@ganju/utils 0.0.1

package/dist/schema.js

@@ -0,0 +1,1382 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Schema = void 0;
+const zod_1 = require("zod");
+const constants_1 = require("./constants");
+const slug_1 = require("./slug");
+const reservedToolName_1 = require("./reservedToolName");
+const slugifyTitle_1 = require("./slugifyTitle");
+// A prompt title becomes a slash command; it must not collide with a command
+// the channel runner handles itself (e.g. `/link`).
+const PROMPT_TITLE = zod_1.z
+    .string()
+    .min(3)
+    .max(200)
+    .refine(title => !constants_1.constants.RESERVED_BOT_COMMANDS.includes((0, slugifyTitle_1.slugifyTitle)(title)), { message: 'This title is reserved as a bot command' });
+const SCHEMA_DEFINITION = zod_1.z.object({
+    type: zod_1.z.enum(constants_1.constants.SCHEMA_DEFINITION_TYPES),
+    properties: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    required: zod_1.z.array(zod_1.z.string()).optional(),
+    items: zod_1.z.any().optional(),
+    minimum: zod_1.z.number().optional(),
+    maximum: zod_1.z.number().optional(),
+    minLength: zod_1.z.number().optional(),
+    maxLength: zod_1.z.number().optional(),
+    pattern: zod_1.z.string().optional(),
+    enum: zod_1.z.array(zod_1.z.any()).optional()
+});
+const ORGANIZATION_CREATE = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    name: zod_1.z.string().min(3).max(100),
+    projectName: zod_1.z.string().min(3).max(100),
+    projectDescription: zod_1.z.string().max(500)
+});
+const ORGANIZATION_CREATE_VIEW = zod_1.z.object({
+    name: zod_1.z.string().min(3).max(100),
+    projectName: zod_1.z.string().min(3).max(100),
+    projectDescription: zod_1.z.string().max(500)
+});
+const ORGANIZATION_UPDATE = zod_1.z.object({
+    id: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    name: zod_1.z.string().min(3).max(100)
+});
+const ORGANIZATION_GET = zod_1.z.object({
+    id: zod_1.z.uuid(),
+    userId: zod_1.z.uuid()
+});
+const AUTH_USER_GET = zod_1.z.object({
+    userId: zod_1.z.uuid()
+});
+const PROJECT_CREATE = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    name: zod_1.z.string().min(3).max(100),
+    description: zod_1.z.string().max(500).optional()
+});
+const PROJECT_CREATE_VIEW = PROJECT_CREATE.omit({
+    userId: true,
+    organizationId: true
+});
+const PROJECT_UPDATE = zod_1.z.object({
+    id: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    name: zod_1.z.string().min(3).max(100),
+    description: zod_1.z.string().max(500).optional()
+});
+const PROJECT_GET = zod_1.z.object({
+    id: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid()
+});
+// Trim + lowercase before validating so invitations match regardless of how
+// the inviter typed the address (membership lookups compare lowercased email).
+const INVITATION_EMAIL = zod_1.z
+    .string()
+    .trim()
+    .toLowerCase()
+    .pipe(zod_1.z.email({ message: 'Enter a valid email address' }).max(254));
+// Marketing-site contact form. `company_url` is a honeypot — a hidden field
+// real users leave empty; the controller drops the submission if it's filled.
+const CONTACT_MESSAGE = zod_1.z.object({
+    name: zod_1.z.string().trim().min(1).max(constants_1.constants.CONTACT_MAX_NAME_LENGTH),
+    email: zod_1.z
+        .string()
+        .trim()
+        .toLowerCase()
+        .pipe(zod_1.z
+        .email({ message: 'Enter a valid email address' })
+        .max(constants_1.constants.CONTACT_MAX_EMAIL_LENGTH)),
+    message: zod_1.z
+        .string()
+        .trim()
+        .min(constants_1.constants.CONTACT_MIN_MESSAGE_LENGTH)
+        .max(constants_1.constants.CONTACT_MAX_MESSAGE_LENGTH),
+    company_url: zod_1.z.string().optional()
+});
+const ORGANIZATION_INVITATION_CREATE = zod_1.z.object({
+    email: INVITATION_EMAIL,
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_INVITATION_CREATE_VIEW = ORGANIZATION_INVITATION_CREATE.omit({
+    userId: true,
+    organizationId: true
+});
+const ORGANIZATION_INVITATION_LIST = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_INVITATION_REMOVE = zod_1.z.object({
+    invitationId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const PROJECT_INVITATION_CREATE = zod_1.z.object({
+    email: INVITATION_EMAIL,
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid()
+});
+const PROJECT_INVITATION_CREATE_VIEW = PROJECT_INVITATION_CREATE.omit({
+    userId: true,
+    organizationId: true,
+    projectId: true
+});
+const PROJECT_INVITATION_LIST = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid()
+});
+const PROJECT_INVITATION_REMOVE = zod_1.z.object({
+    invitationId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid()
+});
+// Invitee acting on one of their own pending invitations. No org/project id —
+// the invitation is matched to the caller by id + session email.
+const INVITATION_RESPOND = zod_1.z.object({
+    invitationId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    action: zod_1.z.enum(constants_1.constants.INVITATION_RESPONSES)
+});
+const INVITATION_GET_BY_TOKEN = zod_1.z.object({
+    token: zod_1.z.string().min(8).max(128)
+});
+const ORGANIZATION_MEMBER_LIST = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_MEMBER_REMOVE = zod_1.z.object({
+    memberUserId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const PROJECT_MEMBER_LIST = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid()
+});
+const PROJECT_MEMBER_REMOVE = zod_1.z.object({
+    memberUserId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid()
+});
+const ARTIFACT_CREATE_PROMPT = zod_1.z.object({
+    title: PROMPT_TITLE,
+    description: zod_1.z.string().max(1000).optional(),
+    messages: zod_1.z
+        .array(zod_1.z.object({
+        role: zod_1.z.enum(constants_1.constants.ROLE_MESSAGES),
+        content: zod_1.z.string()
+    }))
+        .min(1),
+    schema: SCHEMA_DEFINITION,
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_UPDATE_PROMPT = zod_1.z.object({
+    promptId: zod_1.z.uuid(),
+    title: PROMPT_TITLE,
+    description: zod_1.z.string().max(1000).optional(),
+    messages: zod_1.z
+        .array(zod_1.z.object({
+        role: zod_1.z.enum(constants_1.constants.ROLE_MESSAGES),
+        content: zod_1.z.string()
+    }))
+        .min(1),
+    schema: SCHEMA_DEFINITION,
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_REMOVE_PROMPT = zod_1.z.object({
+    promptId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_GET_PROMPT = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CRAWL_CONFIG = zod_1.z.object({
+    maxPages: zod_1.z
+        .number()
+        .int()
+        .min(1)
+        .max(constants_1.constants.CRAWL_MAX_PAGES_LIMIT)
+        .default(constants_1.constants.CRAWL_DEFAULT_MAX_PAGES),
+    maxDepth: zod_1.z
+        .number()
+        .int()
+        .min(0)
+        .max(constants_1.constants.CRAWL_MAX_DEPTH_LIMIT)
+        .default(constants_1.constants.CRAWL_DEFAULT_MAX_DEPTH)
+});
+const ARTIFACT_CREATE_WEBSITE_VIEW = zod_1.z.object({
+    title: zod_1.z.string().min(3).max(200),
+    uri: zod_1.z
+        .url('Enter a valid URL')
+        .refine(v => /^https?:\/\//i.test(v), 'Only http and https URLs are supported'),
+    description: zod_1.z.string().optional(),
+    maxPages: zod_1.z.number().int().min(1).max(constants_1.constants.CRAWL_MAX_PAGES_LIMIT),
+    maxDepth: zod_1.z.number().int().min(0).max(constants_1.constants.CRAWL_MAX_DEPTH_LIMIT)
+});
+const ARTIFACT_CREATE_WEBSITE = zod_1.z.object({
+    title: zod_1.z.string().min(3).max(200),
+    uri: zod_1.z
+        .url('Enter a valid URL')
+        .refine(v => /^https?:\/\//i.test(v), 'Only http and https URLs are supported'),
+    description: zod_1.z.string().optional(),
+    crawlConfig: zod_1.z.object({
+        maxPages: zod_1.z.number().int().min(1).max(constants_1.constants.CRAWL_MAX_PAGES_LIMIT),
+        maxDepth: zod_1.z.number().int().min(0).max(constants_1.constants.CRAWL_MAX_DEPTH_LIMIT)
+    }),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_UPDATE_WEBSITE_VIEW = zod_1.z.object({
+    title: zod_1.z.string().min(3).max(200),
+    description: zod_1.z.string().optional()
+});
+const ARTIFACT_UPDATE_WEBSITE = ARTIFACT_UPDATE_WEBSITE_VIEW.extend({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const GOOGLE_DRIVE_ITEM = zod_1.z.object({
+    fileId: zod_1.z.string(),
+    name: zod_1.z.string(),
+    mimeType: zod_1.z.string(),
+    isFolder: zod_1.z.boolean().default(false),
+    iconLink: zod_1.z.string().optional(),
+    webViewLink: zod_1.z.string().optional(),
+    modifiedTime: zod_1.z.string().optional(),
+    size: zod_1.z.coerce.number().int().optional()
+});
+const ARTIFACT_CREATE_GOOGLE_DRIVE_VIEW = zod_1.z.object({
+    items: zod_1.z.array(GOOGLE_DRIVE_ITEM)
+});
+const ARTIFACT_CREATE_GOOGLE_DRIVE = ARTIFACT_CREATE_GOOGLE_DRIVE_VIEW.extend({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_SYNC_GOOGLE_DRIVE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ONE_DRIVE_ITEM = zod_1.z.object({
+    itemId: zod_1.z.string(),
+    driveId: zod_1.z.string().optional(),
+    name: zod_1.z.string(),
+    mimeType: zod_1.z.string().optional(),
+    isFolder: zod_1.z.boolean().default(false),
+    webUrl: zod_1.z.string().optional(),
+    lastModifiedDateTime: zod_1.z.string().optional(),
+    size: zod_1.z.coerce.number().int().optional()
+});
+const ARTIFACT_CREATE_ONE_DRIVE_VIEW = zod_1.z.object({
+    items: zod_1.z.array(ONE_DRIVE_ITEM)
+});
+const ARTIFACT_CREATE_ONE_DRIVE = ARTIFACT_CREATE_ONE_DRIVE_VIEW.extend({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_SYNC_ONE_DRIVE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_CREATE_RESOURCE = zod_1.z.object({
+    title: zod_1.z.string().min(3).max(200),
+    uri: zod_1.z.string(),
+    type: zod_1.z
+        .enum(constants_1.constants.RESOURCE_TYPES)
+        .default(constants_1.constants.RESOURCE_TYPE_STATIC),
+    sourceType: zod_1.z
+        .enum(constants_1.constants.RESOURCE_SOURCE_TYPES)
+        .default(constants_1.constants.RESOURCE_SOURCE_TYPE_FILE),
+    description: zod_1.z.string().max(1000).optional(),
+    mimeType: zod_1.z.enum(constants_1.constants.MIMETYPES, {
+        message: 'Unsupported mime type'
+    }),
+    content: zod_1.z.string().optional(),
+    size: zod_1.z
+        .number()
+        .int()
+        .min(0)
+        .max(constants_1.constants.MAX_FILE_SIZE, {
+        message: `File size exceeds the ${constants_1.constants.MAX_FILE_SIZE / (1024 * 1024)}MB limit`
+    })
+        .optional(),
+    encoding: zod_1.z.string().max(50).optional(),
+    fileKey: zod_1.z.string().optional(),
+    fileName: zod_1.z.string().optional(),
+    annotations: zod_1.z
+        .object({
+        audience: zod_1.z.array(zod_1.z.enum(constants_1.constants.ROLE_MESSAGES)).optional(),
+        priority: zod_1.z.number().min(0).max(1).optional(),
+        lastModified: zod_1.z.string().datetime().optional()
+    })
+        .optional(),
+    icons: zod_1.z
+        .array(zod_1.z.object({
+        src: zod_1.z.string(),
+        mimeType: zod_1.z.string().optional(),
+        sizes: zod_1.z.array(zod_1.z.string()).optional(),
+        theme: zod_1.z.enum(constants_1.constants.RESOURCE_ICON_THEMES).optional()
+    }))
+        .optional(),
+    metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    crawlConfig: CRAWL_CONFIG.optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_UPDATE_RESOURCE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    title: zod_1.z.string().min(3).max(200),
+    uri: zod_1.z.string(),
+    type: zod_1.z
+        .enum(constants_1.constants.RESOURCE_TYPES)
+        .default(constants_1.constants.RESOURCE_TYPE_STATIC),
+    sourceType: zod_1.z
+        .enum(constants_1.constants.RESOURCE_SOURCE_TYPES)
+        .default(constants_1.constants.RESOURCE_SOURCE_TYPE_FILE),
+    description: zod_1.z.string().max(1000).optional(),
+    mimeType: zod_1.z.enum(constants_1.constants.MIMETYPES, {
+        message: 'Unsupported mime type'
+    }),
+    content: zod_1.z.string().optional(),
+    size: zod_1.z
+        .number()
+        .int()
+        .min(0)
+        .max(constants_1.constants.MAX_FILE_SIZE, {
+        message: `File size exceeds the ${constants_1.constants.MAX_FILE_SIZE / (1024 * 1024)}MB limit`
+    })
+        .optional(),
+    encoding: zod_1.z.string().max(50).optional(),
+    fileKey: zod_1.z.string().optional(),
+    fileName: zod_1.z.string().optional(),
+    annotations: zod_1.z
+        .object({
+        audience: zod_1.z.array(zod_1.z.enum(constants_1.constants.ROLE_MESSAGES)).optional(),
+        priority: zod_1.z.number().min(0).max(1).optional(),
+        lastModified: zod_1.z.string().datetime().optional()
+    })
+        .optional(),
+    icons: zod_1.z
+        .array(zod_1.z.object({
+        src: zod_1.z.string(),
+        mimeType: zod_1.z.string().optional(),
+        sizes: zod_1.z.array(zod_1.z.string()).optional(),
+        theme: zod_1.z.enum(constants_1.constants.RESOURCE_ICON_THEMES).optional()
+    }))
+        .optional(),
+    metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_GET_RESOURCE = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_GET_RESOURCE_BY_ID = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_REMOVE_RESOURCE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_UPLOAD_RESOURCE_FILE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_DOWNLOAD_RESOURCE_FILE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_CREATE_TOOL = zod_1.z.object({
+    toolKey: zod_1.z.string().min(1).max(64),
+    config: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_UPDATE_TOOL = zod_1.z.object({
+    toolId: zod_1.z.uuid(),
+    config: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_GET_TOOL = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_REMOVE_TOOL = zod_1.z.object({
+    toolId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Turning one tool on or off. Deliberately its own route rather than a field on
+// ARTIFACT_UPDATE_TOOL: that path re-validates config and, for mcp-proxy,
+// re-runs remote discovery — a network round trip nobody should pay to flip a
+// switch, and one that would fail the toggle whenever the remote is down.
+const ARTIFACT_SET_TOOL_ENABLED = zod_1.z.object({
+    toolId: zod_1.z.uuid(),
+    enabled: zod_1.z.boolean(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_GET_CREDENTIAL = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_REMOVE_CREDENTIAL = zod_1.z.object({
+    credentialId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Reads every managed OAuth provider and where the artifact stands with it.
+// Same fields as the credential read above, kept separate because the two answer
+// different questions — one lists stored secrets, the other lists connections
+// whether or not one exists yet.
+const ARTIFACT_LIST_CONNECTIONS = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_CREATE_CREDENTIAL = zod_1.z.object({
+    provider: zod_1.z.enum(constants_1.constants.CREDENTIAL_PROVIDERS),
+    apiKey: zod_1.z.string().min(1),
+    label: zod_1.z.string().trim().min(1).max(100).optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_LIST_LLM = zod_1.z.object({
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_CREATE_LLM = zod_1.z.object({
+    name: zod_1.z.string().min(1).max(200),
+    provider: zod_1.z.enum(constants_1.constants.LLM_PROVIDERS),
+    model: zod_1.z.string().min(1).max(200),
+    baseUrl: zod_1.z.url().optional().or(zod_1.z.literal('')),
+    apiKey: zod_1.z.string().min(1).max(500),
+    systemPrompt: zod_1.z.string().max(10000).optional(),
+    config: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_UPDATE_LLM = zod_1.z.object({
+    llmId: zod_1.z.uuid(),
+    name: zod_1.z.string().min(1).max(200).optional(),
+    provider: zod_1.z.enum(constants_1.constants.LLM_PROVIDERS).optional(),
+    model: zod_1.z.string().min(1).max(200).optional(),
+    baseUrl: zod_1.z.url().optional().or(zod_1.z.literal('')).nullable(),
+    apiKey: zod_1.z.string().min(1).max(500).optional(),
+    systemPrompt: zod_1.z.string().max(10000).optional().nullable(),
+    config: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional().nullable(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_REMOVE_LLM = zod_1.z.object({
+    llmId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ORGANIZATION_CREATE_LLM_VIEW = ORGANIZATION_CREATE_LLM.omit({
+    userId: true,
+    organizationId: true
+});
+const ORGANIZATION_UPDATE_LLM_VIEW = ORGANIZATION_UPDATE_LLM.omit({
+    llmId: true,
+    userId: true,
+    organizationId: true
+});
+// `channel.config` is an open bag, so this stays loose — it only pins down the
+// keys we actually read, and passes everything else through untouched.
+// `debounceMs` is how long a burst from one participant is buffered before the
+// agent answers it as a single turn; 0 disables buffering.
+const CHANNEL_CONFIG = zod_1.z.looseObject({
+    debounceMs: zod_1.z
+        .number()
+        .int()
+        .refine(value => value === constants_1.constants.CHANNEL_DEBOUNCE_DISABLED ||
+        (value >= constants_1.constants.CHANNEL_DEBOUNCE_MIN_MS &&
+            value <= constants_1.constants.CHANNEL_DEBOUNCE_MAX_MS), `debounceMs must be 0 (disabled) or between ${constants_1.constants.CHANNEL_DEBOUNCE_MIN_MS} and ${constants_1.constants.CHANNEL_DEBOUNCE_MAX_MS} ms`)
+        .optional()
+});
+const CHANNEL_CREATE = zod_1.z.object({
+    platform: zod_1.z.enum(constants_1.constants.CHANNEL_PLATFORMS),
+    config: CHANNEL_CONFIG.optional(),
+    credentials: zod_1.z.record(zod_1.z.string(), zod_1.z.string()),
+    llmId: zod_1.z.uuid().nullable().optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CHANNEL_UPDATE = zod_1.z.object({
+    channelId: zod_1.z.uuid(),
+    status: zod_1.z.enum(constants_1.constants.CHANNEL_STATUS).optional(),
+    config: CHANNEL_CONFIG.optional(),
+    credentials: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional(),
+    llmId: zod_1.z.uuid().nullable().optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Validates one artifact_tool.config of definition `http-endpoint`. Each row of
+// this kind registers one named MCP tool at server boot (see apps/mcp tools
+// README). Defaults are filled here so the dispatcher receives a fully-resolved
+// config. Secrets are never inlined — auth references an artifact_credential by
+// id (credentialId), validated as a uuid.
+const HTTP_ENDPOINT_KEY_VALUE = zod_1.z.object({
+    name: zod_1.z.string().min(1).max(256),
+    value: zod_1.z.string().max(8192)
+});
+const HTTP_ENDPOINT_AUTH = zod_1.z.discriminatedUnion('kind', [
+    zod_1.z.object({ kind: zod_1.z.literal(constants_1.constants.HTTP_ENDPOINT_AUTH_KIND_NONE) }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.HTTP_ENDPOINT_AUTH_KIND_BEARER),
+        credentialId: zod_1.z.uuid()
+    }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.HTTP_ENDPOINT_AUTH_KIND_BASIC),
+        credentialId: zod_1.z.uuid()
+    }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.HTTP_ENDPOINT_AUTH_KIND_OAUTH),
+        credentialId: zod_1.z.uuid()
+    }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.HTTP_ENDPOINT_AUTH_KIND_API_KEY),
+        in: zod_1.z.enum(['header', 'query']),
+        name: zod_1.z.string().min(1).max(256),
+        credentialId: zod_1.z.uuid()
+    })
+]);
+const HTTP_ENDPOINT_CONFIG = zod_1.z
+    .object({
+    // Identity — surfaced to the model. `name` becomes the MCP tool key.
+    name: zod_1.z
+        .string()
+        .regex(/^[a-zA-Z0-9_-]{1,64}$/, 'Tool name must be 1-64 chars: letters, digits, underscore or hyphen'),
+    title: zod_1.z.string().min(1).max(200).optional(),
+    description: zod_1.z.string().max(2000).optional(),
+    // Request.
+    method: zod_1.z.preprocess(v => (typeof v === 'string' ? v.toUpperCase() : v), zod_1.z.enum(constants_1.constants.HTTP_ENDPOINT_METHODS)),
+    url: zod_1.z.string().min(1).max(2048),
+    headers: zod_1.z.array(HTTP_ENDPOINT_KEY_VALUE).max(50).default([]),
+    query: zod_1.z.array(HTTP_ENDPOINT_KEY_VALUE).max(50).default([]),
+    body: zod_1.z
+        .object({
+        kind: zod_1.z.enum(constants_1.constants.HTTP_ENDPOINT_BODY_KINDS),
+        template: zod_1.z.string().max(100_000).default('')
+    })
+        .default({ kind: constants_1.constants.HTTP_ENDPOINT_BODY_KIND_NONE, template: '' }),
+    // Input schema the model fills in (reuses the shared JSON-schema shape).
+    inputSchema: SCHEMA_DEFINITION.default({
+        type: 'object',
+        properties: {}
+    }),
+    // What the tool promises to return, and the last asymmetry between the two
+    // user-authored tool shapes — `custom-code` has carried one since the
+    // manifest existed.
+    //
+    // Optional, and absent on every endpoint that predates it: declaring one
+    // turns the response into MCP `structuredContent`, and a client that asked
+    // for structure gets an object instead of a wall of text. Leaving it out
+    // keeps the text behaviour exactly as it was.
+    outputSchema: SCHEMA_DEFINITION.optional(),
+    // Response handling.
+    response: zod_1.z
+        .object({
+        contentType: zod_1.z
+            .enum([
+            constants_1.constants.HTTP_ENDPOINT_RESPONSE_CONTENT_TYPE_AUTO,
+            constants_1.constants.HTTP_ENDPOINT_RESPONSE_CONTENT_TYPE_JSON,
+            constants_1.constants.HTTP_ENDPOINT_RESPONSE_CONTENT_TYPE_TEXT
+        ])
+            .default(constants_1.constants.HTTP_ENDPOINT_RESPONSE_CONTENT_TYPE_AUTO),
+        // Clamp to the hard cap rather than reject an over-large request.
+        maxBytes: zod_1.z
+            .number()
+            .int()
+            .positive()
+            .default(constants_1.constants.HTTP_ENDPOINT_DEFAULT_MAX_BYTES)
+            .transform(n => Math.min(n, constants_1.constants.HTTP_ENDPOINT_DEFAULT_MAX_BYTES)),
+        jsonPath: zod_1.z.string().max(256).optional(),
+        successStatus: zod_1.z
+            .array(zod_1.z.number().int().min(100).max(599))
+            .max(20)
+            .optional()
+    })
+        .default({
+        contentType: constants_1.constants.HTTP_ENDPOINT_RESPONSE_CONTENT_TYPE_AUTO,
+        maxBytes: constants_1.constants.HTTP_ENDPOINT_DEFAULT_MAX_BYTES
+    }),
+    // Auth — credentials referenced by id, never inlined.
+    auth: HTTP_ENDPOINT_AUTH.default({
+        kind: constants_1.constants.HTTP_ENDPOINT_AUTH_KIND_NONE
+    }),
+    // Safety.
+    timeoutMs: zod_1.z
+        .number()
+        .int()
+        .positive()
+        .default(constants_1.constants.HTTP_ENDPOINT_DEFAULT_TIMEOUT_MS)
+        .transform(n => Math.min(n, constants_1.constants.HTTP_ENDPOINT_MAX_TIMEOUT_MS)),
+    allowedHosts: zod_1.z
+        .array(zod_1.z.string().min(1).max(253).toLowerCase())
+        .max(50)
+        .optional()
+})
+    .transform(cfg => ({
+    ...cfg,
+    title: cfg.title || cfg.name,
+    description: cfg.description ||
+        `Call the configured ${cfg.method} ${cfg.url} endpoint.`
+}));
+// The same config, plus the rule that its `name` must not be one the platform
+// owns — `name` becomes the MCP tool key, in the same flat namespace the native
+// tools register into. Split from the schema above rather than folded into it
+// because that one is also how apps/mcp READS a stored row at boot: an install
+// that predates this rule, or predates a group being added to it, has to keep
+// registering. It loses the name to the native tool (apps/mcp registers those
+// first) instead of vanishing.
+//
+// Every path that accepts a config from a user validates with this one.
+const HTTP_ENDPOINT_CONFIG_WRITE = HTTP_ENDPOINT_CONFIG.superRefine((cfg, ctx) => {
+    if ((0, reservedToolName_1.isReservedToolName)(cfg.name)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['name'],
+            message: constants_1.constants.RESERVED_TOOL_NAME_MESSAGE
+        });
+    }
+    // On the write path only, like the rule above: no stored row can have one
+    // yet, but the read shape must stay permissive on principle — a rule
+    // tightened later must never stop an installed tool from registering.
+    if (cfg.outputSchema && cfg.outputSchema.type !== 'object') {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['outputSchema', 'type'],
+            message: constants_1.constants.OUTPUT_SCHEMA_NOT_OBJECT_MESSAGE
+        });
+    }
+});
+// Validates one artifact_tool.config of definition `mcp-proxy`. Each row of this
+// kind connects a remote MCP server (a vendor's official server) and registers
+// one local MCP tool per discovered remote tool at boot. `url`/`transport` are
+// resolved server-side from the curated mcp_server_catalog row referenced by
+// `curatedServerId` (the client never picks an arbitrary URL for now), then
+// re-validated here. Secrets are never inlined — auth references an
+// artifact_credential by id, same as http-endpoint.
+const MCP_PROXY_AUTH = zod_1.z.discriminatedUnion('kind', [
+    zod_1.z.object({ kind: zod_1.z.literal(constants_1.constants.MCP_PROXY_AUTH_KIND_NONE) }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.MCP_PROXY_AUTH_KIND_BEARER),
+        credentialId: zod_1.z.uuid()
+    }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.MCP_PROXY_AUTH_KIND_HEADER),
+        name: zod_1.z.string().min(1).max(256),
+        credentialId: zod_1.z.uuid()
+    }),
+    zod_1.z.object({
+        kind: zod_1.z.literal(constants_1.constants.MCP_PROXY_AUTH_KIND_OAUTH),
+        credentialId: zod_1.z.uuid()
+    })
+]);
+const MCP_PROXY_CONFIG = zod_1.z.object({
+    // Which curated server this row connects. url/transport are filled from the
+    // catalog server-side; included here so the stored config is self-contained
+    // for the boot loop (which never re-reads the catalog).
+    curatedServerId: zod_1.z.uuid(),
+    url: zod_1.z.string().min(1).max(2048).default(''),
+    transport: zod_1.z
+        .enum(constants_1.constants.MCP_PROXY_TRANSPORTS)
+        .default(constants_1.constants.MCP_PROXY_TRANSPORT_STREAMABLE_HTTP),
+    // Tools register as `<prefix>__<remoteKey>`. Optional — the API defaults it to
+    // the catalog slug when unset.
+    prefix: zod_1.z
+        .string()
+        .regex(/^[a-zA-Z0-9_-]{1,40}$/, 'Prefix must be 1-40 chars: letters, digits, underscore or hyphen')
+        .optional(),
+    // Per-item enable lists; the full available set lives on metadata.discovery so
+    // the UI can render toggles without re-hitting the remote. The empty/absent
+    // semantics differ by kind, matching the UI defaults:
+    //   - allowedTools: absent/empty = ALL tools enabled (UI defaults them on).
+    //   - allowedResources / allowedPrompts: opt-in — ONLY the listed items
+    //     register; absent/empty = none (UI defaults them off).
+    // All three are filtered at boot.
+    allowedTools: zod_1.z.array(zod_1.z.string().min(1).max(256)).max(500).optional(),
+    allowedResources: zod_1.z.array(zod_1.z.string().min(1).max(2048)).max(500).optional(),
+    allowedPrompts: zod_1.z.array(zod_1.z.string().min(1).max(256)).max(500).optional(),
+    auth: MCP_PROXY_AUTH.default({ kind: constants_1.constants.MCP_PROXY_AUTH_KIND_NONE }),
+    timeoutMs: zod_1.z
+        .number()
+        .int()
+        .positive()
+        .default(constants_1.constants.MCP_PROXY_DEFAULT_TIMEOUT_MS)
+        .transform(n => Math.min(n, constants_1.constants.MCP_PROXY_MAX_TIMEOUT_MS))
+});
+// Validates one artifact_tool.config of definition `custom-code`. Unlike the two
+// definitions above, this config describes almost nothing about the tools — the
+// names and schemas live on the ACTIVE VERSION (artifact_tool_version.tools),
+// written at publish time. Everything here is the row-level envelope: which
+// version is live, and the limits that apply to whatever code that version runs.
+//
+// `activeVersionId` is nullable on purpose: a freshly installed row has an
+// uploaded draft but nothing published, and the MCP boot loop must treat that as
+// "this artifact contributes zero tools" rather than as an error.
+const CUSTOM_CODE_CONFIG = zod_1.z.object({
+    activeVersionId: zod_1.z.uuid().nullable().default(null),
+    // Which of the active version's tools are exposed. Absent or empty means all
+    // of them — the same convention `mcp-proxy` uses for its remote tools, and
+    // reused rather than reinvented so one row of many tools behaves the same way
+    // whichever kind of row it is.
+    //
+    // It lives on the row's config and not in the version, because it answers a
+    // different question. The manifest is what this code CAN do and moves only by
+    // deploying; this is what the server currently offers, and turning one tool
+    // off to shorten a bloated tool list must not require a redeploy or leave the
+    // author's manifest disagreeing with their own file.
+    //
+    // Names that no longer appear in the active manifest are simply never matched,
+    // so a version that drops a tool leaves nothing to clean up here.
+    allowedTools: zod_1.z
+        .array(zod_1.z.string().min(1).max(constants_1.constants.CUSTOM_CODE_TOOL_NAME_MAX))
+        .max(constants_1.constants.CUSTOM_CODE_MAX_TOOLS)
+        .optional(),
+    // Egress allow-list, enforced by the outbound worker (Phase 2) — never in the
+    // SDK, which is user-editable and therefore not a control.
+    allowedHosts: zod_1.z
+        .array(zod_1.z.string().min(1).max(253).toLowerCase())
+        .max(50)
+        .optional(),
+    // Providers the script may request via ctx.connection(), and — for the three
+    // that have one — send files as. The broker refuses anything not listed here,
+    // so widening it is an explicit, auditable edit.
+    //
+    // Left as a free string on this READ shape: the connectable set grows and
+    // shrinks as providers are added and retired, and a stored row naming a
+    // provider we no longer offer has to keep parsing or the whole install stops
+    // registering. CUSTOM_CODE_CONFIG_WRITE below is where a name is checked.
+    connections: zod_1.z.array(zod_1.z.string().min(1).max(100)).max(50).optional(),
+    timeoutMs: zod_1.z
+        .number()
+        .int()
+        .positive()
+        .default(constants_1.constants.CUSTOM_CODE_DEFAULT_TIMEOUT_MS)
+        .transform(n => Math.min(n, constants_1.constants.CUSTOM_CODE_MAX_TIMEOUT_MS)),
+    // How far ctx.resources.create and .delete reach. `own` is the default and
+    // the safe floor; `all` lets the script replace and remove resources it did
+    // not write, which is what a tool that prunes a stale crawl needs. Declared
+    // here so the owner grants it at publish time and the script cannot.
+    resourceAccess: zod_1.z
+        .enum(constants_1.constants.CUSTOM_CODE_RESOURCE_ACCESS_VALUES)
+        .default(constants_1.constants.CUSTOM_CODE_RESOURCE_ACCESS_OWN)
+});
+// The same config, plus the rule that every declared connection names a provider
+// we actually run a managed OAuth app for.
+//
+// Without this a typo is invisible until a customer's tool call fails: the
+// broker answers 403 "not one of this tool's declared connections" for
+// `google_gmail`, which is true and useless, because the entry IS in the list —
+// it just doesn't name anything. Same split as HTTP_ENDPOINT_CONFIG_WRITE, and
+// for the same reason: only the write path may tighten.
+const CUSTOM_CODE_CONFIG_WRITE = CUSTOM_CODE_CONFIG.superRefine((cfg, ctx) => {
+    cfg.connections?.forEach((provider, index) => {
+        if (constants_1.constants.OAUTH_PROVIDERS.includes(provider)) {
+            return;
+        }
+        ctx.addIssue({
+            code: 'custom',
+            path: ['connections', index],
+            message: constants_1.constants.CUSTOM_CODE_UNKNOWN_CONNECTION_MESSAGE
+        });
+    });
+});
+// One tool entry in an uploaded manifest. This is the CONTRACT half of a
+// version: what apps/mcp registers at boot without ever calling the dispatcher.
+// `outputSchema` is optional — MCP allows a tool to declare structured output,
+// and a version that omits it just returns text.
+//
+// This is the shape used to READ a stored version back, so it carries no
+// reserved-name rule: a rule tightened after a version was published would stop
+// that version registering, and the owner would see tools quietly disappear with
+// only a log line to explain it. Reservation belongs to the manifest below,
+// which is the write path.
+const CUSTOM_CODE_TOOL = zod_1.z.object({
+    name: zod_1.z
+        .string()
+        .min(1)
+        .max(constants_1.constants.CUSTOM_CODE_TOOL_NAME_MAX)
+        .regex(/^[a-zA-Z0-9_-]+$/, 'Tool name may only contain letters, digits, underscore or hyphen'),
+    title: zod_1.z.string().min(1).max(200).optional(),
+    description: zod_1.z.string().max(2000).optional(),
+    inputSchema: SCHEMA_DEFINITION.default({ type: 'object', properties: {} }),
+    outputSchema: SCHEMA_DEFINITION.optional()
+});
+// The manifest a `ganju deploy` (or the dashboard) uploads alongside a bundle.
+// Names must be unique within one script: apps/mcp registers them into a single
+// flat namespace, and a duplicate would silently register once and drop the rest.
+// For the same reason a name may not be one the platform owns — see
+// isReservedToolName.
+//
+// The offending entry is identified by `path` (`tools.3.name`) rather than by
+// quoting the name into the message: a manifest can declare 50 tools, so "one
+// of them is reserved" would not be actionable, but an interpolated message can
+// never be localized — localizeZodIssue keys on the exact English string.
+const CUSTOM_CODE_MANIFEST = zod_1.z.object({
+    tools: zod_1.z
+        .array(CUSTOM_CODE_TOOL)
+        .min(1, 'A version must declare at least one tool')
+        .max(constants_1.constants.CUSTOM_CODE_MAX_TOOLS, `A script may declare at most ${constants_1.constants.CUSTOM_CODE_MAX_TOOLS} tools`)
+        .refine(tools => new Set(tools.map(t => t.name)).size === tools.length, {
+        message: 'Tool names must be unique within a version'
+    })
+        .superRefine((tools, ctx) => {
+        tools.forEach((tool, index) => {
+            if ((0, reservedToolName_1.isReservedToolName)(tool.name)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [index, 'name'],
+                    message: constants_1.constants.RESERVED_TOOL_NAME_MESSAGE
+                });
+            }
+            // Same rule as http-endpoint's write path, and here for the same
+            // reason: `structuredContent` is an object, so a schema of any other
+            // type promises something the tool can never return.
+            if (tool.outputSchema && tool.outputSchema.type !== 'object') {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [index, 'outputSchema', 'type'],
+                    message: constants_1.constants.OUTPUT_SCHEMA_NOT_OBJECT_MESSAGE
+                });
+            }
+        });
+    })
+});
+// Creates a draft version. Carries the manifest — the tool names and schemas the
+// MCP server will register from once this version is published — and optionally
+// the row-level config, since limits on how the code may run belong to the same
+// review as the code itself. The compiled bundle arrives separately.
+const ARTIFACT_CUSTOM_CODE_CREATE_VERSION = zod_1.z.object({
+    manifest: CUSTOM_CODE_MANIFEST,
+    config: CUSTOM_CODE_CONFIG_WRITE.optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Attaches the compiled script to a draft. Separate from the create above for
+// the same reason resource upload is separate from resource create: the bundle
+// is a raw binary body while the manifest is JSON, and one request carries one
+// body. Only the identifiers are validated here — the bytes are the body.
+const ARTIFACT_CUSTOM_CODE_UPLOAD_BUNDLE = zod_1.z.object({
+    versionId: zod_1.z.uuid(),
+    // Whether these bytes are readable source or a compiled artifact. Defaults to
+    // 'bundle' because the CLI — which sends no such flag — is uploading one, and
+    // because the safe answer for anything unknown is "do not offer this in a text
+    // box".
+    sourceKind: zod_1.z
+        .enum(constants_1.constants.CUSTOM_CODE_SOURCE_KINDS)
+        .default(constants_1.constants.CUSTOM_CODE_SOURCE_KIND_BUNDLE),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Runs ONE tool of ONE version against a sample input, without publishing it.
+//
+// The version is named rather than assumed to be the draft: a test that could
+// only run the newest version would be useless the moment someone wanted to
+// check what the live one actually does. `input` is whatever the tool's own
+// input schema accepts, and is checked against it before anything is deployed.
+const ARTIFACT_CUSTOM_CODE_TEST_VERSION = zod_1.z.object({
+    versionId: zod_1.z.uuid(),
+    tool: zod_1.z
+        .string()
+        .min(1)
+        .max(constants_1.constants.CUSTOM_CODE_TOOL_NAME_MAX)
+        .regex(/^[a-zA-Z0-9_-]+$/, 'Tool name is not valid'),
+    input: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).default({}),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Reads one version's stored source back for the editor.
+const ARTIFACT_CUSTOM_CODE_GET_SOURCE = zod_1.z.object({
+    versionId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Makes a draft the artifact's active version.
+const ARTIFACT_CUSTOM_CODE_PUBLISH = zod_1.z.object({
+    versionId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Makes a previously published (now archived) version active again. The same
+// state transition as publish with a different intent, kept apart so the two are
+// distinguishable in logs and in the UI.
+const ARTIFACT_CUSTOM_CODE_ROLLBACK = zod_1.z.object({
+    versionId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Recent invocations of the artifact's custom tools, newest first.
+//
+// The rows already exist — apps/mcp records one `mcp_request` per call with the
+// tool name and, for a custom tool, the `ctx.log` lines on its output. What was
+// missing is a way to read them without a database client, which is the whole of
+// what `ganju logs` needs. `tool` narrows to one name; `before` pages backwards
+// through the same ordering rather than by offset, so a row arriving mid-page
+// can't make the reader see one twice.
+const ARTIFACT_CUSTOM_CODE_LIST_LOGS = zod_1.z.object({
+    tool: zod_1.z
+        .string()
+        .min(1)
+        .max(constants_1.constants.CUSTOM_CODE_TOOL_NAME_MAX)
+        .regex(/^[a-zA-Z0-9_-]+$/, 'Tool name is not valid')
+        .optional(),
+    limit: zod_1.z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(constants_1.constants.CUSTOM_CODE_LOGS_MAX_LIMIT)
+        .default(constants_1.constants.CUSTOM_CODE_LOGS_DEFAULT_LIMIT),
+    before: zod_1.z.coerce.date().optional(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// Reads the artifact's version history and which one is currently active.
+const ARTIFACT_CUSTOM_CODE_LIST_VERSIONS = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+// What apps/mcp POSTs to a dispatched user script. Parsed inside the script by
+// @ganju/sdk, which routes on `tool` — one script exports many tools, so the
+// name is in the body rather than in the path.
+const CUSTOM_CODE_INVOKE_REQUEST = zod_1.z.object({
+    tool: zod_1.z.string().min(1).max(constants_1.constants.CUSTOM_CODE_TOOL_NAME_MAX),
+    input: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).default({}),
+    // Correlates the dispatcher's mcp_request row with whatever the script logs.
+    // Opaque to user code.
+    requestId: zod_1.z.string().max(100).optional()
+});
+// What the script returns. `output` is validated against the version's declared
+// outputSchema by the dispatcher, not here — this schema only establishes the
+// envelope, so a script that returns garbage produces a legible tool error
+// instead of an unhandled parse failure in the MCP worker.
+//
+// `error` is how a script reports a handled failure. It travels as a 200 with an
+// error field rather than an HTTP status, because a non-2xx from the dispatch
+// namespace is ambiguous — it could equally be the platform refusing to run the
+// script at all.
+const CUSTOM_CODE_INVOKE_RESPONSE = zod_1.z.object({
+    output: zod_1.z.unknown().optional(),
+    logs: zod_1.z
+        .array(zod_1.z.object({
+        level: zod_1.z.enum(['log', 'warn', 'error']).default('log'),
+        message: zod_1.z.string().max(constants_1.constants.CUSTOM_CODE_MAX_LOG_LENGTH)
+    }))
+        .max(constants_1.constants.CUSTOM_CODE_MAX_LOGS)
+        .default([]),
+    error: zod_1.z.string().max(2000).optional()
+});
+// Broker request bodies. Every one of these is authenticated by the bearer token
+// alone — no body field names the artifact, because a script could lie about it.
+const CUSTOM_CODE_BROKER_CONNECTION = zod_1.z.object({
+    provider: zod_1.z.string().min(1).max(100)
+});
+const CUSTOM_CODE_BROKER_SECRET = zod_1.z.object({
+    // The credential's label, which is the lookup key for custom-code secrets
+    // (they carry no id inside the script). See CREDENTIAL_PROVIDER_CUSTOM_CODE.
+    name: zod_1.z.string().min(1).max(200)
+});
+const CUSTOM_CODE_BROKER_RESOURCE_SEARCH = zod_1.z.object({
+    query: zod_1.z.string().min(1).max(2000),
+    limit: zod_1.z.number().int().positive().max(20).default(5)
+});
+const CUSTOM_CODE_BROKER_RESOURCE_READ = zod_1.z.object({
+    uri: zod_1.z.string().min(1).max(2000)
+});
+// One ctx.resources.delete call. Same shape as a read — a uri is the only thing
+// a script holds — but its own schema so the two can diverge without one
+// quietly accepting what the other meant.
+const CUSTOM_CODE_BROKER_RESOURCE_DELETE = zod_1.z.object({
+    uri: zod_1.z.string().min(1).max(2000),
+    // Opt-in rather than implied. The FK cascades regardless, so a delete that
+    // took children silently would be the difference between removing one page
+    // and removing a 400-page crawl — a distinction the caller has to make on
+    // purpose.
+    children: zod_1.z.boolean().default(false)
+});
+// One ctx.resources.create call.
+//
+// `content` and `bytes` are the two payload shapes and exactly one is required:
+// text goes inline on the row, bytes (base64) go to storage. Requiring one and
+// refusing both is what keeps the row's meaning unambiguous — a resource with
+// inline text AND a stored object has two answers to "what is in it", and every
+// reader would have to pick.
+//
+// `mimeType` is constrained to the same list an uploaded file is, so a script
+// cannot introduce a type no other surface knows how to render or attach.
+const CUSTOM_CODE_BROKER_RESOURCE_CREATE = zod_1.z
+    .object({
+    title: zod_1.z.string().min(1).max(200),
+    // Optional: derived from the title when omitted. A script that re-runs and
+    // wants to replace its previous output passes the same one.
+    uri: zod_1.z.string().min(1).max(2000).optional(),
+    description: zod_1.z.string().max(1000).optional(),
+    mimeType: zod_1.z
+        .enum(constants_1.constants.MIMETYPES, { message: 'Unsupported mime type' })
+        .optional(),
+    content: zod_1.z.string().optional(),
+    bytes: zod_1.z.string().optional(),
+    // Only meaningful for the bytes path; drives the stored object's name and
+    // the filename an attachment arrives under.
+    fileName: zod_1.z.string().min(1).max(255).optional(),
+    // Put this resource in the artifact's search corpus. Off by default: script
+    // output that lands in the corpus is content the assistant will answer other
+    // people's questions from, and that should be a decision rather than a
+    // side effect of writing a file.
+    index: zod_1.z.boolean().default(false)
+})
+    .superRefine((value, ctx) => {
+    const hasContent = value.content !== undefined;
+    const hasBytes = value.bytes !== undefined;
+    if (hasContent === hasBytes) {
+        ctx.addIssue({
+            code: 'custom',
+            path: [hasContent ? 'bytes' : 'content'],
+            message: constants_1.constants.CUSTOM_CODE_RESOURCE_PAYLOAD_MESSAGE
+        });
+        return;
+    }
+    // Measured in bytes rather than characters: the cap exists to bound what is
+    // stored, and a string of emoji is four times its length on the way to
+    // Postgres.
+    if (hasContent) {
+        const size = new TextEncoder().encode(value.content).byteLength;
+        if (size > constants_1.constants.CUSTOM_CODE_MAX_RESOURCE_TEXT_BYTES) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['content'],
+                message: constants_1.constants.CUSTOM_CODE_RESOURCE_TEXT_TOO_LARGE_MESSAGE
+            });
+        }
+        return;
+    }
+    // The base64 length bounds the decoded length, so this rejects an oversized
+    // payload without decoding it first — the decode is what would actually cost
+    // the memory being defended.
+    const decodedSize = Math.floor((value.bytes.length * 3) / 4);
+    if (decodedSize > constants_1.constants.CUSTOM_CODE_MAX_RESOURCE_FILE_BYTES) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['bytes'],
+            message: constants_1.constants.CUSTOM_CODE_RESOURCE_FILE_TOO_LARGE_MESSAGE
+        });
+    }
+});
+// The resources to deliver. Named by URI rather than by id because a URI is what
+// every other resource surface a script can see hands back — ctx.resources.list
+// and .search both return one, and neither returns a row id.
+const CUSTOM_CODE_SEND_FILE_URIS = zod_1.z
+    .array(zod_1.z.string().min(1).max(2000))
+    .min(1, 'At least one resource uri is required')
+    .max(constants_1.constants.CUSTOM_CODE_SEND_FILE_MAX_URIS, `At most ${constants_1.constants.CUSTOM_CODE_SEND_FILE_MAX_URIS} resources can be sent in one call`);
+const CUSTOM_CODE_SEND_FILE_BODY = zod_1.z.string().max(100_000);
+const CUSTOM_CODE_SEND_FILE_RECIPIENTS = zod_1.z.string().min(1).max(2000);
+// What ctx.sendFile posts to the broker.
+//
+// Discriminated on `to` because the three destinations genuinely disagree about
+// what a send is: two are mail with recipients and a subject, one is a channel
+// upload with a comment. A single flat shape with everything optional would
+// accept `{ to: 'slack', subject: '…' }` and drop the subject silently.
+//
+// Each variant deliberately covers ONE operation — a new mail, a new upload.
+// The container routes behind them can also reply, forward, and update drafts,
+// but sendFile exists to move bytes a script cannot hold, not to be a mail
+// client: anything else a script wants from these APIs it can do itself with
+// ctx.connection() and a fetch, where its own allow-list applies.
+const CUSTOM_CODE_SEND_FILE = zod_1.z.discriminatedUnion('to', [
+    zod_1.z.object({
+        to: zod_1.z.literal(constants_1.constants.CUSTOM_CODE_SEND_FILE_TARGET_GMAIL),
+        uris: CUSTOM_CODE_SEND_FILE_URIS,
+        message: zod_1.z.object({
+            // Gmail's own field name for the recipient; the destination lives on `to`
+            // one level up.
+            to: CUSTOM_CODE_SEND_FILE_RECIPIENTS,
+            subject: zod_1.z.string().max(2000).optional(),
+            body: CUSTOM_CODE_SEND_FILE_BODY.default(''),
+            cc: zod_1.z.string().max(2000).optional(),
+            bcc: zod_1.z.string().max(2000).optional(),
+            contentType: zod_1.z.enum(['text/html', 'text/plain']).optional(),
+            // Threads an attachment onto an existing conversation, which a script
+            // typically got from a gmail- tool call earlier in the same turn.
+            threadId: zod_1.z.string().max(200).optional()
+        })
+    }),
+    zod_1.z.object({
+        to: zod_1.z.literal(constants_1.constants.CUSTOM_CODE_SEND_FILE_TARGET_OUTLOOK),
+        uris: CUSTOM_CODE_SEND_FILE_URIS,
+        message: zod_1.z.object({
+            to: CUSTOM_CODE_SEND_FILE_RECIPIENTS,
+            subject: zod_1.z.string().max(2000).optional(),
+            body: CUSTOM_CODE_SEND_FILE_BODY.default(''),
+            cc: zod_1.z.string().max(2000).optional(),
+            bcc: zod_1.z.string().max(2000).optional(),
+            // Graph's vocabulary, not a MIME type — the container passes it straight
+            // through to the message payload.
+            contentType: zod_1.z.enum(['html', 'text']).optional()
+        })
+    }),
+    zod_1.z.object({
+        to: zod_1.z.literal(constants_1.constants.CUSTOM_CODE_SEND_FILE_TARGET_SLACK),
+        // Exactly one, unlike the two mail destinations. Slack's external-upload
+        // flow moves a single file per call — three round trips per file — and the
+        // container route behind it reads one `attachment` field. Accepting a list
+        // here would take ten and deliver the first, silently. A script sending
+        // several files calls sendFile several times.
+        uris: CUSTOM_CODE_SEND_FILE_URIS.length(1, 'Slack delivers one file per call'),
+        message: zod_1.z.object({
+            channel: zod_1.z.string().min(1).max(200),
+            title: zod_1.z.string().max(200).optional(),
+            initialComment: zod_1.z.string().max(4000).optional(),
+            threadTs: zod_1.z.string().max(100).optional()
+        })
+    })
+]);
+const ARTIFACT_UPDATE_RESOURCE_SHOW_SOURCE = zod_1.z.object({
+    resourceId: zod_1.z.uuid(),
+    showSource: zod_1.z.enum(constants_1.constants.CHANNEL_STATUS),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_GET = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const ARTIFACT_UPDATE_SLUG = zod_1.z.object({
+    slug: zod_1.z
+        .string()
+        .trim()
+        .toLowerCase()
+        .refine(slug_1.isValidSlugFormat, {
+        message: 'Slug must be 3–63 chars, lowercase letters, digits, or hyphens, and start/end with a letter or digit'
+    })
+        .refine(s => !(0, slug_1.isReservedSlug)(s), { message: 'Slug is reserved' }),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CHANNEL_GET = zod_1.z.object({
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CHANNEL_REMOVE = zod_1.z.object({
+    channelId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CHANNEL_LIST_CONVERSATIONS = zod_1.z.object({
+    channelId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CHANNEL_LIST_MESSAGES = zod_1.z.object({
+    channelId: zod_1.z.uuid(),
+    conversationId: zod_1.z.uuid(),
+    projectId: zod_1.z.uuid(),
+    userId: zod_1.z.uuid(),
+    organizationId: zod_1.z.uuid()
+});
+const CHANNEL_CREATE_VIEW = CHANNEL_CREATE.omit({
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+const CHANNEL_UPDATE_VIEW = CHANNEL_UPDATE.omit({
+    channelId: true,
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+const ARTIFACT_CREATE_PROMPT_VIEW = ARTIFACT_CREATE_PROMPT.omit({
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+const ARTIFACT_UPDATE_PROMPT_VIEW = ARTIFACT_UPDATE_PROMPT.omit({
+    promptId: true,
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+const ARTIFACT_CREATE_RESOURCE_VIEW = ARTIFACT_CREATE_RESOURCE.omit({
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+const ARTIFACT_UPDATE_RESOURCE_VIEW = ARTIFACT_UPDATE_RESOURCE.omit({
+    resourceId: true,
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+const ARTIFACT_UPDATE_SLUG_VIEW = ARTIFACT_UPDATE_SLUG.omit({
+    projectId: true,
+    userId: true,
+    organizationId: true
+});
+exports.Schema = {
+    CONTACT_MESSAGE,
+    ORGANIZATION_CREATE,
+    ORGANIZATION_CREATE_VIEW,
+    ORGANIZATION_UPDATE,
+    ORGANIZATION_GET,
+    AUTH_USER_GET,
+    PROJECT_CREATE,
+    PROJECT_CREATE_VIEW,
+    PROJECT_UPDATE,
+    PROJECT_GET,
+    ORGANIZATION_INVITATION_CREATE,
+    ORGANIZATION_INVITATION_CREATE_VIEW,
+    ORGANIZATION_INVITATION_LIST,
+    ORGANIZATION_INVITATION_REMOVE,
+    PROJECT_INVITATION_CREATE,
+    PROJECT_INVITATION_CREATE_VIEW,
+    PROJECT_INVITATION_LIST,
+    PROJECT_INVITATION_REMOVE,
+    INVITATION_RESPOND,
+    INVITATION_GET_BY_TOKEN,
+    ORGANIZATION_MEMBER_LIST,
+    ORGANIZATION_MEMBER_REMOVE,
+    PROJECT_MEMBER_LIST,
+    PROJECT_MEMBER_REMOVE,
+    ARTIFACT_CREATE_PROMPT,
+    ARTIFACT_CREATE_PROMPT_VIEW,
+    ARTIFACT_UPDATE_PROMPT,
+    ARTIFACT_UPDATE_PROMPT_VIEW,
+    ARTIFACT_GET_PROMPT,
+    ARTIFACT_REMOVE_PROMPT,
+    ARTIFACT_CREATE_RESOURCE,
+    ARTIFACT_CREATE_RESOURCE_VIEW,
+    ARTIFACT_CREATE_WEBSITE,
+    ARTIFACT_CREATE_WEBSITE_VIEW,
+    ARTIFACT_UPDATE_WEBSITE,
+    ARTIFACT_UPDATE_WEBSITE_VIEW,
+    ARTIFACT_CREATE_GOOGLE_DRIVE,
+    ARTIFACT_CREATE_GOOGLE_DRIVE_VIEW,
+    ARTIFACT_SYNC_GOOGLE_DRIVE,
+    ARTIFACT_CREATE_ONE_DRIVE,
+    ARTIFACT_CREATE_ONE_DRIVE_VIEW,
+    ARTIFACT_SYNC_ONE_DRIVE,
+    ARTIFACT_UPDATE_RESOURCE,
+    ARTIFACT_UPDATE_RESOURCE_VIEW,
+    ARTIFACT_GET_RESOURCE,
+    ARTIFACT_GET_RESOURCE_BY_ID,
+    ARTIFACT_REMOVE_RESOURCE,
+    ARTIFACT_UPLOAD_RESOURCE_FILE,
+    ARTIFACT_DOWNLOAD_RESOURCE_FILE,
+    ARTIFACT_CREATE_TOOL,
+    ARTIFACT_UPDATE_TOOL,
+    ARTIFACT_GET_TOOL,
+    ARTIFACT_REMOVE_TOOL,
+    ARTIFACT_SET_TOOL_ENABLED,
+    ARTIFACT_GET_CREDENTIAL,
+    ARTIFACT_LIST_CONNECTIONS,
+    ARTIFACT_REMOVE_CREDENTIAL,
+    ARTIFACT_CREATE_CREDENTIAL,
+    ARTIFACT_GET,
+    ARTIFACT_UPDATE_SLUG,
+    ARTIFACT_UPDATE_SLUG_VIEW,
+    ORGANIZATION_LIST_LLM,
+    ORGANIZATION_CREATE_LLM,
+    ORGANIZATION_CREATE_LLM_VIEW,
+    ORGANIZATION_UPDATE_LLM,
+    ORGANIZATION_UPDATE_LLM_VIEW,
+    ORGANIZATION_REMOVE_LLM,
+    CHANNEL_CONFIG,
+    CHANNEL_CREATE,
+    CHANNEL_CREATE_VIEW,
+    CHANNEL_UPDATE,
+    CHANNEL_UPDATE_VIEW,
+    CHANNEL_GET,
+    CHANNEL_REMOVE,
+    CHANNEL_LIST_CONVERSATIONS,
+    CHANNEL_LIST_MESSAGES,
+    ARTIFACT_UPDATE_RESOURCE_SHOW_SOURCE,
+    HTTP_ENDPOINT_CONFIG,
+    HTTP_ENDPOINT_CONFIG_WRITE,
+    MCP_PROXY_CONFIG,
+    CUSTOM_CODE_CONFIG,
+    CUSTOM_CODE_CONFIG_WRITE,
+    CUSTOM_CODE_TOOL,
+    CUSTOM_CODE_MANIFEST,
+    ARTIFACT_CUSTOM_CODE_CREATE_VERSION,
+    ARTIFACT_CUSTOM_CODE_UPLOAD_BUNDLE,
+    ARTIFACT_CUSTOM_CODE_GET_SOURCE,
+    ARTIFACT_CUSTOM_CODE_TEST_VERSION,
+    ARTIFACT_CUSTOM_CODE_PUBLISH,
+    ARTIFACT_CUSTOM_CODE_ROLLBACK,
+    ARTIFACT_CUSTOM_CODE_LIST_LOGS,
+    ARTIFACT_CUSTOM_CODE_LIST_VERSIONS,
+    CUSTOM_CODE_INVOKE_REQUEST,
+    CUSTOM_CODE_INVOKE_RESPONSE,
+    CUSTOM_CODE_BROKER_CONNECTION,
+    CUSTOM_CODE_BROKER_SECRET,
+    CUSTOM_CODE_BROKER_RESOURCE_SEARCH,
+    CUSTOM_CODE_BROKER_RESOURCE_READ,
+    CUSTOM_CODE_BROKER_RESOURCE_CREATE,
+    CUSTOM_CODE_BROKER_RESOURCE_DELETE,
+    CUSTOM_CODE_SEND_FILE
+};