@fragno-dev/backoffice-api 0.0.0-stage → 0.0.0

package/dist/v0/automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.d.ts","names":[],"sources":["../../src/v0/automation.ts"],"mappings":";;;KAUY,4BACV,iCACA;EAEA;EACA,QAAQ;EACR,MAAM;EACN;;KAGU,oBAAoB;EAE1B;EACA,MAAM;EACN;IAEF,oCAAoC;KAEnC;KAEO,gBAAgB,cAAc,sBAAsB,uBAC9D;EACE,MAAM;;KAGE,mBAAmB;EAC7B,WAAW;EACX,WAAW;EACX,sBAAsB,8BAA8B;;cAgDzC,4BAA6B,MAAM,qBAAqB,OAAO;cAM/D,gCAA8B,EAAA,QAAA,EAAA,uBAAA,EAAA,QAAA,EAAA,uBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;cAI9B,wBAAwB,EAAE,QAAQ;;;;;KAiC1C,qCAAqC;;;;;;;;KAS9B;;;;;;;;;;;;EAaN;EACA,QAAQ;;;;;;;;EASR;EACA,QAAQ;;;;;;;;;;;;;EAcR;EACA,iBAAiB;;cAGV,iCAA+B,EAAA,QAAA,EAAA,uBAAA,EAAA;;;;;;;;KAchC,4BAA4B,EAAE,aAAa;KAE3C;EAEN;EACA;EACA;EACA;;EAGA;EACA;EACA;EACA;;KAGM,0BACP;EAAmC;MACnC;EAAmC;MACnC;EACC;EACA,OAAO,QAAQ;;KAGT;EACN,OAAO;;EACP;EAAc;;EACd;EAAc;EAA8C;;EAC5D,KAAK;;EACL,KAAK;;EACL,KAAK;;KAEN;EACC;EAAa;;EACb;EAAc;;KAEf;EACH;EACA,OAAO;EACP;;;KAIU;EACN;IACF,mCACA;EAEE;EACA,OAAO,mCAAmC;EAC1C;;KAGM;EACV;EACA,WAAW;EACX;EACA;;KAGU;EACN;EAAqB;;EACrB;EAA4B;;KAEtB;EACV;EACA,QAAQ;EACR;EACA;;KAGU;EACV;EACA,aAAa;EACb;;KAGU;EACV;EACA,QAAQ;;KAGE;EACV;EACA;EACA;EACA,SAAS;;;KAIC;EACV;EACA;EACA,WAAW;;KAGD,wBACR,gCACA,oCACA,+BACA,kCACA;;iBAGY,+BACd,QAAQ,wBACP;KAMS;EACV;EACA;EACA;EACA,SAAS;;KAGC;EACV;EACA,SAAS;;KAGC,yBAAyB,8BAA8B;KAEvD;EACV;EACA;EACA;EACA;;KAGU;EACV,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;;;KAID;EACV,SAAS;EACT,QAAQ;EACR;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;;cAGW,kCAAmC;;cASnC;cAoRA,6BAA2B,EAAA,QAAA,EAAA,uBAAA,EAAA,QAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAe3B,gCAAgC,EAAE,QAAQ;cAqF1C,uBAAuB,EAAE,QAAQ;cAgBjC,kCAAgC,EAAA,QAAA,EAAA,gBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA0BhC,oCAAkC,EAAA,QAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAQlC,kCAAgC,EAAA,QAAA,EAAA,QAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAOjC,6BAA6B,EAAE,aAAa;KAE5C,6BAA6B,EAAE,aAAa;cAE3C"}

package/dist/v0/automation.js

@@ -0,0 +1,355 @@
+import { BACKOFFICE_PERMISSION, backofficePermissionRequirementSchema } from "./shared/permissions.js";
+import { piAgentNameSchema } from "./shared/pi-agent-name.js";
+import { z } from "zod";
+//#region src/v0/automation.ts
+const automationInternalEntitySchema = z.lazy(() => z.strictObject({
+	scope: z.literal("internal"),
+	type: z.string().trim().min(1),
+	id: z.string().trim().min(1)
+}));
+const automationExternalEntitySchema = z.lazy(() => z.strictObject({
+	scope: z.literal("external"),
+	source: z.string().trim().min(1),
+	type: z.string().trim().min(1),
+	id: z.string().trim().min(1)
+}));
+const automationInitiatorActorSchema = z.lazy(() => z.discriminatedUnion("scope", [automationInternalEntitySchema._zod.innerType.extend({ role: z.literal("initiator") }), automationExternalEntitySchema._zod.innerType.extend({ role: z.literal("initiator") })]));
+const automationPrincipalActorSchema = z.lazy(() => z.discriminatedUnion("scope", [automationInternalEntitySchema._zod.innerType.extend({ role: z.literal("principal") }), automationExternalEntitySchema._zod.innerType.extend({ role: z.literal("principal") })]));
+const automationDelegateActorSchema = z.lazy(() => z.discriminatedUnion("scope", [automationInternalEntitySchema._zod.innerType.extend({ role: z.literal("delegate") }), automationExternalEntitySchema._zod.innerType.extend({ role: z.literal("delegate") })]));
+const automationAssistantActorSchema = z.lazy(() => z.discriminatedUnion("scope", [automationInternalEntitySchema._zod.innerType.extend({ role: z.literal("assistant") }), automationExternalEntitySchema._zod.innerType.extend({ role: z.literal("assistant") })]));
+const automationEntityRefsEqual = (left, right) => left.scope === right.scope && left.type === right.type && left.id === right.id && (left.scope === "internal" || right.scope === "external" && left.source === right.source);
+const automationDelegatedActorSchema = z.lazy(() => z.discriminatedUnion("role", [automationDelegateActorSchema, automationAssistantActorSchema]));
+const automationActorsSchema = z.lazy(() => z.strictObject({
+	initiator: automationInitiatorActorSchema,
+	principal: automationPrincipalActorSchema.nullable(),
+	delegation: z.array(automationDelegatedActorSchema)
+}).superRefine((actors, context) => {
+	const actorSequence = [
+		actors.initiator,
+		...actors.principal ? [actors.principal] : [],
+		...actors.delegation
+	];
+	if (actorSequence.some((actor, actorIndex) => actorSequence.slice(0, actorIndex).some((previousActor) => automationEntityRefsEqual(previousActor, actor)))) context.addIssue({
+		code: "custom",
+		message: "Automation actor provenance contains duplicate identities."
+	});
+}));
+const automationScheduleCadenceSchema = z.lazy(() => z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("once"),
+	at: z.iso.datetime()
+}), z.object({
+	kind: z.literal("cron"),
+	expression: z.string().trim().min(1),
+	timeZone: z.string().trim().min(1).default("UTC")
+})]));
+/** The authority an action runs its work with, or null for actions that only move events. */
+function automationRouteActionAuthority(action) {
+	return action.kind === "start_workflow" || action.kind === "notify_agent" ? action.authority : null;
+}
+const isAutomationActorProvenancePath = (path) => path === "$.actor" || path.startsWith("$.actor.") || path.startsWith("$.actor[") || path === "$.actors" || path.startsWith("$.actors.") || path.startsWith("$.actors[");
+/** Scheduled routes have no triggering user, so only organization authority can start workflows. */
+const AUTOMATION_ROUTE_AUTHORITY_ERROR_MESSAGE = "Scheduled workflows and agent notifications require organization-automation authority. Linked-user authority requires an external sender; delegated-user authority requires a user principal.";
+const automationActorMatcherSchema = z.lazy(() => z.discriminatedUnion("participation", [
+	z.discriminatedUnion("scope", [z.strictObject({
+		participation: z.literal("initiator"),
+		scope: z.literal("internal"),
+		type: z.string().trim().min(1).optional(),
+		id: z.string().trim().min(1).optional()
+	}), z.strictObject({
+		participation: z.literal("initiator"),
+		scope: z.literal("external"),
+		source: z.string().trim().min(1).optional(),
+		type: z.string().trim().min(1).optional(),
+		id: z.string().trim().min(1).optional()
+	})]),
+	z.discriminatedUnion("scope", [z.strictObject({
+		participation: z.literal("principal"),
+		scope: z.literal("internal"),
+		type: z.string().trim().min(1).optional(),
+		id: z.string().trim().min(1).optional()
+	}), z.strictObject({
+		participation: z.literal("principal"),
+		scope: z.literal("external"),
+		source: z.string().trim().min(1).optional(),
+		type: z.string().trim().min(1).optional(),
+		id: z.string().trim().min(1).optional()
+	})]),
+	z.discriminatedUnion("scope", [z.strictObject({
+		participation: z.literal("delegation"),
+		scope: z.literal("internal"),
+		type: z.string().trim().min(1).optional(),
+		id: z.string().trim().min(1).optional(),
+		role: z.enum(["delegate", "assistant"]).optional()
+	}), z.strictObject({
+		participation: z.literal("delegation"),
+		scope: z.literal("external"),
+		source: z.string().trim().min(1).optional(),
+		type: z.string().trim().min(1).optional(),
+		id: z.string().trim().min(1).optional(),
+		role: z.enum(["delegate", "assistant"]).optional()
+	})])
+]));
+const automationEventPathSchema = z.lazy(() => z.string().trim().min(1).refine((path) => !isAutomationActorProvenancePath(path), { message: "Actor routing must use the structural actor matcher." }));
+const automationEventMatcherSchema = z.lazy(() => z.lazy(() => z.union([
+	z.strictObject({ actor: automationActorMatcherSchema }),
+	z.object({
+		path: automationEventPathSchema,
+		op: z.literal("exists")
+	}),
+	z.object({
+		path: automationEventPathSchema,
+		op: z.union([
+			z.literal("eq"),
+			z.literal("neq"),
+			z.literal("startsWith"),
+			z.literal("includes")
+		]),
+		value: z.unknown()
+	}),
+	z.object({ all: z.array(automationEventMatcherSchema) }),
+	z.object({ any: z.array(automationEventMatcherSchema) }),
+	z.object({ not: automationEventMatcherSchema })
+]))).meta({ id: "AutomationEventMatcher" });
+const automationRouteOrganizationScopeTemplateSchema = z.lazy(() => z.object({
+	kind: z.literal("org"),
+	orgIdTemplate: z.string().trim().min(1)
+}));
+const automationRouteUserScopeTemplateSchema = z.lazy(() => z.object({
+	kind: z.literal("user"),
+	userIdTemplate: z.string().trim().min(1)
+}));
+const automationRouteAppScopeTemplateSchema = z.lazy(() => z.object({
+	kind: z.literal("app"),
+	owner: z.discriminatedUnion("kind", [automationRouteOrganizationScopeTemplateSchema, automationRouteUserScopeTemplateSchema]),
+	appIdTemplate: z.string().trim().min(1)
+}));
+const automationRouteScopeTemplateSchema = z.lazy(() => z.discriminatedUnion("kind", [
+	z.object({ kind: z.literal("system") }),
+	automationRouteOrganizationScopeTemplateSchema,
+	automationRouteUserScopeTemplateSchema,
+	automationRouteAppScopeTemplateSchema,
+	z.object({
+		kind: z.literal("project"),
+		owner: z.discriminatedUnion("kind", [
+			automationRouteOrganizationScopeTemplateSchema,
+			automationRouteUserScopeTemplateSchema,
+			automationRouteAppScopeTemplateSchema
+		]),
+		projectIdTemplate: z.string().trim().min(1)
+	})
+])).meta({ id: "AutomationRouteScopeTemplate" });
+function backofficePermissionKey(grant) {
+	return `${grant.namespace}.${grant.permission}`;
+}
+const automationRouteGrantsSchema = z.lazy(() => z.array(backofficePermissionRequirementSchema).superRefine((grants, context) => {
+	const encountered = /* @__PURE__ */ new Set();
+	for (const [index, grant] of grants.entries()) {
+		const key = backofficePermissionKey(grant);
+		if (encountered.has(key)) context.addIssue({
+			code: "custom",
+			path: [index],
+			message: `Automation route grant '${key}' is duplicated.`
+		});
+		encountered.add(key);
+	}
+}));
+const organizationAutomationAuthoritySchema = z.lazy(() => z.strictObject({
+	kind: z.literal("organization-automation"),
+	grants: automationRouteGrantsSchema
+}));
+const automationAuthorityModeSchema = z.lazy(() => z.discriminatedUnion("kind", [
+	z.strictObject({
+		kind: z.literal("delegated-user"),
+		grants: z.union([automationRouteGrantsSchema, z.literal("inherit")])
+	}),
+	z.strictObject({
+		kind: z.literal("linked-user"),
+		grants: z.union([automationRouteGrantsSchema, z.literal("inherit")])
+	}),
+	organizationAutomationAuthoritySchema
+]));
+const automationStartWorkflowActionSchema = z.lazy(() => z.strictObject({
+	kind: z.literal("start_workflow"),
+	authority: automationAuthorityModeSchema,
+	workflowScriptPath: z.string().trim().min(1),
+	instanceIdTemplate: z.string().trim().min(1)
+})).meta({
+	id: "AutomationStartWorkflowAction",
+	codemodeInputId: "AutomationStartWorkflowActionInput"
+});
+const automationWorkflowEventTargetSchema = z.lazy(() => z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("instance_id"),
+	template: z.string().trim().min(1)
+}).meta({ id: "AutomationWorkflowEventInstanceIdTarget" }), z.object({
+	kind: z.literal("stored_instance_id"),
+	keyTemplate: z.string().trim().min(1)
+}).meta({ id: "AutomationWorkflowEventStoredInstanceIdTarget" })])).meta({ id: "AutomationWorkflowEventTarget" });
+const automationSendWorkflowEventActionSchema = z.lazy(() => z.strictObject({
+	kind: z.literal("send_workflow_event"),
+	target: automationWorkflowEventTargetSchema,
+	eventType: z.string().trim().min(1),
+	payload: z.unknown().optional()
+})).meta({
+	id: "AutomationSendWorkflowEventAction",
+	codemodeInputId: "AutomationSendWorkflowEventActionInput"
+});
+const automationForwardEventActionSchema = z.lazy(() => z.object({
+	kind: z.literal("forward_event"),
+	targetScope: automationRouteScopeTemplateSchema,
+	idTemplate: z.string().trim().min(1).optional()
+})).meta({
+	id: "AutomationForwardEventAction",
+	codemodeInputId: "AutomationForwardEventActionInput"
+});
+const automationEventPayloadProjectionSchema = z.lazy(() => z.strictObject({
+	kind: z.literal("projection"),
+	fields: z.record(z.string().trim().min(1), z.string().trim().refine((path) => path === "$" || path.startsWith("$."), { message: "Projection paths must start with $." }))
+})).meta({ id: "AutomationEventPayloadProjection" });
+const automationReclassifyEventActionSchema = z.lazy(() => z.strictObject({
+	kind: z.literal("reclassify_event"),
+	source: z.string().trim().min(1),
+	eventType: z.string().trim().min(1),
+	payload: automationEventPayloadProjectionSchema
+})).meta({
+	id: "AutomationReclassifyEventAction",
+	codemodeInputId: "AutomationReclassifyEventActionInput"
+});
+const automationNotifyAgentActionSchema = z.lazy(() => z.strictObject({
+	kind: z.literal("notify_agent"),
+	agentName: piAgentNameSchema,
+	authority: automationAuthorityModeSchema
+})).meta({
+	id: "AutomationNotifyAgentAction",
+	codemodeInputId: "AutomationNotifyAgentActionInput"
+});
+const automationRouteActionSchema = z.lazy(() => z.discriminatedUnion("kind", [
+	automationStartWorkflowActionSchema,
+	automationSendWorkflowEventActionSchema,
+	automationForwardEventActionSchema,
+	automationReclassifyEventActionSchema,
+	automationNotifyAgentActionSchema
+])).meta({
+	id: "AutomationRouteAction",
+	codemodeInputId: "AutomationRouteActionInput"
+});
+const automationRouteManagedBySchema = z.lazy(() => z.strictObject({
+	kind: z.literal("marketplace"),
+	listingId: z.string().trim().min(1),
+	resourceKey: z.string().trim().min(1),
+	version: z.string().trim().min(1)
+})).meta({ id: "AutomationRouteManagedBy" });
+const automationRouteMetadataSchema = z.lazy(() => z.strictObject({
+	createdByActors: automationActorsSchema,
+	updatedByActors: automationActorsSchema,
+	managedBy: automationRouteManagedBySchema.nullable()
+}));
+const automationRouteEventTriggerSchema = z.lazy(() => z.object({
+	kind: z.literal("event"),
+	source: z.string().trim().min(1),
+	eventType: z.string().trim().min(1),
+	matcher: automationEventMatcherSchema.nullable().default(null)
+}));
+const automationRouteScheduleTriggerSchema = z.lazy(() => z.object({
+	kind: z.literal("schedule"),
+	cadence: automationScheduleCadenceSchema
+}));
+const automationRouteTriggerSchema = z.lazy(() => z.discriminatedUnion("kind", [automationRouteEventTriggerSchema, automationRouteScheduleTriggerSchema])).meta({
+	id: "AutomationRouteTrigger",
+	codemodeInputId: "AutomationRouteTriggerInput"
+});
+const automationRouteConfigurationSchema = z.lazy(() => z.union([z.object({
+	trigger: automationRouteEventTriggerSchema,
+	action: automationRouteActionSchema
+}), z.object({
+	trigger: automationRouteScheduleTriggerSchema,
+	action: z.union([
+		automationStartWorkflowActionSchema._zod.innerType.extend({ authority: organizationAutomationAuthoritySchema }),
+		automationSendWorkflowEventActionSchema,
+		automationForwardEventActionSchema,
+		automationReclassifyEventActionSchema,
+		automationNotifyAgentActionSchema._zod.innerType.extend({ authority: organizationAutomationAuthoritySchema })
+	])
+})], { error: (issue) => {
+	const configuration = z.object({
+		trigger: automationRouteScheduleTriggerSchema,
+		action: automationRouteActionSchema
+	}).safeParse(issue.input);
+	const authority = configuration.success ? automationRouteActionAuthority(configuration.data.action) : null;
+	return authority && authority.kind !== "organization-automation" ? AUTOMATION_ROUTE_AUTHORITY_ERROR_MESSAGE : void 0;
+} }));
+const automationRouteSchema = z.lazy(() => z.object({
+	id: z.string().trim().min(1),
+	name: z.string().trim().min(1),
+	enabled: z.boolean(),
+	priority: z.number().int(),
+	trigger: automationRouteTriggerSchema,
+	action: automationRouteActionSchema,
+	description: z.string().nullable().optional(),
+	metadata: automationRouteMetadataSchema.nullable(),
+	nextOccurrenceAt: z.iso.datetime().nullable()
+})).meta({ id: "AutomationRoute" });
+const automationRouteCreateInputSchema = z.lazy(() => z.object({
+	id: z.string().trim().min(1),
+	name: z.string().trim().min(1),
+	enabled: z.boolean().default(true),
+	priority: z.number().int().default(1e3),
+	description: z.string().nullable().optional(),
+	managedBy: automationRouteManagedBySchema.nullable().optional()
+}).and(automationRouteConfigurationSchema));
+const automationRouteUpdateObjectSchema = z.lazy(() => z.object({
+	id: z.string().trim().min(1),
+	name: z.string().trim().min(1).optional(),
+	enabled: z.boolean().optional(),
+	priority: z.number().int().optional(),
+	trigger: automationRouteTriggerSchema.optional(),
+	action: automationRouteActionSchema.optional(),
+	description: z.string().nullable().optional(),
+	managedBy: automationRouteManagedBySchema.nullable().optional()
+}));
+const automationRouteUpdatePayloadSchema = z.lazy(() => automationRouteUpdateObjectSchema._zod.innerType.omit({ id: true }).refine((patch) => Object.values(patch).some((value) => typeof value !== "undefined"), { message: "At least one route field must be provided." }));
+const automationRouteUpdateInputSchema = z.lazy(() => automationRouteUpdateObjectSchema.refine(({ id: _id, ...patch }) => Object.values(patch).some((value) => typeof value !== "undefined"), { message: "At least one route field must be provided." }));
+const automationRouterOperations = {
+	"router.list": {
+		description: "List database-backed automation routing rules.",
+		permissions: [BACKOFFICE_PERMISSION.router.read],
+		input: z.void(),
+		output: z.lazy(() => z.array(automationRouteSchema))
+	},
+	"router.get": {
+		description: "Get one database-backed automation routing rule.",
+		permissions: [BACKOFFICE_PERMISSION.router.read],
+		input: z.lazy(() => z.object({ id: z.string().trim().min(1) })),
+		output: z.lazy(() => automationRouteSchema.nullable())
+	},
+	"router.create": {
+		description: "Create a database-backed automation routing rule.",
+		permissions: [BACKOFFICE_PERMISSION.router.modify],
+		input: automationRouteCreateInputSchema,
+		output: automationRouteSchema
+	},
+	"router.update": {
+		description: "Update a database-backed automation routing rule.",
+		permissions: [BACKOFFICE_PERMISSION.router.modify],
+		input: automationRouteUpdateInputSchema,
+		output: z.lazy(() => automationRouteSchema.nullable())
+	},
+	"router.delete": {
+		description: "Idempotently delete a database-backed automation route.",
+		permissions: [BACKOFFICE_PERMISSION.router.modify],
+		input: z.lazy(() => z.object({ id: z.string().trim().min(1) })),
+		output: z.lazy(() => z.object({ deleted: z.literal(true) }))
+	},
+	"router.trigger-now": {
+		description: "Trigger a scheduled automation route immediately without changing its cadence.",
+		permissions: [BACKOFFICE_PERMISSION.router.modify],
+		input: z.lazy(() => z.object({ id: z.string().trim().min(1) })),
+		output: z.lazy(() => z.object({
+			accepted: z.literal(true),
+			eventId: z.string()
+		}).nullable())
+	}
+};
+//#endregion
+export { AUTOMATION_ROUTE_AUTHORITY_ERROR_MESSAGE, automationActorsSchema, automationDelegatedActorSchema, automationEntityRefsEqual, automationRouteActionAuthority, automationRouteActionSchema, automationRouteCreateInputSchema, automationRouteManagedBySchema, automationRouteSchema, automationRouteUpdateInputSchema, automationRouteUpdatePayloadSchema, automationRouterOperations, automationScheduleCadenceSchema, isAutomationActorProvenancePath };
+
+//# sourceMappingURL=automation.js.map

package/dist/v0/automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.js","names":[],"sources":["../../src/v0/automation.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { BackofficeApiOperation } from \"../api\";\nimport { BACKOFFICE_PERMISSION } from \"./shared/permissions\";\nimport {\n  backofficePermissionRequirementSchema,\n  type BackofficePermissionRequirement,\n} from \"./shared/permissions\";\nimport { piAgentNameSchema } from \"./shared/pi-agent-name\";\n\nexport type AutomationExternalEntityRef<\n  TSource extends string = string,\n  TType extends string = string,\n> = {\n  scope: \"external\";\n  source: TSource;\n  type: TType;\n  id: string;\n};\n\nexport type AutomationEntityRef<TType extends string = string> =\n  | {\n      scope: \"internal\";\n      type: TType;\n      id: string;\n    }\n  | AutomationExternalEntityRef<string, TType>;\n\ntype AutomationActorRole = \"initiator\" | \"principal\" | \"delegate\" | \"assistant\";\n\nexport type AutomationActor<TRole extends AutomationActorRole = AutomationActorRole> =\n  AutomationEntityRef & {\n    role: TRole;\n  };\n\nexport type AutomationActors = Readonly<{\n  initiator: AutomationActor<\"initiator\">;\n  principal: AutomationActor<\"principal\"> | null;\n  delegation: readonly (AutomationActor<\"delegate\"> | AutomationActor<\"assistant\">)[];\n}>;\n\nconst automationInternalEntitySchema = z.lazy(() =>\n  z.strictObject({\n    scope: z.literal(\"internal\"),\n    type: z.string().trim().min(1),\n    id: z.string().trim().min(1),\n  }),\n);\n\nconst automationExternalEntitySchema = z.lazy(() =>\n  z.strictObject({\n    scope: z.literal(\"external\"),\n    source: z.string().trim().min(1),\n    type: z.string().trim().min(1),\n    id: z.string().trim().min(1),\n  }),\n);\n\nconst automationInitiatorActorSchema = z.lazy(() =>\n  z.discriminatedUnion(\"scope\", [\n    automationInternalEntitySchema._zod.innerType.extend({ role: z.literal(\"initiator\") }),\n    automationExternalEntitySchema._zod.innerType.extend({ role: z.literal(\"initiator\") }),\n  ]),\n);\n\nconst automationPrincipalActorSchema = z.lazy(() =>\n  z.discriminatedUnion(\"scope\", [\n    automationInternalEntitySchema._zod.innerType.extend({ role: z.literal(\"principal\") }),\n    automationExternalEntitySchema._zod.innerType.extend({ role: z.literal(\"principal\") }),\n  ]),\n);\n\nconst automationDelegateActorSchema = z.lazy(() =>\n  z.discriminatedUnion(\"scope\", [\n    automationInternalEntitySchema._zod.innerType.extend({ role: z.literal(\"delegate\") }),\n    automationExternalEntitySchema._zod.innerType.extend({ role: z.literal(\"delegate\") }),\n  ]),\n);\n\nconst automationAssistantActorSchema = z.lazy(() =>\n  z.discriminatedUnion(\"scope\", [\n    automationInternalEntitySchema._zod.innerType.extend({ role: z.literal(\"assistant\") }),\n    automationExternalEntitySchema._zod.innerType.extend({ role: z.literal(\"assistant\") }),\n  ]),\n);\n\nexport const automationEntityRefsEqual = (left: AutomationEntityRef, right: AutomationEntityRef) =>\n  left.scope === right.scope &&\n  left.type === right.type &&\n  left.id === right.id &&\n  (left.scope === \"internal\" || (right.scope === \"external\" && left.source === right.source));\n\nexport const automationDelegatedActorSchema = z.lazy(() =>\n  z.discriminatedUnion(\"role\", [automationDelegateActorSchema, automationAssistantActorSchema]),\n);\n\nexport const automationActorsSchema: z.ZodType<AutomationActors> = z.lazy(() =>\n  z\n    .strictObject({\n      initiator: automationInitiatorActorSchema,\n      principal: automationPrincipalActorSchema.nullable(),\n      delegation: z.array(automationDelegatedActorSchema),\n    })\n    .superRefine((actors, context) => {\n      const actorSequence = [\n        actors.initiator,\n        ...(actors.principal ? [actors.principal] : []),\n        ...actors.delegation,\n      ];\n\n      const hasDuplicateIdentity = actorSequence.some((actor, actorIndex) =>\n        actorSequence\n          .slice(0, actorIndex)\n          .some((previousActor) => automationEntityRefsEqual(previousActor, actor)),\n      );\n\n      if (hasDuplicateIdentity) {\n        context.addIssue({\n          code: \"custom\",\n          message: \"Automation actor provenance contains duplicate identities.\",\n        });\n      }\n    }),\n);\n\n/**\n * Explicit grants narrow the user's authority. `inherit` leaves the user's current permissions\n * unrestricted by the route delegate.\n */\ntype AutomationUserRouteGrants = readonly BackofficePermissionRequirement[] | \"inherit\";\n\n/**\n * Selects whose current permissions authorize protected work started by an automation route.\n *\n * A delegate is an additional capability boundary, not an impersonated principal. The kernel\n * requires both the principal and every delegate to grant an operation, so delegation can narrow\n * authority but can never give the principal permissions they do not already have.\n */\nexport type AutomationAuthorityMode =\n  | {\n      /**\n       * Run on behalf of the internal user principal carried by the triggering event.\n       *\n       * The user remains the principal and the stable route automation identity is appended as a\n       * delegate. For each protected operation, the authority resolver looks up the user's current\n       * role, status, and organization membership, then resolves the internal automation delegate\n       * from the owning route's current grants. The kernel requires both resulting grant sets to\n       * contain the operation. Missing, disabled, or changed routes and missing, invalid, banned,\n       * or no-longer-authorized users therefore fail closed. The delegate can restrict but never\n       * elevate the user.\n       */\n      kind: \"delegated-user\";\n      grants: AutomationUserRouteGrants;\n    }\n  | {\n      /**\n       * Resolve the external initiator's active identity binding before starting the workflow.\n       *\n       * The linked internal user becomes the principal and the stable route automation identity is\n       * appended as a delegate. Events without an active binding do not start the workflow.\n       */\n      kind: \"linked-user\";\n      grants: AutomationUserRouteGrants;\n    }\n  | {\n      /**\n       * Run as an organization-owned automation independently of the triggering user's authority.\n       *\n       * The stable `automation-route:<routeId>` identity becomes the principal while the original\n       * initiator remains provenance and supplies no authority. For each protected operation, the\n       * authority resolver reads the owning route's current grants. The stable route ID provides\n       * identity for persistence and auditing while making grant changes and route disablement\n       * visible to already-running workflows. The route can therefore continue after its creator or\n       * triggering user loses organization access, while remaining limited to its current explicit\n       * grants.\n       */\n      kind: \"organization-automation\";\n      grants: readonly BackofficePermissionRequirement[];\n    };\n\nexport const automationScheduleCadenceSchema = z.lazy(() =>\n  z.discriminatedUnion(\"kind\", [\n    z.object({\n      kind: z.literal(\"once\"),\n      at: z.iso.datetime(),\n    }),\n    z.object({\n      kind: z.literal(\"cron\"),\n      expression: z.string().trim().min(1),\n      timeZone: z.string().trim().min(1).default(\"UTC\"),\n    }),\n  ]),\n);\n\nexport type AutomationScheduleCadence = z.infer<typeof automationScheduleCadenceSchema>;\n\nexport type AutomationActorIdentityMatcher =\n  | {\n      scope: \"internal\";\n      source?: never;\n      type?: string;\n      id?: string;\n    }\n  | {\n      scope: \"external\";\n      source?: string;\n      type?: string;\n      id?: string;\n    };\n\nexport type AutomationActorMatcher =\n  | (AutomationActorIdentityMatcher & { participation: \"initiator\" })\n  | (AutomationActorIdentityMatcher & { participation: \"principal\" })\n  | (AutomationActorIdentityMatcher & {\n      participation: \"delegation\";\n      role?: Extract<AutomationActorRole, \"delegate\" | \"assistant\">;\n    });\n\nexport type AutomationEventMatcher =\n  | { actor: AutomationActorMatcher }\n  | { path: string; op: \"exists\" }\n  | { path: string; op: \"eq\" | \"neq\" | \"startsWith\" | \"includes\"; value: unknown }\n  | { all: AutomationEventMatcher[] }\n  | { any: AutomationEventMatcher[] }\n  | { not: AutomationEventMatcher };\n\ntype AutomationRouteRootOwnerTemplate =\n  | { kind: \"org\"; orgIdTemplate: string }\n  | { kind: \"user\"; userIdTemplate: string };\n\ntype AutomationRouteAppScopeTemplate = {\n  kind: \"app\";\n  owner: AutomationRouteRootOwnerTemplate;\n  appIdTemplate: string;\n};\n\n/** Renders to a target scope; app and project scopes name their owner as a scope template too. */\nexport type AutomationRouteScopeTemplate =\n  | { kind: \"system\" }\n  | AutomationRouteRootOwnerTemplate\n  | AutomationRouteAppScopeTemplate\n  | {\n      kind: \"project\";\n      owner: AutomationRouteRootOwnerTemplate | AutomationRouteAppScopeTemplate;\n      projectIdTemplate: string;\n    };\n\nexport type AutomationStartWorkflowAction = {\n  kind: \"start_workflow\";\n  authority: AutomationAuthorityMode;\n  workflowScriptPath: string;\n  instanceIdTemplate: string;\n};\n\nexport type AutomationWorkflowEventTarget =\n  | { kind: \"instance_id\"; template: string }\n  | { kind: \"stored_instance_id\"; keyTemplate: string };\n\nexport type AutomationSendWorkflowEventAction = {\n  kind: \"send_workflow_event\";\n  target: AutomationWorkflowEventTarget;\n  eventType: string;\n  payload?: unknown;\n};\n\nexport type AutomationForwardEventAction = {\n  kind: \"forward_event\";\n  targetScope: AutomationRouteScopeTemplate;\n  idTemplate?: string;\n};\n\nexport type AutomationEventPayloadProjection = {\n  kind: \"projection\";\n  fields: Record<string, string>;\n};\n\nexport type AutomationReclassifyEventAction = {\n  kind: \"reclassify_event\";\n  source: string;\n  eventType: string;\n  payload: AutomationEventPayloadProjection;\n};\n\n/** Delivers the event to an agent in the route's scope as a turn run with the route's authority. */\nexport type AutomationNotifyAgentAction = {\n  kind: \"notify_agent\";\n  agentName: string;\n  authority: AutomationAuthorityMode;\n};\n\nexport type AutomationRouteAction =\n  | AutomationStartWorkflowAction\n  | AutomationSendWorkflowEventAction\n  | AutomationForwardEventAction\n  | AutomationReclassifyEventAction\n  | AutomationNotifyAgentAction;\n\n/** The authority an action runs its work with, or null for actions that only move events. */\nexport function automationRouteActionAuthority(\n  action: AutomationRouteAction,\n): AutomationAuthorityMode | null {\n  return action.kind === \"start_workflow\" || action.kind === \"notify_agent\"\n    ? action.authority\n    : null;\n}\n\nexport type AutomationRouteEventTrigger = {\n  kind: \"event\";\n  source: string;\n  eventType: string;\n  matcher: AutomationEventMatcher | null;\n};\n\nexport type AutomationRouteScheduleTrigger = {\n  kind: \"schedule\";\n  cadence: AutomationScheduleCadence;\n};\n\nexport type AutomationRouteTrigger = AutomationRouteEventTrigger | AutomationRouteScheduleTrigger;\n\nexport type AutomationRouteManagedBy = {\n  kind: \"marketplace\";\n  listingId: string;\n  resourceKey: string;\n  version: string;\n};\n\nexport type AutomationRouteMetadata = {\n  createdByActors: AutomationActors;\n  updatedByActors: AutomationActors;\n  managedBy: AutomationRouteManagedBy | null;\n};\n\n/** Persisted routes may predate the authority rules enforced on create and activation. */\nexport type AutomationRouteDefinition = {\n  trigger: AutomationRouteTrigger;\n  action: AutomationRouteAction;\n  id: string;\n  name: string;\n  enabled: boolean;\n  priority: number;\n  description?: string | null;\n  metadata?: AutomationRouteMetadata | null;\n  nextOccurrenceAt: string | null;\n};\n\nexport const isAutomationActorProvenancePath = (path: string) =>\n  path === \"$.actor\" ||\n  path.startsWith(\"$.actor.\") ||\n  path.startsWith(\"$.actor[\") ||\n  path === \"$.actors\" ||\n  path.startsWith(\"$.actors.\") ||\n  path.startsWith(\"$.actors[\");\n\n/** Scheduled routes have no triggering user, so only organization authority can start workflows. */\nexport const AUTOMATION_ROUTE_AUTHORITY_ERROR_MESSAGE =\n  \"Scheduled workflows and agent notifications require organization-automation authority. Linked-user authority requires an external sender; delegated-user authority requires a user principal.\";\n\nconst automationActorMatcherSchema: z.ZodType<AutomationActorMatcher> = z.lazy(() =>\n  z.discriminatedUnion(\"participation\", [\n    z.discriminatedUnion(\"scope\", [\n      z.strictObject({\n        participation: z.literal(\"initiator\"),\n        scope: z.literal(\"internal\"),\n        type: z.string().trim().min(1).optional(),\n        id: z.string().trim().min(1).optional(),\n      }),\n      z.strictObject({\n        participation: z.literal(\"initiator\"),\n        scope: z.literal(\"external\"),\n        source: z.string().trim().min(1).optional(),\n        type: z.string().trim().min(1).optional(),\n        id: z.string().trim().min(1).optional(),\n      }),\n    ]),\n    z.discriminatedUnion(\"scope\", [\n      z.strictObject({\n        participation: z.literal(\"principal\"),\n        scope: z.literal(\"internal\"),\n        type: z.string().trim().min(1).optional(),\n        id: z.string().trim().min(1).optional(),\n      }),\n      z.strictObject({\n        participation: z.literal(\"principal\"),\n        scope: z.literal(\"external\"),\n        source: z.string().trim().min(1).optional(),\n        type: z.string().trim().min(1).optional(),\n        id: z.string().trim().min(1).optional(),\n      }),\n    ]),\n    z.discriminatedUnion(\"scope\", [\n      z.strictObject({\n        participation: z.literal(\"delegation\"),\n        scope: z.literal(\"internal\"),\n        type: z.string().trim().min(1).optional(),\n        id: z.string().trim().min(1).optional(),\n        role: z.enum([\"delegate\", \"assistant\"]).optional(),\n      }),\n      z.strictObject({\n        participation: z.literal(\"delegation\"),\n        scope: z.literal(\"external\"),\n        source: z.string().trim().min(1).optional(),\n        type: z.string().trim().min(1).optional(),\n        id: z.string().trim().min(1).optional(),\n        role: z.enum([\"delegate\", \"assistant\"]).optional(),\n      }),\n    ]),\n  ]),\n);\n\nconst automationEventPathSchema = z.lazy(() =>\n  z\n    .string()\n    .trim()\n    .min(1)\n    .refine((path) => !isAutomationActorProvenancePath(path), {\n      message: \"Actor routing must use the structural actor matcher.\",\n    }),\n);\n\nconst automationEventMatcherSchema: z.ZodType<AutomationEventMatcher> = z\n  .lazy(() =>\n    z.lazy(() =>\n      z.union([\n        z.strictObject({ actor: automationActorMatcherSchema }),\n        z.object({ path: automationEventPathSchema, op: z.literal(\"exists\") }),\n        z.object({\n          path: automationEventPathSchema,\n          op: z.union([\n            z.literal(\"eq\"),\n            z.literal(\"neq\"),\n            z.literal(\"startsWith\"),\n            z.literal(\"includes\"),\n          ]),\n          value: z.unknown(),\n        }),\n        z.object({ all: z.array(automationEventMatcherSchema) }),\n        z.object({ any: z.array(automationEventMatcherSchema) }),\n        z.object({ not: automationEventMatcherSchema }),\n      ]),\n    ),\n  )\n  .meta({ id: \"AutomationEventMatcher\" });\n\nconst automationRouteOrganizationScopeTemplateSchema = z.lazy(() =>\n  z.object({\n    kind: z.literal(\"org\"),\n    orgIdTemplate: z.string().trim().min(1),\n  }),\n);\nconst automationRouteUserScopeTemplateSchema = z.lazy(() =>\n  z.object({\n    kind: z.literal(\"user\"),\n    userIdTemplate: z.string().trim().min(1),\n  }),\n);\nconst automationRouteAppScopeTemplateSchema = z.lazy(() =>\n  z.object({\n    kind: z.literal(\"app\"),\n    owner: z.discriminatedUnion(\"kind\", [\n      automationRouteOrganizationScopeTemplateSchema,\n      automationRouteUserScopeTemplateSchema,\n    ]),\n    appIdTemplate: z.string().trim().min(1),\n  }),\n);\n\nconst automationRouteScopeTemplateSchema: z.ZodType<AutomationRouteScopeTemplate> = z\n  .lazy(() =>\n    z.discriminatedUnion(\"kind\", [\n      z.object({ kind: z.literal(\"system\") }),\n      automationRouteOrganizationScopeTemplateSchema,\n      automationRouteUserScopeTemplateSchema,\n      automationRouteAppScopeTemplateSchema,\n      z.object({\n        kind: z.literal(\"project\"),\n        owner: z.discriminatedUnion(\"kind\", [\n          automationRouteOrganizationScopeTemplateSchema,\n          automationRouteUserScopeTemplateSchema,\n          automationRouteAppScopeTemplateSchema,\n        ]),\n        projectIdTemplate: z.string().trim().min(1),\n      }),\n    ]),\n  )\n  .meta({ id: \"AutomationRouteScopeTemplate\" });\n\nfunction backofficePermissionKey(grant: BackofficePermissionRequirement): string {\n  return `${grant.namespace}.${grant.permission}`;\n}\n\nconst automationRouteGrantsSchema = z.lazy(() =>\n  z.array(backofficePermissionRequirementSchema).superRefine((grants, context) => {\n    const encountered = new Set<string>();\n    for (const [index, grant] of grants.entries()) {\n      const key = backofficePermissionKey(grant);\n      if (encountered.has(key)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [index],\n          message: `Automation route grant '${key}' is duplicated.`,\n        });\n      }\n      encountered.add(key);\n    }\n  }),\n) satisfies z.ZodType<readonly BackofficePermissionRequirement[]>;\n\nconst organizationAutomationAuthoritySchema = z.lazy(() =>\n  z.strictObject({\n    kind: z.literal(\"organization-automation\"),\n    grants: automationRouteGrantsSchema,\n  }),\n);\n\nconst automationAuthorityModeSchema = z.lazy(() =>\n  z.discriminatedUnion(\"kind\", [\n    z.strictObject({\n      kind: z.literal(\"delegated-user\"),\n      grants: z.union([automationRouteGrantsSchema, z.literal(\"inherit\")]),\n    }),\n    z.strictObject({\n      kind: z.literal(\"linked-user\"),\n      grants: z.union([automationRouteGrantsSchema, z.literal(\"inherit\")]),\n    }),\n    organizationAutomationAuthoritySchema,\n  ]),\n);\n\nconst automationStartWorkflowActionSchema = z\n  .lazy(() =>\n    z.strictObject({\n      kind: z.literal(\"start_workflow\"),\n      authority: automationAuthorityModeSchema,\n      workflowScriptPath: z.string().trim().min(1),\n      instanceIdTemplate: z.string().trim().min(1),\n    }),\n  )\n  .meta({\n    id: \"AutomationStartWorkflowAction\",\n    codemodeInputId: \"AutomationStartWorkflowActionInput\",\n  }) satisfies z.ZodType<AutomationStartWorkflowAction>;\n\nconst automationWorkflowEventTargetSchema: z.ZodType<AutomationWorkflowEventTarget> = z\n  .lazy(() =>\n    z.discriminatedUnion(\"kind\", [\n      z.object({ kind: z.literal(\"instance_id\"), template: z.string().trim().min(1) }).meta({\n        id: \"AutomationWorkflowEventInstanceIdTarget\",\n      }),\n      z\n        .object({ kind: z.literal(\"stored_instance_id\"), keyTemplate: z.string().trim().min(1) })\n        .meta({\n          id: \"AutomationWorkflowEventStoredInstanceIdTarget\",\n        }),\n    ]),\n  )\n  .meta({ id: \"AutomationWorkflowEventTarget\" });\n\nconst automationSendWorkflowEventActionSchema = z\n  .lazy(() =>\n    z.strictObject({\n      kind: z.literal(\"send_workflow_event\"),\n      target: automationWorkflowEventTargetSchema,\n      eventType: z.string().trim().min(1),\n      payload: z.unknown().optional(),\n    }),\n  )\n  .meta({\n    id: \"AutomationSendWorkflowEventAction\",\n    codemodeInputId: \"AutomationSendWorkflowEventActionInput\",\n  }) satisfies z.ZodType<AutomationSendWorkflowEventAction>;\n\nconst automationForwardEventActionSchema = z\n  .lazy(() =>\n    z.object({\n      kind: z.literal(\"forward_event\"),\n      targetScope: automationRouteScopeTemplateSchema,\n      idTemplate: z.string().trim().min(1).optional(),\n    }),\n  )\n  .meta({\n    id: \"AutomationForwardEventAction\",\n    codemodeInputId: \"AutomationForwardEventActionInput\",\n  }) satisfies z.ZodType<AutomationForwardEventAction>;\n\nconst automationEventPayloadProjectionSchema = z\n  .lazy(() =>\n    z.strictObject({\n      kind: z.literal(\"projection\"),\n      fields: z.record(\n        z.string().trim().min(1),\n        z\n          .string()\n          .trim()\n          .refine((path) => path === \"$\" || path.startsWith(\"$.\"), {\n            message: \"Projection paths must start with $.\",\n          }),\n      ),\n    }),\n  )\n  .meta({\n    id: \"AutomationEventPayloadProjection\",\n  }) satisfies z.ZodType<AutomationEventPayloadProjection>;\n\nconst automationReclassifyEventActionSchema = z\n  .lazy(() =>\n    z.strictObject({\n      kind: z.literal(\"reclassify_event\"),\n      source: z.string().trim().min(1),\n      eventType: z.string().trim().min(1),\n      payload: automationEventPayloadProjectionSchema,\n    }),\n  )\n  .meta({\n    id: \"AutomationReclassifyEventAction\",\n    codemodeInputId: \"AutomationReclassifyEventActionInput\",\n  }) satisfies z.ZodType<AutomationReclassifyEventAction>;\n\nconst automationNotifyAgentActionSchema = z\n  .lazy(() =>\n    z.strictObject({\n      kind: z.literal(\"notify_agent\"),\n      agentName: piAgentNameSchema,\n      authority: automationAuthorityModeSchema,\n    }),\n  )\n  .meta({\n    id: \"AutomationNotifyAgentAction\",\n    codemodeInputId: \"AutomationNotifyAgentActionInput\",\n  }) satisfies z.ZodType<AutomationNotifyAgentAction>;\n\nexport const automationRouteActionSchema = z\n  .lazy(() =>\n    z.discriminatedUnion(\"kind\", [\n      automationStartWorkflowActionSchema,\n      automationSendWorkflowEventActionSchema,\n      automationForwardEventActionSchema,\n      automationReclassifyEventActionSchema,\n      automationNotifyAgentActionSchema,\n    ]),\n  )\n  .meta({\n    id: \"AutomationRouteAction\",\n    codemodeInputId: \"AutomationRouteActionInput\",\n  }) satisfies z.ZodType<AutomationRouteAction>;\n\nexport const automationRouteManagedBySchema: z.ZodType<AutomationRouteManagedBy> = z\n  .lazy(() =>\n    z.strictObject({\n      kind: z.literal(\"marketplace\"),\n      listingId: z.string().trim().min(1),\n      resourceKey: z.string().trim().min(1),\n      version: z.string().trim().min(1),\n    }),\n  )\n  .meta({ id: \"AutomationRouteManagedBy\" });\n\nconst automationRouteMetadataSchema = z.lazy(() =>\n  z.strictObject({\n    createdByActors: automationActorsSchema,\n    updatedByActors: automationActorsSchema,\n    managedBy: automationRouteManagedBySchema.nullable(),\n  }),\n);\n\nconst automationRouteEventTriggerSchema = z.lazy(() =>\n  z.object({\n    kind: z.literal(\"event\"),\n    source: z.string().trim().min(1),\n    eventType: z.string().trim().min(1),\n    matcher: automationEventMatcherSchema.nullable().default(null),\n  }),\n);\n\nconst automationRouteScheduleTriggerSchema = z.lazy(() =>\n  z.object({\n    kind: z.literal(\"schedule\"),\n    cadence: automationScheduleCadenceSchema,\n  }),\n);\n\nconst automationRouteTriggerSchema: z.ZodType<AutomationRouteTrigger> = z\n  .lazy(() =>\n    z.discriminatedUnion(\"kind\", [\n      automationRouteEventTriggerSchema,\n      automationRouteScheduleTriggerSchema,\n    ]),\n  )\n  .meta({ id: \"AutomationRouteTrigger\", codemodeInputId: \"AutomationRouteTriggerInput\" });\n\nconst automationRouteConfigurationSchema = z.lazy(() =>\n  z.union(\n    [\n      z.object({\n        trigger: automationRouteEventTriggerSchema,\n        action: automationRouteActionSchema,\n      }),\n      z.object({\n        trigger: automationRouteScheduleTriggerSchema,\n        action: z.union([\n          automationStartWorkflowActionSchema._zod.innerType.extend({\n            authority: organizationAutomationAuthoritySchema,\n          }),\n          automationSendWorkflowEventActionSchema,\n          automationForwardEventActionSchema,\n          automationReclassifyEventActionSchema,\n          automationNotifyAgentActionSchema._zod.innerType.extend({\n            authority: organizationAutomationAuthoritySchema,\n          }),\n        ]),\n      }),\n    ],\n    {\n      error: (issue) => {\n        const configuration = z\n          .object({\n            trigger: automationRouteScheduleTriggerSchema,\n            action: automationRouteActionSchema,\n          })\n          .safeParse(issue.input);\n        const authority = configuration.success\n          ? automationRouteActionAuthority(configuration.data.action)\n          : null;\n        return authority && authority.kind !== \"organization-automation\"\n          ? AUTOMATION_ROUTE_AUTHORITY_ERROR_MESSAGE\n          : undefined;\n      },\n    },\n  ),\n);\n\nexport const automationRouteSchema: z.ZodType<AutomationRouteDefinition> = z\n  .lazy(() =>\n    z.object({\n      id: z.string().trim().min(1),\n      name: z.string().trim().min(1),\n      enabled: z.boolean(),\n      priority: z.number().int(),\n      trigger: automationRouteTriggerSchema,\n      action: automationRouteActionSchema,\n      description: z.string().nullable().optional(),\n      metadata: automationRouteMetadataSchema.nullable(),\n      nextOccurrenceAt: z.iso.datetime().nullable(),\n    }),\n  )\n  .meta({ id: \"AutomationRoute\" });\n\nexport const automationRouteCreateInputSchema = z.lazy(() =>\n  z\n    .object({\n      id: z.string().trim().min(1),\n      name: z.string().trim().min(1),\n      enabled: z.boolean().default(true),\n      priority: z.number().int().default(1000),\n      description: z.string().nullable().optional(),\n      managedBy: automationRouteManagedBySchema.nullable().optional(),\n    })\n    .and(automationRouteConfigurationSchema),\n);\n\nconst automationRouteUpdateObjectSchema = z.lazy(() =>\n  z.object({\n    id: z.string().trim().min(1),\n    name: z.string().trim().min(1).optional(),\n    enabled: z.boolean().optional(),\n    priority: z.number().int().optional(),\n    trigger: automationRouteTriggerSchema.optional(),\n    action: automationRouteActionSchema.optional(),\n    description: z.string().nullable().optional(),\n    managedBy: automationRouteManagedBySchema.nullable().optional(),\n  }),\n);\n\nexport const automationRouteUpdatePayloadSchema = z.lazy(() =>\n  automationRouteUpdateObjectSchema._zod.innerType\n    .omit({ id: true })\n    .refine((patch) => Object.values(patch).some((value) => typeof value !== \"undefined\"), {\n      message: \"At least one route field must be provided.\",\n    }),\n);\n\nexport const automationRouteUpdateInputSchema = z.lazy(() =>\n  automationRouteUpdateObjectSchema.refine(\n    ({ id: _id, ...patch }) => Object.values(patch).some((value) => typeof value !== \"undefined\"),\n    { message: \"At least one route field must be provided.\" },\n  ),\n);\n\nexport type AutomationRouteCreateInput = z.infer<typeof automationRouteCreateInputSchema>;\n\nexport type AutomationRouteUpdateInput = z.infer<typeof automationRouteUpdateInputSchema>;\n\nexport const automationRouterOperations = {\n  \"router.list\": {\n    description: \"List database-backed automation routing rules.\",\n    permissions: [BACKOFFICE_PERMISSION.router.read],\n    input: z.void(),\n    output: z.lazy(() => z.array(automationRouteSchema)),\n  },\n  \"router.get\": {\n    description: \"Get one database-backed automation routing rule.\",\n    permissions: [BACKOFFICE_PERMISSION.router.read],\n    input: z.lazy(() => z.object({ id: z.string().trim().min(1) })),\n    output: z.lazy(() => automationRouteSchema.nullable()),\n  },\n  \"router.create\": {\n    description: \"Create a database-backed automation routing rule.\",\n    permissions: [BACKOFFICE_PERMISSION.router.modify],\n    input: automationRouteCreateInputSchema,\n    output: automationRouteSchema,\n  },\n  \"router.update\": {\n    description: \"Update a database-backed automation routing rule.\",\n    permissions: [BACKOFFICE_PERMISSION.router.modify],\n    input: automationRouteUpdateInputSchema,\n    output: z.lazy(() => automationRouteSchema.nullable()),\n  },\n  \"router.delete\": {\n    description: \"Idempotently delete a database-backed automation route.\",\n    permissions: [BACKOFFICE_PERMISSION.router.modify],\n    input: z.lazy(() => z.object({ id: z.string().trim().min(1) })),\n    output: z.lazy(() => z.object({ deleted: z.literal(true) })),\n  },\n  \"router.trigger-now\": {\n    description: \"Trigger a scheduled automation route immediately without changing its cadence.\",\n    permissions: [BACKOFFICE_PERMISSION.router.modify],\n    input: z.lazy(() => z.object({ id: z.string().trim().min(1) })),\n    output: z.lazy(() => z.object({ accepted: z.literal(true), eventId: z.string() }).nullable()),\n  },\n} satisfies Record<string, BackofficeApiOperation>;\n"],"mappings":";;;;AAyCA,MAAM,iCAAiC,EAAE,WACvC,EAAE,aAAa;CACb,OAAO,EAAE,QAAQ,UAAU;CAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC7B,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC,CACH;AAEA,MAAM,iCAAiC,EAAE,WACvC,EAAE,aAAa;CACb,OAAO,EAAE,QAAQ,UAAU;CAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC7B,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC,CACH;AAEA,MAAM,iCAAiC,EAAE,WACvC,EAAE,mBAAmB,SAAS,CAC5B,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,GACrF,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CACvF,CAAC,CACH;AAEA,MAAM,iCAAiC,EAAE,WACvC,EAAE,mBAAmB,SAAS,CAC5B,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,GACrF,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CACvF,CAAC,CACH;AAEA,MAAM,gCAAgC,EAAE,WACtC,EAAE,mBAAmB,SAAS,CAC5B,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,UAAU,EAAE,CAAC,GACpF,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,UAAU,EAAE,CAAC,CACtF,CAAC,CACH;AAEA,MAAM,iCAAiC,EAAE,WACvC,EAAE,mBAAmB,SAAS,CAC5B,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,GACrF,+BAA+B,KAAK,UAAU,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CACvF,CAAC,CACH;AAEA,MAAa,6BAA6B,MAA2B,UACnE,KAAK,UAAU,MAAM,SACrB,KAAK,SAAS,MAAM,QACpB,KAAK,OAAO,MAAM,OACjB,KAAK,UAAU,cAAe,MAAM,UAAU,cAAc,KAAK,WAAW,MAAM;AAErF,MAAa,iCAAiC,EAAE,WAC9C,EAAE,mBAAmB,QAAQ,CAAC,+BAA+B,8BAA8B,CAAC,CAC9F;AAEA,MAAa,yBAAsD,EAAE,WACnE,EACG,aAAa;CACZ,WAAW;CACX,WAAW,+BAA+B,SAAS;CACnD,YAAY,EAAE,MAAM,8BAA8B;AACpD,CAAC,CAAC,CACD,aAAa,QAAQ,YAAY;CAChC,MAAM,gBAAgB;EACpB,OAAO;EACP,GAAI,OAAO,YAAY,CAAC,OAAO,SAAS,IAAI,CAAC;EAC7C,GAAG,OAAO;CACZ;CAQA,IAN6B,cAAc,MAAM,OAAO,eACtD,cACG,MAAM,GAAG,UAAU,CAAC,CACpB,MAAM,kBAAkB,0BAA0B,eAAe,KAAK,CAAC,CAGrD,GACrB,QAAQ,SAAS;EACf,MAAM;EACN,SAAS;CACX,CAAC;AAEL,CAAC,CACL;AAyDA,MAAa,kCAAkC,EAAE,WAC/C,EAAE,mBAAmB,QAAQ,CAC3B,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,MAAM;CACtB,IAAI,EAAE,IAAI,SAAS;AACrB,CAAC,GACD,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,MAAM;CACtB,YAAY,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CACnC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK;AAClD,CAAC,CACH,CAAC,CACH;;AA0GA,SAAgB,+BACd,QACgC;CAChC,OAAO,OAAO,SAAS,oBAAoB,OAAO,SAAS,iBACvD,OAAO,YACP;AACN;AA0CA,MAAa,mCAAmC,SAC9C,SAAS,aACT,KAAK,WAAW,UAAU,KAC1B,KAAK,WAAW,UAAU,KAC1B,SAAS,cACT,KAAK,WAAW,WAAW,KAC3B,KAAK,WAAW,WAAW;;AAG7B,MAAa,2CACX;AAEF,MAAM,+BAAkE,EAAE,WACxE,EAAE,mBAAmB,iBAAiB;CACpC,EAAE,mBAAmB,SAAS,CAC5B,EAAE,aAAa;EACb,eAAe,EAAE,QAAQ,WAAW;EACpC,OAAO,EAAE,QAAQ,UAAU;EAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,CAAC,GACD,EAAE,aAAa;EACb,eAAe,EAAE,QAAQ,WAAW;EACpC,OAAO,EAAE,QAAQ,UAAU;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EAC1C,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,CAAC,CACH,CAAC;CACD,EAAE,mBAAmB,SAAS,CAC5B,EAAE,aAAa;EACb,eAAe,EAAE,QAAQ,WAAW;EACpC,OAAO,EAAE,QAAQ,UAAU;EAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,CAAC,GACD,EAAE,aAAa;EACb,eAAe,EAAE,QAAQ,WAAW;EACpC,OAAO,EAAE,QAAQ,UAAU;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EAC1C,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,CAAC,CACH,CAAC;CACD,EAAE,mBAAmB,SAAS,CAC5B,EAAE,aAAa;EACb,eAAe,EAAE,QAAQ,YAAY;EACrC,OAAO,EAAE,QAAQ,UAAU;EAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACtC,MAAM,EAAE,KAAK,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,SAAS;CACnD,CAAC,GACD,EAAE,aAAa;EACb,eAAe,EAAE,QAAQ,YAAY;EACrC,OAAO,EAAE,QAAQ,UAAU;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EAC1C,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACtC,MAAM,EAAE,KAAK,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,SAAS;CACnD,CAAC,CACH,CAAC;AACH,CAAC,CACH;AAEA,MAAM,4BAA4B,EAAE,WAClC,EACG,OAAO,CAAC,CACR,KAAK,CAAC,CACN,IAAI,CAAC,CAAC,CACN,QAAQ,SAAS,CAAC,gCAAgC,IAAI,GAAG,EACxD,SAAS,uDACX,CAAC,CACL;AAEA,MAAM,+BAAkE,EACrE,WACC,EAAE,WACA,EAAE,MAAM;CACN,EAAE,aAAa,EAAE,OAAO,6BAA6B,CAAC;CACtD,EAAE,OAAO;EAAE,MAAM;EAA2B,IAAI,EAAE,QAAQ,QAAQ;CAAE,CAAC;CACrE,EAAE,OAAO;EACP,MAAM;EACN,IAAI,EAAE,MAAM;GACV,EAAE,QAAQ,IAAI;GACd,EAAE,QAAQ,KAAK;GACf,EAAE,QAAQ,YAAY;GACtB,EAAE,QAAQ,UAAU;EACtB,CAAC;EACD,OAAO,EAAE,QAAQ;CACnB,CAAC;CACD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,EAAE,CAAC;CACvD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,EAAE,CAAC;CACvD,EAAE,OAAO,EAAE,KAAK,6BAA6B,CAAC;AAChD,CAAC,CACH,CACF,CAAC,CACA,KAAK,EAAE,IAAI,yBAAyB,CAAC;AAExC,MAAM,iDAAiD,EAAE,WACvD,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,KAAK;CACrB,eAAe,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC,CACH;AACA,MAAM,yCAAyC,EAAE,WAC/C,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,MAAM;CACtB,gBAAgB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC,CACH;AACA,MAAM,wCAAwC,EAAE,WAC9C,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,KAAK;CACrB,OAAO,EAAE,mBAAmB,QAAQ,CAClC,gDACA,sCACF,CAAC;CACD,eAAe,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC,CACH;AAEA,MAAM,qCAA8E,EACjF,WACC,EAAE,mBAAmB,QAAQ;CAC3B,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE,CAAC;CACtC;CACA;CACA;CACA,EAAE,OAAO;EACP,MAAM,EAAE,QAAQ,SAAS;EACzB,OAAO,EAAE,mBAAmB,QAAQ;GAClC;GACA;GACA;EACF,CAAC;EACD,mBAAmB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC5C,CAAC;AACH,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,+BAA+B,CAAC;AAE9C,SAAS,wBAAwB,OAAgD;CAC/E,OAAO,GAAG,MAAM,UAAU,GAAG,MAAM;AACrC;AAEA,MAAM,8BAA8B,EAAE,WACpC,EAAE,MAAM,qCAAqC,CAAC,CAAC,aAAa,QAAQ,YAAY;CAC9E,MAAM,8BAAc,IAAI,IAAY;CACpC,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,GAAG;EAC7C,MAAM,MAAM,wBAAwB,KAAK;EACzC,IAAI,YAAY,IAAI,GAAG,GACrB,QAAQ,SAAS;GACf,MAAM;GACN,MAAM,CAAC,KAAK;GACZ,SAAS,2BAA2B,IAAI;EAC1C,CAAC;EAEH,YAAY,IAAI,GAAG;CACrB;AACF,CAAC,CACH;AAEA,MAAM,wCAAwC,EAAE,WAC9C,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,yBAAyB;CACzC,QAAQ;AACV,CAAC,CACH;AAEA,MAAM,gCAAgC,EAAE,WACtC,EAAE,mBAAmB,QAAQ;CAC3B,EAAE,aAAa;EACb,MAAM,EAAE,QAAQ,gBAAgB;EAChC,QAAQ,EAAE,MAAM,CAAC,6BAA6B,EAAE,QAAQ,SAAS,CAAC,CAAC;CACrE,CAAC;CACD,EAAE,aAAa;EACb,MAAM,EAAE,QAAQ,aAAa;EAC7B,QAAQ,EAAE,MAAM,CAAC,6BAA6B,EAAE,QAAQ,SAAS,CAAC,CAAC;CACrE,CAAC;CACD;AACF,CAAC,CACH;AAEA,MAAM,sCAAsC,EACzC,WACC,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,gBAAgB;CAChC,WAAW;CACX,oBAAoB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC3C,oBAAoB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC,CACH,CAAC,CACA,KAAK;CACJ,IAAI;CACJ,iBAAiB;AACnB,CAAC;AAEH,MAAM,sCAAgF,EACnF,WACC,EAAE,mBAAmB,QAAQ,CAC3B,EAAE,OAAO;CAAE,MAAM,EAAE,QAAQ,aAAa;CAAG,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAAE,CAAC,CAAC,CAAC,KAAK,EACpF,IAAI,0CACN,CAAC,GACD,EACG,OAAO;CAAE,MAAM,EAAE,QAAQ,oBAAoB;CAAG,aAAa,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAAE,CAAC,CAAC,CACxF,KAAK,EACJ,IAAI,gDACN,CAAC,CACL,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,gCAAgC,CAAC;AAE/C,MAAM,0CAA0C,EAC7C,WACC,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,qBAAqB;CACrC,QAAQ;CACR,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAClC,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;AAChC,CAAC,CACH,CAAC,CACA,KAAK;CACJ,IAAI;CACJ,iBAAiB;AACnB,CAAC;AAEH,MAAM,qCAAqC,EACxC,WACC,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,eAAe;CAC/B,aAAa;CACb,YAAY,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAChD,CAAC,CACH,CAAC,CACA,KAAK;CACJ,IAAI;CACJ,iBAAiB;AACnB,CAAC;AAEH,MAAM,yCAAyC,EAC5C,WACC,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,YAAY;CAC5B,QAAQ,EAAE,OACR,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GACvB,EACG,OAAO,CAAC,CACR,KAAK,CAAC,CACN,QAAQ,SAAS,SAAS,OAAO,KAAK,WAAW,IAAI,GAAG,EACvD,SAAS,sCACX,CAAC,CACL;AACF,CAAC,CACH,CAAC,CACA,KAAK,EACJ,IAAI,mCACN,CAAC;AAEH,MAAM,wCAAwC,EAC3C,WACC,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,kBAAkB;CAClC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC/B,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAClC,SAAS;AACX,CAAC,CACH,CAAC,CACA,KAAK;CACJ,IAAI;CACJ,iBAAiB;AACnB,CAAC;AAEH,MAAM,oCAAoC,EACvC,WACC,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,cAAc;CAC9B,WAAW;CACX,WAAW;AACb,CAAC,CACH,CAAC,CACA,KAAK;CACJ,IAAI;CACJ,iBAAiB;AACnB,CAAC;AAEH,MAAa,8BAA8B,EACxC,WACC,EAAE,mBAAmB,QAAQ;CAC3B;CACA;CACA;CACA;CACA;AACF,CAAC,CACH,CAAC,CACA,KAAK;CACJ,IAAI;CACJ,iBAAiB;AACnB,CAAC;AAEH,MAAa,iCAAsE,EAChF,WACC,EAAE,aAAa;CACb,MAAM,EAAE,QAAQ,aAAa;CAC7B,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAClC,aAAa,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CACpC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,2BAA2B,CAAC;AAE1C,MAAM,gCAAgC,EAAE,WACtC,EAAE,aAAa;CACb,iBAAiB;CACjB,iBAAiB;CACjB,WAAW,+BAA+B,SAAS;AACrD,CAAC,CACH;AAEA,MAAM,oCAAoC,EAAE,WAC1C,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,OAAO;CACvB,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC/B,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAClC,SAAS,6BAA6B,SAAS,CAAC,CAAC,QAAQ,IAAI;AAC/D,CAAC,CACH;AAEA,MAAM,uCAAuC,EAAE,WAC7C,EAAE,OAAO;CACP,MAAM,EAAE,QAAQ,UAAU;CAC1B,SAAS;AACX,CAAC,CACH;AAEA,MAAM,+BAAkE,EACrE,WACC,EAAE,mBAAmB,QAAQ,CAC3B,mCACA,oCACF,CAAC,CACH,CAAC,CACA,KAAK;CAAE,IAAI;CAA0B,iBAAiB;AAA8B,CAAC;AAExF,MAAM,qCAAqC,EAAE,WAC3C,EAAE,MACA,CACE,EAAE,OAAO;CACP,SAAS;CACT,QAAQ;AACV,CAAC,GACD,EAAE,OAAO;CACP,SAAS;CACT,QAAQ,EAAE,MAAM;EACd,oCAAoC,KAAK,UAAU,OAAO,EACxD,WAAW,sCACb,CAAC;EACD;EACA;EACA;EACA,kCAAkC,KAAK,UAAU,OAAO,EACtD,WAAW,sCACb,CAAC;CACH,CAAC;AACH,CAAC,CACH,GACA,EACE,QAAQ,UAAU;CAChB,MAAM,gBAAgB,EACnB,OAAO;EACN,SAAS;EACT,QAAQ;CACV,CAAC,CAAC,CACD,UAAU,MAAM,KAAK;CACxB,MAAM,YAAY,cAAc,UAC5B,+BAA+B,cAAc,KAAK,MAAM,IACxD;CACJ,OAAO,aAAa,UAAU,SAAS,4BACnC,2CACA,KAAA;AACN,EACF,CACF,CACF;AAEA,MAAa,wBAA8D,EACxE,WACC,EAAE,OAAO;CACP,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC7B,SAAS,EAAE,QAAQ;CACnB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI;CACzB,SAAS;CACT,QAAQ;CACR,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC5C,UAAU,8BAA8B,SAAS;CACjD,kBAAkB,EAAE,IAAI,SAAS,CAAC,CAAC,SAAS;AAC9C,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,kBAAkB,CAAC;AAEjC,MAAa,mCAAmC,EAAE,WAChD,EACG,OAAO;CACN,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC7B,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;CACjC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAI;CACvC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC5C,WAAW,+BAA+B,SAAS,CAAC,CAAC,SAAS;AAChE,CAAC,CAAC,CACD,IAAI,kCAAkC,CAC3C;AAEA,MAAM,oCAAoC,EAAE,WAC1C,EAAE,OAAO;CACP,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC9B,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACpC,SAAS,6BAA6B,SAAS;CAC/C,QAAQ,4BAA4B,SAAS;CAC7C,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC5C,WAAW,+BAA+B,SAAS,CAAC,CAAC,SAAS;AAChE,CAAC,CACH;AAEA,MAAa,qCAAqC,EAAE,WAClD,kCAAkC,KAAK,UACpC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAClB,QAAQ,UAAU,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,OAAO,UAAU,WAAW,GAAG,EACrF,SAAS,6CACX,CAAC,CACL;AAEA,MAAa,mCAAmC,EAAE,WAChD,kCAAkC,QAC/B,EAAE,IAAI,KAAK,GAAG,YAAY,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,OAAO,UAAU,WAAW,GAC5F,EAAE,SAAS,6CAA6C,CAC1D,CACF;AAMA,MAAa,6BAA6B;CACxC,eAAe;EACb,aAAa;EACb,aAAa,CAAC,sBAAsB,OAAO,IAAI;EAC/C,OAAO,EAAE,KAAK;EACd,QAAQ,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;CACrD;CACA,cAAc;EACZ,aAAa;EACb,aAAa,CAAC,sBAAsB,OAAO,IAAI;EAC/C,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;EAC9D,QAAQ,EAAE,WAAW,sBAAsB,SAAS,CAAC;CACvD;CACA,iBAAiB;EACf,aAAa;EACb,aAAa,CAAC,sBAAsB,OAAO,MAAM;EACjD,OAAO;EACP,QAAQ;CACV;CACA,iBAAiB;EACf,aAAa;EACb,aAAa,CAAC,sBAAsB,OAAO,MAAM;EACjD,OAAO;EACP,QAAQ,EAAE,WAAW,sBAAsB,SAAS,CAAC;CACvD;CACA,iBAAiB;EACf,aAAa;EACb,aAAa,CAAC,sBAAsB,OAAO,MAAM;EACjD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;EAC9D,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;CAC7D;CACA,sBAAsB;EACpB,aAAa;EACb,aAAa,CAAC,sBAAsB,OAAO,MAAM;EACjD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;EAC9D,QAAQ,EAAE,WAAW,EAAE,OAAO;GAAE,UAAU,EAAE,QAAQ,IAAI;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;CAC9F;AACF"}

package/dist/v0/capabilities.d.ts

@@ -0,0 +1,97 @@
+import { z } from "zod";
+//#region src/v0/capabilities.d.ts
+declare const hookScopeOutputSchema: z.ZodLazy<z.ZodObject<{
+  id: z.ZodString;
+  label: z.ZodString;
+  capabilityId: z.ZodString;
+  capabilityLabel: z.ZodString;
+  kind: z.ZodEnum<{
+    connection: "connection";
+    system: "system";
+  }>;
+  configured: z.ZodOptional<z.ZodBoolean>;
+  healthy: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>>;
+declare const capabilitySummarySchema: z.ZodLazy<z.ZodObject<{
+  id: z.ZodString;
+  label: z.ZodString;
+  kind: z.ZodEnum<{
+    connection: "connection";
+    system: "system";
+  }>;
+  available: z.ZodBoolean;
+  configured: z.ZodBoolean;
+  healthy: z.ZodOptional<z.ZodBoolean>;
+  reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
+declare const capabilitiesListOutputSchema: z.ZodLazy<z.ZodArray<z.ZodLazy<z.ZodObject<{
+  id: z.ZodString;
+  label: z.ZodString;
+  kind: z.ZodEnum<{
+    connection: "connection";
+    system: "system";
+  }>;
+  available: z.ZodBoolean;
+  configured: z.ZodBoolean;
+  healthy: z.ZodOptional<z.ZodBoolean>;
+  reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>>>;
+type CapabilitiesListOutput = z.infer<typeof capabilitiesListOutputSchema>;
+declare const hookScopesListOutputSchema: z.ZodLazy<z.ZodArray<z.ZodLazy<z.ZodObject<{
+  id: z.ZodString;
+  label: z.ZodString;
+  capabilityId: z.ZodString;
+  capabilityLabel: z.ZodString;
+  kind: z.ZodEnum<{
+    connection: "connection";
+    system: "system";
+  }>;
+  configured: z.ZodOptional<z.ZodBoolean>;
+  healthy: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>>>>;
+type HookScopesListOutput = z.infer<typeof hookScopesListOutputSchema>;
+declare const capabilitiesOperations: {
+  "capabilities.list": {
+    description: string;
+    permissions: {
+      readonly namespace: "capabilities";
+      readonly permission: "read";
+    }[];
+    input: z.ZodVoid;
+    output: z.ZodLazy<z.ZodArray<z.ZodLazy<z.ZodObject<{
+      id: z.ZodString;
+      label: z.ZodString;
+      kind: z.ZodEnum<{
+        connection: "connection";
+        system: "system";
+      }>;
+      available: z.ZodBoolean;
+      configured: z.ZodBoolean;
+      healthy: z.ZodOptional<z.ZodBoolean>;
+      reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>>;
+  };
+  "hooks.scopes.list": {
+    description: string;
+    permissions: {
+      readonly namespace: "hooks";
+      readonly permission: "read";
+    }[];
+    input: z.ZodVoid;
+    output: z.ZodLazy<z.ZodArray<z.ZodLazy<z.ZodObject<{
+      id: z.ZodString;
+      label: z.ZodString;
+      capabilityId: z.ZodString;
+      capabilityLabel: z.ZodString;
+      kind: z.ZodEnum<{
+        connection: "connection";
+        system: "system";
+      }>;
+      configured: z.ZodOptional<z.ZodBoolean>;
+      healthy: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>>;
+  };
+};
+//#endregion
+export { CapabilitiesListOutput, HookScopesListOutput, capabilitiesListOutputSchema, capabilitiesOperations, capabilitySummarySchema, hookScopeOutputSchema, hookScopesListOutputSchema };
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/v0/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","names":[],"sources":["../../src/v0/capabilities.ts"],"mappings":";;cAKa,uBAAqB,EAAA,QAAA,EAAA;;;;;;;;;;;;cAYrB,yBAAuB,EAAA,QAAA,EAAA;;;;;;;;;;;;cAYvB,8BAA4B,EAAA,QAAA,EAAA,SAAA,EAAA,QAAA,EAAA;;;;;;;;;;;;KAE7B,yBAAyB,EAAE,aAAa;cAEvC,4BAA0B,EAAA,QAAA,EAAA,SAAA,EAAA,QAAA,EAAA;;;;;;;;;;;;KAE3B,uBAAuB,EAAE,aAAa;cAErC"}

package/dist/v0/capabilities.js

@@ -0,0 +1,41 @@
+import { BACKOFFICE_PERMISSION } from "./shared/permissions.js";
+import { z } from "zod";
+//#region src/v0/capabilities.ts
+const hookScopeOutputSchema = z.lazy(() => z.object({
+	id: z.string(),
+	label: z.string(),
+	capabilityId: z.string(),
+	capabilityLabel: z.string(),
+	kind: z.enum(["connection", "system"]),
+	configured: z.boolean().optional(),
+	healthy: z.boolean().optional()
+}));
+const capabilitySummarySchema = z.lazy(() => z.object({
+	id: z.string(),
+	label: z.string(),
+	kind: z.enum(["connection", "system"]),
+	available: z.boolean(),
+	configured: z.boolean(),
+	healthy: z.boolean().optional(),
+	reason: z.string().optional()
+}));
+const capabilitiesListOutputSchema = z.lazy(() => z.array(capabilitySummarySchema));
+const hookScopesListOutputSchema = z.lazy(() => z.array(hookScopeOutputSchema));
+const capabilitiesOperations = {
+	"capabilities.list": {
+		description: "List Backoffice capabilities and availability/configuration status.",
+		permissions: [BACKOFFICE_PERMISSION.capabilities.read],
+		input: z.void(),
+		output: capabilitiesListOutputSchema
+	},
+	"hooks.scopes.list": {
+		description: "List hook scopes usable with hooks.list --fragment.",
+		permissions: [BACKOFFICE_PERMISSION.hooks.read],
+		input: z.void(),
+		output: hookScopesListOutputSchema
+	}
+};
+//#endregion
+export { capabilitiesListOutputSchema, capabilitiesOperations, capabilitySummarySchema, hookScopeOutputSchema, hookScopesListOutputSchema };
+
+//# sourceMappingURL=capabilities.js.map

package/dist/v0/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","names":[],"sources":["../../src/v0/capabilities.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { BackofficeApiOperation } from \"../api\";\nimport { BACKOFFICE_PERMISSION } from \"./shared/permissions\";\n\nexport const hookScopeOutputSchema = z.lazy(() =>\n  z.object({\n    id: z.string(),\n    label: z.string(),\n    capabilityId: z.string(),\n    capabilityLabel: z.string(),\n    kind: z.enum([\"connection\", \"system\"]),\n    configured: z.boolean().optional(),\n    healthy: z.boolean().optional(),\n  }),\n);\n\nexport const capabilitySummarySchema = z.lazy(() =>\n  z.object({\n    id: z.string(),\n    label: z.string(),\n    kind: z.enum([\"connection\", \"system\"]),\n    available: z.boolean(),\n    configured: z.boolean(),\n    healthy: z.boolean().optional(),\n    reason: z.string().optional(),\n  }),\n);\n\nexport const capabilitiesListOutputSchema = z.lazy(() => z.array(capabilitySummarySchema));\n\nexport type CapabilitiesListOutput = z.infer<typeof capabilitiesListOutputSchema>;\n\nexport const hookScopesListOutputSchema = z.lazy(() => z.array(hookScopeOutputSchema));\n\nexport type HookScopesListOutput = z.infer<typeof hookScopesListOutputSchema>;\n\nexport const capabilitiesOperations = {\n  \"capabilities.list\": {\n    description: \"List Backoffice capabilities and availability/configuration status.\",\n    permissions: [BACKOFFICE_PERMISSION.capabilities.read],\n    input: z.void(),\n    output: capabilitiesListOutputSchema,\n  },\n  \"hooks.scopes.list\": {\n    description: \"List hook scopes usable with hooks.list --fragment.\",\n    permissions: [BACKOFFICE_PERMISSION.hooks.read],\n    input: z.void(),\n    output: hookScopesListOutputSchema,\n  },\n} satisfies Record<string, BackofficeApiOperation>;\n"],"mappings":";;;AAKA,MAAa,wBAAwB,EAAE,WACrC,EAAE,OAAO;CACP,IAAI,EAAE,OAAO;CACb,OAAO,EAAE,OAAO;CAChB,cAAc,EAAE,OAAO;CACvB,iBAAiB,EAAE,OAAO;CAC1B,MAAM,EAAE,KAAK,CAAC,cAAc,QAAQ,CAAC;CACrC,YAAY,EAAE,QAAQ,CAAC,CAAC,SAAS;CACjC,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;AAChC,CAAC,CACH;AAEA,MAAa,0BAA0B,EAAE,WACvC,EAAE,OAAO;CACP,IAAI,EAAE,OAAO;CACb,OAAO,EAAE,OAAO;CAChB,MAAM,EAAE,KAAK,CAAC,cAAc,QAAQ,CAAC;CACrC,WAAW,EAAE,QAAQ;CACrB,YAAY,EAAE,QAAQ;CACtB,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC,CACH;AAEA,MAAa,+BAA+B,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIzF,MAAa,6BAA6B,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIrF,MAAa,yBAAyB;CACpC,qBAAqB;EACnB,aAAa;EACb,aAAa,CAAC,sBAAsB,aAAa,IAAI;EACrD,OAAO,EAAE,KAAK;EACd,QAAQ;CACV;CACA,qBAAqB;EACnB,aAAa;EACb,aAAa,CAAC,sBAAsB,MAAM,IAAI;EAC9C,OAAO,EAAE,KAAK;EACd,QAAQ;CACV;AACF"}

package/dist/v0/client.d.ts

@@ -0,0 +1,39 @@
+import { BackofficeApiErrorCode } from "../errors.js";
+import { BackofficeContextScope } from "./shared/scope.js";
+import { backofficeApiV0 } from "./api.js";
+import { z } from "zod";
+//#region src/v0/client.d.ts
+type Operations = typeof backofficeApiV0.operations;
+type OperationId = keyof Operations;
+/** Operations whose input is `z.void()` are called without an input argument. */
+type OperationInputArgs<TId extends OperationId> = Operations[TId]["input"] extends z.ZodVoid ? [] : [input: z.input<Operations[TId]["input"]>];
+type BackofficeApiClient = {
+  /** Runs one operation in `scope`, returning its output parsed by the operation's schema. */
+  call<TId extends OperationId>(scope: BackofficeContextScope, operationId: TId, ...input: OperationInputArgs<TId>): Promise<z.output<Operations[TId]["output"]>>;
+};
+/**
+ * Backoffice answered with an error. `code` is null when the response was not an API error, e.g.
+ * a server failure or an intermediary's response, so the operation's outcome is unknown.
+ */
+declare class BackofficeApiRequestError extends Error {
+  readonly status: number;
+  readonly code: BackofficeApiErrorCode | null;
+  constructor(status: number, code: BackofficeApiErrorCode | null, message: string);
+}
+/** The request never got a response, e.g. a network failure, so the operation's outcome is unknown. */
+declare class BackofficeApiUnreachableError extends Error {
+  constructor(cause: unknown);
+}
+/**
+ * Calls the v0 API at `origin` with one bearer credential. Network failures reject with
+ * `BackofficeApiUnreachableError`, and error responses with `BackofficeApiRequestError`. Anything
+ * else, such as a success body that does not match this contract, is a bug and rejects as is.
+ */
+declare function createBackofficeApiClient({ origin, accessToken, fetch }: {
+  origin: string;
+  accessToken: string;
+  fetch: typeof globalThis.fetch;
+}): BackofficeApiClient;
+//#endregion
+export { BackofficeApiClient, BackofficeApiRequestError, BackofficeApiUnreachableError, createBackofficeApiClient };
+//# sourceMappingURL=client.d.ts.map

package/dist/v0/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","names":[],"sources":["../../src/v0/client.ts"],"mappings":";;;;;KAMK,oBAAoB,gBAAgB;KACpC,oBAAoB;;KAGpB,mBAAmB,YAAY,eAAe,WAAW,sBAAsB,EAAE,gBAEjF,OAAO,EAAE,MAAM,WAAW;KAEnB;;EAEV,KAAK,YAAY,aACf,OAAO,wBACP,aAAa,QACV,OAAO,mBAAmB,OAC5B,QAAQ,EAAE,OAAO,WAAW;;;;;;cAOpB,kCAAkC;WACpC;WACA,MAAM;cAEH,gBAAgB,MAAM,+BAA+B;;;cAStD,sCAAsC;cACrC;;;;;;;iBAsBE,4BACd,QACA,aACA;EAEA;EACA;EACA,cAAc,WAAW;IACvB"}