@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/chunk-A3LXWVYU.js

@@ -0,0 +1,382 @@
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/model-residency.ts
+import { z } from "zod";
+var MODEL_PROCESSING_GEOGRAPHIES = ["eu", "us", "global", "other", "unknown"];
+var ModelProcessingGeography = /* @__PURE__ */ defineSchema(
+  () => z.enum(MODEL_PROCESSING_GEOGRAPHIES)
+);
+var MODEL_DEPLOYMENT_TYPES = [
+  "azure_regional",
+  "azure_data_zone",
+  "azure_global",
+  "bedrock_regional",
+  "bedrock_geo_profile",
+  "bedrock_global_profile",
+  "gateway",
+  "subscription",
+  "provider_default",
+  "self_hosted",
+  "unknown"
+];
+var ModelDeploymentType = /* @__PURE__ */ defineSchema(
+  () => z.enum(MODEL_DEPLOYMENT_TYPES)
+);
+var EU_CAPABLE_DEPLOYMENT_TYPES = Object.freeze([
+  "azure_regional",
+  "azure_data_zone",
+  "bedrock_regional",
+  "bedrock_geo_profile",
+  "provider_default",
+  "self_hosted"
+]);
+var EU_AZURE_REGIONS = Object.freeze([
+  "austriaeast",
+  "belgiumcentral",
+  "denmarkeast",
+  "francecentral",
+  "francesouth",
+  "germanynorth",
+  "germanywestcentral",
+  "italynorth",
+  "northeurope",
+  "norwayeast",
+  "norwaywest",
+  "polandcentral",
+  "spaincentral",
+  "swedencentral",
+  "swedensouth",
+  "switzerlandnorth",
+  "switzerlandwest",
+  "westeurope"
+]);
+var EU_AWS_REGIONS = Object.freeze([
+  "eu-central-1",
+  "eu-central-2",
+  "eu-north-1",
+  "eu-south-1",
+  "eu-south-2",
+  "eu-west-1",
+  "eu-west-3"
+]);
+function euRegionsFor(deploymentType) {
+  if (deploymentType === "azure_regional" || deploymentType === "azure_data_zone") {
+    return EU_AZURE_REGIONS;
+  }
+  if (deploymentType === "bedrock_regional" || deploymentType === "bedrock_geo_profile") {
+    return EU_AWS_REGIONS;
+  }
+  return null;
+}
+var MODEL_RESIDENCY_EVIDENCE_SOURCES = [
+  /** The deployment operator declared it in the reviewed catalog or environment. */
+  "operator_declaration",
+  /** Published provider documentation for this exact route type. */
+  "provider_documentation",
+  /** A provider API reported it (for example an Azure deployment SKU lookup). */
+  "provider_api",
+  /** A code-owned rule for a provider kind, reviewed with the code. */
+  "built_in_rule",
+  /** An organization admin declared it for their own connection. */
+  "admin_declaration",
+  /** Nothing establishes where this route processes data. */
+  "none"
+];
+var ModelResidencyEvidenceSource = /* @__PURE__ */ defineSchema(
+  () => z.enum(MODEL_RESIDENCY_EVIDENCE_SOURCES)
+);
+var REGION_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/u;
+var ModelResidencyEvidenceV1 = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    source: ModelResidencyEvidenceSource,
+    /** Where to check it: a document URL, resource and SKU, or rule description. */
+    reference: z.string().trim().min(1).max(1e3).nullable(),
+    /** Date (or date-time) the evidence was last checked. */
+    verifiedAt: z.union([z.iso.date(), z.iso.datetime()]).nullable()
+  }).strict()
+);
+function modelResidencyProblems(residency) {
+  const problems = [];
+  if (residency.geography === "unknown") {
+    return problems;
+  }
+  if (residency.evidence.source === "none" || residency.evidence.reference === null) {
+    problems.push({
+      path: ["evidence"],
+      message: "a known processing geography needs an evidence source and reference"
+    });
+  }
+  if (residency.geography !== "eu") return problems;
+  if (!EU_CAPABLE_DEPLOYMENT_TYPES.includes(residency.deploymentType)) {
+    problems.push({
+      path: ["deploymentType"],
+      message: `${residency.deploymentType} routing can leave the EU, so it cannot be declared eu`
+    });
+    return problems;
+  }
+  const allowedRegions = euRegionsFor(residency.deploymentType);
+  if (allowedRegions) {
+    if (residency.regions.length === 0) {
+      problems.push({ path: ["regions"], message: "an eu claim needs the route's regions" });
+    }
+    for (const region of residency.regions) {
+      if (!allowedRegions.includes(region)) {
+        problems.push({
+          path: ["regions"],
+          message: `${region} is not an EU region for ${residency.deploymentType}`
+        });
+      }
+    }
+  }
+  return problems;
+}
+var NON_EU_BEDROCK_PROFILE_PREFIXES = Object.freeze([
+  "us.",
+  "us-gov.",
+  "apac.",
+  "jp.",
+  "au.",
+  "ca.",
+  "global."
+]);
+var NON_EU_MODEL_HOSTS = Object.freeze([
+  "ai-gateway.vercel.sh",
+  "api.anthropic.com",
+  "api.openai.com",
+  "api.x.ai",
+  "chatgpt.com",
+  "openrouter.ai"
+]);
+function hostOf(baseUrl) {
+  try {
+    return new URL(baseUrl).hostname.toLowerCase().replace(/\.+$/u, "");
+  } catch {
+    return null;
+  }
+}
+function modelEndpointDeployment(url) {
+  let pathname;
+  try {
+    pathname = new URL(url).pathname;
+  } catch {
+    return null;
+  }
+  const segments = pathname.split("/").filter((raw) => raw !== "").map((raw) => {
+    let decoded;
+    try {
+      decoded = decodeURIComponent(raw);
+    } catch {
+      decoded = null;
+    }
+    return {
+      decoded,
+      marker: decoded?.toLowerCase() === "deployments",
+      hidesMarker: hidesDeploymentsMarker(raw),
+      plain: decoded !== null && isPlainDeploymentSegment(decoded)
+    };
+  });
+  const first = segments.findIndex((segment) => segment.marker || segment.hidesMarker);
+  if (first < 0) return null;
+  const marker = segments[first];
+  const name = segments[first + 1];
+  if (!marker.marker || !name) return "";
+  const rest = segments.slice(first + 1);
+  if (!rest.every((segment) => segment.plain)) return "";
+  if (rest.slice(1).some((segment) => segment.marker || segment.hidesMarker)) return "";
+  return name.decoded;
+}
+function isPlainDeploymentSegment(segment) {
+  return /^[A-Za-z0-9._-]+$/u.test(segment) && segment !== "." && segment !== "..";
+}
+function hidesDeploymentsMarker(raw) {
+  return looselyDecoded(raw).split(/[/\\]/u).some(
+    (part) => part.replace(/^[^A-Za-z0-9]+/u, "").toLowerCase().startsWith("deployments")
+  );
+}
+function looselyDecoded(raw) {
+  let value = raw;
+  for (let round = 0; round < 4; round += 1) {
+    const next = value.replace(
+      /%([0-7][0-9a-f])/giu,
+      (_, hex) => String.fromCharCode(Number.parseInt(hex, 16))
+    );
+    if (next === value) break;
+    value = next;
+  }
+  return value;
+}
+function modelResidencyRouteProblems(residency, route) {
+  if (residency.geography !== "eu") return [];
+  const problems = [];
+  const upstreamModelId = (route.upstreamModelId ?? "").toLowerCase();
+  if (residency.deploymentType.startsWith("bedrock_")) {
+    const prefix = NON_EU_BEDROCK_PROFILE_PREFIXES.find(
+      (candidate) => upstreamModelId.startsWith(candidate)
+    );
+    if (prefix) {
+      problems.push({
+        path: ["upstreamModelId"],
+        message: `${upstreamModelId} is a ${prefix} inference profile, which routes outside the EU`
+      });
+    } else if (residency.deploymentType === "bedrock_geo_profile" && !upstreamModelId.startsWith("eu.")) {
+      problems.push({
+        path: ["upstreamModelId"],
+        message: `an eu bedrock_geo_profile needs an eu. inference profile, not ${upstreamModelId}`
+      });
+    }
+  }
+  const host = route.baseUrl ? hostOf(route.baseUrl) : null;
+  if (host && NON_EU_MODEL_HOSTS.includes(host)) {
+    problems.push({
+      path: ["baseUrl"],
+      message: `${host} routes outside the EU, so a route on it cannot be declared eu`
+    });
+  }
+  const deployment = route.baseUrl ? modelEndpointDeployment(route.baseUrl) : null;
+  if (deployment === "") {
+    problems.push({
+      path: ["baseUrl"],
+      message: "the endpoint calls a deployment whose name can't be read, so it cannot be declared eu"
+    });
+  } else if (deployment !== null && deployment !== (route.upstreamModelId ?? "")) {
+    problems.push({
+      path: ["baseUrl"],
+      message: `the endpoint calls deployment ${deployment}, not ${route.upstreamModelId ?? "this model"}, so only ${deployment} can be declared eu on it`
+    });
+  }
+  return problems;
+}
+function modelResidencyClaim(residency) {
+  return {
+    geography: residency.geography,
+    deploymentType: residency.deploymentType,
+    regions: [...new Set(residency.regions)].sort()
+  };
+}
+var ModelResidencyV1 = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    geography: ModelProcessingGeography,
+    deploymentType: ModelDeploymentType,
+    /** Provider regions where the endpoint or processing lives, when known. */
+    regions: z.array(z.string().regex(REGION_PATTERN)).max(32),
+    evidence: ModelResidencyEvidenceV1
+  }).strict().superRefine((residency, context) => {
+    for (const problem of modelResidencyProblems(residency)) {
+      context.addIssue({ code: "custom", path: problem.path, message: problem.message });
+    }
+  })
+);
+var ModelResidencyDeclaration = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    geography: ModelProcessingGeography,
+    deploymentType: ModelDeploymentType,
+    regions: z.array(z.string().regex(REGION_PATTERN)).max(32).default([]),
+    evidence: z.object({
+      // Operator configuration states its own declaration or the provider
+      // documentation it relies on; other sources come from code or admins.
+      source: z.enum(["operator_declaration", "provider_documentation"]),
+      reference: z.string().trim().min(1).max(1e3),
+      verifiedAt: z.union([z.iso.date(), z.iso.datetime()]).nullable().default(null)
+    }).strict()
+  }).strict().superRefine((residency, context) => {
+    for (const problem of modelResidencyProblems(residency)) {
+      context.addIssue({ code: "custom", path: problem.path, message: problem.message });
+    }
+  })
+);
+var UNKNOWN_MODEL_RESIDENCY = Object.freeze({
+  geography: "unknown",
+  deploymentType: "unknown",
+  regions: Object.freeze([]),
+  evidence: Object.freeze({ source: "none", reference: null, verifiedAt: null })
+});
+function isEuResidency(residency) {
+  const parsed = ModelResidencyV1.safeParse(residency);
+  if (!parsed.success) return false;
+  return parsed.data.geography === "eu" && parsed.data.evidence.source !== "none" && parsed.data.evidence.reference !== null;
+}
+var ClientModelResidencyV1 = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    geography: ModelProcessingGeography,
+    deploymentType: ModelDeploymentType,
+    regions: z.array(z.string()).max(32),
+    evidenceSource: ModelResidencyEvidenceSource,
+    eu: z.boolean()
+  }).strict()
+);
+function projectClientModelResidency(residency) {
+  return {
+    geography: residency.geography,
+    deploymentType: residency.deploymentType,
+    regions: [...residency.regions],
+    evidenceSource: residency.evidence.source,
+    eu: isEuResidency(residency)
+  };
+}
+var ModelCallProcessingResidencyV1 = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    geography: ModelProcessingGeography,
+    deploymentType: ModelDeploymentType,
+    regions: z.array(z.string().regex(REGION_PATTERN)).max(32)
+  }).strict().superRefine((claim, context) => {
+    if (!recordedEuClaimHolds(claim)) {
+      context.addIssue({
+        code: "custom",
+        path: ["geography"],
+        message: "an eu claim needs an EU-capable deployment type and EU regions"
+      });
+    }
+  })
+);
+function recordedEuClaimHolds(claim) {
+  if (claim.geography !== "eu") return true;
+  if (!EU_CAPABLE_DEPLOYMENT_TYPES.includes(claim.deploymentType)) return false;
+  const allowedRegions = euRegionsFor(claim.deploymentType);
+  if (!allowedRegions) return true;
+  return claim.regions.length > 0 && claim.regions.every((region) => allowedRegions.includes(region));
+}
+function modelCallProcessingResidency(residency) {
+  const parsed = ModelResidencyV1.safeParse(residency);
+  return modelResidencyClaim(parsed.success ? parsed.data : UNKNOWN_MODEL_RESIDENCY);
+}
+function parseModelCallProcessingResidency(value) {
+  if (value === void 0 || value === null) return null;
+  const record = typeof value === "object" && !Array.isArray(value) ? value : {};
+  const parsed = ModelCallProcessingResidencyV1.safeParse({
+    geography: record.geography,
+    deploymentType: record.deploymentType,
+    regions: record.regions
+  });
+  return modelResidencyClaim(parsed.success ? parsed.data : UNKNOWN_MODEL_RESIDENCY);
+}
+
+export {
+  MODEL_PROCESSING_GEOGRAPHIES,
+  ModelProcessingGeography,
+  MODEL_DEPLOYMENT_TYPES,
+  ModelDeploymentType,
+  EU_CAPABLE_DEPLOYMENT_TYPES,
+  EU_AZURE_REGIONS,
+  EU_AWS_REGIONS,
+  MODEL_RESIDENCY_EVIDENCE_SOURCES,
+  ModelResidencyEvidenceSource,
+  ModelResidencyEvidenceV1,
+  modelResidencyProblems,
+  NON_EU_BEDROCK_PROFILE_PREFIXES,
+  NON_EU_MODEL_HOSTS,
+  modelEndpointDeployment,
+  modelResidencyRouteProblems,
+  modelResidencyClaim,
+  ModelResidencyV1,
+  ModelResidencyDeclaration,
+  UNKNOWN_MODEL_RESIDENCY,
+  isEuResidency,
+  ClientModelResidencyV1,
+  projectClientModelResidency,
+  ModelCallProcessingResidencyV1,
+  modelCallProcessingResidency,
+  parseModelCallProcessingResidency
+};
+//# sourceMappingURL=chunk-A3LXWVYU.js.map

package/dist/chunk-A3LXWVYU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/model-residency.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { defineSchema } from \"./define-schema\";\n\n/**\n * Where a model route processes prompts and outputs, and how we know.\n *\n * EU status is derived only from this record, never from a model name, label\n * or provider id. A route without a record is `unknown`, and unknown is never\n * EU. `eu` follows GDPR: EEA processing counts the same as EU processing, so a\n * provider's EU data zone (Azure Data Zone EU, Bedrock `eu.` inference\n * profiles) qualifies even when it can include Norway or Switzerland.\n */\nexport const MODEL_PROCESSING_GEOGRAPHIES = [\"eu\", \"us\", \"global\", \"other\", \"unknown\"] as const;\nexport const ModelProcessingGeography = /* @__PURE__ */ defineSchema(() =>\n  z.enum(MODEL_PROCESSING_GEOGRAPHIES),\n);\nexport type ModelProcessingGeography = z.infer<typeof ModelProcessingGeography>;\n\n/** How the provider places the request. Global routing types can never be EU. */\nexport const MODEL_DEPLOYMENT_TYPES = [\n  \"azure_regional\",\n  \"azure_data_zone\",\n  \"azure_global\",\n  \"bedrock_regional\",\n  \"bedrock_geo_profile\",\n  \"bedrock_global_profile\",\n  \"gateway\",\n  \"subscription\",\n  \"provider_default\",\n  \"self_hosted\",\n  \"unknown\",\n] as const;\nexport const ModelDeploymentType = /* @__PURE__ */ defineSchema(() =>\n  z.enum(MODEL_DEPLOYMENT_TYPES),\n);\nexport type ModelDeploymentType = z.infer<typeof ModelDeploymentType>;\n\n/**\n * The only deployment types that can be EU. Anything else, including gateways,\n * subscriptions, global routing, unknown and any type added later, can never\n * be EU, whatever a declaration says.\n */\nexport const EU_CAPABLE_DEPLOYMENT_TYPES: readonly ModelDeploymentType[] = Object.freeze([\n  \"azure_regional\",\n  \"azure_data_zone\",\n  \"bedrock_regional\",\n  \"bedrock_geo_profile\",\n  \"provider_default\",\n  \"self_hosted\",\n]);\n\n/**\n * Cloud regions an EU claim may name, by deployment family: EEA regions plus\n * Switzerland, which provider EU data zones can include. A region outside\n * these lists rejects the claim (names only ever reject, never grant). The\n * United Kingdom is not in the EEA and is not listed.\n */\nexport const EU_AZURE_REGIONS: readonly string[] = Object.freeze([\n  \"austriaeast\",\n  \"belgiumcentral\",\n  \"denmarkeast\",\n  \"francecentral\",\n  \"francesouth\",\n  \"germanynorth\",\n  \"germanywestcentral\",\n  \"italynorth\",\n  \"northeurope\",\n  \"norwayeast\",\n  \"norwaywest\",\n  \"polandcentral\",\n  \"spaincentral\",\n  \"swedencentral\",\n  \"swedensouth\",\n  \"switzerlandnorth\",\n  \"switzerlandwest\",\n  \"westeurope\",\n]);\nexport const EU_AWS_REGIONS: readonly string[] = Object.freeze([\n  \"eu-central-1\",\n  \"eu-central-2\",\n  \"eu-north-1\",\n  \"eu-south-1\",\n  \"eu-south-2\",\n  \"eu-west-1\",\n  \"eu-west-3\",\n]);\n\nfunction euRegionsFor(deploymentType: ModelDeploymentType): readonly string[] | null {\n  if (deploymentType === \"azure_regional\" || deploymentType === \"azure_data_zone\") {\n    return EU_AZURE_REGIONS;\n  }\n  if (deploymentType === \"bedrock_regional\" || deploymentType === \"bedrock_geo_profile\") {\n    return EU_AWS_REGIONS;\n  }\n  return null;\n}\n\nexport const MODEL_RESIDENCY_EVIDENCE_SOURCES = [\n  /** The deployment operator declared it in the reviewed catalog or environment. */\n  \"operator_declaration\",\n  /** Published provider documentation for this exact route type. */\n  \"provider_documentation\",\n  /** A provider API reported it (for example an Azure deployment SKU lookup). */\n  \"provider_api\",\n  /** A code-owned rule for a provider kind, reviewed with the code. */\n  \"built_in_rule\",\n  /** An organization admin declared it for their own connection. */\n  \"admin_declaration\",\n  /** Nothing establishes where this route processes data. */\n  \"none\",\n] as const;\nexport const ModelResidencyEvidenceSource = /* @__PURE__ */ defineSchema(() =>\n  z.enum(MODEL_RESIDENCY_EVIDENCE_SOURCES),\n);\nexport type ModelResidencyEvidenceSource = z.infer<typeof ModelResidencyEvidenceSource>;\n\nconst REGION_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/u;\n\nexport const ModelResidencyEvidenceV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      source: ModelResidencyEvidenceSource,\n      /** Where to check it: a document URL, resource and SKU, or rule description. */\n      reference: z.string().trim().min(1).max(1000).nullable(),\n      /** Date (or date-time) the evidence was last checked. */\n      verifiedAt: z.union([z.iso.date(), z.iso.datetime()]).nullable(),\n    })\n    .strict(),\n);\nexport type ModelResidencyEvidenceV1 = z.infer<typeof ModelResidencyEvidenceV1>;\n\n/** Problems that make a residency record unable to claim its geography. */\nexport function modelResidencyProblems(residency: {\n  geography: ModelProcessingGeography;\n  deploymentType: ModelDeploymentType;\n  regions: readonly string[];\n  evidence: { source: ModelResidencyEvidenceSource; reference: string | null };\n}): { path: string[]; message: string }[] {\n  const problems: { path: string[]; message: string }[] = [];\n  if (residency.geography === \"unknown\") {\n    return problems;\n  }\n  if (residency.evidence.source === \"none\" || residency.evidence.reference === null) {\n    problems.push({\n      path: [\"evidence\"],\n      message: \"a known processing geography needs an evidence source and reference\",\n    });\n  }\n  if (residency.geography !== \"eu\") return problems;\n  if (!EU_CAPABLE_DEPLOYMENT_TYPES.includes(residency.deploymentType)) {\n    problems.push({\n      path: [\"deploymentType\"],\n      message: `${residency.deploymentType} routing can leave the EU, so it cannot be declared eu`,\n    });\n    return problems;\n  }\n  const allowedRegions = euRegionsFor(residency.deploymentType);\n  if (allowedRegions) {\n    if (residency.regions.length === 0) {\n      problems.push({ path: [\"regions\"], message: \"an eu claim needs the route's regions\" });\n    }\n    for (const region of residency.regions) {\n      if (!allowedRegions.includes(region)) {\n        problems.push({\n          path: [\"regions\"],\n          message: `${region} is not an EU region for ${residency.deploymentType}`,\n        });\n      }\n    }\n  }\n  return problems;\n}\n\n/** Bedrock inference profile prefixes that route outside the EU. */\nexport const NON_EU_BEDROCK_PROFILE_PREFIXES: readonly string[] = Object.freeze([\n  \"us.\",\n  \"us-gov.\",\n  \"apac.\",\n  \"jp.\",\n  \"au.\",\n  \"ca.\",\n  \"global.\",\n]);\n\n/**\n * Hosts that route globally or process outside the EU. An EU claim on a route\n * whose endpoint is one of these exact hosts is wrong. Exact match only:\n * `eu.api.openai.com`, for example, is a different endpoint.\n */\nexport const NON_EU_MODEL_HOSTS: readonly string[] = Object.freeze([\n  \"ai-gateway.vercel.sh\",\n  \"api.anthropic.com\",\n  \"api.openai.com\",\n  \"api.x.ai\",\n  \"chatgpt.com\",\n  \"openrouter.ai\",\n]);\n\nfunction hostOf(baseUrl: string): string | null {\n  try {\n    // A trailing dot names the same host (openrouter.ai. is openrouter.ai).\n    return new URL(baseUrl).hostname.toLowerCase().replace(/\\.+$/u, \"\");\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The deployment an endpoint URL calls, from its `/deployments/{name}` path\n * segment (Azure OpenAI's deployment-path form), or null when no segment\n * holds or hides a `deployments` marker. Such an endpoint runs that\n * deployment whatever model the request body names.\n *\n * Only a plain path is read: empty segments are dropped, the marker matches in\n * any case (percent-encoded too), and the name and every segment after it must\n * be readable `[A-Za-z0-9._-]+` and not `.` or `..`. Anything else returns an\n * empty string, meaning a deployment that can't be read, which is refused\n * under EU. That covers a missing name, a second marker, a marker hidden in a\n * longer or encoded segment (`deployments;`, `x%2Fdeployments`), and a later\n * segment that could lead somewhere else once decoded (`..%2F`, `%5C`, `;`).\n */\nexport function modelEndpointDeployment(url: string | URL): string | null {\n  let pathname: string;\n  try {\n    // The URL parser has already resolved plain and %2e dot segments.\n    pathname = new URL(url).pathname;\n  } catch {\n    return null;\n  }\n  const segments = pathname\n    .split(\"/\")\n    .filter((raw) => raw !== \"\")\n    .map((raw) => {\n      let decoded: string | null;\n      try {\n        decoded = decodeURIComponent(raw);\n      } catch {\n        decoded = null;\n      }\n      return {\n        decoded,\n        marker: decoded?.toLowerCase() === \"deployments\",\n        hidesMarker: hidesDeploymentsMarker(raw),\n        plain: decoded !== null && isPlainDeploymentSegment(decoded),\n      };\n    });\n  const first = segments.findIndex((segment) => segment.marker || segment.hidesMarker);\n  if (first < 0) return null;\n  const marker = segments[first]!;\n  const name = segments[first + 1];\n  if (!marker.marker || !name) return \"\";\n  const rest = segments.slice(first + 1);\n  if (!rest.every((segment) => segment.plain)) return \"\";\n  // A second marker after the name (the name itself may be anything plain).\n  if (rest.slice(1).some((segment) => segment.marker || segment.hidesMarker)) return \"\";\n  return name.decoded!;\n}\n\n/** A readable, plain path segment: `[A-Za-z0-9._-]+`, not `.` or `..`. */\nfunction isPlainDeploymentSegment(segment: string): boolean {\n  return /^[A-Za-z0-9._-]+$/u.test(segment) && segment !== \".\" && segment !== \"..\";\n}\n\n/**\n * Whether a raw segment holds or hides `deployments`: any part of it, decoded\n * as far as it goes and split on separators, starts with the word in any case\n * once leading punctuation is dropped.\n */\nfunction hidesDeploymentsMarker(raw: string): boolean {\n  return looselyDecoded(raw)\n    .split(/[/\\\\]/u)\n    .some((part) =>\n      part\n        .replace(/^[^A-Za-z0-9]+/u, \"\")\n        .toLowerCase()\n        .startsWith(\"deployments\"),\n    );\n}\n\n/** Every ASCII %XX escape decoded, repeatedly (to catch double encoding). */\nfunction looselyDecoded(raw: string): string {\n  let value = raw;\n  for (let round = 0; round < 4; round += 1) {\n    const next = value.replace(/%([0-7][0-9a-f])/giu, (_, hex: string) =>\n      String.fromCharCode(Number.parseInt(hex, 16)),\n    );\n    if (next === value) break;\n    value = next;\n  }\n  return value;\n}\n\n/**\n * Problems that make an EU claim wrong for the route it is declared on: a\n * Bedrock upstream id with a non-EU inference profile prefix, a Bedrock\n * geographic profile that is not `eu.`, an endpoint on a known global host,\n * or a deployment-path endpoint that calls a different deployment than the\n * model. Every resolver applies it. Names only ever reject a claim, never\n * grant one.\n */\nexport function modelResidencyRouteProblems(\n  residency: { geography: ModelProcessingGeography; deploymentType: ModelDeploymentType },\n  route: { upstreamModelId?: string | null | undefined; baseUrl?: string | null | undefined },\n): { path: string[]; message: string }[] {\n  if (residency.geography !== \"eu\") return [];\n  const problems: { path: string[]; message: string }[] = [];\n  // Profile prefixes compare case-insensitively (US.anthropic... is us.).\n  const upstreamModelId = (route.upstreamModelId ?? \"\").toLowerCase();\n  if (residency.deploymentType.startsWith(\"bedrock_\")) {\n    const prefix = NON_EU_BEDROCK_PROFILE_PREFIXES.find((candidate) =>\n      upstreamModelId.startsWith(candidate),\n    );\n    if (prefix) {\n      problems.push({\n        path: [\"upstreamModelId\"],\n        message: `${upstreamModelId} is a ${prefix} inference profile, which routes outside the EU`,\n      });\n    } else if (\n      residency.deploymentType === \"bedrock_geo_profile\" &&\n      !upstreamModelId.startsWith(\"eu.\")\n    ) {\n      problems.push({\n        path: [\"upstreamModelId\"],\n        message: `an eu bedrock_geo_profile needs an eu. inference profile, not ${upstreamModelId}`,\n      });\n    }\n  }\n  const host = route.baseUrl ? hostOf(route.baseUrl) : null;\n  if (host && NON_EU_MODEL_HOSTS.includes(host)) {\n    problems.push({\n      path: [\"baseUrl\"],\n      message: `${host} routes outside the EU, so a route on it cannot be declared eu`,\n    });\n  }\n  const deployment = route.baseUrl ? modelEndpointDeployment(route.baseUrl) : null;\n  if (deployment === \"\") {\n    problems.push({\n      path: [\"baseUrl\"],\n      message:\n        \"the endpoint calls a deployment whose name can't be read, so it cannot be declared eu\",\n    });\n  } else if (deployment !== null && deployment !== (route.upstreamModelId ?? \"\")) {\n    problems.push({\n      path: [\"baseUrl\"],\n      message: `the endpoint calls deployment ${deployment}, not ${route.upstreamModelId ?? \"this model\"}, so only ${deployment} can be declared eu on it`,\n    });\n  }\n  return problems;\n}\n\n/** The fields that move processing; evidence text and dates do not. */\nexport function modelResidencyClaim(residency: {\n  geography: ModelProcessingGeography;\n  deploymentType: ModelDeploymentType;\n  regions: readonly string[];\n}): {\n  geography: ModelProcessingGeography;\n  deploymentType: ModelDeploymentType;\n  regions: string[];\n} {\n  return {\n    geography: residency.geography,\n    deploymentType: residency.deploymentType,\n    regions: [...new Set(residency.regions)].sort(),\n  };\n}\n\nexport const ModelResidencyV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      geography: ModelProcessingGeography,\n      deploymentType: ModelDeploymentType,\n      /** Provider regions where the endpoint or processing lives, when known. */\n      regions: z.array(z.string().regex(REGION_PATTERN)).max(32),\n      evidence: ModelResidencyEvidenceV1,\n    })\n    .strict()\n    .superRefine((residency, context) => {\n      for (const problem of modelResidencyProblems(residency)) {\n        context.addIssue({ code: \"custom\", path: problem.path, message: problem.message });\n      }\n    }),\n);\nexport type ModelResidencyV1 = z.infer<typeof ModelResidencyV1>;\n\n/** Operator-facing declaration: the same record, with optional regions and dates. */\nexport const ModelResidencyDeclaration = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      geography: ModelProcessingGeography,\n      deploymentType: ModelDeploymentType,\n      regions: z.array(z.string().regex(REGION_PATTERN)).max(32).default([]),\n      evidence: z\n        .object({\n          // Operator configuration states its own declaration or the provider\n          // documentation it relies on; other sources come from code or admins.\n          source: z.enum([\"operator_declaration\", \"provider_documentation\"]),\n          reference: z.string().trim().min(1).max(1000),\n          verifiedAt: z.union([z.iso.date(), z.iso.datetime()]).nullable().default(null),\n        })\n        .strict(),\n    })\n    .strict()\n    .superRefine((residency, context) => {\n      for (const problem of modelResidencyProblems(residency)) {\n        context.addIssue({ code: \"custom\", path: problem.path, message: problem.message });\n      }\n    }),\n);\nexport type ModelResidencyDeclaration = z.input<typeof ModelResidencyDeclaration>;\n\n/** The record for a route nothing describes. Unknown is never EU. */\nexport const UNKNOWN_MODEL_RESIDENCY: ModelResidencyV1 = Object.freeze({\n  geography: \"unknown\",\n  deploymentType: \"unknown\",\n  regions: Object.freeze([]) as unknown as string[],\n  evidence: Object.freeze({ source: \"none\", reference: null, verifiedAt: null }),\n}) as ModelResidencyV1;\n\n/**\n * The single EU predicate. Anything malformed, missing, unknown, globally\n * routed or without evidence is not EU.\n */\nexport function isEuResidency(residency: unknown): boolean {\n  const parsed = ModelResidencyV1.safeParse(residency);\n  if (!parsed.success) return false;\n  return (\n    parsed.data.geography === \"eu\" &&\n    parsed.data.evidence.source !== \"none\" &&\n    parsed.data.evidence.reference !== null\n  );\n}\n\n/** Client-safe projection: no evidence reference text, which may name internal resources. */\nexport const ClientModelResidencyV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      geography: ModelProcessingGeography,\n      deploymentType: ModelDeploymentType,\n      regions: z.array(z.string()).max(32),\n      evidenceSource: ModelResidencyEvidenceSource,\n      eu: z.boolean(),\n    })\n    .strict(),\n);\nexport type ClientModelResidencyV1 = z.infer<typeof ClientModelResidencyV1>;\n\nexport function projectClientModelResidency(residency: ModelResidencyV1): ClientModelResidencyV1 {\n  return {\n    geography: residency.geography,\n    deploymentType: residency.deploymentType,\n    regions: [...residency.regions],\n    evidenceSource: residency.evidence.source,\n    eu: isEuResidency(residency),\n  };\n}\n\n/**\n * Where the route that served one model call processes data, as recorded on\n * the call's `model_call_facts` row and its durable `agent.model.usage` event:\n * the residency claim only. Evidence is never recorded, because its reference\n * text may name internal resources. An eu claim must still satisfy the same\n * deployment-type and region rules as the route record it came from; a stored\n * value that does not is read back as unknown, never as eu.\n */\nexport const ModelCallProcessingResidencyV1 = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      geography: ModelProcessingGeography,\n      deploymentType: ModelDeploymentType,\n      regions: z.array(z.string().regex(REGION_PATTERN)).max(32),\n    })\n    .strict()\n    .superRefine((claim, context) => {\n      if (!recordedEuClaimHolds(claim)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"geography\"],\n          message: \"an eu claim needs an EU-capable deployment type and EU regions\",\n        });\n      }\n    }),\n);\nexport type ModelCallProcessingResidencyV1 = z.infer<typeof ModelCallProcessingResidencyV1>;\n\n/**\n * Whether a recorded claim may say eu: the deployment type is EU-capable and,\n * for cloud families with known EU regions, it names at least one region and\n * every region is one of them. Non-eu claims always hold.\n */\nfunction recordedEuClaimHolds(claim: {\n  geography: ModelProcessingGeography;\n  deploymentType: ModelDeploymentType;\n  regions: readonly string[];\n}): boolean {\n  if (claim.geography !== \"eu\") return true;\n  if (!EU_CAPABLE_DEPLOYMENT_TYPES.includes(claim.deploymentType)) return false;\n  const allowedRegions = euRegionsFor(claim.deploymentType);\n  if (!allowedRegions) return true;\n  return (\n    claim.regions.length > 0 && claim.regions.every((region) => allowedRegions.includes(region))\n  );\n}\n\n/**\n * The recorded processing residency for a call served by a route with this\n * residency record. A missing or invalid record is recorded as unknown.\n */\nexport function modelCallProcessingResidency(\n  residency: ModelResidencyV1 | null | undefined,\n): ModelCallProcessingResidencyV1 {\n  const parsed = ModelResidencyV1.safeParse(residency);\n  return modelResidencyClaim(parsed.success ? parsed.data : UNKNOWN_MODEL_RESIDENCY);\n}\n\n/**\n * Read a recorded processing residency (a fact column or event payload field).\n * Absent or null means the call was recorded before calls carried one. A value\n * that is present but malformed, or an eu claim that breaks the eu rules\n * (see `ModelCallProcessingResidencyV1`), is unknown. Any other field, such as\n * evidence, is dropped.\n */\nexport function parseModelCallProcessingResidency(\n  value: unknown,\n): ModelCallProcessingResidencyV1 | null {\n  if (value === undefined || value === null) return null;\n  const record =\n    typeof value === \"object\" && !Array.isArray(value) ? (value as Record<string, unknown>) : {};\n  const parsed = ModelCallProcessingResidencyV1.safeParse({\n    geography: record.geography,\n    deploymentType: record.deploymentType,\n    regions: record.regions,\n  });\n  return modelResidencyClaim(parsed.success ? parsed.data : UNKNOWN_MODEL_RESIDENCY);\n}\n"],"mappings":";;;;;AAAA,SAAS,SAAS;AAYX,IAAM,+BAA+B,CAAC,MAAM,MAAM,UAAU,SAAS,SAAS;AAC9E,IAAM,2BAA2C;AAAA,EAAa,MACnE,EAAE,KAAK,4BAA4B;AACrC;AAIO,IAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,IAAM,sBAAsC;AAAA,EAAa,MAC9D,EAAE,KAAK,sBAAsB;AAC/B;AAQO,IAAM,8BAA8D,OAAO,OAAO;AAAA,EACvF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,IAAM,mBAAsC,OAAO,OAAO;AAAA,EAC/D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACM,IAAM,iBAAoC,OAAO,OAAO;AAAA,EAC7D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,aAAa,gBAA+D;AACnF,MAAI,mBAAmB,oBAAoB,mBAAmB,mBAAmB;AAC/E,WAAO;AAAA,EACT;AACA,MAAI,mBAAmB,sBAAsB,mBAAmB,uBAAuB;AACrF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,IAAM,mCAAmC;AAAA;AAAA,EAE9C;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AACF;AACO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EAAE,KAAK,gCAAgC;AACzC;AAGA,IAAM,iBAAiB;AAEhB,IAAM,2BAA2C;AAAA,EAAa,MACnE,EACG,OAAO;AAAA,IACN,QAAQ;AAAA;AAAA,IAER,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA;AAAA,IAEvD,YAAY,EAAE,MAAM,CAAC,EAAE,IAAI,KAAK,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,EAAE,SAAS;AAAA,EACjE,CAAC,EACA,OAAO;AACZ;AAIO,SAAS,uBAAuB,WAKG;AACxC,QAAM,WAAkD,CAAC;AACzD,MAAI,UAAU,cAAc,WAAW;AACrC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,SAAS,WAAW,UAAU,UAAU,SAAS,cAAc,MAAM;AACjF,aAAS,KAAK;AAAA,MACZ,MAAM,CAAC,UAAU;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,UAAU,cAAc,KAAM,QAAO;AACzC,MAAI,CAAC,4BAA4B,SAAS,UAAU,cAAc,GAAG;AACnE,aAAS,KAAK;AAAA,MACZ,MAAM,CAAC,gBAAgB;AAAA,MACvB,SAAS,GAAG,UAAU,cAAc;AAAA,IACtC,CAAC;AACD,WAAO;AAAA,EACT;AACA,QAAM,iBAAiB,aAAa,UAAU,cAAc;AAC5D,MAAI,gBAAgB;AAClB,QAAI,UAAU,QAAQ,WAAW,GAAG;AAClC,eAAS,KAAK,EAAE,MAAM,CAAC,SAAS,GAAG,SAAS,wCAAwC,CAAC;AAAA,IACvF;AACA,eAAW,UAAU,UAAU,SAAS;AACtC,UAAI,CAAC,eAAe,SAAS,MAAM,GAAG;AACpC,iBAAS,KAAK;AAAA,UACZ,MAAM,CAAC,SAAS;AAAA,UAChB,SAAS,GAAG,MAAM,4BAA4B,UAAU,cAAc;AAAA,QACxE,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGO,IAAM,kCAAqD,OAAO,OAAO;AAAA,EAC9E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAOM,IAAM,qBAAwC,OAAO,OAAO;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,OAAO,SAAgC;AAC9C,MAAI;AAEF,WAAO,IAAI,IAAI,OAAO,EAAE,SAAS,YAAY,EAAE,QAAQ,SAAS,EAAE;AAAA,EACpE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAgBO,SAAS,wBAAwB,KAAkC;AACxE,MAAI;AACJ,MAAI;AAEF,eAAW,IAAI,IAAI,GAAG,EAAE;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,WAAW,SACd,MAAM,GAAG,EACT,OAAO,CAAC,QAAQ,QAAQ,EAAE,EAC1B,IAAI,CAAC,QAAQ;AACZ,QAAI;AACJ,QAAI;AACF,gBAAU,mBAAmB,GAAG;AAAA,IAClC,QAAQ;AACN,gBAAU;AAAA,IACZ;AACA,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,SAAS,YAAY,MAAM;AAAA,MACnC,aAAa,uBAAuB,GAAG;AAAA,MACvC,OAAO,YAAY,QAAQ,yBAAyB,OAAO;AAAA,IAC7D;AAAA,EACF,CAAC;AACH,QAAM,QAAQ,SAAS,UAAU,CAAC,YAAY,QAAQ,UAAU,QAAQ,WAAW;AACnF,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,SAAS,SAAS,KAAK;AAC7B,QAAM,OAAO,SAAS,QAAQ,CAAC;AAC/B,MAAI,CAAC,OAAO,UAAU,CAAC,KAAM,QAAO;AACpC,QAAM,OAAO,SAAS,MAAM,QAAQ,CAAC;AACrC,MAAI,CAAC,KAAK,MAAM,CAAC,YAAY,QAAQ,KAAK,EAAG,QAAO;AAEpD,MAAI,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,QAAQ,UAAU,QAAQ,WAAW,EAAG,QAAO;AACnF,SAAO,KAAK;AACd;AAGA,SAAS,yBAAyB,SAA0B;AAC1D,SAAO,qBAAqB,KAAK,OAAO,KAAK,YAAY,OAAO,YAAY;AAC9E;AAOA,SAAS,uBAAuB,KAAsB;AACpD,SAAO,eAAe,GAAG,EACtB,MAAM,QAAQ,EACd;AAAA,IAAK,CAAC,SACL,KACG,QAAQ,mBAAmB,EAAE,EAC7B,YAAY,EACZ,WAAW,aAAa;AAAA,EAC7B;AACJ;AAGA,SAAS,eAAe,KAAqB;AAC3C,MAAI,QAAQ;AACZ,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;AACzC,UAAM,OAAO,MAAM;AAAA,MAAQ;AAAA,MAAuB,CAAC,GAAG,QACpD,OAAO,aAAa,OAAO,SAAS,KAAK,EAAE,CAAC;AAAA,IAC9C;AACA,QAAI,SAAS,MAAO;AACpB,YAAQ;AAAA,EACV;AACA,SAAO;AACT;AAUO,SAAS,4BACd,WACA,OACuC;AACvC,MAAI,UAAU,cAAc,KAAM,QAAO,CAAC;AAC1C,QAAM,WAAkD,CAAC;AAEzD,QAAM,mBAAmB,MAAM,mBAAmB,IAAI,YAAY;AAClE,MAAI,UAAU,eAAe,WAAW,UAAU,GAAG;AACnD,UAAM,SAAS,gCAAgC;AAAA,MAAK,CAAC,cACnD,gBAAgB,WAAW,SAAS;AAAA,IACtC;AACA,QAAI,QAAQ;AACV,eAAS,KAAK;AAAA,QACZ,MAAM,CAAC,iBAAiB;AAAA,QACxB,SAAS,GAAG,eAAe,SAAS,MAAM;AAAA,MAC5C,CAAC;AAAA,IACH,WACE,UAAU,mBAAmB,yBAC7B,CAAC,gBAAgB,WAAW,KAAK,GACjC;AACA,eAAS,KAAK;AAAA,QACZ,MAAM,CAAC,iBAAiB;AAAA,QACxB,SAAS,iEAAiE,eAAe;AAAA,MAC3F,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,OAAO,MAAM,UAAU,OAAO,MAAM,OAAO,IAAI;AACrD,MAAI,QAAQ,mBAAmB,SAAS,IAAI,GAAG;AAC7C,aAAS,KAAK;AAAA,MACZ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS,GAAG,IAAI;AAAA,IAClB,CAAC;AAAA,EACH;AACA,QAAM,aAAa,MAAM,UAAU,wBAAwB,MAAM,OAAO,IAAI;AAC5E,MAAI,eAAe,IAAI;AACrB,aAAS,KAAK;AAAA,MACZ,MAAM,CAAC,SAAS;AAAA,MAChB,SACE;AAAA,IACJ,CAAC;AAAA,EACH,WAAW,eAAe,QAAQ,gBAAgB,MAAM,mBAAmB,KAAK;AAC9E,aAAS,KAAK;AAAA,MACZ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS,iCAAiC,UAAU,SAAS,MAAM,mBAAmB,YAAY,aAAa,UAAU;AAAA,IAC3H,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAGO,SAAS,oBAAoB,WAQlC;AACA,SAAO;AAAA,IACL,WAAW,UAAU;AAAA,IACrB,gBAAgB,UAAU;AAAA,IAC1B,SAAS,CAAC,GAAG,IAAI,IAAI,UAAU,OAAO,CAAC,EAAE,KAAK;AAAA,EAChD;AACF;AAEO,IAAM,mBAAmC;AAAA,EAAa,MAC3D,EACG,OAAO;AAAA,IACN,WAAW;AAAA,IACX,gBAAgB;AAAA;AAAA,IAEhB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE;AAAA,IACzD,UAAU;AAAA,EACZ,CAAC,EACA,OAAO,EACP,YAAY,CAAC,WAAW,YAAY;AACnC,eAAW,WAAW,uBAAuB,SAAS,GAAG;AACvD,cAAQ,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,QAAQ,QAAQ,CAAC;AAAA,IACnF;AAAA,EACF,CAAC;AACL;AAIO,IAAM,4BAA4C;AAAA,EAAa,MACpE,EACG,OAAO;AAAA,IACN,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;AAAA,IACrE,UAAU,EACP,OAAO;AAAA;AAAA;AAAA,MAGN,QAAQ,EAAE,KAAK,CAAC,wBAAwB,wBAAwB,CAAC;AAAA,MACjE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI;AAAA,MAC5C,YAAY,EAAE,MAAM,CAAC,EAAE,IAAI,KAAK,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,IAC/E,CAAC,EACA,OAAO;AAAA,EACZ,CAAC,EACA,OAAO,EACP,YAAY,CAAC,WAAW,YAAY;AACnC,eAAW,WAAW,uBAAuB,SAAS,GAAG;AACvD,cAAQ,SAAS,EAAE,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,QAAQ,QAAQ,CAAC;AAAA,IACnF;AAAA,EACF,CAAC;AACL;AAIO,IAAM,0BAA4C,OAAO,OAAO;AAAA,EACrE,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,EACzB,UAAU,OAAO,OAAO,EAAE,QAAQ,QAAQ,WAAW,MAAM,YAAY,KAAK,CAAC;AAC/E,CAAC;AAMM,SAAS,cAAc,WAA6B;AACzD,QAAM,SAAS,iBAAiB,UAAU,SAAS;AACnD,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,SACE,OAAO,KAAK,cAAc,QAC1B,OAAO,KAAK,SAAS,WAAW,UAChC,OAAO,KAAK,SAAS,cAAc;AAEvC;AAGO,IAAM,yBAAyC;AAAA,EAAa,MACjE,EACG,OAAO;AAAA,IACN,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE;AAAA,IACnC,gBAAgB;AAAA,IAChB,IAAI,EAAE,QAAQ;AAAA,EAChB,CAAC,EACA,OAAO;AACZ;AAGO,SAAS,4BAA4B,WAAqD;AAC/F,SAAO;AAAA,IACL,WAAW,UAAU;AAAA,IACrB,gBAAgB,UAAU;AAAA,IAC1B,SAAS,CAAC,GAAG,UAAU,OAAO;AAAA,IAC9B,gBAAgB,UAAU,SAAS;AAAA,IACnC,IAAI,cAAc,SAAS;AAAA,EAC7B;AACF;AAUO,IAAM,iCAAiD;AAAA,EAAa,MACzE,EACG,OAAO;AAAA,IACN,WAAW;AAAA,IACX,gBAAgB;AAAA,IAChB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE;AAAA,EAC3D,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,QAAI,CAAC,qBAAqB,KAAK,GAAG;AAChC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,WAAW;AAAA,QAClB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAQA,SAAS,qBAAqB,OAIlB;AACV,MAAI,MAAM,cAAc,KAAM,QAAO;AACrC,MAAI,CAAC,4BAA4B,SAAS,MAAM,cAAc,EAAG,QAAO;AACxE,QAAM,iBAAiB,aAAa,MAAM,cAAc;AACxD,MAAI,CAAC,eAAgB,QAAO;AAC5B,SACE,MAAM,QAAQ,SAAS,KAAK,MAAM,QAAQ,MAAM,CAAC,WAAW,eAAe,SAAS,MAAM,CAAC;AAE/F;AAMO,SAAS,6BACd,WACgC;AAChC,QAAM,SAAS,iBAAiB,UAAU,SAAS;AACnD,SAAO,oBAAoB,OAAO,UAAU,OAAO,OAAO,uBAAuB;AACnF;AASO,SAAS,kCACd,OACuC;AACvC,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,QAAM,SACJ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC,CAAC;AAC7F,QAAM,SAAS,+BAA+B,UAAU;AAAA,IACtD,WAAW,OAAO;AAAA,IAClB,gBAAgB,OAAO;AAAA,IACvB,SAAS,OAAO;AAAA,EAClB,CAAC;AACD,SAAO,oBAAoB,OAAO,UAAU,OAAO,OAAO,uBAAuB;AACnF;","names":[]}

package/dist/chunk-AQYDZUJV.js

@@ -0,0 +1,34 @@
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/primitives.ts
+import { z } from "zod";
+var string = /* @__PURE__ */ defineSchema(() => z.string());
+var boolean = /* @__PURE__ */ defineSchema(() => z.boolean());
+var uuid = /* @__PURE__ */ defineSchema(() => z.string().uuid());
+var nonnegativeInteger = /* @__PURE__ */ defineSchema(
+  () => z.number().int().nonnegative()
+);
+var positiveInteger = /* @__PURE__ */ defineSchema(() => z.number().int().positive());
+var nullableString = /* @__PURE__ */ defineSchema(() => string.nullable());
+var nonEmptyString = /* @__PURE__ */ defineSchema(() => string.min(1));
+var nullableUuid = /* @__PURE__ */ defineSchema(() => uuid.nullable());
+var optionalBoolean = /* @__PURE__ */ defineSchema(() => boolean.optional());
+var optionalUuid = /* @__PURE__ */ defineSchema(() => uuid.optional());
+var dateTime = /* @__PURE__ */ defineSchema(() => string.datetime());
+
+export {
+  string,
+  boolean,
+  uuid,
+  nonnegativeInteger,
+  positiveInteger,
+  nullableString,
+  nonEmptyString,
+  nullableUuid,
+  optionalBoolean,
+  optionalUuid,
+  dateTime
+};
+//# sourceMappingURL=chunk-AQYDZUJV.js.map

package/dist/chunk-AQYDZUJV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/primitives.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { defineSchema } from \"./define-schema\";\n\n/**\n * Reuse common validators instead of retaining thousands of identical Zod\n * instances. These are ordinary eager schemas, not a validation cache. Zod's\n * builder methods return derived schemas; attach field-specific metadata to a\n * derived schema rather than mutating a shared primitive's registry entry.\n */\nexport const string = /* @__PURE__ */ defineSchema(() => z.string());\nexport const boolean = /* @__PURE__ */ defineSchema(() => z.boolean());\nexport const uuid = /* @__PURE__ */ defineSchema(() => z.string().uuid());\nexport const nonnegativeInteger = /* @__PURE__ */ defineSchema(() =>\n  z.number().int().nonnegative(),\n);\nexport const positiveInteger = /* @__PURE__ */ defineSchema(() => z.number().int().positive());\nexport const nullableString = /* @__PURE__ */ defineSchema(() => string.nullable());\nexport const nonEmptyString = /* @__PURE__ */ defineSchema(() => string.min(1));\nexport const nullableUuid = /* @__PURE__ */ defineSchema(() => uuid.nullable());\nexport const optionalBoolean = /* @__PURE__ */ defineSchema(() => boolean.optional());\nexport const optionalUuid = /* @__PURE__ */ defineSchema(() => uuid.optional());\nexport const dateTime = /* @__PURE__ */ defineSchema(() => string.datetime());\n"],"mappings":";;;;;AAAA,SAAS,SAAS;AASX,IAAM,SAAyB,6BAAa,MAAM,EAAE,OAAO,CAAC;AAC5D,IAAM,UAA0B,6BAAa,MAAM,EAAE,QAAQ,CAAC;AAC9D,IAAM,OAAuB,6BAAa,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AACjE,IAAM,qBAAqC;AAAA,EAAa,MAC7D,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC/B;AACO,IAAM,kBAAkC,6BAAa,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC;AACtF,IAAM,iBAAiC,6BAAa,MAAM,OAAO,SAAS,CAAC;AAC3E,IAAM,iBAAiC,6BAAa,MAAM,OAAO,IAAI,CAAC,CAAC;AACvE,IAAM,eAA+B,6BAAa,MAAM,KAAK,SAAS,CAAC;AACvE,IAAM,kBAAkC,6BAAa,MAAM,QAAQ,SAAS,CAAC;AAC7E,IAAM,eAA+B,6BAAa,MAAM,KAAK,SAAS,CAAC;AACvE,IAAM,WAA2B,6BAAa,MAAM,OAAO,SAAS,CAAC;","names":[]}

package/dist/chunk-BHCEVVUP.js

@@ -0,0 +1,93 @@
+import {
+  dateTime,
+  nullableUuid,
+  optionalUuid,
+  positiveInteger,
+  string,
+  uuid
+} from "./chunk-AQYDZUJV.js";
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/canonical-human-identities.ts
+import { z } from "zod";
+var CanonicalHumanIdentityStatus = /* @__PURE__ */ defineSchema(
+  () => z.enum(["active", "recovery_required", "disputed", "disabled"])
+);
+var CanonicalHumanLoginBindingStatus = /* @__PURE__ */ defineSchema(
+  () => z.enum(["active", "recovery_pending", "stale", "disputed", "revoked"])
+);
+var CanonicalHumanRecoveryState = /* @__PURE__ */ defineSchema(
+  () => z.enum(["ready", "recovery_required", "lost_factor", "disputed", "disabled"])
+);
+var CanonicalHumanLoginBinding = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    id: uuid,
+    providerId: z.string().min(1).max(128),
+    providerAccountId: z.string().min(1).max(1024),
+    status: CanonicalHumanLoginBindingStatus,
+    revision: positiveInteger,
+    verifiedAt: dateTime,
+    lastVerifiedAt: dateTime,
+    revokedAt: z.string().datetime().nullable(),
+    createdAt: dateTime,
+    updatedAt: dateTime
+  })
+);
+var CanonicalHumanIdentityProjection = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    activeIdentity: z.object({
+      id: uuid,
+      displayName: z.string().min(1).max(256),
+      status: CanonicalHumanIdentityStatus,
+      identityRevision: positiveInteger,
+      authRevision: positiveInteger,
+      activeLoginBindingId: nullableUuid,
+      recoveryState: CanonicalHumanRecoveryState,
+      createdAt: dateTime,
+      updatedAt: dateTime
+    }),
+    loginBindings: z.array(CanonicalHumanLoginBinding).max(64)
+  })
+);
+var OperationFields = {
+  operationId: optionalUuid,
+  expectedIdentityRevision: positiveInteger,
+  reason: string.trim().min(1).max(512)
+};
+var LinkCanonicalHumanLoginBindingRequest = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    ...OperationFields,
+    providerId: string.trim().min(1).max(128),
+    providerAccountId: string.trim().min(1).max(1024)
+  })
+);
+var CanonicalHumanBindingOperationRequest = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    ...OperationFields
+  })
+);
+var CanonicalHumanIdentityMutationOutcome = /* @__PURE__ */ defineSchema(
+  () => z.enum(["applied", "lost_factor", "disputed"])
+);
+var CanonicalHumanIdentityMutationResponse = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    outcome: CanonicalHumanIdentityMutationOutcome,
+    operationId: uuid,
+    identity: CanonicalHumanIdentityProjection
+  })
+);
+
+export {
+  CanonicalHumanIdentityStatus,
+  CanonicalHumanLoginBindingStatus,
+  CanonicalHumanRecoveryState,
+  CanonicalHumanLoginBinding,
+  CanonicalHumanIdentityProjection,
+  LinkCanonicalHumanLoginBindingRequest,
+  CanonicalHumanBindingOperationRequest,
+  CanonicalHumanIdentityMutationOutcome,
+  CanonicalHumanIdentityMutationResponse
+};
+//# sourceMappingURL=chunk-BHCEVVUP.js.map

package/dist/chunk-BHCEVVUP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/canonical-human-identities.ts"],"sourcesContent":["import * as primitives from \"./primitives\";\nimport { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\n\nexport const CanonicalHumanIdentityStatus = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"active\", \"recovery_required\", \"disputed\", \"disabled\"]),\n);\nexport type CanonicalHumanIdentityStatus = z.infer<typeof CanonicalHumanIdentityStatus>;\n\nexport const CanonicalHumanLoginBindingStatus = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"active\", \"recovery_pending\", \"stale\", \"disputed\", \"revoked\"]),\n);\nexport type CanonicalHumanLoginBindingStatus = z.infer<typeof CanonicalHumanLoginBindingStatus>;\n\nexport const CanonicalHumanRecoveryState = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"ready\", \"recovery_required\", \"lost_factor\", \"disputed\", \"disabled\"]),\n);\nexport type CanonicalHumanRecoveryState = z.infer<typeof CanonicalHumanRecoveryState>;\n\nexport const CanonicalHumanLoginBinding = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    id: primitives.uuid,\n    providerId: z.string().min(1).max(128),\n    providerAccountId: z.string().min(1).max(1024),\n    status: CanonicalHumanLoginBindingStatus,\n    revision: primitives.positiveInteger,\n    verifiedAt: primitives.dateTime,\n    lastVerifiedAt: primitives.dateTime,\n    revokedAt: z.string().datetime().nullable(),\n    createdAt: primitives.dateTime,\n    updatedAt: primitives.dateTime,\n  }),\n);\nexport type CanonicalHumanLoginBinding = z.infer<typeof CanonicalHumanLoginBinding>;\n\nexport const CanonicalHumanIdentityProjection = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    activeIdentity: z.object({\n      id: primitives.uuid,\n      displayName: z.string().min(1).max(256),\n      status: CanonicalHumanIdentityStatus,\n      identityRevision: primitives.positiveInteger,\n      authRevision: primitives.positiveInteger,\n      activeLoginBindingId: primitives.nullableUuid,\n      recoveryState: CanonicalHumanRecoveryState,\n      createdAt: primitives.dateTime,\n      updatedAt: primitives.dateTime,\n    }),\n    loginBindings: z.array(CanonicalHumanLoginBinding).max(64),\n  }),\n);\nexport type CanonicalHumanIdentityProjection = z.infer<typeof CanonicalHumanIdentityProjection>;\n\nconst OperationFields = {\n  operationId: primitives.optionalUuid,\n  expectedIdentityRevision: primitives.positiveInteger,\n  reason: primitives.string.trim().min(1).max(512),\n} as const;\n\nexport const LinkCanonicalHumanLoginBindingRequest = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    ...OperationFields,\n    providerId: primitives.string.trim().min(1).max(128),\n    providerAccountId: primitives.string.trim().min(1).max(1024),\n  }),\n);\nexport type LinkCanonicalHumanLoginBindingRequest = z.infer<\n  typeof LinkCanonicalHumanLoginBindingRequest\n>;\n\nexport const CanonicalHumanBindingOperationRequest = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    ...OperationFields,\n  }),\n);\nexport type CanonicalHumanBindingOperationRequest = z.infer<\n  typeof CanonicalHumanBindingOperationRequest\n>;\n\nexport const CanonicalHumanIdentityMutationOutcome = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"applied\", \"lost_factor\", \"disputed\"]),\n);\nexport type CanonicalHumanIdentityMutationOutcome = z.infer<\n  typeof CanonicalHumanIdentityMutationOutcome\n>;\n\nexport const CanonicalHumanIdentityMutationResponse = /* @__PURE__ */ defineSchema(() =>\n  z.object({\n    outcome: CanonicalHumanIdentityMutationOutcome,\n    operationId: primitives.uuid,\n    identity: CanonicalHumanIdentityProjection,\n  }),\n);\nexport type CanonicalHumanIdentityMutationResponse = z.infer<\n  typeof CanonicalHumanIdentityMutationResponse\n>;\n"],"mappings":";;;;;;;;;;;;;AAEA,SAAS,SAAS;AAEX,IAAM,+BAA+C;AAAA,EAAa,MACvE,EAAE,KAAK,CAAC,UAAU,qBAAqB,YAAY,UAAU,CAAC;AAChE;AAGO,IAAM,mCAAmD;AAAA,EAAa,MAC3E,EAAE,KAAK,CAAC,UAAU,oBAAoB,SAAS,YAAY,SAAS,CAAC;AACvE;AAGO,IAAM,8BAA8C;AAAA,EAAa,MACtE,EAAE,KAAK,CAAC,SAAS,qBAAqB,eAAe,YAAY,UAAU,CAAC;AAC9E;AAGO,IAAM,6BAA6C;AAAA,EAAa,MACrE,EAAE,OAAO;AAAA,IACP,IAAe;AAAA,IACf,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACrC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IAC7C,QAAQ;AAAA,IACR,UAAqB;AAAA,IACrB,YAAuB;AAAA,IACvB,gBAA2B;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC1C,WAAsB;AAAA,IACtB,WAAsB;AAAA,EACxB,CAAC;AACH;AAGO,IAAM,mCAAmD;AAAA,EAAa,MAC3E,EAAE,OAAO;AAAA,IACP,gBAAgB,EAAE,OAAO;AAAA,MACvB,IAAe;AAAA,MACf,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MACtC,QAAQ;AAAA,MACR,kBAA6B;AAAA,MAC7B,cAAyB;AAAA,MACzB,sBAAiC;AAAA,MACjC,eAAe;AAAA,MACf,WAAsB;AAAA,MACtB,WAAsB;AAAA,IACxB,CAAC;AAAA,IACD,eAAe,EAAE,MAAM,0BAA0B,EAAE,IAAI,EAAE;AAAA,EAC3D,CAAC;AACH;AAGA,IAAM,kBAAkB;AAAA,EACtB,aAAwB;AAAA,EACxB,0BAAqC;AAAA,EACrC,QAAmB,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AACjD;AAEO,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,OAAO;AAAA,IACP,GAAG;AAAA,IACH,YAAuB,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACnD,mBAA8B,OAAO,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAC7D,CAAC;AACH;AAKO,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,OAAO;AAAA,IACP,GAAG;AAAA,EACL,CAAC;AACH;AAKO,IAAM,wCAAwD;AAAA,EAAa,MAChF,EAAE,KAAK,CAAC,WAAW,eAAe,UAAU,CAAC;AAC/C;AAKO,IAAM,yCAAyD;AAAA,EAAa,MACjF,EAAE,OAAO;AAAA,IACP,SAAS;AAAA,IACT,aAAwB;AAAA,IACxB,UAAU;AAAA,EACZ,CAAC;AACH;","names":[]}