@opengeni/contracts 2.9.2 → 2.11.1-canary.0

package/dist/{chunk-4IVHBXRI.js → chunk-7ABONTXE.js}

@@ -2,6 +2,8 @@
 var SESSION_TITLE_MAX_CHARACTERS = 200;
 var AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES = 80;
 var AUTOMATIC_SESSION_TITLE_FALLBACK = "New conversation";
+var PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS = 4096;
+var SESSION_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
 var titleSegmenter;
 var KNOWN_SENSITIVE_VALUE_PATTERNS = [
   /-----BEGIN [A-Z ]*PRIVATE KEY-----/iu,
@@ -209,6 +211,41 @@ function normalizeAutomaticSessionTitle(value) {
   if (!title || !hasVisibleAutomaticTitleContent(title)) return null;
   return title;
 }
+function deriveAutomaticSessionTitlePreview(value) {
+  if (typeof value !== "string") return null;
+  const lines = value.slice(0, PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS).replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n").split(/\n+/u);
+  for (const candidate of lines) {
+    const line = candidate.trim();
+    if (!line || containsSensitiveAutomaticSessionTitleValue(line)) continue;
+    const preview = boundAutomaticSessionTitle(line.replace(/\s+/gu, " ")).replace(/[\s.!?,;:\-–—]+$/u, "").trim();
+    if (preview) return preview;
+  }
+  return null;
+}
+function automaticSessionReferenceTitle(id) {
+  const sessionId = typeof id === "string" ? id.trim() : "";
+  return SESSION_ID_PATTERN.test(sessionId) ? `Conversation ${sessionId.slice(0, 13)}` : AUTOMATIC_SESSION_TITLE_FALLBACK;
+}
+function sessionTitleIsPending(input) {
+  const title = input.title?.trim() ?? "";
+  return input.titleSource !== "user" && (!title || title === AUTOMATIC_SESSION_TITLE_FALLBACK);
+}
+function deriveSessionDisplayTitle(input, options = {}) {
+  const title = input.title?.trim() ?? "";
+  if (input.titleSource === "user") {
+    return title || automaticSessionReferenceTitle(input.id);
+  }
+  if (title && !sessionTitleIsPending(input)) {
+    return title;
+  }
+  for (const key of options.metadataKeys ?? []) {
+    const value = input.metadata?.[key];
+    if (typeof value === "string" && value.trim().length > 0) {
+      return value.trim();
+    }
+  }
+  return deriveAutomaticSessionTitlePreview(input.initialMessage) ?? automaticSessionReferenceTitle(input.id);
+}
 
 export {
   SESSION_TITLE_MAX_CHARACTERS,
@@ -216,6 +253,9 @@ export {
   AUTOMATIC_SESSION_TITLE_FALLBACK,
   containsSensitiveAutomaticSessionTitleValue,
   boundAutomaticSessionTitle,
-  normalizeAutomaticSessionTitle
+  normalizeAutomaticSessionTitle,
+  deriveAutomaticSessionTitlePreview,
+  sessionTitleIsPending,
+  deriveSessionDisplayTitle
 };
-//# sourceMappingURL=chunk-4IVHBXRI.js.map
+//# sourceMappingURL=chunk-7ABONTXE.js.map

package/dist/chunk-7ABONTXE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-titles.ts"],"sourcesContent":["/** Human-authored session titles keep the existing public API ceiling. */\nexport const SESSION_TITLE_MAX_CHARACTERS = 200;\n\n/**\n * Automatic titles are intentionally much shorter than the manual rename\n * ceiling. This is measured in grapheme clusters so emoji and combining text\n * are never split into malformed display strings.\n */\nexport const AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES = 80;\n\n/**\n * Safe durable title used until semantic generation succeeds. It contains no\n * user prompt bytes, so provider failure/offline operation cannot leak a\n * credential or leave a raw prompt prefix in navigation surfaces.\n */\nexport const AUTOMATIC_SESSION_TITLE_FALLBACK = \"New conversation\";\n\n// Session creation accepts a body far larger than a navigation label. Bound\n// the source before any replace/split/normalization so a persisted large prompt\n// cannot amplify memory or CPU on every client render.\nconst PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS = 4_096;\n\nconst SESSION_ID_PATTERN =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;\n\nlet titleSegmenter: Intl.Segmenter | null | undefined;\n\nconst KNOWN_SENSITIVE_VALUE_PATTERNS = [\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----/iu,\n  /\\bBearer\\s+[A-Za-z0-9._~+/=-]{8,}/iu,\n  /\\b(?:sk-(?:proj-)?|gh[oprsu]_|github_pat_|glpat-|xox[baprs]-)[A-Za-z0-9_-]{8,}/iu,\n  /\\bAKIA[0-9A-Z]{16}\\b/u,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/u,\n  /\\beyJ[A-Za-z0-9_-]+\\.eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/u,\n  /[?&](?:access_token|api_key|apikey|password|secret|token)=[^\\s&#]+/iu,\n] as const;\n\nconst URI_SCHEME_CANDIDATE_PATTERN = /\\b[a-z][a-z0-9+.-]*:\\S+/giu;\nconst WINDOWS_DRIVE_PATH_PATTERN = /^[a-z]:[\\\\/](?![\\\\/])[^:]*$/iu;\n\nconst SCHEMELESS_HOST_CANDIDATE_PATTERN =\n  /\\b(?:www\\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?(?::\\d{1,5})?(?:[/?#][^\\s]*)?/giu;\n\nconst SCHEMELESS_LOCAL_NETWORK_PATTERNS = [\n  /\\blocalhost(?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/iu,\n  /\\b(?:(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)\\.){3}(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)(?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/u,\n  /\\[(?=[0-9a-f:.]*:[0-9a-f:.]*\\])[0-9a-f:.]+\\](?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/iu,\n] as const;\n\nconst FILE_LIKE_HOST_SUFFIXES = new Set([\n  \"css\",\n  \"html\",\n  \"js\",\n  \"json\",\n  \"jsx\",\n  \"lock\",\n  \"md\",\n  \"sql\",\n  \"toml\",\n  \"ts\",\n  \"tsx\",\n  \"xml\",\n  \"yaml\",\n  \"yml\",\n]);\n\n// These authorities are established framework/namespace notation whose exact\n// casing is meaningful. Keep this exception deliberately narrow: generic\n// PascalCase or uppercase authorities remain host-like because an uppercase\n// real domain (for example MICROSOFT.COM/Admin) must not bypass the URL gate.\nconst DOTTED_TECHNOLOGY_PATH_AUTHORITIES = new Set([\n  \"ASP.NET\",\n  \"AWS.SDK\",\n  \"Microsoft.Extensions\",\n  \"System.IO\",\n]);\n\nconst SECRET_ASSIGNMENT_CANDIDATE_PATTERN =\n  /(?:^|[^A-Za-z0-9])(?:(['\"])([A-Za-z][A-Za-z0-9_. -]*)\\1|([A-Za-z][A-Za-z0-9_.-]*))\\s*[=:]\\s*[^\\s,;]+/gu;\n\nconst SECRET_LABEL_ASSIGNMENT_PATTERN =\n  /\\b(?:api[ _-]?key|access[ _-]?token|auth[ _-]?token|credential|credentials|password|passwd|private[ _-]?key|secret|token)\\b\\s*[=:]\\s*[^\\s,;]+/iu;\n\nconst SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = new Set([\n  \"credential\",\n  \"credentials\",\n  \"password\",\n  \"passwd\",\n  \"secret\",\n  \"token\",\n]);\n\nconst COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = [\n  \"apikey\",\n  \"accesskey\",\n  \"accesskeyid\",\n  \"accesstoken\",\n  \"authtoken\",\n  \"credential\",\n  \"credentials\",\n  \"password\",\n  \"passwd\",\n  \"privatekey\",\n  \"secret\",\n  \"secretkey\",\n  \"token\",\n] as const;\n\nconst SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES = [\n  [\"api\", \"key\"],\n  [\"access\", \"key\"],\n  [\"access\", \"key\", \"id\"],\n  [\"auth\", \"key\"],\n  [\"private\", \"key\"],\n  [\"secret\", \"key\"],\n] as const;\n\nfunction hasWordSuffix(words: readonly string[], suffix: readonly string[]): boolean {\n  if (words.length < suffix.length) return false;\n  const offset = words.length - suffix.length;\n  return suffix.every((word, index) => words[offset + index] === word);\n}\n\nfunction containsSensitiveAssignment(value: string): boolean {\n  for (const match of value.matchAll(SECRET_ASSIGNMENT_CANDIDATE_PATTERN)) {\n    const key = match[2] ?? match[3];\n    if (!key) continue;\n    const words = key\n      .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n      .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1 $2\")\n      .toLowerCase()\n      .split(/[^a-z0-9]+/)\n      .filter(Boolean);\n    const last = words.at(-1);\n    if (last && SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.has(last)) return true;\n    if (last && COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.some((suffix) => last.endsWith(suffix))) {\n      return true;\n    }\n    if (SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES.some((suffix) => hasWordSuffix(words, suffix))) {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction containsUriScheme(value: string): boolean {\n  for (const match of value.matchAll(URI_SCHEME_CANDIDATE_PATTERN)) {\n    // A Windows drive path is the one scheme-shaped token accepted here. Keep\n    // the exception exact: one separator after the drive letter and no later\n    // colon, so x://host and a nested scheme remain rejected.\n    if (!WINDOWS_DRIVE_PATH_PATTERN.test(match[0])) return true;\n  }\n  return false;\n}\n\nfunction isDottedTechnologyPath(candidate: string): boolean {\n  if (/[?:#]/u.test(candidate)) return false;\n  const [authority, ...pathSegments] = candidate.split(\"/\");\n  if (!authority || pathSegments.length === 0 || pathSegments.some((segment) => !segment)) {\n    return false;\n  }\n  if (\n    !DOTTED_TECHNOLOGY_PATH_AUTHORITIES.has(authority) ||\n    pathSegments.some((segment) => !/^[A-Z][A-Za-z0-9_-]*$/u.test(segment))\n  ) {\n    return false;\n  }\n  return true;\n}\n\nfunction containsSchemelessUrl(value: string): boolean {\n  if (SCHEMELESS_LOCAL_NETWORK_PATTERNS.some((pattern) => pattern.test(value))) return true;\n\n  for (const match of value.matchAll(SCHEMELESS_HOST_CANDIDATE_PATTERN)) {\n    const candidate = match[0];\n    if (candidate.toLowerCase().startsWith(\"www.\")) return true;\n    if (!/[/?#]/u.test(candidate)) continue;\n\n    const authority = candidate.split(/[/?#]/u, 1)[0] ?? \"\";\n    const hostname = authority.replace(/:\\d{1,5}$/u, \"\");\n    const suffix = hostname.split(\".\").at(-1)?.toLowerCase();\n    if (suffix && FILE_LIKE_HOST_SUFFIXES.has(suffix)) continue;\n    if (isDottedTechnologyPath(candidate)) continue;\n    return true;\n  }\n  return false;\n}\n\nconst OPAQUE_IDENTIFIER_PATTERN =\n  /\\b(?=[A-Za-z0-9_-]{32,}\\b)(?=[A-Za-z0-9_-]*[A-Za-z])(?=[A-Za-z0-9_-]*\\d)[A-Za-z0-9_-]+\\b/u;\n\nconst DEFAULT_IGNORABLE_CODE_POINTS = /\\p{Default_Ignorable_Code_Point}+/gu;\nconst ESCAPED_QUOTE_DELIMITERS = /\\\\+(?=[\"'])/gu;\n\nconst TITLE_LABEL_PATTERN =\n  /^(?:(?:suggested|generated|concise)\\s+)?(?:(?:session|chat|conversation|task)\\s+)?title\\s*[:\\-–—]\\s*/iu;\n\nconst LEADING_BOILERPLATE_PATTERNS = [\n  /^(?:hi|hello|hey)(?:\\s+there)?\\s*[,!:.\\-–—]*\\s*/iu,\n  /^(?:i\\s+(?:would\\s+like|want|need)\\s+you\\s+to|i['’]d\\s+like\\s+you\\s+to)\\s+/iu,\n  /^(?:please\\s+)?(?:can|could|would|will)\\s+you\\s+/iu,\n  /^(?:your|the)\\s+(?:task|job)\\s+is\\s+to\\s+/iu,\n  /^(?:please\\s+)?help\\s+me\\s+(?:to\\s+)?/iu,\n  /^please(?:\\s*[,!:.\\-–—]+\\s*|\\s+|$)/iu,\n] as const;\n\nfunction automaticTitleDetectionValue(value: string): string {\n  // Detection uses a compatibility-normalized shadow value so fullwidth\n  // punctuation/letters, invisible token splits, and serialized quote\n  // delimiters cannot evade the policy.\n  // The accepted title itself stays byte-for-byte in the user's language and\n  // emoji form; this shadow is never returned or persisted.\n  return value\n    .normalize(\"NFKC\")\n    .replace(DEFAULT_IGNORABLE_CODE_POINTS, \"\")\n    .replace(ESCAPED_QUOTE_DELIMITERS, \"\");\n}\n\nfunction hasVisibleAutomaticTitleContent(value: string): boolean {\n  return automaticTitleDetectionValue(value).trim().length > 0;\n}\n\n/**\n * Whether a bounded automatic-title candidate contains a credential, URL, or\n * opaque identifier that must stay out of navigation and other display-title\n * surfaces. Callers handling an unbounded source must bound it before invoking\n * this helper.\n */\nexport function containsSensitiveAutomaticSessionTitleValue(value: string): boolean {\n  const detectionValue = automaticTitleDetectionValue(value);\n\n  if (KNOWN_SENSITIVE_VALUE_PATTERNS.some((pattern) => pattern.test(detectionValue))) return true;\n  if (containsUriScheme(detectionValue)) return true;\n  if (containsSchemelessUrl(detectionValue)) return true;\n  if (SECRET_LABEL_ASSIGNMENT_PATTERN.test(detectionValue)) return true;\n  if (containsSensitiveAssignment(detectionValue)) return true;\n  if (OPAQUE_IDENTIFIER_PATTERN.test(detectionValue)) return true;\n  return false;\n}\n\nfunction stripAutomaticTitleBoilerplate(value: string): string {\n  let title = value;\n  for (let pass = 0; pass < 4; pass += 1) {\n    const before = title;\n    title = title\n      .replace(/^(?:```[^\\n]*|[\\s#>*_`\"'“”‘’\\-–—]+)+/u, \"\")\n      .replace(TITLE_LABEL_PATTERN, \"\");\n    for (const pattern of LEADING_BOILERPLATE_PATTERNS) {\n      title = title.replace(pattern, \"\");\n    }\n    title = title.trim();\n    if (title === before) break;\n  }\n  return title;\n}\n\nfunction automaticTitleGraphemes(value: string): string[] {\n  if (titleSegmenter === undefined) {\n    titleSegmenter =\n      typeof Intl.Segmenter === \"function\"\n        ? new Intl.Segmenter(undefined, { granularity: \"grapheme\" })\n        : null;\n  }\n  if (titleSegmenter) {\n    return Array.from(titleSegmenter.segment(value), (part) => part.segment);\n  }\n\n  // Older embedded runtimes may not ship Intl.Segmenter. Preserve surrogate\n  // pairs plus common combining/emoji sequences instead of failing module load\n  // or slicing UTF-16 code units.\n  const graphemes: string[] = [];\n  for (const point of value) {\n    const prior = graphemes.at(-1);\n    if (\n      prior &&\n      (/^[\\p{Mark}\\u{FE0E}\\u{FE0F}\\p{Emoji_Modifier}]$/u.test(point) ||\n        point === \"\\u200d\" ||\n        prior.endsWith(\"\\u200d\"))\n    ) {\n      graphemes[graphemes.length - 1] = `${prior}${point}`;\n    } else {\n      graphemes.push(point);\n    }\n  }\n  return graphemes;\n}\n\n/** Bound an already-normalized automatic-title candidate without splitting graphemes. */\nexport function boundAutomaticSessionTitle(value: string): string {\n  const words = value.split(/\\s+/u);\n  const wordBounded = words.length > 10 ? words.slice(0, 10).join(\" \") : value;\n  const graphemes = automaticTitleGraphemes(wordBounded);\n  if (graphemes.length <= AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES) return wordBounded;\n\n  const prefix = graphemes.slice(0, AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES).join(\"\");\n  const lastWhitespace = prefix.search(/\\s+\\S*$/u);\n  return (lastWhitespace >= 16 ? prefix.slice(0, lastWhitespace) : prefix).trimEnd();\n}\n\n/**\n * Normalize a model/system-authored title before it reaches durable session\n * metadata. Human renames intentionally do not use this path.\n *\n * Returns null when the candidate is empty, only boilerplate, or appears to\n * contain a credential/opaque prompt value. Callers should retain the current\n * title (normally {@link AUTOMATIC_SESSION_TITLE_FALLBACK}) in that case.\n */\nexport function normalizeAutomaticSessionTitle(value: string): string | null {\n  const firstLine = value\n    .replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/gu, \"\\n\")\n    .split(/\\n+/u)\n    .map((line) => line.trim())\n    .find(Boolean);\n  if (\n    !firstLine ||\n    !hasVisibleAutomaticTitleContent(firstLine) ||\n    containsSensitiveAutomaticSessionTitleValue(firstLine)\n  ) {\n    return null;\n  }\n\n  let title = stripAutomaticTitleBoilerplate(firstLine)\n    .replace(/\\s+/gu, \" \")\n    .replace(/[\\s.!?,;:\\-–—]+$/u, \"\")\n    .trim();\n  if (\n    !title ||\n    !hasVisibleAutomaticTitleContent(title) ||\n    containsSensitiveAutomaticSessionTitleValue(title)\n  ) {\n    return null;\n  }\n\n  title = boundAutomaticSessionTitle(title)\n    .replace(/[\\s.!?,;:\\-–—]+$/u, \"\")\n    .trim();\n  if (!title || !hasVisibleAutomaticTitleContent(title)) return null;\n  return title;\n}\n\nexport type SessionDisplayTitleInput = {\n  id?: string | null | undefined;\n  title?: string | null | undefined;\n  titleSource?: \"user\" | \"agent\" | null | undefined;\n  initialMessage?: string | null | undefined;\n  metadata?: Readonly<Record<string, unknown>> | undefined;\n};\n\nexport type SessionDisplayTitleOptions = {\n  /** Optional metadata fields to try before the opening-prompt preview. */\n  metadataKeys?: readonly string[] | undefined;\n};\n\n/**\n * Derive a bounded, sensitive-safe preview from the opening prompt.\n *\n * Unsafe leading lines are skipped instead of forcing the whole session back\n * to a generic label. This covers prompts that begin with a pasted URL or\n * identifier followed by an ordinary natural-language request on the next\n * line, without putting the rejected value into navigation surfaces.\n */\nexport function deriveAutomaticSessionTitlePreview(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n\n  const lines = value\n    .slice(0, PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS)\n    .replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/gu, \"\\n\")\n    .split(/\\n+/u);\n\n  for (const candidate of lines) {\n    const line = candidate.trim();\n    if (!line || containsSensitiveAutomaticSessionTitleValue(line)) continue;\n\n    const preview = boundAutomaticSessionTitle(line.replace(/\\s+/gu, \" \"))\n      .replace(/[\\s.!?,;:\\-–—]+$/u, \"\")\n      .trim();\n    if (preview) return preview;\n  }\n\n  return null;\n}\n\nfunction automaticSessionReferenceTitle(id: unknown): string {\n  const sessionId = typeof id === \"string\" ? id.trim() : \"\";\n  return SESSION_ID_PATTERN.test(sessionId)\n    ? `Conversation ${sessionId.slice(0, 13)}`\n    : AUTOMATIC_SESSION_TITLE_FALLBACK;\n}\n\n/**\n * Whether the durable title still represents the automatic-title pending state.\n * A user-authored title always wins, even when its literal value is the marker.\n */\nexport function sessionTitleIsPending(input: SessionDisplayTitleInput): boolean {\n  const title = input.title?.trim() ?? \"\";\n  return input.titleSource !== \"user\" && (!title || title === AUTOMATIC_SESSION_TITLE_FALLBACK);\n}\n\n/**\n * Derive the title a human-facing client should display for a session.\n *\n * A semantic agent title or human rename wins. While automatic naming is still\n * pending, clients show a short, sensitive-safe preview of the opening prompt.\n * If no safe prompt text exists, a UUID-derived reference keeps real sessions\n * distinguishable without exposing prompt bytes. The durable pending marker is\n * therefore an internal lifecycle value rather than the ordinary visible name.\n */\nexport function deriveSessionDisplayTitle(\n  input: SessionDisplayTitleInput,\n  options: SessionDisplayTitleOptions = {},\n): string {\n  const title = input.title?.trim() ?? \"\";\n  if (input.titleSource === \"user\") {\n    return title || automaticSessionReferenceTitle(input.id);\n  }\n  if (title && !sessionTitleIsPending(input)) {\n    return title;\n  }\n\n  for (const key of options.metadataKeys ?? []) {\n    const value = input.metadata?.[key];\n    if (typeof value === \"string\" && value.trim().length > 0) {\n      return value.trim();\n    }\n  }\n\n  return (\n    deriveAutomaticSessionTitlePreview(input.initialMessage) ??\n    automaticSessionReferenceTitle(input.id)\n  );\n}\n"],"mappings":";AACO,IAAM,+BAA+B;AAOrC,IAAM,wCAAwC;AAO9C,IAAM,mCAAmC;AAKhD,IAAM,qCAAqC;AAE3C,IAAM,qBACJ;AAEF,IAAI;AAEJ,IAAM,iCAAiC;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,+BAA+B;AACrC,IAAM,6BAA6B;AAEnC,IAAM,oCACJ;AAEF,IAAM,oCAAoC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,0BAA0B,oBAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMD,IAAM,qCAAqC,oBAAI,IAAI;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,sCACJ;AAEF,IAAM,kCACJ;AAEF,IAAM,oCAAoC,oBAAI,IAAI;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,4CAA4C;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,yCAAyC;AAAA,EAC7C,CAAC,OAAO,KAAK;AAAA,EACb,CAAC,UAAU,KAAK;AAAA,EAChB,CAAC,UAAU,OAAO,IAAI;AAAA,EACtB,CAAC,QAAQ,KAAK;AAAA,EACd,CAAC,WAAW,KAAK;AAAA,EACjB,CAAC,UAAU,KAAK;AAClB;AAEA,SAAS,cAAc,OAA0B,QAAoC;AACnF,MAAI,MAAM,SAAS,OAAO,OAAQ,QAAO;AACzC,QAAM,SAAS,MAAM,SAAS,OAAO;AACrC,SAAO,OAAO,MAAM,CAAC,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM,IAAI;AACrE;AAEA,SAAS,4BAA4B,OAAwB;AAC3D,aAAW,SAAS,MAAM,SAAS,mCAAmC,GAAG;AACvE,UAAM,MAAM,MAAM,CAAC,KAAK,MAAM,CAAC;AAC/B,QAAI,CAAC,IAAK;AACV,UAAM,QAAQ,IACX,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,YAAY,EACZ,MAAM,YAAY,EAClB,OAAO,OAAO;AACjB,UAAM,OAAO,MAAM,GAAG,EAAE;AACxB,QAAI,QAAQ,kCAAkC,IAAI,IAAI,EAAG,QAAO;AAChE,QAAI,QAAQ,0CAA0C,KAAK,CAAC,WAAW,KAAK,SAAS,MAAM,CAAC,GAAG;AAC7F,aAAO;AAAA,IACT;AACA,QAAI,uCAAuC,KAAK,CAAC,WAAW,cAAc,OAAO,MAAM,CAAC,GAAG;AACzF,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAwB;AACjD,aAAW,SAAS,MAAM,SAAS,4BAA4B,GAAG;AAIhE,QAAI,CAAC,2BAA2B,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,WAA4B;AAC1D,MAAI,SAAS,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,CAAC,WAAW,GAAG,YAAY,IAAI,UAAU,MAAM,GAAG;AACxD,MAAI,CAAC,aAAa,aAAa,WAAW,KAAK,aAAa,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG;AACvF,WAAO;AAAA,EACT;AACA,MACE,CAAC,mCAAmC,IAAI,SAAS,KACjD,aAAa,KAAK,CAAC,YAAY,CAAC,yBAAyB,KAAK,OAAO,CAAC,GACtE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAwB;AACrD,MAAI,kCAAkC,KAAK,CAAC,YAAY,QAAQ,KAAK,KAAK,CAAC,EAAG,QAAO;AAErF,aAAW,SAAS,MAAM,SAAS,iCAAiC,GAAG;AACrE,UAAM,YAAY,MAAM,CAAC;AACzB,QAAI,UAAU,YAAY,EAAE,WAAW,MAAM,EAAG,QAAO;AACvD,QAAI,CAAC,SAAS,KAAK,SAAS,EAAG;AAE/B,UAAM,YAAY,UAAU,MAAM,UAAU,CAAC,EAAE,CAAC,KAAK;AACrD,UAAM,WAAW,UAAU,QAAQ,cAAc,EAAE;AACnD,UAAM,SAAS,SAAS,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY;AACvD,QAAI,UAAU,wBAAwB,IAAI,MAAM,EAAG;AACnD,QAAI,uBAAuB,SAAS,EAAG;AACvC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,IAAM,4BACJ;AAEF,IAAM,gCAAgC;AACtC,IAAM,2BAA2B;AAEjC,IAAM,sBACJ;AAEF,IAAM,+BAA+B;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,6BAA6B,OAAuB;AAM3D,SAAO,MACJ,UAAU,MAAM,EAChB,QAAQ,+BAA+B,EAAE,EACzC,QAAQ,0BAA0B,EAAE;AACzC;AAEA,SAAS,gCAAgC,OAAwB;AAC/D,SAAO,6BAA6B,KAAK,EAAE,KAAK,EAAE,SAAS;AAC7D;AAQO,SAAS,4CAA4C,OAAwB;AAClF,QAAM,iBAAiB,6BAA6B,KAAK;AAEzD,MAAI,+BAA+B,KAAK,CAAC,YAAY,QAAQ,KAAK,cAAc,CAAC,EAAG,QAAO;AAC3F,MAAI,kBAAkB,cAAc,EAAG,QAAO;AAC9C,MAAI,sBAAsB,cAAc,EAAG,QAAO;AAClD,MAAI,gCAAgC,KAAK,cAAc,EAAG,QAAO;AACjE,MAAI,4BAA4B,cAAc,EAAG,QAAO;AACxD,MAAI,0BAA0B,KAAK,cAAc,EAAG,QAAO;AAC3D,SAAO;AACT;AAEA,SAAS,+BAA+B,OAAuB;AAC7D,MAAI,QAAQ;AACZ,WAAS,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG;AACtC,UAAM,SAAS;AACf,YAAQ,MACL,QAAQ,yCAAyC,EAAE,EACnD,QAAQ,qBAAqB,EAAE;AAClC,eAAW,WAAW,8BAA8B;AAClD,cAAQ,MAAM,QAAQ,SAAS,EAAE;AAAA,IACnC;AACA,YAAQ,MAAM,KAAK;AACnB,QAAI,UAAU,OAAQ;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,OAAyB;AACxD,MAAI,mBAAmB,QAAW;AAChC,qBACE,OAAO,KAAK,cAAc,aACtB,IAAI,KAAK,UAAU,QAAW,EAAE,aAAa,WAAW,CAAC,IACzD;AAAA,EACR;AACA,MAAI,gBAAgB;AAClB,WAAO,MAAM,KAAK,eAAe,QAAQ,KAAK,GAAG,CAAC,SAAS,KAAK,OAAO;AAAA,EACzE;AAKA,QAAM,YAAsB,CAAC;AAC7B,aAAW,SAAS,OAAO;AACzB,UAAM,QAAQ,UAAU,GAAG,EAAE;AAC7B,QACE,UACC,kDAAkD,KAAK,KAAK,KAC3D,UAAU,YACV,MAAM,SAAS,QAAQ,IACzB;AACA,gBAAU,UAAU,SAAS,CAAC,IAAI,GAAG,KAAK,GAAG,KAAK;AAAA,IACpD,OAAO;AACL,gBAAU,KAAK,KAAK;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,2BAA2B,OAAuB;AAChE,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,cAAc,MAAM,SAAS,KAAK,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,IAAI;AACvE,QAAM,YAAY,wBAAwB,WAAW;AACrD,MAAI,UAAU,UAAU,sCAAuC,QAAO;AAEtE,QAAM,SAAS,UAAU,MAAM,GAAG,qCAAqC,EAAE,KAAK,EAAE;AAChF,QAAM,iBAAiB,OAAO,OAAO,UAAU;AAC/C,UAAQ,kBAAkB,KAAK,OAAO,MAAM,GAAG,cAAc,IAAI,QAAQ,QAAQ;AACnF;AAUO,SAAS,+BAA+B,OAA8B;AAC3E,QAAM,YAAY,MACf,QAAQ,mCAAmC,IAAI,EAC/C,MAAM,MAAM,EACZ,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,OAAO;AACf,MACE,CAAC,aACD,CAAC,gCAAgC,SAAS,KAC1C,4CAA4C,SAAS,GACrD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,+BAA+B,SAAS,EACjD,QAAQ,SAAS,GAAG,EACpB,QAAQ,qBAAqB,EAAE,EAC/B,KAAK;AACR,MACE,CAAC,SACD,CAAC,gCAAgC,KAAK,KACtC,4CAA4C,KAAK,GACjD;AACA,WAAO;AAAA,EACT;AAEA,UAAQ,2BAA2B,KAAK,EACrC,QAAQ,qBAAqB,EAAE,EAC/B,KAAK;AACR,MAAI,CAAC,SAAS,CAAC,gCAAgC,KAAK,EAAG,QAAO;AAC9D,SAAO;AACT;AAuBO,SAAS,mCAAmC,OAA+B;AAChF,MAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,QAAM,QAAQ,MACX,MAAM,GAAG,kCAAkC,EAC3C,QAAQ,mCAAmC,IAAI,EAC/C,MAAM,MAAM;AAEf,aAAW,aAAa,OAAO;AAC7B,UAAM,OAAO,UAAU,KAAK;AAC5B,QAAI,CAAC,QAAQ,4CAA4C,IAAI,EAAG;AAEhE,UAAM,UAAU,2BAA2B,KAAK,QAAQ,SAAS,GAAG,CAAC,EAClE,QAAQ,qBAAqB,EAAE,EAC/B,KAAK;AACR,QAAI,QAAS,QAAO;AAAA,EACtB;AAEA,SAAO;AACT;AAEA,SAAS,+BAA+B,IAAqB;AAC3D,QAAM,YAAY,OAAO,OAAO,WAAW,GAAG,KAAK,IAAI;AACvD,SAAO,mBAAmB,KAAK,SAAS,IACpC,gBAAgB,UAAU,MAAM,GAAG,EAAE,CAAC,KACtC;AACN;AAMO,SAAS,sBAAsB,OAA0C;AAC9E,QAAM,QAAQ,MAAM,OAAO,KAAK,KAAK;AACrC,SAAO,MAAM,gBAAgB,WAAW,CAAC,SAAS,UAAU;AAC9D;AAWO,SAAS,0BACd,OACA,UAAsC,CAAC,GAC/B;AACR,QAAM,QAAQ,MAAM,OAAO,KAAK,KAAK;AACrC,MAAI,MAAM,gBAAgB,QAAQ;AAChC,WAAO,SAAS,+BAA+B,MAAM,EAAE;AAAA,EACzD;AACA,MAAI,SAAS,CAAC,sBAAsB,KAAK,GAAG;AAC1C,WAAO;AAAA,EACT;AAEA,aAAW,OAAO,QAAQ,gBAAgB,CAAC,GAAG;AAC5C,UAAM,QAAQ,MAAM,WAAW,GAAG;AAClC,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SACE,mCAAmC,MAAM,cAAc,KACvD,+BAA+B,MAAM,EAAE;AAE3C;","names":[]}

package/dist/{chunk-7RMTKFJW.js → chunk-7Q6HPDY2.js}

@@ -9,6 +9,13 @@ import {
   encodeSpreadsheetArtifactKernelProjection,
   encodeSpreadsheetArtifactKernelQuery
 } from "./chunk-Y3KNXVTD.js";
+import {
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_BYTES,
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_COMMANDS,
+  assertCanonicalSpreadsheetArtifactCommandBytes,
+  decodeSpreadsheetArtifactCommandBatch,
+  encodeSpreadsheetArtifactCommandBatch
+} from "./chunk-TXTQIYCV.js";
 import {
   DOCUMENT_ARTIFACT_COMMAND_MAX_BYTES,
   DOCUMENT_ARTIFACT_COMMAND_MAX_COMMANDS,
@@ -45,13 +52,6 @@ import {
   encodePresentationArtifactQuery,
   encodePresentationArtifactQueryResponse
 } from "./chunk-D2HKF2EF.js";
-import {
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_BYTES,
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_COMMANDS,
-  assertCanonicalSpreadsheetArtifactCommandBytes,
-  decodeSpreadsheetArtifactCommandBatch,
-  encodeSpreadsheetArtifactCommandBatch
-} from "./chunk-TXTQIYCV.js";
 import {
   COMMITTED_TRANSACTION_PROTOCOL_VERSION,
   DOCUMENT_ARTIFACT_MODEL_SCHEMA_VERSION,
@@ -214,4 +214,4 @@ export {
   currentEditableArtifactCompatibility,
   editableArtifactCodecFor
 };
-//# sourceMappingURL=chunk-7RMTKFJW.js.map
+//# sourceMappingURL=chunk-7Q6HPDY2.js.map

package/dist/{chunk-N6GRVXAJ.js → chunk-NPBM4QSK.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-NVJMJWLL.js";
 import {
   editableArtifactCodecFor
-} from "./chunk-7RMTKFJW.js";
+} from "./chunk-7Q6HPDY2.js";
 import {
   DOCUMENT_ARTIFACT_COMMAND_MAX_COMMANDS,
   DOCUMENT_ARTIFACT_MAX_STRUCTURAL_COUNTER
@@ -380,4 +380,4 @@ export {
   decodeEditableArtifactSerializedCommit,
   assertCanonicalEditableArtifactSerializedCommit
 };
-//# sourceMappingURL=chunk-N6GRVXAJ.js.map
+//# sourceMappingURL=chunk-NPBM4QSK.js.map

package/dist/connection-authority.js

@@ -4,26 +4,26 @@ import {
   SessionTenancyVisibility,
   UserResourceAuthorityGrant,
   UserResourceDelegation
-} from "./chunk-AWNGBY5I.js";
-import "./chunk-WYBDERIY.js";
-import "./chunk-MRWYRAS5.js";
-import "./chunk-4IVHBXRI.js";
-import "./chunk-CM6BMECR.js";
-import "./chunk-JUFK3T4Q.js";
+} from "./chunk-6HOHS44G.js";
 import "./chunk-YBW5JSA3.js";
-import "./chunk-N6GRVXAJ.js";
+import "./chunk-NPBM4QSK.js";
+import "./chunk-CM6BMECR.js";
+import "./chunk-MRWYRAS5.js";
 import "./chunk-3SIZGL3O.js";
+import "./chunk-M5ZGRVIQ.js";
+import "./chunk-BCS7WHCK.js";
+import "./chunk-WYBDERIY.js";
+import "./chunk-7ABONTXE.js";
 import "./chunk-NVJMJWLL.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-7RMTKFJW.js";
+import "./chunk-7Q6HPDY2.js";
 import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-TXTQIYCV.js";
 import "./chunk-PX3VCKAU.js";
-import "./chunk-BCS7WHCK.js";
-import "./chunk-M5ZGRVIQ.js";
+import "./chunk-JUFK3T4Q.js";
 
 // src/connection-authority.ts
 import { z } from "zod";

package/dist/editable-artifact-codec-registry.js

@@ -2,12 +2,12 @@ import {
   EDITABLE_ARTIFACT_CODEC_REGISTRY,
   currentEditableArtifactCompatibility,
   editableArtifactCodecFor
-} from "./chunk-7RMTKFJW.js";
+} from "./chunk-7Q6HPDY2.js";
 import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-TXTQIYCV.js";
 import {
   DOCUMENT_ARTIFACT_MODEL_SCHEMA_VERSION,
   DOCUMENT_ARTIFACT_SNAPSHOT_VERSION,

package/dist/editable-artifact-live.js

@@ -3,12 +3,12 @@ import {
   hashEditableArtifactMutationIntentBytes
 } from "./chunk-NVJMJWLL.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-7RMTKFJW.js";
+import "./chunk-7Q6HPDY2.js";
 import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-TXTQIYCV.js";
 import {
   EDITABLE_ARTIFACT_LIVE_WIRE_VERSION
 } from "./chunk-PX3VCKAU.js";

package/dist/editable-artifact-serialized-commit.js

@@ -4,15 +4,15 @@ import {
   assertCanonicalEditableArtifactSerializedCommit,
   decodeEditableArtifactSerializedCommit,
   encodeEditableArtifactSerializedCommit
-} from "./chunk-N6GRVXAJ.js";
+} from "./chunk-NPBM4QSK.js";
 import "./chunk-NVJMJWLL.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-7RMTKFJW.js";
+import "./chunk-7Q6HPDY2.js";
 import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-TXTQIYCV.js";
 import {
   EDITABLE_ARTIFACT_SERIALIZED_COMMIT_VERSION
 } from "./chunk-PX3VCKAU.js";

package/dist/editable-artifacts.js

@@ -25,7 +25,7 @@ import {
   EDITABLE_ARTIFACT_CODEC_REGISTRY,
   currentEditableArtifactCompatibility,
   editableArtifactCodecFor
-} from "./chunk-7RMTKFJW.js";
+} from "./chunk-7Q6HPDY2.js";
 import {
   SPREADSHEET_ARTIFACT_METADATA_MAX_SHEETS,
   SPREADSHEET_ARTIFACT_METADATA_MIN_RESPONSE_BYTES,
@@ -49,6 +49,18 @@ import {
   encodeSpreadsheetViewportKernelProjection,
   encodeSpreadsheetViewportKernelQuery
 } from "./chunk-Y3KNXVTD.js";
+import {
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_BYTES,
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_CELLS,
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_COMMANDS,
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_STRING_BYTES,
+  SPREADSHEET_ARTIFACT_SHEET_NAME_MAX_UTF16_UNITS,
+  assertCanonicalSpreadsheetArtifactCommandBytes,
+  decodeSpreadsheetArtifactCommandBatch,
+  editableArtifactStableId,
+  encodeSpreadsheetArtifactCommandBatch,
+  spreadsheetSheetId
+} from "./chunk-TXTQIYCV.js";
 import {
   DOCUMENT_ARTIFACT_COMMAND_MAX_BYTES,
   DOCUMENT_ARTIFACT_COMMAND_MAX_COMMANDS,
@@ -108,18 +120,6 @@ import {
   encodePresentationArtifactQueryResponse
 } from "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import {
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_BYTES,
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_CELLS,
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_COMMANDS,
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_STRING_BYTES,
-  SPREADSHEET_ARTIFACT_SHEET_NAME_MAX_UTF16_UNITS,
-  assertCanonicalSpreadsheetArtifactCommandBytes,
-  decodeSpreadsheetArtifactCommandBatch,
-  editableArtifactStableId,
-  encodeSpreadsheetArtifactCommandBatch,
-  spreadsheetSheetId
-} from "./chunk-TXTQIYCV.js";
 import {
   DOCUMENT_ARTIFACT_MODEL_SCHEMA_VERSION,
   DOCUMENT_ARTIFACT_SNAPSHOT_VERSION,

package/dist/github-repository-contracts.d.ts

@@ -0,0 +1,36 @@
+import { z } from "zod";
+export declare const VerifyPublicGitHubRepositoryRefRequest: z.ZodObject<{
+    url: z.ZodString;
+    ref: z.ZodString;
+}, z.core.$strict>;
+export type VerifyPublicGitHubRepositoryRefRequest = z.infer<typeof VerifyPublicGitHubRepositoryRefRequest>;
+export declare const VerifyPublicGitHubRepositoryRefResponse: z.ZodObject<{
+    owner: z.ZodString;
+    name: z.ZodString;
+    fullName: z.ZodString;
+    canonicalUrl: z.ZodString;
+    cloneUrl: z.ZodString;
+    defaultBranch: z.ZodString;
+    ref: z.ZodString;
+    commitSha: z.ZodString;
+}, z.core.$strict>;
+export type VerifyPublicGitHubRepositoryRefResponse = z.infer<typeof VerifyPublicGitHubRepositoryRefResponse>;
+export declare const GITHUB_REPOSITORY_BRANCH_PAGE_MAX: 100;
+export declare const ListGitHubRepositoryBranchesQuery: z.ZodObject<{
+    cursor: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export type ListGitHubRepositoryBranchesQuery = z.infer<typeof ListGitHubRepositoryBranchesQuery>;
+export declare const GitHubRepositoryBranch: z.ZodObject<{
+    name: z.ZodString;
+    isDefault: z.ZodBoolean;
+}, z.core.$strict>;
+export type GitHubRepositoryBranch = z.infer<typeof GitHubRepositoryBranch>;
+export declare const GitHubRepositoryBranchesResponse: z.ZodObject<{
+    branches: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        isDefault: z.ZodBoolean;
+    }, z.core.$strict>>;
+    nextCursor: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+export type GitHubRepositoryBranchesResponse = z.infer<typeof GitHubRepositoryBranchesResponse>;

package/dist/github-repository-contracts.js

@@ -0,0 +1,59 @@
+// src/github-repository-contracts.ts
+import { z } from "zod";
+var VerifyPublicGitHubRepositoryRefRequest = z.object({
+  url: z.string().min(1).max(2048),
+  ref: z.string().trim().min(1).max(1024).refine((value) => !/[\u0000-\u001f\u007f]/u.test(value), "ref contains control characters")
+}).strict();
+var VerifyPublicGitHubRepositoryRefResponse = z.object({
+  owner: z.string().min(1).max(39),
+  name: z.string().min(1).max(100),
+  fullName: z.string().min(3).max(140),
+  canonicalUrl: z.string().url(),
+  cloneUrl: z.string().url(),
+  defaultBranch: z.string().min(1).max(1024),
+  ref: z.string().min(1).max(1024),
+  commitSha: z.string().regex(/^[0-9a-f]{40}$/u)
+}).strict();
+var GITHUB_REPOSITORY_BRANCH_PAGE_MAX = 100;
+var ListGitHubRepositoryBranchesQuery = z.object({
+  cursor: z.coerce.number().int().positive().max(1e4).default(1),
+  limit: z.coerce.number().int().min(1).max(GITHUB_REPOSITORY_BRANCH_PAGE_MAX).default(GITHUB_REPOSITORY_BRANCH_PAGE_MAX)
+}).strict();
+var GitHubRepositoryBranch = z.object({
+  name: z.string().min(1).max(1024),
+  isDefault: z.boolean()
+}).strict();
+var GitHubRepositoryBranchesResponse = z.object({
+  branches: z.array(GitHubRepositoryBranch).max(GITHUB_REPOSITORY_BRANCH_PAGE_MAX),
+  nextCursor: z.number().int().positive().max(1e4).nullable()
+}).strict().superRefine((response, context) => {
+  const names = /* @__PURE__ */ new Set();
+  let defaultCount = 0;
+  response.branches.forEach((branch, index) => {
+    if (names.has(branch.name)) {
+      context.addIssue({
+        code: "custom",
+        path: ["branches", index, "name"],
+        message: "branch names must be unique"
+      });
+    }
+    names.add(branch.name);
+    if (branch.isDefault) defaultCount += 1;
+  });
+  if (defaultCount > 1) {
+    context.addIssue({
+      code: "custom",
+      path: ["branches"],
+      message: "at most one branch may be marked as default"
+    });
+  }
+});
+export {
+  GITHUB_REPOSITORY_BRANCH_PAGE_MAX,
+  GitHubRepositoryBranch,
+  GitHubRepositoryBranchesResponse,
+  ListGitHubRepositoryBranchesQuery,
+  VerifyPublicGitHubRepositoryRefRequest,
+  VerifyPublicGitHubRepositoryRefResponse
+};
+//# sourceMappingURL=github-repository-contracts.js.map

package/dist/github-repository-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/github-repository-contracts.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const VerifyPublicGitHubRepositoryRefRequest = z\n  .object({\n    url: z.string().min(1).max(2048),\n    ref: z\n      .string()\n      .trim()\n      .min(1)\n      .max(1024)\n      .refine((value) => !/[\\u0000-\\u001f\\u007f]/u.test(value), \"ref contains control characters\"),\n  })\n  .strict();\nexport type VerifyPublicGitHubRepositoryRefRequest = z.infer<\n  typeof VerifyPublicGitHubRepositoryRefRequest\n>;\n\nexport const VerifyPublicGitHubRepositoryRefResponse = z\n  .object({\n    owner: z.string().min(1).max(39),\n    name: z.string().min(1).max(100),\n    fullName: z.string().min(3).max(140),\n    canonicalUrl: z.string().url(),\n    cloneUrl: z.string().url(),\n    defaultBranch: z.string().min(1).max(1024),\n    ref: z.string().min(1).max(1024),\n    commitSha: z.string().regex(/^[0-9a-f]{40}$/u),\n  })\n  .strict();\nexport type VerifyPublicGitHubRepositoryRefResponse = z.infer<\n  typeof VerifyPublicGitHubRepositoryRefResponse\n>;\n\nexport const GITHUB_REPOSITORY_BRANCH_PAGE_MAX = 100 as const;\n\nexport const ListGitHubRepositoryBranchesQuery = z\n  .object({\n    cursor: z.coerce.number().int().positive().max(10_000).default(1),\n    limit: z.coerce\n      .number()\n      .int()\n      .min(1)\n      .max(GITHUB_REPOSITORY_BRANCH_PAGE_MAX)\n      .default(GITHUB_REPOSITORY_BRANCH_PAGE_MAX),\n  })\n  .strict();\nexport type ListGitHubRepositoryBranchesQuery = z.infer<typeof ListGitHubRepositoryBranchesQuery>;\n\nexport const GitHubRepositoryBranch = z\n  .object({\n    name: z.string().min(1).max(1024),\n    isDefault: z.boolean(),\n  })\n  .strict();\nexport type GitHubRepositoryBranch = z.infer<typeof GitHubRepositoryBranch>;\n\nexport const GitHubRepositoryBranchesResponse = z\n  .object({\n    branches: z.array(GitHubRepositoryBranch).max(GITHUB_REPOSITORY_BRANCH_PAGE_MAX),\n    nextCursor: z.number().int().positive().max(10_000).nullable(),\n  })\n  .strict()\n  .superRefine((response, context) => {\n    const names = new Set<string>();\n    let defaultCount = 0;\n    response.branches.forEach((branch, index) => {\n      if (names.has(branch.name)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"branches\", index, \"name\"],\n          message: \"branch names must be unique\",\n        });\n      }\n      names.add(branch.name);\n      if (branch.isDefault) defaultCount += 1;\n    });\n    if (defaultCount > 1) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"branches\"],\n        message: \"at most one branch may be marked as default\",\n      });\n    }\n  });\nexport type GitHubRepositoryBranchesResponse = z.infer<typeof GitHubRepositoryBranchesResponse>;\n"],"mappings":";AAAA,SAAS,SAAS;AAEX,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAC/B,KAAK,EACF,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,IAAI,EACR,OAAO,CAAC,UAAU,CAAC,yBAAyB,KAAK,KAAK,GAAG,iCAAiC;AAC/F,CAAC,EACA,OAAO;AAKH,IAAM,0CAA0C,EACpD,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,cAAc,EAAE,OAAO,EAAE,IAAI;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EACzC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAC/C,CAAC,EACA,OAAO;AAKH,IAAM,oCAAoC;AAE1C,IAAM,oCAAoC,EAC9C,OAAO;AAAA,EACN,QAAQ,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAM,EAAE,QAAQ,CAAC;AAAA,EAChE,OAAO,EAAE,OACN,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,iCAAiC,EACrC,QAAQ,iCAAiC;AAC9C,CAAC,EACA,OAAO;AAGH,IAAM,yBAAyB,EACnC,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,WAAW,EAAE,QAAQ;AACvB,CAAC,EACA,OAAO;AAGH,IAAM,mCAAmC,EAC7C,OAAO;AAAA,EACN,UAAU,EAAE,MAAM,sBAAsB,EAAE,IAAI,iCAAiC;AAAA,EAC/E,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAM,EAAE,SAAS;AAC/D,CAAC,EACA,OAAO,EACP,YAAY,CAAC,UAAU,YAAY;AAClC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,MAAI,eAAe;AACnB,WAAS,SAAS,QAAQ,CAAC,QAAQ,UAAU;AAC3C,QAAI,MAAM,IAAI,OAAO,IAAI,GAAG;AAC1B,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,YAAY,OAAO,MAAM;AAAA,QAChC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,UAAM,IAAI,OAAO,IAAI;AACrB,QAAI,OAAO,UAAW,iBAAgB;AAAA,EACxC,CAAC;AACD,MAAI,eAAe,GAAG;AACpB,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,UAAU;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;","names":[]}

package/dist/github-repository.d.ts

@@ -0,0 +1,14 @@
+export type CanonicalGitHubRepository = {
+    owner: string;
+    name: string;
+    fullName: string;
+    canonicalUrl: string;
+    cloneUrl: string;
+};
+/**
+ * Parse only a canonical public github.com repository URL. This deliberately
+ * rejects aliases, credentials, ports, query/fragment state, encoded paths,
+ * and repository subpaths so callers cannot accidentally verify one target
+ * and attach another.
+ */
+export declare function parseCanonicalGitHubRepositoryUrl(value: string): CanonicalGitHubRepository;

package/dist/github-repository.js

@@ -0,0 +1,36 @@
+// src/github-repository.ts
+function parseCanonicalGitHubRepositoryUrl(value) {
+  if (!value.startsWith("https://github.com/")) {
+    throw new Error("GitHub repository URL must use the exact https://github.com host.");
+  }
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new TypeError("GitHub repository URL is invalid.");
+  }
+  if (url.protocol !== "https:" || url.hostname !== "github.com" || url.host !== "github.com" || url.username || url.password || url.search || url.hash || url.pathname.includes("%")) {
+    throw new TypeError("Use a canonical https://github.com/owner/repository URL.");
+  }
+  const match = /^\/([^/]+)\/([^/]+?)\/?$/u.exec(url.pathname);
+  if (!match) {
+    throw new TypeError("GitHub repository URL must contain exactly owner/repository.");
+  }
+  const owner = match[1];
+  const name = match[2].replace(/\.git$/iu, "");
+  if (!/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/u.test(owner) || !/^[A-Za-z0-9_.-]{1,100}$/u.test(name) || name === "." || name === "..") {
+    throw new TypeError("GitHub repository owner or name is invalid.");
+  }
+  const fullName = `${owner}/${name}`;
+  return {
+    owner,
+    name,
+    fullName,
+    canonicalUrl: `https://github.com/${fullName}`,
+    cloneUrl: `https://github.com/${fullName}.git`
+  };
+}
+export {
+  parseCanonicalGitHubRepositoryUrl
+};
+//# sourceMappingURL=github-repository.js.map

package/dist/github-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/github-repository.ts"],"sourcesContent":["export type CanonicalGitHubRepository = {\n  owner: string;\n  name: string;\n  fullName: string;\n  canonicalUrl: string;\n  cloneUrl: string;\n};\n\n/**\n * Parse only a canonical public github.com repository URL. This deliberately\n * rejects aliases, credentials, ports, query/fragment state, encoded paths,\n * and repository subpaths so callers cannot accidentally verify one target\n * and attach another.\n */\nexport function parseCanonicalGitHubRepositoryUrl(value: string): CanonicalGitHubRepository {\n  if (!value.startsWith(\"https://github.com/\")) {\n    throw new Error(\"GitHub repository URL must use the exact https://github.com host.\");\n  }\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    throw new TypeError(\"GitHub repository URL is invalid.\");\n  }\n  if (\n    url.protocol !== \"https:\" ||\n    url.hostname !== \"github.com\" ||\n    url.host !== \"github.com\" ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash ||\n    url.pathname.includes(\"%\")\n  ) {\n    throw new TypeError(\"Use a canonical https://github.com/owner/repository URL.\");\n  }\n  const match = /^\\/([^/]+)\\/([^/]+?)\\/?$/u.exec(url.pathname);\n  if (!match) {\n    throw new TypeError(\"GitHub repository URL must contain exactly owner/repository.\");\n  }\n  const owner = match[1]!;\n  const name = match[2]!.replace(/\\.git$/iu, \"\");\n  if (\n    !/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/u.test(owner) ||\n    !/^[A-Za-z0-9_.-]{1,100}$/u.test(name) ||\n    name === \".\" ||\n    name === \"..\"\n  ) {\n    throw new TypeError(\"GitHub repository owner or name is invalid.\");\n  }\n  const fullName = `${owner}/${name}`;\n  return {\n    owner,\n    name,\n    fullName,\n    canonicalUrl: `https://github.com/${fullName}`,\n    cloneUrl: `https://github.com/${fullName}.git`,\n  };\n}\n"],"mappings":";AAcO,SAAS,kCAAkC,OAA0C;AAC1F,MAAI,CAAC,MAAM,WAAW,qBAAqB,GAAG;AAC5C,UAAM,IAAI,MAAM,mEAAmE;AAAA,EACrF;AACA,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,KAAK;AAAA,EACrB,QAAQ;AACN,UAAM,IAAI,UAAU,mCAAmC;AAAA,EACzD;AACA,MACE,IAAI,aAAa,YACjB,IAAI,aAAa,gBACjB,IAAI,SAAS,gBACb,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,QACJ,IAAI,SAAS,SAAS,GAAG,GACzB;AACA,UAAM,IAAI,UAAU,0DAA0D;AAAA,EAChF;AACA,QAAM,QAAQ,4BAA4B,KAAK,IAAI,QAAQ;AAC3D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,UAAU,8DAA8D;AAAA,EACpF;AACA,QAAM,QAAQ,MAAM,CAAC;AACrB,QAAM,OAAO,MAAM,CAAC,EAAG,QAAQ,YAAY,EAAE;AAC7C,MACE,CAAC,mDAAmD,KAAK,KAAK,KAC9D,CAAC,2BAA2B,KAAK,IAAI,KACrC,SAAS,OACT,SAAS,MACT;AACA,UAAM,IAAI,UAAU,6CAA6C;AAAA,EACnE;AACA,QAAM,WAAW,GAAG,KAAK,IAAI,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,sBAAsB,QAAQ;AAAA,IAC5C,UAAU,sBAAsB,QAAQ;AAAA,EAC1C;AACF;","names":[]}

package/dist/google-drive.js

@@ -1,28 +1,28 @@
 import {
   ConnectionMetadata
-} from "./chunk-AWNGBY5I.js";
+} from "./chunk-6HOHS44G.js";
+import "./chunk-YBW5JSA3.js";
+import "./chunk-NPBM4QSK.js";
+import "./chunk-CM6BMECR.js";
+import "./chunk-MRWYRAS5.js";
+import "./chunk-3SIZGL3O.js";
+import "./chunk-M5ZGRVIQ.js";
+import "./chunk-BCS7WHCK.js";
 import {
   ConnectorDocumentDestination,
   ConnectorDocumentDestinationSelection
 } from "./chunk-WYBDERIY.js";
-import "./chunk-MRWYRAS5.js";
-import "./chunk-4IVHBXRI.js";
-import "./chunk-CM6BMECR.js";
-import "./chunk-JUFK3T4Q.js";
-import "./chunk-YBW5JSA3.js";
-import "./chunk-N6GRVXAJ.js";
-import "./chunk-3SIZGL3O.js";
+import "./chunk-7ABONTXE.js";
 import "./chunk-NVJMJWLL.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-7RMTKFJW.js";
+import "./chunk-7Q6HPDY2.js";
 import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-TXTQIYCV.js";
 import "./chunk-PX3VCKAU.js";
-import "./chunk-BCS7WHCK.js";
-import "./chunk-M5ZGRVIQ.js";
+import "./chunk-JUFK3T4Q.js";
 
 // src/google-drive.ts
 import { z } from "zod";