@opengeni/contracts 0.35.0 → 0.37.0

package/dist/chunk-WYBDERIY.js

@@ -0,0 +1,102 @@
+// src/connector-destinations.ts
+import { z } from "zod";
+var ConnectorDocumentDestinationAuthority = z.enum([
+  "organization",
+  "workspace",
+  "personal"
+]);
+var ConnectorDocumentDestinationSelection = z.object({
+  authorityKind: ConnectorDocumentDestinationAuthority,
+  collectionId: z.string().uuid().nullable().default(null)
+});
+var ConnectorDocumentDestination = z.object({
+  authorityKind: ConnectorDocumentDestinationAuthority,
+  authorityAccountId: z.string().uuid(),
+  authorityWorkspaceId: z.string().uuid().nullable(),
+  authoritySubjectId: z.string().trim().min(1).max(1024).nullable(),
+  collectionId: z.string().uuid().nullable().default(null)
+}).superRefine((destination, context) => {
+  if (destination.authorityKind === "organization") {
+    if (destination.authorityWorkspaceId !== null || destination.authoritySubjectId !== null) {
+      context.addIssue({
+        code: "custom",
+        message: "organization connector destinations cannot bind workspace or subject authority"
+      });
+    }
+    return;
+  }
+  if (destination.authorityWorkspaceId === null) {
+    context.addIssue({
+      code: "custom",
+      message: "workspace and personal connector destinations require workspace authority"
+    });
+  }
+  if (destination.authorityKind === "workspace" && destination.authoritySubjectId !== null) {
+    context.addIssue({
+      code: "custom",
+      message: "workspace connector destinations cannot bind subject authority"
+    });
+  }
+  if (destination.authorityKind === "personal" && destination.authoritySubjectId === null) {
+    context.addIssue({
+      code: "custom",
+      message: "personal connector destinations require immutable subject authority"
+    });
+  }
+});
+function bindConnectorDocumentDestination(selection, context) {
+  return ConnectorDocumentDestination.parse({
+    authorityKind: selection.authorityKind,
+    authorityAccountId: context.accountId,
+    authorityWorkspaceId: selection.authorityKind === "organization" ? null : context.workspaceId,
+    authoritySubjectId: selection.authorityKind === "personal" ? context.initiatingSubjectId : null,
+    collectionId: selection.collectionId
+  });
+}
+function legacyWorkspaceConnectorDocumentDestination(context) {
+  return ConnectorDocumentDestination.parse({
+    authorityKind: "workspace",
+    authorityAccountId: context.accountId,
+    authorityWorkspaceId: context.workspaceId,
+    authoritySubjectId: null,
+    collectionId: null
+  });
+}
+function resolveConnectorDocumentDestination(value, context) {
+  if (value === void 0 || value === null) {
+    return legacyWorkspaceConnectorDocumentDestination(context);
+  }
+  const destination = ConnectorDocumentDestination.parse(value);
+  if (destination.authorityAccountId !== context.accountId) {
+    throw new Error("connector destination organization authority mismatch");
+  }
+  if (destination.authorityKind !== "organization" && destination.authorityWorkspaceId !== context.workspaceId) {
+    throw new Error("connector destination workspace authority mismatch");
+  }
+  if (destination.authorityKind === "personal" && destination.authoritySubjectId !== context.connectionSubjectId) {
+    throw new Error("connector destination personal authority mismatch");
+  }
+  return destination;
+}
+function connectorDestinationDocumentAuthority(destination) {
+  return {
+    authorityKind: destination.authorityKind,
+    authorityWorkspaceId: destination.authorityWorkspaceId,
+    authoritySubjectId: destination.authoritySubjectId
+  };
+}
+function connectorDocumentDestinationCollectionId(destination, defaultCollectionId) {
+  return destination.collectionId ?? z.string().uuid().parse(defaultCollectionId);
+}
+
+export {
+  ConnectorDocumentDestinationAuthority,
+  ConnectorDocumentDestinationSelection,
+  ConnectorDocumentDestination,
+  bindConnectorDocumentDestination,
+  legacyWorkspaceConnectorDocumentDestination,
+  resolveConnectorDocumentDestination,
+  connectorDestinationDocumentAuthority,
+  connectorDocumentDestinationCollectionId
+};
+//# sourceMappingURL=chunk-WYBDERIY.js.map

package/dist/chunk-WYBDERIY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connector-destinations.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const ConnectorDocumentDestinationAuthority = z.enum([\n  \"organization\",\n  \"workspace\",\n  \"personal\",\n]);\nexport type ConnectorDocumentDestinationAuthority = z.infer<\n  typeof ConnectorDocumentDestinationAuthority\n>;\n\nexport const ConnectorDocumentDestinationSelection = z.object({\n  authorityKind: ConnectorDocumentDestinationAuthority,\n  collectionId: z.string().uuid().nullable().default(null),\n});\nexport type ConnectorDocumentDestinationSelection = z.infer<\n  typeof ConnectorDocumentDestinationSelection\n>;\n\nexport const ConnectorDocumentDestination = z\n  .object({\n    authorityKind: ConnectorDocumentDestinationAuthority,\n    authorityAccountId: z.string().uuid(),\n    authorityWorkspaceId: z.string().uuid().nullable(),\n    authoritySubjectId: z.string().trim().min(1).max(1024).nullable(),\n    collectionId: z.string().uuid().nullable().default(null),\n  })\n  .superRefine((destination, context) => {\n    if (destination.authorityKind === \"organization\") {\n      if (destination.authorityWorkspaceId !== null || destination.authoritySubjectId !== null) {\n        context.addIssue({\n          code: \"custom\",\n          message: \"organization connector destinations cannot bind workspace or subject authority\",\n        });\n      }\n      return;\n    }\n    if (destination.authorityWorkspaceId === null) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"workspace and personal connector destinations require workspace authority\",\n      });\n    }\n    if (destination.authorityKind === \"workspace\" && destination.authoritySubjectId !== null) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"workspace connector destinations cannot bind subject authority\",\n      });\n    }\n    if (destination.authorityKind === \"personal\" && destination.authoritySubjectId === null) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"personal connector destinations require immutable subject authority\",\n      });\n    }\n  });\nexport type ConnectorDocumentDestination = z.infer<typeof ConnectorDocumentDestination>;\n\nexport function bindConnectorDocumentDestination(\n  selection: ConnectorDocumentDestinationSelection,\n  context: { accountId: string; workspaceId: string; initiatingSubjectId: string },\n): ConnectorDocumentDestination {\n  return ConnectorDocumentDestination.parse({\n    authorityKind: selection.authorityKind,\n    authorityAccountId: context.accountId,\n    authorityWorkspaceId: selection.authorityKind === \"organization\" ? null : context.workspaceId,\n    authoritySubjectId: selection.authorityKind === \"personal\" ? context.initiatingSubjectId : null,\n    collectionId: selection.collectionId,\n  });\n}\n\nexport function legacyWorkspaceConnectorDocumentDestination(context: {\n  accountId: string;\n  workspaceId: string;\n}): ConnectorDocumentDestination {\n  return ConnectorDocumentDestination.parse({\n    authorityKind: \"workspace\",\n    authorityAccountId: context.accountId,\n    authorityWorkspaceId: context.workspaceId,\n    authoritySubjectId: null,\n    collectionId: null,\n  });\n}\n\nexport function resolveConnectorDocumentDestination(\n  value: unknown,\n  context: {\n    accountId: string;\n    workspaceId: string;\n    connectionSubjectId?: string | null | undefined;\n  },\n): ConnectorDocumentDestination {\n  if (value === undefined || value === null) {\n    return legacyWorkspaceConnectorDocumentDestination(context);\n  }\n  const destination = ConnectorDocumentDestination.parse(value);\n  if (destination.authorityAccountId !== context.accountId) {\n    throw new Error(\"connector destination organization authority mismatch\");\n  }\n  if (\n    destination.authorityKind !== \"organization\" &&\n    destination.authorityWorkspaceId !== context.workspaceId\n  ) {\n    throw new Error(\"connector destination workspace authority mismatch\");\n  }\n  if (\n    destination.authorityKind === \"personal\" &&\n    destination.authoritySubjectId !== context.connectionSubjectId\n  ) {\n    throw new Error(\"connector destination personal authority mismatch\");\n  }\n  return destination;\n}\n\nexport function connectorDestinationDocumentAuthority(destination: ConnectorDocumentDestination): {\n  authorityKind: ConnectorDocumentDestinationAuthority;\n  authorityWorkspaceId: string | null;\n  authoritySubjectId: string | null;\n} {\n  return {\n    authorityKind: destination.authorityKind,\n    authorityWorkspaceId: destination.authorityWorkspaceId,\n    authoritySubjectId: destination.authoritySubjectId,\n  };\n}\n\nexport function connectorDocumentDestinationCollectionId(\n  destination: ConnectorDocumentDestination,\n  defaultCollectionId: string,\n): string {\n  return destination.collectionId ?? z.string().uuid().parse(defaultCollectionId);\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAEX,IAAM,wCAAwC,EAAE,KAAK;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,eAAe;AAAA,EACf,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI;AACzD,CAAC;AAKM,IAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,eAAe;AAAA,EACf,oBAAoB,EAAE,OAAO,EAAE,KAAK;AAAA,EACpC,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACjD,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EAChE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI;AACzD,CAAC,EACA,YAAY,CAAC,aAAa,YAAY;AACrC,MAAI,YAAY,kBAAkB,gBAAgB;AAChD,QAAI,YAAY,yBAAyB,QAAQ,YAAY,uBAAuB,MAAM;AACxF,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA;AAAA,EACF;AACA,MAAI,YAAY,yBAAyB,MAAM;AAC7C,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,YAAY,kBAAkB,eAAe,YAAY,uBAAuB,MAAM;AACxF,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,YAAY,kBAAkB,cAAc,YAAY,uBAAuB,MAAM;AACvF,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAGI,SAAS,iCACd,WACA,SAC8B;AAC9B,SAAO,6BAA6B,MAAM;AAAA,IACxC,eAAe,UAAU;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,sBAAsB,UAAU,kBAAkB,iBAAiB,OAAO,QAAQ;AAAA,IAClF,oBAAoB,UAAU,kBAAkB,aAAa,QAAQ,sBAAsB;AAAA,IAC3F,cAAc,UAAU;AAAA,EAC1B,CAAC;AACH;AAEO,SAAS,4CAA4C,SAG3B;AAC/B,SAAO,6BAA6B,MAAM;AAAA,IACxC,eAAe;AAAA,IACf,oBAAoB,QAAQ;AAAA,IAC5B,sBAAsB,QAAQ;AAAA,IAC9B,oBAAoB;AAAA,IACpB,cAAc;AAAA,EAChB,CAAC;AACH;AAEO,SAAS,oCACd,OACA,SAK8B;AAC9B,MAAI,UAAU,UAAa,UAAU,MAAM;AACzC,WAAO,4CAA4C,OAAO;AAAA,EAC5D;AACA,QAAM,cAAc,6BAA6B,MAAM,KAAK;AAC5D,MAAI,YAAY,uBAAuB,QAAQ,WAAW;AACxD,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,MACE,YAAY,kBAAkB,kBAC9B,YAAY,yBAAyB,QAAQ,aAC7C;AACA,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,MACE,YAAY,kBAAkB,cAC9B,YAAY,uBAAuB,QAAQ,qBAC3C;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AACT;AAEO,SAAS,sCAAsC,aAIpD;AACA,SAAO;AAAA,IACL,eAAe,YAAY;AAAA,IAC3B,sBAAsB,YAAY;AAAA,IAClC,oBAAoB,YAAY;AAAA,EAClC;AACF;AAEO,SAAS,yCACd,aACA,qBACQ;AACR,SAAO,YAAY,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB;AAChF;","names":[]}

package/dist/connector-destinations.d.ts

@@ -0,0 +1,48 @@
+import { z } from "zod";
+export declare const ConnectorDocumentDestinationAuthority: z.ZodEnum<{
+    organization: "organization";
+    personal: "personal";
+    workspace: "workspace";
+}>;
+export type ConnectorDocumentDestinationAuthority = z.infer<typeof ConnectorDocumentDestinationAuthority>;
+export declare const ConnectorDocumentDestinationSelection: z.ZodObject<{
+    authorityKind: z.ZodEnum<{
+        organization: "organization";
+        personal: "personal";
+        workspace: "workspace";
+    }>;
+    collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type ConnectorDocumentDestinationSelection = z.infer<typeof ConnectorDocumentDestinationSelection>;
+export declare const ConnectorDocumentDestination: z.ZodObject<{
+    authorityKind: z.ZodEnum<{
+        organization: "organization";
+        personal: "personal";
+        workspace: "workspace";
+    }>;
+    authorityAccountId: z.ZodString;
+    authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+    authoritySubjectId: z.ZodNullable<z.ZodString>;
+    collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type ConnectorDocumentDestination = z.infer<typeof ConnectorDocumentDestination>;
+export declare function bindConnectorDocumentDestination(selection: ConnectorDocumentDestinationSelection, context: {
+    accountId: string;
+    workspaceId: string;
+    initiatingSubjectId: string;
+}): ConnectorDocumentDestination;
+export declare function legacyWorkspaceConnectorDocumentDestination(context: {
+    accountId: string;
+    workspaceId: string;
+}): ConnectorDocumentDestination;
+export declare function resolveConnectorDocumentDestination(value: unknown, context: {
+    accountId: string;
+    workspaceId: string;
+    connectionSubjectId?: string | null | undefined;
+}): ConnectorDocumentDestination;
+export declare function connectorDestinationDocumentAuthority(destination: ConnectorDocumentDestination): {
+    authorityKind: ConnectorDocumentDestinationAuthority;
+    authorityWorkspaceId: string | null;
+    authoritySubjectId: string | null;
+};
+export declare function connectorDocumentDestinationCollectionId(destination: ConnectorDocumentDestination, defaultCollectionId: string): string;

package/dist/connector-destinations.js

@@ -0,0 +1,21 @@
+import {
+  ConnectorDocumentDestination,
+  ConnectorDocumentDestinationAuthority,
+  ConnectorDocumentDestinationSelection,
+  bindConnectorDocumentDestination,
+  connectorDestinationDocumentAuthority,
+  connectorDocumentDestinationCollectionId,
+  legacyWorkspaceConnectorDocumentDestination,
+  resolveConnectorDocumentDestination
+} from "./chunk-WYBDERIY.js";
+export {
+  ConnectorDocumentDestination,
+  ConnectorDocumentDestinationAuthority,
+  ConnectorDocumentDestinationSelection,
+  bindConnectorDocumentDestination,
+  connectorDestinationDocumentAuthority,
+  connectorDocumentDestinationCollectionId,
+  legacyWorkspaceConnectorDocumentDestination,
+  resolveConnectorDocumentDestination
+};
+//# sourceMappingURL=connector-destinations.js.map

package/dist/connector-destinations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/google-drive.d.ts

@@ -25,6 +25,7 @@ export type GoogleDriveOAuthScopeDecision = {
  */
 export declare function googleDriveOAuthScopeDecision(grantedScopes: readonly string[]): GoogleDriveOAuthScopeDecision;
 export declare function googleDriveScopesAllowCapability(grantedScopes: readonly string[], capability: GoogleDriveOAuthCapability): boolean;
+/** @deprecated Connector document destinations use organization/workspace/personal authority. */
 export declare const GoogleDriveTargetScope: z.ZodEnum<{
     organization: "organization";
     user: "user";
@@ -88,11 +89,22 @@ export declare const GoogleDriveSelectedSource: z.ZodObject<{
     name: z.ZodString;
     mimeType: z.ZodString;
     driveId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-    targetScope: z.ZodEnum<{
+    destination: z.ZodOptional<z.ZodObject<{
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        authorityAccountId: z.ZodString;
+        authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+        authoritySubjectId: z.ZodNullable<z.ZodString>;
+        collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    targetScope: z.ZodOptional<z.ZodEnum<{
         organization: "organization";
         user: "user";
         workspace: "workspace";
-    }>;
+    }>>;
     syncCadence: z.ZodDefault<z.ZodEnum<{
         daily: "daily";
         hourly: "hourly";
@@ -146,16 +158,38 @@ export declare const GoogleDriveConnectionMetadata: z.ZodObject<{
         recoverable: z.ZodLiteral<true>;
         observedAt: z.ZodString;
     }, z.core.$strip>], "state">>;
+    documentDestination: z.ZodOptional<z.ZodObject<{
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        authorityAccountId: z.ZodString;
+        authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+        authoritySubjectId: z.ZodNullable<z.ZodString>;
+        collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
     selectedSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         mimeType: z.ZodString;
         driveId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        targetScope: z.ZodEnum<{
+        destination: z.ZodOptional<z.ZodObject<{
+            authorityKind: z.ZodEnum<{
+                organization: "organization";
+                personal: "personal";
+                workspace: "workspace";
+            }>;
+            authorityAccountId: z.ZodString;
+            authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+            authoritySubjectId: z.ZodNullable<z.ZodString>;
+            collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+        targetScope: z.ZodOptional<z.ZodEnum<{
             organization: "organization";
             user: "user";
             workspace: "workspace";
-        }>;
+        }>>;
         syncCadence: z.ZodDefault<z.ZodEnum<{
             daily: "daily";
             hourly: "hourly";
@@ -173,11 +207,22 @@ export declare const GoogleDriveConnectionMetadata: z.ZodObject<{
         name: z.ZodString;
         mimeType: z.ZodString;
         driveId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        targetScope: z.ZodEnum<{
+        destination: z.ZodOptional<z.ZodObject<{
+            authorityKind: z.ZodEnum<{
+                organization: "organization";
+                personal: "personal";
+                workspace: "workspace";
+            }>;
+            authorityAccountId: z.ZodString;
+            authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+            authoritySubjectId: z.ZodNullable<z.ZodString>;
+            collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, z.core.$strip>>;
+        targetScope: z.ZodOptional<z.ZodEnum<{
             organization: "organization";
             user: "user";
             workspace: "workspace";
-        }>;
+        }>>;
         syncCadence: z.ZodDefault<z.ZodEnum<{
             daily: "daily";
             hourly: "hourly";
@@ -299,11 +344,19 @@ export declare const SaveGoogleDriveSourceRequest: z.ZodObject<{
         mimeType: z.ZodString;
         driveId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
-    targetScope: z.ZodEnum<{
+    destination: z.ZodOptional<z.ZodObject<{
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        collectionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    targetScope: z.ZodOptional<z.ZodEnum<{
         organization: "organization";
         user: "user";
         workspace: "workspace";
-    }>;
+    }>>;
     syncCadence: z.ZodDefault<z.ZodEnum<{
         daily: "daily";
         hourly: "hourly";

package/dist/google-drive.js

@@ -1,6 +1,10 @@
 import {
   ConnectionMetadata
-} from "./chunk-JRHJTJVH.js";
+} from "./chunk-WVE7RAHN.js";
+import {
+  ConnectorDocumentDestination,
+  ConnectorDocumentDestinationSelection
+} from "./chunk-WYBDERIY.js";
 import "./chunk-7JZMI22I.js";
 
 // src/google-drive.ts
@@ -93,7 +97,9 @@ var GoogleDriveSelectedSource = z.object({
   name: z.string().min(1).max(1024),
   mimeType: z.string().min(1).max(256),
   driveId: z.string().min(1).max(256).nullable().default(null),
-  targetScope: GoogleDriveTargetScope,
+  destination: ConnectorDocumentDestination.optional(),
+  /** @deprecated Missing destinations resolve to the current workspace boundary. */
+  targetScope: GoogleDriveTargetScope.optional(),
   syncCadence: GoogleDriveSyncCadence.default("hourly"),
   readPolicy: GoogleDriveReadPolicy.default("allow"),
   selectedAt: z.string().datetime({ offset: true })
@@ -107,6 +113,7 @@ var GoogleDriveConnectionMetadata = z.object({
   verifiedAt: z.string().datetime({ offset: true }),
   accessMode: z.enum(["metadata_readonly", "readonly"]),
   lifecycle: GoogleDriveConnectionLifecycle.optional(),
+  documentDestination: ConnectorDocumentDestination.optional(),
   selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),
   /** @deprecated Read `selectedSources`; retained while existing connections migrate. */
   selectedSource: GoogleDriveSelectedSource.nullable().optional()
@@ -155,9 +162,13 @@ var SaveGoogleDriveSourceRequest = z.object({
   ).max(100).refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {
     message: "Google Drive sources must be unique"
   }),
-  targetScope: GoogleDriveTargetScope,
+  destination: ConnectorDocumentDestinationSelection.optional(),
+  /** @deprecated Legacy requests are accepted but resolve to workspace authority. */
+  targetScope: GoogleDriveTargetScope.optional(),
   syncCadence: GoogleDriveSyncCadence.default("hourly"),
   readPolicy: GoogleDriveReadPolicy.default("allow")
+}).refine((request) => request.destination !== void 0 || request.targetScope !== void 0, {
+  message: "Google Drive document destination is required"
 });
 export {
   GOOGLE_DRIVE_CREDENTIAL_LABEL,

package/dist/google-drive.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/google-drive.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\n\nexport const GOOGLE_DRIVE_PROVIDER_DOMAIN = \"googleapis.com\" as const;\nexport const GOOGLE_DRIVE_FULL_SCOPE = \"https://www.googleapis.com/auth/drive\" as const;\nexport const GOOGLE_DRIVE_FILE_SCOPE = \"https://www.googleapis.com/auth/drive.file\" as const;\nexport const GOOGLE_DRIVE_METADATA_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.metadata.readonly\" as const;\nexport const GOOGLE_DRIVE_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.readonly\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_ROLE = \"google_drive_metadata\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_LABEL = \"Google Drive metadata browser\" as const;\n\nexport const GoogleDriveOAuthCapability = z.enum([\n  \"picker_file_read\",\n  \"source_metadata_discovery\",\n  \"source_content_read\",\n  \"recursive_source_sync\",\n]);\nexport type GoogleDriveOAuthCapability = z.infer<typeof GoogleDriveOAuthCapability>;\n\nexport type GoogleDriveOAuthScopeDecision = {\n  accessMode: \"metadata_readonly\" | \"readonly\" | null;\n  capabilities: GoogleDriveOAuthCapability[];\n};\n\n/**\n * Converts exact Google OAuth grants into the Drive capabilities OpenGeni may\n * rely on. Unknown or malformed grants add no authority. In particular,\n * drive.file covers only files explicitly opened or shared with the app and\n * never authorizes arbitrary recursive descendant discovery.\n */\nexport function googleDriveOAuthScopeDecision(\n  grantedScopes: readonly string[],\n): GoogleDriveOAuthScopeDecision {\n  const granted = new Set(grantedScopes);\n  const hasFullDrive = granted.has(GOOGLE_DRIVE_FULL_SCOPE);\n  const hasSourceContentRead = hasFullDrive || granted.has(GOOGLE_DRIVE_READONLY_SCOPE);\n  const hasSourceMetadataDiscovery =\n    hasSourceContentRead || granted.has(GOOGLE_DRIVE_METADATA_READONLY_SCOPE);\n  const hasPickerFileRead = hasSourceContentRead || granted.has(GOOGLE_DRIVE_FILE_SCOPE);\n  const capabilities: GoogleDriveOAuthCapability[] = [];\n  if (hasPickerFileRead) capabilities.push(\"picker_file_read\");\n  if (hasSourceMetadataDiscovery) capabilities.push(\"source_metadata_discovery\");\n  if (hasSourceContentRead) {\n    capabilities.push(\"source_content_read\", \"recursive_source_sync\");\n  }\n  return {\n    accessMode: hasSourceContentRead\n      ? \"readonly\"\n      : hasSourceMetadataDiscovery\n        ? \"metadata_readonly\"\n        : null,\n    capabilities,\n  };\n}\n\nexport function googleDriveScopesAllowCapability(\n  grantedScopes: readonly string[],\n  capability: GoogleDriveOAuthCapability,\n): boolean {\n  return googleDriveOAuthScopeDecision(grantedScopes).capabilities.includes(capability);\n}\n\nexport const GoogleDriveTargetScope = z.enum([\"user\", \"workspace\", \"organization\"]);\nexport type GoogleDriveTargetScope = z.infer<typeof GoogleDriveTargetScope>;\n\nexport const GoogleDriveSyncCadence = z.enum([\"manual\", \"hourly\", \"daily\"]);\nexport type GoogleDriveSyncCadence = z.infer<typeof GoogleDriveSyncCadence>;\n\nexport const GoogleDriveReadPolicy = z.enum([\"allow\", \"ask\", \"block\"]);\nexport type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;\n\nexport const GoogleDriveConnectionLifecycleState = z.enum([\n  \"active\",\n  \"paused\",\n  \"token_revoked\",\n  \"app_removed\",\n  \"disconnected\",\n  \"reconnect_required\",\n  \"reconsent_required\",\n]);\nexport type GoogleDriveConnectionLifecycleState = z.infer<\n  typeof GoogleDriveConnectionLifecycleState\n>;\n\nconst GoogleDriveLifecycleObservedAt = z.string().datetime({ offset: true });\nexport const GoogleDriveConnectionLifecycle = z.discriminatedUnion(\"state\", [\n  z.object({\n    state: z.literal(\"active\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"paused\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"token_revoked\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"app_removed\"),\n    recoverable: z.literal(false),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"disconnected\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconnect_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconsent_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n]);\nexport type GoogleDriveConnectionLifecycle = z.infer<typeof GoogleDriveConnectionLifecycle>;\n\nexport const GoogleDriveSelectedSource = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  driveId: z.string().min(1).max(256).nullable().default(null),\n  targetScope: GoogleDriveTargetScope,\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  selectedAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveSelectedSource = z.infer<typeof GoogleDriveSelectedSource>;\n\nexport const GoogleDriveConnectionMetadata = z\n  .object({\n    credentialRole: z.literal(GOOGLE_DRIVE_CREDENTIAL_ROLE),\n    credentialLabel: z.literal(GOOGLE_DRIVE_CREDENTIAL_LABEL),\n    googlePermissionId: z.string().min(1).max(256),\n    googleEmail: z.string().email().max(320),\n    googleDisplayName: z.string().min(1).max(512).nullable(),\n    verifiedAt: z.string().datetime({ offset: true }),\n    accessMode: z.enum([\"metadata_readonly\", \"readonly\"]),\n    lifecycle: GoogleDriveConnectionLifecycle.optional(),\n    selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),\n    /** @deprecated Read `selectedSources`; retained while existing connections migrate. */\n    selectedSource: GoogleDriveSelectedSource.nullable().optional(),\n  })\n  .passthrough();\nexport type GoogleDriveConnectionMetadata = z.infer<typeof GoogleDriveConnectionMetadata>;\n\nexport const GoogleDriveOAuthStartRequest = z.object({\n  connectionId: z.string().uuid().optional(),\n});\nexport type GoogleDriveOAuthStartRequest = z.infer<typeof GoogleDriveOAuthStartRequest>;\n\nexport const GoogleDriveOAuthStartResponse = z.object({\n  authorizationUrl: z.string().url(),\n  expiresAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;\n\nexport const GoogleDriveLifecycleActionRequest = z.object({\n  action: z.enum([\"pause\", \"resume\"]),\n  expectedVersion: z.number().int().positive(),\n});\nexport type GoogleDriveLifecycleActionRequest = z.infer<typeof GoogleDriveLifecycleActionRequest>;\n\nexport const GoogleDriveDisconnectRequest = z.object({\n  expectedVersion: z.number().int().positive(),\n  idempotencyKey: z.string().trim().min(1).max(200),\n});\nexport type GoogleDriveDisconnectRequest = z.infer<typeof GoogleDriveDisconnectRequest>;\n\nexport const GoogleDriveBrowseItem = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  kind: z.enum([\"folder\", \"file\"]),\n  driveId: z.string().min(1).max(256).nullable(),\n  modifiedTime: z.string().datetime({ offset: true }).nullable(),\n  size: z.string().regex(/^\\d+$/).nullable(),\n  webViewLink: z.string().url().nullable(),\n});\nexport type GoogleDriveBrowseItem = z.infer<typeof GoogleDriveBrowseItem>;\n\nexport const GoogleDriveBrowseResponse = z.object({\n  connection: z.lazy(() => ConnectionMetadata),\n  parentId: z.string().min(1).max(256),\n  current: GoogleDriveBrowseItem.nullable(),\n  items: z.array(GoogleDriveBrowseItem),\n  nextPageToken: z.string().min(1).max(4096).nullable(),\n  incompleteSearch: z.boolean(),\n});\nexport type GoogleDriveBrowseResponse = z.infer<typeof GoogleDriveBrowseResponse>;\n\nexport const SaveGoogleDriveSourceRequest = z.object({\n  sources: z\n    .array(\n      GoogleDriveBrowseItem.pick({\n        id: true,\n        name: true,\n        mimeType: true,\n        driveId: true,\n      }),\n    )\n    .max(100)\n    .refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {\n      message: \"Google Drive sources must be unique\",\n    }),\n  targetScope: GoogleDriveTargetScope,\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n});\nexport type SaveGoogleDriveSourceRequest = z.infer<typeof SaveGoogleDriveSourceRequest>;\n"],"mappings":";;;;;;AAAA,SAAS,SAAS;AAIX,IAAM,+BAA+B;AACrC,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAChC,IAAM,uCACX;AACK,IAAM,8BACX;AACK,IAAM,+BAA+B;AACrC,IAAM,gCAAgC;AAEtC,IAAM,6BAA6B,EAAE,KAAK;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcM,SAAS,8BACd,eAC+B;AAC/B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxD,QAAM,uBAAuB,gBAAgB,QAAQ,IAAI,2BAA2B;AACpF,QAAM,6BACJ,wBAAwB,QAAQ,IAAI,oCAAoC;AAC1E,QAAM,oBAAoB,wBAAwB,QAAQ,IAAI,uBAAuB;AACrF,QAAM,eAA6C,CAAC;AACpD,MAAI,kBAAmB,cAAa,KAAK,kBAAkB;AAC3D,MAAI,2BAA4B,cAAa,KAAK,2BAA2B;AAC7E,MAAI,sBAAsB;AACxB,iBAAa,KAAK,uBAAuB,uBAAuB;AAAA,EAClE;AACA,SAAO;AAAA,IACL,YAAY,uBACR,aACA,6BACE,sBACA;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,iCACd,eACA,YACS;AACT,SAAO,8BAA8B,aAAa,EAAE,aAAa,SAAS,UAAU;AACtF;AAEO,IAAM,yBAAyB,EAAE,KAAK,CAAC,QAAQ,aAAa,cAAc,CAAC;AAG3E,IAAM,yBAAyB,EAAE,KAAK,CAAC,UAAU,UAAU,OAAO,CAAC;AAGnE,IAAM,wBAAwB,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,CAAC;AAG9D,IAAM,sCAAsC,EAAE,KAAK;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKD,IAAM,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACpE,IAAM,iCAAiC,EAAE,mBAAmB,SAAS;AAAA,EAC1E,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,eAAe;AAAA,IAChC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,aAAa;AAAA,IAC9B,aAAa,EAAE,QAAQ,KAAK;AAAA,IAC5B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,cAAc;AAAA,IAC/B,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3D,aAAa;AAAA,EACb,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC;AAGM,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,gBAAgB,EAAE,QAAQ,4BAA4B;AAAA,EACtD,iBAAiB,EAAE,QAAQ,6BAA6B;AAAA,EACxD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACvC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD,YAAY,EAAE,KAAK,CAAC,qBAAqB,UAAU,CAAC;AAAA,EACpD,WAAW,+BAA+B,SAAS;AAAA,EACnD,iBAAiB,EAAE,MAAM,yBAAyB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEtE,gBAAgB,0BAA0B,SAAS,EAAE,SAAS;AAChE,CAAC,EACA,YAAY;AAGR,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAGM,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACjD,CAAC;AAGM,IAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC;AAGM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7D,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,YAAY,EAAE,KAAK,MAAM,kBAAkB;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,sBAAsB,SAAS;AAAA,EACxC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,QAAQ;AAC9B,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,SAAS,EACN;AAAA,IACC,sBAAsB,KAAK;AAAA,MACzB,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH,EACC,IAAI,GAAG,EACP,OAAO,CAAC,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACxF,SAAS;AAAA,EACX,CAAC;AAAA,EACH,aAAa;AAAA,EACb,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AACnD,CAAC;","names":[]}
+{"version":3,"sources":["../src/google-drive.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\nimport {\n  ConnectorDocumentDestination,\n  ConnectorDocumentDestinationSelection,\n} from \"./connector-destinations\";\n\nexport const GOOGLE_DRIVE_PROVIDER_DOMAIN = \"googleapis.com\" as const;\nexport const GOOGLE_DRIVE_FULL_SCOPE = \"https://www.googleapis.com/auth/drive\" as const;\nexport const GOOGLE_DRIVE_FILE_SCOPE = \"https://www.googleapis.com/auth/drive.file\" as const;\nexport const GOOGLE_DRIVE_METADATA_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.metadata.readonly\" as const;\nexport const GOOGLE_DRIVE_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.readonly\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_ROLE = \"google_drive_metadata\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_LABEL = \"Google Drive metadata browser\" as const;\n\nexport const GoogleDriveOAuthCapability = z.enum([\n  \"picker_file_read\",\n  \"source_metadata_discovery\",\n  \"source_content_read\",\n  \"recursive_source_sync\",\n]);\nexport type GoogleDriveOAuthCapability = z.infer<typeof GoogleDriveOAuthCapability>;\n\nexport type GoogleDriveOAuthScopeDecision = {\n  accessMode: \"metadata_readonly\" | \"readonly\" | null;\n  capabilities: GoogleDriveOAuthCapability[];\n};\n\n/**\n * Converts exact Google OAuth grants into the Drive capabilities OpenGeni may\n * rely on. Unknown or malformed grants add no authority. In particular,\n * drive.file covers only files explicitly opened or shared with the app and\n * never authorizes arbitrary recursive descendant discovery.\n */\nexport function googleDriveOAuthScopeDecision(\n  grantedScopes: readonly string[],\n): GoogleDriveOAuthScopeDecision {\n  const granted = new Set(grantedScopes);\n  const hasFullDrive = granted.has(GOOGLE_DRIVE_FULL_SCOPE);\n  const hasSourceContentRead = hasFullDrive || granted.has(GOOGLE_DRIVE_READONLY_SCOPE);\n  const hasSourceMetadataDiscovery =\n    hasSourceContentRead || granted.has(GOOGLE_DRIVE_METADATA_READONLY_SCOPE);\n  const hasPickerFileRead = hasSourceContentRead || granted.has(GOOGLE_DRIVE_FILE_SCOPE);\n  const capabilities: GoogleDriveOAuthCapability[] = [];\n  if (hasPickerFileRead) capabilities.push(\"picker_file_read\");\n  if (hasSourceMetadataDiscovery) capabilities.push(\"source_metadata_discovery\");\n  if (hasSourceContentRead) {\n    capabilities.push(\"source_content_read\", \"recursive_source_sync\");\n  }\n  return {\n    accessMode: hasSourceContentRead\n      ? \"readonly\"\n      : hasSourceMetadataDiscovery\n        ? \"metadata_readonly\"\n        : null,\n    capabilities,\n  };\n}\n\nexport function googleDriveScopesAllowCapability(\n  grantedScopes: readonly string[],\n  capability: GoogleDriveOAuthCapability,\n): boolean {\n  return googleDriveOAuthScopeDecision(grantedScopes).capabilities.includes(capability);\n}\n\n/** @deprecated Connector document destinations use organization/workspace/personal authority. */\nexport const GoogleDriveTargetScope = z.enum([\"user\", \"workspace\", \"organization\"]);\nexport type GoogleDriveTargetScope = z.infer<typeof GoogleDriveTargetScope>;\n\nexport const GoogleDriveSyncCadence = z.enum([\"manual\", \"hourly\", \"daily\"]);\nexport type GoogleDriveSyncCadence = z.infer<typeof GoogleDriveSyncCadence>;\n\nexport const GoogleDriveReadPolicy = z.enum([\"allow\", \"ask\", \"block\"]);\nexport type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;\n\nexport const GoogleDriveConnectionLifecycleState = z.enum([\n  \"active\",\n  \"paused\",\n  \"token_revoked\",\n  \"app_removed\",\n  \"disconnected\",\n  \"reconnect_required\",\n  \"reconsent_required\",\n]);\nexport type GoogleDriveConnectionLifecycleState = z.infer<\n  typeof GoogleDriveConnectionLifecycleState\n>;\n\nconst GoogleDriveLifecycleObservedAt = z.string().datetime({ offset: true });\nexport const GoogleDriveConnectionLifecycle = z.discriminatedUnion(\"state\", [\n  z.object({\n    state: z.literal(\"active\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"paused\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"token_revoked\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"app_removed\"),\n    recoverable: z.literal(false),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"disconnected\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconnect_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconsent_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n]);\nexport type GoogleDriveConnectionLifecycle = z.infer<typeof GoogleDriveConnectionLifecycle>;\n\nexport const GoogleDriveSelectedSource = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  driveId: z.string().min(1).max(256).nullable().default(null),\n  destination: ConnectorDocumentDestination.optional(),\n  /** @deprecated Missing destinations resolve to the current workspace boundary. */\n  targetScope: GoogleDriveTargetScope.optional(),\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  selectedAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveSelectedSource = z.infer<typeof GoogleDriveSelectedSource>;\n\nexport const GoogleDriveConnectionMetadata = z\n  .object({\n    credentialRole: z.literal(GOOGLE_DRIVE_CREDENTIAL_ROLE),\n    credentialLabel: z.literal(GOOGLE_DRIVE_CREDENTIAL_LABEL),\n    googlePermissionId: z.string().min(1).max(256),\n    googleEmail: z.string().email().max(320),\n    googleDisplayName: z.string().min(1).max(512).nullable(),\n    verifiedAt: z.string().datetime({ offset: true }),\n    accessMode: z.enum([\"metadata_readonly\", \"readonly\"]),\n    lifecycle: GoogleDriveConnectionLifecycle.optional(),\n    documentDestination: ConnectorDocumentDestination.optional(),\n    selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),\n    /** @deprecated Read `selectedSources`; retained while existing connections migrate. */\n    selectedSource: GoogleDriveSelectedSource.nullable().optional(),\n  })\n  .passthrough();\nexport type GoogleDriveConnectionMetadata = z.infer<typeof GoogleDriveConnectionMetadata>;\n\nexport const GoogleDriveOAuthStartRequest = z.object({\n  connectionId: z.string().uuid().optional(),\n});\nexport type GoogleDriveOAuthStartRequest = z.infer<typeof GoogleDriveOAuthStartRequest>;\n\nexport const GoogleDriveOAuthStartResponse = z.object({\n  authorizationUrl: z.string().url(),\n  expiresAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;\n\nexport const GoogleDriveLifecycleActionRequest = z.object({\n  action: z.enum([\"pause\", \"resume\"]),\n  expectedVersion: z.number().int().positive(),\n});\nexport type GoogleDriveLifecycleActionRequest = z.infer<typeof GoogleDriveLifecycleActionRequest>;\n\nexport const GoogleDriveDisconnectRequest = z.object({\n  expectedVersion: z.number().int().positive(),\n  idempotencyKey: z.string().trim().min(1).max(200),\n});\nexport type GoogleDriveDisconnectRequest = z.infer<typeof GoogleDriveDisconnectRequest>;\n\nexport const GoogleDriveBrowseItem = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  kind: z.enum([\"folder\", \"file\"]),\n  driveId: z.string().min(1).max(256).nullable(),\n  modifiedTime: z.string().datetime({ offset: true }).nullable(),\n  size: z.string().regex(/^\\d+$/).nullable(),\n  webViewLink: z.string().url().nullable(),\n});\nexport type GoogleDriveBrowseItem = z.infer<typeof GoogleDriveBrowseItem>;\n\nexport const GoogleDriveBrowseResponse = z.object({\n  connection: z.lazy(() => ConnectionMetadata),\n  parentId: z.string().min(1).max(256),\n  current: GoogleDriveBrowseItem.nullable(),\n  items: z.array(GoogleDriveBrowseItem),\n  nextPageToken: z.string().min(1).max(4096).nullable(),\n  incompleteSearch: z.boolean(),\n});\nexport type GoogleDriveBrowseResponse = z.infer<typeof GoogleDriveBrowseResponse>;\n\nexport const SaveGoogleDriveSourceRequest = z\n  .object({\n    sources: z\n      .array(\n        GoogleDriveBrowseItem.pick({\n          id: true,\n          name: true,\n          mimeType: true,\n          driveId: true,\n        }),\n      )\n      .max(100)\n      .refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {\n        message: \"Google Drive sources must be unique\",\n      }),\n    destination: ConnectorDocumentDestinationSelection.optional(),\n    /** @deprecated Legacy requests are accepted but resolve to workspace authority. */\n    targetScope: GoogleDriveTargetScope.optional(),\n    syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n    readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  })\n  .refine((request) => request.destination !== undefined || request.targetScope !== undefined, {\n    message: \"Google Drive document destination is required\",\n  });\nexport type SaveGoogleDriveSourceRequest = z.infer<typeof SaveGoogleDriveSourceRequest>;\n"],"mappings":";;;;;;;;;;AAAA,SAAS,SAAS;AAQX,IAAM,+BAA+B;AACrC,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAChC,IAAM,uCACX;AACK,IAAM,8BACX;AACK,IAAM,+BAA+B;AACrC,IAAM,gCAAgC;AAEtC,IAAM,6BAA6B,EAAE,KAAK;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcM,SAAS,8BACd,eAC+B;AAC/B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxD,QAAM,uBAAuB,gBAAgB,QAAQ,IAAI,2BAA2B;AACpF,QAAM,6BACJ,wBAAwB,QAAQ,IAAI,oCAAoC;AAC1E,QAAM,oBAAoB,wBAAwB,QAAQ,IAAI,uBAAuB;AACrF,QAAM,eAA6C,CAAC;AACpD,MAAI,kBAAmB,cAAa,KAAK,kBAAkB;AAC3D,MAAI,2BAA4B,cAAa,KAAK,2BAA2B;AAC7E,MAAI,sBAAsB;AACxB,iBAAa,KAAK,uBAAuB,uBAAuB;AAAA,EAClE;AACA,SAAO;AAAA,IACL,YAAY,uBACR,aACA,6BACE,sBACA;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,iCACd,eACA,YACS;AACT,SAAO,8BAA8B,aAAa,EAAE,aAAa,SAAS,UAAU;AACtF;AAGO,IAAM,yBAAyB,EAAE,KAAK,CAAC,QAAQ,aAAa,cAAc,CAAC;AAG3E,IAAM,yBAAyB,EAAE,KAAK,CAAC,UAAU,UAAU,OAAO,CAAC;AAGnE,IAAM,wBAAwB,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,CAAC;AAG9D,IAAM,sCAAsC,EAAE,KAAK;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKD,IAAM,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACpE,IAAM,iCAAiC,EAAE,mBAAmB,SAAS;AAAA,EAC1E,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,eAAe;AAAA,IAChC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,aAAa;AAAA,IAC9B,aAAa,EAAE,QAAQ,KAAK;AAAA,IAC5B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,cAAc;AAAA,IAC/B,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3D,aAAa,6BAA6B,SAAS;AAAA;AAAA,EAEnD,aAAa,uBAAuB,SAAS;AAAA,EAC7C,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC;AAGM,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,gBAAgB,EAAE,QAAQ,4BAA4B;AAAA,EACtD,iBAAiB,EAAE,QAAQ,6BAA6B;AAAA,EACxD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACvC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD,YAAY,EAAE,KAAK,CAAC,qBAAqB,UAAU,CAAC;AAAA,EACpD,WAAW,+BAA+B,SAAS;AAAA,EACnD,qBAAqB,6BAA6B,SAAS;AAAA,EAC3D,iBAAiB,EAAE,MAAM,yBAAyB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEtE,gBAAgB,0BAA0B,SAAS,EAAE,SAAS;AAChE,CAAC,EACA,YAAY;AAGR,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAGM,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACjD,CAAC;AAGM,IAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC;AAGM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7D,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,YAAY,EAAE,KAAK,MAAM,kBAAkB;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,sBAAsB,SAAS;AAAA,EACxC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,QAAQ;AAC9B,CAAC;AAGM,IAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,SAAS,EACN;AAAA,IACC,sBAAsB,KAAK;AAAA,MACzB,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH,EACC,IAAI,GAAG,EACP,OAAO,CAAC,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACxF,SAAS;AAAA,EACX,CAAC;AAAA,EACH,aAAa,sCAAsC,SAAS;AAAA;AAAA,EAE5D,aAAa,uBAAuB,SAAS;AAAA,EAC7C,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AACnD,CAAC,EACA,OAAO,CAAC,YAAY,QAAQ,gBAAgB,UAAa,QAAQ,gBAAgB,QAAW;AAAA,EAC3F,SAAS;AACX,CAAC;","names":[]}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { type SessionEventBoundarySurface } from "./event-preview";
 export * from "./slack-bot-scopes";
+export * from "./connector-destinations";
 export { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifact, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactEvent, WorkspaceArtifactEventType, WorkspaceArtifactHtml, WorkspaceArtifactListQuery, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse, WorkspaceArtifactSlug, WorkspaceArtifactStatus, WorkspaceArtifactVersion, WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS, WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS, WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES, WORKSPACE_ARTIFACT_LIST_DEFAULT, WORKSPACE_ARTIFACT_LIST_MAX, WORKSPACE_ARTIFACT_TITLE_MAX_CHARS, normalizeWorkspaceArtifactSlug, } from "./artifacts";
 export { SESSION_EVENT_PAYLOAD_MAX_BYTES, approximateSessionEventTokens, boundSessionEventPayload, measureSessionEventJson, sessionEventJsonBytes, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, type BoundSessionEventPayloadOptions, type SessionEventBoundarySurface, type SessionEventMediaPreview, type SessionEventJsonMeasurement, type SessionEventPayloadTruncation, } from "./event-preview";
 export { RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, RetainedArtifactMetadataSchema, RetainedArtifactReferenceSchema, RetainedArtifactUnavailableSchema, RetainedOutputEvidenceSchema, RetainedOutputKind, RetainedOutputUnavailableReason, retainedArtifactReferenceFromFile, retainedOutputUnavailable, resolveRetainedOutputRange, validateRetainedOutputEvidence, type RetainedArtifactFileInput, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedArtifactUnavailable, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, } from "./retained-output";
@@ -693,7 +694,7 @@ export declare const TranscribeAudioResponse: z.ZodObject<{
     languages: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 export type TranscribeAudioResponse = z.infer<typeof TranscribeAudioResponse>;
-/** Default ceilings for native voice input (hard-stop recording + upload). */
+/** Default safety ceiling for one-shot native voice input (60 seconds). */
 export declare const VOICE_INPUT_MAX_DURATION_SECONDS: 60;
 export declare const VOICE_INPUT_MAX_SIZE_BYTES: number;
 export declare const VOICE_INPUT_ACCEPTED_MIME_TYPES: readonly ["audio/webm", "audio/webm;codecs=opus", "audio/mp4", "audio/ogg", "audio/ogg;codecs=opus", "audio/mpeg", "audio/wav", "audio/x-wav", "audio/mp3", "audio/m4a"];

package/dist/index.js

@@ -85,6 +85,7 @@ import {
   CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
+  CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
   CreateWorkspaceRequest,
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
@@ -572,6 +573,7 @@ import {
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_SOURCE_VERSION_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
@@ -622,6 +624,13 @@ import {
   WorkspaceInstructionPolicyKind,
   WorkspaceInstructionPolicyListQuery,
   WorkspaceInstructionPolicyListResponse,
+  WorkspaceInstructionPolicyOnboardingProposal,
+  WorkspaceInstructionPolicyOnboardingProposalConflictResponse,
+  WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse,
+  WorkspaceInstructionPolicyOnboardingProposalListQuery,
+  WorkspaceInstructionPolicyOnboardingProposalListResponse,
+  WorkspaceInstructionPolicyOnboardingProposalSource,
+  WorkspaceInstructionPolicyOnboardingProposalStaleResponse,
   WorkspaceInstructionPolicyOperationReuseResponse,
   WorkspaceInstructionPolicyProvenance,
   WorkspaceInstructionPolicyProvenanceSource,
@@ -751,7 +760,17 @@ import {
   verifyStreamToken,
   workspaceControlUtf8Bytes,
   workspaceSlackReactionChannelAllowed
-} from "./chunk-JRHJTJVH.js";
+} from "./chunk-WVE7RAHN.js";
+import {
+  ConnectorDocumentDestination,
+  ConnectorDocumentDestinationAuthority,
+  ConnectorDocumentDestinationSelection,
+  bindConnectorDocumentDestination,
+  connectorDestinationDocumentAuthority,
+  connectorDocumentDestinationCollectionId,
+  legacyWorkspaceConnectorDocumentDestination,
+  resolveConnectorDocumentDestination
+} from "./chunk-WYBDERIY.js";
 import {
   OPENGENI_MANAGED_PUBLIC_BASE_URL,
   OPENGENI_SLACK_BOT_EVENTS,
@@ -829,6 +848,9 @@ export {
   ConnectionOwnership,
   ConnectionResponse,
   ConnectionStatus,
+  ConnectorDocumentDestination,
+  ConnectorDocumentDestinationAuthority,
+  ConnectorDocumentDestinationSelection,
   CorrectPreferenceRegistryRequest,
   CreateApiKeyRequest,
   CreateApiKeyResponse,
@@ -852,6 +874,7 @@ export {
   CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
+  CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
   CreateWorkspaceRequest,
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
@@ -1346,6 +1369,7 @@ export {
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_SOURCE_VERSION_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
@@ -1396,6 +1420,13 @@ export {
   WorkspaceInstructionPolicyKind,
   WorkspaceInstructionPolicyListQuery,
   WorkspaceInstructionPolicyListResponse,
+  WorkspaceInstructionPolicyOnboardingProposal,
+  WorkspaceInstructionPolicyOnboardingProposalConflictResponse,
+  WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse,
+  WorkspaceInstructionPolicyOnboardingProposalListQuery,
+  WorkspaceInstructionPolicyOnboardingProposalListResponse,
+  WorkspaceInstructionPolicyOnboardingProposalSource,
+  WorkspaceInstructionPolicyOnboardingProposalStaleResponse,
   WorkspaceInstructionPolicyOperationReuseResponse,
   WorkspaceInstructionPolicyProvenance,
   WorkspaceInstructionPolicyProvenanceSource,
@@ -1450,6 +1481,7 @@ export {
   areOpenGeniSlackBotScopesAccepted,
   assertUniqueResourceMountPaths,
   backendForNativeSnapshotProvider,
+  bindConnectorDocumentDestination,
   boundSessionEvent,
   boundSessionEventPayload,
   boundWorkspaceControlEvent,
@@ -1460,6 +1492,8 @@ export {
   compactSessionEventResult,
   compareCodexFleetCanonicalStringsV1,
   comparePersonalSlackCanonicalConnections,
+  connectorDestinationDocumentAuthority,
+  connectorDocumentDestinationCollectionId,
   createCodexFleetReplayRecordV1,
   createSecretRedactor,
   decodeNativeSnapshotRef,
@@ -1476,6 +1510,7 @@ export {
   isCredentialHeaderName,
   isSensitiveFieldName,
   latencyModeForMetadata,
+  legacyWorkspaceConnectorDocumentDestination,
   measureSessionEventJson,
   mergeResourceRefs,
   mergeToolRefs,
@@ -1496,6 +1531,7 @@ export {
   redactSerializedJson,
   renderSessionSystemUpdateBatch,
   replayCodexFleetDecisionV1,
+  resolveConnectorDocumentDestination,
   resolveRetainedOutputRange,
   resolveSessionEventTypeFilters,
   resolveWorkspaceCodexCompactionDefault,