@loxtep/sdk 0.2.3 → 0.4.0

package/dist/codegen/write-artifact.js

@@ -0,0 +1,74 @@
+/**
+ * Stage 4: Write — atomic file overwrite returning per-type counts.
+ *
+ * This I/O stage takes the emitted TypeScript source string and writes it
+ * atomically to the target path. "Atomic" means: write to a temporary file
+ * in the same directory, then rename over the target. If the process crashes
+ * or the write fails at any point, the prior artifact remains unchanged (R2.8).
+ *
+ * The function also computes and returns per-resource-type counts from the
+ * provided NormalizedContext so the CLI can print them (R2.7).
+ *
+ * Requirements: R2.6, R2.7, R2.8
+ *
+ * @module codegen/write-artifact
+ */
+import { writeFile, rename, mkdir, unlink } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+/**
+ * Computes per-resource-type counts from a NormalizedContext.
+ * Returns 0 for each resource type that has no resources (R2.7).
+ */
+export function computeCounts(norm) {
+    return {
+        dataProducts: norm.dataProducts.length,
+        connectors: norm.connectors.length,
+        domains: norm.domains.length,
+        queues: norm.queues.length,
+        flows: norm.flows.length,
+        workflows: norm.workflows.length,
+    };
+}
+/**
+ * Writes the generated artifact source to disk atomically and returns per-type counts.
+ *
+ * Atomicity strategy:
+ * 1. Ensure the target directory exists.
+ * 2. Write the full source to a temporary file in the same directory (same filesystem).
+ * 3. Rename the temporary file over the target path (atomic on POSIX filesystems).
+ *
+ * If any step fails, the temporary file is cleaned up (best-effort) and the
+ * prior artifact at `targetPath` remains unchanged (R2.8). The error is re-thrown
+ * so the caller can handle it (e.g. exit non-zero, print the failure reason).
+ *
+ * @param targetPath - Absolute or relative path to the generated artifact file.
+ * @param source - The TypeScript source string produced by `emitArtifact`.
+ * @param norm - The NormalizedContext used to compute resource counts.
+ * @returns Per-resource-type counts written to the artifact (R2.7).
+ */
+export async function writeArtifact(targetPath, source, norm) {
+    const dir = dirname(targetPath);
+    const tempName = `.loxtep-gen-${randomBytes(8).toString('hex')}.tmp`;
+    const tempPath = join(dir, tempName);
+    try {
+        // Ensure target directory exists
+        await mkdir(dir, { recursive: true });
+        // Write full content to temp file (same directory → same filesystem for rename)
+        await writeFile(tempPath, source, 'utf-8');
+        // Atomic rename over the target (R2.8: prior artifact unchanged on failure above)
+        await rename(tempPath, targetPath);
+    }
+    catch (err) {
+        // Best-effort cleanup of the temp file
+        try {
+            await unlink(tempPath);
+        }
+        catch {
+            // Ignore cleanup errors — the temp file may not have been created
+        }
+        throw err;
+    }
+    return computeCounts(norm);
+}
+//# sourceMappingURL=write-artifact.js.map

package/dist/codegen/write-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-artifact.js","sourceRoot":"","sources":["../../src/codegen/write-artifact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;QACtC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,MAAc,EACd,IAAuB;IAEvB,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,eAAe,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAErC,IAAI,CAAC;QACH,iCAAiC;QACjC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtC,gFAAgF;QAChF,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3C,kFAAkF;QAClF,MAAM,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,uCAAuC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/config/index.d.ts

@@ -7,4 +7,5 @@ export { DEFAULT_CONFIG } from './types.js';
 export { buildAuthServiceUrl, extendClientBaseUrl } from './api-path.js';
 export { buildPlatformRequestUrl, getGatewayMicroserviceId, SDK_HTTP_PATHS_BY_FEATURE, } from './platform-request-url.js';
 export { resolveSdkApiPaths, resolveConfigSdkPath, SDK_EXAMPLE_PATHS, type ResolvedSdkApiPaths, } from './resolve-sdk-urls.js';
+export { loadWorkspaceConfig, resolveAutoConfig, type WorkspaceResolvedFields, type WorkspaceConfigResult, type ExplicitConfigFields, type AutoConfigResult, } from './workspace-config.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,uBAAuB,CAAC"}

package/dist/config/index.js

@@ -6,4 +6,5 @@ export { DEFAULT_CONFIG } from './types.js';
 export { buildAuthServiceUrl, extendClientBaseUrl } from './api-path.js';
 export { buildPlatformRequestUrl, getGatewayMicroserviceId, SDK_HTTP_PATHS_BY_FEATURE, } from './platform-request-url.js';
 export { resolveSdkApiPaths, resolveConfigSdkPath, SDK_EXAMPLE_PATHS, } from './resolve-sdk-urls.js';
+export { loadWorkspaceConfig, resolveAutoConfig, } from './workspace-config.js';
 //# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,GAElB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAKlB,MAAM,uBAAuB,CAAC"}

package/dist/config/workspace-config.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Workspace-aware config resolution for the SDK auto-config feature (R13).
+ *
+ * Resolution precedence: env vars > explicit config > `.loxtep/project.json` + `~/.loxtep/credentials.json`.
+ *
+ * This module provides:
+ * - {@link loadWorkspaceConfig} — resolves config from workspace files (project.json + credentials.json)
+ * - {@link resolveAutoConfig} — merges all layers (env, explicit, workspace) following the precedence
+ * - {@link WorkspaceConfigResult} — the resolved config with metadata about which files were used
+ */
+/**
+ * Fields that auto-config resolves from workspace files.
+ */
+export interface WorkspaceResolvedFields {
+    api_url?: string;
+    project_id?: string;
+    instance_id?: string;
+    token?: string;
+}
+/**
+ * Result of loading workspace config, including which files were found.
+ */
+export interface WorkspaceConfigResult {
+    /** Resolved fields from workspace files. */
+    fields: WorkspaceResolvedFields;
+    /** Files that were found and used. */
+    resolvedFiles: string[];
+    /** Files that were looked for but missing. */
+    missingFiles: string[];
+}
+/**
+ * Load workspace-resolved configuration from `.loxtep/project.json` (local project)
+ * and `~/.loxtep/credentials.json` (user credentials).
+ *
+ * This does NOT check env vars or explicit config — it only resolves from files.
+ * The caller is responsible for merging with the correct precedence.
+ *
+ * @param cwd - The working directory to search from (defaults to `process.cwd()`).
+ * @returns Resolved fields and metadata about which files were used.
+ */
+export declare function loadWorkspaceConfig(cwd?: string): WorkspaceConfigResult;
+/**
+ * Options that can be explicitly passed to override auto-resolved config.
+ */
+export interface ExplicitConfigFields {
+    api_url?: string;
+    project_id?: string;
+    instance_id?: string;
+    token?: string;
+}
+/**
+ * Resolved auto-config result with full precedence applied.
+ */
+export interface AutoConfigResult {
+    /** Final resolved api_url. */
+    api_url?: string;
+    /** Final resolved project_id. */
+    project_id?: string;
+    /** Final resolved instance_id. */
+    instance_id?: string;
+    /** Final resolved auth token. */
+    token?: string;
+    /** Files that were resolved (for debug log). */
+    resolvedFiles: string[];
+    /** Files that were missing. */
+    missingFiles: string[];
+}
+/**
+ * Resolve configuration with full precedence: env > explicit > workspace files.
+ *
+ * @param explicit - Explicitly passed config (overrides workspace but not env).
+ * @param cwd - Working directory to search for `.loxtep/project.json`.
+ * @returns The merged config with metadata about resolution sources.
+ */
+export declare function resolveAutoConfig(explicit?: ExplicitConfigFields, cwd?: string): AutoConfigResult;
+//# sourceMappingURL=workspace-config.d.ts.map

package/dist/config/workspace-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-config.d.ts","sourceRoot":"","sources":["../../src/config/workspace-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,4CAA4C;IAC5C,MAAM,EAAE,uBAAuB,CAAC;IAChC,sCAAsC;IACtC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAKD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,qBAAqB,CAkEvE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAUD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,+BAA+B;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,oBAAoB,EAC/B,GAAG,CAAC,EAAE,MAAM,GACX,gBAAgB,CA0BlB"}

package/dist/config/workspace-config.js

@@ -0,0 +1,129 @@
+/**
+ * Workspace-aware config resolution for the SDK auto-config feature (R13).
+ *
+ * Resolution precedence: env vars > explicit config > `.loxtep/project.json` + `~/.loxtep/credentials.json`.
+ *
+ * This module provides:
+ * - {@link loadWorkspaceConfig} — resolves config from workspace files (project.json + credentials.json)
+ * - {@link resolveAutoConfig} — merges all layers (env, explicit, workspace) following the precedence
+ * - {@link WorkspaceConfigResult} — the resolved config with metadata about which files were used
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getConfigDir } from './paths.js';
+import { findProjectDir, getProjectFilePath, PROJECT_DIR_NAME, PROJECT_FILE_NAME } from '../cli/project-context.js';
+/** Credentials file name within `~/.loxtep/`. */
+const CREDENTIALS_FILE_NAME = 'credentials.json';
+/**
+ * Load workspace-resolved configuration from `.loxtep/project.json` (local project)
+ * and `~/.loxtep/credentials.json` (user credentials).
+ *
+ * This does NOT check env vars or explicit config — it only resolves from files.
+ * The caller is responsible for merging with the correct precedence.
+ *
+ * @param cwd - The working directory to search from (defaults to `process.cwd()`).
+ * @returns Resolved fields and metadata about which files were used.
+ */
+export function loadWorkspaceConfig(cwd) {
+    const workDir = cwd ?? process.cwd();
+    const resolvedFiles = [];
+    const missingFiles = [];
+    const fields = {};
+    // 1. Resolve .loxtep/project.json (search upward from cwd)
+    const projectDir = findProjectDir(workDir);
+    const projectFilePath = projectDir ? getProjectFilePath(projectDir) : null;
+    if (projectFilePath && existsSync(projectFilePath)) {
+        try {
+            const raw = readFileSync(projectFilePath, 'utf-8');
+            const parsed = JSON.parse(raw);
+            if (typeof parsed === 'object' && parsed !== null) {
+                if (typeof parsed.api_url === 'string' && parsed.api_url.trim()) {
+                    fields.api_url = parsed.api_url.trim();
+                }
+                if (typeof parsed.project_id === 'string' && parsed.project_id.trim()) {
+                    fields.project_id = parsed.project_id.trim();
+                }
+                if (typeof parsed.instance_id === 'string' && parsed.instance_id.trim()) {
+                    fields.instance_id = parsed.instance_id.trim();
+                }
+            }
+            resolvedFiles.push(projectFilePath);
+        }
+        catch {
+            // File exists but can't be read/parsed — treat as missing
+            missingFiles.push(projectFilePath);
+        }
+    }
+    else {
+        // Project file not found in any parent directory
+        const searchedPath = join(workDir, PROJECT_DIR_NAME, PROJECT_FILE_NAME);
+        missingFiles.push(searchedPath);
+    }
+    // 2. Resolve ~/.loxtep/credentials.json (user-level credentials)
+    const credentialsPath = join(getConfigDir(), CREDENTIALS_FILE_NAME);
+    if (existsSync(credentialsPath)) {
+        try {
+            const raw = readFileSync(credentialsPath, 'utf-8');
+            const parsed = JSON.parse(raw);
+            if (typeof parsed === 'object' && parsed !== null) {
+                if (typeof parsed.access_token === 'string' && parsed.access_token.trim()) {
+                    fields.token = parsed.access_token.trim();
+                }
+                // credentials.json can also carry api_base_url (from login)
+                if (!fields.api_url &&
+                    typeof parsed.api_base_url === 'string' &&
+                    parsed.api_base_url.trim()) {
+                    fields.api_url = parsed.api_base_url.trim();
+                }
+            }
+            resolvedFiles.push(credentialsPath);
+        }
+        catch {
+            // File exists but can't be read/parsed — treat as missing
+            missingFiles.push(credentialsPath);
+        }
+    }
+    else {
+        missingFiles.push(credentialsPath);
+    }
+    return { fields, resolvedFiles, missingFiles };
+}
+/**
+ * Env var names that take precedence over everything.
+ */
+const ENV_API_URL = 'LOXTEP_API_URL';
+const ENV_PROJECT_ID = 'LOXTEP_PROJECT_ID';
+const ENV_INSTANCE_ID = 'LOXTEP_INSTANCE_ID';
+const ENV_TOKEN = 'LOXTEP_TOKEN';
+/**
+ * Resolve configuration with full precedence: env > explicit > workspace files.
+ *
+ * @param explicit - Explicitly passed config (overrides workspace but not env).
+ * @param cwd - Working directory to search for `.loxtep/project.json`.
+ * @returns The merged config with metadata about resolution sources.
+ */
+export function resolveAutoConfig(explicit, cwd) {
+    // Layer 1: workspace files (lowest precedence)
+    const workspace = loadWorkspaceConfig(cwd);
+    // Layer 2: explicit config (overrides workspace)
+    const afterExplicit = {
+        api_url: explicit?.api_url || workspace.fields.api_url,
+        project_id: explicit?.project_id || workspace.fields.project_id,
+        instance_id: explicit?.instance_id || workspace.fields.instance_id,
+        token: explicit?.token || workspace.fields.token,
+    };
+    // Layer 3: env vars (highest precedence)
+    const envApiUrl = process.env[ENV_API_URL]?.trim() || undefined;
+    const envProjectId = process.env[ENV_PROJECT_ID]?.trim() || undefined;
+    const envInstanceId = process.env[ENV_INSTANCE_ID]?.trim() || undefined;
+    const envToken = process.env[ENV_TOKEN]?.trim() || undefined;
+    return {
+        api_url: envApiUrl || afterExplicit.api_url,
+        project_id: envProjectId || afterExplicit.project_id,
+        instance_id: envInstanceId || afterExplicit.instance_id,
+        token: envToken || afterExplicit.token,
+        resolvedFiles: workspace.resolvedFiles,
+        missingFiles: workspace.missingFiles,
+    };
+}
+//# sourceMappingURL=workspace-config.js.map

package/dist/config/workspace-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-config.js","sourceRoot":"","sources":["../../src/config/workspace-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAwBpH,iDAAiD;AACjD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,2DAA2D;IAC3D,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3E,IAAI,eAAe,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACzC,CAAC;gBACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;oBACtE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC/C,CAAC;gBACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;oBACxE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;QACxE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAED,iEAAiE;IACjE,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAEpE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC1E,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;gBAC5C,CAAC;gBACD,4DAA4D;gBAC5D,IACE,CAAC,MAAM,CAAC,OAAO;oBACf,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;oBACvC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAC1B,CAAC;oBACD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC;AAYD;;GAEG;AACH,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,SAAS,GAAG,cAAc,CAAC;AAoBjC;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA+B,EAC/B,GAAY;IAEZ,+CAA+C;IAC/C,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAE3C,iDAAiD;IACjD,MAAM,aAAa,GAA4B;QAC7C,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;QACtD,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU;QAC/D,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,WAAW;QAClE,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK;KACjD,CAAC;IAEF,yCAAyC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACtE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE7D,OAAO;QACL,OAAO,EAAE,SAAS,IAAI,aAAa,CAAC,OAAO;QAC3C,UAAU,EAAE,YAAY,IAAI,aAAa,CAAC,UAAU;QACpD,WAAW,EAAE,aAAa,IAAI,aAAa,CAAC,WAAW;QACvD,KAAK,EAAE,QAAQ,IAAI,aAAa,CAAC,KAAK;QACtC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,YAAY,EAAE,SAAS,CAAC,YAAY;KACrC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -10,4 +10,7 @@ export * from './http/index.js';
 export * from './checkpoint/index.js';
 export * from './streaming/index.js';
 export * from './types/index.js';
+export * from './codegen/index.js';
+export * from './skills/index.js';
+export * from './authoring/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -10,4 +10,7 @@ export * from './http/index.js';
 export * from './checkpoint/index.js';
 export * from './streaming/index.js';
 export * from './types/index.js';
+export * from './codegen/index.js';
+export * from './skills/index.js';
+export * from './authoring/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/rstreams/event-bridge.d.ts

@@ -2,8 +2,22 @@
  * Map stream read wrappers to the SDK queue event shape; write payloads via putEvent / putEvents.
  */
 import type { RStreamsSdk } from 'leo-sdk';
-import type { QueueEvent } from '../client/queue-types.js';
-export declare function putPayloadsToQueue(rsdk: RStreamsSdk, botId: string, queueName: string, payloads: unknown[]): Promise<void>;
+import type { QueueEvent, WriteOptions } from '../client/queue-types.js';
+import type { FlowWriter } from '../client/flow-types.js';
+/**
+ * Build the rstreams envelope for a business object. The source bot is set by the writer
+ * (`rsdk.load(botId, …)`), so we deliberately emit NO top-level `id` — in rstreams that is the
+ * SOURCE-BOT identity, and letting a caller's record id land there registers a bogus bot per record
+ * in LeoCron. The business object is always the `payload`.
+ */
+export declare function toLeoEnvelope(businessObject: unknown, options?: WriteOptions): Record<string, unknown>;
+/**
+ * Thin queue writer over the rstreams `load` stream. The rstreams SDK owns buffering, batching,
+ * backoff, and checkpointing — this wrapper does NOT buffer or retry; it only wraps each business
+ * object into a leo envelope (source = `botId`) and forwards it to `rsdk.load(botId, queueName)`,
+ * then flushes on `close()`. Callers pass the business object to `write()`.
+ */
+export declare function createQueueWriter(rsdk: RStreamsSdk, botId: string, queueName: string, closedError: () => Error): FlowWriter;
 /**
  * Read up to `limit` events from `inQueue` acting as bot `id`, then return (mapped events, last start for next page).
  * Uses one offloadEvents invocation per batch (stream checkpoints advance between calls).

package/dist/rstreams/event-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-bridge.d.ts","sourceRoot":"","sources":["../../src/rstreams/event-bridge.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAwB3D,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAE5F,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,IAAI,EAAE,WAAW,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAqB/B"}
+{"version":3,"file":"event-bridge.d.ts","sourceRoot":"","sources":["../../src/rstreams/event-bridge.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAwB1D;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQtG;AAQD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,KAAK,GACvB,UAAU,CAmBZ;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAE5F,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,IAAI,EAAE,WAAW,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAqB/B"}

package/dist/rstreams/event-bridge.js

@@ -15,11 +15,44 @@ function readEventToQueueEvent(wrapper) {
         correlation_id: w.correlation_id,
     };
 }
-export async function putPayloadsToQueue(rsdk, botId, queueName, payloads) {
-    if (payloads.length === 0)
-        return;
-    const events = payloads.map(p => p !== null && typeof p === 'object' && 'payload' in p ? p : p);
-    await rsdk.putEvents(events, { botId, queue: queueName });
+/**
+ * Build the rstreams envelope for a business object. The source bot is set by the writer
+ * (`rsdk.load(botId, …)`), so we deliberately emit NO top-level `id` — in rstreams that is the
+ * SOURCE-BOT identity, and letting a caller's record id land there registers a bogus bot per record
+ * in LeoCron. The business object is always the `payload`.
+ */
+export function toLeoEnvelope(businessObject, options) {
+    const env = { payload: businessObject };
+    const ts = options?.event_source_timestamp;
+    if (ts != null) {
+        const ms = typeof ts === 'number' ? ts : Date.parse(String(ts));
+        if (!Number.isNaN(ms))
+            env.event_source_timestamp = ms;
+    }
+    return env;
+}
+/**
+ * Thin queue writer over the rstreams `load` stream. The rstreams SDK owns buffering, batching,
+ * backoff, and checkpointing — this wrapper does NOT buffer or retry; it only wraps each business
+ * object into a leo envelope (source = `botId`) and forwards it to `rsdk.load(botId, queueName)`,
+ * then flushes on `close()`. Callers pass the business object to `write()`.
+ */
+export function createQueueWriter(rsdk, botId, queueName, closedError) {
+    const stream = rsdk.load(botId, queueName);
+    let closed = false;
+    return {
+        write(event, options) {
+            if (closed)
+                throw closedError();
+            stream.write(toLeoEnvelope(event, options));
+        },
+        async close() {
+            if (closed)
+                return;
+            closed = true;
+            await new Promise((resolve, reject) => stream.end(err => (err ? reject(err) : resolve())));
+        },
+    };
 }
 export async function readQueueBatch(rsdk, id, inQueue, limit, start) {
     const collected = [];

package/dist/rstreams/event-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-bridge.js","sourceRoot":"","sources":["../../src/rstreams/event-bridge.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,SAAS,qBAAqB,CAAI,OAAqB;IACrD,MAAM,CAAC,GAAG,OAMT,CAAC;IACF,MAAM,QAAQ,GACZ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;QAClC,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;QACpC,CAAC,OAAQ,CAA2B,CAAC,QAAQ,KAAK,QAAQ;YACvD,CAAqC,CAAC,QAAQ,CAAC;QAClD,EAAE,CAAC;IACL,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC7D,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAA4B;QACpD,cAAc,EAAE,CAAC,CAAC,cAA8C;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAiB,EACjB,KAAa,EACb,SAAiB,EACjB,QAAmB;IAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC9B,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1E,CAAC;IACF,MAAM,IAAI,CAAC,SAAS,CAAC,MAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACvE,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAiB,EACjB,EAAU,EACV,OAAe,EACf,KAAa,EACb,KAAqB;IAErB,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,yFAAyF;IACzF,MACE,IACD,CAAC,aAAa,CAAC;QACd,EAAE;QACF,OAAO;QACP,KAAK;QACL,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,KAAK,IAAI,SAAS;QACzB,SAAS,CAAC,QAAW,EAAE,OAAqB,EAAE,QAAkC;YAC9E,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,IAAI,OAAO,QAAQ,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS;KACxC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"event-bridge.js","sourceRoot":"","sources":["../../src/rstreams/event-bridge.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,SAAS,qBAAqB,CAAI,OAAqB;IACrD,MAAM,CAAC,GAAG,OAMT,CAAC;IACF,MAAM,QAAQ,GACZ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;QAClC,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;QACpC,CAAC,OAAQ,CAA2B,CAAC,QAAQ,KAAK,QAAQ;YACvD,CAAqC,CAAC,QAAQ,CAAC;QAClD,EAAE,CAAC;IACL,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC7D,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAA4B;QACpD,cAAc,EAAE,CAAC,CAAC,cAA8C;KACjE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,cAAuB,EAAE,OAAsB;IAC3E,MAAM,GAAG,GAA4B,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACjE,MAAM,EAAE,GAAG,OAAO,EAAE,sBAAsB,CAAC;IAC3C,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,sBAAsB,GAAG,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAiB,EACjB,KAAa,EACb,SAAiB,EACjB,WAAwB;IAExB,MAAM,MAAM,GACV,IACD,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACzB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,OAAO;QACL,KAAK,CAAC,KAAc,EAAE,OAAsB;YAC1C,IAAI,MAAM;gBAAE,MAAM,WAAW,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACnD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAiB,EACjB,EAAU,EACV,OAAe,EACf,KAAa,EACb,KAAqB;IAErB,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,yFAAyF;IACzF,MACE,IACD,CAAC,aAAa,CAAC;QACd,EAAE;QACF,OAAO;QACP,KAAK;QACL,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,KAAK,IAAI,SAAS;QACzB,SAAS,CAAC,QAAW,EAAE,OAAqB,EAAE,QAAkC;YAC9E,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,IAAI,OAAO,QAAQ,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS;KACxC,CAAC;AACJ,CAAC"}

package/dist/skills/check-scope.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Pure fail-closed scope decision function.
+ *
+ * `checkScope` determines whether a given operation on a resource is permitted
+ * by a skill definition. The function is deny-by-default: if any check fails
+ * or cannot complete, the operation is blocked.
+ *
+ * Decision logic (in order):
+ * 1. If the skill definition is undefined → UNKNOWN_SKILL
+ * 2. If the resource type has no scope entries, or the resource id is not
+ *    in the scope list → SCOPE_VIOLATION
+ * 3. If the resource type has no permissions, or the operation is not in
+ *    the permissions list → OPERATION_DENIED
+ * 4. Otherwise → allowed
+ *
+ * Any unexpected error during validation → SCOPE_VALIDATION_FAILED (fail-closed)
+ */
+import type { SkillDefinition, SkillScope, Operation, ScopeDecision } from './types.js';
+/**
+ * Check whether a specific operation on a resource is permitted by a skill.
+ *
+ * @param skill - The skill definition to check against, or undefined if not found
+ * @param resourceType - The type of resource being accessed (e.g. 'data_products')
+ * @param resourceId - The specific resource identifier being accessed
+ * @param operation - The operation being attempted (read, write, create, delete)
+ * @returns A ScopeDecision indicating whether the operation is allowed or denied
+ */
+export declare function checkScope(skill: SkillDefinition | undefined, resourceType: keyof SkillScope, resourceId: string, operation: Operation): ScopeDecision;
+/**
+ * Resolve a skill by name from a map and check scope in one step.
+ * Convenience wrapper used by both the SDK client-side enforcement and
+ * the MCP server-side checker.
+ *
+ * @param skills - Map of skill name → SkillDefinition
+ * @param skillName - The name of the skill to look up
+ * @param resourceType - The type of resource being accessed
+ * @param resourceId - The specific resource identifier
+ * @param operation - The operation being attempted
+ * @returns A ScopeDecision
+ */
+export declare function checkScopeByName(skills: Map<string, SkillDefinition>, skillName: string, resourceType: keyof SkillScope, resourceId: string, operation: Operation): ScopeDecision;
+//# sourceMappingURL=check-scope.d.ts.map

package/dist/skills/check-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-scope.d.ts","sourceRoot":"","sources":["../../src/skills/check-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAExF;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,eAAe,GAAG,SAAS,EAClC,YAAY,EAAE,MAAM,UAAU,EAC9B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,SAAS,GACnB,aAAa,CAkCf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,UAAU,EAC9B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,SAAS,GACnB,aAAa,CAUf"}

package/dist/skills/check-scope.js

@@ -0,0 +1,84 @@
+/**
+ * Pure fail-closed scope decision function.
+ *
+ * `checkScope` determines whether a given operation on a resource is permitted
+ * by a skill definition. The function is deny-by-default: if any check fails
+ * or cannot complete, the operation is blocked.
+ *
+ * Decision logic (in order):
+ * 1. If the skill definition is undefined → UNKNOWN_SKILL
+ * 2. If the resource type has no scope entries, or the resource id is not
+ *    in the scope list → SCOPE_VIOLATION
+ * 3. If the resource type has no permissions, or the operation is not in
+ *    the permissions list → OPERATION_DENIED
+ * 4. Otherwise → allowed
+ *
+ * Any unexpected error during validation → SCOPE_VALIDATION_FAILED (fail-closed)
+ */
+/**
+ * Check whether a specific operation on a resource is permitted by a skill.
+ *
+ * @param skill - The skill definition to check against, or undefined if not found
+ * @param resourceType - The type of resource being accessed (e.g. 'data_products')
+ * @param resourceId - The specific resource identifier being accessed
+ * @param operation - The operation being attempted (read, write, create, delete)
+ * @returns A ScopeDecision indicating whether the operation is allowed or denied
+ */
+export function checkScope(skill, resourceType, resourceId, operation) {
+    try {
+        // 1. Unknown skill — no definition provided
+        if (skill === undefined) {
+            return { allowed: false, code: 'UNKNOWN_SKILL', skillName: '' };
+        }
+        // 2. Scope check — is the resource within the skill's declared scope?
+        const scopeList = skill.scope[resourceType];
+        if (!scopeList || !scopeList.includes(resourceId)) {
+            return {
+                allowed: false,
+                code: 'SCOPE_VIOLATION',
+                deniedResource: `${resourceType}/${resourceId}`,
+            };
+        }
+        // 3. Permission check — is the operation allowed for this resource type?
+        const permittedOps = skill.permissions[resourceType];
+        if (!permittedOps || !permittedOps.includes(operation)) {
+            return {
+                allowed: false,
+                code: 'OPERATION_DENIED',
+                deniedOperation: operation,
+                resource: `${resourceType}/${resourceId}`,
+            };
+        }
+        // 4. All checks pass
+        return { allowed: true };
+    }
+    catch {
+        // Fail-closed: any unexpected error blocks the operation
+        return { allowed: false, code: 'SCOPE_VALIDATION_FAILED' };
+    }
+}
+/**
+ * Resolve a skill by name from a map and check scope in one step.
+ * Convenience wrapper used by both the SDK client-side enforcement and
+ * the MCP server-side checker.
+ *
+ * @param skills - Map of skill name → SkillDefinition
+ * @param skillName - The name of the skill to look up
+ * @param resourceType - The type of resource being accessed
+ * @param resourceId - The specific resource identifier
+ * @param operation - The operation being attempted
+ * @returns A ScopeDecision
+ */
+export function checkScopeByName(skills, skillName, resourceType, resourceId, operation) {
+    try {
+        const skill = skills.get(skillName);
+        if (!skill) {
+            return { allowed: false, code: 'UNKNOWN_SKILL', skillName };
+        }
+        return checkScope(skill, resourceType, resourceId, operation);
+    }
+    catch {
+        return { allowed: false, code: 'SCOPE_VALIDATION_FAILED' };
+    }
+}
+//# sourceMappingURL=check-scope.js.map

package/dist/skills/check-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-scope.js","sourceRoot":"","sources":["../../src/skills/check-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,KAAkC,EAClC,YAA8B,EAC9B,UAAkB,EAClB,SAAoB;IAEpB,IAAI,CAAC;QACH,4CAA4C;QAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAClE,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,iBAAiB;gBACvB,cAAc,EAAE,GAAG,YAAY,IAAI,UAAU,EAAE;aAChD,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,kBAAkB;gBACxB,eAAe,EAAE,SAAS;gBAC1B,QAAQ,EAAE,GAAG,YAAY,IAAI,UAAU,EAAE;aAC1C,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAoC,EACpC,SAAiB,EACjB,YAA8B,EAC9B,UAAkB,EAClB,SAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;QAC9D,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/skills/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Skill scoping model — YAML loader and fail-closed scope decision.
+ *
+ * A skill is a scoped integration bundle declaring which platform resources
+ * and operations an AI agent may reach. The platform enforces scope fail-closed:
+ * out-of-scope → SCOPE_VIOLATION, disallowed op → OPERATION_DENIED, unknown
+ * skill → rejected, check failure → blocks the operation.
+ */
+export type { SkillScope, Operation, SkillDefinition, ScopeDecision, } from './types.js';
+export { checkScope, checkScopeByName } from './check-scope.js';
+export { parseSkillYaml, loadSkillFromFile, loadSkillsFromDirectory, SkillDefinitionSchema, } from './loader.js';
+export type { SkillReferenceError, SkillValidationResult } from './validate-references.js';
+export { validateSkillReferences, formatSkillValidationErrors, } from './validate-references.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EACV,UAAU,EACV,SAAS,EACT,eAAe,EACf,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC"}

package/dist/skills/index.js

@@ -0,0 +1,12 @@
+/**
+ * Skill scoping model — YAML loader and fail-closed scope decision.
+ *
+ * A skill is a scoped integration bundle declaring which platform resources
+ * and operations an AI agent may reach. The platform enforces scope fail-closed:
+ * out-of-scope → SCOPE_VIOLATION, disallowed op → OPERATION_DENIED, unknown
+ * skill → rejected, check failure → blocks the operation.
+ */
+export { checkScope, checkScopeByName } from './check-scope.js';
+export { parseSkillYaml, loadSkillFromFile, loadSkillsFromDirectory, SkillDefinitionSchema, } from './loader.js';
+export { validateSkillReferences, formatSkillValidationErrors, } from './validate-references.js';
+//# sourceMappingURL=index.js.map

package/dist/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC"}