@collective-intelligence/external-apps-server-sdk 0.1.6 → 0.1.8

package/dist/admin.d.ts

@@ -368,6 +368,11 @@ export type UpdatePackageInstallationRequestEncoded = {
 			};
 		};
 	};
+	variables?: {
+		[key: string]: {
+			link: string;
+		} | unknown;
+	};
 };
 export type PackageOperationAccepted2 = {
 	operationId: string;
@@ -457,6 +462,12 @@ export type ExtensionReleaseManifestEncoded = {
 		size: number;
 		[key: string]: unknown | string | string | "backend" | "dashboard" | "studio" | number | undefined;
 	}>;
+	media?: Array<{
+		digest: string;
+		path: string;
+		size: number;
+		[key: string]: unknown | string | string | number;
+	}>;
 	package: {
 		fqn: string;
 		version: string;
@@ -492,6 +503,11 @@ export type ExtensionReleaseManifestEncoded = {
 		host: "backend" | "dashboard" | "studio";
 		size: number;
 		[key: string]: unknown | string | string | "backend" | "dashboard" | "studio" | number | undefined;
+	}> | Array<{
+		digest: string;
+		path: string;
+		size: number;
+		[key: string]: unknown | string | string | number;
 	}> | {
 		fqn: string;
 		version: string;
@@ -1537,6 +1553,11 @@ export type ExtensionPackagesInstallData = {
 				};
 			};
 		};
+		variables?: {
+			[key: string]: {
+				link: string;
+			} | unknown;
+		};
 	};
 	headers: {
 		authorization?: string;
@@ -1875,6 +1896,7 @@ export type RelationSchemasUpdateData = {
 				indexOverview?: boolean;
 				indexed?: boolean;
 				managedProjectionSource?: "organization_group" | "organization_user";
+				mediaVisibility?: "public" | "protected" | "private";
 				queryGuidance?: string;
 				unique?: boolean;
 			};
@@ -1983,6 +2005,7 @@ export type RelationSchemasCreateData = {
 				indexOverview?: boolean;
 				indexed?: boolean;
 				managedProjectionSource?: "organization_group" | "organization_user";
+				mediaVisibility?: "public" | "protected" | "private";
 				queryGuidance?: string;
 				unique?: boolean;
 			};
@@ -2228,6 +2251,7 @@ export type EntitySchemasUpdateData = {
 				indexOverview?: boolean;
 				indexed?: boolean;
 				managedProjectionSource?: "organization_group" | "organization_user";
+				mediaVisibility?: "public" | "protected" | "private";
 				queryGuidance?: string;
 				unique?: boolean;
 			};
@@ -2362,6 +2386,7 @@ export type EntitySchemasCreateData = {
 				indexOverview?: boolean;
 				indexed?: boolean;
 				managedProjectionSource?: "organization_group" | "organization_user";
+				mediaVisibility?: "public" | "protected" | "private";
 				queryGuidance?: string;
 				unique?: boolean;
 			};
@@ -2904,6 +2929,7 @@ export type OrganizationsGetData = {
 };
 export type OrganizationsUpdateData = {
 	body: {
+		applicationConsentRequired?: boolean;
 		availableLanguages?: Array<string>;
 		coverFileId?: string | null;
 		defaultKnowledgePropertyCase?: "camel_case" | "snake_case";
@@ -3737,6 +3763,7 @@ export type OrganizationExternalAppsListResponses = {
 	200: {
 		data: Array<{
 			allowedOrigins: Array<string>;
+			applicationConsent: "inherit" | "ask" | "skip";
 			applicationType: "public" | "confidential";
 			audience: string;
 			clientId: string;
@@ -3774,6 +3801,7 @@ export type OrganizationExternalAppsCreateResponses = {
 	201: {
 		application: {
 			allowedOrigins: Array<string>;
+			applicationConsent: "inherit" | "ask" | "skip";
 			applicationType: "public" | "confidential";
 			audience: string;
 			clientId: string;
@@ -3805,6 +3833,7 @@ export type OrganizationExternalAppsCreateResponses = {
 	} | {
 		application: {
 			allowedOrigins: Array<string>;
+			applicationConsent: "inherit" | "ask" | "skip";
 			applicationType: "public" | "confidential";
 			audience: string;
 			clientId: string;
@@ -3843,6 +3872,7 @@ export type OrganizationExternalAppsGetResponses = {
 	 */
 	200: {
 		allowedOrigins: Array<string>;
+		applicationConsent: "inherit" | "ask" | "skip";
 		applicationType: "public" | "confidential";
 		audience: string;
 		clientId: string;
@@ -3875,6 +3905,7 @@ export type OrganizationExternalAppsGetResponse = OrganizationExternalAppsGetRes
 export type OrganizationExternalAppsUpdateData = {
 	body: {
 		allowedOrigins?: Array<string>;
+		applicationConsent?: "inherit" | "ask" | "skip";
 		audience?: string;
 		enabled?: boolean;
 		name?: string;
@@ -3914,6 +3945,7 @@ export type OrganizationExternalAppsRotateCredentialResponses = {
 	200: {
 		application: {
 			allowedOrigins: Array<string>;
+			applicationConsent: "inherit" | "ask" | "skip";
 			applicationType: "public" | "confidential";
 			audience: string;
 			clientId: string;
@@ -4655,18 +4687,26 @@ declare const createAdministrationApi: (client: Client$1) => {
 			type: string;
 		}>;
 		listSsoProviders: (options: Pick<Options$1<OrganizationAuthenticationListProvidersData, true, unknown>, "query" | "body" | "headers" | "path">) => Promise<{
-			connectionId: string | null;
-			connectionName: string | null;
-			connectionStatus: string | null;
-			defaultRole: "organization_admin" | "organization_user";
-			domains: Array<string>;
-			enabled: boolean;
-			id: string;
-			provisionMembers: boolean;
-			testedAt: string | null;
-			testedEmail: string | null;
-			type: string;
-		}[]>;
+			applicationConsentRequired: boolean;
+			managedSettings: {
+				keys: Array<"identity.name" | "identity.companyDomains" | "branding.logo" | "branding.icon" | "branding.cover" | "authentication.password" | "authentication.otp" | "authentication.sso" | "authentication.applicationConsent" | "locale.defaultLanguage" | "locale.languages" | "locale.timezone" | "governance.accessAuditRetentionMonths" | "governance.maxGroupHierarchyDepth">;
+				packageFqn: string;
+				readonly: boolean;
+			} | null;
+			providers: Array<{
+				connectionId: string | null;
+				connectionName: string | null;
+				connectionStatus: string | null;
+				defaultRole: "organization_admin" | "organization_user";
+				domains: Array<string>;
+				enabled: boolean;
+				id: string;
+				provisionMembers: boolean;
+				testedAt: string | null;
+				testedEmail: string | null;
+				type: string;
+			}>;
+		}>;
 		testSsoProvider: (options: Pick<Options$1<OrganizationAuthenticationStartSsoTestData, true, unknown>, "query" | "body" | "headers" | "path">) => Promise<{
 			callbackUrl: string;
 			url: string;
@@ -6332,6 +6372,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 					indexOverview?: boolean;
 					indexed?: boolean;
 					managedProjectionSource?: "organization_group" | "organization_user";
+					mediaVisibility?: "public" | "protected" | "private";
 					queryGuidance?: string;
 					unique?: boolean;
 				};
@@ -6437,6 +6478,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 					indexOverview?: boolean;
 					indexed?: boolean;
 					managedProjectionSource?: "organization_group" | "organization_user";
+					mediaVisibility?: "public" | "protected" | "private";
 					queryGuidance?: string;
 					unique?: boolean;
 				};
@@ -6563,6 +6605,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 					indexOverview?: boolean;
 					indexed?: boolean;
 					managedProjectionSource?: "organization_group" | "organization_user";
+					mediaVisibility?: "public" | "protected" | "private";
 					queryGuidance?: string;
 					unique?: boolean;
 				};
@@ -6668,6 +6711,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 					indexOverview?: boolean;
 					indexed?: boolean;
 					managedProjectionSource?: "organization_group" | "organization_user";
+					mediaVisibility?: "public" | "protected" | "private";
 					queryGuidance?: string;
 					unique?: boolean;
 				};
@@ -6789,6 +6833,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 						indexOverview?: boolean;
 						indexed?: boolean;
 						managedProjectionSource?: "organization_group" | "organization_user";
+						mediaVisibility?: "public" | "protected" | "private";
 						queryGuidance?: string;
 						unique?: boolean;
 					};
@@ -6902,6 +6947,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 						indexOverview?: boolean;
 						indexed?: boolean;
 						managedProjectionSource?: "organization_group" | "organization_user";
+						mediaVisibility?: "public" | "protected" | "private";
 						queryGuidance?: string;
 						unique?: boolean;
 					};
@@ -6985,6 +7031,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 			teardownId: string;
 		}>;
 		get: (options: Pick<Options$1<OrganizationsGetData, true, unknown>, "query" | "body" | "headers" | "path">) => Promise<{
+			applicationConsentRequired: boolean;
 			availableLanguages: Array<string>;
 			coverFileId: string | null;
 			createdAt: string | null;
@@ -6996,6 +7043,11 @@ declare const createAdministrationApi: (client: Client$1) => {
 			iconFileId: string | null;
 			id: string;
 			logoFileId: string | null;
+			managedSettings?: {
+				keys: Array<"identity.name" | "identity.companyDomains" | "branding.logo" | "branding.icon" | "branding.cover" | "authentication.password" | "authentication.otp" | "authentication.sso" | "authentication.applicationConsent" | "locale.defaultLanguage" | "locale.languages" | "locale.timezone" | "governance.accessAuditRetentionMonths" | "governance.maxGroupHierarchyDepth">;
+				packageFqn: string;
+				readonly: boolean;
+			} | null;
 			maxGroupHierarchyDepth: number;
 			meta: string | null;
 			name: string;
@@ -7017,6 +7069,7 @@ declare const createAdministrationApi: (client: Client$1) => {
 		}>;
 		list: (options: Pick<Options$1<OrganizationsSearchData, true, unknown>, "query" | "body" | "headers" | "path">) => Promise<{
 			data: Array<{
+				applicationConsentRequired: boolean;
 				availableLanguages: Array<string>;
 				coverFileId: string | null;
 				createdAt: string | null;
@@ -7028,6 +7081,11 @@ declare const createAdministrationApi: (client: Client$1) => {
 				iconFileId: string | null;
 				id: string;
 				logoFileId: string | null;
+				managedSettings?: {
+					keys: Array<"identity.name" | "identity.companyDomains" | "branding.logo" | "branding.icon" | "branding.cover" | "authentication.password" | "authentication.otp" | "authentication.sso" | "authentication.applicationConsent" | "locale.defaultLanguage" | "locale.languages" | "locale.timezone" | "governance.accessAuditRetentionMonths" | "governance.maxGroupHierarchyDepth">;
+					packageFqn: string;
+					readonly: boolean;
+				} | null;
 				maxGroupHierarchyDepth: number;
 				meta: string | null;
 				name: string;

package/dist/express.d.ts

@@ -93,66 +93,6 @@ export type PackageSchemaProjection = Readonly<{
 	document: JsonSchemaDocument;
 	fidelity: ProjectionFidelity;
 }>;
-/** Closed public principal vocabulary accepted by a gateway operation. */
-export type PortableOperationPrincipalKind = "detached_user" | "service_principal";
-/** Explicit delegated-subject requirement reviewed with an operation. */
-export type PortableOperationDelegatedSubjectPolicy = "allowed" | "forbidden" | "required";
-/** Fully materialized authorization policy for one exposed operation. */
-export type PortableOperationAuthorization = Readonly<{
-	delegatedSubject: PortableOperationDelegatedSubjectPolicy;
-	organization: "required";
-	principalKinds: readonly PortableOperationPrincipalKind[];
-	scopes: readonly string[];
-}>;
-/** Observable side-effect class reviewed before an operation becomes a tool. */
-export type PortableOperationEffect = "external_side_effect" | "read" | "write";
-/** The replay guarantee supplied by the operation implementation. */
-export type PortableOperationIdempotency = "idempotent" | "requires_key" | "safe";
-/** Explicit, bounded retry permission for callers of the operation. */
-export type PortableOperationRetryPolicy = Readonly<{
-	mode: "never";
-}> | Readonly<{
-	maxAttempts: number;
-	mode: "idempotent_only";
-}>;
-/** Execution lifecycle and maximum wall-clock duration. */
-export type PortableOperationExecutionPolicy = Readonly<{
-	mode: "synchronous";
-	timeoutMs: number;
-}>;
-/** Per-invocation transport bounds. */
-export type PortableOperationLimits = Readonly<{
-	maxRequestBytes: number;
-	maxResponseBytes: number;
-}>;
-/**
- * Complete JSON-only operation contract reviewed by a host. Executable
- * handlers remain in a server runtime sidecar and never enter this descriptor.
- */
-export type PortableOperationDeclaration = Readonly<{
-	authorization: PortableOperationAuthorization;
-	description: string;
-	effects: PortableOperationEffect;
-	execution: PortableOperationExecutionPolicy;
-	id: string;
-	idempotency: PortableOperationIdempotency;
-	input: PackageSchemaProjection;
-	limits: PortableOperationLimits;
-	output: PackageSchemaProjection;
-	retry: PortableOperationRetryPolicy;
-	title: string;
-	version: string;
-}>;
-/** One catalog and identity namespace for an ordered operation list. */
-export type OperationDomainDeclaration<Operation extends PortableOperationDeclaration = PortableOperationDeclaration> = Readonly<{
-	description?: string;
-	displayOrder?: number;
-	icon?: string;
-	id: string;
-	operations: readonly Operation[];
-	tags?: readonly string[];
-	title: string;
-}>;
 export type DatasetProviderResult<Value> = Readonly<{
 	status: "success";
 	value: Value;
@@ -361,6 +301,66 @@ export type DatasetProviderError = Readonly<{
 	retryAfterMs?: number;
 	diagnostics: readonly SafeDiagnostic[];
 }>;
+/** Closed public principal vocabulary accepted by a gateway operation. */
+export type PortableOperationPrincipalKind = "detached_user" | "service_principal";
+/** Explicit delegated-subject requirement reviewed with an operation. */
+export type PortableOperationDelegatedSubjectPolicy = "allowed" | "forbidden" | "required";
+/** Fully materialized authorization policy for one exposed operation. */
+export type PortableOperationAuthorization = Readonly<{
+	delegatedSubject: PortableOperationDelegatedSubjectPolicy;
+	organization: "required";
+	principalKinds: readonly PortableOperationPrincipalKind[];
+	scopes: readonly string[];
+}>;
+/** Observable side-effect class reviewed before an operation becomes a tool. */
+export type PortableOperationEffect = "external_side_effect" | "read" | "write";
+/** The replay guarantee supplied by the operation implementation. */
+export type PortableOperationIdempotency = "idempotent" | "requires_key" | "safe";
+/** Explicit, bounded retry permission for callers of the operation. */
+export type PortableOperationRetryPolicy = Readonly<{
+	mode: "never";
+}> | Readonly<{
+	maxAttempts: number;
+	mode: "idempotent_only";
+}>;
+/** Execution lifecycle and maximum wall-clock duration. */
+export type PortableOperationExecutionPolicy = Readonly<{
+	mode: "synchronous";
+	timeoutMs: number;
+}>;
+/** Per-invocation transport bounds. */
+export type PortableOperationLimits = Readonly<{
+	maxRequestBytes: number;
+	maxResponseBytes: number;
+}>;
+/**
+ * Complete JSON-only operation contract reviewed by a host. Executable
+ * handlers remain in a server runtime sidecar and never enter this descriptor.
+ */
+export type PortableOperationDeclaration = Readonly<{
+	authorization: PortableOperationAuthorization;
+	description: string;
+	effects: PortableOperationEffect;
+	execution: PortableOperationExecutionPolicy;
+	id: string;
+	idempotency: PortableOperationIdempotency;
+	input: PackageSchemaProjection;
+	limits: PortableOperationLimits;
+	output: PackageSchemaProjection;
+	retry: PortableOperationRetryPolicy;
+	title: string;
+	version: string;
+}>;
+/** One catalog and identity namespace for an ordered operation list. */
+export type OperationDomainDeclaration<Operation extends PortableOperationDeclaration = PortableOperationDeclaration> = Readonly<{
+	description?: string;
+	displayOrder?: number;
+	icon?: string;
+	id: string;
+	operations: readonly Operation[];
+	tags?: readonly string[];
+	title: string;
+}>;
 export type ResourceJsonValue = null | boolean | number | string | readonly ResourceJsonValue[] | Readonly<{
 	[key: string]: ResourceJsonValue;
 }>;

package/dist/gateway/contracts.d.ts

@@ -60,66 +60,6 @@ export type PackageSchemaProjection = Readonly<{
 	document: JsonSchemaDocument;
 	fidelity: ProjectionFidelity;
 }>;
-/** Closed public principal vocabulary accepted by a gateway operation. */
-export type PortableOperationPrincipalKind = "detached_user" | "service_principal";
-/** Explicit delegated-subject requirement reviewed with an operation. */
-export type PortableOperationDelegatedSubjectPolicy = "allowed" | "forbidden" | "required";
-/** Fully materialized authorization policy for one exposed operation. */
-export type PortableOperationAuthorization = Readonly<{
-	delegatedSubject: PortableOperationDelegatedSubjectPolicy;
-	organization: "required";
-	principalKinds: readonly PortableOperationPrincipalKind[];
-	scopes: readonly string[];
-}>;
-/** Observable side-effect class reviewed before an operation becomes a tool. */
-export type PortableOperationEffect = "external_side_effect" | "read" | "write";
-/** The replay guarantee supplied by the operation implementation. */
-export type PortableOperationIdempotency = "idempotent" | "requires_key" | "safe";
-/** Explicit, bounded retry permission for callers of the operation. */
-export type PortableOperationRetryPolicy = Readonly<{
-	mode: "never";
-}> | Readonly<{
-	maxAttempts: number;
-	mode: "idempotent_only";
-}>;
-/** Execution lifecycle and maximum wall-clock duration. */
-export type PortableOperationExecutionPolicy = Readonly<{
-	mode: "synchronous";
-	timeoutMs: number;
-}>;
-/** Per-invocation transport bounds. */
-export type PortableOperationLimits = Readonly<{
-	maxRequestBytes: number;
-	maxResponseBytes: number;
-}>;
-/**
- * Complete JSON-only operation contract reviewed by a host. Executable
- * handlers remain in a server runtime sidecar and never enter this descriptor.
- */
-export type PortableOperationDeclaration = Readonly<{
-	authorization: PortableOperationAuthorization;
-	description: string;
-	effects: PortableOperationEffect;
-	execution: PortableOperationExecutionPolicy;
-	id: string;
-	idempotency: PortableOperationIdempotency;
-	input: PackageSchemaProjection;
-	limits: PortableOperationLimits;
-	output: PackageSchemaProjection;
-	retry: PortableOperationRetryPolicy;
-	title: string;
-	version: string;
-}>;
-/** One catalog and identity namespace for an ordered operation list. */
-export type OperationDomainDeclaration<Operation extends PortableOperationDeclaration = PortableOperationDeclaration> = Readonly<{
-	description?: string;
-	displayOrder?: number;
-	icon?: string;
-	id: string;
-	operations: readonly Operation[];
-	tags?: readonly string[];
-	title: string;
-}>;
 export type DatasetProviderResult<Value> = Readonly<{
 	status: "success";
 	value: Value;
@@ -328,6 +268,66 @@ export type DatasetProviderError = Readonly<{
 	retryAfterMs?: number;
 	diagnostics: readonly SafeDiagnostic[];
 }>;
+/** Closed public principal vocabulary accepted by a gateway operation. */
+export type PortableOperationPrincipalKind = "detached_user" | "service_principal";
+/** Explicit delegated-subject requirement reviewed with an operation. */
+export type PortableOperationDelegatedSubjectPolicy = "allowed" | "forbidden" | "required";
+/** Fully materialized authorization policy for one exposed operation. */
+export type PortableOperationAuthorization = Readonly<{
+	delegatedSubject: PortableOperationDelegatedSubjectPolicy;
+	organization: "required";
+	principalKinds: readonly PortableOperationPrincipalKind[];
+	scopes: readonly string[];
+}>;
+/** Observable side-effect class reviewed before an operation becomes a tool. */
+export type PortableOperationEffect = "external_side_effect" | "read" | "write";
+/** The replay guarantee supplied by the operation implementation. */
+export type PortableOperationIdempotency = "idempotent" | "requires_key" | "safe";
+/** Explicit, bounded retry permission for callers of the operation. */
+export type PortableOperationRetryPolicy = Readonly<{
+	mode: "never";
+}> | Readonly<{
+	maxAttempts: number;
+	mode: "idempotent_only";
+}>;
+/** Execution lifecycle and maximum wall-clock duration. */
+export type PortableOperationExecutionPolicy = Readonly<{
+	mode: "synchronous";
+	timeoutMs: number;
+}>;
+/** Per-invocation transport bounds. */
+export type PortableOperationLimits = Readonly<{
+	maxRequestBytes: number;
+	maxResponseBytes: number;
+}>;
+/**
+ * Complete JSON-only operation contract reviewed by a host. Executable
+ * handlers remain in a server runtime sidecar and never enter this descriptor.
+ */
+export type PortableOperationDeclaration = Readonly<{
+	authorization: PortableOperationAuthorization;
+	description: string;
+	effects: PortableOperationEffect;
+	execution: PortableOperationExecutionPolicy;
+	id: string;
+	idempotency: PortableOperationIdempotency;
+	input: PackageSchemaProjection;
+	limits: PortableOperationLimits;
+	output: PackageSchemaProjection;
+	retry: PortableOperationRetryPolicy;
+	title: string;
+	version: string;
+}>;
+/** One catalog and identity namespace for an ordered operation list. */
+export type OperationDomainDeclaration<Operation extends PortableOperationDeclaration = PortableOperationDeclaration> = Readonly<{
+	description?: string;
+	displayOrder?: number;
+	icon?: string;
+	id: string;
+	operations: readonly Operation[];
+	tags?: readonly string[];
+	title: string;
+}>;
 export type ResourceJsonValue = null | boolean | number | string | readonly ResourceJsonValue[] | Readonly<{
 	[key: string]: ResourceJsonValue;
 }>;

package/dist/gateway.d.ts

@@ -101,66 +101,6 @@ export type PackageSchemaProjection = Readonly<{
 	document: JsonSchemaDocument;
 	fidelity: ProjectionFidelity;
 }>;
-/** Closed public principal vocabulary accepted by a gateway operation. */
-export type PortableOperationPrincipalKind = "detached_user" | "service_principal";
-/** Explicit delegated-subject requirement reviewed with an operation. */
-export type PortableOperationDelegatedSubjectPolicy = "allowed" | "forbidden" | "required";
-/** Fully materialized authorization policy for one exposed operation. */
-export type PortableOperationAuthorization = Readonly<{
-	delegatedSubject: PortableOperationDelegatedSubjectPolicy;
-	organization: "required";
-	principalKinds: readonly PortableOperationPrincipalKind[];
-	scopes: readonly string[];
-}>;
-/** Observable side-effect class reviewed before an operation becomes a tool. */
-export type PortableOperationEffect = "external_side_effect" | "read" | "write";
-/** The replay guarantee supplied by the operation implementation. */
-export type PortableOperationIdempotency = "idempotent" | "requires_key" | "safe";
-/** Explicit, bounded retry permission for callers of the operation. */
-export type PortableOperationRetryPolicy = Readonly<{
-	mode: "never";
-}> | Readonly<{
-	maxAttempts: number;
-	mode: "idempotent_only";
-}>;
-/** Execution lifecycle and maximum wall-clock duration. */
-export type PortableOperationExecutionPolicy = Readonly<{
-	mode: "synchronous";
-	timeoutMs: number;
-}>;
-/** Per-invocation transport bounds. */
-export type PortableOperationLimits = Readonly<{
-	maxRequestBytes: number;
-	maxResponseBytes: number;
-}>;
-/**
- * Complete JSON-only operation contract reviewed by a host. Executable
- * handlers remain in a server runtime sidecar and never enter this descriptor.
- */
-export type PortableOperationDeclaration = Readonly<{
-	authorization: PortableOperationAuthorization;
-	description: string;
-	effects: PortableOperationEffect;
-	execution: PortableOperationExecutionPolicy;
-	id: string;
-	idempotency: PortableOperationIdempotency;
-	input: PackageSchemaProjection;
-	limits: PortableOperationLimits;
-	output: PackageSchemaProjection;
-	retry: PortableOperationRetryPolicy;
-	title: string;
-	version: string;
-}>;
-/** One catalog and identity namespace for an ordered operation list. */
-export type OperationDomainDeclaration<Operation extends PortableOperationDeclaration = PortableOperationDeclaration> = Readonly<{
-	description?: string;
-	displayOrder?: number;
-	icon?: string;
-	id: string;
-	operations: readonly Operation[];
-	tags?: readonly string[];
-	title: string;
-}>;
 export type DatasetProviderResult<Value> = Readonly<{
 	status: "success";
 	value: Value;
@@ -369,6 +309,66 @@ export type DatasetProviderError = Readonly<{
 	retryAfterMs?: number;
 	diagnostics: readonly SafeDiagnostic[];
 }>;
+/** Closed public principal vocabulary accepted by a gateway operation. */
+export type PortableOperationPrincipalKind = "detached_user" | "service_principal";
+/** Explicit delegated-subject requirement reviewed with an operation. */
+export type PortableOperationDelegatedSubjectPolicy = "allowed" | "forbidden" | "required";
+/** Fully materialized authorization policy for one exposed operation. */
+export type PortableOperationAuthorization = Readonly<{
+	delegatedSubject: PortableOperationDelegatedSubjectPolicy;
+	organization: "required";
+	principalKinds: readonly PortableOperationPrincipalKind[];
+	scopes: readonly string[];
+}>;
+/** Observable side-effect class reviewed before an operation becomes a tool. */
+export type PortableOperationEffect = "external_side_effect" | "read" | "write";
+/** The replay guarantee supplied by the operation implementation. */
+export type PortableOperationIdempotency = "idempotent" | "requires_key" | "safe";
+/** Explicit, bounded retry permission for callers of the operation. */
+export type PortableOperationRetryPolicy = Readonly<{
+	mode: "never";
+}> | Readonly<{
+	maxAttempts: number;
+	mode: "idempotent_only";
+}>;
+/** Execution lifecycle and maximum wall-clock duration. */
+export type PortableOperationExecutionPolicy = Readonly<{
+	mode: "synchronous";
+	timeoutMs: number;
+}>;
+/** Per-invocation transport bounds. */
+export type PortableOperationLimits = Readonly<{
+	maxRequestBytes: number;
+	maxResponseBytes: number;
+}>;
+/**
+ * Complete JSON-only operation contract reviewed by a host. Executable
+ * handlers remain in a server runtime sidecar and never enter this descriptor.
+ */
+export type PortableOperationDeclaration = Readonly<{
+	authorization: PortableOperationAuthorization;
+	description: string;
+	effects: PortableOperationEffect;
+	execution: PortableOperationExecutionPolicy;
+	id: string;
+	idempotency: PortableOperationIdempotency;
+	input: PackageSchemaProjection;
+	limits: PortableOperationLimits;
+	output: PackageSchemaProjection;
+	retry: PortableOperationRetryPolicy;
+	title: string;
+	version: string;
+}>;
+/** One catalog and identity namespace for an ordered operation list. */
+export type OperationDomainDeclaration<Operation extends PortableOperationDeclaration = PortableOperationDeclaration> = Readonly<{
+	description?: string;
+	displayOrder?: number;
+	icon?: string;
+	id: string;
+	operations: readonly Operation[];
+	tags?: readonly string[];
+	title: string;
+}>;
 export type ResourceJsonValue = null | boolean | number | string | readonly ResourceJsonValue[] | Readonly<{
 	[key: string]: ResourceJsonValue;
 }>;