@opengeni/contracts 4.1.0 → 5.0.0

package/dist/{chunk-O5LEQHDM.js → chunk-ENJTPHKP.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-NVJMJWLL.js";
 import {
   editableArtifactCodecFor
-} from "./chunk-5LYFSZ7O.js";
+} from "./chunk-YJEOWXOE.js";
 import {
   DOCUMENT_ARTIFACT_COMMAND_MAX_COMMANDS,
   DOCUMENT_ARTIFACT_MAX_STRUCTURAL_COUNTER
@@ -380,4 +380,4 @@ export {
   decodeEditableArtifactSerializedCommit,
   assertCanonicalEditableArtifactSerializedCommit
 };
-//# sourceMappingURL=chunk-O5LEQHDM.js.map
+//# sourceMappingURL=chunk-ENJTPHKP.js.map

package/dist/chunk-KUCZDFJ5.js

@@ -0,0 +1,186 @@
+import {
+  ConnectionKind,
+  SessionTenancyVisibility
+} from "./chunk-CM7E7PFV.js";
+
+// src/connection-authority.ts
+import { z } from "zod";
+var ConnectionAuthoritySelectionSource = z.enum(["explicit_workspace", "sender"]);
+var ConnectionUseSelectionSource = z.string().min(1).max(128).regex(/^[a-z0-9](?:[a-z0-9._:-]*[a-z0-9])?$/u);
+var AcceptedConnectionWork = z.discriminatedUnion("kind", [
+  z.object({
+    kind: z.literal("turn"),
+    turnId: z.string().uuid()
+  }).strict(),
+  z.object({
+    kind: z.literal("scheduled_task"),
+    taskId: z.string().uuid(),
+    taskAuthorityRevision: z.number().int().positive(),
+    runId: z.string().uuid()
+  }).strict()
+]);
+var ConnectionUseAuthoritySnapshot = z.object({
+  organizationId: z.string().uuid(),
+  originWorkspaceId: z.string().uuid(),
+  targetWorkspaceId: z.string().uuid(),
+  targetSessionId: z.string().uuid(),
+  targetSessionVisibility: SessionTenancyVisibility,
+  targetSessionAuthorityEpoch: z.number().int().positive(),
+  acceptedWork: AcceptedConnectionWork,
+  connectionId: z.string().uuid(),
+  connectionGeneration: z.number().int().positive(),
+  connectionStatus: z.literal("active"),
+  providerDomain: z.string().min(1).max(2048),
+  connectionKind: ConnectionKind,
+  scope: z.enum(["workspace", "user"]),
+  ownerSubjectId: z.string().min(1).max(512).nullable(),
+  ownerOrganizationMembershipId: z.string().uuid().nullable(),
+  ownerMembershipAuthorizationRevision: z.number().int().positive().nullable().default(null),
+  authoritySource: ConnectionAuthoritySelectionSource,
+  selectionSources: z.array(ConnectionUseSelectionSource).min(1).max(128),
+  userDelegation: z.null()
+}).strict().superRefine((value, context) => {
+  const ownedBySubject = value.scope !== "workspace";
+  const delegated = value.scope === "user";
+  if (ownedBySubject !== (value.ownerSubjectId !== null)) {
+    context.addIssue({
+      code: "custom",
+      path: ["ownerSubjectId"],
+      message: "personal connections retain an owner subject"
+    });
+  }
+  if (delegated !== (value.ownerOrganizationMembershipId !== null)) {
+    context.addIssue({
+      code: "custom",
+      path: ["ownerOrganizationMembershipId"],
+      message: "only user connections retain an owner membership"
+    });
+  }
+  if (delegated !== (value.ownerMembershipAuthorizationRevision !== null)) {
+    context.addIssue({
+      code: "custom",
+      path: ["ownerMembershipAuthorizationRevision"],
+      message: "only user connections retain an owner membership revision"
+    });
+  }
+  if (delegated && value.authoritySource !== "sender") {
+    context.addIssue({
+      code: "custom",
+      path: ["authoritySource"],
+      message: "user connections require authenticated sender provenance"
+    });
+  }
+  if (!delegated && value.authoritySource === "sender") {
+    context.addIssue({
+      code: "custom",
+      path: ["authoritySource"],
+      message: "workspace connections cannot claim sender provenance"
+    });
+  }
+  if (!delegated && value.originWorkspaceId !== value.targetWorkspaceId) {
+    context.addIssue({
+      code: "custom",
+      path: ["originWorkspaceId"],
+      message: "workspace connections must be owned by the target workspace"
+    });
+  }
+});
+var ConnectionUseDenialReason = z.enum([
+  "tenant_mismatch",
+  "workspace_access_inactive",
+  "session_inactive",
+  "session_identity_changed",
+  "session_visibility_changed",
+  "session_authority_epoch_changed",
+  "accepted_attempt_authority_required",
+  "accepted_snapshot_digest_changed",
+  "connection_missing",
+  "connection_identity_changed",
+  "connection_generation_changed",
+  "connection_status_inactive",
+  "connection_owner_changed",
+  "owner_membership_inactive",
+  "authority_missing",
+  "authority_identity_changed",
+  "authority_generation_changed",
+  "authority_status_inactive",
+  "grant_missing",
+  "grant_identity_changed",
+  "grant_generation_changed",
+  "grant_status_inactive",
+  "grant_expired",
+  "grant_already_consumed"
+]);
+var ConnectionUseAttributionFields = z.object({
+  organizationId: z.string().uuid(),
+  workspaceId: z.string().uuid(),
+  sessionId: z.string().uuid(),
+  connectionId: z.string().uuid(),
+  connectionGeneration: z.number().int().positive(),
+  scope: z.enum(["workspace", "user", "legacy_user"]),
+  ownerSubjectId: z.string().min(1).max(512).nullable(),
+  authorityId: z.string().uuid().nullable(),
+  grantId: z.string().uuid().nullable()
+}).strict();
+function refineConnectionUseAttribution(value, context) {
+  const personal = value.scope !== "workspace";
+  for (const field of ["ownerSubjectId"]) {
+    if (personal !== (value[field] !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: [field],
+        message: personal ? `personal attribution requires ${field}` : `workspace attribution cannot carry ${field}`
+      });
+    }
+  }
+  const owned = value.scope === "user";
+  for (const field of ["authorityId"]) {
+    if (owned !== (value[field] !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: [field],
+        message: owned ? `personal attribution requires ${field}` : `non-personal attribution cannot carry ${field}`
+      });
+    }
+  }
+  if (!owned && value.grantId !== null) {
+    context.addIssue({
+      code: "custom",
+      path: ["grantId"],
+      message: "only historical personal attribution can carry a grant"
+    });
+  }
+}
+var ConnectionUseAttribution = ConnectionUseAttributionFields.extend({
+  scope: z.enum(["workspace", "user"]),
+  grantId: z.null()
+}).superRefine(refineConnectionUseAttribution);
+var ConnectionUseAuditFact = ConnectionUseAttributionFields.extend({
+  outcome: z.enum(["authorized", "denied"]),
+  denialReason: ConnectionUseDenialReason.nullable(),
+  occurredAt: z.string().datetime({ offset: true })
+}).superRefine((value, context) => {
+  refineConnectionUseAttribution(value, context);
+  if (value.outcome === "denied" !== (value.denialReason !== null)) {
+    context.addIssue({
+      code: "custom",
+      path: ["denialReason"],
+      message: "only denied connection use carries a denial reason"
+    });
+  }
+});
+var ConnectionUseAuthorizationResult = z.discriminatedUnion("status", [
+  z.object({ status: z.literal("authorized"), attribution: ConnectionUseAttribution }).strict(),
+  z.object({ status: z.literal("denied"), reason: ConnectionUseDenialReason }).strict()
+]);
+
+export {
+  ConnectionAuthoritySelectionSource,
+  ConnectionUseSelectionSource,
+  ConnectionUseAuthoritySnapshot,
+  ConnectionUseDenialReason,
+  ConnectionUseAttribution,
+  ConnectionUseAuditFact,
+  ConnectionUseAuthorizationResult
+};
+//# sourceMappingURL=chunk-KUCZDFJ5.js.map

package/dist/chunk-KUCZDFJ5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connection-authority.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { ConnectionKind, SessionTenancyVisibility } from \"./index\";\n\nexport const ConnectionAuthoritySelectionSource = z.enum([\"explicit_workspace\", \"sender\"]);\nexport type ConnectionAuthoritySelectionSource = z.infer<typeof ConnectionAuthoritySelectionSource>;\n\nexport const ConnectionUseSelectionSource = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(/^[a-z0-9](?:[a-z0-9._:-]*[a-z0-9])?$/u);\nexport type ConnectionUseSelectionSource = z.infer<typeof ConnectionUseSelectionSource>;\n\nconst AcceptedConnectionWork = z.discriminatedUnion(\"kind\", [\n  z\n    .object({\n      kind: z.literal(\"turn\"),\n      turnId: z.string().uuid(),\n    })\n    .strict(),\n  z\n    .object({\n      kind: z.literal(\"scheduled_task\"),\n      taskId: z.string().uuid(),\n      taskAuthorityRevision: z.number().int().positive(),\n      runId: z.string().uuid(),\n    })\n    .strict(),\n]);\n\n/**\n * Internal, credential-free authority frozen when work is accepted. Personal\n * owner identity is retained only for live authorization and usage/audit\n * attribution; it is never part of the public delegation envelope.\n */\nexport const ConnectionUseAuthoritySnapshot = z\n  .object({\n    organizationId: z.string().uuid(),\n    originWorkspaceId: z.string().uuid(),\n    targetWorkspaceId: z.string().uuid(),\n    targetSessionId: z.string().uuid(),\n    targetSessionVisibility: SessionTenancyVisibility,\n    targetSessionAuthorityEpoch: z.number().int().positive(),\n    acceptedWork: AcceptedConnectionWork,\n    connectionId: z.string().uuid(),\n    connectionGeneration: z.number().int().positive(),\n    connectionStatus: z.literal(\"active\"),\n    providerDomain: z.string().min(1).max(2048),\n    connectionKind: ConnectionKind,\n    scope: z.enum([\"workspace\", \"user\"]),\n    ownerSubjectId: z.string().min(1).max(512).nullable(),\n    ownerOrganizationMembershipId: z.string().uuid().nullable(),\n    ownerMembershipAuthorizationRevision: z.number().int().positive().nullable().default(null),\n    authoritySource: ConnectionAuthoritySelectionSource,\n    selectionSources: z.array(ConnectionUseSelectionSource).min(1).max(128),\n    userDelegation: z.null(),\n  })\n  .strict()\n  .superRefine((value, context) => {\n    const ownedBySubject = value.scope !== \"workspace\";\n    const delegated = value.scope === \"user\";\n    if (ownedBySubject !== (value.ownerSubjectId !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"ownerSubjectId\"],\n        message: \"personal connections retain an owner subject\",\n      });\n    }\n    if (delegated !== (value.ownerOrganizationMembershipId !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"ownerOrganizationMembershipId\"],\n        message: \"only user connections retain an owner membership\",\n      });\n    }\n    if (delegated !== (value.ownerMembershipAuthorizationRevision !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"ownerMembershipAuthorizationRevision\"],\n        message: \"only user connections retain an owner membership revision\",\n      });\n    }\n    if (delegated && value.authoritySource !== \"sender\") {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"authoritySource\"],\n        message: \"user connections require authenticated sender provenance\",\n      });\n    }\n    if (!delegated && value.authoritySource === \"sender\") {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"authoritySource\"],\n        message: \"workspace connections cannot claim sender provenance\",\n      });\n    }\n    if (!delegated && value.originWorkspaceId !== value.targetWorkspaceId) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"originWorkspaceId\"],\n        message: \"workspace connections must be owned by the target workspace\",\n      });\n    }\n  });\nexport type ConnectionUseAuthoritySnapshot = z.infer<typeof ConnectionUseAuthoritySnapshot>;\n\nexport const ConnectionUseDenialReason = z.enum([\n  \"tenant_mismatch\",\n  \"workspace_access_inactive\",\n  \"session_inactive\",\n  \"session_identity_changed\",\n  \"session_visibility_changed\",\n  \"session_authority_epoch_changed\",\n  \"accepted_attempt_authority_required\",\n  \"accepted_snapshot_digest_changed\",\n  \"connection_missing\",\n  \"connection_identity_changed\",\n  \"connection_generation_changed\",\n  \"connection_status_inactive\",\n  \"connection_owner_changed\",\n  \"owner_membership_inactive\",\n  \"authority_missing\",\n  \"authority_identity_changed\",\n  \"authority_generation_changed\",\n  \"authority_status_inactive\",\n  \"grant_missing\",\n  \"grant_identity_changed\",\n  \"grant_generation_changed\",\n  \"grant_status_inactive\",\n  \"grant_expired\",\n  \"grant_already_consumed\",\n]);\nexport type ConnectionUseDenialReason = z.infer<typeof ConnectionUseDenialReason>;\n\nconst ConnectionUseAttributionFields = z\n  .object({\n    organizationId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    sessionId: z.string().uuid(),\n    connectionId: z.string().uuid(),\n    connectionGeneration: z.number().int().positive(),\n    scope: z.enum([\"workspace\", \"user\", \"legacy_user\"]),\n    ownerSubjectId: z.string().min(1).max(512).nullable(),\n    authorityId: z.string().uuid().nullable(),\n    grantId: z.string().uuid().nullable(),\n  })\n  .strict();\n\nfunction refineConnectionUseAttribution(\n  value: z.infer<typeof ConnectionUseAttributionFields>,\n  context: z.RefinementCtx,\n): void {\n  const personal = value.scope !== \"workspace\";\n  for (const field of [\"ownerSubjectId\"] as const) {\n    if (personal !== (value[field] !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [field],\n        message: personal\n          ? `personal attribution requires ${field}`\n          : `workspace attribution cannot carry ${field}`,\n      });\n    }\n  }\n  const owned = value.scope === \"user\";\n  for (const field of [\"authorityId\"] as const) {\n    if (owned !== (value[field] !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [field],\n        message: owned\n          ? `personal attribution requires ${field}`\n          : `non-personal attribution cannot carry ${field}`,\n      });\n    }\n  }\n  if (!owned && value.grantId !== null) {\n    context.addIssue({\n      code: \"custom\",\n      path: [\"grantId\"],\n      message: \"only historical personal attribution can carry a grant\",\n    });\n  }\n}\n\n/** Metadata-only attribution emitted after pre-use authorization. */\nexport const ConnectionUseAttribution = ConnectionUseAttributionFields.extend({\n  scope: z.enum([\"workspace\", \"user\"]),\n  grantId: z.null(),\n}).superRefine(refineConnectionUseAttribution);\nexport type ConnectionUseAttribution = z.infer<typeof ConnectionUseAttribution>;\n\nexport const ConnectionUseAuditFact = ConnectionUseAttributionFields.extend({\n  outcome: z.enum([\"authorized\", \"denied\"]),\n  denialReason: ConnectionUseDenialReason.nullable(),\n  occurredAt: z.string().datetime({ offset: true }),\n}).superRefine((value, context) => {\n  refineConnectionUseAttribution(value, context);\n  if ((value.outcome === \"denied\") !== (value.denialReason !== null)) {\n    context.addIssue({\n      code: \"custom\",\n      path: [\"denialReason\"],\n      message: \"only denied connection use carries a denial reason\",\n    });\n  }\n});\nexport type ConnectionUseAuditFact = z.infer<typeof ConnectionUseAuditFact>;\n\nexport const ConnectionUseAuthorizationResult = z.discriminatedUnion(\"status\", [\n  z.object({ status: z.literal(\"authorized\"), attribution: ConnectionUseAttribution }).strict(),\n  z.object({ status: z.literal(\"denied\"), reason: ConnectionUseDenialReason }).strict(),\n]);\nexport type ConnectionUseAuthorizationResult = z.infer<typeof ConnectionUseAuthorizationResult>;\n"],"mappings":";;;;;;AAAA,SAAS,SAAS;AAGX,IAAM,qCAAqC,EAAE,KAAK,CAAC,sBAAsB,QAAQ,CAAC;AAGlF,IAAM,+BAA+B,EACzC,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,uCAAuC;AAGhD,IAAM,yBAAyB,EAAE,mBAAmB,QAAQ;AAAA,EAC1D,EACG,OAAO;AAAA,IACN,MAAM,EAAE,QAAQ,MAAM;AAAA,IACtB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,CAAC,EACA,OAAO;AAAA,EACV,EACG,OAAO;AAAA,IACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,IAChC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IACjD,OAAO,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,CAAC,EACA,OAAO;AACZ,CAAC;AAOM,IAAM,iCAAiC,EAC3C,OAAO;AAAA,EACN,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,mBAAmB,EAAE,OAAO,EAAE,KAAK;AAAA,EACnC,mBAAmB,EAAE,OAAO,EAAE,KAAK;AAAA,EACnC,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,yBAAyB;AAAA,EACzB,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACvD,cAAc;AAAA,EACd,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,QAAQ,QAAQ;AAAA,EACpC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAC1C,gBAAgB;AAAA,EAChB,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,CAAC;AAAA,EACnC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpD,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1D,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACzF,iBAAiB;AAAA,EACjB,kBAAkB,EAAE,MAAM,4BAA4B,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtE,gBAAgB,EAAE,KAAK;AACzB,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,QAAM,iBAAiB,MAAM,UAAU;AACvC,QAAM,YAAY,MAAM,UAAU;AAClC,MAAI,oBAAoB,MAAM,mBAAmB,OAAO;AACtD,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,gBAAgB;AAAA,MACvB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,eAAe,MAAM,kCAAkC,OAAO;AAChE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,+BAA+B;AAAA,MACtC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,eAAe,MAAM,yCAAyC,OAAO;AACvE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,sCAAsC;AAAA,MAC7C,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,aAAa,MAAM,oBAAoB,UAAU;AACnD,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,iBAAiB;AAAA,MACxB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,CAAC,aAAa,MAAM,oBAAoB,UAAU;AACpD,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,iBAAiB;AAAA,MACxB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,CAAC,aAAa,MAAM,sBAAsB,MAAM,mBAAmB;AACrE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,mBAAmB;AAAA,MAC1B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAGI,IAAM,4BAA4B,EAAE,KAAK;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,iCAAiC,EACpC,OAAO;AAAA,EACN,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChD,OAAO,EAAE,KAAK,CAAC,aAAa,QAAQ,aAAa,CAAC;AAAA,EAClD,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AACtC,CAAC,EACA,OAAO;AAEV,SAAS,+BACP,OACA,SACM;AACN,QAAM,WAAW,MAAM,UAAU;AACjC,aAAW,SAAS,CAAC,gBAAgB,GAAY;AAC/C,QAAI,cAAc,MAAM,KAAK,MAAM,OAAO;AACxC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,KAAK;AAAA,QACZ,SAAS,WACL,iCAAiC,KAAK,KACtC,sCAAsC,KAAK;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,UAAU;AAC9B,aAAW,SAAS,CAAC,aAAa,GAAY;AAC5C,QAAI,WAAW,MAAM,KAAK,MAAM,OAAO;AACrC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,KAAK;AAAA,QACZ,SAAS,QACL,iCAAiC,KAAK,KACtC,yCAAyC,KAAK;AAAA,MACpD,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,SAAS,MAAM,YAAY,MAAM;AACpC,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAGO,IAAM,2BAA2B,+BAA+B,OAAO;AAAA,EAC5E,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,CAAC;AAAA,EACnC,SAAS,EAAE,KAAK;AAClB,CAAC,EAAE,YAAY,8BAA8B;AAGtC,IAAM,yBAAyB,+BAA+B,OAAO;AAAA,EAC1E,SAAS,EAAE,KAAK,CAAC,cAAc,QAAQ,CAAC;AAAA,EACxC,cAAc,0BAA0B,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC,EAAE,YAAY,CAAC,OAAO,YAAY;AACjC,iCAA+B,OAAO,OAAO;AAC7C,MAAK,MAAM,YAAY,cAAe,MAAM,iBAAiB,OAAO;AAClE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,cAAc;AAAA,MACrB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAGM,IAAM,mCAAmC,EAAE,mBAAmB,UAAU;AAAA,EAC7E,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,YAAY,GAAG,aAAa,yBAAyB,CAAC,EAAE,OAAO;AAAA,EAC5F,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,QAAQ,GAAG,QAAQ,0BAA0B,CAAC,EAAE,OAAO;AACtF,CAAC;","names":[]}

package/dist/{chunk-5LYFSZ7O.js → chunk-YJEOWXOE.js}

@@ -9,6 +9,13 @@ import {
   encodeSpreadsheetArtifactKernelProjection,
   encodeSpreadsheetArtifactKernelQuery
 } from "./chunk-Y3KNXVTD.js";
+import {
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_BYTES,
+  SPREADSHEET_ARTIFACT_COMMAND_MAX_COMMANDS,
+  assertCanonicalSpreadsheetArtifactCommandBytes,
+  decodeSpreadsheetArtifactCommandBatch,
+  encodeSpreadsheetArtifactCommandBatch
+} from "./chunk-TXTQIYCV.js";
 import {
   PRESENTATION_ARTIFACT_COMMAND_MAX_BYTES,
   PRESENTATION_ARTIFACT_COMMAND_MAX_COMMANDS,
@@ -27,13 +34,6 @@ import {
   encodePresentationArtifactQuery,
   encodePresentationArtifactQueryResponse
 } from "./chunk-D2HKF2EF.js";
-import {
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_BYTES,
-  SPREADSHEET_ARTIFACT_COMMAND_MAX_COMMANDS,
-  assertCanonicalSpreadsheetArtifactCommandBytes,
-  decodeSpreadsheetArtifactCommandBatch,
-  encodeSpreadsheetArtifactCommandBatch
-} from "./chunk-TXTQIYCV.js";
 import {
   DOCUMENT_ARTIFACT_COMMAND_MAX_BYTES,
   DOCUMENT_ARTIFACT_COMMAND_MAX_COMMANDS,
@@ -214,4 +214,4 @@ export {
   currentEditableArtifactCompatibility,
   editableArtifactCodecFor
 };
-//# sourceMappingURL=chunk-5LYFSZ7O.js.map
+//# sourceMappingURL=chunk-YJEOWXOE.js.map

package/dist/company-profile.d.ts

@@ -585,13 +585,14 @@ export declare const CompanyProfileAgentHumanInputPrompt: z.ZodObject<{
         prompt: z.ZodString;
         label: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         helpText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        skillReview: z.ZodOptional<z.ZodObject<{
+        skillReview: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            removalOperationId: z.ZodOptional<z.ZodUUID>;
             sourceOperationId: z.ZodUUID;
             skillId: z.ZodUUID;
             revisionId: z.ZodUUID;
             expectedRevisionId: z.ZodNullable<z.ZodUUID>;
             expectedScopeVersion: z.ZodNumber;
-        }, z.core.$strip>>;
+        }, z.core.$strip>>>;
         options: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             label: z.ZodString;
@@ -666,13 +667,14 @@ export declare const CompanyProfileAgentReviewRequiredReceipt: z.ZodObject<{
             prompt: z.ZodString;
             label: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             helpText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-            skillReview: z.ZodOptional<z.ZodObject<{
+            skillReview: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                removalOperationId: z.ZodOptional<z.ZodUUID>;
                 sourceOperationId: z.ZodUUID;
                 skillId: z.ZodUUID;
                 revisionId: z.ZodUUID;
                 expectedRevisionId: z.ZodNullable<z.ZodUUID>;
                 expectedScopeVersion: z.ZodNumber;
-            }, z.core.$strip>>;
+            }, z.core.$strip>>>;
             options: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -835,13 +837,14 @@ export declare const CompanyProfileAgentProposalReceipt: z.ZodDiscriminatedUnion
             prompt: z.ZodString;
             label: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             helpText: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-            skillReview: z.ZodOptional<z.ZodObject<{
+            skillReview: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                removalOperationId: z.ZodOptional<z.ZodUUID>;
                 sourceOperationId: z.ZodUUID;
                 skillId: z.ZodUUID;
                 revisionId: z.ZodUUID;
                 expectedRevisionId: z.ZodNullable<z.ZodUUID>;
                 expectedScopeVersion: z.ZodNumber;
-            }, z.core.$strip>>;
+            }, z.core.$strip>>>;
             options: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;

package/dist/connect.js

@@ -1,9 +1,9 @@
 import {
   IntegrationInstanceKey,
   IntegrationSource
-} from "./chunk-HR6NB3CA.js";
+} from "./chunk-CM7E7PFV.js";
 import "./chunk-YBW5JSA3.js";
-import "./chunk-O5LEQHDM.js";
+import "./chunk-ENJTPHKP.js";
 import "./chunk-GRG7PHWQ.js";
 import "./chunk-RKX3NQYS.js";
 import "./chunk-MRWYRAS5.js";
@@ -13,10 +13,10 @@ import "./chunk-YRKRZ6OF.js";
 import "./chunk-JUFK3T4Q.js";
 import "./chunk-M5ZGRVIQ.js";
 import "./chunk-BCS7WHCK.js";
-import "./chunk-5LYFSZ7O.js";
+import "./chunk-YJEOWXOE.js";
 import "./chunk-Y3KNXVTD.js";
-import "./chunk-D2HKF2EF.js";
 import "./chunk-TXTQIYCV.js";
+import "./chunk-D2HKF2EF.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-MYBZRDTY.js";
 import "./chunk-PX3VCKAU.js";