetupCredential(credential)}catch{}}if(!setupAuthorized){const caller=await authenticate(config.verifyCaller,request,"connection:discover",correlationId);if(caller instanceof Response){return caller}}const response=json2(config.gateway.manifest);response.headers.set("cache-control","no-store");return response}if(request.method==="GET"&&path.join("/")==="v1/health"){return json2({gatewayId:config.gateway.manifest.id,protocolVersion:config.gateway.manifest.protocolVersion,status:"healthy"})}const datasetResponse=await datasets(request,path,correlationId);if(datasetResponse!==undefined){return datasetResponse}const knowledgeResponse=await knowledge(request,path,correlationId);if(knowledgeResponse!==undefined){return knowledgeResponse}const operationResponse=await operations(request,path,correlationId);if(operationResponse!==undefined){return operationResponse}return failure("not_found","Gateway route not found",correlationId)};return{handle,manifest:config.gateway.manifest}};var{createGatewayKernel:createGatewayKernel2}=exports_kernel;var{createGatewayIngestionClient:createGatewayIngestionClient2}=exports_client;var{defineGateway:defineGateway2,defineOperation:defineOperation2,defineOperationDomain:defineOperationDomain2}=exports_registry;export{GatewayIngestionError,GatewayOperationError,createGatewayIngestionClient2 as createGatewayIngestionClient,createGatewayKernel2 as createGatewayKernel,defineGateway2 as defineGateway,defineOperation2 as defineOperation,defineOperationDomain2 as defineOperationDomain};