@flowdesk/core 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (142) hide show
  1. package/dist/authority-promotion.d.ts +70 -0
  2. package/dist/authority-promotion.d.ts.map +1 -0
  3. package/dist/authority-promotion.js +388 -0
  4. package/dist/authority-promotion.js.map +1 -0
  5. package/dist/chat-control-authority.d.ts +83 -0
  6. package/dist/chat-control-authority.d.ts.map +1 -0
  7. package/dist/chat-control-authority.js +238 -0
  8. package/dist/chat-control-authority.js.map +1 -0
  9. package/dist/chat-hook-authority-probe.d.ts +39 -0
  10. package/dist/chat-hook-authority-probe.d.ts.map +1 -0
  11. package/dist/chat-hook-authority-probe.js +153 -0
  12. package/dist/chat-hook-authority-probe.js.map +1 -0
  13. package/dist/chat-routing.d.ts.map +1 -1
  14. package/dist/chat-routing.js +18 -15
  15. package/dist/chat-routing.js.map +1 -1
  16. package/dist/connector-gateway.d.ts +34 -0
  17. package/dist/connector-gateway.d.ts.map +1 -0
  18. package/dist/connector-gateway.js +147 -0
  19. package/dist/connector-gateway.js.map +1 -0
  20. package/dist/connector-profile.d.ts +41 -0
  21. package/dist/connector-profile.d.ts.map +1 -0
  22. package/dist/connector-profile.js +125 -0
  23. package/dist/connector-profile.js.map +1 -0
  24. package/dist/controlled-conformance-doc-write.d.ts +44 -0
  25. package/dist/controlled-conformance-doc-write.d.ts.map +1 -0
  26. package/dist/controlled-conformance-doc-write.js +142 -0
  27. package/dist/controlled-conformance-doc-write.js.map +1 -0
  28. package/dist/controlled-redacted-audit-export-write.d.ts +45 -0
  29. package/dist/controlled-redacted-audit-export-write.d.ts.map +1 -0
  30. package/dist/controlled-redacted-audit-export-write.js +145 -0
  31. package/dist/controlled-redacted-audit-export-write.js.map +1 -0
  32. package/dist/core-completion-safety-contracts.d.ts +35 -0
  33. package/dist/core-completion-safety-contracts.d.ts.map +1 -0
  34. package/dist/core-completion-safety-contracts.js +98 -0
  35. package/dist/core-completion-safety-contracts.js.map +1 -0
  36. package/dist/dispatch-attempt-manifest.d.ts +59 -0
  37. package/dist/dispatch-attempt-manifest.d.ts.map +1 -0
  38. package/dist/dispatch-attempt-manifest.js +294 -0
  39. package/dist/dispatch-attempt-manifest.js.map +1 -0
  40. package/dist/dispatch-idempotency.d.ts +89 -0
  41. package/dist/dispatch-idempotency.d.ts.map +1 -0
  42. package/dist/dispatch-idempotency.js +275 -0
  43. package/dist/dispatch-idempotency.js.map +1 -0
  44. package/dist/external-auth-policy.d.ts +49 -0
  45. package/dist/external-auth-policy.d.ts.map +1 -0
  46. package/dist/external-auth-policy.js +166 -0
  47. package/dist/external-auth-policy.js.map +1 -0
  48. package/dist/fake-remote-connector-adapter.d.ts +37 -0
  49. package/dist/fake-remote-connector-adapter.d.ts.map +1 -0
  50. package/dist/fake-remote-connector-adapter.js +162 -0
  51. package/dist/fake-remote-connector-adapter.js.map +1 -0
  52. package/dist/fallback-decision.d.ts +29 -0
  53. package/dist/fallback-decision.d.ts.map +1 -0
  54. package/dist/fallback-decision.js +93 -0
  55. package/dist/fallback-decision.js.map +1 -0
  56. package/dist/fallback-regate-plan.d.ts +34 -0
  57. package/dist/fallback-regate-plan.d.ts.map +1 -0
  58. package/dist/fallback-regate-plan.js +122 -0
  59. package/dist/fallback-regate-plan.js.map +1 -0
  60. package/dist/fds1-schema-probe-result.d.ts +37 -0
  61. package/dist/fds1-schema-probe-result.d.ts.map +1 -0
  62. package/dist/fds1-schema-probe-result.js +115 -0
  63. package/dist/fds1-schema-probe-result.js.map +1 -0
  64. package/dist/index.d.ts +25 -0
  65. package/dist/index.d.ts.map +1 -1
  66. package/dist/index.js +25 -0
  67. package/dist/index.js.map +1 -1
  68. package/dist/lane-heartbeat.d.ts +49 -0
  69. package/dist/lane-heartbeat.d.ts.map +1 -0
  70. package/dist/lane-heartbeat.js +149 -0
  71. package/dist/lane-heartbeat.js.map +1 -0
  72. package/dist/lane-lifecycle-record.d.ts +32 -0
  73. package/dist/lane-lifecycle-record.d.ts.map +1 -0
  74. package/dist/lane-lifecycle-record.js +134 -0
  75. package/dist/lane-lifecycle-record.js.map +1 -0
  76. package/dist/lane-stall-projection.d.ts +43 -0
  77. package/dist/lane-stall-projection.d.ts.map +1 -0
  78. package/dist/lane-stall-projection.js +272 -0
  79. package/dist/lane-stall-projection.js.map +1 -0
  80. package/dist/model-availability-cache.d.ts +286 -0
  81. package/dist/model-availability-cache.d.ts.map +1 -0
  82. package/dist/model-availability-cache.js +1109 -0
  83. package/dist/model-availability-cache.js.map +1 -0
  84. package/dist/operational-intelligence.d.ts +38 -0
  85. package/dist/operational-intelligence.d.ts.map +1 -0
  86. package/dist/operational-intelligence.js +107 -0
  87. package/dist/operational-intelligence.js.map +1 -0
  88. package/dist/production-approval-source.d.ts +61 -0
  89. package/dist/production-approval-source.d.ts.map +1 -0
  90. package/dist/production-approval-source.js +226 -0
  91. package/dist/production-approval-source.js.map +1 -0
  92. package/dist/production-enablement.d.ts +92 -1
  93. package/dist/production-enablement.d.ts.map +1 -1
  94. package/dist/production-enablement.js +421 -8
  95. package/dist/production-enablement.js.map +1 -1
  96. package/dist/production-verification.d.ts +31 -0
  97. package/dist/production-verification.d.ts.map +1 -0
  98. package/dist/production-verification.js +126 -0
  99. package/dist/production-verification.js.map +1 -0
  100. package/dist/provider-usage-collector.d.ts +7 -0
  101. package/dist/provider-usage-collector.d.ts.map +1 -1
  102. package/dist/provider-usage-collector.js +64 -10
  103. package/dist/provider-usage-collector.js.map +1 -1
  104. package/dist/release1-contracts.d.ts +8 -2
  105. package/dist/release1-contracts.d.ts.map +1 -1
  106. package/dist/release1-contracts.js +2 -1
  107. package/dist/release1-contracts.js.map +1 -1
  108. package/dist/remote-write-connector-gate.d.ts +91 -0
  109. package/dist/remote-write-connector-gate.d.ts.map +1 -0
  110. package/dist/remote-write-connector-gate.js +291 -0
  111. package/dist/remote-write-connector-gate.js.map +1 -0
  112. package/dist/runtime-lane-productization.d.ts +78 -0
  113. package/dist/runtime-lane-productization.d.ts.map +1 -0
  114. package/dist/runtime-lane-productization.js +270 -0
  115. package/dist/runtime-lane-productization.js.map +1 -0
  116. package/dist/sanitized-auth-capture.d.ts +50 -0
  117. package/dist/sanitized-auth-capture.d.ts.map +1 -0
  118. package/dist/sanitized-auth-capture.js +164 -0
  119. package/dist/sanitized-auth-capture.js.map +1 -0
  120. package/dist/schema-artifacts.d.ts.map +1 -1
  121. package/dist/schema-artifacts.js +37 -6
  122. package/dist/schema-artifacts.js.map +1 -1
  123. package/dist/schema-registry.d.ts.map +1 -1
  124. package/dist/schema-registry.js +21 -0
  125. package/dist/schema-registry.js.map +1 -1
  126. package/dist/session-evidence.d.ts +117 -0
  127. package/dist/session-evidence.d.ts.map +1 -1
  128. package/dist/session-evidence.js +569 -1
  129. package/dist/session-evidence.js.map +1 -1
  130. package/dist/state-paths.d.ts +1 -1
  131. package/dist/state-paths.d.ts.map +1 -1
  132. package/dist/state-paths.js +56 -6
  133. package/dist/state-paths.js.map +1 -1
  134. package/dist/status.d.ts +7 -0
  135. package/dist/status.d.ts.map +1 -1
  136. package/dist/status.js +89 -1
  137. package/dist/status.js.map +1 -1
  138. package/dist/validators.d.ts +1 -0
  139. package/dist/validators.d.ts.map +1 -1
  140. package/dist/validators.js +30 -7
  141. package/dist/validators.js.map +1 -1
  142. package/package.json +1 -1
@@ -0,0 +1,78 @@
1
+ import type { SafeNextAction } from "./release1-contracts.js";
2
+ import { type FlowDeskLaneLifecycleRecordV1 } from "./lane-lifecycle-record.js";
3
+ import { type ValidationResult } from "./validators.js";
4
+ export declare const FLOWDESK_RUNTIME_LANE_LAUNCH_REASONS: readonly ["reviewer_fanout", "runtime_observation", "diagnostic_lane"];
5
+ export type FlowDeskRuntimeLaneLaunchReasonV1 = (typeof FLOWDESK_RUNTIME_LANE_LAUNCH_REASONS)[number];
6
+ export interface FlowDeskRuntimeLaneLaunchRequestV1 {
7
+ schema_version: "flowdesk.runtime_lane_launch_request.v1";
8
+ launch_request_id: string;
9
+ workflow_id: string;
10
+ attempt_id: string;
11
+ lane_id: string;
12
+ parent_session_ref: string;
13
+ agent_ref: string;
14
+ provider_qualified_model_id: string;
15
+ launch_reason: FlowDeskRuntimeLaneLaunchReasonV1;
16
+ pre_launch_audit_ref?: string;
17
+ lane_launch_approval_ref?: string;
18
+ requested_at: string;
19
+ timeout_ms: number;
20
+ orphan_max_age_ms: number;
21
+ retry_budget: number;
22
+ dispatch_authority_enabled: false;
23
+ providerCall: false;
24
+ actualLaneLaunch: false;
25
+ runtimeExecution: false;
26
+ }
27
+ export interface FlowDeskRuntimeLaneLaunchPlanV1 extends ValidationResult {
28
+ schema_version: "flowdesk.runtime_lane_launch_plan.v1";
29
+ launch_request_id?: string;
30
+ workflow_id?: string;
31
+ attempt_id?: string;
32
+ lane_id?: string;
33
+ state: "launch_ready" | "blocked";
34
+ blocked_labels: string[];
35
+ parent_session_ref?: string;
36
+ agent_ref?: string;
37
+ provider_qualified_model_id?: string;
38
+ launch_reason?: FlowDeskRuntimeLaneLaunchReasonV1;
39
+ pre_launch_audit_ref?: string;
40
+ lane_launch_approval_ref?: string;
41
+ durable_evidence_root_ref?: string;
42
+ lifecycle_evidence_class: "lane_lifecycle";
43
+ exact_binding_confirmed: boolean;
44
+ sdk_client_required: true;
45
+ launch_attempted: false;
46
+ dispatch_authority_enabled: false;
47
+ providerCall: false;
48
+ actualLaneLaunch: false;
49
+ runtimeExecution: false;
50
+ }
51
+ export interface FlowDeskRuntimeLaneLifecycleProjectionV1 extends ValidationResult {
52
+ schema_version: "flowdesk.runtime_lane_lifecycle_projection.v1";
53
+ workflow_id?: string;
54
+ attempt_id?: string;
55
+ lane_id?: string;
56
+ projection_state: "launch_ready" | "blocked" | "complete_with_verdict" | "terminal_non_approval" | "in_progress";
57
+ lifecycle_state?: FlowDeskLaneLifecycleRecordV1["state"];
58
+ verdict_ref?: string;
59
+ blocked_labels: string[];
60
+ safe_next_actions: SafeNextAction[];
61
+ approval_inferred: false;
62
+ dispatch_authority_enabled: false;
63
+ providerCall: false;
64
+ actualLaneLaunch: false;
65
+ runtimeExecution: false;
66
+ }
67
+ export declare function validateFlowDeskRuntimeLaneLaunchRequestV1(value: unknown): ValidationResult;
68
+ export declare function validateFlowDeskRuntimeLaneLaunchPlanV1(value: unknown): ValidationResult;
69
+ export declare function planFlowDeskRuntimeLaneLaunchV1(input: {
70
+ request: FlowDeskRuntimeLaneLaunchRequestV1;
71
+ sdkClientAvailable?: boolean;
72
+ durableEvidenceRootRef?: string;
73
+ }): FlowDeskRuntimeLaneLaunchPlanV1;
74
+ export declare function projectFlowDeskRuntimeLaneLifecycleV1(input: {
75
+ plan?: FlowDeskRuntimeLaneLaunchPlanV1;
76
+ lifecycle?: FlowDeskLaneLifecycleRecordV1;
77
+ }): FlowDeskRuntimeLaneLifecycleProjectionV1;
78
+ //# sourceMappingURL=runtime-lane-productization.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"runtime-lane-productization.d.ts","sourceRoot":"","sources":["../src/runtime-lane-productization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAEN,KAAK,6BAA6B,EAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEN,KAAK,gBAAgB,EAMrB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,oCAAoC,wEAIvC,CAAC;AACX,MAAM,MAAM,iCAAiC,GAC5C,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,kCAAkC;IAClD,cAAc,EAAE,yCAAyC,CAAC;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,EAAE,iCAAiC,CAAC;IACjD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,0BAA0B,EAAE,KAAK,CAAC;IAClC,YAAY,EAAE,KAAK,CAAC;IACpB,gBAAgB,EAAE,KAAK,CAAC;IACxB,gBAAgB,EAAE,KAAK,CAAC;CACxB;AAED,MAAM,WAAW,+BAAgC,SAAQ,gBAAgB;IACxE,cAAc,EAAE,sCAAsC,CAAC;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,GAAG,SAAS,CAAC;IAClC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,EAAE,gBAAgB,CAAC;IAC3C,uBAAuB,EAAE,OAAO,CAAC;IACjC,mBAAmB,EAAE,IAAI,CAAC;IAC1B,gBAAgB,EAAE,KAAK,CAAC;IACxB,0BAA0B,EAAE,KAAK,CAAC;IAClC,YAAY,EAAE,KAAK,CAAC;IACpB,gBAAgB,EAAE,KAAK,CAAC;IACxB,gBAAgB,EAAE,KAAK,CAAC;CACxB;AAED,MAAM,WAAW,wCAChB,SAAQ,gBAAgB;IACxB,cAAc,EAAE,+CAA+C,CAAC;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,EACb,cAAc,GACd,SAAS,GACT,uBAAuB,GACvB,uBAAuB,GACvB,aAAa,CAAC;IACjB,eAAe,CAAC,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,iBAAiB,EAAE,cAAc,EAAE,CAAC;IACpC,iBAAiB,EAAE,KAAK,CAAC;IACzB,0BAA0B,EAAE,KAAK,CAAC;IAClC,YAAY,EAAE,KAAK,CAAC;IACpB,gBAAgB,EAAE,KAAK,CAAC;IACxB,gBAAgB,EAAE,KAAK,CAAC;CACxB;AAqDD,wBAAgB,0CAA0C,CACzD,KAAK,EAAE,OAAO,GACZ,gBAAgB,CA2ElB;AAED,wBAAgB,uCAAuC,CACtD,KAAK,EAAE,OAAO,GACZ,gBAAgB,CAmGlB;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACtD,OAAO,EAAE,kCAAkC,CAAC;IAC5C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,+BAA+B,CA8ClC;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC5D,IAAI,CAAC,EAAE,+BAA+B,CAAC;IACvC,SAAS,CAAC,EAAE,6BAA6B,CAAC;CAC1C,GAAG,wCAAwC,CA4C3C"}
@@ -0,0 +1,270 @@
1
+ import { validateFlowDeskLaneLifecycleRecordV1, } from "./lane-lifecycle-record.js";
2
+ import { invalid, valid, validateConcreteProviderQualifiedModelId, validateNoForbiddenRawPayloads, validateOpaqueId, validateOpaqueRef, } from "./validators.js";
3
+ export const FLOWDESK_RUNTIME_LANE_LAUNCH_REASONS = [
4
+ "reviewer_fanout",
5
+ "runtime_observation",
6
+ "diagnostic_lane",
7
+ ];
8
+ const disabledRuntimeLaneAuthority = {
9
+ dispatch_authority_enabled: false,
10
+ providerCall: false,
11
+ actualLaneLaunch: false,
12
+ runtimeExecution: false,
13
+ };
14
+ function isRecord(value) {
15
+ return typeof value === "object" && value !== null && !Array.isArray(value);
16
+ }
17
+ function rejectUnknownProperties(record, allowed, label) {
18
+ const unknown = Object.keys(record).filter((key) => !allowed.includes(key));
19
+ return unknown.length === 0
20
+ ? valid()
21
+ : invalid(`${label} unknown properties: ${unknown.join(",")}`);
22
+ }
23
+ function timestamp(value, label) {
24
+ return typeof value === "string" && Number.isFinite(Date.parse(value))
25
+ ? valid()
26
+ : invalid(`${label} must be a parseable timestamp`);
27
+ }
28
+ function boundedNonNegativeInt(value, label, max) {
29
+ if (typeof value !== "number" || !Number.isInteger(value) || value < 0)
30
+ return invalid(`${label} must be a non-negative integer`);
31
+ return value <= max ? valid() : invalid(`${label} exceeds ${max}`);
32
+ }
33
+ function refWithPrefix(value, label, prefixes) {
34
+ const ref = validateOpaqueRef(value, label);
35
+ if (!ref.ok)
36
+ return ref;
37
+ const text = value;
38
+ return prefixes.some((prefix) => text.startsWith(prefix))
39
+ ? valid()
40
+ : invalid(`${label} must use ${prefixes.join("/")} kind prefix`);
41
+ }
42
+ export function validateFlowDeskRuntimeLaneLaunchRequestV1(value) {
43
+ if (!isRecord(value))
44
+ return invalid("runtime lane launch request must be an object");
45
+ const record = value;
46
+ const errors = [];
47
+ errors.push(...rejectUnknownProperties(record, [
48
+ "schema_version",
49
+ "launch_request_id",
50
+ "workflow_id",
51
+ "attempt_id",
52
+ "lane_id",
53
+ "parent_session_ref",
54
+ "agent_ref",
55
+ "provider_qualified_model_id",
56
+ "launch_reason",
57
+ "pre_launch_audit_ref",
58
+ "lane_launch_approval_ref",
59
+ "requested_at",
60
+ "timeout_ms",
61
+ "orphan_max_age_ms",
62
+ "retry_budget",
63
+ "dispatch_authority_enabled",
64
+ "providerCall",
65
+ "actualLaneLaunch",
66
+ "runtimeExecution",
67
+ ], "runtime lane launch request").errors);
68
+ if (record.schema_version !== "flowdesk.runtime_lane_launch_request.v1")
69
+ errors.push("runtime lane launch request schema_version is invalid");
70
+ errors.push(...validateOpaqueId(record.launch_request_id, "launch_request_id").errors);
71
+ errors.push(...validateOpaqueId(record.workflow_id, "workflow_id").errors);
72
+ errors.push(...validateOpaqueId(record.attempt_id, "attempt_id").errors);
73
+ errors.push(...validateOpaqueId(record.lane_id, "lane_id").errors);
74
+ errors.push(...refWithPrefix(record.parent_session_ref, "parent_session_ref", ["ses-"]).errors);
75
+ errors.push(...refWithPrefix(record.agent_ref, "agent_ref", ["agent-"]).errors);
76
+ errors.push(...validateConcreteProviderQualifiedModelId(record.provider_qualified_model_id).errors);
77
+ if (!FLOWDESK_RUNTIME_LANE_LAUNCH_REASONS.includes(record.launch_reason ?? ""))
78
+ errors.push("runtime lane launch reason is invalid");
79
+ if (record.pre_launch_audit_ref !== undefined)
80
+ errors.push(...refWithPrefix(record.pre_launch_audit_ref, "pre_launch_audit_ref", ["audit-"]).errors);
81
+ if (record.lane_launch_approval_ref !== undefined)
82
+ errors.push(...refWithPrefix(record.lane_launch_approval_ref, "lane_launch_approval_ref", ["approval-"]).errors);
83
+ errors.push(...timestamp(record.requested_at, "requested_at").errors);
84
+ errors.push(...boundedNonNegativeInt(record.timeout_ms, "timeout_ms", 600_000).errors);
85
+ errors.push(...boundedNonNegativeInt(record.orphan_max_age_ms, "orphan_max_age_ms", 3_600_000).errors);
86
+ errors.push(...boundedNonNegativeInt(record.retry_budget, "retry_budget", 2).errors);
87
+ if (record.dispatch_authority_enabled !== false ||
88
+ record.providerCall !== false ||
89
+ record.actualLaneLaunch !== false ||
90
+ record.runtimeExecution !== false)
91
+ errors.push("runtime lane launch request cannot enable or claim runtime authority");
92
+ errors.push(...validateNoForbiddenRawPayloads(record, "runtime_lane_launch_request").errors);
93
+ return errors.length === 0 ? valid() : invalid(...errors);
94
+ }
95
+ export function validateFlowDeskRuntimeLaneLaunchPlanV1(value) {
96
+ if (!isRecord(value))
97
+ return invalid("runtime lane launch plan must be an object");
98
+ const record = value;
99
+ const errors = [];
100
+ errors.push(...rejectUnknownProperties(record, [
101
+ "schema_version",
102
+ "ok",
103
+ "errors",
104
+ "launch_request_id",
105
+ "workflow_id",
106
+ "attempt_id",
107
+ "lane_id",
108
+ "state",
109
+ "blocked_labels",
110
+ "parent_session_ref",
111
+ "agent_ref",
112
+ "provider_qualified_model_id",
113
+ "launch_reason",
114
+ "pre_launch_audit_ref",
115
+ "lane_launch_approval_ref",
116
+ "durable_evidence_root_ref",
117
+ "lifecycle_evidence_class",
118
+ "exact_binding_confirmed",
119
+ "sdk_client_required",
120
+ "launch_attempted",
121
+ "dispatch_authority_enabled",
122
+ "providerCall",
123
+ "actualLaneLaunch",
124
+ "runtimeExecution",
125
+ ], "runtime lane launch plan").errors);
126
+ if (record.schema_version !== "flowdesk.runtime_lane_launch_plan.v1")
127
+ errors.push("runtime lane launch plan schema_version is invalid");
128
+ if (record.launch_request_id !== undefined)
129
+ errors.push(...validateOpaqueId(record.launch_request_id, "launch_request_id").errors);
130
+ if (record.workflow_id !== undefined)
131
+ errors.push(...validateOpaqueId(record.workflow_id, "workflow_id").errors);
132
+ if (record.attempt_id !== undefined)
133
+ errors.push(...validateOpaqueId(record.attempt_id, "attempt_id").errors);
134
+ if (record.lane_id !== undefined)
135
+ errors.push(...validateOpaqueId(record.lane_id, "lane_id").errors);
136
+ if (record.parent_session_ref !== undefined)
137
+ errors.push(...refWithPrefix(record.parent_session_ref, "parent_session_ref", ["ses-"]).errors);
138
+ if (record.agent_ref !== undefined)
139
+ errors.push(...refWithPrefix(record.agent_ref, "agent_ref", ["agent-"]).errors);
140
+ if (record.provider_qualified_model_id !== undefined)
141
+ errors.push(...validateConcreteProviderQualifiedModelId(record.provider_qualified_model_id).errors);
142
+ if (record.launch_reason !== undefined &&
143
+ !FLOWDESK_RUNTIME_LANE_LAUNCH_REASONS.includes(record.launch_reason))
144
+ errors.push("runtime lane launch plan reason is invalid");
145
+ if (record.pre_launch_audit_ref !== undefined)
146
+ errors.push(...refWithPrefix(record.pre_launch_audit_ref, "pre_launch_audit_ref", ["audit-"]).errors);
147
+ if (record.lane_launch_approval_ref !== undefined)
148
+ errors.push(...refWithPrefix(record.lane_launch_approval_ref, "lane_launch_approval_ref", ["approval-"]).errors);
149
+ if (record.durable_evidence_root_ref !== undefined)
150
+ errors.push(...refWithPrefix(record.durable_evidence_root_ref, "durable_evidence_root_ref", ["evidence-root-"]).errors);
151
+ if (record.state !== "launch_ready" && record.state !== "blocked")
152
+ errors.push("runtime lane launch plan state is invalid");
153
+ if (!Array.isArray(record.blocked_labels))
154
+ errors.push("blocked_labels must be an array");
155
+ else
156
+ for (const [index, label] of record.blocked_labels.entries())
157
+ errors.push(...validateOpaqueId(label, `blocked_labels[${index}]`).errors);
158
+ if (record.state === "launch_ready" && (record.blocked_labels?.length ?? 0) > 0)
159
+ errors.push("launch_ready plan cannot carry blocked labels");
160
+ if (record.state === "blocked" && (record.blocked_labels?.length ?? 0) === 0)
161
+ errors.push("blocked launch plan requires blocked labels");
162
+ if (record.lifecycle_evidence_class !== "lane_lifecycle")
163
+ errors.push("runtime lane launch plan must target lane_lifecycle evidence");
164
+ if (record.exact_binding_confirmed !== (record.state === "launch_ready"))
165
+ errors.push("exact binding confirmation must match launch readiness");
166
+ if (record.sdk_client_required !== true)
167
+ errors.push("runtime lane launch plan must require an injected SDK client");
168
+ if (record.launch_attempted !== false ||
169
+ record.dispatch_authority_enabled !== false ||
170
+ record.providerCall !== false ||
171
+ record.actualLaneLaunch !== false ||
172
+ record.runtimeExecution !== false)
173
+ errors.push("runtime lane launch plan cannot attempt launch or enable authority");
174
+ errors.push(...validateNoForbiddenRawPayloads(record, "runtime_lane_launch_plan").errors);
175
+ return errors.length === 0 ? valid() : invalid(...errors);
176
+ }
177
+ export function planFlowDeskRuntimeLaneLaunchV1(input) {
178
+ const requestResult = validateFlowDeskRuntimeLaneLaunchRequestV1(input.request);
179
+ const errors = [...requestResult.errors];
180
+ const blockedLabels = [];
181
+ if (!requestResult.ok)
182
+ blockedLabels.push("launch_request_invalid");
183
+ if (input.request.pre_launch_audit_ref === undefined)
184
+ blockedLabels.push("pre_launch_audit_missing");
185
+ if (input.request.lane_launch_approval_ref === undefined)
186
+ blockedLabels.push("lane_launch_approval_missing");
187
+ if (input.sdkClientAvailable !== true)
188
+ blockedLabels.push("sdk_client_unavailable");
189
+ if (input.durableEvidenceRootRef === undefined)
190
+ blockedLabels.push("durable_evidence_root_missing");
191
+ else {
192
+ const rootResult = refWithPrefix(input.durableEvidenceRootRef, "durable_evidence_root_ref", ["evidence-root-"]);
193
+ errors.push(...rootResult.errors);
194
+ if (!rootResult.ok)
195
+ blockedLabels.push("durable_evidence_root_invalid");
196
+ }
197
+ const ready = errors.length === 0 && blockedLabels.length === 0;
198
+ return {
199
+ schema_version: "flowdesk.runtime_lane_launch_plan.v1",
200
+ ok: errors.length === 0,
201
+ errors,
202
+ launch_request_id: input.request.launch_request_id,
203
+ workflow_id: input.request.workflow_id,
204
+ attempt_id: input.request.attempt_id,
205
+ lane_id: input.request.lane_id,
206
+ state: ready ? "launch_ready" : "blocked",
207
+ blocked_labels: [...new Set(blockedLabels)],
208
+ parent_session_ref: input.request.parent_session_ref,
209
+ agent_ref: input.request.agent_ref,
210
+ provider_qualified_model_id: input.request.provider_qualified_model_id,
211
+ launch_reason: input.request.launch_reason,
212
+ pre_launch_audit_ref: input.request.pre_launch_audit_ref,
213
+ lane_launch_approval_ref: input.request.lane_launch_approval_ref,
214
+ durable_evidence_root_ref: input.durableEvidenceRootRef,
215
+ lifecycle_evidence_class: "lane_lifecycle",
216
+ exact_binding_confirmed: ready,
217
+ sdk_client_required: true,
218
+ launch_attempted: false,
219
+ ...disabledRuntimeLaneAuthority,
220
+ };
221
+ }
222
+ export function projectFlowDeskRuntimeLaneLifecycleV1(input) {
223
+ const errors = [];
224
+ const blockedLabels = [];
225
+ if (input.plan !== undefined) {
226
+ const planResult = validateFlowDeskRuntimeLaneLaunchPlanV1(input.plan);
227
+ errors.push(...planResult.errors);
228
+ if (!planResult.ok || input.plan.state === "blocked")
229
+ blockedLabels.push(...(input.plan.blocked_labels.length > 0 ? input.plan.blocked_labels : ["launch_plan_blocked"]));
230
+ }
231
+ if (input.lifecycle !== undefined) {
232
+ const lifecycleResult = validateFlowDeskLaneLifecycleRecordV1(input.lifecycle);
233
+ errors.push(...lifecycleResult.errors);
234
+ if (!lifecycleResult.ok)
235
+ blockedLabels.push("lane_lifecycle_invalid");
236
+ }
237
+ let projectionState = "blocked";
238
+ if (errors.length > 0 || blockedLabels.length > 0)
239
+ projectionState = "blocked";
240
+ else if (input.lifecycle !== undefined) {
241
+ projectionState = input.lifecycle.state === "complete"
242
+ ? "complete_with_verdict"
243
+ : ["created", "running"].includes(input.lifecycle.state)
244
+ ? "in_progress"
245
+ : "terminal_non_approval";
246
+ }
247
+ else if (input.plan?.state === "launch_ready")
248
+ projectionState = "launch_ready";
249
+ const safeNextActions = projectionState === "blocked"
250
+ ? ["/flowdesk-status", "/flowdesk-export-debug"]
251
+ : projectionState === "launch_ready" || projectionState === "in_progress"
252
+ ? ["/flowdesk-status"]
253
+ : ["/flowdesk-status", "/flowdesk-run"];
254
+ return {
255
+ schema_version: "flowdesk.runtime_lane_lifecycle_projection.v1",
256
+ ok: errors.length === 0,
257
+ errors,
258
+ workflow_id: input.lifecycle?.workflow_id ?? input.plan?.workflow_id,
259
+ attempt_id: input.lifecycle?.attempt_id ?? input.plan?.attempt_id,
260
+ lane_id: input.lifecycle?.lane_id ?? input.plan?.lane_id,
261
+ projection_state: projectionState,
262
+ lifecycle_state: input.lifecycle?.state,
263
+ verdict_ref: input.lifecycle?.state === "complete" ? input.lifecycle.verdict_ref : undefined,
264
+ blocked_labels: [...new Set(blockedLabels)],
265
+ safe_next_actions: safeNextActions,
266
+ approval_inferred: false,
267
+ ...disabledRuntimeLaneAuthority,
268
+ };
269
+ }
270
+ //# sourceMappingURL=runtime-lane-productization.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"runtime-lane-productization.js","sourceRoot":"","sources":["../src/runtime-lane-productization.ts"],"names":[],"mappings":"AACA,OAAO,EACN,qCAAqC,GAErC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACN,OAAO,EAEP,KAAK,EACL,wCAAwC,EACxC,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,oCAAoC,GAAG;IACnD,iBAAiB;IACjB,qBAAqB;IACrB,iBAAiB;CACR,CAAC;AA0EX,MAAM,4BAA4B,GAAG;IACpC,0BAA0B,EAAE,KAAc;IAC1C,YAAY,EAAE,KAAc;IAC5B,gBAAgB,EAAE,KAAc;IAChC,gBAAgB,EAAE,KAAc;CAChC,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,uBAAuB,CAC/B,MAA+B,EAC/B,OAA0B,EAC1B,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,wBAAwB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAC7B,KAAc,EACd,KAAa,EACb,GAAW;IAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACrE,OAAO,OAAO,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC3D,OAAO,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,YAAY,GAAG,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CACrB,KAAc,EACd,KAAa,EACb,QAA2B;IAE3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,IAAI,GAAG,KAAe,CAAC;IAC7B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,aAAa,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,0CAA0C,CACzD,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,KAAoD,CAAC;IACpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACV,GAAG,uBAAuB,CACzB,MAAM,EACN;QACC,gBAAgB;QAChB,mBAAmB;QACnB,aAAa;QACb,YAAY;QACZ,SAAS;QACT,oBAAoB;QACpB,WAAW;QACX,6BAA6B;QAC7B,eAAe;QACf,sBAAsB;QACtB,0BAA0B;QAC1B,cAAc;QACd,YAAY;QACZ,mBAAmB;QACnB,cAAc;QACd,4BAA4B;QAC5B,cAAc;QACd,kBAAkB;QAClB,kBAAkB;KAClB,EACD,6BAA6B,CAC7B,CAAC,MAAM,CACR,CAAC;IACF,IAAI,MAAM,CAAC,cAAc,KAAK,yCAAyC;QACtE,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACvF,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChG,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChF,MAAM,CAAC,IAAI,CACV,GAAG,wCAAwC,CAC1C,MAAM,CAAC,2BAA2B,CAClC,CAAC,MAAM,CACR,CAAC;IACF,IACC,CAAE,oCAA0D,CAAC,QAAQ,CACpE,MAAM,CAAC,aAAa,IAAI,EAAE,CAC1B;QAED,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvG,IAAI,MAAM,CAAC,wBAAwB,KAAK,SAAS;QAChD,MAAM,CAAC,IAAI,CACV,GAAG,aAAa,CAAC,MAAM,CAAC,wBAAwB,EAAE,0BAA0B,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CACnG,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACvF,MAAM,CAAC,IAAI,CACV,GAAG,qBAAqB,CACvB,MAAM,CAAC,iBAAiB,EACxB,mBAAmB,EACnB,SAAS,CACT,CAAC,MAAM,CACR,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrF,IACC,MAAM,CAAC,0BAA0B,KAAK,KAAK;QAC3C,MAAM,CAAC,YAAY,KAAK,KAAK;QAC7B,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,MAAM,CAAC,gBAAgB,KAAK,KAAK;QAEjC,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACrF,MAAM,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,uCAAuC,CACtD,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,KAAiD,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACV,GAAG,uBAAuB,CACzB,MAAM,EACN;QACC,gBAAgB;QAChB,IAAI;QACJ,QAAQ;QACR,mBAAmB;QACnB,aAAa;QACb,YAAY;QACZ,SAAS;QACT,OAAO;QACP,gBAAgB;QAChB,oBAAoB;QACpB,WAAW;QACX,6BAA6B;QAC7B,eAAe;QACf,sBAAsB;QACtB,0BAA0B;QAC1B,2BAA2B;QAC3B,0BAA0B;QAC1B,yBAAyB;QACzB,qBAAqB;QACrB,kBAAkB;QAClB,4BAA4B;QAC5B,cAAc;QACd,kBAAkB;QAClB,kBAAkB;KAClB,EACD,0BAA0B,CAC1B,CAAC,MAAM,CACR,CAAC;IACF,IAAI,MAAM,CAAC,cAAc,KAAK,sCAAsC;QACnE,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;QACnC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAClC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QACjC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS;QACnD,MAAM,CAAC,IAAI,CACV,GAAG,wCAAwC,CAC1C,MAAM,CAAC,2BAA2B,CAClC,CAAC,MAAM,CACR,CAAC;IACH,IACC,MAAM,CAAC,aAAa,KAAK,SAAS;QAClC,CAAE,oCAA0D,CAAC,QAAQ,CACpE,MAAM,CAAC,aAAa,CACpB;QAED,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvG,IAAI,MAAM,CAAC,wBAAwB,KAAK,SAAS;QAChD,MAAM,CAAC,IAAI,CACV,GAAG,aAAa,CAAC,MAAM,CAAC,wBAAwB,EAAE,0BAA0B,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CACnG,CAAC;IACH,IAAI,MAAM,CAAC,yBAAyB,KAAK,SAAS;QACjD,MAAM,CAAC,IAAI,CACV,GAAG,aAAa,CAAC,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAC1G,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAChE,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;;QAEzF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;YAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,wBAAwB,KAAK,gBAAgB;QACvD,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,uBAAuB,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,mBAAmB,KAAK,IAAI;QACtC,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC7E,IACC,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,MAAM,CAAC,0BAA0B,KAAK,KAAK;QAC3C,MAAM,CAAC,YAAY,KAAK,KAAK;QAC7B,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,MAAM,CAAC,gBAAgB,KAAK,KAAK;QAEjC,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACnF,MAAM,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACA,MAAM,aAAa,GAAG,0CAA0C,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS;QACnD,aAAa,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,wBAAwB,KAAK,SAAS;QACvD,aAAa,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI;QACpC,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;QAC7C,aAAa,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;SAChD,CAAC;QACL,MAAM,UAAU,GAAG,aAAa,CAC/B,KAAK,CAAC,sBAAsB,EAC5B,2BAA2B,EAC3B,CAAC,gBAAgB,CAAC,CAClB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;IAChE,OAAO;QACN,cAAc,EAAE,sCAAsC;QACtD,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;QAClD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;QAC9B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACzC,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QACpD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,2BAA2B,EAAE,KAAK,CAAC,OAAO,CAAC,2BAA2B;QACtE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;QAC1C,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,oBAAoB;QACxD,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,wBAAwB;QAChE,yBAAyB,EAAE,KAAK,CAAC,sBAAsB;QACvD,wBAAwB,EAAE,gBAAgB;QAC1C,uBAAuB,EAAE,KAAK;QAC9B,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,KAAK;QACvB,GAAG,4BAA4B;KAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAGrD;IACA,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,uCAAuC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YACnD,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,eAAe,GAAG,qCAAqC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,eAAe,GAClB,SAAS,CAAC;IACX,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,eAAe,GAAG,SAAS,CAAC;SAC1E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxC,eAAe,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YACrD,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;gBACvD,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,uBAAuB,CAAC;IAC7B,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,cAAc;QAAE,eAAe,GAAG,cAAc,CAAC;IAClF,MAAM,eAAe,GAAqB,eAAe,KAAK,SAAS;QACtE,CAAC,CAAC,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;QAChD,CAAC,CAAC,eAAe,KAAK,cAAc,IAAI,eAAe,KAAK,aAAa;YACxE,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtB,CAAC,CAAC,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAC1C,OAAO;QACN,cAAc,EAAE,+CAA+C;QAC/D,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE,WAAW;QACpE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU;QACjE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO;QACxD,gBAAgB,EAAE,eAAe;QACjC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK;QACvC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC5F,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,iBAAiB,EAAE,eAAe;QAClC,iBAAiB,EAAE,KAAK;QACxB,GAAG,4BAA4B;KAC/B,CAAC;AACH,CAAC"}
@@ -0,0 +1,50 @@
1
+ import type { ProviderFamily } from "./release1-contracts.js";
2
+ import { type ValidationResult } from "./validators.js";
3
+ export declare const FLOWDESK_SANITIZED_AUTH_CAPTURE_RESULTS: readonly ["passed", "failed"];
4
+ export type FlowDeskSanitizedAuthCaptureResultLabelV1 = (typeof FLOWDESK_SANITIZED_AUTH_CAPTURE_RESULTS)[number];
5
+ export interface FlowDeskSanitizedAuthCaptureResultV1 {
6
+ schema_version: "flowdesk.sanitized_auth_capture_result.v1";
7
+ sanitized_auth_capture_ref: string;
8
+ durable_capture_ref: string;
9
+ workflow_id: string;
10
+ provider_family: ProviderFamily;
11
+ provider_qualified_model_id: string;
12
+ auth_profile_ref: string;
13
+ auth_evidence_ref: string;
14
+ credential_scope_ref: string;
15
+ account_boundary_ref: string;
16
+ sanitizer_ref: string;
17
+ source_ref: string;
18
+ result: FlowDeskSanitizedAuthCaptureResultLabelV1;
19
+ captured_at: string;
20
+ metadata_labels: string[];
21
+ evidence_refs: string[];
22
+ raw_auth_object_persisted: false;
23
+ raw_plugin_object_persisted: false;
24
+ token_material_persisted: false;
25
+ provider_call_made: false;
26
+ runtime_execution_made: false;
27
+ actual_lane_launch_made: false;
28
+ dispatch_authority_enabled: false;
29
+ safe_next_actions: string[];
30
+ }
31
+ export interface FlowDeskSanitizedAuthCaptureResultInputV1 {
32
+ sanitizedAuthCaptureRef: string;
33
+ durableCaptureRef: string;
34
+ workflowId: string;
35
+ providerFamily: ProviderFamily;
36
+ providerQualifiedModelId: string;
37
+ authProfileRef: string;
38
+ authEvidenceRef: string;
39
+ credentialScopeRef: string;
40
+ accountBoundaryRef: string;
41
+ sanitizerRef: string;
42
+ sourceRef: string;
43
+ result: FlowDeskSanitizedAuthCaptureResultLabelV1;
44
+ capturedAt: string;
45
+ metadataLabels: string[];
46
+ evidenceRefs?: string[];
47
+ }
48
+ export declare function createFlowDeskSanitizedAuthCaptureResultV1(input: FlowDeskSanitizedAuthCaptureResultInputV1): FlowDeskSanitizedAuthCaptureResultV1;
49
+ export declare function validateFlowDeskSanitizedAuthCaptureResultV1(value: unknown, expectedWorkflowId?: string, expectedSanitizedAuthCaptureRef?: string): ValidationResult;
50
+ //# sourceMappingURL=sanitized-auth-capture.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sanitized-auth-capture.d.ts","sourceRoot":"","sources":["../src/sanitized-auth-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAEN,KAAK,gBAAgB,EAOrB,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,uCAAuC,+BAAgC,CAAC;AACrF,MAAM,MAAM,yCAAyC,GACpD,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,MAAM,WAAW,oCAAoC;IACpD,cAAc,EAAE,2CAA2C,CAAC;IAC5D,0BAA0B,EAAE,MAAM,CAAC;IACnC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,2BAA2B,EAAE,MAAM,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,yCAAyC,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,yBAAyB,EAAE,KAAK,CAAC;IACjC,2BAA2B,EAAE,KAAK,CAAC;IACnC,wBAAwB,EAAE,KAAK,CAAC;IAChC,kBAAkB,EAAE,KAAK,CAAC;IAC1B,sBAAsB,EAAE,KAAK,CAAC;IAC9B,uBAAuB,EAAE,KAAK,CAAC;IAC/B,0BAA0B,EAAE,KAAK,CAAC;IAClC,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,yCAAyC;IACzD,uBAAuB,EAAE,MAAM,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,yCAAyC,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAqDD,wBAAgB,0CAA0C,CACzD,KAAK,EAAE,yCAAyC,GAC9C,oCAAoC,CA8BtC;AAED,wBAAgB,4CAA4C,CAC3D,KAAK,EAAE,OAAO,EACd,kBAAkB,CAAC,EAAE,MAAM,EAC3B,+BAA+B,CAAC,EAAE,MAAM,GACtC,gBAAgB,CAyGlB"}
@@ -0,0 +1,164 @@
1
+ import { invalid, valid, validateConcreteProviderQualifiedModelId, validateNoForbiddenRawPayloads, validateOpaqueId, validateOpaqueRef, validateProviderFamily, } from "./validators.js";
2
+ export const FLOWDESK_SANITIZED_AUTH_CAPTURE_RESULTS = ["passed", "failed"];
3
+ function isRecord(value) {
4
+ return typeof value === "object" && value !== null && !Array.isArray(value);
5
+ }
6
+ function isParseableTimestamp(value) {
7
+ return typeof value === "string" && Number.isFinite(Date.parse(value));
8
+ }
9
+ function validateBoundedLabelArray(value, label, maxItems) {
10
+ const errors = [];
11
+ if (!Array.isArray(value))
12
+ return invalid(`${label} must be an array`);
13
+ if (value.length === 0)
14
+ errors.push(`${label} must not be empty`);
15
+ if (value.length > maxItems)
16
+ errors.push(`${label} has too many entries`);
17
+ for (const [index, item] of value.entries()) {
18
+ if (typeof item !== "string" || item.length === 0 || item.length > 80)
19
+ errors.push(`${label}[${index}] is invalid`);
20
+ else if (!/^[A-Za-z0-9_.:-]+$/.test(item))
21
+ errors.push(`${label}[${index}] contains unsupported characters`);
22
+ }
23
+ return errors.length === 0 ? valid() : invalid(...errors);
24
+ }
25
+ function validateRefArray(value, label, maxItems) {
26
+ const errors = [];
27
+ if (!Array.isArray(value))
28
+ return invalid(`${label} must be an array`);
29
+ if (value.length > maxItems)
30
+ errors.push(`${label} has too many entries`);
31
+ for (const [index, item] of value.entries())
32
+ errors.push(...validateOpaqueRef(item, `${label}[${index}]`).errors);
33
+ return errors.length === 0 ? valid() : invalid(...errors);
34
+ }
35
+ function validateSafeActions(value) {
36
+ const errors = [];
37
+ if (!Array.isArray(value))
38
+ return invalid("safe_next_actions must be an array");
39
+ if (value.length === 0)
40
+ errors.push("safe_next_actions must not be empty");
41
+ if (value.length > 5)
42
+ errors.push("safe_next_actions has too many entries");
43
+ for (const [index, action] of value.entries()) {
44
+ if (typeof action !== "string" || !action.startsWith("/flowdesk-"))
45
+ errors.push(`safe_next_actions[${index}] is invalid`);
46
+ }
47
+ return errors.length === 0 ? valid() : invalid(...errors);
48
+ }
49
+ export function createFlowDeskSanitizedAuthCaptureResultV1(input) {
50
+ return {
51
+ schema_version: "flowdesk.sanitized_auth_capture_result.v1",
52
+ sanitized_auth_capture_ref: input.sanitizedAuthCaptureRef,
53
+ durable_capture_ref: input.durableCaptureRef,
54
+ workflow_id: input.workflowId,
55
+ provider_family: input.providerFamily,
56
+ provider_qualified_model_id: input.providerQualifiedModelId,
57
+ auth_profile_ref: input.authProfileRef,
58
+ auth_evidence_ref: input.authEvidenceRef,
59
+ credential_scope_ref: input.credentialScopeRef,
60
+ account_boundary_ref: input.accountBoundaryRef,
61
+ sanitizer_ref: input.sanitizerRef,
62
+ source_ref: input.sourceRef,
63
+ result: input.result,
64
+ captured_at: input.capturedAt,
65
+ metadata_labels: [...input.metadataLabels],
66
+ evidence_refs: [...(input.evidenceRefs ?? [])],
67
+ raw_auth_object_persisted: false,
68
+ raw_plugin_object_persisted: false,
69
+ token_material_persisted: false,
70
+ provider_call_made: false,
71
+ runtime_execution_made: false,
72
+ actual_lane_launch_made: false,
73
+ dispatch_authority_enabled: false,
74
+ safe_next_actions: input.result === "passed"
75
+ ? ["/flowdesk-status"]
76
+ : ["/flowdesk-doctor", "/flowdesk-status"],
77
+ };
78
+ }
79
+ export function validateFlowDeskSanitizedAuthCaptureResultV1(value, expectedWorkflowId, expectedSanitizedAuthCaptureRef) {
80
+ if (!isRecord(value))
81
+ return invalid("sanitized auth capture result must be an object");
82
+ const errors = [];
83
+ const allowed = new Set([
84
+ "schema_version",
85
+ "sanitized_auth_capture_ref",
86
+ "durable_capture_ref",
87
+ "workflow_id",
88
+ "provider_family",
89
+ "provider_qualified_model_id",
90
+ "auth_profile_ref",
91
+ "auth_evidence_ref",
92
+ "credential_scope_ref",
93
+ "account_boundary_ref",
94
+ "sanitizer_ref",
95
+ "source_ref",
96
+ "result",
97
+ "captured_at",
98
+ "metadata_labels",
99
+ "evidence_refs",
100
+ "raw_auth_object_persisted",
101
+ "raw_plugin_object_persisted",
102
+ "token_material_persisted",
103
+ "provider_call_made",
104
+ "runtime_execution_made",
105
+ "actual_lane_launch_made",
106
+ "dispatch_authority_enabled",
107
+ "safe_next_actions",
108
+ ]);
109
+ for (const key of Object.keys(value))
110
+ if (!allowed.has(key))
111
+ errors.push(`unknown properties: ${key}`);
112
+ if (value.schema_version !== "flowdesk.sanitized_auth_capture_result.v1")
113
+ errors.push("sanitized auth capture schema_version is invalid");
114
+ errors.push(...validateOpaqueRef(value.sanitized_auth_capture_ref, "sanitized_auth_capture_ref").errors);
115
+ errors.push(...validateOpaqueRef(value.durable_capture_ref, "durable_capture_ref").errors);
116
+ errors.push(...validateOpaqueId(value.workflow_id, "workflow_id").errors);
117
+ if (expectedSanitizedAuthCaptureRef !== undefined &&
118
+ value.sanitized_auth_capture_ref !== expectedSanitizedAuthCaptureRef)
119
+ errors.push("sanitized auth capture ref mismatch");
120
+ if (expectedWorkflowId !== undefined && value.workflow_id !== expectedWorkflowId)
121
+ errors.push("sanitized auth capture workflow_id mismatch");
122
+ errors.push(...validateProviderFamily(value.provider_family).errors);
123
+ if (value.provider_family === "unknown" || value.provider_family === "all")
124
+ errors.push("provider_family must be concrete for sanitized auth capture");
125
+ errors.push(...validateConcreteProviderQualifiedModelId(value.provider_qualified_model_id, "provider_qualified_model_id").errors);
126
+ if (typeof value.provider_qualified_model_id === "string" &&
127
+ typeof value.provider_family === "string" &&
128
+ !value.provider_qualified_model_id.startsWith(`${value.provider_family}/`))
129
+ errors.push("provider_qualified_model_id must match provider_family");
130
+ for (const [field, label] of [
131
+ [value.auth_profile_ref, "auth_profile_ref"],
132
+ [value.auth_evidence_ref, "auth_evidence_ref"],
133
+ [value.credential_scope_ref, "credential_scope_ref"],
134
+ [value.account_boundary_ref, "account_boundary_ref"],
135
+ [value.sanitizer_ref, "sanitizer_ref"],
136
+ [value.source_ref, "source_ref"],
137
+ ])
138
+ errors.push(...validateOpaqueRef(field, label).errors);
139
+ if (!FLOWDESK_SANITIZED_AUTH_CAPTURE_RESULTS.includes(String(value.result)))
140
+ errors.push("sanitized auth capture result is invalid");
141
+ if (!isParseableTimestamp(value.captured_at))
142
+ errors.push("sanitized auth capture captured_at is invalid");
143
+ errors.push(...validateBoundedLabelArray(value.metadata_labels, "metadata_labels", 20)
144
+ .errors);
145
+ errors.push(...validateRefArray(value.evidence_refs, "evidence_refs", 20).errors);
146
+ if (value.raw_auth_object_persisted !== false)
147
+ errors.push("raw auth objects cannot be persisted");
148
+ if (value.raw_plugin_object_persisted !== false)
149
+ errors.push("raw plugin objects cannot be persisted");
150
+ if (value.token_material_persisted !== false)
151
+ errors.push("token material cannot be persisted");
152
+ if (value.provider_call_made !== false)
153
+ errors.push("sanitized auth capture cannot make provider calls");
154
+ if (value.runtime_execution_made !== false)
155
+ errors.push("sanitized auth capture cannot make runtime execution");
156
+ if (value.actual_lane_launch_made !== false)
157
+ errors.push("sanitized auth capture cannot launch lanes");
158
+ if (value.dispatch_authority_enabled !== false)
159
+ errors.push("sanitized auth capture cannot enable dispatch authority");
160
+ errors.push(...validateSafeActions(value.safe_next_actions).errors);
161
+ errors.push(...validateNoForbiddenRawPayloads(value, "sanitized_auth_capture_result").errors);
162
+ return errors.length === 0 ? valid() : invalid(...errors);
163
+ }
164
+ //# sourceMappingURL=sanitized-auth-capture.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sanitized-auth-capture.js","sourceRoot":"","sources":["../src/sanitized-auth-capture.ts"],"names":[],"mappings":"AACA,OAAO,EACN,OAAO,EAEP,KAAK,EACL,wCAAwC,EACxC,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAiDrF,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,yBAAyB,CACjC,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YACpE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,cAAc,CAAC,CAAC;aACzC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,mCAAmC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CACxB,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,qBAAqB,KAAK,cAAc,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,0CAA0C,CACzD,KAAgD;IAEhD,OAAO;QACN,cAAc,EAAE,2CAA2C;QAC3D,0BAA0B,EAAE,KAAK,CAAC,uBAAuB;QACzD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,2BAA2B,EAAE,KAAK,CAAC,wBAAwB;QAC3D,gBAAgB,EAAE,KAAK,CAAC,cAAc;QACtC,iBAAiB,EAAE,KAAK,CAAC,eAAe;QACxC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;QAC9C,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;QAC1C,aAAa,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC9C,yBAAyB,EAAE,KAAK;QAChC,2BAA2B,EAAE,KAAK;QAClC,wBAAwB,EAAE,KAAK;QAC/B,kBAAkB,EAAE,KAAK;QACzB,sBAAsB,EAAE,KAAK;QAC7B,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,iBAAiB,EAChB,KAAK,CAAC,MAAM,KAAK,QAAQ;YACxB,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtB,CAAC,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC3D,KAAc,EACd,kBAA2B,EAC3B,+BAAwC;IAExC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnB,OAAO,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACnE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACvB,gBAAgB;QAChB,4BAA4B;QAC5B,qBAAqB;QACrB,aAAa;QACb,iBAAiB;QACjB,6BAA6B;QAC7B,kBAAkB;QAClB,mBAAmB;QACnB,sBAAsB;QACtB,sBAAsB;QACtB,eAAe;QACf,YAAY;QACZ,QAAQ;QACR,aAAa;QACb,iBAAiB;QACjB,eAAe;QACf,2BAA2B;QAC3B,6BAA6B;QAC7B,0BAA0B;QAC1B,oBAAoB;QACpB,wBAAwB;QACxB,yBAAyB;QACzB,4BAA4B;QAC5B,mBAAmB;KACnB,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,cAAc,KAAK,2CAA2C;QACvE,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,CACV,GAAG,iBAAiB,CACnB,KAAK,CAAC,0BAA0B,EAChC,4BAA4B,CAC5B,CAAC,MAAM,CACR,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3F,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,IACC,+BAA+B,KAAK,SAAS;QAC7C,KAAK,CAAC,0BAA0B,KAAK,+BAA+B;QAEpE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpD,IAAI,kBAAkB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB;QAC/E,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK;QACzE,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC5E,MAAM,CAAC,IAAI,CACV,GAAG,wCAAwC,CAC1C,KAAK,CAAC,2BAA2B,EACjC,6BAA6B,CAC7B,CAAC,MAAM,CACR,CAAC;IACF,IACC,OAAO,KAAK,CAAC,2BAA2B,KAAK,QAAQ;QACrD,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC;QAE1E,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC5B,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5C,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC9C,CAAC,KAAK,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QACpD,CAAC,KAAK,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;QACpD,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC;QACtC,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC;KACvB;QACT,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,IACC,CAAE,uCAA6D,CAAC,QAAQ,CACvE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB;QAED,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACzD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,CACV,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,EAAE,CAAC;SACxE,MAAM,CACR,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK;QAC5C,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,2BAA2B,KAAK,KAAK;QAC9C,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,wBAAwB,KAAK,KAAK;QAC3C,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK;QACrC,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,sBAAsB,KAAK,KAAK;QACzC,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,uBAAuB,KAAK,KAAK;QAC1C,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,0BAA0B,KAAK,KAAK;QAC7C,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,CACV,GAAG,8BAA8B,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC,MAAM,CAChF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"schema-artifacts.d.ts","sourceRoot":"","sources":["../src/schema-artifacts.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,8BAA8B,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElG,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,8CAA8C,CAAC;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,oBAAoB,EAAE,KAAK,CAAC;IAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;CAC1E;AA+KD,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAE3F,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAElG"}
1
+ {"version":3,"file":"schema-artifacts.d.ts","sourceRoot":"","sources":["../src/schema-artifacts.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,8BAA8B,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElG,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,8BAA8B,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,8CAA8C,CAAC;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,oBAAoB,EAAE,KAAK,CAAC;IAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;CAC1E;AA8MD,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAE3F,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAElG"}