@lssm/lib.contracts 1.10.0 → 1.11.1

package/dist/integrations/secrets/env-secret-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env-secret-provider.js","names":[],"sources":["../../../src/integrations/secrets/env-secret-provider.ts"],"sourcesContent":["import { parseSecretUri, SecretProviderError } from './provider';\nimport type {\n  SecretProvider,\n  SecretReference,\n  SecretRotationResult,\n  SecretValue,\n  SecretWritePayload,\n} from './provider';\n\ninterface EnvSecretProviderOptions {\n  /**\n   * Optional map to alias secret references to environment variable names.\n   * Useful when referencing secrets from other providers (e.g. gcp://...)\n   * while still allowing local overrides.\n   */\n  aliases?: Record<string, string>;\n}\n\n/**\n * Environment-variable backed secret provider. Read-only by design.\n * Allows overriding other secret providers by deriving environment variable\n * names from secret references (or by using explicit aliases).\n */\nexport class EnvSecretProvider implements SecretProvider {\n  readonly id = 'env';\n\n  private readonly aliases: Record<string, string>;\n\n  constructor(options: EnvSecretProviderOptions = {}) {\n    this.aliases = options.aliases ?? {};\n  }\n\n  canHandle(reference: SecretReference): boolean {\n    const envKey = this.resolveEnvKey(reference);\n    return envKey !== undefined && process.env[envKey] !== undefined;\n  }\n\n  async getSecret(reference: SecretReference): Promise<SecretValue> {\n    const envKey = this.resolveEnvKey(reference);\n    if (!envKey) {\n      throw new SecretProviderError({\n        message: `Unable to resolve environment variable for reference \"${reference}\".`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const value = process.env[envKey];\n    if (value === undefined) {\n      throw new SecretProviderError({\n        message: `Environment variable \"${envKey}\" not found for reference \"${reference}\".`,\n        provider: this.id,\n        reference,\n        code: 'NOT_FOUND',\n      });\n    }\n\n    return {\n      data: Buffer.from(value, 'utf-8'),\n      version: 'current',\n      metadata: {\n        source: 'env',\n        envKey,\n      },\n      retrievedAt: new Date(),\n    };\n  }\n\n  async setSecret(\n    reference: SecretReference,\n    _payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    throw this.forbiddenError('setSecret', reference);\n  }\n\n  async rotateSecret(\n    reference: SecretReference,\n    _payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    throw this.forbiddenError('rotateSecret', reference);\n  }\n\n  async deleteSecret(reference: SecretReference): Promise<void> {\n    throw this.forbiddenError('deleteSecret', reference);\n  }\n\n  private resolveEnvKey(reference: SecretReference): string | undefined {\n    if (!reference) {\n      return undefined;\n    }\n\n    if (this.aliases[reference]) {\n      return this.aliases[reference];\n    }\n\n    if (!reference.includes('://')) {\n      return reference;\n    }\n\n    try {\n      const parsed = parseSecretUri(reference);\n      if (parsed.provider === 'env') {\n        return parsed.path;\n      }\n\n      if (parsed.extras?.env) {\n        return parsed.extras.env;\n      }\n\n      return this.deriveEnvKey(parsed.path);\n    } catch {\n      return reference;\n    }\n  }\n\n  private deriveEnvKey(path: string): string | undefined {\n    if (!path) return undefined;\n    return path\n      .split(/[\\/:\\-\\.]/)\n      .filter(Boolean)\n      .map((segment) =>\n        segment\n          .replace(/[^a-zA-Z0-9]/g, '_')\n          .replace(/_{2,}/g, '_')\n          .toUpperCase()\n      )\n      .join('_');\n  }\n\n  private forbiddenError(\n    operation: string,\n    reference: SecretReference\n  ): SecretProviderError {\n    return new SecretProviderError({\n      message: `EnvSecretProvider is read-only. \"${operation}\" is not allowed for ${reference}.`,\n      provider: this.id,\n      reference,\n      code: 'FORBIDDEN',\n    });\n  }\n}\n"],"mappings":"wEAuBA,IAAa,EAAb,KAAyD,CACvD,GAAc,MAEd,QAEA,YAAY,EAAoC,EAAE,CAAE,CAClD,KAAK,QAAU,EAAQ,SAAW,EAAE,CAGtC,UAAU,EAAqC,CAC7C,IAAM,EAAS,KAAK,cAAc,EAAU,CAC5C,OAAO,IAAW,IAAA,IAAa,QAAQ,IAAI,KAAY,IAAA,GAGzD,MAAM,UAAU,EAAkD,CAChE,IAAM,EAAS,KAAK,cAAc,EAAU,CAC5C,GAAI,CAAC,EACH,MAAM,IAAI,EAAoB,CAC5B,QAAS,yDAAyD,EAAU,IAC5E,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAQ,QAAQ,IAAI,GAC1B,GAAI,IAAU,IAAA,GACZ,MAAM,IAAI,EAAoB,CAC5B,QAAS,yBAAyB,EAAO,6BAA6B,EAAU,IAChF,SAAU,KAAK,GACf,YACA,KAAM,YACP,CAAC,CAGJ,MAAO,CACL,KAAM,OAAO,KAAK,EAAO,QAAQ,CACjC,QAAS,UACT,SAAU,CACR,OAAQ,MACR,SACD,CACD,YAAa,IAAI,KAClB,CAGH,MAAM,UACJ,EACA,EAC+B,CAC/B,MAAM,KAAK,eAAe,YAAa,EAAU,CAGnD,MAAM,aACJ,EACA,EAC+B,CAC/B,MAAM,KAAK,eAAe,eAAgB,EAAU,CAGtD,MAAM,aAAa,EAA2C,CAC5D,MAAM,KAAK,eAAe,eAAgB,EAAU,CAGtD,cAAsB,EAAgD,CAC/D,KAIL,IAAI,KAAK,QAAQ,GACf,OAAO,KAAK,QAAQ,GAGtB,GAAI,CAAC,EAAU,SAAS,MAAM,CAC5B,OAAO,EAGT,GAAI,CACF,IAAM,EAAS,EAAe,EAAU,CASxC,OARI,EAAO,WAAa,MACf,EAAO,KAGZ,EAAO,QAAQ,IACV,EAAO,OAAO,IAGhB,KAAK,aAAa,EAAO,KAAK,MAC/B,CACN,OAAO,IAIX,aAAqB,EAAkC,CAChD,KACL,OAAO,EACJ,MAAM,YAAY,CAClB,OAAO,QAAQ,CACf,IAAK,GACJ,EACG,QAAQ,gBAAiB,IAAI,CAC7B,QAAQ,SAAU,IAAI,CACtB,aAAa,CACjB,CACA,KAAK,IAAI,CAGd,eACE,EACA,EACqB,CACrB,OAAO,IAAI,EAAoB,CAC7B,QAAS,oCAAoC,EAAU,uBAAuB,EAAU,GACxF,SAAU,KAAK,GACf,YACA,KAAM,YACP,CAAC"}

package/dist/integrations/secrets/gcp-secret-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-secret-manager.d.ts","names":[],"sources":["../../../src/integrations/secrets/gcp-secret-manager.ts"],"sourcesContent":[],"mappings":";;;;;KAmBK,mBAAA,GAAsB;UAEjB,+BAAA;EAFL,SAAA,CAAA,EAAA,MAAA;EAEK,MAAA,CAAA,EAEC,mBAFD;EAEC,aAAA,CAAA,EACO,qBADP,CAAA,OACoC,0BADpC,CAAA,CAAA,CAAA,CAAA;EACoC,kBAAA,CAAA,EACxB,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,aAAA,CAAc,EAAA,CAAG,YADb;;AACxB,cAaV,wBAAA,YAAoC,cAbW,CAAA;EAAY,SAAA,EAAA,GAAA,oBAAA;EAa3D,iBAAA,MAAA;EAMU,iBAAA,iBAAA;EAQA,iBAAA,WAAA;EAUR,WAAA,CAAA,OAAA,CAAA,EAlBQ,+BAkBR;EAEG,SAAA,CAAA,SAAA,EAZK,eAYL,CAAA,EAAA,OAAA;EACL,SAAA,CAAA,SAAA,EAHE,eAGF,EAAA,OAyCE,CAzCF,EAAA;IAAR,OAAA,CAAA,EAAA,MAAA;EAyCU,CAAA,EAAA,WAAA,CAAA,EA1CG,WA0CH,CAAA,EAzCV,OAyCU,CAzCF,WAyCE,CAAA;EACF,SAAA,CAAA,SAAA,EADE,eACF,EAAA,OAAA,EAAA,kBAAA,CAAA,EACR,OADQ,CACA,oBADA,CAAA;EACA,YAAA,CAAA,SAAA,EAsCE,eAtCF,EAAA,OAAA,EAuCA,kBAvCA,CAAA,EAwCR,OAxCQ,CAwCA,oBAxCA,CAAA;EAAR,YAAA,CAAA,SAAA,EA4C2B,eA5C3B,CAAA,EA4C6C,OA5C7C,CAAA,IAAA,CAAA;EAsCU,QAAA,cAAA;EACF,QAAA,UAAA;EACA,QAAA,gBAAA;EAAR,QAAA,kBAAA"}

package/dist/integrations/secrets/gcp-secret-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-secret-manager.js","names":["DEFAULT_REPLICATION: protos.google.cloud.secretmanager.v1.IReplication"],"sources":["../../../src/integrations/secrets/gcp-secret-manager.ts"],"sourcesContent":["import {\n  protos,\n  SecretManagerServiceClient,\n} from '@google-cloud/secret-manager';\nimport type { CallOptions } from 'google-gax';\n\nimport {\n  normalizeSecretPayload,\n  parseSecretUri,\n  SecretProviderError,\n} from './provider';\nimport type {\n  SecretProvider,\n  SecretReference,\n  SecretRotationResult,\n  SecretValue,\n  SecretWritePayload,\n} from './provider';\n\ntype SecretManagerClient = SecretManagerServiceClient;\n\ninterface GcpSecretManagerProviderOptions {\n  projectId?: string;\n  client?: SecretManagerClient;\n  clientOptions?: ConstructorParameters<typeof SecretManagerServiceClient>[0];\n  defaultReplication?: protos.google.cloud.secretmanager.v1.IReplication;\n}\n\ninterface GcpSecretLocation {\n  projectId: string;\n  secretId: string;\n  version?: string;\n}\n\nconst DEFAULT_REPLICATION: protos.google.cloud.secretmanager.v1.IReplication = {\n  automatic: {},\n};\n\nexport class GcpSecretManagerProvider implements SecretProvider {\n  readonly id = 'gcp-secret-manager';\n  private readonly client: SecretManagerClient;\n  private readonly explicitProjectId?: string;\n  private readonly replication: protos.google.cloud.secretmanager.v1.IReplication;\n\n  constructor(options: GcpSecretManagerProviderOptions = {}) {\n    this.client =\n      options.client ??\n      new SecretManagerServiceClient(options.clientOptions ?? {});\n    this.explicitProjectId = options.projectId;\n    this.replication = options.defaultReplication ?? DEFAULT_REPLICATION;\n  }\n\n  canHandle(reference: SecretReference): boolean {\n    try {\n      const parsed = parseSecretUri(reference);\n      return parsed.provider === 'gcp';\n    } catch {\n      return false;\n    }\n  }\n\n  async getSecret(\n    reference: SecretReference,\n    options?: { version?: string },\n    callOptions?: CallOptions\n  ): Promise<SecretValue> {\n    const location = this.parseReference(reference);\n    const secretVersionName = this.buildVersionName(location, options?.version);\n    try {\n      const response = await this.client.accessSecretVersion(\n        {\n          name: secretVersionName,\n        },\n        callOptions ?? {}\n      );\n      const [result] = response;\n      const payload = result.payload;\n      if (!payload?.data) {\n        throw new SecretProviderError({\n          message: `Secret payload empty for ${secretVersionName}`,\n          provider: this.id,\n          reference,\n          code: 'UNKNOWN',\n        });\n      }\n\n      const version = extractVersionFromName(result.name ?? secretVersionName);\n      return {\n        data: payload.data as Uint8Array,\n        version,\n        metadata: payload.dataCrc32c\n          ? { crc32c: payload.dataCrc32c.toString() }\n          : undefined,\n        retrievedAt: new Date(),\n      };\n    } catch (error) {\n      throw toSecretProviderError({\n        error,\n        provider: this.id,\n        reference,\n        operation: 'access',\n      });\n    }\n  }\n\n  async setSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    const location = this.parseReference(reference);\n    const { secretName } = this.buildNames(location);\n    const data = normalizeSecretPayload(payload);\n    await this.ensureSecretExists(location, payload);\n\n    try {\n      const response = await this.client.addSecretVersion({\n        parent: secretName,\n        payload: {\n          data,\n        },\n      });\n      if (!response) {\n        throw new SecretProviderError({\n          message: `No version returned when adding secret version for ${secretName}`,\n          provider: this.id,\n          reference,\n          code: 'UNKNOWN',\n        });\n      }\n      const [version] = response;\n      const versionName = version?.name ?? `${secretName}/versions/latest`;\n      return {\n        reference: `gcp://${versionName}`,\n        version: extractVersionFromName(versionName) ?? 'latest',\n      };\n    } catch (error) {\n      throw toSecretProviderError({\n        error,\n        provider: this.id,\n        reference,\n        operation: 'addSecretVersion',\n      });\n    }\n  }\n\n  async rotateSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    return this.setSecret(reference, payload);\n  }\n\n  async deleteSecret(reference: SecretReference): Promise<void> {\n    const location = this.parseReference(reference);\n    const { secretName } = this.buildNames(location);\n    try {\n      await this.client.deleteSecret({\n        name: secretName,\n      });\n    } catch (error) {\n      throw toSecretProviderError({\n        error,\n        provider: this.id,\n        reference,\n        operation: 'delete',\n      });\n    }\n  }\n\n  private parseReference(reference: SecretReference): GcpSecretLocation {\n    const parsed = parseSecretUri(reference);\n    if (parsed.provider !== 'gcp') {\n      throw new SecretProviderError({\n        message: `Unsupported secret provider: ${parsed.provider}`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const segments = parsed.path.split('/').filter(Boolean);\n    if (segments.length < 4 || segments[0] !== 'projects') {\n      throw new SecretProviderError({\n        message: `Expected secret reference format gcp://projects/{project}/secrets/{secret}[(/versions/{version})] but received \"${parsed.path}\"`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const projectIdCandidate = segments[1] ?? this.explicitProjectId;\n    if (!projectIdCandidate) {\n      throw new SecretProviderError({\n        message: `Unable to resolve project or secret from reference \"${parsed.path}\"`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const indexOfSecrets = segments.indexOf('secrets');\n    if (indexOfSecrets === -1 || indexOfSecrets + 1 >= segments.length) {\n      throw new SecretProviderError({\n        message: `Unable to resolve project or secret from reference \"${parsed.path}\"`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n\n    const resolvedProjectId = projectIdCandidate;\n    const secretIdCandidate = segments[indexOfSecrets + 1];\n    if (!secretIdCandidate) {\n      throw new SecretProviderError({\n        message: `Unable to resolve secret ID from reference \"${parsed.path}\"`,\n        provider: this.id,\n        reference,\n        code: 'INVALID',\n      });\n    }\n    const secretId = secretIdCandidate;\n    const indexOfVersions = segments.indexOf('versions');\n    const version =\n      parsed.extras?.version ??\n      (indexOfVersions !== -1 && indexOfVersions + 1 < segments.length\n        ? segments[indexOfVersions + 1]\n        : undefined);\n\n    return {\n      projectId: resolvedProjectId,\n      secretId,\n      version,\n    };\n  }\n\n  private buildNames(location: GcpSecretLocation): {\n    secretName: string;\n    projectParent: string;\n  } {\n    const projectId = location.projectId ?? this.explicitProjectId;\n    if (!projectId) {\n      throw new SecretProviderError({\n        message:\n          'Project ID must be provided either in reference or provider configuration',\n        provider: this.id,\n        reference: `gcp://projects//secrets/${location.secretId}`,\n        code: 'INVALID',\n      });\n    }\n\n    const projectParent = `projects/${projectId}`;\n    const secretName = `${projectParent}/secrets/${location.secretId}`;\n    return {\n      projectParent,\n      secretName,\n    };\n  }\n\n  private buildVersionName(\n    location: GcpSecretLocation,\n    explicitVersion?: string\n  ): string {\n    const { secretName } = this.buildNames(location);\n    const version = explicitVersion ?? location.version ?? 'latest';\n    return `${secretName}/versions/${version}`;\n  }\n\n  private async ensureSecretExists(\n    location: GcpSecretLocation,\n    payload: SecretWritePayload\n  ): Promise<void> {\n    const { secretName, projectParent } = this.buildNames(location);\n    try {\n      await this.client.getSecret({ name: secretName });\n    } catch (error) {\n      const providerError = toSecretProviderError({\n        error,\n        provider: this.id,\n        reference: `gcp://${secretName}`,\n        operation: 'getSecret',\n        suppressThrow: true,\n      });\n      if (!providerError || providerError.code !== 'NOT_FOUND') {\n        if (providerError) {\n          throw providerError;\n        }\n        throw error;\n      }\n      try {\n        await this.client.createSecret({\n          parent: projectParent,\n          secretId: location.secretId,\n          secret: {\n            replication: this.replication,\n            labels: payload.labels,\n          },\n        });\n      } catch (creationError) {\n        const creationProviderError = toSecretProviderError({\n          error: creationError,\n          provider: this.id,\n          reference: `gcp://${secretName}`,\n          operation: 'createSecret',\n        });\n        throw creationProviderError;\n      }\n    }\n  }\n}\n\nfunction extractVersionFromName(name: string): string | undefined {\n  const segments = name.split('/').filter(Boolean);\n  const index = segments.indexOf('versions');\n  if (index === -1 || index + 1 >= segments.length) {\n    return undefined;\n  }\n  return segments[index + 1];\n}\n\nfunction toSecretProviderError(params: {\n  error: unknown;\n  provider: string;\n  reference: SecretReference;\n  operation: string;\n  suppressThrow?: boolean;\n}): SecretProviderError {\n  const { error, provider, reference, operation, suppressThrow } = params;\n  if (error instanceof SecretProviderError) {\n    return error;\n  }\n\n  const code = deriveErrorCode(error);\n  const message =\n    error instanceof Error\n      ? error.message\n      : `Unknown error during ${operation}`;\n\n  const providerError = new SecretProviderError({\n    message,\n    provider,\n    reference,\n    code,\n    cause: error,\n  });\n\n  if (suppressThrow) {\n    return providerError;\n  }\n\n  throw providerError;\n}\n\nfunction deriveErrorCode(error: unknown): SecretProviderError['code'] {\n  if (typeof error !== 'object' || error === null) {\n    return 'UNKNOWN';\n  }\n\n  const errorAny = error as { code?: number | string };\n  const code = errorAny.code;\n  if (code === 5 || code === 'NOT_FOUND') return 'NOT_FOUND';\n  if (code === 6 || code === 'ALREADY_EXISTS') return 'INVALID';\n  if (code === 7 || code === 'PERMISSION_DENIED' || code === 403) {\n    return 'FORBIDDEN';\n  }\n  if (code === 3 || code === 'INVALID_ARGUMENT') return 'INVALID';\n  return 'UNKNOWN';\n}\n"],"mappings":"0LAkCA,MAAMA,EAAyE,CAC7E,UAAW,EAAE,CACd,CAED,IAAa,EAAb,KAAgE,CAC9D,GAAc,qBACd,OACA,kBACA,YAEA,YAAY,EAA2C,EAAE,CAAE,CACzD,KAAK,OACH,EAAQ,QACR,IAAI,EAA2B,EAAQ,eAAiB,EAAE,CAAC,CAC7D,KAAK,kBAAoB,EAAQ,UACjC,KAAK,YAAc,EAAQ,oBAAsB,EAGnD,UAAU,EAAqC,CAC7C,GAAI,CAEF,OADe,EAAe,EAAU,CAC1B,WAAa,WACrB,CACN,MAAO,IAIX,MAAM,UACJ,EACA,EACA,EACsB,CACtB,IAAM,EAAW,KAAK,eAAe,EAAU,CACzC,EAAoB,KAAK,iBAAiB,EAAU,GAAS,QAAQ,CAC3E,GAAI,CAOF,GAAM,CAAC,GANU,MAAM,KAAK,OAAO,oBACjC,CACE,KAAM,EACP,CACD,GAAe,EAAE,CAClB,CAEK,EAAU,EAAO,QACvB,GAAI,CAAC,GAAS,KACZ,MAAM,IAAI,EAAoB,CAC5B,QAAS,4BAA4B,IACrC,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAU,EAAuB,EAAO,MAAQ,EAAkB,CACxE,MAAO,CACL,KAAM,EAAQ,KACd,UACA,SAAU,EAAQ,WACd,CAAE,OAAQ,EAAQ,WAAW,UAAU,CAAE,CACzC,IAAA,GACJ,YAAa,IAAI,KAClB,OACM,EAAO,CACd,MAAM,EAAsB,CAC1B,QACA,SAAU,KAAK,GACf,YACA,UAAW,SACZ,CAAC,EAIN,MAAM,UACJ,EACA,EAC+B,CAC/B,IAAM,EAAW,KAAK,eAAe,EAAU,CACzC,CAAE,cAAe,KAAK,WAAW,EAAS,CAC1C,EAAO,EAAuB,EAAQ,CAC5C,MAAM,KAAK,mBAAmB,EAAU,EAAQ,CAEhD,GAAI,CACF,IAAM,EAAW,MAAM,KAAK,OAAO,iBAAiB,CAClD,OAAQ,EACR,QAAS,CACP,OACD,CACF,CAAC,CACF,GAAI,CAAC,EACH,MAAM,IAAI,EAAoB,CAC5B,QAAS,sDAAsD,IAC/D,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAEJ,GAAM,CAAC,GAAW,EACZ,EAAc,GAAS,MAAQ,GAAG,EAAW,kBACnD,MAAO,CACL,UAAW,SAAS,IACpB,QAAS,EAAuB,EAAY,EAAI,SACjD,OACM,EAAO,CACd,MAAM,EAAsB,CAC1B,QACA,SAAU,KAAK,GACf,YACA,UAAW,mBACZ,CAAC,EAIN,MAAM,aACJ,EACA,EAC+B,CAC/B,OAAO,KAAK,UAAU,EAAW,EAAQ,CAG3C,MAAM,aAAa,EAA2C,CAC5D,IAAM,EAAW,KAAK,eAAe,EAAU,CACzC,CAAE,cAAe,KAAK,WAAW,EAAS,CAChD,GAAI,CACF,MAAM,KAAK,OAAO,aAAa,CAC7B,KAAM,EACP,CAAC,OACK,EAAO,CACd,MAAM,EAAsB,CAC1B,QACA,SAAU,KAAK,GACf,YACA,UAAW,SACZ,CAAC,EAIN,eAAuB,EAA+C,CACpE,IAAM,EAAS,EAAe,EAAU,CACxC,GAAI,EAAO,WAAa,MACtB,MAAM,IAAI,EAAoB,CAC5B,QAAS,gCAAgC,EAAO,WAChD,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAW,EAAO,KAAK,MAAM,IAAI,CAAC,OAAO,QAAQ,CACvD,GAAI,EAAS,OAAS,GAAK,EAAS,KAAO,WACzC,MAAM,IAAI,EAAoB,CAC5B,QAAS,mHAAmH,EAAO,KAAK,GACxI,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAqB,EAAS,IAAM,KAAK,kBAC/C,GAAI,CAAC,EACH,MAAM,IAAI,EAAoB,CAC5B,QAAS,uDAAuD,EAAO,KAAK,GAC5E,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAiB,EAAS,QAAQ,UAAU,CAClD,GAAI,IAAmB,IAAM,EAAiB,GAAK,EAAS,OAC1D,MAAM,IAAI,EAAoB,CAC5B,QAAS,uDAAuD,EAAO,KAAK,GAC5E,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAoB,EACpB,EAAoB,EAAS,EAAiB,GACpD,GAAI,CAAC,EACH,MAAM,IAAI,EAAoB,CAC5B,QAAS,+CAA+C,EAAO,KAAK,GACpE,SAAU,KAAK,GACf,YACA,KAAM,UACP,CAAC,CAEJ,IAAM,EAAW,EACX,EAAkB,EAAS,QAAQ,WAAW,CAOpD,MAAO,CACL,UAAW,EACX,WACA,QARA,EAAO,QAAQ,UACd,IAAoB,IAAM,EAAkB,EAAI,EAAS,OACtD,EAAS,EAAkB,GAC3B,IAAA,IAML,CAGH,WAAmB,EAGjB,CACA,IAAM,EAAY,EAAS,WAAa,KAAK,kBAC7C,GAAI,CAAC,EACH,MAAM,IAAI,EAAoB,CAC5B,QACE,4EACF,SAAU,KAAK,GACf,UAAW,2BAA2B,EAAS,WAC/C,KAAM,UACP,CAAC,CAGJ,IAAM,EAAgB,YAAY,IAElC,MAAO,CACL,gBACA,WAHiB,GAAG,EAAc,WAAW,EAAS,WAIvD,CAGH,iBACE,EACA,EACQ,CACR,GAAM,CAAE,cAAe,KAAK,WAAW,EAAS,CAEhD,MAAO,GAAG,EAAW,YADL,GAAmB,EAAS,SAAW,WAIzD,MAAc,mBACZ,EACA,EACe,CACf,GAAM,CAAE,aAAY,iBAAkB,KAAK,WAAW,EAAS,CAC/D,GAAI,CACF,MAAM,KAAK,OAAO,UAAU,CAAE,KAAM,EAAY,CAAC,OAC1C,EAAO,CACd,IAAM,EAAgB,EAAsB,CAC1C,QACA,SAAU,KAAK,GACf,UAAW,SAAS,IACpB,UAAW,YACX,cAAe,GAChB,CAAC,CACF,GAAI,CAAC,GAAiB,EAAc,OAAS,YAI3C,MAHI,GAGE,EAER,GAAI,CACF,MAAM,KAAK,OAAO,aAAa,CAC7B,OAAQ,EACR,SAAU,EAAS,SACnB,OAAQ,CACN,YAAa,KAAK,YAClB,OAAQ,EAAQ,OACjB,CACF,CAAC,OACK,EAAe,CAOtB,MAN8B,EAAsB,CAClD,MAAO,EACP,SAAU,KAAK,GACf,UAAW,SAAS,IACpB,UAAW,eACZ,CAAC,KAOV,SAAS,EAAuB,EAAkC,CAChE,IAAM,EAAW,EAAK,MAAM,IAAI,CAAC,OAAO,QAAQ,CAC1C,EAAQ,EAAS,QAAQ,WAAW,CACtC,SAAU,IAAM,EAAQ,GAAK,EAAS,QAG1C,OAAO,EAAS,EAAQ,GAG1B,SAAS,EAAsB,EAMP,CACtB,GAAM,CAAE,QAAO,WAAU,YAAW,YAAW,iBAAkB,EACjE,GAAI,aAAiB,EACnB,OAAO,EAGT,IAAM,EAAO,EAAgB,EAAM,CAM7B,EAAgB,IAAI,EAAoB,CAC5C,QALA,aAAiB,MACb,EAAM,QACN,wBAAwB,IAI5B,WACA,YACA,OACA,MAAO,EACR,CAAC,CAEF,GAAI,EACF,OAAO,EAGT,MAAM,EAGR,SAAS,EAAgB,EAA6C,CACpE,GAAI,OAAO,GAAU,WAAY,EAC/B,MAAO,UAIT,IAAM,EADW,EACK,KAOtB,OANI,IAAS,GAAK,IAAS,YAAoB,YAC3C,IAAS,GAAK,IAAS,iBAAyB,UAChD,IAAS,GAAK,IAAS,qBAAuB,IAAS,IAClD,YAEL,IAAS,GAAK,IAAS,mBAA2B,UAC/C"}

package/dist/integrations/secrets/manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manager.d.ts","names":[],"sources":["../../../src/integrations/secrets/manager.ts"],"sourcesContent":[],"mappings":";;;UAeU,eAAA;;AARU;AAepB;EAmBa,QAAA,CAAA,EAAA,MAAA;;AAaQ,UAhCJ,4BAAA,CAgCI;EAAyB;;;EAuBhC,EAAA,CAAA,EAAA,MAAA;EACD;;;;EA2BA,SAAA,CAAA,EAAA;IAAR,QAAA,EA1EqB,cA0ErB;IAOU,QAAA,CAAA,EAAA,MAAA;EACF,CAAA,EAAA;;;;;;;AA0EZ;;cAlJY,qBAAA,YAAiC;;;;wBAKvB;qBAQF,0BAAyB;uBAevB;uBAOR,2BACD,qBACT,QAAQ;uBAyBE,0BACF,qBACR,QAAQ;0BAOE,0BACF,qBACR,QAAQ;0BAMmB,kBAAkB;;;;KAgF7C,kBAAA,GAAqB,WAAW"}

package/dist/integrations/secrets/manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manager.js","names":["errors: SecretProviderError[]"],"sources":["../../../src/integrations/secrets/manager.ts"],"sourcesContent":["import { SecretProviderError } from './provider';\nimport type {\n  SecretProvider,\n  SecretReference,\n  SecretRotationResult,\n  SecretValue,\n  SecretWritePayload,\n} from './provider';\n\ninterface ProviderRegistration {\n  readonly provider: SecretProvider;\n  readonly priority: number;\n  readonly order: number;\n}\n\ninterface RegisterOptions {\n  /**\n   * Larger priority values are attempted first. Defaults to 0.\n   */\n  priority?: number;\n}\n\nexport interface SecretProviderManagerOptions {\n  /**\n   * Override manager identifier. Defaults to \"secret-provider-manager\".\n   */\n  id?: string;\n  /**\n   * Providers to pre-register. They are registered in array order with\n   * descending priority (first entry wins ties).\n   */\n  providers?: { provider: SecretProvider; priority?: number }[];\n}\n\n/**\n * Composite secret provider that delegates to registered providers.\n * Providers are attempted in order of descending priority, respecting the\n * registration order for ties. This enables privileged overrides (e.g.\n * environment variables) while still supporting durable backends like GCP\n * Secret Manager.\n */\nexport class SecretProviderManager implements SecretProvider {\n  readonly id: string;\n  private readonly providers: ProviderRegistration[] = [];\n  private registrationCounter = 0;\n\n  constructor(options: SecretProviderManagerOptions = {}) {\n    this.id = options.id ?? 'secret-provider-manager';\n    const initialProviders = options.providers ?? [];\n    for (const entry of initialProviders) {\n      this.register(entry.provider, { priority: entry.priority });\n    }\n  }\n\n  register(provider: SecretProvider, options: RegisterOptions = {}): this {\n    this.providers.push({\n      provider,\n      priority: options.priority ?? 0,\n      order: this.registrationCounter++,\n    });\n    this.providers.sort((a, b) => {\n      if (a.priority !== b.priority) {\n        return b.priority - a.priority;\n      }\n      return a.order - b.order;\n    });\n    return this;\n  }\n\n  canHandle(reference: SecretReference): boolean {\n    return this.providers.some(({ provider }) =>\n      safeCanHandle(provider, reference)\n    );\n  }\n\n  async getSecret(\n    reference: SecretReference,\n    options?: SecretFetchOptions\n  ): Promise<SecretValue> {\n    const errors: SecretProviderError[] = [];\n\n    for (const { provider } of this.providers) {\n      if (!safeCanHandle(provider, reference)) {\n        continue;\n      }\n      try {\n        return await provider.getSecret(reference, options);\n      } catch (error) {\n        if (error instanceof SecretProviderError) {\n          errors.push(error);\n          if (error.code !== 'NOT_FOUND') {\n            break;\n          }\n          continue;\n        }\n        throw error;\n      }\n    }\n\n    throw this.composeError('getSecret', reference, errors, options?.version);\n  }\n\n  async setSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    return this.delegateToFirst('setSecret', reference, (provider) =>\n      provider.setSecret(reference, payload)\n    );\n  }\n\n  async rotateSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult> {\n    return this.delegateToFirst('rotateSecret', reference, (provider) =>\n      provider.rotateSecret(reference, payload)\n    );\n  }\n\n  async deleteSecret(reference: SecretReference): Promise<void> {\n    await this.delegateToFirst('deleteSecret', reference, (provider) =>\n      provider.deleteSecret(reference)\n    );\n  }\n\n  private async delegateToFirst<T>(\n    operation: 'setSecret' | 'rotateSecret' | 'deleteSecret',\n    reference: SecretReference,\n    invoker: (provider: SecretProvider) => Promise<T>\n  ): Promise<T> {\n    const errors: SecretProviderError[] = [];\n\n    for (const { provider } of this.providers) {\n      if (!safeCanHandle(provider, reference)) {\n        continue;\n      }\n      try {\n        return await invoker(provider);\n      } catch (error) {\n        if (error instanceof SecretProviderError) {\n          errors.push(error);\n          continue;\n        }\n        throw error;\n      }\n    }\n\n    throw this.composeError(operation, reference, errors);\n  }\n\n  private composeError(\n    operation: string,\n    reference: SecretReference,\n    errors: SecretProviderError[],\n    version?: string\n  ): SecretProviderError {\n    if (errors.length === 1) {\n      const [singleError] = errors;\n      if (singleError) {\n        return singleError;\n      }\n    }\n\n    const messageParts = [\n      `No registered secret provider could ${operation}`,\n      `reference \"${reference}\"`,\n    ];\n    if (version) {\n      messageParts.push(`(version: ${version})`);\n    }\n    if (errors.length > 1) {\n      messageParts.push(\n        `Attempts: ${errors\n          .map((error) => `${error.provider}:${error.code}`)\n          .join(', ')}`\n      );\n    }\n\n    return new SecretProviderError({\n      message: messageParts.join(' '),\n      provider: this.id,\n      reference,\n      code: errors.length > 0 ? errors[errors.length - 1]!.code : 'UNKNOWN',\n      cause: errors,\n    });\n  }\n}\n\nfunction safeCanHandle(\n  provider: SecretProvider,\n  reference: SecretReference\n): boolean {\n  try {\n    return provider.canHandle(reference);\n  } catch {\n    return false;\n  }\n}\n\ntype SecretFetchOptions = Parameters<SecretProvider['getSecret']>[1];\n"],"mappings":"oDAyCA,IAAa,EAAb,KAA6D,CAC3D,GACA,UAAqD,EAAE,CACvD,oBAA8B,EAE9B,YAAY,EAAwC,EAAE,CAAE,CACtD,KAAK,GAAK,EAAQ,IAAM,0BACxB,IAAM,EAAmB,EAAQ,WAAa,EAAE,CAChD,IAAK,IAAM,KAAS,EAClB,KAAK,SAAS,EAAM,SAAU,CAAE,SAAU,EAAM,SAAU,CAAC,CAI/D,SAAS,EAA0B,EAA2B,EAAE,CAAQ,CAYtE,OAXA,KAAK,UAAU,KAAK,CAClB,WACA,SAAU,EAAQ,UAAY,EAC9B,MAAO,KAAK,sBACb,CAAC,CACF,KAAK,UAAU,MAAM,EAAG,IAClB,EAAE,WAAa,EAAE,SAGd,EAAE,MAAQ,EAAE,MAFV,EAAE,SAAW,EAAE,SAGxB,CACK,KAGT,UAAU,EAAqC,CAC7C,OAAO,KAAK,UAAU,MAAM,CAAE,cAC5B,EAAc,EAAU,EAAU,CACnC,CAGH,MAAM,UACJ,EACA,EACsB,CACtB,IAAMA,EAAgC,EAAE,CAExC,IAAK,GAAM,CAAE,cAAc,KAAK,UACzB,KAAc,EAAU,EAAU,CAGvC,GAAI,CACF,OAAO,MAAM,EAAS,UAAU,EAAW,EAAQ,OAC5C,EAAO,CACd,GAAI,aAAiB,EAAqB,CAExC,GADA,EAAO,KAAK,EAAM,CACd,EAAM,OAAS,YACjB,MAEF,SAEF,MAAM,EAIV,MAAM,KAAK,aAAa,YAAa,EAAW,EAAQ,GAAS,QAAQ,CAG3E,MAAM,UACJ,EACA,EAC+B,CAC/B,OAAO,KAAK,gBAAgB,YAAa,EAAY,GACnD,EAAS,UAAU,EAAW,EAAQ,CACvC,CAGH,MAAM,aACJ,EACA,EAC+B,CAC/B,OAAO,KAAK,gBAAgB,eAAgB,EAAY,GACtD,EAAS,aAAa,EAAW,EAAQ,CAC1C,CAGH,MAAM,aAAa,EAA2C,CAC5D,MAAM,KAAK,gBAAgB,eAAgB,EAAY,GACrD,EAAS,aAAa,EAAU,CACjC,CAGH,MAAc,gBACZ,EACA,EACA,EACY,CACZ,IAAMA,EAAgC,EAAE,CAExC,IAAK,GAAM,CAAE,cAAc,KAAK,UACzB,KAAc,EAAU,EAAU,CAGvC,GAAI,CACF,OAAO,MAAM,EAAQ,EAAS,OACvB,EAAO,CACd,GAAI,aAAiB,EAAqB,CACxC,EAAO,KAAK,EAAM,CAClB,SAEF,MAAM,EAIV,MAAM,KAAK,aAAa,EAAW,EAAW,EAAO,CAGvD,aACE,EACA,EACA,EACA,EACqB,CACrB,GAAI,EAAO,SAAW,EAAG,CACvB,GAAM,CAAC,GAAe,EACtB,GAAI,EACF,OAAO,EAIX,IAAM,EAAe,CACnB,uCAAuC,IACvC,cAAc,EAAU,GACzB,CAYD,OAXI,GACF,EAAa,KAAK,aAAa,EAAQ,GAAG,CAExC,EAAO,OAAS,GAClB,EAAa,KACX,aAAa,EACV,IAAK,GAAU,GAAG,EAAM,SAAS,GAAG,EAAM,OAAO,CACjD,KAAK,KAAK,GACd,CAGI,IAAI,EAAoB,CAC7B,QAAS,EAAa,KAAK,IAAI,CAC/B,SAAU,KAAK,GACf,YACA,KAAM,EAAO,OAAS,EAAI,EAAO,EAAO,OAAS,GAAI,KAAO,UAC5D,MAAO,EACR,CAAC,GAIN,SAAS,EACP,EACA,EACS,CACT,GAAI,CACF,OAAO,EAAS,UAAU,EAAU,MAC9B,CACN,MAAO"}

package/dist/integrations/secrets/provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.d.ts","names":[],"sources":["../../../src/integrations/secrets/provider.ts"],"sourcesContent":[],"mappings":";KAEY,eAAA;AAAA,UAEK,WAAA,CAFU;EAEV,IAAA,EACT,UADoB;EACpB,OAAA,CAAA,EAAA,MAAA;EAEK,QAAA,CAAA,EAAA,MAAA,CAAA,MAAA,EAAA,MAAA,CAAA;EACE,WAAA,EAAA,IAAA;;AAGE,UAAA,kBAAA,CAAkB;EAIvB,OAAA,CAAA,EAAA,MAAA;AAEZ;AACiB,KAHL,qBAAA,GAGK,OAAA,GAAA,QAAA,GAAA,QAAA;AACJ,UAFI,kBAAA,CAEJ;EAEF,IAAA,EAAA,MAAA,GAHM,UAGN;EAAM,QAAA,CAAA,EAFJ,qBAEI;EAGA,WAAA,CAAA,EAAA,MAAA;EAKA,MAAA,CAAA,EARN,MAQM,CAAA,MAAc,EAAA,MAAA,CAAA;;AAIhB,UATE,oBAAA,CASF;EACD,SAAA,EATD,eASC;EACD,OAAA,EAAA,MAAA;;AAEE,UARE,cAAA,CAQF;EACF,SAAA,EAAA,EAAA,MAAA;EACA,SAAA,CAAA,SAAA,EARU,eAQV,CAAA,EAAA,OAAA;EAAR,SAAA,CAAA,SAAA,EANU,eAMV,EAAA,OAAA,CAAA,EALS,kBAKT,CAAA,EAJA,OAIA,CAJQ,WAIR,CAAA;EAEU,SAAA,CAAA,SAAA,EAJA,eAIA,EAAA,OAAA,EAHF,kBAGE,CAAA,EAFV,OAEU,CAFF,oBAEE,CAAA;EACF,YAAA,CAAA,SAAA,EADE,eACF,EAAA,OAAA,EAAA,kBAAA,CAAA,EACR,OADQ,CACA,oBADA,CAAA;EACA,YAAA,CAAA,SAAA,EACa,eADb,CAAA,EAC+B,OAD/B,CAAA,IAAA,CAAA;;AACa,UAGT,eAAA,CAHS;EAAkB,QAAA,EAAA,MAAA;EAAO,IAAA,EAAA,MAAA;EAGlC,MAAA,CAAA,EAGN,MAHM,CAAA,MAAe,EAAA,MAAA,CAGrB;AAGX;AAEsB,cAFT,mBAAA,SAA4B,KAAA,CAEnB;EAOP,SAAA,QAAA,EAAA,MAAA;EACJ,SAAA,SAAA,EARW,eAQX;EAV8B,SAAA,IAAA,EAAA,WAAA,GAAA,WAAA,GAAA,SAAA,GAAA,SAAA;EAAK,SAAA,KAAA,CAAA,EAAA,OAAA;EAsB9B,WAAA,CAAA,MAAc,EAAA;IAiDd,OAAA,EAAA,MAAA;;eA9DD;WACJ;;;;iBAYK,cAAA,YAA0B,kBAAkB;iBAiD5C,sBAAA,UACL,qBACR"}

package/dist/integrations/secrets/provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.js","names":[],"sources":["../../../src/integrations/secrets/provider.ts"],"sourcesContent":["import { Buffer } from 'node:buffer';\n\nexport type SecretReference = string;\n\nexport interface SecretValue {\n  data: Uint8Array;\n  version?: string;\n  metadata?: Record<string, string>;\n  retrievedAt: Date;\n}\n\nexport interface SecretFetchOptions {\n  version?: string;\n}\n\nexport type SecretPayloadEncoding = 'utf-8' | 'base64' | 'binary';\n\nexport interface SecretWritePayload {\n  data: string | Uint8Array;\n  encoding?: SecretPayloadEncoding;\n  contentType?: string;\n  labels?: Record<string, string>;\n}\n\nexport interface SecretRotationResult {\n  reference: SecretReference;\n  version: string;\n}\n\nexport interface SecretProvider {\n  readonly id: string;\n  canHandle(reference: SecretReference): boolean;\n  getSecret(\n    reference: SecretReference,\n    options?: SecretFetchOptions\n  ): Promise<SecretValue>;\n  setSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult>;\n  rotateSecret(\n    reference: SecretReference,\n    payload: SecretWritePayload\n  ): Promise<SecretRotationResult>;\n  deleteSecret(reference: SecretReference): Promise<void>;\n}\n\nexport interface ParsedSecretUri {\n  provider: string;\n  path: string;\n  extras?: Record<string, string>;\n}\n\nexport class SecretProviderError extends Error {\n  readonly provider: string;\n  readonly reference: SecretReference;\n  readonly code: 'NOT_FOUND' | 'FORBIDDEN' | 'INVALID' | 'UNKNOWN';\n  readonly cause?: unknown;\n\n  constructor(params: {\n    message: string;\n    provider: string;\n    reference: SecretReference;\n    code?: SecretProviderError['code'];\n    cause?: unknown;\n  }) {\n    super(params.message);\n    this.name = 'SecretProviderError';\n    this.provider = params.provider;\n    this.reference = params.reference;\n    this.code = params.code ?? 'UNKNOWN';\n    this.cause = params.cause;\n  }\n}\n\nexport function parseSecretUri(reference: SecretReference): ParsedSecretUri {\n  if (!reference) {\n    throw new SecretProviderError({\n      message: 'Secret reference cannot be empty',\n      provider: 'unknown',\n      reference,\n      code: 'INVALID',\n    });\n  }\n\n  const [scheme, rest] = reference.split('://');\n  if (!scheme || !rest) {\n    throw new SecretProviderError({\n      message: `Invalid secret reference: ${reference}`,\n      provider: 'unknown',\n      reference,\n      code: 'INVALID',\n    });\n  }\n\n  const queryIndex = rest.indexOf('?');\n  if (queryIndex === -1) {\n    return {\n      provider: scheme,\n      path: rest,\n    };\n  }\n\n  const path = rest.slice(0, queryIndex);\n  const query = rest.slice(queryIndex + 1);\n  const extras = Object.fromEntries(\n    query\n      .split('&')\n      .filter(Boolean)\n      .map((pair) => {\n        const [keyRaw, valueRaw] = pair.split('=');\n        const key = keyRaw ?? '';\n        const value = valueRaw ?? '';\n        return [decodeURIComponent(key), decodeURIComponent(value)];\n      })\n  );\n\n  return {\n    provider: scheme,\n    path,\n    extras,\n  };\n}\n\nexport function normalizeSecretPayload(\n  payload: SecretWritePayload\n): Uint8Array {\n  if (payload.data instanceof Uint8Array) {\n    return payload.data;\n  }\n\n  if (payload.encoding === 'base64') {\n    return Buffer.from(payload.data, 'base64');\n  }\n\n  if (payload.encoding === 'binary') {\n    return Buffer.from(payload.data, 'binary');\n  }\n\n  return Buffer.from(payload.data, 'utf-8');\n}\n"],"mappings":"qCAqDA,IAAa,EAAb,cAAyC,KAAM,CAC7C,SACA,UACA,KACA,MAEA,YAAY,EAMT,CACD,MAAM,EAAO,QAAQ,CACrB,KAAK,KAAO,sBACZ,KAAK,SAAW,EAAO,SACvB,KAAK,UAAY,EAAO,UACxB,KAAK,KAAO,EAAO,MAAQ,UAC3B,KAAK,MAAQ,EAAO,QAIxB,SAAgB,EAAe,EAA6C,CAC1E,GAAI,CAAC,EACH,MAAM,IAAI,EAAoB,CAC5B,QAAS,mCACT,SAAU,UACV,YACA,KAAM,UACP,CAAC,CAGJ,GAAM,CAAC,EAAQ,GAAQ,EAAU,MAAM,MAAM,CAC7C,GAAI,CAAC,GAAU,CAAC,EACd,MAAM,IAAI,EAAoB,CAC5B,QAAS,6BAA6B,IACtC,SAAU,UACV,YACA,KAAM,UACP,CAAC,CAGJ,IAAM,EAAa,EAAK,QAAQ,IAAI,CACpC,GAAI,IAAe,GACjB,MAAO,CACL,SAAU,EACV,KAAM,EACP,CAGH,IAAM,EAAO,EAAK,MAAM,EAAG,EAAW,CAChC,EAAQ,EAAK,MAAM,EAAa,EAAE,CAaxC,MAAO,CACL,SAAU,EACV,OACA,OAfa,OAAO,YACpB,EACG,MAAM,IAAI,CACV,OAAO,QAAQ,CACf,IAAK,GAAS,CACb,GAAM,CAAC,EAAQ,GAAY,EAAK,MAAM,IAAI,CACpC,EAAM,GAAU,GAChB,EAAQ,GAAY,GAC1B,MAAO,CAAC,mBAAmB,EAAI,CAAE,mBAAmB,EAAM,CAAC,EAC3D,CACL,CAMA,CAGH,SAAgB,EACd,EACY,CAaZ,OAZI,EAAQ,gBAAgB,WACnB,EAAQ,KAGb,EAAQ,WAAa,SAChB,EAAO,KAAK,EAAQ,KAAM,SAAS,CAGxC,EAAQ,WAAa,SAChB,EAAO,KAAK,EAAQ,KAAM,SAAS,CAGrC,EAAO,KAAK,EAAQ,KAAM,QAAQ"}

package/dist/integrations/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../../src/integrations/spec.ts"],"sourcesContent":[],"mappings":";;;;KAGY,mBAAA;KAgBA,wBAAA;AAhBA,UAkBK,eAAA,SAAwB,aAlBV,CAAA;EAgBnB;EAEK,GAAA,EAAA,MAAA;EASA;EAOA,OAAA,EAAA,MAAA;EAOA,QAAA,EAlBL,mBAkB4B;EAOvB,WAAA,EAAA,MAAA;AAOjB;AAOiB,UAnCA,4BAAA,CAmCe;EACxB;EAEU,QAAA,EApCN,aAoCM,EAAA;EAEF;EAEA,QAAA,CAAA,EAtCH,qBAsCG,EAAA;;AAIA,UAvCC,uBAAA,CAuCD;EAMH;EAGC,MAAA,EAAA,OAAA;EAAoB;EAMrB,OAAA,CAAA,EAlDD,MAkDC,CAAA,MAAA,EAAA,OAAuB,CAAA;;AAY1B,UA3DO,uBAAA,CA2DP;EAI4B;EAgBZ,MAAA,EAAA,OAAA;EAAsB;EAAe,OAAA,CAAA,EA3EnD,MA2EmD,CAAA,MAAA,EAAA,MAAA,CAAA;AAK/D;UA7EiB,oBAAA;;;;;;UAOA,sBAAA;;;;;;UAOA,eAAA;QACT;;kBAEU;;gBAEF;;gBAEA;;gBAEA;;gBAEA;;;;;;;;;aAMH;;;cAGC;;cAMD,uBAAA;;iBAGI;UASP;sCAI4B;0BAgBZ,sBAAsB;;iBAKhC,sBAAA,OAA6B"}

package/dist/integrations/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":["latest: IntegrationSpec | undefined"],"sources":["../../src/integrations/spec.ts"],"sourcesContent":["import type { OwnerShipMeta } from '../ownership';\nimport type { CapabilityRef, CapabilityRequirement } from '../capabilities';\n\nexport type IntegrationCategory =\n  | 'payments'\n  | 'email'\n  | 'calendar'\n  | 'sms'\n  | 'ai-llm'\n  | 'ai-voice'\n  | 'speech-to-text'\n  | 'vector-db'\n  | 'storage'\n  | 'accounting'\n  | 'crm'\n  | 'helpdesk'\n  | 'open-banking'\n  | 'custom';\n\nexport type IntegrationOwnershipMode = 'managed' | 'byok';\n\nexport interface IntegrationMeta extends OwnerShipMeta {\n  /** Stable provider slug (e.g., \"stripe\", \"openai\"). */\n  key: string;\n  /** Provider version (increment on breaking API changes). */\n  version: number;\n  category: IntegrationCategory;\n  displayName: string;\n}\n\nexport interface IntegrationCapabilityMapping {\n  /** Which CapabilitySpec this integration provides. */\n  provides: CapabilityRef[];\n  /** Optional: which capabilities it requires (e.g., storage for caching). */\n  requires?: CapabilityRequirement[];\n}\n\nexport interface IntegrationConfigSchema {\n  /** JSON Schema or SchemaModel defining required config fields. */\n  schema: unknown;\n  /** Example configuration (for docs/UI). */\n  example?: Record<string, unknown>;\n}\n\nexport interface IntegrationSecretSchema {\n  /** JSON Schema or SchemaModel describing secret fields. */\n  schema: unknown;\n  /** Redacted example for documentation/UI. */\n  example?: Record<string, string>;\n}\n\nexport interface IntegrationByokSetup {\n  /** Human-readable instructions for tenants configuring BYOK accounts. */\n  setupInstructions?: string;\n  /** Required scopes/permissions for BYOK accounts. */\n  requiredScopes?: string[];\n}\n\nexport interface IntegrationHealthCheck {\n  /** Endpoint or method to validate connection health. */\n  method?: 'ping' | 'list' | 'custom';\n  /** Timeout in ms for health check. */\n  timeoutMs?: number;\n}\n\nexport interface IntegrationSpec {\n  meta: IntegrationMeta;\n  /** Supported ownership modes for this provider. */\n  supportedModes: IntegrationOwnershipMode[];\n  /** Which capabilities this integration provides/requires. */\n  capabilities: IntegrationCapabilityMapping;\n  /** Configuration schema (API keys, endpoints, etc.). */\n  configSchema: IntegrationConfigSchema;\n  /** Secret schema (API/key material stored via secretRef). */\n  secretSchema: IntegrationSecretSchema;\n  /** Optional health check configuration. */\n  healthCheck?: IntegrationHealthCheck;\n  /** Documentation URL. */\n  docsUrl?: string;\n  /** Rate limits or usage constraints. */\n  constraints?: {\n    rateLimit?: { rpm?: number; rph?: number };\n    quotas?: Record<string, number>;\n  };\n  /** Provider-specific metadata for BYOK setup flows. */\n  byokSetup?: IntegrationByokSetup;\n}\n\nconst integrationKey = (meta: Pick<IntegrationMeta, 'key' | 'version'>) =>\n  `${meta.key}.v${meta.version}`;\n\nexport class IntegrationSpecRegistry {\n  private readonly items = new Map<string, IntegrationSpec>();\n\n  register(spec: IntegrationSpec): this {\n    const key = integrationKey(spec.meta);\n    if (this.items.has(key)) {\n      throw new Error(`Duplicate IntegrationSpec ${key}`);\n    }\n    this.items.set(key, spec);\n    return this;\n  }\n\n  list(): IntegrationSpec[] {\n    return [...this.items.values()];\n  }\n\n  get(key: string, version?: number): IntegrationSpec | undefined {\n    if (version != null) {\n      return this.items.get(integrationKey({ key, version }));\n    }\n    let latest: IntegrationSpec | undefined;\n    let maxVersion = -Infinity;\n    for (const spec of this.items.values()) {\n      if (spec.meta.key !== key) continue;\n      if (spec.meta.version > maxVersion) {\n        maxVersion = spec.meta.version;\n        latest = spec;\n      }\n    }\n    return latest;\n  }\n\n  getByCategory(category: IntegrationCategory): IntegrationSpec[] {\n    return this.list().filter((spec) => spec.meta.category === category);\n  }\n}\n\nexport function makeIntegrationSpecKey(meta: IntegrationMeta) {\n  return integrationKey(meta);\n}\n"],"mappings":"AAwFA,MAAM,EAAkB,GACtB,GAAG,EAAK,IAAI,IAAI,EAAK,UAEvB,IAAa,EAAb,KAAqC,CACnC,MAAyB,IAAI,IAE7B,SAAS,EAA6B,CACpC,IAAM,EAAM,EAAe,EAAK,KAAK,CACrC,GAAI,KAAK,MAAM,IAAI,EAAI,CACrB,MAAU,MAAM,6BAA6B,IAAM,CAGrD,OADA,KAAK,MAAM,IAAI,EAAK,EAAK,CAClB,KAGT,MAA0B,CACxB,MAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,CAGjC,IAAI,EAAa,EAA+C,CAC9D,GAAI,GAAW,KACb,OAAO,KAAK,MAAM,IAAI,EAAe,CAAE,MAAK,UAAS,CAAC,CAAC,CAEzD,IAAIA,EACA,EAAa,KACjB,IAAK,IAAM,KAAQ,KAAK,MAAM,QAAQ,CAChC,EAAK,KAAK,MAAQ,GAClB,EAAK,KAAK,QAAU,IACtB,EAAa,EAAK,KAAK,QACvB,EAAS,GAGb,OAAO,EAGT,cAAc,EAAkD,CAC9D,OAAO,KAAK,MAAM,CAAC,OAAQ,GAAS,EAAK,KAAK,WAAa,EAAS,GAIxE,SAAgB,EAAuB,EAAuB,CAC5D,OAAO,EAAe,EAAK"}

package/dist/jobs/gcp-cloud-tasks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-cloud-tasks.d.ts","names":[],"sources":["../../src/jobs/gcp-cloud-tasks.ts"],"sourcesContent":[],"mappings":";;;UAIU,oBAAA;;IAAA,MAAA,EAAA,MAAA;IAOI,IAAA,EAAA;MACI,WAAA,EAAA;QAKZ,UAAA,EAAA,MAAA,GAAA,MAAA;QAAO,GAAA,EAAA,MAAA;QAGI,IAAA,EATH,MASG;QASJ,OAAA,CAAA,EAjBK,MAiBc,CAAA,MAAA,EAAA,MAAA,CAAA;QAGQ,SAAA,CAAA,EAAA;UAI3B,mBAAA,EAAA,MAAA;QACA,CAAA;MACI,CAAA;MAAJ,YAAA,CAAA,EAAA;QAAR,OAAA,EAAA,MAAA;MAwCqD,CAAA;IAAX,CAAA;EAQ/B,CAAA,CAAA,EArEV,OAqEU,CAAA,OAAA,CAAA;;AAzDmC,UATlC,yBAAA,CASkC;UARzC;;;;;;;cAQG,kBAAA,YAA8B;;;uBAGH;8CAI3B,oBACA,iBACR,QAAQ,IAAI;+CAwC8B,WAAW;;UAQ1C"}

package/dist/jobs/gcp-cloud-tasks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-cloud-tasks.js","names":["options: GcpCloudTasksQueueOptions"],"sources":["../../src/jobs/gcp-cloud-tasks.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { EnqueueOptions, Job, JobHandler, JobQueue } from './queue';\n\ninterface CloudTasksClientLike {\n  createTask(request: {\n    parent: string;\n    task: {\n      httpRequest: {\n        httpMethod: number | string;\n        url: string;\n        body: Buffer;\n        headers?: Record<string, string>;\n        oidcToken?: { serviceAccountEmail: string };\n      };\n      scheduleTime?: { seconds: number };\n    };\n  }): Promise<unknown>;\n}\n\nexport interface GcpCloudTasksQueueOptions {\n  client: CloudTasksClientLike;\n  projectId: string;\n  location: string;\n  queue: string;\n  resolveUrl(jobType: string): string;\n  serviceAccountEmail?: string;\n}\n\nexport class GcpCloudTasksQueue implements JobQueue {\n  private readonly handlers = new Map<string, JobHandler>();\n\n  constructor(private readonly options: GcpCloudTasksQueueOptions) {}\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    const enqueueTime =\n      options.delaySeconds != null\n        ? { seconds: Math.floor(Date.now() / 1000) + options.delaySeconds }\n        : undefined;\n    const body = Buffer.from(\n      JSON.stringify({\n        id: randomUUID(),\n        type: jobType,\n        payload,\n      }),\n      'utf-8'\n    );\n    await this.options.client.createTask({\n      parent: `projects/${this.options.projectId}/locations/${this.options.location}/queues/${this.options.queue}`,\n      task: {\n        httpRequest: {\n          httpMethod: 'POST',\n          url: this.options.resolveUrl(jobType),\n          body,\n          headers: { 'Content-Type': 'application/json' },\n          oidcToken: this.options.serviceAccountEmail\n            ? { serviceAccountEmail: this.options.serviceAccountEmail }\n            : undefined,\n        },\n        scheduleTime: enqueueTime,\n      },\n    });\n\n    return {\n      id: randomUUID(),\n      type: jobType,\n      payload,\n      status: 'pending',\n      attempts: 0,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    };\n  }\n\n  register<TPayload>(jobType: string, handler: JobHandler<TPayload>): void {\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    // Execution is handled by Cloud Tasks via HTTP callbacks.\n  }\n\n  async stop(): Promise<void> {\n    this.handlers.clear();\n  }\n}\n"],"mappings":"yCA6BA,IAAa,EAAb,KAAoD,CAClD,SAA4B,IAAI,IAEhC,YAAY,EAAqD,CAApC,KAAA,QAAA,EAE7B,MAAM,QACJ,EACA,EACA,EAA0B,EAAE,CACJ,CACxB,IAAM,EACJ,EAAQ,cAAgB,KAEpB,IAAA,GADA,CAAE,QAAS,KAAK,MAAM,KAAK,KAAK,CAAG,IAAK,CAAG,EAAQ,aAAc,CAEjE,EAAO,OAAO,KAClB,KAAK,UAAU,CACb,GAAI,GAAY,CAChB,KAAM,EACN,UACD,CAAC,CACF,QACD,CAiBD,OAhBA,MAAM,KAAK,QAAQ,OAAO,WAAW,CACnC,OAAQ,YAAY,KAAK,QAAQ,UAAU,aAAa,KAAK,QAAQ,SAAS,UAAU,KAAK,QAAQ,QACrG,KAAM,CACJ,YAAa,CACX,WAAY,OACZ,IAAK,KAAK,QAAQ,WAAW,EAAQ,CACrC,OACA,QAAS,CAAE,eAAgB,mBAAoB,CAC/C,UAAW,KAAK,QAAQ,oBACpB,CAAE,oBAAqB,KAAK,QAAQ,oBAAqB,CACzD,IAAA,GACL,CACD,aAAc,EACf,CACF,CAAC,CAEK,CACL,GAAI,GAAY,CAChB,KAAM,EACN,UACA,OAAQ,UACR,SAAU,EACV,UAAW,IAAI,KACf,UAAW,IAAI,KAChB,CAGH,SAAmB,EAAiB,EAAqC,CACvE,KAAK,SAAS,IAAI,EAAS,EAAsB,CAGnD,OAAc,EAId,MAAM,MAAsB,CAC1B,KAAK,SAAS,OAAO"}

package/dist/jobs/gcp-pubsub.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-pubsub.d.ts","names":[],"sources":["../../src/jobs/gcp-pubsub.ts"],"sourcesContent":[],"mappings":";;;UAIU,gBAAA;;IAAA,cAAA,CAAgB,OAAA,EAAA;MAMT,IAAA,EAJmB,MAInB;IAKJ,CAAA,CAAA,EATkC,OASlC,CAAA,MAAe,CAAA;EAGY,CAAA;;AAK1B,UAbG,qBAAA,CAaH;EACG,MAAA,EAbP,gBAaO;EAAJ,SAAA,EAAA,MAAA;;AAuB6C,cAhC7C,cAAA,YAA0B,QAgCmB,CAAA;EAAX,iBAAA,OAAA;EAQ/B,iBAAA,QAAA;EAxCuB,WAAA,CAAA,OAAA,EAGC,qBAHD;EAAQ,OAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAOlC,QAPkC,EAAA,QAAA,CAAA,EAQjC,cARiC,CAAA,EAS1C,OAT0C,CASlC,GATkC,CAS9B,QAT8B,CAAA,CAAA;+CAgCA,WAAW;;UAQ1C"}

package/dist/jobs/gcp-pubsub.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gcp-pubsub.js","names":["options: GcpPubSubQueueOptions"],"sources":["../../src/jobs/gcp-pubsub.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { EnqueueOptions, Job, JobHandler, JobQueue } from './queue';\n\ninterface PubSubClientLike {\n  topic(name: string): {\n    publishMessage(message: { data: Buffer }): Promise<string>;\n  };\n}\n\nexport interface GcpPubSubQueueOptions {\n  client: PubSubClientLike;\n  topicName: string;\n}\n\nexport class GcpPubSubQueue implements JobQueue {\n  private readonly handlers = new Map<string, JobHandler>();\n\n  constructor(private readonly options: GcpPubSubQueueOptions) {}\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    _options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    await this.options.client.topic(this.options.topicName).publishMessage({\n      data: Buffer.from(\n        JSON.stringify({\n          id: randomUUID(),\n          type: jobType,\n          payload,\n        }),\n        'utf-8'\n      ),\n    });\n\n    return {\n      id: randomUUID(),\n      type: jobType,\n      payload,\n      status: 'pending',\n      attempts: 0,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    };\n  }\n\n  register<TPayload>(jobType: string, handler: JobHandler<TPayload>): void {\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    // Message consumption handled externally via Pub/Sub subscription.\n  }\n\n  async stop(): Promise<void> {\n    this.handlers.clear();\n  }\n}\n"],"mappings":"yCAeA,IAAa,EAAb,KAAgD,CAC9C,SAA4B,IAAI,IAEhC,YAAY,EAAiD,CAAhC,KAAA,QAAA,EAE7B,MAAM,QACJ,EACA,EACA,EAA2B,EAAE,CACL,CAYxB,OAXA,MAAM,KAAK,QAAQ,OAAO,MAAM,KAAK,QAAQ,UAAU,CAAC,eAAe,CACrE,KAAM,OAAO,KACX,KAAK,UAAU,CACb,GAAI,GAAY,CAChB,KAAM,EACN,UACD,CAAC,CACF,QACD,CACF,CAAC,CAEK,CACL,GAAI,GAAY,CAChB,KAAM,EACN,UACA,OAAQ,UACR,SAAU,EACV,UAAW,IAAI,KACf,UAAW,IAAI,KAChB,CAGH,SAAmB,EAAiB,EAAqC,CACvE,KAAK,SAAS,IAAI,EAAS,EAAsB,CAGnD,OAAc,EAId,MAAM,MAAsB,CAC1B,KAAK,SAAS,OAAO"}

package/dist/jobs/handlers/gmail-sync-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-sync-handler.d.ts","names":[],"sources":["../../../src/jobs/handlers/gmail-sync-handler.ts"],"sourcesContent":[],"mappings":";;;;;UAIiB,mBAAA,SAA4B;AAA5B,iBAED,sBAAA,CAF6B,OAAA,EAGlC,qBAHsD,CAAA,EAI9D,UAJ8D,CAInD,mBAJmD,CAAA"}

package/dist/jobs/handlers/gmail-sync-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-sync-handler.js","names":[],"sources":["../../../src/jobs/handlers/gmail-sync-handler.ts"],"sourcesContent":["import type { JobHandler } from '../queue';\nimport type { GmailIngestionAdapter } from '../../knowledge/ingestion/gmail-adapter';\nimport type { EmailThreadListQuery } from '../../integrations/providers/email';\n\nexport interface GmailSyncJobPayload extends EmailThreadListQuery {}\n\nexport function createGmailSyncHandler(\n  adapter: GmailIngestionAdapter\n): JobHandler<GmailSyncJobPayload> {\n  return async (job) => {\n    await adapter.syncThreads(job.payload);\n  };\n}\n"],"mappings":"AAMA,SAAgB,EACd,EACiC,CACjC,OAAO,KAAO,IAAQ,CACpB,MAAM,EAAQ,YAAY,EAAI,QAAQ"}

package/dist/jobs/handlers/storage-document-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-document-handler.d.ts","names":[],"sources":["../../../src/jobs/handlers/storage-document-handler.ts"],"sourcesContent":[],"mappings":";;;;;UAIiB,yBAAA;;EAAA,GAAA,EAAA,MAAA;AAKjB;AACW,iBADK,4BAAA,CACL,OAAA,EAAA,qBAAA,EAAA,OAAA,EACA,uBADA,CAAA,EAER,UAFQ,CAEG,yBAFH,CAAA"}

package/dist/jobs/handlers/storage-document-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-document-handler.js","names":[],"sources":["../../../src/jobs/handlers/storage-document-handler.ts"],"sourcesContent":["import type { ObjectStorageProvider } from '../../integrations/providers/storage';\nimport type { StorageIngestionAdapter } from '../../knowledge/ingestion/storage-adapter';\nimport type { JobHandler } from '../queue';\n\nexport interface StorageDocumentJobPayload {\n  bucket: string;\n  key: string;\n}\n\nexport function createStorageDocumentHandler(\n  storage: ObjectStorageProvider,\n  adapter: StorageIngestionAdapter\n): JobHandler<StorageDocumentJobPayload> {\n  return async (job) => {\n    const object = await storage.getObject({\n      bucket: job.payload.bucket,\n      key: job.payload.key,\n    });\n    if (!object) {\n      throw new Error(\n        `Object ${job.payload.bucket}/${job.payload.key} not found`\n      );\n    }\n    await adapter.ingestObject(object);\n  };\n}\n"],"mappings":"AASA,SAAgB,EACd,EACA,EACuC,CACvC,OAAO,KAAO,IAAQ,CACpB,IAAM,EAAS,MAAM,EAAQ,UAAU,CACrC,OAAQ,EAAI,QAAQ,OACpB,IAAK,EAAI,QAAQ,IAClB,CAAC,CACF,GAAI,CAAC,EACH,MAAU,MACR,UAAU,EAAI,QAAQ,OAAO,GAAG,EAAI,QAAQ,IAAI,YACjD,CAEH,MAAM,EAAQ,aAAa,EAAO"}

package/dist/jobs/memory-queue.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"memory-queue.d.ts","names":[],"sources":["../../src/jobs/memory-queue.ts"],"sourcesContent":[],"mappings":";;;cAIa,cAAA,YAA0B;;EAA1B,iBAAe,IAAA;EAUf,iBAAA,QAAA;EACA,QAAA,KAAA;EACI,QAAA,UAAA;EAAJ,WAAA,CAAA,cAAA,CAAA,EAAA,MAAA;EAAR,OAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAFQ,QAER,EAAA,OAAA,CAAA,EADQ,cACR,CAAA,EAAA,OAAA,CAAQ,GAAR,CAAY,QAAZ,CAAA,CAAA;EAiBqD,QAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAAX,UAAW,CAAA,QAAA,CAAA,CAAA,EAAA,IAAA;EAAX,KAAA,CAAA,CAAA,EAAA,IAAA;EAW/B,IAAA,CAAA,CAAA,EAAA,OAAA,CAAA,IAAA,CAAA;EAxCuB,QAAA,WAAA"}

package/dist/jobs/memory-queue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"memory-queue.js","names":["job: Job<TPayload>"],"sources":["../../src/jobs/memory-queue.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { EnqueueOptions, Job, JobHandler, JobQueue } from './queue';\n\nexport class MemoryJobQueue implements JobQueue {\n  private readonly jobs: Job[] = [];\n  private readonly handlers = new Map<string, JobHandler>();\n  private timer?: NodeJS.Timeout;\n  private processing = false;\n\n  constructor(private readonly pollIntervalMs = 200) {}\n\n  async enqueue<TPayload>(\n    jobType: string,\n    payload: TPayload,\n    options: EnqueueOptions = {}\n  ): Promise<Job<TPayload>> {\n    const job: Job<TPayload> = {\n      id: randomUUID(),\n      type: jobType,\n      payload,\n      status: 'pending',\n      attempts: 0,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    };\n    if (options.delaySeconds) {\n      job.updatedAt = new Date(Date.now() + options.delaySeconds * 1000);\n    }\n    this.jobs.push(job);\n    return job;\n  }\n\n  register<TPayload>(jobType: string, handler: JobHandler<TPayload>): void {\n    this.handlers.set(jobType, handler as JobHandler);\n  }\n\n  start(): void {\n    if (this.timer) return;\n    this.timer = setInterval(() => {\n      void this.processNext();\n    }, this.pollIntervalMs);\n  }\n\n  async stop(): Promise<void> {\n    if (this.timer) {\n      clearInterval(this.timer);\n      this.timer = undefined;\n    }\n    while (this.processing) {\n      await new Promise((resolve) => setTimeout(resolve, 10));\n    }\n  }\n\n  private async processNext() {\n    if (this.processing) return;\n    const job = this.jobs.find(\n      (j) => j.status === 'pending' && j.updatedAt <= new Date()\n    );\n    if (!job) return;\n    const handler = this.handlers.get(job.type);\n    if (!handler) return;\n\n    this.processing = true;\n    job.status = 'running';\n    job.updatedAt = new Date();\n    job.attempts += 1;\n\n    try {\n      await handler(job);\n      job.status = 'completed';\n      job.updatedAt = new Date();\n    } catch (error) {\n      job.status = 'failed';\n      job.lastError =\n        error instanceof Error ? error.message : 'Unknown job error';\n      job.updatedAt = new Date();\n    } finally {\n      this.processing = false;\n    }\n  }\n}\n"],"mappings":"yCAIA,IAAa,EAAb,KAAgD,CAC9C,KAA+B,EAAE,CACjC,SAA4B,IAAI,IAChC,MACA,WAAqB,GAErB,YAAY,EAAkC,IAAK,CAAtB,KAAA,eAAA,EAE7B,MAAM,QACJ,EACA,EACA,EAA0B,EAAE,CACJ,CACxB,IAAMA,EAAqB,CACzB,GAAI,GAAY,CAChB,KAAM,EACN,UACA,OAAQ,UACR,SAAU,EACV,UAAW,IAAI,KACf,UAAW,IAAI,KAChB,CAKD,OAJI,EAAQ,eACV,EAAI,UAAY,IAAI,KAAK,KAAK,KAAK,CAAG,EAAQ,aAAe,IAAK,EAEpE,KAAK,KAAK,KAAK,EAAI,CACZ,EAGT,SAAmB,EAAiB,EAAqC,CACvE,KAAK,SAAS,IAAI,EAAS,EAAsB,CAGnD,OAAc,CACR,AACJ,KAAK,QAAQ,gBAAkB,CACxB,KAAK,aAAa,EACtB,KAAK,eAAe,CAGzB,MAAM,MAAsB,CAK1B,IAJA,AAEE,KAAK,SADL,cAAc,KAAK,MAAM,CACZ,IAAA,IAER,KAAK,YACV,MAAM,IAAI,QAAS,GAAY,WAAW,EAAS,GAAG,CAAC,CAI3D,MAAc,aAAc,CAC1B,GAAI,KAAK,WAAY,OACrB,IAAM,EAAM,KAAK,KAAK,KACnB,GAAM,EAAE,SAAW,WAAa,EAAE,WAAa,IAAI,KACrD,CACD,GAAI,CAAC,EAAK,OACV,IAAM,EAAU,KAAK,SAAS,IAAI,EAAI,KAAK,CACtC,KAKL,CAHA,KAAK,WAAa,GAClB,EAAI,OAAS,UACb,EAAI,UAAY,IAAI,KACpB,EAAI,UAAY,EAEhB,GAAI,CACF,MAAM,EAAQ,EAAI,CAClB,EAAI,OAAS,YACb,EAAI,UAAY,IAAI,WACb,EAAO,CACd,EAAI,OAAS,SACb,EAAI,UACF,aAAiB,MAAQ,EAAM,QAAU,oBAC3C,EAAI,UAAY,IAAI,YACZ,CACR,KAAK,WAAa"}

package/dist/jobs/queue.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue.d.ts","names":[],"sources":["../../src/jobs/queue.ts"],"sourcesContent":[],"mappings":";KAAY,SAAA;AAAA,UAEK,GAFI,CAAA,WAAA,OAAA,CAAA,CAAA;EAEJ,EAAA,EAAA,MAAG;EAGT,IAAA,EAAA,MAAA;EACD,OAAA,EADC,QACD;EAEG,MAAA,EAFH,SAEG;EACA,QAAA,EAAA,MAAA;EAAI,SAAA,EADJ,IACI;EAIA,SAAA,EAJJ,IAII;EAML,SAAA,CAAA,EAAA,MAAU;;AACf,UAPU,cAAA,CAOV;EACF,YAAA,CAAA,EAAA,MAAA;EAAO,SAAA,CAAA,EAAA,MAAA;EAEK,WAAQ,CAAA,EAAA,MAAA;;AAIX,KARF,UAQE,CAAA,WAAA,OAAA,CAAA,GAAA,CAAA,GAAA,EAPP,GAOO,CAPH,QAOG,CAAA,EAAA,GANT,OAMS,CAAA,IAAA,CAAA;AACG,UALA,QAAA,CAKA;EAAJ,OAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAFA,QAEA,EAAA,OAAA,CAAA,EADC,cACD,CAAA,EAAR,OAAQ,CAAA,GAAA,CAAI,QAAJ,CAAA,CAAA;EAAR,QAAA,CAAA,QAAA,CAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAC0C,UAD1C,CACqD,QADrD,CAAA,CAAA,EAAA,IAAA;EACqD,KAAA,EAAA,EAAA,IAAA;EAAX,IAAA,EAAA,EAErC,OAFqC,CAAA,IAAA,CAAA"}

package/dist/jsonschema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonschema.d.ts","names":[],"sources":["../src/jsonschema.ts"],"sourcesContent":[],"mappings":";;;;;;AAOgB,iBAAA,iBAAA,CAAiB,IAAA,EACzB,YADyB,CACZ,cADY,EACI,cADJ,CAAA,CAAA,EAAA;EACZ,KAAA,gCAAA,GAAA,IAAA;EAAgB,MAAA,gCAAA,GAAA,IAAA;EAA7B,IAAA,EAAA;;;;;;;EAiBQ,CAAA;AAKhB,CAAA;AAKA;iBAVgB,eAAA;;iBAKA,cAAA;;iBAKA,eAAA"}

package/dist/jsonschema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jsonschema.js","names":["z"],"sources":["../src/jsonschema.ts"],"sourcesContent":["/**\n * Convert zod I/O to JSON Schema so adapters can generate OpenAPI/MCP.\n */\nimport type { ContractSpec } from './spec';\nimport type { AnySchemaModel } from '@lssm/lib.schema';\nimport z from 'zod';\n\nexport function jsonSchemaForSpec(\n  spec: ContractSpec<AnySchemaModel, AnySchemaModel>\n) {\n  return {\n    input: spec.io.input ? z.toJSONSchema(spec.io.input.getZod()) : null,\n    output: spec.io.output ? z.toJSONSchema(spec.io.output.getZod()) : null,\n    meta: {\n      name: spec.meta.name,\n      version: spec.meta.version,\n      kind: spec.meta.kind,\n      description: spec.meta.description,\n      tags: spec.meta.tags ?? [],\n      stability: spec.meta.stability ?? 'stable',\n    },\n  };\n}\n\n/** Helper to derive default REST path */\nexport function defaultRestPath(name: string, version: number) {\n  return `/${name.replace(/\\./g, '/')}/v${version}`;\n}\n\n/** Helper to derive default MCP tool name */\nexport function defaultMcpTool(name: string, version: number) {\n  return `${name}.v${version}`;\n}\n\n/** Helper to derive default GraphQL field name */\nexport function defaultGqlField(name: string, version: number) {\n  return `${name.replace(/\\./g, '_')}_v${version}`;\n}\n"],"mappings":"mBAOA,SAAgB,EACd,EACA,CACA,MAAO,CACL,MAAO,EAAK,GAAG,MAAQA,EAAE,aAAa,EAAK,GAAG,MAAM,QAAQ,CAAC,CAAG,KAChE,OAAQ,EAAK,GAAG,OAASA,EAAE,aAAa,EAAK,GAAG,OAAO,QAAQ,CAAC,CAAG,KACnE,KAAM,CACJ,KAAM,EAAK,KAAK,KAChB,QAAS,EAAK,KAAK,QACnB,KAAM,EAAK,KAAK,KAChB,YAAa,EAAK,KAAK,YACvB,KAAM,EAAK,KAAK,MAAQ,EAAE,CAC1B,UAAW,EAAK,KAAK,WAAa,SACnC,CACF,CAIH,SAAgB,EAAgB,EAAc,EAAiB,CAC7D,MAAO,IAAI,EAAK,QAAQ,MAAO,IAAI,CAAC,IAAI,IAI1C,SAAgB,EAAe,EAAc,EAAiB,CAC5D,MAAO,GAAG,EAAK,IAAI,IAIrB,SAAgB,EAAgB,EAAc,EAAiB,CAC7D,MAAO,GAAG,EAAK,QAAQ,MAAO,IAAI,CAAC,IAAI"}

package/dist/knowledge/binding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binding.d.ts","names":[],"sources":["../../src/knowledge/binding.ts"],"sourcesContent":[],"mappings":";UAAiB,mBAAA;EAAA"}

package/dist/knowledge/contracts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contracts.d.ts","names":[],"sources":["../../src/knowledge/contracts.ts"],"sourcesContent":[],"mappings":";;;;;;cA0Ga,uBAAqB,aAAA;;UAoBhC,mBAAA,CAAA;IApBW,UAAA,EAAA,KAAA;EAoBX,CAAA;;;;;;;;;;;;EApBgC,CAAA;EAAA,UAAA,EAAA;;;;;;;;;;;;;;;;;;;QAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;QAAA,UAAA,EAAA,IAAA;MAsBrB,CAAA;IAoBX,CAAA,CAAA;;;;;UA1CgC,mBAAA,CAAA;;;;IAsBA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;IAAA,UAAA,EAAA,KAAA;;;;;;;;;;;;;;;;;;;IAAA,IAAA,aAAA,CAAA;MAAA,OAAA,EAAA;QAsBrB,IAAA,+BAoBX,CAAA,OAAA,EAAA,OAAA,CAAA;QAAA,UAAA,EAAA,KAAA;MApBgC,CAAA;MAAA,IAAA,EAAA;;QAAA,UAAA,EAAA,IAAA;MAAA,CAAA;MAsBrB,UAAA,EAAA;QAoBX,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;;MApB+B,CAAA;IAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;IAAA,IAAA,+BAAA,KAAA,EAAA,MAAA,CAAA;IAAA,UAAA,EAAA,IAAA;EAsBpB,CAAA;CAoBX,CAAA,EAAA,SAAA,CAAA;AApBqC,cAlE1B,qBAkE0B,EAlEL,YAkEK,CAlEL,WAkEK,CAAA;EAAA,QAAA,EAAA;UA9CrC,mBAAA,CAAA;;;EA8CqC,KAAA,EAAA;IAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;IAsB1B,UAAA,EAAA,IAAA;EAQG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;UAhGkB,mBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsBrB,uBAAqB,aAAA;;UAoBhC,mBAAA,CAAA;;;;;UApBgC,mBAAA,CAAA;;;;cAsBrB,sBAAoB,aAAA;;UAoB/B,mBAAA,CAAA;;;;;;;;;;;cApB+B,mBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsBpB,4BAA0B,aAAA;;UAoBrC,mBAAA,CAAA;;;;;UApBqC,mBAAA,CAAA;;;;;;;;;;;;cAsB1B,oBAAoB,eAAe;iBAQhC,0BAAA,WAAqC,eAAY"}

package/dist/knowledge/contracts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"contracts.js","names":["SchemaModel","ScalarTypeEnum","knowledgeContracts: Record<string, ContractSpec<any, any>>"],"sources":["../../src/knowledge/contracts.ts"],"sourcesContent":["import { ScalarTypeEnum, SchemaModel } from '@lssm/lib.schema';\nimport { defineCommand, defineQuery, type ContractSpec } from '../spec';\nimport type { SpecRegistry } from '../registry';\n\nconst KnowledgeSyncSchedule = new SchemaModel({\n  name: 'KnowledgeSyncSchedule',\n  fields: {\n    enabled: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    cron: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    intervalMs: { type: ScalarTypeEnum.Int_unsecure(), isOptional: true },\n  },\n});\n\nconst KnowledgeSourceRecord = new SchemaModel({\n  name: 'KnowledgeSourceRecord',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: false },\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    spaceKey: { type: ScalarTypeEnum.NonEmptyString(), isOptional: false },\n    spaceVersion: { type: ScalarTypeEnum.Int_unsecure(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    sourceType: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    syncSchedule: { type: KnowledgeSyncSchedule, isOptional: true },\n    lastSyncStatus: {\n      type: ScalarTypeEnum.String_unsecure(),\n      isOptional: true,\n    },\n    lastSyncAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    itemsProcessed: { type: ScalarTypeEnum.Int_unsecure(), isOptional: true },\n    createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n  },\n});\n\nconst CreateKnowledgeSourceInput = new SchemaModel({\n  name: 'CreateKnowledgeSourceInput',\n  fields: {\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    spaceKey: { type: ScalarTypeEnum.NonEmptyString(), isOptional: false },\n    spaceVersion: { type: ScalarTypeEnum.Int_unsecure(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },\n    sourceType: { type: ScalarTypeEnum.NonEmptyString(), isOptional: false },\n    config: { type: ScalarTypeEnum.JSONObject(), isOptional: false },\n    syncSchedule: { type: KnowledgeSyncSchedule, isOptional: true },\n  },\n});\n\nconst UpdateKnowledgeSourceInput = new SchemaModel({\n  name: 'UpdateKnowledgeSourceInput',\n  fields: {\n    sourceId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    label: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n    config: { type: ScalarTypeEnum.JSONObject(), isOptional: true },\n    syncSchedule: { type: KnowledgeSyncSchedule, isOptional: true },\n  },\n});\n\nconst DeleteKnowledgeSourceInput = new SchemaModel({\n  name: 'DeleteKnowledgeSourceInput',\n  fields: {\n    sourceId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nconst DeleteKnowledgeSourceOutput = new SchemaModel({\n  name: 'DeleteKnowledgeSourceOutput',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n  },\n});\n\nconst ListKnowledgeSourcesInput = new SchemaModel({\n  name: 'ListKnowledgeSourcesInput',\n  fields: {\n    tenantId: { type: ScalarTypeEnum.ID(), isOptional: false },\n    spaceKey: { type: ScalarTypeEnum.NonEmptyString(), isOptional: true },\n  },\n});\n\nconst ListKnowledgeSourcesOutput = new SchemaModel({\n  name: 'ListKnowledgeSourcesOutput',\n  fields: {\n    sources: {\n      type: KnowledgeSourceRecord,\n      isOptional: false,\n      isArray: true,\n    },\n  },\n});\n\nconst TriggerKnowledgeSyncInput = new SchemaModel({\n  name: 'TriggerKnowledgeSyncInput',\n  fields: {\n    sourceId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nconst TriggerKnowledgeSyncOutput = new SchemaModel({\n  name: 'TriggerKnowledgeSyncOutput',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    itemsProcessed: { type: ScalarTypeEnum.Int_unsecure(), isOptional: true },\n    error: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },\n  },\n});\n\nexport const CreateKnowledgeSource = defineCommand({\n  meta: {\n    name: 'knowledge.source.create',\n    version: 1,\n    description: 'Create a knowledge source binding for a tenant.',\n    goal: 'Onboard a new knowledge ingestion source such as Notion or uploads.',\n    context:\n      'Used by Ops and App Studio to configure knowledge ingestion per tenant and space.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: CreateKnowledgeSourceInput,\n    output: KnowledgeSourceRecord,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const UpdateKnowledgeSource = defineCommand({\n  meta: {\n    name: 'knowledge.source.update',\n    version: 1,\n    description: 'Update metadata or configuration for a knowledge source.',\n    goal: 'Allow rotation of credentials, sync schedules, and labels.',\n    context:\n      'Supports editing how a tenant ingests knowledge (e.g., toggling sync cadence).',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: UpdateKnowledgeSourceInput,\n    output: KnowledgeSourceRecord,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const DeleteKnowledgeSource = defineCommand({\n  meta: {\n    name: 'knowledge.source.delete',\n    version: 1,\n    description: 'Delete a knowledge source binding for a tenant.',\n    goal: 'Remove obsolete or compromised knowledge ingestion paths.',\n    context:\n      'Ensures ephemeral or external sources can be removed cleanly without leaving residual bindings.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: DeleteKnowledgeSourceInput,\n    output: DeleteKnowledgeSourceOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const ListKnowledgeSources = defineQuery({\n  meta: {\n    name: 'knowledge.source.list',\n    version: 1,\n    description: 'List knowledge sources configured for a tenant.',\n    goal: 'Provide visibility into knowledge ingest configuration and schedules.',\n    context:\n      'Used by App Studio and Ops flows to surface knowledge sources and their health.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: ListKnowledgeSourcesInput,\n    output: ListKnowledgeSourcesOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.read', version: 1 }],\n  },\n});\n\nexport const TriggerKnowledgeSourceSync = defineCommand({\n  meta: {\n    name: 'knowledge.source.triggerSync',\n    version: 1,\n    description: 'Trigger an immediate sync for a knowledge source.',\n    goal: 'Support manual or automated sync retries for knowledge ingestion.',\n    context:\n      'Invoked by Ops tooling or monitors when knowledge content must be refreshed or reprocessed.',\n    owners: ['platform.knowledge'],\n    tags: ['knowledge', 'sources'],\n    stability: 'experimental',\n  },\n  io: {\n    input: TriggerKnowledgeSyncInput,\n    output: TriggerKnowledgeSyncOutput,\n  },\n  policy: {\n    auth: 'admin',\n    policies: [{ name: 'platform.knowledge.manage', version: 1 }],\n  },\n});\n\nexport const knowledgeContracts: Record<string, ContractSpec<any, any>> = {\n  CreateKnowledgeSource,\n  UpdateKnowledgeSource,\n  DeleteKnowledgeSource,\n  ListKnowledgeSources,\n  TriggerKnowledgeSourceSync,\n};\n\nexport function registerKnowledgeContracts(registry: SpecRegistry) {\n  return registry\n    .register(CreateKnowledgeSource)\n    .register(UpdateKnowledgeSource)\n    .register(DeleteKnowledgeSource)\n    .register(ListKnowledgeSources)\n    .register(TriggerKnowledgeSourceSync);\n}\n"],"mappings":"8LAIA,MAAM,EAAwB,IAAIA,EAAY,CAC5C,KAAM,wBACN,OAAQ,CACN,QAAS,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC9D,KAAM,CAAE,KAAMA,EAAe,iBAAiB,CAAE,WAAY,GAAM,CAClE,WAAY,CAAE,KAAMA,EAAe,cAAc,CAAE,WAAY,GAAM,CACtE,CACF,CAAC,CAEI,EAAwB,IAAID,EAAY,CAC5C,KAAM,wBACN,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CACpD,SAAU,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAO,CAC1D,SAAU,CAAE,KAAMA,EAAe,gBAAgB,CAAE,WAAY,GAAO,CACtE,aAAc,CAAE,KAAMA,EAAe,cAAc,CAAE,WAAY,GAAO,CACxE,MAAO,CAAE,KAAMA,EAAe,iBAAiB,CAAE,WAAY,GAAO,CACpE,WAAY,CAAE,KAAMA,EAAe,iBAAiB,CAAE,WAAY,GAAO,CACzE,aAAc,CAAE,KAAM,EAAuB,WAAY,GAAM,CAC/D,eAAgB,CACd,KAAMA,EAAe,iBAAiB,CACtC,WAAY,GACb,CACD,WAAY,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CACjE,eAAgB,CAAE,KAAMA,EAAe,cAAc,CAAE,WAAY,GAAM,CACzE,UAAW,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CAChE,UAAW,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CACjE,CACF,CAAC,CAEI,EAA6B,IAAID,EAAY,CACjD,KAAM,6BACN,OAAQ,CACN,SAAU,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CAC1D,SAAU,CAAE,KAAMA,EAAe,gBAAgB,CAAE,WAAY,GAAO,CACtE,aAAc,CAAE,KAAMA,EAAe,cAAc,CAAE,WAAY,GAAO,CACxE,MAAO,CAAE,KAAMA,EAAe,iBAAiB,CAAE,WAAY,GAAO,CACpE,WAAY,CAAE,KAAMA,EAAe,gBAAgB,CAAE,WAAY,GAAO,CACxE,OAAQ,CAAE,KAAMA,EAAe,YAAY,CAAE,WAAY,GAAO,CAChE,aAAc,CAAE,KAAM,EAAuB,WAAY,GAAM,CAChE,CACF,CAAC,CAEI,EAA6B,IAAID,EAAY,CACjD,KAAM,6BACN,OAAQ,CACN,SAAU,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CAC1D,MAAO,CAAE,KAAMA,EAAe,iBAAiB,CAAE,WAAY,GAAM,CACnE,OAAQ,CAAE,KAAMA,EAAe,YAAY,CAAE,WAAY,GAAM,CAC/D,aAAc,CAAE,KAAM,EAAuB,WAAY,GAAM,CAChE,CACF,CAAC,CAEI,EAA6B,IAAID,EAAY,CACjD,KAAM,6BACN,OAAQ,CACN,SAAU,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CAC3D,CACF,CAAC,CAEI,EAA8B,IAAID,EAAY,CAClD,KAAM,8BACN,OAAQ,CACN,QAAS,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC/D,CACF,CAAC,CAEI,EAA4B,IAAID,EAAY,CAChD,KAAM,4BACN,OAAQ,CACN,SAAU,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CAC1D,SAAU,CAAE,KAAMA,EAAe,gBAAgB,CAAE,WAAY,GAAM,CACtE,CACF,CAAC,CAEI,EAA6B,IAAID,EAAY,CACjD,KAAM,6BACN,OAAQ,CACN,QAAS,CACP,KAAM,EACN,WAAY,GACZ,QAAS,GACV,CACF,CACF,CAAC,CAEI,EAA4B,IAAIA,EAAY,CAChD,KAAM,4BACN,OAAQ,CACN,SAAU,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CAC3D,CACF,CAAC,CAEI,EAA6B,IAAID,EAAY,CACjD,KAAM,6BACN,OAAQ,CACN,QAAS,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC9D,eAAgB,CAAE,KAAMA,EAAe,cAAc,CAAE,WAAY,GAAM,CACzE,MAAO,CAAE,KAAMA,EAAe,iBAAiB,CAAE,WAAY,GAAM,CACpE,CACF,CAAC,CAEW,EAAwB,EAAc,CACjD,KAAM,CACJ,KAAM,0BACN,QAAS,EACT,YAAa,kDACb,KAAM,sEACN,QACE,oFACF,OAAQ,CAAC,qBAAqB,CAC9B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,eACZ,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,QACN,SAAU,CAAC,CAAE,KAAM,4BAA6B,QAAS,EAAG,CAAC,CAC9D,CACF,CAAC,CAEW,EAAwB,EAAc,CACjD,KAAM,CACJ,KAAM,0BACN,QAAS,EACT,YAAa,2DACb,KAAM,6DACN,QACE,iFACF,OAAQ,CAAC,qBAAqB,CAC9B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,eACZ,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,QACN,SAAU,CAAC,CAAE,KAAM,4BAA6B,QAAS,EAAG,CAAC,CAC9D,CACF,CAAC,CAEW,EAAwB,EAAc,CACjD,KAAM,CACJ,KAAM,0BACN,QAAS,EACT,YAAa,kDACb,KAAM,4DACN,QACE,kGACF,OAAQ,CAAC,qBAAqB,CAC9B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,eACZ,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,QACN,SAAU,CAAC,CAAE,KAAM,4BAA6B,QAAS,EAAG,CAAC,CAC9D,CACF,CAAC,CAEW,EAAuB,EAAY,CAC9C,KAAM,CACJ,KAAM,wBACN,QAAS,EACT,YAAa,kDACb,KAAM,wEACN,QACE,kFACF,OAAQ,CAAC,qBAAqB,CAC9B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,eACZ,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,QACN,SAAU,CAAC,CAAE,KAAM,0BAA2B,QAAS,EAAG,CAAC,CAC5D,CACF,CAAC,CAEW,EAA6B,EAAc,CACtD,KAAM,CACJ,KAAM,+BACN,QAAS,EACT,YAAa,oDACb,KAAM,oEACN,QACE,8FACF,OAAQ,CAAC,qBAAqB,CAC9B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,eACZ,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,QACN,SAAU,CAAC,CAAE,KAAM,4BAA6B,QAAS,EAAG,CAAC,CAC9D,CACF,CAAC,CAEWC,EAA6D,CACxE,wBACA,wBACA,wBACA,uBACA,6BACD,CAED,SAAgB,EAA2B,EAAwB,CACjE,OAAO,EACJ,SAAS,EAAsB,CAC/B,SAAS,EAAsB,CAC/B,SAAS,EAAsB,CAC/B,SAAS,EAAqB,CAC9B,SAAS,EAA2B"}

package/dist/knowledge/ingestion/document-processor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"document-processor.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/document-processor.ts"],"sourcesContent":[],"mappings":";UAEiB,WAAA;EAAA,EAAA,EAAA,MAAA;EAOA,QAAA,EAAA,MAAA;EAOZ,IAAA,EAXG,UAWM;EAAW,QAAA,CAAA,EAVZ,MAUY,CAAA,MAAA,EAAA,MAAA,CAAA;;AAAgB,UAPxB,gBAAA,CAOwB;EAAO,EAAA,EAAA,MAAA;EAEnC,UAAA,EAAA,MAAA;EAQoC,IAAA,EAAA,MAAA;EAIvB,QAAA,CAAA,EAjBb,MAiBa,CAAA,MAAA,EAAA,MAAA,CAAA;;KAdrB,SAAA,GAcmC,CAAA,KAAA,EAdf,WAce,EAAA,GAdC,OAcD,CAdS,gBAcT,EAAA,CAAA;AAAO,cAZlC,iBAAA,CAYkC;;;iDAJE;oBAIvB,cAAc,QAAQ"}

package/dist/knowledge/ingestion/document-processor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"document-processor.js","names":[],"sources":["../../../src/knowledge/ingestion/document-processor.ts"],"sourcesContent":["import { Buffer } from 'node:buffer';\n\nexport interface RawDocument {\n  id: string;\n  mimeType: string;\n  data: Uint8Array;\n  metadata?: Record<string, string>;\n}\n\nexport interface DocumentFragment {\n  id: string;\n  documentId: string;\n  text: string;\n  metadata?: Record<string, string>;\n}\n\ntype Extractor = (input: RawDocument) => Promise<DocumentFragment[]>;\n\nexport class DocumentProcessor {\n  private readonly extractors = new Map<string, Extractor>();\n\n  constructor() {\n    this.registerExtractor('text/plain', this.extractText);\n    this.registerExtractor('application/json', this.extractJson);\n  }\n\n  registerExtractor(mimeType: string, extractor: Extractor): void {\n    this.extractors.set(mimeType.toLowerCase(), extractor);\n  }\n\n  async process(document: RawDocument): Promise<DocumentFragment[]> {\n    const extractor =\n      this.extractors.get(document.mimeType.toLowerCase()) ??\n      this.extractors.get('*/*');\n    if (!extractor) {\n      throw new Error(\n        `No extractor registered for mime type ${document.mimeType}`\n      );\n    }\n    const fragments = await extractor(document);\n    if (fragments.length === 0) {\n      return [\n        {\n          id: `${document.id}:0`,\n          documentId: document.id,\n          text: '',\n          metadata: document.metadata,\n        },\n      ];\n    }\n    return fragments;\n  }\n\n  private async extractText(\n    document: RawDocument\n  ): Promise<DocumentFragment[]> {\n    const text = Buffer.from(document.data).toString('utf-8');\n    return [\n      {\n        id: `${document.id}:0`,\n        documentId: document.id,\n        text,\n        metadata: document.metadata,\n      },\n    ];\n  }\n\n  private async extractJson(\n    document: RawDocument\n  ): Promise<DocumentFragment[]> {\n    const text = Buffer.from(document.data).toString('utf-8');\n    try {\n      const json = JSON.parse(text);\n      return [\n        {\n          id: `${document.id}:0`,\n          documentId: document.id,\n          text: JSON.stringify(json, null, 2),\n          metadata: {\n            ...document.metadata,\n            contentType: 'application/json',\n          },\n        },\n      ];\n    } catch {\n      return this.extractText(document);\n    }\n  }\n}\n"],"mappings":"qCAkBA,IAAa,EAAb,KAA+B,CAC7B,WAA8B,IAAI,IAElC,aAAc,CACZ,KAAK,kBAAkB,aAAc,KAAK,YAAY,CACtD,KAAK,kBAAkB,mBAAoB,KAAK,YAAY,CAG9D,kBAAkB,EAAkB,EAA4B,CAC9D,KAAK,WAAW,IAAI,EAAS,aAAa,CAAE,EAAU,CAGxD,MAAM,QAAQ,EAAoD,CAChE,IAAM,EACJ,KAAK,WAAW,IAAI,EAAS,SAAS,aAAa,CAAC,EACpD,KAAK,WAAW,IAAI,MAAM,CAC5B,GAAI,CAAC,EACH,MAAU,MACR,yCAAyC,EAAS,WACnD,CAEH,IAAM,EAAY,MAAM,EAAU,EAAS,CAW3C,OAVI,EAAU,SAAW,EAChB,CACL,CACE,GAAI,GAAG,EAAS,GAAG,IACnB,WAAY,EAAS,GACrB,KAAM,GACN,SAAU,EAAS,SACpB,CACF,CAEI,EAGT,MAAc,YACZ,EAC6B,CAC7B,IAAM,EAAO,EAAO,KAAK,EAAS,KAAK,CAAC,SAAS,QAAQ,CACzD,MAAO,CACL,CACE,GAAI,GAAG,EAAS,GAAG,IACnB,WAAY,EAAS,GACrB,OACA,SAAU,EAAS,SACpB,CACF,CAGH,MAAc,YACZ,EAC6B,CAC7B,IAAM,EAAO,EAAO,KAAK,EAAS,KAAK,CAAC,SAAS,QAAQ,CACzD,GAAI,CACF,IAAM,EAAO,KAAK,MAAM,EAAK,CAC7B,MAAO,CACL,CACE,GAAI,GAAG,EAAS,GAAG,IACnB,WAAY,EAAS,GACrB,KAAM,KAAK,UAAU,EAAM,KAAM,EAAE,CACnC,SAAU,CACR,GAAG,EAAS,SACZ,YAAa,mBACd,CACF,CACF,MACK,CACN,OAAO,KAAK,YAAY,EAAS"}

package/dist/knowledge/ingestion/embedding-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"embedding-service.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/embedding-service.ts"],"sourcesContent":[],"mappings":";;;;cAOa,gBAAA;;EAAA,iBAAA,SAAgB;EAIL,WAAA,CAAA,QAAA,EAAA,iBAAA,EAAA,SAAA,CAAA,EAAA,MAAA;EAMT,cAAA,CAAA,SAAA,EAAA,gBAAA,EAAA,CAAA,EACV,OADU,CACF,eADE,EAAA,CAAA"}

package/dist/knowledge/ingestion/embedding-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"embedding-service.js","names":["results: EmbeddingResult[]","documents: EmbeddingDocument[]"],"sources":["../../../src/knowledge/ingestion/embedding-service.ts"],"sourcesContent":["import type {\n  EmbeddingDocument,\n  EmbeddingProvider,\n  EmbeddingResult,\n} from '../../integrations/providers/embedding';\nimport type { DocumentFragment } from './document-processor';\n\nexport class EmbeddingService {\n  private readonly provider: EmbeddingProvider;\n  private readonly batchSize: number;\n\n  constructor(provider: EmbeddingProvider, batchSize = 16) {\n    this.provider = provider;\n    this.batchSize = batchSize;\n  }\n\n  async embedFragments(\n    fragments: DocumentFragment[]\n  ): Promise<EmbeddingResult[]> {\n    const results: EmbeddingResult[] = [];\n    for (let i = 0; i < fragments.length; i += this.batchSize) {\n      const slice = fragments.slice(i, i + this.batchSize);\n      const documents: EmbeddingDocument[] = slice.map((fragment) => ({\n        id: fragment.id,\n        text: fragment.text,\n        metadata: fragment.metadata,\n      }));\n      const embeddings = await this.provider.embedDocuments(documents);\n      results.push(...embeddings);\n    }\n    return results;\n  }\n}\n"],"mappings":"AAOA,IAAa,EAAb,KAA8B,CAC5B,SACA,UAEA,YAAY,EAA6B,EAAY,GAAI,CACvD,KAAK,SAAW,EAChB,KAAK,UAAY,EAGnB,MAAM,eACJ,EAC4B,CAC5B,IAAMA,EAA6B,EAAE,CACrC,IAAK,IAAI,EAAI,EAAG,EAAI,EAAU,OAAQ,GAAK,KAAK,UAAW,CAEzD,IAAMC,EADQ,EAAU,MAAM,EAAG,EAAI,KAAK,UAAU,CACP,IAAK,IAAc,CAC9D,GAAI,EAAS,GACb,KAAM,EAAS,KACf,SAAU,EAAS,SACpB,EAAE,CACG,EAAa,MAAM,KAAK,SAAS,eAAe,EAAU,CAChE,EAAQ,KAAK,GAAG,EAAW,CAE7B,OAAO"}

package/dist/knowledge/ingestion/gmail-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-adapter.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/gmail-adapter.ts"],"sourcesContent":[],"mappings":";;;;;;cAQa,qBAAA;;EAAA,iBAAA,SAAqB;EAEN,iBAAA,UAAA;EACI,iBAAA,OAAA;EACC,WAAA,CAAA,KAAA,EAFL,oBAEK,EAAA,SAAA,EADD,iBACC,EAAA,UAAA,EAAA,gBAAA,EAAA,OAAA,EACH,aADG;EACH,WAAA,CAAA,KAAA,CAAA,EAIlB,UAJkB,CAIP,oBAJO,CAAA,aAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,EAIgC,OAJhC,CAAA,IAAA,CAAA;EAIP,YAAA,CAAA,MAAA,EAQM,WARN,CAAA,EAQiB,OARjB,CAAA,IAAA,CAAA;EAAX,QAAA,aAAA"}

package/dist/knowledge/ingestion/gmail-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gmail-adapter.js","names":["gmail: EmailInboundProvider","processor: DocumentProcessor","embeddings: EmbeddingService","indexer: VectorIndexer"],"sources":["../../../src/knowledge/ingestion/gmail-adapter.ts"],"sourcesContent":["import type {\n  EmailInboundProvider,\n  EmailThread,\n} from '../../integrations/providers/email';\nimport type { DocumentProcessor, RawDocument } from './document-processor';\nimport type { EmbeddingService } from './embedding-service';\nimport type { VectorIndexer } from './vector-indexer';\n\nexport class GmailIngestionAdapter {\n  constructor(\n    private readonly gmail: EmailInboundProvider,\n    private readonly processor: DocumentProcessor,\n    private readonly embeddings: EmbeddingService,\n    private readonly indexer: VectorIndexer\n  ) {}\n\n  async syncThreads(\n    query?: Parameters<EmailInboundProvider['listThreads']>[0]\n  ) {\n    const threads = await this.gmail.listThreads(query);\n    for (const thread of threads) {\n      await this.ingestThread(thread);\n    }\n  }\n\n  async ingestThread(thread: EmailThread) {\n    const document = this.toRawDocument(thread);\n    const fragments = await this.processor.process(document);\n    const embeddings = await this.embeddings.embedFragments(fragments);\n    await this.indexer.upsert(fragments, embeddings);\n  }\n\n  private toRawDocument(thread: EmailThread): RawDocument {\n    const content = composeThreadText(thread);\n    return {\n      id: thread.id,\n      mimeType: 'text/plain',\n      data: Buffer.from(content, 'utf-8'),\n      metadata: {\n        subject: thread.subject ?? '',\n        participants: thread.participants.map((p) => p.email).join(', '),\n        updatedAt: thread.updatedAt.toISOString(),\n      },\n    };\n  }\n}\n\nfunction composeThreadText(thread: EmailThread): string {\n  const header = [\n    `Subject: ${thread.subject ?? ''}`,\n    `Snippet: ${thread.snippet ?? ''}`,\n  ];\n  const messageTexts = thread.messages.map((message) => {\n    const parts = [\n      `From: ${formatAddress(message.from)}`,\n      `To: ${message.to.map(formatAddress).join(', ')}`,\n    ];\n    if (message.sentAt) {\n      parts.push(`Date: ${message.sentAt.toISOString()}`);\n    }\n    const body = message.textBody ?? stripHtml(message.htmlBody ?? '');\n    return `${parts.join('\\n')}\\n\\n${body ?? ''}`;\n  });\n  return [...header, ...messageTexts].join('\\n\\n---\\n\\n');\n}\n\nfunction formatAddress(address: { email: string; name?: string }): string {\n  return address.name ? `${address.name} <${address.email}>` : address.email;\n}\n\nfunction stripHtml(html: string): string {\n  return html.replace(/<[^>]+>/g, ' ');\n}\n"],"mappings":"AAQA,IAAa,EAAb,KAAmC,CACjC,YACE,EACA,EACA,EACA,EACA,CAJiB,KAAA,MAAA,EACA,KAAA,UAAA,EACA,KAAA,WAAA,EACA,KAAA,QAAA,EAGnB,MAAM,YACJ,EACA,CACA,IAAM,EAAU,MAAM,KAAK,MAAM,YAAY,EAAM,CACnD,IAAK,IAAM,KAAU,EACnB,MAAM,KAAK,aAAa,EAAO,CAInC,MAAM,aAAa,EAAqB,CACtC,IAAM,EAAW,KAAK,cAAc,EAAO,CACrC,EAAY,MAAM,KAAK,UAAU,QAAQ,EAAS,CAClD,EAAa,MAAM,KAAK,WAAW,eAAe,EAAU,CAClE,MAAM,KAAK,QAAQ,OAAO,EAAW,EAAW,CAGlD,cAAsB,EAAkC,CACtD,IAAM,EAAU,EAAkB,EAAO,CACzC,MAAO,CACL,GAAI,EAAO,GACX,SAAU,aACV,KAAM,OAAO,KAAK,EAAS,QAAQ,CACnC,SAAU,CACR,QAAS,EAAO,SAAW,GAC3B,aAAc,EAAO,aAAa,IAAK,GAAM,EAAE,MAAM,CAAC,KAAK,KAAK,CAChE,UAAW,EAAO,UAAU,aAAa,CAC1C,CACF,GAIL,SAAS,EAAkB,EAA6B,CACtD,IAAM,EAAS,CACb,YAAY,EAAO,SAAW,KAC9B,YAAY,EAAO,SAAW,KAC/B,CACK,EAAe,EAAO,SAAS,IAAK,GAAY,CACpD,IAAM,EAAQ,CACZ,SAAS,EAAc,EAAQ,KAAK,GACpC,OAAO,EAAQ,GAAG,IAAI,EAAc,CAAC,KAAK,KAAK,GAChD,CACG,EAAQ,QACV,EAAM,KAAK,SAAS,EAAQ,OAAO,aAAa,GAAG,CAErD,IAAM,EAAO,EAAQ,UAAY,EAAU,EAAQ,UAAY,GAAG,CAClE,MAAO,GAAG,EAAM,KAAK;EAAK,CAAC,MAAM,GAAQ,MACzC,CACF,MAAO,CAAC,GAAG,EAAQ,GAAG,EAAa,CAAC,KAAK;;;;EAAc,CAGzD,SAAS,EAAc,EAAmD,CACxE,OAAO,EAAQ,KAAO,GAAG,EAAQ,KAAK,IAAI,EAAQ,MAAM,GAAK,EAAQ,MAGvE,SAAS,EAAU,EAAsB,CACvC,OAAO,EAAK,QAAQ,WAAY,IAAI"}

package/dist/knowledge/ingestion/storage-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-adapter.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/storage-adapter.ts"],"sourcesContent":[],"mappings":";;;;;;cAKa,uBAAA;;EAAA,iBAAA,UAAuB;EAEJ,iBAAA,OAAA;EACC,WAAA,CAAA,SAAA,EADD,iBACC,EAAA,UAAA,EAAA,gBAAA,EAAA,OAAA,EACH,aADG;EACH,YAAA,CAAA,MAAA,EAGD,eAHC,CAAA,EAGiB,OAHjB,CAAA,IAAA,CAAA"}

package/dist/knowledge/ingestion/storage-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage-adapter.js","names":["processor: DocumentProcessor","embeddings: EmbeddingService","indexer: VectorIndexer"],"sources":["../../../src/knowledge/ingestion/storage-adapter.ts"],"sourcesContent":["import type { GetObjectResult } from '../../integrations/providers/storage';\nimport type { DocumentProcessor } from './document-processor';\nimport type { EmbeddingService } from './embedding-service';\nimport type { VectorIndexer } from './vector-indexer';\n\nexport class StorageIngestionAdapter {\n  constructor(\n    private readonly processor: DocumentProcessor,\n    private readonly embeddings: EmbeddingService,\n    private readonly indexer: VectorIndexer\n  ) {}\n\n  async ingestObject(object: GetObjectResult): Promise<void> {\n    if (!('data' in object) || !object.data) {\n      throw new Error('Storage ingestion requires object data');\n    }\n\n    const raw = {\n      id: object.key,\n      mimeType: object.contentType ?? 'application/octet-stream',\n      data: object.data,\n      metadata: {\n        bucket: object.bucket,\n        checksum: object.checksum ?? '',\n      },\n    };\n\n    const fragments = await this.processor.process(raw);\n    const embeddings = await this.embeddings.embedFragments(fragments);\n    await this.indexer.upsert(fragments, embeddings);\n  }\n}\n"],"mappings":"AAKA,IAAa,EAAb,KAAqC,CACnC,YACE,EACA,EACA,EACA,CAHiB,KAAA,UAAA,EACA,KAAA,WAAA,EACA,KAAA,QAAA,EAGnB,MAAM,aAAa,EAAwC,CACzD,GAAI,EAAE,SAAU,IAAW,CAAC,EAAO,KACjC,MAAU,MAAM,yCAAyC,CAG3D,IAAM,EAAM,CACV,GAAI,EAAO,IACX,SAAU,EAAO,aAAe,2BAChC,KAAM,EAAO,KACb,SAAU,CACR,OAAQ,EAAO,OACf,SAAU,EAAO,UAAY,GAC9B,CACF,CAEK,EAAY,MAAM,KAAK,UAAU,QAAQ,EAAI,CAC7C,EAAa,MAAM,KAAK,WAAW,eAAe,EAAU,CAClE,MAAM,KAAK,QAAQ,OAAO,EAAW,EAAW"}

package/dist/knowledge/ingestion/vector-indexer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vector-indexer.d.ts","names":[],"sources":["../../../src/knowledge/ingestion/vector-indexer.ts"],"sourcesContent":[],"mappings":";;;;;UAOiB,iBAAA;;EAAA,SAAA,CAAA,EAAA,MAAA;EAMJ,QAAA,CAAA,EAHA,MAGa,CAAA,MAAA,EAAA,MAAA,CAAA;;AAI2B,cAJxC,aAAA,CAIwC;EAMtC,iBAAA,QAAA;EACC,iBAAA,MAAA;EACX,WAAA,CAAA,QAAA,EARmB,mBAQnB,EAAA,MAAA,EARgD,iBAQhD;EAAO,MAAA,CAAA,SAAA,EAFG,gBAEH,EAAA,EAAA,UAAA,EADI,eACJ,EAAA,CAAA,EAAP,OAAO,CAAA,IAAA,CAAA"}

package/dist/knowledge/ingestion/vector-indexer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vector-indexer.js","names":["request: VectorUpsertRequest"],"sources":["../../../src/knowledge/ingestion/vector-indexer.ts"],"sourcesContent":["import type {\n  VectorStoreProvider,\n  VectorUpsertRequest,\n} from '../../integrations/providers/vector-store';\nimport type { EmbeddingResult } from '../../integrations/providers/embedding';\nimport type { DocumentFragment } from './document-processor';\n\nexport interface VectorIndexConfig {\n  collection: string;\n  namespace?: string;\n  metadata?: Record<string, string>;\n}\n\nexport class VectorIndexer {\n  private readonly provider: VectorStoreProvider;\n  private readonly config: VectorIndexConfig;\n\n  constructor(provider: VectorStoreProvider, config: VectorIndexConfig) {\n    this.provider = provider;\n    this.config = config;\n  }\n\n  async upsert(\n    fragments: DocumentFragment[],\n    embeddings: EmbeddingResult[]\n  ): Promise<void> {\n    const documents = embeddings.map((embedding) => {\n      const fragment = fragments.find((f) => f.id === embedding.id);\n      return {\n        id: embedding.id,\n        vector: embedding.vector,\n        payload: {\n          ...this.config.metadata,\n          ...(fragment?.metadata ?? {}),\n          documentId: fragment?.documentId,\n        },\n        namespace: this.config.namespace,\n      };\n    });\n\n    const request: VectorUpsertRequest = {\n      collection: this.config.collection,\n      documents,\n    };\n\n    await this.provider.upsert(request);\n  }\n}\n"],"mappings":"AAaA,IAAa,EAAb,KAA2B,CACzB,SACA,OAEA,YAAY,EAA+B,EAA2B,CACpE,KAAK,SAAW,EAChB,KAAK,OAAS,EAGhB,MAAM,OACJ,EACA,EACe,CACf,IAAM,EAAY,EAAW,IAAK,GAAc,CAC9C,IAAM,EAAW,EAAU,KAAM,GAAM,EAAE,KAAO,EAAU,GAAG,CAC7D,MAAO,CACL,GAAI,EAAU,GACd,OAAQ,EAAU,OAClB,QAAS,CACP,GAAG,KAAK,OAAO,SACf,GAAI,GAAU,UAAY,EAAE,CAC5B,WAAY,GAAU,WACvB,CACD,UAAW,KAAK,OAAO,UACxB,EACD,CAEIA,EAA+B,CACnC,WAAY,KAAK,OAAO,WACxB,YACD,CAED,MAAM,KAAK,SAAS,OAAO,EAAQ"}

package/dist/knowledge/query/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","names":[],"sources":["../../../src/knowledge/query/service.ts"],"sourcesContent":[],"mappings":";;;;;UAWiB,oBAAA;;EAAA,SAAA,CAAA,EAAA,MAAA;EAOA,IAAA,CAAA,EAAA,MAAA;EAQJ,YAAA,CAAA,EAAA,MAAA;;AAQI,UAhBA,eAAA,CAgBA;EACR,MAAA,EAAA,MAAA;EACG,UAAA,EAAA,CAhBG,kBAgBH,GAAA;IAQ6B,IAAA,CAAA,EAAA,MAAA;EAAR,CAAA,CAAA,EAAA;EAAO,KAAA,CAAA,EArB9B,WAqB8B,CAAA,OAAA,CAAA;;cAlB3B,qBAAA;;;;;0BAOG,gCACC,0BACR,qBACG;2BAQqB,QAAQ"}

package/dist/knowledge/query/service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../../src/knowledge/query/service.ts"],"sourcesContent":["import type { EmbeddingProvider } from '../../integrations/providers/embedding';\nimport type {\n  VectorStoreProvider,\n  VectorSearchResult,\n} from '../../integrations/providers/vector-store';\nimport type {\n  LLMProvider,\n  LLMMessage,\n  LLMResponse,\n} from '../../integrations/providers/llm';\n\nexport interface KnowledgeQueryConfig {\n  collection: string;\n  namespace?: string;\n  topK?: number;\n  systemPrompt?: string;\n}\n\nexport interface KnowledgeAnswer {\n  answer: string;\n  references: (VectorSearchResult & {\n    text?: string;\n  })[];\n  usage?: LLMResponse['usage'];\n}\n\nexport class KnowledgeQueryService {\n  private readonly embeddings: EmbeddingProvider;\n  private readonly vectorStore: VectorStoreProvider;\n  private readonly llm: LLMProvider;\n  private readonly config: KnowledgeQueryConfig;\n\n  constructor(\n    embeddings: EmbeddingProvider,\n    vectorStore: VectorStoreProvider,\n    llm: LLMProvider,\n    config: KnowledgeQueryConfig\n  ) {\n    this.embeddings = embeddings;\n    this.vectorStore = vectorStore;\n    this.llm = llm;\n    this.config = config;\n  }\n\n  async query(question: string): Promise<KnowledgeAnswer> {\n    const embedding = await this.embeddings.embedQuery(question);\n    const results = await this.vectorStore.search({\n      collection: this.config.collection,\n      vector: embedding.vector,\n      topK: this.config.topK ?? 5,\n      namespace: this.config.namespace,\n      filter: undefined,\n    });\n    const context = buildContext(results);\n    const messages = this.buildMessages(question, context);\n    const response = await this.llm.chat(messages);\n    return {\n      answer: response.message.content\n        .map((part) => ('text' in part ? part.text : ''))\n        .join(''),\n      references: results.map((result) => ({\n        ...result,\n        text: extractText(result),\n      })),\n      usage: response.usage,\n    };\n  }\n\n  private buildMessages(question: string, context: string): LLMMessage[] {\n    const systemPrompt =\n      this.config.systemPrompt ??\n      'You are a knowledge assistant that answers questions using the provided context. Cite relevant sources if possible.';\n    return [\n      {\n        role: 'system',\n        content: [{ type: 'text', text: systemPrompt }],\n      },\n      {\n        role: 'user',\n        content: [\n          {\n            type: 'text',\n            text: `Question:\\n${question}\\n\\nContext:\\n${context}`,\n          },\n        ],\n      },\n    ];\n  }\n}\n\nfunction buildContext(results: VectorSearchResult[]): string {\n  if (results.length === 0) {\n    return 'No relevant documents found.';\n  }\n  return results\n    .map((result, index) => {\n      const text = extractText(result);\n      return `Source ${index + 1} (score: ${result.score.toFixed(3)}):\\n${text}`;\n    })\n    .join('\\n\\n');\n}\n\nfunction extractText(result: VectorSearchResult): string {\n  const payload = result.payload ?? {};\n  if (typeof payload.text === 'string') return payload.text;\n  if (typeof payload.content === 'string') return payload.content;\n  return JSON.stringify(payload);\n}\n"],"mappings":"AA0BA,IAAa,EAAb,KAAmC,CACjC,WACA,YACA,IACA,OAEA,YACE,EACA,EACA,EACA,EACA,CACA,KAAK,WAAa,EAClB,KAAK,YAAc,EACnB,KAAK,IAAM,EACX,KAAK,OAAS,EAGhB,MAAM,MAAM,EAA4C,CACtD,IAAM,EAAY,MAAM,KAAK,WAAW,WAAW,EAAS,CACtD,EAAU,MAAM,KAAK,YAAY,OAAO,CAC5C,WAAY,KAAK,OAAO,WACxB,OAAQ,EAAU,OAClB,KAAM,KAAK,OAAO,MAAQ,EAC1B,UAAW,KAAK,OAAO,UACvB,OAAQ,IAAA,GACT,CAAC,CACI,EAAU,EAAa,EAAQ,CAC/B,EAAW,KAAK,cAAc,EAAU,EAAQ,CAChD,EAAW,MAAM,KAAK,IAAI,KAAK,EAAS,CAC9C,MAAO,CACL,OAAQ,EAAS,QAAQ,QACtB,IAAK,GAAU,SAAU,EAAO,EAAK,KAAO,GAAI,CAChD,KAAK,GAAG,CACX,WAAY,EAAQ,IAAK,IAAY,CACnC,GAAG,EACH,KAAM,EAAY,EAAO,CAC1B,EAAE,CACH,MAAO,EAAS,MACjB,CAGH,cAAsB,EAAkB,EAA+B,CAIrE,MAAO,CACL,CACE,KAAM,SACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAL5B,KAAK,OAAO,cACZ,sHAIgD,CAAC,CAChD,CACD,CACE,KAAM,OACN,QAAS,CACP,CACE,KAAM,OACN,KAAM,cAAc,EAAS,gBAAgB,IAC9C,CACF,CACF,CACF,GAIL,SAAS,EAAa,EAAuC,CAI3D,OAHI,EAAQ,SAAW,EACd,+BAEF,EACJ,KAAK,EAAQ,IAAU,CACtB,IAAM,EAAO,EAAY,EAAO,CAChC,MAAO,UAAU,EAAQ,EAAE,WAAW,EAAO,MAAM,QAAQ,EAAE,CAAC,MAAM,KACpE,CACD,KAAK;;EAAO,CAGjB,SAAS,EAAY,EAAoC,CACvD,IAAM,EAAU,EAAO,SAAW,EAAE,CAGpC,OAFI,OAAO,EAAQ,MAAS,SAAiB,EAAQ,KACjD,OAAO,EAAQ,SAAY,SAAiB,EAAQ,QACjD,KAAK,UAAU,EAAQ"}

package/dist/knowledge/runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.d.ts","names":[],"sources":["../../src/knowledge/runtime.ts"],"sourcesContent":[],"mappings":";;;;UAMiB,sBAAA;;EAAA,KAAA,EAAA,MAAA;EASA,WAAA,CAAA,EAAA,MAAA;EAMA,YAAA,CAAA,EAAA,MAAA;EAQJ,SAAA,CAAA,EAAA,MAAA;EAKU,SAAA,EAAA,MAAA,GAAA,OAAA,GAAA,QAAA;;AAUV,UA7BI,qBAAA,CA6BJ;EACE,OAAA,EAAA,OAAA;EACV,MAAA,CAAA,EAAA,MAAA;EAAqB,QAAA,CAAA,EAAA,OAAA,GAAA,SAAA;;UAzBT,2BAAA;4BACW;;;;cAOf,oBAAA;;;;wBAKU;4BASL,4BACL,mCACE,oBACV"}

package/dist/knowledge/runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.js","names":["DEFAULT_DISALLOWED_WRITE: KnowledgeCategory[]"],"sources":["../../src/knowledge/runtime.ts"],"sourcesContent":["import type {\n  ResolvedAppConfig,\n  ResolvedKnowledge,\n} from '../app-config/runtime';\nimport type { KnowledgeCategory } from './spec';\n\nexport interface KnowledgeAccessContext {\n  tenantId: string;\n  appId: string;\n  environment?: string;\n  workflowName?: string;\n  agentName?: string;\n  operation: 'read' | 'write' | 'search';\n}\n\nexport interface KnowledgeAccessResult {\n  allowed: boolean;\n  reason?: string;\n  severity?: 'error' | 'warning';\n}\n\nexport interface KnowledgeAccessGuardOptions {\n  disallowWriteCategories?: KnowledgeCategory[];\n  requireWorkflowBinding?: boolean;\n  requireAgentBinding?: boolean;\n}\n\nconst DEFAULT_DISALLOWED_WRITE: KnowledgeCategory[] = ['external', 'ephemeral'];\n\nexport class KnowledgeAccessGuard {\n  private readonly disallowedWrite: Set<KnowledgeCategory>;\n  private readonly requireWorkflowBinding: boolean;\n  private readonly requireAgentBinding: boolean;\n\n  constructor(options: KnowledgeAccessGuardOptions = {}) {\n    this.disallowedWrite = new Set(\n      options.disallowWriteCategories ?? DEFAULT_DISALLOWED_WRITE\n    );\n    this.requireWorkflowBinding = options.requireWorkflowBinding ?? true;\n    this.requireAgentBinding = options.requireAgentBinding ?? false;\n  }\n\n  checkAccess(\n    spaceBinding: ResolvedKnowledge,\n    context: KnowledgeAccessContext,\n    appConfig: ResolvedAppConfig\n  ): KnowledgeAccessResult {\n    const { binding, space } = spaceBinding;\n\n    if (\n      binding.required !== false &&\n      !this.isSpaceBound(spaceBinding, appConfig)\n    ) {\n      return {\n        allowed: false,\n        reason: `Knowledge space \"${space.meta.key}\" is not bound in the resolved app config.`,\n      };\n    }\n\n    if (\n      context.operation === 'write' &&\n      this.disallowedWrite.has(space.meta.category)\n    ) {\n      return {\n        allowed: false,\n        reason: `Knowledge space \"${space.meta.key}\" is category \"${space.meta.category}\" and is read-only.`,\n      };\n    }\n\n    if (this.requireWorkflowBinding && context.workflowName) {\n      const allowedWorkflows = binding.scope?.workflows;\n      if (\n        allowedWorkflows &&\n        !allowedWorkflows.includes(context.workflowName)\n      ) {\n        return {\n          allowed: false,\n          reason: `Workflow \"${context.workflowName}\" is not authorized to access knowledge space \"${space.meta.key}\".`,\n        };\n      }\n    }\n\n    if (this.requireAgentBinding && context.agentName) {\n      const allowedAgents = binding.scope?.agents;\n      if (allowedAgents && !allowedAgents.includes(context.agentName)) {\n        return {\n          allowed: false,\n          reason: `Agent \"${context.agentName}\" is not authorized to access knowledge space \"${space.meta.key}\".`,\n        };\n      }\n    }\n\n    if (space.meta.category === 'ephemeral') {\n      return {\n        allowed: true,\n        severity: 'warning',\n        reason: `Knowledge space \"${space.meta.key}\" is ephemeral; results may be transient.`,\n      };\n    }\n\n    return { allowed: true };\n  }\n\n  private isSpaceBound(\n    resolved: ResolvedKnowledge,\n    appConfig: ResolvedAppConfig\n  ): boolean {\n    return appConfig.knowledge.some(\n      (entry) =>\n        entry.space.meta.key === resolved.space.meta.key &&\n        (resolved.space.meta.version == null ||\n          entry.space.meta.version === resolved.space.meta.version)\n    );\n  }\n}\n"],"mappings":"AA2BA,MAAMA,EAAgD,CAAC,WAAY,YAAY,CAE/E,IAAa,EAAb,KAAkC,CAChC,gBACA,uBACA,oBAEA,YAAY,EAAuC,EAAE,CAAE,CACrD,KAAK,gBAAkB,IAAI,IACzB,EAAQ,yBAA2B,EACpC,CACD,KAAK,uBAAyB,EAAQ,wBAA0B,GAChE,KAAK,oBAAsB,EAAQ,qBAAuB,GAG5D,YACE,EACA,EACA,EACuB,CACvB,GAAM,CAAE,UAAS,SAAU,EAE3B,GACE,EAAQ,WAAa,IACrB,CAAC,KAAK,aAAa,EAAc,EAAU,CAE3C,MAAO,CACL,QAAS,GACT,OAAQ,oBAAoB,EAAM,KAAK,IAAI,4CAC5C,CAGH,GACE,EAAQ,YAAc,SACtB,KAAK,gBAAgB,IAAI,EAAM,KAAK,SAAS,CAE7C,MAAO,CACL,QAAS,GACT,OAAQ,oBAAoB,EAAM,KAAK,IAAI,iBAAiB,EAAM,KAAK,SAAS,qBACjF,CAGH,GAAI,KAAK,wBAA0B,EAAQ,aAAc,CACvD,IAAM,EAAmB,EAAQ,OAAO,UACxC,GACE,GACA,CAAC,EAAiB,SAAS,EAAQ,aAAa,CAEhD,MAAO,CACL,QAAS,GACT,OAAQ,aAAa,EAAQ,aAAa,iDAAiD,EAAM,KAAK,IAAI,IAC3G,CAIL,GAAI,KAAK,qBAAuB,EAAQ,UAAW,CACjD,IAAM,EAAgB,EAAQ,OAAO,OACrC,GAAI,GAAiB,CAAC,EAAc,SAAS,EAAQ,UAAU,CAC7D,MAAO,CACL,QAAS,GACT,OAAQ,UAAU,EAAQ,UAAU,iDAAiD,EAAM,KAAK,IAAI,IACrG,CAYL,OARI,EAAM,KAAK,WAAa,YACnB,CACL,QAAS,GACT,SAAU,UACV,OAAQ,oBAAoB,EAAM,KAAK,IAAI,2CAC5C,CAGI,CAAE,QAAS,GAAM,CAG1B,aACE,EACA,EACS,CACT,OAAO,EAAU,UAAU,KACxB,GACC,EAAM,MAAM,KAAK,MAAQ,EAAS,MAAM,KAAK,MAC5C,EAAS,MAAM,KAAK,SAAW,MAC9B,EAAM,MAAM,KAAK,UAAY,EAAS,MAAM,KAAK,SACtD"}

package/dist/knowledge/source.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"source.d.ts","names":[],"sources":["../../src/knowledge/source.ts"],"sourcesContent":[],"mappings":";KAAY,mBAAA;AAAA,UAQK,mBAAA,CARc;EAQd,EAAA,EAAA,MAAA;EAMH,QAAA,EAAA,MAAA;EACQ,QAAA,EAAA,MAAA;EACA,YAAA,EAAA,MAAA;EAAI,KAAA,EAAA,MAAA;EAGT,UAAA,EALH,mBAKwB;EAC9B,SAAA,EAAA,MAAA,GALc,IAKd;EAEE,SAAA,EAAA,MAAA,GANY,IAMZ;;AASS,UAZF,qBAAA,CAYE;QAXX;;UAEE;;;;;;;;;eASK"}

package/dist/knowledge/spaces/email-threads.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-threads.d.ts","names":[],"sources":["../../../src/knowledge/spaces/email-threads.ts"],"sourcesContent":[],"mappings":";;;cAGa,4BAA4B;iBA+BzB,kCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/email-threads.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-threads.js","names":["emailThreadsKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/email-threads.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const emailThreadsKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.email-threads',\n    version: 1,\n    category: 'operational',\n    displayName: 'Email Threads',\n    title: 'Operational Email Threads',\n    description:\n      'Indexed copies of operational email threads used for support, onboarding, and workflows.',\n    domain: 'operations',\n    owners: ['platform.operations'],\n    tags: ['email', 'operations'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: 365,\n  },\n  access: {\n    policy: { name: 'knowledge.access.email-threads', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 600,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Operational email threads synchronized from Gmail to support automations and contextual assistance.',\n};\n\nexport function registerEmailThreadsKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(emailThreadsKnowledgeSpace);\n}\n"],"mappings":"mDAGA,MAAaA,EAAiD,CAC5D,KAAM,CACJ,IAAK,0BACL,QAAS,EACT,SAAU,cACV,YAAa,gBACb,MAAO,4BACP,YACE,2FACF,OAAQ,aACR,OAAQ,CAAC,sBAAsB,CAC/B,KAAM,CAAC,QAAS,aAAa,CAC7B,UAAW,EAAc,KAC1B,CACD,UAAW,CACT,QAAS,IACV,CACD,OAAQ,CACN,OAAQ,CAAE,KAAM,iCAAkC,QAAS,EAAG,CAC9D,WAAY,SACZ,mBAAoB,GACrB,CACD,SAAU,CACR,eAAgB,gBAChB,UAAW,IACX,oBAAqB,kBACtB,CACD,YACE,sGACH,CAED,SAAgB,EACd,EACwB,CACxB,OAAO,EAAS,SAAS,EAA2B"}

package/dist/knowledge/spaces/financial-docs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-docs.d.ts","names":[],"sources":["../../../src/knowledge/spaces/financial-docs.ts"],"sourcesContent":[],"mappings":";;;cAGa,6BAA6B;iBA+B1B,mCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/financial-docs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-docs.js","names":["financialDocsKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/financial-docs.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const financialDocsKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.financial-docs',\n    version: 1,\n    category: 'canonical',\n    displayName: 'Financial Documents',\n    title: 'Household Financial Documents',\n    description:\n      'Invoices, bills, and contracts powering Pocket Family Office financial automation.',\n    domain: 'finance',\n    owners: ['platform.finance'],\n    tags: ['finance', 'documents'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: null,\n  },\n  access: {\n    policy: { name: 'knowledge.access.financial-docs', version: 1 },\n    trustLevel: 'high',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 700,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Normalized financial documents enabling bill pay automation, reminders, and summaries.',\n};\n\nexport function registerFinancialDocsKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(financialDocsKnowledgeSpace);\n}\n"],"mappings":"mDAGA,MAAaA,EAAkD,CAC7D,KAAM,CACJ,IAAK,2BACL,QAAS,EACT,SAAU,YACV,YAAa,sBACb,MAAO,gCACP,YACE,qFACF,OAAQ,UACR,OAAQ,CAAC,mBAAmB,CAC5B,KAAM,CAAC,UAAW,YAAY,CAC9B,UAAW,EAAc,KAC1B,CACD,UAAW,CACT,QAAS,KACV,CACD,OAAQ,CACN,OAAQ,CAAE,KAAM,kCAAmC,QAAS,EAAG,CAC/D,WAAY,OACZ,mBAAoB,GACrB,CACD,SAAU,CACR,eAAgB,gBAChB,UAAW,IACX,oBAAqB,kBACtB,CACD,YACE,yFACH,CAED,SAAgB,EACd,EACwB,CACxB,OAAO,EAAS,SAAS,EAA4B"}

package/dist/knowledge/spaces/financial-overview.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-overview.d.ts","names":[],"sources":["../../../src/knowledge/spaces/financial-overview.ts"],"sourcesContent":[],"mappings":";;;cAGa,iCAAiC;iBA+B9B,uCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/financial-overview.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"financial-overview.js","names":["financialOverviewKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/financial-overview.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const financialOverviewKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.financial-overview',\n    version: 1,\n    category: 'operational',\n    displayName: 'Financial Overview Summaries',\n    title: 'Derived Financial Summaries',\n    description:\n      'Aggregated cashflow summaries, category breakdowns, and balance trends derived from open banking data.',\n    domain: 'finance',\n    owners: ['platform.finance'],\n    tags: ['open-banking', 'summaries', 'cashflow'],\n    stability: StabilityEnum.Experimental,\n  },\n  retention: {\n    ttlDays: 180,\n  },\n  access: {\n    policy: { name: 'knowledge.access.financial-overview', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 600,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Derived knowledge space containing weekly/monthly cashflow rollups and account health summaries. Raw transactions are excluded to respect privacy guardrails.',\n};\n\nexport function registerFinancialOverviewKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(financialOverviewKnowledgeSpace);\n}\n"],"mappings":"mDAGA,MAAaA,EAAsD,CACjE,KAAM,CACJ,IAAK,+BACL,QAAS,EACT,SAAU,cACV,YAAa,+BACb,MAAO,8BACP,YACE,yGACF,OAAQ,UACR,OAAQ,CAAC,mBAAmB,CAC5B,KAAM,CAAC,eAAgB,YAAa,WAAW,CAC/C,UAAW,EAAc,aAC1B,CACD,UAAW,CACT,QAAS,IACV,CACD,OAAQ,CACN,OAAQ,CAAE,KAAM,sCAAuC,QAAS,EAAG,CACnE,WAAY,SACZ,mBAAoB,GACrB,CACD,SAAU,CACR,eAAgB,gBAChB,UAAW,IACX,oBAAqB,kBACtB,CACD,YACE,gKACH,CAED,SAAgB,EACd,EACwB,CACxB,OAAO,EAAS,SAAS,EAAgC"}

package/dist/knowledge/spaces/product-canon.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"product-canon.d.ts","names":[],"sources":["../../../src/knowledge/spaces/product-canon.ts"],"sourcesContent":[],"mappings":";;;cAGa,4BAA4B;iBA+BzB,kCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/product-canon.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"product-canon.js","names":["productCanonKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/product-canon.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const productCanonKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.product-canon',\n    version: 1,\n    category: 'canonical',\n    displayName: 'Product Canon',\n    title: 'Product Canon Knowledge Space',\n    description:\n      'Authoritative product knowledge covering strategy, roadmap, and delivery canon.',\n    domain: 'product',\n    owners: ['platform.product'],\n    tags: ['knowledge', 'product'],\n    stability: StabilityEnum.Stable,\n  },\n  retention: {\n    ttlDays: null,\n  },\n  access: {\n    policy: { name: 'knowledge.access.product-canon', version: 1 },\n    trustLevel: 'high',\n    automationWritable: false,\n  },\n  indexing: {\n    embeddingModel: 'text-embedding-3-large',\n    chunkSize: 800,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Single source of truth for product canon, principles, and strategic narratives.',\n};\n\nexport function registerProductCanonKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(productCanonKnowledgeSpace);\n}\n"],"mappings":"mDAGA,MAAaA,EAAiD,CAC5D,KAAM,CACJ,IAAK,0BACL,QAAS,EACT,SAAU,YACV,YAAa,gBACb,MAAO,gCACP,YACE,kFACF,OAAQ,UACR,OAAQ,CAAC,mBAAmB,CAC5B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,EAAc,OAC1B,CACD,UAAW,CACT,QAAS,KACV,CACD,OAAQ,CACN,OAAQ,CAAE,KAAM,iCAAkC,QAAS,EAAG,CAC9D,WAAY,OACZ,mBAAoB,GACrB,CACD,SAAU,CACR,eAAgB,yBAChB,UAAW,IACX,oBAAqB,kBACtB,CACD,YACE,kFACH,CAED,SAAgB,EACd,EACwB,CACxB,OAAO,EAAS,SAAS,EAA2B"}

package/dist/knowledge/spaces/support-faq.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"support-faq.d.ts","names":[],"sources":["../../../src/knowledge/spaces/support-faq.ts"],"sourcesContent":[],"mappings":";;;cAGa,0BAA0B;iBA+BvB,gCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/support-faq.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"support-faq.js","names":["supportFaqKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/support-faq.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const supportFaqKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.support-faq',\n    version: 1,\n    category: 'operational',\n    displayName: 'Support FAQ',\n    title: 'Support & Success FAQ',\n    description: 'Operational knowledge base for customer support and success.',\n    domain: 'support',\n    owners: ['platform.support'],\n    tags: ['knowledge', 'support'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: 365,\n    archiveAfterDays: 180,\n  },\n  access: {\n    policy: { name: 'knowledge.access.support', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'text-embedding-3-small',\n    chunkSize: 700,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'Operational FAQs, runbooks, and customer success playbooks augmented with automation updates.',\n};\n\nexport function registerSupportFaqKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(supportFaqKnowledgeSpace);\n}\n"],"mappings":"mDAGA,MAAaA,EAA+C,CAC1D,KAAM,CACJ,IAAK,wBACL,QAAS,EACT,SAAU,cACV,YAAa,cACb,MAAO,wBACP,YAAa,+DACb,OAAQ,UACR,OAAQ,CAAC,mBAAmB,CAC5B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,EAAc,KAC1B,CACD,UAAW,CACT,QAAS,IACT,iBAAkB,IACnB,CACD,OAAQ,CACN,OAAQ,CAAE,KAAM,2BAA4B,QAAS,EAAG,CACxD,WAAY,SACZ,mBAAoB,GACrB,CACD,SAAU,CACR,eAAgB,yBAChB,UAAW,IACX,oBAAqB,kBACtB,CACD,YACE,gGACH,CAED,SAAgB,EACd,EACwB,CACxB,OAAO,EAAS,SAAS,EAAyB"}

package/dist/knowledge/spaces/uploaded-docs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"uploaded-docs.d.ts","names":[],"sources":["../../../src/knowledge/spaces/uploaded-docs.ts"],"sourcesContent":[],"mappings":";;;cAGa,4BAA4B;iBA+BzB,kCAAA,WACJ,yBACT"}

package/dist/knowledge/spaces/uploaded-docs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"uploaded-docs.js","names":["uploadedDocsKnowledgeSpace: KnowledgeSpaceSpec"],"sources":["../../../src/knowledge/spaces/uploaded-docs.ts"],"sourcesContent":["import { StabilityEnum } from '../../ownership';\nimport type { KnowledgeSpaceRegistry, KnowledgeSpaceSpec } from '../spec';\n\nexport const uploadedDocsKnowledgeSpace: KnowledgeSpaceSpec = {\n  meta: {\n    key: 'knowledge.uploaded-docs',\n    version: 1,\n    category: 'external',\n    displayName: 'Uploaded Documents',\n    title: 'Uploaded Knowledge Assets',\n    description:\n      'Documents uploaded by households, including invoices, contracts, and reference files.',\n    domain: 'operations',\n    owners: ['platform.operations'],\n    tags: ['documents', 'storage'],\n    stability: StabilityEnum.Beta,\n  },\n  retention: {\n    ttlDays: null,\n  },\n  access: {\n    policy: { name: 'knowledge.access.uploaded-docs', version: 1 },\n    trustLevel: 'medium',\n    automationWritable: true,\n  },\n  indexing: {\n    embeddingModel: 'mistral-embed',\n    chunkSize: 900,\n    vectorDbIntegration: 'vectordb.qdrant',\n  },\n  description:\n    'User-provided documents normalized and embedded for retrieval augmented workflows.',\n};\n\nexport function registerUploadedDocsKnowledgeSpace(\n  registry: KnowledgeSpaceRegistry\n): KnowledgeSpaceRegistry {\n  return registry.register(uploadedDocsKnowledgeSpace);\n}\n"],"mappings":"mDAGA,MAAaA,EAAiD,CAC5D,KAAM,CACJ,IAAK,0BACL,QAAS,EACT,SAAU,WACV,YAAa,qBACb,MAAO,4BACP,YACE,wFACF,OAAQ,aACR,OAAQ,CAAC,sBAAsB,CAC/B,KAAM,CAAC,YAAa,UAAU,CAC9B,UAAW,EAAc,KAC1B,CACD,UAAW,CACT,QAAS,KACV,CACD,OAAQ,CACN,OAAQ,CAAE,KAAM,iCAAkC,QAAS,EAAG,CAC9D,WAAY,SACZ,mBAAoB,GACrB,CACD,SAAU,CACR,eAAgB,gBAChB,UAAW,IACX,oBAAqB,kBACtB,CACD,YACE,qFACH,CAED,SAAgB,EACd,EACwB,CACxB,OAAO,EAAS,SAAS,EAA2B"}

package/dist/knowledge/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../../src/knowledge/spec.ts"],"sourcesContent":[],"mappings":";;;;KAGY,iBAAA;UAMK,kBAAA,SAA2B;EANhC;EAMK,GAAA,EAAA,MAAA;EAQA,OAAA,EAAA,MAAA;EAOA,QAAA,EAXL,iBAW0B;EASrB,WAAA,EAAA,MAAA;AAMjB;AACQ,UAvBS,wBAAA,CAuBT;EAEK;EAEH,OAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAEG;EAAuB,gBAAA,CAAA,EAAA,MAAA;AAQpC;AAGiB,UAjCA,qBAAA,CAiCA;EASP;EAI4B,MAAA,CAAA,EA5C3B,SA4C2B;EAgBZ;EAAoB,UAAA,EAAA,MAAA,GAAA,QAAA,GAAA,KAAA;EAAkB;EAKhD,kBAAA,EAAA,OAAqB;;UA1DpB,uBAAA;;;;;UAMA,kBAAA;QACT;;aAEK;;UAEH;;aAEG;;;;cAQA,sBAAA;;iBAGI;UASP;sCAI4B;0BAgBZ,oBAAoB;;iBAK9B,qBAAA,OAA4B"}

package/dist/knowledge/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":["latest: KnowledgeSpaceSpec | undefined"],"sources":["../../src/knowledge/spec.ts"],"sourcesContent":["import type { OwnerShipMeta } from '../ownership';\nimport type { PolicyRef } from '../policy/spec';\n\nexport type KnowledgeCategory =\n  | 'canonical' // Ground truth - product specs, schemas, official policies\n  | 'operational' // Internal docs - support tickets, runbooks, sales materials\n  | 'external' // Third-party - PSP docs, regulations, integration guides\n  | 'ephemeral'; // Temporary - agent scratchpads, session context, drafts\n\nexport interface KnowledgeSpaceMeta extends OwnerShipMeta {\n  /** Stable space identifier (e.g., \"product-canon\", \"support-faq\"). */\n  key: string;\n  version: number;\n  category: KnowledgeCategory;\n  displayName: string;\n}\n\nexport interface KnowledgeRetentionPolicy {\n  /** TTL in days (null = indefinite). */\n  ttlDays?: number | null;\n  /** Auto-archive after inactivity. */\n  archiveAfterDays?: number;\n}\n\nexport interface KnowledgeAccessPolicy {\n  /** Which PolicySpec governs access. */\n  policy?: PolicyRef;\n  /** Trust level for agent/workflow consumption. */\n  trustLevel: 'high' | 'medium' | 'low';\n  /** Can this space be mutated by automation? */\n  automationWritable: boolean;\n}\n\nexport interface KnowledgeIndexingConfig {\n  embeddingModel?: string;\n  chunkSize?: number;\n  vectorDbIntegration?: string;\n}\n\nexport interface KnowledgeSpaceSpec {\n  meta: KnowledgeSpaceMeta;\n  /** Retention and cleanup rules. */\n  retention: KnowledgeRetentionPolicy;\n  /** Access control and trust. */\n  access: KnowledgeAccessPolicy;\n  /** Optional embedding/indexing config. */\n  indexing?: KnowledgeIndexingConfig;\n  /** Documentation. */\n  description?: string;\n}\n\nconst knowledgeKey = (meta: Pick<KnowledgeSpaceMeta, 'key' | 'version'>) =>\n  `${meta.key}.v${meta.version}`;\n\nexport class KnowledgeSpaceRegistry {\n  private readonly items = new Map<string, KnowledgeSpaceSpec>();\n\n  register(spec: KnowledgeSpaceSpec): this {\n    const key = knowledgeKey(spec.meta);\n    if (this.items.has(key)) {\n      throw new Error(`Duplicate KnowledgeSpaceSpec ${key}`);\n    }\n    this.items.set(key, spec);\n    return this;\n  }\n\n  list(): KnowledgeSpaceSpec[] {\n    return [...this.items.values()];\n  }\n\n  get(key: string, version?: number): KnowledgeSpaceSpec | undefined {\n    if (version != null) {\n      return this.items.get(knowledgeKey({ key, version }));\n    }\n    let latest: KnowledgeSpaceSpec | undefined;\n    let maxVersion = -Infinity;\n    for (const spec of this.items.values()) {\n      if (spec.meta.key !== key) continue;\n      if (spec.meta.version > maxVersion) {\n        maxVersion = spec.meta.version;\n        latest = spec;\n      }\n    }\n    return latest;\n  }\n\n  getByCategory(category: KnowledgeCategory): KnowledgeSpaceSpec[] {\n    return this.list().filter((spec) => spec.meta.category === category);\n  }\n}\n\nexport function makeKnowledgeSpaceKey(meta: KnowledgeSpaceMeta) {\n  return knowledgeKey(meta);\n}\n"],"mappings":"AAmDA,MAAM,EAAgB,GACpB,GAAG,EAAK,IAAI,IAAI,EAAK,UAEvB,IAAa,EAAb,KAAoC,CAClC,MAAyB,IAAI,IAE7B,SAAS,EAAgC,CACvC,IAAM,EAAM,EAAa,EAAK,KAAK,CACnC,GAAI,KAAK,MAAM,IAAI,EAAI,CACrB,MAAU,MAAM,gCAAgC,IAAM,CAGxD,OADA,KAAK,MAAM,IAAI,EAAK,EAAK,CAClB,KAGT,MAA6B,CAC3B,MAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,CAGjC,IAAI,EAAa,EAAkD,CACjE,GAAI,GAAW,KACb,OAAO,KAAK,MAAM,IAAI,EAAa,CAAE,MAAK,UAAS,CAAC,CAAC,CAEvD,IAAIA,EACA,EAAa,KACjB,IAAK,IAAM,KAAQ,KAAK,MAAM,QAAQ,CAChC,EAAK,KAAK,MAAQ,GAClB,EAAK,KAAK,QAAU,IACtB,EAAa,EAAK,KAAK,QACvB,EAAS,GAGb,OAAO,EAGT,cAAc,EAAmD,CAC/D,OAAO,KAAK,MAAM,CAAC,OAAQ,GAAS,EAAK,KAAK,WAAa,EAAS,GAIxE,SAAgB,EAAsB,EAA0B,CAC9D,OAAO,EAAa,EAAK"}

package/dist/markdown.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"markdown.d.ts","names":[],"sources":["../src/markdown.ts"],"sourcesContent":[],"mappings":";;;;;;;;AASA;;AAE6B,iBAFb,eAAA,CAEa,GAAA,EADtB,YACsB,EAAA,MA2F7B,CA3F6B,EAAA;EAAiC,aAAA,CAAA,EAAjC,oBAAiC;EAAe,QAAA,CAAA,EAAf,eAAe;AA2F7E,CAAA,CAAA,EAAgB,MAAA;;AAEY,iBAFZ,cAAA,CAEY,GAAA,EADrB,YACqB,EAAA,MAAA,EAAA;EAAiC,aAAA,CAAA,EAAjC,oBAAiC;EAAe,QAAA,CAAA,EAAf,eAAe"}

package/dist/markdown.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"markdown.js","names":["lines: string[]","parts: string[]"],"sources":["../src/markdown.ts"],"sourcesContent":["import type { SpecRegistry } from './registry';\nimport { isEmitDeclRef } from './spec';\nimport type { PresentationRegistry } from './presentations';\nimport type { FeatureRegistry } from './features';\n\n/**\n * Render simple Markdown docs for each spec.\n * Useful for dev portals and repo docs generation.\n */\nexport function specsToMarkdown(\n  reg: SpecRegistry,\n  extras?: { presentations?: PresentationRegistry; features?: FeatureRegistry }\n): string {\n  const lines: string[] = [];\n\n  for (const spec of reg.listSpecs()) {\n    const m = spec.meta;\n    lines.push(`# ${m.name}.v${m.version}`);\n    lines.push('');\n    lines.push(\n      `**Kind:** ${m.kind} | **Stability:** ${m.stability} | **Owners:** ${m.owners.join(', ')}`\n    );\n    lines.push('');\n    lines.push(`**Description:** ${m.description}`);\n    lines.push('');\n    lines.push(`## Goal`);\n    lines.push(m.goal);\n    lines.push('');\n    lines.push(`## Context`);\n    lines.push(m.context);\n    lines.push('');\n\n    lines.push(`## Policy`);\n    lines.push(`- Auth: ${spec.policy.auth}`);\n    lines.push(`- Idempotent: ${!!spec.policy.idempotent}`);\n    if (spec.policy.rateLimit)\n      lines.push(\n        `- Rate Limit: ${spec.policy.rateLimit.rpm}/min by ${spec.policy.rateLimit.key}`\n      );\n    if (spec.policy.flags?.length)\n      lines.push(`- Flags: ${spec.policy.flags.join(', ')}`);\n    if (spec.policy.pii?.length)\n      lines.push(`- PII: ${spec.policy.pii.join(', ')}`);\n    lines.push('');\n\n    if (spec.sideEffects?.emits?.length) {\n      lines.push(`## Emits Events`);\n      for (const e of spec.sideEffects.emits) {\n        if (isEmitDeclRef(e)) {\n          lines.push(`- \\`${e.ref.name}.v${e.ref.version}\\` — ${e.when}`);\n        } else {\n          lines.push(`- \\`${e.name}.v${e.version}\\` — ${e.when}`);\n        }\n      }\n      lines.push('');\n    }\n\n    if (spec.io.errors && Object.keys(spec.io.errors).length) {\n      lines.push(`## Errors`);\n      for (const [code, err] of Object.entries(spec.io.errors)) {\n        lines.push(\n          `- \\`${code}\\` (${err.http ?? 400}) — ${err.description} (when: ${err.when})`\n        );\n      }\n      lines.push('');\n    }\n\n    if (spec.acceptance?.scenarios?.length) {\n      lines.push(`## Acceptance Scenarios`);\n      for (const s of spec.acceptance.scenarios) {\n        lines.push(`### ${s.name}`);\n        lines.push(`- **Given:** ${s.given.join('; ')}`);\n        lines.push(`- **When:** ${s.when.join('; ')}`);\n        lines.push(`- **Then:** ${s.then.join('; ')}`);\n        lines.push('');\n      }\n    }\n\n    if (spec.acceptance?.examples?.length) {\n      lines.push(`## Examples`);\n      for (const ex of spec.acceptance.examples) {\n        lines.push(`- **${ex.name}**`);\n        lines.push('  - Input:');\n        lines.push('    ```json');\n        lines.push(JSON.stringify(ex.input, null, 2));\n        lines.push('    ```');\n        lines.push('  - Output:');\n        lines.push('    ```json');\n        lines.push(JSON.stringify(ex.output, null, 2));\n        lines.push('    ```');\n        lines.push('');\n      }\n    }\n\n    lines.push('---');\n    lines.push('');\n  }\n\n  return lines.join('\\n');\n}\n\n/** Render presentations and features as additional sections. */\nexport function docsToMarkdown(\n  reg: SpecRegistry,\n  extras: { presentations?: PresentationRegistry; features?: FeatureRegistry }\n): string {\n  const parts: string[] = [];\n  parts.push(specsToMarkdown(reg, extras));\n\n  if (extras.presentations) {\n    parts.push('# Presentations');\n    parts.push('');\n    for (const p of extras.presentations.list()) {\n      parts.push(`## ${p.meta.name}.v${p.meta.version}`);\n      parts.push('');\n      parts.push(`- Kind: ${(p.content as any).kind}`);\n      if ('framework' in p.content)\n        parts.push(`- Framework: ${p.content.framework}`);\n      if ('componentKey' in p.content)\n        parts.push(`- Component Key: ${(p.content as any).componentKey}`);\n      if ('mimeType' in p.content)\n        parts.push(`- MIME Type: ${(p.content as any).mimeType}`);\n      parts.push('');\n    }\n    parts.push('');\n  }\n\n  if (extras.features) {\n    parts.push('# Features');\n    parts.push('');\n    for (const f of extras.features.list()) {\n      parts.push(`## ${f.meta.title} (${f.meta.key})`);\n      if (f.meta.description) parts.push(f.meta.description);\n      parts.push('');\n      if (f.operations?.length) {\n        parts.push('- Operations:');\n        for (const o of f.operations) parts.push(`  - ${o.name}.v${o.version}`);\n      }\n      if (f.events?.length) {\n        parts.push('- Events:');\n        for (const e of f.events) parts.push(`  - ${e.name}.v${e.version}`);\n      }\n      if (f.presentations?.length) {\n        parts.push('- Presentations:');\n        for (const p of f.presentations)\n          parts.push(`  - ${p.name}.v${p.version}`);\n      }\n      parts.push('');\n    }\n  }\n\n  return parts.join('\\n');\n}\n"],"mappings":"0CASA,SAAgB,EACd,EACA,EACQ,CACR,IAAMA,EAAkB,EAAE,CAE1B,IAAK,IAAM,KAAQ,EAAI,WAAW,CAAE,CAClC,IAAM,EAAI,EAAK,KA6Bf,GA5BA,EAAM,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,UAAU,CACvC,EAAM,KAAK,GAAG,CACd,EAAM,KACJ,aAAa,EAAE,KAAK,oBAAoB,EAAE,UAAU,iBAAiB,EAAE,OAAO,KAAK,KAAK,GACzF,CACD,EAAM,KAAK,GAAG,CACd,EAAM,KAAK,oBAAoB,EAAE,cAAc,CAC/C,EAAM,KAAK,GAAG,CACd,EAAM,KAAK,UAAU,CACrB,EAAM,KAAK,EAAE,KAAK,CAClB,EAAM,KAAK,GAAG,CACd,EAAM,KAAK,aAAa,CACxB,EAAM,KAAK,EAAE,QAAQ,CACrB,EAAM,KAAK,GAAG,CAEd,EAAM,KAAK,YAAY,CACvB,EAAM,KAAK,WAAW,EAAK,OAAO,OAAO,CACzC,EAAM,KAAK,iBAAiB,CAAC,CAAC,EAAK,OAAO,aAAa,CACnD,EAAK,OAAO,WACd,EAAM,KACJ,iBAAiB,EAAK,OAAO,UAAU,IAAI,UAAU,EAAK,OAAO,UAAU,MAC5E,CACC,EAAK,OAAO,OAAO,QACrB,EAAM,KAAK,YAAY,EAAK,OAAO,MAAM,KAAK,KAAK,GAAG,CACpD,EAAK,OAAO,KAAK,QACnB,EAAM,KAAK,UAAU,EAAK,OAAO,IAAI,KAAK,KAAK,GAAG,CACpD,EAAM,KAAK,GAAG,CAEV,EAAK,aAAa,OAAO,OAAQ,CACnC,EAAM,KAAK,kBAAkB,CAC7B,IAAK,IAAM,KAAK,EAAK,YAAY,MAC3B,EAAc,EAAE,CAClB,EAAM,KAAK,OAAO,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,QAAQ,OAAO,EAAE,OAAO,CAE/D,EAAM,KAAK,OAAO,EAAE,KAAK,IAAI,EAAE,QAAQ,OAAO,EAAE,OAAO,CAG3D,EAAM,KAAK,GAAG,CAGhB,GAAI,EAAK,GAAG,QAAU,OAAO,KAAK,EAAK,GAAG,OAAO,CAAC,OAAQ,CACxD,EAAM,KAAK,YAAY,CACvB,IAAK,GAAM,CAAC,EAAM,KAAQ,OAAO,QAAQ,EAAK,GAAG,OAAO,CACtD,EAAM,KACJ,OAAO,EAAK,MAAM,EAAI,MAAQ,IAAI,MAAM,EAAI,YAAY,UAAU,EAAI,KAAK,GAC5E,CAEH,EAAM,KAAK,GAAG,CAGhB,GAAI,EAAK,YAAY,WAAW,OAAQ,CACtC,EAAM,KAAK,0BAA0B,CACrC,IAAK,IAAM,KAAK,EAAK,WAAW,UAC9B,EAAM,KAAK,OAAO,EAAE,OAAO,CAC3B,EAAM,KAAK,gBAAgB,EAAE,MAAM,KAAK,KAAK,GAAG,CAChD,EAAM,KAAK,eAAe,EAAE,KAAK,KAAK,KAAK,GAAG,CAC9C,EAAM,KAAK,eAAe,EAAE,KAAK,KAAK,KAAK,GAAG,CAC9C,EAAM,KAAK,GAAG,CAIlB,GAAI,EAAK,YAAY,UAAU,OAAQ,CACrC,EAAM,KAAK,cAAc,CACzB,IAAK,IAAM,KAAM,EAAK,WAAW,SAC/B,EAAM,KAAK,OAAO,EAAG,KAAK,IAAI,CAC9B,EAAM,KAAK,aAAa,CACxB,EAAM,KAAK,cAAc,CACzB,EAAM,KAAK,KAAK,UAAU,EAAG,MAAO,KAAM,EAAE,CAAC,CAC7C,EAAM,KAAK,UAAU,CACrB,EAAM,KAAK,cAAc,CACzB,EAAM,KAAK,cAAc,CACzB,EAAM,KAAK,KAAK,UAAU,EAAG,OAAQ,KAAM,EAAE,CAAC,CAC9C,EAAM,KAAK,UAAU,CACrB,EAAM,KAAK,GAAG,CAIlB,EAAM,KAAK,MAAM,CACjB,EAAM,KAAK,GAAG,CAGhB,OAAO,EAAM,KAAK;EAAK,CAIzB,SAAgB,EACd,EACA,EACQ,CACR,IAAMC,EAAkB,EAAE,CAG1B,GAFA,EAAM,KAAK,EAAgB,EAAK,EAAO,CAAC,CAEpC,EAAO,cAAe,CACxB,EAAM,KAAK,kBAAkB,CAC7B,EAAM,KAAK,GAAG,CACd,IAAK,IAAM,KAAK,EAAO,cAAc,MAAM,CACzC,EAAM,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,UAAU,CAClD,EAAM,KAAK,GAAG,CACd,EAAM,KAAK,WAAY,EAAE,QAAgB,OAAO,CAC5C,cAAe,EAAE,SACnB,EAAM,KAAK,gBAAgB,EAAE,QAAQ,YAAY,CAC/C,iBAAkB,EAAE,SACtB,EAAM,KAAK,oBAAqB,EAAE,QAAgB,eAAe,CAC/D,aAAc,EAAE,SAClB,EAAM,KAAK,gBAAiB,EAAE,QAAgB,WAAW,CAC3D,EAAM,KAAK,GAAG,CAEhB,EAAM,KAAK,GAAG,CAGhB,GAAI,EAAO,SAAU,CACnB,EAAM,KAAK,aAAa,CACxB,EAAM,KAAK,GAAG,CACd,IAAK,IAAM,KAAK,EAAO,SAAS,MAAM,CAAE,CAItC,GAHA,EAAM,KAAK,MAAM,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,IAAI,GAAG,CAC5C,EAAE,KAAK,aAAa,EAAM,KAAK,EAAE,KAAK,YAAY,CACtD,EAAM,KAAK,GAAG,CACV,EAAE,YAAY,OAAQ,CACxB,EAAM,KAAK,gBAAgB,CAC3B,IAAK,IAAM,KAAK,EAAE,WAAY,EAAM,KAAK,OAAO,EAAE,KAAK,IAAI,EAAE,UAAU,CAEzE,GAAI,EAAE,QAAQ,OAAQ,CACpB,EAAM,KAAK,YAAY,CACvB,IAAK,IAAM,KAAK,EAAE,OAAQ,EAAM,KAAK,OAAO,EAAE,KAAK,IAAI,EAAE,UAAU,CAErE,GAAI,EAAE,eAAe,OAAQ,CAC3B,EAAM,KAAK,mBAAmB,CAC9B,IAAK,IAAM,KAAK,EAAE,cAChB,EAAM,KAAK,OAAO,EAAE,KAAK,IAAI,EAAE,UAAU,CAE7C,EAAM,KAAK,GAAG,EAIlB,OAAO,EAAM,KAAK;EAAK"}

package/dist/migrations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrations.d.ts","names":[],"sources":["../src/migrations.ts"],"sourcesContent":[],"mappings":";;;KAEY,iBAAA;UAEK,cAAA;EAFL,WAAA,EAAA,MAAA;EAEK,UAAA,EAAA,MAAc;AAK/B;AACQ,UADS,iBAAA,CACT;EAIM,IAAA,EAJN,iBAIM;EACC,WAAA,CAAA,EAAA,MAAA;EAAc,SAAA,CAAA,EAAA,MAAA;EAGZ,OAAA,CAAA,EAAA,MAAA;EAKA,SAAA,CAAA,EATH,cASqB,EAAA;EAKlB,UAAA,CAAA,EAbF,cAa0B,EAAA;AAKzC;AACI,UAhBa,mBAAA,SAA4B,iBAgBzC,CAAA;EACA,IAAA,EAAA,QAAA;EACA,GAAA,EAAA,MAAA;;AAEa,UAfA,iBAAA,SAA0B,iBAeS,CAAA;EAOnC,IAAA,EAAA,MAAA;EAKA,MAAA,EAAA,MAAA;AAQjB;AAGiB,UAjCA,uBAAA,SAAgC,iBAiChC,CAAA;EAOP,IAAA,EAAA,YAAA;EAS6B,SAAA,EAAA,MAAA;;KA5C3B,aAAA,GACR,sBACA,oBACA;UAEa,aAAA,SAAsB;;;;;;UAOtB,aAAA;MACX;SACG;;UAGQ,aAAA;QACT;QACA;;;cAMK,iBAAA;;iBAGI;UAOP;uCAS6B"}

package/dist/migrations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrations.js","names":["candidate: MigrationSpec | undefined"],"sources":["../src/migrations.ts"],"sourcesContent":["import type { OwnerShipMeta } from './ownership';\n\nexport type MigrationStepKind = 'schema' | 'data' | 'validation';\n\nexport interface MigrationCheck {\n  description: string;\n  expression: string;\n}\n\nexport interface MigrationStepBase {\n  kind: MigrationStepKind;\n  description?: string;\n  timeoutMs?: number;\n  retries?: number;\n  preChecks?: MigrationCheck[];\n  postChecks?: MigrationCheck[];\n}\n\nexport interface SchemaMigrationStep extends MigrationStepBase {\n  kind: 'schema';\n  sql: string;\n}\n\nexport interface DataMigrationStep extends MigrationStepBase {\n  kind: 'data';\n  script: string;\n}\n\nexport interface ValidationMigrationStep extends MigrationStepBase {\n  kind: 'validation';\n  assertion: string;\n}\n\nexport type MigrationStep =\n  | SchemaMigrationStep\n  | DataMigrationStep\n  | ValidationMigrationStep;\n\nexport interface MigrationMeta extends OwnerShipMeta {\n  /** Fully qualified migration name (e.g., \"sigil.db.2025_01_add_users\"). */\n  name: string;\n  /** Increment when the migration changes. */\n  version: number;\n}\n\nexport interface MigrationPlan {\n  up: MigrationStep[];\n  down?: MigrationStep[];\n}\n\nexport interface MigrationSpec {\n  meta: MigrationMeta;\n  plan: MigrationPlan;\n  dependencies?: string[];\n}\n\nconst migrationKey = (name: string, version: number) => `${name}.v${version}`;\n\nexport class MigrationRegistry {\n  private readonly items = new Map<string, MigrationSpec>();\n\n  register(spec: MigrationSpec): this {\n    const key = migrationKey(spec.meta.name, spec.meta.version);\n    if (this.items.has(key)) throw new Error(`Duplicate migration ${key}`);\n    this.items.set(key, spec);\n    return this;\n  }\n\n  list(): MigrationSpec[] {\n    return [...this.items.values()].sort((a, b) =>\n      compareKey(\n        migrationKey(a.meta.name, a.meta.version),\n        migrationKey(b.meta.name, b.meta.version)\n      )\n    );\n  }\n\n  get(name: string, version?: number): MigrationSpec | undefined {\n    if (version != null) return this.items.get(migrationKey(name, version));\n    let candidate: MigrationSpec | undefined;\n    let max = -Infinity;\n    for (const spec of this.items.values()) {\n      if (spec.meta.name !== name) continue;\n      if (spec.meta.version > max) {\n        max = spec.meta.version;\n        candidate = spec;\n      }\n    }\n    return candidate;\n  }\n}\n\nfunction compareKey(a: string, b: string) {\n  return a < b ? -1 : a > b ? 1 : 0;\n}\n"],"mappings":"AAwDA,MAAM,GAAgB,EAAc,IAAoB,GAAG,EAAK,IAAI,IAEpE,IAAa,EAAb,KAA+B,CAC7B,MAAyB,IAAI,IAE7B,SAAS,EAA2B,CAClC,IAAM,EAAM,EAAa,EAAK,KAAK,KAAM,EAAK,KAAK,QAAQ,CAC3D,GAAI,KAAK,MAAM,IAAI,EAAI,CAAE,MAAU,MAAM,uBAAuB,IAAM,CAEtE,OADA,KAAK,MAAM,IAAI,EAAK,EAAK,CAClB,KAGT,MAAwB,CACtB,MAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,CAAC,MAAM,EAAG,IACvC,EACE,EAAa,EAAE,KAAK,KAAM,EAAE,KAAK,QAAQ,CACzC,EAAa,EAAE,KAAK,KAAM,EAAE,KAAK,QAAQ,CAC1C,CACF,CAGH,IAAI,EAAc,EAA6C,CAC7D,GAAI,GAAW,KAAM,OAAO,KAAK,MAAM,IAAI,EAAa,EAAM,EAAQ,CAAC,CACvE,IAAIA,EACA,EAAM,KACV,IAAK,IAAM,KAAQ,KAAK,MAAM,QAAQ,CAChC,EAAK,KAAK,OAAS,GACnB,EAAK,KAAK,QAAU,IACtB,EAAM,EAAK,KAAK,QAChB,EAAY,GAGhB,OAAO,IAIX,SAAS,EAAW,EAAW,EAAW,CACxC,OAAO,EAAI,EAAI,GAAK,EAAI,EAAI,EAAI"}

package/dist/onboarding-base.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"onboarding-base.d.ts","names":[],"sources":["../src/onboarding-base.ts"],"sourcesContent":[],"mappings":";;;;;;cASa,0BAAwB;;UAMnC,mBAAA,CAAA;IANW,UAAA,EAAA,KAAA;EAQA,CAAA;CAOX,CAAA;cAPW,2BAAyB;EAAA,EAAA,EAAA;IAAA,IAAA,EAOpC,mBAAA,CAAA,SAPoC,CAAA,MAAA,EAAA,MAAA,CAAA;IASzB,UAAA,EAAA,KAAA;EAwBX,CAAA;EAxBsC,cAAA,EAAA;IAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;;;;AAAA,cAA3B,2BAA2B,cAAA,CAAA,WAAA,CAAA;EA2B3B,IAAA,EAAA;IAUX,IAAA,EAbA,mBAAA,CAAA,SAaA,CAAA,OAAA,EAAA,OAAA,CAAA;;;;;UArCsC,mBAAA,CAAA;;EA2BH,CAAA;EAAA,cAAA,EAAA;IAYxB,IAAA,+BAuBX,CAAA,MAAA,EAAA,MAAA,CAAA;IAAA,UAAA,EAAA,KAvBqC;EAAA,CAAA;;;cAZ1B,0BAAwB;;UAUnC,mBAAA,CAAA;;EAEqC,CAAA;EAAA,cAAA,EAAA;IAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;IA0B1B,UAAA,EAAA,IAAA;EAQA,CAAA;EAuBX,IAAA,EAAA;IAvBwC,IAAA,+BAAA,CAAA,OAAA,EAAA,OAAA,CAAA;IAAA,UAAA,EAAA,IAAA;EAAA,CAAA;EAAA,SAAA,EAAA;IA0B7B,IAAA,+BAMX,KAAA,EAAA,MAAA,CAAA;IAEW,UAAA,EAAA,IAAA;EAQX,CAAA;;;IARuC,UAAA,EAAA,IAAA;EAAA,CAAA;AAUzC,CAAA,CAAA;AAwBE,cAtGW,0BAsGX,EAtGqC,YAsGrC,CA/EA,mBAAA,CAvBqC,cAAA,EAAA,WAsGrC,CAAA;EAxBqC,EAAA,EAAA;IAAA,IAAA,EA9EA,mBAAA,CAAA,SA8EA,CAAA,MAAA,EAAA,MAAA,CAAA;;;;;IAAA,UAAA,EAAA,IAAA;;;;;;;;;;;;;;;;cApD1B,6BAA2B;;UAMtC,mBAAA,CAAA;;;;cAEW,+BAA6B,aAuBxC,mBAAA,CAvBwC,cAAA,EAAA;;UAAA,mBAAA,CAAA;;;;;cA0B7B,6BAA2B;;UAMtC,mBAAA,CAAA;;;;cAEW,8BAA4B;;UAQvC,mBAAA,CAAA;;;;;;;;;;;;cAEW,yCAA0B;;UAwBrC,mBAAA,CAAA;;;;;UAxBqC,mBAAA,CAAA"}

package/dist/onboarding-base.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"onboarding-base.js","names":["SchemaModel","ScalarTypeEnum"],"sources":["../src/onboarding-base.ts"],"sourcesContent":["/**\n * Shared base contracts for onboarding flows across verticals.\n * These operations are reusable for any app that needs multi-step onboarding with draft persistence.\n */\nimport { defineCommand, defineQuery } from './spec';\nimport { ScalarTypeEnum, SchemaModel } from '@lssm/lib.schema';\nimport { OwnersEnum, StabilityEnum } from './ownership';\n\n/** Save/update onboarding draft (auto-save during flow) */\nexport const SaveOnboardingDraftInput = new SchemaModel({\n  name: 'SaveOnboardingDraftInput',\n  description: 'Input for saving onboarding draft',\n  fields: {\n    data: { type: ScalarTypeEnum.JSON(), isOptional: false },\n  },\n});\n\nexport const SaveOnboardingDraftOutput = new SchemaModel({\n  name: 'SaveOnboardingDraftOutput',\n  description: 'Output for saving onboarding draft',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: false },\n    organizationId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nexport const SaveOnboardingDraftBaseSpec = defineCommand({\n  meta: {\n    name: 'base.onboarding.saveDraft',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding', 'draft'],\n    description: 'Save or update onboarding draft for active organization',\n    goal: 'Persist onboarding progress incrementally for resumption and safety',\n    context:\n      'Auto-saves every few seconds during onboarding; enables users to leave and resume',\n  },\n  io: {\n    input: SaveOnboardingDraftInput,\n    output: SaveOnboardingDraftOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'saveOnboardingDraft' },\n    rest: { method: 'POST' },\n  },\n});\n\n/** Get current onboarding draft (on mount/restore) */\nexport const GetOnboardingDraftOutput = new SchemaModel({\n  name: 'GetOnboardingDraftOutput',\n  description: 'Onboarding draft payload',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: true },\n    organizationId: { type: ScalarTypeEnum.ID(), isOptional: true },\n    data: { type: ScalarTypeEnum.JSON(), isOptional: true },\n    createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n  },\n});\n\nexport const GetOnboardingDraftBaseSpec = defineQuery({\n  meta: {\n    name: 'base.onboarding.getDraft',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding', 'draft'],\n    description: 'Get onboarding draft for active organization',\n    goal: 'Retrieve saved onboarding progress',\n    context: 'Called on mount to restore in-progress onboarding',\n  },\n  io: {\n    input: null,\n    output: GetOnboardingDraftOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'getOnboardingDraft' },\n    rest: { method: 'GET' },\n  },\n});\n\n/** Delete onboarding draft (cleanup after completion or cancel) */\nexport const DeleteOnboardingDraftOutput = new SchemaModel({\n  name: 'DeleteOnboardingDraftOutput',\n  description: 'Result of delete operation',\n  fields: {\n    ok: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n  },\n});\n\nexport const DeleteOnboardingDraftBaseSpec = defineCommand({\n  meta: {\n    name: 'base.onboarding.deleteDraft',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding', 'draft'],\n    description: 'Delete onboarding draft for active organization',\n    goal: 'Clear draft after completion or if user wants to restart',\n    context: 'Called after successful onboarding or explicit user reset',\n  },\n  io: {\n    input: null,\n    output: DeleteOnboardingDraftOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'deleteOnboardingDraft' },\n    rest: { method: 'POST' },\n  },\n});\n\n/** Complete onboarding (final submit, creates entities) */\nexport const CompleteOnboardingBaseInput = new SchemaModel({\n  name: 'CompleteOnboardingBaseInput',\n  description: 'Input for completing onboarding',\n  fields: {\n    data: { type: ScalarTypeEnum.JSON(), isOptional: false },\n  },\n});\n\nexport const CompleteOnboardingBaseOutput = new SchemaModel({\n  name: 'CompleteOnboardingBaseOutput',\n  description: 'Result of onboarding completion',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    userId: { type: ScalarTypeEnum.ID(), isOptional: true },\n    organizationId: { type: ScalarTypeEnum.ID(), isOptional: true },\n  },\n});\n\nexport const CompleteOnboardingBaseSpec = defineCommand({\n  meta: {\n    name: 'base.onboarding.complete',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding'],\n    description: 'Complete onboarding and finalize user/organization setup',\n    goal: 'Transition from draft to active profile',\n    context:\n      'Validates all required fields, creates/updates entities, marks onboarding complete',\n  },\n  io: {\n    input: CompleteOnboardingBaseInput,\n    output: CompleteOnboardingBaseOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'completeOnboarding' },\n    rest: { method: 'POST' },\n  },\n});\n"],"mappings":"yPASA,MAAa,EAA2B,IAAIA,EAAY,CACtD,KAAM,2BACN,YAAa,oCACb,OAAQ,CACN,KAAM,CAAE,KAAMC,EAAe,MAAM,CAAE,WAAY,GAAO,CACzD,CACF,CAAC,CAEW,EAA4B,IAAID,EAAY,CACvD,KAAM,4BACN,YAAa,qCACb,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CACpD,eAAgB,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAO,CACjE,CACF,CAAC,CAEW,EAA8B,EAAc,CACvD,KAAM,CACJ,KAAM,4BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAc,QAAQ,CAC7B,YAAa,0DACb,KAAM,sEACN,QACE,oFACH,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,sBAAuB,CACrC,KAAM,CAAE,OAAQ,OAAQ,CACzB,CACF,CAAC,CAGW,EAA2B,IAAID,EAAY,CACtD,KAAM,2BACN,YAAa,2BACb,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAM,CACnD,eAAgB,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAM,CAC/D,KAAM,CAAE,KAAMA,EAAe,MAAM,CAAE,WAAY,GAAM,CACvD,UAAW,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CAChE,UAAW,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CACjE,CACF,CAAC,CAEW,EAA6B,EAAY,CACpD,KAAM,CACJ,KAAM,2BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAc,QAAQ,CAC7B,YAAa,+CACb,KAAM,qCACN,QAAS,oDACV,CACD,GAAI,CACF,MAAO,KACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,qBAAsB,CACpC,KAAM,CAAE,OAAQ,MAAO,CACxB,CACF,CAAC,CAGW,EAA8B,IAAID,EAAY,CACzD,KAAM,8BACN,YAAa,6BACb,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC1D,CACF,CAAC,CAEW,EAAgC,EAAc,CACzD,KAAM,CACJ,KAAM,8BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAc,QAAQ,CAC7B,YAAa,kDACb,KAAM,2DACN,QAAS,4DACV,CACD,GAAI,CACF,MAAO,KACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,wBAAyB,CACvC,KAAM,CAAE,OAAQ,OAAQ,CACzB,CACF,CAAC,CAGW,EAA8B,IAAID,EAAY,CACzD,KAAM,8BACN,YAAa,kCACb,OAAQ,CACN,KAAM,CAAE,KAAMC,EAAe,MAAM,CAAE,WAAY,GAAO,CACzD,CACF,CAAC,CAEW,EAA+B,IAAID,EAAY,CAC1D,KAAM,+BACN,YAAa,kCACb,OAAQ,CACN,QAAS,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC9D,OAAQ,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAM,CACvD,eAAgB,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAM,CAChE,CACF,CAAC,CAEW,EAA6B,EAAc,CACtD,KAAM,CACJ,KAAM,2BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAa,CACpB,YAAa,2DACb,KAAM,0CACN,QACE,qFACH,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,qBAAsB,CACpC,KAAM,CAAE,OAAQ,OAAQ,CACzB,CACF,CAAC"}

package/dist/ownership.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ownership.d.ts","names":[],"sources":["../src/ownership.ts"],"sourcesContent":[],"mappings":";cAEa;EAAA,SAAA,IAAA,EAAA,MAOH;EACE,SAAA,UAAS,EAAA,aAAW;EAGnB,SAAA,YAQH,EAAA,cAAA;EACE,SAAK,IAAA,EAAA,MACL;EAGC,SAAmB,MAAA,EAAA,QAAA;EAGnB,SAAA,UAgBH,EAAA,YAAA;AACV,CAAA;AAEa,KAtCD,SAAA,GAsCgB,CAAA,OAtCI,aAsCJ,CAAA,CAAA,MAAA,OAtCgC,aAsChC,CAAA;AAEX,cArCJ,UAqCiB,EAAA;EAKpB,SAAA,eAAA,EAAA,kBAAA;EACF,SAAA,YAAA,EAAA,eAAA;EACK,SAAA,gBAAA,EAAA,mBAAA;EAAS,SAAA,aAAA,EAAA,gBAAA;;;;;KAnCV,KAAA,WACA,yBAAyB;cAGxB;;;;;;;;;cAGA;;;;;;;;;;;;;;;;;KAiBD,GAAA,WAAc,uBAAuB;cAEpC;;;;;;;;;;;;;;;;;UAEI,aAAA;;;;;UAKP;QACF;aACK"}

package/dist/ownership.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ownership.js","names":[],"sources":["../src/ownership.ts"],"sourcesContent":["// Canonical ownership/stability/tags enums and shared meta\n\nexport const StabilityEnum = {\n  Idea: 'idea',\n  InCreation: 'in_creation',\n  Experimental: 'experimental',\n  Beta: 'beta',\n  Stable: 'stable',\n  Deprecated: 'deprecated',\n} as const;\nexport type Stability = (typeof StabilityEnum)[keyof typeof StabilityEnum];\n\n// Provide curated owner identifiers (business/product oriented), allow extension by string\nexport const OwnersEnum = {\n  ProductColiving: 'product.coliving',\n  ProductStrit: 'product.strit',\n  ProductArtisanos: 'product.artisanos',\n  PlatformSigil: 'platform.sigil',\n  PlatformMarketplace: 'platform.marketplace',\n  PlatformContent: 'platform.content',\n  PlatformFeatureFlags: 'platform.featureflags',\n} as const;\nexport type Owner =\n  | (typeof OwnersEnum)[keyof typeof OwnersEnum]\n  | (string & {});\n// Back-compat alias\nexport const Owners = OwnersEnum;\n\n// Provide common tags, allow extension by string\nexport const TagsEnum = {\n  Spots: 'spots',\n  Collectivity: 'collectivity',\n  Marketplace: 'marketplace',\n  Sellers: 'sellers',\n  Auth: 'auth',\n  Login: 'login',\n  Signup: 'signup',\n  Guide: 'guide',\n  Docs: 'docs',\n  I18n: 'i18n',\n  AtomicPages: 'atomic:pages',\n  Incident: 'incident',\n  Hygiene: 'hygiene',\n  WeeklyPulse: 'weekly_pulse',\n  WebAuth: 'webauth',\n} as const;\nexport type Tag = (typeof TagsEnum)[keyof typeof TagsEnum] | (string & {});\n// Back-compat alias\nexport const Tags = TagsEnum;\n\nexport interface OwnerShipMeta {\n  version?: number;\n  title: string;\n  description: string;\n  domain: string;\n  owners: Owner[];\n  tags: Tag[];\n  stability: Stability;\n}\n"],"mappings":"AAEA,MAAa,EAAgB,CAC3B,KAAM,OACN,WAAY,cACZ,aAAc,eACd,KAAM,OACN,OAAQ,SACR,WAAY,aACb,CAIY,EAAa,CACxB,gBAAiB,mBACjB,aAAc,gBACd,iBAAkB,oBAClB,cAAe,iBACf,oBAAqB,uBACrB,gBAAiB,mBACjB,qBAAsB,wBACvB,CAKY,EAAS,EAGT,EAAW,CACtB,MAAO,QACP,aAAc,eACd,YAAa,cACb,QAAS,UACT,KAAM,OACN,MAAO,QACP,OAAQ,SACR,MAAO,QACP,KAAM,OACN,KAAM,OACN,YAAa,eACb,SAAU,WACV,QAAS,UACT,YAAa,eACb,QAAS,UACV,CAGY,EAAO"}

package/dist/policy/engine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.d.ts","names":[],"sources":["../../src/policy/engine.ts"],"sourcesContent":[],"mappings":";;;;UAaiB,mBAAA;;EAAA,MAAA,EAAA,MAAA;EAMA,UAAA,CAAA,EAAA,MAAc;AAM/B;AAOiB,UAbA,cAAA,CAae;EACrB,KAAA,CAAA,EAAA,MAAA,EAAA;EACC,UAAA,CAAA,EAbG,MAaH,CAAA,MAAA,EAAA,OAAA,CAAA;EACA,aAAA,CAAA,EAbM,mBAaN,EAAA;;AAES,UAZJ,eAAA,CAYI;EAWR,IAAA,EAAA,MAAA;EAC4B,EAAA,CAAA,EAAA,MAAA;EAEzB,MAAA,CAAA,EAAA,MAAA,EAAA;EAAkB,UAAA,CAAA,EAtBnB,MAsBmB,CAAA,MAAA,EAAA,OAAA,CAAA;;UAnBjB,eAAA;WACN;YACC;YACA;;YAEA;;;;cAWC,YAAA;;wBAC4B;gBAEzB,kBAAkB"}