@opengeni/contracts 3.1.0-canary.2 → 3.1.2

package/dist/google-drive.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/google-drive.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\nimport {\n  ConnectorDocumentDestination,\n  ConnectorDocumentDestinationSelection,\n} from \"./connector-destinations\";\n\nexport const GOOGLE_DRIVE_PROVIDER_DOMAIN = \"googleapis.com\" as const;\nexport const GOOGLE_DRIVE_FULL_SCOPE = \"https://www.googleapis.com/auth/drive\" as const;\nexport const GOOGLE_DRIVE_FILE_SCOPE = \"https://www.googleapis.com/auth/drive.file\" as const;\nexport const GOOGLE_DRIVE_METADATA_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.metadata.readonly\" as const;\nexport const GOOGLE_DRIVE_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.readonly\" as const;\n/** Stable serialized role retained for existing connection rows; not product-facing copy. */\nexport const GOOGLE_DRIVE_CREDENTIAL_ROLE = \"google_drive_metadata\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_LABEL = \"Google Drive read-only source sync\" as const;\nexport const GOOGLE_DRIVE_LEGACY_CREDENTIAL_LABEL = \"Google Drive metadata browser\" as const;\nexport const GOOGLE_DRIVE_PUBLICATION_SERVER_ID = \"google-drive-publishing\" as const;\nexport const GOOGLE_DRIVE_PUBLICATION_TOOL_NAME = \"google_drive_publish_file\" as const;\nexport const GOOGLE_DRIVE_PUBLICATION_CREATE_ACTION = \"create\" as const;\n\nexport const GoogleDriveOAuthCapability = z.enum([\n  \"picker_file_read\",\n  \"publish_file\",\n  \"source_metadata_discovery\",\n  \"source_content_read\",\n  \"recursive_source_sync\",\n]);\nexport type GoogleDriveOAuthCapability = z.infer<typeof GoogleDriveOAuthCapability>;\n\nexport type GoogleDriveOAuthScopeDecision = {\n  accessMode: \"file_only\" | \"metadata_readonly\" | \"readonly\" | null;\n  capabilities: GoogleDriveOAuthCapability[];\n};\n\n/**\n * Converts exact Google OAuth grants into the Drive capabilities OpenGeni may\n * rely on. Unknown or malformed grants add no authority. In particular,\n * drive.file covers only files explicitly opened or shared with the app and\n * never authorizes arbitrary recursive descendant discovery.\n */\nexport function googleDriveOAuthScopeDecision(\n  grantedScopes: readonly string[],\n): GoogleDriveOAuthScopeDecision {\n  const granted = new Set(grantedScopes);\n  const hasFullDrive = granted.has(GOOGLE_DRIVE_FULL_SCOPE);\n  const hasSourceContentRead = hasFullDrive || granted.has(GOOGLE_DRIVE_READONLY_SCOPE);\n  const hasFileWrite = hasFullDrive || granted.has(GOOGLE_DRIVE_FILE_SCOPE);\n  const hasSourceMetadataDiscovery =\n    hasSourceContentRead || granted.has(GOOGLE_DRIVE_METADATA_READONLY_SCOPE);\n  const hasPickerFileRead = hasSourceContentRead || hasFileWrite;\n  const capabilities: GoogleDriveOAuthCapability[] = [];\n  if (hasPickerFileRead) capabilities.push(\"picker_file_read\");\n  if (hasFileWrite) capabilities.push(\"publish_file\");\n  if (hasSourceMetadataDiscovery) capabilities.push(\"source_metadata_discovery\");\n  if (hasSourceContentRead) {\n    capabilities.push(\"source_content_read\", \"recursive_source_sync\");\n  }\n  return {\n    accessMode: hasSourceContentRead\n      ? \"readonly\"\n      : hasSourceMetadataDiscovery\n        ? \"metadata_readonly\"\n        : hasFileWrite\n          ? \"file_only\"\n          : null,\n    capabilities,\n  };\n}\n\nexport function googleDriveScopesAllowCapability(\n  grantedScopes: readonly string[],\n  capability: GoogleDriveOAuthCapability,\n): boolean {\n  return googleDriveOAuthScopeDecision(grantedScopes).capabilities.includes(capability);\n}\n\n/** @deprecated Connector document destinations use organization/workspace/personal authority. */\nexport const GoogleDriveTargetScope = z.enum([\"user\", \"workspace\", \"organization\"]);\nexport type GoogleDriveTargetScope = z.infer<typeof GoogleDriveTargetScope>;\n\nexport const GoogleDriveSyncCadence = z.enum([\"manual\", \"hourly\", \"daily\"]);\nexport type GoogleDriveSyncCadence = z.infer<typeof GoogleDriveSyncCadence>;\n\nexport const GoogleDriveReadPolicy = z.enum([\"allow\", \"ask\", \"block\"]);\nexport type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;\n\nexport const GoogleDriveConnectionLifecycleState = z.enum([\n  \"active\",\n  \"paused\",\n  \"token_revoked\",\n  \"app_removed\",\n  \"disconnected\",\n  \"reconnect_required\",\n  \"reconsent_required\",\n]);\nexport type GoogleDriveConnectionLifecycleState = z.infer<\n  typeof GoogleDriveConnectionLifecycleState\n>;\n\nconst GoogleDriveLifecycleObservedAt = z.string().datetime({ offset: true });\nexport const GoogleDriveConnectionLifecycle = z.discriminatedUnion(\"state\", [\n  z.object({\n    state: z.literal(\"active\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"paused\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"token_revoked\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"app_removed\"),\n    recoverable: z.literal(false),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"disconnected\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconnect_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconsent_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n]);\nexport type GoogleDriveConnectionLifecycle = z.infer<typeof GoogleDriveConnectionLifecycle>;\n\nexport const GoogleDriveSelectedSource = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  driveId: z.string().min(1).max(256).nullable().default(null),\n  destination: ConnectorDocumentDestination.optional(),\n  /** @deprecated Missing destinations resolve to the current workspace boundary. */\n  targetScope: GoogleDriveTargetScope.optional(),\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  syncEnabled: z.boolean().default(false),\n  configGeneration: z.number().int().positive().default(1),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  selectedAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveSelectedSource = z.infer<typeof GoogleDriveSelectedSource>;\n\nexport const GoogleDriveOutputDestination = z\n  .object({\n    folderId: z.string().min(1).max(256),\n    folderName: z.string().min(1).max(1024),\n    driveId: z.string().min(1).max(256).nullable(),\n    location: z.enum([\"my_drive\", \"shared_drive\"]),\n    selectedAt: z.string().datetime({ offset: true }),\n  })\n  .strict()\n  .superRefine((value, context) => {\n    if ((value.location === \"my_drive\") !== (value.driveId === null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"driveId\"],\n        message: \"Google Drive destination location does not match its drive identity\",\n      });\n    }\n  });\nexport type GoogleDriveOutputDestination = z.infer<typeof GoogleDriveOutputDestination>;\n\nexport const GoogleDriveConnectionMetadata = z\n  .object({\n    credentialRole: z.literal(GOOGLE_DRIVE_CREDENTIAL_ROLE),\n    credentialLabel: z.union([\n      z.literal(GOOGLE_DRIVE_CREDENTIAL_LABEL),\n      z.literal(GOOGLE_DRIVE_LEGACY_CREDENTIAL_LABEL),\n    ]),\n    googlePermissionId: z.string().min(1).max(256),\n    googleEmail: z.string().email().max(320),\n    googleDisplayName: z.string().min(1).max(512).nullable(),\n    verifiedAt: z.string().datetime({ offset: true }),\n    accessMode: z.enum([\"file_only\", \"metadata_readonly\", \"readonly\"]),\n    lifecycle: GoogleDriveConnectionLifecycle.optional(),\n    outputDestination: GoogleDriveOutputDestination.optional(),\n    documentDestination: ConnectorDocumentDestination.optional(),\n    selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),\n    /** @deprecated Read `selectedSources`; retained while existing connections migrate. */\n    selectedSource: GoogleDriveSelectedSource.nullable().optional(),\n  })\n  .passthrough();\nexport type GoogleDriveConnectionMetadata = z.infer<typeof GoogleDriveConnectionMetadata>;\n\nexport const GoogleDriveOAuthStartRequest = z.object({\n  connectionId: z.string().uuid().optional(),\n  capability: z.enum([\"source_read\", \"publish\"]).default(\"source_read\"),\n});\nexport type GoogleDriveOAuthStartRequest = z.infer<typeof GoogleDriveOAuthStartRequest>;\n\nexport const GoogleDriveOAuthStartResponse = z.object({\n  authorizationUrl: z.string().url(),\n  expiresAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;\n\nexport const GoogleDriveLifecycleActionRequest = z.object({\n  action: z.enum([\"pause\", \"resume\"]),\n  expectedVersion: z.number().int().positive(),\n});\nexport type GoogleDriveLifecycleActionRequest = z.infer<typeof GoogleDriveLifecycleActionRequest>;\n\nexport const GoogleDriveDisconnectRequest = z.object({\n  expectedVersion: z.number().int().positive(),\n  idempotencyKey: z.string().trim().min(1).max(200),\n});\nexport type GoogleDriveDisconnectRequest = z.infer<typeof GoogleDriveDisconnectRequest>;\n\nexport const GoogleDrivePublicationExportFile = z\n  .object({\n    fileId: z.string().uuid(),\n    filename: z.string().trim().min(1).max(512),\n    contentType: z.string().trim().min(1).max(256),\n    sizeBytes: z.number().int().positive(),\n    sha256: z.string().regex(/^[0-9a-f]{64}$/u),\n    artifactId: z.string().regex(/^[0-9a-f]{32}$/u),\n    versionId: z.string().regex(/^[0-9a-f]{32}$/u),\n    materializationJobId: z.string().regex(/^[0-9a-f]{32}$/u),\n    sourceHeadSequence: z.number().int().nonnegative(),\n    sourceStateHash: z.string().regex(/^sha256:[0-9a-f]{64}$/u),\n  })\n  .strict();\nexport type GoogleDrivePublicationExportFile = z.infer<typeof GoogleDrivePublicationExportFile>;\n\nexport const GoogleDrivePublicationToolInput = z\n  .object({\n    title: z.string().trim().min(1).max(512),\n    modality: z.enum([\"document\", \"spreadsheet\", \"presentation\"]),\n    file: GoogleDrivePublicationExportFile,\n    idempotencyKey: z.string().trim().min(1).max(200),\n  })\n  .strict();\nexport type GoogleDrivePublicationToolInput = z.infer<typeof GoogleDrivePublicationToolInput>;\n\nexport const GoogleDrivePublicationReceipt = z\n  .object({\n    connectionId: z.string().uuid(),\n    providerFileId: z.string().min(1).max(256),\n    webViewLink: z.string().url(),\n    mimeType: z.enum([\n      \"application/vnd.google-apps.document\",\n      \"application/vnd.google-apps.spreadsheet\",\n      \"application/vnd.google-apps.presentation\",\n    ]),\n    destination: GoogleDriveOutputDestination,\n    replayed: z.boolean(),\n  })\n  .strict();\nexport type GoogleDrivePublicationReceipt = z.infer<typeof GoogleDrivePublicationReceipt>;\n\nexport const GoogleDriveBrowseItem = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  kind: z.enum([\"folder\", \"file\"]),\n  driveId: z.string().min(1).max(256).nullable(),\n  modifiedTime: z.string().datetime({ offset: true }).nullable(),\n  size: z.string().regex(/^\\d+$/).nullable(),\n  webViewLink: z.string().url().nullable(),\n});\nexport type GoogleDriveBrowseItem = z.infer<typeof GoogleDriveBrowseItem>;\n\nexport const GoogleDriveBrowseResponse = z.object({\n  connection: z.lazy(() => ConnectionMetadata),\n  parentId: z.string().min(1).max(256),\n  current: GoogleDriveBrowseItem.nullable(),\n  items: z.array(GoogleDriveBrowseItem),\n  nextPageToken: z.string().min(1).max(4096).nullable(),\n  incompleteSearch: z.boolean(),\n});\nexport type GoogleDriveBrowseResponse = z.infer<typeof GoogleDriveBrowseResponse>;\n\nconst GoogleDriveSourceSelection = z\n  .array(\n    GoogleDriveBrowseItem.pick({\n      id: true,\n      name: true,\n      mimeType: true,\n      driveId: true,\n    }),\n  )\n  .max(100)\n  .refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {\n    message: \"Google Drive sources must be unique\",\n  });\n\nexport const SaveGoogleDriveSourceRequest = z\n  .object({\n    sources: GoogleDriveSourceSelection,\n    destination: ConnectorDocumentDestinationSelection.optional(),\n    /** @deprecated Legacy requests are accepted but resolve to workspace authority. */\n    targetScope: GoogleDriveTargetScope.optional(),\n    syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n    syncEnabled: z.boolean().default(false),\n    readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  })\n  .refine((request) => request.destination !== undefined || request.targetScope !== undefined, {\n    message: \"Google Drive document destination is required\",\n  });\nexport type SaveGoogleDriveSourceRequest = z.infer<typeof SaveGoogleDriveSourceRequest>;\n\nexport const GoogleDriveKnowledgeSourceItem = z.object({\n  id: z.string().min(1).max(512),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  driveId: z.string().min(1).max(512).optional(),\n  sourceKind: z.enum([\"my_drive\", \"shared_drive\", \"folder\"]),\n  includeDescendants: z.boolean(),\n});\nexport type GoogleDriveKnowledgeSourceItem = z.infer<typeof GoogleDriveKnowledgeSourceItem>;\n\nexport const GoogleDriveKnowledgeSourceDestination = z.object({\n  authorityKind: z.enum([\"organization\", \"workspace\", \"personal\"]),\n  authorityAccountId: z.string().min(1).max(128),\n  authorityWorkspaceId: z.string().min(1).max(128).optional(),\n  authoritySubjectId: z.string().min(1).max(512).optional(),\n  collectionId: z.string().min(1).max(512).optional(),\n});\nexport type GoogleDriveKnowledgeSourceDestination = z.infer<\n  typeof GoogleDriveKnowledgeSourceDestination\n>;\n\nexport const GoogleDriveKnowledgeSourceConfig = z.object({\n  sources: z.array(GoogleDriveKnowledgeSourceItem).min(1).max(100),\n  destination: GoogleDriveKnowledgeSourceDestination,\n  syncCadence: GoogleDriveSyncCadence,\n  readPolicy: GoogleDriveReadPolicy,\n});\nexport type GoogleDriveKnowledgeSourceConfig = z.infer<typeof GoogleDriveKnowledgeSourceConfig>;\n\nexport const SaveGoogleDriveIntegrationSourceRequest = z.intersection(\n  SaveGoogleDriveSourceRequest,\n  z.object({\n    sources: GoogleDriveSourceSelection.refine((sources) => sources.length > 0, {\n      message: \"At least one Google Drive source is required\",\n    }),\n    expectedVersion: z.number().int().positive().optional(),\n    idempotencyKey: z.string().uuid(),\n  }),\n);\nexport type SaveGoogleDriveIntegrationSourceRequest = z.infer<\n  typeof SaveGoogleDriveIntegrationSourceRequest\n>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAQX,IAAM,+BAA+B;AACrC,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAChC,IAAM,uCACX;AACK,IAAM,8BACX;AAEK,IAAM,+BAA+B;AACrC,IAAM,gCAAgC;AACtC,IAAM,uCAAuC;AAC7C,IAAM,qCAAqC;AAC3C,IAAM,qCAAqC;AAC3C,IAAM,yCAAyC;AAE/C,IAAM,6BAA6B,EAAE,KAAK;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcM,SAAS,8BACd,eAC+B;AAC/B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxD,QAAM,uBAAuB,gBAAgB,QAAQ,IAAI,2BAA2B;AACpF,QAAM,eAAe,gBAAgB,QAAQ,IAAI,uBAAuB;AACxE,QAAM,6BACJ,wBAAwB,QAAQ,IAAI,oCAAoC;AAC1E,QAAM,oBAAoB,wBAAwB;AAClD,QAAM,eAA6C,CAAC;AACpD,MAAI,kBAAmB,cAAa,KAAK,kBAAkB;AAC3D,MAAI,aAAc,cAAa,KAAK,cAAc;AAClD,MAAI,2BAA4B,cAAa,KAAK,2BAA2B;AAC7E,MAAI,sBAAsB;AACxB,iBAAa,KAAK,uBAAuB,uBAAuB;AAAA,EAClE;AACA,SAAO;AAAA,IACL,YAAY,uBACR,aACA,6BACE,sBACA,eACE,cACA;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,iCACd,eACA,YACS;AACT,SAAO,8BAA8B,aAAa,EAAE,aAAa,SAAS,UAAU;AACtF;AAGO,IAAM,yBAAyB,EAAE,KAAK,CAAC,QAAQ,aAAa,cAAc,CAAC;AAG3E,IAAM,yBAAyB,EAAE,KAAK,CAAC,UAAU,UAAU,OAAO,CAAC;AAGnE,IAAM,wBAAwB,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,CAAC;AAG9D,IAAM,sCAAsC,EAAE,KAAK;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKD,IAAM,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACpE,IAAM,iCAAiC,EAAE,mBAAmB,SAAS;AAAA,EAC1E,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,eAAe;AAAA,IAChC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,aAAa;AAAA,IAC9B,aAAa,EAAE,QAAQ,KAAK;AAAA,IAC5B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,cAAc;AAAA,IAC/B,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3D,aAAa,6BAA6B,SAAS;AAAA;AAAA,EAEnD,aAAa,uBAAuB,SAAS;AAAA,EAC7C,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,aAAa,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACtC,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACvD,YAAY,sBAAsB,QAAQ,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC;AAGM,IAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EACtC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,UAAU,EAAE,KAAK,CAAC,YAAY,cAAc,CAAC;AAAA,EAC7C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,MAAK,MAAM,aAAa,gBAAiB,MAAM,YAAY,OAAO;AAChE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAGI,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,gBAAgB,EAAE,QAAQ,4BAA4B;AAAA,EACtD,iBAAiB,EAAE,MAAM;AAAA,IACvB,EAAE,QAAQ,6BAA6B;AAAA,IACvC,EAAE,QAAQ,oCAAoC;AAAA,EAChD,CAAC;AAAA,EACD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACvC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD,YAAY,EAAE,KAAK,CAAC,aAAa,qBAAqB,UAAU,CAAC;AAAA,EACjE,WAAW,+BAA+B,SAAS;AAAA,EACnD,mBAAmB,6BAA6B,SAAS;AAAA,EACzD,qBAAqB,6BAA6B,SAAS;AAAA,EAC3D,iBAAiB,EAAE,MAAM,yBAAyB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEtE,gBAAgB,0BAA0B,SAAS,EAAE,SAAS;AAChE,CAAC,EACA,YAAY;AAGR,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACzC,YAAY,EAAE,KAAK,CAAC,eAAe,SAAS,CAAC,EAAE,QAAQ,aAAa;AACtE,CAAC;AAGM,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACjD,CAAC;AAGM,IAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC;AAGM,IAAM,mCAAmC,EAC7C,OAAO;AAAA,EACN,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAC9C,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,EAC7C,sBAAsB,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,EACxD,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACjD,iBAAiB,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAC5D,CAAC,EACA,OAAO;AAGH,IAAM,kCAAkC,EAC5C,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACvC,UAAU,EAAE,KAAK,CAAC,YAAY,eAAe,cAAc,CAAC;AAAA,EAC5D,MAAM;AAAA,EACN,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC,EACA,OAAO;AAGH,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,IAAI;AAAA,EAC5B,UAAU,EAAE,KAAK;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,aAAa;AAAA,EACb,UAAU,EAAE,QAAQ;AACtB,CAAC,EACA,OAAO;AAGH,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7D,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,YAAY,EAAE,KAAK,MAAM,kBAAkB;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,sBAAsB,SAAS;AAAA,EACxC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,QAAQ;AAC9B,CAAC;AAGD,IAAM,6BAA6B,EAChC;AAAA,EACC,sBAAsB,KAAK;AAAA,IACzB,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AACH,EACC,IAAI,GAAG,EACP,OAAO,CAAC,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ;AAAA,EACxF,SAAS;AACX,CAAC;AAEI,IAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,SAAS;AAAA,EACT,aAAa,sCAAsC,SAAS;AAAA;AAAA,EAE5D,aAAa,uBAAuB,SAAS;AAAA,EAC7C,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,aAAa,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACtC,YAAY,sBAAsB,QAAQ,OAAO;AACnD,CAAC,EACA,OAAO,CAAC,YAAY,QAAQ,gBAAgB,UAAa,QAAQ,gBAAgB,QAAW;AAAA,EAC3F,SAAS;AACX,CAAC;AAGI,IAAM,iCAAiC,EAAE,OAAO;AAAA,EACrD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,YAAY,EAAE,KAAK,CAAC,YAAY,gBAAgB,QAAQ,CAAC;AAAA,EACzD,oBAAoB,EAAE,QAAQ;AAChC,CAAC;AAGM,IAAM,wCAAwC,EAAE,OAAO;AAAA,EAC5D,eAAe,EAAE,KAAK,CAAC,gBAAgB,aAAa,UAAU,CAAC;AAAA,EAC/D,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1D,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACpD,CAAC;AAKM,IAAM,mCAAmC,EAAE,OAAO;AAAA,EACvD,SAAS,EAAE,MAAM,8BAA8B,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/D,aAAa;AAAA,EACb,aAAa;AAAA,EACb,YAAY;AACd,CAAC;AAGM,IAAM,0CAA0C,EAAE;AAAA,EACvD;AAAA,EACA,EAAE,OAAO;AAAA,IACP,SAAS,2BAA2B,OAAO,CAAC,YAAY,QAAQ,SAAS,GAAG;AAAA,MAC1E,SAAS;AAAA,IACX,CAAC;AAAA,IACD,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,IACtD,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../src/google-drive.ts"],"sourcesContent":["import { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\nimport {\n  ConnectorDocumentDestination,\n  ConnectorDocumentDestinationSelection,\n} from \"./connector-destinations\";\n\nexport const GOOGLE_DRIVE_PROVIDER_DOMAIN = \"googleapis.com\" as const;\nexport const GOOGLE_DRIVE_FULL_SCOPE = \"https://www.googleapis.com/auth/drive\" as const;\nexport const GOOGLE_DRIVE_FILE_SCOPE = \"https://www.googleapis.com/auth/drive.file\" as const;\nexport const GOOGLE_DRIVE_METADATA_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.metadata.readonly\" as const;\nexport const GOOGLE_DRIVE_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.readonly\" as const;\n/** Stable serialized role retained for existing connection rows; not product-facing copy. */\nexport const GOOGLE_DRIVE_CREDENTIAL_ROLE = \"google_drive_metadata\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_LABEL = \"Google Drive read-only source sync\" as const;\nexport const GOOGLE_DRIVE_LEGACY_CREDENTIAL_LABEL = \"Google Drive metadata browser\" as const;\nexport const GOOGLE_DRIVE_PUBLICATION_SERVER_ID = \"google-drive-publishing\" as const;\nexport const GOOGLE_DRIVE_PUBLICATION_TOOL_NAME = \"google_drive_publish_file\" as const;\nexport const GOOGLE_DRIVE_PUBLICATION_CREATE_ACTION = \"create\" as const;\n\nexport const GoogleDriveOAuthCapability = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\n    \"picker_file_read\",\n    \"publish_file\",\n    \"source_metadata_discovery\",\n    \"source_content_read\",\n    \"recursive_source_sync\",\n  ]),\n);\nexport type GoogleDriveOAuthCapability = z.infer<typeof GoogleDriveOAuthCapability>;\n\nexport type GoogleDriveOAuthScopeDecision = {\n  accessMode: \"file_only\" | \"metadata_readonly\" | \"readonly\" | null;\n  capabilities: GoogleDriveOAuthCapability[];\n};\n\n/**\n * Converts exact Google OAuth grants into the Drive capabilities Opengeni may\n * rely on. Unknown or malformed grants add no authority. In particular,\n * drive.file covers only files explicitly opened or shared with the app and\n * never authorizes arbitrary recursive descendant discovery.\n */\nexport function googleDriveOAuthScopeDecision(\n  grantedScopes: readonly string[],\n): GoogleDriveOAuthScopeDecision {\n  const granted = new Set(grantedScopes);\n  const hasFullDrive = granted.has(GOOGLE_DRIVE_FULL_SCOPE);\n  const hasSourceContentRead = hasFullDrive || granted.has(GOOGLE_DRIVE_READONLY_SCOPE);\n  const hasFileWrite = hasFullDrive || granted.has(GOOGLE_DRIVE_FILE_SCOPE);\n  const hasSourceMetadataDiscovery =\n    hasSourceContentRead || granted.has(GOOGLE_DRIVE_METADATA_READONLY_SCOPE);\n  const hasPickerFileRead = hasSourceContentRead || hasFileWrite;\n  const capabilities: GoogleDriveOAuthCapability[] = [];\n  if (hasPickerFileRead) capabilities.push(\"picker_file_read\");\n  if (hasFileWrite) capabilities.push(\"publish_file\");\n  if (hasSourceMetadataDiscovery) capabilities.push(\"source_metadata_discovery\");\n  if (hasSourceContentRead) {\n    capabilities.push(\"source_content_read\", \"recursive_source_sync\");\n  }\n  return {\n    accessMode: hasSourceContentRead\n      ? \"readonly\"\n      : hasSourceMetadataDiscovery\n        ? \"metadata_readonly\"\n        : hasFileWrite\n          ? \"file_only\"\n          : null,\n    capabilities,\n  };\n}\n\nexport function googleDriveScopesAllowCapability(\n  grantedScopes: readonly string[],\n  capability: GoogleDriveOAuthCapability,\n): boolean {\n  return googleDriveOAuthScopeDecision(grantedScopes).capabilities.includes(capability);\n}\n\n/** @deprecated Connector document destinations use organization/workspace/personal authority. */\nexport const GoogleDriveTargetScope = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"user\", \"workspace\", \"organization\"]),\n);\nexport type GoogleDriveTargetScope = z.infer<typeof GoogleDriveTargetScope>;\n\nexport const GoogleDriveSyncCadence = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"manual\", \"hourly\", \"daily\"]),\n);\nexport type GoogleDriveSyncCadence = z.infer<typeof GoogleDriveSyncCadence>;\n\nexport const GoogleDriveReadPolicy = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"allow\", \"ask\", \"block\"]),\n);\nexport type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;\n\nexport const GoogleDriveConnectionLifecycleState = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\n    \"active\",\n    \"paused\",\n    \"token_revoked\",\n    \"app_removed\",\n    \"disconnected\",\n    \"reconnect_required\",\n    \"reconsent_required\",\n  ]),\n);\nexport type GoogleDriveConnectionLifecycleState = z.infer<\n  typeof GoogleDriveConnectionLifecycleState\n>;\n\nconst GoogleDriveLifecycleObservedAt = /* @__PURE__ */ defineSchema(() =>\n  z.string().datetime({ offset: true }),\n);\nexport const GoogleDriveConnectionLifecycle = /* @__PURE__ */ defineSchema(() =>\n  z.discriminatedUnion(\"state\", [\n    z.object({\n      state: z.literal(\"active\"),\n      recoverable: z.literal(true),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n    z.object({\n      state: z.literal(\"paused\"),\n      recoverable: z.literal(true),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n    z.object({\n      state: z.literal(\"token_revoked\"),\n      recoverable: z.literal(true),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n    z.object({\n      state: z.literal(\"app_removed\"),\n      recoverable: z.literal(false),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n    z.object({\n      state: z.literal(\"disconnected\"),\n      recoverable: z.literal(true),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n    z.object({\n      state: z.literal(\"reconnect_required\"),\n      recoverable: z.literal(true),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n    z.object({\n      state: z.literal(\"reconsent_required\"),\n      recoverable: z.literal(true),\n      observedAt: GoogleDriveLifecycleObservedAt,\n    }),\n  ]),\n);\nexport type GoogleDriveConnectionLifecycle = z.infer<typeof GoogleDriveConnectionLifecycle>;\n\nexport const GoogleDriveSelectedSource = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    id: z.string().min(1).max(256),\n    name: z.string().min(1).max(1024),\n    mimeType: z.string().min(1).max(256),\n    driveId: z.string().min(1).max(256).nullable().default(null),\n    destination: ConnectorDocumentDestination.optional(),\n    /** @deprecated Missing destinations resolve to the current workspace boundary. */\n    targetScope: GoogleDriveTargetScope.optional(),\n    syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n    syncEnabled: z.boolean().default(false),\n    configGeneration: z.number().int().positive().default(1),\n    readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n    selectedAt: z.string().datetime({ offset: true }),\n  }),\n);\nexport type GoogleDriveSelectedSource = z.infer<typeof GoogleDriveSelectedSource>;\n\nexport const GoogleDriveOutputDestination = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      folderId: z.string().min(1).max(256),\n      folderName: z.string().min(1).max(1024),\n      driveId: z.string().min(1).max(256).nullable(),\n      location: z.enum([\"my_drive\", \"shared_drive\"]),\n      selectedAt: z.string().datetime({ offset: true }),\n    })\n    .strict()\n    .superRefine((value, context) => {\n      if ((value.location === \"my_drive\") !== (value.driveId === null)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"driveId\"],\n          message: \"Google Drive destination location does not match its drive identity\",\n        });\n      }\n    }),\n);\nexport type GoogleDriveOutputDestination = z.infer<typeof GoogleDriveOutputDestination>;\n\nexport const GoogleDriveConnectionMetadata = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      credentialRole: z.literal(GOOGLE_DRIVE_CREDENTIAL_ROLE),\n      credentialLabel: z.union([\n        z.literal(GOOGLE_DRIVE_CREDENTIAL_LABEL),\n        z.literal(GOOGLE_DRIVE_LEGACY_CREDENTIAL_LABEL),\n      ]),\n      googlePermissionId: z.string().min(1).max(256),\n      googleEmail: z.string().email().max(320),\n      googleDisplayName: z.string().min(1).max(512).nullable(),\n      verifiedAt: z.string().datetime({ offset: true }),\n      accessMode: z.enum([\"file_only\", \"metadata_readonly\", \"readonly\"]),\n      lifecycle: GoogleDriveConnectionLifecycle.optional(),\n      outputDestination: GoogleDriveOutputDestination.optional(),\n      documentDestination: ConnectorDocumentDestination.optional(),\n      selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),\n      /** @deprecated Read `selectedSources`; retained while existing connections migrate. */\n      selectedSource: GoogleDriveSelectedSource.nullable().optional(),\n    })\n    .passthrough(),\n);\nexport type GoogleDriveConnectionMetadata = z.infer<typeof GoogleDriveConnectionMetadata>;\n\nexport const GoogleDriveOAuthStartRequest = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    connectionId: z.string().uuid().optional(),\n    capability: z.enum([\"source_read\", \"publish\"]).default(\"source_read\"),\n  }),\n);\nexport type GoogleDriveOAuthStartRequest = z.infer<typeof GoogleDriveOAuthStartRequest>;\n\nexport const GoogleDriveOAuthStartResponse = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    authorizationUrl: z.string().url(),\n    expiresAt: z.string().datetime({ offset: true }),\n  }),\n);\nexport type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;\n\nexport const GoogleDriveLifecycleActionRequest = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    action: z.enum([\"pause\", \"resume\"]),\n    expectedVersion: z.number().int().positive(),\n  }),\n);\nexport type GoogleDriveLifecycleActionRequest = z.infer<typeof GoogleDriveLifecycleActionRequest>;\n\nexport const GoogleDriveDisconnectRequest = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    expectedVersion: z.number().int().positive(),\n    idempotencyKey: z.string().trim().min(1).max(200),\n  }),\n);\nexport type GoogleDriveDisconnectRequest = z.infer<typeof GoogleDriveDisconnectRequest>;\n\nexport const GoogleDrivePublicationExportFile = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      fileId: z.string().uuid(),\n      filename: z.string().trim().min(1).max(512),\n      contentType: z.string().trim().min(1).max(256),\n      sizeBytes: z.number().int().positive(),\n      sha256: z.string().regex(/^[0-9a-f]{64}$/u),\n      artifactId: z.string().regex(/^[0-9a-f]{32}$/u),\n      versionId: z.string().regex(/^[0-9a-f]{32}$/u),\n      materializationJobId: z.string().regex(/^[0-9a-f]{32}$/u),\n      sourceHeadSequence: z.number().int().nonnegative(),\n      sourceStateHash: z.string().regex(/^sha256:[0-9a-f]{64}$/u),\n    })\n    .strict(),\n);\nexport type GoogleDrivePublicationExportFile = z.infer<typeof GoogleDrivePublicationExportFile>;\n\nexport const GoogleDrivePublicationToolInput = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      title: z.string().trim().min(1).max(512),\n      modality: z.enum([\"document\", \"spreadsheet\", \"presentation\"]),\n      file: GoogleDrivePublicationExportFile,\n      idempotencyKey: z.string().trim().min(1).max(200),\n    })\n    .strict(),\n);\nexport type GoogleDrivePublicationToolInput = z.infer<typeof GoogleDrivePublicationToolInput>;\n\nexport const GoogleDrivePublicationReceipt = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      connectionId: z.string().uuid(),\n      providerFileId: z.string().min(1).max(256),\n      webViewLink: z.string().url(),\n      mimeType: z.enum([\n        \"application/vnd.google-apps.document\",\n        \"application/vnd.google-apps.spreadsheet\",\n        \"application/vnd.google-apps.presentation\",\n      ]),\n      destination: GoogleDriveOutputDestination,\n      replayed: z.boolean(),\n    })\n    .strict(),\n);\nexport type GoogleDrivePublicationReceipt = z.infer<typeof GoogleDrivePublicationReceipt>;\n\nexport const GoogleDriveBrowseItem = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    id: z.string().min(1).max(256),\n    name: z.string().min(1).max(1024),\n    mimeType: z.string().min(1).max(256),\n    kind: z.enum([\"folder\", \"file\"]),\n    driveId: z.string().min(1).max(256).nullable(),\n    modifiedTime: z.string().datetime({ offset: true }).nullable(),\n    size: z.string().regex(/^\\d+$/).nullable(),\n    webViewLink: z.string().url().nullable(),\n  }),\n);\nexport type GoogleDriveBrowseItem = z.infer<typeof GoogleDriveBrowseItem>;\n\nexport const GoogleDriveBrowseResponse = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    connection: z.lazy(() => ConnectionMetadata),\n    parentId: z.string().min(1).max(256),\n    current: GoogleDriveBrowseItem.nullable(),\n    items: z.array(GoogleDriveBrowseItem),\n    nextPageToken: z.string().min(1).max(4096).nullable(),\n    incompleteSearch: z.boolean(),\n  }),\n);\nexport type GoogleDriveBrowseResponse = z.infer<typeof GoogleDriveBrowseResponse>;\n\nconst GoogleDriveSourceSelection = /* @__PURE__ */ defineSchema(() =>\n  z\n    .array(\n      GoogleDriveBrowseItem.pick({\n        id: true,\n        name: true,\n        mimeType: true,\n        driveId: true,\n      }),\n    )\n    .max(100)\n    .refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {\n      message: \"Google Drive sources must be unique\",\n    }),\n);\n\nexport const SaveGoogleDriveSourceRequest = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      sources: GoogleDriveSourceSelection,\n      destination: ConnectorDocumentDestinationSelection.optional(),\n      /** @deprecated Legacy requests are accepted but resolve to workspace authority. */\n      targetScope: GoogleDriveTargetScope.optional(),\n      syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n      syncEnabled: z.boolean().default(false),\n      readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n    })\n    .refine((request) => request.destination !== undefined || request.targetScope !== undefined, {\n      message: \"Google Drive document destination is required\",\n    }),\n);\nexport type SaveGoogleDriveSourceRequest = z.infer<typeof SaveGoogleDriveSourceRequest>;\n\nexport const GoogleDriveKnowledgeSourceItem = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    id: z.string().min(1).max(512),\n    name: z.string().min(1).max(1024),\n    mimeType: z.string().min(1).max(256),\n    driveId: z.string().min(1).max(512).optional(),\n    sourceKind: z.enum([\"my_drive\", \"shared_drive\", \"folder\"]),\n    includeDescendants: z.boolean(),\n  }),\n);\nexport type GoogleDriveKnowledgeSourceItem = z.infer<typeof GoogleDriveKnowledgeSourceItem>;\n\nexport const GoogleDriveKnowledgeSourceDestination = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    authorityKind: z.enum([\"organization\", \"workspace\", \"personal\"]),\n    authorityAccountId: z.string().min(1).max(128),\n    authorityWorkspaceId: z.string().min(1).max(128).optional(),\n    authoritySubjectId: z.string().min(1).max(512).optional(),\n    collectionId: z.string().min(1).max(512).optional(),\n  }),\n);\nexport type GoogleDriveKnowledgeSourceDestination = z.infer<\n  typeof GoogleDriveKnowledgeSourceDestination\n>;\n\nexport const GoogleDriveKnowledgeSourceConfig = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    sources: z.array(GoogleDriveKnowledgeSourceItem).min(1).max(100),\n    destination: GoogleDriveKnowledgeSourceDestination,\n    syncCadence: GoogleDriveSyncCadence,\n    readPolicy: GoogleDriveReadPolicy,\n  }),\n);\nexport type GoogleDriveKnowledgeSourceConfig = z.infer<typeof GoogleDriveKnowledgeSourceConfig>;\n\nexport const SaveGoogleDriveIntegrationSourceRequest = /* @__PURE__ */ defineSchema(() =>\n  z.intersection(\n    SaveGoogleDriveSourceRequest,\n    z.object({\n      sources: GoogleDriveSourceSelection.refine((sources) => sources.length > 0, {\n        message: \"At least one Google Drive source is required\",\n      }),\n      expectedVersion: z.number().int().positive().optional(),\n      idempotencyKey: z.string().uuid(),\n    }),\n  ),\n);\nexport type SaveGoogleDriveIntegrationSourceRequest = z.infer<\n  typeof SaveGoogleDriveIntegrationSourceRequest\n>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,SAAS;AAQX,IAAM,+BAA+B;AACrC,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAChC,IAAM,uCACX;AACK,IAAM,8BACX;AAEK,IAAM,+BAA+B;AACrC,IAAM,gCAAgC;AACtC,IAAM,uCAAuC;AAC7C,IAAM,qCAAqC;AAC3C,IAAM,qCAAqC;AAC3C,IAAM,yCAAyC;AAE/C,IAAM,6BAA6C;AAAA,EAAa,MACrE,EAAE,KAAK;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAcO,SAAS,8BACd,eAC+B;AAC/B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxD,QAAM,uBAAuB,gBAAgB,QAAQ,IAAI,2BAA2B;AACpF,QAAM,eAAe,gBAAgB,QAAQ,IAAI,uBAAuB;AACxE,QAAM,6BACJ,wBAAwB,QAAQ,IAAI,oCAAoC;AAC1E,QAAM,oBAAoB,wBAAwB;AAClD,QAAM,eAA6C,CAAC;AACpD,MAAI,kBAAmB,cAAa,KAAK,kBAAkB;AAC3D,MAAI,aAAc,cAAa,KAAK,cAAc;AAClD,MAAI,2BAA4B,cAAa,KAAK,2BAA2B;AAC7E,MAAI,sBAAsB;AACxB,iBAAa,KAAK,uBAAuB,uBAAuB;AAAA,EAClE;AACA,SAAO;AAAA,IACL,YAAY,uBACR,aACA,6BACE,sBACA,eACE,cACA;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,iCACd,eACA,YACS;AACT,SAAO,8BAA8B,aAAa,EAAE,aAAa,SAAS,UAAU;AACtF;AAGO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EAAE,KAAK,CAAC,QAAQ,aAAa,cAAc,CAAC;AAC9C;AAGO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EAAE,KAAK,CAAC,UAAU,UAAU,OAAO,CAAC;AACtC;AAGO,IAAM,wBAAwC;AAAA,EAAa,MAChE,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,CAAC;AAClC;AAGO,IAAM,sCAAsD;AAAA,EAAa,MAC9E,EAAE,KAAK;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAKA,IAAM,iCAAiD;AAAA,EAAa,MAClE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACtC;AACO,IAAM,iCAAiD;AAAA,EAAa,MACzE,EAAE,mBAAmB,SAAS;AAAA,IAC5B,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,MACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,IACD,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,MACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,IACD,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,eAAe;AAAA,MAChC,aAAa,EAAE,QAAQ,IAAI;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,IACD,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,aAAa;AAAA,MAC9B,aAAa,EAAE,QAAQ,KAAK;AAAA,MAC5B,YAAY;AAAA,IACd,CAAC;AAAA,IACD,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,cAAc;AAAA,MAC/B,aAAa,EAAE,QAAQ,IAAI;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,IACD,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,MACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,IACD,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,MACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,EACH,CAAC;AACH;AAGO,IAAM,4BAA4C;AAAA,EAAa,MACpE,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,IAC3D,aAAa,6BAA6B,SAAS;AAAA;AAAA,IAEnD,aAAa,uBAAuB,SAAS;AAAA,IAC7C,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,IACpD,aAAa,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,IACtC,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,IACvD,YAAY,sBAAsB,QAAQ,OAAO;AAAA,IACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAClD,CAAC;AACH;AAGO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EACG,OAAO;AAAA,IACN,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACnC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC7C,UAAU,EAAE,KAAK,CAAC,YAAY,cAAc,CAAC;AAAA,IAC7C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAClD,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,QAAK,MAAM,aAAa,gBAAiB,MAAM,YAAY,OAAO;AAChE,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,SAAS;AAAA,QAChB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAGO,IAAM,gCAAgD;AAAA,EAAa,MACxE,EACG,OAAO;AAAA,IACN,gBAAgB,EAAE,QAAQ,4BAA4B;AAAA,IACtD,iBAAiB,EAAE,MAAM;AAAA,MACvB,EAAE,QAAQ,6BAA6B;AAAA,MACvC,EAAE,QAAQ,oCAAoC;AAAA,IAChD,CAAC;AAAA,IACD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,IACvC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,IAChD,YAAY,EAAE,KAAK,CAAC,aAAa,qBAAqB,UAAU,CAAC;AAAA,IACjE,WAAW,+BAA+B,SAAS;AAAA,IACnD,mBAAmB,6BAA6B,SAAS;AAAA,IACzD,qBAAqB,6BAA6B,SAAS;AAAA,IAC3D,iBAAiB,EAAE,MAAM,yBAAyB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,IAEtE,gBAAgB,0BAA0B,SAAS,EAAE,SAAS;AAAA,EAChE,CAAC,EACA,YAAY;AACjB;AAGO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EAAE,OAAO;AAAA,IACP,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACzC,YAAY,EAAE,KAAK,CAAC,eAAe,SAAS,CAAC,EAAE,QAAQ,aAAa;AAAA,EACtE,CAAC;AACH;AAGO,IAAM,gCAAgD;AAAA,EAAa,MACxE,EAAE,OAAO;AAAA,IACP,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,IACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EACjD,CAAC;AACH;AAGO,IAAM,oCAAoD;AAAA,EAAa,MAC5E,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,IAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC7C,CAAC;AACH;AAGO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EAAE,OAAO;AAAA,IACP,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IAC3C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClD,CAAC;AACH;AAGO,IAAM,mCAAmD;AAAA,EAAa,MAC3E,EACG,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC1C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IACrC,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IAC1C,YAAY,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IAC9C,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IAC7C,sBAAsB,EAAE,OAAO,EAAE,MAAM,iBAAiB;AAAA,IACxD,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACjD,iBAAiB,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAC5D,CAAC,EACA,OAAO;AACZ;AAGO,IAAM,kCAAkD;AAAA,EAAa,MAC1E,EACG,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACvC,UAAU,EAAE,KAAK,CAAC,YAAY,eAAe,cAAc,CAAC;AAAA,IAC5D,MAAM;AAAA,IACN,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAClD,CAAC,EACA,OAAO;AACZ;AAGO,IAAM,gCAAgD;AAAA,EAAa,MACxE,EACG,OAAO;AAAA,IACN,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACzC,aAAa,EAAE,OAAO,EAAE,IAAI;AAAA,IAC5B,UAAU,EAAE,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,aAAa;AAAA,IACb,UAAU,EAAE,QAAQ;AAAA,EACtB,CAAC,EACA,OAAO;AACZ;AAGO,IAAM,wBAAwC;AAAA,EAAa,MAChE,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACnC,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,IAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,IAC7D,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,SAAS;AAAA,IACzC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACzC,CAAC;AACH;AAGO,IAAM,4BAA4C;AAAA,EAAa,MACpE,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,MAAM,kBAAkB;AAAA,IAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACnC,SAAS,sBAAsB,SAAS;AAAA,IACxC,OAAO,EAAE,MAAM,qBAAqB;AAAA,IACpC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACpD,kBAAkB,EAAE,QAAQ;AAAA,EAC9B,CAAC;AACH;AAGA,IAAM,6BAA6C;AAAA,EAAa,MAC9D,EACG;AAAA,IACC,sBAAsB,KAAK;AAAA,MACzB,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH,EACC,IAAI,GAAG,EACP,OAAO,CAAC,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACxF,SAAS;AAAA,EACX,CAAC;AACL;AAEO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EACG,OAAO;AAAA,IACN,SAAS;AAAA,IACT,aAAa,sCAAsC,SAAS;AAAA;AAAA,IAE5D,aAAa,uBAAuB,SAAS;AAAA,IAC7C,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,IACpD,aAAa,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,IACtC,YAAY,sBAAsB,QAAQ,OAAO;AAAA,EACnD,CAAC,EACA,OAAO,CAAC,YAAY,QAAQ,gBAAgB,UAAa,QAAQ,gBAAgB,QAAW;AAAA,IAC3F,SAAS;AAAA,EACX,CAAC;AACL;AAGO,IAAM,iCAAiD;AAAA,EAAa,MACzE,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC7C,YAAY,EAAE,KAAK,CAAC,YAAY,gBAAgB,QAAQ,CAAC;AAAA,IACzD,oBAAoB,EAAE,QAAQ;AAAA,EAChC,CAAC;AACH;AAGO,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,OAAO;AAAA,IACP,eAAe,EAAE,KAAK,CAAC,gBAAgB,aAAa,UAAU,CAAC;AAAA,IAC/D,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC1D,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACxD,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpD,CAAC;AACH;AAKO,IAAM,mCAAmD;AAAA,EAAa,MAC3E,EAAE,OAAO;AAAA,IACP,SAAS,EAAE,MAAM,8BAA8B,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC/D,aAAa;AAAA,IACb,aAAa;AAAA,IACb,YAAY;AAAA,EACd,CAAC;AACH;AAGO,IAAM,0CAA0D;AAAA,EAAa,MAClF,EAAE;AAAA,IACA;AAAA,IACA,EAAE,OAAO;AAAA,MACP,SAAS,2BAA2B,OAAO,CAAC,YAAY,QAAQ,SAAS,GAAG;AAAA,QAC1E,SAAS;AAAA,MACX,CAAC;AAAA,MACD,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,MACtD,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/host-mcp-bindings.d.ts

@@ -8,6 +8,7 @@ export declare const HostMcpBindingDefinition: z.ZodObject<{
     destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     connectionRef: z.ZodObject<{
         connectionId: z.ZodOptional<z.ZodString>;
+        accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
         authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
         hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             bindingId: z.ZodString;
@@ -65,6 +66,7 @@ export declare const HostMcpBinding: z.ZodObject<{
         destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         connectionRef: z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
             hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 bindingId: z.ZodString;
@@ -103,6 +105,7 @@ export declare const CreateHostMcpBindingRequest: z.ZodObject<{
         destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         connectionRef: z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
             hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 bindingId: z.ZodString;
@@ -214,6 +217,7 @@ export declare const HostMcpAcceptedAuthority: z.ZodObject<{
         destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         connectionRef: z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
             hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 bindingId: z.ZodString;
@@ -286,6 +290,7 @@ export declare const HostMcpTaskAuthority: z.ZodObject<{
         destinationUrl: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         connectionRef: z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
+            accountSelection: z.ZodOptional<z.ZodLiteral<"all_eligible">>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
             hostBinding: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
                 bindingId: z.ZodString;

package/dist/host-mcp-bindings.js

@@ -1,68 +1,89 @@
 import {
-  ConnectionUseAuthoritySnapshot,
-  IssueConnectionUseGrantRequest
-} from "./chunk-OVFORMPW.js";
+  ExternalIdentity
+} from "./chunk-HABQ7ADB.js";
+import {
+  ConnectionUseAuthoritySnapshot
+} from "./chunk-6C2HKFTU.js";
 import {
   HostMcpCreateSelections,
+  ManagedUserResourceGrantMode,
   McpServerConnectionRef,
   SessionTenancyVisibility,
   stableJson
-} from "./chunk-QQUJ6NPW.js";
-import "./chunk-YBW5JSA3.js";
-import "./chunk-O5LEQHDM.js";
-import "./chunk-GRG7PHWQ.js";
-import "./chunk-RKX3NQYS.js";
-import "./chunk-MRWYRAS5.js";
-import "./chunk-3SIZGL3O.js";
+} from "./chunk-OF6OKOBF.js";
+import "./chunk-EFZYKUE2.js";
+import "./chunk-Z7WEVGCL.js";
+import "./chunk-4JGHSSB7.js";
+import "./chunk-2ZIHHL72.js";
+import "./chunk-LZ2LAHIX.js";
+import "./chunk-NDZHPTCL.js";
+import "./chunk-SHO4YO4B.js";
+import "./chunk-TSWWZMUS.js";
+import "./chunk-XDLAGX66.js";
+import "./chunk-4VDMHLLL.js";
+import "./chunk-E3GGUBHS.js";
+import "./chunk-KHHZTBP7.js";
+import "./chunk-6IXO76Z6.js";
 import "./chunk-NVJMJWLL.js";
+import "./chunk-352X6ENP.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-JUFK3T4Q.js";
-import "./chunk-M5ZGRVIQ.js";
-import "./chunk-BCS7WHCK.js";
-import "./chunk-5LYFSZ7O.js";
-import "./chunk-Y3KNXVTD.js";
-import "./chunk-D2HKF2EF.js";
-import "./chunk-TXTQIYCV.js";
+import "./chunk-J4HQ3UKY.js";
+import "./chunk-YKZ4WU4P.js";
+import "./chunk-TLU3UEMD.js";
+import "./chunk-OL23ARTF.js";
+import "./chunk-TCXCRBPF.js";
+import "./chunk-ZDCRWCGZ.js";
+import "./chunk-SWRN2DJ3.js";
+import "./chunk-HRRU4QPI.js";
+import "./chunk-IK36LXKC.js";
 import "./chunk-RIY7GYQS.js";
-import "./chunk-MYBZRDTY.js";
-import "./chunk-PX3VCKAU.js";
-import "./chunk-YRXAWWCU.js";
-import "./chunk-WYBDERIY.js";
+import "./chunk-4QO6GJUX.js";
+import "./chunk-EKWNTOG3.js";
 import {
-  ExternalIdentity
-} from "./chunk-2AC63F4S.js";
-import "./chunk-P3HLDT77.js";
-import "./chunk-7ABONTXE.js";
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+import "./chunk-D2HKF2EF.js";
+import "./chunk-MYBZRDTY.js";
+import "./chunk-PUIUXIOL.js";
+import "./chunk-RKX3NQYS.js";
+import "./chunk-7272KVWZ.js";
+import "./chunk-RMWXDZEO.js";
+import "./chunk-ILJ72KPO.js";
+import "./chunk-WVCFSOUZ.js";
 
 // src/host-mcp-bindings.ts
 import { z } from "zod";
-var HostMcpOwnerSubject = z.union([
-  ExternalIdentity.shape.subjectId,
-  z.string().max(4096).regex(/^user:[^\r\n\u0000]+$/)
-]);
-var HostMcpBindingDefinition = z.object({
-  serverId: z.string().min(1).max(256),
-  destinationUrl: z.string().url().max(4096).refine((value) => {
-    const url = new URL(value);
-    return url.protocol === "https:" && !url.username && !url.password && !url.hash;
-  }, "Host binding requires an HTTPS destination without userinfo or fragment").transform((value) => new URL(value).toString()),
-  connectionRef: McpServerConnectionRef
-}).strict().superRefine((value, context) => {
-  if (value.connectionRef.hostBinding)
-    context.addIssue({
-      code: "custom",
-      path: ["connectionRef", "hostBinding"],
-      message: "A binding definition cannot reference another binding"
-    });
-  if (value.connectionRef.authoritySource !== "host" || !value.connectionRef.connectionId)
-    context.addIssue({
-      code: "custom",
-      path: ["connectionRef"],
-      message: "Explicit host connection authority is required"
-    });
-  if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65536)
-    context.addIssue({ code: "custom", message: "Host binding definition exceeds 64 KiB" });
-});
+var HostMcpOwnerSubject = /* @__PURE__ */ defineSchema(
+  () => z.union([
+    ExternalIdentity.shape.subjectId,
+    z.string().max(4096).regex(/^user:[^\r\n\u0000]+$/)
+  ])
+);
+var HostMcpBindingDefinition = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    serverId: z.string().min(1).max(256),
+    destinationUrl: z.string().url().max(4096).refine((value) => {
+      const url = new URL(value);
+      return url.protocol === "https:" && !url.username && !url.password && !url.hash;
+    }, "Host binding requires an HTTPS destination without userinfo or fragment").transform((value) => new URL(value).toString()),
+    connectionRef: McpServerConnectionRef
+  }).strict().superRefine((value, context) => {
+    if (value.connectionRef.hostBinding)
+      context.addIssue({
+        code: "custom",
+        path: ["connectionRef", "hostBinding"],
+        message: "A binding definition cannot reference another binding"
+      });
+    if (value.connectionRef.authoritySource !== "host" || !value.connectionRef.connectionId)
+      context.addIssue({
+        code: "custom",
+        path: ["connectionRef"],
+        message: "Explicit host connection authority is required"
+      });
+    if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65536)
+      context.addIssue({ code: "custom", message: "Host binding definition exceeds 64 KiB" });
+  })
+);
 function hostMcpBindingMatchesSelection(binding, selection) {
   const parsed = McpServerConnectionRef.safeParse(selection.connectionRef);
   if (!parsed.success || !parsed.data.hostBinding) return false;
@@ -83,126 +104,168 @@ function hostMcpBindingMatchesSelection(binding, selection) {
   }
   return binding.id === hostBinding.bindingId && binding.generation === hostBinding.generation && stableJson(configuredRef) === stableJson(definition.data.connectionRef);
 }
-var HostMcpBinding = z.object({
-  id: z.string().uuid(),
-  accountId: z.string().uuid(),
-  workspaceId: z.string().uuid(),
-  ownerSubjectId: HostMcpOwnerSubject,
-  authorizationRevision: z.number().int().positive().safe(),
-  generation: z.number().int().positive().safe(),
-  status: z.enum(["active", "revoked"]),
-  definition: HostMcpBindingDefinition,
-  createdAt: z.string().datetime({ offset: true }),
-  revokedAt: z.string().datetime({ offset: true }).nullable()
-}).strict();
-var CreateHostMcpBindingRequest = z.object({
-  operationId: z.string().uuid(),
-  definition: HostMcpBindingDefinition
-}).strict();
-var HostMcpDelegationGrant = IssueConnectionUseGrantRequest.superRefine((value, context) => {
-  if (Boolean(value.sessionId) !== (value.expectedAuthorityEpoch != null) || value.expectedAuthorityEpoch != null && !Number.isSafeInteger(value.expectedAuthorityEpoch)) {
-    context.addIssue({
-      code: "custom",
-      message: "Host session grants require a matching safe authority epoch"
-    });
-  }
-});
-var IssueHostMcpDelegationRequest = z.object({
-  operationId: z.string().uuid(),
-  bindingId: z.string().uuid(),
-  expectedBindingGeneration: z.number().int().positive().safe(),
-  grant: HostMcpDelegationGrant
-}).strict();
-var HostMcpDelegation = z.object({
-  id: z.string().uuid(),
-  accountId: z.string().uuid(),
-  workspaceId: z.string().uuid(),
-  ownerSubjectId: HostMcpOwnerSubject,
-  ownerAuthorizationRevision: z.number().int().positive().safe(),
-  bindingId: z.string().uuid(),
-  bindingGeneration: z.number().int().positive().safe(),
-  grant: HostMcpDelegationGrant,
-  generation: z.number().int().positive().safe(),
-  status: z.enum(["active", "revoked"]),
-  createdAt: z.string().datetime({ offset: true }),
-  revokedAt: z.string().datetime({ offset: true }).nullable()
-}).strict();
-var HostMcpAcceptedAuthority = z.object({
-  version: z.literal(1),
-  accountId: z.string().uuid(),
-  workspaceId: z.string().uuid(),
-  targetSessionId: z.string().uuid(),
-  targetSessionVisibility: SessionTenancyVisibility,
-  targetSessionAuthorityEpoch: z.number().int().positive().safe(),
-  acceptedWork: ConnectionUseAuthoritySnapshot.shape.acceptedWork,
-  bindingId: z.string().uuid(),
-  bindingGeneration: z.number().int().positive().safe(),
-  definition: HostMcpBindingDefinition,
-  ownerSubjectId: HostMcpOwnerSubject,
-  ownerOrganizationMembershipId: z.string().uuid(),
-  ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),
-  delegationId: z.string().uuid(),
-  delegationGeneration: z.number().int().positive().safe(),
-  scheduledOrigin: z.object({
+var HostMcpBinding = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    id: z.string().uuid(),
+    accountId: z.string().uuid(),
+    workspaceId: z.string().uuid(),
+    ownerSubjectId: HostMcpOwnerSubject,
+    authorizationRevision: z.number().int().positive().safe(),
+    generation: z.number().int().positive().safe(),
+    status: z.enum(["active", "revoked"]),
+    definition: HostMcpBindingDefinition,
+    createdAt: z.string().datetime({ offset: true }),
+    revokedAt: z.string().datetime({ offset: true }).nullable()
+  }).strict()
+);
+var CreateHostMcpBindingRequest = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    operationId: z.string().uuid(),
+    definition: HostMcpBindingDefinition
+  }).strict()
+);
+var HostMcpGrantRequest = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    scope: z.literal("user"),
+    mode: ManagedUserResourceGrantMode,
+    context: SessionTenancyVisibility,
+    sessionId: z.string().uuid().nullable().optional(),
+    expectedAuthorityEpoch: z.number().int().positive().nullable().optional(),
+    workspaceSharedAcknowledged: z.boolean().default(false)
+  }).strict().superRefine((value, context) => {
+    if (value.context === "workspace_shared" && !value.workspaceSharedAcknowledged) {
+      context.addIssue({
+        code: "custom",
+        path: ["workspaceSharedAcknowledged"],
+        message: "workspace_shared requires durable shared-output acknowledgement"
+      });
+    }
+    if (value.mode === "always" && (value.sessionId || value.expectedAuthorityEpoch)) {
+      context.addIssue({ code: "custom", path: ["sessionId"], message: "always is unbound" });
+    }
+    if (value.mode === "session" && (!value.sessionId || !value.expectedAuthorityEpoch)) {
+      context.addIssue({
+        code: "custom",
+        path: ["sessionId"],
+        message: "session requires a target session and expectedAuthorityEpoch"
+      });
+    }
+  })
+);
+var HostMcpDelegationGrant = /* @__PURE__ */ defineSchema(
+  () => HostMcpGrantRequest.superRefine((value, context) => {
+    if (Boolean(value.sessionId) !== (value.expectedAuthorityEpoch != null) || value.expectedAuthorityEpoch != null && !Number.isSafeInteger(value.expectedAuthorityEpoch)) {
+      context.addIssue({
+        code: "custom",
+        message: "Host session grants require a matching safe authority epoch"
+      });
+    }
+  })
+);
+var IssueHostMcpDelegationRequest = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    operationId: z.string().uuid(),
+    bindingId: z.string().uuid(),
+    expectedBindingGeneration: z.number().int().positive().safe(),
+    grant: HostMcpDelegationGrant
+  }).strict()
+);
+var HostMcpDelegation = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    id: z.string().uuid(),
+    accountId: z.string().uuid(),
+    workspaceId: z.string().uuid(),
+    ownerSubjectId: HostMcpOwnerSubject,
+    ownerAuthorizationRevision: z.number().int().positive().safe(),
+    bindingId: z.string().uuid(),
+    bindingGeneration: z.number().int().positive().safe(),
+    grant: HostMcpDelegationGrant,
+    generation: z.number().int().positive().safe(),
+    status: z.enum(["active", "revoked"]),
+    createdAt: z.string().datetime({ offset: true }),
+    revokedAt: z.string().datetime({ offset: true }).nullable()
+  }).strict()
+);
+var HostMcpAcceptedAuthority = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    version: z.literal(1),
+    accountId: z.string().uuid(),
+    workspaceId: z.string().uuid(),
+    targetSessionId: z.string().uuid(),
+    targetSessionVisibility: SessionTenancyVisibility,
+    targetSessionAuthorityEpoch: z.number().int().positive().safe(),
+    acceptedWork: ConnectionUseAuthoritySnapshot.shape.acceptedWork,
+    bindingId: z.string().uuid(),
+    bindingGeneration: z.number().int().positive().safe(),
+    definition: HostMcpBindingDefinition,
+    ownerSubjectId: HostMcpOwnerSubject,
+    ownerOrganizationMembershipId: z.string().uuid(),
+    ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),
+    delegationId: z.string().uuid(),
+    delegationGeneration: z.number().int().positive().safe(),
+    scheduledOrigin: z.object({
+      taskId: z.string().uuid(),
+      taskAuthorityRevision: z.number().int().positive().safe(),
+      runId: z.string().uuid()
+    }).strict().optional(),
+    source: z.discriminatedUnion("kind", [
+      z.object({ kind: z.literal("direct") }).strict(),
+      z.object({ kind: z.literal("scheduled_task") }).strict(),
+      z.object({
+        kind: z.literal("child_turn"),
+        sessionId: z.string().uuid(),
+        turnId: z.string().uuid()
+      }).strict(),
+      z.object({
+        kind: z.literal("inherited_turn"),
+        sessionId: z.string().uuid(),
+        turnId: z.string().uuid()
+      }).strict()
+    ])
+  }).strict().superRefine((value, context) => {
+    if (value.source.kind === "direct" && value.scheduledOrigin || value.source.kind === "scheduled_task" && (!value.scheduledOrigin || value.acceptedWork.kind !== "scheduled_task" || value.scheduledOrigin.taskId !== value.acceptedWork.taskId || value.scheduledOrigin.runId !== value.acceptedWork.runId || value.scheduledOrigin.taskAuthorityRevision !== value.acceptedWork.taskAuthorityRevision))
+      context.addIssue({
+        code: "custom",
+        message: "Scheduled host authority must retain its exact run origin"
+      });
+    if (value.acceptedWork.kind === "turn" && value.source.kind === "inherited_turn" && value.acceptedWork.turnId === value.source.turnId) {
+      context.addIssue({
+        code: "custom",
+        path: ["source"],
+        message: "Accepted work cannot inherit from itself"
+      });
+    }
+    if (value.acceptedWork.kind === "scheduled_task" && !Number.isSafeInteger(value.acceptedWork.taskAuthorityRevision)) {
+      context.addIssue({
+        code: "custom",
+        path: ["acceptedWork"],
+        message: "Task authority revision must be a safe integer"
+      });
+    }
+    if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65536) {
+      context.addIssue({ code: "custom", message: "Host accepted authority exceeds 64 KiB" });
+    }
+  })
+);
+var HostMcpTaskAuthority = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    version: z.literal(1),
+    accountId: z.string().uuid(),
+    workspaceId: z.string().uuid(),
     taskId: z.string().uuid(),
     taskAuthorityRevision: z.number().int().positive().safe(),
-    runId: z.string().uuid()
-  }).strict().optional(),
-  source: z.discriminatedUnion("kind", [
-    z.object({ kind: z.literal("direct") }).strict(),
-    z.object({ kind: z.literal("scheduled_task") }).strict(),
-    z.object({
-      kind: z.literal("child_turn"),
-      sessionId: z.string().uuid(),
-      turnId: z.string().uuid()
-    }).strict(),
-    z.object({
-      kind: z.literal("inherited_turn"),
-      sessionId: z.string().uuid(),
-      turnId: z.string().uuid()
-    }).strict()
-  ])
-}).strict().superRefine((value, context) => {
-  if (value.source.kind === "direct" && value.scheduledOrigin || value.source.kind === "scheduled_task" && (!value.scheduledOrigin || value.acceptedWork.kind !== "scheduled_task" || value.scheduledOrigin.taskId !== value.acceptedWork.taskId || value.scheduledOrigin.runId !== value.acceptedWork.runId || value.scheduledOrigin.taskAuthorityRevision !== value.acceptedWork.taskAuthorityRevision))
-    context.addIssue({
-      code: "custom",
-      message: "Scheduled host authority must retain its exact run origin"
-    });
-  if (value.acceptedWork.kind === "turn" && value.source.kind === "inherited_turn" && value.acceptedWork.turnId === value.source.turnId) {
-    context.addIssue({
-      code: "custom",
-      path: ["source"],
-      message: "Accepted work cannot inherit from itself"
-    });
-  }
-  if (value.acceptedWork.kind === "scheduled_task" && !Number.isSafeInteger(value.acceptedWork.taskAuthorityRevision)) {
-    context.addIssue({
-      code: "custom",
-      path: ["acceptedWork"],
-      message: "Task authority revision must be a safe integer"
-    });
-  }
-  if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65536) {
-    context.addIssue({ code: "custom", message: "Host accepted authority exceeds 64 KiB" });
-  }
-});
-var HostMcpTaskAuthority = z.object({
-  version: z.literal(1),
-  accountId: z.string().uuid(),
-  workspaceId: z.string().uuid(),
-  taskId: z.string().uuid(),
-  taskAuthorityRevision: z.number().int().positive().safe(),
-  taskExecutionDigest: z.string().regex(/^[0-9a-f]{64}$/),
-  ownerSubjectId: HostMcpOwnerSubject,
-  ownerOrganizationMembershipId: z.string().uuid(),
-  ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),
-  bindingId: z.string().uuid(),
-  bindingGeneration: z.number().int().positive().safe(),
-  delegationId: z.string().uuid(),
-  delegationGeneration: z.number().int().positive().safe(),
-  definition: HostMcpBindingDefinition,
-  context: SessionTenancyVisibility
-}).strict();
+    taskExecutionDigest: z.string().regex(/^[0-9a-f]{64}$/),
+    ownerSubjectId: HostMcpOwnerSubject,
+    ownerOrganizationMembershipId: z.string().uuid(),
+    ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),
+    bindingId: z.string().uuid(),
+    bindingGeneration: z.number().int().positive().safe(),
+    delegationId: z.string().uuid(),
+    delegationGeneration: z.number().int().positive().safe(),
+    definition: HostMcpBindingDefinition,
+    context: SessionTenancyVisibility
+  }).strict()
+);
 export {
   CreateHostMcpBindingRequest,
   HostMcpAcceptedAuthority,