@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/chunk-6LAT33BH.js

@@ -0,0 +1,130 @@
+import {
+  string
+} from "./chunk-AQYDZUJV.js";
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/prepared-mcp-setup.ts
+import { z } from "zod";
+var fieldId = /* @__PURE__ */ defineSchema(
+  () => string.regex(/^[A-Za-z][A-Za-z0-9_]{0,63}$/)
+);
+var headerName = /* @__PURE__ */ defineSchema(
+  () => z.string().min(1).max(256).regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/)
+);
+var headerPart = /* @__PURE__ */ defineSchema(
+  () => z.string().max(16384).regex(/^[^\r\n\0]*$/)
+);
+var PreparedMcpSetup = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    name: string.trim().min(1).max(256),
+    endpointUrl: z.string().url().max(2048).refine((value) => {
+      try {
+        const url = new URL(value);
+        return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+      } catch {
+        return false;
+      }
+    }, "Use an HTTPS endpoint without credentials, query parameters, or a fragment"),
+    headers: z.array(
+      z.union([
+        z.object({ name: headerName, value: headerPart.min(1) }).strict(),
+        z.object({
+          name: headerName,
+          secret: fieldId,
+          prefix: headerPart.optional(),
+          suffix: headerPart.optional()
+        }).strict()
+      ])
+    ).min(1).max(32),
+    secretFields: z.array(z.object({ id: fieldId, label: string.trim().min(1).max(256) }).strict()).max(32)
+  }).strict().superRefine((value, context) => {
+    const names = value.headers.map((header) => header.name.toLowerCase());
+    const ids = value.secretFields.map((field) => field.id);
+    if (new Set(names).size !== names.length)
+      context.addIssue({
+        code: "custom",
+        path: ["headers"],
+        message: "Header names must be unique"
+      });
+    if (new Set(ids).size !== ids.length)
+      context.addIssue({
+        code: "custom",
+        path: ["secretFields"],
+        message: "Secret field IDs must be unique"
+      });
+    const used = new Set(
+      value.headers.flatMap((header) => "secret" in header ? [header.secret] : [])
+    );
+    if (used.size !== ids.length || ids.some((id) => !used.has(id)))
+      context.addIssue({
+        code: "custom",
+        path: ["secretFields"],
+        message: "Declare exactly the secret fields used by the headers"
+      });
+    for (const [index, header] of value.headers.entries()) {
+      if ("value" in header && ["authorization", "proxy-authorization", "cookie", "x-api-key", "api-key"].includes(
+        header.name.toLowerCase()
+      ))
+        context.addIssue({
+          code: "custom",
+          path: ["headers", index],
+          message: "Credential headers must reference a protected secret field"
+        });
+    }
+  })
+);
+var CustomMcpSetupRequest = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    kind: z.literal("mcp"),
+    name: string.trim().min(1).max(256),
+    endpointUrl: z.string().url().max(2048).refine((value) => {
+      try {
+        const url = new URL(value);
+        return url.protocol === "https:" && !url.username && !url.password && !url.hash && !url.search;
+      } catch {
+        return false;
+      }
+    }),
+    rationale: string.trim().min(1).max(2e3),
+    ownership: z.enum(["personal", "workspace"]).optional(),
+    mcpSetup: PreparedMcpSetup.optional()
+  }).strict().superRefine((value, context) => {
+    if (Boolean(value.ownership) !== Boolean(value.mcpSetup))
+      context.addIssue({ code: "custom", message: "Prepared setup requires explicit ownership" });
+    if (value.mcpSetup && (value.name !== value.mcpSetup.name || value.endpointUrl !== value.mcpSetup.endpointUrl))
+      context.addIssue({
+        code: "custom",
+        message: "Prepared setup must match the displayed server"
+      });
+  })
+);
+function preparedMcpHeaders(configuration, values) {
+  const setup = PreparedMcpSetup.parse(configuration);
+  const supplied = Object.keys(values);
+  if (supplied.length !== setup.secretFields.length || setup.secretFields.some((field) => !Object.hasOwn(values, field.id)) || supplied.some((key) => {
+    const value = values[key];
+    return typeof value !== "string" || value.length === 0 || value.length > 16384 || /[\r\n\0]/.test(value);
+  }))
+    throw new Error("Supply exactly the requested secret fields");
+  const headers = {};
+  for (const header of setup.headers) {
+    const value = "value" in header ? header.value : `${header.prefix ?? ""}${values[header.secret]}${header.suffix ?? ""}`;
+    if (value.length > 16384) throw new Error("Prepared credential header is too long");
+    Object.defineProperty(headers, header.name, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  }
+  return headers;
+}
+
+export {
+  PreparedMcpSetup,
+  CustomMcpSetupRequest,
+  preparedMcpHeaders
+};
+//# sourceMappingURL=chunk-6LAT33BH.js.map

package/dist/chunk-6LAT33BH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prepared-mcp-setup.ts"],"sourcesContent":["import * as primitives from \"./primitives\";\nimport { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nconst fieldId = /* @__PURE__ */ defineSchema(() =>\n  primitives.string.regex(/^[A-Za-z][A-Za-z0-9_]{0,63}$/),\n);\nconst headerName = /* @__PURE__ */ defineSchema(() =>\n  z\n    .string()\n    .min(1)\n    .max(256)\n    .regex(/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/),\n);\nconst headerPart = /* @__PURE__ */ defineSchema(() =>\n  z\n    .string()\n    .max(16_384)\n    .regex(/^[^\\r\\n\\0]*$/),\n);\n\n/** Configuration is safe to retain; secret values enter only the protected\n * Connect credential request, never this model-visible setup description. */\nexport const PreparedMcpSetup = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      name: primitives.string.trim().min(1).max(256),\n      endpointUrl: z\n        .string()\n        .url()\n        .max(2048)\n        .refine((value) => {\n          try {\n            const url = new URL(value);\n            return (\n              url.protocol === \"https:\" &&\n              !url.username &&\n              !url.password &&\n              !url.search &&\n              !url.hash\n            );\n          } catch {\n            return false;\n          }\n        }, \"Use an HTTPS endpoint without credentials, query parameters, or a fragment\"),\n      headers: z\n        .array(\n          z.union([\n            z.object({ name: headerName, value: headerPart.min(1) }).strict(),\n            z\n              .object({\n                name: headerName,\n                secret: fieldId,\n                prefix: headerPart.optional(),\n                suffix: headerPart.optional(),\n              })\n              .strict(),\n          ]),\n        )\n        .min(1)\n        .max(32),\n      secretFields: z\n        .array(z.object({ id: fieldId, label: primitives.string.trim().min(1).max(256) }).strict())\n        .max(32),\n    })\n    .strict()\n    .superRefine((value, context) => {\n      const names = value.headers.map((header) => header.name.toLowerCase());\n      const ids = value.secretFields.map((field) => field.id);\n      if (new Set(names).size !== names.length)\n        context.addIssue({\n          code: \"custom\",\n          path: [\"headers\"],\n          message: \"Header names must be unique\",\n        });\n      if (new Set(ids).size !== ids.length)\n        context.addIssue({\n          code: \"custom\",\n          path: [\"secretFields\"],\n          message: \"Secret field IDs must be unique\",\n        });\n      const used = new Set(\n        value.headers.flatMap((header) => (\"secret\" in header ? [header.secret] : [])),\n      );\n      if (used.size !== ids.length || ids.some((id) => !used.has(id)))\n        context.addIssue({\n          code: \"custom\",\n          path: [\"secretFields\"],\n          message: \"Declare exactly the secret fields used by the headers\",\n        });\n      for (const [index, header] of value.headers.entries()) {\n        if (\n          \"value\" in header &&\n          [\"authorization\", \"proxy-authorization\", \"cookie\", \"x-api-key\", \"api-key\"].includes(\n            header.name.toLowerCase(),\n          )\n        )\n          context.addIssue({\n            code: \"custom\",\n            path: [\"headers\", index],\n            message: \"Credential headers must reference a protected secret field\",\n          });\n      }\n    }),\n);\nexport type PreparedMcpSetup = z.infer<typeof PreparedMcpSetup>;\n\n/** A missing-key proposal retains configuration only. Ownership is explicit\n * and the displayed identity must equal the destination actually configured. */\nexport const CustomMcpSetupRequest = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      kind: z.literal(\"mcp\"),\n      name: primitives.string.trim().min(1).max(256),\n      endpointUrl: z\n        .string()\n        .url()\n        .max(2048)\n        .refine((value) => {\n          try {\n            const url = new URL(value);\n            return (\n              url.protocol === \"https:\" &&\n              !url.username &&\n              !url.password &&\n              !url.hash &&\n              !url.search\n            );\n          } catch {\n            return false;\n          }\n        }),\n      rationale: primitives.string.trim().min(1).max(2000),\n      ownership: z.enum([\"personal\", \"workspace\"]).optional(),\n      mcpSetup: PreparedMcpSetup.optional(),\n    })\n    .strict()\n    .superRefine((value, context) => {\n      if (Boolean(value.ownership) !== Boolean(value.mcpSetup))\n        context.addIssue({ code: \"custom\", message: \"Prepared setup requires explicit ownership\" });\n      if (\n        value.mcpSetup &&\n        (value.name !== value.mcpSetup.name || value.endpointUrl !== value.mcpSetup.endpointUrl)\n      )\n        context.addIssue({\n          code: \"custom\",\n          message: \"Prepared setup must match the displayed server\",\n        });\n    }),\n);\nexport type CustomMcpSetupRequest = z.infer<typeof CustomMcpSetupRequest>;\n\n/** Values are intentionally accepted separately. Errors name neither supplied\n * values nor undeclared input keys, which may themselves contain credentials. */\nexport function preparedMcpHeaders(\n  configuration: PreparedMcpSetup,\n  values: Readonly<Record<string, string>>,\n): Record<string, string> {\n  const setup = PreparedMcpSetup.parse(configuration);\n  const supplied = Object.keys(values);\n  if (\n    supplied.length !== setup.secretFields.length ||\n    setup.secretFields.some((field) => !Object.hasOwn(values, field.id)) ||\n    supplied.some((key) => {\n      const value = values[key];\n      return (\n        typeof value !== \"string\" ||\n        value.length === 0 ||\n        value.length > 16_384 ||\n        /[\\r\\n\\0]/.test(value)\n      );\n    })\n  )\n    throw new Error(\"Supply exactly the requested secret fields\");\n  const headers: Record<string, string> = {};\n  for (const header of setup.headers) {\n    const value =\n      \"value\" in header\n        ? header.value\n        : `${header.prefix ?? \"\"}${values[header.secret]}${header.suffix ?? \"\"}`;\n    if (value.length > 16_384) throw new Error(\"Prepared credential header is too long\");\n    Object.defineProperty(headers, header.name, {\n      value,\n      enumerable: true,\n      configurable: true,\n      writable: true,\n    });\n  }\n  return headers;\n}\n"],"mappings":";;;;;;;;AAEA,SAAS,SAAS;AAElB,IAAM,UAA0B;AAAA,EAAa,MAChC,OAAO,MAAM,8BAA8B;AACxD;AACA,IAAM,aAA6B;AAAA,EAAa,MAC9C,EACG,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,+BAA+B;AAC1C;AACA,IAAM,aAA6B;AAAA,EAAa,MAC9C,EACG,OAAO,EACP,IAAI,KAAM,EACV,MAAM,cAAc;AACzB;AAIO,IAAM,mBAAmC;AAAA,EAAa,MAC3D,EACG,OAAO;AAAA,IACN,MAAiB,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,aAAa,EACV,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,OAAO,CAAC,UAAU;AACjB,UAAI;AACF,cAAM,MAAM,IAAI,IAAI,KAAK;AACzB,eACE,IAAI,aAAa,YACjB,CAAC,IAAI,YACL,CAAC,IAAI,YACL,CAAC,IAAI,UACL,CAAC,IAAI;AAAA,MAET,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF,GAAG,4EAA4E;AAAA,IACjF,SAAS,EACN;AAAA,MACC,EAAE,MAAM;AAAA,QACN,EAAE,OAAO,EAAE,MAAM,YAAY,OAAO,WAAW,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO;AAAA,QAChE,EACG,OAAO;AAAA,UACN,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ,WAAW,SAAS;AAAA,UAC5B,QAAQ,WAAW,SAAS;AAAA,QAC9B,CAAC,EACA,OAAO;AAAA,MACZ,CAAC;AAAA,IACH,EACC,IAAI,CAAC,EACL,IAAI,EAAE;AAAA,IACT,cAAc,EACX,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,OAAkB,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,EACzF,IAAI,EAAE;AAAA,EACX,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,UAAM,QAAQ,MAAM,QAAQ,IAAI,CAAC,WAAW,OAAO,KAAK,YAAY,CAAC;AACrE,UAAM,MAAM,MAAM,aAAa,IAAI,CAAC,UAAU,MAAM,EAAE;AACtD,QAAI,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM;AAChC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,SAAS;AAAA,QAChB,SAAS;AAAA,MACX,CAAC;AACH,QAAI,IAAI,IAAI,GAAG,EAAE,SAAS,IAAI;AAC5B,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,cAAc;AAAA,QACrB,SAAS;AAAA,MACX,CAAC;AACH,UAAM,OAAO,IAAI;AAAA,MACf,MAAM,QAAQ,QAAQ,CAAC,WAAY,YAAY,SAAS,CAAC,OAAO,MAAM,IAAI,CAAC,CAAE;AAAA,IAC/E;AACA,QAAI,KAAK,SAAS,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;AAC5D,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,cAAc;AAAA,QACrB,SAAS;AAAA,MACX,CAAC;AACH,eAAW,CAAC,OAAO,MAAM,KAAK,MAAM,QAAQ,QAAQ,GAAG;AACrD,UACE,WAAW,UACX,CAAC,iBAAiB,uBAAuB,UAAU,aAAa,SAAS,EAAE;AAAA,QACzE,OAAO,KAAK,YAAY;AAAA,MAC1B;AAEA,gBAAQ,SAAS;AAAA,UACf,MAAM;AAAA,UACN,MAAM,CAAC,WAAW,KAAK;AAAA,UACvB,SAAS;AAAA,QACX,CAAC;AAAA,IACL;AAAA,EACF,CAAC;AACL;AAKO,IAAM,wBAAwC;AAAA,EAAa,MAChE,EACG,OAAO;AAAA,IACN,MAAM,EAAE,QAAQ,KAAK;AAAA,IACrB,MAAiB,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IAC7C,aAAa,EACV,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,OAAO,CAAC,UAAU;AACjB,UAAI;AACF,cAAM,MAAM,IAAI,IAAI,KAAK;AACzB,eACE,IAAI,aAAa,YACjB,CAAC,IAAI,YACL,CAAC,IAAI,YACL,CAAC,IAAI,QACL,CAAC,IAAI;AAAA,MAET,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF,CAAC;AAAA,IACH,WAAsB,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI;AAAA,IACnD,WAAW,EAAE,KAAK,CAAC,YAAY,WAAW,CAAC,EAAE,SAAS;AAAA,IACtD,UAAU,iBAAiB,SAAS;AAAA,EACtC,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,QAAI,QAAQ,MAAM,SAAS,MAAM,QAAQ,MAAM,QAAQ;AACrD,cAAQ,SAAS,EAAE,MAAM,UAAU,SAAS,6CAA6C,CAAC;AAC5F,QACE,MAAM,aACL,MAAM,SAAS,MAAM,SAAS,QAAQ,MAAM,gBAAgB,MAAM,SAAS;AAE5E,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,EACL,CAAC;AACL;AAKO,SAAS,mBACd,eACA,QACwB;AACxB,QAAM,QAAQ,iBAAiB,MAAM,aAAa;AAClD,QAAM,WAAW,OAAO,KAAK,MAAM;AACnC,MACE,SAAS,WAAW,MAAM,aAAa,UACvC,MAAM,aAAa,KAAK,CAAC,UAAU,CAAC,OAAO,OAAO,QAAQ,MAAM,EAAE,CAAC,KACnE,SAAS,KAAK,CAAC,QAAQ;AACrB,UAAM,QAAQ,OAAO,GAAG;AACxB,WACE,OAAO,UAAU,YACjB,MAAM,WAAW,KACjB,MAAM,SAAS,SACf,WAAW,KAAK,KAAK;AAAA,EAEzB,CAAC;AAED,UAAM,IAAI,MAAM,4CAA4C;AAC9D,QAAM,UAAkC,CAAC;AACzC,aAAW,UAAU,MAAM,SAAS;AAClC,UAAM,QACJ,WAAW,SACP,OAAO,QACP,GAAG,OAAO,UAAU,EAAE,GAAG,OAAO,OAAO,MAAM,CAAC,GAAG,OAAO,UAAU,EAAE;AAC1E,QAAI,MAAM,SAAS,MAAQ,OAAM,IAAI,MAAM,wCAAwC;AACnF,WAAO,eAAe,SAAS,OAAO,MAAM;AAAA,MAC1C;AAAA,MACA,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-7272KVWZ.js

@@ -0,0 +1,60 @@
+// src/session-usage-limit-refusal.ts
+var SESSION_USAGE_LIMIT_SEGMENT = "session_usage_limit";
+var SESSION_USAGE_LIMIT_GOAL_PAUSED_REASON = "session_usage_limit";
+var BASIS = "model_api_equivalent_v1";
+var MAX_LIMIT_MICROS = 1e7 * 1e6;
+var MESSAGE_MAX_UTF8_BYTES = 1024;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function micros(value, max = Number.MAX_SAFE_INTEGER) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
+}
+function boundedMessage(value) {
+  const normalized = value.slice(0, MESSAGE_MAX_UTF8_BYTES * 2).replace(/[\u0000-\u001f\u007f]+/g, " ").trim();
+  const bytes = new TextEncoder().encode(normalized);
+  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);
+  while (end > 0 && end < bytes.length && (bytes[end] & 192) === 128) end -= 1;
+  return new TextDecoder().decode(bytes.slice(0, end)).trim();
+}
+function parseSessionUsageLimitReachedRefusal(value) {
+  const outer = record(value);
+  if (!outer) return null;
+  const source = record(outer.sessionUsageLimit) ?? outer;
+  if (source.code !== "session_usage_limit_reached") return null;
+  const fields = record(source.details) ?? source;
+  if (fields.basis !== BASIS || typeof fields.rootSessionId !== "string" || !UUID.test(fields.rootSessionId) || !micros(fields.limitMicros, MAX_LIMIT_MICROS) || !micros(fields.usedMicros)) {
+    return null;
+  }
+  const refusal = {
+    code: "session_usage_limit_reached",
+    basis: BASIS,
+    rootSessionId: fields.rootSessionId.toLowerCase(),
+    limitMicros: fields.limitMicros,
+    usedMicros: fields.usedMicros,
+    message: ""
+  };
+  const message = typeof source.message === "string" ? boundedMessage(source.message) : "";
+  return { ...refusal, message: message || sessionUsageLimitReachedMessage(refusal) };
+}
+function formatSessionUsageMicros(value) {
+  if (value > 0 && value < 1e4) return "<$0.01";
+  const dollars = value / 1e6;
+  return `$${dollars.toLocaleString("en-US", {
+    minimumFractionDigits: 2,
+    maximumFractionDigits: 2
+  })}`;
+}
+function sessionUsageLimitReachedMessage(refusal) {
+  return `This task's usage limit is reached (${formatSessionUsageMicros(refusal.usedMicros)} of ${formatSessionUsageMicros(refusal.limitMicros)} API-equivalent model usage). A person can raise or remove the limit to continue.`;
+}
+
+export {
+  SESSION_USAGE_LIMIT_SEGMENT,
+  SESSION_USAGE_LIMIT_GOAL_PAUSED_REASON,
+  parseSessionUsageLimitReachedRefusal,
+  formatSessionUsageMicros,
+  sessionUsageLimitReachedMessage
+};
+//# sourceMappingURL=chunk-7272KVWZ.js.map

package/dist/chunk-7272KVWZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-usage-limit-refusal.ts"],"sourcesContent":["/**\n * Browser/React Native-safe session usage limit helpers. Deliberately free of\n * the zod runtime so synchronous timeline projection can use it; contract\n * parity tests keep it aligned with `session-usage-limits.ts`.\n */\n\n/** `turn.completed.segmentLimit` for a stop caused by a task usage limit. */\nexport const SESSION_USAGE_LIMIT_SEGMENT = \"session_usage_limit\" as const;\n/** `SessionGoal.pausedReason` for a goal paused by a task usage limit. */\nexport const SESSION_USAGE_LIMIT_GOAL_PAUSED_REASON = \"session_usage_limit\" as const;\n\nconst BASIS = \"model_api_equivalent_v1\";\nconst MAX_LIMIT_MICROS = 10_000_000 * 1_000_000;\nconst MESSAGE_MAX_UTF8_BYTES = 1_024;\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport type ParsedSessionUsageLimitReachedRefusal = {\n  code: \"session_usage_limit_reached\";\n  basis: \"model_api_equivalent_v1\";\n  rootSessionId: string;\n  limitMicros: number;\n  usedMicros: number;\n  message: string;\n};\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\nfunction micros(value: unknown, max = Number.MAX_SAFE_INTEGER): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0 && value <= max;\n}\n\nfunction boundedMessage(value: string): string {\n  const normalized = value\n    .slice(0, MESSAGE_MAX_UTF8_BYTES * 2)\n    .replace(/[\\u0000-\\u001f\\u007f]+/g, \" \")\n    .trim();\n  const bytes = new TextEncoder().encode(normalized);\n  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);\n  while (end > 0 && end < bytes.length && (bytes[end]! & 0xc0) === 0x80) end -= 1;\n  return new TextDecoder().decode(bytes.slice(0, end)).trim();\n}\n\n/**\n * Select only the public refusal fields from an API error body (fields may sit\n * in `details`), a `turn.completed` payload's `sessionUsageLimit` record, or a\n * refusal object. Anything malformed returns null instead of a guessed amount.\n */\nexport function parseSessionUsageLimitReachedRefusal(\n  value: unknown,\n): ParsedSessionUsageLimitReachedRefusal | null {\n  const outer = record(value);\n  if (!outer) return null;\n  const source = record(outer.sessionUsageLimit) ?? outer;\n  if (source.code !== \"session_usage_limit_reached\") return null;\n  const fields = record(source.details) ?? source;\n  if (\n    fields.basis !== BASIS ||\n    typeof fields.rootSessionId !== \"string\" ||\n    !UUID.test(fields.rootSessionId) ||\n    !micros(fields.limitMicros, MAX_LIMIT_MICROS) ||\n    !micros(fields.usedMicros)\n  ) {\n    return null;\n  }\n  const refusal = {\n    code: \"session_usage_limit_reached\" as const,\n    basis: BASIS as \"model_api_equivalent_v1\",\n    rootSessionId: fields.rootSessionId.toLowerCase(),\n    limitMicros: fields.limitMicros,\n    usedMicros: fields.usedMicros,\n    message: \"\",\n  };\n  const message = typeof source.message === \"string\" ? boundedMessage(source.message) : \"\";\n  return { ...refusal, message: message || sessionUsageLimitReachedMessage(refusal) };\n}\n\n/**\n * \"$12.34\" for known amounts, \"<$0.01\" for a positive amount under a cent.\n * Callers must not pass unknown usage: render \"Preparing usage\" or\n * \"Usage unavailable\" instead of a dollar figure.\n */\nexport function formatSessionUsageMicros(value: number): string {\n  if (value > 0 && value < 10_000) return \"<$0.01\";\n  const dollars = value / 1_000_000;\n  return `$${dollars.toLocaleString(\"en-US\", {\n    minimumFractionDigits: 2,\n    maximumFractionDigits: 2,\n  })}`;\n}\n\n/** Fixed, bounded wording: no reset date, purchase remedy or invoice claim. */\nexport function sessionUsageLimitReachedMessage(refusal: {\n  limitMicros: number;\n  usedMicros: number;\n}): string {\n  return `This task's usage limit is reached (${formatSessionUsageMicros(refusal.usedMicros)} of ${formatSessionUsageMicros(refusal.limitMicros)} API-equivalent model usage). A person can raise or remove the limit to continue.`;\n}\n"],"mappings":";AAOO,IAAM,8BAA8B;AAEpC,IAAM,yCAAyC;AAEtD,IAAM,QAAQ;AACd,IAAM,mBAAmB,MAAa;AACtC,IAAM,yBAAyB;AAC/B,IAAM,OAAO;AAWb,SAAS,OAAO,OAAgD;AAC9D,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAEA,SAAS,OAAO,OAAgB,MAAM,OAAO,kBAAmC;AAC9E,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS,KAAK,SAAS;AAC5F;AAEA,SAAS,eAAe,OAAuB;AAC7C,QAAM,aAAa,MAChB,MAAM,GAAG,yBAAyB,CAAC,EACnC,QAAQ,2BAA2B,GAAG,EACtC,KAAK;AACR,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,UAAU;AACjD,MAAI,MAAM,KAAK,IAAI,MAAM,QAAQ,sBAAsB;AACvD,SAAO,MAAM,KAAK,MAAM,MAAM,WAAW,MAAM,GAAG,IAAK,SAAU,IAAM,QAAO;AAC9E,SAAO,IAAI,YAAY,EAAE,OAAO,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK;AAC5D;AAOO,SAAS,qCACd,OAC8C;AAC9C,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,OAAO,MAAM,iBAAiB,KAAK;AAClD,MAAI,OAAO,SAAS,8BAA+B,QAAO;AAC1D,QAAM,SAAS,OAAO,OAAO,OAAO,KAAK;AACzC,MACE,OAAO,UAAU,SACjB,OAAO,OAAO,kBAAkB,YAChC,CAAC,KAAK,KAAK,OAAO,aAAa,KAC/B,CAAC,OAAO,OAAO,aAAa,gBAAgB,KAC5C,CAAC,OAAO,OAAO,UAAU,GACzB;AACA,WAAO;AAAA,EACT;AACA,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,OAAO;AAAA,IACP,eAAe,OAAO,cAAc,YAAY;AAAA,IAChD,aAAa,OAAO;AAAA,IACpB,YAAY,OAAO;AAAA,IACnB,SAAS;AAAA,EACX;AACA,QAAM,UAAU,OAAO,OAAO,YAAY,WAAW,eAAe,OAAO,OAAO,IAAI;AACtF,SAAO,EAAE,GAAG,SAAS,SAAS,WAAW,gCAAgC,OAAO,EAAE;AACpF;AAOO,SAAS,yBAAyB,OAAuB;AAC9D,MAAI,QAAQ,KAAK,QAAQ,IAAQ,QAAO;AACxC,QAAM,UAAU,QAAQ;AACxB,SAAO,IAAI,QAAQ,eAAe,SAAS;AAAA,IACzC,uBAAuB;AAAA,IACvB,uBAAuB;AAAA,EACzB,CAAC,CAAC;AACJ;AAGO,SAAS,gCAAgC,SAGrC;AACT,SAAO,uCAAuC,yBAAyB,QAAQ,UAAU,CAAC,OAAO,yBAAyB,QAAQ,WAAW,CAAC;AAChJ;","names":[]}

package/dist/chunk-72QC2GTL.js

@@ -0,0 +1,36 @@
+import {
+  positiveInteger
+} from "./chunk-AQYDZUJV.js";
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/xai-provider-account-authority.ts
+import { z } from "zod";
+var PositiveSafeInteger = /* @__PURE__ */ defineSchema(
+  () => positiveInteger.max(Number.MAX_SAFE_INTEGER)
+);
+var XaiProviderAccountAuthoritySnapshotV1 = /* @__PURE__ */ defineSchema(
+  () => z.discriminatedUnion("scope", [
+    z.object({ version: z.literal(1), scope: z.literal("organization") }).strict(),
+    z.object({
+      version: z.literal(1),
+      scope: z.literal("workspace")
+    }).strict(),
+    z.object({
+      version: z.literal(1),
+      scope: z.literal("user"),
+      authorityGeneration: PositiveSafeInteger
+    }).strict()
+  ])
+);
+var WORKSPACE_XAI_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1 = {
+  version: 1,
+  scope: "workspace"
+};
+
+export {
+  XaiProviderAccountAuthoritySnapshotV1,
+  WORKSPACE_XAI_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1
+};
+//# sourceMappingURL=chunk-72QC2GTL.js.map

package/dist/chunk-72QC2GTL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/xai-provider-account-authority.ts"],"sourcesContent":["import * as primitives from \"./primitives\";\nimport { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nconst PositiveSafeInteger = /* @__PURE__ */ defineSchema(() =>\n  primitives.positiveInteger.max(Number.MAX_SAFE_INTEGER),\n);\n\n/**\n * Opaque authority frozen at an xAI provider-account acceptance boundary.\n *\n * This snapshot deliberately carries no organization, membership, credential,\n * provider-account, subject, label, quota, token, or plan identity. User scope\n * becomes executable only after exact live database revalidation against the\n * separately stored causal subject and xAI subscription authority row.\n */\nexport const XaiProviderAccountAuthoritySnapshotV1 = /* @__PURE__ */ defineSchema(() =>\n  z.discriminatedUnion(\"scope\", [\n    z.object({ version: z.literal(1), scope: z.literal(\"organization\") }).strict(),\n    z\n      .object({\n        version: z.literal(1),\n        scope: z.literal(\"workspace\"),\n      })\n      .strict(),\n    z\n      .object({\n        version: z.literal(1),\n        scope: z.literal(\"user\"),\n        authorityGeneration: PositiveSafeInteger,\n      })\n      .strict(),\n  ]),\n);\n\nexport type XaiProviderAccountAuthoritySnapshotV1 = z.infer<\n  typeof XaiProviderAccountAuthoritySnapshotV1\n>;\n\n/** Explicit compatibility value for workspace-default accepted work. */\nexport const WORKSPACE_XAI_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1 = {\n  version: 1,\n  scope: \"workspace\",\n} as const satisfies XaiProviderAccountAuthoritySnapshotV1;\n"],"mappings":";;;;;;;;AAEA,SAAS,SAAS;AAElB,IAAM,sBAAsC;AAAA,EAAa,MAC5C,gBAAgB,IAAI,OAAO,gBAAgB;AACxD;AAUO,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,mBAAmB,SAAS;AAAA,IAC5B,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,OAAO,EAAE,QAAQ,cAAc,EAAE,CAAC,EAAE,OAAO;AAAA,IAC7E,EACG,OAAO;AAAA,MACN,SAAS,EAAE,QAAQ,CAAC;AAAA,MACpB,OAAO,EAAE,QAAQ,WAAW;AAAA,IAC9B,CAAC,EACA,OAAO;AAAA,IACV,EACG,OAAO;AAAA,MACN,SAAS,EAAE,QAAQ,CAAC;AAAA,MACpB,OAAO,EAAE,QAAQ,MAAM;AAAA,MACvB,qBAAqB;AAAA,IACvB,CAAC,EACA,OAAO;AAAA,EACZ,CAAC;AACH;AAOO,IAAM,uDAAuD;AAAA,EAClE,SAAS;AAAA,EACT,OAAO;AACT;","names":[]}

package/dist/chunk-7EQGGZBY.js

@@ -0,0 +1,105 @@
+import {
+  boolean,
+  dateTime,
+  nonnegativeInteger,
+  nullableString,
+  nullableUuid,
+  optionalUuid,
+  string,
+  uuid
+} from "./chunk-AQYDZUJV.js";
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/organization-usage.ts
+import { z } from "zod";
+var OrganizationUsagePeriod = /* @__PURE__ */ defineSchema(
+  () => z.enum(["today", "week", "month", "ytd"])
+);
+var OrganizationUsageQuery = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    period: OrganizationUsagePeriod.default("month")
+  })
+);
+var OrganizationUsageWorkspacePageQuery = /* @__PURE__ */ defineSchema(
+  () => OrganizationUsageQuery.extend({
+    until: dateTime,
+    afterWorkspaceId: optionalUuid
+  })
+);
+var OrganizationUsageTotal = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    eventType: string,
+    unit: string,
+    quantity: string.regex(/^-?\d+$/),
+    eventCount: string.regex(/^\d+$/)
+  })
+);
+var OrganizationUsagePersonalWorkspace = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    membershipId: uuid,
+    totals: z.array(OrganizationUsageTotal)
+  })
+);
+var OrganizationUsageSummary = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    accountId: uuid,
+    period: OrganizationUsagePeriod,
+    since: dateTime,
+    until: dateTime,
+    granularity: z.enum(["hour", "day"]),
+    totals: z.array(OrganizationUsageTotal),
+    buckets: z.array(
+      z.object({ bucket: string, totals: z.array(OrganizationUsageTotal) })
+    ),
+    workspaces: z.array(
+      z.object({
+        workspaceId: uuid,
+        name: nullableString,
+        totals: z.array(OrganizationUsageTotal)
+      })
+    ).max(50),
+    nextWorkspaceCursor: nullableUuid,
+    /**
+     * Usage in each member's Personal workspace, keyed by the owner's
+     * organization membership: amounts only, never the workspace's id, name or
+     * content. Only Personal workspaces with usage in the period, the 50 that
+     * spent the most. Absent before migration 0543, hence the defaults.
+     */
+    personalWorkspaces: z.array(OrganizationUsagePersonalWorkspace).max(50).default([]),
+    /** How many Personal workspaces had usage in the period, listed or not. */
+    personalWorkspaceCount: nonnegativeInteger.default(0),
+    /** Other people's Only-me chats in shared workspaces: member amounts only. */
+    privateChats: z.array(
+      z.object({
+        workspaceId: uuid,
+        membershipId: nullableUuid,
+        name: nullableString,
+        totals: z.array(OrganizationUsageTotal)
+      })
+    ).default([]),
+    privateChatsTruncated: boolean.default(false)
+  })
+);
+var OrganizationUsageWorkspacePage = /* @__PURE__ */ defineSchema(
+  () => OrganizationUsageSummary.omit({
+    totals: true,
+    buckets: true,
+    personalWorkspaces: true,
+    personalWorkspaceCount: true,
+    privateChats: true,
+    privateChatsTruncated: true
+  })
+);
+
+export {
+  OrganizationUsagePeriod,
+  OrganizationUsageQuery,
+  OrganizationUsageWorkspacePageQuery,
+  OrganizationUsageTotal,
+  OrganizationUsagePersonalWorkspace,
+  OrganizationUsageSummary,
+  OrganizationUsageWorkspacePage
+};
+//# sourceMappingURL=chunk-7EQGGZBY.js.map

package/dist/chunk-7EQGGZBY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/organization-usage.ts"],"sourcesContent":["import * as primitives from \"./primitives\";\nimport { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nexport const OrganizationUsagePeriod = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"today\", \"week\", \"month\", \"ytd\"]),\n);\nexport type OrganizationUsagePeriod = z.infer<typeof OrganizationUsagePeriod>;\nexport const OrganizationUsageQuery = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    period: OrganizationUsagePeriod.default(\"month\"),\n  }),\n);\nexport const OrganizationUsageWorkspacePageQuery = /* @__PURE__ */ defineSchema(() =>\n  OrganizationUsageQuery.extend({\n    until: primitives.dateTime,\n    afterWorkspaceId: primitives.optionalUuid,\n  }),\n);\n// PostgreSQL SUM(bigint) must never pass through a JavaScript number.\nexport const OrganizationUsageTotal = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    eventType: primitives.string,\n    unit: primitives.string,\n    quantity: primitives.string.regex(/^-?\\d+$/),\n    eventCount: primitives.string.regex(/^\\d+$/),\n  }),\n);\n/** One member's Personal workspace, as usage only. */\nexport const OrganizationUsagePersonalWorkspace = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    membershipId: primitives.uuid,\n    totals: z.array(OrganizationUsageTotal),\n  }),\n);\nexport type OrganizationUsagePersonalWorkspace = z.infer<typeof OrganizationUsagePersonalWorkspace>;\nexport const OrganizationUsageSummary = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    accountId: primitives.uuid,\n    period: OrganizationUsagePeriod,\n    since: primitives.dateTime,\n    until: primitives.dateTime,\n    granularity: z.enum([\"hour\", \"day\"]),\n    totals: z.array(OrganizationUsageTotal),\n    buckets: z.array(\n      z.object({ bucket: primitives.string, totals: z.array(OrganizationUsageTotal) }),\n    ),\n    workspaces: z\n      .array(\n        z.object({\n          workspaceId: primitives.uuid,\n          name: primitives.nullableString,\n          totals: z.array(OrganizationUsageTotal),\n        }),\n      )\n      .max(50),\n    nextWorkspaceCursor: primitives.nullableUuid,\n    /**\n     * Usage in each member's Personal workspace, keyed by the owner's\n     * organization membership: amounts only, never the workspace's id, name or\n     * content. Only Personal workspaces with usage in the period, the 50 that\n     * spent the most. Absent before migration 0543, hence the defaults.\n     */\n    personalWorkspaces: z.array(OrganizationUsagePersonalWorkspace).max(50).default([]),\n    /** How many Personal workspaces had usage in the period, listed or not. */\n    personalWorkspaceCount: primitives.nonnegativeInteger.default(0),\n    /** Other people's Only-me chats in shared workspaces: member amounts only. */\n    privateChats: z\n      .array(\n        z.object({\n          workspaceId: primitives.uuid,\n          membershipId: primitives.nullableUuid,\n          name: primitives.nullableString,\n          totals: z.array(OrganizationUsageTotal),\n        }),\n      )\n      .default([]),\n    privateChatsTruncated: primitives.boolean.default(false),\n  }),\n);\nexport type OrganizationUsageSummary = z.infer<typeof OrganizationUsageSummary>;\n\n/**\n * A page deliberately excludes totals, charts and Personal rows: those are not\n * recomputed. Pages continue the shared workspaces only.\n */\nexport const OrganizationUsageWorkspacePage = /* @__PURE__ */ defineSchema(() =>\n  OrganizationUsageSummary.omit({\n    totals: true,\n    buckets: true,\n    personalWorkspaces: true,\n    personalWorkspaceCount: true,\n    privateChats: true,\n    privateChatsTruncated: true,\n  }),\n);\nexport type OrganizationUsageWorkspacePage = z.infer<typeof OrganizationUsageWorkspacePage>;\n"],"mappings":";;;;;;;;;;;;;;;AAEA,SAAS,SAAS;AAEX,IAAM,0BAA0C;AAAA,EAAa,MAClE,EAAE,KAAK,CAAC,SAAS,QAAQ,SAAS,KAAK,CAAC;AAC1C;AAEO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EAAE,OAAO;AAAA,IACP,QAAQ,wBAAwB,QAAQ,OAAO;AAAA,EACjD,CAAC;AACH;AACO,IAAM,sCAAsD;AAAA,EAAa,MAC9E,uBAAuB,OAAO;AAAA,IAC5B,OAAkB;AAAA,IAClB,kBAA6B;AAAA,EAC/B,CAAC;AACH;AAEO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EAAE,OAAO;AAAA,IACP,WAAsB;AAAA,IACtB,MAAiB;AAAA,IACjB,UAAqB,OAAO,MAAM,SAAS;AAAA,IAC3C,YAAuB,OAAO,MAAM,OAAO;AAAA,EAC7C,CAAC;AACH;AAEO,IAAM,qCAAqD;AAAA,EAAa,MAC7E,EAAE,OAAO;AAAA,IACP,cAAyB;AAAA,IACzB,QAAQ,EAAE,MAAM,sBAAsB;AAAA,EACxC,CAAC;AACH;AAEO,IAAM,2BAA2C;AAAA,EAAa,MACnE,EAAE,OAAO;AAAA,IACP,WAAsB;AAAA,IACtB,QAAQ;AAAA,IACR,OAAkB;AAAA,IAClB,OAAkB;AAAA,IAClB,aAAa,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC;AAAA,IACnC,QAAQ,EAAE,MAAM,sBAAsB;AAAA,IACtC,SAAS,EAAE;AAAA,MACT,EAAE,OAAO,EAAE,QAAmB,QAAQ,QAAQ,EAAE,MAAM,sBAAsB,EAAE,CAAC;AAAA,IACjF;AAAA,IACA,YAAY,EACT;AAAA,MACC,EAAE,OAAO;AAAA,QACP,aAAwB;AAAA,QACxB,MAAiB;AAAA,QACjB,QAAQ,EAAE,MAAM,sBAAsB;AAAA,MACxC,CAAC;AAAA,IACH,EACC,IAAI,EAAE;AAAA,IACT,qBAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOhC,oBAAoB,EAAE,MAAM,kCAAkC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,IAElF,wBAAmC,mBAAmB,QAAQ,CAAC;AAAA;AAAA,IAE/D,cAAc,EACX;AAAA,MACC,EAAE,OAAO;AAAA,QACP,aAAwB;AAAA,QACxB,cAAyB;AAAA,QACzB,MAAiB;AAAA,QACjB,QAAQ,EAAE,MAAM,sBAAsB;AAAA,MACxC,CAAC;AAAA,IACH,EACC,QAAQ,CAAC,CAAC;AAAA,IACb,uBAAkC,QAAQ,QAAQ,KAAK;AAAA,EACzD,CAAC;AACH;AAOO,IAAM,iCAAiD;AAAA,EAAa,MACzE,yBAAyB,KAAK;AAAA,IAC5B,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,wBAAwB;AAAA,IACxB,cAAc;AAAA,IACd,uBAAuB;AAAA,EACzB,CAAC;AACH;","names":[]}