@lssm/lib.contracts 0.0.0-canary-20251219202229 → 0.0.0-canary-20251220002821

package/dist/integrations/secrets/manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manager.js","names":["errors: SecretProviderError[]"],"sources":["../../../src/integrations/secrets/manager.ts"],"sourcesContent":["import { SecretProviderError } from './provider';\nimport type {\n  SecretProvider,\n  SecretReference,\n  SecretRotationResult,\n  SecretValue,\n  SecretWritePayload,\n} from './provider';\n\ninterface ProviderRegistration {\n  readonly provider: SecretProvider;\n  readonly priority: number;\n  readonly order: number;\n}\n\ninterface RegisterOptions {\n  /**\n   * Larger priority values are attempted first. Defaults to 0.\n   */\n  priority?: number;\n}\n\nexport interface SecretProviderManagerOptions {\n  /**\n   * Override manager identifier. Defaults to \"secret-provider-manager\".\n   */\n  id?: string;\n  /**\n   * Providers to pre-register. They are registered in array order with\n   * descending priority (first entry wins ties).\n   */\n  providers?: { provider: SecretProvider; priority?: number }[];\n}\n\n/**\n * Composite secret provider that delegates to registered providers.\n * Providers are attempted in order of descending priority, respecting the\n * registration order for ties. This enables privileged overrides (e.g.\n * environment variables) while still supporting durable backends like GCP\n * Secret Manager.\n */\nexport class SecretProviderManager implements SecretProvider {\n  readonly id: string;\n  private readonly providers: ProviderRegistration[] = [];\n  private registrationCounter = 0;\n\n  constructor(options: SecretProviderManagerOptions = {}) {\n    this.id = options.id ?? 'secret-provider-manager';\n    const initialProviders = options.providers ?? [];\n    for (const entry of initialProviders) {\n      this.register(entry.provider, { priority: entry.priority });\n    }\n  }\n\n  register(provider: SecretProvider, options: RegisterOptions = {}): this {\n    this.providers.push({\n      provider,\n      priority: options.priority ?? 0,\n      order: this.registrationCounter++,\n    });\n    this.providers.sort((a, b) => {\n      if (a.priority !== b.priority) {\n        return b.priority - a.priority;\n      }\n      return a.order - b.order;\n    });\n    return this;\n  }\n\n  canHandle(reference: SecretReference): boolean {\n    return this.providers.some(({ provider }) =>\n      safeCanHandle(provider, reference)\n    );\n  }\n\n  async getSecret(\n    reference: SecretReference,\n    options?: SecretFetchOptions\n  ): Promise<SecretValue> {\n    const errors: SecretProviderError[] = [];\n\n    for (const { provider } of this.providers) {\n      if (!safeCanHandle(provider, reference)) {\n        continue;\n      }\n      try {\n        return await provider.getSecret(reference, options);\n      } catch (error) {\n        if (error instanceof SecretProviderError) {\n          errors.push(error);\n          if (error.code !== 'NOT_FOUND') {\n            break;\n          }\n          continue;\n        }\n        throw error;\n      }\n    }\n\n    throw this.composeError('getSecret', reference, errors, options?.version);\n  }\n\n  async setSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    return this.delegateToFirst('setSecret', reference, (provider) =>\n      provider.setSecret(reference, payload)\n    );\n  }\n\n  async rotateSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    return this.delegateToFirst('rotateSecret', reference, (provider) =>\n      provider.rotateSecret(reference, payload)\n    );\n  }\n\n  async deleteSecret(reference: SecretReference): Promise<void> {\n    await this.delegateToFirst('deleteSecret', reference, (provider) =>\n      provider.deleteSecret(reference)\n    );\n  }\n\n  private async delegateToFirst<T>(\n    operation: 'setSecret' | 'rotateSecret' | 'deleteSecret',\n    reference: SecretReference,\n    invoker: (provider: SecretProvider) => Promise<T>\n  ): Promise<T> {\n    const errors: SecretProviderError[] = [];\n\n    for (const { provider } of this.providers) {\n      if (!safeCanHandle(provider, reference)) {\n        continue;\n      }\n      try {\n        return await invoker(provider);\n      } catch (error) {\n        if (error instanceof SecretProviderError) {\n          errors.push(error);\n          continue;\n        }\n        throw error;\n      }\n    }\n\n    throw this.composeError(operation, reference, errors);\n  }\n\n  private composeError(\n    operation: string,\n    reference: SecretReference,\n    errors: SecretProviderError[],\n    version?: string\n  ): SecretProviderError {\n    if (errors.length === 1) {\n      const [singleError] = errors;\n      if (singleError) {\n        return singleError;\n      }\n    }\n\n    const messageParts = [\n      `No registered secret provider could ${operation}`,\n      `reference \"${reference}\"`,\n    ];\n    if (version) {\n      messageParts.push(`(version: ${version})`);\n    }\n    if (errors.length > 1) {\n      messageParts.push(\n        `Attempts: ${errors\n          .map((error) => `${error.provider}:${error.code}`)\n          .join(', ')}`\n      );\n    }\n\n    return new SecretProviderError({\n      message: messageParts.join(' '),\n      provider: this.id,\n      reference,\n      code: errors.length > 0 ? errors[errors.length - 1]!.code : 'UNKNOWN',\n      cause: errors,\n    });\n  }\n}\n\nfunction safeCanHandle(\n  provider: SecretProvider,\n  reference: SecretReference\n): boolean {\n  try {\n    return provider.canHandle(reference);\n  } catch {\n    return false;\n  }\n}\n\ntype SecretFetchOptions = Parameters<SecretProvider['getSecret']>[1];\n"],"mappings":";;;;;;;;;;AAyCA,IAAa,wBAAb,MAA6D;CAC3D,AAAS;CACT,AAAiB,YAAoC,EAAE;CACvD,AAAQ,sBAAsB;CAE9B,YAAY,UAAwC,EAAE,EAAE;AACtD,OAAK,KAAK,QAAQ,MAAM;EACxB,MAAM,mBAAmB,QAAQ,aAAa,EAAE;AAChD,OAAK,MAAM,SAAS,iBAClB,MAAK,SAAS,MAAM,UAAU,EAAE,UAAU,MAAM,UAAU,CAAC;;CAI/D,SAAS,UAA0B,UAA2B,EAAE,EAAQ;AACtE,OAAK,UAAU,KAAK;GAClB;GACA,UAAU,QAAQ,YAAY;GAC9B,OAAO,KAAK;GACb,CAAC;AACF,OAAK,UAAU,MAAM,GAAG,MAAM;AAC5B,OAAI,EAAE,aAAa,EAAE,SACnB,QAAO,EAAE,WAAW,EAAE;AAExB,UAAO,EAAE,QAAQ,EAAE;IACnB;AACF,SAAO;;CAGT,UAAU,WAAqC;AAC7C,SAAO,KAAK,UAAU,MAAM,EAAE,eAC5B,cAAc,UAAU,UAAU,CACnC;;CAGH,MAAM,UACJ,WACA,SACsB;EACtB,MAAMA,SAAgC,EAAE;AAExC,OAAK,MAAM,EAAE,cAAc,KAAK,WAAW;AACzC,OAAI,CAAC,cAAc,UAAU,UAAU,CACrC;AAEF,OAAI;AACF,WAAO,MAAM,SAAS,UAAU,WAAW,QAAQ;YAC5C,OAAO;AACd,QAAI,iBAAiB,qBAAqB;AACxC,YAAO,KAAK,MAAM;AAClB,SAAI,MAAM,SAAS,YACjB;AAEF;;AAEF,UAAM;;;AAIV,QAAM,KAAK,aAAa,aAAa,WAAW,QAAQ,SAAS,QAAQ;;CAG3E,MAAM,UACJ,WACA,SAC+B;AAC/B,SAAO,KAAK,gBAAgB,aAAa,YAAY,aACnD,SAAS,UAAU,WAAW,QAAQ,CACvC;;CAGH,MAAM,aACJ,WACA,SAC+B;AAC/B,SAAO,KAAK,gBAAgB,gBAAgB,YAAY,aACtD,SAAS,aAAa,WAAW,QAAQ,CAC1C;;CAGH,MAAM,aAAa,WAA2C;AAC5D,QAAM,KAAK,gBAAgB,gBAAgB,YAAY,aACrD,SAAS,aAAa,UAAU,CACjC;;CAGH,MAAc,gBACZ,WACA,WACA,SACY;EACZ,MAAMA,SAAgC,EAAE;AAExC,OAAK,MAAM,EAAE,cAAc,KAAK,WAAW;AACzC,OAAI,CAAC,cAAc,UAAU,UAAU,CACrC;AAEF,OAAI;AACF,WAAO,MAAM,QAAQ,SAAS;YACvB,OAAO;AACd,QAAI,iBAAiB,qBAAqB;AACxC,YAAO,KAAK,MAAM;AAClB;;AAEF,UAAM;;;AAIV,QAAM,KAAK,aAAa,WAAW,WAAW,OAAO;;CAGvD,AAAQ,aACN,WACA,WACA,QACA,SACqB;AACrB,MAAI,OAAO,WAAW,GAAG;GACvB,MAAM,CAAC,eAAe;AACtB,OAAI,YACF,QAAO;;EAIX,MAAM,eAAe,CACnB,uCAAuC,aACvC,cAAc,UAAU,GACzB;AACD,MAAI,QACF,cAAa,KAAK,aAAa,QAAQ,GAAG;AAE5C,MAAI,OAAO,SAAS,EAClB,cAAa,KACX,aAAa,OACV,KAAK,UAAU,GAAG,MAAM,SAAS,GAAG,MAAM,OAAO,CACjD,KAAK,KAAK,GACd;AAGH,SAAO,IAAI,oBAAoB;GAC7B,SAAS,aAAa,KAAK,IAAI;GAC/B,UAAU,KAAK;GACf;GACA,MAAM,OAAO,SAAS,IAAI,OAAO,OAAO,SAAS,GAAI,OAAO;GAC5D,OAAO;GACR,CAAC;;;AAIN,SAAS,cACP,UACA,WACS;AACT,KAAI;AACF,SAAO,SAAS,UAAU,UAAU;SAC9B;AACN,SAAO"}

package/dist/integrations/secrets/provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.d.ts","names":[],"sources":["../../../src/integrations/secrets/provider.ts"],"sourcesContent":[],"mappings":";KAEY,eAAA;AAAA,UAEK,WAAA,CAFU;EAEV,IAAA,EACT,UADoB;EACpB,OAAA,CAAA,EAAA,MAAA;EAEK,QAAA,CAAA,EAAA,MAAA,CAAA,MAAA,EAAA,MAAA,CAAA;EACE,WAAA,EAAA,IAAA;;AAGE,UAAA,kBAAA,CAAkB;EAIvB,OAAA,CAAA,EAAA,MAAA;AAEZ;AACiB,KAHL,qBAAA,GAGK,OAAA,GAAA,QAAA,GAAA,QAAA;AACJ,UAFI,kBAAA,CAEJ;EAEF,IAAA,EAAA,MAAA,GAHM,UAGN;EAAM,QAAA,CAAA,EAFJ,qBAEI;EAGA,WAAA,CAAA,EAAA,MAAA;EAKA,MAAA,CAAA,EARN,MAQM,CAAA,MAAc,EAAA,MAAA,CAAA;;AAIhB,UATE,oBAAA,CASF;EACD,SAAA,EATD,eASC;EACD,OAAA,EAAA,MAAA;;AAEE,UARE,cAAA,CAQF;EACF,SAAA,EAAA,EAAA,MAAA;EACA,SAAA,CAAA,SAAA,EARU,eAQV,CAAA,EAAA,OAAA;EAAR,SAAA,CAAA,SAAA,EANU,eAMV,EAAA,OAAA,CAAA,EALS,kBAKT,CAAA,EAJA,OAIA,CAJQ,WAIR,CAAA;EAEU,SAAA,CAAA,SAAA,EAJA,eAIA,EAAA,OAAA,EAHF,kBAGE,CAAA,EAFV,OAEU,CAFF,oBAEE,CAAA;EACF,YAAA,CAAA,SAAA,EADE,eACF,EAAA,OAAA,EAAA,kBAAA,CAAA,EACR,OADQ,CACA,oBADA,CAAA;EACA,YAAA,CAAA,SAAA,EACa,eADb,CAAA,EAC+B,OAD/B,CAAA,IAAA,CAAA;;AACa,UAGT,eAAA,CAHS;EAAkB,QAAA,EAAA,MAAA;EAAO,IAAA,EAAA,MAAA;EAGlC,MAAA,CAAA,EAGN,MAHM,CAAA,MAAe,EAAA,MAAA,CAGrB;AAGX;AAEsB,cAFT,mBAAA,SAA4B,KAAA,CAEnB;EAOP,SAAA,QAAA,EAAA,MAAA;EACJ,SAAA,SAAA,EARW,eAQX;EAV8B,SAAA,IAAA,EAAA,WAAA,GAAA,WAAA,GAAA,SAAA,GAAA,SAAA;EAAK,SAAA,KAAA,CAAA,EAAA,OAAA;EAsB9B,WAAA,CAAA,MAAc,EAAA;IAiDd,OAAA,EAAA,MAAA;;eA9DD;WACJ;;;;iBAYK,cAAA,YAA0B,kBAAkB;iBAiD5C,sBAAA,UACL,qBACR"}

package/dist/integrations/secrets/provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.js","names":[],"sources":["../../../src/integrations/secrets/provider.ts"],"sourcesContent":["import { Buffer } from 'node:buffer';\n\nexport type SecretReference = string;\n\nexport interface SecretValue {\n  data: Uint8Array;\n  version?: string;\n  metadata?: Record<string, string>;\n  retrievedAt: Date;\n}\n\nexport interface SecretFetchOptions {\n  version?: string;\n}\n\nexport type SecretPayloadEncoding = 'utf-8' | 'base64' | 'binary';\n\nexport interface SecretWritePayload {\n  data: string | Uint8Array;\n  encoding?: SecretPayloadEncoding;\n  contentType?: string;\n  labels?: Record<string, string>;\n}\n\nexport interface SecretRotationResult {\n  reference: SecretReference;\n  version: string;\n}\n\nexport interface SecretProvider {\n  readonly id: string;\n  canHandle(reference: SecretReference): boolean;\n  getSecret(\n    reference: SecretReference,\n    options?: SecretFetchOptions\n  ): Promise<SecretValue>;\n  setSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult>;\n  rotateSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult>;\n  deleteSecret(reference: SecretReference): Promise<void>;\n}\n\nexport interface ParsedSecretUri {\n  provider: string;\n  path: string;\n  extras?: Record<string, string>;\n}\n\nexport class SecretProviderError extends Error {\n  readonly provider: string;\n  readonly reference: SecretReference;\n  readonly code: 'NOT_FOUND' | 'FORBIDDEN' | 'INVALID' | 'UNKNOWN';\n  readonly cause?: unknown;\n\n  constructor(params: {\n    message: string;\n    provider: string;\n    reference: SecretReference;\n    code?: SecretProviderError['code'];\n    cause?: unknown;\n  }) {\n    super(params.message);\n    this.name = 'SecretProviderError';\n    this.provider = params.provider;\n    this.reference = params.reference;\n    this.code = params.code ?? 'UNKNOWN';\n    this.cause = params.cause;\n  }\n}\n\nexport function parseSecretUri(reference: SecretReference): ParsedSecretUri {\n  if (!reference) {\n    throw new SecretProviderError({\n      message: 'Secret reference cannot be empty',\n      provider: 'unknown',\n      reference,\n      code: 'INVALID',\n    });\n  }\n\n  const [scheme, rest] = reference.split('://');\n  if (!scheme || !rest) {\n    throw new SecretProviderError({\n      message: `Invalid secret reference: ${reference}`,\n      provider: 'unknown',\n      reference,\n      code: 'INVALID',\n    });\n  }\n\n  const queryIndex = rest.indexOf('?');\n  if (queryIndex === -1) {\n    return {\n      provider: scheme,\n      path: rest,\n    };\n  }\n\n  const path = rest.slice(0, queryIndex);\n  const query = rest.slice(queryIndex + 1);\n  const extras = Object.fromEntries(\n    query\n      .split('&')\n      .filter(Boolean)\n      .map((pair) => {\n        const [keyRaw, valueRaw] = pair.split('=');\n        const key = keyRaw ?? '';\n        const value = valueRaw ?? '';\n        return [decodeURIComponent(key), decodeURIComponent(value)];\n      })\n  );\n\n  return {\n    provider: scheme,\n    path,\n    extras,\n  };\n}\n\nexport function normalizeSecretPayload(\n  payload: SecretWritePayload\n): Uint8Array {\n  if (payload.data instanceof Uint8Array) {\n    return payload.data;\n  }\n\n  if (payload.encoding === 'base64') {\n    return Buffer.from(payload.data, 'base64');\n  }\n\n  if (payload.encoding === 'binary') {\n    return Buffer.from(payload.data, 'binary');\n  }\n\n  return Buffer.from(payload.data, 'utf-8');\n}\n"],"mappings":";;;AAqDA,IAAa,sBAAb,cAAyC,MAAM;CAC7C,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,QAMT;AACD,QAAM,OAAO,QAAQ;AACrB,OAAK,OAAO;AACZ,OAAK,WAAW,OAAO;AACvB,OAAK,YAAY,OAAO;AACxB,OAAK,OAAO,OAAO,QAAQ;AAC3B,OAAK,QAAQ,OAAO;;;AAIxB,SAAgB,eAAe,WAA6C;AAC1E,KAAI,CAAC,UACH,OAAM,IAAI,oBAAoB;EAC5B,SAAS;EACT,UAAU;EACV;EACA,MAAM;EACP,CAAC;CAGJ,MAAM,CAAC,QAAQ,QAAQ,UAAU,MAAM,MAAM;AAC7C,KAAI,CAAC,UAAU,CAAC,KACd,OAAM,IAAI,oBAAoB;EAC5B,SAAS,6BAA6B;EACtC,UAAU;EACV;EACA,MAAM;EACP,CAAC;CAGJ,MAAM,aAAa,KAAK,QAAQ,IAAI;AACpC,KAAI,eAAe,GACjB,QAAO;EACL,UAAU;EACV,MAAM;EACP;CAGH,MAAM,OAAO,KAAK,MAAM,GAAG,WAAW;CACtC,MAAM,QAAQ,KAAK,MAAM,aAAa,EAAE;AAaxC,QAAO;EACL,UAAU;EACV;EACA,QAfa,OAAO,YACpB,MACG,MAAM,IAAI,CACV,OAAO,QAAQ,CACf,KAAK,SAAS;GACb,MAAM,CAAC,QAAQ,YAAY,KAAK,MAAM,IAAI;GAC1C,MAAM,MAAM,UAAU;GACtB,MAAM,QAAQ,YAAY;AAC1B,UAAO,CAAC,mBAAmB,IAAI,EAAE,mBAAmB,MAAM,CAAC;IAC3D,CACL;EAMA;;AAGH,SAAgB,uBACd,SACY;AACZ,KAAI,QAAQ,gBAAgB,WAC1B,QAAO,QAAQ;AAGjB,KAAI,QAAQ,aAAa,SACvB,QAAO,OAAO,KAAK,QAAQ,MAAM,SAAS;AAG5C,KAAI,QAAQ,aAAa,SACvB,QAAO,OAAO,KAAK,QAAQ,MAAM,SAAS;AAG5C,QAAO,OAAO,KAAK,QAAQ,MAAM,QAAQ"}

package/dist/integrations/secrets/scaleway-secret-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaleway-secret-manager.d.ts","names":[],"sources":["../../../src/integrations/secrets/scaleway-secret-manager.ts"],"sourcesContent":[],"mappings":";;;UAgBU,oCAAA;;AAFU;AA2BpB;;EA2BuB,KAAA,CAAA,EAAA,MAAA;EAcR;EACD,aAAA,CAAA,EAAA,MAAA;EACD;EAAR,gBAAA,CAAA,EAAA,MAAA;EA0DU;EACF,OAAA,CAAA,EAAA,MAAA;EACA;EAAR,KAAA,CAAA,EAAA,OAnHY,KAmHZ;;AAyCQ,cAhJA,6BAAA,YAAyC,cAgJzC,CAAA;EACA,SAAA,EAAA,GAAA,yBAAA;EAAR,iBAAA,KAAA;EAI2B,iBAAA,aAAA;EAAkB,iBAAA,gBAAA;EArJI,iBAAA,OAAA;EAAc,iBAAA,OAAA;wBAS7C;uBAkBA;uBAcR,2BACD,qBACT,QAAQ;uBA0DE,0BACF,qBACR,QAAQ;0BAwCE,0BACF,qBACR,QAAQ;0BAImB,kBAAkB"}

package/dist/integrations/secrets/scaleway-secret-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaleway-secret-manager.js","names":["code: SecretProviderError['code']"],"sources":["../../../src/integrations/secrets/scaleway-secret-manager.ts"],"sourcesContent":["import { Buffer } from 'node:buffer';\n\nimport {\n  normalizeSecretPayload,\n  parseSecretUri,\n  SecretProviderError,\n} from './provider';\nimport type {\n  SecretFetchOptions,\n  SecretProvider,\n  SecretReference,\n  SecretRotationResult,\n  SecretValue,\n  SecretWritePayload,\n} from './provider';\n\ninterface ScalewaySecretManagerProviderOptions {\n  /**\n   * Scaleway API token (SCW secret key). If omitted, uses env vars.\n   * Header: X-Auth-Token\n   */\n  token?: string;\n  /** Default region when not present in reference (e.g. fr-par). */\n  defaultRegion?: string;\n  /** Default project id used when creating secrets by name. */\n  defaultProjectId?: string;\n  /** Override API base url (defaults to https://api.scaleway.com). */\n  baseUrl?: string;\n  /** Inject fetch for tests. */\n  fetch?: typeof fetch;\n}\n\ninterface ScalewaySecretLocation {\n  region: string;\n  secretIdOrName: string;\n  revision?: string;\n}\n\nconst UUID_V4_LIKE =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport class ScalewaySecretManagerProvider implements SecretProvider {\n  readonly id = 'scaleway-secret-manager';\n\n  private readonly token: string;\n  private readonly defaultRegion?: string;\n  private readonly defaultProjectId?: string;\n  private readonly baseUrl: string;\n  private readonly fetchFn: typeof fetch;\n\n  constructor(options: ScalewaySecretManagerProviderOptions = {}) {\n    this.token =\n      options.token ??\n      process.env.SCW_SECRET_KEY ??\n      process.env.SCALEWAY_SECRET_KEY ??\n      '';\n    this.defaultRegion =\n      options.defaultRegion ??\n      process.env.SCW_DEFAULT_REGION ??\n      process.env.SCW_REGION;\n    this.defaultProjectId =\n      options.defaultProjectId ??\n      process.env.SCW_DEFAULT_PROJECT_ID ??\n      process.env.SCW_PROJECT_ID;\n    this.baseUrl = options.baseUrl ?? 'https://api.scaleway.com';\n    this.fetchFn = options.fetch ?? fetch;\n  }\n\n  canHandle(reference: SecretReference): boolean {\n    try {\n      const parsed = parseSecretUri(reference);\n      return (\n        parsed.provider === 'scw' &&\n        (parsed.path === 'secret-manager' ||\n          parsed.path.startsWith('secret-manager/'))\n      );\n    } catch {\n      return false;\n    }\n  }\n\n  async getSecret(\n    reference: SecretReference,\n    options?: SecretFetchOptions\n  ): Promise<SecretValue> {\n    const location = this.parseReference(reference);\n\n    if (!this.token) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway secret manager token is missing (set SCW_SECRET_KEY / SCALEWAY_SECRET_KEY).',\n        provider: this.id,\n        reference,\n        code: 'FORBIDDEN',\n      });\n    }\n\n    if (!UUID_V4_LIKE.test(location.secretIdOrName)) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway getSecret requires a secretId (uuid) reference, not a secret name.',\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const revision = options?.version ?? location.revision ?? 'latest';\n\n    const url = `${this.baseUrl}/secret-manager/v1beta1/regions/${encodeURIComponent(location.region)}/secrets/${encodeURIComponent(location.secretIdOrName)}/versions/${encodeURIComponent(revision)}/access`;\n\n    const response = await this.fetchFn(url, {\n      method: 'GET',\n      headers: {\n        'X-Auth-Token': this.token,\n      },\n    });\n\n    if (!response.ok) {\n      throw await toScalewayError({\n        response,\n        provider: this.id,\n        reference,\n        operation: 'getSecret',\n      });\n    }\n\n    const payload = (await response.json()) as unknown;\n    const dataB64 = extractScalewayData(payload);\n\n    return {\n      data: Buffer.from(dataB64, 'base64'),\n      version: revision,\n      metadata: {\n        region: location.region,\n        secretId: location.secretIdOrName,\n      },\n      retrievedAt: new Date(),\n    };\n  }\n\n  async setSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    const location = this.parseReference(reference);\n\n    if (!this.token) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway secret manager token is missing (set SCW_SECRET_KEY / SCALEWAY_SECRET_KEY).',\n        provider: this.id,\n        reference,\n        code: 'FORBIDDEN',\n      });\n    }\n\n    const bytes = normalizeSecretPayload(payload);\n    const encoded = Buffer.from(bytes).toString('base64');\n\n    const secretId = UUID_V4_LIKE.test(location.secretIdOrName)\n      ? location.secretIdOrName\n      : await this.createSecret({\n          region: location.region,\n          name: location.secretIdOrName,\n          reference,\n        });\n\n    const version = await this.createSecretVersion({\n      region: location.region,\n      secretId,\n      dataB64: encoded,\n      reference,\n    });\n\n    return {\n      reference: this.buildReference(location.region, secretId, {\n        version,\n      }),\n      version,\n    };\n  }\n\n  async rotateSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    return this.setSecret(reference, payload);\n  }\n\n  async deleteSecret(reference: SecretReference): Promise<void> {\n    const location = this.parseReference(reference);\n\n    if (!this.token) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway secret manager token is missing (set SCW_SECRET_KEY / SCALEWAY_SECRET_KEY).',\n        provider: this.id,\n        reference,\n        code: 'FORBIDDEN',\n      });\n    }\n\n    if (!UUID_V4_LIKE.test(location.secretIdOrName)) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway deleteSecret requires a secretId (uuid) reference, not a secret name.',\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const url = `${this.baseUrl}/secret-manager/v1beta1/regions/${encodeURIComponent(location.region)}/secrets/${encodeURIComponent(location.secretIdOrName)}`;\n\n    const response = await this.fetchFn(url, {\n      method: 'DELETE',\n      headers: {\n        'X-Auth-Token': this.token,\n      },\n    });\n\n    if (!response.ok) {\n      throw await toScalewayError({\n        response,\n        provider: this.id,\n        reference,\n        operation: 'deleteSecret',\n      });\n    }\n  }\n\n  private parseReference(reference: SecretReference): ScalewaySecretLocation {\n    const parsed = parseSecretUri(reference);\n    if (parsed.provider !== 'scw') {\n      throw new SecretProviderError({\n        message: `Unsupported secret provider: ${parsed.provider}`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const segments = parsed.path.split('/').filter(Boolean);\n    if (segments.length < 2 || segments[0] !== 'secret-manager') {\n      throw new SecretProviderError({\n        message:\n          'Expected secret reference format scw://secret-manager/{region}/{secretIdOrName}[?version=...]',\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const region = segments[1] ?? this.defaultRegion;\n    if (!region) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway region must be provided either in reference (scw://secret-manager/{region}/...) or via SCW_DEFAULT_REGION/SCW_REGION.',\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const secretIdOrName = segments.slice(2).join('/');\n    if (!secretIdOrName) {\n      throw new SecretProviderError({\n        message: `Unable to resolve secret id/name from reference \"${parsed.path}\"`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    return {\n      region,\n      secretIdOrName,\n      revision: parsed.extras?.version,\n    };\n  }\n\n  private async createSecret(params: {\n    region: string;\n    name: string;\n    reference: SecretReference;\n  }): Promise<string> {\n    const projectId = this.defaultProjectId;\n    if (!projectId) {\n      throw new SecretProviderError({\n        message:\n          'Scaleway project id is required to create secrets by name (set SCW_DEFAULT_PROJECT_ID/SCW_PROJECT_ID).',\n        provider: this.id,\n        reference: params.reference,\n        code: 'INVALID',\n      });\n    }\n\n    const url = `${this.baseUrl}/secret-manager/v1beta1/regions/${encodeURIComponent(params.region)}/secrets`;\n\n    const response = await this.fetchFn(url, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'X-Auth-Token': this.token,\n      },\n      body: JSON.stringify({\n        name: params.name,\n        project_id: projectId,\n      }),\n    });\n\n    if (!response.ok) {\n      throw await toScalewayError({\n        response,\n        provider: this.id,\n        reference: params.reference,\n        operation: 'createSecret',\n      });\n    }\n\n    const payload = (await response.json()) as unknown;\n    const secretId = extractScalewaySecretId(payload);\n    return secretId;\n  }\n\n  private async createSecretVersion(params: {\n    region: string;\n    secretId: string;\n    dataB64: string;\n    reference: SecretReference;\n  }): Promise<string> {\n    const url = `${this.baseUrl}/secret-manager/v1beta1/regions/${encodeURIComponent(params.region)}/secrets/${encodeURIComponent(params.secretId)}/versions`;\n\n    const response = await this.fetchFn(url, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'X-Auth-Token': this.token,\n      },\n      body: JSON.stringify({\n        data: params.dataB64,\n      }),\n    });\n\n    if (!response.ok) {\n      throw await toScalewayError({\n        response,\n        provider: this.id,\n        reference: params.reference,\n        operation: 'createSecretVersion',\n      });\n    }\n\n    const payload = (await response.json()) as unknown;\n    return extractScalewayRevision(payload) ?? 'latest';\n  }\n\n  private buildReference(\n    region: string,\n    secretId: string,\n    extras?: Record<string, string>\n  ): string {\n    const base = `scw://secret-manager/${region}/${secretId}`;\n    const query = extras\n      ? Object.entries(extras)\n          .filter(([, value]) => Boolean(value))\n          .map(\n            ([key, value]) =>\n              `${encodeURIComponent(key)}=${encodeURIComponent(value)}`\n          )\n          .join('&')\n      : '';\n\n    return query ? `${base}?${query}` : base;\n  }\n}\n\nfunction extractScalewayData(payload: unknown): string {\n  if (!payload || typeof payload !== 'object') {\n    throw new Error('Invalid scaleway secret payload');\n  }\n\n  const record = payload as { data?: unknown };\n  if (typeof record.data === 'string' && record.data) {\n    return record.data;\n  }\n\n  throw new Error('Scaleway secret payload is missing data');\n}\n\nfunction extractScalewaySecretId(payload: unknown): string {\n  if (!payload || typeof payload !== 'object') {\n    throw new Error('Invalid scaleway createSecret payload');\n  }\n\n  const record = payload as { id?: unknown };\n  if (typeof record.id === 'string' && record.id) {\n    return record.id;\n  }\n\n  throw new Error('Scaleway createSecret response is missing id');\n}\n\nfunction extractScalewayRevision(payload: unknown): string | undefined {\n  if (!payload || typeof payload !== 'object') {\n    return undefined;\n  }\n\n  const record = payload as { revision?: unknown; id?: unknown };\n  if (typeof record.revision === 'number') {\n    return String(record.revision);\n  }\n  if (typeof record.revision === 'string' && record.revision) {\n    return record.revision;\n  }\n  if (typeof record.id === 'string' && record.id) {\n    // Some API shapes may return \"id\" for the version.\n    return record.id;\n  }\n\n  return undefined;\n}\n\nasync function toScalewayError(params: {\n  response: Response;\n  provider: string;\n  reference: SecretReference;\n  operation: string;\n}): Promise<SecretProviderError> {\n  const { response, provider, reference, operation } = params;\n\n  const code: SecretProviderError['code'] =\n    response.status === 404\n      ? 'NOT_FOUND'\n      : response.status === 401 || response.status === 403\n        ? 'FORBIDDEN'\n        : response.status >= 400 && response.status < 500\n          ? 'INVALID'\n          : 'UNKNOWN';\n\n  const bodyText = await safeReadBody(response);\n  const message = bodyText\n    ? `Scaleway Secret Manager ${operation} failed (${response.status}): ${bodyText}`\n    : `Scaleway Secret Manager ${operation} failed (${response.status})`;\n\n  return new SecretProviderError({\n    message,\n    provider,\n    reference,\n    code,\n  });\n}\n\nasync function safeReadBody(response: Response): Promise<string | undefined> {\n  try {\n    const text = await response.text();\n    const trimmed = text.trim();\n    return trimmed.length ? trimmed : undefined;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;AAsCA,MAAM,eACJ;AAEF,IAAa,gCAAb,MAAqE;CACnE,AAAS,KAAK;CAEd,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAAgD,EAAE,EAAE;AAC9D,OAAK,QACH,QAAQ,SACR,QAAQ,IAAI,kBACZ,QAAQ,IAAI,uBACZ;AACF,OAAK,gBACH,QAAQ,iBACR,QAAQ,IAAI,sBACZ,QAAQ,IAAI;AACd,OAAK,mBACH,QAAQ,oBACR,QAAQ,IAAI,0BACZ,QAAQ,IAAI;AACd,OAAK,UAAU,QAAQ,WAAW;AAClC,OAAK,UAAU,QAAQ,SAAS;;CAGlC,UAAU,WAAqC;AAC7C,MAAI;GACF,MAAM,SAAS,eAAe,UAAU;AACxC,UACE,OAAO,aAAa,UACnB,OAAO,SAAS,oBACf,OAAO,KAAK,WAAW,kBAAkB;UAEvC;AACN,UAAO;;;CAIX,MAAM,UACJ,WACA,SACsB;EACtB,MAAM,WAAW,KAAK,eAAe,UAAU;AAE/C,MAAI,CAAC,KAAK,MACR,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;AAGJ,MAAI,CAAC,aAAa,KAAK,SAAS,eAAe,CAC7C,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;EAGJ,MAAM,WAAW,SAAS,WAAW,SAAS,YAAY;EAE1D,MAAM,MAAM,GAAG,KAAK,QAAQ,kCAAkC,mBAAmB,SAAS,OAAO,CAAC,WAAW,mBAAmB,SAAS,eAAe,CAAC,YAAY,mBAAmB,SAAS,CAAC;EAElM,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;GACvC,QAAQ;GACR,SAAS,EACP,gBAAgB,KAAK,OACtB;GACF,CAAC;AAEF,MAAI,CAAC,SAAS,GACZ,OAAM,MAAM,gBAAgB;GAC1B;GACA,UAAU,KAAK;GACf;GACA,WAAW;GACZ,CAAC;EAIJ,MAAM,UAAU,oBADC,MAAM,SAAS,MAAM,CACM;AAE5C,SAAO;GACL,MAAM,OAAO,KAAK,SAAS,SAAS;GACpC,SAAS;GACT,UAAU;IACR,QAAQ,SAAS;IACjB,UAAU,SAAS;IACpB;GACD,6BAAa,IAAI,MAAM;GACxB;;CAGH,MAAM,UACJ,WACA,SAC+B;EAC/B,MAAM,WAAW,KAAK,eAAe,UAAU;AAE/C,MAAI,CAAC,KAAK,MACR,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;EAGJ,MAAM,QAAQ,uBAAuB,QAAQ;EAC7C,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,SAAS,SAAS;EAErD,MAAM,WAAW,aAAa,KAAK,SAAS,eAAe,GACvD,SAAS,iBACT,MAAM,KAAK,aAAa;GACtB,QAAQ,SAAS;GACjB,MAAM,SAAS;GACf;GACD,CAAC;EAEN,MAAM,UAAU,MAAM,KAAK,oBAAoB;GAC7C,QAAQ,SAAS;GACjB;GACA,SAAS;GACT;GACD,CAAC;AAEF,SAAO;GACL,WAAW,KAAK,eAAe,SAAS,QAAQ,UAAU,EACxD,SACD,CAAC;GACF;GACD;;CAGH,MAAM,aACJ,WACA,SAC+B;AAC/B,SAAO,KAAK,UAAU,WAAW,QAAQ;;CAG3C,MAAM,aAAa,WAA2C;EAC5D,MAAM,WAAW,KAAK,eAAe,UAAU;AAE/C,MAAI,CAAC,KAAK,MACR,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;AAGJ,MAAI,CAAC,aAAa,KAAK,SAAS,eAAe,CAC7C,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;EAGJ,MAAM,MAAM,GAAG,KAAK,QAAQ,kCAAkC,mBAAmB,SAAS,OAAO,CAAC,WAAW,mBAAmB,SAAS,eAAe;EAExJ,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;GACvC,QAAQ;GACR,SAAS,EACP,gBAAgB,KAAK,OACtB;GACF,CAAC;AAEF,MAAI,CAAC,SAAS,GACZ,OAAM,MAAM,gBAAgB;GAC1B;GACA,UAAU,KAAK;GACf;GACA,WAAW;GACZ,CAAC;;CAIN,AAAQ,eAAe,WAAoD;EACzE,MAAM,SAAS,eAAe,UAAU;AACxC,MAAI,OAAO,aAAa,MACtB,OAAM,IAAI,oBAAoB;GAC5B,SAAS,gCAAgC,OAAO;GAChD,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;EAGJ,MAAM,WAAW,OAAO,KAAK,MAAM,IAAI,CAAC,OAAO,QAAQ;AACvD,MAAI,SAAS,SAAS,KAAK,SAAS,OAAO,iBACzC,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;EAGJ,MAAM,SAAS,SAAS,MAAM,KAAK;AACnC,MAAI,CAAC,OACH,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;EAGJ,MAAM,iBAAiB,SAAS,MAAM,EAAE,CAAC,KAAK,IAAI;AAClD,MAAI,CAAC,eACH,OAAM,IAAI,oBAAoB;GAC5B,SAAS,oDAAoD,OAAO,KAAK;GACzE,UAAU,KAAK;GACf;GACA,MAAM;GACP,CAAC;AAGJ,SAAO;GACL;GACA;GACA,UAAU,OAAO,QAAQ;GAC1B;;CAGH,MAAc,aAAa,QAIP;EAClB,MAAM,YAAY,KAAK;AACvB,MAAI,CAAC,UACH,OAAM,IAAI,oBAAoB;GAC5B,SACE;GACF,UAAU,KAAK;GACf,WAAW,OAAO;GAClB,MAAM;GACP,CAAC;EAGJ,MAAM,MAAM,GAAG,KAAK,QAAQ,kCAAkC,mBAAmB,OAAO,OAAO,CAAC;EAEhG,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;GACvC,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,gBAAgB,KAAK;IACtB;GACD,MAAM,KAAK,UAAU;IACnB,MAAM,OAAO;IACb,YAAY;IACb,CAAC;GACH,CAAC;AAEF,MAAI,CAAC,SAAS,GACZ,OAAM,MAAM,gBAAgB;GAC1B;GACA,UAAU,KAAK;GACf,WAAW,OAAO;GAClB,WAAW;GACZ,CAAC;AAKJ,SADiB,wBADA,MAAM,SAAS,MAAM,CACW;;CAInD,MAAc,oBAAoB,QAKd;EAClB,MAAM,MAAM,GAAG,KAAK,QAAQ,kCAAkC,mBAAmB,OAAO,OAAO,CAAC,WAAW,mBAAmB,OAAO,SAAS,CAAC;EAE/I,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;GACvC,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,gBAAgB,KAAK;IACtB;GACD,MAAM,KAAK,UAAU,EACnB,MAAM,OAAO,SACd,CAAC;GACH,CAAC;AAEF,MAAI,CAAC,SAAS,GACZ,OAAM,MAAM,gBAAgB;GAC1B;GACA,UAAU,KAAK;GACf,WAAW,OAAO;GAClB,WAAW;GACZ,CAAC;AAIJ,SAAO,wBADU,MAAM,SAAS,MAAM,CACC,IAAI;;CAG7C,AAAQ,eACN,QACA,UACA,QACQ;EACR,MAAM,OAAO,wBAAwB,OAAO,GAAG;EAC/C,MAAM,QAAQ,SACV,OAAO,QAAQ,OAAO,CACnB,QAAQ,GAAG,WAAW,QAAQ,MAAM,CAAC,CACrC,KACE,CAAC,KAAK,WACL,GAAG,mBAAmB,IAAI,CAAC,GAAG,mBAAmB,MAAM,GAC1D,CACA,KAAK,IAAI,GACZ;AAEJ,SAAO,QAAQ,GAAG,KAAK,GAAG,UAAU;;;AAIxC,SAAS,oBAAoB,SAA0B;AACrD,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC,OAAM,IAAI,MAAM,kCAAkC;CAGpD,MAAM,SAAS;AACf,KAAI,OAAO,OAAO,SAAS,YAAY,OAAO,KAC5C,QAAO,OAAO;AAGhB,OAAM,IAAI,MAAM,0CAA0C;;AAG5D,SAAS,wBAAwB,SAA0B;AACzD,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC,OAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,SAAS;AACf,KAAI,OAAO,OAAO,OAAO,YAAY,OAAO,GAC1C,QAAO,OAAO;AAGhB,OAAM,IAAI,MAAM,+CAA+C;;AAGjE,SAAS,wBAAwB,SAAsC;AACrE,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC;CAGF,MAAM,SAAS;AACf,KAAI,OAAO,OAAO,aAAa,SAC7B,QAAO,OAAO,OAAO,SAAS;AAEhC,KAAI,OAAO,OAAO,aAAa,YAAY,OAAO,SAChD,QAAO,OAAO;AAEhB,KAAI,OAAO,OAAO,OAAO,YAAY,OAAO,GAE1C,QAAO,OAAO;;AAMlB,eAAe,gBAAgB,QAKE;CAC/B,MAAM,EAAE,UAAU,UAAU,WAAW,cAAc;CAErD,MAAMA,OACJ,SAAS,WAAW,MAChB,cACA,SAAS,WAAW,OAAO,SAAS,WAAW,MAC7C,cACA,SAAS,UAAU,OAAO,SAAS,SAAS,MAC1C,YACA;CAEV,MAAM,WAAW,MAAM,aAAa,SAAS;AAK7C,QAAO,IAAI,oBAAoB;EAC7B,SALc,WACZ,2BAA2B,UAAU,WAAW,SAAS,OAAO,KAAK,aACrE,2BAA2B,UAAU,WAAW,SAAS,OAAO;EAIlE;EACA;EACA;EACD,CAAC;;AAGJ,eAAe,aAAa,UAAiD;AAC3E,KAAI;EAEF,MAAM,WADO,MAAM,SAAS,MAAM,EACb,MAAM;AAC3B,SAAO,QAAQ,SAAS,UAAU;SAC5B;AACN"}

package/dist/integrations/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../../src/integrations/spec.ts"],"sourcesContent":[],"mappings":";;;;KAGY,mBAAA;KAgBA,wBAAA;AAhBA,UAkBK,eAAA,SAAwB,aAlBV,CAAA;EAgBnB;EAEK,GAAA,EAAA,MAAA;EASA;EAOA,OAAA,EAAA,MAAA;EAOA,QAAA,EAlBL,mBAkB4B;EAOvB,WAAA,EAAA,MAAA;AAOjB;AAOiB,UAnCA,4BAAA,CAmCe;EACxB;EAEU,QAAA,EApCN,aAoCM,EAAA;EAEF;EAEA,QAAA,CAAA,EAtCH,qBAsCG,EAAA;;AAIA,UAvCC,uBAAA,CAuCD;EAMH;EAGC,MAAA,EAAA,OAAA;EAAoB;EAMrB,OAAA,CAAA,EAlDD,MAkDC,CAAA,MAAA,EAAA,OAAuB,CAAA;;AAY1B,UA3DO,uBAAA,CA2DP;EAI4B;EAgBZ,MAAA,EAAA,OAAA;EAAsB;EAAe,OAAA,CAAA,EA3EnD,MA2EmD,CAAA,MAAA,EAAA,MAAA,CAAA;AAK/D;UA7EiB,oBAAA;;;;;;UAOA,sBAAA;;;;;;UAOA,eAAA;QACT;;kBAEU;;gBAEF;;gBAEA;;gBAEA;;gBAEA;;;;;;;;;aAMH;;;cAGC;;cAMD,uBAAA;;iBAGI;UASP;sCAI4B;0BAgBZ,sBAAsB;;iBAKhC,sBAAA,OAA6B"}

package/dist/integrations/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":["latest: IntegrationSpec | undefined"],"sources":["../../src/integrations/spec.ts"],"sourcesContent":["import type { OwnerShipMeta } from '../ownership';\nimport type { CapabilityRef, CapabilityRequirement } from '../capabilities';\n\nexport type IntegrationCategory =\n  | 'payments'\n  | 'email'\n  | 'calendar'\n  | 'sms'\n  | 'ai-llm'\n  | 'ai-voice'\n  | 'speech-to-text'\n  | 'vector-db'\n  | 'storage'\n  | 'accounting'\n  | 'crm'\n  | 'helpdesk'\n  | 'open-banking'\n  | 'custom';\n\nexport type IntegrationOwnershipMode = 'managed' | 'byok';\n\nexport interface IntegrationMeta extends OwnerShipMeta {\n  /** Stable provider slug (e.g., \"stripe\", \"openai\"). */\n  key: string;\n  /** Provider version (increment on breaking API changes). */\n  version: number;\n  category: IntegrationCategory;\n  displayName: string;\n}\n\nexport interface IntegrationCapabilityMapping {\n  /** Which CapabilitySpec this integration provides. */\n  provides: CapabilityRef[];\n  /** Optional: which capabilities it requires (e.g., storage for caching). */\n  requires?: CapabilityRequirement[];\n}\n\nexport interface IntegrationConfigSchema {\n  /** JSON Schema or SchemaModel defining required config fields. */\n  schema: unknown;\n  /** Example configuration (for docs/UI). */\n  example?: Record<string, unknown>;\n}\n\nexport interface IntegrationSecretSchema {\n  /** JSON Schema or SchemaModel describing secret fields. */\n  schema: unknown;\n  /** Redacted example for documentation/UI. */\n  example?: Record<string, string>;\n}\n\nexport interface IntegrationByokSetup {\n  /** Human-readable instructions for tenants configuring BYOK accounts. */\n  setupInstructions?: string;\n  /** Required scopes/permissions for BYOK accounts. */\n  requiredScopes?: string[];\n}\n\nexport interface IntegrationHealthCheck {\n  /** Endpoint or method to validate connection health. */\n  method?: 'ping' | 'list' | 'custom';\n  /** Timeout in ms for health check. */\n  timeoutMs?: number;\n}\n\nexport interface IntegrationSpec {\n  meta: IntegrationMeta;\n  /** Supported ownership modes for this provider. */\n  supportedModes: IntegrationOwnershipMode[];\n  /** Which capabilities this integration provides/requires. */\n  capabilities: IntegrationCapabilityMapping;\n  /** Configuration schema (API keys, endpoints, etc.). */\n  configSchema: IntegrationConfigSchema;\n  /** Secret schema (API/key material stored via secretRef). */\n  secretSchema: IntegrationSecretSchema;\n  /** Optional health check configuration. */\n  healthCheck?: IntegrationHealthCheck;\n  /** Documentation URL. */\n  docsUrl?: string;\n  /** Rate limits or usage constraints. */\n  constraints?: {\n    rateLimit?: { rpm?: number; rph?: number };\n    quotas?: Record<string, number>;\n  };\n  /** Provider-specific metadata for BYOK setup flows. */\n  byokSetup?: IntegrationByokSetup;\n}\n\nconst integrationKey = (meta: Pick<IntegrationMeta, 'key' | 'version'>) =>\n  `${meta.key}.v${meta.version}`;\n\nexport class IntegrationSpecRegistry {\n  private readonly items = new Map<string, IntegrationSpec>();\n\n  register(spec: IntegrationSpec): this {\n    const key = integrationKey(spec.meta);\n    if (this.items.has(key)) {\n      throw new Error(`Duplicate IntegrationSpec ${key}`);\n    }\n    this.items.set(key, spec);\n    return this;\n  }\n\n  list(): IntegrationSpec[] {\n    return [...this.items.values()];\n  }\n\n  get(key: string, version?: number): IntegrationSpec | undefined {\n    if (version != null) {\n      return this.items.get(integrationKey({ key, version }));\n    }\n    let latest: IntegrationSpec | undefined;\n    let maxVersion = -Infinity;\n    for (const spec of this.items.values()) {\n      if (spec.meta.key !== key) continue;\n      if (spec.meta.version > maxVersion) {\n        maxVersion = spec.meta.version;\n        latest = spec;\n      }\n    }\n    return latest;\n  }\n\n  getByCategory(category: IntegrationCategory): IntegrationSpec[] {\n    return this.list().filter((spec) => spec.meta.category === category);\n  }\n}\n\nexport function makeIntegrationSpecKey(meta: IntegrationMeta) {\n  return integrationKey(meta);\n}\n"],"mappings":";AAwFA,MAAM,kBAAkB,SACtB,GAAG,KAAK,IAAI,IAAI,KAAK;AAEvB,IAAa,0BAAb,MAAqC;CACnC,AAAiB,wBAAQ,IAAI,KAA8B;CAE3D,SAAS,MAA6B;EACpC,MAAM,MAAM,eAAe,KAAK,KAAK;AACrC,MAAI,KAAK,MAAM,IAAI,IAAI,CACrB,OAAM,IAAI,MAAM,6BAA6B,MAAM;AAErD,OAAK,MAAM,IAAI,KAAK,KAAK;AACzB,SAAO;;CAGT,OAA0B;AACxB,SAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC;;CAGjC,IAAI,KAAa,SAA+C;AAC9D,MAAI,WAAW,KACb,QAAO,KAAK,MAAM,IAAI,eAAe;GAAE;GAAK;GAAS,CAAC,CAAC;EAEzD,IAAIA;EACJ,IAAI,aAAa;AACjB,OAAK,MAAM,QAAQ,KAAK,MAAM,QAAQ,EAAE;AACtC,OAAI,KAAK,KAAK,QAAQ,IAAK;AAC3B,OAAI,KAAK,KAAK,UAAU,YAAY;AAClC,iBAAa,KAAK,KAAK;AACvB,aAAS;;;AAGb,SAAO;;CAGT,cAAc,UAAkD;AAC9D,SAAO,KAAK,MAAM,CAAC,QAAQ,SAAS,KAAK,KAAK,aAAa,SAAS;;;AAIxE,SAAgB,uBAAuB,MAAuB;AAC5D,QAAO,eAAe,KAAK"}

package/dist/jobs/define-job.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"define-job.d.ts","names":[],"sources":["../../src/jobs/define-job.ts"],"sourcesContent":[],"mappings":";;;;UAIiB;EAAA,IAAA,EAAA,MAAA;EAEG,MAAA,EAAV,SAAU,CAAA,QAAA,CAAA;EAAV,OAAA,EAAA,CAAA,OAAA,EACW,QADX,EAAA,GAAA,EAC0B,GAD1B,CAC8B,QAD9B,CAAA,EAAA,GAC4C,OAD5C,CAAA,IAAA,CAAA;;;;;;AAUV;;AAEkB,iBAFF,kBAEE,CAAA,QAAA,CAAA,CAAA,KAAA,EADT,QACS,EAAA,GAAA,EAAX,UAAW,CAAA,QAAA,CAAA,CAAA,EAAA,IAAA"}

package/dist/jobs/define-job.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"define-job.js","names":[],"sources":["../../src/jobs/define-job.ts"],"sourcesContent":["import type { ZodSchema } from 'zod';\nimport type { Job } from './queue';\nimport type { JobQueue } from './queue';\n\nexport interface DefinedJob<TPayload> {\n  type: string;\n  schema: ZodSchema<TPayload>;\n  handler: (payload: TPayload, job: Job<TPayload>) => Promise<void>;\n}\n\n/**\n * Register a `DefinedJob` on a queue with payload validation.\n *\n * - Parses and validates payload via the job's Zod schema\n * - Invokes the defined handler with the validated payload\n */\nexport function registerDefinedJob<TPayload>(\n  queue: JobQueue,\n  job: DefinedJob<TPayload>\n): void {\n  queue.register<TPayload>(job.type, async (queuedJob) => {\n    const parsed = job.schema.parse(queuedJob.payload);\n    await job.handler(parsed, queuedJob as Job<TPayload>);\n  });\n}\n"],"mappings":";;;;;;;AAgBA,SAAgB,mBACd,OACA,KACM;AACN,OAAM,SAAmB,IAAI,MAAM,OAAO,cAAc;EACtD,MAAM,SAAS,IAAI,OAAO,MAAM,UAAU,QAAQ;AAClD,QAAM,IAAI,QAAQ,QAAQ,UAA2B;GACrD"}

package/dist/jobs/gcp-cloud-tasks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-cloud-tasks.d.ts","names":[],"sources":["../../src/jobs/gcp-cloud-tasks.ts"],"sourcesContent":[],"mappings":";;;UAUU,oBAAA;;IAAA,MAAA,EAAA,MAAA;IAOI,IAAA,EAAA;MACI,WAAA,EAAA;QAKZ,UAAA,EAAA,MAAA,GAAA,MAAA;QAAO,GAAA,EAAA,MAAA;QAGI,IAAA,EATH,MASG;QASJ,OAAA,CAAA,EAjBK,MAiBc,CAAA,MAAA,EAAA,MAAA,CAAA;QAGQ,SAAA,CAAA,EAAA;UAI3B,mBAAA,EAAA,MAAA;QACA,CAAA;MACI,CAAA;MAAJ,YAAA,CAAA,EAAA;QAAR,OAAA,EAAA,MAAA;MA6CmB,CAAA;IAAU,CAAA;EAArB,CAAA,CAAA,EAlEP,OAkEO,CAAA,OAAA,CAAA;;AAtD8B,UAT1B,yBAAA,CAS0B;EAAQ,MAAA,EARzC,oBAQyC;;;;;;;cAAtC,kBAAA,YAA8B;;;uBAGH;8CAI3B,oBACA,iBACR,QAAQ,IAAI;+DA6CJ,WAAW,UAAU;;UASlB"}

package/dist/jobs/gcp-cloud-tasks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-cloud-tasks.js","names":["options: GcpCloudTasksQueueOptions"],"sources":["../../src/jobs/gcp-cloud-tasks.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport {\n  DEFAULT_RETRY_POLICY,\n  type EnqueueOptions,\n  type Job,\n  type JobHandler,\n  type JobQueue,\n} from './queue';\n\ninterface CloudTasksClientLike {\n  createTask(request: {\n    parent: string;\n    task: {\n      httpRequest: {\n        httpMethod: number | string;\n        url: string;\n        body: Buffer;\n        headers?: Record<string, string>;\n        oidcToken?: { serviceAccountEmail: string };\n      };\n      scheduleTime?: { seconds: number };\n    };\n  }): Promise<unknown>;\n}\n\nexport interface GcpCloudTasksQueueOptions {\n  client: CloudTasksClientLike;\n  projectId: string;\n  location: string;\n  queue: string;\n  resolveUrl(jobType: string): string;\n  serviceAccountEmail?: string;\n}\n\nexport class GcpCloudTasksQueue implements JobQueue {\n  private readonly handlers = new Map<string, JobHandler>();\n\n  constructor(private readonly options: GcpCloudTasksQueueOptions) {}\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    const enqueueTime =\n      options.delaySeconds != null\n        ? { seconds: Math.floor(Date.now() / 1000) + options.delaySeconds }\n        : undefined;\n    const body = Buffer.from(\n      JSON.stringify({\n        id: randomUUID(),\n        type: jobType,\n        payload,\n      }),\n      'utf-8'\n    );\n    await this.options.client.createTask({\n      parent: `projects/${this.options.projectId}/locations/${this.options.location}/queues/${this.options.queue}`,\n      task: {\n        httpRequest: {\n          httpMethod: 'POST',\n          url: this.options.resolveUrl(jobType),\n          body,\n          headers: { 'Content-Type': 'application/json' },\n          oidcToken: this.options.serviceAccountEmail\n            ? { serviceAccountEmail: this.options.serviceAccountEmail }\n            : undefined,\n        },\n        scheduleTime: enqueueTime,\n      },\n    });\n\n    return {\n      id: randomUUID(),\n      type: jobType,\n      version: 1,\n      payload,\n      status: 'pending',\n      priority: options.priority ?? 0,\n      attempts: 0,\n      maxRetries: options.maxRetries ?? DEFAULT_RETRY_POLICY.maxRetries,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    };\n  }\n\n  register<TPayload, TResult = void>(\n    jobType: string,\n    handler: JobHandler<TPayload, TResult>\n  ): void {\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    // Execution is handled by Cloud Tasks via HTTP callbacks.\n  }\n\n  async stop(): Promise<void> {\n    this.handlers.clear();\n  }\n}\n"],"mappings":";;;;AAmCA,IAAa,qBAAb,MAAoD;CAClD,AAAiB,2BAAW,IAAI,KAAyB;CAEzD,YAAY,AAAiBA,SAAoC;EAApC;;CAE7B,MAAM,QACJ,SACA,SACA,UAA0B,EAAE,EACJ;EACxB,MAAM,cACJ,QAAQ,gBAAgB,OACpB,EAAE,SAAS,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK,GAAG,QAAQ,cAAc,GACjE;EACN,MAAM,OAAO,OAAO,KAClB,KAAK,UAAU;GACb,IAAI,YAAY;GAChB,MAAM;GACN;GACD,CAAC,EACF,QACD;AACD,QAAM,KAAK,QAAQ,OAAO,WAAW;GACnC,QAAQ,YAAY,KAAK,QAAQ,UAAU,aAAa,KAAK,QAAQ,SAAS,UAAU,KAAK,QAAQ;GACrG,MAAM;IACJ,aAAa;KACX,YAAY;KACZ,KAAK,KAAK,QAAQ,WAAW,QAAQ;KACrC;KACA,SAAS,EAAE,gBAAgB,oBAAoB;KAC/C,WAAW,KAAK,QAAQ,sBACpB,EAAE,qBAAqB,KAAK,QAAQ,qBAAqB,GACzD;KACL;IACD,cAAc;IACf;GACF,CAAC;AAEF,SAAO;GACL,IAAI,YAAY;GAChB,MAAM;GACN,SAAS;GACT;GACA,QAAQ;GACR,UAAU,QAAQ,YAAY;GAC9B,UAAU;GACV,YAAY,QAAQ,cAAc,qBAAqB;GACvD,2BAAW,IAAI,MAAM;GACrB,2BAAW,IAAI,MAAM;GACtB;;CAGH,SACE,SACA,SACM;AACN,OAAK,SAAS,IAAI,SAAS,QAAsB;;CAGnD,QAAc;CAId,MAAM,OAAsB;AAC1B,OAAK,SAAS,OAAO"}

package/dist/jobs/gcp-pubsub.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-pubsub.d.ts","names":[],"sources":["../../src/jobs/gcp-pubsub.ts"],"sourcesContent":[],"mappings":";;;UAUU,gBAAA;;IAAA,cAAA,CAAgB,OAAA,EAAA;MAMT,IAAA,EAJmB,MAInB;IAKJ,CAAA,CAAA,EATkC,OASlC,CAAA,MAAe,CAAA;EAGY,CAAA;;AAK3B,UAbI,qBAAA,CAaJ;EACI,MAAA,EAbP,gBAaO;EAAJ,SAAA,EAAA,MAAA;;AA4BW,cArCX,cAAA,YAA0B,QAqCf,CAAA;EAAU,iBAAA,OAAA;EAArB,iBAAA,QAAA;EASG,WAAA,CAAA,OAAA,EA3CwB,qBA2CxB;EA9CuB,OAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAO1B,QAP0B,EAAA,OAAA,CAAA,EAQ1B,cAR0B,CAAA,EASlC,OATkC,CAS1B,GAT0B,CAStB,QATsB,CAAA,CAAA;EAAQ,QAAA,CAAA,QAAA,EAAA,UAAA,IAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAqClC,UArCkC,CAqCvB,QArCuB,EAqCb,OArCa,CAAA,CAAA,EAAA,IAAA;;UA8C/B"}

package/dist/jobs/gcp-pubsub.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-pubsub.js","names":["options: GcpPubSubQueueOptions"],"sources":["../../src/jobs/gcp-pubsub.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport {\n  DEFAULT_RETRY_POLICY,\n  type EnqueueOptions,\n  type Job,\n  type JobHandler,\n  type JobQueue,\n} from './queue';\n\ninterface PubSubClientLike {\n  topic(name: string): {\n    publishMessage(message: { data: Buffer }): Promise<string>;\n  };\n}\n\nexport interface GcpPubSubQueueOptions {\n  client: PubSubClientLike;\n  topicName: string;\n}\n\nexport class GcpPubSubQueue implements JobQueue {\n  private readonly handlers = new Map<string, JobHandler>();\n\n  constructor(private readonly options: GcpPubSubQueueOptions) {}\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    await this.options.client.topic(this.options.topicName).publishMessage({\n      data: Buffer.from(\n        JSON.stringify({\n          id: randomUUID(),\n          type: jobType,\n          payload,\n        }),\n        'utf-8'\n      ),\n    });\n\n    return {\n      id: randomUUID(),\n      type: jobType,\n      version: 1,\n      payload,\n      status: 'pending',\n      priority: options.priority ?? 0,\n      attempts: 0,\n      maxRetries: options.maxRetries ?? DEFAULT_RETRY_POLICY.maxRetries,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    };\n  }\n\n  register<TPayload, TResult = void>(\n    jobType: string,\n    handler: JobHandler<TPayload, TResult>\n  ): void {\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    // Message consumption handled externally via Pub/Sub subscription.\n  }\n\n  async stop(): Promise<void> {\n    this.handlers.clear();\n  }\n}\n"],"mappings":";;;;AAqBA,IAAa,iBAAb,MAAgD;CAC9C,AAAiB,2BAAW,IAAI,KAAyB;CAEzD,YAAY,AAAiBA,SAAgC;EAAhC;;CAE7B,MAAM,QACJ,SACA,SACA,UAA0B,EAAE,EACJ;AACxB,QAAM,KAAK,QAAQ,OAAO,MAAM,KAAK,QAAQ,UAAU,CAAC,eAAe,EACrE,MAAM,OAAO,KACX,KAAK,UAAU;GACb,IAAI,YAAY;GAChB,MAAM;GACN;GACD,CAAC,EACF,QACD,EACF,CAAC;AAEF,SAAO;GACL,IAAI,YAAY;GAChB,MAAM;GACN,SAAS;GACT;GACA,QAAQ;GACR,UAAU,QAAQ,YAAY;GAC9B,UAAU;GACV,YAAY,QAAQ,cAAc,qBAAqB;GACvD,2BAAW,IAAI,MAAM;GACrB,2BAAW,IAAI,MAAM;GACtB;;CAGH,SACE,SACA,SACM;AACN,OAAK,SAAS,IAAI,SAAS,QAAsB;;CAGnD,QAAc;CAId,MAAM,OAAsB;AAC1B,OAAK,SAAS,OAAO"}

package/dist/jobs/handlers/gmail-sync-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-sync-handler.d.ts","names":[],"sources":["../../../src/jobs/handlers/gmail-sync-handler.ts"],"sourcesContent":[],"mappings":";;;;;UAIiB,mBAAA,SAA4B;AAA5B,iBAED,sBAAA,CAF6B,OAAA,EAGlC,qBAHsD,CAAA,EAI9D,UAJ8D,CAInD,mBAJmD,CAAA"}

package/dist/jobs/handlers/gmail-sync-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-sync-handler.js","names":[],"sources":["../../../src/jobs/handlers/gmail-sync-handler.ts"],"sourcesContent":["import type { JobHandler } from '../queue';\nimport type { GmailIngestionAdapter } from '../../knowledge/ingestion/gmail-adapter';\nimport type { EmailThreadListQuery } from '../../integrations/providers/email';\n\nexport interface GmailSyncJobPayload extends EmailThreadListQuery {}\n\nexport function createGmailSyncHandler(\n  adapter: GmailIngestionAdapter\n): JobHandler<GmailSyncJobPayload> {\n  return async (job) => {\n    await adapter.syncThreads(job.payload);\n  };\n}\n"],"mappings":";AAMA,SAAgB,uBACd,SACiC;AACjC,QAAO,OAAO,QAAQ;AACpB,QAAM,QAAQ,YAAY,IAAI,QAAQ"}

package/dist/jobs/handlers/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/jobs/handlers/index.ts"],"sourcesContent":[],"mappings":";;;;;;iBAUgB,eAAA,QAAuB"}

package/dist/jobs/handlers/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/jobs/handlers/index.ts"],"sourcesContent":["export * from './ping-handler';\nexport * from './gmail-sync-handler';\nexport * from './storage-document-handler';\nimport type { JobQueue } from '../queue';\nimport { registerDefinedJob } from '../define-job';\n\nimport { pingJob } from './ping-handler';\n// import { equityaRecomputePlanJob } from './types/equitya.recompute-plan';\n// import { artisanosGenerateQuoteJob } from './types/artisanos.generate-quote';\n\nexport function registerAllJobs(queue: JobQueue): void {\n  registerDefinedJob(queue, pingJob);\n  // registerDefinedJob(queue, equityaRecomputePlanJob);\n  // registerDefinedJob(queue, artisanosGenerateQuoteJob);\n}\n"],"mappings":";;;;;;AAUA,SAAgB,gBAAgB,OAAuB;AACrD,oBAAmB,OAAO,QAAQ"}

package/dist/jobs/handlers/ping-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ping-handler.d.ts","names":[],"sources":["../../../src/jobs/handlers/ping-handler.ts"],"sourcesContent":[],"mappings":";;;;cAKa;cAEA,mBAAiB,GAAA,CAAA,cAAA,GAAA,CAAA,IAAA,CAAA;AAFjB,KAID,WAAA,GAAc,GAAA,CAAE,KAJqB,CAAA,OAIR,iBAJQ,CAAA;AAEpC,cAIA,OAJgC,EAIvB,UAJQ,CAIG,WAJH,CAAA"}

package/dist/jobs/handlers/ping-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ping-handler.js","names":["z","pingJob: DefinedJob<PingPayload>"],"sources":["../../../src/jobs/handlers/ping-handler.ts"],"sourcesContent":["// jobs/types/ping.ts\nimport * as z from 'zod';\nimport type { Job } from '../queue';\nimport type { DefinedJob } from '../define-job';\n\nexport const PING_JOB_TYPE = 'core.ping' as const;\n\nexport const PingPayloadSchema = z.object({});\n\nexport type PingPayload = z.infer<typeof PingPayloadSchema>;\n\nexport const pingJob: DefinedJob<PingPayload> = {\n  type: PING_JOB_TYPE,\n  schema: PingPayloadSchema,\n  handler: async (_payload: PingPayload, job: Job<PingPayload>) => {\n    console.log('[ping] job id=%s attempts=%d', job.id, job.attempts);\n  },\n};\n"],"mappings":";;;AAKA,MAAa,gBAAgB;AAE7B,MAAa,oBAAoBA,IAAE,OAAO,EAAE,CAAC;AAI7C,MAAaC,UAAmC;CAC9C,MAAM;CACN,QAAQ;CACR,SAAS,OAAO,UAAuB,QAA0B;AAC/D,UAAQ,IAAI,gCAAgC,IAAI,IAAI,IAAI,SAAS;;CAEpE"}

package/dist/jobs/handlers/storage-document-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-document-handler.d.ts","names":[],"sources":["../../../src/jobs/handlers/storage-document-handler.ts"],"sourcesContent":[],"mappings":";;;;;UAIiB,yBAAA;;EAAA,GAAA,EAAA,MAAA;AAKjB;AACW,iBADK,4BAAA,CACL,OAAA,EAAA,qBAAA,EAAA,OAAA,EACA,uBADA,CAAA,EAER,UAFQ,CAEG,yBAFH,CAAA"}

package/dist/jobs/handlers/storage-document-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-document-handler.js","names":[],"sources":["../../../src/jobs/handlers/storage-document-handler.ts"],"sourcesContent":["import type { ObjectStorageProvider } from '../../integrations/providers/storage';\nimport type { StorageIngestionAdapter } from '../../knowledge/ingestion/storage-adapter';\nimport type { JobHandler } from '../queue';\n\nexport interface StorageDocumentJobPayload {\n  bucket: string;\n  key: string;\n}\n\nexport function createStorageDocumentHandler(\n  storage: ObjectStorageProvider,\n  adapter: StorageIngestionAdapter\n): JobHandler<StorageDocumentJobPayload> {\n  return async (job) => {\n    const object = await storage.getObject({\n      bucket: job.payload.bucket,\n      key: job.payload.key,\n    });\n    if (!object) {\n      throw new Error(\n        `Object ${job.payload.bucket}/${job.payload.key} not found`\n      );\n    }\n    await adapter.ingestObject(object);\n  };\n}\n"],"mappings":";AASA,SAAgB,6BACd,SACA,SACuC;AACvC,QAAO,OAAO,QAAQ;EACpB,MAAM,SAAS,MAAM,QAAQ,UAAU;GACrC,QAAQ,IAAI,QAAQ;GACpB,KAAK,IAAI,QAAQ;GAClB,CAAC;AACF,MAAI,CAAC,OACH,OAAM,IAAI,MACR,UAAU,IAAI,QAAQ,OAAO,GAAG,IAAI,QAAQ,IAAI,YACjD;AAEH,QAAM,QAAQ,aAAa,OAAO"}

package/dist/jobs/memory-queue.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"memory-queue.d.ts","names":[],"sources":["../../src/jobs/memory-queue.ts"],"sourcesContent":[],"mappings":";;;cAUa,cAAA,YAA0B;;EAA1B,iBAAe,IAAA;EAUf,iBAAA,QAAA;EACA,QAAA,KAAA;EACI,QAAA,UAAA;EAAJ,WAAA,CAAA,cAAA,CAAA,EAAA,MAAA;EAAR,OAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAFQ,QAER,EAAA,OAAA,CAAA,EADQ,cACR,CAAA,EAAA,OAAA,CAAQ,GAAR,CAAY,QAAZ,CAAA,CAAA;EAsBmB,QAAA,CAAA,QAAA,EAAA,UAAA,IAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAAX,UAAW,CAAA,QAAA,EAAU,OAAV,CAAA,CAAA,EAAA,IAAA;EAAU,KAAA,CAAA,CAAA,EAAA,IAAA;EAArB,IAAA,CAAA,CAAA,EAYG,OAZH,CAAA,IAAA,CAAA;EAYG,QAAA,WAAA"}

package/dist/jobs/memory-queue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"memory-queue.js","names":["job: Job<TPayload>"],"sources":["../../src/jobs/memory-queue.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport {\n  DEFAULT_RETRY_POLICY,\n  type EnqueueOptions,\n  type Job,\n  type JobHandler,\n  type JobQueue,\n} from './queue';\n\nexport class MemoryJobQueue implements JobQueue {\n  private readonly jobs: Job[] = [];\n  private readonly handlers = new Map<string, JobHandler>();\n  private timer?: NodeJS.Timeout;\n  private processing = false;\n\n  constructor(private readonly pollIntervalMs = 200) {}\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    const job: Job<TPayload> = {\n      id: randomUUID(),\n      type: jobType,\n      version: 1,\n      payload,\n      status: 'pending',\n      priority: options.priority ?? 0,\n      attempts: 0,\n      maxRetries: options.maxRetries ?? DEFAULT_RETRY_POLICY.maxRetries,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    };\n    if (options.delaySeconds) {\n      job.updatedAt = new Date(Date.now() + options.delaySeconds * 1000);\n    }\n    this.jobs.push(job);\n    return job;\n  }\n\n  register<TPayload, TResult = void>(\n    jobType: string,\n    handler: JobHandler<TPayload, TResult>\n  ): void {\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    if (this.timer) return;\n    this.timer = setInterval(() => {\n      void this.processNext();\n    }, this.pollIntervalMs);\n  }\n\n  async stop(): Promise<void> {\n    if (this.timer) {\n      clearInterval(this.timer);\n      this.timer = undefined;\n    }\n    while (this.processing) {\n      await new Promise((resolve) => setTimeout(resolve, 10));\n    }\n  }\n\n  private async processNext() {\n    if (this.processing) return;\n    const job = this.jobs.find(\n      (j) => j.status === 'pending' && j.updatedAt <= new Date()\n    );\n    if (!job) return;\n    const handler = this.handlers.get(job.type);\n    if (!handler) return;\n\n    this.processing = true;\n    job.status = 'running';\n    job.updatedAt = new Date();\n    job.attempts += 1;\n\n    try {\n      await handler(job);\n      job.status = 'completed';\n      job.updatedAt = new Date();\n    } catch (error) {\n      job.status = 'failed';\n      job.lastError =\n        error instanceof Error ? error.message : 'Unknown job error';\n      job.updatedAt = new Date();\n    } finally {\n      this.processing = false;\n    }\n  }\n}\n"],"mappings":";;;;AAUA,IAAa,iBAAb,MAAgD;CAC9C,AAAiB,OAAc,EAAE;CACjC,AAAiB,2BAAW,IAAI,KAAyB;CACzD,AAAQ;CACR,AAAQ,aAAa;CAErB,YAAY,AAAiB,iBAAiB,KAAK;EAAtB;;CAE7B,MAAM,QACJ,SACA,SACA,UAA0B,EAAE,EACJ;EACxB,MAAMA,MAAqB;GACzB,IAAI,YAAY;GAChB,MAAM;GACN,SAAS;GACT;GACA,QAAQ;GACR,UAAU,QAAQ,YAAY;GAC9B,UAAU;GACV,YAAY,QAAQ,cAAc,qBAAqB;GACvD,2BAAW,IAAI,MAAM;GACrB,2BAAW,IAAI,MAAM;GACtB;AACD,MAAI,QAAQ,aACV,KAAI,YAAY,IAAI,KAAK,KAAK,KAAK,GAAG,QAAQ,eAAe,IAAK;AAEpE,OAAK,KAAK,KAAK,IAAI;AACnB,SAAO;;CAGT,SACE,SACA,SACM;AACN,OAAK,SAAS,IAAI,SAAS,QAAsB;;CAGnD,QAAc;AACZ,MAAI,KAAK,MAAO;AAChB,OAAK,QAAQ,kBAAkB;AAC7B,GAAK,KAAK,aAAa;KACtB,KAAK,eAAe;;CAGzB,MAAM,OAAsB;AAC1B,MAAI,KAAK,OAAO;AACd,iBAAc,KAAK,MAAM;AACzB,QAAK,QAAQ;;AAEf,SAAO,KAAK,WACV,OAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;;CAI3D,MAAc,cAAc;AAC1B,MAAI,KAAK,WAAY;EACrB,MAAM,MAAM,KAAK,KAAK,MACnB,MAAM,EAAE,WAAW,aAAa,EAAE,6BAAa,IAAI,MAAM,CAC3D;AACD,MAAI,CAAC,IAAK;EACV,MAAM,UAAU,KAAK,SAAS,IAAI,IAAI,KAAK;AAC3C,MAAI,CAAC,QAAS;AAEd,OAAK,aAAa;AAClB,MAAI,SAAS;AACb,MAAI,4BAAY,IAAI,MAAM;AAC1B,MAAI,YAAY;AAEhB,MAAI;AACF,SAAM,QAAQ,IAAI;AAClB,OAAI,SAAS;AACb,OAAI,4BAAY,IAAI,MAAM;WACnB,OAAO;AACd,OAAI,SAAS;AACb,OAAI,YACF,iBAAiB,QAAQ,MAAM,UAAU;AAC3C,OAAI,4BAAY,IAAI,MAAM;YAClB;AACR,QAAK,aAAa"}

package/dist/jobs/queue.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue.d.ts","names":[],"sources":["../../src/jobs/queue.ts"],"sourcesContent":[],"mappings":";;;;;;AAKA;AAWiB,KAXL,SAAA,GAWQ,SAAA,GAAA,SAAA,GAAA,WAAA,GAAA,QAAA,GAAA,WAAA,GAAA,aAAA;;;;AAUP,UAVI,GAUJ,CAAA,WAAA,OAAA,CAAA,CAAA;EACG,EAAA,EAAA,MAAA;EACF,IAAA,EAAA,MAAA;EACE,OAAA,EAAA,MAAA;EACF,OAAA,EAVH,QAUG;EAMD,MAAA,EAfH,SAeG;EAAM,QAAA,EAAA,MAAA;EAOF,QAAA,EAAA,MAAA;EAwBL,UAAA,EAAA,MAAU;EACX,SAAA,EA3CE,IA2CF;EAAJ,SAAA,EA1CM,IA0CN;EACM,WAAA,CAAA,EA1CG,IA0CH;EAAR,SAAA,CAAA,EAzCS,IAyCT;EAAO,WAAA,CAAA,EAxCI,IAwCJ;EAKK,SAAA,CAAA,EA5CH,IA4CW;EAIZ,SAAA,CAAA,EAAA,MAAA;EACC,SAAA,CAAA,EAAA,MAAA;EACG,QAAA,CAAA,EAAA,MAAA;EAAJ,MAAA,CAAA,EAAA,MAAA;EAAR,OAAA,CAAA,EAAA,MAAA;EAKmB,QAAA,CAAA,EAjDX,MAiDW,CAAA,MAAA,EAAA,OAAA,CAAA;EAAU,MAAA,CAAA,EAAA,OAAA;;;;;AAaL,UAvDZ,cAAA,CAuDY;EAGN;EAAR,YAAA,CAAA,EAAA,MAAA;EAAO;EAML,SAAA,CAAA,EAAA,MAAU;EAWV;EAgBJ,UAAA,CAAA,EAAA,MAAA;EAWG;EAqBC,QAAA,CAAA,EAAA,MAAU;EAGN;EAAV,SAAE,CAAA,EAAA,MAAA;EACO;EAAR,QAAA,CAAA,EAAA,MAAA;EAAO;EAOH,MAAA,CAAA,EAAA,MAAA;EACE;EAAX,OAAA,CAAA,EAAA,MAAA;EACO;EAAX,QAAA,CAAA,EAtHU,MAsHV,CAAA,MAAA,EAAA,OAAA,CAAA;;;;;KAhHS,uDACL,IAAI,cACN,QAAQ;;;;UAKI,QAAA;;8CAIJ,oBACC,iBACT,QAAQ,IAAI;;+DAKJ,WAAW,UAAU;;;;UAOxB;;0BAGgB,QAAQ;;6BAGL;;eAGd,QAAQ;;;;;UAMN,UAAA;;;;;;;;;;UAWA,WAAA;;;;;;;;;;;;;;;cAgBJ,sBAAsB;;;;iBAWnB,gBAAA,2BAEN;;;;UAmBO;;;WAGN,GAAA,CAAE,QAAQ;YACT,QAAQ;;;;;;;;iBAOJ,6BACT,WAAW,YACf,WAAW"}

package/dist/jobs/queue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue.js","names":["DEFAULT_RETRY_POLICY: RetryPolicy"],"sources":["../../src/jobs/queue.ts"],"sourcesContent":["import * as z from 'zod';\n\n/**\n * Job status values.\n */\nexport type JobStatus =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'failed'\n  | 'cancelled'\n  | 'dead_letter';\n\n/**\n * A job in the queue.\n */\nexport interface Job<TPayload = unknown> {\n  id: string;\n  type: string;\n  version: number;\n  payload: TPayload;\n  status: JobStatus;\n  priority: number;\n  attempts: number;\n  maxRetries: number;\n  createdAt: Date;\n  updatedAt: Date;\n  scheduledAt?: Date;\n  startedAt?: Date;\n  completedAt?: Date;\n  timeoutAt?: Date;\n  lastError?: string;\n  dedupeKey?: string;\n  tenantId?: string;\n  userId?: string;\n  traceId?: string;\n  metadata?: Record<string, unknown>;\n  result?: unknown;\n}\n\n/**\n * Options for enqueueing a job.\n */\nexport interface EnqueueOptions {\n  /** Delay execution by this many seconds */\n  delaySeconds?: number;\n  /** Key for deduplication (only one job with this key can be pending) */\n  dedupeKey?: string;\n  /** Maximum retry attempts (overrides job type default) */\n  maxRetries?: number;\n  /** Job priority (higher = more urgent) */\n  priority?: number;\n  /** Timeout in milliseconds */\n  timeoutMs?: number;\n  /** Tenant context */\n  tenantId?: string;\n  /** User who enqueued */\n  userId?: string;\n  /** Trace ID for distributed tracing */\n  traceId?: string;\n  /** Additional metadata */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Job handler function.\n */\nexport type JobHandler<TPayload = unknown, TResult = void> = (\n  job: Job<TPayload>\n) => Promise<TResult>;\n\n/**\n * Job queue interface.\n */\nexport interface JobQueue {\n  /** Enqueue a new job */\n  enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options?: EnqueueOptions\n  ): Promise<Job<TPayload>>;\n\n  /** Register a handler for a job type */\n  register<TPayload, TResult = void>(\n    jobType: string,\n    handler: JobHandler<TPayload, TResult>\n  ): void;\n\n  /** Start processing jobs */\n  start(): void;\n\n  /** Stop processing jobs gracefully */\n  stop(): Promise<void>;\n\n  /** Get job by ID */\n  getJob?(jobId: string): Promise<Job | null>;\n\n  /** Cancel a pending job */\n  cancelJob?(jobId: string): Promise<boolean>;\n\n  /** Get queue stats */\n  getStats?(): Promise<QueueStats>;\n}\n\n/**\n * Queue statistics.\n */\nexport interface QueueStats {\n  pending: number;\n  running: number;\n  completed: number;\n  failed: number;\n  deadLetter: number;\n}\n\n/**\n * Retry policy configuration.\n */\nexport interface RetryPolicy {\n  /** Maximum number of retry attempts */\n  maxRetries: number;\n  /** Initial backoff in milliseconds */\n  initialBackoffMs: number;\n  /** Maximum backoff in milliseconds */\n  maxBackoffMs: number;\n  /** Backoff multiplier (exponential) */\n  multiplier: number;\n  /** Add jitter to backoff */\n  jitter: boolean;\n}\n\n/**\n * Default retry policy.\n */\nexport const DEFAULT_RETRY_POLICY: RetryPolicy = {\n  maxRetries: 3,\n  initialBackoffMs: 1000,\n  maxBackoffMs: 60000,\n  multiplier: 2,\n  jitter: true,\n};\n\n/**\n * Calculate backoff delay for a retry attempt.\n */\nexport function calculateBackoff(\n  attempt: number,\n  policy: RetryPolicy = DEFAULT_RETRY_POLICY\n): number {\n  const baseDelay = Math.min(\n    policy.initialBackoffMs * Math.pow(policy.multiplier, attempt - 1),\n    policy.maxBackoffMs\n  );\n\n  if (policy.jitter) {\n    // Add up to 20% jitter\n    const jitterFactor = 0.8 + Math.random() * 0.4;\n    return Math.floor(baseDelay * jitterFactor);\n  }\n\n  return baseDelay;\n}\n\n/**\n * Job type definition.\n */\nexport interface JobTypeDef<TPayload = unknown> {\n  type: string;\n  version: number;\n  payload: z.ZodType<TPayload>;\n  options?: Partial<RetryPolicy & { timeoutMs: number }>;\n  description?: string;\n}\n\n/**\n * Define a typed job type.\n */\nexport function defineJobType<TPayload>(\n  def: JobTypeDef<TPayload>\n): JobTypeDef<TPayload> {\n  return def;\n}\n"],"mappings":";;;;;;AAsIA,MAAaA,uBAAoC;CAC/C,YAAY;CACZ,kBAAkB;CAClB,cAAc;CACd,YAAY;CACZ,QAAQ;CACT;;;;AAKD,SAAgB,iBACd,SACA,SAAsB,sBACd;CACR,MAAM,YAAY,KAAK,IACrB,OAAO,mBAAmB,KAAK,IAAI,OAAO,YAAY,UAAU,EAAE,EAClE,OAAO,aACR;AAED,KAAI,OAAO,QAAQ;EAEjB,MAAM,eAAe,KAAM,KAAK,QAAQ,GAAG;AAC3C,SAAO,KAAK,MAAM,YAAY,aAAa;;AAG7C,QAAO;;;;;AAiBT,SAAgB,cACd,KACsB;AACtB,QAAO"}

package/dist/jobs/scaleway-sqs-queue.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaleway-sqs-queue.d.ts","names":[],"sources":["../../src/jobs/scaleway-sqs-queue.ts"],"sourcesContent":[],"mappings":";;;UAgBU,sBAAA;;EAAA,MAAA,CAAA,EAAA,MAAA;EAeG,QAAA,CAAA,EAAA,MAAA;EASS,eAAA,CAAA,EAAA,MAAA;EA8BT,mBAAA,CAAA,EAAA,MAAA;EACA,wBAAA,CAAA,EAAA,MAAA;;AACA,cAzCA,mBAAA,YAA+B,QAyC/B,CAAA;EAAR,iBAAA,GAAA;EAmCmB,iBAAA,QAAA;EAAU,iBAAA,eAAA;EAArB,iBAAA,mBAAA;EAkBG,iBAAA,wBAAA;EA9F4B,iBAAA,QAAA;EAAQ,QAAA,OAAA;sBAS9B;8CA8BT,oBACA,iBACR,QAAQ,IAAI;+DAmCJ,WAAW,UAAU;;UAkBlB"}

package/dist/jobs/scaleway-sqs-queue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaleway-sqs-queue.js","names":["envelope: RawJobEnvelope<TPayload>","envelope: RawJobEnvelope","job: Job"],"sources":["../../src/jobs/scaleway-sqs-queue.ts"],"sourcesContent":["// jobs/scaleway-sqs-queue.ts\nimport { randomUUID } from 'crypto';\nimport {\n  DeleteMessageCommand,\n  ReceiveMessageCommand,\n  SendMessageCommand,\n  SQSClient,\n} from '@aws-sdk/client-sqs';\nimport {\n  DEFAULT_RETRY_POLICY,\n  type EnqueueOptions,\n  type Job,\n  type JobHandler,\n  type JobQueue,\n} from './queue';\n\ninterface ScalewaySqsQueueConfig {\n  queueUrl: string;\n  region?: string;\n  endpoint?: string;\n  waitTimeSeconds?: number;\n  maxNumberOfMessages?: number;\n  visibilityTimeoutSeconds?: number;\n}\n\ninterface RawJobEnvelope<TPayload = unknown> {\n  id: string;\n  type: string;\n  payload: TPayload;\n}\n\nexport class ScalewaySqsJobQueue implements JobQueue {\n  private readonly sqs: SQSClient;\n  private readonly queueUrl: string;\n  private readonly waitTimeSeconds: number;\n  private readonly maxNumberOfMessages: number;\n  private readonly visibilityTimeoutSeconds: number;\n  private readonly handlers = new Map<string, JobHandler>();\n  private running = false;\n\n  constructor(config: ScalewaySqsQueueConfig) {\n    const accessKeyId = process.env.SCALEWAY_ACCESS_KEY_QUEUE;\n    const secretAccessKey = process.env.SCALEWAY_SECRET_KEY_QUEUE;\n\n    if (!accessKeyId || !secretAccessKey) {\n      throw new Error(\n        'Missing SCALEWAY_ACCESS_KEY_QUEUE / SCALEWAY_SECRET_KEY_QUEUE in env'\n      );\n    }\n\n    const region = config.region ?? process.env.SCALEWAY_REGION ?? 'par';\n    const endpoint = 'https://sqs.mnq.fr-par.scaleway.com';\n\n    this.sqs = new SQSClient({\n      region,\n      endpoint,\n      credentials: {\n        accessKeyId,\n        secretAccessKey,\n      },\n    });\n\n    this.queueUrl = config.queueUrl;\n    this.waitTimeSeconds = config.waitTimeSeconds ?? 20;\n    this.maxNumberOfMessages = config.maxNumberOfMessages ?? 5;\n    this.visibilityTimeoutSeconds = config.visibilityTimeoutSeconds ?? 60;\n  }\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    const id = randomUUID();\n    const now = new Date();\n\n    const envelope: RawJobEnvelope<TPayload> = {\n      id,\n      type: jobType,\n      payload,\n    };\n\n    await this.sqs.send(\n      new SendMessageCommand({\n        QueueUrl: this.queueUrl,\n        MessageBody: JSON.stringify(envelope),\n        DelaySeconds: options.delaySeconds ?? 0,\n        // If you use FIFO queues later, you'd set MessageGroupId / MessageDeduplicationId here.\n      })\n    );\n\n    return {\n      id,\n      type: jobType,\n      version: 1,\n      payload,\n      status: 'pending',\n      priority: options.priority ?? 0,\n      attempts: 0,\n      maxRetries: options.maxRetries ?? DEFAULT_RETRY_POLICY.maxRetries,\n      createdAt: now,\n      updatedAt: now,\n    };\n  }\n\n  register<TPayload, TResult = void>(\n    jobType: string,\n    handler: JobHandler<TPayload, TResult>\n  ): void {\n    if (this.handlers.has(jobType)) {\n      throw new Error(`Handler already registered for job type \"${jobType}\"`);\n    }\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    if (this.running) return;\n    this.running = true;\n    this.pollLoop().catch((err) => {\n      console.error('[queue] Fatal error in poll loop', err);\n      // Let systemd restart the process if needed.\n      process.exit(1);\n    });\n  }\n\n  async stop(): Promise<void> {\n    this.running = false;\n    // Worst-case we wait for the current ReceiveMessage to finish (<= waitTimeSeconds)\n  }\n\n  private async pollLoop(): Promise<void> {\n    console.log('[queue] SQS worker started for queue:', this.queueUrl);\n\n    while (this.running) {\n      try {\n        const res = await this.sqs.send(\n          new ReceiveMessageCommand({\n            QueueUrl: this.queueUrl,\n            MaxNumberOfMessages: this.maxNumberOfMessages,\n            WaitTimeSeconds: this.waitTimeSeconds,\n            VisibilityTimeout: this.visibilityTimeoutSeconds,\n            MessageSystemAttributeNames: ['ApproximateReceiveCount'],\n          })\n        );\n\n        const messages = res.Messages ?? [];\n\n        if (messages.length === 0) {\n          continue;\n        }\n\n        for (const msg of messages) {\n          if (!msg.Body || !msg.ReceiptHandle) {\n            console.warn(\n              '[queue] Message missing Body or ReceiptHandle',\n              msg.MessageId\n            );\n            continue;\n          }\n\n          let envelope: RawJobEnvelope;\n\n          try {\n            envelope = JSON.parse(msg.Body) as RawJobEnvelope;\n          } catch (err) {\n            console.error(\n              `[queue] Failed to parse message body (id=${msg.MessageId}), deleting`,\n              err\n            );\n            await this.deleteMessage(msg.ReceiptHandle);\n            continue;\n          }\n\n          const handler = this.handlers.get(envelope.type);\n          if (!handler) {\n            console.error(\n              `[queue] No handler registered for type \"${envelope.type}\", deleting message`\n            );\n            await this.deleteMessage(msg.ReceiptHandle);\n            continue;\n          }\n\n          const now = new Date();\n          const attempts = parseInt(\n            (msg.Attributes?.ApproximateReceiveCount as string | undefined) ??\n              '1',\n            10\n          );\n\n          const job: Job = {\n            id: envelope.id,\n            type: envelope.type,\n            version: 1,\n            payload: envelope.payload,\n            status: 'pending',\n            priority: 0,\n            attempts,\n            maxRetries: DEFAULT_RETRY_POLICY.maxRetries,\n            createdAt: now,\n            updatedAt: now,\n          };\n\n          job.status = 'running';\n          job.updatedAt = new Date();\n\n          try {\n            await handler(job);\n            job.status = 'completed';\n            job.updatedAt = new Date();\n            await this.deleteMessage(msg.ReceiptHandle);\n          } catch (err) {\n            job.status = 'failed';\n            job.lastError =\n              err instanceof Error ? err.message : 'Unknown job error';\n            job.updatedAt = new Date();\n\n            console.error(\n              `[queue] Error while handling job type=${job.type} id=${job.id}`,\n              err\n            );\n            // Do NOT delete message on failure:\n            // - SQS/Scaleway will redeliver until MaxReceiveCount, then DLQ takes over.\n          }\n        }\n      } catch (err) {\n        if (!!err && typeof err === 'object' && '$response' in err) {\n          console.error('[queue] Error while polling SQS', err, err.$response);\n        } else {\n          console.error('[queue] Error while polling SQS', err);\n        }\n        await this.sleep(5000);\n      }\n    }\n\n    console.log('[queue] SQS worker stopped');\n  }\n\n  private async deleteMessage(receiptHandle: string): Promise<void> {\n    try {\n      await this.sqs.send(\n        new DeleteMessageCommand({\n          QueueUrl: this.queueUrl,\n          ReceiptHandle: receiptHandle,\n        })\n      );\n    } catch (err) {\n      console.error('[queue] Failed to delete message', err);\n    }\n  }\n\n  private async sleep(ms: number): Promise<void> {\n    await new Promise((resolve) => setTimeout(resolve, ms));\n  }\n}\n"],"mappings":";;;;;AA+BA,IAAa,sBAAb,MAAqD;CACnD,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB,2BAAW,IAAI,KAAyB;CACzD,AAAQ,UAAU;CAElB,YAAY,QAAgC;EAC1C,MAAM,cAAc,QAAQ,IAAI;EAChC,MAAM,kBAAkB,QAAQ,IAAI;AAEpC,MAAI,CAAC,eAAe,CAAC,gBACnB,OAAM,IAAI,MACR,uEACD;AAMH,OAAK,MAAM,IAAI,UAAU;GACvB,QAJa,OAAO,UAAU,QAAQ,IAAI,mBAAmB;GAK7D,UAJe;GAKf,aAAa;IACX;IACA;IACD;GACF,CAAC;AAEF,OAAK,WAAW,OAAO;AACvB,OAAK,kBAAkB,OAAO,mBAAmB;AACjD,OAAK,sBAAsB,OAAO,uBAAuB;AACzD,OAAK,2BAA2B,OAAO,4BAA4B;;CAGrE,MAAM,QACJ,SACA,SACA,UAA0B,EAAE,EACJ;EACxB,MAAM,KAAK,YAAY;EACvB,MAAM,sBAAM,IAAI,MAAM;EAEtB,MAAMA,WAAqC;GACzC;GACA,MAAM;GACN;GACD;AAED,QAAM,KAAK,IAAI,KACb,IAAI,mBAAmB;GACrB,UAAU,KAAK;GACf,aAAa,KAAK,UAAU,SAAS;GACrC,cAAc,QAAQ,gBAAgB;GAEvC,CAAC,CACH;AAED,SAAO;GACL;GACA,MAAM;GACN,SAAS;GACT;GACA,QAAQ;GACR,UAAU,QAAQ,YAAY;GAC9B,UAAU;GACV,YAAY,QAAQ,cAAc,qBAAqB;GACvD,WAAW;GACX,WAAW;GACZ;;CAGH,SACE,SACA,SACM;AACN,MAAI,KAAK,SAAS,IAAI,QAAQ,CAC5B,OAAM,IAAI,MAAM,4CAA4C,QAAQ,GAAG;AAEzE,OAAK,SAAS,IAAI,SAAS,QAAsB;;CAGnD,QAAc;AACZ,MAAI,KAAK,QAAS;AAClB,OAAK,UAAU;AACf,OAAK,UAAU,CAAC,OAAO,QAAQ;AAC7B,WAAQ,MAAM,oCAAoC,IAAI;AAEtD,WAAQ,KAAK,EAAE;IACf;;CAGJ,MAAM,OAAsB;AAC1B,OAAK,UAAU;;CAIjB,MAAc,WAA0B;AACtC,UAAQ,IAAI,yCAAyC,KAAK,SAAS;AAEnE,SAAO,KAAK,QACV,KAAI;GAWF,MAAM,YAVM,MAAM,KAAK,IAAI,KACzB,IAAI,sBAAsB;IACxB,UAAU,KAAK;IACf,qBAAqB,KAAK;IAC1B,iBAAiB,KAAK;IACtB,mBAAmB,KAAK;IACxB,6BAA6B,CAAC,0BAA0B;IACzD,CAAC,CACH,EAEoB,YAAY,EAAE;AAEnC,OAAI,SAAS,WAAW,EACtB;AAGF,QAAK,MAAM,OAAO,UAAU;AAC1B,QAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,eAAe;AACnC,aAAQ,KACN,iDACA,IAAI,UACL;AACD;;IAGF,IAAIC;AAEJ,QAAI;AACF,gBAAW,KAAK,MAAM,IAAI,KAAK;aACxB,KAAK;AACZ,aAAQ,MACN,4CAA4C,IAAI,UAAU,cAC1D,IACD;AACD,WAAM,KAAK,cAAc,IAAI,cAAc;AAC3C;;IAGF,MAAM,UAAU,KAAK,SAAS,IAAI,SAAS,KAAK;AAChD,QAAI,CAAC,SAAS;AACZ,aAAQ,MACN,2CAA2C,SAAS,KAAK,qBAC1D;AACD,WAAM,KAAK,cAAc,IAAI,cAAc;AAC3C;;IAGF,MAAM,sBAAM,IAAI,MAAM;IACtB,MAAM,WAAW,SACd,IAAI,YAAY,2BACf,KACF,GACD;IAED,MAAMC,MAAW;KACf,IAAI,SAAS;KACb,MAAM,SAAS;KACf,SAAS;KACT,SAAS,SAAS;KAClB,QAAQ;KACR,UAAU;KACV;KACA,YAAY,qBAAqB;KACjC,WAAW;KACX,WAAW;KACZ;AAED,QAAI,SAAS;AACb,QAAI,4BAAY,IAAI,MAAM;AAE1B,QAAI;AACF,WAAM,QAAQ,IAAI;AAClB,SAAI,SAAS;AACb,SAAI,4BAAY,IAAI,MAAM;AAC1B,WAAM,KAAK,cAAc,IAAI,cAAc;aACpC,KAAK;AACZ,SAAI,SAAS;AACb,SAAI,YACF,eAAe,QAAQ,IAAI,UAAU;AACvC,SAAI,4BAAY,IAAI,MAAM;AAE1B,aAAQ,MACN,yCAAyC,IAAI,KAAK,MAAM,IAAI,MAC5D,IACD;;;WAKE,KAAK;AACZ,OAAI,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,eAAe,IACrD,SAAQ,MAAM,mCAAmC,KAAK,IAAI,UAAU;OAEpE,SAAQ,MAAM,mCAAmC,IAAI;AAEvD,SAAM,KAAK,MAAM,IAAK;;AAI1B,UAAQ,IAAI,6BAA6B;;CAG3C,MAAc,cAAc,eAAsC;AAChE,MAAI;AACF,SAAM,KAAK,IAAI,KACb,IAAI,qBAAqB;IACvB,UAAU,KAAK;IACf,eAAe;IAChB,CAAC,CACH;WACM,KAAK;AACZ,WAAQ,MAAM,oCAAoC,IAAI;;;CAI1D,MAAc,MAAM,IAA2B;AAC7C,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC"}

package/dist/jsonschema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonschema.d.ts","names":[],"sources":["../src/jsonschema.ts"],"sourcesContent":[],"mappings":";;;;;;;iBAOgB,iBAAA,OACR,aAAa,gBAAgB;EADrB,KAAA,qCAAiB,uCAAA,6CAAA,eAAA,iEAAA,CAAA,CAAA,CAAA,GAAA,IAAA;EACZ,MAAA,qCAAA,uCAAA,6CAAA,eAAA,iEAAA,CAAA,CAAA,CAAA,GAAA,IAAA;EAAgB,IAAA,EAAA;IAA7B,IAAA,EAAA,MAAA;;;;;;;;;iBAiBQ,eAAA;;iBAKA,cAAA;;iBAKA,eAAA"}

package/dist/jsonschema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonschema.js","names":[],"sources":["../src/jsonschema.ts"],"sourcesContent":["/**\n * Convert zod I/O to JSON Schema so adapters can generate OpenAPI/MCP.\n */\nimport type { ContractSpec } from './spec';\nimport type { AnySchemaModel } from '@lssm/lib.schema';\nimport z from 'zod';\n\nexport function jsonSchemaForSpec(\n  spec: ContractSpec<AnySchemaModel, AnySchemaModel>\n) {\n  return {\n    input: spec.io.input ? z.toJSONSchema(spec.io.input.getZod()) : null,\n    output: spec.io.output ? z.toJSONSchema(spec.io.output.getZod()) : null,\n    meta: {\n      name: spec.meta.name,\n      version: spec.meta.version,\n      kind: spec.meta.kind,\n      description: spec.meta.description,\n      tags: spec.meta.tags ?? [],\n      stability: spec.meta.stability ?? 'stable',\n    },\n  };\n}\n\n/** Helper to derive default REST path */\nexport function defaultRestPath(name: string, version: number) {\n  return `/${name.replace(/\\./g, '/')}/v${version}`;\n}\n\n/** Helper to derive default MCP tool name */\nexport function defaultMcpTool(name: string, version: number) {\n  return `${name}.v${version}`;\n}\n\n/** Helper to derive default GraphQL field name */\nexport function defaultGqlField(name: string, version: number) {\n  return `${name.replace(/\\./g, '_')}_v${version}`;\n}\n"],"mappings":";;;AAOA,SAAgB,kBACd,MACA;AACA,QAAO;EACL,OAAO,KAAK,GAAG,QAAQ,EAAE,aAAa,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG;EAChE,QAAQ,KAAK,GAAG,SAAS,EAAE,aAAa,KAAK,GAAG,OAAO,QAAQ,CAAC,GAAG;EACnE,MAAM;GACJ,MAAM,KAAK,KAAK;GAChB,SAAS,KAAK,KAAK;GACnB,MAAM,KAAK,KAAK;GAChB,aAAa,KAAK,KAAK;GACvB,MAAM,KAAK,KAAK,QAAQ,EAAE;GAC1B,WAAW,KAAK,KAAK,aAAa;GACnC;EACF;;;AAIH,SAAgB,gBAAgB,MAAc,SAAiB;AAC7D,QAAO,IAAI,KAAK,QAAQ,OAAO,IAAI,CAAC,IAAI;;;AAI1C,SAAgB,eAAe,MAAc,SAAiB;AAC5D,QAAO,GAAG,KAAK,IAAI;;;AAIrB,SAAgB,gBAAgB,MAAc,SAAiB;AAC7D,QAAO,GAAG,KAAK,QAAQ,OAAO,IAAI,CAAC,IAAI"}

package/dist/knowledge/binding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binding.d.ts","names":[],"sources":["../../src/knowledge/binding.ts"],"sourcesContent":[],"mappings":";UAAiB,mBAAA;EAAA"}

package/dist/knowledge/contracts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contracts.d.ts","names":[],"sources":["../../src/knowledge/contracts.ts"],"sourcesContent":[],"mappings":";;;;;;cA0Ga,uBAAqB,aAAA;;UAoBhC,mBAAA,CAAA;IApBW,UAAA,EAAA,KAAA;EAoBX,CAAA;;;;;;;;;;;;EApBgC,CAAA;EAAA,UAAA,EAAA;;;;;;;;;;;;;;;;;;;QAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;QAAA,UAAA,EAAA,IAAA;MAsBrB,CAAA;IAoBX,CAAA,CAAA;;;;;UA1CgC,mBAAA,CAAA;;;;IAsBA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;IAAA,UAAA,EAAA,KAAA;;;;;;;;;;;;;;;;;;;IAAA,IAAA,aAAA,CAAA;MAAA,OAAA,EAAA;QAsBrB,IAAA,+BAoBX,CAAA,OAAA,EAAA,OAAA,CAAA;QAAA,UAAA,EAAA,KAAA;MApBgC,CAAA;MAAA,IAAA,EAAA;;QAAA,UAAA,EAAA,IAAA;MAAA,CAAA;MAsBrB,UAAA,EAAA;QAoBX,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;;MApB+B,CAAA;IAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;IAAA,IAAA,+BAAA,KAAA,EAAA,MAAA,CAAA;IAAA,UAAA,EAAA,IAAA;EAsBpB,CAAA;CAoBX,CAAA,EAAA,SAAA,CAAA;AApBqC,cAlE1B,qBAkE0B,EAlEL,YAkEK,CAlEL,WAkEK,CAAA;EAAA,QAAA,EAAA;UA9CrC,mBAAA,CAAA;;;EA8CqC,KAAA,EAAA;IAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;IAsB1B,UAAA,EAAA,IAAA;EAQG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;UAhGkB,mBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsBrB,uBAAqB,aAAA;;UAoBhC,mBAAA,CAAA;;;;;UApBgC,mBAAA,CAAA;;;;cAsBrB,sBAAoB,aAAA;;UAoB/B,mBAAA,CAAA;;;;;;;;;;;cApB+B,mBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsBpB,4BAA0B,aAAA;;UAoBrC,mBAAA,CAAA;;;;;UApBqC,mBAAA,CAAA;;;;;;;;;;;;cAsB1B,oBAAoB,eAAe;iBAQhC,0BAAA,WAAqC,eAAY"}

package/dist/knowledge/contracts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"contracts.js","names":["SchemaModel","ScalarTypeEnum","knowledgeContracts: Record<string, ContractSpec<any, any>>"],"sources":["../../src/knowledge/contracts.ts"],"sourcesContent":["import { ScalarTypeEnum, SchemaModel } from '@lssm/lib.schema';\nimport { defineCommand, defineQuery, type ContractSpec } from '../spec';\nimport type { SpecRegistry } from '../registry';\n\nconst KnowledgeSyncSchedule = new SchemaModel({\n  name: 'KnowledgeSyncSchedule',\n  fields: {\n    enabled: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    cron: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    intervalMs: { type: ScalarTypeEnum.Int_unsecure(), isOptional: true },\n  },\n});\n\nconst KnowledgeSourceRecord = new SchemaModel({\n  name: 'KnowledgeSourceRecord',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: false },\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    spaceKey: { type: ScalarTypeEnum.NonEmptyString(), isOptional: false },\n    spaceVersion: { type: ScalarTypeEnum.Int_unsecure(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    sourceType: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    syncSchedule: { type: KnowledgeSyncSchedule, isOptional: true },\n    lastSyncStatus: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    lastSyncAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    itemsProcessed: { type: ScalarTypeEnum.Int_unsecure(), isOptional: true },\n    createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n  },\n});\n\nconst CreateKnowledgeSourceInput = new SchemaModel({\n  name: 'CreateKnowledgeSourceInput',\n  fields: {\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    spaceKey: { type: ScalarTypeEnum.NonEmptyString(), isOptional: false },\n    spaceVersion: { type: ScalarTypeEnum.Int_unsecure(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    sourceType: { type: ScalarTypeEnum.NonEmptyString(), isOptional: false },\n    config: { type: ScalarTypeEnum.JSONObject(), isOptional: false },\n    syncSchedule: { type: KnowledgeSyncSchedule, isOptional: true },\n  },\n});\n\nconst UpdateKnowledgeSourceInput = new SchemaModel({\n  name: 'UpdateKnowledgeSourceInput',\n  fields: {\n    sourceId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    config: { type: ScalarTypeEnum.JSONObject(), isOptional: true },\n    syncSchedule: { type: KnowledgeSyncSchedule, isOptional: true },\n  },\n});\n\nconst DeleteKnowledgeSourceInput = new SchemaModel({\n  name: 'DeleteKnowledgeSourceInput',\n  fields: {\n    sourceId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nconst DeleteKnowledgeSourceOutput = new SchemaModel({\n  name: 'DeleteKnowledgeSourceOutput',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n  },\n});\n\nconst ListKnowledgeSourcesInput = new SchemaModel({\n  name: 'ListKnowledgeSourcesInput',\n  fields: {\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    spaceKey: { type: ScalarTypeEnum.NonEmptyString(), isOptional: true },\n  },\n});\n\nconst ListKnowledgeSourcesOutput = new SchemaModel({\n  name: 'ListKnowledgeSourcesOutput',\n  fields: {\n    sources: {\n      type: KnowledgeSourceRecord,\n      isOptional: false,\n      isArray: true,\n    },\n  },\n});\n\nconst TriggerKnowledgeSyncInput = new SchemaModel({\n  name: 'TriggerKnowledgeSyncInput',\n  fields: {\n    sourceId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nconst TriggerKnowledgeSyncOutput = new SchemaModel({\n  name: 'TriggerKnowledgeSyncOutput',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    itemsProcessed: { type: ScalarTypeEnum.Int_unsecure(), isOptional: true },\n    error: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n  },\n});\n\nexport const CreateKnowledgeSource = defineCommand({\n  meta: {\n    name: 'knowledge.source.create',\n    version: 1,\n    description: 'Create a knowledge source binding for a tenant.',\n    goal: 'Onboard a new knowledge ingestion source such as Notion or uploads.',\n    context:\n      'Used by Ops and App Studio to configure knowledge ingestion per tenant and space.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: CreateKnowledgeSourceInput,\n    output: KnowledgeSourceRecord,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const UpdateKnowledgeSource = defineCommand({\n  meta: {\n    name: 'knowledge.source.update',\n    version: 1,\n    description: 'Update metadata or configuration for a knowledge source.',\n    goal: 'Allow rotation of credentials, sync schedules, and labels.',\n    context:\n      'Supports editing how a tenant ingests knowledge (e.g., toggling sync cadence).',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: UpdateKnowledgeSourceInput,\n    output: KnowledgeSourceRecord,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const DeleteKnowledgeSource = defineCommand({\n  meta: {\n    name: 'knowledge.source.delete',\n    version: 1,\n    description: 'Delete a knowledge source binding for a tenant.',\n    goal: 'Remove obsolete or compromised knowledge ingestion paths.',\n    context:\n      'Ensures ephemeral or external sources can be removed cleanly without leaving residual bindings.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: DeleteKnowledgeSourceInput,\n    output: DeleteKnowledgeSourceOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const ListKnowledgeSources = defineQuery({\n  meta: {\n    name: 'knowledge.source.list',\n    version: 1,\n    description: 'List knowledge sources configured for a tenant.',\n    goal: 'Provide visibility into knowledge ingest configuration and schedules.',\n    context:\n      'Used by App Studio and Ops flows to surface knowledge sources and their health.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: ListKnowledgeSourcesInput,\n    output: ListKnowledgeSourcesOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.read', version: 1 }],\n  },\n});\n\nexport const TriggerKnowledgeSourceSync = defineCommand({\n  meta: {\n    name: 'knowledge.source.triggerSync',\n    version: 1,\n    description: 'Trigger an immediate sync for a knowledge source.',\n    goal: 'Support manual or automated sync retries for knowledge ingestion.',\n    context:\n      'Invoked by Ops tooling or monitors when knowledge content must be refreshed or reprocessed.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: TriggerKnowledgeSyncInput,\n    output: TriggerKnowledgeSyncOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const knowledgeContracts: Record<string, ContractSpec<any, any>> = {\n  CreateKnowledgeSource,\n  UpdateKnowledgeSource,\n  DeleteKnowledgeSource,\n  ListKnowledgeSources,\n  TriggerKnowledgeSourceSync,\n};\n\nexport function registerKnowledgeContracts(registry: SpecRegistry) {\n  return registry\n    .register(CreateKnowledgeSource)\n    .register(UpdateKnowledgeSource)\n    .register(DeleteKnowledgeSource)\n    .register(ListKnowledgeSources)\n    .register(TriggerKnowledgeSourceSync);\n}\n"],"mappings":";;;;AAIA,MAAM,wBAAwB,IAAIA,GAAY;CAC5C,MAAM;CACN,QAAQ;EACN,SAAS;GAAE,MAAMC,GAAe,SAAS;GAAE,YAAY;GAAO;EAC9D,MAAM;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EAClE,YAAY;GAAE,MAAMA,GAAe,cAAc;GAAE,YAAY;GAAM;EACtE;CACF,CAAC;AAEF,MAAM,wBAAwB,IAAID,GAAY;CAC5C,MAAM;CACN,QAAQ;EACN,IAAI;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EACpD,UAAU;GAAE,MAAMA,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,UAAU;GAAE,MAAMA,GAAe,gBAAgB;GAAE,YAAY;GAAO;EACtE,cAAc;GAAE,MAAMA,GAAe,cAAc;GAAE,YAAY;GAAO;EACxE,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACpE,YAAY;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACzE,cAAc;GAAE,MAAM;GAAuB,YAAY;GAAM;EAC/D,gBAAgB;GACd,MAAMA,GAAe,iBAAiB;GACtC,YAAY;GACb;EACD,YAAY;GAAE,MAAMA,GAAe,UAAU;GAAE,YAAY;GAAM;EACjE,gBAAgB;GAAE,MAAMA,GAAe,cAAc;GAAE,YAAY;GAAM;EACzE,WAAW;GAAE,MAAMA,GAAe,UAAU;GAAE,YAAY;GAAM;EAChE,WAAW;GAAE,MAAMA,GAAe,UAAU;GAAE,YAAY;GAAM;EACjE;CACF,CAAC;AAEF,MAAM,6BAA6B,IAAID,GAAY;CACjD,MAAM;CACN,QAAQ;EACN,UAAU;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,UAAU;GAAE,MAAMA,GAAe,gBAAgB;GAAE,YAAY;GAAO;EACtE,cAAc;GAAE,MAAMA,GAAe,cAAc;GAAE,YAAY;GAAO;EACxE,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAO;EACpE,YAAY;GAAE,MAAMA,GAAe,gBAAgB;GAAE,YAAY;GAAO;EACxE,QAAQ;GAAE,MAAMA,GAAe,YAAY;GAAE,YAAY;GAAO;EAChE,cAAc;GAAE,MAAM;GAAuB,YAAY;GAAM;EAChE;CACF,CAAC;AAEF,MAAM,6BAA6B,IAAID,GAAY;CACjD,MAAM;CACN,QAAQ;EACN,UAAU;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACnE,QAAQ;GAAE,MAAMA,GAAe,YAAY;GAAE,YAAY;GAAM;EAC/D,cAAc;GAAE,MAAM;GAAuB,YAAY;GAAM;EAChE;CACF,CAAC;AAEF,MAAM,6BAA6B,IAAID,GAAY;CACjD,MAAM;CACN,QAAQ,EACN,UAAU;EAAE,MAAMC,GAAe,IAAI;EAAE,YAAY;EAAO,EAC3D;CACF,CAAC;AAEF,MAAM,8BAA8B,IAAID,GAAY;CAClD,MAAM;CACN,QAAQ,EACN,SAAS;EAAE,MAAMC,GAAe,SAAS;EAAE,YAAY;EAAO,EAC/D;CACF,CAAC;AAEF,MAAM,4BAA4B,IAAID,GAAY;CAChD,MAAM;CACN,QAAQ;EACN,UAAU;GAAE,MAAMC,GAAe,IAAI;GAAE,YAAY;GAAO;EAC1D,UAAU;GAAE,MAAMA,GAAe,gBAAgB;GAAE,YAAY;GAAM;EACtE;CACF,CAAC;AAEF,MAAM,6BAA6B,IAAID,GAAY;CACjD,MAAM;CACN,QAAQ,EACN,SAAS;EACP,MAAM;EACN,YAAY;EACZ,SAAS;EACV,EACF;CACF,CAAC;AAEF,MAAM,4BAA4B,IAAIA,GAAY;CAChD,MAAM;CACN,QAAQ,EACN,UAAU;EAAE,MAAMC,GAAe,IAAI;EAAE,YAAY;EAAO,EAC3D;CACF,CAAC;AAEF,MAAM,6BAA6B,IAAID,GAAY;CACjD,MAAM;CACN,QAAQ;EACN,SAAS;GAAE,MAAMC,GAAe,SAAS;GAAE,YAAY;GAAO;EAC9D,gBAAgB;GAAE,MAAMA,GAAe,cAAc;GAAE,YAAY;GAAM;EACzE,OAAO;GAAE,MAAMA,GAAe,iBAAiB;GAAE,YAAY;GAAM;EACpE;CACF,CAAC;AAEF,MAAa,wBAAwB,cAAc;CACjD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,qBAAqB;EAC9B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA6B,SAAS;GAAG,CAAC;EAC9D;CACF,CAAC;AAEF,MAAa,wBAAwB,cAAc;CACjD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,qBAAqB;EAC9B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA6B,SAAS;GAAG,CAAC;EAC9D;CACF,CAAC;AAEF,MAAa,wBAAwB,cAAc;CACjD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,qBAAqB;EAC9B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA6B,SAAS;GAAG,CAAC;EAC9D;CACF,CAAC;AAEF,MAAa,uBAAuB,YAAY;CAC9C,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,qBAAqB;EAC9B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA2B,SAAS;GAAG,CAAC;EAC5D;CACF,CAAC;AAEF,MAAa,6BAA6B,cAAc;CACtD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,aAAa;EACb,MAAM;EACN,SACE;EACF,QAAQ,CAAC,qBAAqB;EAC9B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW;EACZ;CACD,IAAI;EACF,OAAO;EACP,QAAQ;EACT;CACD,QAAQ;EACN,MAAM;EACN,UAAU,CAAC;GAAE,MAAM;GAA6B,SAAS;GAAG,CAAC;EAC9D;CACF,CAAC;AAEF,MAAaC,qBAA6D;CACxE;CACA;CACA;CACA;CACA;CACD;AAED,SAAgB,2BAA2B,UAAwB;AACjE,QAAO,SACJ,SAAS,sBAAsB,CAC/B,SAAS,sBAAsB,CAC/B,SAAS,sBAAsB,CAC/B,SAAS,qBAAqB,CAC9B,SAAS,2BAA2B"}

package/dist/knowledge/docs/knowledge.docblock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"knowledge.docblock.d.ts","names":[],"sources":["../../../src/knowledge/docs/knowledge.docblock.ts"],"sourcesContent":[],"mappings":";;;cAGa,oCAAoC"}

package/dist/knowledge/docs/knowledge.docblock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"knowledge.docblock.js","names":["tech_contracts_knowledge_DocBlocks: DocBlock[]"],"sources":["../../../src/knowledge/docs/knowledge.docblock.ts"],"sourcesContent":["import type { DocBlock } from '@lssm/lib.contracts/docs';\nimport { registerDocBlocks } from '../../registry';\n\nexport const tech_contracts_knowledge_DocBlocks: DocBlock[] = [\n  {\n    id: 'docs.tech.contracts.knowledge',\n    title: 'Knowledge Layer',\n    summary:\n      'The knowledge layer turns unstructured inputs (uploads, email threads,',\n    kind: 'reference',\n    visibility: 'public',\n    route: '/docs/tech/contracts/knowledge',\n    tags: ['tech', 'contracts', 'knowledge'],\n    body: \"# Knowledge Layer\\n\\nThe knowledge layer turns unstructured inputs (uploads, email threads,\\nnotes) into searchable context for agents and workflows. The Pocket\\nFamily Office vertical ships a minimal but production-ready stack that\\ncovers ingestion, indexing, querying, and guardrails.\\n\\n## Knowledge Spaces\\n\\nKnowledge is organised via `KnowledgeSpaceSpec` definitions under\\n`packages/libs/contracts/src/knowledge/spaces`:\\n\\n- `knowledge.financial-docs` \\u2013 canonical invoices, bills, and contracts.\\n- `knowledge.email-threads` \\u2013 operational Gmail threads.\\n- `knowledge.support-faq` / `knowledge.product-canon` \\u2013 reusable shared\\n  spaces available to any vertical.\\n\\nEach space defines:\\n\\n- Ownership metadata (domain, owners, stability tags).\\n- Retention policy (TTL/archival).\\n- Access policy (trust level, automation write permissions).\\n- Indexing configuration (embedding model, chunk size, vector DB slot).\\n\\n## Sources & Bindings\\n\\n- `KnowledgeSourceConfig` records tenant-specific connections (bucket,\\n  Gmail labels, sync cadence). Pocket Family Office provides sample\\n  configs in `knowledge/sources.sample.ts`.\\n- `AppKnowledgeBinding` associates spaces with workflows/agents and adds\\n  per-tenant constraints (rate limits, scopes).\\n\\nValidation ensures that:\\n\\n- All referenced spaces exist in the registry.\\n- At least one source is configured per binding.\\n- External/ephemeral spaces trigger warnings for policy-sensitive flows.\\n\\n## Ingestion Pipeline\\n\\nImplemented in `packages/libs/contracts/src/knowledge/ingestion`:\\n\\n1. **DocumentProcessor** \\u2013 pluggable MIME extractors producing\\n   `DocumentFragment`s.\\n2. **EmbeddingService** \\u2013 batches fragments through an `EmbeddingProvider`\\n   (Mistral in the reference implementation).\\n3. **VectorIndexer** \\u2013 upserts fragments into a `VectorStoreProvider`\\n   (Qdrant in production, with in-memory implementations for tests).\\n4. **Adapters**\\n   - `GmailIngestionAdapter`: list threads \\u2192 convert to raw documents \\u2192\\n     index.\\n   - `StorageIngestionAdapter`: fetch object from storage provider \\u2192\\n     index.\\n\\nBackground jobs (see `jobs/`) orchestrate ingestion via Cloud Tasks /\\nPub/Sub or in-memory workers. Handlers:\\n\\n- `storage-document-handler` \\u2013 resolves storage object + indexes.\\n- `gmail-sync-handler` \\u2013 syncs threads based on label/date filters.\\n\\n## Query Service\\n\\n`KnowledgeQueryService` performs retrieval-augmented generation:\\n\\n1. Embed the user query using the configured provider.\\n2. Search the vector store for top-k matches.\\n3. Compose prompts combining system instructions + contextual snippets.\\n4. Invoke the LLM provider (Mistral) and return the answer plus\\n   references and token usage.\\n\\nThe service is designed for tooling: workflows can execute it directly\\nor through custom operations (see `pfo.summary.generate` contract).\\n\\n## Guardrails\\n\\n- Automation can only write to spaces where `automationWritable` is true.\\n- Canonical spaces default to high trust; external/ephemeral spaces are\\n  flagged during validation.\\n- Telemetry captures query volumes per tenant + space.\\n\\n## Extending\\n\\n1. Define a new `KnowledgeSpaceSpec` with indexing/retention policies.\\n2. Add sources pointing to storage providers or APIs.\\n3. Register adapters if ingestion requires bespoke logic.\\n4. Reference the space in blueprints (`AppKnowledgeBinding`) and update\\n   workflows/agents accordingly.\\n\\nThe Pocket Family Office tests (`tests/pocket-family-office.test.ts`)\\nshow how to wire the ingestion pipeline, index a document, and run an\\nend-to-end knowledge query using in-memory providers.\\n## Knowledge Spaces & Guardrails\\n\\nKnowledge surfaces (`KnowledgeSpaceSpec`) describe curated corpora that agents and workflows can consult. Tenant bindings (`AppKnowledgeBinding`) declare which spaces are active, who can use them, and optional usage constraints.\\n\\n### Binding recap\\n\\n- `spaceKey` / `spaceVersion`: pointer to the `KnowledgeSpaceSpec`\\n- `scope.workflows` / `scope.agents`: explicit allow-lists for consumers\\n- `constraints.maxTokensPerQuery` & `constraints.maxQueriesPerMinute`: throttling knobs for LLM-backed search\\n- `required`: mark the binding as blocking (defaults to `true`)\\n\\nAt runtime, `ResolvedAppConfig.knowledge` contains `ResolvedKnowledge` entries with the bound space, active sources, and the binding metadata above.\\n\\n### KnowledgeAccessGuard\\n\\n`KnowledgeAccessGuard` (`@lssm/lib.contracts/knowledge/runtime`) centralises the access checks that must run before any workflow/agent reads or mutates a knowledge space.\\n\\n```ts\\nimport { KnowledgeAccessGuard } from '@lssm/lib.contracts/knowledge/runtime';\\n\\nconst guard = new KnowledgeAccessGuard({\\n  disallowWriteCategories: ['external', 'ephemeral'], // default\\n  requireWorkflowBinding: true,\\n  requireAgentBinding: false,\\n});\\n\\nconst result = guard.checkAccess(resolvedKnowledge, {\\n  tenantId,\\n  appId,\\n  workflowName: 'order-processing',\\n  operation: 'read', // or 'write' / 'search'\\n}, resolvedAppConfig);\\n\\nif (!result.allowed) {\\n  throw new Error(result.reason);\\n}\\n```\\n\\nKey behaviours:\\n\\n- **Binding**: rejects access when the space is not present in the resolved tenant config.\\n- **Category guardrails**: blocks writes to `external` and `ephemeral` spaces by default; allows reads but emits warnings for `ephemeral`.\\n- **Workflow/agent scoping**: when `requireWorkflowBinding` or `requireAgentBinding` is enabled, only explicitly authorised consumers may access the space.\\n\\nUse the guard inside workflow operations or agent resolvers to guarantee multi-tenant isolation and honour data governance rules.\\n\\n\",\n  },\n];\nregisterDocBlocks(tech_contracts_knowledge_DocBlocks);\n"],"mappings":";;;;AAGA,MAAaA,qCAAiD,CAC5D;CACE,IAAI;CACJ,OAAO;CACP,SACE;CACF,MAAM;CACN,YAAY;CACZ,OAAO;CACP,MAAM;EAAC;EAAQ;EAAa;EAAY;CACxC,MAAM;CACP,CACF;AACD,kBAAkB,mCAAmC"}

package/dist/knowledge/ingestion/document-processor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"document-processor.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/document-processor.ts"],"sourcesContent":[],"mappings":";UAEiB,WAAA;EAAA,EAAA,EAAA,MAAA;EAOA,QAAA,EAAA,MAAA;EAOZ,IAAA,EAXG,UAWM;EAAW,QAAA,CAAA,EAVZ,MAUY,CAAA,MAAA,EAAA,MAAA,CAAA;;AAAgB,UAPxB,gBAAA,CAOwB;EAAO,EAAA,EAAA,MAAA;EAEnC,UAAA,EAAA,MAAA;EAQoC,IAAA,EAAA,MAAA;EAIvB,QAAA,CAAA,EAjBb,MAiBa,CAAA,MAAA,EAAA,MAAA,CAAA;;KAdrB,SAAA,GAcmC,CAAA,KAAA,EAdf,WAce,EAAA,GAdC,OAcD,CAdS,gBAcT,EAAA,CAAA;AAAO,cAZlC,iBAAA,CAYkC;;;iDAJE;oBAIvB,cAAc,QAAQ"}

package/dist/knowledge/ingestion/document-processor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"document-processor.js","names":[],"sources":["../../../src/knowledge/ingestion/document-processor.ts"],"sourcesContent":["import { Buffer } from 'node:buffer';\n\nexport interface RawDocument {\n  id: string;\n  mimeType: string;\n  data: Uint8Array;\n  metadata?: Record<string, string>;\n}\n\nexport interface DocumentFragment {\n  id: string;\n  documentId: string;\n  text: string;\n  metadata?: Record<string, string>;\n}\n\ntype Extractor = (input: RawDocument) => Promise<DocumentFragment[]>;\n\nexport class DocumentProcessor {\n  private readonly extractors = new Map<string, Extractor>();\n\n  constructor() {\n    this.registerExtractor('text/plain', this.extractText);\n    this.registerExtractor('application/json', this.extractJson);\n  }\n\n  registerExtractor(mimeType: string, extractor: Extractor): void {\n    this.extractors.set(mimeType.toLowerCase(), extractor);\n  }\n\n  async process(document: RawDocument): Promise<DocumentFragment[]> {\n    const extractor =\n      this.extractors.get(document.mimeType.toLowerCase()) ??\n      this.extractors.get('*/*');\n    if (!extractor) {\n      throw new Error(\n        `No extractor registered for mime type ${document.mimeType}`\n      );\n    }\n    const fragments = await extractor(document);\n    if (fragments.length === 0) {\n      return [\n        {\n          id: `${document.id}:0`,\n          documentId: document.id,\n          text: '',\n          metadata: document.metadata,\n        },\n      ];\n    }\n    return fragments;\n  }\n\n  private async extractText(\n    document: RawDocument\n  ): Promise<DocumentFragment[]> {\n    const text = Buffer.from(document.data).toString('utf-8');\n    return [\n      {\n        id: `${document.id}:0`,\n        documentId: document.id,\n        text,\n        metadata: document.metadata,\n      },\n    ];\n  }\n\n  private async extractJson(\n    document: RawDocument\n  ): Promise<DocumentFragment[]> {\n    const text = Buffer.from(document.data).toString('utf-8');\n    try {\n      const json = JSON.parse(text);\n      return [\n        {\n          id: `${document.id}:0`,\n          documentId: document.id,\n          text: JSON.stringify(json, null, 2),\n          metadata: {\n            ...document.metadata,\n            contentType: 'application/json',\n          },\n        },\n      ];\n    } catch {\n      return this.extractText(document);\n    }\n  }\n}\n"],"mappings":";;;AAkBA,IAAa,oBAAb,MAA+B;CAC7B,AAAiB,6BAAa,IAAI,KAAwB;CAE1D,cAAc;AACZ,OAAK,kBAAkB,cAAc,KAAK,YAAY;AACtD,OAAK,kBAAkB,oBAAoB,KAAK,YAAY;;CAG9D,kBAAkB,UAAkB,WAA4B;AAC9D,OAAK,WAAW,IAAI,SAAS,aAAa,EAAE,UAAU;;CAGxD,MAAM,QAAQ,UAAoD;EAChE,MAAM,YACJ,KAAK,WAAW,IAAI,SAAS,SAAS,aAAa,CAAC,IACpD,KAAK,WAAW,IAAI,MAAM;AAC5B,MAAI,CAAC,UACH,OAAM,IAAI,MACR,yCAAyC,SAAS,WACnD;EAEH,MAAM,YAAY,MAAM,UAAU,SAAS;AAC3C,MAAI,UAAU,WAAW,EACvB,QAAO,CACL;GACE,IAAI,GAAG,SAAS,GAAG;GACnB,YAAY,SAAS;GACrB,MAAM;GACN,UAAU,SAAS;GACpB,CACF;AAEH,SAAO;;CAGT,MAAc,YACZ,UAC6B;EAC7B,MAAM,OAAO,OAAO,KAAK,SAAS,KAAK,CAAC,SAAS,QAAQ;AACzD,SAAO,CACL;GACE,IAAI,GAAG,SAAS,GAAG;GACnB,YAAY,SAAS;GACrB;GACA,UAAU,SAAS;GACpB,CACF;;CAGH,MAAc,YACZ,UAC6B;EAC7B,MAAM,OAAO,OAAO,KAAK,SAAS,KAAK,CAAC,SAAS,QAAQ;AACzD,MAAI;GACF,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,UAAO,CACL;IACE,IAAI,GAAG,SAAS,GAAG;IACnB,YAAY,SAAS;IACrB,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE;IACnC,UAAU;KACR,GAAG,SAAS;KACZ,aAAa;KACd;IACF,CACF;UACK;AACN,UAAO,KAAK,YAAY,SAAS"}

package/dist/knowledge/ingestion/embedding-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"embedding-service.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/embedding-service.ts"],"sourcesContent":[],"mappings":";;;;cAOa,gBAAA;;EAAA,iBAAA,SAAgB;EAIL,WAAA,CAAA,QAAA,EAAA,iBAAA,EAAA,SAAA,CAAA,EAAA,MAAA;EAMT,cAAA,CAAA,SAAA,EAAA,gBAAA,EAAA,CAAA,EACV,OADU,CACF,eADE,EAAA,CAAA"}

package/dist/knowledge/ingestion/embedding-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"embedding-service.js","names":["results: EmbeddingResult[]","documents: EmbeddingDocument[]"],"sources":["../../../src/knowledge/ingestion/embedding-service.ts"],"sourcesContent":["import type {\n  EmbeddingDocument,\n  EmbeddingProvider,\n  EmbeddingResult,\n} from '../../integrations/providers/embedding';\nimport type { DocumentFragment } from './document-processor';\n\nexport class EmbeddingService {\n  private readonly provider: EmbeddingProvider;\n  private readonly batchSize: number;\n\n  constructor(provider: EmbeddingProvider, batchSize = 16) {\n    this.provider = provider;\n    this.batchSize = batchSize;\n  }\n\n  async embedFragments(\n    fragments: DocumentFragment[]\n  ): Promise<EmbeddingResult[]> {\n    const results: EmbeddingResult[] = [];\n    for (let i = 0; i < fragments.length; i += this.batchSize) {\n      const slice = fragments.slice(i, i + this.batchSize);\n      const documents: EmbeddingDocument[] = slice.map((fragment) => ({\n        id: fragment.id,\n        text: fragment.text,\n        metadata: fragment.metadata,\n      }));\n      const embeddings = await this.provider.embedDocuments(documents);\n      results.push(...embeddings);\n    }\n    return results;\n  }\n}\n"],"mappings":";AAOA,IAAa,mBAAb,MAA8B;CAC5B,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA6B,YAAY,IAAI;AACvD,OAAK,WAAW;AAChB,OAAK,YAAY;;CAGnB,MAAM,eACJ,WAC4B;EAC5B,MAAMA,UAA6B,EAAE;AACrC,OAAK,IAAI,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK,KAAK,WAAW;GAEzD,MAAMC,YADQ,UAAU,MAAM,GAAG,IAAI,KAAK,UAAU,CACP,KAAK,cAAc;IAC9D,IAAI,SAAS;IACb,MAAM,SAAS;IACf,UAAU,SAAS;IACpB,EAAE;GACH,MAAM,aAAa,MAAM,KAAK,SAAS,eAAe,UAAU;AAChE,WAAQ,KAAK,GAAG,WAAW;;AAE7B,SAAO"}

package/dist/knowledge/ingestion/gmail-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-adapter.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/gmail-adapter.ts"],"sourcesContent":[],"mappings":";;;;;;cAQa,qBAAA;;EAAA,iBAAA,SAAqB;EAEN,iBAAA,UAAA;EACI,iBAAA,OAAA;EACC,WAAA,CAAA,KAAA,EAFL,oBAEK,EAAA,SAAA,EADD,iBACC,EAAA,UAAA,EAAA,gBAAA,EAAA,OAAA,EACH,aADG;EACH,WAAA,CAAA,KAAA,CAAA,EAIlB,UAJkB,CAIP,oBAJO,CAAA,aAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,EAIgC,OAJhC,CAAA,IAAA,CAAA;EAIP,YAAA,CAAA,MAAA,EAQM,WARN,CAAA,EAQiB,OARjB,CAAA,IAAA,CAAA;EAAX,QAAA,aAAA"}

package/dist/knowledge/ingestion/gmail-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-adapter.js","names":["gmail: EmailInboundProvider","processor: DocumentProcessor","embeddings: EmbeddingService","indexer: VectorIndexer"],"sources":["../../../src/knowledge/ingestion/gmail-adapter.ts"],"sourcesContent":["import type {\n  EmailInboundProvider,\n  EmailThread,\n} from '../../integrations/providers/email';\nimport type { DocumentProcessor, RawDocument } from './document-processor';\nimport type { EmbeddingService } from './embedding-service';\nimport type { VectorIndexer } from './vector-indexer';\n\nexport class GmailIngestionAdapter {\n  constructor(\n    private readonly gmail: EmailInboundProvider,\n    private readonly processor: DocumentProcessor,\n    private readonly embeddings: EmbeddingService,\n    private readonly indexer: VectorIndexer\n  ) {}\n\n  async syncThreads(\n    query?: Parameters<EmailInboundProvider['listThreads']>[0]\n  ) {\n    const threads = await this.gmail.listThreads(query);\n    for (const thread of threads) {\n      await this.ingestThread(thread);\n    }\n  }\n\n  async ingestThread(thread: EmailThread) {\n    const document = this.toRawDocument(thread);\n    const fragments = await this.processor.process(document);\n    const embeddings = await this.embeddings.embedFragments(fragments);\n    await this.indexer.upsert(fragments, embeddings);\n  }\n\n  private toRawDocument(thread: EmailThread): RawDocument {\n    const content = composeThreadText(thread);\n    return {\n      id: thread.id,\n      mimeType: 'text/plain',\n      data: Buffer.from(content, 'utf-8'),\n      metadata: {\n        subject: thread.subject ?? '',\n        participants: thread.participants.map((p) => p.email).join(', '),\n        updatedAt: thread.updatedAt.toISOString(),\n      },\n    };\n  }\n}\n\nfunction composeThreadText(thread: EmailThread): string {\n  const header = [\n    `Subject: ${thread.subject ?? ''}`,\n    `Snippet: ${thread.snippet ?? ''}`,\n  ];\n  const messageTexts = thread.messages.map((message) => {\n    const parts = [\n      `From: ${formatAddress(message.from)}`,\n      `To: ${message.to.map(formatAddress).join(', ')}`,\n    ];\n    if (message.sentAt) {\n      parts.push(`Date: ${message.sentAt.toISOString()}`);\n    }\n    const body = message.textBody ?? stripHtml(message.htmlBody ?? '');\n    return `${parts.join('\\n')}\\n\\n${body ?? ''}`;\n  });\n  return [...header, ...messageTexts].join('\\n\\n---\\n\\n');\n}\n\nfunction formatAddress(address: { email: string; name?: string }): string {\n  return address.name ? `${address.name} <${address.email}>` : address.email;\n}\n\nfunction stripHtml(html: string): string {\n  return html.replace(/<[^>]+>/g, ' ');\n}\n"],"mappings":";AAQA,IAAa,wBAAb,MAAmC;CACjC,YACE,AAAiBA,OACjB,AAAiBC,WACjB,AAAiBC,YACjB,AAAiBC,SACjB;EAJiB;EACA;EACA;EACA;;CAGnB,MAAM,YACJ,OACA;EACA,MAAM,UAAU,MAAM,KAAK,MAAM,YAAY,MAAM;AACnD,OAAK,MAAM,UAAU,QACnB,OAAM,KAAK,aAAa,OAAO;;CAInC,MAAM,aAAa,QAAqB;EACtC,MAAM,WAAW,KAAK,cAAc,OAAO;EAC3C,MAAM,YAAY,MAAM,KAAK,UAAU,QAAQ,SAAS;EACxD,MAAM,aAAa,MAAM,KAAK,WAAW,eAAe,UAAU;AAClE,QAAM,KAAK,QAAQ,OAAO,WAAW,WAAW;;CAGlD,AAAQ,cAAc,QAAkC;EACtD,MAAM,UAAU,kBAAkB,OAAO;AACzC,SAAO;GACL,IAAI,OAAO;GACX,UAAU;GACV,MAAM,OAAO,KAAK,SAAS,QAAQ;GACnC,UAAU;IACR,SAAS,OAAO,WAAW;IAC3B,cAAc,OAAO,aAAa,KAAK,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK;IAChE,WAAW,OAAO,UAAU,aAAa;IAC1C;GACF;;;AAIL,SAAS,kBAAkB,QAA6B;CACtD,MAAM,SAAS,CACb,YAAY,OAAO,WAAW,MAC9B,YAAY,OAAO,WAAW,KAC/B;CACD,MAAM,eAAe,OAAO,SAAS,KAAK,YAAY;EACpD,MAAM,QAAQ,CACZ,SAAS,cAAc,QAAQ,KAAK,IACpC,OAAO,QAAQ,GAAG,IAAI,cAAc,CAAC,KAAK,KAAK,GAChD;AACD,MAAI,QAAQ,OACV,OAAM,KAAK,SAAS,QAAQ,OAAO,aAAa,GAAG;EAErD,MAAM,OAAO,QAAQ,YAAY,UAAU,QAAQ,YAAY,GAAG;AAClE,SAAO,GAAG,MAAM,KAAK,KAAK,CAAC,MAAM,QAAQ;GACzC;AACF,QAAO,CAAC,GAAG,QAAQ,GAAG,aAAa,CAAC,KAAK,cAAc;;AAGzD,SAAS,cAAc,SAAmD;AACxE,QAAO,QAAQ,OAAO,GAAG,QAAQ,KAAK,IAAI,QAAQ,MAAM,KAAK,QAAQ;;AAGvE,SAAS,UAAU,MAAsB;AACvC,QAAO,KAAK,QAAQ,YAAY,IAAI"}

package/dist/knowledge/ingestion/storage-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-adapter.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/storage-adapter.ts"],"sourcesContent":[],"mappings":";;;;;;cAKa,uBAAA;;EAAA,iBAAA,UAAuB;EAEJ,iBAAA,OAAA;EACC,WAAA,CAAA,SAAA,EADD,iBACC,EAAA,UAAA,EAAA,gBAAA,EAAA,OAAA,EACH,aADG;EACH,YAAA,CAAA,MAAA,EAGD,eAHC,CAAA,EAGiB,OAHjB,CAAA,IAAA,CAAA"}

package/dist/knowledge/ingestion/storage-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-adapter.js","names":["processor: DocumentProcessor","embeddings: EmbeddingService","indexer: VectorIndexer"],"sources":["../../../src/knowledge/ingestion/storage-adapter.ts"],"sourcesContent":["import type { GetObjectResult } from '../../integrations/providers/storage';\nimport type { DocumentProcessor } from './document-processor';\nimport type { EmbeddingService } from './embedding-service';\nimport type { VectorIndexer } from './vector-indexer';\n\nexport class StorageIngestionAdapter {\n  constructor(\n    private readonly processor: DocumentProcessor,\n    private readonly embeddings: EmbeddingService,\n    private readonly indexer: VectorIndexer\n  ) {}\n\n  async ingestObject(object: GetObjectResult): Promise<void> {\n    if (!('data' in object) || !object.data) {\n      throw new Error('Storage ingestion requires object data');\n    }\n\n    const raw = {\n      id: object.key,\n      mimeType: object.contentType ?? 'application/octet-stream',\n      data: object.data,\n      metadata: {\n        bucket: object.bucket,\n        checksum: object.checksum ?? '',\n      },\n    };\n\n    const fragments = await this.processor.process(raw);\n    const embeddings = await this.embeddings.embedFragments(fragments);\n    await this.indexer.upsert(fragments, embeddings);\n  }\n}\n"],"mappings":";AAKA,IAAa,0BAAb,MAAqC;CACnC,YACE,AAAiBA,WACjB,AAAiBC,YACjB,AAAiBC,SACjB;EAHiB;EACA;EACA;;CAGnB,MAAM,aAAa,QAAwC;AACzD,MAAI,EAAE,UAAU,WAAW,CAAC,OAAO,KACjC,OAAM,IAAI,MAAM,yCAAyC;EAG3D,MAAM,MAAM;GACV,IAAI,OAAO;GACX,UAAU,OAAO,eAAe;GAChC,MAAM,OAAO;GACb,UAAU;IACR,QAAQ,OAAO;IACf,UAAU,OAAO,YAAY;IAC9B;GACF;EAED,MAAM,YAAY,MAAM,KAAK,UAAU,QAAQ,IAAI;EACnD,MAAM,aAAa,MAAM,KAAK,WAAW,eAAe,UAAU;AAClE,QAAM,KAAK,QAAQ,OAAO,WAAW,WAAW"}

package/dist/knowledge/ingestion/vector-indexer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vector-indexer.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/vector-indexer.ts"],"sourcesContent":[],"mappings":";;;;;UAOiB,iBAAA;;EAAA,SAAA,CAAA,EAAA,MAAA;EAMJ,QAAA,CAAA,EAHA,MAGa,CAAA,MAAA,EAAA,MAAA,CAAA;;AAI2B,cAJxC,aAAA,CAIwC;EAMtC,iBAAA,QAAA;EACC,iBAAA,MAAA;EACX,WAAA,CAAA,QAAA,EARmB,mBAQnB,EAAA,MAAA,EARgD,iBAQhD;EAAO,MAAA,CAAA,SAAA,EAFG,gBAEH,EAAA,EAAA,UAAA,EADI,eACJ,EAAA,CAAA,EAAP,OAAO,CAAA,IAAA,CAAA"}

package/dist/knowledge/ingestion/vector-indexer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vector-indexer.js","names":["request: VectorUpsertRequest"],"sources":["../../../src/knowledge/ingestion/vector-indexer.ts"],"sourcesContent":["import type {\n  VectorStoreProvider,\n  VectorUpsertRequest,\n} from '../../integrations/providers/vector-store';\nimport type { EmbeddingResult } from '../../integrations/providers/embedding';\nimport type { DocumentFragment } from './document-processor';\n\nexport interface VectorIndexConfig {\n  collection: string;\n  namespace?: string;\n  metadata?: Record<string, string>;\n}\n\nexport class VectorIndexer {\n  private readonly provider: VectorStoreProvider;\n  private readonly config: VectorIndexConfig;\n\n  constructor(provider: VectorStoreProvider, config: VectorIndexConfig) {\n    this.provider = provider;\n    this.config = config;\n  }\n\n  async upsert(\n    fragments: DocumentFragment[],\n    embeddings: EmbeddingResult[]\n  ): Promise<void> {\n    const documents = embeddings.map((embedding) => {\n      const fragment = fragments.find((f) => f.id === embedding.id);\n      return {\n        id: embedding.id,\n        vector: embedding.vector,\n        payload: {\n          ...this.config.metadata,\n          ...(fragment?.metadata ?? {}),\n          documentId: fragment?.documentId,\n        },\n        namespace: this.config.namespace,\n      };\n    });\n\n    const request: VectorUpsertRequest = {\n      collection: this.config.collection,\n      documents,\n    };\n\n    await this.provider.upsert(request);\n  }\n}\n"],"mappings":";AAaA,IAAa,gBAAb,MAA2B;CACzB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA+B,QAA2B;AACpE,OAAK,WAAW;AAChB,OAAK,SAAS;;CAGhB,MAAM,OACJ,WACA,YACe;EACf,MAAM,YAAY,WAAW,KAAK,cAAc;GAC9C,MAAM,WAAW,UAAU,MAAM,MAAM,EAAE,OAAO,UAAU,GAAG;AAC7D,UAAO;IACL,IAAI,UAAU;IACd,QAAQ,UAAU;IAClB,SAAS;KACP,GAAG,KAAK,OAAO;KACf,GAAI,UAAU,YAAY,EAAE;KAC5B,YAAY,UAAU;KACvB;IACD,WAAW,KAAK,OAAO;IACxB;IACD;EAEF,MAAMA,UAA+B;GACnC,YAAY,KAAK,OAAO;GACxB;GACD;AAED,QAAM,KAAK,SAAS,OAAO,QAAQ"}

package/dist/knowledge/query/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","names":[],"sources":["../../../src/knowledge/query/service.ts"],"sourcesContent":[],"mappings":";;;;;UAWiB,oBAAA;;EAAA,SAAA,CAAA,EAAA,MAAA;EAOA,IAAA,CAAA,EAAA,MAAA;EAQJ,YAAA,CAAA,EAAA,MAAA;;AAQI,UAhBA,eAAA,CAgBA;EACR,MAAA,EAAA,MAAA;EACG,UAAA,EAAA,CAhBG,kBAgBH,GAAA;IAQ6B,IAAA,CAAA,EAAA,MAAA;EAAR,CAAA,CAAA,EAAA;EAAO,KAAA,CAAA,EArB9B,WAqB8B,CAAA,OAAA,CAAA;;cAlB3B,qBAAA;;;;;0BAOG,gCACC,0BACR,qBACG;2BAQqB,QAAQ"}

package/dist/knowledge/query/service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../../src/knowledge/query/service.ts"],"sourcesContent":["import type { EmbeddingProvider } from '../../integrations/providers/embedding';\nimport type {\n  VectorStoreProvider,\n  VectorSearchResult,\n} from '../../integrations/providers/vector-store';\nimport type {\n  LLMProvider,\n  LLMMessage,\n  LLMResponse,\n} from '../../integrations/providers/llm';\n\nexport interface KnowledgeQueryConfig {\n  collection: string;\n  namespace?: string;\n  topK?: number;\n  systemPrompt?: string;\n}\n\nexport interface KnowledgeAnswer {\n  answer: string;\n  references: (VectorSearchResult & {\n    text?: string;\n  })[];\n  usage?: LLMResponse['usage'];\n}\n\nexport class KnowledgeQueryService {\n  private readonly embeddings: EmbeddingProvider;\n  private readonly vectorStore: VectorStoreProvider;\n  private readonly llm: LLMProvider;\n  private readonly config: KnowledgeQueryConfig;\n\n  constructor(\n    embeddings: EmbeddingProvider,\n    vectorStore: VectorStoreProvider,\n    llm: LLMProvider,\n    config: KnowledgeQueryConfig\n  ) {\n    this.embeddings = embeddings;\n    this.vectorStore = vectorStore;\n    this.llm = llm;\n    this.config = config;\n  }\n\n  async query(question: string): Promise<KnowledgeAnswer> {\n    const embedding = await this.embeddings.embedQuery(question);\n    const results = await this.vectorStore.search({\n      collection: this.config.collection,\n      vector: embedding.vector,\n      topK: this.config.topK ?? 5,\n      namespace: this.config.namespace,\n      filter: undefined,\n    });\n    const context = buildContext(results);\n    const messages = this.buildMessages(question, context);\n    const response = await this.llm.chat(messages);\n    return {\n      answer: response.message.content\n        .map((part) => ('text' in part ? part.text : ''))\n        .join(''),\n      references: results.map((result) => ({\n        ...result,\n        text: extractText(result),\n      })),\n      usage: response.usage,\n    };\n  }\n\n  private buildMessages(question: string, context: string): LLMMessage[] {\n    const systemPrompt =\n      this.config.systemPrompt ??\n      'You are a knowledge assistant that answers questions using the provided context. Cite relevant sources if possible.';\n    return [\n      {\n        role: 'system',\n        content: [{ type: 'text', text: systemPrompt }],\n      },\n      {\n        role: 'user',\n        content: [\n          {\n            type: 'text',\n            text: `Question:\\n${question}\\n\\nContext:\\n${context}`,\n          },\n        ],\n      },\n    ];\n  }\n}\n\nfunction buildContext(results: VectorSearchResult[]): string {\n  if (results.length === 0) {\n    return 'No relevant documents found.';\n  }\n  return results\n    .map((result, index) => {\n      const text = extractText(result);\n      return `Source ${index + 1} (score: ${result.score.toFixed(3)}):\\n${text}`;\n    })\n    .join('\\n\\n');\n}\n\nfunction extractText(result: VectorSearchResult): string {\n  const payload = result.payload ?? {};\n  if (typeof payload.text === 'string') return payload.text;\n  if (typeof payload.content === 'string') return payload.content;\n  return JSON.stringify(payload);\n}\n"],"mappings":";AA0BA,IAAa,wBAAb,MAAmC;CACjC,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YACE,YACA,aACA,KACA,QACA;AACA,OAAK,aAAa;AAClB,OAAK,cAAc;AACnB,OAAK,MAAM;AACX,OAAK,SAAS;;CAGhB,MAAM,MAAM,UAA4C;EACtD,MAAM,YAAY,MAAM,KAAK,WAAW,WAAW,SAAS;EAC5D,MAAM,UAAU,MAAM,KAAK,YAAY,OAAO;GAC5C,YAAY,KAAK,OAAO;GACxB,QAAQ,UAAU;GAClB,MAAM,KAAK,OAAO,QAAQ;GAC1B,WAAW,KAAK,OAAO;GACvB,QAAQ;GACT,CAAC;EACF,MAAM,UAAU,aAAa,QAAQ;EACrC,MAAM,WAAW,KAAK,cAAc,UAAU,QAAQ;EACtD,MAAM,WAAW,MAAM,KAAK,IAAI,KAAK,SAAS;AAC9C,SAAO;GACL,QAAQ,SAAS,QAAQ,QACtB,KAAK,SAAU,UAAU,OAAO,KAAK,OAAO,GAAI,CAChD,KAAK,GAAG;GACX,YAAY,QAAQ,KAAK,YAAY;IACnC,GAAG;IACH,MAAM,YAAY,OAAO;IAC1B,EAAE;GACH,OAAO,SAAS;GACjB;;CAGH,AAAQ,cAAc,UAAkB,SAA+B;AAIrE,SAAO,CACL;GACE,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAQ,MAL5B,KAAK,OAAO,gBACZ;IAIgD,CAAC;GAChD,EACD;GACE,MAAM;GACN,SAAS,CACP;IACE,MAAM;IACN,MAAM,cAAc,SAAS,gBAAgB;IAC9C,CACF;GACF,CACF;;;AAIL,SAAS,aAAa,SAAuC;AAC3D,KAAI,QAAQ,WAAW,EACrB,QAAO;AAET,QAAO,QACJ,KAAK,QAAQ,UAAU;EACtB,MAAM,OAAO,YAAY,OAAO;AAChC,SAAO,UAAU,QAAQ,EAAE,WAAW,OAAO,MAAM,QAAQ,EAAE,CAAC,MAAM;GACpE,CACD,KAAK,OAAO;;AAGjB,SAAS,YAAY,QAAoC;CACvD,MAAM,UAAU,OAAO,WAAW,EAAE;AACpC,KAAI,OAAO,QAAQ,SAAS,SAAU,QAAO,QAAQ;AACrD,KAAI,OAAO,QAAQ,YAAY,SAAU,QAAO,QAAQ;AACxD,QAAO,KAAK,UAAU,QAAQ"}

package/dist/knowledge/runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.d.ts","names":[],"sources":["../../src/knowledge/runtime.ts"],"sourcesContent":[],"mappings":";;;;UAMiB,sBAAA;;EAAA,KAAA,EAAA,MAAA;EASA,WAAA,CAAA,EAAA,MAAA;EAMA,YAAA,CAAA,EAAA,MAAA;EAQJ,SAAA,CAAA,EAAA,MAAA;EAKU,SAAA,EAAA,MAAA,GAAA,OAAA,GAAA,QAAA;;AAUV,UA7BI,qBAAA,CA6BJ;EACE,OAAA,EAAA,OAAA;EACV,MAAA,CAAA,EAAA,MAAA;EAAqB,QAAA,CAAA,EAAA,OAAA,GAAA,SAAA;;UAzBT,2BAAA;4BACW;;;;cAOf,oBAAA;;;;wBAKU;4BASL,4BACL,mCACE,oBACV"}

package/dist/knowledge/runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.js","names":["DEFAULT_DISALLOWED_WRITE: KnowledgeCategory[]"],"sources":["../../src/knowledge/runtime.ts"],"sourcesContent":["import type {\n  ResolvedAppConfig,\n  ResolvedKnowledge,\n} from '../app-config/runtime';\nimport type { KnowledgeCategory } from './spec';\n\nexport interface KnowledgeAccessContext {\n  tenantId: string;\n  appId: string;\n  environment?: string;\n  workflowName?: string;\n  agentName?: string;\n  operation: 'read' | 'write' | 'search';\n}\n\nexport interface KnowledgeAccessResult {\n  allowed: boolean;\n  reason?: string;\n  severity?: 'error' | 'warning';\n}\n\nexport interface KnowledgeAccessGuardOptions {\n  disallowWriteCategories?: KnowledgeCategory[];\n  requireWorkflowBinding?: boolean;\n  requireAgentBinding?: boolean;\n}\n\nconst DEFAULT_DISALLOWED_WRITE: KnowledgeCategory[] = ['external', 'ephemeral'];\n\nexport class KnowledgeAccessGuard {\n  private readonly disallowedWrite: Set<KnowledgeCategory>;\n  private readonly requireWorkflowBinding: boolean;\n  private readonly requireAgentBinding: boolean;\n\n  constructor(options: KnowledgeAccessGuardOptions = {}) {\n    this.disallowedWrite = new Set(\n      options.disallowWriteCategories ?? DEFAULT_DISALLOWED_WRITE\n    );\n    this.requireWorkflowBinding = options.requireWorkflowBinding ?? true;\n    this.requireAgentBinding = options.requireAgentBinding ?? false;\n  }\n\n  checkAccess(\n    spaceBinding: ResolvedKnowledge,\n    context: KnowledgeAccessContext,\n    appConfig: ResolvedAppConfig\n  ): KnowledgeAccessResult {\n    const { binding, space } = spaceBinding;\n\n    if (\n      binding.required !== false &&\n      !this.isSpaceBound(spaceBinding, appConfig)\n    ) {\n      return {\n        allowed: false,\n        reason: `Knowledge space \"${space.meta.key}\" is not bound in the resolved app config.`,\n      };\n    }\n\n    if (\n      context.operation === 'write' &&\n      this.disallowedWrite.has(space.meta.category)\n    ) {\n      return {\n        allowed: false,\n        reason: `Knowledge space \"${space.meta.key}\" is category \"${space.meta.category}\" and is read-only.`,\n      };\n    }\n\n    if (this.requireWorkflowBinding && context.workflowName) {\n      const allowedWorkflows = binding.scope?.workflows;\n      if (\n        allowedWorkflows &&\n        !allowedWorkflows.includes(context.workflowName)\n      ) {\n        return {\n          allowed: false,\n          reason: `Workflow \"${context.workflowName}\" is not authorized to access knowledge space \"${space.meta.key}\".`,\n        };\n      }\n    }\n\n    if (this.requireAgentBinding && context.agentName) {\n      const allowedAgents = binding.scope?.agents;\n      if (allowedAgents && !allowedAgents.includes(context.agentName)) {\n        return {\n          allowed: false,\n          reason: `Agent \"${context.agentName}\" is not authorized to access knowledge space \"${space.meta.key}\".`,\n        };\n      }\n    }\n\n    if (space.meta.category === 'ephemeral') {\n      return {\n        allowed: true,\n        severity: 'warning',\n        reason: `Knowledge space \"${space.meta.key}\" is ephemeral; results may be transient.`,\n      };\n    }\n\n    return { allowed: true };\n  }\n\n  private isSpaceBound(\n    resolved: ResolvedKnowledge,\n    appConfig: ResolvedAppConfig\n  ): boolean {\n    return appConfig.knowledge.some(\n      (entry) =>\n        entry.space.meta.key === resolved.space.meta.key &&\n        (resolved.space.meta.version == null ||\n          entry.space.meta.version === resolved.space.meta.version)\n    );\n  }\n}\n"],"mappings":";AA2BA,MAAMA,2BAAgD,CAAC,YAAY,YAAY;AAE/E,IAAa,uBAAb,MAAkC;CAChC,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAAuC,EAAE,EAAE;AACrD,OAAK,kBAAkB,IAAI,IACzB,QAAQ,2BAA2B,yBACpC;AACD,OAAK,yBAAyB,QAAQ,0BAA0B;AAChE,OAAK,sBAAsB,QAAQ,uBAAuB;;CAG5D,YACE,cACA,SACA,WACuB;EACvB,MAAM,EAAE,SAAS,UAAU;AAE3B,MACE,QAAQ,aAAa,SACrB,CAAC,KAAK,aAAa,cAAc,UAAU,CAE3C,QAAO;GACL,SAAS;GACT,QAAQ,oBAAoB,MAAM,KAAK,IAAI;GAC5C;AAGH,MACE,QAAQ,cAAc,WACtB,KAAK,gBAAgB,IAAI,MAAM,KAAK,SAAS,CAE7C,QAAO;GACL,SAAS;GACT,QAAQ,oBAAoB,MAAM,KAAK,IAAI,iBAAiB,MAAM,KAAK,SAAS;GACjF;AAGH,MAAI,KAAK,0BAA0B,QAAQ,cAAc;GACvD,MAAM,mBAAmB,QAAQ,OAAO;AACxC,OACE,oBACA,CAAC,iBAAiB,SAAS,QAAQ,aAAa,CAEhD,QAAO;IACL,SAAS;IACT,QAAQ,aAAa,QAAQ,aAAa,iDAAiD,MAAM,KAAK,IAAI;IAC3G;;AAIL,MAAI,KAAK,uBAAuB,QAAQ,WAAW;GACjD,MAAM,gBAAgB,QAAQ,OAAO;AACrC,OAAI,iBAAiB,CAAC,cAAc,SAAS,QAAQ,UAAU,CAC7D,QAAO;IACL,SAAS;IACT,QAAQ,UAAU,QAAQ,UAAU,iDAAiD,MAAM,KAAK,IAAI;IACrG;;AAIL,MAAI,MAAM,KAAK,aAAa,YAC1B,QAAO;GACL,SAAS;GACT,UAAU;GACV,QAAQ,oBAAoB,MAAM,KAAK,IAAI;GAC5C;AAGH,SAAO,EAAE,SAAS,MAAM;;CAG1B,AAAQ,aACN,UACA,WACS;AACT,SAAO,UAAU,UAAU,MACxB,UACC,MAAM,MAAM,KAAK,QAAQ,SAAS,MAAM,KAAK,QAC5C,SAAS,MAAM,KAAK,WAAW,QAC9B,MAAM,MAAM,KAAK,YAAY,SAAS,MAAM,KAAK,SACtD"}

package/dist/knowledge/source.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"source.d.ts","names":[],"sources":["../../src/knowledge/source.ts"],"sourcesContent":[],"mappings":";KAAY,mBAAA;AAAA,UAQK,mBAAA,CARc;EAQd,EAAA,EAAA,MAAA;EAMH,QAAA,EAAA,MAAA;EACQ,QAAA,EAAA,MAAA;EACA,YAAA,EAAA,MAAA;EAAI,KAAA,EAAA,MAAA;EAGT,UAAA,EALH,mBAKwB;EAC9B,SAAA,EAAA,MAAA,GALc,IAKd;EAEE,SAAA,EAAA,MAAA,GANY,IAMZ;;AASS,UAZF,qBAAA,CAYE;QAXX;;UAEE;;;;;;;;;eASK"}

package/dist/knowledge/spaces/email-threads.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-threads.d.ts","names":[],"sources":["../../../src/knowledge/spaces/email-threads.ts"],"sourcesContent":[],"mappings":";;;cAGa,4BAA4B;iBA+BzB,kCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/email-threads.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-threads.js","names":["emailThreadsKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/email-threads.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const emailThreadsKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.email-threads',\n    version: 1,\n    category: 'operational',\n    displayName: 'Email Threads',\n    title: 'Operational Email Threads',\n    description:\n      'Indexed copies of operational email threads used for support, onboarding, and workflows.',\n    domain: 'operations',\n    owners: ['platform.operations'],\n    tags: ['email', 'operations'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: 365,\n  },\n  access: {\n    policy: { name: 'knowledge.access.email-threads', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 600,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Operational email threads synchronized from Gmail to support automations and contextual assistance.',\n};\n\nexport function registerEmailThreadsKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(emailThreadsKnowledgeSpace);\n}\n"],"mappings":";;;AAGA,MAAaA,6BAAiD;CAC5D,MAAM;EACJ,KAAK;EACL,SAAS;EACT,UAAU;EACV,aAAa;EACb,OAAO;EACP,aACE;EACF,QAAQ;EACR,QAAQ,CAAC,sBAAsB;EAC/B,MAAM,CAAC,SAAS,aAAa;EAC7B,WAAW,cAAc;EAC1B;CACD,WAAW,EACT,SAAS,KACV;CACD,QAAQ;EACN,QAAQ;GAAE,MAAM;GAAkC,SAAS;GAAG;EAC9D,YAAY;EACZ,oBAAoB;EACrB;CACD,UAAU;EACR,gBAAgB;EAChB,WAAW;EACX,qBAAqB;EACtB;CACD,aACE;CACH;AAED,SAAgB,mCACd,UACwB;AACxB,QAAO,SAAS,SAAS,2BAA2B"}

package/dist/knowledge/spaces/financial-docs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-docs.d.ts","names":[],"sources":["../../../src/knowledge/spaces/financial-docs.ts"],"sourcesContent":[],"mappings":";;;cAGa,6BAA6B;iBA+B1B,mCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/financial-docs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-docs.js","names":["financialDocsKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/financial-docs.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const financialDocsKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.financial-docs',\n    version: 1,\n    category: 'canonical',\n    displayName: 'Financial Documents',\n    title: 'Household Financial Documents',\n    description:\n      'Invoices, bills, and contracts powering Pocket Family Office financial automation.',\n    domain: 'finance',\n    owners: ['platform.finance'],\n    tags: ['finance', 'documents'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: null,\n  },\n  access: {\n    policy: { name: 'knowledge.access.financial-docs', version: 1 },\n    trustLevel: 'high',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 700,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Normalized financial documents enabling bill pay automation, reminders, and summaries.',\n};\n\nexport function registerFinancialDocsKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(financialDocsKnowledgeSpace);\n}\n"],"mappings":";;;AAGA,MAAaA,8BAAkD;CAC7D,MAAM;EACJ,KAAK;EACL,SAAS;EACT,UAAU;EACV,aAAa;EACb,OAAO;EACP,aACE;EACF,QAAQ;EACR,QAAQ,CAAC,mBAAmB;EAC5B,MAAM,CAAC,WAAW,YAAY;EAC9B,WAAW,cAAc;EAC1B;CACD,WAAW,EACT,SAAS,MACV;CACD,QAAQ;EACN,QAAQ;GAAE,MAAM;GAAmC,SAAS;GAAG;EAC/D,YAAY;EACZ,oBAAoB;EACrB;CACD,UAAU;EACR,gBAAgB;EAChB,WAAW;EACX,qBAAqB;EACtB;CACD,aACE;CACH;AAED,SAAgB,oCACd,UACwB;AACxB,QAAO,SAAS,SAAS,4BAA4B"}

package/dist/knowledge/spaces/financial-overview.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-overview.d.ts","names":[],"sources":["../../../src/knowledge/spaces/financial-overview.ts"],"sourcesContent":[],"mappings":";;;cAGa,iCAAiC;iBA+B9B,uCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/financial-overview.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-overview.js","names":["financialOverviewKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/financial-overview.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const financialOverviewKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.financial-overview',\n    version: 1,\n    category: 'operational',\n    displayName: 'Financial Overview Summaries',\n    title: 'Derived Financial Summaries',\n    description:\n      'Aggregated cashflow summaries, category breakdowns, and balance trends derived from open banking data.',\n    domain: 'finance',\n    owners: ['platform.finance'],\n    tags: ['open-banking', 'summaries', 'cashflow'],\n    stability: StabilityEnum.Experimental,\n  },\n  retention: {\n    ttlDays: 180,\n  },\n  access: {\n    policy: { name: 'knowledge.access.financial-overview', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 600,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Derived knowledge space containing weekly/monthly cashflow rollups and account health summaries. Raw transactions are excluded to respect privacy guardrails.',\n};\n\nexport function registerFinancialOverviewKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(financialOverviewKnowledgeSpace);\n}\n"],"mappings":";;;AAGA,MAAaA,kCAAsD;CACjE,MAAM;EACJ,KAAK;EACL,SAAS;EACT,UAAU;EACV,aAAa;EACb,OAAO;EACP,aACE;EACF,QAAQ;EACR,QAAQ,CAAC,mBAAmB;EAC5B,MAAM;GAAC;GAAgB;GAAa;GAAW;EAC/C,WAAW,cAAc;EAC1B;CACD,WAAW,EACT,SAAS,KACV;CACD,QAAQ;EACN,QAAQ;GAAE,MAAM;GAAuC,SAAS;GAAG;EACnE,YAAY;EACZ,oBAAoB;EACrB;CACD,UAAU;EACR,gBAAgB;EAChB,WAAW;EACX,qBAAqB;EACtB;CACD,aACE;CACH;AAED,SAAgB,wCACd,UACwB;AACxB,QAAO,SAAS,SAAS,gCAAgC"}

package/dist/knowledge/spaces/product-canon.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"product-canon.d.ts","names":[],"sources":["../../../src/knowledge/spaces/product-canon.ts"],"sourcesContent":[],"mappings":";;;cAGa,4BAA4B;iBA+BzB,kCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/product-canon.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"product-canon.js","names":["productCanonKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/product-canon.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const productCanonKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.product-canon',\n    version: 1,\n    category: 'canonical',\n    displayName: 'Product Canon',\n    title: 'Product Canon Knowledge Space',\n    description:\n      'Authoritative product knowledge covering strategy, roadmap, and delivery canon.',\n    domain: 'product',\n    owners: ['platform.product'],\n    tags: ['knowledge', 'product'],\n    stability: StabilityEnum.Stable,\n  },\n  retention: {\n    ttlDays: null,\n  },\n  access: {\n    policy: { name: 'knowledge.access.product-canon', version: 1 },\n    trustLevel: 'high',\n    automationWritable: false,\n  },\n  indexing: {\n    embeddingModel: 'text-embedding-3-large',\n    chunkSize: 800,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Single source of truth for product canon, principles, and strategic narratives.',\n};\n\nexport function registerProductCanonKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(productCanonKnowledgeSpace);\n}\n"],"mappings":";;;AAGA,MAAaA,6BAAiD;CAC5D,MAAM;EACJ,KAAK;EACL,SAAS;EACT,UAAU;EACV,aAAa;EACb,OAAO;EACP,aACE;EACF,QAAQ;EACR,QAAQ,CAAC,mBAAmB;EAC5B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW,cAAc;EAC1B;CACD,WAAW,EACT,SAAS,MACV;CACD,QAAQ;EACN,QAAQ;GAAE,MAAM;GAAkC,SAAS;GAAG;EAC9D,YAAY;EACZ,oBAAoB;EACrB;CACD,UAAU;EACR,gBAAgB;EAChB,WAAW;EACX,qBAAqB;EACtB;CACD,aACE;CACH;AAED,SAAgB,mCACd,UACwB;AACxB,QAAO,SAAS,SAAS,2BAA2B"}

package/dist/knowledge/spaces/support-faq.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"support-faq.d.ts","names":[],"sources":["../../../src/knowledge/spaces/support-faq.ts"],"sourcesContent":[],"mappings":";;;cAGa,0BAA0B;iBA+BvB,gCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/support-faq.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"support-faq.js","names":["supportFaqKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/support-faq.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const supportFaqKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.support-faq',\n    version: 1,\n    category: 'operational',\n    displayName: 'Support FAQ',\n    title: 'Support & Success FAQ',\n    description: 'Operational knowledge base for customer support and success.',\n    domain: 'support',\n    owners: ['platform.support'],\n    tags: ['knowledge', 'support'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: 365,\n    archiveAfterDays: 180,\n  },\n  access: {\n    policy: { name: 'knowledge.access.support', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'text-embedding-3-small',\n    chunkSize: 700,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Operational FAQs, runbooks, and customer success playbooks augmented with automation updates.',\n};\n\nexport function registerSupportFaqKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(supportFaqKnowledgeSpace);\n}\n"],"mappings":";;;AAGA,MAAaA,2BAA+C;CAC1D,MAAM;EACJ,KAAK;EACL,SAAS;EACT,UAAU;EACV,aAAa;EACb,OAAO;EACP,aAAa;EACb,QAAQ;EACR,QAAQ,CAAC,mBAAmB;EAC5B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW,cAAc;EAC1B;CACD,WAAW;EACT,SAAS;EACT,kBAAkB;EACnB;CACD,QAAQ;EACN,QAAQ;GAAE,MAAM;GAA4B,SAAS;GAAG;EACxD,YAAY;EACZ,oBAAoB;EACrB;CACD,UAAU;EACR,gBAAgB;EAChB,WAAW;EACX,qBAAqB;EACtB;CACD,aACE;CACH;AAED,SAAgB,iCACd,UACwB;AACxB,QAAO,SAAS,SAAS,yBAAyB"}

package/dist/knowledge/spaces/uploaded-docs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"uploaded-docs.d.ts","names":[],"sources":["../../../src/knowledge/spaces/uploaded-docs.ts"],"sourcesContent":[],"mappings":";;;cAGa,4BAA4B;iBA+BzB,kCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/uploaded-docs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"uploaded-docs.js","names":["uploadedDocsKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/uploaded-docs.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const uploadedDocsKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.uploaded-docs',\n    version: 1,\n    category: 'external',\n    displayName: 'Uploaded Documents',\n    title: 'Uploaded Knowledge Assets',\n    description:\n      'Documents uploaded by households, including invoices, contracts, and reference files.',\n    domain: 'operations',\n    owners: ['platform.operations'],\n    tags: ['documents', 'storage'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: null,\n  },\n  access: {\n    policy: { name: 'knowledge.access.uploaded-docs', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 900,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'User-provided documents normalized and embedded for retrieval augmented workflows.',\n};\n\nexport function registerUploadedDocsKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(uploadedDocsKnowledgeSpace);\n}\n"],"mappings":";;;AAGA,MAAaA,6BAAiD;CAC5D,MAAM;EACJ,KAAK;EACL,SAAS;EACT,UAAU;EACV,aAAa;EACb,OAAO;EACP,aACE;EACF,QAAQ;EACR,QAAQ,CAAC,sBAAsB;EAC/B,MAAM,CAAC,aAAa,UAAU;EAC9B,WAAW,cAAc;EAC1B;CACD,WAAW,EACT,SAAS,MACV;CACD,QAAQ;EACN,QAAQ;GAAE,MAAM;GAAkC,SAAS;GAAG;EAC9D,YAAY;EACZ,oBAAoB;EACrB;CACD,UAAU;EACR,gBAAgB;EAChB,WAAW;EACX,qBAAqB;EACtB;CACD,aACE;CACH;AAED,SAAgB,mCACd,UACwB;AACxB,QAAO,SAAS,SAAS,2BAA2B"}

package/dist/knowledge/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../../src/knowledge/spec.ts"],"sourcesContent":[],"mappings":";;;;KAGY,iBAAA;UAMK,kBAAA,SAA2B;EANhC;EAMK,GAAA,EAAA,MAAA;EAQA,OAAA,EAAA,MAAA;EAOA,QAAA,EAXL,iBAW0B;EASrB,WAAA,EAAA,MAAA;AAMjB;AACQ,UAvBS,wBAAA,CAuBT;EAEK;EAEH,OAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAEG;EAAuB,gBAAA,CAAA,EAAA,MAAA;AAQpC;AAGiB,UAjCA,qBAAA,CAiCA;EASP;EAI4B,MAAA,CAAA,EA5C3B,SA4C2B;EAgBZ;EAAoB,UAAA,EAAA,MAAA,GAAA,QAAA,GAAA,KAAA;EAAkB;EAKhD,kBAAA,EAAA,OAAqB;;UA1DpB,uBAAA;;;;;UAMA,kBAAA;QACT;;aAEK;;UAEH;;aAEG;;;;cAQA,sBAAA;;iBAGI;UASP;sCAI4B;0BAgBZ,oBAAoB;;iBAK9B,qBAAA,OAA4B"}

package/dist/knowledge/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":["latest: KnowledgeSpaceSpec | undefined"],"sources":["../../src/knowledge/spec.ts"],"sourcesContent":["import type { OwnerShipMeta } from '../ownership';\nimport type { PolicyRef } from '../policy/spec';\n\nexport type KnowledgeCategory =\n  | 'canonical' // Ground truth - product specs, schemas, official policies\n  | 'operational' // Internal docs - support tickets, runbooks, sales materials\n  | 'external' // Third-party - PSP docs, regulations, integration guides\n  | 'ephemeral'; // Temporary - agent scratchpads, session context, drafts\n\nexport interface KnowledgeSpaceMeta extends OwnerShipMeta {\n  /** Stable space identifier (e.g., \"product-canon\", \"support-faq\"). */\n  key: string;\n  version: number;\n  category: KnowledgeCategory;\n  displayName: string;\n}\n\nexport interface KnowledgeRetentionPolicy {\n  /** TTL in days (null = indefinite). */\n  ttlDays?: number | null;\n  /** Auto-archive after inactivity. */\n  archiveAfterDays?: number;\n}\n\nexport interface KnowledgeAccessPolicy {\n  /** Which PolicySpec governs access. */\n  policy?: PolicyRef;\n  /** Trust level for agent/workflow consumption. */\n  trustLevel: 'high' | 'medium' | 'low';\n  /** Can this space be mutated by automation? */\n  automationWritable: boolean;\n}\n\nexport interface KnowledgeIndexingConfig {\n  embeddingModel?: string;\n  chunkSize?: number;\n  vectorDbIntegration?: string;\n}\n\nexport interface KnowledgeSpaceSpec {\n  meta: KnowledgeSpaceMeta;\n  /** Retention and cleanup rules. */\n  retention: KnowledgeRetentionPolicy;\n  /** Access control and trust. */\n  access: KnowledgeAccessPolicy;\n  /** Optional embedding/indexing config. */\n  indexing?: KnowledgeIndexingConfig;\n  /** Documentation. */\n  description?: string;\n}\n\nconst knowledgeKey = (meta: Pick<KnowledgeSpaceMeta, 'key' | 'version'>) =>\n  `${meta.key}.v${meta.version}`;\n\nexport class KnowledgeSpaceRegistry {\n  private readonly items = new Map<string, KnowledgeSpaceSpec>();\n\n  register(spec: KnowledgeSpaceSpec): this {\n    const key = knowledgeKey(spec.meta);\n    if (this.items.has(key)) {\n      throw new Error(`Duplicate KnowledgeSpaceSpec ${key}`);\n    }\n    this.items.set(key, spec);\n    return this;\n  }\n\n  list(): KnowledgeSpaceSpec[] {\n    return [...this.items.values()];\n  }\n\n  get(key: string, version?: number): KnowledgeSpaceSpec | undefined {\n    if (version != null) {\n      return this.items.get(knowledgeKey({ key, version }));\n    }\n    let latest: KnowledgeSpaceSpec | undefined;\n    let maxVersion = -Infinity;\n    for (const spec of this.items.values()) {\n      if (spec.meta.key !== key) continue;\n      if (spec.meta.version > maxVersion) {\n        maxVersion = spec.meta.version;\n        latest = spec;\n      }\n    }\n    return latest;\n  }\n\n  getByCategory(category: KnowledgeCategory): KnowledgeSpaceSpec[] {\n    return this.list().filter((spec) => spec.meta.category === category);\n  }\n}\n\nexport function makeKnowledgeSpaceKey(meta: KnowledgeSpaceMeta) {\n  return knowledgeKey(meta);\n}\n"],"mappings":";AAmDA,MAAM,gBAAgB,SACpB,GAAG,KAAK,IAAI,IAAI,KAAK;AAEvB,IAAa,yBAAb,MAAoC;CAClC,AAAiB,wBAAQ,IAAI,KAAiC;CAE9D,SAAS,MAAgC;EACvC,MAAM,MAAM,aAAa,KAAK,KAAK;AACnC,MAAI,KAAK,MAAM,IAAI,IAAI,CACrB,OAAM,IAAI,MAAM,gCAAgC,MAAM;AAExD,OAAK,MAAM,IAAI,KAAK,KAAK;AACzB,SAAO;;CAGT,OAA6B;AAC3B,SAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC;;CAGjC,IAAI,KAAa,SAAkD;AACjE,MAAI,WAAW,KACb,QAAO,KAAK,MAAM,IAAI,aAAa;GAAE;GAAK;GAAS,CAAC,CAAC;EAEvD,IAAIA;EACJ,IAAI,aAAa;AACjB,OAAK,MAAM,QAAQ,KAAK,MAAM,QAAQ,EAAE;AACtC,OAAI,KAAK,KAAK,QAAQ,IAAK;AAC3B,OAAI,KAAK,KAAK,UAAU,YAAY;AAClC,iBAAa,KAAK,KAAK;AACvB,aAAS;;;AAGb,SAAO;;CAGT,cAAc,UAAmD;AAC/D,SAAO,KAAK,MAAM,CAAC,QAAQ,SAAS,KAAK,KAAK,aAAa,SAAS;;;AAIxE,SAAgB,sBAAsB,MAA0B;AAC9D,QAAO,aAAa,KAAK"}

package/dist/llm/exporters.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"exporters.d.ts","names":[],"sources":["../../src/llm/exporters.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;AAkSA;AA8IA;;AAGY,iBAtYI,qBAAA,CAsYJ,IAAA,EAtYgC,eAsYhC,CAAA,EAAA,MAAA;;;;;AA+HZ;AA2DgB,iBAjhBA,kBAAA,CAihBiC,IAAA,EAhhBzC,eAghBwC,EAAA,OAAA,CAAA,EA/gBrC,OA+gBqC,CA/gB7B,iBA+gB6B,CAAA,CAAA,EAAA,MAAA;AAsChD;AA0CA;;;;AAGG,iBA9Za,iBAAA,CA8Zb,IAAA,EA7ZK,eA6ZL,EAAA,OAkCQ,CAlCR,EAAA;EAAgB,QAAA,CAAA,EAAA,WAAA,GAAA,MAAA,GAAA,UAAA,GAAA,QAAA;EAiCH,YAAA,CAAA,EAAA,MAAa;CAClB,CAAA,EAAA,MAAA;;;;;AAMR,iBAxTa,iBAAA,CAwTb,OAAA,EAvTQ,iBAuTR,EAAA,KAAA,EAAA;EAAmB,KAAA,CAAA,EArTV,YAqTU;kBApTF;aAET,QAAQ;;;;iBA4HH,sBAAA,eACA;;;;iBA0DA,eAAA,QAAuB,UAAU;;;;iBAsCjC,kBAAA,MAAwB;;;;;iBA0CxB,UAAA,OACR,2BACG,QAAQ,qBAChB;;;;iBAiCa,aAAA,UACL;UAEC;kBACQ;aAET,QAAQ,wBAChB"}