@fragno-dev/backoffice-api 0.0.0-stage → 0.0.0

package/dist/v0/shared/permissions.d.ts

@@ -0,0 +1,279 @@
+import { z } from "zod";
+//#region src/v0/shared/permissions.d.ts
+/**
+ * Every permission understood by the Backoffice authorization kernel.
+ *
+ * Each value is the canonical requirement used by actions, role grants, authority resolvers, and
+ * resource policy. Adding an entry expands the authorization vocabulary but does not grant the new
+ * permission to any role automatically.
+ */
+declare const BACKOFFICE_PERMISSION: {
+  readonly account: {
+    readonly read: {
+      readonly namespace: "account";
+      readonly permission: "read";
+    };
+    readonly manage: {
+      readonly namespace: "account";
+      readonly permission: "manage";
+    };
+  };
+  readonly admin: {
+    readonly appsManage: {
+      readonly namespace: "admin";
+      readonly permission: "apps.manage";
+    };
+    readonly appsRead: {
+      readonly namespace: "admin";
+      readonly permission: "apps.read";
+    };
+    readonly oauthClientsManage: {
+      readonly namespace: "admin";
+      readonly permission: "oauth-clients.manage";
+    };
+    readonly oauthClientsRead: {
+      readonly namespace: "admin";
+      readonly permission: "oauth-clients.read";
+    };
+    readonly signUpInvitationsManage: {
+      readonly namespace: "admin";
+      readonly permission: "sign-up-invitations.manage";
+    };
+    readonly organizationsManage: {
+      readonly namespace: "admin";
+      readonly permission: "organizations.manage";
+    };
+  };
+  readonly apps: {
+    readonly read: {
+      readonly namespace: "apps";
+      readonly permission: "read";
+    };
+    readonly manage: {
+      readonly namespace: "apps";
+      readonly permission: "manage";
+    };
+  };
+  readonly capabilities: {
+    readonly read: {
+      readonly namespace: "capabilities";
+      readonly permission: "read";
+    };
+  };
+  readonly cloudflare: {
+    readonly browserRun: {
+      readonly namespace: "cloudflare";
+      readonly permission: "browserRun";
+    };
+  };
+  readonly connections: {
+    readonly manage: {
+      readonly namespace: "connections";
+      readonly permission: "manage";
+    };
+    readonly read: {
+      readonly namespace: "connections";
+      readonly permission: "read";
+    };
+  };
+  readonly events: {
+    readonly emit: {
+      readonly namespace: "events";
+      readonly permission: "emit";
+    };
+    readonly manage: {
+      readonly namespace: "events";
+      readonly permission: "manage";
+    };
+    readonly read: {
+      readonly namespace: "events";
+      readonly permission: "read";
+    };
+    readonly route: {
+      readonly namespace: "events";
+      readonly permission: "route";
+    };
+  };
+  readonly forms: {
+    readonly create: {
+      readonly namespace: "forms";
+      readonly permission: "create";
+    };
+    readonly read: {
+      readonly namespace: "forms";
+      readonly permission: "read";
+    };
+    readonly update: {
+      readonly namespace: "forms";
+      readonly permission: "update";
+    };
+  };
+  readonly hooks: {
+    readonly read: {
+      readonly namespace: "hooks";
+      readonly permission: "read";
+    };
+  };
+  readonly identity: {
+    readonly link: {
+      readonly namespace: "identity";
+      readonly permission: "link";
+    };
+    readonly bind: {
+      readonly namespace: "identity";
+      readonly permission: "bind";
+    };
+    readonly read: {
+      readonly namespace: "identity";
+      readonly permission: "read";
+    };
+    readonly resolve: {
+      readonly namespace: "identity";
+      readonly permission: "resolve";
+    };
+    readonly revoke: {
+      readonly namespace: "identity";
+      readonly permission: "revoke";
+    };
+  };
+  readonly integrations: {
+    readonly read: {
+      readonly namespace: "integrations";
+      readonly permission: "read";
+    };
+    readonly manage: {
+      readonly namespace: "integrations";
+      readonly permission: "manage";
+    };
+    readonly execute: {
+      readonly namespace: "integrations";
+      readonly permission: "execute";
+    };
+  };
+  readonly internal: {
+    readonly manage: {
+      readonly namespace: "internal";
+      readonly permission: "manage";
+    };
+  };
+  readonly org: {
+    readonly read: {
+      readonly namespace: "org";
+      readonly permission: "read";
+    };
+    readonly manage: {
+      readonly namespace: "org";
+      readonly permission: "manage";
+    };
+  };
+  readonly marketplace: {
+    readonly read: {
+      readonly namespace: "marketplace";
+      readonly permission: "read";
+    };
+    readonly publish: {
+      readonly namespace: "marketplace";
+      readonly permission: "publish";
+    };
+    readonly feature: {
+      readonly namespace: "marketplace";
+      readonly permission: "feature";
+    };
+  };
+  readonly packages: {
+    readonly read: {
+      readonly namespace: "packages";
+      readonly permission: "read";
+    };
+    readonly install: {
+      readonly namespace: "packages";
+      readonly permission: "install";
+    };
+  };
+  readonly otp: {
+    readonly create: {
+      readonly namespace: "otp";
+      readonly permission: "create";
+    };
+  };
+  readonly pi: {
+    readonly manage: {
+      readonly namespace: "pi";
+      readonly permission: "manage";
+    };
+    readonly modify: {
+      readonly namespace: "pi";
+      readonly permission: "modify";
+    };
+    readonly read: {
+      readonly namespace: "pi";
+      readonly permission: "read";
+    };
+  };
+  readonly router: {
+    readonly modify: {
+      readonly namespace: "router";
+      readonly permission: "modify";
+    };
+    readonly read: {
+      readonly namespace: "router";
+      readonly permission: "read";
+    };
+  };
+  readonly sandbox: {
+    readonly modify: {
+      readonly namespace: "sandbox";
+      readonly permission: "modify";
+    };
+    readonly read: {
+      readonly namespace: "sandbox";
+      readonly permission: "read";
+    };
+  };
+  readonly store: {
+    readonly modify: {
+      readonly namespace: "store";
+      readonly permission: "modify";
+    };
+    readonly read: {
+      readonly namespace: "store";
+      readonly permission: "read";
+    };
+  };
+  readonly upload: {
+    readonly modify: {
+      readonly namespace: "upload";
+      readonly permission: "modify";
+    };
+    readonly read: {
+      readonly namespace: "upload";
+      readonly permission: "read";
+    };
+  };
+  readonly workflow: {
+    readonly executeCode: {
+      readonly namespace: "workflow";
+      readonly permission: "executeCode";
+    };
+    readonly modify: {
+      readonly namespace: "workflow";
+      readonly permission: "modify";
+    };
+    readonly read: {
+      readonly namespace: "workflow";
+      readonly permission: "read";
+    };
+  };
+};
+type ValueOf<T> = T[keyof T];
+type BackofficePermissionNamespace = keyof typeof BACKOFFICE_PERMISSION;
+/** A valid namespace-permission pair checked by the kernel. */
+type BackofficePermissionRequirement = ValueOf<{ [TNamespace in BackofficePermissionNamespace]: ValueOf<(typeof BACKOFFICE_PERMISSION)[TNamespace]>; }>;
+/** The complete finite permission set used by explicitly unrestricted authority roles. */
+declare const allBackofficePermissionRequirements: BackofficePermissionRequirement[];
+type BackofficePermissionRequirementSchema = z.ZodType<BackofficePermissionRequirement>;
+/** Validates one canonical namespace-permission pair at an untrusted configuration boundary. */
+declare const backofficePermissionRequirementSchema: BackofficePermissionRequirementSchema;
+//#endregion
+export { BACKOFFICE_PERMISSION, BackofficePermissionNamespace, BackofficePermissionRequirement, allBackofficePermissionRequirements, backofficePermissionRequirementSchema };
+//# sourceMappingURL=permissions.d.ts.map

package/dist/v0/shared/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","names":[],"sources":["../../../src/v0/shared/permissions.ts"],"mappings":";;;;;;;;;cASa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAuGR,QAAQ,KAAK,QAAQ;KAEd,6CAA6C;;KAG7C,kCAAkC,WAC3C,cAAc,gCAAgC,gBACrC,uBAAuB;;cAStB,qCAAmC;KAI3C,wCAAwC,EAAE,QAAQ;;cAoC1C,uCAAqC"}

package/dist/v0/shared/permissions.js

@@ -0,0 +1,285 @@
+import { z } from "zod";
+//#region src/v0/shared/permissions.ts
+/**
+* Every permission understood by the Backoffice authorization kernel.
+*
+* Each value is the canonical requirement used by actions, role grants, authority resolvers, and
+* resource policy. Adding an entry expands the authorization vocabulary but does not grant the new
+* permission to any role automatically.
+*/
+const BACKOFFICE_PERMISSION = {
+	account: {
+		read: {
+			namespace: "account",
+			permission: "read"
+		},
+		manage: {
+			namespace: "account",
+			permission: "manage"
+		}
+	},
+	admin: {
+		appsManage: {
+			namespace: "admin",
+			permission: "apps.manage"
+		},
+		appsRead: {
+			namespace: "admin",
+			permission: "apps.read"
+		},
+		oauthClientsManage: {
+			namespace: "admin",
+			permission: "oauth-clients.manage"
+		},
+		oauthClientsRead: {
+			namespace: "admin",
+			permission: "oauth-clients.read"
+		},
+		signUpInvitationsManage: {
+			namespace: "admin",
+			permission: "sign-up-invitations.manage"
+		},
+		organizationsManage: {
+			namespace: "admin",
+			permission: "organizations.manage"
+		}
+	},
+	apps: {
+		read: {
+			namespace: "apps",
+			permission: "read"
+		},
+		manage: {
+			namespace: "apps",
+			permission: "manage"
+		}
+	},
+	capabilities: { read: {
+		namespace: "capabilities",
+		permission: "read"
+	} },
+	cloudflare: { browserRun: {
+		namespace: "cloudflare",
+		permission: "browserRun"
+	} },
+	connections: {
+		manage: {
+			namespace: "connections",
+			permission: "manage"
+		},
+		read: {
+			namespace: "connections",
+			permission: "read"
+		}
+	},
+	events: {
+		emit: {
+			namespace: "events",
+			permission: "emit"
+		},
+		manage: {
+			namespace: "events",
+			permission: "manage"
+		},
+		read: {
+			namespace: "events",
+			permission: "read"
+		},
+		route: {
+			namespace: "events",
+			permission: "route"
+		}
+	},
+	forms: {
+		create: {
+			namespace: "forms",
+			permission: "create"
+		},
+		read: {
+			namespace: "forms",
+			permission: "read"
+		},
+		update: {
+			namespace: "forms",
+			permission: "update"
+		}
+	},
+	hooks: { read: {
+		namespace: "hooks",
+		permission: "read"
+	} },
+	identity: {
+		link: {
+			namespace: "identity",
+			permission: "link"
+		},
+		bind: {
+			namespace: "identity",
+			permission: "bind"
+		},
+		read: {
+			namespace: "identity",
+			permission: "read"
+		},
+		resolve: {
+			namespace: "identity",
+			permission: "resolve"
+		},
+		revoke: {
+			namespace: "identity",
+			permission: "revoke"
+		}
+	},
+	integrations: {
+		read: {
+			namespace: "integrations",
+			permission: "read"
+		},
+		manage: {
+			namespace: "integrations",
+			permission: "manage"
+		},
+		execute: {
+			namespace: "integrations",
+			permission: "execute"
+		}
+	},
+	internal: { manage: {
+		namespace: "internal",
+		permission: "manage"
+	} },
+	org: {
+		read: {
+			namespace: "org",
+			permission: "read"
+		},
+		manage: {
+			namespace: "org",
+			permission: "manage"
+		}
+	},
+	marketplace: {
+		read: {
+			namespace: "marketplace",
+			permission: "read"
+		},
+		publish: {
+			namespace: "marketplace",
+			permission: "publish"
+		},
+		feature: {
+			namespace: "marketplace",
+			permission: "feature"
+		}
+	},
+	packages: {
+		read: {
+			namespace: "packages",
+			permission: "read"
+		},
+		install: {
+			namespace: "packages",
+			permission: "install"
+		}
+	},
+	otp: { create: {
+		namespace: "otp",
+		permission: "create"
+	} },
+	pi: {
+		manage: {
+			namespace: "pi",
+			permission: "manage"
+		},
+		modify: {
+			namespace: "pi",
+			permission: "modify"
+		},
+		read: {
+			namespace: "pi",
+			permission: "read"
+		}
+	},
+	router: {
+		modify: {
+			namespace: "router",
+			permission: "modify"
+		},
+		read: {
+			namespace: "router",
+			permission: "read"
+		}
+	},
+	sandbox: {
+		modify: {
+			namespace: "sandbox",
+			permission: "modify"
+		},
+		read: {
+			namespace: "sandbox",
+			permission: "read"
+		}
+	},
+	store: {
+		modify: {
+			namespace: "store",
+			permission: "modify"
+		},
+		read: {
+			namespace: "store",
+			permission: "read"
+		}
+	},
+	upload: {
+		modify: {
+			namespace: "upload",
+			permission: "modify"
+		},
+		read: {
+			namespace: "upload",
+			permission: "read"
+		}
+	},
+	workflow: {
+		executeCode: {
+			namespace: "workflow",
+			permission: "executeCode"
+		},
+		modify: {
+			namespace: "workflow",
+			permission: "modify"
+		},
+		read: {
+			namespace: "workflow",
+			permission: "read"
+		}
+	}
+};
+/** The complete finite permission set used by explicitly unrestricted authority roles. */
+const allBackofficePermissionRequirements = Object.values(BACKOFFICE_PERMISSION).flatMap((namespacePermissions) => Object.values(namespacePermissions));
+function backofficePermissionInputKey(input) {
+	if (!input || typeof input !== "object" || Array.isArray(input)) return null;
+	const { namespace, permission } = input;
+	return typeof namespace === "string" && typeof permission === "string" ? `${namespace}.${permission}` : null;
+}
+function createBackofficePermissionRequirementSchema() {
+	const [first, second, ...remaining] = allBackofficePermissionRequirements.map((requirement) => z.strictObject({
+		namespace: z.literal(requirement.namespace),
+		permission: z.literal(requirement.permission)
+	}));
+	if (!first || !second) throw new Error("Backoffice authorization requires at least two canonical permissions.");
+	return z.union([
+		first,
+		second,
+		...remaining
+	], { error: (issue) => {
+		const key = backofficePermissionInputKey(issue.input);
+		return key ? `Unknown Backoffice permission '${key}'.` : "Unknown Backoffice permission.";
+	} }).meta({ id: "BackofficePermissionRequirement" });
+}
+/** Validates one canonical namespace-permission pair at an untrusted configuration boundary. */
+const backofficePermissionRequirementSchema = createBackofficePermissionRequirementSchema();
+//#endregion
+export { BACKOFFICE_PERMISSION, allBackofficePermissionRequirements, backofficePermissionRequirementSchema };
+
+//# sourceMappingURL=permissions.js.map

package/dist/v0/shared/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","names":[],"sources":["../../../src/v0/shared/permissions.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Every permission understood by the Backoffice authorization kernel.\n *\n * Each value is the canonical requirement used by actions, role grants, authority resolvers, and\n * resource policy. Adding an entry expands the authorization vocabulary but does not grant the new\n * permission to any role automatically.\n */\nexport const BACKOFFICE_PERMISSION = {\n  account: {\n    read: { namespace: \"account\", permission: \"read\" },\n    manage: { namespace: \"account\", permission: \"manage\" },\n  },\n  admin: {\n    appsManage: { namespace: \"admin\", permission: \"apps.manage\" },\n    appsRead: { namespace: \"admin\", permission: \"apps.read\" },\n    oauthClientsManage: { namespace: \"admin\", permission: \"oauth-clients.manage\" },\n    oauthClientsRead: { namespace: \"admin\", permission: \"oauth-clients.read\" },\n    signUpInvitationsManage: {\n      namespace: \"admin\",\n      permission: \"sign-up-invitations.manage\",\n    },\n    organizationsManage: { namespace: \"admin\", permission: \"organizations.manage\" },\n  },\n  apps: {\n    read: { namespace: \"apps\", permission: \"read\" },\n    manage: { namespace: \"apps\", permission: \"manage\" },\n  },\n  capabilities: {\n    read: { namespace: \"capabilities\", permission: \"read\" },\n  },\n  cloudflare: {\n    browserRun: { namespace: \"cloudflare\", permission: \"browserRun\" },\n  },\n  connections: {\n    manage: { namespace: \"connections\", permission: \"manage\" },\n    read: { namespace: \"connections\", permission: \"read\" },\n  },\n  events: {\n    emit: { namespace: \"events\", permission: \"emit\" },\n    manage: { namespace: \"events\", permission: \"manage\" },\n    read: { namespace: \"events\", permission: \"read\" },\n    route: { namespace: \"events\", permission: \"route\" },\n  },\n  forms: {\n    create: { namespace: \"forms\", permission: \"create\" },\n    read: { namespace: \"forms\", permission: \"read\" },\n    update: { namespace: \"forms\", permission: \"update\" },\n  },\n  hooks: {\n    read: { namespace: \"hooks\", permission: \"read\" },\n  },\n  identity: {\n    link: { namespace: \"identity\", permission: \"link\" },\n    bind: { namespace: \"identity\", permission: \"bind\" },\n    read: { namespace: \"identity\", permission: \"read\" },\n    resolve: { namespace: \"identity\", permission: \"resolve\" },\n    revoke: { namespace: \"identity\", permission: \"revoke\" },\n  },\n  integrations: {\n    read: { namespace: \"integrations\", permission: \"read\" },\n    manage: { namespace: \"integrations\", permission: \"manage\" },\n    execute: { namespace: \"integrations\", permission: \"execute\" },\n  },\n  internal: {\n    manage: { namespace: \"internal\", permission: \"manage\" },\n  },\n  org: {\n    read: { namespace: \"org\", permission: \"read\" },\n    manage: { namespace: \"org\", permission: \"manage\" },\n  },\n  marketplace: {\n    read: { namespace: \"marketplace\", permission: \"read\" },\n    publish: { namespace: \"marketplace\", permission: \"publish\" },\n    feature: { namespace: \"marketplace\", permission: \"feature\" },\n  },\n  packages: {\n    read: { namespace: \"packages\", permission: \"read\" },\n    install: { namespace: \"packages\", permission: \"install\" },\n  },\n  otp: {\n    create: { namespace: \"otp\", permission: \"create\" },\n  },\n  pi: {\n    manage: { namespace: \"pi\", permission: \"manage\" },\n    modify: { namespace: \"pi\", permission: \"modify\" },\n    read: { namespace: \"pi\", permission: \"read\" },\n  },\n  router: {\n    modify: { namespace: \"router\", permission: \"modify\" },\n    read: { namespace: \"router\", permission: \"read\" },\n  },\n  sandbox: {\n    modify: { namespace: \"sandbox\", permission: \"modify\" },\n    read: { namespace: \"sandbox\", permission: \"read\" },\n  },\n  store: {\n    modify: { namespace: \"store\", permission: \"modify\" },\n    read: { namespace: \"store\", permission: \"read\" },\n  },\n  upload: {\n    modify: { namespace: \"upload\", permission: \"modify\" },\n    read: { namespace: \"upload\", permission: \"read\" },\n  },\n  workflow: {\n    executeCode: { namespace: \"workflow\", permission: \"executeCode\" },\n    modify: { namespace: \"workflow\", permission: \"modify\" },\n    read: { namespace: \"workflow\", permission: \"read\" },\n  },\n} as const;\n\ntype ValueOf<T> = T[keyof T];\n\nexport type BackofficePermissionNamespace = keyof typeof BACKOFFICE_PERMISSION;\n\n/** A valid namespace-permission pair checked by the kernel. */\nexport type BackofficePermissionRequirement = ValueOf<{\n  [TNamespace in BackofficePermissionNamespace]: ValueOf<\n    (typeof BACKOFFICE_PERMISSION)[TNamespace]\n  >;\n}>;\n\nconst backofficePermissionNamespaces = Object.values(BACKOFFICE_PERMISSION) as readonly Readonly<\n  Record<string, BackofficePermissionRequirement>\n>[];\n\n/** The complete finite permission set used by explicitly unrestricted authority roles. */\nexport const allBackofficePermissionRequirements = backofficePermissionNamespaces.flatMap(\n  (namespacePermissions) => Object.values(namespacePermissions),\n);\n\ntype BackofficePermissionRequirementSchema = z.ZodType<BackofficePermissionRequirement>;\n\nfunction backofficePermissionInputKey(input: unknown): string | null {\n  if (!input || typeof input !== \"object\" || Array.isArray(input)) {\n    return null;\n  }\n  const { namespace, permission } = input as { namespace?: unknown; permission?: unknown };\n  return typeof namespace === \"string\" && typeof permission === \"string\"\n    ? `${namespace}.${permission}`\n    : null;\n}\n\nfunction createBackofficePermissionRequirementSchema(): BackofficePermissionRequirementSchema {\n  const literalSchemas = allBackofficePermissionRequirements.map(\n    (requirement) =>\n      z.strictObject({\n        namespace: z.literal(requirement.namespace),\n        permission: z.literal(requirement.permission),\n      }) as BackofficePermissionRequirementSchema,\n  );\n  const [first, second, ...remaining] = literalSchemas;\n  if (!first || !second) {\n    throw new Error(\"Backoffice authorization requires at least two canonical permissions.\");\n  }\n\n  return z\n    .union([first, second, ...remaining], {\n      error: (issue) => {\n        const key = backofficePermissionInputKey(issue.input);\n        return key ? `Unknown Backoffice permission '${key}'.` : \"Unknown Backoffice permission.\";\n      },\n    })\n    .meta({ id: \"BackofficePermissionRequirement\" }) as BackofficePermissionRequirementSchema;\n}\n\n/** Validates one canonical namespace-permission pair at an untrusted configuration boundary. */\nexport const backofficePermissionRequirementSchema = createBackofficePermissionRequirementSchema();\n"],"mappings":";;;;;;;;;AASA,MAAa,wBAAwB;CACnC,SAAS;EACP,MAAM;GAAE,WAAW;GAAW,YAAY;EAAO;EACjD,QAAQ;GAAE,WAAW;GAAW,YAAY;EAAS;CACvD;CACA,OAAO;EACL,YAAY;GAAE,WAAW;GAAS,YAAY;EAAc;EAC5D,UAAU;GAAE,WAAW;GAAS,YAAY;EAAY;EACxD,oBAAoB;GAAE,WAAW;GAAS,YAAY;EAAuB;EAC7E,kBAAkB;GAAE,WAAW;GAAS,YAAY;EAAqB;EACzE,yBAAyB;GACvB,WAAW;GACX,YAAY;EACd;EACA,qBAAqB;GAAE,WAAW;GAAS,YAAY;EAAuB;CAChF;CACA,MAAM;EACJ,MAAM;GAAE,WAAW;GAAQ,YAAY;EAAO;EAC9C,QAAQ;GAAE,WAAW;GAAQ,YAAY;EAAS;CACpD;CACA,cAAc,EACZ,MAAM;EAAE,WAAW;EAAgB,YAAY;CAAO,EACxD;CACA,YAAY,EACV,YAAY;EAAE,WAAW;EAAc,YAAY;CAAa,EAClE;CACA,aAAa;EACX,QAAQ;GAAE,WAAW;GAAe,YAAY;EAAS;EACzD,MAAM;GAAE,WAAW;GAAe,YAAY;EAAO;CACvD;CACA,QAAQ;EACN,MAAM;GAAE,WAAW;GAAU,YAAY;EAAO;EAChD,QAAQ;GAAE,WAAW;GAAU,YAAY;EAAS;EACpD,MAAM;GAAE,WAAW;GAAU,YAAY;EAAO;EAChD,OAAO;GAAE,WAAW;GAAU,YAAY;EAAQ;CACpD;CACA,OAAO;EACL,QAAQ;GAAE,WAAW;GAAS,YAAY;EAAS;EACnD,MAAM;GAAE,WAAW;GAAS,YAAY;EAAO;EAC/C,QAAQ;GAAE,WAAW;GAAS,YAAY;EAAS;CACrD;CACA,OAAO,EACL,MAAM;EAAE,WAAW;EAAS,YAAY;CAAO,EACjD;CACA,UAAU;EACR,MAAM;GAAE,WAAW;GAAY,YAAY;EAAO;EAClD,MAAM;GAAE,WAAW;GAAY,YAAY;EAAO;EAClD,MAAM;GAAE,WAAW;GAAY,YAAY;EAAO;EAClD,SAAS;GAAE,WAAW;GAAY,YAAY;EAAU;EACxD,QAAQ;GAAE,WAAW;GAAY,YAAY;EAAS;CACxD;CACA,cAAc;EACZ,MAAM;GAAE,WAAW;GAAgB,YAAY;EAAO;EACtD,QAAQ;GAAE,WAAW;GAAgB,YAAY;EAAS;EAC1D,SAAS;GAAE,WAAW;GAAgB,YAAY;EAAU;CAC9D;CACA,UAAU,EACR,QAAQ;EAAE,WAAW;EAAY,YAAY;CAAS,EACxD;CACA,KAAK;EACH,MAAM;GAAE,WAAW;GAAO,YAAY;EAAO;EAC7C,QAAQ;GAAE,WAAW;GAAO,YAAY;EAAS;CACnD;CACA,aAAa;EACX,MAAM;GAAE,WAAW;GAAe,YAAY;EAAO;EACrD,SAAS;GAAE,WAAW;GAAe,YAAY;EAAU;EAC3D,SAAS;GAAE,WAAW;GAAe,YAAY;EAAU;CAC7D;CACA,UAAU;EACR,MAAM;GAAE,WAAW;GAAY,YAAY;EAAO;EAClD,SAAS;GAAE,WAAW;GAAY,YAAY;EAAU;CAC1D;CACA,KAAK,EACH,QAAQ;EAAE,WAAW;EAAO,YAAY;CAAS,EACnD;CACA,IAAI;EACF,QAAQ;GAAE,WAAW;GAAM,YAAY;EAAS;EAChD,QAAQ;GAAE,WAAW;GAAM,YAAY;EAAS;EAChD,MAAM;GAAE,WAAW;GAAM,YAAY;EAAO;CAC9C;CACA,QAAQ;EACN,QAAQ;GAAE,WAAW;GAAU,YAAY;EAAS;EACpD,MAAM;GAAE,WAAW;GAAU,YAAY;EAAO;CAClD;CACA,SAAS;EACP,QAAQ;GAAE,WAAW;GAAW,YAAY;EAAS;EACrD,MAAM;GAAE,WAAW;GAAW,YAAY;EAAO;CACnD;CACA,OAAO;EACL,QAAQ;GAAE,WAAW;GAAS,YAAY;EAAS;EACnD,MAAM;GAAE,WAAW;GAAS,YAAY;EAAO;CACjD;CACA,QAAQ;EACN,QAAQ;GAAE,WAAW;GAAU,YAAY;EAAS;EACpD,MAAM;GAAE,WAAW;GAAU,YAAY;EAAO;CAClD;CACA,UAAU;EACR,aAAa;GAAE,WAAW;GAAY,YAAY;EAAc;EAChE,QAAQ;GAAE,WAAW;GAAY,YAAY;EAAS;EACtD,MAAM;GAAE,WAAW;GAAY,YAAY;EAAO;CACpD;AACF;;AAkBA,MAAa,sCAL0B,OAAO,OAAO,qBAKF,CAAA,CAA+B,SAC/E,yBAAyB,OAAO,OAAO,oBAAoB,CAC9D;AAIA,SAAS,6BAA6B,OAA+B;CACnE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC5D,OAAO;CAET,MAAM,EAAE,WAAW,eAAe;CAClC,OAAO,OAAO,cAAc,YAAY,OAAO,eAAe,WAC1D,GAAG,UAAU,GAAG,eAChB;AACN;AAEA,SAAS,8CAAqF;CAQ5F,MAAM,CAAC,OAAO,QAAQ,GAAG,aAPF,oCAAoC,KACxD,gBACC,EAAE,aAAa;EACb,WAAW,EAAE,QAAQ,YAAY,SAAS;EAC1C,YAAY,EAAE,QAAQ,YAAY,UAAU;CAC9C,CAAC,CAE8C;CACnD,IAAI,CAAC,SAAS,CAAC,QACb,MAAM,IAAI,MAAM,uEAAuE;CAGzF,OAAO,EACJ,MAAM;EAAC;EAAO;EAAQ,GAAG;CAAS,GAAG,EACpC,QAAQ,UAAU;EAChB,MAAM,MAAM,6BAA6B,MAAM,KAAK;EACpD,OAAO,MAAM,kCAAkC,IAAI,MAAM;CAC3D,EACF,CAAC,CAAC,CACD,KAAK,EAAE,IAAI,kCAAkC,CAAC;AACnD;;AAGA,MAAa,wCAAwC,4CAA4C"}

package/dist/v0/shared/pi-agent-name.d.ts

@@ -0,0 +1,10 @@
+import { z } from "zod";
+//#region src/v0/shared/pi-agent-name.d.ts
+/**
+ * Agent names identify an agent's definition and its one ongoing conversation within a scope.
+ * Shared because automation routes address agents too, and `pi` already depends on `automation`.
+ */
+declare const piAgentNameSchema: z.ZodLazy<z.ZodString>;
+//#endregion
+export { piAgentNameSchema };
+//# sourceMappingURL=pi-agent-name.d.ts.map

package/dist/v0/shared/pi-agent-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-agent-name.d.ts","names":[],"sources":["../../../src/v0/shared/pi-agent-name.ts"],"mappings":";;;;;;cAMa,mBAAiB,EAAA,QAAA,EAAA"}

package/dist/v0/shared/pi-agent-name.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+//#region src/v0/shared/pi-agent-name.ts
+/**
+* Agent names identify an agent's definition and its one ongoing conversation within a scope.
+* Shared because automation routes address agents too, and `pi` already depends on `automation`.
+*/
+const piAgentNameSchema = z.lazy(() => z.string().regex(/^[a-z][a-z0-9-]{0,62}$/, "Agent names start with a lowercase letter and contain only lowercase letters, digits, and hyphens."));
+//#endregion
+export { piAgentNameSchema };
+
+//# sourceMappingURL=pi-agent-name.js.map

package/dist/v0/shared/pi-agent-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-agent-name.js","names":[],"sources":["../../../src/v0/shared/pi-agent-name.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Agent names identify an agent's definition and its one ongoing conversation within a scope.\n * Shared because automation routes address agents too, and `pi` already depends on `automation`.\n */\nexport const piAgentNameSchema = z.lazy(() =>\n  z\n    .string()\n    .regex(\n      /^[a-z][a-z0-9-]{0,62}$/,\n      \"Agent names start with a lowercase letter and contain only lowercase letters, digits, and hyphens.\",\n    ),\n);\n"],"mappings":";;;;;;AAMA,MAAa,oBAAoB,EAAE,WACjC,EACG,OAAO,CAAC,CACR,MACC,0BACA,oGACF,CACJ"}