@openengio/cli 0.27.1 → 0.36.0

package/bin/public/openeng.js

@@ -51,9 +51,24 @@ var IMPORT_FAILURE_TEXT = Object.freeze({
   "mirror-row-unreadable": "a row the connector wrote in the mirror project has lost a value the connector stamps on it (its upstream identifier, upstream document identifier or upstream status); a person who writes the mirror project restores it or deletes the row, and the next run creates it again"
 });
 
-// packages/api-contract/dist/query-parser.js
+// packages/api-contract/dist/description-parsing.js
 var LINK_DIRECTIONS = Object.freeze(["outgoing", "incoming", "to-children", "to-parent"]);
-var AGGREGATE_OPERATIONS = Object.freeze(["count", "min", "max", "sum"]);
+
+// packages/api-contract/dist/query-parser.js
+var SET_OPERATORS = Object.freeze(["union", "intersection", "difference"]);
+var AGGREGATE_OPERATIONS = Object.freeze(["count", "min", "max", "sum", "average"]);
+
+// packages/api-contract/dist/entry-form.js
+function verbEntry(type) {
+  const subjects = type.allowedSubjectTypes;
+  return { ...type, allowedSubjectTypes: subjects.kind === "none" ? "none" : subjects.types };
+}
+function entryTypeOf(type) {
+  return type.typeCategory === "verb" ? verbEntry(type) : type;
+}
+function entryChangesOf(changes) {
+  return Object.freeze(Object.fromEntries(Object.entries(changes).map(([key, type]) => [key, entryTypeOf(type)])));
+}
 
 // packages/api-contract/dist/refusal-catalogue.js
 function entry(meaning, ...next) {
@@ -64,6 +79,20 @@ var FIX_REQUEST = { option: "Correct the request and send it again." };
 var ASK_ADMINISTRATOR = { option: "Ask an administrator of the organisation to make the change or to grant the permission." };
 var SIGN_IN_AGAIN = { option: "Sign in again." };
 var RULE_ENTRIES = {
+  "upstream-changed": entry("The upstream content changed since the link was reviewed; no link was cleared.", {
+    option: "Read the link status, review the upstream content and clear against its new version.",
+    read: "readLinkStatus"
+  }),
+  "upstream-not-readable": entry("The upstream object or an object in its review chain cannot be read; no link was cleared.", { option: "Ask for read access to the upstream review chain before clearing the link." }),
+  "too-many-links": entry("The review chain or aggregate exceeds 100 contributing objects or links.", { option: "Reduce the chain or the contributing links before reading or clearing again." }),
+  "unsupported-content": entry("The file's content or name is not an admitted attachment format.", FIX_REQUEST),
+  "too-large": entry("The attachment exceeds the per-file byte limit.", FIX_REQUEST),
+  "not-an-attachment-property": entry("The object's stored type version does not declare this property as an attachment.", FIX_REQUEST),
+  "no-attachment": entry("The property holds no attachment."),
+  "attachment-unavailable": entry("The attachment's stored bytes are unavailable.", { option: "Ask an administrator to restore the attachment." }),
+  "unknown-attachment": entry("The changed attachment has not been staged for you in this project.", FIX_REQUEST),
+  "attachment-precondition": entry("The attachment's media type or byte count differs from its stored metadata.", FIX_REQUEST),
+  "attachment-class-mismatch": entry("The attachment's class is not admitted by this property.", FIX_REQUEST),
   "not-permitted": entry("The operation was refused. What the request names may not exist, or you may not have permission for it; the answer is the same either way.", { option: "Check that the request names something you can reach; if it does, ask an administrator for the permission." }),
   "grant-scope": entry("The application was not given the permission this operation needs; the refusal names that permission.", { option: "Ask the person to connect the application again with the permission the refusal names." }),
   "not-in-this-release": entry("This operation is not available in this release."),
@@ -80,6 +109,7 @@ var RULE_ENTRIES = {
     read: "readChangeSet"
   }),
   "version-conflict": entry("Another change already published a version of a type that this change set also publishes.", { option: "Read the change set and the published types, then revise the change set to the next version.", read: "readChangeSet" }),
+  "owned-type-not-presentation": entry("A connector-owned type permits only presentation changes to a later object or edge version. First versions and verbs are refused; the detail names the requested type key and the refused column.", { option: "Keep the type's data fields unchanged and publish only the permitted presentation changes." }),
   "key-under-another-kind": entry("A type key in the change set is already used by a type of another kind.", { option: "Read the change set, choose a different key and revise it.", read: "readChangeSet" }),
   "namespace-not-active": entry("The organisation's types are not active, so nothing can be published to them.", ASK_ADMINISTRATOR),
   "invalid-configuration": entry("The agent is not set up for this request.", ASK_ADMINISTRATOR),
@@ -89,13 +119,14 @@ var RULE_ENTRIES = {
   "plan-superseded": entry("A newer plan replaced this one.", { option: "Read the agent session.", read: "readAgentSession" }),
   "plan-closed": entry("The plan is closed, so it takes no further change.", { option: "Read the agent session.", read: "readAgentSession" }),
   "plan-not-open": entry("The plan is not open.", { option: "Read the agent session.", read: "readAgentSession" }),
+  "unknown-role": entry("The role key is unknown to this deployment.", { option: "Choose a role key from roleKeys and send the request again." }),
   "above-caller-role": entry("The request would give a role that is higher than your own, or change one.", ASK_ADMINISTRATOR),
   "last-administrator": entry("The change would leave no administrator.", { option: "Name another administrator first." }),
   "erasure-not-permitted": entry("The erasure is not permitted.", ASK_ADMINISTRATOR),
   "no-such-membership": entry("The membership the request names is not one you may change.", FIX_REQUEST),
   "capability-missing": entry("You do not have the permission this operation needs.", ASK_ADMINISTRATOR),
-  "window-out-of-range": entry("A time window in the request is outside the allowed range.", FIX_REQUEST),
-  "max-session-out-of-range": entry("The sign-in length in the request is outside the allowed range.", FIX_REQUEST),
+  "window-out-of-range": entry("The requested session-refresh window must be from 1 through 60,000 milliseconds.", FIX_REQUEST),
+  "max-session-out-of-range": entry("The requested session lifetime must be from 1 through 2,592,000 seconds.", FIX_REQUEST),
   "invalid-email": entry("The email address is not one the platform takes: it must have one @, and no space or non-ASCII character, and be at most 254 characters.", FIX_REQUEST),
   "already-invited": entry("The organisation already has a pending invitation to this address.", { option: "List the pending invitations.", read: "listInvitations" }),
   "no-such-client": entry("The client the request names is not an active client of your organisation.", { option: "List the organisation's clients.", read: "listClients" }),
@@ -108,6 +139,7 @@ var RULE_ENTRIES = {
   "service_identity.revoke": entry("The service account was not revoked: you do not administer it.", ASK_ADMINISTRATOR),
   "duplicate-name": entry("The name is already in use.", { option: "Choose another name." }),
   "unknown-credential": entry("The credential was not accepted.", { option: "Check the credential and send it again, or ask for a new one." }),
+  "token-kind-not-admitted": entry("This operation does not take this kind of token. Its reference lists the kinds of token it takes.", { option: "Use a kind of token this operation takes." }),
   secret: entry("The credential was not accepted.", { option: "Check the credential and send it again, or ask for a new one." }),
   kind: entry("The sign-in was refused for this kind of account.", ASK_ADMINISTRATOR),
   lifecycle: entry("The sign-in was refused because of the state of this account.", ASK_ADMINISTRATOR),
@@ -122,14 +154,15 @@ var RULE_ENTRIES = {
   expiry: entry("The sign-in token has expired.", SIGN_IN_AGAIN),
   algorithm: entry("The sign-in token was not accepted.", SIGN_IN_AGAIN),
   claims: entry("The sign-in token was not accepted.", SIGN_IN_AGAIN),
-  "malformed-query": entry("The query is not one the platform can run.", FIX_REQUEST),
+  "malformed-query": entry("The query is not one the platform can run; the refusal identifies the path of the invalid field.", FIX_REQUEST),
   "view-not-drawable": entry("The published view steps over an edge type that has no parent end, so it places no object under another and cannot be drawn as a tree.", { option: "Ask the type's author to change the view, or to step over an edge type that has a parent end." }),
   "text-search-unavailable": entry("Text search is a filter of kind text, not a search key.", { option: "Send the term as a filter of kind text." }),
   "search-too-wide": entry("The text match names more properties than one query may match.", { option: "Name the object type the match is over." }),
   "invalid-continuation": entry("The paging token is not one the platform issued for this request.", { option: "Start the read again from its first page." }),
   "stale-continuation": entry("The paging token was issued for an earlier state.", { option: "Start the read again from its first page." }),
   "head-moved": entry("The branch changed while the pages were being read.", { option: "Start the read again from its first page." }),
-  "over-bound": entry("The request is larger than the platform allows.", FIX_REQUEST),
+  "cycle-in-reach": entry("A per-path repeat reach returned to an object already in that path's ancestors; the refusal names the readable object.", { option: "Remove the cycle, or use distinct multiplicity, which admits cycles." }),
+  "over-bound": entry("The request exceeds a graph, structure, path, or query limit.", FIX_REQUEST),
   "malformed-history-request": entry("The history request is not one the platform can run.", FIX_REQUEST),
   "protected-ref": entry("This branch is protected, so an agent cannot write to it.", { option: "Write to another branch." }),
   immutable: entry("The record's type is immutable, so it cannot be changed or deleted on any branch.", { option: "Leave the record unchanged." }),
@@ -137,10 +170,11 @@ var RULE_ENTRIES = {
   frozen: entry("The record is locked; it cannot be changed until someone allowed to lock records lifts the lock.", { option: "Ask someone allowed to lock records to lift the lock." }),
   protected: entry("A rule protects this record on this branch, so it changes only by a merge from another branch.", { option: "Make the change on another branch and merge it." }),
   "not-a-ref-head": entry("The commit is not the latest commit of a branch you can use.", { option: "Read the branches you can use and choose one." }),
+  "stale-source": entry("The source commit is not the current commit on the named branch.", { option: "Read a branch you can use and merge its current commit." }),
   "branch-needs-schema-update": entry("This branch's schema is older than the platform's, so it must be updated before it can be written.", { option: "Request a schema update for the branch." }),
   "organisation-not-ready": entry("The organisation's trunk is not ready yet.", { option: "Try again shortly." }),
   "read-only-ref": entry("The branch is read-only, so nothing can be written or merged into it.", { option: "Choose a writable branch." }),
-  "ref-exists": entry("An organisation ref of that name already exists.", { option: "List the organisation's refs.", read: "listOrganisationRefs" }),
+  "ref-exists": entry("An organisation branch or baseline of that name already exists.", { option: "List the organisation's branches and baselines.", read: "listOrganisationRefs" }),
   "concurrent-change": entry("Another write changed the record first, so nothing was applied.", { option: "Try again shortly." }),
   "lock-unavailable": entry("The lock could not be taken now, so nothing was applied.", { option: "Try again shortly." }),
   "organisation-not-active": entry("The organisation is not active.", ASK_ADMINISTRATOR),
@@ -168,8 +202,8 @@ var RULE_ENTRIES = {
   "connector-template-missing": entry("This deployment holds no type template for the connector's system.")
 };
 var KIND_ENTRIES = {
-  unauthenticated: entry("The request carried no sign-in it can use: none, an invalid or expired one, or one of a kind this request does not take.", { option: "Sign in, or use the kind of token this route takes, and send the request again." }),
-  "not-found": entry("What the request names does not exist, or you may not reach it; the answer is the same either way.", { option: "Check the identifiers; list what you may read.", read: "listProjects" }),
+  unauthenticated: entry("The request carried no sign-in it can use: none, or an invalid or expired one.", { option: "Sign in and send the request again." }),
+  "not-found": entry("What the request names does not exist, or you may not reach it; the answer is the same either way.", { option: "Check the identifiers; list what you may read.", read: "listProjects" }, { option: "If the request names a verb, list the verbs available for the object.", read: "discoverVerbs" }),
   "session-moved": entry("Your sign-in is attached to another organisation than the one the token names.", { option: "Sign in again to the organisation your sign-in is attached to." }),
   "not-attached": entry("Your sign-in is attached to no organisation, and this request acts inside one.", { option: "Attach your sign-in to an organisation, then send the request again." }),
   "invalid-request": entry("The request is not in the shape the call takes.", FIX_REQUEST),
@@ -187,13 +221,15 @@ var CLASS_ENTRIES = {
 };
 var API_RULE_ENTRIES = {
   "not-found": KIND_ENTRIES["not-found"],
+  "token-kind-not-admitted": RULE_ENTRIES["token-kind-not-admitted"],
   immutable: RULE_ENTRIES.immutable,
   owned: RULE_ENTRIES.owned,
   frozen: RULE_ENTRIES.frozen,
   protected: RULE_ENTRIES.protected,
   "branch-needs-schema-update": RULE_ENTRIES["branch-needs-schema-update"],
   conflict: entry("A property's current value differs from the 'from' value the request expected; the refusal names each such property and its current value.", { option: "Read the current properties, reconcile the changes and send the update again with the from values you now expect." }),
-  "unknown-type": entry("The requested type is not a current object or edge type in this namespace.", { option: "Read the current types and use an object or edge type they contain.", read: "readCatalogue" }),
+  "unknown-type": entry("The requested type is not a current object or edge type in this namespace.", { option: "Read the current types and use an object or edge type they contain.", read: "readCatalogue" }, { option: "If looking for a verb, list the verbs available for the object.", read: "discoverVerbs" }),
+  "unknown-verb": entry("The object has no verb with that name.", { option: "List the verbs available for the object.", read: "discoverVerbs" }),
   "type-version-precondition": entry("The type version the request expected differs from the type's current version.", { option: "Read the type's current version and send the request with that version." }),
   "invalid-properties": entry("The property document failed validation; the violations name each offending path and rule.", { option: "Correct the properties at the paths the violations name and send the request again." }),
   "blocked-by-edge": entry("The object has a link you may not remove, so nothing was deleted.", { option: "Remove that link first, or ask someone who may to remove it." }),
@@ -239,7 +275,8 @@ var API_REFUSAL_RULES = Object.freeze([
   "cross-organisation-edge",
   "project-not-an-endpoint",
   "self-parent",
-  "descendant-parent"
+  "descendant-parent",
+  "token-kind-not-admitted"
 ]);
 var SHIM_COLLIDING_API_RULES = Object.freeze(["write-refused"]);
 
@@ -267,13 +304,30 @@ var PROTECTION_ROUTE_CAPABILITIES = Object.freeze({
   ]),
   readSchemaUpdateRequest: Object.freeze([Object.freeze({ visibility: "requester-in-token-organisation" })])
 });
-var SIGNED_IN = ["unauthenticated", "invalid-request", "bound-exceeded", "internal"];
+var SIGNED_IN = [
+  "unauthenticated",
+  "token-kind-not-admitted",
+  "invalid-request",
+  "bound-exceeded",
+  "internal"
+];
 var SCOPED = [...SIGNED_IN, "not-found", "not-permitted"];
 var WRITE = [...SCOPED, "in-flight", "unknown-outcome"];
 var REF_READ = [...SCOPED, "organisation-not-ready", "branch-needs-schema-update"];
 var REF_WRITE = [...REF_READ, "in-flight", "unknown-outcome"];
+var ATTACHMENT_SCOPED = [
+  ...SIGNED_IN,
+  "protocol-mismatch",
+  "not-found",
+  "not-attached",
+  "session-moved",
+  "grant-scope"
+];
 var OBJECT_WRITE = [
   ...REF_WRITE,
+  "unknown-attachment",
+  "attachment-precondition",
+  "attachment-class-mismatch",
   "immutable",
   "owned",
   "frozen",
@@ -284,14 +338,15 @@ var OBJECT_WRITE = [
 ];
 var PUBLIC = ["invalid-request", "bound-exceeded", "internal"];
 var CHANGE_SET = [...SIGNED_IN, "not-permitted", "stale-revision", "not-open"];
-var QUERY_PROJECT_SCOPE = 'Without input.projects, it reads every project the caller can read on the selected ref; selector.projectId does not narrow the set. To limit it to one project, include "projects":["<projectId>"] in input.';
+var QUERY_PROJECT_SCOPE = 'Without input.projects, it reads every project the caller can read on the selected branch or baseline; selector.projectId does not narrow the set. To limit it to one project, include "projects":["<projectId>"] in input.';
+var GRAPH_QUERY_PROJECT_SCOPE = 'Without input.start.projects, it reads every project the caller can read on the selected ref; selector.projectId does not narrow the set. To limit it to some projects, include "projects":["<projectId>"] in input.start.';
 function doc(does, refuses) {
   return Object.freeze({ does, refuses: Object.freeze([...refuses]) });
 }
 var ROUTE_DOCS = Object.freeze({
   createObjectSet: doc("Saves a named set of 1 to 200 object addresses in the caller's organisation. Concurrent retries with one key return the same saved set and revision.", [...SCOPED, "head-moved"]),
   listObjectSets: doc("Lists the organisation's saved sets, newest update first, without members or counts.", SIGNED_IN),
-  readObjectSet: doc("Reads a saved set's visible objects on the selected ref, a count of missing visible members and one bit for members outside the caller's scope.", [...SCOPED, "head-moved"]),
+  readObjectSet: doc("Reads a saved set's visible objects on the selected branch or baseline, a count of missing visible members and one bit for members outside the caller's scope.", [...SCOPED, "head-moved"]),
   updateObjectSet: doc("Renames a saved set or replaces its readable members at the expected revision. Members outside the caller's scope remain. A success raises the revision by one.", [...SCOPED, "stale-revision", "head-moved"]),
   deleteObjectSet: doc("Deletes a saved set and every member at the expected revision.", [...SCOPED, "stale-revision"]),
   health: doc("Answers whether the host is running.", PUBLIC),
@@ -312,8 +367,10 @@ var ROUTE_DOCS = Object.freeze({
   decideConsent: doc("Approves or denies a pending authorization request.", SCOPED),
   listConnectedApps: doc("Lists the applications the caller has connected.", SIGNED_IN),
   revokeConnectedApp: doc("Disconnects an application: every grant the caller holds for it stops.", SCOPED),
-  readObject: doc("Reads one object at a ref.", REF_READ),
-  queryObjects: doc(`Runs a filtered, ordered, paged query over the objects of a ref. ${QUERY_PROJECT_SCOPE}`, [
+  stageAttachment: doc("Stages attachment bytes for the selected project and ref without writing an engineering row. Admits user, service, client and run-apply tokens.", [...ATTACHMENT_SCOPED, "unsupported-content", "too-large"]),
+  readAttachment: doc("Downloads the attachment held by an object's property at its stored type version. Admits user, service, client, run-explore and run-apply tokens.", [...ATTACHMENT_SCOPED, "organisation-not-ready", "branch-needs-schema-update", "not-an-attachment-property", "no-attachment", "attachment-unavailable"]),
+  readObject: doc("Reads one object at a branch or baseline.", REF_READ),
+  queryObjects: doc(`Runs a filtered, ordered, paged query over the objects of a branch or baseline, or pages the union, intersection or difference of two plain object-set descriptions on that ref. A top-level type filter {kind:"type",op:"in",values:["part","system"]} selects any of 1 to 100 published type keys and may be combined with a text filter; continuation binds to the entire selection. ${QUERY_PROJECT_SCOPE}`, [
     ...REF_READ,
     "malformed-query",
     "over-bound",
@@ -323,10 +380,11 @@ var ROUTE_DOCS = Object.freeze({
     "stale-continuation",
     "head-moved"
   ]),
-  aggregateObjects: doc(`Runs an aggregate over the objects of a ref: a count, or a minimum, maximum or sum of one numeric property, answered as one value, or, with groupBy, a count or a sum grouped by type or by a property's value, or a count grouped by structural parent, answered as groups. ${QUERY_PROJECT_SCOPE}`, [...REF_READ, "malformed-query", "over-bound", "text-search-unavailable", "search-too-wide"]),
+  queryRows: doc("Answers rows of named cells over a start set and up to three hops, or groups with counts, sums, minimums, maximums and weighted sums. Each hop names edgeTypeKeys as any or 1 through 8 names; optional targetTypeKeys also takes 1 through 8 names. Empty lists are malformed-query; more than 8 names is over-bound. A final hop may repeat to depth 1 through 3, without filters or targetTypeKeys, and answers groups only; a depth above 3 is over-bound, while 0, non-integers and non-numbers are malformed-query. A parent group key may name a repeat alias and uses its own edgeTypeKeys and optional parents filter. Each parent edge contributes a membership; a child with no matching parent forms no group. Parent keys carry address and readable, including readable: false for unreadable parents; hidden reached objects are counted per level including project, never keyed. After a successful walk, parent reads batch 100 children, at most 60 statements per key or 120 for two keys; an overflowing walk runs none. A weighted sum requires a final repeat hop and names 1 through 8 contributing types in over, an edge weight property and per-path or distinct multiplicity; the start never contributes. On an ancestor return, count and per-path sum or weightedSum refuse cycle-in-reach naming the readable object; distinct measures, min and max admit cycles. Repeat answers carry deeper, unvalued and unweighted; missing values and weights are counted separately. Every measure over a path names ends: visible or all. With any all measure, hidden counts appear per hop, on each group when every key names start, and on the answer otherwise; values still measure readable objects. Hidden counts deduplicate far identities including project per hop. countDistinct cannot be combined with sum, min or max. A property group key cannot mix numeric and nonnumeric declarations across its alias types. Distinct-count answers ordered by a measure or filtered by having, and hidden start-group merges, require complete reads: truncation refuses over-bound instead of returning a bounded prefix. " + GRAPH_QUERY_PROJECT_SCOPE, [...REF_READ, "malformed-query", "over-bound", "search-too-wide", "invalid-continuation", "stale-continuation", "head-moved", "cycle-in-reach"]),
+  aggregateObjects: doc(`Deprecated: use queryRows for graph aggregates. Runs an aggregate over the objects of a branch or baseline: a count, or a minimum, maximum, sum or average of one numeric property, answered as one value (an average also carries its count), or, with groupBy, a count, sum or average grouped by type or by a property's value, or a count grouped by structural parent, answered as groups. ${QUERY_PROJECT_SCOPE}`, [...REF_READ, "malformed-query", "over-bound", "text-search-unavailable", "search-too-wide"]),
   discoverVerbs: doc("Lists the verbs an object may be given.", REF_READ),
   readHistory: doc("Reads one object's history of changes.", [...REF_READ, "invalid-continuation", "stale-continuation", "malformed-history-request"]),
-  mutate: doc('Creates, changes or deletes an object on the selected ref. A protected refusal means the change needs a branch and a merge. For a property update, `from` is the value the caller expects now; a mismatch is refused as `conflict`, and `{"absent": true}` clears the property.', [...OBJECT_WRITE, "plan-closed"]),
+  mutate: doc('Creates, changes or deletes an object on the selected writable branch. A protected refusal means the change needs a branch and a merge. For a property update, `from` is the value the caller expects now; a mismatch is refused as `conflict`, and `{"absent": true}` clears the property.', [...OBJECT_WRITE, "plan-closed"]),
   mutateBatch: doc('Applies a list of object and edge operations to a branch in one save, one commit and one audit record, or none of them: a refused operation refuses the whole batch and writes nothing. An edge may name an object created earlier in the same batch. A batch with more operations than the maximum is refused as invalid-request naming input.operations, before any write. For a property update, `from` is the value the caller expects now; a mismatch is refused as `conflict`, and `{"absent": true}` clears the property.', [...OBJECT_WRITE, "plan-closed"]),
   createConnection: doc("Creates a connection to an external source system for the signed-in person: its mirror project and its service identity. The connection commits whether or not its types could be drafted, and the answer says which.", [...SIGNED_IN, "not-permitted", "organisation-not-active", "connection-exists"]),
   listConnections: doc("Lists the connections whose mirror project the caller reads, each with its last run and whether the caller may start a run.", SIGNED_IN),
@@ -337,10 +395,25 @@ var ROUTE_DOCS = Object.freeze({
   startImportRun: doc("Starts a run that imports the connection's source into its mirror project, and answers the run once its row has committed.", [...SCOPED, "import-running", "connection-revoked", "types-not-approved"]),
   listImportRuns: doc("Lists the runs of a connection, newest first, or the one run named.", SCOPED),
   closeImportRun: doc("Ends a running run: the connection's service identity as succeeded or failed, or the person who started it as failed.", [...SCOPED, "run-not-running"]),
+  createHostedApp: doc("Creates a hosted app in a project under a key the project has not used.", [...WRITE]),
+  publishHostedVersion: doc("Publishes the request body, at most 4 MiB, as the next version of the hosted app the name header keys.", [...WRITE]),
+  readHostedBundle: doc("Reads the bundle of the caller's own open launch record.", [...SCOPED]),
+  listHostedApps: doc("Lists the hosted apps of a project the caller reads.", [...SCOPED]),
+  listHostedVersions: doc("Lists the versions of a hosted app, newest first.", [...SCOPED]),
+  revokeHostedApp: doc("Revokes a hosted app, which ends every launch of it at the next call.", [...WRITE]),
+  revokeHostedVersion: doc("Revokes one version of a hosted app.", [...WRITE]),
+  openHostedApp: doc("Opens the newest live version of the app keyed by appKey in the selected project, derives its runtime and records the caller's launch.", [...WRITE]),
+  endHostedLaunch: doc("Ends the caller's own open launch record.", [...WRITE]),
+  mintHostedAppToken: doc("Mints the short-lived token a hosted app presents, from a user token and the caller's own open launch record.", [...SCOPED]),
+  setHostedOneWallSwitch: doc("Turns the organisation's one-wall switch on or off. Turning it off withdraws every one-wall permission.", [...WRITE]),
+  readHostedOneWallSwitch: doc("Reads the organisation's one-wall switch.", [...SCOPED]),
+  grantHostedOneWall: doc("Grants one app the one-wall permission while the organisation's switch is on.", [...WRITE]),
+  withdrawHostedOneWall: doc("Withdraws one app's one-wall permission.", [...WRITE]),
+  listHostedOneWallGrants: doc("Lists the organisation's one-wall permissions.", [...SCOPED]),
   previewDelete: doc("Previews deleting an object: the links the delete would remove, or the refusal it would meet. Changes nothing.", [...OBJECT_WRITE, "plan-closed"]),
   recover: doc("Finds what an interrupted mutation did and finishes its record.", REF_READ),
   executeVerb: doc("Runs a verb on an object and records its result.", [...OBJECT_WRITE, "plan-closed"]),
-  createBranch: doc("Creates a branch from a ref or an admitted current ref head.", [
+  createBranch: doc("Creates a project branch from a branch, a baseline or an admitted current head.", [
     ...REF_WRITE,
     "plan-closed",
     "ref-exists",
@@ -349,15 +422,11 @@ var ROUTE_DOCS = Object.freeze({
     "lock-unavailable",
     "not-a-ref-head"
   ]),
-  merge: doc("Merges a reviewed head of a project branch or an organisation-ref source into main, or into the ref the optional target names.", [...REF_WRITE, "read-only-ref", "concurrent-change", "lock-unavailable", "not-a-ref-head"]),
-  readMergeConflicts: doc("Reads the conflicts a merge refused on.", REF_READ),
-  disposeRef: doc("Disposes a branch that is no longer wanted.", [
-    ...WRITE,
-    "concurrent-change",
-    "lock-unavailable"
-  ]),
+  merge: doc("Merges a reviewed head of a project branch or an organisation branch or baseline source into main, or into the writable branch the optional target names; absent target means main. For a proposal, send its reviewedHash as sourceHash. A successful merge into main completes every pending proposal in the project that reviewed that hash. Optional name is checked against the source branch's bound head and is refused stale-source when it differs.", [...REF_WRITE, "read-only-ref", "concurrent-change", "lock-unavailable", "not-a-ref-head", "stale-source"]),
+  readMergeConflicts: doc("Reads conflicts for the source branch named in input.name, always comparing it with main. For each field, base is the common value before either side changed it, ours is main, and theirs is the source branch. If the merge targeted another branch, this read still compares with main and does not report that merge's conflicts.", REF_READ),
+  disposeRef: doc("Disposes a branch that is no longer wanted: a writer of the branch when no proposal on it is pending, otherwise a merger of the project.", [...WRITE, "concurrent-change", "lock-unavailable"]),
   listProjects: doc("Lists every project the caller may read in the organisation the session is attached to, with its namespace.", SIGNED_IN),
-  listRefs: doc("Lists the refs of a project, each with its head: readable with a hash, withheld when the caller may not read the ref, or unread past the first 50 refs.", [...SCOPED, "organisation-not-ready"]),
+  listRefs: doc("Lists the branches of a project, each with its head: readable with a hash, withheld when the caller may not read the branch, or unread past the first 50 branches. Each row also carries a schema state as a convenience hint; the branch-needs-schema-update refusal on use remains the guard.", [...SCOPED, "organisation-not-ready"]),
   readCatalogue: doc("Reads the published catalogue of a project's namespace.", SCOPED),
   readPendingProposal: doc("Reads the proposal waiting for review on a branch, if any.", SCOPED),
   submitProposal: doc("Submits a branch for review.", [...REF_READ, "proposal-open", "no-commits"]),
@@ -365,23 +434,34 @@ var ROUTE_DOCS = Object.freeze({
   revokeServiceIdentity: doc("Revokes a service identity.", [...SIGNED_IN, "not-permitted", "service_identity.revoke"]),
   issueServiceCredential: doc("Issues a credential for a service identity.", [...SIGNED_IN, "not-permitted", "capability-missing"]),
   revokeServiceCredential: doc("Revokes a service identity's credential.", [...SIGNED_IN, "not-permitted", "capability-missing"]),
-  grantMembership: doc("Grants a principal a role in a scope.", [...SIGNED_IN, "not-permitted", "above-caller-role", "membership-exists", "no-such-principal"]),
+  grantMembership: doc("Grants a principal a role in a scope. An unknown role answers unknown-role with the deployment's roleKeys.", [...SIGNED_IN, "not-permitted", "above-caller-role", "unknown-role", "membership-exists", "no-such-principal"]),
   revokeMembership: doc("Revokes a principal's membership of a scope; at organisation scope, also revokes their memberships in its projects.", [...SIGNED_IN, "not-permitted", "last-administrator", "no-such-membership", "erasure-not-permitted"]),
   setModelConfiguration: doc("Sets the model configuration an organisation's agents use.", [...SIGNED_IN, "not-permitted", "capability-missing", "window-out-of-range", "max-session-out-of-range"]),
+  setModelId: doc("Changes the model an organisation's agents use, keeping the key it holds, for a caller who administers agents.", [...SIGNED_IN, "not-permitted", "model-not-configured"]),
+  readModelConfigurationStatus: doc("Reads whether the caller's organisation has a model configured, and its provider, model and the time it was set, for a caller who administers agents. The key is never answered.", [...SIGNED_IN, "not-permitted"]),
+  readAccount: doc("Reads the caller's own principal identifier, display name and registered email.", SIGNED_IN),
   readDisplayNames: doc("Reads the display names of principals the caller may see.", SIGNED_IN),
   listMembers: doc("Lists the members of a project.", SCOPED),
-  changeMembershipRole: doc("Changes a principal's role in a scope.", [...SIGNED_IN, "not-permitted", "above-caller-role", "last-administrator", "no-such-membership"]),
+  changeMembershipRole: doc("Changes a principal's role in a scope.", [...SIGNED_IN, "not-permitted", "above-caller-role", "unknown-role", "last-administrator", "no-such-membership"]),
   listOrganisationMembers: doc("Lists the memberships of the caller's organisation and of the projects of it the caller may read.", SCOPED),
   searchPeople: doc("Finds the people of the caller's organisation whose name has a word starting with the query.", [...SIGNED_IN, "invalid-query"]),
-  searchObjectReaders: doc("Finds the people who can read an object on a ref, by a name prefix.", [...REF_READ, "invalid-query", "invalid-ref"]),
+  searchObjectReaders: doc("Finds the people who can read an object on a branch or baseline, by a name prefix.", [...REF_READ, "invalid-query", "invalid-ref"]),
   listSubscribers: doc("Lists the subscriptions on an object.", REF_READ),
   addSubscriber: doc("Adds a person to an object's subscriptions as owner, approver or watcher, when the type's `subscriptionRoles` admits that role. The declaration may set maxima; owner is limited to one. With no declaration, only watchers are admitted.", [...REF_READ, "limit-reached", "role-not-admitted", "unknown-person", "not-permitted", "invalid-ref"]),
   removeSubscriber: doc("Removes a person's subscription to an object in a role.", [...REF_READ, "subscription-absent", "not-permitted", "invalid-ref"]),
   listComments: doc("Lists the comments on an object, oldest first, a page at a time.", [...REF_READ, "invalid-query"]),
   addComment: doc("Adds a comment to an object, naming the people it mentions.", [...REF_WRITE, "invalid-body", "invalid-mention", "unknown-person", "invalid-ref"]),
   listServiceIdentities: doc("Lists the service identities of the caller's organisation, for a caller who administers them.", SCOPED),
-  createInvitation: doc("Invites an email address to the caller's organisation in a role, for a caller who administers its members.", [...SIGNED_IN, "capability-missing", "above-caller-role", "invalid-email", "already-invited", "domain-not-allowed"]),
-  listInvitations: doc("Lists the pending invitations of the caller's organisation, for a caller who administers its members.", [...SIGNED_IN, "capability-missing"]),
+  createInvitation: doc("Invites an address in an organisation role with up to 50 optional projectRoles, each a projectId and roleKey. Every project must belong to the invitation's organisation. The caller must administer members there and on each project. An unknown role answers unknown-role with the deployment's roleKeys; a known role above the caller's answers above-caller-role.", [
+    ...SIGNED_IN,
+    "capability-missing",
+    "above-caller-role",
+    "unknown-role",
+    "invalid-email",
+    "already-invited",
+    "domain-not-allowed"
+  ]),
+  listInvitations: doc("Lists pending invitations of the caller's organisation, including each invitation's projectRoles, for a caller who administers its members.", [...SIGNED_IN, "capability-missing"]),
   revokeInvitation: doc("Revokes a pending invitation of the caller's organisation, for a caller who administers its members.", [...SIGNED_IN, "capability-missing", "no-such-invitation", "invitation-not-pending"]),
   readInvitationDomainRule: doc("Reads the domains the caller's organisation invites from, for an owner.", [...SIGNED_IN, "capability-missing"]),
   setInvitationDomainRule: doc("Replaces the domains the caller's organisation invites from, for an owner.", [...SIGNED_IN, "capability-missing", "invalid-domain"]),
@@ -392,8 +472,8 @@ var ROUTE_DOCS = Object.freeze({
   reissuePlatformInvitation: doc("Replaces the code and the expiry of a pending platform invitation and answers the new link, for a platform administrator.", [...SIGNED_IN, "capability-missing", "no-such-invitation", "invitation-not-pending"]),
   readWebOrigin: doc("Reads the origin of the deployment's web application, or null when the host is given none.", SIGNED_IN),
   readCallerCapabilities: doc("Lists the capabilities the caller holds in the token's organisation and its projects, and the platform capability for a platform administrator.", [...SIGNED_IN]),
-  queryGraph: doc(`Walks the edges from a start of addresses or an object set, and answers the objects reached with every hop among them. One start address with one hop step of depth 1 answers that object's connections, with a marker for each kind of connection whose far object the caller cannot read, and pages with a continuation. For an object-set start, omitting input.start.set.projects reads every project the caller can read on the selected ref; selector.projectId does not narrow the start set. To limit it to one project, include "projects":["<projectId>"] in input.start.set.`, [...REF_READ, "malformed-query", "over-bound", "text-search-unavailable", "search-too-wide", "invalid-continuation", "stale-continuation", "head-moved"]),
-  readStructure: doc("Reads the structure of a type's objects as a tree: every root, one object's subtree or one object's ancestors, each placement an occurrence. A chosen relationship or one-step view places the type itself, and the types above it follow their own declared relationships.", [
+  queryGraph: doc(`Walks the edges from a start of addresses or an object set, and answers the objects reached with every hop among them. Example: one start address and one hop step of depth 1 reads that object's connections, with a marker for each kind of connection whose far object the caller cannot read. A start takes at most 200 addresses or set members; a walk takes at most 3 steps and 3 total levels. An explicit edgeTypeKeys list holds at most 8 edge types per step; when edgeTypeKeys is absent, the step traverses every edge type. objectLimit is at most 200 and hopLimit at most 400. A continuation reads the next page in the one-object form. For an object-set start, omitting input.start.set.projects reads every project the caller can read on the selected branch or baseline; selector.projectId does not narrow the set. To limit it to one project, include "projects":["<projectId>"] in input.start.set.`, [...REF_READ, "malformed-query", "over-bound", "text-search-unavailable", "search-too-wide", "invalid-continuation", "stale-continuation", "head-moved"]),
+  readStructure: doc("Reads the structure of a type's objects as a tree: every root, one object's subtree or one object's ancestors, each placement an occurrence. Example: a forest anchor with maxDepth 1 reads its roots and their children. maxDepth is at most 32 and occurrenceLimit at most 2000. The answer reports whether it is complete or bounded, and a bounded answer says whether the limit was occurrences, depth or level rows; the route does not page. Narrow the walk with maxDepth and occurrenceLimit. A chosen relationship or one-step view places the type itself, and the types above it follow their own declared relationships.", [
     ...REF_READ,
     "malformed-query",
     "view-not-drawable",
@@ -404,31 +484,35 @@ var ROUTE_DOCS = Object.freeze({
   listProposals: doc("Lists the proposals of a project.", SCOPED),
   readProposal: doc("Reads one proposal.", SCOPED),
   refuseProposal: doc("Refuses a proposal and returns its branch to its author.", [...SCOPED, "proposal-not-pending"]),
-  readBranchDiff: doc("Reads what a proposal's branch changes against its target.", REF_READ),
-  diffBranches: doc("Reads what one ref changes against another.", REF_READ),
+  readBranchDiff: doc("Reads the objects and edges a proposal's branch changes against its target.", REF_READ),
+  readLinkStatus: doc("Reads an object's tracked links at a stable head: review (cleared, suspect, unreviewed, not-visible or too-many-links), clearing attribution, link bounds and aggregate bounds with units and coverage. Only a readable upstream supplies its opaque upstreamVersion, the precondition for clearing.", [...REF_READ, "head-moved"]),
+  clearLinks: doc("Clears 1 to 100 links atomically on the named ref. Send each linkId with the upstreamVersion from readLinkStatus as a precondition; upstream-changed requires a fresh read and review. Records the clearer and time without changing bounds. Admits user, run-apply, client and service; run-explore and run-types are refused at admission. An unknown outcome must be recovered by correlation before retrying.", [...OBJECT_WRITE, "upstream-changed", "upstream-not-readable", "too-many-links"]),
+  readChangeImpact: doc("Reads review, link bounds and aggregate bounds state changes against the branch's merge base, plus downstream reach to depth three and hidden counts. Both ref and base are required. Includes added and removed states and pins both heads; over-bound and head-moved refuse the entire read without a partial answer.", [...REF_READ, "over-bound", "head-moved"]),
+  diffBranches: doc("Reads the objects and edges one branch or baseline changes against another.", REF_READ),
   readBranchHistory: doc("Reads a branch's history of commits.", [...SCOPED, "invalid-continuation", "stale-continuation", "malformed-history-request"]),
   listAudit: doc("Lists the audit records of a project.", [...SCOPED, "invalid-continuation"]),
-  readRefHead: doc("Reads the head of a ref.", REF_READ),
+  listOrganisationAudit: doc("Lists the organisation-level actions the caller may read.", [...SCOPED, "invalid-continuation"]),
+  readRefHead: doc("Reads the head of a branch or baseline.", REF_READ),
   inspectBranchOperation: doc("Reads the state of a branch operation the caller started.", SCOPED),
   abandonBranch: doc("Refuses branch abandonment because this operation is not available in this release.", [
     ...WRITE,
     "not-in-this-release"
   ]),
-  addRefRule: doc("Adds a ref protection rule to the selected project and answers the full rule. Repeating the same pattern and consequence returns the existing rule, ignoring pattern letter case. Consequences are merge-only and locked-rows-only; an invalid pattern or consequence answers invalid-request naming that field.", SCOPED),
-  listRefRules: doc("Lists only the selected project's visible ref protection rules, including each rule's identifier, pattern and consequence.", SCOPED),
+  addRefRule: doc("Adds a branch protection rule to the selected project and answers the full rule. Repeating the same pattern and consequence returns the existing rule, ignoring pattern letter case. Consequences are merge-only and locked-rows-only; an invalid pattern or consequence answers invalid-request naming that field.", SCOPED),
+  listRefRules: doc("Lists only the selected project's visible branch protection rules, including each rule's identifier, pattern and consequence.", SCOPED),
   removeRefRule: doc("Removes a rule by identifier from the selected project and answers its ruleId. An absent or unreadable identifier, or one belonging to another project, answers not-found.", SCOPED),
-  addOrganisationRule: doc("Adds a ref protection rule in the attached organisation and answers the full rule. Repeating the same pattern and consequence returns the existing rule, ignoring pattern letter case. An invalid pattern or consequence answers invalid-request naming that field.", SCOPED),
-  listOrganisationRules: doc("Lists the attached organisation's visible ref rules, including identifier, pattern and consequence.", SCOPED),
+  addOrganisationRule: doc("Adds a branch protection rule in the attached organisation and answers the full rule. Repeating the same pattern and consequence returns the existing rule, ignoring pattern letter case. An invalid pattern or consequence answers invalid-request naming that field.", SCOPED),
+  listOrganisationRules: doc("Lists the attached organisation's visible branch rules, including identifier, pattern and consequence.", SCOPED),
   removeOrganisationRule: doc("Removes a rule by identifier from the attached organisation and answers its ruleId. An absent, unreadable or project-rule identifier answers not-found.", SCOPED),
-  createOrganisationRef: doc("Creates a ref at the organisation's trunk head and answers its name, readOnly and creation attribution. The optional readOnly flag defaults to false; the name is one non-reserved ref segment.", [...WRITE, "ref-exists", "read-only-ref", "organisation-not-ready"]),
-  listOrganisationRefs: doc("Lists visible refs in the attached organisation, including each name, readOnly and creation attribution.", SCOPED),
-  deleteOrganisationRef: doc("Deletes a writable ref from the attached organisation and answers its name. A read-only ref cannot be deleted.", [...REF_WRITE, "read-only-ref"]),
-  markOrganisationRefReadOnly: doc("Marks a ref in the attached organisation read-only and answers the full ref. An absent or unreadable name answers not-found.", SCOPED),
-  setObjectLock: doc("Sets an object's lock on the selected project ref to none, merge-only or frozen and answers objectId and lock. The lock also applies to its existing structural child edges in that project; none lifts the lock. New children on a live ref are not thereby frozen. Use a read-only organisation ref for a fixed baseline. An unknown lock answers invalid-request at lock.", [...REF_WRITE, "read-only-ref", "concurrent-change", "lock-unavailable"]),
+  createOrganisationRef: doc("Creates a branch or baseline at the organisation's trunk head and answers its name, readOnly and creation attribution. The optional readOnly flag defaults to false; the name is one non-reserved name segment.", [...WRITE, "ref-exists", "read-only-ref", "organisation-not-ready"]),
+  listOrganisationRefs: doc("Lists visible branches and baselines in the attached organisation, including each name, readOnly and creation attribution.", SCOPED),
+  deleteOrganisationRef: doc("Deletes a writable branch from the attached organisation and answers its name. A baseline cannot be deleted.", [...REF_WRITE, "read-only-ref"]),
+  markOrganisationRefReadOnly: doc("Marks an organisation branch read-only as a baseline and answers its full record. An absent or unreadable name answers not-found.", SCOPED),
+  setObjectLock: doc("Sets an object's lock on the selected project branch to none, merge-only or frozen and answers objectId and lock. The lock also applies to its existing structural child edges in that project; none lifts the lock. New children on a writable branch are not thereby frozen. Use a baseline for a fixed snapshot. An unknown lock answers invalid-request at lock.", [...REF_WRITE, "read-only-ref", "concurrent-change", "lock-unavailable"]),
   readAgentCeiling: doc("Reads the selected project's maximum agent role as { ceiling }: contributor or maintainer. An absent or unreadable project answers not-found.", SCOPED),
   setAgentCeiling: doc("Sets the selected project's maximum agent role to contributor or maintainer and answers { ceiling }. An unknown role answers invalid-request at ceiling.", SCOPED),
-  requestSchemaUpdate: doc("Records a schema update request for a project branch or organisation ref and answers its state and attribution. Execution is separate. A branch whose name contains a slash cannot request a schema update today. The trunk main answers invalid-request at ref; an unreachable ref answers not-found.", SCOPED),
-  readSchemaUpdateRequest: doc("Reads the caller's latest schema update request for the ref in the token's organisation, or null. Project read access is not required. A branch whose name contains a slash cannot read its request today. The trunk main answers invalid-request at ref.", SCOPED),
+  requestSchemaUpdate: doc("Records a schema update request for a project branch or organisation branch or baseline and answers its state and attribution. Execution is separate. A branch whose name contains a slash cannot request a schema update today. The trunk main answers invalid-request at `ref`; an unreachable branch or baseline answers not-found.", SCOPED),
+  readSchemaUpdateRequest: doc("Reads the caller's latest schema update request for the branch or baseline in the token's organisation, or null. Project read access is not required. A branch whose name contains a slash cannot read its request today. The trunk main answers invalid-request at `ref`.", SCOPED),
   openAgentSession: doc("Opens an agent session on a project.", [...SCOPED, "invalid-configuration"]),
   listAgentSessions: doc("Lists the caller's agent sessions on a project.", SCOPED),
   readAgentSession: doc("Reads one agent session and its runs.", SCOPED),
@@ -454,6 +538,7 @@ var ROUTE_DOCS = Object.freeze({
     "invalid-catalogue",
     "version-conflict",
     "key-under-another-kind",
+    "owned-type-not-presentation",
     "namespace-not-active"
   ]),
   readApp: doc("Reads a published version of an app, the latest where none is named, with the app's history of versions.", [...SIGNED_IN, "not-found"]),
@@ -476,6 +561,30 @@ function deepFreeze(value) {
   }
   return value;
 }
+var BINARY_REQUESTS = {
+  stageAttachment: {
+    "contentType": "application/octet-stream",
+    "selectorHeader": "x-oe2-selector",
+    "selectorEncoding": "json",
+    "nameHeader": "x-oe2-attachment-name",
+    "nameEncoding": "rfc8187"
+  },
+  publishHostedVersion: {
+    "contentType": "application/octet-stream",
+    "selectorHeader": "x-oe2-selector",
+    "selectorEncoding": "json",
+    "nameHeader": "x-oe2-attachment-name",
+    "nameEncoding": "rfc8187"
+  }
+};
+var BINARY_REQUEST_INPUTS = deepFreeze(BINARY_REQUESTS);
+var BINARY_RESPONSES = {
+  readAttachment: {
+    "contentType": "attachment",
+    "headers": "attachmentResponseHeaders"
+  }
+};
+var BINARY_RESPONSE_OUTPUTS = deepFreeze(BINARY_RESPONSES);
 var SCHEMAS = {
   createObjectSet: { "type": "object", "properties": { "name": { "type": "string" }, "members": { "type": "array", "items": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } } }, "required": ["name", "members"], "additionalProperties": false },
   listObjectSets: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
@@ -500,9 +609,26 @@ var SCHEMAS = {
   decideConsent: { "oneOf": [{ "type": "object", "properties": { "interactionId": { "type": "string" }, "decision": { "const": "approve" }, "approvedScopes": { "type": "array", "items": { "enum": ["objects.read", "objects.write", "branches.read", "branches.write", "branches.manage", "offline_access"] } } }, "required": ["interactionId", "decision", "approvedScopes"], "additionalProperties": false }, { "type": "object", "properties": { "interactionId": { "type": "string" }, "decision": { "const": "deny" } }, "required": ["interactionId", "decision"], "additionalProperties": false }] },
   listConnectedApps: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   revokeConnectedApp: { "type": "object", "properties": { "clientId": { "type": "string" } }, "required": ["clientId"], "additionalProperties": false },
+  readAttachment: {
+    "type": "object",
+    "properties": {
+      "objectId": {
+        "type": "string"
+      },
+      "property": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "objectId",
+      "property"
+    ],
+    "additionalProperties": false
+  },
   readObject: { "type": "object", "properties": { "objectId": { "type": "string" } }, "required": ["objectId"], "additionalProperties": false },
-  queryObjects: { "type": "object", "properties": { "kind": { "const": "objects" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] }, "limit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "typeKey", "limit", "continuation"], "additionalProperties": false },
-  aggregateObjects: { "type": "object", "properties": { "kind": { "const": "aggregate" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "operation": { "enum": ["count", "min", "max", "sum"] }, "property": { "type": "string" }, "groupBy": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "type" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" } }, "required": ["kind", "property"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "parent" }, "edgeTypeKeys": { "type": "array", "items": { "type": "string" } }, "multiplicity": { "enum": ["per-path", "distinct"] }, "ends": { "enum": ["visible", "all"] }, "parents": { "type": "array", "items": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } } }, "required": ["kind", "edgeTypeKeys", "multiplicity", "ends"], "additionalProperties": false }] } }, "required": ["kind", "typeKey", "operation"], "additionalProperties": false },
+  queryObjects: { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "objects" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] }, "limit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "typeKey", "limit", "continuation"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "set" }, "op": { "enum": ["union", "intersection", "difference"] }, "left": { "type": "object", "properties": { "kind": { "const": "objects" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] } }, "required": ["kind", "typeKey"], "additionalProperties": false }, "right": { "type": "object", "properties": { "kind": { "const": "objects" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] } }, "required": ["kind", "typeKey"], "additionalProperties": false }, "limit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "op", "left", "right", "limit", "continuation"], "additionalProperties": false }] },
+  queryRows: { "type": "object", "properties": { "kind": { "const": "graph-query" }, "start": { "type": "object", "properties": { "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } } }, "required": ["typeKey"], "additionalProperties": false }, "path": { "type": "array", "items": { "type": "object", "properties": { "alias": { "type": "string" }, "edgeTypeKeys": { "oneOf": [{ "const": "any" }, { "type": "array", "items": { "type": "string" } }] }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKeys": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } }, "repeat": { "type": "object", "properties": { "depth": { "type": "number" } }, "required": ["depth"], "additionalProperties": false } }, "required": ["alias", "edgeTypeKeys", "direction"], "additionalProperties": false } }, "answer": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "rows" }, "columns": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "enum": ["identity", "typeKey"] }, "alias": { "type": "string" } }, "required": ["kind", "alias"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "alias": { "type": "string" }, "property": { "type": "string" } }, "required": ["kind", "alias", "property"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "alias": { "type": "string" }, "field": { "enum": ["identity", "typeKey"] } }, "required": ["kind", "alias", "field"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge-property" }, "alias": { "type": "string" }, "property": { "type": "string" } }, "required": ["kind", "alias", "property"], "additionalProperties": false }] } }, "order": { "type": "object", "properties": { "alias": { "type": "string" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["alias", "property", "direction"], "additionalProperties": false }, "limit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "columns", "limit", "continuation"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "groups" }, "keys": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "enum": ["identity", "typeKey"] }, "alias": { "type": "string" } }, "required": ["kind", "alias"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "alias": { "type": "string" }, "property": { "type": "string" } }, "required": ["kind", "alias", "property"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "parent" }, "alias": { "type": "string" }, "edgeTypeKeys": { "type": "array", "items": { "type": "string" } }, "parents": { "type": "array", "items": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } } }, "required": ["kind", "alias", "edgeTypeKeys"], "additionalProperties": false }] } }, "measures": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "count" }, "over": { "type": "array", "items": { "type": "string" } }, "ends": { "enum": ["visible", "all"] } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "countDistinct" }, "alias": { "type": "string" }, "over": { "type": "array", "items": { "type": "string" } }, "ends": { "enum": ["visible", "all"] } }, "required": ["kind", "alias"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "sum" }, "alias": { "type": "string" }, "property": { "type": "string" }, "over": { "type": "array", "items": { "type": "string" } }, "multiplicity": { "enum": ["per-path", "distinct"] }, "ends": { "enum": ["visible", "all"] } }, "required": ["kind", "alias", "property"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "enum": ["min", "max"] }, "alias": { "type": "string" }, "property": { "type": "string" }, "over": { "type": "array", "items": { "type": "string" } }, "ends": { "enum": ["visible", "all"] } }, "required": ["kind", "alias", "property"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "weightedSum" }, "alias": { "type": "string" }, "property": { "type": "string" }, "weight": { "type": "string" }, "over": { "type": "array", "items": { "type": "string" } }, "multiplicity": { "enum": ["per-path", "distinct"] }, "ends": { "enum": ["visible", "all"] } }, "required": ["kind", "alias", "weight", "over", "multiplicity", "ends"], "additionalProperties": false }] } }, "having": { "type": "array", "items": { "type": "object", "properties": { "measure": { "type": "number" }, "op": { "enum": ["=", ">", ">=", "<", "<="] }, "value": { "type": "number" } }, "required": ["measure", "op", "value"], "additionalProperties": false } }, "order": { "type": "object", "properties": { "by": { "enum": ["key", "measure"] }, "index": { "type": "number" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["by", "index", "direction"], "additionalProperties": false }, "limit": { "type": "number" } }, "required": ["kind", "keys", "measures"], "additionalProperties": false }] } }, "required": ["kind", "start", "answer"], "additionalProperties": false },
+  aggregateObjects: { "type": "object", "properties": { "kind": { "const": "aggregate" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "operation": { "enum": ["count", "min", "max", "sum", "average"] }, "property": { "type": "string" }, "groupBy": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "type" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" } }, "required": ["kind", "property"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "parent" }, "edgeTypeKeys": { "type": "array", "items": { "type": "string" } }, "multiplicity": { "enum": ["per-path", "distinct"] }, "ends": { "enum": ["visible", "all"] }, "parents": { "type": "array", "items": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } } }, "required": ["kind", "edgeTypeKeys", "multiplicity", "ends"], "additionalProperties": false }] } }, "required": ["kind", "typeKey", "operation"], "additionalProperties": false },
   discoverVerbs: { "type": "object", "properties": { "objectId": { "type": "string" } }, "required": ["objectId"], "additionalProperties": false },
   readHistory: { "type": "object", "properties": { "objectId": { "type": "string" }, "limit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["objectId", "limit", "continuation"], "additionalProperties": false },
   mutate: { "type": "object", "properties": { "correlation": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "mint" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "sent" }, "correlationId": { "type": "string" } }, "required": ["kind", "correlationId"], "additionalProperties": false }] }, "operation": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "create-object" }, "typeKey": { "type": "string" }, "typeVersion": { "type": "number" }, "properties": { "type": "object", "additionalProperties": {} } }, "required": ["kind", "typeKey", "typeVersion", "properties"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "update-object" }, "objectId": { "type": "string" }, "typeVersion": { "type": "number" }, "changes": { "type": "object", "additionalProperties": { "type": "object", "properties": { "from": { "oneOf": [{ "type": "object", "properties": { "absent": { "const": true } }, "required": ["absent"], "additionalProperties": false }, { "type": "object", "properties": { "value": {} }, "required": ["value"], "additionalProperties": false }] }, "to": { "oneOf": [{ "type": "object", "properties": { "absent": { "const": true } }, "required": ["absent"], "additionalProperties": false }, { "type": "object", "properties": { "value": {} }, "required": ["value"], "additionalProperties": false }] } }, "required": ["from", "to"], "additionalProperties": false } } }, "required": ["kind", "objectId", "typeVersion", "changes"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "delete-object" }, "objectId": { "type": "string" } }, "required": ["kind", "objectId"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "create-edge" }, "typeKey": { "type": "string" }, "typeVersion": { "type": "number" }, "sourceObjectId": { "type": "string" }, "targetObjectId": { "type": "string" }, "properties": { "type": "object", "additionalProperties": {} } }, "required": ["kind", "typeKey", "typeVersion", "sourceObjectId", "targetObjectId", "properties"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "update-edge" }, "edgeId": { "type": "string" }, "typeVersion": { "type": "number" }, "changes": { "type": "object", "additionalProperties": { "type": "object", "properties": { "from": { "oneOf": [{ "type": "object", "properties": { "absent": { "const": true } }, "required": ["absent"], "additionalProperties": false }, { "type": "object", "properties": { "value": {} }, "required": ["value"], "additionalProperties": false }] }, "to": { "oneOf": [{ "type": "object", "properties": { "absent": { "const": true } }, "required": ["absent"], "additionalProperties": false }, { "type": "object", "properties": { "value": {} }, "required": ["value"], "additionalProperties": false }] } }, "required": ["from", "to"], "additionalProperties": false } } }, "required": ["kind", "edgeId", "typeVersion", "changes"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "delete-edge" }, "edgeId": { "type": "string" } }, "required": ["kind", "edgeId"], "additionalProperties": false }] } }, "required": ["correlation", "operation"], "additionalProperties": false },
@@ -526,14 +652,17 @@ var SCHEMAS = {
   grantMembership: { "type": "object", "properties": { "principalId": { "type": "string" }, "scopeKind": { "enum": ["organisation", "project"] }, "scopeId": { "type": "string" }, "roleKey": { "type": "string" } }, "required": ["principalId", "scopeKind", "scopeId", "roleKey"], "additionalProperties": false },
   revokeMembership: { "type": "object", "properties": { "principalId": { "type": "string" }, "scopeKind": { "enum": ["organisation", "project"] }, "scopeId": { "type": "string" } }, "required": ["principalId", "scopeKind", "scopeId"], "additionalProperties": false },
   setModelConfiguration: { "type": "object", "properties": { "model": { "type": "string" }, "apiKey": { "type": "string" } }, "required": ["model", "apiKey"], "additionalProperties": false },
+  setModelId: { "type": "object", "properties": { "model": { "type": "string" } }, "required": ["model"], "additionalProperties": false },
   readDisplayNames: { "type": "object", "properties": { "principalIds": { "type": "array", "items": { "type": "string" } } }, "required": ["principalIds"], "additionalProperties": false },
   listMembers: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   changeMembershipRole: { "type": "object", "properties": { "principalId": { "type": "string" }, "scopeKind": { "enum": ["organisation", "project"] }, "scopeId": { "type": "string" }, "roleKey": { "type": "string" } }, "required": ["principalId", "scopeKind", "scopeId", "roleKey"], "additionalProperties": false },
   listOrganisationMembers: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   listServiceIdentities: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
-  createInvitation: { "type": "object", "properties": { "email": { "type": "string" }, "roleKey": { "type": "string" } }, "required": ["email", "roleKey"], "additionalProperties": false },
+  createInvitation: { "type": "object", "properties": { "email": { "type": "string" }, "roleKey": { "type": "string" }, "projectRoles": { "type": "array", "items": { "type": "object", "properties": { "projectId": { "type": "string" }, "roleKey": { "type": "string" } }, "required": ["projectId", "roleKey"], "additionalProperties": false }, "maxItems": 50 } }, "required": ["email", "roleKey"], "additionalProperties": false },
   listInvitations: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   revokeInvitation: { "type": "object", "properties": { "invitationId": { "type": "string" } }, "required": ["invitationId"], "additionalProperties": false },
+  readModelConfigurationStatus: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
+  readAccount: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   readInvitationDomainRule: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   setInvitationDomainRule: { "type": "object", "properties": { "restricted": { "type": "boolean" }, "domains": { "type": "array", "items": { "type": "string" } } }, "required": ["restricted", "domains"], "additionalProperties": false },
   reissueInvitation: { "type": "object", "properties": { "invitationId": { "type": "string" } }, "required": ["invitationId"], "additionalProperties": false },
@@ -543,16 +672,20 @@ var SCHEMAS = {
   reissuePlatformInvitation: { "type": "object", "properties": { "invitationId": { "type": "string" } }, "required": ["invitationId"], "additionalProperties": false },
   readWebOrigin: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   readCallerCapabilities: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
-  queryGraph: { "type": "object", "properties": { "kind": { "const": "graph" }, "start": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "objects" }, "objects": { "type": "array", "items": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } } }, "required": ["kind", "objects"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "set" }, "set": { "type": "object", "properties": { "kind": { "const": "objects" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] } }, "required": ["kind", "typeKey"], "additionalProperties": false } }, "required": ["kind", "set"], "additionalProperties": false }] }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKeys": { "type": "array", "items": { "type": "string" } }, "direction": { "enum": ["outgoing", "incoming"] }, "depth": { "type": "number" }, "targetTypeKeys": { "type": "array", "items": { "type": "string" } } }, "required": ["depth"], "additionalProperties": false } }, "closeOver": { "type": "array", "items": { "type": "string" } }, "keep": { "enum": ["all", "last"] }, "objectLimit": { "type": "number" }, "hopLimit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "start", "steps"], "additionalProperties": false },
+  queryGraph: { "type": "object", "properties": { "kind": { "const": "graph" }, "start": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "objects" }, "objects": { "type": "array", "items": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } } }, "required": ["kind", "objects"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "set" }, "set": { "type": "object", "properties": { "kind": { "const": "objects" }, "typeKey": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "projects": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "targetTypeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "or" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "=" }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": [">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "edge" }, "edgeTypeKey": { "type": "string" }, "direction": { "enum": ["outgoing", "incoming", "to-children", "to-parent"] }, "has": { "type": "boolean" } }, "required": ["kind", "edgeTypeKey", "direction", "has"], "additionalProperties": false }] } } }, "required": ["kind", "filters"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "type": "string" }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "type" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "op", "values"], "additionalProperties": false }] } } }, "required": ["edgeTypeKey", "direction", "targetTypeKey"], "additionalProperties": false } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] } }, "required": ["kind", "typeKey"], "additionalProperties": false } }, "required": ["kind", "set"], "additionalProperties": false }] }, "steps": { "type": "array", "items": { "type": "object", "properties": { "edgeTypeKeys": { "type": "array", "items": { "type": "string" } }, "direction": { "enum": ["outgoing", "incoming"] }, "depth": { "type": "number" }, "targetTypeKeys": { "type": "array", "items": { "type": "string" } } }, "required": ["depth"], "additionalProperties": false } }, "closeOver": { "type": "array", "items": { "type": "string" } }, "keep": { "enum": ["all", "last"] }, "objectLimit": { "type": "number" }, "hopLimit": { "type": "number" }, "continuation": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "start", "steps"], "additionalProperties": false },
   readStructure: { "type": "object", "properties": { "typeKey": { "type": "string" }, "structure": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "declared" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "relationship" }, "edgeTypeKey": { "type": "string" } }, "required": ["kind", "edgeTypeKey"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "view" }, "viewKey": { "type": "string" } }, "required": ["kind", "viewKey"], "additionalProperties": false }] }, "anchor": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "forest" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "subtree" }, "object": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } }, "required": ["kind", "object"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "ancestors" }, "object": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false } }, "required": ["kind", "object"], "additionalProperties": false }] }, "maxDepth": { "type": "number" }, "occurrenceLimit": { "type": "number" } }, "required": ["typeKey", "structure", "anchor"], "additionalProperties": false },
   findPaths: { "type": "object", "properties": { "from": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false }, "to": { "type": "object", "properties": { "objectId": { "type": "string" }, "projectId": { "type": "string" } }, "required": ["objectId", "projectId"], "additionalProperties": false }, "edgeTypeKeys": { "type": "array", "items": { "type": "string" } }, "direction": { "enum": ["outgoing", "incoming"] }, "maxLength": { "type": "number" }, "maxPaths": { "type": "number" } }, "required": ["from", "to", "maxLength"], "additionalProperties": false },
   listProposals: { "type": "object", "properties": { "state": { "enum": ["pending", "merged", "refused", "discarded", "all"] }, "cursor": { "type": "string" } }, "required": ["state"], "additionalProperties": false },
   readProposal: { "type": "object", "properties": { "proposalId": { "type": "string" } }, "required": ["proposalId"], "additionalProperties": false },
   refuseProposal: { "type": "object", "properties": { "proposalId": { "type": "string" }, "reason": { "type": "string" } }, "required": ["proposalId", "reason"], "additionalProperties": false },
   readBranchDiff: { "type": "object", "properties": { "proposalId": { "type": "string" }, "cursor": { "type": "string" } }, "required": ["proposalId"], "additionalProperties": false },
+  readLinkStatus: { "type": "object", "properties": { "objectId": { "type": "string" } }, "required": ["objectId"], "additionalProperties": false },
+  clearLinks: { "type": "object", "properties": { "correlation": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "mint" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "sent" }, "correlationId": { "type": "string" } }, "required": ["kind", "correlationId"], "additionalProperties": false }] }, "ref": { "type": "string" }, "entries": { "type": "array", "items": { "type": "object", "properties": { "linkId": { "type": "string" }, "upstreamVersion": { "type": "string" } }, "required": ["linkId", "upstreamVersion"], "additionalProperties": false }, "minItems": 1, "maxItems": 100 } }, "required": ["correlation", "ref", "entries"], "additionalProperties": false },
+  readChangeImpact: { "type": "object", "properties": { "ref": { "type": "string" }, "base": { "type": "string" } }, "required": ["ref", "base"], "additionalProperties": false },
   diffBranches: { "type": "object", "properties": { "ref": { "type": "string" }, "base": { "type": "string" }, "cursor": { "type": "string" } }, "required": ["ref", "base"], "additionalProperties": false },
   readBranchHistory: { "type": "object", "properties": { "name": { "type": "string" }, "cursor": { "type": "string" } }, "required": ["name"], "additionalProperties": false },
   listAudit: { "type": "object", "properties": { "limit": { "type": "number" }, "cursor": { "type": "string" } }, "required": ["limit"], "additionalProperties": false },
+  listOrganisationAudit: { "type": "object", "properties": { "limit": { "type": "number" }, "verbPrefix": { "type": "string" }, "cursor": { "type": "string" } }, "required": ["limit", "verbPrefix"], "additionalProperties": false },
   readRefHead: { "type": "object", "properties": { "name": { "type": "string" } }, "required": ["name"], "additionalProperties": false },
   inspectBranchOperation: { "type": "object", "properties": { "correlationId": { "type": "string" } }, "required": ["correlationId"], "additionalProperties": false },
   abandonBranch: { "type": "object", "properties": { "correlation": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "mint" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "sent" }, "correlationId": { "type": "string" } }, "required": ["kind", "correlationId"], "additionalProperties": false }] }, "name": { "type": "string" }, "atHash": { "type": "string" } }, "required": ["correlation", "name", "atHash"], "additionalProperties": false },
@@ -586,7 +719,7 @@ var SCHEMAS = {
   readCurrentChangeSet: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   readChangeSet: { "type": "object", "properties": { "changeSetId": { "type": "string" } }, "required": ["changeSetId"], "additionalProperties": false },
   readChangeSetState: { "type": "object", "properties": { "changeSetId": { "type": "string" } }, "required": ["changeSetId"], "additionalProperties": false },
-  reviseChangeSet: { "type": "object", "properties": { "changeSetId": { "type": "string" }, "expectedRevision": { "type": "string" }, "changes": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "object", "properties": { "typeCategory": { "const": "object" }, "typeKey": { "type": "string" }, "version": { "type": "number" }, "displayName": { "type": "string" }, "description": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "schemaLanguageVersion": { "type": "string" }, "propertyDefinitions": { "type": "object", "additionalProperties": {} }, "requiredPropertyKeys": { "type": "array", "items": { "type": "string" } }, "presentationBindings": { "type": "object", "properties": { "views": { "type": "object", "properties": { "object": { "type": "object", "properties": { "root": { "type": "string" }, "elements": { "type": "object", "additionalProperties": { "type": "object", "properties": { "type": { "type": "string" }, "props": { "type": "object", "additionalProperties": {} }, "children": { "type": "array", "items": { "type": "string" } }, "repeat": { "type": "object", "properties": { "statePath": { "type": "string" }, "key": { "type": "string" } }, "required": ["statePath"], "additionalProperties": false }, "on": { "type": "object", "properties": { "press": { "oneOf": [{ "type": "object", "properties": { "action": { "const": "set-properties" }, "params": { "type": "object", "properties": { "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "object", "properties": { "$state": { "type": "string" } }, "required": ["$state"], "additionalProperties": false }] } } }, "required": ["properties"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }, { "type": "object", "properties": { "action": { "const": "run-verb" }, "params": { "type": "object", "properties": { "verb": { "type": "string" } }, "required": ["verb"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }] } }, "required": ["press"], "additionalProperties": false } }, "required": ["type", "props", "children"], "additionalProperties": false } } }, "required": ["root", "elements"], "additionalProperties": false }, "app": { "type": "object", "properties": { "root": { "type": "string" }, "elements": { "type": "object", "additionalProperties": { "type": "object", "properties": { "type": { "type": "string" }, "props": { "type": "object", "additionalProperties": {} }, "children": { "type": "array", "items": { "type": "string" } }, "repeat": { "type": "object", "properties": { "statePath": { "type": "string" }, "key": { "type": "string" } }, "required": ["statePath"], "additionalProperties": false }, "on": { "type": "object", "properties": { "press": { "oneOf": [{ "type": "object", "properties": { "action": { "const": "set-properties" }, "params": { "type": "object", "properties": { "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "object", "properties": { "$state": { "type": "string" } }, "required": ["$state"], "additionalProperties": false }] } } }, "required": ["properties"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }, { "type": "object", "properties": { "action": { "const": "run-verb" }, "params": { "type": "object", "properties": { "verb": { "type": "string" } }, "required": ["verb"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }] } }, "required": ["press"], "additionalProperties": false } }, "required": ["type", "props", "children"], "additionalProperties": false } } }, "required": ["root", "elements"], "additionalProperties": false }, "card": { "type": "object", "properties": { "root": { "type": "string" }, "elements": { "type": "object", "additionalProperties": { "type": "object", "properties": { "type": { "type": "string" }, "props": { "type": "object", "additionalProperties": {} }, "children": { "type": "array", "items": { "type": "string" } }, "repeat": { "type": "object", "properties": { "statePath": { "type": "string" }, "key": { "type": "string" } }, "required": ["statePath"], "additionalProperties": false }, "on": { "type": "object", "properties": { "press": { "oneOf": [{ "type": "object", "properties": { "action": { "const": "set-properties" }, "params": { "type": "object", "properties": { "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "object", "properties": { "$state": { "type": "string" } }, "required": ["$state"], "additionalProperties": false }] } } }, "required": ["properties"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }, { "type": "object", "properties": { "action": { "const": "run-verb" }, "params": { "type": "object", "properties": { "verb": { "type": "string" } }, "required": ["verb"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }] } }, "required": ["press"], "additionalProperties": false } }, "required": ["type", "props", "children"], "additionalProperties": false } } }, "required": ["root", "elements"], "additionalProperties": false } }, "required": [], "additionalProperties": false }, "title": { "type": "string" }, "summary": { "type": "string" }, "icon": { "type": "string" }, "typeIcon": { "type": "string" }, "rail": { "type": "object", "properties": { "group": { "type": "string" }, "order": { "type": "number" } }, "required": ["group", "order"], "additionalProperties": false } }, "required": [], "additionalProperties": false }, "structureDeclaration": { "type": "object", "properties": { "relationships": { "type": "array", "items": { "type": "string" } }, "views": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "label": { "type": "string" }, "steps": { "type": "array", "items": { "type": "string" } }, "decoration": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "label": { "type": "string" } }, "required": ["key", "label"], "additionalProperties": false } } }, "required": ["key", "label", "steps"], "additionalProperties": false } } }, "required": [], "additionalProperties": false }, "subscriptionRoles": { "type": "object", "properties": { "owner": { "type": "object", "properties": { "max": { "type": "number" } }, "required": [], "additionalProperties": false }, "approver": { "type": "object", "properties": { "max": { "type": "number" } }, "required": [], "additionalProperties": false }, "watcher": { "type": "object", "properties": { "max": { "type": "number" } }, "required": [], "additionalProperties": false } }, "required": [], "additionalProperties": false } }, "required": ["typeCategory", "typeKey", "version", "displayName", "description", "schemaLanguageVersion", "propertyDefinitions", "requiredPropertyKeys"], "additionalProperties": false }, { "type": "object", "properties": { "typeCategory": { "const": "edge" }, "typeKey": { "type": "string" }, "version": { "type": "number" }, "displayName": { "type": "string" }, "sourceObjectType": { "type": "string" }, "targetObjectType": { "type": "string" }, "kind": { "enum": ["structural", "traceability"] }, "subjectEnd": { "enum": ["source", "target"] }, "parentEnd": { "oneOf": [{ "const": "source" }, { "const": "target" }, { "type": "null" }] }, "sourceLabel": { "type": "string" }, "targetLabel": { "type": "string" }, "schemaLanguageVersion": { "type": "string" }, "propertyDefinitions": { "type": "object", "additionalProperties": {} }, "requiredPropertyKeys": { "type": "array", "items": { "type": "string" } }, "readRule": { "enum": ["both-endpoints", "either-endpoint"] }, "writeRule": { "enum": ["both-endpoints", "either-endpoint"] } }, "required": ["typeCategory", "typeKey", "version", "displayName", "sourceObjectType", "targetObjectType", "kind", "subjectEnd", "parentEnd", "sourceLabel", "targetLabel", "schemaLanguageVersion", "propertyDefinitions", "requiredPropertyKeys", "readRule", "writeRule"], "additionalProperties": false }, { "type": "object", "properties": { "typeCategory": { "const": "verb" }, "typeKey": { "type": "string" }, "version": { "type": "number" }, "displayName": { "type": "string" }, "description": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "allowedSubjectTypes": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "none" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "types" }, "types": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "types"], "additionalProperties": false }] }, "inputSchema": {}, "resultSchema": {}, "handlerKey": { "type": "string" }, "template": { "type": "object", "properties": { "query": { "type": "object", "properties": { "typeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": ["=", ">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }] }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] }, "limit": { "type": "number" } }, "required": ["typeKey", "limit"], "additionalProperties": false }, "operations": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "create-object" }, "typeKey": { "type": "string" }, "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } } }, "required": ["kind", "typeKey", "properties"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "update-object" }, "typeKey": { "type": "string" }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] }, "changes": { "type": "object", "additionalProperties": { "type": "object", "properties": { "from": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "absent" } }, "required": ["slot"], "additionalProperties": false }] }, "to": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "absent" } }, "required": ["slot"], "additionalProperties": false }] } }, "required": ["from", "to"], "additionalProperties": false } } }, "required": ["kind", "typeKey", "target", "changes"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "delete-object" }, "typeKey": { "type": "string" }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } }, "required": ["kind", "typeKey", "target"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "create-edge" }, "typeKey": { "type": "string" }, "source": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] }, "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } } }, "required": ["kind", "typeKey", "source", "target", "properties"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "delete-edge" }, "typeKey": { "type": "string" }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } }, "required": ["kind", "typeKey", "target"], "additionalProperties": false }] } } }, "required": ["operations"], "additionalProperties": false }, "schemaLanguageVersion": { "type": "string" } }, "required": ["typeCategory", "typeKey", "version", "displayName", "description", "allowedSubjectTypes", "inputSchema", "resultSchema", "schemaLanguageVersion"], "additionalProperties": false }] } }, "railGroups": { "type": "array", "items": { "type": "string" } } }, "required": ["changeSetId", "expectedRevision", "changes"], "additionalProperties": false },
+  reviseChangeSet: { "type": "object", "properties": { "changeSetId": { "type": "string" }, "expectedRevision": { "type": "string" }, "changes": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "object", "properties": { "typeCategory": { "const": "object" }, "typeKey": { "type": "string" }, "version": { "type": "number" }, "displayName": { "type": "string" }, "description": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "schemaLanguageVersion": { "type": "string" }, "propertyDefinitions": { "type": "object", "additionalProperties": {} }, "requiredPropertyKeys": { "type": "array", "items": { "type": "string" } }, "presentationBindings": { "type": "object", "properties": { "views": { "type": "object", "properties": { "object": { "type": "object", "properties": { "root": { "type": "string" }, "elements": { "type": "object", "additionalProperties": { "type": "object", "properties": { "type": { "type": "string" }, "props": { "type": "object", "additionalProperties": {} }, "children": { "type": "array", "items": { "type": "string" } }, "repeat": { "type": "object", "properties": { "statePath": { "type": "string" }, "key": { "type": "string" } }, "required": ["statePath"], "additionalProperties": false }, "on": { "type": "object", "properties": { "press": { "oneOf": [{ "type": "object", "properties": { "action": { "const": "set-properties" }, "params": { "type": "object", "properties": { "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "object", "properties": { "$state": { "type": "string" } }, "required": ["$state"], "additionalProperties": false }] } } }, "required": ["properties"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }, { "type": "object", "properties": { "action": { "const": "run-verb" }, "params": { "type": "object", "properties": { "verb": { "type": "string" } }, "required": ["verb"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }] } }, "required": ["press"], "additionalProperties": false } }, "required": ["type", "props", "children"], "additionalProperties": false } } }, "required": ["root", "elements"], "additionalProperties": false }, "app": { "type": "object", "properties": { "root": { "type": "string" }, "elements": { "type": "object", "additionalProperties": { "type": "object", "properties": { "type": { "type": "string" }, "props": { "type": "object", "additionalProperties": {} }, "children": { "type": "array", "items": { "type": "string" } }, "repeat": { "type": "object", "properties": { "statePath": { "type": "string" }, "key": { "type": "string" } }, "required": ["statePath"], "additionalProperties": false }, "on": { "type": "object", "properties": { "press": { "oneOf": [{ "type": "object", "properties": { "action": { "const": "set-properties" }, "params": { "type": "object", "properties": { "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "object", "properties": { "$state": { "type": "string" } }, "required": ["$state"], "additionalProperties": false }] } } }, "required": ["properties"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }, { "type": "object", "properties": { "action": { "const": "run-verb" }, "params": { "type": "object", "properties": { "verb": { "type": "string" } }, "required": ["verb"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }] } }, "required": ["press"], "additionalProperties": false } }, "required": ["type", "props", "children"], "additionalProperties": false } } }, "required": ["root", "elements"], "additionalProperties": false }, "card": { "type": "object", "properties": { "root": { "type": "string" }, "elements": { "type": "object", "additionalProperties": { "type": "object", "properties": { "type": { "type": "string" }, "props": { "type": "object", "additionalProperties": {} }, "children": { "type": "array", "items": { "type": "string" } }, "repeat": { "type": "object", "properties": { "statePath": { "type": "string" }, "key": { "type": "string" } }, "required": ["statePath"], "additionalProperties": false }, "on": { "type": "object", "properties": { "press": { "oneOf": [{ "type": "object", "properties": { "action": { "const": "set-properties" }, "params": { "type": "object", "properties": { "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "object", "properties": { "$state": { "type": "string" } }, "required": ["$state"], "additionalProperties": false }] } } }, "required": ["properties"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }, { "type": "object", "properties": { "action": { "const": "run-verb" }, "params": { "type": "object", "properties": { "verb": { "type": "string" } }, "required": ["verb"], "additionalProperties": false } }, "required": ["action", "params"], "additionalProperties": false }] } }, "required": ["press"], "additionalProperties": false } }, "required": ["type", "props", "children"], "additionalProperties": false } } }, "required": ["root", "elements"], "additionalProperties": false } }, "required": [], "additionalProperties": false }, "title": { "type": "string" }, "summary": { "type": "string" }, "icon": { "type": "string" }, "typeIcon": { "type": "string" }, "propertyLabels": { "type": "object", "additionalProperties": { "type": "string" } }, "propertyOrder": { "type": "array", "items": { "type": "string" } }, "rail": { "type": "object", "properties": { "group": { "type": "string" }, "order": { "type": "number" } }, "required": ["group", "order"], "additionalProperties": false } }, "required": [], "additionalProperties": false }, "structureDeclaration": { "type": "object", "properties": { "relationships": { "type": "array", "items": { "type": "string" } }, "views": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "label": { "type": "string" }, "steps": { "type": "array", "items": { "type": "string" } }, "decoration": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "label": { "type": "string" } }, "required": ["key", "label"], "additionalProperties": false } } }, "required": ["key", "label", "steps"], "additionalProperties": false } } }, "required": [], "additionalProperties": false }, "subscriptionRoles": { "type": "object", "properties": { "owner": { "type": "object", "properties": { "max": { "type": "number" } }, "required": [], "additionalProperties": false }, "approver": { "type": "object", "properties": { "max": { "type": "number" } }, "required": [], "additionalProperties": false }, "watcher": { "type": "object", "properties": { "max": { "type": "number" } }, "required": [], "additionalProperties": false } }, "required": [], "additionalProperties": false } }, "required": ["typeCategory", "typeKey", "version", "displayName", "description", "schemaLanguageVersion", "propertyDefinitions", "requiredPropertyKeys"], "additionalProperties": false }, { "type": "object", "properties": { "typeCategory": { "const": "edge" }, "typeKey": { "type": "string" }, "version": { "type": "number" }, "displayName": { "type": "string" }, "sourceObjectType": { "type": "string" }, "targetObjectType": { "type": "string" }, "kind": { "enum": ["structural", "traceability"] }, "subjectEnd": { "enum": ["source", "target"] }, "parentEnd": { "oneOf": [{ "const": "source" }, { "const": "target" }, { "type": "null" }] }, "sourceLabel": { "type": "string" }, "targetLabel": { "type": "string" }, "schemaLanguageVersion": { "type": "string" }, "propertyDefinitions": { "type": "object", "additionalProperties": {} }, "requiredPropertyKeys": { "type": "array", "items": { "type": "string" } }, "readRule": { "enum": ["both-endpoints", "either-endpoint"] }, "writeRule": { "enum": ["both-endpoints", "either-endpoint"] }, "review": { "type": "object", "properties": { "upstream": { "enum": ["source", "target"] }, "significant": { "type": "array", "items": { "type": "string" } }, "newLinks": { "enum": ["cleared", "unreviewed"] }, "propagation": { "enum": ["direct", "chain"] }, "chainDepth": { "type": "number" } }, "required": ["upstream"], "additionalProperties": false } }, "required": ["typeCategory", "typeKey", "version", "displayName", "sourceObjectType", "targetObjectType", "kind", "subjectEnd", "parentEnd", "sourceLabel", "targetLabel", "schemaLanguageVersion", "propertyDefinitions", "requiredPropertyKeys", "readRule", "writeRule"], "additionalProperties": false }, { "type": "object", "properties": { "typeCategory": { "const": "verb" }, "typeKey": { "type": "string" }, "version": { "type": "number" }, "displayName": { "type": "string" }, "description": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "allowedSubjectTypes": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "none" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "types" }, "types": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "types"], "additionalProperties": false }] }, "inputSchema": {}, "resultSchema": {}, "handlerKey": { "type": "string" }, "template": { "type": "object", "properties": { "query": { "type": "object", "properties": { "typeKey": { "type": "string" }, "filters": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "enum": ["=", ">", ">=", "<", "<="] }, "value": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }] } }, "required": ["kind", "property", "op", "value"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "op": { "const": "in" }, "values": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }] } } }, "required": ["kind", "property", "op", "values"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "text" }, "term": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }] }, "properties": { "type": "array", "items": { "type": "string" } } }, "required": ["kind", "term"], "additionalProperties": false }] } }, "sort": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "property" }, "property": { "type": "string" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "property", "direction"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "identity" }, "direction": { "enum": ["asc", "desc"] } }, "required": ["kind", "direction"], "additionalProperties": false }] }, "limit": { "type": "number" } }, "required": ["typeKey", "limit"], "additionalProperties": false }, "operations": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "kind": { "const": "create-object" }, "typeKey": { "type": "string" }, "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } } }, "required": ["kind", "typeKey", "properties"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "update-object" }, "typeKey": { "type": "string" }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] }, "changes": { "type": "object", "additionalProperties": { "type": "object", "properties": { "from": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "absent" } }, "required": ["slot"], "additionalProperties": false }] }, "to": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "absent" } }, "required": ["slot"], "additionalProperties": false }] } }, "required": ["from", "to"], "additionalProperties": false } } }, "required": ["kind", "typeKey", "target", "changes"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "delete-object" }, "typeKey": { "type": "string" }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } }, "required": ["kind", "typeKey", "target"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "create-edge" }, "typeKey": { "type": "string" }, "source": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] }, "properties": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "literal" }, "value": {} }, "required": ["slot", "value"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" }, "property": { "type": "string" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } } }, "required": ["kind", "typeKey", "source", "target", "properties"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "const": "delete-edge" }, "typeKey": { "type": "string" }, "target": { "oneOf": [{ "type": "object", "properties": { "slot": { "const": "input" }, "key": { "type": "string" } }, "required": ["slot", "key"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "subject" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "item" } }, "required": ["slot"], "additionalProperties": false }, { "type": "object", "properties": { "slot": { "const": "step" }, "index": { "type": "number" } }, "required": ["slot", "index"], "additionalProperties": false }] } }, "required": ["kind", "typeKey", "target"], "additionalProperties": false }] } } }, "required": ["operations"], "additionalProperties": false }, "schemaLanguageVersion": { "type": "string" } }, "required": ["typeCategory", "typeKey", "version", "displayName", "description", "allowedSubjectTypes", "inputSchema", "resultSchema", "schemaLanguageVersion"], "additionalProperties": false }] } }, "railGroups": { "type": "array", "items": { "type": "string" } } }, "required": ["changeSetId", "expectedRevision", "changes"], "additionalProperties": false },
   validateChangeSet: { "type": "object", "properties": { "changeSetId": { "type": "string" }, "revision": { "type": "string" } }, "required": ["changeSetId", "revision"], "additionalProperties": false },
   discardChangeSet: { "type": "object", "properties": { "changeSetId": { "type": "string" } }, "required": ["changeSetId"], "additionalProperties": false },
   acceptChangeSet: { "type": "object", "properties": { "changeSetId": { "type": "string" }, "revision": { "type": "string" }, "correlationId": { "type": "string" } }, "required": ["changeSetId", "revision"], "additionalProperties": false },
@@ -613,7 +746,21 @@ var SCHEMAS = {
   revokeConnection: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   startImportRun: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
   listImportRuns: { "type": "object", "properties": { "runId": { "type": "string" } }, "required": [], "additionalProperties": false },
-  closeImportRun: { "oneOf": [{ "type": "object", "properties": { "runId": { "type": "string" }, "outcome": { "const": "succeeded" }, "commits": { "type": "array", "items": { "type": "string" } }, "complete": { "type": "boolean" }, "sourceCheckpoint": { "oneOf": [{ "type": "number" }, { "type": "null" }] }, "counts": { "type": "object", "properties": { "created": { "type": "number" }, "updated": { "type": "number" }, "unchanged": { "type": "number" }, "withdrawn": { "type": "number" }, "carried": { "type": "number" }, "overwritten": { "type": "number" } }, "required": ["created", "updated", "unchanged", "withdrawn", "carried", "overwritten"], "additionalProperties": false } }, "required": ["runId", "outcome", "commits", "complete", "sourceCheckpoint", "counts"], "additionalProperties": false }, { "type": "object", "properties": { "runId": { "type": "string" }, "outcome": { "const": "failed" }, "failure": { "enum": ["auth", "timeout", "size", "shape", "upstream-error", "unreachable", "allowance-spent", "duplicate-identifier", "dangling-reference", "undeclared-type", "credential-unreadable", "connection-revoked", "abandoned", "apply-refused", "apply-conflict", "apply-unknown", "duplicate-upstream", "types-not-approved", "internal", "mirror-row-unreadable"] } }, "required": ["runId", "outcome", "failure"], "additionalProperties": false }] }
+  closeImportRun: { "oneOf": [{ "type": "object", "properties": { "runId": { "type": "string" }, "outcome": { "const": "succeeded" }, "commits": { "type": "array", "items": { "type": "string" } }, "complete": { "type": "boolean" }, "sourceCheckpoint": { "oneOf": [{ "type": "number" }, { "type": "null" }] }, "counts": { "type": "object", "properties": { "created": { "type": "number" }, "updated": { "type": "number" }, "unchanged": { "type": "number" }, "withdrawn": { "type": "number" }, "carried": { "type": "number" }, "overwritten": { "type": "number" } }, "required": ["created", "updated", "unchanged", "withdrawn", "carried", "overwritten"], "additionalProperties": false } }, "required": ["runId", "outcome", "commits", "complete", "sourceCheckpoint", "counts"], "additionalProperties": false }, { "type": "object", "properties": { "runId": { "type": "string" }, "outcome": { "const": "failed" }, "failure": { "enum": ["auth", "timeout", "size", "shape", "upstream-error", "unreachable", "allowance-spent", "duplicate-identifier", "dangling-reference", "undeclared-type", "credential-unreadable", "connection-revoked", "abandoned", "apply-refused", "apply-conflict", "apply-unknown", "duplicate-upstream", "types-not-approved", "internal", "mirror-row-unreadable"] } }, "required": ["runId", "outcome", "failure"], "additionalProperties": false }] },
+  createHostedApp: { "type": "object", "properties": { "key": { "type": "string" } }, "required": ["key"], "additionalProperties": false },
+  readHostedBundle: { "type": "object", "properties": { "launchId": { "type": "string" } }, "required": ["launchId"], "additionalProperties": false },
+  listHostedApps: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
+  listHostedVersions: { "type": "object", "properties": { "appId": { "type": "string" } }, "required": ["appId"], "additionalProperties": false },
+  revokeHostedApp: { "type": "object", "properties": { "appId": { "type": "string" } }, "required": ["appId"], "additionalProperties": false },
+  revokeHostedVersion: { "type": "object", "properties": { "versionId": { "type": "string" } }, "required": ["versionId"], "additionalProperties": false },
+  openHostedApp: { "type": "object", "properties": { "appKey": { "type": "string" } }, "required": ["appKey"], "additionalProperties": false },
+  endHostedLaunch: { "type": "object", "properties": { "launchId": { "type": "string" } }, "required": ["launchId"], "additionalProperties": false },
+  mintHostedAppToken: { "type": "object", "properties": { "launchId": { "type": "string" } }, "required": ["launchId"], "additionalProperties": false },
+  setHostedOneWallSwitch: { "type": "object", "properties": { "allowed": { "type": "boolean" } }, "required": ["allowed"], "additionalProperties": false },
+  readHostedOneWallSwitch: { "type": "object", "properties": {}, "required": [], "additionalProperties": false },
+  grantHostedOneWall: { "type": "object", "properties": { "appId": { "type": "string" } }, "required": ["appId"], "additionalProperties": false },
+  withdrawHostedOneWall: { "type": "object", "properties": { "appId": { "type": "string" } }, "required": ["appId"], "additionalProperties": false },
+  listHostedOneWallGrants: { "type": "object", "properties": {}, "required": [], "additionalProperties": false }
 };
 var ROUTE_INPUT_SCHEMAS = deepFreeze(SCHEMAS);
 var SELECTORS = {
@@ -646,8 +793,13 @@ var EXAMPLES = {
   decideConsent: { "interactionId": "<interactionId>", "decision": "approve", "approvedScopes": [] },
   listConnectedApps: {},
   revokeConnectedApp: { "clientId": "<clientId>" },
+  readAttachment: {
+    "objectId": "<objectId>",
+    "property": "<property>"
+  },
   readObject: { "objectId": "<objectId>" },
   queryObjects: { "kind": "objects", "typeKey": null, "limit": 1, "continuation": null },
+  queryRows: { "kind": "graph-query", "start": { "typeKey": null }, "answer": { "kind": "rows", "columns": [], "limit": 1, "continuation": null } },
   aggregateObjects: { "kind": "aggregate", "typeKey": null, "operation": "count" },
   discoverVerbs: { "objectId": "<objectId>" },
   readHistory: { "objectId": "<objectId>", "limit": 1, "continuation": null },
@@ -672,6 +824,7 @@ var EXAMPLES = {
   grantMembership: { "principalId": "<principalId>", "scopeKind": "organisation", "scopeId": "<scopeId>", "roleKey": "<roleKey>" },
   revokeMembership: { "principalId": "<principalId>", "scopeKind": "organisation", "scopeId": "<scopeId>" },
   setModelConfiguration: { "model": "<model>", "apiKey": "<apiKey>" },
+  setModelId: { "model": "<model>" },
   readDisplayNames: { "principalIds": [] },
   listMembers: {},
   changeMembershipRole: { "principalId": "<principalId>", "scopeKind": "organisation", "scopeId": "<scopeId>", "roleKey": "<roleKey>" },
@@ -680,6 +833,8 @@ var EXAMPLES = {
   createInvitation: { "email": "<email>", "roleKey": "<roleKey>" },
   listInvitations: {},
   revokeInvitation: { "invitationId": "<invitationId>" },
+  readModelConfigurationStatus: {},
+  readAccount: {},
   readInvitationDomainRule: {},
   setInvitationDomainRule: { "restricted": false, "domains": [] },
   reissueInvitation: { "invitationId": "<invitationId>" },
@@ -696,9 +851,13 @@ var EXAMPLES = {
   readProposal: { "proposalId": "<proposalId>" },
   refuseProposal: { "proposalId": "<proposalId>", "reason": "<reason>" },
   readBranchDiff: { "proposalId": "<proposalId>" },
+  readLinkStatus: { "objectId": "<objectId>" },
+  clearLinks: { "correlation": { "kind": "mint" }, "ref": "main", "entries": [{ "linkId": "<linkId>", "upstreamVersion": "<upstreamVersion>" }] },
+  readChangeImpact: { "ref": "project/branch", "base": "main" },
   diffBranches: { "ref": "<ref>", "base": "<base>" },
   readBranchHistory: { "name": "<name>" },
   listAudit: { "limit": 1 },
+  listOrganisationAudit: { "limit": 1, "verbPrefix": "<verbPrefix>" },
   readRefHead: { "name": "<name>" },
   inspectBranchOperation: { "correlationId": "<correlationId>" },
   abandonBranch: { "correlation": { "kind": "mint" }, "name": "<name>", "atHash": "<atHash>" },
@@ -759,16 +918,35 @@ var EXAMPLES = {
   revokeConnection: {},
   startImportRun: {},
   listImportRuns: {},
-  closeImportRun: { "runId": "<runId>", "outcome": "succeeded", "commits": [], "complete": false, "sourceCheckpoint": null, "counts": { "created": 1, "updated": 1, "unchanged": 1, "withdrawn": 1, "carried": 1, "overwritten": 1 } }
+  closeImportRun: { "runId": "<runId>", "outcome": "succeeded", "commits": [], "complete": false, "sourceCheckpoint": null, "counts": { "created": 1, "updated": 1, "unchanged": 1, "withdrawn": 1, "carried": 1, "overwritten": 1 } },
+  createHostedApp: { "key": "<key>" },
+  readHostedBundle: { "launchId": "<launchId>" },
+  listHostedApps: {},
+  listHostedVersions: { "appId": "<appId>" },
+  revokeHostedApp: { "appId": "<appId>" },
+  revokeHostedVersion: { "versionId": "<versionId>" },
+  openHostedApp: { "appKey": "<appKey>" },
+  endHostedLaunch: { "launchId": "<launchId>" },
+  mintHostedAppToken: { "launchId": "<launchId>" },
+  setHostedOneWallSwitch: { "allowed": false },
+  readHostedOneWallSwitch: {},
+  grantHostedOneWall: { "appId": "<appId>" },
+  withdrawHostedOneWall: { "appId": "<appId>" },
+  listHostedOneWallGrants: {}
 };
 var ROUTE_INPUT_EXAMPLES = deepFreeze(EXAMPLES);
 
 // packages/api-contract/dist/routes.js
-var PROTOCOL_VERSION = 27;
+var PROTOCOL_VERSION = 36;
 var VERSION_HEADER = "oe2-protocol-version";
 var TOKEN_HEADER = "authorization";
 var IDEMPOTENCY_HEADER = "oe2-idempotency-key";
 var STREAMED_ROUTE_NAMES = Object.freeze(["sendMessageStreamed", "answerPlanStreamed"]);
+var BINARY_REQUEST_ROUTE_NAMES = Object.freeze(["stageAttachment", "publishHostedVersion"]);
+var BINARY_RESPONSE_ROUTE_NAMES = Object.freeze(["readAttachment"]);
+function isBinaryRequestRoute(name) {
+  return BINARY_REQUEST_ROUTE_NAMES.some((binary) => binary === name);
+}
 var OMITTABLE_GROUPS = Object.freeze([
   "read",
   "history",
@@ -790,11 +968,11 @@ function route(entry2) {
   return Object.freeze({ ...entry2, doc: documented });
 }
 var ROUTES = Object.freeze({
-  createObjectSet: route({ name: "createObjectSet", method: "POST", path: "/object-sets", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "objects.createObjectSet" }),
-  listObjectSets: route({ name: "listObjectSets", method: "POST", path: "/object-sets/list", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "objects.listObjectSets" }),
-  readObjectSet: route({ name: "readObjectSet", method: "POST", path: "/object-sets/read", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "objects.readObjectSet" }),
-  updateObjectSet: route({ name: "updateObjectSet", method: "POST", path: "/object-sets/update", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "objects.updateObjectSet" }),
-  deleteObjectSet: route({ name: "deleteObjectSet", method: "POST", path: "/object-sets/delete", group: "write", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "objects.deleteObjectSet" }),
+  createObjectSet: route({ name: "createObjectSet", method: "POST", path: "/object-sets", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.createObjectSet" }),
+  listObjectSets: route({ name: "listObjectSets", method: "POST", path: "/object-sets/list", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.listObjectSets" }),
+  readObjectSet: route({ name: "readObjectSet", method: "POST", path: "/object-sets/read", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.readObjectSet" }),
+  updateObjectSet: route({ name: "updateObjectSet", method: "POST", path: "/object-sets/update", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.updateObjectSet" }),
+  deleteObjectSet: route({ name: "deleteObjectSet", method: "POST", path: "/object-sets/delete", group: "write", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.deleteObjectSet" }),
   health: route({ name: "health", method: "GET", path: "/health", group: "platform", selector: "none", subject: "platform", idempotent: false, admission: NO_ACCESS_TOKEN, versioned: false, module: "sdk-core", capability: "core.health" }),
   signInStart: route({ name: "signInStart", method: "GET", path: "/auth/sign-in", group: "platform", selector: "none", subject: "platform", idempotent: false, admission: NO_ACCESS_TOKEN, versioned: false, module: "sdk-core", capability: "core.signInStart" }),
   signInCallback: route({ name: "signInCallback", method: "GET", path: "/auth/callback", group: "platform", selector: "none", subject: "platform", idempotent: false, admission: NO_ACCESS_TOKEN, versioned: false, module: "sdk-core", capability: "core.signInCallback" }),
@@ -813,24 +991,63 @@ var ROUTES = Object.freeze({
   decideConsent: route({ name: "decideConsent", method: "POST", path: "/consent-decisions", group: "platform", selector: "none", subject: "platform", idempotent: false, admission: admitting("user"), versioned: true, module: "web-sdk", capability: "web.consentDecision" }),
   listConnectedApps: route({ name: "listConnectedApps", method: "POST", path: "/connected-apps", group: "platform", selector: "none", subject: "platform", idempotent: false, admission: admitting("user"), versioned: true, module: "web-sdk", capability: "web.connectedApps" }),
   revokeConnectedApp: route({ name: "revokeConnectedApp", method: "POST", path: "/connected-app-revocations", group: "platform", selector: "none", subject: "platform", idempotent: false, admission: admitting("user"), versioned: true, module: "web-sdk", capability: "web.connectedAppRevocation" }),
-  readObject: route({ name: "readObject", method: "POST", path: "/objects/read", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.read" }),
-  queryObjects: route({ name: "queryObjects", method: "POST", path: "/objects/query", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client"), versioned: true, module: "objects-sdk", capability: "objects.query" }),
-  aggregateObjects: route({ name: "aggregateObjects", method: "POST", path: "/objects/aggregate", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "client"), versioned: true, module: "objects-sdk", capability: "objects.aggregate" }),
-  discoverVerbs: route({ name: "discoverVerbs", method: "POST", path: "/objects/verbs", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.read" }),
-  readHistory: route({ name: "readHistory", method: "POST", path: "/objects/history", group: "history", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.history" }),
-  mutate: route({ name: "mutate", method: "POST", path: "/mutations", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "service", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.write" }),
-  mutateBatch: route({ name: "mutateBatch", method: "POST", path: "/mutations/batch", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "service", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.write" }),
-  previewDelete: route({ name: "previewDelete", method: "POST", path: "/objects/delete-preview", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.write" }),
-  recover: route({ name: "recover", method: "POST", path: "/recoveries", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "client"), versioned: true, module: "objects-sdk", capability: "objects.recovery" }),
-  executeVerb: route({ name: "executeVerb", method: "POST", path: "/verb-executions", group: "verb", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "service", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.verb" }),
+  stageAttachment: route({
+    name: "stageAttachment",
+    method: "POST",
+    path: "/attachments/stage",
+    group: "write",
+    selector: "object",
+    subject: "project",
+    idempotent: false,
+    admission: admitting("user", "service", "client", "run-apply"),
+    versioned: true,
+    module: "objects-sdk",
+    capability: "objects.write"
+  }),
+  readAttachment: route({
+    name: "readAttachment",
+    method: "POST",
+    path: "/attachments/read",
+    group: "read",
+    selector: "object",
+    subject: "project",
+    idempotent: false,
+    admission: admitting("user", "service", "client", "run-explore", "run-apply"),
+    versioned: true,
+    module: "objects-sdk",
+    capability: "objects.read"
+  }),
+  readObject: route({ name: "readObject", method: "POST", path: "/objects/read", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.read" }),
+  queryObjects: route({ name: "queryObjects", method: "POST", path: "/objects/query", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.query" }),
+  queryRows: route({
+    name: "queryRows",
+    method: "POST",
+    path: "/objects/rows",
+    group: "read",
+    selector: "object",
+    subject: "project",
+    idempotent: false,
+    admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client", "hosted-app"),
+    versioned: true,
+    module: "objects-sdk",
+    capability: "objects.query"
+  }),
+  aggregateObjects: route({ name: "aggregateObjects", method: "POST", path: "/objects/aggregate", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.aggregate" }),
+  discoverVerbs: route({ name: "discoverVerbs", method: "POST", path: "/objects/verbs", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.read" }),
+  readHistory: route({ name: "readHistory", method: "POST", path: "/objects/history", group: "history", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.history" }),
+  mutate: route({ name: "mutate", method: "POST", path: "/mutations", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "service", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.write" }),
+  mutateBatch: route({ name: "mutateBatch", method: "POST", path: "/mutations/batch", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "service", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.write" }),
+  previewDelete: route({ name: "previewDelete", method: "POST", path: "/objects/delete-preview", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.write" }),
+  recover: route({ name: "recover", method: "POST", path: "/recoveries", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.recovery" }),
+  executeVerb: route({ name: "executeVerb", method: "POST", path: "/verb-executions", group: "verb", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "service", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.verb" }),
   createBranch: route({ name: "createBranch", method: "POST", path: "/branches", group: "branch", selector: "project", subject: "project", idempotent: true, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "branches-sdk", capability: "branches.create" }),
   merge: route({ name: "merge", method: "POST", path: "/merges", group: "branch", selector: "project", subject: "project", idempotent: true, admission: admitting("user", "service", "client"), versioned: true, module: "branches-sdk", capability: "branches.merge" }),
-  readMergeConflicts: route({ name: "readMergeConflicts", method: "POST", path: "/branches/conflicts", group: "branch", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "client"), versioned: true, module: "branches-sdk", capability: "branches.conflicts" }),
+  readMergeConflicts: route({ name: "readMergeConflicts", method: "POST", path: "/branches/conflicts", group: "branch", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.conflicts" }),
   disposeRef: route({ name: "disposeRef", method: "POST", path: "/branch-disposals", group: "branch", selector: "project", subject: "project", idempotent: true, admission: admitting("user", "service", "client"), versioned: true, module: "branches-sdk", capability: "branches.disposal" }),
-  listProjects: route({ name: "listProjects", method: "POST", path: "/projects", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service", "client"), versioned: true, module: "objects-sdk", capability: "objects.projects" }),
-  listRefs: route({ name: "listRefs", method: "POST", path: "/projects/refs", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "branches.list" }),
-  readCatalogue: route({ name: "readCatalogue", method: "POST", path: "/projects/catalogue", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client"), versioned: true, module: "objects-sdk", capability: "objects.catalogue" }),
-  readPendingProposal: route({ name: "readPendingProposal", method: "POST", path: "/proposals/pending", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client"), versioned: true, module: "branches-sdk", capability: "branches.pendingProposal" }),
+  listProjects: route({ name: "listProjects", method: "POST", path: "/projects", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.projects" }),
+  listRefs: route({ name: "listRefs", method: "POST", path: "/projects/refs", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "branches.list" }),
+  readCatalogue: route({ name: "readCatalogue", method: "POST", path: "/projects/catalogue", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.catalogue" }),
+  readPendingProposal: route({ name: "readPendingProposal", method: "POST", path: "/proposals/pending", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.pendingProposal" }),
   submitProposal: route({ name: "submitProposal", method: "POST", path: "/proposals", group: "branch", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client"), versioned: true, module: "branches-sdk", capability: "branches.proposalSubmit" }),
   createServiceIdentity: route({ name: "createServiceIdentity", method: "POST", path: "/service-identities", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.serviceIdentity" }),
   revokeServiceIdentity: route({ name: "revokeServiceIdentity", method: "POST", path: "/service-identities/revocation", group: "administration", selector: "none", subject: "service-identity", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.serviceIdentityRevocation" }),
@@ -839,10 +1056,13 @@ var ROUTES = Object.freeze({
   grantMembership: route({ name: "grantMembership", method: "POST", path: "/memberships", group: "administration", selector: "none", subject: "membership-scope", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.membership" }),
   revokeMembership: route({ name: "revokeMembership", method: "POST", path: "/membership-revocations", group: "administration", selector: "none", subject: "membership-scope", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.membershipRevocation" }),
   setModelConfiguration: route({ name: "setModelConfiguration", method: "POST", path: "/model-configuration", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.modelConfiguration" }),
-  readDisplayNames: route({ name: "readDisplayNames", method: "POST", path: "/principals/names", group: "read", selector: "none", subject: "display-names", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.displayNames" }),
-  listMembers: route({ name: "listMembers", method: "POST", path: "/projects/members", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.members" }),
+  setModelId: route({ name: "setModelId", method: "POST", path: "/model-configuration/model", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.modelId" }),
+  readModelConfigurationStatus: route({ name: "readModelConfigurationStatus", method: "POST", path: "/model-configuration/status", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.modelConfigurationStatus" }),
+  readAccount: route({ name: "readAccount", method: "POST", path: "/account", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.account" }),
+  readDisplayNames: route({ name: "readDisplayNames", method: "POST", path: "/principals/names", group: "read", selector: "none", subject: "display-names", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "admin-sdk", capability: "admin.displayNames" }),
+  listMembers: route({ name: "listMembers", method: "POST", path: "/projects/members", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "admin-sdk", capability: "admin.members" }),
   changeMembershipRole: route({ name: "changeMembershipRole", method: "POST", path: "/membership-roles", group: "administration", selector: "none", subject: "membership-scope", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.membershipRole" }),
-  listOrganisationMembers: route({ name: "listOrganisationMembers", method: "POST", path: "/organisation/members", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.organisationMembers" }),
+  listOrganisationMembers: route({ name: "listOrganisationMembers", method: "POST", path: "/organisation/members", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "admin-sdk", capability: "admin.organisationMembers" }),
   listServiceIdentities: route({ name: "listServiceIdentities", method: "POST", path: "/organisation/service-identities", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.serviceIdentities" }),
   createInvitation: route({ name: "createInvitation", method: "POST", path: "/invitations", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.invitation" }),
   listInvitations: route({ name: "listInvitations", method: "POST", path: "/invitations/list", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.invitationList" }),
@@ -855,18 +1075,58 @@ var ROUTES = Object.freeze({
   revokePlatformInvitation: route({ name: "revokePlatformInvitation", method: "POST", path: "/platform-invitation-revocations", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.platformInvitationRevocation" }),
   reissuePlatformInvitation: route({ name: "reissuePlatformInvitation", method: "POST", path: "/platform-invitation-reissues", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.platformInvitationReissue" }),
   readWebOrigin: route({ name: "readWebOrigin", method: "POST", path: "/web-origin/read", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service"), versioned: true, module: "admin-sdk", capability: "admin.webOrigin" }),
-  readCallerCapabilities: route({ name: "readCallerCapabilities", method: "POST", path: "/caller-capabilities/read", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.callerCapabilities" }),
-  queryGraph: route({ name: "queryGraph", method: "POST", path: "/objects/graph", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.traverse" }),
-  readStructure: route({ name: "readStructure", method: "POST", path: "/objects/structure", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.traverse" }),
-  findPaths: route({ name: "findPaths", method: "POST", path: "/objects/paths", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "objects-sdk", capability: "objects.traverse" }),
-  listProposals: route({ name: "listProposals", method: "POST", path: "/proposals/list", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client"), versioned: true, module: "branches-sdk", capability: "branches.proposalList" }),
-  readProposal: route({ name: "readProposal", method: "POST", path: "/proposals/read", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client"), versioned: true, module: "branches-sdk", capability: "branches.proposalRead" }),
+  readCallerCapabilities: route({ name: "readCallerCapabilities", method: "POST", path: "/caller-capabilities/read", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "admin-sdk", capability: "admin.callerCapabilities" }),
+  queryGraph: route({ name: "queryGraph", method: "POST", path: "/objects/graph", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.traverse" }),
+  readStructure: route({ name: "readStructure", method: "POST", path: "/objects/structure", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.traverse" }),
+  findPaths: route({ name: "findPaths", method: "POST", path: "/objects/paths", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.traverse" }),
+  listProposals: route({ name: "listProposals", method: "POST", path: "/proposals/list", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.proposalList" }),
+  readProposal: route({ name: "readProposal", method: "POST", path: "/proposals/read", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.proposalRead" }),
   refuseProposal: route({ name: "refuseProposal", method: "POST", path: "/proposal-refusals", group: "branch", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "client"), versioned: true, module: "branches-sdk", capability: "branches.proposalRefusal" }),
-  readBranchDiff: route({ name: "readBranchDiff", method: "POST", path: "/branches/diff", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "client"), versioned: true, module: "branches-sdk", capability: "branches.proposalDiff" }),
-  diffBranches: route({ name: "diffBranches", method: "POST", path: "/branches/difference", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "branches-sdk", capability: "branches.diff" }),
-  readBranchHistory: route({ name: "readBranchHistory", method: "POST", path: "/branches/history", group: "history", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client"), versioned: true, module: "branches-sdk", capability: "branches.history" }),
+  readBranchDiff: route({ name: "readBranchDiff", method: "POST", path: "/branches/diff", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.proposalDiff" }),
+  readLinkStatus: route({
+    name: "readLinkStatus",
+    method: "POST",
+    path: "/links/status",
+    group: "read",
+    selector: "object",
+    subject: "project",
+    idempotent: false,
+    admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"),
+    versioned: true,
+    module: "objects-sdk",
+    capability: "links.status"
+  }),
+  clearLinks: route({
+    name: "clearLinks",
+    method: "POST",
+    path: "/link-clearings",
+    group: "write",
+    selector: "project",
+    subject: "project",
+    idempotent: true,
+    admission: admitting("user", "run-apply", "client", "service"),
+    versioned: true,
+    module: "objects-sdk",
+    capability: "links.clear"
+  }),
+  readChangeImpact: route({
+    name: "readChangeImpact",
+    method: "POST",
+    path: "/branches/impact",
+    group: "read",
+    selector: "project",
+    subject: "project",
+    idempotent: false,
+    admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"),
+    versioned: true,
+    module: "branches-sdk",
+    capability: "branches.impact"
+  }),
+  diffBranches: route({ name: "diffBranches", method: "POST", path: "/branches/difference", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.diff" }),
+  readBranchHistory: route({ name: "readBranchHistory", method: "POST", path: "/branches/history", group: "history", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.history" }),
   listAudit: route({ name: "listAudit", method: "POST", path: "/audit", group: "history", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "run-explore", "run-apply", "run-types"), versioned: true, module: "admin-sdk", capability: "admin.audit" }),
-  readRefHead: route({ name: "readRefHead", method: "POST", path: "/branches/head", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client"), versioned: true, module: "branches-sdk", capability: "branches.head" }),
+  listOrganisationAudit: route({ name: "listOrganisationAudit", method: "POST", path: "/organisation-audit", group: "history", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.organisationAudit" }),
+  readRefHead: route({ name: "readRefHead", method: "POST", path: "/branches/head", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client", "hosted-app"), versioned: true, module: "branches-sdk", capability: "branches.head" }),
   inspectBranchOperation: route({ name: "inspectBranchOperation", method: "POST", path: "/branch-inspections", group: "branch", selector: "project", subject: "project", idempotent: false, admission: admitting("user", "service", "client"), versioned: true, module: "branches-sdk", capability: "branches.inspection" }),
   abandonBranch: route({ name: "abandonBranch", method: "POST", path: "/branch-abandonments", group: "branch", selector: "project", subject: "project", idempotent: true, admission: admitting("user", "service", "client"), versioned: true, module: "branches-sdk", capability: "branches.abandonment" }),
   addRefRule: route({ name: "addRefRule", method: "POST", path: "/ref-rules", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.ref-rules" }),
@@ -903,21 +1163,21 @@ var ROUTES = Object.freeze({
   validateChangeSet: route({ name: "validateChangeSet", method: "POST", path: "/change-sets/validation", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "run-types"), versioned: true, module: "ontology-sdk", capability: "ontology.draft" }),
   discardChangeSet: route({ name: "discardChangeSet", method: "POST", path: "/change-set-discards", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "ontology-sdk", capability: "ontology.publish" }),
   acceptChangeSet: route({ name: "acceptChangeSet", method: "POST", path: "/change-set-acceptances", group: "administration", selector: "none", subject: "none", idempotent: true, admission: admitting("user"), versioned: true, module: "ontology-sdk", capability: "ontology.publish" }),
-  readApp: route({ name: "readApp", method: "POST", path: "/apps/read", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client"), versioned: true, module: "objects-sdk", capability: "objects.catalogue" }),
+  readApp: route({ name: "readApp", method: "POST", path: "/apps/read", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.catalogue" }),
   openAppDraft: route({ name: "openAppDraft", method: "POST", path: "/app-drafts", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "run-types"), versioned: true, module: "ontology-sdk", capability: "ontology.draft" }),
   readAppDraft: route({ name: "readAppDraft", method: "POST", path: "/app-drafts/read", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "run-types"), versioned: true, module: "ontology-sdk", capability: "ontology.draft" }),
   reviseAppDraft: route({ name: "reviseAppDraft", method: "POST", path: "/app-drafts/revisions", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "run-types"), versioned: true, module: "ontology-sdk", capability: "ontology.draft" }),
   acceptAppDraft: route({ name: "acceptAppDraft", method: "POST", path: "/app-draft-acceptances", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "ontology-sdk", capability: "ontology.publish" }),
-  listApps: route({ name: "listApps", method: "POST", path: "/apps", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client"), versioned: true, module: "objects-sdk", capability: "objects.catalogue" }),
+  listApps: route({ name: "listApps", method: "POST", path: "/apps", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "service", "run-explore", "run-apply", "run-types", "client", "hosted-app"), versioned: true, module: "objects-sdk", capability: "objects.catalogue" }),
   validateAppDraft: route({ name: "validateAppDraft", method: "POST", path: "/app-drafts/validation", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user", "run-types"), versioned: true, module: "ontology-sdk", capability: "ontology.draft" }),
   discardAppDraft: route({ name: "discardAppDraft", method: "POST", path: "/app-draft-discards", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "ontology-sdk", capability: "ontology.publish" }),
-  searchPeople: route({ name: "searchPeople", method: "POST", path: "/people/search", group: "read", selector: "none", subject: "display-names", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "people.search" }),
-  searchObjectReaders: route({ name: "searchObjectReaders", method: "POST", path: "/objects/readers", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "people.objectReaders" }),
-  listSubscribers: route({ name: "listSubscribers", method: "POST", path: "/objects/subscribers", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "discussion.subscribers" }),
-  addSubscriber: route({ name: "addSubscriber", method: "POST", path: "/objects/subscribers/add", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "discussion.subscriberChange" }),
-  removeSubscriber: route({ name: "removeSubscriber", method: "POST", path: "/objects/subscribers/remove", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "discussion.subscriberChange" }),
-  listComments: route({ name: "listComments", method: "POST", path: "/objects/comments", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "discussion.comments" }),
-  addComment: route({ name: "addComment", method: "POST", path: "/objects/comments/add", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user"), versioned: true, module: "objects-sdk", capability: "discussion.commentWrite" }),
+  searchPeople: route({ name: "searchPeople", method: "POST", path: "/people/search", group: "read", selector: "none", subject: "display-names", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "people.search" }),
+  searchObjectReaders: route({ name: "searchObjectReaders", method: "POST", path: "/objects/readers", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "people.objectReaders" }),
+  listSubscribers: route({ name: "listSubscribers", method: "POST", path: "/objects/subscribers", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "discussion.subscribers" }),
+  addSubscriber: route({ name: "addSubscriber", method: "POST", path: "/objects/subscribers/add", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "discussion.subscriberChange" }),
+  removeSubscriber: route({ name: "removeSubscriber", method: "POST", path: "/objects/subscribers/remove", group: "write", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "discussion.subscriberChange" }),
+  listComments: route({ name: "listComments", method: "POST", path: "/objects/comments", group: "read", selector: "object", subject: "project", idempotent: false, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "discussion.comments" }),
+  addComment: route({ name: "addComment", method: "POST", path: "/objects/comments/add", group: "write", selector: "object", subject: "project", idempotent: true, admission: admitting("user", "hosted-app"), versioned: true, module: "objects-sdk", capability: "discussion.commentWrite" }),
   createConnection: route({ name: "createConnection", method: "POST", path: "/connections", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.connectionCreation" }),
   listConnections: route({ name: "listConnections", method: "POST", path: "/connections/list", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.connections" }),
   setConnectionCredential: route({ name: "setConnectionCredential", method: "POST", path: "/connections/credential", group: "administration", selector: "connection", subject: "connection", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.connectionCredential" }),
@@ -926,7 +1186,22 @@ var ROUTES = Object.freeze({
   revokeConnection: route({ name: "revokeConnection", method: "POST", path: "/connection-revocations", group: "administration", selector: "connection", subject: "connection", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.connectionRevocation" }),
   startImportRun: route({ name: "startImportRun", method: "POST", path: "/import-runs", group: "write", selector: "connection", subject: "connection", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.importRunStart" }),
   listImportRuns: route({ name: "listImportRuns", method: "POST", path: "/import-runs/list", group: "read", selector: "connection", subject: "connection", idempotent: false, admission: admitting("user"), versioned: true, module: "admin-sdk", capability: "admin.importRuns" }),
-  closeImportRun: route({ name: "closeImportRun", method: "POST", path: "/import-run-closes", group: "write", selector: "connection", subject: "connection", idempotent: false, admission: admitting("service", "user"), versioned: true, module: "admin-sdk", capability: "admin.importRunClose" })
+  closeImportRun: route({ name: "closeImportRun", method: "POST", path: "/import-run-closes", group: "write", selector: "connection", subject: "connection", idempotent: false, admission: admitting("service", "user"), versioned: true, module: "admin-sdk", capability: "admin.importRunClose" }),
+  createHostedApp: route({ name: "createHostedApp", method: "POST", path: "/hosted-apps", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.app" }),
+  publishHostedVersion: route({ name: "publishHostedVersion", method: "POST", path: "/hosted-apps/versions", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.publish" }),
+  readHostedBundle: route({ name: "readHostedBundle", method: "POST", path: "/hosted-apps/bundle", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.bundle" }),
+  listHostedApps: route({ name: "listHostedApps", method: "POST", path: "/hosted-apps/list", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.apps" }),
+  listHostedVersions: route({ name: "listHostedVersions", method: "POST", path: "/hosted-apps/versions/list", group: "read", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.versions" }),
+  revokeHostedApp: route({ name: "revokeHostedApp", method: "POST", path: "/hosted-app-revocations", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.appRevocation" }),
+  revokeHostedVersion: route({ name: "revokeHostedVersion", method: "POST", path: "/hosted-version-revocations", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.versionRevocation" }),
+  openHostedApp: route({ name: "openHostedApp", method: "POST", path: "/hosted-app-launches", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.launch" }),
+  endHostedLaunch: route({ name: "endHostedLaunch", method: "POST", path: "/hosted-app-launch-ends", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.launchEnd" }),
+  mintHostedAppToken: route({ name: "mintHostedAppToken", method: "POST", path: "/hosted-app-tokens", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.token" }),
+  setHostedOneWallSwitch: route({ name: "setHostedOneWallSwitch", method: "POST", path: "/hosted-one-wall-switch", group: "administration", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.oneWallSwitch" }),
+  readHostedOneWallSwitch: route({ name: "readHostedOneWallSwitch", method: "POST", path: "/hosted-one-wall-switch/read", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.oneWallSwitchRead" }),
+  grantHostedOneWall: route({ name: "grantHostedOneWall", method: "POST", path: "/hosted-one-wall-grants", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.oneWallGrant" }),
+  withdrawHostedOneWall: route({ name: "withdrawHostedOneWall", method: "POST", path: "/hosted-one-wall-withdrawals", group: "administration", selector: "project", subject: "project", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.oneWallWithdrawal" }),
+  listHostedOneWallGrants: route({ name: "listHostedOneWallGrants", method: "POST", path: "/hosted-one-wall-grants/list", group: "read", selector: "none", subject: "none", idempotent: false, admission: admitting("user"), versioned: true, module: "hosted-apps-sdk", capability: "hostedApps.oneWallGrants" })
 });
 var ROUTE_CARRIES_CREDENTIAL = Object.freeze({
   createObjectSet: false,
@@ -952,8 +1227,11 @@ var ROUTE_CARRIES_CREDENTIAL = Object.freeze({
   decideConsent: false,
   listConnectedApps: false,
   revokeConnectedApp: false,
+  stageAttachment: false,
+  readAttachment: false,
   readObject: false,
   queryObjects: false,
+  queryRows: false,
   aggregateObjects: false,
   discoverVerbs: false,
   readHistory: false,
@@ -978,6 +1256,9 @@ var ROUTE_CARRIES_CREDENTIAL = Object.freeze({
   grantMembership: false,
   revokeMembership: false,
   setModelConfiguration: true,
+  setModelId: false,
+  readModelConfigurationStatus: false,
+  readAccount: false,
   readDisplayNames: false,
   listMembers: false,
   changeMembershipRole: false,
@@ -1002,9 +1283,13 @@ var ROUTE_CARRIES_CREDENTIAL = Object.freeze({
   readProposal: false,
   refuseProposal: false,
   readBranchDiff: false,
+  readLinkStatus: false,
+  clearLinks: false,
+  readChangeImpact: false,
   diffBranches: false,
   readBranchHistory: false,
   listAudit: false,
+  listOrganisationAudit: false,
   readRefHead: false,
   inspectBranchOperation: false,
   abandonBranch: false,
@@ -1065,7 +1350,22 @@ var ROUTE_CARRIES_CREDENTIAL = Object.freeze({
   revokeConnection: false,
   startImportRun: false,
   listImportRuns: false,
-  closeImportRun: false
+  closeImportRun: false,
+  createHostedApp: false,
+  publishHostedVersion: false,
+  readHostedBundle: false,
+  listHostedApps: false,
+  listHostedVersions: false,
+  revokeHostedApp: false,
+  revokeHostedVersion: false,
+  openHostedApp: false,
+  endHostedLaunch: false,
+  mintHostedAppToken: false,
+  setHostedOneWallSwitch: false,
+  readHostedOneWallSwitch: false,
+  grantHostedOneWall: false,
+  withdrawHostedOneWall: false,
+  listHostedOneWallGrants: false
 });
 function routeEntriesOf(module) {
   const names = Object.keys(ROUTES).filter((name) => ROUTES[name].module === module);
@@ -1074,20 +1374,157 @@ function routeEntriesOf(module) {
 
 // packages/api-contract/dist/client-scopes.js
 var CLIENT_SCOPES = Object.freeze({
-  "objects.read": Object.freeze({ capabilities: Object.freeze(["objects.read", "objects.query", "objects.traverse", "objects.aggregate", "objects.history", "objects.catalogue", "objects.projects", "branches.list"]), consentLine: "Read your objects, their history and your projects' types." }),
-  "objects.write": Object.freeze({ capabilities: Object.freeze(["objects.write", "objects.verb"]), consentLine: "Create, change and delete objects, and run actions on them, as you." }),
-  "branches.read": Object.freeze({ capabilities: Object.freeze(["branches.head", "branches.diff", "branches.history", "branches.conflicts", "branches.inspection", "branches.pendingProposal", "branches.proposalList", "branches.proposalRead", "branches.proposalDiff", "branches.list"]), consentLine: "Read your branches, their history and proposals." }),
-  "branches.write": Object.freeze({ capabilities: Object.freeze(["branches.create", "branches.abandonment", "branches.proposalSubmit", "branches.proposalRefusal", "branches.head", "branches.diff", "branches.history", "branches.conflicts", "branches.inspection", "branches.pendingProposal", "branches.proposalList", "branches.proposalRead", "branches.proposalDiff", "branches.list"]), consentLine: "Create and abandon branches, submit and refuse proposals, and read your branches, as you." }),
+  "objects.read": Object.freeze({
+    capabilities: Object.freeze([
+      "objects.read",
+      "objects.query",
+      "objects.traverse",
+      "objects.aggregate",
+      "objects.history",
+      "objects.catalogue",
+      "objects.projects",
+      "branches.list",
+      "links.status"
+    ]),
+    consentLine: "Read your objects, their history and your projects' types."
+  }),
+  "objects.write": Object.freeze({
+    capabilities: Object.freeze([
+      "objects.write",
+      "objects.verb",
+      "links.clear"
+    ]),
+    consentLine: "Create, change and delete objects, and run actions on them, as you."
+  }),
+  "branches.read": Object.freeze({
+    capabilities: Object.freeze([
+      "branches.head",
+      "branches.diff",
+      "branches.history",
+      "branches.conflicts",
+      "branches.inspection",
+      "branches.pendingProposal",
+      "branches.proposalList",
+      "branches.proposalRead",
+      "branches.proposalDiff",
+      "branches.list",
+      "branches.impact"
+    ]),
+    consentLine: "Read your branches, their history and proposals."
+  }),
+  "branches.write": Object.freeze({
+    capabilities: Object.freeze([
+      "branches.create",
+      "branches.abandonment",
+      "branches.proposalSubmit",
+      "branches.proposalRefusal",
+      "branches.head",
+      "branches.diff",
+      "branches.history",
+      "branches.conflicts",
+      "branches.inspection",
+      "branches.pendingProposal",
+      "branches.proposalList",
+      "branches.proposalRead",
+      "branches.proposalDiff",
+      "branches.list",
+      "branches.impact"
+    ]),
+    consentLine: "Create and abandon branches, submit and refuse proposals, and read your branches, as you."
+  }),
   "branches.manage": Object.freeze({ capabilities: Object.freeze(["branches.merge", "branches.disposal", "objects.recovery"]), consentLine: "Merge branches into the branches and trunks you may change, delete branches and other refs, and recover changes, as you." }),
   offline_access: Object.freeze({ capabilities: Object.freeze([]), consentLine: "Stay connected when you are away, until you disconnect it." })
 });
 
+// packages/api-contract/dist/attachment-headers.js
+var ATTACHMENT_SELECTOR_HEADER = "x-oe2-selector";
+var ATTACHMENT_NAME_HEADER = "x-oe2-attachment-name";
+function attachmentNameHeader(name) {
+  return `UTF-8''${encodeURIComponent(name).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`)}`;
+}
+
+// packages/api-contract/dist/links.js
+var MAX_CLEAR_ENTRIES = 100;
+
+// packages/sdk-dispatch/dist/response.js
+function responseOf(status, body, reason, headers = {}) {
+  let read = false;
+  const claim = () => {
+    if (read)
+      throw new Error("the response body has already been read");
+    read = true;
+  };
+  const source = async function* () {
+    if (typeof body === "string")
+      yield Buffer.from(body, "utf8");
+    else if (body instanceof Uint8Array)
+      yield body;
+    else
+      yield* body;
+  };
+  const members = {
+    status,
+    ...reason === void 0 || reason === "" ? {} : { reason },
+    header: (name) => {
+      const entry2 = Object.entries(headers).find(([key]) => key.toLowerCase() === name.toLowerCase());
+      const value = entry2?.[1];
+      return value === void 0 ? null : typeof value === "string" || typeof value === "number" ? String(value) : value.join(", ");
+    },
+    bytes: () => {
+      claim();
+      let iterated = false;
+      return {
+        async *[Symbol.asyncIterator]() {
+          if (iterated)
+            throw new Error("the response body has already been read");
+          iterated = true;
+          yield* source();
+        }
+      };
+    },
+    json: async () => {
+      claim();
+      const chunks = [];
+      for await (const chunk of source())
+        chunks.push(chunk);
+      const value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+      return value;
+    }
+  };
+  return new Proxy(members, {
+    get(target, member) {
+      if (member === "status" || member === "reason" || member === "json" || member === "header" || member === "bytes") {
+        return target[member];
+      }
+      if (member === "then" || typeof member === "symbol")
+        return void 0;
+      throw new Error(`the response member ${String(member)} is not implemented`);
+    }
+  });
+}
+
 // packages/sdk-dispatch/dist/explain.js
+var BOUND_LABEL = {
+  "request-body": "the request-body size",
+  "query-limit": "the query page size",
+  "concurrency-per-principal": "the concurrent-request limit per principal",
+  "rate-per-principal": "the request-rate limit per principal",
+  "rate-per-address": "the request-rate limit per address",
+  "resolve-in-flight": "the concurrent name-resolution limit",
+  "pending-sign-ins": "the pending sign-in limit"
+};
 function explainKind(kind) {
   if (!Object.hasOwn(BY_KIND, kind)) {
     throw new Error(`the refusal kind ${JSON.stringify(kind)} has no entry in the refusal catalogue`);
   }
-  return Object.freeze({ explanation: BY_KIND[kind], explains: "kind" });
+  const explanation = BY_KIND[kind];
+  if (kind !== "bound-exceeded") {
+    return Object.freeze({ explanation, explains: "kind" });
+  }
+  return Object.freeze({ explanation: withMeaning(explanation, "The exceeded limit is the request-body, query-page, concurrency, request-rate, address-rate, resolve-capacity or pending-sign-in limit."), explains: "kind" });
+}
+function withMeaning(explanation, detail) {
+  return Object.freeze({ meaning: `${explanation.meaning} ${detail}`, next: explanation.next });
 }
 function explainClass(refusalClass) {
   return Object.freeze({ explanation: BY_CLASS[refusalClass], explains: "class" });
@@ -1101,17 +1538,36 @@ function explainResultRefusal(rule, refusalClass) {
   }
   return explainClass(refusalClass);
 }
-function explainRefused(refusal2) {
-  if (isRefusalRule(refusal2.rule)) {
-    return Object.freeze({ explanation: BY_RULE[refusal2.rule], explains: "rule" });
+function explainRefused(refusal2, request3) {
+  const apiRule = Object.hasOwn(BY_API_RULE, refusal2.rule);
+  const hasRuleExplanation = isRefusalRule(refusal2.rule) || apiRule;
+  const explanation = isRefusalRule(refusal2.rule) ? BY_RULE[refusal2.rule] : apiRule ? BY_API_RULE[refusal2.rule] : BY_CLASS[refusal2.class];
+  if (refusal2.rule === "ref-exists") {
+    const input = typeof request3 === "object" && request3 !== null && !Array.isArray(request3) && "input" in request3 ? request3.input : void 0;
+    const name = typeof input === "object" && input !== null && !Array.isArray(input) && "name" in input ? input.name : void 0;
+    if (typeof name === "string") {
+      return Object.freeze({ explanation: withMeaning(explanation, `The requested ref name is ${JSON.stringify(name)}.`), explains: hasRuleExplanation ? "rule" : "class" });
+    }
   }
-  return explainClass(refusal2.class);
+  if (refusal2.rule === "malformed-query" && refusal2.violations.length > 0) {
+    const paths = refusal2.violations.map((violation) => violation.path.join(".") || "the request").join(", ");
+    return Object.freeze({ explanation: withMeaning(explanation, `Invalid field path: ${paths}.`), explains: hasRuleExplanation ? "rule" : "class" });
+  }
+  if (refusal2.rule === "over-bound" && refusal2.violations.length > 0) {
+    const paths = refusal2.violations.map((violation) => violation.path.join(".") || "the request").join(", ");
+    return Object.freeze({ explanation: withMeaning(explanation, `The exceeded limit is ${paths}.`), explains: hasRuleExplanation ? "rule" : "class" });
+  }
+  return hasRuleExplanation ? Object.freeze({ explanation, explains: "rule" }) : explainClass(refusal2.class);
 }
-function explainedRefusalOf(refusal2) {
+function explainedRefusalOf(refusal2, request3) {
   if (refusal2.kind === "refused") {
-    return Object.freeze({ ...refusal2, ...explainRefused(refusal2) });
+    return Object.freeze({ ...refusal2, ...explainRefused(refusal2, request3) });
+  }
+  const explanation = explainKind(refusal2.kind);
+  if (refusal2.kind === "bound-exceeded") {
+    return Object.freeze({ ...refusal2, ...explanation, explanation: withMeaning(explanation.explanation, `The exceeded limit is ${BOUND_LABEL[refusal2.bound]}.`) });
   }
-  return Object.freeze({ ...refusal2, ...explainKind(refusal2.kind) });
+  return Object.freeze({ ...refusal2, ...explanation });
 }
 function isRefusedResult(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) && "kind" in value && value.kind === "refused";
@@ -1131,10 +1587,10 @@ function explainReplayedRefusal(replay) {
   }
   return explainResultRefusal(replay.rule, replay.class);
 }
-function explainedEnvelopeOf(envelope) {
+function explainedEnvelopeOf(envelope, request3) {
   if ("refusal" in envelope) {
     const stamped = envelope.correlationId;
-    return { version: envelope.version, refusal: explainedRefusalOf(envelope.refusal), correlationId: typeof stamped === "string" ? stamped : null };
+    return { version: envelope.version, refusal: explainedRefusalOf(envelope.refusal, request3), correlationId: typeof stamped === "string" ? stamped : null };
   }
   if (envelope.replayed === true) {
     const replay = envelope.result;
@@ -1164,39 +1620,12 @@ function unauthenticatedEnvelope() {
 
 // packages/sdk-dispatch/dist/socket-transport.js
 import { request } from "node:http";
-
-// packages/sdk-dispatch/dist/response.js
-function responseOf(status, text, reason) {
-  let read = false;
-  const members = {
-    status,
-    ...reason === void 0 || reason === "" ? {} : { reason },
-    json: async () => {
-      if (read) {
-        throw new Error("the response body has already been read");
-      }
-      read = true;
-      return JSON.parse(text);
-    }
-  };
-  return new Proxy(members, {
-    get(target, member) {
-      if (member === "status" || member === "json") {
-        return target[member];
-      }
-      if (member === "reason") {
-        return target.reason;
-      }
-      if (member === "then" || typeof member === "symbol") {
-        return void 0;
-      }
-      throw new Error(`the response member ${String(member)} is not implemented`);
-    }
-  });
-}
-
-// packages/sdk-dispatch/dist/socket-transport.js
 var REQUEST_DEADLINE_MS = 1e4;
+function requestDeadlineOf(path, method, override) {
+  if (override !== void 0)
+    return override;
+  return [...BINARY_REQUEST_ROUTE_NAMES, ...BINARY_RESPONSE_ROUTE_NAMES].some((name) => ROUTES[name].path === path && ROUTES[name].method === method) ? 12e4 : REQUEST_DEADLINE_MS;
+}
 var HostOutcomeUnknown = class extends Error {
   path;
   reason;
@@ -1234,11 +1663,11 @@ var INIT_MEMBERS = Object.freeze(["method", "headers", "body", "signal"]);
 function unsupported(member) {
   return new Error(`the socket-bound request function does not implement ${member}`);
 }
-function isPlainObject(value) {
+function isPlainObject2(value) {
   return typeof value === "object" && value !== null && Object.getPrototypeOf(value) === Object.prototype;
 }
 function checkedInit(init) {
-  if (!isPlainObject(init)) {
+  if (!isPlainObject2(init)) {
     throw unsupported("an init that is not a plain object");
   }
   for (const member of Object.keys(init)) {
@@ -1250,7 +1679,7 @@ function checkedInit(init) {
   if (typeof method !== "string") {
     throw unsupported("a method that is not a string");
   }
-  if (!isPlainObject(headers)) {
+  if (!isPlainObject2(headers)) {
     throw unsupported("headers that are not a plain object of strings");
   }
   const sent = {};
@@ -1260,8 +1689,8 @@ function checkedInit(init) {
     }
     sent[name] = value;
   }
-  if (body !== void 0 && typeof body !== "string") {
-    throw unsupported("a body that is not a string");
+  if (body !== void 0 && typeof body !== "string" && !(body instanceof Uint8Array)) {
+    throw unsupported("a body that is neither a string nor bytes");
   }
   if (signal !== void 0 && !(signal instanceof AbortSignal)) {
     throw unsupported("a signal that is not an AbortSignal");
@@ -1269,7 +1698,7 @@ function checkedInit(init) {
   return { method, headers: sent, body: body === void 0 ? null : body, signal: signal === void 0 ? null : signal };
 }
 var SOCKET_ORIGIN = "http://localhost";
-function createHostFetch(socketPath, deadlineMs = REQUEST_DEADLINE_MS) {
+function createHostFetch(socketPath, deadlineMs) {
   return async (input, init) => {
     if (typeof input !== "string") {
       throw unsupported("an input that is not a string URL");
@@ -1286,7 +1715,9 @@ function createHostFetch(socketPath, deadlineMs = REQUEST_DEADLINE_MS) {
       throw unsupported(`the protocol ${url.protocol}`);
     }
     const path = `${url.pathname}${url.search}`;
+    const requestDeadlineMs = requestDeadlineOf(url.pathname, checked.method, deadlineMs);
     return new Promise((resolve, reject) => {
+      let responseBody = null;
       let written = false;
       let settled = false;
       let deadline = null;
@@ -1306,14 +1737,28 @@ function createHostFetch(socketPath, deadlineMs = REQUEST_DEADLINE_MS) {
         });
       };
       const outgoing = request({ socketPath, method: checked.method, path, headers: checked.headers }, (incoming) => {
+        responseBody = incoming;
+        const binary = BINARY_RESPONSE_ROUTE_NAMES.some((name) => ROUTES[name].path === url.pathname && ROUTES[name].method === checked.method);
         const chunks = [];
-        incoming.on("data", (chunk) => {
-          chunks.push(chunk);
-        });
+        if (binary) {
+          if (incoming.statusCode === void 0) {
+            settle2(() => reject(new Error("the host's response carried no status")));
+            incoming.destroy();
+            return;
+          }
+          resolve(responseOf(incoming.statusCode, incoming, incoming.statusMessage, incoming.headers));
+        } else {
+          incoming.on("data", (chunk) => {
+            chunks.push(chunk);
+          });
+        }
         incoming.on("error", lost);
         incoming.on("close", () => {
           if (!incoming.complete) {
             lost(new Error("the connection closed before the whole response arrived"));
+          } else {
+            settle2(() => {
+            });
           }
         });
         incoming.on("end", () => {
@@ -1327,16 +1772,17 @@ function createHostFetch(socketPath, deadlineMs = REQUEST_DEADLINE_MS) {
               reject(new Error("the host's response carried no status"));
               return;
             }
-            resolve(responseOf(status, Buffer.concat(chunks).toString("utf8"), reason));
+            if (!binary)
+              resolve(responseOf(status, Buffer.concat(chunks), reason, incoming.headers));
           });
         });
       });
       deadline = setTimeout(() => {
-        settle2(() => {
-          reject(new HostOutcomeUnknown(path, "deadline", `the host did not answer ${path} within the deadline of ${String(deadlineMs)} ms`));
-        });
+        const error = new HostOutcomeUnknown(path, "deadline", `the host did not answer ${path} within the deadline of ${String(requestDeadlineMs)} ms`);
+        settle2(() => reject(error));
+        responseBody?.destroy(error);
         outgoing.destroy();
-      }, deadlineMs);
+      }, requestDeadlineMs);
       outgoing.on("finish", () => {
         written = true;
       });
@@ -1525,6 +1971,36 @@ async function readEnvelope(response, path) {
   }
   return envelope;
 }
+function isByteStream(value) {
+  return typeof value === "object" && value !== null && Symbol.asyncIterator in value && typeof value[Symbol.asyncIterator] === "function";
+}
+async function requestBodyOf(route2, body, headers) {
+  if (!isBinaryRequestRoute(route2))
+    return JSON.stringify(body);
+  if (typeof body !== "object" || body === null || !("selector" in body) || !("input" in body)) {
+    throw new TypeError("a binary request needs a selector and upload");
+  }
+  const input = body.input;
+  if (typeof input !== "object" || input === null || !("name" in input) || typeof input.name !== "string" || !("body" in input) || !isByteStream(input.body)) {
+    throw new TypeError("a binary upload needs a name and byte stream");
+  }
+  headers["content-type"] = "application/octet-stream";
+  headers[ATTACHMENT_SELECTOR_HEADER] = JSON.stringify(body.selector);
+  headers[ATTACHMENT_NAME_HEADER] = attachmentNameHeader(input.name);
+  const chunks = [];
+  let length = 0;
+  for await (const chunk of input.body) {
+    chunks.push(chunk);
+    length += chunk.byteLength;
+  }
+  const bytes = new Uint8Array(length);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return bytes;
+}
 async function call(transport, origin, route2, body, token, idempotencyKey) {
   const entry2 = ROUTES[route2];
   if (entry2.idempotent !== (idempotencyKey !== null)) {
@@ -1543,8 +2019,9 @@ async function call(transport, origin, route2, body, token, idempotencyKey) {
   if (idempotencyKey !== null) {
     headers[IDEMPOTENCY_HEADER] = idempotencyKey;
   }
-  const response = await transport(`${origin}${entry2.path}`, { method: entry2.method, headers, body: JSON.stringify(body) });
-  return explainedEnvelopeOf(await readEnvelope(response, entry2.path));
+  const sent = await requestBodyOf(route2, body, headers);
+  const response = await transport(`${origin}${entry2.path}`, { method: entry2.method, headers, body: sent });
+  return explainedEnvelopeOf(await readEnvelope(response, entry2.path), body);
 }
 var StreamedRouteRefusal = class extends Error {
   refusal;
@@ -1594,6 +2071,60 @@ async function* callStreamed(transport, origin, route2, body, token, signal) {
     yield JSON.parse(line);
   }
 }
+function attachmentDescriptorOf(response) {
+  const fault = () => new Error("the host answered /attachments/read with invalid attachment headers");
+  const sha256 = response.header("x-oe2-attachment-sha256");
+  const mediaType = response.header("content-type");
+  const length = response.header("content-length");
+  const disposition = response.header("content-disposition");
+  const encodedName = disposition === null ? null : /;\s*filename\*=UTF-8''([^;]+)/i.exec(disposition)?.[1];
+  if (sha256 === null || !/^[0-9a-f]{64}$/.test(sha256) || mediaType === null || mediaType.length === 0 || length === null || !/^(0|[1-9][0-9]*)$/.test(length) || !Number.isSafeInteger(Number(length)) || encodedName === null || encodedName === void 0)
+    throw fault();
+  let name;
+  try {
+    name = decodeURIComponent(encodedName);
+  } catch (error) {
+    if (!(error instanceof URIError))
+      throw error;
+    throw fault();
+  }
+  return { sha256, name, mediaType, bytes: Number(length) };
+}
+async function callAttachment(transport, origin, selector, input, token) {
+  if (token === null)
+    return unauthenticatedEnvelope();
+  const entry2 = ROUTES.readAttachment;
+  let response = await transport(`${origin}${entry2.path}`, {
+    method: entry2.method,
+    headers: {
+      "content-type": "application/json",
+      [VERSION_HEADER]: String(PROTOCOL_VERSION),
+      [TOKEN_HEADER]: `Bearer ${token}`
+    },
+    body: JSON.stringify({ selector, input })
+  });
+  if ([302, 303, 307].includes(response.status)) {
+    const location = response.header("location");
+    if (location === null)
+      throw new Error("the host answered /attachments/read with a redirect without Location");
+    const target = new URL(location, origin);
+    if (target.origin === new URL(origin).origin) {
+      throw new Error("the host answered /attachments/read with a same-origin redirect");
+    }
+    const redirected = await fetch(target.href, {
+      redirect: "follow",
+      credentials: "omit",
+      signal: AbortSignal.timeout(12e4)
+    });
+    if (redirected.body === null)
+      throw new Error("the attachment redirect answered without a body");
+    response = responseOf(redirected.status, redirected.body, redirected.statusText, Object.fromEntries(redirected.headers));
+  }
+  if (response.status !== 200)
+    return explainedEnvelopeOf(await readEnvelope(response, entry2.path));
+  const descriptor2 = attachmentDescriptorOf(response);
+  return { version: PROTOCOL_VERSION, result: { descriptor: descriptor2, body: response.bytes() } };
+}
 
 // packages/sdk-dispatch/dist/module-factory.js
 function freezeDoc(doc2) {
@@ -1618,13 +2149,13 @@ function methodOf(entry2, transport, origin, token) {
       headers[IDEMPOTENCY_HEADER] = idempotencyKey;
     }
     const response = await transport(`${origin}${entry2.path}`, { method: entry2.method, headers, body: JSON.stringify(body) });
-    return explainedEnvelopeOf(await readEnvelope(response, entry2.path));
+    return explainedEnvelopeOf(await readEnvelope(response, entry2.path), body);
   };
   return Object.freeze(Object.assign(send, { doc: freezeDoc(entry2.doc) }));
 }
-function createModuleFactory(entries6, transport, origin, token) {
+function createModuleFactory(entries7, transport, origin, token) {
   const byCapability = {};
-  for (const entry2 of entries6) {
+  for (const entry2 of entries7) {
     const methods = byCapability[entry2.capability] ?? {};
     methods[entry2.name] = methodOf(entry2, transport, origin, token);
     byCapability[entry2.capability] = methods;
@@ -1633,9 +2164,9 @@ function createModuleFactory(entries6, transport, origin, token) {
 }
 
 // packages/sdk-dispatch/dist/typed-client.js
-function createTypedClient(names, entries6, transport, origin, token) {
-  const factory = createModuleFactory(entries6, transport, origin, token);
-  const byName = new Map(entries6.map((entry2) => [entry2.name, entry2]));
+function createTypedClient(names, entries7, transport, origin, token) {
+  const factory = createModuleFactory(entries7, transport, origin, token);
+  const byName = new Map(entries7.map((entry2) => [entry2.name, entry2]));
   const client = {};
   for (const name of names) {
     const entry2 = byName.get(name);
@@ -1653,7 +2184,7 @@ function createTypedClient(names, entries6, transport, origin, token) {
 
 // packages/sdk-dispatch/dist/https-transport.js
 import { request as request2 } from "node:https";
-function createHttpsTransport(origin, options = {}, deadlineMs = REQUEST_DEADLINE_MS) {
+function createHttpsTransport(origin, options = {}, deadlineMs) {
   const originUrl = new URL(origin);
   if (originUrl.protocol !== "https:") {
     throw new Error(`the origin ${origin} is not an https: URL`);
@@ -1663,7 +2194,9 @@ function createHttpsTransport(origin, options = {}, deadlineMs = REQUEST_DEADLIN
     if (url.origin !== originUrl.origin) {
       throw new Error(`the request ${input} is not on the transport's own origin ${originUrl.origin}`);
     }
+    const requestDeadlineMs = requestDeadlineOf(url.pathname, init.method, deadlineMs);
     return new Promise((resolve, reject) => {
+      let responseBody = null;
       let written = false;
       let settled = false;
       let deadline = null;
@@ -1691,11 +2224,29 @@ function createHttpsTransport(origin, options = {}, deadlineMs = REQUEST_DEADLIN
         headers: init.headers,
         ca: options.ca
       }, (incoming) => {
+        responseBody = incoming;
+        const binary = BINARY_RESPONSE_ROUTE_NAMES.some((name) => ROUTES[name].path === url.pathname && ROUTES[name].method === init.method);
         const chunks = [];
-        incoming.on("data", (chunk) => {
-          chunks.push(chunk);
-        });
+        if (binary) {
+          if (incoming.statusCode === void 0) {
+            settle2(() => reject(new Error("the host's response carried no status")));
+            incoming.destroy();
+            return;
+          }
+          resolve(responseOf(incoming.statusCode, incoming, incoming.statusMessage, incoming.headers));
+        } else {
+          incoming.on("data", (chunk) => {
+            chunks.push(chunk);
+          });
+        }
         incoming.on("error", lost);
+        incoming.on("close", () => {
+          if (!incoming.complete)
+            lost(new Error("the connection closed before the whole response arrived"));
+          else
+            settle2(() => {
+            });
+        });
         incoming.on("end", () => {
           const status = incoming.statusCode;
           const reason = incoming.statusMessage;
@@ -1704,16 +2255,17 @@ function createHttpsTransport(origin, options = {}, deadlineMs = REQUEST_DEADLIN
               reject(new Error("the host's response carried no status"));
               return;
             }
-            resolve(responseOf(status, Buffer.concat(chunks).toString("utf8"), reason));
+            if (!binary)
+              resolve(responseOf(status, Buffer.concat(chunks), reason, incoming.headers));
           });
         });
       });
       deadline = setTimeout(() => {
-        settle2(() => {
-          reject(new HostOutcomeUnknown(path, "deadline", `the host did not answer ${path} within the deadline of ${String(deadlineMs)} ms`));
-        });
+        const error = new HostOutcomeUnknown(path, "deadline", `the host did not answer ${path} within the deadline of ${String(requestDeadlineMs)} ms`);
+        settle2(() => reject(error));
+        responseBody?.destroy(error);
         outgoing.destroy();
-      }, deadlineMs);
+      }, requestDeadlineMs);
       outgoing.on("finish", () => {
         written = true;
       });
@@ -1760,6 +2312,9 @@ var ADMIN_ROUTE_NAMES = Object.freeze([
   "grantMembership",
   "revokeMembership",
   "setModelConfiguration",
+  "setModelId",
+  "readModelConfigurationStatus",
+  "readAccount",
   "readDisplayNames",
   "listMembers",
   "changeMembershipRole",
@@ -1778,6 +2333,7 @@ var ADMIN_ROUTE_NAMES = Object.freeze([
   "readWebOrigin",
   "readCallerCapabilities",
   "listAudit",
+  "listOrganisationAudit",
   "createProject",
   "createOrganisation",
   "addRefRule",
@@ -1847,6 +2403,7 @@ var BRANCHES_ROUTE_NAMES = Object.freeze([
   "refuseProposal",
   "readBranchDiff",
   "diffBranches",
+  "readChangeImpact",
   "readBranchHistory",
   "readRefHead",
   "inspectBranchOperation",
@@ -1915,14 +2472,17 @@ function exploreViewAddress(address, state) {
   if (state.setId !== void 0 && state.setId !== null && state.setId.length > 0) {
     query2.set("set", state.setId);
   }
-  if (state.typeKey !== null) {
-    query2.set("type", state.typeKey);
-  }
+  const types = state.typeKeys ?? (state.typeKey === null ? [] : [state.typeKey]);
+  for (const key of [...new Set(types)].sort())
+    query2.append("type", key);
   if (state.objectId !== null) {
     query2.set("object", state.objectId);
   }
   return query2.size === 0 ? path : `${path}?${query2.toString()}`;
 }
+function exploreOpenObjectAddress(address, objectId) {
+  return withViewState(typePageAddress(address), { object: objectId });
+}
 function projectAddress(organisationId, projectId, ref) {
   return withSubject(projectBase(organisationId, projectId), { ref, q: null });
 }
@@ -1945,6 +2505,19 @@ function settingsAddress(organisationId, page) {
 function proposalAddress(organisationId, projectId, proposalId, ref) {
   return withSubject(`${projectBase(organisationId, projectId)}/reviews/${encodeURIComponent(proposalId)}`, { ref, q: null });
 }
+function withViewState(address, state) {
+  const split = address.indexOf("?");
+  const path = split === -1 ? address : address.slice(0, split);
+  const query2 = new URLSearchParams(split === -1 ? "" : address.slice(split + 1));
+  for (const [name, value] of Object.entries(state)) {
+    if (value === null || value === "") {
+      query2.delete(name);
+    } else {
+      query2.set(name, value);
+    }
+  }
+  return query2.size === 0 ? path : `${path}?${query2.toString()}`;
+}
 function branchDiffAddress(organisationId, projectId, ref) {
   return withSubject(`${projectBase(organisationId, projectId)}/branches/diff`, { ref, q: null });
 }
@@ -1965,12 +2538,12 @@ function parseLinkSubject(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return null;
   }
-  const record = value;
-  const { kind } = record;
-  const keys = Object.keys(record);
+  const record2 = value;
+  const { kind } = record2;
+  const keys = Object.keys(record2);
   const only = (...fields) => keys.length === fields.length + 1 && keys.includes("kind") && fields.every((field) => keys.includes(field));
   const text = (field) => {
-    const entry2 = record[field];
+    const entry2 = record2[field];
     return typeof entry2 === "string" && entry2.length > 0 ? entry2 : null;
   };
   const identifier = (field) => {
@@ -2046,9 +2619,23 @@ function linkPath(organisationId, projectId, subject, ref) {
   }
 }
 
+// packages/objects-sdk/dist/display.js
+function displayPropertyValue(value, definition) {
+  if (typeof value === "number" && typeof definition === "object" && definition !== null && "kind" in definition && (definition.kind === "number" || definition.kind === "integer") && "unit" in definition && typeof definition.unit === "string") {
+    return `${value} ${definition.unit}`;
+  }
+  if (typeof value === "string")
+    return value;
+  if (value === void 0)
+    return "absent";
+  return JSON.stringify(value);
+}
+
 // packages/objects-sdk/dist/transport-client.js
 var OBJECTS_ROUTE_ENTRIES = routeEntriesOf("objects-sdk");
 var OBJECTS_ROUTE_NAMES = [
+  "stageAttachment",
+  "readAttachment",
   "createObjectSet",
   "listObjectSets",
   "readObjectSet",
@@ -2056,6 +2643,7 @@ var OBJECTS_ROUTE_NAMES = [
   "deleteObjectSet",
   "readObject",
   "queryObjects",
+  "queryRows",
   "aggregateObjects",
   "discoverVerbs",
   "readHistory",
@@ -2070,6 +2658,8 @@ var OBJECTS_ROUTE_NAMES = [
   "queryGraph",
   "readStructure",
   "findPaths",
+  "readLinkStatus",
+  "clearLinks",
   "searchPeople",
   "searchObjectReaders",
   "listSubscribers",
@@ -2081,19 +2671,627 @@ var OBJECTS_ROUTE_NAMES = [
   "listApps",
   "setObjectLock"
 ];
+var JSON_OBJECTS_ROUTE_NAMES = OBJECTS_ROUTE_NAMES.filter((name) => !isBinaryRequestRoute(name) && !BINARY_RESPONSE_ROUTE_NAMES.some((route2) => route2 === name));
 function entries4() {
-  return OBJECTS_ROUTE_NAMES.map((name) => ROUTES[name]);
+  return JSON_OBJECTS_ROUTE_NAMES.map((name) => ROUTES[name]);
 }
 function createObjectsTransportClient(transport, origin, token) {
-  return createTypedClient(OBJECTS_ROUTE_NAMES, entries4(), transport, origin, token);
+  return Object.freeze({
+    ...createTypedClient(JSON_OBJECTS_ROUTE_NAMES, entries4(), transport, origin, token),
+    readAttachment: (selector, input) => callAttachment(transport, origin, selector, input, token),
+    stageAttachment: (selector, file) => call(transport, origin, "stageAttachment", {
+      selector,
+      input: { name: file.name, body: (async function* () {
+        yield file.bytes;
+      })() }
+    }, token, null)
+  });
 }
 
 // packages/schema-language/dist/version.js
 var SCHEMA_LANGUAGE_VERSION = "1";
 
+// packages/schema-language/dist/attachment-classes.js
+var ATTACHMENT_CLASSES = {
+  image: [
+    { mediaType: "image/png", extensions: [".png"] },
+    { mediaType: "image/jpeg", extensions: [".jpg", ".jpeg"] },
+    { mediaType: "image/webp", extensions: [".webp"] },
+    { mediaType: "image/gif", extensions: [".gif"] }
+  ],
+  pdf: [{ mediaType: "application/pdf", extensions: [".pdf"] }],
+  step: [{ mediaType: "model/step", extensions: [".step", ".stp"] }],
+  mesh: [{ mediaType: "model/stl", extensions: [".stl"] }],
+  text: [{
+    mediaType: "text/plain; charset=utf-8",
+    extensions: [
+      ".txt",
+      ".md",
+      ".csv",
+      ".json",
+      ".yaml",
+      ".yml",
+      ".toml",
+      ".ini",
+      ".log",
+      ".xml",
+      ".ts",
+      ".tsx",
+      ".js",
+      ".py",
+      ".c",
+      ".h",
+      ".cpp",
+      ".hpp",
+      ".rs",
+      ".go",
+      ".java",
+      ".m",
+      ".sql",
+      ".sh"
+    ]
+  }]
+};
+
+// packages/schema-language/dist/datetime.js
+var DATETIME_PATTERN = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,3}))?(?:(Z)|([+-])(\d{2}):(\d{2}))$/;
+var MILLISECONDS_PER_MINUTE = 6e4;
+function normaliseDatetime(text) {
+  const match = DATETIME_PATTERN.exec(text);
+  if (match === null) {
+    return void 0;
+  }
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = Number(match[6]);
+  const millisecond = match[7] === void 0 ? 0 : Number(match[7].padEnd(3, "0"));
+  if (minute > 59 || second > 59) {
+    return void 0;
+  }
+  const local = /* @__PURE__ */ new Date(0);
+  local.setUTCFullYear(year, month - 1, day);
+  local.setUTCHours(hour, minute, second, millisecond);
+  if (local.getUTCMonth() !== month - 1 || local.getUTCDate() !== day) {
+    return void 0;
+  }
+  let offsetMinutes = 0;
+  if (match[8] === void 0) {
+    const offsetHour = Number(match[10]);
+    const offsetMinute = Number(match[11]);
+    if (offsetHour > 23 || offsetMinute > 59) {
+      return void 0;
+    }
+    offsetMinutes = (match[9] === "-" ? -1 : 1) * (offsetHour * 60 + offsetMinute);
+  }
+  const instant = new Date(local.getTime() - offsetMinutes * MILLISECONDS_PER_MINUTE);
+  if (instant.getUTCFullYear() < 0 || instant.getUTCFullYear() > 9999) {
+    return void 0;
+  }
+  return instant.toISOString();
+}
+
+// packages/schema-language/dist/identifiers.js
+function normaliseIdentifier(value) {
+  return value.normalize("NFC").toLowerCase();
+}
+var PROTOTYPE_AFFECTING_KEYS = ["__proto__", "constructor", "prototype"];
+
+// packages/schema-language/dist/units.js
+function unit(dimension, factor, affine = false) {
+  return Object.freeze({ dimension, factor, affine });
+}
+var UNITS = Object.freeze({
+  "1": unit("dimensionless", 1),
+  "%": unit("dimensionless", 0.01),
+  m: unit("length", 1),
+  km: unit("length", 1e3),
+  cm: unit("length", 0.01),
+  mm: unit("length", 1e-3),
+  um: unit("length", 1e-6),
+  nm: unit("length", 1e-9),
+  kg: unit("mass", 1),
+  g: unit("mass", 1e-3),
+  mg: unit("mass", 1e-6),
+  ug: unit("mass", 1e-9),
+  s: unit("time", 1),
+  ms: unit("time", 1e-3),
+  us: unit("time", 1e-6),
+  ns: unit("time", 1e-9),
+  min: unit("time", 60),
+  h: unit("time", 3600),
+  A: unit("current", 1),
+  kA: unit("current", 1e3),
+  mA: unit("current", 1e-3),
+  uA: unit("current", 1e-6),
+  K: unit("temperature", 1),
+  // The factor is the linear scale only; an affine unit is convertible to itself alone.
+  degC: unit("temperature", 1, true),
+  degF: unit("temperature", 0.5555555555555556, true),
+  mol: unit("amount", 1),
+  mmol: unit("amount", 1e-3),
+  cd: unit("luminous-intensity", 1),
+  rad: unit("angle", 1),
+  sr: unit("solid-angle", 1),
+  "rad/s": unit("angular-speed", 1),
+  rpm: unit("angular-speed", 0.10471975511965977),
+  Hz: unit("frequency", 1),
+  kHz: unit("frequency", 1e3),
+  MHz: unit("frequency", 1e6),
+  GHz: unit("frequency", 1e9),
+  N: unit("force", 1),
+  kN: unit("force", 1e3),
+  mN: unit("force", 1e-3),
+  Pa: unit("pressure", 1),
+  kPa: unit("pressure", 1e3),
+  MPa: unit("pressure", 1e6),
+  GPa: unit("pressure", 1e9),
+  bar: unit("pressure", 1e5),
+  J: unit("energy", 1),
+  kJ: unit("energy", 1e3),
+  MJ: unit("energy", 1e6),
+  W: unit("power", 1),
+  mW: unit("power", 1e-3),
+  kW: unit("power", 1e3),
+  MW: unit("power", 1e6),
+  C: unit("charge", 1),
+  mC: unit("charge", 1e-3),
+  V: unit("voltage", 1),
+  mV: unit("voltage", 1e-3),
+  uV: unit("voltage", 1e-6),
+  kV: unit("voltage", 1e3),
+  F: unit("capacitance", 1),
+  mF: unit("capacitance", 1e-3),
+  uF: unit("capacitance", 1e-6),
+  nF: unit("capacitance", 1e-9),
+  pF: unit("capacitance", 1e-12),
+  ohm: unit("resistance", 1),
+  kohm: unit("resistance", 1e3),
+  Mohm: unit("resistance", 1e6),
+  S: unit("conductance", 1),
+  mS: unit("conductance", 1e-3),
+  uS: unit("conductance", 1e-6),
+  Wb: unit("magnetic-flux", 1),
+  mWb: unit("magnetic-flux", 1e-3),
+  T: unit("magnetic-flux-density", 1),
+  mT: unit("magnetic-flux-density", 1e-3),
+  uT: unit("magnetic-flux-density", 1e-6),
+  H: unit("inductance", 1),
+  mH: unit("inductance", 1e-3),
+  uH: unit("inductance", 1e-6),
+  lm: unit("luminous-flux", 1),
+  lx: unit("illuminance", 1),
+  Bq: unit("activity", 1),
+  Gy: unit("absorbed-dose", 1),
+  Sv: unit("equivalent-dose", 1),
+  kat: unit("catalytic-activity", 1)
+});
+function isUnitSymbol(value) {
+  return typeof value === "string" && Object.hasOwn(UNITS, value);
+}
+
+// packages/schema-language/dist/validate-value.js
+var RULE_TYPE_MISMATCH = "type-mismatch";
+var RULE_UNDECLARED_PROPERTY = "undeclared-property";
+var RULE_MISSING_REQUIRED_PROPERTY = "missing-required-property";
+var RULE_ENUM_VIOLATION = "enum-violation";
+var RULE_ARRAY_BOUND_EXCEEDED = "array-bound-exceeded";
+var RULE_INVALID_DATETIME = "invalid-datetime";
+function validateValue(schema, value) {
+  const violations = [];
+  walk(schema, value, [], violations);
+  return violations.length === 0 ? { ok: true } : { ok: false, violations };
+}
+function walk(schema, value, path, violations, ownerProperties) {
+  switch (schema.kind) {
+    case "bound": {
+      checkBound(value, path, violations, ownerProperties);
+      return;
+    }
+    case "attachment": {
+      if (!isAttachmentDescriptor(value))
+        violations.push({ path, rule: "invalid-attachment" });
+      return;
+    }
+    case "null": {
+      if (value !== null) {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+      }
+      return;
+    }
+    case "boolean": {
+      if (typeof value !== "boolean") {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+      }
+      return;
+    }
+    case "string":
+    case "person": {
+      if (typeof value !== "string") {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+      }
+      return;
+    }
+    case "datetime": {
+      if (typeof value !== "string") {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+      } else if (normaliseDatetime(value) === void 0) {
+        violations.push({ path, rule: RULE_INVALID_DATETIME });
+      }
+      return;
+    }
+    case "number": {
+      if (typeof value !== "number" || !Number.isFinite(value)) {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+      }
+      return;
+    }
+    case "integer": {
+      if (typeof value !== "number" || !Number.isInteger(value)) {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+      }
+      return;
+    }
+    case "enum": {
+      if (!schema.members.includes(value)) {
+        violations.push({ path, rule: RULE_ENUM_VIOLATION });
+      }
+      return;
+    }
+    case "array": {
+      if (!Array.isArray(value)) {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+        return;
+      }
+      if (value.length > schema.maxItems) {
+        violations.push({ path, rule: RULE_ARRAY_BOUND_EXCEEDED });
+      }
+      value.forEach((item, index) => {
+        walk(schema.items, item, [...path, String(index)], violations, ownerProperties);
+      });
+      return;
+    }
+    case "object": {
+      if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        violations.push({ path, rule: RULE_TYPE_MISMATCH });
+        return;
+      }
+      const record2 = value;
+      for (const key of schema.required) {
+        if (!Object.prototype.hasOwnProperty.call(record2, key)) {
+          violations.push({ path: [...path, key], rule: RULE_MISSING_REQUIRED_PROPERTY });
+        }
+      }
+      for (const key of Object.keys(record2)) {
+        if (!Object.prototype.hasOwnProperty.call(schema.properties, key)) {
+          violations.push({ path: [...path, key], rule: RULE_UNDECLARED_PROPERTY });
+          continue;
+        }
+        walk(schema.properties[key], record2[key], [...path, key], violations, schema.properties);
+      }
+      return;
+    }
+  }
+}
+var BOUND_FIELDS = ["quantity", "comparison", "value", "unit", "tolerance", "over"];
+var BOUND_COMPARISONS = ["<", "<=", ">", ">=", "within"];
+var BOUND_AGGREGATES = ["each", "sum", "min", "max", "count"];
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isPropertyKey(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= 64 && !PROTOTYPE_AFFECTING_KEYS.includes(value);
+}
+function checkBound(value, path, violations, ownerProperties) {
+  if (!isRecord(value)) {
+    violations.push({ path, rule: "invalid-bound" });
+    return;
+  }
+  for (const key of Object.keys(value)) {
+    if (!BOUND_FIELDS.includes(key))
+      violations.push({ path: [...path, key], rule: RULE_UNDECLARED_PROPERTY });
+  }
+  if (!Object.hasOwn(value, "over") || typeof value.over !== "string" || !BOUND_AGGREGATES.includes(value.over)) {
+    violations.push({ path: [...path, "over"], rule: "invalid-bound-over" });
+  }
+  if (!Object.hasOwn(value, "comparison") || typeof value.comparison !== "string" || !BOUND_COMPARISONS.includes(value.comparison)) {
+    violations.push({ path: [...path, "comparison"], rule: "invalid-bound-comparison" });
+  }
+  if (value.over === "count") {
+    if (Object.hasOwn(value, "quantity")) {
+      violations.push({ path: [...path, "quantity"], rule: "count-bound-quantity" });
+    }
+  } else if (!Object.hasOwn(value, "quantity") || !isPropertyKey(value.quantity)) {
+    violations.push({ path: [...path, "quantity"], rule: "invalid-bound-quantity" });
+  }
+  if (!Object.hasOwn(value, "value")) {
+    violations.push({ path: [...path, "value"], rule: "invalid-bound-value" });
+  } else if (isRecord(value.value)) {
+    checkBoundReference(value.value, value.over === "count", path, violations, ownerProperties);
+    if (Object.hasOwn(value, "unit"))
+      violations.push({ path: [...path, "unit"], rule: "bound-reference-unit" });
+  } else if (typeof value.value !== "number" || !Number.isFinite(value.value)) {
+    violations.push({ path: [...path, "value"], rule: "invalid-bound-value" });
+  } else if (value.over === "count") {
+    if (Object.hasOwn(value, "unit") && value.unit !== "1") {
+      violations.push({ path: [...path, "unit"], rule: "count-bound-unit" });
+    }
+  } else if (!Object.hasOwn(value, "unit") || !isUnitSymbol(value.unit)) {
+    violations.push({ path: [...path, "unit"], rule: "unknown-unit" });
+  }
+  if (value.comparison === "within") {
+    if (!Object.hasOwn(value, "tolerance")) {
+      violations.push({ path: [...path, "tolerance"], rule: "missing-bound-tolerance" });
+    } else if (typeof value.tolerance !== "number" || !Number.isFinite(value.tolerance) || value.tolerance < 0) {
+      violations.push({ path: [...path, "tolerance"], rule: "invalid-bound-tolerance" });
+    }
+  } else if (Object.hasOwn(value, "tolerance")) {
+    violations.push({ path: [...path, "tolerance"], rule: "unexpected-bound-tolerance" });
+  }
+}
+function checkBoundReference(reference, count, path, violations, ownerProperties) {
+  if (Object.keys(reference).length !== 1 || !Object.hasOwn(reference, "property") || !isPropertyKey(reference.property) || ownerProperties === void 0 || !Object.hasOwn(ownerProperties, reference.property)) {
+    violations.push({ path: [...path, "value"], rule: "invalid-bound-reference" });
+    return;
+  }
+  const property = ownerProperties[reference.property];
+  if (property.kind !== "number" && property.kind !== "integer") {
+    violations.push({ path: [...path, "value"], rule: "invalid-bound-reference" });
+  } else if (count && property.unit !== void 0 && property.unit !== "1") {
+    violations.push({ path: [...path, "value"], rule: "count-bound-unit" });
+  }
+}
+function isAttachmentDescriptor(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value) || !("sha256" in value) || !("name" in value) || !("mediaType" in value) || !("bytes" in value))
+    return false;
+  if (Object.keys(value).length !== 4 || !["sha256", "name", "mediaType", "bytes"].every((key) => Object.hasOwn(value, key)) || typeof value.sha256 !== "string" || value.sha256.length !== 64 || !/^[a-f0-9]{64}$/.test(value.sha256) || typeof value.name !== "string" || value.name.length < 1 || value.name.length > 255 || value.name.startsWith(".") || hasForbiddenNameCharacter(value.name) || typeof value.mediaType !== "string" || typeof value.bytes !== "number" || !Number.isSafeInteger(value.bytes) || value.bytes <= 0 || value.bytes > 26214400)
+    return false;
+  const name = value.name.toLowerCase();
+  return Object.values(ATTACHMENT_CLASSES).some((formats) => formats.some((format) => format.mediaType === value.mediaType && format.extensions.some((extension) => name.endsWith(extension))));
+}
+function hasForbiddenNameCharacter(name) {
+  for (let index = 0; index < name.length; index++) {
+    const code = name.charCodeAt(index);
+    if (name[index] === "/" || name[index] === "\\" || code < 32 || code >= 127 && code <= 159)
+      return true;
+  }
+  return false;
+}
+
+// packages/schema-language/dist/language-version.js
+var KINDS_VERSION_1 = Object.freeze([
+  "null",
+  "boolean",
+  "string",
+  "number",
+  "integer",
+  "person",
+  "enum",
+  "array",
+  "object"
+]);
+var KINDS_VERSION_2 = Object.freeze([...KINDS_VERSION_1, "datetime"]);
+var KINDS_VERSION_3 = Object.freeze([...KINDS_VERSION_2, "attachment"]);
+var KINDS_VERSION_4 = Object.freeze([...KINDS_VERSION_3, "bound"]);
+var KINDS_BY_LANGUAGE_VERSION = /* @__PURE__ */ new Map([
+  ["1", KINDS_VERSION_1],
+  ["2", KINDS_VERSION_2],
+  ["3", KINDS_VERSION_3],
+  ["4", KINDS_VERSION_4]
+]);
+function schemaKindsFor(languageVersion) {
+  return KINDS_BY_LANGUAGE_VERSION.get(languageVersion);
+}
+
+// packages/schema-language/dist/canonical-json.js
+function canonicalJson(value) {
+  return JSON.stringify(sortKeys(value, /* @__PURE__ */ new Set()));
+}
+function utf8ByteLength(text) {
+  return new TextEncoder().encode(text).length;
+}
+function sortKeys(value, ancestors) {
+  if (Array.isArray(value)) {
+    if (ancestors.has(value)) {
+      return null;
+    }
+    ancestors.add(value);
+    const sorted = value.map((item) => sortKeys(item, ancestors));
+    ancestors.delete(value);
+    return sorted;
+  }
+  if (value !== null && typeof value === "object") {
+    if (ancestors.has(value)) {
+      return null;
+    }
+    ancestors.add(value);
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+      sorted[key] = sortKeys(value[key], ancestors);
+    }
+    ancestors.delete(value);
+    return sorted;
+  }
+  return value;
+}
+
+// packages/schema-language/dist/limits.js
+var LIMITS_VERSION_1 = {
+  maxDocumentBytes: 65536,
+  maxDepth: 8,
+  maxPropertiesPerObject: 256,
+  maxArrayItems: 1024,
+  maxIdentifierLength: 64
+};
+var LIMITS_BY_LANGUAGE_VERSION = /* @__PURE__ */ new Map([
+  ["1", LIMITS_VERSION_1],
+  ["2", LIMITS_VERSION_1],
+  ["3", LIMITS_VERSION_1],
+  ["4", LIMITS_VERSION_1]
+]);
+function limitsForLanguageVersion(languageVersion) {
+  return LIMITS_BY_LANGUAGE_VERSION.get(languageVersion);
+}
+
 // packages/schema-language/dist/validate-schema.js
-var SCHEMA_KINDS = Object.freeze(["null", "boolean", "string", "number", "integer", "person", "enum", "array", "object"]);
-var VALID_KINDS = new Set(SCHEMA_KINDS);
+var RULE_UNKNOWN_LANGUAGE_VERSION = "unknown-language-version";
+var RULE_SIZE = "size-limit";
+var RULE_DEPTH = "depth-limit";
+var RULE_FIELD_COUNT = "field-count-limit";
+var RULE_ARRAY_BOUND = "array-bound-limit";
+var RULE_IDENTIFIER_LENGTH = "identifier-length-limit";
+var RULE_PROTOTYPE_KEY = "prototype-key";
+var RULE_COLLISION = "identifier-collision";
+var RULE_RECURSIVE = "recursive-reference";
+var RULE_UNKNOWN_KIND = "unknown-kind";
+var RULE_MALFORMED_SCHEMA = "malformed-schema";
+var RULE_UNDECLARED_REQUIRED_KEY = "undeclared-required-key";
+function validateSchema(schema, languageVersion, category) {
+  const limits = limitsForLanguageVersion(languageVersion);
+  const kinds = schemaKindsFor(languageVersion);
+  if (limits === void 0 || kinds === void 0) {
+    return { ok: false, violations: [{ path: [], rule: RULE_UNKNOWN_LANGUAGE_VERSION }] };
+  }
+  if (typeof schema !== "object" || schema === null || Array.isArray(schema)) {
+    return { ok: false, violations: [{ path: [], rule: RULE_MALFORMED_SCHEMA }] };
+  }
+  const sizeBytes = utf8ByteLength(canonicalJson(schema));
+  if (sizeBytes > limits.maxDocumentBytes) {
+    return { ok: false, violations: [{ path: [], rule: RULE_SIZE }] };
+  }
+  const violations = [];
+  walk2(schema, [], 1, /* @__PURE__ */ new Set(), limits, kinds, category, violations);
+  return violations.length === 0 ? { ok: true, schema } : { ok: false, violations };
+}
+function walk2(node, path, depth, ancestors, limits, kinds, category, violations) {
+  if (ancestors.has(node)) {
+    violations.push({ path, rule: RULE_RECURSIVE });
+    return;
+  }
+  if (depth > limits.maxDepth) {
+    violations.push({ path, rule: RULE_DEPTH });
+    return;
+  }
+  if (typeof node !== "object" || node === null || Array.isArray(node)) {
+    violations.push({ path, rule: RULE_MALFORMED_SCHEMA });
+    return;
+  }
+  const record2 = node;
+  const kind = record2.kind;
+  if (typeof kind !== "string" || !kinds.includes(kind)) {
+    violations.push({ path, rule: RULE_UNKNOWN_KIND, allowed: kinds });
+    return;
+  }
+  ancestors.add(node);
+  try {
+    if (Object.hasOwn(record2, "unit")) {
+      if (!kinds.includes("bound")) {
+        violations.push({ path: [...path, "unit"], rule: "unit-language-version" });
+      } else if (kind !== "number" && kind !== "integer") {
+        violations.push({ path: [...path, "unit"], rule: "unit-kind" });
+      } else if (!isUnitSymbol(record2.unit)) {
+        violations.push({ path: [...path, "unit"], rule: "unknown-unit" });
+      }
+    }
+    if (kind === "bound") {
+      const topLevel = path.length === 2 && path[0] === "properties";
+      const topLevelArray = path.length === 3 && path[0] === "properties" && path[2] === "items";
+      if (category !== "object" || !topLevel && !topLevelArray) {
+        violations.push({ path, rule: "bound-position" });
+      }
+      return;
+    }
+    if (kind === "attachment") {
+      if (category !== "object" || path.length !== 2 || path[0] !== "properties") {
+        violations.push({ path, rule: "attachment-position" });
+      }
+      if (!Array.isArray(record2.accept) || record2.accept.length === 0 || record2.accept.some((entry2) => typeof entry2 !== "string" || !Object.hasOwn(ATTACHMENT_CLASSES, entry2))) {
+        violations.push({ path, rule: RULE_MALFORMED_SCHEMA });
+      }
+      return;
+    }
+    if (kind === "object") {
+      const properties = record2.properties;
+      if (typeof properties !== "object" || properties === null || Array.isArray(properties)) {
+        violations.push({ path, rule: RULE_MALFORMED_SCHEMA });
+        return;
+      }
+      if (!Array.isArray(record2.required) || !record2.required.every((key) => typeof key === "string")) {
+        violations.push({ path, rule: RULE_MALFORMED_SCHEMA });
+        return;
+      }
+      const propertyRecord = properties;
+      const keys = Object.keys(propertyRecord);
+      if (keys.length > limits.maxPropertiesPerObject) {
+        violations.push({ path, rule: RULE_FIELD_COUNT });
+      }
+      checkIdentifiers(keys, path, limits, violations);
+      for (const requiredKey of record2.required) {
+        if (!keys.includes(requiredKey)) {
+          violations.push({ path: [...path, requiredKey], rule: RULE_UNDECLARED_REQUIRED_KEY });
+        }
+      }
+      for (const key of keys) {
+        walk2(propertyRecord[key], [...path, "properties", key], depth + 1, ancestors, limits, kinds, category, violations);
+      }
+      return;
+    }
+    if (kind === "array") {
+      if (typeof record2.maxItems !== "number" || !Number.isFinite(record2.maxItems)) {
+        violations.push({ path, rule: RULE_MALFORMED_SCHEMA });
+        return;
+      }
+      if (record2.maxItems > limits.maxArrayItems) {
+        violations.push({ path, rule: RULE_ARRAY_BOUND });
+      }
+      walk2(record2.items, [...path, "items"], depth + 1, ancestors, limits, kinds, category, violations);
+      return;
+    }
+    if (kind === "enum") {
+      if (!Array.isArray(record2.members) || !record2.members.every((member) => typeof member === "string" || typeof member === "number" && Number.isFinite(member))) {
+        violations.push({ path, rule: RULE_MALFORMED_SCHEMA });
+        return;
+      }
+      const stringMembers = record2.members.filter((member) => typeof member === "string");
+      checkIdentifiers(stringMembers, [...path, "members"], limits, violations);
+      return;
+    }
+  } finally {
+    ancestors.delete(node);
+  }
+}
+function checkIdentifiers(names, path, limits, violations) {
+  const byNormalised = /* @__PURE__ */ new Map();
+  for (const name of names) {
+    if (name.length > limits.maxIdentifierLength) {
+      violations.push({ path: [...path, name], rule: RULE_IDENTIFIER_LENGTH });
+    }
+    if (PROTOTYPE_AFFECTING_KEYS.includes(name)) {
+      violations.push({ path: [...path, name], rule: RULE_PROTOTYPE_KEY });
+    }
+    const normalised = normaliseIdentifier(name);
+    const group = byNormalised.get(normalised);
+    if (group) {
+      group.push(name);
+    } else {
+      byNormalised.set(normalised, [name]);
+    }
+  }
+  for (const group of byNormalised.values()) {
+    if (group.length > 1) {
+      for (const name of group) {
+        violations.push({ path: [...path, name], rule: RULE_COLLISION });
+      }
+    }
+  }
+}
+
+// packages/schema-language/dist/object-schema.js
+function objectSchemaOf(propertyDefinitions, requiredPropertyKeys) {
+  return { kind: "object", properties: propertyDefinitions, required: requiredPropertyKeys };
+}
 
 // packages/schema-language/dist/view-catalogue.js
 var MAX_ELEMENT_CHILDREN = 100;
@@ -2185,10 +3383,42 @@ var VIEW_CATALOGUE = deepFreeze2({
       views: ["object"],
       role: "leaf",
       props: {
-        property: { kind: "string", required: true, minLength: 1, maxLength: 64, propertyKey: true, error: "Unknown geometry property" },
+        property: {
+          kind: "string",
+          required: true,
+          minLength: 1,
+          maxLength: 64,
+          propertyKey: true,
+          attachmentClass: "mesh",
+          error: "Unknown geometry property"
+        },
         label: { kind: "string", minLength: 1, maxLength: 160, error: "Invalid geometry label" }
       }
     },
+    ImageViewer: {
+      views: ["object"],
+      role: "leaf",
+      props: {
+        property: { kind: "string", required: true, minLength: 1, maxLength: 64, propertyKey: true, attachmentClass: "image", error: "Unknown image property" },
+        alt: { kind: "string", required: true, minLength: 1, maxLength: 500, error: "Invalid alternative text" }
+      }
+    },
+    PdfViewer: {
+      views: ["object"],
+      role: "leaf",
+      props: {
+        property: {
+          kind: "string",
+          required: true,
+          minLength: 1,
+          maxLength: 64,
+          propertyKey: true,
+          attachmentClass: "pdf",
+          error: "Unknown PDF property"
+        },
+        label: { kind: "string", minLength: 1, maxLength: 160, error: "Invalid PDF label" }
+      }
+    },
     AppBody: {
       views: ["app", "page"],
       role: "container",
@@ -2284,11 +3514,22 @@ var VIEW_CATALOGUE = deepFreeze2({
     Stat: {
       views: ["object", "app", "page"],
       role: "leaf",
+      exactlyOneOf: { props: ["value", "aggregate"], error: "Invalid stat source" },
       props: {
         label: { kind: "string", required: true, minLength: 1, maxLength: 160, error: "Invalid stat label" },
-        value: { kind: "scalar", required: true, maxLength: 160, bindable: "read", error: "Invalid stat value" },
+        value: { kind: "scalar", maxLength: 160, bindable: "read", error: "Invalid stat value" },
         unit: { kind: "string", minLength: 1, maxLength: 32, error: "Invalid unit" },
-        query: { kind: "string", minLength: 1, maxLength: 64, part: true, error: "Unknown query part" }
+        query: { kind: "string", minLength: 1, maxLength: 64, part: true, error: "Unknown query part" },
+        aggregate: { kind: "string", views: ["object", "app"], minLength: 1, maxLength: 64, aggregatePart: true, error: "Unknown aggregate part" }
+      }
+    },
+    Aggregate: {
+      views: ["object", "app"],
+      role: "leaf",
+      props: {
+        reach: { kind: "json", required: true, error: "Invalid aggregate reach" },
+        measure: { kind: "json", required: true, error: "Invalid aggregate measure" },
+        ends: { kind: "choice", required: true, values: ["visible", "all"], error: "Invalid aggregate ends" }
       }
     },
     Link: {
@@ -2481,30 +3722,50 @@ var VERB_TEMPLATE = deepFreeze3({
   }
 });
 
+// packages/objects-sdk/dist/validation.js
+function validateLocally(schema, languageVersion, value, category) {
+  const checked = validateSchema(schema, languageVersion, category);
+  return checked.ok ? validateValue(checked.schema, value) : { ok: false, violations: checked.violations };
+}
+function checkSampleAgainstChanges(changes, typeKey, sample) {
+  const entries7 = entryChangesOf(changes);
+  const document = Object.hasOwn(entries7, typeKey) ? entries7[typeKey] : void 0;
+  if (document === void 0) {
+    return { kind: "no-such-type" };
+  }
+  if (document.typeCategory === "verb") {
+    return { kind: "no-properties" };
+  }
+  return {
+    kind: "checked",
+    result: validateLocally(objectSchemaOf(document.propertyDefinitions, document.requiredPropertyKeys), document.schemaLanguageVersion, sample, document.typeCategory)
+  };
+}
+
 // packages/ontology-sdk/dist/type-delta.js
 var NOT_COMPARED = /* @__PURE__ */ new Set(["typeCategory", "typeKey", "version"]);
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isStringList(value) {
   return Array.isArray(value) && value.every((item) => typeof item === "string");
 }
 function isStructureView(value) {
-  if (!isRecord(value) || typeof value.key !== "string" || typeof value.label !== "string" || !isStringList(value.steps)) {
+  if (!isRecord2(value) || typeof value.key !== "string" || typeof value.label !== "string" || !isStringList(value.steps)) {
     return false;
   }
   const { decoration } = value;
-  return decoration === void 0 || Array.isArray(decoration) && decoration.every((entry2) => isRecord(entry2) && typeof entry2.key === "string" && typeof entry2.label === "string");
+  return decoration === void 0 || Array.isArray(decoration) && decoration.every((entry2) => isRecord2(entry2) && typeof entry2.key === "string" && typeof entry2.label === "string");
 }
 function isStructureDeclaration(value) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return false;
   }
   const { relationships, views } = value;
   return (relationships === void 0 || isStringList(relationships)) && (views === void 0 || Array.isArray(views) && views.every(isStructureView));
 }
 function recordOf(value, what) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     throw new Error(`${what} is not an object`);
   }
   return value;
@@ -2561,7 +3822,8 @@ function edgeProspective(published) {
     propertyDefinitions: recordOf(published.propertyDefinitions, `${what} propertyDefinitions`),
     requiredPropertyKeys: stringListOf(published.requiredPropertyKeys, `${what} requiredPropertyKeys`),
     readRule: oneOf(published.readRule, RULES, `${what} readRule`),
-    writeRule: oneOf(published.writeRule, RULES, `${what} writeRule`)
+    writeRule: oneOf(published.writeRule, RULES, `${what} writeRule`),
+    ...published.review === void 0 || published.review === null ? {} : { review: published.review }
   };
 }
 function verbProspective(published) {
@@ -2593,7 +3855,7 @@ function sameValue(left, right) {
   if (Array.isArray(left) || Array.isArray(right)) {
     return Array.isArray(left) && Array.isArray(right) && left.length === right.length && left.every((item, index) => sameValue(item, right[index]));
   }
-  if (isRecord(left) && isRecord(right)) {
+  if (isRecord2(left) && isRecord2(right)) {
     const leftKeys = Object.keys(left);
     return leftKeys.length === Object.keys(right).length && leftKeys.every((key) => Object.hasOwn(right, key) && sameValue(left[key], right[key]));
   }
@@ -2708,6 +3970,7 @@ var exitCodeOfRefusal = (refusal2) => {
 
 // packages/cli/src/generated/help.ts
 function schemasOf(entry2) {
+  if (isBinaryRequestRoute(entry2.name)) throw new Error("this route takes a binary request body and has no JSON input schema");
   return { input: ROUTE_INPUT_SCHEMAS[entry2.name], selector: entry2.selector === "none" ? null : SELECTOR_SCHEMAS[entry2.selector] };
 }
 var DEFS_PREFIX = "#/$defs/";
@@ -2762,7 +4025,7 @@ function kindMembers(schema, root) {
   }
   return members;
 }
-var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 function resolveField(field, schemas, sent) {
   const [root, ...keys] = field.split(".");
   let schema;
@@ -2783,47 +4046,53 @@ function resolveField(field, schemas, sent) {
     if (schema === null) {
       return null;
     }
-    let node = deref(schema, rootSchema);
-    if (node.oneOf !== void 0) {
-      const members2 = kindMembers(node, rootSchema);
+    let node2 = deref(schema, rootSchema);
+    if (node2.oneOf !== void 0) {
+      const members2 = kindMembers(node2, rootSchema);
       const discriminator2 = members2?.[0]?.discriminator;
       if (discriminator2 !== void 0 && key === discriminator2) {
         return { allowedKinds: members2?.map((candidate) => candidate.kind) ?? [], discriminator: discriminator2 };
       }
-      const sentKind = discriminator2 !== void 0 && isRecord2(value) ? value[discriminator2] : void 0;
+      const sentKind = discriminator2 !== void 0 && isRecord3(value) ? value[discriminator2] : void 0;
       const chosen = members2?.find((candidate) => candidate.kind === sentKind);
       if (chosen === void 0) {
         return null;
       }
-      node = chosen.member;
+      node2 = chosen.member;
     }
-    if (node.type === "array") {
-      if (node.items === void 0 || !Array.isArray(value) || !/^(0|[1-9]\d*)$/.test(key) || Number(key) >= value.length) {
+    if (node2.type === "array") {
+      if (node2.items === void 0 || !Array.isArray(value) || !/^(0|[1-9]\d*)$/.test(key) || Number(key) >= value.length) {
         return null;
       }
-      schema = node.items;
+      schema = node2.items;
       value = value[Number(key)];
       continue;
     }
-    const property = node.properties?.[key];
+    const property = node2.properties?.[key];
     if (property !== void 0) {
       schema = property;
-    } else if (typeof node.additionalProperties === "object") {
-      if (isRecord2(value) && Object.keys(value).some((name) => name.includes("."))) {
+    } else if (typeof node2.additionalProperties === "object") {
+      if (isRecord3(value) && Object.keys(value).some((name) => name.includes("."))) {
         return null;
       }
-      schema = node.additionalProperties;
+      schema = node2.additionalProperties;
     } else {
       return null;
     }
-    value = isRecord2(value) ? value[key] : void 0;
+    value = isRecord3(value) ? value[key] : void 0;
   }
   if (schema === null) {
     return null;
   }
   const members = kindMembers(schema, rootSchema);
   const discriminator = members?.[0]?.discriminator;
-  return { allowedKinds: members?.map((candidate) => candidate.kind) ?? [], ...discriminator === void 0 ? {} : { discriminator } };
+  const node = deref(schema, rootSchema);
+  const allowedValues = node.enum ?? (node.const === void 0 ? [] : [node.const]);
+  return {
+    allowedKinds: members?.map((candidate) => candidate.kind) ?? [],
+    ...allowedValues.length === 0 ? {} : { allowedValues },
+    ...discriminator === void 0 ? {} : { discriminator }
+  };
 }
 var CORRELATION_FIELD = "correlation";
 var DEPTH_LIMIT = 3;
@@ -2939,9 +4208,17 @@ function fieldLines(schema, root, indent) {
   return lines;
 }
 function withoutCorrelation(example) {
-  return isRecord2(example) ? Object.fromEntries(Object.entries(example).filter(([name]) => name !== CORRELATION_FIELD)) : example;
+  return isRecord3(example) ? Object.fromEntries(Object.entries(example).filter(([name]) => name !== CORRELATION_FIELD)) : example;
 }
 function schemaHelpLines(entry2) {
+  if (isBinaryRequestRoute(entry2.name)) {
+    const binary = BINARY_REQUEST_INPUTS[entry2.name];
+    return [
+      `content-type: ${binary.contentType}`,
+      `${binary.selectorHeader}: selector as JSON text`,
+      `${binary.nameHeader}: attachment name as an RFC 8187 ext-value`
+    ];
+  }
   const schemas = schemasOf(entry2);
   const input = fieldLines(schemas.input, schemas.input, "  ");
   const lines = ["input fields:", ...input.length === 0 ? ["  none"] : input];
@@ -3011,12 +4288,75 @@ function explanationLines(heading, explanation) {
   }
   return lines;
 }
+function displayExplanationOf(rule, explanation, merge = false) {
+  if (rule === "merge-not-permitted" || merge && (rule === "not-permitted" || rule === "capability-missing")) {
+    return {
+      explains: explanation.explains,
+      explanation: {
+        meaning: `${explanation.explanation.meaning} The merge requires the \`branches.merge\` capability in the target scope.`,
+        next: explanation.explanation.next
+      }
+    };
+  }
+  if (rule === "merge-conflict") {
+    return {
+      explains: explanation.explains,
+      explanation: {
+        meaning: "The merge found changes both branches made from their common base.",
+        next: [{ option: "Read the conflict fields with readMergeConflicts, setting input.name to the source branch's name." }]
+      }
+    };
+  }
+  return rule === "not-a-ref-head" ? {
+    explains: "rule",
+    explanation: {
+      meaning: "This branch has new commits since this review began.",
+      next: [{ option: "Reload the proposal to review its latest commit." }]
+    }
+  } : explanation;
+}
+function branchNameRule(request3) {
+  const input = request3.sent.input;
+  const name = typeof input === "object" && input !== null && !Array.isArray(input) ? input.name : void 0;
+  if (typeof name !== "string") {
+    return "The branch name must be a string containing one ref segment.";
+  }
+  if (name.includes("/")) {
+    return "The branch name must be one ref segment and cannot contain a slash.";
+  }
+  if (!/^[A-Za-z0-9._-]+$/.test(name)) {
+    return "A ref segment uses only ASCII letters, digits, dot, underscore and hyphen.";
+  }
+  if (name.startsWith(".")) {
+    return "A ref segment cannot start with a dot.";
+  }
+  if (name.endsWith(".")) {
+    return "A ref segment cannot end with a dot.";
+  }
+  if (name.endsWith(".lock")) {
+    return "A ref segment cannot end in .lock.";
+  }
+  if (name.includes("..")) {
+    return "A ref segment cannot contain two consecutive dots.";
+  }
+  return "The branch name must fit the database's UTF-8 byte binding limit.";
+}
 function refusalLines(refusal2, settle2, request3, host, reference) {
-  const lines = explanationLines(refusalHeading(refusal2), refusal2);
+  const lines = explanationLines(refusalHeading(refusal2), displayExplanationOf(refusal2.kind === "refused" ? refusal2.rule : void 0, refusal2, request3?.command === "openeng branches-sdk merge"));
+  if (refusal2.kind === "refused" && refusal2.rule === "owned-type-not-presentation" && refusal2.detail !== void 0) {
+    lines.push(`type: ${refusal2.detail.typeKey}; field: ${refusal2.detail.field}`);
+  }
   const allowed = allowedFieldOf(refusal2, request3);
+  const allowedValues = allowed?.allowedValues ?? [];
   if (request3 !== void 0 && allowed !== null && allowed.allowedKinds.length > 0 && allowed.discriminator !== void 0) {
     lines.push(`allowed ${allowed.discriminator}: ${allowed.allowedKinds.join(", ")}`, `${request3.command} --help shows each shape`);
   }
+  if (request3 !== void 0 && allowedValues.length > 0) {
+    lines.push(`allowed values: ${allowedValues.map((value) => JSON.stringify(value)).join(", ")}`);
+  }
+  if (request3?.command === "openeng branches-sdk createBranch" && refusal2.kind === "invalid-request" && refusal2.field === "input.name") {
+    lines.push(`Branch name rule: ${branchNameRule(request3)}`);
+  }
   if (refusal2.kind === "unknown-outcome") {
     lines.push(`The operation may or may not have taken effect, and openeng will not repeat it. Settle it with: ${settle2}`);
   }
@@ -3029,6 +4369,9 @@ function refusalLines(refusal2, settle2, request3, host, reference) {
       lines.push(`${versions}; the host did not read this CLI's protocol version (read: ${read})`);
     }
   }
+  if (refusal2.kind === "protocol-mismatch") {
+    lines.push("Update with: npm install -g @openengio/cli@latest");
+  }
   if (reference !== void 0) {
     lines.push(`reference: ${reference}`);
   }
@@ -3037,11 +4380,20 @@ function refusalLines(refusal2, settle2, request3, host, reference) {
 function refusalValue(refusal2, settle2, request3, host, reference) {
   const referenced = reference === void 0 ? {} : { reference };
   if (refusal2.kind === "protocol-mismatch") {
-    return { ...refusal2, clientVersion: PROTOCOL_VERSION, ...host === void 0 ? {} : { host }, ...referenced };
+    return { ...refusal2, clientVersion: PROTOCOL_VERSION, update: "npm install -g @openengio/cli@latest", ...host === void 0 ? {} : { host }, ...referenced };
   }
   const allowed = allowedFieldOf(refusal2, request3);
   const settled = refusal2.kind === "unknown-outcome" ? { ...refusal2, settle: settle2 } : refusal2;
-  return allowed === null || allowed.allowedKinds.length === 0 ? { ...settled, ...referenced } : { ...settled, allowedKinds: allowed.allowedKinds, ...referenced };
+  const explained = refusal2.kind === "refused" ? { ...settled, ...displayExplanationOf(refusal2.rule, refusal2, request3?.command === "openeng branches-sdk merge") } : settled;
+  if (allowed === null) {
+    return { ...explained, ...referenced };
+  }
+  return {
+    ...explained,
+    ...allowed.allowedKinds.length === 0 ? {} : { allowedKinds: allowed.allowedKinds },
+    ...(allowed.allowedValues?.length ?? 0) === 0 ? {} : { allowedValues: allowed.allowedValues },
+    ...referenced
+  };
 }
 function jsonLine(value) {
   return `${JSON.stringify(value)}
@@ -3106,16 +4458,20 @@ var render = (outcome, json, scope, host) => {
       const result = outcome.result;
       const resultReference = typeof result.correlationId === "string" ? result.correlationId : void 0;
       if (json) {
-        const referenced = resultReference === void 0 ? result : { ...result, reference: resultReference };
+        const explained = { ...result, ...displayExplanationOf(result.rule, result, result.rule === "merge-not-permitted") };
+        const referenced = resultReference === void 0 ? explained : { ...explained, reference: resultReference };
         return { exitCode, stdout: jsonLine(scopedValue(referenced, scope)), stderr: echo };
       }
-      const lines = explanationLines(`refused: ${typeof result.rule === "string" ? result.rule : "no rule named"}`, result);
+      const lines = explanationLines(`refused: ${typeof result.rule === "string" ? result.rule : "no rule named"}`, displayExplanationOf(result.rule, result, result.rule === "merge-not-permitted"));
       for (const conflict of result.conflicts ?? []) {
         lines.push(`conflict: ${conflict.property}; current: ${conflict.current === null ? "absent" : JSON.stringify(conflict.current)}`);
       }
       for (const violation of result.violations ?? []) {
         lines.push(`violation: ${violation.path.join(".")}; rule: ${violation.rule}`);
       }
+      if (typeof result.linkId === "string") {
+        lines.push(`link: ${result.linkId}`);
+      }
       if (resultReference !== void 0) {
         lines.push(`reference: ${resultReference}`);
       }
@@ -3299,6 +4655,39 @@ import { join as join2 } from "node:path";
 import { realpathSync } from "node:fs";
 import { isAbsolute as isAbsolute2 } from "node:path";
 
+// packages/hosted-apps-sdk/dist/index.js
+var HOSTED_APPS_ROUTE_ENTRIES = routeEntriesOf("hosted-apps-sdk");
+var HOSTED_APPS_ROUTE_NAMES = Object.freeze([
+  "createHostedApp",
+  "readHostedBundle",
+  "listHostedApps",
+  "listHostedVersions",
+  "revokeHostedApp",
+  "revokeHostedVersion",
+  "openHostedApp",
+  "endHostedLaunch",
+  "mintHostedAppToken",
+  "setHostedOneWallSwitch",
+  "readHostedOneWallSwitch",
+  "grantHostedOneWall",
+  "withdrawHostedOneWall",
+  "listHostedOneWallGrants"
+]);
+function entries6() {
+  return HOSTED_APPS_ROUTE_NAMES.map((name) => ROUTES[name]);
+}
+function createHostedAppsClient(transport, origin, token) {
+  return Object.freeze({
+    ...createTypedClient(HOSTED_APPS_ROUTE_NAMES, entries6(), transport, origin, token),
+    publishHostedVersion: (selector, file) => call(transport, origin, "publishHostedVersion", {
+      selector,
+      input: { name: file.appKey, body: (async function* () {
+        yield file.bytes;
+      })() }
+    }, token, null)
+  });
+}
+
 // packages/cli/src/session-store.ts
 import { createHash, randomBytes } from "node:crypto";
 import { chmodSync, closeSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync } from "node:fs";
@@ -3375,27 +4764,61 @@ function quotedForSecurity(text) {
 function failureOf(store, operation, command, result) {
   return new SessionStoreError(store, operation, `${command} exited ${String(result.exitCode)} and wrote ${String(result.stderr.length)} characters to its standard error`);
 }
+var KEYCHAIN_ENCODING = "openeng-session:v1:";
+function keychainTextOf(text) {
+  let bytes;
+  if (text.startsWith(KEYCHAIN_ENCODING)) {
+    const encoded = text.slice(KEYCHAIN_ENCODING.length);
+    bytes = Buffer.from(encoded, "base64");
+    if (bytes.toString("base64") !== encoded) {
+      throw new SessionStoreError("macos-keychain", "read", "the stored entry is not canonical base64");
+    }
+  } else if (/^(?:[0-9a-fA-F]{2})+$/.test(text)) {
+    bytes = Buffer.from(text, "hex");
+  } else {
+    return text;
+  }
+  const decoded = bytes.toString("utf8");
+  if (!Buffer.from(decoded, "utf8").equals(bytes)) {
+    throw new SessionStoreError("macos-keychain", "read", "the stored entry is not UTF-8");
+  }
+  return decoded;
+}
+function keychainOutputOf(result) {
+  return result.stdout.endsWith("\n") ? result.stdout.slice(0, -1) : result.stdout;
+}
+function keychainReadRequest(hostKey) {
+  return { command: SECURITY, args: ["find-generic-password", "-a", hostKey, "-s", SERVICE, "-w"], stdin: "" };
+}
 function macosStore(spawn2) {
   const kind = "macos-keychain";
   return {
     kind,
     async read(hostKey) {
-      const result = await spawn2({ command: SECURITY, args: ["find-generic-password", "-a", hostKey, "-s", SERVICE, "-w"], stdin: "" });
+      const result = await spawn2(keychainReadRequest(hostKey));
       if (result.exitCode === SECURITY_NOT_FOUND) {
         return null;
       }
       if (result.exitCode !== 0) {
         throw failureOf(kind, "read", "security", result);
       }
-      return entryOf(kind, hostKey, result.stdout.endsWith("\n") ? result.stdout.slice(0, -1) : result.stdout);
+      return entryOf(kind, hostKey, keychainTextOf(keychainOutputOf(result)));
     },
     async write(hostKey, session, organisation) {
-      const command = ["add-generic-password", "-U", "-a", quotedForSecurity(hostKey), "-s", SERVICE, "-w", quotedForSecurity(secretOf(hostKey, session, organisation))].join(" ");
+      const secret = KEYCHAIN_ENCODING + Buffer.from(secretOf(hostKey, session, organisation), "utf8").toString("base64");
+      const command = ["add-generic-password", "-U", "-a", quotedForSecurity(hostKey), "-s", SERVICE, "-w", quotedForSecurity(secret)].join(" ");
       const result = await spawn2({ command: SECURITY, args: ["-i"], stdin: `${command}
 ` });
       if (result.exitCode !== 0 || result.stderr !== "") {
         throw failureOf(kind, "write", "security -i", result);
       }
+      const stored = await spawn2(keychainReadRequest(hostKey));
+      if (stored.exitCode !== 0 || stored.stderr !== "") {
+        throw failureOf(kind, "write", "security read-back", stored);
+      }
+      if (keychainOutputOf(stored) !== secret) {
+        throw new SessionStoreError(kind, "write", "the keychain did not retain the written entry");
+      }
     },
     async delete(hostKey) {
       const result = await spawn2({ command: SECURITY, args: ["delete-generic-password", "-a", hostKey, "-s", SERVICE], stdin: "" });
@@ -3464,11 +4887,11 @@ var createFileStore = (configDirectory) => {
       try {
         mkdirSync(directory, { recursive: true, mode: 448 });
         chmodSync(directory, 448);
-        const descriptor = openSync(temporary, "wx", 384);
+        const descriptor2 = openSync(temporary, "wx", 384);
         try {
-          writeSync(descriptor, secretOf(hostKey, session, organisation));
+          writeSync(descriptor2, secretOf(hostKey, session, organisation));
         } finally {
-          closeSync(descriptor);
+          closeSync(descriptor2);
         }
         renameSync(temporary, final);
       } catch (error) {
@@ -3597,6 +5020,7 @@ var buildClients = async (host, store, transport, streamTransport) => {
       admin: createAdminClient(transport, origin, token),
       agents: createAgentsClient(transport, origin, token),
       branches: createBranchesClient(transport, origin, token),
+      hostedApps: createHostedAppsClient(transport, origin, token),
       objects: createObjectsTransportClient(transport, origin, token),
       organisations: {
         list: () => listOrganisations(transport, origin, token, { input: {} }),
@@ -3843,11 +5267,11 @@ async function takeLock(path, deps) {
   let unreadableSince = null;
   for (; ; ) {
     try {
-      const descriptor = openSync2(path, "wx", 384);
+      const descriptor2 = openSync2(path, "wx", 384);
       try {
-        writeSync2(descriptor, text);
+        writeSync2(descriptor2, text);
       } finally {
-        closeSync2(descriptor);
+        closeSync2(descriptor2);
       }
       return () => {
         if (readLockText(path) === text) {
@@ -4099,6 +5523,26 @@ var REFRESH_UNANSWERED_ADVICE = [
   "if the next command is refused, run `openeng login`"
 ].join(" ");
 
+// packages/cli/src/commands/object-display.ts
+function record(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function objectText(object, catalogue) {
+  const type = catalogue.objects.find((candidate) => candidate.typeKey === object.typeKey);
+  if (type === void 0 || !record(type.propertyDefinitions) || !record(object.properties)) {
+    throw new Error("the object or its catalogue has no readable property definitions");
+  }
+  const definitions = type.propertyDefinitions;
+  const properties = Object.fromEntries(Object.entries(object.properties).map(([key, envelope]) => {
+    if (!record(envelope) || !("value" in envelope) || !Object.hasOwn(definitions, key)) {
+      throw new Error(`the object property ${key} has no declared value shape`);
+    }
+    const definition = definitions[key];
+    return [key, typeof envelope.value === "number" && record(definition) && typeof definition.unit === "string" ? { ...envelope, value: displayPropertyValue(envelope.value, definition) } : envelope];
+  }));
+  return JSON.stringify({ ...object, properties }, null, 2);
+}
+
 // packages/cli/src/generated/build.ts
 var ORGANISATION_BY_SUBJECT = {
   project: "required",
@@ -4222,8 +5666,19 @@ async function runGenerated(entry2, context) {
   }
   const settle2 = settleOf(entry2, key.key);
   let run2;
+  let displayedObject;
   try {
     run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      if (entry2.name === "readObject" && !context.options.json) {
+        const request3 = body.body;
+        const answer2 = await clients.objects.readObject(request3);
+        if ("refusal" in answer2 || answer2.replayed === true) return answer2;
+        const catalogue = await clients.objects.readCatalogue({ selector: { projectId: request3.selector.projectId }, input: {} });
+        if ("refusal" in catalogue) return answer2;
+        if (catalogue.replayed === true) return catalogue;
+        displayedObject = objectText(answer2.result, catalogue.result);
+        return answer2;
+      }
       const method = clientOf(clients, entry2.module)?.[entry2.name];
       if (typeof method === "function") {
         return await method(body.body, key.key);
@@ -4271,7 +5726,7 @@ async function runGenerated(entry2, context) {
   if (replayed) {
     context.note("the host answered a replay of an earlier request that carried this idempotency key");
   }
-  return outcomeOfEnvelope(replayed ? withoutReplay(answer) : answer, settle2, (result) => JSON.stringify(result, null, 2), {
+  return outcomeOfEnvelope(replayed ? withoutReplay(answer) : answer, settle2, (result) => displayedObject === void 0 ? JSON.stringify(result, null, 2) : displayedObject, {
     command: `openeng ${entry2.module} ${entry2.name}`,
     schemas: schemasOf(entry2),
     sent: body.body
@@ -4287,8 +5742,8 @@ function generatedCommandOf(entry2) {
     run: (context) => runGenerated(entry2, context)
   };
 }
-function generatedCommandsOf(entries6) {
-  const commands = entries6.filter((entry2) => !entry2.carriesCredential).map(generatedCommandOf);
+function generatedCommandsOf(entries7) {
+  const commands = entries7.filter((entry2) => !entry2.carriesCredential).map(generatedCommandOf);
   const seen = /* @__PURE__ */ new Set();
   for (const command of commands) {
     const words = command.words.join(" ");
@@ -8573,6 +10028,8 @@ function choice(members) {
 }
 var REQUIREMENT_STATUSES = ["Draft", "In review", "Approved", "Baselined"];
 var REQUIREMENT_PRIORITIES = ["Must", "Should", "Could"];
+var REQUIREMENT_VERIFICATION_METHODS = ["Test", "Analysis", "Inspection", "Demonstration"];
+var REQUIREMENT_CATEGORIES = ["Performance", "Interface", "Safety", "Environmental", "Regulatory"];
 var SPECIFICATION_STATUSES = ["Draft", "In review", "Approved"];
 var VERIFICATION_STATUSES = ["Planned", "In progress", "Passed", "Failed"];
 var VERIFICATION_METHODS = ["Test", "Inspection", "Test and analysis", "Demonstration"];
@@ -8588,7 +10045,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "System",
     propertyDefinitions: { identifier: STRING, name: STRING, owner: PERSON },
     requiredPropertyKeys: ["identifier", "name"],
-    presentationBindings: { title: "name", typeIcon: "account_tree" },
+    presentationBindings: { title: "name", typeIcon: "account_tree", propertyOrder: ["identifier", "name", "owner"] },
     // A system's parent is the system it is contained by: contains' source is the parent, its
     // target the child, so a system resolves its own parent through the same edge type.
     structureDeclaration: { relationships: ["contains"] }
@@ -8596,9 +10053,20 @@ var DEMO_OBJECT_TYPES = Object.freeze([
   {
     typeKey: "requirement",
     displayName: "Requirement",
-    propertyDefinitions: { identifier: STRING, statement: STRING, status: choice(REQUIREMENT_STATUSES), priority: choice(REQUIREMENT_PRIORITIES), owner: PERSON },
-    requiredPropertyKeys: ["identifier", "statement", "status", "priority"],
-    presentationBindings: { title: "statement", typeIcon: "assignment" },
+    propertyDefinitions: {
+      identifier: STRING,
+      statement: STRING,
+      status: choice(REQUIREMENT_STATUSES),
+      priority: choice(REQUIREMENT_PRIORITIES),
+      owner: PERSON,
+      rationale: STRING,
+      verificationMethod: choice(REQUIREMENT_VERIFICATION_METHODS),
+      acceptanceCriteria: STRING,
+      source: STRING,
+      category: choice(REQUIREMENT_CATEGORIES)
+    },
+    requiredPropertyKeys: ["identifier", "statement", "status", "priority", "verificationMethod", "category"],
+    presentationBindings: { title: "statement", typeIcon: "assignment", propertyOrder: ["identifier", "statement", "category", "status", "priority", "verificationMethod", "acceptanceCriteria", "rationale", "source", "owner"] },
     structureDeclaration: { relationships: ["has-requirement"] }
   },
   {
@@ -8606,7 +10074,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "Specification",
     propertyDefinitions: { identifier: STRING, statement: STRING, status: choice(SPECIFICATION_STATUSES), owner: PERSON },
     requiredPropertyKeys: ["identifier", "statement", "status"],
-    presentationBindings: { title: "statement", typeIcon: "description" },
+    presentationBindings: { title: "statement", typeIcon: "description", propertyOrder: ["identifier", "statement", "status", "owner"] },
     structureDeclaration: { relationships: ["has-specification"] }
   },
   {
@@ -8614,7 +10082,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "Verification",
     propertyDefinitions: { identifier: STRING, statement: STRING, method: choice(VERIFICATION_METHODS), status: choice(VERIFICATION_STATUSES), owner: PERSON },
     requiredPropertyKeys: ["identifier", "statement", "method", "status"],
-    presentationBindings: { title: "statement", typeIcon: "fact_check" },
+    presentationBindings: { title: "statement", typeIcon: "fact_check", propertyOrder: ["identifier", "statement", "method", "status", "owner"] },
     structureDeclaration: { relationships: ["has-verification"] }
   },
   {
@@ -8622,7 +10090,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "Risk",
     propertyDefinitions: { identifier: STRING, statement: STRING, severity: choice(RISK_SEVERITIES), likelihood: choice(RISK_LIKELIHOODS), owner: PERSON },
     requiredPropertyKeys: ["identifier", "statement", "severity", "likelihood"],
-    presentationBindings: { title: "statement", typeIcon: "warning" },
+    presentationBindings: { title: "statement", typeIcon: "warning", propertyOrder: ["identifier", "statement", "severity", "likelihood", "owner"] },
     structureDeclaration: { relationships: ["has-risk"] }
   },
   {
@@ -8639,7 +10107,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
       cadReference: STRING
     },
     requiredPropertyKeys: ["identifier", "name", "makeOrBuy", "lifecycleState"],
-    presentationBindings: { title: "name", typeIcon: "precision_manufacturing" },
+    presentationBindings: { title: "name", typeIcon: "precision_manufacturing", propertyOrder: ["identifier", "name", "makeOrBuy", "lifecycleState", "material", "mass", "cadReference", "owner"] },
     structureDeclaration: {
       relationships: ["has-part"],
       views: [
@@ -8653,7 +10121,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "BOM line",
     propertyDefinitions: { reference: STRING, quantity: NUMBER, findNumber: NUMBER },
     requiredPropertyKeys: ["reference", "quantity", "findNumber"],
-    presentationBindings: { title: "reference", typeIcon: "format_list_numbered" },
+    presentationBindings: { title: "reference", typeIcon: "format_list_numbered", propertyOrder: ["reference", "findNumber", "quantity"] },
     // A BOM line's parent is the part that itemises it: itemises' source is the assembly part
     // (parentEnd "source"), its target the BOM line, so a BOM line resolves its own parent
     // through the same edge type `system` resolves its own parent through, above.
@@ -8664,7 +10132,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "Revision",
     propertyDefinitions: { name: STRING, code: STRING, state: choice(REVISION_STATES), changeNote: STRING },
     requiredPropertyKeys: ["name", "code", "state", "changeNote"],
-    presentationBindings: { title: "name", typeIcon: "history" },
+    presentationBindings: { title: "name", typeIcon: "history", propertyOrder: ["name", "code", "state", "changeNote"] },
     structureDeclaration: { relationships: ["has-revision"] }
   },
   {
@@ -8672,7 +10140,7 @@ var DEMO_OBJECT_TYPES = Object.freeze([
     displayName: "Release",
     propertyDefinitions: { identifier: STRING, name: STRING, status: choice(RELEASE_STATUSES), effectiveFrom: STRING },
     requiredPropertyKeys: ["identifier", "name", "status"],
-    presentationBindings: { title: "name", typeIcon: "verified" },
+    presentationBindings: { title: "name", typeIcon: "verified", propertyOrder: ["identifier", "name", "status", "effectiveFrom"] },
     structureDeclaration: { relationships: [] }
   }
 ]);
@@ -8765,7 +10233,12 @@ function fullWorld(size, owner, data) {
         statement: row.statement,
         status: rotate(REQUIREMENT_STATUSES, index),
         priority: rotate(REQUIREMENT_PRIORITIES, index),
-        owner
+        owner,
+        rationale: row.rationale,
+        verificationMethod: row.verificationMethod,
+        acceptanceCriteria: row.acceptanceCriteria,
+        source: row.source,
+        category: row.category
       }
     })),
     ...data.specifications.map((row, index) => ({
@@ -8914,31 +10387,31 @@ var SYSTEM_TREE = [
   { identifier: "BOP-WW", name: "Water Wash System", parent: "BOP" }
 ];
 var REQUIREMENTS = [
-  { identifier: "OCGT-REQ-001", statement: "The plant shall deliver a net electrical output of not less than 50 MW at ISO ambient conditions (15 \xB0C, 101.3 kPa, 60% relative humidity), measured at the high-voltage terminals of the step-up transformer.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-002", statement: "The net heat rate on natural gas, lower heating value basis, shall not exceed 10,800 kJ/kWh at ISO conditions and base load.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-003", statement: "The unit shall reach full load within 10 minutes of a start command from standstill.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-004", statement: "The unit shall sustain a load ramp rate of not less than 8 MW per minute between 40% and 100% load.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-005", statement: "Stack NOx shall not exceed 25 ppmvd corrected to 15% oxygen between 50% and 100% load on natural gas.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-006", statement: "Stack CO shall not exceed 25 ppmvd corrected to 15% oxygen between 50% and 100% load on natural gas.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-007", statement: "Sound pressure level shall not exceed 85 dB(A) at 1 m from any enclosure and 55 dB(A) at the site boundary.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-008", statement: "Plant availability shall be not less than 95% over a rolling 12-month period, excluding scheduled outages.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-009", statement: "The unit shall be designed for not fewer than 250 starts per year over a 25-year design life.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-010", statement: "No single failure shall cause an uncontrolled release of fuel gas or an unprotected overspeed event.", derivesFrom: null, allocatedTo: "OCGT" },
-  { identifier: "OCGT-REQ-101", statement: "The fuel gas system shall accept a supply pressure of 22 to 30 bar(g) and deliver conditioned gas to the combustor within \xB11% of the demanded flow.", derivesFrom: "OCGT-REQ-001", allocatedTo: "FGS" },
-  { identifier: "OCGT-REQ-102", statement: "Inlet air filtration shall limit clean pressure loss to not more than 1.0 kPa and remove particles above 0.3 \xB5m with not less than 99.5% efficiency.", derivesFrom: "OCGT-REQ-001", allocatedTo: "AIR-FH" },
-  { identifier: "OCGT-REQ-103", statement: "The compressor shall deliver a pressure ratio of not less than 16:1 at ISO base load.", derivesFrom: "OCGT-REQ-002", allocatedTo: "GT-CMP" },
-  { identifier: "OCGT-REQ-105", statement: "The burners shall hold stable lean premixed combustion between 50% and 100% load with dynamic pressure amplitude below 25 mbar rms.", derivesFrom: "OCGT-REQ-005", allocatedTo: "GT-CMB" },
-  { identifier: "OCGT-REQ-106", statement: "The fuel metering skid shall control fuel flow to within \xB10.5% of full scale over the load range.", derivesFrom: "OCGT-REQ-004", allocatedTo: "FGS-MS" },
-  { identifier: "OCGT-REQ-107", statement: "The starting system shall accelerate the rotor from turning gear to ignition speed in not more than 120 s.", derivesFrom: "OCGT-REQ-003", allocatedTo: "GEN" },
-  { identifier: "OCGT-REQ-108", statement: "Overspeed protection shall trip the fuel valves at 110% of rated speed through two independent channels.", derivesFrom: "OCGT-REQ-010", allocatedTo: "CPS-OS" },
-  { identifier: "OCGT-REQ-109", statement: "The emergency shutoff valves shall close within 1 s of a trip signal with seat leakage not worse than Class V.", derivesFrom: "OCGT-REQ-010", allocatedTo: "FGS-ESV" },
-  { identifier: "OCGT-REQ-110", statement: "Fire and gas detection shall alarm at 20% of the lower explosive limit and trip the unit at 40% in the enclosure.", derivesFrom: "OCGT-REQ-010", allocatedTo: "CPS-FG" },
-  { identifier: "OCGT-REQ-111", statement: "The exhaust silencer shall attenuate exhaust noise to not more than 70 dB(A) at 100 m.", derivesFrom: "OCGT-REQ-007", allocatedTo: "EXH-SL" },
-  { identifier: "OCGT-REQ-112", statement: "Enclosure ventilation shall keep enclosure air below 55 \xB0C and provide not fewer than 12 air changes per hour.", derivesFrom: "OCGT-REQ-010", allocatedTo: "ENC" },
-  { identifier: "OCGT-REQ-113", statement: "The lube oil system shall supply oil at 45 to 55 \xB0C and not less than 1.5 bar at the bearing headers, and shall carry the rotor through coast-down on loss of AC power.", derivesFrom: "OCGT-REQ-008", allocatedTo: "LOS" },
-  { identifier: "OCGT-REQ-114", statement: "The generator shall be rated at not less than 62.5 MVA at 0.8 power factor and 11 kV.", derivesFrom: "OCGT-REQ-001", allocatedTo: "GEN" },
-  { identifier: "OCGT-REQ-115", statement: "The step-up transformer shall transform 11 kV to 132 kV with load losses not exceeding 0.4% at rated load.", derivesFrom: "OCGT-REQ-001", allocatedTo: "ELE-TX" },
-  { identifier: "OCGT-REQ-116", statement: "The unit control system shall run the start sequence automatically with no operator action beyond the start command.", derivesFrom: "OCGT-REQ-003", allocatedTo: "CPS-UC" }
+  { identifier: "OCGT-REQ-001", statement: "The plant shall deliver a net electrical output of not less than 50 MW at ISO ambient conditions (15 \xB0C, 101.3 kPa, 60% relative humidity), measured at the high-voltage terminals of the step-up transformer.", derivesFrom: null, allocatedTo: "OCGT", rationale: "The 50 MW peaking contract sets the plant's revenue; ISO conditions give a common basis for comparing bids and measured performance.", verificationMethod: "Test", acceptanceCriteria: "Corrected net output at the transformer high-voltage terminals is at least 50.0 MW in the acceptance performance test.", source: "Grid peaking capacity agreement, schedule 2", category: "Performance" },
+  { identifier: "OCGT-REQ-002", statement: "The net heat rate on natural gas, lower heating value basis, shall not exceed 10,800 kJ/kWh at ISO conditions and base load.", derivesFrom: null, allocatedTo: "OCGT", rationale: "Fuel is the dominant operating cost of a peaking plant, and the heat rate sets the dispatch price against the market.", verificationMethod: "Test", acceptanceCriteria: "Corrected net heat rate on natural gas (LHV) is at most 10,800 kJ/kWh at base load.", source: "Grid peaking capacity agreement, schedule 2", category: "Performance" },
+  { identifier: "OCGT-REQ-003", statement: "The unit shall reach full load within 10 minutes of a start command from standstill.", derivesFrom: null, allocatedTo: "OCGT", rationale: "A peaker earns most when it answers a short-notice call; a slow start loses dispatch hours.", verificationMethod: "Demonstration", acceptanceCriteria: "Ten consecutive cold starts reach full load in no more than 10 minutes each.", source: "Grid operator ancillary service rules, fast start class", category: "Performance" },
+  { identifier: "OCGT-REQ-004", statement: "The unit shall sustain a load ramp rate of not less than 8 MW per minute between 40% and 100% load.", derivesFrom: null, allocatedTo: "OCGT", rationale: "The ramp rate lets the plant follow the grid operator's set-point changes without penalty.", verificationMethod: "Test", acceptanceCriteria: "Recorded ramp between 40% and 100% load averages at least 8 MW per minute.", source: "Grid operator ancillary service rules, ramp clause", category: "Performance" },
+  { identifier: "OCGT-REQ-005", statement: "Stack NOx shall not exceed 25 ppmvd corrected to 15% oxygen between 50% and 100% load on natural gas.", derivesFrom: null, allocatedTo: "OCGT", rationale: "The air permit caps NOx; the limit has to hold across the load range the plant will run in.", verificationMethod: "Test", acceptanceCriteria: "Extractive analyser readings at 50%, 75% and 100% load are all at or below 25 ppmvd at 15% O2.", source: "Site air permit, condition 4", category: "Environmental" },
+  { identifier: "OCGT-REQ-006", statement: "Stack CO shall not exceed 25 ppmvd corrected to 15% oxygen between 50% and 100% load on natural gas.", derivesFrom: null, allocatedTo: "OCGT", rationale: "The air permit caps CO; low-load combustion can raise CO, so the limit applies down to 50% load.", verificationMethod: "Test", acceptanceCriteria: "Extractive analyser readings at 50%, 75% and 100% load are all at or below 25 ppmvd at 15% O2.", source: "Site air permit, condition 5", category: "Environmental" },
+  { identifier: "OCGT-REQ-007", statement: "Sound pressure level shall not exceed 85 dB(A) at 1 m from any enclosure and 55 dB(A) at the site boundary.", derivesFrom: null, allocatedTo: "OCGT", rationale: "Neighbours and the planning consent limit noise at the boundary; the enclosure limit protects operators.", verificationMethod: "Test", acceptanceCriteria: "Survey results are at most 85 dB(A) at 1 m from every enclosure and 55 dB(A) at the site boundary.", source: "Planning consent, noise condition 12", category: "Environmental" },
+  { identifier: "OCGT-REQ-008", statement: "Plant availability shall be not less than 95% over a rolling 12-month period, excluding scheduled outages.", derivesFrom: null, allocatedTo: "OCGT", rationale: "The capacity agreement pays on availability, and a lower figure triggers a penalty.", verificationMethod: "Inspection", acceptanceCriteria: "Outage records over the 12-month reliability run show availability of at least 95%, scheduled outages excluded.", source: "Grid peaking capacity agreement, schedule 4", category: "Performance" },
+  { identifier: "OCGT-REQ-009", statement: "The unit shall be designed for not fewer than 250 starts per year over a 25-year design life.", derivesFrom: null, allocatedTo: "OCGT", rationale: "A peaker starts often; the hot gas path life is consumed by starts as much as by running hours.", verificationMethod: "Analysis", acceptanceCriteria: "Low-cycle fatigue assessment shows no hot gas path part reaches its life limit within 250 starts per year over 25 years.", source: "Owner's technical specification, section 3.4", category: "Performance" },
+  { identifier: "OCGT-REQ-010", statement: "No single failure shall cause an uncontrolled release of fuel gas or an unprotected overspeed event.", derivesFrom: null, allocatedTo: "OCGT", rationale: "A single fault must never release fuel gas or let the rotor overspeed; both events are potentially fatal.", verificationMethod: "Analysis", acceptanceCriteria: "The hazard and operability review and the trip matrix functional test find no single failure that releases fuel gas or defeats overspeed protection.", source: "Functional safety standard IEC 61511, owner's safety case", category: "Safety" },
+  { identifier: "OCGT-REQ-101", statement: "The fuel gas system shall accept a supply pressure of 22 to 30 bar(g) and deliver conditioned gas to the combustor within \xB11% of the demanded flow.", derivesFrom: "OCGT-REQ-001", allocatedTo: "FGS", rationale: "The gas supply pressure varies with the pipeline; the skid has to absorb it and still meter accurately.", verificationMethod: "Test", acceptanceCriteria: "At supply pressures from 22 to 30 bar(g) the delivered flow stays within 1% of demand.", source: "Gas transporter connection agreement", category: "Interface" },
+  { identifier: "OCGT-REQ-102", statement: "Inlet air filtration shall limit clean pressure loss to not more than 1.0 kPa and remove particles above 0.3 \xB5m with not less than 99.5% efficiency.", derivesFrom: "OCGT-REQ-001", allocatedTo: "AIR-FH", rationale: "Dirty air fouls the compressor and cuts output; a high pressure loss at the filters does the same.", verificationMethod: "Test", acceptanceCriteria: "Clean pressure loss is at most 1.0 kPa and particle removal above 0.3 um is at least 99.5% on the filter test rig.", source: "Filter standard EN ISO 16890, class F9", category: "Performance" },
+  { identifier: "OCGT-REQ-103", statement: "The compressor shall deliver a pressure ratio of not less than 16:1 at ISO base load.", derivesFrom: "OCGT-REQ-002", allocatedTo: "GT-CMP", rationale: "The pressure ratio sets the cycle efficiency and so the heat rate target.", verificationMethod: "Test", acceptanceCriteria: "Measured compressor pressure ratio at ISO base load is at least 16:1.", source: "Gas turbine supplier performance guarantee", category: "Performance" },
+  { identifier: "OCGT-REQ-105", statement: "The burners shall hold stable lean premixed combustion between 50% and 100% load with dynamic pressure amplitude below 25 mbar rms.", derivesFrom: "OCGT-REQ-005", allocatedTo: "GT-CMB", rationale: "Combustion dynamics damage burners and limit the load range in which the NOx limit holds.", verificationMethod: "Test", acceptanceCriteria: "Dynamic pressure amplitude stays below 25 mbar rms from 50% to 100% load.", source: "Gas turbine supplier operating limits", category: "Performance" },
+  { identifier: "OCGT-REQ-106", statement: "The fuel metering skid shall control fuel flow to within \xB10.5% of full scale over the load range.", derivesFrom: "OCGT-REQ-004", allocatedTo: "FGS-MS", rationale: "Flow accuracy decides how closely the unit holds load and emissions.", verificationMethod: "Test", acceptanceCriteria: "Metered flow error is within 0.5% of full scale at five points across the load range.", source: "Gas turbine supplier fuel interface specification", category: "Interface" },
+  { identifier: "OCGT-REQ-107", statement: "The starting system shall accelerate the rotor from turning gear to ignition speed in not more than 120 s.", derivesFrom: "OCGT-REQ-003", allocatedTo: "GEN", rationale: "The start time budget leaves 120 s for acceleration; a slower starter breaks the 10 minute start.", verificationMethod: "Test", acceptanceCriteria: "Acceleration from turning gear to ignition speed takes at most 120 s in the commissioning start.", source: "Owner's technical specification, section 5.1", category: "Performance" },
+  { identifier: "OCGT-REQ-108", statement: "Overspeed protection shall trip the fuel valves at 110% of rated speed through two independent channels.", derivesFrom: "OCGT-REQ-010", allocatedTo: "CPS-OS", rationale: "Overspeed can burst the rotor; two independent channels guard against a single channel fault.", verificationMethod: "Test", acceptanceCriteria: "Each channel trips the fuel valves at 110% speed in a simulation, and a physical trip confirms it.", source: "Machinery safety standard ISO 21789", category: "Safety" },
+  { identifier: "OCGT-REQ-109", statement: "The emergency shutoff valves shall close within 1 s of a trip signal with seat leakage not worse than Class V.", derivesFrom: "OCGT-REQ-010", allocatedTo: "FGS-ESV", rationale: "A fast, tight shutoff limits the gas that can reach a burning or faulty machine.", verificationMethod: "Test", acceptanceCriteria: "Each installed valve closes in at most 1 s with seat leakage within Class V.", source: "Fuel gas code NFPA 85, shutoff valve clause", category: "Safety" },
+  { identifier: "OCGT-REQ-110", statement: "Fire and gas detection shall alarm at 20% of the lower explosive limit and trip the unit at 40% in the enclosure.", derivesFrom: "OCGT-REQ-010", allocatedTo: "CPS-FG", rationale: "Gas accumulating in the enclosure is an explosion hazard; staged alarms give operators time to act.", verificationMethod: "Test", acceptanceCriteria: "Test gas at each detector gives an alarm at 20% of the lower explosive limit and a trip at 40%.", source: "Fuel gas code NFPA 85, enclosure clause", category: "Safety" },
+  { identifier: "OCGT-REQ-111", statement: "The exhaust silencer shall attenuate exhaust noise to not more than 70 dB(A) at 100 m.", derivesFrom: "OCGT-REQ-007", allocatedTo: "EXH-SL", rationale: "Exhaust noise is the dominant far-field source, so the silencer carries most of the boundary noise budget.", verificationMethod: "Analysis", acceptanceCriteria: "The measured level at 100 m is at most 70 dB(A) and agrees with the silencer model.", source: "Planning consent, noise condition 12", category: "Environmental" },
+  { identifier: "OCGT-REQ-112", statement: "Enclosure ventilation shall keep enclosure air below 55 \xB0C and provide not fewer than 12 air changes per hour.", derivesFrom: "OCGT-REQ-010", allocatedTo: "ENC", rationale: "A hot enclosure shortens electronics life and trips the unit; air changes also dilute any leaked gas.", verificationMethod: "Inspection", acceptanceCriteria: "Commissioning records show enclosure air below 55 C at full load and at least 12 air changes per hour.", source: "Fuel gas code NFPA 85, ventilation clause", category: "Safety" },
+  { identifier: "OCGT-REQ-113", statement: "The lube oil system shall supply oil at 45 to 55 \xB0C and not less than 1.5 bar at the bearing headers, and shall carry the rotor through coast-down on loss of AC power.", derivesFrom: "OCGT-REQ-008", allocatedTo: "LOS", rationale: "Bearings need oil at the right temperature and pressure, and a power loss must not run them dry during coast-down.", verificationMethod: "Demonstration", acceptanceCriteria: "A simulated loss of AC power keeps header pressure at or above 1.5 bar through coast-down.", source: "Gas turbine supplier lube oil specification", category: "Interface" },
+  { identifier: "OCGT-REQ-114", statement: "The generator shall be rated at not less than 62.5 MVA at 0.8 power factor and 11 kV.", derivesFrom: "OCGT-REQ-001", allocatedTo: "GEN", rationale: "The generator rating has to cover the turbine output with margin at the lagging power factor the grid asks for.", verificationMethod: "Inspection", acceptanceCriteria: "The generator nameplate and factory test report show at least 62.5 MVA at 0.8 power factor and 11 kV.", source: "Grid code, reactive power requirement", category: "Interface" },
+  { identifier: "OCGT-REQ-115", statement: "The step-up transformer shall transform 11 kV to 132 kV with load losses not exceeding 0.4% at rated load.", derivesFrom: "OCGT-REQ-001", allocatedTo: "ELE-TX", rationale: "The transformer connects the plant to the 132 kV grid; its losses subtract from net output.", verificationMethod: "Test", acceptanceCriteria: "The factory test shows 11 kV to 132 kV transformation and load losses of at most 0.4% at rated load.", source: "Grid connection agreement", category: "Interface" },
+  { identifier: "OCGT-REQ-116", statement: "The unit control system shall run the start sequence automatically with no operator action beyond the start command.", derivesFrom: "OCGT-REQ-003", allocatedTo: "CPS-UC", rationale: "An automatic sequence removes operator error and makes every start repeatable.", verificationMethod: "Demonstration", acceptanceCriteria: "Ten starts complete with no operator action after the start command.", source: "Owner's operating philosophy, section 2", category: "Performance" }
 ];
 var SPECIFICATIONS = [
   { identifier: "OCGT-SPEC-001", statement: "Single-shaft industrial gas turbine with a 16-stage axial compressor and a 3-stage axial turbine, ISO base rating 52 MW at the generator terminals.", satisfies: ["OCGT-REQ-001", "OCGT-REQ-103"] },
@@ -9234,8 +10707,8 @@ function canonicalJson2(value) {
     return `[${value.map((item) => canonicalJson2(item)).join(",")}]`;
   }
   if (typeof value === "object" && value !== null) {
-    const entries6 = Object.entries(value).filter(([, member]) => member !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0);
-    return `{${entries6.map(([key, member]) => `${JSON.stringify(key)}:${canonicalJson2(member)}`).join(",")}}`;
+    const entries7 = Object.entries(value).filter(([, member]) => member !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0);
+    return `{${entries7.map(([key, member]) => `${JSON.stringify(key)}:${canonicalJson2(member)}`).join(",")}}`;
   }
   return JSON.stringify(value);
 }
@@ -9696,11 +11169,11 @@ var connectorRun = {
     return run2.ok ? outcomeOfEnvelope(run2.answer, settle2, (started) => `started run ${started.runId}: read it with openeng connector runs ${connectionId}`) : outcomeOfSessionFailure(run2.failure, settle2);
   }
 };
-var runText = (record) => {
-  const counts = record.counts === null ? "counts none" : `created ${String(record.counts.created)} updated ${String(record.counts.updated)} unchanged ${String(record.counts.unchanged)} withdrawn ${String(record.counts.withdrawn)} carried ${String(record.counts.carried)} overwritten ${String(record.counts.overwritten)}`;
-  const complete = record.complete === null ? "complete unknown" : record.complete ? "complete" : "incomplete";
-  const failure2 = record.failure === null ? "" : `  failure ${record.failure.kind}: ${record.failure.text}`;
-  return `${record.runId}  ${record.state}  started ${record.startedAt}  finished ${record.finishedAt === null ? "-" : record.finishedAt}  ${complete}  ${counts}${failure2}`;
+var runText = (record2) => {
+  const counts = record2.counts === null ? "counts none" : `created ${String(record2.counts.created)} updated ${String(record2.counts.updated)} unchanged ${String(record2.counts.unchanged)} withdrawn ${String(record2.counts.withdrawn)} carried ${String(record2.counts.carried)} overwritten ${String(record2.counts.overwritten)}`;
+  const complete = record2.complete === null ? "complete unknown" : record2.complete ? "complete" : "incomplete";
+  const failure2 = record2.failure === null ? "" : `  failure ${record2.failure.kind}: ${record2.failure.text}`;
+  return `${record2.runId}  ${record2.state}  started ${record2.startedAt}  finished ${record2.finishedAt === null ? "-" : record2.finishedAt}  ${complete}  ${counts}${failure2}`;
 };
 var connectorRuns = {
   organisation: "required",
@@ -9733,14 +11206,14 @@ var IDENTIFIER_FIELD = Object.freeze({
   app: "appKey",
   "app-draft": "appKey"
 });
-var PROJECT_REF_USAGE = "openeng link <explore|branch-diff|project> --project <id> --ref <ref>";
-var SET_USAGE = "openeng link explore --project <id> --ref <ref> --object-set <id>";
+var PROJECT_REF_USAGE = "openeng link <branch-diff|project> --project <id> --ref <ref>";
+var EXPLORE_USAGE = "openeng link explore --project <id> --ref <ref> (--object <id> | --object-set <id>)";
 var REF_USAGE = "openeng link <ontology|change-set> --ref <ref>";
 var DRAFT_USAGE = "openeng link app-draft <appKey> --ref <ref>";
 var IDENTIFIED_USAGE = "openeng link <object|type|proposal|app> <identifier> --project <id> --ref <ref>";
 var APP_PAGE_USAGE = "openeng link app-page <appKey> <pageKey> --project <id> --ref <ref>";
 var PAGE_USAGE = "openeng link organisation-page <page>";
-var LINK_HELP = [PROJECT_REF_USAGE, SET_USAGE, REF_USAGE, DRAFT_USAGE, IDENTIFIED_USAGE, APP_PAGE_USAGE, PAGE_USAGE];
+var LINK_HELP = [PROJECT_REF_USAGE, EXPLORE_USAGE, REF_USAGE, DRAFT_USAGE, IDENTIFIED_USAGE, APP_PAGE_USAGE, PAGE_USAGE];
 var refusal = (message) => ({ kind: "client-refusal", message });
 var SCOPE_OF_KIND = Object.freeze({
   object: "project-and-ref",
@@ -9799,12 +11272,6 @@ function subjectReads(clients, subject, scope) {
     ));
   }
   switch (subject.kind) {
-    case "object":
-      reads.push(checkedRead(
-        clients.objects.readObject({ selector: { projectId: scope.project, ref: scope.ref }, input: { objectId: subject.objectId } }),
-        `no object ${subject.objectId} in project ${scope.project} on ref ${scope.ref}`
-      ));
-      break;
     case "type":
       reads.push(checkedRead(
         clients.objects.readCatalogue({ selector: { projectId: scope.project }, input: {} }),
@@ -9871,30 +11338,62 @@ async function link(context) {
   if (typeof scope === "string") {
     return refusal(`openeng link ${subject.kind} ${scope}`);
   }
-  if (options.objectSet !== void 0 && (subject.kind !== "explore" || options.objectSet.length === 0)) {
-    return refusal("--object-set needs a saved set identifier and the explore page");
+  if (subject.kind === "explore") {
+    if (options.object === void 0 === (options.objectSet === void 0) || options.object === "" || options.objectSet === "") {
+      return refusal("openeng link explore needs exactly one of --object <id> or --object-set <id>");
+    }
+  } else if (options.object !== void 0 || options.objectSet !== void 0) {
+    return refusal("--object and --object-set are only for openeng link explore");
   }
   const objectSet = options.objectSet;
-  const path = options.objectSet === void 0 ? linkPath(organisation.id, scope.project, subject, scope.ref) : exploreViewAddress({ organisationId: organisation.id, projectId: scope.project, ref: scope.ref, q: null }, { typeKey: null, objectId: null, setId: options.objectSet });
+  const objectId = subject.kind === "object" ? subject.objectId : options.object;
   const run2 = await runAuthenticated(host, deps, async (clients) => {
-    const [origin, checks, saved] = await Promise.all([
+    const [origin, checks, saved, object] = await Promise.all([
       clients.admin.readWebOrigin({ input: {} }),
       Promise.all(subjectReads(clients, subject, scope)),
       objectSet === void 0 ? Promise.resolve(null) : clients.objects.readObjectSet({
         selector: { projectId: scope.project, ref: scope.ref },
         input: { setId: objectSet }
+      }),
+      objectId === void 0 ? Promise.resolve(null) : clients.objects.readObject({
+        selector: { projectId: scope.project, ref: scope.ref },
+        input: { objectId }
       })
     ]);
     if (saved !== null && ("refusal" in saved || saved.replayed === true)) return saved;
     const blocked = checks.find((check) => check.missing === null && ("refusal" in check.answer || check.answer.replayed === true));
     if (blocked !== void 0) return blocked.answer;
+    if (object !== null) {
+      if ("refusal" in object) {
+        return object.refusal.kind === "not-found" ? refusal(`no object ${objectId} in project ${scope.project} on ref ${scope.ref}`) : object;
+      }
+      if (object.replayed === true) return object;
+    }
     if ("refusal" in origin) {
       return origin.refusal.kind === "not-found" ? refusal("the host's web application was not found") : origin;
     }
     if (origin.replayed === true) return origin;
     const missing = checks.find((check) => check.missing !== null);
     if (missing !== void 0 && missing.missing !== null) return refusal(missing.missing);
-    return { kind: "link-ready", webOrigin: origin.result.webOrigin };
+    let path;
+    if (subject.kind === "object") {
+      if (object === null) throw new Error("an object link needs its object read");
+      path = exploreOpenObjectAddress({
+        organisationId: organisation.id,
+        projectId: scope.project,
+        ref: scope.ref,
+        typeKey: object.result.typeKey
+      }, subject.objectId);
+    } else if (subject.kind === "explore") {
+      path = exploreViewAddress({ organisationId: organisation.id, projectId: scope.project, ref: scope.ref, q: null }, {
+        typeKey: null,
+        objectId: options.object ?? null,
+        setId: objectSet ?? null
+      });
+    } else {
+      path = linkPath(organisation.id, scope.project, subject, scope.ref);
+    }
+    return { kind: "link-ready", webOrigin: origin.result.webOrigin, path };
   });
   if (!run2.ok) {
     return outcomeOfSessionFailure(run2.failure, SETTLE2);
@@ -9902,7 +11401,7 @@ async function link(context) {
   const { answer } = run2;
   if ("kind" in answer) {
     if (answer.kind === "client-refusal") return answer;
-    const { webOrigin } = answer;
+    const { webOrigin, path } = answer;
     if (webOrigin === null) {
       return refusal("this host has no web application configured, so it has no page to link to");
     }
@@ -9919,10 +11418,22 @@ var spec = (argumentCount, usage) => ({
   usage,
   help: [
     ...LINK_HELP,
+    "object:  the object's type page with the object open; its type comes from the object read",
+    "type:    the type's page",
+    "explore: Explore with exactly one --object or --object-set seed",
+    "branch-diff: the branch comparison page",
+    "project: the project page",
+    "proposal: the proposal review page",
+    "ontology: the organisation's Types workspace",
+    "change-set: the organisation's Change set workspace",
+    "app:     the published app's first page",
+    "app-page: the named page of a published app",
+    "app-draft: the app's draft screen in the Types workspace",
+    "organisation-page: the named organisation administration page or settings",
     "does:    reads the page's subject before printing its web address for the attached organisation",
     "ref:     --ref takes main or <projectId>/<branch>, the ref the platform returns; match --project when given",
     "refusal: a subject not found by the page's own read prints no address",
-    "example: openeng link explore --project proj_abc123 --ref main",
+    "example: openeng link explore --project proj_abc123 --ref main --object obj_abc123",
     "output:  the address on one line; under --json an object with link"
   ],
   run: link
@@ -10400,7 +11911,9 @@ var FLAG_NAME = {
   project: "--project",
   changeSet: "--change-set",
   revision: "--revision",
-  from: "--from"
+  from: "--from",
+  type: "--type",
+  sample: "--sample"
 };
 function required(usage, context, keys) {
   const values = {};
@@ -10657,7 +12170,7 @@ var typesDraftState = {
     return run2.ok ? outcomeOfEnvelope(run2.answer, settle2, (state) => `change set ${changeSetId} is ${state.state} at revision ${state.revision}`) : outcomeOfSessionFailure(run2.failure, settle2);
   }
 };
-function changesOfFile(path) {
+function objectOfFile(path, shape) {
   let text;
   try {
     text = readFileSync5(path, "utf8");
@@ -10677,9 +12190,13 @@ function changesOfFile(path) {
     throw error;
   }
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    return { ok: false, outcome: { kind: "client-refusal", message: `the file ${JSON.stringify(path)} is not a JSON object keyed by type key` } };
+    return { ok: false, outcome: { kind: "client-refusal", message: `the file ${JSON.stringify(path)} is not ${shape}` } };
   }
-  return { ok: true, changes: parsed };
+  return { ok: true, object: parsed };
+}
+function changesOfFile(path) {
+  const file = objectOfFile(path, "a JSON object keyed by type key");
+  return file.ok ? { ok: true, changes: file.object } : file;
 }
 function railGroupsOfFlag(text) {
   if (text === void 0) {
@@ -10766,6 +12283,81 @@ var typesDraftValidate = {
     return outcome.kind === "success" && violated ? { kind: "findings", value: outcome.value, text: outcome.text } : outcome;
   }
 };
+var typesDraftTry = {
+  organisation: "required",
+  words: ["types", "draft", "try"],
+  usage: "openeng types draft try --type <key> --sample <file> [--change-set <id>]",
+  help: [
+    "openeng types draft try --type <key> --sample <file> [--change-set <id>]",
+    "does:    checks one sample instance against the open change set's version of a type, with the check a write runs; writes nothing",
+    "example: openeng types draft try --type part --sample sample.json",
+    "output:  a line saying the sample fits, or a count and one line per violation (exit 4); under --json an object with valid and violations, each with path and rule"
+  ],
+  run: async (context) => {
+    const flags = required("openeng types draft try", context, ["type", "sample"]);
+    if (!flags.ok) {
+      return flags.outcome;
+    }
+    const { type: typeKey, sample: samplePath } = flags.values;
+    const file = objectOfFile(samplePath, "a JSON object of property values");
+    if (!file.ok) {
+      return file.outcome;
+    }
+    const sample = file.object;
+    const named = context.options.changeSet;
+    const settle2 = "repeat openeng types draft try, which only reads";
+    const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      let changeSetId = named;
+      if (changeSetId === void 0) {
+        const current = await clients.ontology.readCurrentChangeSet({ input: {} });
+        if ("refusal" in current) {
+          return { refusal: current.refusal, correlationId: current.correlationId };
+        }
+        if (current.replayed === true) {
+          throw new Error("the host answered a replay to a read that carried no idempotency key");
+        }
+        if (current.result === null) {
+          return { noChangeSet: true };
+        }
+        changeSetId = current.result.changeSetId;
+      }
+      const read = await clients.ontology.readChangeSet({ input: { changeSetId } });
+      if ("refusal" in read) {
+        return { refusal: read.refusal, correlationId: read.correlationId };
+      }
+      if (read.replayed === true) {
+        throw new Error("the host answered a replay to a read that carried no idempotency key");
+      }
+      return { check: checkSampleAgainstChanges(read.result.changes, typeKey, sample) };
+    });
+    if (!run2.ok) {
+      return outcomeOfSessionFailure(run2.failure, settle2);
+    }
+    const answer = run2.answer;
+    if ("refusal" in answer) {
+      return outcomeOfRouteRefusal(answer.refusal, settle2, answer.correlationId);
+    }
+    if ("noChangeSet" in answer) {
+      return { kind: "client-refusal", message: "no change set is open; open one with openeng types draft open" };
+    }
+    const check = answer.check;
+    if (check.kind === "no-such-type") {
+      return { kind: "client-refusal", message: `the change set holds no type by the key ${JSON.stringify(typeKey)}` };
+    }
+    if (check.kind === "no-properties") {
+      return { kind: "client-refusal", message: `${JSON.stringify(typeKey)} is a verb type, which has no properties an instance could carry` };
+    }
+    if (check.result.ok) {
+      return { kind: "success", value: { valid: true, violations: [] }, text: "the sample fits" };
+    }
+    const violations = check.result.violations.map((violation) => ({ path: violation.path, rule: violation.rule }));
+    return {
+      kind: "findings",
+      value: { valid: false, violations },
+      text: [`${String(violations.length)} ${violations.length === 1 ? "violation" : "violations"}`, ...violations.map((violation) => `  ${JSON.stringify(violation)}`)].join("\n")
+    };
+  }
+};
 var typesDraftDiscard = {
   organisation: "required",
   words: ["types", "draft", "discard"],
@@ -10810,6 +12402,495 @@ var typesDraftAccept = {
   }
 };
 
+// packages/cli/src/commands/attachment.ts
+import { createHash as createHash3, randomUUID as randomUUID5 } from "node:crypto";
+import { readFileSync as readFileSync6, writeFileSync } from "node:fs";
+import { basename } from "node:path";
+var usageAdd = "openeng attachment add <object> <property> <file> --project <id> --ref <ref>";
+var usageGet = "openeng attachment get <object> <property> [--out <path>] --project <id> --ref <ref>";
+var usageList = "openeng attachment list <object> --project <id> --ref <ref>";
+var invalid = (message) => ({ kind: "client-refusal", message });
+var malformed2 = (field) => ({ kind: "internal-failure", message: `the host answered with malformed ${field}` });
+function selectorOf2(context) {
+  const { project, ref } = context.options;
+  if (project === void 0 || ref === void 0) return invalid("attachment commands need --project <id> and --ref <ref>");
+  return { projectId: project, ref };
+}
+function positional(context, count, usage) {
+  if (context.args.length !== count || context.args.some((argument) => argument.length === 0)) return invalid(`usage: ${usage}`);
+  return context.args;
+}
+function isOutcome(value) {
+  return !Array.isArray(value) && typeof value === "object" && value !== null && "kind" in value;
+}
+function isSelector(value) {
+  return "projectId" in value;
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function descriptor(value) {
+  return isRecord4(value) && typeof value.sha256 === "string" && typeof value.name === "string" && typeof value.mediaType === "string" && typeof value.bytes === "number";
+}
+async function saveDescriptor(context, selector, objectId, property, file) {
+  const bytes = new Uint8Array(readFileSync6(file));
+  const name = basename(file);
+  const settle2 = `openeng attachment get ${objectId} ${property} --project ${selector.projectId} --ref ${selector.ref}`;
+  const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+    const staged = await clients.objects.stageAttachment(selector, { name, bytes });
+    if ("refusal" in staged) return { outcome: outcomeOfEnvelope(staged, settle2, (value2) => JSON.stringify(value2)) };
+    if (staged.replayed === true) return { outcome: outcomeOfEnvelope(staged, settle2, (value2) => JSON.stringify(value2)) };
+    const object = await clients.objects.readObject({ selector, input: { objectId } });
+    if ("refusal" in object) return { outcome: outcomeOfEnvelope(object, settle2, (value2) => JSON.stringify(value2)) };
+    if (object.replayed === true) return { outcome: outcomeOfEnvelope(object, settle2, (value2) => JSON.stringify(value2)) };
+    const catalogue = await clients.objects.readCatalogue({ selector: { projectId: selector.projectId }, input: {} });
+    if ("refusal" in catalogue) return { outcome: outcomeOfEnvelope(catalogue, settle2, (value2) => JSON.stringify(value2)) };
+    if (catalogue.replayed === true) return { outcome: outcomeOfEnvelope(catalogue, settle2, (value2) => JSON.stringify(value2)) };
+    const type = catalogue.result.objects.find((candidate) => candidate.typeKey === object.result.typeKey);
+    if (type === void 0) return { outcome: invalid(`could not find the published type version for object ${objectId}`) };
+    if (!isRecord4(type.propertyDefinitions)) return { outcome: malformed2("propertyDefinitions") };
+    const definitions = type.propertyDefinitions;
+    if (definitions[property] === void 0) return { outcome: invalid(`property ${property} is not declared on ${type.typeKey}`) };
+    if (!isRecord4(object.result.properties)) return { outcome: malformed2("object properties") };
+    const props = object.result.properties;
+    const current = props[property];
+    const previous = isRecord4(current) && "value" in current ? { value: current.value } : { absent: true };
+    const saved = await clients.objects.mutate({ selector, input: {
+      correlation: { kind: "mint" },
+      operation: { kind: "update-object", objectId, typeVersion: type.version, changes: { [property]: { from: previous, to: { value: staged.result } } } }
+    } }, randomUUID5());
+    if ("refusal" in saved) return { outcome: outcomeOfEnvelope(saved, settle2, (value2) => JSON.stringify(value2)) };
+    if (saved.replayed === true) return { outcome: outcomeOfEnvelope(saved, settle2, (value2) => JSON.stringify(value2)) };
+    if (saved.result.kind === "unknown") {
+      const outcome2 = {
+        kind: "unknown-outcome-no-answer",
+        message: `the mutation outcome is unknown (correlation ${saved.result.correlationId}; trailer ${saved.result.trailer})`,
+        settle: `recover this mutation on ref ${selector.ref} with correlation ${saved.result.correlationId}; recovery searches the trailer ${saved.result.trailer}`
+      };
+      return {
+        outcome: outcome2
+      };
+    }
+    if (saved.result.kind === "refused") return { outcome: outcomeOfEnvelope(saved, settle2, (value2) => JSON.stringify(value2)) };
+    const outcome = { kind: "success", value: staged.result, text: JSON.stringify(staged.result) };
+    return {
+      outcome,
+      descriptor: staged.result
+    };
+  });
+  if (!run2.ok) return outcomeOfSessionFailure(run2.failure, settle2);
+  if (run2.answer.outcome.kind !== "success") return run2.answer.outcome;
+  const value = run2.answer.descriptor;
+  return { kind: "success", value, text: JSON.stringify(value) };
+}
+var attachmentAdd = {
+  words: ["attachment", "add"],
+  arguments: 3,
+  organisation: "required",
+  usage: usageAdd,
+  help: [
+    usageAdd,
+    "does:    stages a file and saves its descriptor on the object's attachment property",
+    "example: openeng attachment add obj_abc drawing ./drawing.pdf --project proj_abc --ref main",
+    "output:  the attachment descriptor as JSON"
+  ],
+  run: async (context) => {
+    const args = positional(context, 3, usageAdd);
+    const selector = selectorOf2(context);
+    if (isOutcome(args)) return args;
+    if (!isSelector(selector)) return selector;
+    const [objectId, property, file] = args;
+    if (objectId === void 0 || property === void 0 || file === void 0) return invalid(`usage: ${usageAdd}`);
+    return saveDescriptor(context, selector, objectId, property, file);
+  }
+};
+var attachmentGet = {
+  words: ["attachment", "get"],
+  arguments: 2,
+  organisation: "required",
+  usage: usageGet,
+  help: [
+    usageGet,
+    "does:    downloads an object's attachment property to --out or the descriptor's name",
+    "example: openeng attachment get obj_abc drawing --out ./drawing.pdf --project proj_abc --ref main",
+    "output:  the path written"
+  ],
+  run: async (context) => {
+    const args = positional(context, 2, usageGet);
+    const selector = selectorOf2(context);
+    if (isOutcome(args)) return args;
+    if (!isSelector(selector)) return selector;
+    const [objectId, property] = args;
+    if (objectId === void 0 || property === void 0) return invalid(`usage: ${usageGet}`);
+    const settle2 = `repeat openeng attachment get ${objectId} ${property} --project ${selector.projectId} --ref ${selector.ref}`;
+    const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      const answer = await clients.objects.readAttachment(selector, { objectId, property });
+      if ("refusal" in answer) return { outcome: outcomeOfEnvelope(answer, settle2, (value) => JSON.stringify(value)) };
+      if (answer.replayed === true) return { outcome: outcomeOfEnvelope(answer, settle2, (value) => JSON.stringify(value)) };
+      const chunks = [];
+      for await (const chunk of answer.result.body) chunks.push(chunk);
+      const bytes = Buffer.concat(chunks);
+      const digest = createHash3("sha256").update(bytes).digest("hex");
+      if (digest !== answer.result.descriptor.sha256) {
+        const outcome2 = { kind: "internal-failure", message: "the downloaded attachment did not match its descriptor's SHA-256" };
+        return { outcome: outcome2 };
+      }
+      const path = context.options.out ?? answer.result.descriptor.name;
+      writeFileSync(path, bytes);
+      const outcome = { kind: "success", value: { path }, text: path };
+      return { outcome };
+    });
+    return run2.ok ? run2.answer.outcome : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+function attachmentProperties(object, propertyDefinitions) {
+  if (!isRecord4(propertyDefinitions)) return { ok: false, outcome: malformed2("propertyDefinitions") };
+  if (!isRecord4(object.properties)) return { ok: false, outcome: malformed2("object properties") };
+  const properties = object.properties;
+  const entries7 = Object.entries(propertyDefinitions).flatMap(([property, definition]) => {
+    if (!isRecord4(definition) || definition.kind !== "attachment") return [];
+    const stored = properties[property];
+    if (!isRecord4(stored) || !descriptor(stored.value)) return [];
+    return [{ property, descriptor: stored.value }];
+  });
+  return { ok: true, entries: entries7 };
+}
+var attachmentList = {
+  words: ["attachment", "list"],
+  arguments: 1,
+  organisation: "required",
+  usage: usageList,
+  help: [
+    usageList,
+    "does:    lists the object's attachment-kind properties",
+    "example: openeng attachment list obj_abc --project proj_abc --ref main",
+    "output:  one JSON object per attachment property with its descriptor"
+  ],
+  run: async (context) => {
+    const args = positional(context, 1, usageList);
+    const selector = selectorOf2(context);
+    if (isOutcome(args)) return args;
+    if (!isSelector(selector)) return selector;
+    const objectId = args[0];
+    if (objectId === void 0) return invalid(`usage: ${usageList}`);
+    const settle2 = `openeng attachment list ${objectId} --project ${selector.projectId} --ref ${selector.ref}`;
+    const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      const object = await clients.objects.readObject({ selector, input: { objectId } });
+      if ("refusal" in object) return { outcome: outcomeOfEnvelope(object, settle2, (value) => JSON.stringify(value)) };
+      if (object.replayed === true) return { outcome: outcomeOfEnvelope(object, settle2, (value) => JSON.stringify(value)) };
+      const catalogue = await clients.objects.readCatalogue({ selector: { projectId: selector.projectId }, input: {} });
+      if ("refusal" in catalogue) return { outcome: outcomeOfEnvelope(catalogue, settle2, (value) => JSON.stringify(value)) };
+      if (catalogue.replayed === true) return { outcome: outcomeOfEnvelope(catalogue, settle2, (value) => JSON.stringify(value)) };
+      const type = catalogue.result.objects.find((candidate) => candidate.typeKey === object.result.typeKey);
+      if (type === void 0) return { outcome: invalid(`could not find the published type version for object ${objectId}`) };
+      const listed = attachmentProperties(object.result, type.propertyDefinitions);
+      if (!listed.ok) return { outcome: listed.outcome };
+      const entries7 = listed.entries;
+      const outcome = { kind: "success", value: entries7, text: entries7.map((entry2) => JSON.stringify(entry2)).join("\n") || "no attachments" };
+      return { outcome };
+    });
+    return run2.ok ? run2.answer.outcome : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+
+// packages/cli/src/commands/links.ts
+import { randomUUID as randomUUID6 } from "node:crypto";
+function boundText(bound) {
+  const name = `${bound.property}${bound.index === void 0 ? "" : `[${bound.index}]`}`;
+  const label = `${name}${bound.quantity === void 0 ? "" : ` quantity ${bound.quantity}`}${"over" in bound ? ` ${bound.over} ${bound.coverage}` : ""}`;
+  switch (bound.state) {
+    case "in":
+    case "out": {
+      const definition = { kind: "number", unit: bound.unit };
+      return `${label}: ${bound.state}; ${displayPropertyValue(bound.value, definition)} ${bound.comparison} ${displayPropertyValue(bound.limit, definition)}` + (bound.tolerance === void 0 ? "" : `; tolerance ${displayPropertyValue(bound.tolerance, definition)}`);
+    }
+    case "no-value":
+      return `${label}: no-value; missing ${bound.missing}${"propertyMissing" in bound ? `; property ${bound.propertyMissing}` : ""}`;
+    case "not-visible":
+      return `${label}: not-visible; hidden ${bound.hidden}`;
+    case "unit-mismatch":
+      return `${label}: unit-mismatch`;
+    case "too-many-links":
+      return `${label}: too-many-links`;
+  }
+}
+function boundsText(bounds) {
+  return "bounds" in bounds ? `${bounds.state}; ${bounds.bounds.map(boundText).join("; ")}` : bounds.state;
+}
+function statusText(answer) {
+  return [
+    `head: ${answer.head}`,
+    ...answer.links.length === 0 ? ["no tracked links"] : answer.links.map((link2) => `${link2.linkId} (${link2.typeKey}) ${link2.upstream.projectId}/${link2.upstream.objectId} -> ${link2.downstream.projectId}/${link2.downstream.objectId}
+  review: ${link2.review.state}${"upstreamVersion" in link2.review ? `; version ${link2.review.upstreamVersion}` : ""}
+  bounds: ${boundsText(link2.bounds)}` + (link2.clearing === null ? "" : `
+  cleared by ${link2.clearing.clearedBy} at ${link2.clearing.clearedAt}`)),
+    ...answer.aggregates.map((bound) => `aggregate ${boundText(bound)}`)
+  ].join("\n");
+}
+var linksStatus = {
+  words: ["links", "status"],
+  arguments: 1,
+  organisation: "required",
+  usage: "openeng links status <object> --project <id> --ref <ref>",
+  help: [
+    "openeng links status <object> --project <id> --ref <ref>",
+    "does:    reads review and bounds states, clearing attribution and upstream versions; bounds show units",
+    "example: openeng links status obj_abc --project proj_abc --ref main",
+    "output:  head, tracked links and aggregate bounds; --json returns the complete answer"
+  ],
+  run: async ({ host, deps, options, args }) => {
+    const { project, ref } = options;
+    const [objectId] = args;
+    if (project === void 0 || ref === void 0 || objectId === void 0 || objectId.length === 0) {
+      return { kind: "client-refusal", message: "links status needs <object>, --project <id> and --ref <ref>" };
+    }
+    const settle2 = `openeng links status ${objectId} --project ${project} --ref ${ref}`;
+    const run2 = await runAuthenticated(host, deps, (clients) => clients.objects.readLinkStatus({
+      selector: { projectId: project, ref },
+      input: { objectId }
+    }));
+    return run2.ok ? outcomeOfEnvelope(run2.answer, settle2, statusText) : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+var linksClear = {
+  words: ["links", "clear"],
+  arguments: "rest",
+  organisation: "required",
+  usage: "openeng links clear <link>... --version <v>... --project <id> --ref <ref>",
+  help: [
+    "openeng links clear <link>... --version <v>... --project <id> --ref <ref>",
+    "does:    clears 1 to 100 links atomically; supply one upstream version from links status per link, in the same order",
+    "example: openeng links clear edg_abc --version <upstream-version> --project proj_abc --ref main",
+    "output:  the clearing commit and correlation; upstream-changed requires reading the status and reviewing again"
+  ],
+  run: async ({ host, deps, options, args }) => {
+    const { project, ref, upstreamVersions } = options;
+    if (project === void 0 || ref === void 0 || upstreamVersions === void 0 || args.length < 1 || args.length > MAX_CLEAR_ENTRIES || upstreamVersions.length !== args.length || args.some((link2) => link2.length === 0) || upstreamVersions.some((version) => version.length === 0)) {
+      return { kind: "client-refusal", message: "links clear needs 1 to 100 links, one --version per link, --project <id> and --ref <ref>" };
+    }
+    const entries7 = args.map((linkId, index) => {
+      const upstreamVersion = upstreamVersions[index];
+      if (upstreamVersion === void 0) throw new Error("a clearing entry has no upstream version");
+      return { linkId, upstreamVersion };
+    });
+    const settle2 = `read link status on ref ${ref} or recover the clearing by its correlation id`;
+    const run2 = await runAuthenticated(host, deps, (clients) => clients.objects.clearLinks({
+      selector: { projectId: project },
+      input: { correlation: { kind: "mint" }, ref, entries: entries7 }
+    }, randomUUID6()));
+    if (!run2.ok) return outcomeOfSessionFailure(run2.failure, settle2);
+    if ("result" in run2.answer && run2.answer.result.kind === "unknown") {
+      return { kind: "unknown-outcome-no-answer", message: `clearing outcome unknown; correlation ${run2.answer.result.correlationId}`, settle: settle2 };
+    }
+    return outcomeOfEnvelope(run2.answer, settle2, (answer) => {
+      if (answer.kind !== "succeeded") throw new Error("a clearing success was required");
+      return `cleared ${entries7.length} ${entries7.length === 1 ? "link" : "links"}; ${"hash" in answer.commit ? `commit ${answer.commit.hash}` : "no change"}; correlation ${answer.correlationId}`;
+    });
+  }
+};
+
+// packages/cli/src/commands/branches.ts
+function impactText(answer) {
+  return [
+    `base head: ${answer.baseHead}
+head: ${answer.head}
+withheld: ${answer.withheld}`,
+    ...answer.reviewChanges.map((change) => `review ${change.linkId}: ${change.base.state} -> ${change.head.state}`),
+    ...answer.boundsChanges.map((change) => `bounds ${change.linkId}: ${boundsText(change.base)} -> ${boundsText(change.head)}`),
+    ...answer.aggregateChanges.map((change) => `aggregate ${change.owner.projectId}/${change.owner.objectId} ${change.property}${change.index === void 0 ? "" : `[${change.index}]`}: ${"over" in change.base ? boundText(change.base) : change.base.state} -> ${"over" in change.head ? boundText(change.head) : change.head.state}`),
+    ...answer.reach.map((entry2) => `reach ${entry2.depth}: ${entry2.address.projectId}/${entry2.address.objectId} via ${entry2.linkId}`),
+    ...answer.hidden.map((entry2) => `hidden ${entry2.depth}: ${entry2.count}`)
+  ].join("\n");
+}
+var branchesImpact = {
+  words: ["branches", "impact"],
+  arguments: 1,
+  organisation: "required",
+  usage: "openeng branches impact <ref> --base <base> --project <id>",
+  help: [
+    "openeng branches impact <ref> --base <base> --project <id>",
+    "does:    reads review and bounds changes against the merge base, downstream reach and hidden counts",
+    "example: openeng branches impact proj_abc/work --base main --project proj_abc",
+    "output:  both heads, changes with units, reach and hidden counts; --json returns the complete answer"
+  ],
+  run: async ({ host, deps, options, args }) => {
+    const { project, base } = options;
+    const [ref] = args;
+    if (project === void 0 || base === void 0 || ref === void 0 || ref.length === 0) {
+      return { kind: "client-refusal", message: "branches impact needs <ref>, --base <base> and --project <id>" };
+    }
+    const settle2 = `openeng branches impact ${ref} --base ${base} --project ${project}`;
+    const run2 = await runAuthenticated(host, deps, (clients) => clients.branches.readChangeImpact({
+      selector: { projectId: project },
+      input: { ref, base }
+    }));
+    return run2.ok ? outcomeOfEnvelope(run2.answer, settle2, impactText) : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+
+// packages/cli/src/commands/hosted-app.ts
+import { readFileSync as readFileSync7 } from "node:fs";
+var ONE_WALL_WARNING = "This app runs without the WebRTC wall. Its code can send anything a viewer of the app can read to any host on the internet, over WebRTC or through DNS lookups, and nothing reports it. It runs with each viewer's authority. Review the current code, and every later version, for WebRTC use, DNS hints and other exploits before people open it. A coding agent can do the review. Withdrawing this permission stops the app's next request, but not data it has already read.";
+var ONE_WALL_UNKNOWN = "This account cannot read whether the app may send data out of the browser. An administrator can check its one-wall permission.";
+var usagePublish = "openeng hosted-app publish <bundle> --project <id> --key <app key>";
+var usageList2 = "openeng hosted-app list --project <id>";
+var usageVersions = "openeng hosted-app versions <app key> --project <id>";
+var usageRevoke = "openeng hosted-app revoke <app key | app id | version id> --project <id>";
+var invalid2 = (message) => ({ kind: "client-refusal", message });
+function projectOf(context, name) {
+  const { project } = context.options;
+  return project === void 0 || project === "" ? invalid2(`openeng hosted-app ${name} needs --project <id>`) : project;
+}
+function argumentOf(context, usage) {
+  const [first, ...rest] = context.args;
+  return first === void 0 || first === "" || rest.length > 0 ? invalid2(`usage: ${usage}`) : first;
+}
+function isOutcome2(value) {
+  return typeof value !== "string";
+}
+var appLine = (app) => `${app.key}  ${app.appId}  ${app.state}  created ${app.createdAt} by ${app.createdBy}`;
+var versionLine = (version) => `${version.versionId}  ${version.state}  sha256 ${version.bundleSha256}  ${String(version.size)} bytes  published ${version.publishedAt} by ${version.publishedBy}`;
+async function appOfKey(clients, projectId, key, settle2) {
+  const listed = await clients.hostedApps.listHostedApps({ selector: { projectId }, input: {} });
+  if ("refusal" in listed || listed.replayed === true) return { outcome: outcomeOfEnvelope(listed, settle2, () => "") };
+  const app = listed.result.apps.find((candidate) => candidate.key === key);
+  return app === void 0 ? { outcome: invalid2(`project ${projectId} has no hosted app with key ${key}`) } : { app };
+}
+var hostedAppPublish = {
+  words: ["hosted-app", "publish"],
+  arguments: 1,
+  organisation: "required",
+  usage: usagePublish,
+  help: [
+    usagePublish,
+    "does:    publishes a bundle file as the next version of the project's hosted app under the key, creating the app when the project has none under that key",
+    "example: openeng hosted-app publish ./dist/app.js --project proj_abc --key rover-dashboard",
+    "output:  the version id, its SHA-256 and its size; for an app that holds the one-wall permission, the one-wall warning as well"
+  ],
+  run: async (context) => {
+    const project = projectOf(context, "publish");
+    if (isOutcome2(project)) return project;
+    const file = argumentOf(context, usagePublish);
+    if (isOutcome2(file)) return file;
+    const key = context.options.key;
+    if (key === void 0 || key === "") return invalid2(`openeng hosted-app publish needs --key <app key>; usage: ${usagePublish}`);
+    const bytes = new Uint8Array(readFileSync7(file));
+    const settle2 = `openeng hosted-app versions ${key} --project ${project}, which only reads; publish again only if the version is absent`;
+    const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      const found = await appOfKey(clients, project, key, settle2);
+      let appId;
+      if ("app" in found) {
+        appId = found.app.appId;
+      } else if (found.outcome.kind === "client-refusal") {
+        const created = await clients.hostedApps.createHostedApp({ selector: { projectId: project }, input: { key } });
+        if ("refusal" in created || created.replayed === true) return { outcome: outcomeOfEnvelope(created, settle2, () => "") };
+        appId = created.result.appId;
+      } else {
+        return { outcome: found.outcome };
+      }
+      const published = await clients.hostedApps.publishHostedVersion({ projectId: project }, { appKey: key, bytes });
+      if ("refusal" in published || published.replayed === true) return { outcome: outcomeOfEnvelope(published, settle2, () => "") };
+      const grants = await clients.hostedApps.listHostedOneWallGrants({ input: {} });
+      const unreadable = "refusal" in grants && (grants.refusal.kind === "not-found" || grants.refusal.kind === "refused" && grants.refusal.rule === "not-permitted");
+      if (!unreadable && ("refusal" in grants || grants.replayed === true)) return { outcome: outcomeOfEnvelope(grants, settle2, () => "") };
+      const oneWall = "result" in grants ? grants.result.grants.some((grant) => grant.appId === appId) : "unknown";
+      const notes = oneWall === true ? [ONE_WALL_WARNING] : oneWall === "unknown" ? [ONE_WALL_UNKNOWN] : [];
+      const text = (version) => [`published ${version.versionId} of ${key}  sha256 ${version.bundleSha256}  ${String(version.size)} bytes`, ...notes].join("\n");
+      const outcome = outcomeOfEnvelope(published, settle2, text);
+      if (outcome.kind !== "success") return { outcome };
+      return {
+        outcome: {
+          ...outcome,
+          value: {
+            ...outcome.value,
+            oneWall,
+            ...oneWall === false ? {} : { warning: oneWall === true ? ONE_WALL_WARNING : ONE_WALL_UNKNOWN }
+          }
+        }
+      };
+    });
+    return run2.ok ? run2.answer.outcome : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+var hostedAppList = {
+  words: ["hosted-app", "list"],
+  organisation: "required",
+  usage: usageList2,
+  help: [
+    usageList2,
+    "does:    lists the hosted apps of the project",
+    "example: openeng hosted-app list --project proj_abc",
+    "output:  one line per app: key, id, state, creation time and creator"
+  ],
+  run: async (context) => {
+    const project = projectOf(context, "list");
+    if (isOutcome2(project)) return project;
+    const settle2 = "repeat openeng hosted-app list, which only reads";
+    const run2 = await runAuthenticated(context.host, context.deps, (clients) => clients.hostedApps.listHostedApps({ selector: { projectId: project }, input: {} }));
+    return run2.ok ? outcomeOfEnvelope(run2.answer, settle2, (listed) => listed.apps.length === 0 ? "no hosted apps" : listed.apps.map(appLine).join("\n")) : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+var hostedAppVersions = {
+  words: ["hosted-app", "versions"],
+  arguments: 1,
+  organisation: "required",
+  usage: usageVersions,
+  help: [
+    usageVersions,
+    "does:    lists the versions of the project's hosted app under the key, newest first",
+    "example: openeng hosted-app versions rover-dashboard --project proj_abc",
+    "output:  one line per version: id, state, SHA-256, size, publication time and publisher"
+  ],
+  run: async (context) => {
+    const project = projectOf(context, "versions");
+    if (isOutcome2(project)) return project;
+    const key = argumentOf(context, usageVersions);
+    if (isOutcome2(key)) return key;
+    const settle2 = `repeat ${usageVersions}, which only reads`;
+    const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      const found = await appOfKey(clients, project, key, settle2);
+      if ("outcome" in found) return { outcome: found.outcome };
+      const listed = await clients.hostedApps.listHostedVersions({ selector: { projectId: project }, input: { appId: found.app.appId } });
+      return { outcome: outcomeOfEnvelope(listed, settle2, (result) => result.versions.length === 0 ? "no versions" : result.versions.map(versionLine).join("\n")) };
+    });
+    return run2.ok ? run2.answer.outcome : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+var hostedAppRevoke = {
+  words: ["hosted-app", "revoke"],
+  arguments: 1,
+  organisation: "required",
+  usage: usageRevoke,
+  help: [
+    usageRevoke,
+    "does:    revokes one version (an argument starting hav_) or the whole app (its key or app_ id); the next call under any launch of it is refused",
+    "example: openeng hosted-app revoke hav_abc... --project proj_abc",
+    "output:  one line naming what was revoked"
+  ],
+  run: async (context) => {
+    const project = projectOf(context, "revoke");
+    if (isOutcome2(project)) return project;
+    const target = argumentOf(context, usageRevoke);
+    if (isOutcome2(target)) return target;
+    const settle2 = `repeat openeng hosted-app list --project ${project}, then revoke again only if the app or version is still live`;
+    const run2 = await runAuthenticated(context.host, context.deps, async (clients) => {
+      if (target.startsWith("hav_")) {
+        const revoked2 = await clients.hostedApps.revokeHostedVersion({ selector: { projectId: project }, input: { versionId: target } });
+        return { outcome: outcomeOfEnvelope(revoked2, settle2, (result) => `revoked version ${result.versionId}`) };
+      }
+      if (target.startsWith("app_")) {
+        const revoked2 = await clients.hostedApps.revokeHostedApp({ selector: { projectId: project }, input: { appId: target } });
+        return { outcome: outcomeOfEnvelope(revoked2, settle2, (result) => `revoked app ${target} (${result.appId})`) };
+      }
+      const found = await appOfKey(clients, project, target, settle2);
+      if ("outcome" in found) return { outcome: found.outcome };
+      const revoked = await clients.hostedApps.revokeHostedApp({ selector: { projectId: project }, input: { appId: found.app.appId } });
+      return { outcome: outcomeOfEnvelope(revoked, settle2, (result) => `revoked app ${target} (${result.appId})`) };
+    });
+    return run2.ok ? run2.answer.outcome : outcomeOfSessionFailure(run2.failure, settle2);
+  }
+};
+
 // packages/cli/src/commands/public.ts
 var loginCommand = {
   words: ["login"],
@@ -10884,6 +12965,16 @@ var PUBLIC_HAND_WRITTEN_COMMANDS = [
   ceilingSet,
   schemaUpdateRequest,
   schemaUpdateShow,
+  attachmentAdd,
+  attachmentGet,
+  attachmentList,
+  linksStatus,
+  linksClear,
+  branchesImpact,
+  hostedAppPublish,
+  hostedAppList,
+  hostedAppVersions,
+  hostedAppRevoke,
   typesList,
   typesExport,
   typesDraftOpen,
@@ -10891,6 +12982,7 @@ var PUBLIC_HAND_WRITTEN_COMMANDS = [
   typesDraftShow,
   typesDraftState,
   typesDraftRevise,
+  typesDraftTry,
   typesDraftValidate,
   typesDraftDiscard,
   typesDraftAccept,
@@ -10913,7 +13005,7 @@ var PUBLIC_COMMANDS = [
 
 // packages/cli/src/main.ts
 import { spawn } from "node:child_process";
-import { readFileSync as readFileSync6 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 import { homedir } from "node:os";
 import { parseArgs } from "node:util";
 
@@ -10934,11 +13026,14 @@ var CLI_OPTIONS = {
   consequence: { type: "string" },
   "rule-id": { type: "string" },
   ref: { type: "string" },
+  base: { type: "string" },
   name: { type: "string" },
   "change-set": { type: "string" },
   revision: { type: "string" },
   from: { type: "string" },
   "rail-groups": { type: "string" },
+  type: { type: "string" },
+  sample: { type: "string" },
   size: { type: "string" },
   world: { type: "string" },
   selector: { type: "string" },
@@ -10951,12 +13046,15 @@ var CLI_OPTIONS = {
   team: { type: "string" },
   owner: { type: "string" },
   label: { type: "string" },
+  out: { type: "string" },
+  key: { type: "string" },
   help: { type: "boolean", short: "h" },
   version: { type: "boolean" }
 };
+var APP_KEY_FORM = /^[a-z0-9][a-z0-9-]{0,62}$/;
 
 // packages/cli/src/cli-version.ts
-var PATCH_VERSION = 1;
+var PATCH_VERSION = 0;
 var CLI_VERSION = `0.${PROTOCOL_VERSION}.${PATCH_VERSION}`;
 
 // packages/cli/src/environment.ts
@@ -10964,12 +13062,99 @@ var readEnvironment = () => Object.freeze({
   OPENENG_HOST: process.env.OPENENG_HOST,
   OPENENG_SIGN_IN_ORIGIN: process.env.OPENENG_SIGN_IN_ORIGIN,
   OPENENG_SESSION_STORE: process.env.OPENENG_SESSION_STORE,
-  XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME
+  XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME,
+  OPENENG_NO_UPDATE_CHECK: process.env.OPENENG_NO_UPDATE_CHECK,
+  CI: process.env.CI
 });
 
 // packages/cli/src/transport.ts
 var createTransport = (host) => host.kind === "unix" ? createHostFetch(host.socketPath) : createHttpsTransport(host.origin);
 
+// packages/cli/src/update-check.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { existsSync, mkdirSync as mkdirSync3, readFileSync as readFileSync8, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join4 } from "node:path";
+function versionParts(value) {
+  if (typeof value !== "string" || !/^\d+\.\d+\.\d+$/.test(value)) {
+    return null;
+  }
+  const parts = value.split(".").map(Number);
+  return parts.every(Number.isSafeInteger) ? parts : null;
+}
+function readCache(file) {
+  if (!existsSync(file)) {
+    return null;
+  }
+  const value = JSON.parse(readFileSync8(file, "utf8"));
+  if (typeof value !== "object" || value === null || !("latest" in value) || !("checkedAt" in value)) {
+    return null;
+  }
+  return typeof value.latest === "string" && versionParts(value.latest) !== null && typeof value.checkedAt === "number" && Number.isFinite(value.checkedAt) ? { latest: value.latest, checkedAt: value.checkedAt } : null;
+}
+async function publishedVersion(signal) {
+  const response = await fetch("https://registry.npmjs.org/@openengio%2fcli/latest", { signal, redirect: "error" });
+  if (!response.ok) {
+    return null;
+  }
+  const value = await response.json();
+  return typeof value === "object" && value !== null && "version" in value && typeof value.version === "string" && versionParts(value.version) !== null ? value.version : null;
+}
+async function fetchLatest() {
+  const controller = new AbortController();
+  let timer;
+  const deadline = new Promise((resolve) => {
+    timer = setTimeout(() => {
+      controller.abort();
+      resolve(null);
+    }, 1500);
+  });
+  try {
+    return await Promise.race([publishedVersion(controller.signal), deadline]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function writeCache(directory, file, cache) {
+  mkdirSync3(directory, { recursive: true, mode: 448 });
+  const temporary = `${file}.${randomUUID7()}.tmp`;
+  try {
+    writeFileSync2(temporary, JSON.stringify(cache), { flag: "wx", mode: 384 });
+    renameSync2(temporary, file);
+  } finally {
+    if (existsSync(temporary)) {
+      unlinkSync3(temporary);
+    }
+  }
+}
+async function checkForUpdate(configDirectory) {
+  try {
+    const directory = join4(configDirectory, "openeng");
+    const file = join4(directory, "update-check.json");
+    const now = Date.now();
+    let cache = readCache(file);
+    if (cache === null || now < cache.checkedAt || now - cache.checkedAt >= 864e5) {
+      const latest2 = await fetchLatest();
+      if (latest2 === null) {
+        return;
+      }
+      cache = { latest: latest2, checkedAt: now };
+      writeCache(directory, file, cache);
+    }
+    const latest = versionParts(cache.latest);
+    const current = versionParts(CLI_VERSION);
+    if (latest === null || current === null) {
+      return;
+    }
+    const difference = latest.findIndex((part, index) => part !== current[index]);
+    if (difference !== -1 && latest[difference] > current[difference]) {
+      process.stderr.write(`openeng ${cache.latest} is available (you have ${CLI_VERSION}): npm install -g @openengio/cli@latest
+`);
+    }
+  } catch {
+    return;
+  }
+}
+
 // packages/cli/src/main.ts
 var clock = {
   now: () => Date.now(),
@@ -11054,12 +13239,22 @@ var addressPrinter = (json) => (address) => {
 var promptSecret = createSecretPrompt(process.stdin, process.stderr);
 function parseInvocation(argv) {
   try {
+    const preliminary = parseArgs({
+      args: [...argv],
+      allowPositionals: true,
+      strict: false,
+      options: CLI_OPTIONS
+    });
+    const clearing = preliminary.positionals[0] === "links" && preliminary.positionals[1] === "clear";
     const { values, positionals } = parseArgs({
       args: [...argv],
       allowPositionals: true,
       strict: true,
-      options: CLI_OPTIONS
+      options: clearing ? { ...CLI_OPTIONS, version: { type: "string", multiple: true } } : CLI_OPTIONS
     });
+    if (values.key !== void 0 && !APP_KEY_FORM.test(values.key)) {
+      return { kind: "client-refusal", message: "--key takes an app key: lower-case letters, digits and hyphens, starting with a letter or digit, at most 63 characters" };
+    }
     return {
       words: positionals,
       help: values.help === true,
@@ -11080,11 +13275,15 @@ function parseInvocation(argv) {
         consequence: values.consequence,
         ruleId: values["rule-id"],
         ref: values.ref,
+        base: values.base,
+        ...clearing && Array.isArray(values.version) ? { upstreamVersions: values.version } : {},
         name: values.name,
         changeSet: values["change-set"],
         revision: values.revision,
         from: values.from,
         railGroups: values["rail-groups"],
+        type: values.type,
+        sample: values.sample,
         size: values.size,
         world: values.world,
         selector: values.selector,
@@ -11096,7 +13295,9 @@ function parseInvocation(argv) {
         company: values.company,
         team: values.team,
         owner: values.owner,
-        label: values.label
+        label: values.label,
+        out: values.out,
+        key: values.key
       }
     };
   } catch (error) {
@@ -11117,11 +13318,11 @@ async function run(commands, argv) {
   }
   const { options } = invocation;
   if (invocation.version) {
-    return { outcome: { kind: "success", value: { version: CLI_VERSION }, text: CLI_VERSION }, json: options.json, scope: null };
+    return { outcome: { kind: "success", value: { version: CLI_VERSION }, text: CLI_VERSION }, json: options.json, scope: null, skipUpdateCheck: true };
   }
   const helped = outcomeOfHelp(commands, invocation.words, invocation.help);
   if (helped !== void 0) {
-    return { outcome: helped, json: options.json, scope: null };
+    return { outcome: helped, json: options.json, scope: null, skipUpdateCheck: true };
   }
   const command = findCommand(commands, invocation.words);
   if (command === void 0) {
@@ -11169,7 +13370,7 @@ ${usageLines(commands).join("\n")}` : unknownCommandMessage(commands, invocation
       deps,
       options,
       args: invocation.words.slice(command.words.length),
-      readStandardInput: () => readFileSync6(0, "utf8"),
+      readStandardInput: () => readFileSync9(0, "utf8"),
       promptSecret,
       writeLine: (line) => process.stdout.write(`${line}
 `),
@@ -11224,6 +13425,10 @@ async function main(commands) {
 `);
   }
   process.exitCode = rendered.exitCode;
+  const environment = readEnvironment();
+  if (result.skipUpdateCheck !== true && environment.OPENENG_NO_UPDATE_CHECK !== "1" && environment.CI === void 0) {
+    await checkForUpdate(configurationDirectory(environment.XDG_CONFIG_HOME, homedir()));
+  }
 }
 
 // packages/cli/src/bin-public.ts