@opengeni/contracts 0.44.1 → 1.0.0

package/dist/host-mcp-bindings.d.ts

@@ -0,0 +1,326 @@
+import { z } from "zod";
+export { HostMcpCreateSelections, type HostMcpCreateSelection } from "./index.js";
+import { McpServerConnectionRef } from "./index.js";
+export declare const HostMcpOwnerSubject: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+/** Credential-free, immutable destination and host connection selection. */
+export declare const HostMcpBindingDefinition: z.ZodObject<{
+    serverId: z.ZodString;
+    destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    connectionRef: z.ZodObject<{
+        connectionId: z.ZodOptional<z.ZodString>;
+        accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
+        authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+        hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            bindingId: z.ZodString;
+            generation: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            selection: z.ZodLiteral<"accepted_turn">;
+        }, z.core.$strict>]>>;
+        provider: z.ZodOptional<z.ZodString>;
+        providerDomain: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            api_key: "api_key";
+            app_install: "app_install";
+            delegated: "delegated";
+            oauth2: "oauth2";
+        }>>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        resource: z.ZodOptional<z.ZodString>;
+        selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"repository">;
+        }, z.core.$strict>>>;
+        subjectScope: z.ZodOptional<z.ZodEnum<{
+            subject: "subject";
+            workspace: "workspace";
+        }>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type HostMcpBindingDefinition = z.infer<typeof HostMcpBindingDefinition>;
+/** Configuration ceiling, never execution authority. The complete destination
+ * and provider/scope/resource selection stay exact; only the account identifier
+ * is chosen by a captured owner grant in explicit accepted-turn mode. */
+export type HostMcpBindingSelection = {
+    serverId: string;
+    destinationUrl: string;
+    connectionRef: McpServerConnectionRef;
+};
+export declare function hostMcpBindingMatchesSelection(binding: {
+    id: string;
+    generation: number;
+    definition: HostMcpBindingDefinition;
+}, selection: HostMcpBindingSelection): boolean;
+export declare const HostMcpBinding: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+    ownerSubjectId: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+    authorizationRevision: z.ZodNumber;
+    generation: z.ZodNumber;
+    status: z.ZodEnum<{
+        active: "active";
+        revoked: "revoked";
+    }>;
+    definition: z.ZodObject<{
+        serverId: z.ZodString;
+        destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        connectionRef: z.ZodObject<{
+            connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
+            authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                selection: z.ZodLiteral<"accepted_turn">;
+            }, z.core.$strict>]>>;
+            provider: z.ZodOptional<z.ZodString>;
+            providerDomain: z.ZodString;
+            kind: z.ZodOptional<z.ZodEnum<{
+                api_key: "api_key";
+                app_install: "app_install";
+                delegated: "delegated";
+                oauth2: "oauth2";
+            }>>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            resource: z.ZodOptional<z.ZodString>;
+            selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodLiteral<"repository">;
+            }, z.core.$strict>>>;
+            subjectScope: z.ZodOptional<z.ZodEnum<{
+                subject: "subject";
+                workspace: "workspace";
+            }>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    createdAt: z.ZodString;
+    revokedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type HostMcpBinding = z.infer<typeof HostMcpBinding>;
+export declare const CreateHostMcpBindingRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    definition: z.ZodObject<{
+        serverId: z.ZodString;
+        destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        connectionRef: z.ZodObject<{
+            connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
+            authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                selection: z.ZodLiteral<"accepted_turn">;
+            }, z.core.$strict>]>>;
+            provider: z.ZodOptional<z.ZodString>;
+            providerDomain: z.ZodString;
+            kind: z.ZodOptional<z.ZodEnum<{
+                api_key: "api_key";
+                app_install: "app_install";
+                delegated: "delegated";
+                oauth2: "oauth2";
+            }>>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            resource: z.ZodOptional<z.ZodString>;
+            selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodLiteral<"repository">;
+            }, z.core.$strict>>>;
+            subjectScope: z.ZodOptional<z.ZodEnum<{
+                subject: "subject";
+                workspace: "workspace";
+            }>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type CreateHostMcpBindingRequest = z.infer<typeof CreateHostMcpBindingRequest>;
+export declare const IssueHostMcpDelegationRequest: z.ZodObject<{
+    operationId: z.ZodString;
+    bindingId: z.ZodString;
+    expectedBindingGeneration: z.ZodNumber;
+    grant: z.ZodObject<{
+        scope: z.ZodLiteral<"user">;
+        mode: z.ZodEnum<{
+            always: "always";
+            session: "session";
+        }>;
+        context: z.ZodEnum<{
+            user_private: "user_private";
+            workspace_shared: "workspace_shared";
+        }>;
+        sessionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        expectedAuthorityEpoch: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        workspaceSharedAcknowledged: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type IssueHostMcpDelegationRequest = z.infer<typeof IssueHostMcpDelegationRequest>;
+export declare const HostMcpDelegation: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+    ownerSubjectId: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+    ownerAuthorizationRevision: z.ZodNumber;
+    bindingId: z.ZodString;
+    bindingGeneration: z.ZodNumber;
+    grant: z.ZodObject<{
+        scope: z.ZodLiteral<"user">;
+        mode: z.ZodEnum<{
+            always: "always";
+            session: "session";
+        }>;
+        context: z.ZodEnum<{
+            user_private: "user_private";
+            workspace_shared: "workspace_shared";
+        }>;
+        sessionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        expectedAuthorityEpoch: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        workspaceSharedAcknowledged: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+    generation: z.ZodNumber;
+    status: z.ZodEnum<{
+        active: "active";
+        revoked: "revoked";
+    }>;
+    createdAt: z.ZodString;
+    revokedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type HostMcpDelegation = z.infer<typeof HostMcpDelegation>;
+/** Internal admission evidence, not a caller-supplied permission or credential.
+ * Persistence must construct this from live authenticated authority and freeze
+ * it with accepted work. Runtime use must independently revalidate that work,
+ * membership, binding and delegation. No API key is retained as execution rights.
+ */
+export declare const HostMcpAcceptedAuthority: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+    targetSessionId: z.ZodString;
+    targetSessionVisibility: z.ZodEnum<{
+        user_private: "user_private";
+        workspace_shared: "workspace_shared";
+    }>;
+    targetSessionAuthorityEpoch: z.ZodNumber;
+    acceptedWork: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"turn">;
+        turnId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"scheduled_task">;
+        taskId: z.ZodString;
+        taskAuthorityRevision: z.ZodNumber;
+        runId: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    bindingId: z.ZodString;
+    bindingGeneration: z.ZodNumber;
+    definition: z.ZodObject<{
+        serverId: z.ZodString;
+        destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        connectionRef: z.ZodObject<{
+            connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
+            authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                selection: z.ZodLiteral<"accepted_turn">;
+            }, z.core.$strict>]>>;
+            provider: z.ZodOptional<z.ZodString>;
+            providerDomain: z.ZodString;
+            kind: z.ZodOptional<z.ZodEnum<{
+                api_key: "api_key";
+                app_install: "app_install";
+                delegated: "delegated";
+                oauth2: "oauth2";
+            }>>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            resource: z.ZodOptional<z.ZodString>;
+            selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodLiteral<"repository">;
+            }, z.core.$strict>>>;
+            subjectScope: z.ZodOptional<z.ZodEnum<{
+                subject: "subject";
+                workspace: "workspace";
+            }>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    ownerSubjectId: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+    ownerOrganizationMembershipId: z.ZodString;
+    ownerMembershipAuthorizationRevision: z.ZodNumber;
+    delegationId: z.ZodString;
+    delegationGeneration: z.ZodNumber;
+    scheduledOrigin: z.ZodOptional<z.ZodObject<{
+        taskId: z.ZodString;
+        taskAuthorityRevision: z.ZodNumber;
+        runId: z.ZodString;
+    }, z.core.$strict>>;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"direct">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"scheduled_task">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"child_turn">;
+        sessionId: z.ZodString;
+        turnId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"inherited_turn">;
+        sessionId: z.ZodString;
+        turnId: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export type HostMcpAcceptedAuthority = z.infer<typeof HostMcpAcceptedAuthority>;
+/** Credential-free selection frozen on one immutable scheduled-task revision. */
+export declare const HostMcpTaskAuthority: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+    taskId: z.ZodString;
+    taskAuthorityRevision: z.ZodNumber;
+    taskExecutionDigest: z.ZodString;
+    ownerSubjectId: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+    ownerOrganizationMembershipId: z.ZodString;
+    ownerMembershipAuthorizationRevision: z.ZodNumber;
+    bindingId: z.ZodString;
+    bindingGeneration: z.ZodNumber;
+    delegationId: z.ZodString;
+    delegationGeneration: z.ZodNumber;
+    definition: z.ZodObject<{
+        serverId: z.ZodString;
+        destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        connectionRef: z.ZodObject<{
+            connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
+            authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                selection: z.ZodLiteral<"accepted_turn">;
+            }, z.core.$strict>]>>;
+            provider: z.ZodOptional<z.ZodString>;
+            providerDomain: z.ZodString;
+            kind: z.ZodOptional<z.ZodEnum<{
+                api_key: "api_key";
+                app_install: "app_install";
+                delegated: "delegated";
+                oauth2: "oauth2";
+            }>>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            resource: z.ZodOptional<z.ZodString>;
+            selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodLiteral<"repository">;
+            }, z.core.$strict>>>;
+            subjectScope: z.ZodOptional<z.ZodEnum<{
+                subject: "subject";
+                workspace: "workspace";
+            }>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    context: z.ZodEnum<{
+        user_private: "user_private";
+        workspace_shared: "workspace_shared";
+    }>;
+}, z.core.$strict>;
+export type HostMcpTaskAuthority = z.infer<typeof HostMcpTaskAuthority>;

package/dist/host-mcp-bindings.js

@@ -0,0 +1,252 @@
+import {
+  ExternalIdentity
+} from "./chunk-KR2V42UZ.js";
+import {
+  ConnectionUseAuthoritySnapshot
+} from "./chunk-46KLD2UH.js";
+import {
+  HostMcpCreateSelections,
+  ManagedUserResourceGrantMode,
+  McpServerConnectionRef,
+  SessionTenancyVisibility,
+  stableJson
+} from "./chunk-X7ETVO4P.js";
+import "./chunk-5IXYF6XN.js";
+import "./chunk-NRMCVHAU.js";
+import "./chunk-WYBDERIY.js";
+import "./chunk-4JGHSSB7.js";
+import "./chunk-EK7NDGFR.js";
+import "./chunk-O77VSFYZ.js";
+import "./chunk-NVJMJWLL.js";
+import "./chunk-SIOU2K4U.js";
+import "./chunk-YRKRZ6OF.js";
+import "./chunk-2VORLN2R.js";
+import "./chunk-FZ6BXQHL.js";
+import "./chunk-GRG7PHWQ.js";
+import "./chunk-YRXAWWCU.js";
+import "./chunk-2ACYHZFB.js";
+import "./chunk-KHHZTBP7.js";
+import "./chunk-YBW5JSA3.js";
+import "./chunk-RJ76DRPO.js";
+import "./chunk-QR5D2IQC.js";
+import "./chunk-3SIZGL3O.js";
+import "./chunk-RIY7GYQS.js";
+import "./chunk-JUFK3T4Q.js";
+import "./chunk-TSCDAGET.js";
+import "./chunk-BCS7WHCK.js";
+import "./chunk-D2HKF2EF.js";
+import "./chunk-MYBZRDTY.js";
+import "./chunk-MZLBPKFE.js";
+import "./chunk-RKX3NQYS.js";
+import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
+import "./chunk-PX3VCKAU.js";
+
+// src/host-mcp-bindings.ts
+import { z } from "zod";
+var HostMcpOwnerSubject = z.union([
+  ExternalIdentity.shape.subjectId,
+  z.string().max(4096).regex(/^user:[^\r\n\u0000]+$/)
+]);
+var HostMcpBindingDefinition = z.object({
+  serverId: z.string().min(1).max(256),
+  destinationUrl: z.string().url().max(4096).refine((value) => {
+    const url = new URL(value);
+    return url.protocol === "https:" && !url.username && !url.password && !url.hash;
+  }, "Host binding requires an HTTPS destination without userinfo or fragment").transform((value) => new URL(value).toString()),
+  connectionRef: McpServerConnectionRef
+}).strict().superRefine((value, context) => {
+  if (value.connectionRef.hostBinding)
+    context.addIssue({
+      code: "custom",
+      path: ["connectionRef", "hostBinding"],
+      message: "A binding definition cannot reference another binding"
+    });
+  if (value.connectionRef.authoritySource !== "host" || !value.connectionRef.connectionId)
+    context.addIssue({
+      code: "custom",
+      path: ["connectionRef"],
+      message: "Explicit host connection authority is required"
+    });
+  if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65536)
+    context.addIssue({ code: "custom", message: "Host binding definition exceeds 64 KiB" });
+});
+function hostMcpBindingMatchesSelection(binding, selection) {
+  const parsed = McpServerConnectionRef.safeParse(selection.connectionRef);
+  if (!parsed.success || !parsed.data.hostBinding) return false;
+  const { hostBinding, ...configuredRef } = parsed.data;
+  const definition = HostMcpBindingDefinition.safeParse(binding.definition);
+  if (!definition.success) return false;
+  let destinationUrl;
+  try {
+    destinationUrl = new URL(selection.destinationUrl).toString();
+  } catch {
+    return false;
+  }
+  if (selection.serverId !== definition.data.serverId || destinationUrl !== definition.data.destinationUrl)
+    return false;
+  if ("selection" in hostBinding) {
+    const { connectionId: _connectionId, ...selectedRef } = definition.data.connectionRef;
+    return stableJson(configuredRef) === stableJson(selectedRef);
+  }
+  return binding.id === hostBinding.bindingId && binding.generation === hostBinding.generation && stableJson(configuredRef) === stableJson(definition.data.connectionRef);
+}
+var HostMcpBinding = z.object({
+  id: z.string().uuid(),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  ownerSubjectId: HostMcpOwnerSubject,
+  authorizationRevision: z.number().int().positive().safe(),
+  generation: z.number().int().positive().safe(),
+  status: z.enum(["active", "revoked"]),
+  definition: HostMcpBindingDefinition,
+  createdAt: z.string().datetime({ offset: true }),
+  revokedAt: z.string().datetime({ offset: true }).nullable()
+}).strict();
+var CreateHostMcpBindingRequest = z.object({
+  operationId: z.string().uuid(),
+  definition: HostMcpBindingDefinition
+}).strict();
+var HostMcpGrantRequest = z.object({
+  scope: z.literal("user"),
+  mode: ManagedUserResourceGrantMode,
+  context: SessionTenancyVisibility,
+  sessionId: z.string().uuid().nullable().optional(),
+  expectedAuthorityEpoch: z.number().int().positive().nullable().optional(),
+  workspaceSharedAcknowledged: z.boolean().default(false)
+}).strict().superRefine((value, context) => {
+  if (value.context === "workspace_shared" && !value.workspaceSharedAcknowledged) {
+    context.addIssue({
+      code: "custom",
+      path: ["workspaceSharedAcknowledged"],
+      message: "workspace_shared requires durable shared-output acknowledgement"
+    });
+  }
+  if (value.mode === "always" && (value.sessionId || value.expectedAuthorityEpoch)) {
+    context.addIssue({ code: "custom", path: ["sessionId"], message: "always is unbound" });
+  }
+  if (value.mode === "session" && (!value.sessionId || !value.expectedAuthorityEpoch)) {
+    context.addIssue({
+      code: "custom",
+      path: ["sessionId"],
+      message: "session requires a target session and expectedAuthorityEpoch"
+    });
+  }
+});
+var HostMcpDelegationGrant = HostMcpGrantRequest.superRefine((value, context) => {
+  if (Boolean(value.sessionId) !== (value.expectedAuthorityEpoch != null) || value.expectedAuthorityEpoch != null && !Number.isSafeInteger(value.expectedAuthorityEpoch)) {
+    context.addIssue({
+      code: "custom",
+      message: "Host session grants require a matching safe authority epoch"
+    });
+  }
+});
+var IssueHostMcpDelegationRequest = z.object({
+  operationId: z.string().uuid(),
+  bindingId: z.string().uuid(),
+  expectedBindingGeneration: z.number().int().positive().safe(),
+  grant: HostMcpDelegationGrant
+}).strict();
+var HostMcpDelegation = z.object({
+  id: z.string().uuid(),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  ownerSubjectId: HostMcpOwnerSubject,
+  ownerAuthorizationRevision: z.number().int().positive().safe(),
+  bindingId: z.string().uuid(),
+  bindingGeneration: z.number().int().positive().safe(),
+  grant: HostMcpDelegationGrant,
+  generation: z.number().int().positive().safe(),
+  status: z.enum(["active", "revoked"]),
+  createdAt: z.string().datetime({ offset: true }),
+  revokedAt: z.string().datetime({ offset: true }).nullable()
+}).strict();
+var HostMcpAcceptedAuthority = z.object({
+  version: z.literal(1),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  targetSessionId: z.string().uuid(),
+  targetSessionVisibility: SessionTenancyVisibility,
+  targetSessionAuthorityEpoch: z.number().int().positive().safe(),
+  acceptedWork: ConnectionUseAuthoritySnapshot.shape.acceptedWork,
+  bindingId: z.string().uuid(),
+  bindingGeneration: z.number().int().positive().safe(),
+  definition: HostMcpBindingDefinition,
+  ownerSubjectId: HostMcpOwnerSubject,
+  ownerOrganizationMembershipId: z.string().uuid(),
+  ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),
+  delegationId: z.string().uuid(),
+  delegationGeneration: z.number().int().positive().safe(),
+  scheduledOrigin: z.object({
+    taskId: z.string().uuid(),
+    taskAuthorityRevision: z.number().int().positive().safe(),
+    runId: z.string().uuid()
+  }).strict().optional(),
+  source: z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("direct") }).strict(),
+    z.object({ kind: z.literal("scheduled_task") }).strict(),
+    z.object({
+      kind: z.literal("child_turn"),
+      sessionId: z.string().uuid(),
+      turnId: z.string().uuid()
+    }).strict(),
+    z.object({
+      kind: z.literal("inherited_turn"),
+      sessionId: z.string().uuid(),
+      turnId: z.string().uuid()
+    }).strict()
+  ])
+}).strict().superRefine((value, context) => {
+  if (value.source.kind === "direct" && value.scheduledOrigin || value.source.kind === "scheduled_task" && (!value.scheduledOrigin || value.acceptedWork.kind !== "scheduled_task" || value.scheduledOrigin.taskId !== value.acceptedWork.taskId || value.scheduledOrigin.runId !== value.acceptedWork.runId || value.scheduledOrigin.taskAuthorityRevision !== value.acceptedWork.taskAuthorityRevision))
+    context.addIssue({
+      code: "custom",
+      message: "Scheduled host authority must retain its exact run origin"
+    });
+  if (value.acceptedWork.kind === "turn" && value.source.kind === "inherited_turn" && value.acceptedWork.turnId === value.source.turnId) {
+    context.addIssue({
+      code: "custom",
+      path: ["source"],
+      message: "Accepted work cannot inherit from itself"
+    });
+  }
+  if (value.acceptedWork.kind === "scheduled_task" && !Number.isSafeInteger(value.acceptedWork.taskAuthorityRevision)) {
+    context.addIssue({
+      code: "custom",
+      path: ["acceptedWork"],
+      message: "Task authority revision must be a safe integer"
+    });
+  }
+  if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65536) {
+    context.addIssue({ code: "custom", message: "Host accepted authority exceeds 64 KiB" });
+  }
+});
+var HostMcpTaskAuthority = z.object({
+  version: z.literal(1),
+  accountId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  taskId: z.string().uuid(),
+  taskAuthorityRevision: z.number().int().positive().safe(),
+  taskExecutionDigest: z.string().regex(/^[0-9a-f]{64}$/),
+  ownerSubjectId: HostMcpOwnerSubject,
+  ownerOrganizationMembershipId: z.string().uuid(),
+  ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),
+  bindingId: z.string().uuid(),
+  bindingGeneration: z.number().int().positive().safe(),
+  delegationId: z.string().uuid(),
+  delegationGeneration: z.number().int().positive().safe(),
+  definition: HostMcpBindingDefinition,
+  context: SessionTenancyVisibility
+}).strict();
+export {
+  CreateHostMcpBindingRequest,
+  HostMcpAcceptedAuthority,
+  HostMcpBinding,
+  HostMcpBindingDefinition,
+  HostMcpCreateSelections,
+  HostMcpDelegation,
+  HostMcpOwnerSubject,
+  HostMcpTaskAuthority,
+  IssueHostMcpDelegationRequest,
+  hostMcpBindingMatchesSelection
+};
+//# sourceMappingURL=host-mcp-bindings.js.map

package/dist/host-mcp-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/host-mcp-bindings.ts"],"sourcesContent":["import { z } from \"zod\";\nexport { HostMcpCreateSelections, type HostMcpCreateSelection } from \"./index\";\nimport {\n  McpServerConnectionRef,\n  SessionTenancyVisibility,\n  ManagedUserResourceGrantMode,\n  stableJson,\n} from \"./index\";\nimport { ConnectionUseAuthoritySnapshot } from \"./connection-authority\";\nimport { ExternalIdentity } from \"./external-identities\";\nexport const HostMcpOwnerSubject = z.union([\n  ExternalIdentity.shape.subjectId,\n  z\n    .string()\n    .max(4096)\n    .regex(/^user:[^\\r\\n\\u0000]+$/),\n]);\n\n/** Credential-free, immutable destination and host connection selection. */\nexport const HostMcpBindingDefinition = z\n  .object({\n    serverId: z.string().min(1).max(256),\n    destinationUrl: z\n      .string()\n      .url()\n      .max(4096)\n      .refine((value) => {\n        const url = new URL(value);\n        return url.protocol === \"https:\" && !url.username && !url.password && !url.hash;\n      }, \"Host binding requires an HTTPS destination without userinfo or fragment\")\n      .transform((value) => new URL(value).toString()),\n    connectionRef: McpServerConnectionRef,\n  })\n  .strict()\n  .superRefine((value, context) => {\n    if (value.connectionRef.hostBinding)\n      context.addIssue({\n        code: \"custom\",\n        path: [\"connectionRef\", \"hostBinding\"],\n        message: \"A binding definition cannot reference another binding\",\n      });\n    if (value.connectionRef.authoritySource !== \"host\" || !value.connectionRef.connectionId)\n      context.addIssue({\n        code: \"custom\",\n        path: [\"connectionRef\"],\n        message: \"Explicit host connection authority is required\",\n      });\n    if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65_536)\n      context.addIssue({ code: \"custom\", message: \"Host binding definition exceeds 64 KiB\" });\n  });\nexport type HostMcpBindingDefinition = z.infer<typeof HostMcpBindingDefinition>;\n\n/** Configuration ceiling, never execution authority. The complete destination\n * and provider/scope/resource selection stay exact; only the account identifier\n * is chosen by a captured owner grant in explicit accepted-turn mode. */\nexport type HostMcpBindingSelection = {\n  serverId: string;\n  destinationUrl: string;\n  connectionRef: McpServerConnectionRef;\n};\n\nexport function hostMcpBindingMatchesSelection(\n  binding: { id: string; generation: number; definition: HostMcpBindingDefinition },\n  selection: HostMcpBindingSelection,\n): boolean {\n  const parsed = McpServerConnectionRef.safeParse(selection.connectionRef);\n  if (!parsed.success || !parsed.data.hostBinding) return false;\n  const { hostBinding, ...configuredRef } = parsed.data;\n  const definition = HostMcpBindingDefinition.safeParse(binding.definition);\n  if (!definition.success) return false;\n  let destinationUrl: string;\n  try {\n    destinationUrl = new URL(selection.destinationUrl).toString();\n  } catch {\n    return false;\n  }\n  if (\n    selection.serverId !== definition.data.serverId ||\n    destinationUrl !== definition.data.destinationUrl\n  )\n    return false;\n  if (\"selection\" in hostBinding) {\n    const { connectionId: _connectionId, ...selectedRef } = definition.data.connectionRef;\n    return stableJson(configuredRef) === stableJson(selectedRef);\n  }\n  return (\n    binding.id === hostBinding.bindingId &&\n    binding.generation === hostBinding.generation &&\n    stableJson(configuredRef) === stableJson(definition.data.connectionRef)\n  );\n}\n\nexport const HostMcpBinding = z\n  .object({\n    id: z.string().uuid(),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    ownerSubjectId: HostMcpOwnerSubject,\n    authorizationRevision: z.number().int().positive().safe(),\n    generation: z.number().int().positive().safe(),\n    status: z.enum([\"active\", \"revoked\"]),\n    definition: HostMcpBindingDefinition,\n    createdAt: z.string().datetime({ offset: true }),\n    revokedAt: z.string().datetime({ offset: true }).nullable(),\n  })\n  .strict();\nexport type HostMcpBinding = z.infer<typeof HostMcpBinding>;\n\nexport const CreateHostMcpBindingRequest = z\n  .object({\n    operationId: z.string().uuid(),\n    definition: HostMcpBindingDefinition,\n  })\n  .strict();\nexport type CreateHostMcpBindingRequest = z.infer<typeof CreateHostMcpBindingRequest>;\n\nconst HostMcpGrantRequest = z\n  .object({\n    scope: z.literal(\"user\"),\n    mode: ManagedUserResourceGrantMode,\n    context: SessionTenancyVisibility,\n    sessionId: z.string().uuid().nullable().optional(),\n    expectedAuthorityEpoch: z.number().int().positive().nullable().optional(),\n    workspaceSharedAcknowledged: z.boolean().default(false),\n  })\n  .strict()\n  .superRefine((value, context) => {\n    if (value.context === \"workspace_shared\" && !value.workspaceSharedAcknowledged) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"workspaceSharedAcknowledged\"],\n        message: \"workspace_shared requires durable shared-output acknowledgement\",\n      });\n    }\n    if (value.mode === \"always\" && (value.sessionId || value.expectedAuthorityEpoch)) {\n      context.addIssue({ code: \"custom\", path: [\"sessionId\"], message: \"always is unbound\" });\n    }\n    if (value.mode === \"session\" && (!value.sessionId || !value.expectedAuthorityEpoch)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"sessionId\"],\n        message: \"session requires a target session and expectedAuthorityEpoch\",\n      });\n    }\n  });\n\n/** Internal owner-authorized issuance; never itself proves caller identity. */\nconst HostMcpDelegationGrant = HostMcpGrantRequest.superRefine((value, context) => {\n  if (\n    Boolean(value.sessionId) !== (value.expectedAuthorityEpoch != null) ||\n    (value.expectedAuthorityEpoch != null && !Number.isSafeInteger(value.expectedAuthorityEpoch))\n  ) {\n    context.addIssue({\n      code: \"custom\",\n      message: \"Host session grants require a matching safe authority epoch\",\n    });\n  }\n});\nexport const IssueHostMcpDelegationRequest = z\n  .object({\n    operationId: z.string().uuid(),\n    bindingId: z.string().uuid(),\n    expectedBindingGeneration: z.number().int().positive().safe(),\n    grant: HostMcpDelegationGrant,\n  })\n  .strict();\nexport type IssueHostMcpDelegationRequest = z.infer<typeof IssueHostMcpDelegationRequest>;\n\nexport const HostMcpDelegation = z\n  .object({\n    id: z.string().uuid(),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    ownerSubjectId: HostMcpOwnerSubject,\n    ownerAuthorizationRevision: z.number().int().positive().safe(),\n    bindingId: z.string().uuid(),\n    bindingGeneration: z.number().int().positive().safe(),\n    grant: HostMcpDelegationGrant,\n    generation: z.number().int().positive().safe(),\n    status: z.enum([\"active\", \"revoked\"]),\n    createdAt: z.string().datetime({ offset: true }),\n    revokedAt: z.string().datetime({ offset: true }).nullable(),\n  })\n  .strict();\nexport type HostMcpDelegation = z.infer<typeof HostMcpDelegation>;\n\n/** Internal admission evidence, not a caller-supplied permission or credential.\n * Persistence must construct this from live authenticated authority and freeze\n * it with accepted work. Runtime use must independently revalidate that work,\n * membership, binding and delegation. No API key is retained as execution rights.\n */\nexport const HostMcpAcceptedAuthority = z\n  .object({\n    version: z.literal(1),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    targetSessionId: z.string().uuid(),\n    targetSessionVisibility: SessionTenancyVisibility,\n    targetSessionAuthorityEpoch: z.number().int().positive().safe(),\n    acceptedWork: ConnectionUseAuthoritySnapshot.shape.acceptedWork,\n    bindingId: z.string().uuid(),\n    bindingGeneration: z.number().int().positive().safe(),\n    definition: HostMcpBindingDefinition,\n    ownerSubjectId: HostMcpOwnerSubject,\n    ownerOrganizationMembershipId: z.string().uuid(),\n    ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),\n    delegationId: z.string().uuid(),\n    delegationGeneration: z.number().int().positive().safe(),\n    scheduledOrigin: z\n      .object({\n        taskId: z.string().uuid(),\n        taskAuthorityRevision: z.number().int().positive().safe(),\n        runId: z.string().uuid(),\n      })\n      .strict()\n      .optional(),\n    source: z.discriminatedUnion(\"kind\", [\n      z.object({ kind: z.literal(\"direct\") }).strict(),\n      z.object({ kind: z.literal(\"scheduled_task\") }).strict(),\n      z\n        .object({\n          kind: z.literal(\"child_turn\"),\n          sessionId: z.string().uuid(),\n          turnId: z.string().uuid(),\n        })\n        .strict(),\n      z\n        .object({\n          kind: z.literal(\"inherited_turn\"),\n          sessionId: z.string().uuid(),\n          turnId: z.string().uuid(),\n        })\n        .strict(),\n    ]),\n  })\n  .strict()\n  .superRefine((value, context) => {\n    if (\n      (value.source.kind === \"direct\" && value.scheduledOrigin) ||\n      (value.source.kind === \"scheduled_task\" &&\n        (!value.scheduledOrigin ||\n          value.acceptedWork.kind !== \"scheduled_task\" ||\n          value.scheduledOrigin.taskId !== value.acceptedWork.taskId ||\n          value.scheduledOrigin.runId !== value.acceptedWork.runId ||\n          value.scheduledOrigin.taskAuthorityRevision !== value.acceptedWork.taskAuthorityRevision))\n    )\n      context.addIssue({\n        code: \"custom\",\n        message: \"Scheduled host authority must retain its exact run origin\",\n      });\n    if (\n      value.acceptedWork.kind === \"turn\" &&\n      value.source.kind === \"inherited_turn\" &&\n      value.acceptedWork.turnId === value.source.turnId\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"source\"],\n        message: \"Accepted work cannot inherit from itself\",\n      });\n    }\n    if (\n      value.acceptedWork.kind === \"scheduled_task\" &&\n      !Number.isSafeInteger(value.acceptedWork.taskAuthorityRevision)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"acceptedWork\"],\n        message: \"Task authority revision must be a safe integer\",\n      });\n    }\n    if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65_536) {\n      context.addIssue({ code: \"custom\", message: \"Host accepted authority exceeds 64 KiB\" });\n    }\n  });\nexport type HostMcpAcceptedAuthority = z.infer<typeof HostMcpAcceptedAuthority>;\n\n/** Credential-free selection frozen on one immutable scheduled-task revision. */\nexport const HostMcpTaskAuthority = z\n  .object({\n    version: z.literal(1),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    taskId: z.string().uuid(),\n    taskAuthorityRevision: z.number().int().positive().safe(),\n    taskExecutionDigest: z.string().regex(/^[0-9a-f]{64}$/),\n    ownerSubjectId: HostMcpOwnerSubject,\n    ownerOrganizationMembershipId: z.string().uuid(),\n    ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),\n    bindingId: z.string().uuid(),\n    bindingGeneration: z.number().int().positive().safe(),\n    delegationId: z.string().uuid(),\n    delegationGeneration: z.number().int().positive().safe(),\n    definition: HostMcpBindingDefinition,\n    context: SessionTenancyVisibility,\n  })\n  .strict();\nexport type HostMcpTaskAuthority = z.infer<typeof HostMcpTaskAuthority>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAUX,IAAM,sBAAsB,EAAE,MAAM;AAAA,EACzC,iBAAiB,MAAM;AAAA,EACvB,EACG,OAAO,EACP,IAAI,IAAI,EACR,MAAM,uBAAuB;AAClC,CAAC;AAGM,IAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,gBAAgB,EACb,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,OAAO,CAAC,UAAU;AACjB,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,WAAO,IAAI,aAAa,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI;AAAA,EAC7E,GAAG,yEAAyE,EAC3E,UAAU,CAAC,UAAU,IAAI,IAAI,KAAK,EAAE,SAAS,CAAC;AAAA,EACjD,eAAe;AACjB,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,MAAI,MAAM,cAAc;AACtB,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,iBAAiB,aAAa;AAAA,MACrC,SAAS;AAAA,IACX,CAAC;AACH,MAAI,MAAM,cAAc,oBAAoB,UAAU,CAAC,MAAM,cAAc;AACzE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,eAAe;AAAA,MACtB,SAAS;AAAA,IACX,CAAC;AACH,MAAI,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,aAAa;AAC/D,YAAQ,SAAS,EAAE,MAAM,UAAU,SAAS,yCAAyC,CAAC;AAC1F,CAAC;AAYI,SAAS,+BACd,SACA,WACS;AACT,QAAM,SAAS,uBAAuB,UAAU,UAAU,aAAa;AACvE,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAAK,YAAa,QAAO;AACxD,QAAM,EAAE,aAAa,GAAG,cAAc,IAAI,OAAO;AACjD,QAAM,aAAa,yBAAyB,UAAU,QAAQ,UAAU;AACxE,MAAI,CAAC,WAAW,QAAS,QAAO;AAChC,MAAI;AACJ,MAAI;AACF,qBAAiB,IAAI,IAAI,UAAU,cAAc,EAAE,SAAS;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MACE,UAAU,aAAa,WAAW,KAAK,YACvC,mBAAmB,WAAW,KAAK;AAEnC,WAAO;AACT,MAAI,eAAe,aAAa;AAC9B,UAAM,EAAE,cAAc,eAAe,GAAG,YAAY,IAAI,WAAW,KAAK;AACxE,WAAO,WAAW,aAAa,MAAM,WAAW,WAAW;AAAA,EAC7D;AACA,SACE,QAAQ,OAAO,YAAY,aAC3B,QAAQ,eAAe,YAAY,cACnC,WAAW,aAAa,MAAM,WAAW,WAAW,KAAK,aAAa;AAE1E;AAEO,IAAM,iBAAiB,EAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,gBAAgB;AAAA,EAChB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACxD,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC7C,QAAQ,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC;AAAA,EACpC,YAAY;AAAA,EACZ,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAC5D,CAAC,EACA,OAAO;AAGH,IAAM,8BAA8B,EACxC,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,YAAY;AACd,CAAC,EACA,OAAO;AAGV,IAAM,sBAAsB,EACzB,OAAO;AAAA,EACN,OAAO,EAAE,QAAQ,MAAM;AAAA,EACvB,MAAM;AAAA,EACN,SAAS;AAAA,EACT,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAAA,EACxE,6BAA6B,EAAE,QAAQ,EAAE,QAAQ,KAAK;AACxD,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,MAAI,MAAM,YAAY,sBAAsB,CAAC,MAAM,6BAA6B;AAC9E,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,6BAA6B;AAAA,MACpC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,aAAa,MAAM,yBAAyB;AAChF,YAAQ,SAAS,EAAE,MAAM,UAAU,MAAM,CAAC,WAAW,GAAG,SAAS,oBAAoB,CAAC;AAAA,EACxF;AACA,MAAI,MAAM,SAAS,cAAc,CAAC,MAAM,aAAa,CAAC,MAAM,yBAAyB;AACnF,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,WAAW;AAAA,MAClB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAGH,IAAM,yBAAyB,oBAAoB,YAAY,CAAC,OAAO,YAAY;AACjF,MACE,QAAQ,MAAM,SAAS,OAAO,MAAM,0BAA0B,SAC7D,MAAM,0BAA0B,QAAQ,CAAC,OAAO,cAAc,MAAM,sBAAsB,GAC3F;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AACM,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,2BAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC5D,OAAO;AACT,CAAC,EACA,OAAO;AAGH,IAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,gBAAgB;AAAA,EAChB,4BAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACpD,OAAO;AAAA,EACP,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC7C,QAAQ,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAC5D,CAAC,EACA,OAAO;AAQH,IAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,yBAAyB;AAAA,EACzB,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC9D,cAAc,+BAA+B,MAAM;AAAA,EACnD,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACpD,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,+BAA+B,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/C,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvE,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvD,iBAAiB,EACd,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,IACxD,OAAO,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,CAAC,EACA,OAAO,EACP,SAAS;AAAA,EACZ,QAAQ,EAAE,mBAAmB,QAAQ;AAAA,IACnC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE,CAAC,EAAE,OAAO;AAAA,IAC/C,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,gBAAgB,EAAE,CAAC,EAAE,OAAO;AAAA,IACvD,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,YAAY;AAAA,MAC5B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,MAC3B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,CAAC,EACA,OAAO;AAAA,IACV,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,MAChC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,MAC3B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,CAAC,EACA,OAAO;AAAA,EACZ,CAAC;AACH,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,MACG,MAAM,OAAO,SAAS,YAAY,MAAM,mBACxC,MAAM,OAAO,SAAS,qBACpB,CAAC,MAAM,mBACN,MAAM,aAAa,SAAS,oBAC5B,MAAM,gBAAgB,WAAW,MAAM,aAAa,UACpD,MAAM,gBAAgB,UAAU,MAAM,aAAa,SACnD,MAAM,gBAAgB,0BAA0B,MAAM,aAAa;AAEvE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AACH,MACE,MAAM,aAAa,SAAS,UAC5B,MAAM,OAAO,SAAS,oBACtB,MAAM,aAAa,WAAW,MAAM,OAAO,QAC3C;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,QAAQ;AAAA,MACf,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MACE,MAAM,aAAa,SAAS,oBAC5B,CAAC,OAAO,cAAc,MAAM,aAAa,qBAAqB,GAC9D;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,cAAc;AAAA,MACrB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,aAAa,OAAQ;AACvE,YAAQ,SAAS,EAAE,MAAM,UAAU,SAAS,yCAAyC,CAAC;AAAA,EACxF;AACF,CAAC;AAII,IAAM,uBAAuB,EACjC,OAAO;AAAA,EACN,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACxD,qBAAqB,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EACtD,gBAAgB;AAAA,EAChB,+BAA+B,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/C,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvE,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACpD,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvD,YAAY;AAAA,EACZ,SAAS;AACX,CAAC,EACA,OAAO;","names":[]}

package/dist/image-generation.d.ts

@@ -35,6 +35,7 @@ export declare const GeneratedImageReceiptSchema: z.ZodObject<{
         artifactId: z.ZodString;
         kind: z.ZodEnum<{
             assistant_completion: "assistant_completion";
+            browser_screenshot: "browser_screenshot";
             computer_screenshot: "computer_screenshot";
             event_media: "event_media";
             file: "file";