@opengeni/contracts 1.0.1 → 2.2.0-canary.0

package/dist/personal-github.d.ts

@@ -0,0 +1,319 @@
+import { z } from "zod";
+import { ConnectionMetadata } from "./index.js";
+export declare const PERSONAL_GITHUB_PROVIDER_DOMAIN: "github.com";
+export declare const PERSONAL_GITHUB_PROVIDER_FAMILY: "github";
+export declare const PERSONAL_GITHUB_CREDENTIAL_ROLE: "opengeni_github_personal";
+export declare const PERSONAL_GITHUB_CONNECTION_SURFACE_ID: "github:personal";
+export declare const PERSONAL_GITHUB_REQUESTED_SCOPES: readonly ["repo"];
+export declare const PERSONAL_GITHUB_AUTHORIZATION_URL: "https://github.com/login/oauth/authorize";
+export declare const PERSONAL_GITHUB_TOKEN_URL: "https://github.com/login/oauth/access_token";
+export declare const PERSONAL_GITHUB_USER_URL: "https://api.github.com/user";
+export declare const PERSONAL_GITHUB_API_ORIGIN: "https://api.github.com";
+export declare const PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX: 100;
+export declare const PersonalGitHubRepositoryId: z.ZodString;
+export type PersonalGitHubRepositoryId = z.infer<typeof PersonalGitHubRepositoryId>;
+export declare const PersonalGitHubRepositoryAccess: z.ZodEnum<{
+    read: "read";
+    write: "write";
+}>;
+export type PersonalGitHubRepositoryAccess = z.infer<typeof PersonalGitHubRepositoryAccess>;
+export declare const PersonalGitHubRepositoryPermissions: z.ZodObject<{
+    pull: z.ZodBoolean;
+    push: z.ZodBoolean;
+    admin: z.ZodBoolean;
+    maintain: z.ZodBoolean;
+    triage: z.ZodBoolean;
+}, z.core.$strict>;
+export type PersonalGitHubRepositoryPermissions = z.infer<typeof PersonalGitHubRepositoryPermissions>;
+export declare const PersonalGitHubRepositoryVisibility: z.ZodEnum<{
+    internal: "internal";
+    private: "private";
+    public: "public";
+}>;
+export type PersonalGitHubRepositoryVisibility = z.infer<typeof PersonalGitHubRepositoryVisibility>;
+export declare function canonicalPersonalGitHubRepositoryUrl(fullName: string): string;
+/** A bounded, credential-free projection verified directly against GitHub. */
+export declare const PersonalGitHubRepository: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    visibility: z.ZodEnum<{
+        internal: "internal";
+        private: "private";
+        public: "public";
+    }>;
+    private: z.ZodBoolean;
+    archived: z.ZodBoolean;
+    disabled: z.ZodBoolean;
+    permissions: z.ZodObject<{
+        pull: z.ZodBoolean;
+        push: z.ZodBoolean;
+        admin: z.ZodBoolean;
+        maintain: z.ZodBoolean;
+        triage: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type PersonalGitHubRepository = z.infer<typeof PersonalGitHubRepository>;
+export declare const PersonalGitHubSelectedRepository: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    visibility: z.ZodEnum<{
+        internal: "internal";
+        private: "private";
+        public: "public";
+    }>;
+    private: z.ZodBoolean;
+    archived: z.ZodBoolean;
+    disabled: z.ZodBoolean;
+    permissions: z.ZodObject<{
+        pull: z.ZodBoolean;
+        push: z.ZodBoolean;
+        admin: z.ZodBoolean;
+        maintain: z.ZodBoolean;
+        triage: z.ZodBoolean;
+    }, z.core.$strict>;
+    selectedAccess: z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>;
+    selectionGeneration: z.ZodNumber;
+    selectedAt: z.ZodString;
+    lastVerifiedAt: z.ZodString;
+}, z.core.$strict>;
+export type PersonalGitHubSelectedRepository = z.infer<typeof PersonalGitHubSelectedRepository>;
+export declare const PersonalGitHubRepositorySelectionState: z.ZodObject<{
+    connectionAuthorityGeneration: z.ZodNumber;
+    credentialBindingId: z.ZodString;
+    providerPrincipalId: z.ZodString;
+    selectionGeneration: z.ZodNumber;
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryId: z.ZodString;
+        fullName: z.ZodString;
+        canonicalUrl: z.ZodString;
+        defaultBranch: z.ZodString;
+        visibility: z.ZodEnum<{
+            internal: "internal";
+            private: "private";
+            public: "public";
+        }>;
+        private: z.ZodBoolean;
+        archived: z.ZodBoolean;
+        disabled: z.ZodBoolean;
+        permissions: z.ZodObject<{
+            pull: z.ZodBoolean;
+            push: z.ZodBoolean;
+            admin: z.ZodBoolean;
+            maintain: z.ZodBoolean;
+            triage: z.ZodBoolean;
+        }, z.core.$strict>;
+        selectedAccess: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        selectionGeneration: z.ZodNumber;
+        selectedAt: z.ZodString;
+        lastVerifiedAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PersonalGitHubRepositorySelectionState = z.infer<typeof PersonalGitHubRepositorySelectionState>;
+export declare const ListPersonalGitHubRepositoriesQuery: z.ZodObject<{
+    cursor: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export type ListPersonalGitHubRepositoriesQuery = z.infer<typeof ListPersonalGitHubRepositoriesQuery>;
+export declare const PersonalGitHubRepositoryCatalogItem: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    visibility: z.ZodEnum<{
+        internal: "internal";
+        private: "private";
+        public: "public";
+    }>;
+    private: z.ZodBoolean;
+    archived: z.ZodBoolean;
+    disabled: z.ZodBoolean;
+    permissions: z.ZodObject<{
+        pull: z.ZodBoolean;
+        push: z.ZodBoolean;
+        admin: z.ZodBoolean;
+        maintain: z.ZodBoolean;
+        triage: z.ZodBoolean;
+    }, z.core.$strict>;
+    selectedAccess: z.ZodNullable<z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>>;
+}, z.core.$strict>;
+export type PersonalGitHubRepositoryCatalogItem = z.infer<typeof PersonalGitHubRepositoryCatalogItem>;
+export declare const ListPersonalGitHubRepositoriesResponse: z.ZodObject<{
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryId: z.ZodString;
+        fullName: z.ZodString;
+        canonicalUrl: z.ZodString;
+        defaultBranch: z.ZodString;
+        visibility: z.ZodEnum<{
+            internal: "internal";
+            private: "private";
+            public: "public";
+        }>;
+        private: z.ZodBoolean;
+        archived: z.ZodBoolean;
+        disabled: z.ZodBoolean;
+        permissions: z.ZodObject<{
+            pull: z.ZodBoolean;
+            push: z.ZodBoolean;
+            admin: z.ZodBoolean;
+            maintain: z.ZodBoolean;
+            triage: z.ZodBoolean;
+        }, z.core.$strict>;
+        selectedAccess: z.ZodNullable<z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>>;
+    }, z.core.$strict>>;
+    nextCursor: z.ZodNullable<z.ZodNumber>;
+    selection: z.ZodObject<{
+        connectionAuthorityGeneration: z.ZodNumber;
+        credentialBindingId: z.ZodString;
+        providerPrincipalId: z.ZodString;
+        selectionGeneration: z.ZodNumber;
+        repositories: z.ZodArray<z.ZodObject<{
+            repositoryId: z.ZodString;
+            fullName: z.ZodString;
+            canonicalUrl: z.ZodString;
+            defaultBranch: z.ZodString;
+            visibility: z.ZodEnum<{
+                internal: "internal";
+                private: "private";
+                public: "public";
+            }>;
+            private: z.ZodBoolean;
+            archived: z.ZodBoolean;
+            disabled: z.ZodBoolean;
+            permissions: z.ZodObject<{
+                pull: z.ZodBoolean;
+                push: z.ZodBoolean;
+                admin: z.ZodBoolean;
+                maintain: z.ZodBoolean;
+                triage: z.ZodBoolean;
+            }, z.core.$strict>;
+            selectedAccess: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            selectionGeneration: z.ZodNumber;
+            selectedAt: z.ZodString;
+            lastVerifiedAt: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ListPersonalGitHubRepositoriesResponse = z.infer<typeof ListPersonalGitHubRepositoriesResponse>;
+export declare const PersonalGitHubRepositorySelectionInput: z.ZodObject<{
+    repositoryId: z.ZodString;
+    fullName: z.ZodString;
+    access: z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>;
+}, z.core.$strict>;
+export type PersonalGitHubRepositorySelectionInput = z.infer<typeof PersonalGitHubRepositorySelectionInput>;
+export declare const ReplacePersonalGitHubRepositorySelectionsRequest: z.ZodObject<{
+    expectedConnectionAuthorityGeneration: z.ZodNumber;
+    expectedSelectionGeneration: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+    repositories: z.ZodArray<z.ZodObject<{
+        repositoryId: z.ZodString;
+        fullName: z.ZodString;
+        access: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ReplacePersonalGitHubRepositorySelectionsRequest = z.infer<typeof ReplacePersonalGitHubRepositorySelectionsRequest>;
+export declare const VerifyPersonalGitHubRepositorySelectionsRequest: z.ZodObject<{
+    expectedConnectionAuthorityGeneration: z.ZodNumber;
+    expectedSelectionGeneration: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type VerifyPersonalGitHubRepositorySelectionsRequest = z.infer<typeof VerifyPersonalGitHubRepositorySelectionsRequest>;
+/**
+ * Owner-visible, credential-free metadata for one dedicated personal GitHub
+ * OAuth connection. Repository selections are a separate authority and never
+ * live in this credential record.
+ */
+export declare const PersonalGitHubConnectionMetadata: z.ZodObject<{
+    credentialRole: z.ZodLiteral<"opengeni_github_personal">;
+    providerFamily: z.ZodLiteral<"github">;
+    providerPrincipalId: z.ZodString;
+    githubUserId: z.ZodString;
+    githubLogin: z.ZodString;
+    oauthEnvironment: z.ZodString;
+    oauthClientMarker: z.ZodString;
+    credentialBindingId: z.ZodString;
+    connectedAt: z.ZodString;
+    lastVerifiedAt: z.ZodString;
+    disconnectedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    refreshTokenExpiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+export type PersonalGitHubConnectionMetadata = z.infer<typeof PersonalGitHubConnectionMetadata>;
+export declare const PersonalGitHubOAuthStartRequest: z.ZodObject<{
+    connectionId: z.ZodOptional<z.ZodString>;
+    returnPath: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type PersonalGitHubOAuthStartRequest = z.infer<typeof PersonalGitHubOAuthStartRequest>;
+export declare const PersonalGitHubOAuthStartResponse: z.ZodObject<{
+    authorizationUrl: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strict>;
+export type PersonalGitHubOAuthStartResponse = z.infer<typeof PersonalGitHubOAuthStartResponse>;
+export declare const PersonalGitHubConnectionStatusResponse: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    connection: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        authorityId: z.ZodOptional<z.ZodString>;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        subjectId: z.ZodNullable<z.ZodString>;
+        providerDomain: z.ZodString;
+        kind: z.ZodEnum<{
+            api_key: "api_key";
+            app_install: "app_install";
+            delegated: "delegated";
+            oauth2: "oauth2";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            error: "error";
+            needs_reauth: "needs_reauth";
+            revoked: "revoked";
+        }>;
+        grantedScopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodString>;
+        lastRefreshAt: z.ZodNullable<z.ZodString>;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        lastError: z.ZodNullable<z.ZodString>;
+        version: z.ZodNumber;
+        verifiedInstallAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        verifiedInstallVersion: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        createdBySubjectId: z.ZodNullable<z.ZodString>;
+        updatedBySubjectId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    reviewUrl: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type PersonalGitHubConnectionStatusResponse = z.infer<typeof PersonalGitHubConnectionStatusResponse>;
+export declare const PersonalGitHubDisconnectRequest: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type PersonalGitHubDisconnectRequest = z.infer<typeof PersonalGitHubDisconnectRequest>;
+export declare function isPersonalGitHubConnection(connection: Pick<z.infer<typeof ConnectionMetadata>, "providerDomain" | "kind" | "metadata">): boolean;
+export declare function hasReservedPersonalGitHubMetadata(metadata: Record<string, unknown> | undefined): boolean;

package/dist/personal-github.js

@@ -0,0 +1,209 @@
+import {
+  ConnectionMetadata
+} from "./chunk-7ZZ3R27P.js";
+import "./chunk-MRWYRAS5.js";
+import "./chunk-JUFK3T4Q.js";
+import "./chunk-WYBDERIY.js";
+import "./chunk-N6GRVXAJ.js";
+import "./chunk-3SIZGL3O.js";
+import "./chunk-NVJMJWLL.js";
+import "./chunk-7RMTKFJW.js";
+import "./chunk-Y3KNXVTD.js";
+import "./chunk-RIY7GYQS.js";
+import "./chunk-YRKRZ6OF.js";
+import "./chunk-CM6BMECR.js";
+import "./chunk-D2HKF2EF.js";
+import "./chunk-MYBZRDTY.js";
+import "./chunk-TXTQIYCV.js";
+import "./chunk-PX3VCKAU.js";
+import "./chunk-M5ZGRVIQ.js";
+import "./chunk-YBW5JSA3.js";
+
+// src/personal-github.ts
+import { z } from "zod";
+var PERSONAL_GITHUB_PROVIDER_DOMAIN = "github.com";
+var PERSONAL_GITHUB_PROVIDER_FAMILY = "github";
+var PERSONAL_GITHUB_CREDENTIAL_ROLE = "opengeni_github_personal";
+var PERSONAL_GITHUB_CONNECTION_SURFACE_ID = "github:personal";
+var PERSONAL_GITHUB_REQUESTED_SCOPES = ["repo"];
+var PERSONAL_GITHUB_AUTHORIZATION_URL = "https://github.com/login/oauth/authorize";
+var PERSONAL_GITHUB_TOKEN_URL = "https://github.com/login/oauth/access_token";
+var PERSONAL_GITHUB_USER_URL = "https://api.github.com/user";
+var PERSONAL_GITHUB_API_ORIGIN = "https://api.github.com";
+var PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX = 100;
+var PersonalGitHubRepositoryId = z.string().regex(/^[1-9]\d*$/u);
+var PersonalGitHubRepositoryAccess = z.enum(["read", "write"]);
+var PersonalGitHubRepositoryPermissions = z.object({
+  pull: z.boolean(),
+  push: z.boolean(),
+  admin: z.boolean(),
+  maintain: z.boolean(),
+  triage: z.boolean()
+}).strict();
+var PersonalGitHubRepositoryVisibility = z.enum(["public", "private", "internal"]);
+var PersonalGitHubRepositoryFullName = z.string().min(3).max(140).regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})\/[A-Za-z0-9_.-]{1,100}$/u);
+function canonicalPersonalGitHubRepositoryUrl(fullName) {
+  return `https://github.com/${fullName}`;
+}
+var PersonalGitHubRepository = z.object({
+  repositoryId: PersonalGitHubRepositoryId,
+  fullName: PersonalGitHubRepositoryFullName,
+  canonicalUrl: z.string().url().max(512),
+  defaultBranch: z.string().min(1).max(255),
+  visibility: PersonalGitHubRepositoryVisibility,
+  private: z.boolean(),
+  archived: z.boolean(),
+  disabled: z.boolean(),
+  permissions: PersonalGitHubRepositoryPermissions
+}).strict().superRefine((repository, context) => {
+  if (repository.canonicalUrl !== canonicalPersonalGitHubRepositoryUrl(repository.fullName)) {
+    context.addIssue({
+      code: "custom",
+      path: ["canonicalUrl"],
+      message: "canonicalUrl must be derived from fullName"
+    });
+  }
+  if (repository.private !== (repository.visibility === "private")) {
+    context.addIssue({
+      code: "custom",
+      path: ["private"],
+      message: "private must agree with visibility"
+    });
+  }
+});
+var PersonalGitHubSelectedRepository = PersonalGitHubRepository.safeExtend({
+  selectedAccess: PersonalGitHubRepositoryAccess,
+  selectionGeneration: z.number().int().positive(),
+  selectedAt: z.string().datetime({ offset: true }),
+  lastVerifiedAt: z.string().datetime({ offset: true })
+}).strict();
+var PersonalGitHubRepositorySelectionState = z.object({
+  connectionAuthorityGeneration: z.number().int().positive(),
+  credentialBindingId: z.string().uuid(),
+  providerPrincipalId: PersonalGitHubRepositoryId,
+  selectionGeneration: z.number().int().nonnegative(),
+  repositories: z.array(PersonalGitHubSelectedRepository).max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX)
+}).strict();
+var ListPersonalGitHubRepositoriesQuery = z.object({
+  cursor: z.coerce.number().int().positive().max(1e4).default(1),
+  limit: z.coerce.number().int().min(1).max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX).default(50)
+}).strict();
+var PersonalGitHubRepositoryCatalogItem = PersonalGitHubRepository.safeExtend({
+  selectedAccess: PersonalGitHubRepositoryAccess.nullable()
+}).strict();
+var ListPersonalGitHubRepositoriesResponse = z.object({
+  repositories: z.array(PersonalGitHubRepositoryCatalogItem).max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX),
+  nextCursor: z.number().int().positive().nullable(),
+  selection: PersonalGitHubRepositorySelectionState
+}).strict();
+var PersonalGitHubRepositorySelectionInput = z.object({
+  repositoryId: PersonalGitHubRepositoryId,
+  fullName: PersonalGitHubRepositoryFullName,
+  access: PersonalGitHubRepositoryAccess
+}).strict();
+var ReplacePersonalGitHubRepositorySelectionsRequest = z.object({
+  expectedConnectionAuthorityGeneration: z.number().int().positive(),
+  expectedSelectionGeneration: z.number().int().nonnegative(),
+  idempotencyKey: z.string().trim().min(1).max(200),
+  repositories: z.array(PersonalGitHubRepositorySelectionInput).max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX)
+}).strict().superRefine((request, context) => {
+  const repositoryIds = /* @__PURE__ */ new Set();
+  const fullNames = /* @__PURE__ */ new Set();
+  request.repositories.forEach((repository, index) => {
+    const normalizedFullName = repository.fullName.toLowerCase();
+    if (repositoryIds.has(repository.repositoryId)) {
+      context.addIssue({
+        code: "custom",
+        path: ["repositories", index, "repositoryId"],
+        message: "repositoryId must be unique"
+      });
+    }
+    if (fullNames.has(normalizedFullName)) {
+      context.addIssue({
+        code: "custom",
+        path: ["repositories", index, "fullName"],
+        message: "fullName must be unique"
+      });
+    }
+    repositoryIds.add(repository.repositoryId);
+    fullNames.add(normalizedFullName);
+  });
+});
+var VerifyPersonalGitHubRepositorySelectionsRequest = z.object({
+  expectedConnectionAuthorityGeneration: z.number().int().positive(),
+  expectedSelectionGeneration: z.number().int().nonnegative(),
+  idempotencyKey: z.string().trim().min(1).max(200)
+}).strict();
+var PersonalGitHubConnectionMetadata = z.object({
+  credentialRole: z.literal(PERSONAL_GITHUB_CREDENTIAL_ROLE),
+  providerFamily: z.literal(PERSONAL_GITHUB_PROVIDER_FAMILY),
+  providerPrincipalId: z.string().regex(/^\d+$/u),
+  githubUserId: z.string().regex(/^\d+$/u),
+  githubLogin: z.string().min(1).max(100),
+  oauthEnvironment: z.string().min(1).max(128),
+  oauthClientMarker: z.string().regex(/^[a-f0-9]{32}$/u),
+  credentialBindingId: z.string().uuid(),
+  connectedAt: z.string().datetime({ offset: true }),
+  lastVerifiedAt: z.string().datetime({ offset: true }),
+  disconnectedAt: z.string().datetime({ offset: true }).nullable().optional(),
+  refreshTokenExpiresAt: z.string().datetime({ offset: true }).nullable().optional()
+}).passthrough();
+var PersonalGitHubOAuthStartRequest = z.object({
+  /** Existing exact connection generation to re-authorize in place. */
+  connectionId: z.string().uuid().optional(),
+  /** Same-workspace UI path restored after the callback. */
+  returnPath: z.string().min(1).max(2048).optional()
+}).strict();
+var PersonalGitHubOAuthStartResponse = z.object({
+  authorizationUrl: z.string().url(),
+  expiresAt: z.string().datetime({ offset: true })
+}).strict();
+var PersonalGitHubConnectionStatusResponse = z.object({
+  enabled: z.boolean(),
+  connection: ConnectionMetadata.nullable(),
+  reviewUrl: z.string().url().nullable()
+}).strict();
+var PersonalGitHubDisconnectRequest = z.object({
+  expectedVersion: z.number().int().positive(),
+  idempotencyKey: z.string().trim().min(1).max(200)
+}).strict();
+function isPersonalGitHubConnection(connection) {
+  return connection.providerDomain.toLowerCase() === PERSONAL_GITHUB_PROVIDER_DOMAIN && connection.kind === "oauth2" && PersonalGitHubConnectionMetadata.safeParse(connection.metadata).success;
+}
+function hasReservedPersonalGitHubMetadata(metadata) {
+  return metadata?.credentialRole === PERSONAL_GITHUB_CREDENTIAL_ROLE;
+}
+export {
+  ListPersonalGitHubRepositoriesQuery,
+  ListPersonalGitHubRepositoriesResponse,
+  PERSONAL_GITHUB_API_ORIGIN,
+  PERSONAL_GITHUB_AUTHORIZATION_URL,
+  PERSONAL_GITHUB_CONNECTION_SURFACE_ID,
+  PERSONAL_GITHUB_CREDENTIAL_ROLE,
+  PERSONAL_GITHUB_PROVIDER_DOMAIN,
+  PERSONAL_GITHUB_PROVIDER_FAMILY,
+  PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX,
+  PERSONAL_GITHUB_REQUESTED_SCOPES,
+  PERSONAL_GITHUB_TOKEN_URL,
+  PERSONAL_GITHUB_USER_URL,
+  PersonalGitHubConnectionMetadata,
+  PersonalGitHubConnectionStatusResponse,
+  PersonalGitHubDisconnectRequest,
+  PersonalGitHubOAuthStartRequest,
+  PersonalGitHubOAuthStartResponse,
+  PersonalGitHubRepository,
+  PersonalGitHubRepositoryAccess,
+  PersonalGitHubRepositoryCatalogItem,
+  PersonalGitHubRepositoryId,
+  PersonalGitHubRepositoryPermissions,
+  PersonalGitHubRepositorySelectionInput,
+  PersonalGitHubRepositorySelectionState,
+  PersonalGitHubRepositoryVisibility,
+  PersonalGitHubSelectedRepository,
+  ReplacePersonalGitHubRepositorySelectionsRequest,
+  VerifyPersonalGitHubRepositorySelectionsRequest,
+  canonicalPersonalGitHubRepositoryUrl,
+  hasReservedPersonalGitHubMetadata,
+  isPersonalGitHubConnection
+};
+//# sourceMappingURL=personal-github.js.map

package/dist/personal-github.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/personal-github.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\n\nexport const PERSONAL_GITHUB_PROVIDER_DOMAIN = \"github.com\" as const;\nexport const PERSONAL_GITHUB_PROVIDER_FAMILY = \"github\" as const;\nexport const PERSONAL_GITHUB_CREDENTIAL_ROLE = \"opengeni_github_personal\" as const;\nexport const PERSONAL_GITHUB_CONNECTION_SURFACE_ID = \"github:personal\" as const;\nexport const PERSONAL_GITHUB_REQUESTED_SCOPES = [\"repo\"] as const;\nexport const PERSONAL_GITHUB_AUTHORIZATION_URL =\n  \"https://github.com/login/oauth/authorize\" as const;\nexport const PERSONAL_GITHUB_TOKEN_URL = \"https://github.com/login/oauth/access_token\" as const;\nexport const PERSONAL_GITHUB_USER_URL = \"https://api.github.com/user\" as const;\nexport const PERSONAL_GITHUB_API_ORIGIN = \"https://api.github.com\" as const;\nexport const PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX = 100 as const;\n\nexport const PersonalGitHubRepositoryId = z.string().regex(/^[1-9]\\d*$/u);\nexport type PersonalGitHubRepositoryId = z.infer<typeof PersonalGitHubRepositoryId>;\n\nexport const PersonalGitHubRepositoryAccess = z.enum([\"read\", \"write\"]);\nexport type PersonalGitHubRepositoryAccess = z.infer<typeof PersonalGitHubRepositoryAccess>;\n\nexport const PersonalGitHubRepositoryPermissions = z\n  .object({\n    pull: z.boolean(),\n    push: z.boolean(),\n    admin: z.boolean(),\n    maintain: z.boolean(),\n    triage: z.boolean(),\n  })\n  .strict();\nexport type PersonalGitHubRepositoryPermissions = z.infer<\n  typeof PersonalGitHubRepositoryPermissions\n>;\n\nexport const PersonalGitHubRepositoryVisibility = z.enum([\"public\", \"private\", \"internal\"]);\nexport type PersonalGitHubRepositoryVisibility = z.infer<typeof PersonalGitHubRepositoryVisibility>;\n\nconst PersonalGitHubRepositoryFullName = z\n  .string()\n  .min(3)\n  .max(140)\n  .regex(/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})\\/[A-Za-z0-9_.-]{1,100}$/u);\n\nexport function canonicalPersonalGitHubRepositoryUrl(fullName: string): string {\n  return `https://github.com/${fullName}`;\n}\n\n/** A bounded, credential-free projection verified directly against GitHub. */\nexport const PersonalGitHubRepository = z\n  .object({\n    repositoryId: PersonalGitHubRepositoryId,\n    fullName: PersonalGitHubRepositoryFullName,\n    canonicalUrl: z.string().url().max(512),\n    defaultBranch: z.string().min(1).max(255),\n    visibility: PersonalGitHubRepositoryVisibility,\n    private: z.boolean(),\n    archived: z.boolean(),\n    disabled: z.boolean(),\n    permissions: PersonalGitHubRepositoryPermissions,\n  })\n  .strict()\n  .superRefine((repository, context) => {\n    if (repository.canonicalUrl !== canonicalPersonalGitHubRepositoryUrl(repository.fullName)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"canonicalUrl\"],\n        message: \"canonicalUrl must be derived from fullName\",\n      });\n    }\n    if (repository.private !== (repository.visibility === \"private\")) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"private\"],\n        message: \"private must agree with visibility\",\n      });\n    }\n  });\nexport type PersonalGitHubRepository = z.infer<typeof PersonalGitHubRepository>;\n\nexport const PersonalGitHubSelectedRepository = PersonalGitHubRepository.safeExtend({\n  selectedAccess: PersonalGitHubRepositoryAccess,\n  selectionGeneration: z.number().int().positive(),\n  selectedAt: z.string().datetime({ offset: true }),\n  lastVerifiedAt: z.string().datetime({ offset: true }),\n}).strict();\nexport type PersonalGitHubSelectedRepository = z.infer<typeof PersonalGitHubSelectedRepository>;\n\nexport const PersonalGitHubRepositorySelectionState = z\n  .object({\n    connectionAuthorityGeneration: z.number().int().positive(),\n    credentialBindingId: z.string().uuid(),\n    providerPrincipalId: PersonalGitHubRepositoryId,\n    selectionGeneration: z.number().int().nonnegative(),\n    repositories: z\n      .array(PersonalGitHubSelectedRepository)\n      .max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX),\n  })\n  .strict();\nexport type PersonalGitHubRepositorySelectionState = z.infer<\n  typeof PersonalGitHubRepositorySelectionState\n>;\n\nexport const ListPersonalGitHubRepositoriesQuery = z\n  .object({\n    cursor: z.coerce.number().int().positive().max(10_000).default(1),\n    limit: z.coerce.number().int().min(1).max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX).default(50),\n  })\n  .strict();\nexport type ListPersonalGitHubRepositoriesQuery = z.infer<\n  typeof ListPersonalGitHubRepositoriesQuery\n>;\n\nexport const PersonalGitHubRepositoryCatalogItem = PersonalGitHubRepository.safeExtend({\n  selectedAccess: PersonalGitHubRepositoryAccess.nullable(),\n}).strict();\nexport type PersonalGitHubRepositoryCatalogItem = z.infer<\n  typeof PersonalGitHubRepositoryCatalogItem\n>;\n\nexport const ListPersonalGitHubRepositoriesResponse = z\n  .object({\n    repositories: z\n      .array(PersonalGitHubRepositoryCatalogItem)\n      .max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX),\n    nextCursor: z.number().int().positive().nullable(),\n    selection: PersonalGitHubRepositorySelectionState,\n  })\n  .strict();\nexport type ListPersonalGitHubRepositoriesResponse = z.infer<\n  typeof ListPersonalGitHubRepositoriesResponse\n>;\n\nexport const PersonalGitHubRepositorySelectionInput = z\n  .object({\n    repositoryId: PersonalGitHubRepositoryId,\n    fullName: PersonalGitHubRepositoryFullName,\n    access: PersonalGitHubRepositoryAccess,\n  })\n  .strict();\nexport type PersonalGitHubRepositorySelectionInput = z.infer<\n  typeof PersonalGitHubRepositorySelectionInput\n>;\n\nexport const ReplacePersonalGitHubRepositorySelectionsRequest = z\n  .object({\n    expectedConnectionAuthorityGeneration: z.number().int().positive(),\n    expectedSelectionGeneration: z.number().int().nonnegative(),\n    idempotencyKey: z.string().trim().min(1).max(200),\n    repositories: z\n      .array(PersonalGitHubRepositorySelectionInput)\n      .max(PERSONAL_GITHUB_REPOSITORY_CATALOG_MAX),\n  })\n  .strict()\n  .superRefine((request, context) => {\n    const repositoryIds = new Set<string>();\n    const fullNames = new Set<string>();\n    request.repositories.forEach((repository, index) => {\n      const normalizedFullName = repository.fullName.toLowerCase();\n      if (repositoryIds.has(repository.repositoryId)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"repositories\", index, \"repositoryId\"],\n          message: \"repositoryId must be unique\",\n        });\n      }\n      if (fullNames.has(normalizedFullName)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"repositories\", index, \"fullName\"],\n          message: \"fullName must be unique\",\n        });\n      }\n      repositoryIds.add(repository.repositoryId);\n      fullNames.add(normalizedFullName);\n    });\n  });\nexport type ReplacePersonalGitHubRepositorySelectionsRequest = z.infer<\n  typeof ReplacePersonalGitHubRepositorySelectionsRequest\n>;\n\nexport const VerifyPersonalGitHubRepositorySelectionsRequest = z\n  .object({\n    expectedConnectionAuthorityGeneration: z.number().int().positive(),\n    expectedSelectionGeneration: z.number().int().nonnegative(),\n    idempotencyKey: z.string().trim().min(1).max(200),\n  })\n  .strict();\nexport type VerifyPersonalGitHubRepositorySelectionsRequest = z.infer<\n  typeof VerifyPersonalGitHubRepositorySelectionsRequest\n>;\n\n/**\n * Owner-visible, credential-free metadata for one dedicated personal GitHub\n * OAuth connection. Repository selections are a separate authority and never\n * live in this credential record.\n */\nexport const PersonalGitHubConnectionMetadata = z\n  .object({\n    credentialRole: z.literal(PERSONAL_GITHUB_CREDENTIAL_ROLE),\n    providerFamily: z.literal(PERSONAL_GITHUB_PROVIDER_FAMILY),\n    providerPrincipalId: z.string().regex(/^\\d+$/u),\n    githubUserId: z.string().regex(/^\\d+$/u),\n    githubLogin: z.string().min(1).max(100),\n    oauthEnvironment: z.string().min(1).max(128),\n    oauthClientMarker: z.string().regex(/^[a-f0-9]{32}$/u),\n    credentialBindingId: z.string().uuid(),\n    connectedAt: z.string().datetime({ offset: true }),\n    lastVerifiedAt: z.string().datetime({ offset: true }),\n    disconnectedAt: z.string().datetime({ offset: true }).nullable().optional(),\n    refreshTokenExpiresAt: z.string().datetime({ offset: true }).nullable().optional(),\n  })\n  .passthrough();\nexport type PersonalGitHubConnectionMetadata = z.infer<typeof PersonalGitHubConnectionMetadata>;\n\nexport const PersonalGitHubOAuthStartRequest = z\n  .object({\n    /** Existing exact connection generation to re-authorize in place. */\n    connectionId: z.string().uuid().optional(),\n    /** Same-workspace UI path restored after the callback. */\n    returnPath: z.string().min(1).max(2048).optional(),\n  })\n  .strict();\nexport type PersonalGitHubOAuthStartRequest = z.infer<typeof PersonalGitHubOAuthStartRequest>;\n\nexport const PersonalGitHubOAuthStartResponse = z\n  .object({\n    authorizationUrl: z.string().url(),\n    expiresAt: z.string().datetime({ offset: true }),\n  })\n  .strict();\nexport type PersonalGitHubOAuthStartResponse = z.infer<typeof PersonalGitHubOAuthStartResponse>;\n\nexport const PersonalGitHubConnectionStatusResponse = z\n  .object({\n    enabled: z.boolean(),\n    connection: ConnectionMetadata.nullable(),\n    reviewUrl: z.string().url().nullable(),\n  })\n  .strict();\nexport type PersonalGitHubConnectionStatusResponse = z.infer<\n  typeof PersonalGitHubConnectionStatusResponse\n>;\n\nexport const PersonalGitHubDisconnectRequest = z\n  .object({\n    expectedVersion: z.number().int().positive(),\n    idempotencyKey: z.string().trim().min(1).max(200),\n  })\n  .strict();\nexport type PersonalGitHubDisconnectRequest = z.infer<typeof PersonalGitHubDisconnectRequest>;\n\nexport function isPersonalGitHubConnection(\n  connection: Pick<z.infer<typeof ConnectionMetadata>, \"providerDomain\" | \"kind\" | \"metadata\">,\n): boolean {\n  return (\n    connection.providerDomain.toLowerCase() === PERSONAL_GITHUB_PROVIDER_DOMAIN &&\n    connection.kind === \"oauth2\" &&\n    PersonalGitHubConnectionMetadata.safeParse(connection.metadata).success\n  );\n}\n\nexport function hasReservedPersonalGitHubMetadata(\n  metadata: Record<string, unknown> | undefined,\n): boolean {\n  return metadata?.credentialRole === PERSONAL_GITHUB_CREDENTIAL_ROLE;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAIX,IAAM,kCAAkC;AACxC,IAAM,kCAAkC;AACxC,IAAM,kCAAkC;AACxC,IAAM,wCAAwC;AAC9C,IAAM,mCAAmC,CAAC,MAAM;AAChD,IAAM,oCACX;AACK,IAAM,4BAA4B;AAClC,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AACnC,IAAM,yCAAyC;AAE/C,IAAM,6BAA6B,EAAE,OAAO,EAAE,MAAM,aAAa;AAGjE,IAAM,iCAAiC,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;AAG/D,IAAM,sCAAsC,EAChD,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ;AAAA,EAChB,MAAM,EAAE,QAAQ;AAAA,EAChB,OAAO,EAAE,QAAQ;AAAA,EACjB,UAAU,EAAE,QAAQ;AAAA,EACpB,QAAQ,EAAE,QAAQ;AACpB,CAAC,EACA,OAAO;AAKH,IAAM,qCAAqC,EAAE,KAAK,CAAC,UAAU,WAAW,UAAU,CAAC;AAG1F,IAAM,mCAAmC,EACtC,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,6DAA6D;AAE/D,SAAS,qCAAqC,UAA0B;AAC7E,SAAO,sBAAsB,QAAQ;AACvC;AAGO,IAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,cAAc;AAAA,EACd,UAAU;AAAA,EACV,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACxC,YAAY;AAAA,EACZ,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,QAAQ;AAAA,EACpB,UAAU,EAAE,QAAQ;AAAA,EACpB,aAAa;AACf,CAAC,EACA,OAAO,EACP,YAAY,CAAC,YAAY,YAAY;AACpC,MAAI,WAAW,iBAAiB,qCAAqC,WAAW,QAAQ,GAAG;AACzF,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,cAAc;AAAA,MACrB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,WAAW,aAAa,WAAW,eAAe,YAAY;AAChE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAGI,IAAM,mCAAmC,yBAAyB,WAAW;AAAA,EAClF,gBAAgB;AAAA,EAChB,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC/C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACtD,CAAC,EAAE,OAAO;AAGH,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,+BAA+B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACzD,qBAAqB,EAAE,OAAO,EAAE,KAAK;AAAA,EACrC,qBAAqB;AAAA,EACrB,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAClD,cAAc,EACX,MAAM,gCAAgC,EACtC,IAAI,sCAAsC;AAC/C,CAAC,EACA,OAAO;AAKH,IAAM,sCAAsC,EAChD,OAAO;AAAA,EACN,QAAQ,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAM,EAAE,QAAQ,CAAC;AAAA,EAChE,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,sCAAsC,EAAE,QAAQ,EAAE;AAC9F,CAAC,EACA,OAAO;AAKH,IAAM,sCAAsC,yBAAyB,WAAW;AAAA,EACrF,gBAAgB,+BAA+B,SAAS;AAC1D,CAAC,EAAE,OAAO;AAKH,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,cAAc,EACX,MAAM,mCAAmC,EACzC,IAAI,sCAAsC;AAAA,EAC7C,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,WAAW;AACb,CAAC,EACA,OAAO;AAKH,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,cAAc;AAAA,EACd,UAAU;AAAA,EACV,QAAQ;AACV,CAAC,EACA,OAAO;AAKH,IAAM,mDAAmD,EAC7D,OAAO;AAAA,EACN,uCAAuC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACjE,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC1D,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChD,cAAc,EACX,MAAM,sCAAsC,EAC5C,IAAI,sCAAsC;AAC/C,CAAC,EACA,OAAO,EACP,YAAY,CAAC,SAAS,YAAY;AACjC,QAAM,gBAAgB,oBAAI,IAAY;AACtC,QAAM,YAAY,oBAAI,IAAY;AAClC,UAAQ,aAAa,QAAQ,CAAC,YAAY,UAAU;AAClD,UAAM,qBAAqB,WAAW,SAAS,YAAY;AAC3D,QAAI,cAAc,IAAI,WAAW,YAAY,GAAG;AAC9C,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,gBAAgB,OAAO,cAAc;AAAA,QAC5C,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,UAAU,IAAI,kBAAkB,GAAG;AACrC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,gBAAgB,OAAO,UAAU;AAAA,QACxC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,kBAAc,IAAI,WAAW,YAAY;AACzC,cAAU,IAAI,kBAAkB;AAAA,EAClC,CAAC;AACH,CAAC;AAKI,IAAM,kDAAkD,EAC5D,OAAO;AAAA,EACN,uCAAuC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACjE,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC1D,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC,EACA,OAAO;AAUH,IAAM,mCAAmC,EAC7C,OAAO;AAAA,EACN,gBAAgB,EAAE,QAAQ,+BAA+B;AAAA,EACzD,gBAAgB,EAAE,QAAQ,+BAA+B;AAAA,EACzD,qBAAqB,EAAE,OAAO,EAAE,MAAM,QAAQ;AAAA,EAC9C,cAAc,EAAE,OAAO,EAAE,MAAM,QAAQ;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,mBAAmB,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,EACrD,qBAAqB,EAAE,OAAO,EAAE,KAAK;AAAA,EACrC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EACjD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EACpD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1E,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS;AACnF,CAAC,EACA,YAAY;AAGR,IAAM,kCAAkC,EAC5C,OAAO;AAAA;AAAA,EAEN,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA;AAAA,EAEzC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AACnD,CAAC,EACA,OAAO;AAGH,IAAM,mCAAmC,EAC7C,OAAO;AAAA,EACN,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACjD,CAAC,EACA,OAAO;AAGH,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,SAAS,EAAE,QAAQ;AAAA,EACnB,YAAY,mBAAmB,SAAS;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACvC,CAAC,EACA,OAAO;AAKH,IAAM,kCAAkC,EAC5C,OAAO;AAAA,EACN,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC,EACA,OAAO;AAGH,SAAS,2BACd,YACS;AACT,SACE,WAAW,eAAe,YAAY,MAAM,mCAC5C,WAAW,SAAS,YACpB,iCAAiC,UAAU,WAAW,QAAQ,EAAE;AAEpE;AAEO,SAAS,kCACd,UACS;AACT,SAAO,UAAU,mBAAmB;AACtC;","names":[]}

package/dist/preference-registry.d.ts

@@ -283,6 +283,11 @@ export declare const PreferenceRegistryEvent: z.ZodObject<{
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type PreferenceRegistryEvent = z.infer<typeof PreferenceRegistryEvent>;
+export declare const PreferenceRegistryActivationAuthority: z.ZodEnum<{
+    automatic: "automatic";
+    human_confirmed: "human_confirmed";
+}>;
+export type PreferenceRegistryActivationAuthority = z.infer<typeof PreferenceRegistryActivationAuthority>;
 export declare const PreferenceRegistryDescriptor: z.ZodObject<{
     id: z.ZodString;
     stableKey: z.ZodString;
@@ -329,6 +334,10 @@ export declare const PreferenceRegistryDescriptor: z.ZodObject<{
             workspace_managed: "workspace_managed";
         }>;
     }, z.core.$strip>;
+    activationAuthority: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+        automatic: "automatic";
+        human_confirmed: "human_confirmed";
+    }>>>;
     expiresAt: z.ZodNullable<z.ZodString>;
     retrievalHandle: z.ZodString;
 }, z.core.$strip>;
@@ -388,6 +397,10 @@ export declare const PreferenceRegistrySnapshot: z.ZodObject<{
                 workspace_managed: "workspace_managed";
             }>;
         }, z.core.$strip>;
+        activationAuthority: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+            automatic: "automatic";
+            human_confirmed: "human_confirmed";
+        }>>>;
         expiresAt: z.ZodNullable<z.ZodString>;
         retrievalHandle: z.ZodString;
     }, z.core.$strip>>;
@@ -442,6 +455,10 @@ export declare const PreferenceRegistryFullContent: z.ZodObject<{
                 workspace_managed: "workspace_managed";
             }>;
         }, z.core.$strip>;
+        activationAuthority: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+            automatic: "automatic";
+            human_confirmed: "human_confirmed";
+        }>>>;
         expiresAt: z.ZodNullable<z.ZodString>;
         retrievalHandle: z.ZodString;
     }, z.core.$strip>;